Don't use connection tracking for loopback traffic.

[people/stevee/network.git] / functions.zone

diff --git a/functions.zone b/functions.zone
index 770ce99d5a7a95e3f401ed815332b1601ead7427..3a5c60fb75e59282f3195bcae646c2a78672e280 100644 (file)
--- a/functions.zone
+++ b/functions.zone
@@ -22,14 +22,11 @@
 function zone_dir() {
        local zone=${1}
 
-       #assert isset zone
-
-       echo "${ZONE_DIR}/zones/${zone}"
+       echo "${NETWORK_ZONE_DIR}/zones/${zone}"
 }
 
 function zone_exists() {
        local zone=${1}
-
        assert isset zone
 
        [ -d "$(zone_dir ${zone})" ]
@@ -49,7 +46,8 @@ function zone_match() {
 function zone_name_is_valid() {
        local zone=${1}
 
-       assert isset zone
+       # Don't accept empty strings.
+       [ -z "${zone}" ] && return ${EXIT_FALSE}
 
        [[ ${zone} =~ $(zone_match) ]]
 }
@@ -57,25 +55,42 @@ function zone_name_is_valid() {
 function zone_is_local() {
        local zone=${1}
 
-       ! zone_is_nonlocal ${zone}
+       [[ "${zone:0:${#ZONE_LOCAL}}" = "${ZONE_LOCAL}" ]]
 }
 
 function zone_is_nonlocal() {
        local zone=${1}
 
-       assert isset zone
-
-       [[ ${zone} =~ ^red[0-9]{1,5} ]]
+       [[ "${zone:0:${#ZONE_NONLOCAL}}" = "${ZONE_NONLOCAL}" ]]
 }
 
 function zone_get_hook() {
        local zone=${1}
-
        assert isset zone
 
        config_get_hook $(zone_dir ${zone})/settings
 }
 
+function zone_start() {
+       # This function will bring up the zone
+       # 'asynchronously' with help of systemd.
+
+       local zone=${1}
+       assert zone_exists ${zone}
+
+       service_start "network@${zone}.service"
+}
+
+function zone_stop() {
+       # This function will bring down the zone
+       # 'asynchronously' with help of systemd.
+
+       local zone=${1}
+       assert zone_exists ${zone}
+
+       service_stop "network@${zone}.service"
+}
+
 function zone_create() {
        local zone=${1}
        local hook=${2}
@@ -107,7 +122,7 @@ function zone_create() {
        # Maybe the zone create hook did not exit correctly.
        # If this is the case we remove the created zone immediately.
        if [ "${ret}" = "${EXIT_ERROR}" ]; then
-               zone_remove ${zone}
+               zone_remove_now ${zone}
        fi
 }
 
@@ -120,6 +135,12 @@ function zone_edit() {
                return ${EXIT_ERROR}
        fi
 
+       # Check if the zone is tagged for removal.
+       if zone_has_remove_tag ${zone}; then
+               error "You cannot edit a zone that is tagged for removal."
+               return ${EXIT_ERROR}
+       fi
+
        local hook=$(config_get_hook $(zone_dir ${zone})/settings)
 
        if [ -z "${hook}" ]; then
@@ -135,16 +156,35 @@ function zone_edit() {
        hook_zone_exec ${hook} edit ${zone} $@
 }
 
+
 function zone_remove() {
        local zone=${1}
-       shift
+       assert zone_exists ${zone}
 
-       if ! zone_exists ${zone}; then
-               error "Zone '${zone}' does not exist."
-               return ${EXIT_ERROR}
-       fi
+       # Make the zone for removal.
+       touch $(zone_dir ${zone})/.remove
+
+       log INFO "Zone '${zone}' has been tagged for removal."
+}
+
+function zone_has_remove_tag() {
+       local zone=${1}
+       assert zone_exists ${zone}
+
+       [ -e "$(zone_dir ${zone})/.remove" ]
+}
+
+# This function will remove the given zone
+# RIGHT NOW. Use zone_remove to remove it
+# at the next status change.
+function zone_remove_now() {
+       local zone=${1}
+       assert zone_exists ${zone}
+
+       log INFO "Removing zone '${zone}' right now."
 
