2 * Copyright (C) 2009-2011 Red Hat Inc.
4 * This library is free software; you can redistribute it and/or
5 * modify it under the terms of the GNU Lesser General Public
6 * License as published by the Free Software Foundation; either
7 * version 2 of the License, or (at your option) any later version.
9 * This library is distributed in the hope that it will be useful,
10 * but WITHOUT ANY WARRANTY; without even the implied warranty of
11 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
12 * Lesser General Public License for more details.
14 * You should have received a copy of the GNU Lesser General Public
15 * License along with this library; if not, write to the Free Software
16 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
21 #define _BSD_SOURCE /* for mkdtemp, usleep */
34 #include <sys/select.h>
38 #include <rpc/types.h>
45 #ifdef HAVE_SYS_TYPES_H
46 #include <sys/types.h>
49 #ifdef HAVE_SYS_WAIT_H
53 #ifdef HAVE_SYS_SOCKET_H
54 #include <sys/socket.h>
61 #include <arpa/inet.h>
62 #include <netinet/in.h>
65 #include "glthread/lock.h"
70 #include "guestfs-internal.h"
71 #include "guestfs-internal-actions.h"
72 #include "guestfs_protocol.h"
74 static void default_error_cb (guestfs_h *g, void *data, const char *msg);
75 static void remove_tmpdir (guestfs_h *g);
76 static void close_handles (void);
78 gl_lock_define_initialized (static, handles_lock);
79 static guestfs_h *handles = NULL;
80 static int atexit_handler_set = 0;
88 g = malloc (sizeof (*g));
91 memset (g, 0, sizeof (*g));
100 g->error_cb = default_error_cb;
101 g->error_cb_data = NULL;
103 g->recovery_proc = 1;
106 str = getenv ("LIBGUESTFS_DEBUG");
107 g->verbose = str != NULL && STREQ (str, "1");
109 str = getenv ("LIBGUESTFS_TRACE");
110 g->trace = str != NULL && STREQ (str, "1");
112 str = getenv ("LIBGUESTFS_PATH");
113 g->path = str != NULL ? strdup (str) : strdup (GUESTFS_DEFAULT_PATH);
114 if (!g->path) goto error;
116 str = getenv ("LIBGUESTFS_QEMU");
117 g->qemu = str != NULL ? strdup (str) : strdup (QEMU);
118 if (!g->qemu) goto error;
120 str = getenv ("LIBGUESTFS_APPEND");
122 g->append = strdup (str);
123 if (!g->append) goto error;
126 /* Choose a suitable memory size. Previously we tried to choose
127 * a minimal memory size, but this isn't really necessary since
128 * recent QEMU and KVM don't do anything nasty like locking
129 * memory into core any more. Thus we can safely choose a
130 * large, generous amount of memory, and it'll just get swapped
131 * on smaller systems.
133 str = getenv ("LIBGUESTFS_MEMSIZE");
135 if (sscanf (str, "%d", &g->memsize) != 1 || g->memsize <= 256) {
136 warning (g, "non-numeric or too small value for LIBGUESTFS_MEMSIZE");
142 /* Start with large serial numbers so they are easy to spot
143 * inside the protocol.
145 g->msg_next_serial = 0x00123400;
147 /* Default is uniprocessor appliance. */
150 /* Link the handles onto a global list. */
151 gl_lock_lock (handles_lock);
154 if (!atexit_handler_set) {
155 atexit (close_handles);
156 atexit_handler_set = 1;
158 gl_lock_unlock (handles_lock);
160 debug (g, "new guestfs handle %p", g);
173 guestfs_close (guestfs_h *g)
175 if (g->state == NO_HANDLE) {
176 /* Not safe to call ANY callbacks here, so ... */
177 fprintf (stderr, _("guestfs_close: called twice on the same handle\n"));
182 const char trace_msg[] = "close";
184 guestfs___call_callbacks_message (g, GUESTFS_EVENT_TRACE,
185 trace_msg, strlen (trace_msg));
188 debug (g, "closing guestfs handle %p (state %d)", g, g->state);
190 /* Try to sync if autosync flag is set. */
191 if (g->autosync && g->state == READY)
192 guestfs_internal_autosync (g);
194 /* Kill the qemu subprocess. */
195 if (g->state != CONFIG)
196 guestfs_kill_subprocess (g);
198 /* Run user close callbacks. */
199 guestfs___call_callbacks_void (g, GUESTFS_EVENT_CLOSE);
201 /* Remove all other registered callbacks. Since we've already
202 * called the close callbacks, we shouldn't call any others.
