mirror of
https://github.com/libguestfs/libguestfs.git
synced 2026-03-22 07:03:38 +00:00
The majority of the tools have already options (--echo-keys & --keys-from-stdin) to deal with LUKS credentials, although there is no way to automatically provide credentials. --keys-from-stdin is suboptimal, because it is a usable solution only when there is just one device to open, and no other input passed via stdin to the tool (like the commands for guestfish). To overcome this limitation, introduce a new --key option in tools: * --key /dev/device:file:/filename/with/key * --key /dev/device:string:the-actual-key this way it is possible to pass all the credentials needed for the specific devices to open, with no risk of conflict with stdin, and also in a secure way (when using the "file" way). On the technical side: this adds a new "key_store" API for the C tools, making sure it is used only when needed. Partially mirror it also for the OCaml tools, although there will be a conversion to the C API because the decryption helpers used are in the common C parts.
207 lines
6.4 KiB
OCaml
207 lines
6.4 KiB
OCaml
(* virt-get-kernel
|
||
* Copyright (C) 2013-2018 Red Hat Inc.
|
||
*
|
||
* This program is free software; you can redistribute it and/or modify
|
||
* it under the terms of the GNU General Public License as published by
|
||
* the Free Software Foundation; either version 2 of the License, or
|
||
* (at your option) any later version.
|
||
*
|
||
* This program is distributed in the hope that it will be useful,
|
||
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||
* GNU General Public License for more details.
|
||
*
|
||
* You should have received a copy of the GNU General Public License along
|
||
* with this program; if not, write to the Free Software Foundation, Inc.,
|
||
* 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
|
||
*)
|
||
|
||
open Std_utils
|
||
open Tools_utils
|
||
open Common_gettext.Gettext
|
||
open Getopt.OptionName
|
||
|
||
module G = Guestfs
|
||
|
||
open Printf
|
||
|
||
let parse_cmdline () =
|
||
let domain = ref None in
|
||
let file = ref None in
|
||
let libvirturi = ref "" in
|
||
let format = ref "auto" in
|
||
let output = ref "" in
|
||
let unversioned = ref false in
|
||
let prefix = ref None in
|
||
|
||
let set_file arg =
|
||
if !file <> None then
|
||
error (f_"--add option can only be given once");
|
||
let uri =
|
||
try URI.parse_uri arg
|
||
with URI.Parse_failed ->
|
||
error (f_"error parsing URI '%s'. Look for error messages printed above.") arg in
|
||
file := Some uri
|
||
and set_domain dom =
|
||
if !domain <> None then
|
||
error (f_"--domain option can only be given once");
|
||
domain := Some dom
|
||
and set_prefix p =
|
||
if !prefix <> None then
|
||
error (f_"--prefix option can only be given once");
|
||
prefix := Some p in
|
||
|
||
let argspec = [
|
||
[ S 'a'; L"add" ], Getopt.String (s_"file", set_file), s_"Add disk image file";
|
||
[ S 'c'; L"connect" ], Getopt.Set_string (s_"uri", libvirturi), s_"Set libvirt URI";
|
||
[ S 'd'; L"domain" ], Getopt.String (s_"domain", set_domain), s_"Set libvirt guest name";
|
||
[ L"format" ], Getopt.Set_string (s_"format", format), s_"Format of input disk";
|
||
[ S 'o'; L"output" ], Getopt.Set_string (s_"directory", output), s_"Output directory";
|
||
[ L"unversioned-names" ], Getopt.Set unversioned,
|
||
s_"Use unversioned names for files";
|
||
[ L"prefix" ], Getopt.String (s_"prefix", set_prefix), s_"Prefix for files";
|
||
] in
|
||
let usage_msg =
|
||
sprintf (f_"\
|
||
%s: extract kernel and ramdisk from a guest
|
||
|
||
A short summary of the options is given below. For detailed help please
|
||
read the man page virt-get-kernel(1).
|
||
")
|
||
prog in
|
||
let opthandle = create_standard_options argspec ~key_opts:true ~machine_readable:true usage_msg in
|
||
Getopt.parse opthandle.getopt;
|
||
|
||
(* Machine-readable mode? Print out some facts about what
|
||
* this binary supports.
|
||
*)
|
||
(match machine_readable () with
|
||
| Some { pr } ->
|
||
pr "virt-get-kernel\n";
|
||
exit 0
|
||
| None -> ()
|
||
);
|
||
|
||
(* Check -a and -d options. *)
|
||
let file = !file in
|
||
let domain = !domain in
|
||
let libvirturi = match !libvirturi with "" -> None | s -> Some s in
|
||
let add =
|
||
match file, domain with
|
||
| None, None ->
|
||
error (f_"you must give either -a or -d options. Read virt-get-kernel(1) man page for further information.")