-       # XXX Tear this down here?
+       # Force the zone down.
+       zone_is_up ${zone} && zone_set_down ${zone}
 
        rm -rf $(zone_dir ${zone})
 }
@@ -158,6 +198,12 @@ function zone_up() {
                return ${EXIT_ERROR}
        fi
 
+       # Check if a zone has got the remove tag.
+       if zone_has_remove_tag ${zone}; then
+               error "Cannot bring up any zone which is to be removed."
+               return ${EXIT_ERROR}
+       fi
+
        local hook=$(config_get_hook $(zone_dir ${zone})/settings)
 
        if [ -z "${hook}" ]; then
@@ -203,6 +249,11 @@ function zone_down() {
        hook_zone_exec ${hook} down ${zone} $@
 
        zone_db ${zone} stopped
+
+       # Remove the zone, if it has got a remove tag.
+       if zone_has_remove_tag ${zone}; then
+               zone_remove_now ${zone}
+       fi
 }
 
 function zone_status() {
@@ -227,6 +278,11 @@ function zone_status() {
        fi
 
        hook_zone_exec ${hook} status ${zone} $@
+
+       # Show that the zone it to be removed soon.
+       if zone_has_remove_tag ${zone}; then
+               warning "This zone is tagged for removal."
+       fi
 }
 
 function zone_port() {
@@ -293,8 +349,6 @@ function zone_port_cmd() {
        assert isset hook_zone
        assert isset hook_port
 
-       assert hook_zone_port_exists ${hook_zone} ${hook_port}
-
        hook_zone_port_exec ${hook_zone} ${hook_port} ${cmd} ${zone} ${port} $@
 }
 
@@ -321,6 +375,20 @@ function zone_get_ports() {
        done
 }
 
+function zone_has_port() {
+       # Check, if the given port is configured
+       # in this zone.
+
+       local zone=${1}
+       local port=${2}
+       shift 2
+
+       assert isset zone
+       assert isset port
+
+       [ -e "$(zone_dir ${zone})/ports/${port}" ]
+}
+
 # XXX overwritten some lines below
 function zone_config() {
        local zone=${1}
@@ -374,6 +442,24 @@ function zone_config() {
        esac
 }
 
+function zone_config_option() {
+       local zone=${1}
+       local option=${2}
+       local default=${3}
+       shift 2
+
+       assert isset zone
+       assert isset option
+
+       (
+               VALUE="${default}"
+               zone_config_read ${zone}
+
+               VALUE="${!option}"
+               echo "${VALUE}"
+       )
+}
+
 function zone_config_create() {
        local zone=${1}
        shift
@@ -500,7 +586,6 @@ function zone_ports_cmd() {
 
        local port
        for port in $(zone_get_ports ${zone}); do
-               #zone_port_cmd ${cmd} ${zone} ${port} $@
                hook_zone_exec ${hook} ${cmd} ${zone} ${port} $@
        done
 }
@@ -524,7 +609,7 @@ function zone_configs_list() {
        for config in $(zone_dir ${zone})/configs/*; do
                [ -e "${config}" ] || continue
 
-               echo $(basename ${config})
+               basename ${config}
        done
 }
 
@@ -556,12 +641,8 @@ function zone_configs_status() {
        zone_configs_cmd config_status $@
 }
 
-function zone_has_ipv4() {
-       device_has_ipv4 $@
-}
-
-function zone_has_ipv6() {
-       device_has_ipv6 $@
+function zone_has_ip() {
+       device_has_ip $@
 }
 
 function zone_db() {
@@ -615,7 +696,13 @@ function zone_config_read() {
 
        assert isset zone
 
+       # Save the HOOK variable.
+       local hook="${HOOK}"
+
        config_read $(zone_file ${zone})
+
+       # Restore hook.
+       HOOK="${hook}"
 }
 
 function zone_config_write() {
@@ -643,3 +730,17 @@ function zone_config_set() {
                zone_config_write ${zone}
        )
 }
+
+function zone_config_get() {
+       local zone=${1}
+       local key=${2}
+
+       assert isset zone
+       assert isset key
+
+       (
+               zone_config_read ${zone}
+
+               echo "${!key}"
+       )
+}