qvm_template_postprocess.py 9.2 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273
  1. #
  2. # The Qubes OS Project, https://www.qubes-os.org/
  3. #
  4. # Copyright (C) 2016 Marek Marczykowski-Górecki
  5. # <marmarek@invisiblethingslab.com>
  6. #
  7. # This program is free software; you can redistribute it and/or modify
  8. # it under the terms of the GNU Lesser General Public License as published by
  9. # the Free Software Foundation; either version 2.1 of the License, or
  10. # (at your option) any later version.
  11. #
  12. # This program is distributed in the hope that it will be useful,
  13. # but WITHOUT ANY WARRANTY; without even the implied warranty of
  14. # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  15. # GNU Lesser General Public License for more details.
  16. #
  17. # You should have received a copy of the GNU Lesser General Public License along
  18. # with this program; if not, write to the Free Software Foundation, Inc.,
  19. # 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
  20. ''' Tool for importing rpm-installed template'''
  21. import asyncio
  22. import glob
  23. import os
  24. import shutil
  25. import subprocess
  26. import sys
  27. import grp
  28. import qubesadmin
  29. import qubesadmin.exc
  30. import qubesadmin.tools
  31. try:
  32. # pylint: disable=wrong-import-position
  33. import qubesadmin.events.utils
  34. have_events = True
  35. except ImportError:
  36. have_events = False
  37. parser = qubesadmin.tools.QubesArgumentParser(
  38. description='Postprocess template package')
  39. parser.add_argument('--really', action='store_true', default=False,
  40. help='Really perform the action, YOU SHOULD REALLY KNOW WHAT YOU ARE DOING')
  41. parser.add_argument('--skip-start', action='store_true',
  42. help='Do not start the VM - do not retrieve menu entries etc.')
  43. parser.add_argument('--keep-source', action='store_true',
  44. help='Do not remove source data (*dir* directory) after import')
  45. parser.add_argument('action', choices=['post-install', 'pre-remove'],
  46. help='Action to perform')
  47. parser.add_argument('name', action='store',
  48. help='Template name')
  49. parser.add_argument('dir', action='store',
  50. help='Template directory')
  51. def get_root_img_size(source_dir):
  52. '''Extract size of root.img to be imported'''
  53. root_path = os.path.join(source_dir, 'root.img')
  54. if os.path.exists(root_path + '.part.00'):
  55. # get just file root_size from the tar header
  56. p = subprocess.Popen(['tar', 'tvf', root_path + '.part.00'],
  57. stdout=subprocess.PIPE, stderr=subprocess.DEVNULL)
  58. (stdout, _) = p.communicate()
  59. # -rw-r--r-- 0/0 1073741824 1970-01-01 01:00 root.img
  60. root_size = int(stdout.split()[2])
  61. elif os.path.exists(root_path):
  62. root_size = os.path.getsize(root_path)
  63. else:
  64. raise qubesadmin.exc.QubesException('root.img not found')
  65. return root_size
  66. def import_root_img(vm, source_dir):
  67. '''Import root.img into VM object'''
  68. root_size = get_root_img_size(source_dir)
  69. vm.volumes['root'].resize(root_size)
  70. root_path = os.path.join(source_dir, 'root.img')
  71. if os.path.exists(root_path + '.part.00'):
  72. input_files = glob.glob(root_path + '.part.*')
  73. cat = subprocess.Popen(['cat'] + sorted(input_files),
  74. stdout=subprocess.PIPE)
  75. tar = subprocess.Popen(['tar', 'xSOf', '-'],
  76. stdin=cat.stdout,
  77. stdout=subprocess.PIPE)
  78. cat.stdout.close()
  79. vm.volumes['root'].import_data(stream=tar.stdout)
  80. if tar.wait() != 0:
  81. raise qubesadmin.exc.QubesException('root.img extraction failed')
  82. if cat.wait() != 0:
  83. raise qubesadmin.exc.QubesException('root.img extraction failed')
  84. elif os.path.exists(root_path):
  85. if vm.app.qubesd_connection_type == 'socket':
  86. # check if root.img was already overwritten, i.e. if the source
  87. # and destination paths are the same
  88. vid = vm.volumes['root'].vid
  89. pool = vm.app.pools[vm.volumes['root'].pool]
  90. if pool.driver == 'file' and root_path == os.path.join(
  91. pool.config['dir_path'], vid + '.img'):
  92. vm.log.info('root.img already in place, do not re-import')
  93. return
  94. with open(root_path, 'rb') as root_file:
  95. vm.volumes['root'].import_data(stream=root_file)
  96. def import_appmenus(vm, source_dir):
  97. '''Import appmenus settings into VM object (later: GUI VM)'''
  98. if os.getuid() == 0:
  99. try:
  100. qubes_group = grp.getgrnam('qubes')
  101. user = qubes_group.gr_mem[0]
  102. cmd_prefix = ['runuser', '-u', user, '--', 'env', 'DISPLAY=:0']
  103. except KeyError as e:
  104. vm.log.warning('Default user not found, not importing appmenus: ' +
  105. str(e))
  106. return
  107. else:
  108. cmd_prefix = []
  109. # TODO: change this to qrexec calls to GUI VM, when GUI VM will be
  110. # implemented
  111. try:
  112. subprocess.check_call(cmd_prefix + ['qvm-appmenus',
  113. '--set-default-whitelist={}'.format(os.path.join(source_dir,
  114. 'vm-whitelisted-appmenus.list')), vm.name])
  115. subprocess.check_call(cmd_prefix + ['qvm-appmenus',
  116. '--set-whitelist={}'.format(os.path.join(source_dir,
  117. 'whitelisted-appmenus.list')), vm.name])
  118. except subprocess.CalledProcessError as e:
  119. vm.log.warning('Failed to set default application list: %s', e)
  120. @asyncio.coroutine
  121. def call_postinstall_service(vm):
