181 lines
7 KiB
OCaml
181 lines
7 KiB
OCaml
(* (c) 2017 Hannes Mehnert, all rights reserved *)
|
|
|
|
open Rresult
|
|
(* bits copied over from Bos *)
|
|
(*---------------------------------------------------------------------------
|
|
Copyright (c) 2014 Daniel C. Bünzli
|
|
|
|
Permission to use, copy, modify, and/or distribute this software for any
|
|
purpose with or without fee is hereby granted, provided that the above
|
|
copyright notice and this permission notice appear in all copies.
|
|
|
|
THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
|
|
WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
|
|
MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
|
|
ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
|
|
WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
|
|
ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
|
|
OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
|
|
---------------------------------------------------------------------------*)
|
|
let pp_unix_error ppf e = Fmt.string ppf (Unix.error_message e)
|
|
|
|
let err_empty_line = "no command, empty command line"
|
|
let err_file f e = R.error_msgf "%a: %a" Fpath.pp f pp_unix_error e
|
|
|
|
let rec openfile fn mode perm = try Unix.openfile fn mode perm with
|
|
| Unix.Unix_error (Unix.EINTR, _, _) -> openfile fn mode perm
|
|
|
|
let fd_for_file flag f =
|
|
try Ok (openfile (Fpath.to_string f) (Unix.O_CLOEXEC :: flag) 0o644)
|
|
with Unix.Unix_error (e, _, _) -> err_file f e
|
|
|
|
let read_fd_for_file = fd_for_file Unix.[ O_RDONLY ]
|
|
|
|
let write_fd_for_file = fd_for_file Unix.[ O_WRONLY ; O_APPEND ]
|
|
|
|
let null = match read_fd_for_file (Fpath.v "/dev/null") with
|
|
| Ok fd -> fd
|
|
| Error _ -> invalid_arg "cannot read /dev/null"
|
|
|
|
let rec create_process prog args stdout stderr =
|
|
try Unix.create_process prog args null stdout stderr with
|
|
| Unix.Unix_error (Unix.EINTR, _, _) ->
|
|
create_process prog args stdout stderr
|
|
|
|
let rec close fd =
|
|
try Unix.close fd with
|
|
| Unix.Unix_error (Unix.EINTR, _, _) -> close fd
|
|
|
|
let close_no_err fd = try close fd with _ -> ()
|
|
|
|
(* own code starts here
|
|
(c) 2017, 2018 Hannes Mehnert, all rights reserved *)
|
|
|
|
open Vmm_core
|
|
|
|
let rec mkfifo name =
|
|
try Unix.mkfifo (Fpath.to_string name) 0o640 with
|
|
| Unix.Unix_error (Unix.EINTR, _, _) -> mkfifo name
|
|
|
|
let image_file, fifo_file =
|
|
((fun name -> Fpath.(tmpdir / (string_of_id name) + "img")),
|
|
(fun name -> Fpath.(tmpdir / "fifo" / (string_of_id name))))
|
|
|
|
let rec fifo_exists file =
|
|
try Ok (Unix.((stat @@ Fpath.to_string file).st_kind = S_FIFO)) with
|
|
| Unix.Unix_error (Unix.ENOENT, _, _) -> Error (`Msg "noent")
|
|
| Unix.Unix_error (Unix.EINTR, _, _) -> fifo_exists file
|
|
| Unix.Unix_error (e, _, _) ->
|
|
R.error_msgf "file %a exists: %s" Fpath.pp file (Unix.error_message e)
|
|
|
|
let uname () =
|
|
let cmd = Bos.Cmd.(v "uname" % "-s") in
|
|
lazy Bos.OS.Cmd.(run_out cmd |> out_string)
|
|
|
|
let create_tap bridge =
|
|
Lazy.force (uname ()) >>= fun (sys, _) ->
|
|
match sys with
|
|
| x when x = "FreeBSD" ->
|
|
let cmd = Bos.Cmd.(v "ifconfig" % "tap" % "create") in
|
|
Bos.OS.Cmd.run_out cmd |> Bos.OS.Cmd.out_string >>= fun (name, _) ->
|
|
Bos.OS.Cmd.run Bos.Cmd.(v "ifconfig" % bridge % "addm" % name) >>= fun () ->
|
|
Ok name
|
|
| x when x = "Linux" ->
|
|
let prefix = "vmmtap" in
|
|
let rec find_n x =
|
|
let nam = prefix ^ string_of_int x in
|
|
match Bos.OS.Cmd.run Bos.Cmd.(v "ifconfig" % nam) with
|
|
| Error _ -> nam
|
|
| Ok _ -> find_n (succ x)
|
|
in
|
|
let tap = find_n 0 in
|
|
Bos.OS.Cmd.run Bos.Cmd.(v "ip" % "tuntap" % "add" % "mode" % "tap" % tap) >>= fun () ->