208 guestfs___free_inspect_info (g);
209 guestfs___free_drives (&g->drives);
222 /* Wait for subprocess(es) to exit. */
223 if (g->pid > 0) waitpid (g->pid, NULL, 0);
224 if (g->recoverypid > 0) waitpid (g->recoverypid, NULL, 0);
226 /* Remove whole temporary directory. */
232 for (i = 0; i < g->cmdline_size; ++i)
233 free (g->cmdline[i]);
237 /* Mark the handle as dead before freeing it. */
238 g->state = NO_HANDLE;
240 gl_lock_lock (handles_lock);
246 for (gg = handles; gg->next != g; gg = gg->next)
250 gl_lock_unlock (handles_lock);
254 free (g->last_error);
259 free (g->qemu_version);
263 /* g->tmpdir can contain any files (but not subdirectories). Remove
264 * those and the directory itself. Note that errors in this function
265 * aren't really that important: if we end up not deleting temporary
266 * files it's only annoying.
269 remove_tmpdir (guestfs_h *g)
277 dir = opendir (g->tmpdir);
283 while ((d = readdir (dir)) != NULL) {
284 if (STRNEQ (d->d_name, ".") && STRNEQ (d->d_name, "..")) {
285 if (unlinkat (dirfd (dir), d->d_name, 0) == -1)
290 if (closedir (dir) == -1)
293 if (rmdir (g->tmpdir) == -1)
300 /* Close all open handles (called from atexit(3)). */
304 while (handles) guestfs_close (handles);
308 guestfs_last_error (guestfs_h *g)
310 return g->last_error;
314 guestfs_last_errno (guestfs_h *g)
316 return g->last_errnum;
320 set_last_error (guestfs_h *g, int errnum, const char *msg)
322 free (g->last_error);
323 g->last_error = strdup (msg);
324 g->last_errnum = errnum;
327 /* Warning are printed unconditionally. We try to make these rare.
328 * Generally speaking, a warning should either be an error, or if it's
329 * not important for end users then it should be a debug message.
332 guestfs___warning (guestfs_h *g, const char *fs, ...)
339 len = vasprintf (&msg, fs, args);
344 len = asprintf (&msg2, _("warning: %s"), msg);
349 guestfs___call_callbacks_message (g, GUESTFS_EVENT_LIBRARY, msg2, len);
354 /* Debug messages. */
356 guestfs___debug (guestfs_h *g, const char *fs, ...)
362 /* The cpp macro "debug" has already checked that g->verbose is true
363 * before calling this function, but we check it again just in case
364 * anyone calls this function directly.
370 len = vasprintf (&msg, fs, args);
375 guestfs___call_callbacks_message (g, GUESTFS_EVENT_LIBRARY, msg, len);
378 /* Call trace messages. These are enabled by setting g->trace, and
379 * calls to this function should only happen from the generated code
383 guestfs___trace (guestfs_h *g, const char *fs, ...)
390 len = vasprintf (&msg, fs, args);
395 guestfs___call_callbacks_message (g, GUESTFS_EVENT_TRACE, msg, len);
401 default_error_cb (guestfs_h *g, void *data, const char *msg)
403 fprintf (stderr, _("libguestfs: error: %s\n"), msg);
407 guestfs_error_errno (guestfs_h *g, int errnum, const char *fs, ...)
413 int err = vasprintf (&msg, fs, args);
418 /* set_last_error first so that the callback can access the error
419 * message and errno through the handle if it wishes.
421 set_last_error (g, errnum, msg);
422 if (g->error_cb) g->error_cb (g, g->error_cb_data, msg);
428 guestfs_perrorf (guestfs_h *g, const char *fs, ...)
435 int err = vasprintf (&msg, fs, args);
441 strerror_r (errnum, buf, sizeof buf);
443 msg = safe_realloc (g, msg, strlen (msg) + 2 + strlen (buf) + 1);
447 /* set_last_error first so that the callback can access the error
448 * message and errno through the handle if it wishes.
450 set_last_error (g, errnum, msg);
451 if (g->error_cb) g->error_cb (g, g->error_cb_data, msg);
457 guestfs_safe_malloc (guestfs_h *g, size_t nbytes)
459 void *ptr = malloc (nbytes);
460 if (nbytes > 0 && !ptr) g->abort_cb ();
464 /* Return 1 if an array of N objects, each of size S, cannot exist due
465 to size arithmetic overflow. S must be positive and N must be
466 nonnegative. This is a macro, not an inline function, so that it
467 works correctly even when SIZE_MAX < N.