|
||
| Some _, Some _ ->
|
||
error (f_"you cannot give -a and -d options together. Read virt-get-kernel(1) man page for further information.")
|
||
| None, Some dom ->
|
||
fun (g : Guestfs.guestfs) ->
|
||
let readonlydisk = "ignore" (* ignore CDs, data drives *) in
|
||
ignore (g#add_domain
|
||
~readonly:true ~allowuuid:true ~readonlydisk
|
||
?libvirturi dom)
|
||
| Some uri, None ->
|
||
fun g ->
|
||
let { URI.path; protocol; server; username; password } = uri in
|
||
let format = match !format with "auto" -> None | s -> Some s in
|
||
g#add_drive
|
||
~readonly:true ?format ~protocol ?server ?username ?secret:password
|
||
path
|
||
in
|
||
|
||
(* Dereference the rest of the args. *)
|
||
let output = match !output with "" -> None | str -> Some str in
|
||
let unversioned = !unversioned in
|
||
let prefix = !prefix in
|
||
|
||
add, output, unversioned, prefix, opthandle.ks
|
||
|
||
let rec do_fetch ~transform_fn ~outputdir g root =
|
||
(* Mount up the disks. *)
|
||
inspect_mount_root_ro g root;
|
||
|
||
let files =
|
||
let typ = g#inspect_get_type root in
|
||
match typ with
|
||
| "linux" -> pick_kernel_files_linux g root
|
||
| typ ->
|
||
error (f_"operating system ‘%s’ not supported") typ in
|
||
|
||
(* Download the files. *)
|
||
List.iter (
|
||
fun f ->
|
||
let dest = outputdir // transform_fn f in
|
||
if not (quiet ()) then
|
||
printf "download: %s -> %s\n%!" f dest;
|
||
g#download f dest;
|
||
) files;
|
||
|
||
g#umount_all ()
|
||
|
||
and pick_kernel_files_linux (g : Guestfs.guestfs) root =
|
||
(* Get all kernels and initramfses. *)
|
||
let glob w = Array.to_list (g#glob_expand w) in
|
||
let kernels = glob "/boot/vmlinuz-*" in
|
||
let initrds = glob "/boot/initramfs-*" in
|
||
|
||
(* Old RHEL: *)
|
||
let initrds = if initrds <> [] then initrds else glob "/boot/initrd-*" in
|
||
|
||
(* Debian/Ubuntu: *)
|
||
let initrds = if initrds <> [] then initrds else glob "/boot/initrd.img-*" in
|
||
|
||
(* Sort by version to get the latest version as first element. *)
|
||
let kernels = List.rev (List.sort compare_version kernels) in
|
||
let initrds = List.rev (List.sort compare_version initrds) in
|
||
|
||
if kernels = [] then
|
||
error (f_"no kernel found in %s") root;
|
||
|
||
(* Pick the latest. *)
|
||
let kernel = [List.hd kernels] in
|
||
let initrd =
|
||
match initrds with
|
||
| [] -> []
|
||
| initrd :: _ -> [initrd] in
|
||
|
||
kernel @ initrd
|
||
|
||
(* Main program. *)
|
||
let main () =
|
||
let add, output, unversioned, prefix, ks = parse_cmdline () in
|
||
|
||
(* Connect to libguestfs. *)
|
||
let g = open_guestfs () in
|
||
add g;
|
||
g#launch ();
|
||
|
||
(* Decrypt the disks. *)
|
||
inspect_decrypt g ks;
|
||
|
||
let roots = g#inspect_os () in
|
||
if Array.length roots = 0 then
|
||
error (f_"no operating system found");
|
||
if Array.length roots > 1 then
|
||
error (f_"dual/multi-boot images are not supported by this tool");
|
||
let root = roots.(0) in
|
||
|
||
let dest_filename fn =
|
||
let fn = Filename.basename fn in
|
||
let fn =
|
||
if unversioned then fst (String.split "-" fn)
|
||
else fn in
|
||
match prefix with
|
||
| None -> fn
|
||
| Some p -> p ^ "-" ^ fn in
|
||
|
||
let outputdir =
|
||
match output with
|
||
| None -> Filename.current_dir_name
|
||
| Some dir -> dir in
|
||
|
||
do_fetch ~transform_fn:dest_filename ~outputdir g root;
|
||
|
||
(* Shutdown. *)
|
||
g#shutdown ();
|
||
g#close ()
|
||
|
||
let () = run_main_and_handle_errors main
|