|
|
Bos.OS.Cmd.run Bos.Cmd.(v "brctl" % "addif" % bridge % tap) >>= fun () ->
|
|
Ok tap
|
|
| x -> Error (`Msg ("unsupported operating system " ^ x))
|
|
|
|
let destroy_tap tapname =
|
|
Lazy.force (uname ()) >>= fun (sys, _) ->
|
|
match sys with
|
|
| x when x = "FreeBSD" ->
|
|
Bos.OS.Cmd.run Bos.Cmd.(v "ifconfig" % tapname % "destroy")
|
|
| x when x = "Linux" ->
|
|
Bos.OS.Cmd.run Bos.Cmd.(v "ip" % "tuntap" % "del" % "dev" % tapname % "mode" % "tap")
|
|
| x -> Error (`Msg ("unsupported operating system " ^ x))
|
|
|
|
let prepare name vm =
|
|
(match vm.vmimage with
|
|
| `Hvt_amd64, blob -> Ok blob
|
|
| `Hvt_amd64_compressed, blob ->
|
|
begin match Vmm_compress.uncompress (Cstruct.to_string blob) with
|
|
| Ok blob -> Ok (Cstruct.of_string blob)
|
|
| Error () -> Error (`Msg "failed to uncompress")
|
|
end
|
|
| `Hvt_arm64, _ -> Error (`Msg "no amd64 hvt image found")) >>= fun image ->
|
|
let fifo = fifo_file name in
|
|
(match fifo_exists fifo with
|
|
| Ok true -> Ok ()
|
|
| Ok false -> Error (`Msg ("file " ^ Fpath.to_string fifo ^ " exists and is not a fifo"))
|
|
| Error _ ->
|
|
try Ok (mkfifo fifo) with
|
|
| Unix.Unix_error (e, f, _) ->
|
|
Logs.err (fun m -> m "%a error in %s: %a" Fpath.pp fifo f pp_unix_error e) ;
|
|
Error (`Msg "while creating fifo")) >>= fun () ->
|
|
List.fold_left (fun acc b ->
|
|
acc >>= fun acc ->
|
|
create_tap b >>= fun tap ->
|
|
Ok (tap :: acc))
|
|
(Ok []) vm.network >>= fun taps ->
|
|
Bos.OS.File.write (image_file name) (Cstruct.to_string image) >>= fun () ->
|
|
Ok (List.rev taps)
|
|
|
|
let shutdown name vm =
|
|
(* same order as prepare! *)
|
|
Bos.OS.File.delete (image_file name) >>= fun () ->
|
|
Bos.OS.File.delete (fifo_file name) >>= fun () ->
|
|
List.fold_left (fun r n -> r >>= fun () -> destroy_tap n) (Ok ()) vm.taps
|
|
|
|
let cpuset cpu =
|
|
Lazy.force (uname ()) >>= fun (sys, _) ->
|
|
let cpustring = string_of_int cpu in
|
|
match sys with
|
|
| x when x = "FreeBSD" ->
|
|
Ok ([ "cpuset" ; "-l" ; cpustring ])
|
|
| x when x = "Linux" ->
|
|
Ok ([ "taskset" ; "-c" ; cpustring ])
|
|
| x -> Error (`Msg ("unsupported operating system " ^ x))
|
|
|
|
let exec name vm taps =
|
|
let net = List.map (fun t -> "--net=" ^ t) taps in
|
|
let argv = match vm.argv with None -> [] | Some xs -> xs in
|
|
(match taps with
|
|
| [] -> Ok Fpath.(dbdir / "solo5-hvt.none")
|
|
| [_] -> Ok Fpath.(dbdir / "solo5-hvt.net")
|
|
| _ -> Error (`Msg "cannot handle multiple network interfaces")) >>= fun bin ->
|
|
cpuset vm.cpuid >>= fun cpuset ->
|
|
let mem = "--mem=" ^ string_of_int vm.requested_memory in
|
|
let cmd =
|
|
Bos.Cmd.(of_list cpuset % p bin % mem %% of_list net %
|
|
"--" % p (image_file name) %% of_list argv)
|
|
in
|
|
let line = Bos.Cmd.to_list cmd in
|
|
let prog = try List.hd line with Failure _ -> failwith err_empty_line in
|
|
let line = Array.of_list line in
|
|
let fifo = fifo_file name in
|
|
Logs.debug (fun m -> m "write fd for fifo %a" Fpath.pp fifo);
|
|
write_fd_for_file fifo >>= fun stdout ->
|
|
Logs.debug (fun m -> m "opened file descriptor!");
|
|
try
|
|
Logs.debug (fun m -> m "creating process");
|
|
let pid = create_process prog line stdout stdout in
|
|
Logs.debug (fun m -> m "created process %d: %a" pid Bos.Cmd.pp cmd) ;
|
|
(* this should get rid of the vmimage from vmmd's memory! *)
|
|
let config = { vm with vmimage = (fst vm.vmimage, Cstruct.create 0) } in
|
|
Ok { config ; cmd ; pid ; taps ; stdout }
|
|
with
|
|
Unix.Unix_error (e, _, _) ->
|
|
close_no_err stdout;
|
|
R.error_msgf "cmd %a exits: %a" Bos.Cmd.pp cmd pp_unix_error e
|
|
|
|
let destroy vm = Unix.kill vm.pid 15 (* 15 is SIGTERM *)
|