469 By gnulib convention, SIZE_MAX represents overflow in size
470 calculations, so the conservative dividend to use here is
471 SIZE_MAX - 1, since SIZE_MAX might represent an overflowed value.
472 However, malloc (SIZE_MAX) fails on all known hosts where
473 sizeof (ptrdiff_t) <= sizeof (size_t), so do not bother to test for
474 exactly-SIZE_MAX allocations on such hosts; this avoids a test and
475 branch when S is known to be 1. */
476 # define xalloc_oversized(n, s) \
477 ((size_t) (sizeof (ptrdiff_t) <= sizeof (size_t) ? -1 : -2) / (s) < (n))
479 /* Technically we should add an autoconf test for this, testing for the desired
480 functionality, like what's done in gnulib, but for now, this is fine. */
481 #if defined(__GLIBC__)
482 #define HAVE_GNU_CALLOC (__GLIBC__ >= 2)
484 #define HAVE_GNU_CALLOC 0
487 /* Allocate zeroed memory for N elements of S bytes, with error
488 checking. S must be nonzero. */
490 guestfs_safe_calloc (guestfs_h *g, size_t n, size_t s)
492 /* From gnulib's calloc function in xmalloc.c. */
494 /* Test for overflow, since some calloc implementations don't have
495 proper overflow checks. But omit overflow and size-zero tests if
496 HAVE_GNU_CALLOC, since GNU calloc catches overflow and never
497 returns NULL if successful. */
498 if ((! HAVE_GNU_CALLOC && xalloc_oversized (n, s))
499 || (! (p = calloc (n, s)) && (HAVE_GNU_CALLOC || n != 0)))
505 guestfs_safe_realloc (guestfs_h *g, void *ptr, int nbytes)
507 void *p = realloc (ptr, nbytes);
508 if (nbytes > 0 && !p) g->abort_cb ();
513 guestfs_safe_strdup (guestfs_h *g, const char *str)
515 char *s = strdup (str);
516 if (!s) g->abort_cb ();
521 guestfs_safe_strndup (guestfs_h *g, const char *str, size_t n)
523 char *s = strndup (str, n);
524 if (!s) g->abort_cb ();
529 guestfs_safe_memdup (guestfs_h *g, void *ptr, size_t size)
531 void *p = malloc (size);
532 if (!p) g->abort_cb ();
533 memcpy (p, ptr, size);
538 guestfs_safe_asprintf (guestfs_h *g, const char *fs, ...)
544 int err = vasprintf (&msg, fs, args);
554 guestfs_set_out_of_memory_handler (guestfs_h *g, guestfs_abort_cb cb)
560 guestfs_get_out_of_memory_handler (guestfs_h *g)
566 guestfs_set_error_handler (guestfs_h *g, guestfs_error_handler_cb cb, void *data)
569 g->error_cb_data = data;
572 guestfs_error_handler_cb
573 guestfs_get_error_handler (guestfs_h *g, void **data_rtn)
575 if (data_rtn) *data_rtn = g->error_cb_data;
580 guestfs_user_cancel (guestfs_h *g)
586 guestfs__set_verbose (guestfs_h *g, int v)
593 guestfs__get_verbose (guestfs_h *g)
599 guestfs__set_autosync (guestfs_h *g, int a)
606 guestfs__get_autosync (guestfs_h *g)
612 guestfs__set_path (guestfs_h *g, const char *path)
619 safe_strdup (g, GUESTFS_DEFAULT_PATH) : safe_strdup (g, path);
624 guestfs__get_path (guestfs_h *g)
630 guestfs__set_qemu (guestfs_h *g, const char *qemu)
635 g->qemu = qemu == NULL ? safe_strdup (g, QEMU) : safe_strdup (g, qemu);
640 guestfs__get_qemu (guestfs_h *g)
646 guestfs__set_append (guestfs_h *g, const char *append)
651 g->append = append ? safe_strdup (g, append) : NULL;
656 guestfs__get_append (guestfs_h *g)
662 guestfs__set_memsize (guestfs_h *g, int memsize)
664 g->memsize = memsize;
669 guestfs__get_memsize (guestfs_h *g)
675 guestfs__set_selinux (guestfs_h *g, int selinux)
677 g->selinux = selinux;
682 guestfs__get_selinux (guestfs_h *g)
688 guestfs__get_pid (guestfs_h *g)
693 error (g, "get_pid: no qemu subprocess");
698 struct guestfs_version *
699 guestfs__version (guestfs_h *g)
701 struct guestfs_version *r;
703 r = safe_malloc (g, sizeof *r);
704 r->major = PACKAGE_VERSION_MAJOR;
705 r->minor = PACKAGE_VERSION_MINOR;
706 r->release = PACKAGE_VERSION_RELEASE;
707 r->extra = safe_strdup (g, PACKAGE_VERSION_EXTRA);
712 guestfs__set_trace (guestfs_h *g, int t)
719 guestfs__get_trace (guestfs_h *g)
725 guestfs__set_direct (guestfs_h *g, int d)
732 guestfs__get_direct (guestfs_h *g)
738 guestfs__set_recovery_proc (guestfs_h *g, int f)
740 g->recovery_proc = !!f;
745 guestfs__get_recovery_proc (guestfs_h *g)