  122. '''Call qubes.PostInstall service
  123. And adjust related settings (netvm, features).
  124. '''
  125. # just created, so no need to save previous value - we know what it was
  126. vm.netvm = None
  127. # temporarily enable qrexec feature - so vm.start() will wait for it;
  128. # if start fails, rollback it
  129. vm.features['qrexec'] = True
  130. try:
  131. vm.start()
  132. except qubesadmin.exc.QubesException:
  133. del vm.features['qrexec']
  134. else:
  135. try:
  136. vm.run_service_for_stdio('qubes.PostInstall')
  137. except subprocess.CalledProcessError:
  138. vm.log.error('qubes.PostInstall service failed')
  139. vm.shutdown()
  140. if have_events:
  141. try:
  142. # pylint: disable=no-member
  143. yield from asyncio.wait_for(
  144. qubesadmin.events.utils.wait_for_domain_shutdown([vm]),
  145. qubesadmin.config.defaults['shutdown_timeout'])
  146. except asyncio.TimeoutError:
  147. vm.kill()
  148. else:
  149. timeout = qubesadmin.config.defaults['shutdown_timeout']
  150. while timeout >= 0:
  151. if vm.is_halted():
  152. break
  153. yield from asyncio.sleep(1)
  154. timeout -= 1
  155. if not vm.is_halted():
  156. vm.kill()
  157. finally:
  158. vm.netvm = qubesadmin.DEFAULT
  159. @asyncio.coroutine
  160. def post_install(args):
  161. '''Handle post-installation tasks'''
  162. app = args.app
  163. try:
  164. # reinstall
  165. vm = app.domains[args.name]
  166. except KeyError:
  167. if app.qubesd_connection_type == 'socket' and \
  168. args.dir == '/var/lib/qubes/vm-templates/' + args.name:
  169. # vm.create_on_disk() need to create the directory on its own,
  170. # move it away for from its way
  171. tmp_sourcedir = os.path.join('/var/lib/qubes/vm-templates',
  172. 'tmp-' + args.name)
  173. shutil.move(args.dir, tmp_sourcedir)
  174. args.dir = tmp_sourcedir
  175. vm = app.add_new_vm('TemplateVM',
  176. name=args.name,
  177. label=qubesadmin.config.defaults['template_label'])
  178. vm.log.info('Importing data')
  179. try:
  180. import_root_img(vm, args.dir)
  181. except:
  182. # if data import fails, remove half-created VM
  183. del app.domains[vm.name]
  184. raise
  185. import_appmenus(vm, args.dir)
  186. if not args.skip_start:
  187. yield from call_postinstall_service(vm)
  188. if not args.keep_source:
  189. shutil.rmtree(args.dir)
  190. return 0
  191. def pre_remove(args):
  192. '''Handle pre-removal tasks'''
  193. app = args.app
  194. try:
  195. tpl = app.domains[args.name]
  196. except KeyError:
  197. parser.error('Qube with this name do not exist')
  198. for appvm in tpl.appvms:
  199. parser.error('Qube {} use this template'.format(appvm.name))
  200. del app.domains[args.name]
  201. return 0
  202. def is_chroot():
  203. '''Detect if running inside chroot'''
  204. try:
  205. stat_root = os.stat('/')
  206. stat_init_root = os.stat('/proc/1/root/.')
  207. return (
  208. stat_root.st_dev != stat_init_root.st_dev or
  209. stat_root.st_ino != stat_init_root.st_ino)
  210. except IOError:
  211. print('Stat failed, assuming not chroot', file=sys.stderr)
  212. return False
  213. def main(args=None, app=None):
  214. '''Main function of qvm-template-postprocess'''
  215. args = parser.parse_args(args, app=app)
  216. if is_chroot():
  217. print('Running in chroot, ignoring request. Import template with:',
  218. file=sys.stderr)
  219. print(' '.join(sys.argv), file=sys.stderr)
  220. return
  221. if not args.really:
  222. parser.error('Do not call this tool directly.')
  223. if args.action == 'post-install':
  224. loop = asyncio.get_event_loop()
  225. try:
  226. loop.run_until_complete(post_install(args))
  227. loop.stop()
  228. loop.run_forever()
  229. finally:
  230. loop.close()
  231. elif args.action == 'pre-remove':
  232. pre_remove(args)
  233. else:
  234. parser.error('Unknown action')
  235. return 0
  236. if __name__ == '__main__':
  237. sys.exit(main())