747 return g->recovery_proc;
751 guestfs__set_network (guestfs_h *g, int v)
753 g->enable_network = !!v;
758 guestfs__get_network (guestfs_h *g)
760 return g->enable_network;
764 guestfs__set_attach_method (guestfs_h *g, const char *method)
766 if (STREQ (method, "appliance")) {
767 g->attach_method = ATTACH_METHOD_APPLIANCE;
768 free (g->attach_method_arg);
769 g->attach_method_arg = NULL;
771 else if (STRPREFIX (method, "unix:") && strlen (method) > 5) {
772 g->attach_method = ATTACH_METHOD_UNIX;
773 free (g->attach_method_arg);
774 g->attach_method_arg = safe_strdup (g, method + 5);
775 /* Note that we don't check the path exists until launch is called. */
778 error (g, "invalid attach method: %s", method);
786 guestfs__get_attach_method (guestfs_h *g)
790 switch (g->attach_method) {
791 case ATTACH_METHOD_APPLIANCE:
792 ret = safe_strdup (g, "appliance");
795 case ATTACH_METHOD_UNIX:
796 ret = safe_malloc (g, strlen (g->attach_method_arg) + 5 + 1);
797 strcpy (ret, "unix:");
798 strcat (ret, g->attach_method_arg);
801 default: /* keep GCC happy - this is not reached */
809 guestfs__set_pgroup (guestfs_h *g, int v)
816 guestfs__get_pgroup (guestfs_h *g)
822 guestfs__set_smp (guestfs_h *g, int v)
828 error (g, "invalid smp parameter: %d", v);
834 guestfs__get_smp (guestfs_h *g)
839 /* Note the private data area is allocated lazily, since the vast
840 * majority of callers will never use it. This means g->pda is
845 void *data; /* opaque user data pointer */
849 hasher (void const *x, size_t table_size)
851 struct pda_entry const *p = x;
852 return hash_pjw (p->key, table_size);
856 comparator (void const *x, void const *y)
858 struct pda_entry const *a = x;
859 struct pda_entry const *b = y;
860 return STREQ (a->key, b->key);
867 struct pda_entry *p = x;
874 guestfs_set_private (guestfs_h *g, const char *key, void *data)
876 if (g->pda == NULL) {
877 g->pda = hash_initialize (16, NULL, hasher, comparator, freer);
882 struct pda_entry *new_entry = safe_malloc (g, sizeof *new_entry);
883 new_entry->key = safe_strdup (g, key);
884 new_entry->data = data;
886 struct pda_entry *old_entry = hash_delete (g->pda, new_entry);
889 struct pda_entry *entry = hash_insert (g->pda, new_entry);
892 assert (entry == new_entry);
896 bad_cast (char const *s)
902 guestfs_get_private (guestfs_h *g, const char *key)
905 return NULL; /* no keys have been set */
907 const struct pda_entry k = { .key = bad_cast (key) };
908 struct pda_entry *entry = hash_lookup (g->pda, &k);
917 guestfs_first_private (guestfs_h *g, const char **key_rtn)
922 g->pda_next = hash_get_first (g->pda);
924 /* Ignore any keys with NULL data pointers. */
925 while (g->pda_next && g->pda_next->data == NULL)
926 g->pda_next = hash_get_next (g->pda, g->pda_next);
928 if (g->pda_next == NULL)
931 *key_rtn = g->pda_next->key;
932 return g->pda_next->data;
936 guestfs_next_private (guestfs_h *g, const char **key_rtn)
941 if (g->pda_next == NULL)
944 /* Walk to the next key with a non-NULL data pointer. */
946 g->pda_next = hash_get_next (g->pda, g->pda_next);
947 } while (g->pda_next && g->pda_next->data == NULL);
949 if (g->pda_next == NULL)
952 *key_rtn = g->pda_next->key;
953 return g->pda_next->data;
956 /* When tracing, be careful how we print BufferIn parameters which
957 * usually contain large amounts of binary data (RHBZ#646822).
960 guestfs___print_BufferIn (FILE *out, const char *buf, size_t buf_size)
963 size_t orig_size = buf_size;
970 for (i = 0; i < buf_size; ++i) {
971 if (c_isprint (buf[i]))
974 fprintf (out, "\\x%02x", (unsigned char) buf[i]);
979 if (orig_size > buf_size)
981 _("<truncated, original size %zu bytes>"), orig_size);
985 guestfs___print_BufferOut (FILE *out, const char *buf, size_t buf_size)
987 guestfs___print_BufferIn (out, buf, buf_size);
991 guestfs___free_string_list (char **argv)
994 for (i = 0; argv[i] != NULL; ++i)
1000 guestfs___free_drives (struct drive **drives)
1002 struct drive *i = *drives;
1006 struct drive *next = i->next;