135 lines
4.7 KiB
Python
Executable File
135 lines
4.7 KiB
Python
Executable File
#!/usr/bin/python2
|
|
# -*- encoding: utf8 -*-
|
|
#
|
|
# The Qubes OS Project, http://www.qubes-os.org
|
|
#
|
|
# Copyright (C) 2010 Marek Marczykowski <marmarek@invisiblethingslab.com>
|
|
#
|
|
# This program is free software; you can redistribute it and/or
|
|
# modify it under the terms of the GNU General Public License
|
|
# as published by the Free Software Foundation; either version 2
|
|
# of the License, or (at your option) any later version.
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with this program; if not, write to the Free Software
|
|
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
|
|
#
|
|
#
|
|
import fcntl
|
|
|
|
from optparse import OptionParser
|
|
from qubes.qubes import QubesVmCollection
|
|
import os.path
|
|
import os
|
|
import sys
|
|
import re
|
|
import subprocess
|
|
|
|
qvm_collection = None
|
|
|
|
def get_netvm_of_vm(vm):
|
|
netvm = vm
|
|
while netvm.netvm is not None:
|
|
netvm = netvm.netvm
|
|
if netvm is None or netvm.name == 'dom0':
|
|
print >> sys.stderr, 'There seems to be no network connected to ClockVM, aborting.'
|
|
sys.exit(1)
|
|
return netvm
|
|
|
|
def main():
|
|
parser = OptionParser()
|
|
parser.add_option ("-v", "--verbose", action="store_true", dest="verbose", default=False)
|
|
parser.add_option ("-f", "--force", action="store_true", dest="force", default=False)
|
|
|
|
(options, args) = parser.parse_args ()
|
|
|
|
lockfile_name = "/var/run/qubes/qvm-sync-clock.lock"
|
|
if os.path.exists(lockfile_name):
|
|
lockfile = open(lockfile_name, "r")
|
|
else:
|
|
lockfile = open(lockfile_name, "w")
|
|
|
|
fcntl.fcntl(lockfile.fileno(), fcntl.F_SETFD, fcntl.FD_CLOEXEC)
|
|
try:
|
|
fcntl.flock(lockfile.fileno(), fcntl.LOCK_EX | fcntl.LOCK_NB)
|
|
except IOError:
|
|
print >>sys.stderr, "qvm-sync-clock already running, aborting"
|
|
sys.exit(1)
|
|
|
|
qvm_collection = QubesVmCollection()
|
|
qvm_collection.lock_db_for_reading()
|
|
qvm_collection.load()
|
|
qvm_collection.unlock_db()
|
|
|
|
clock_vm = qvm_collection.get_clockvm_vm()
|
|
|
|
if clock_vm is None:
|
|
print >> sys.stderr, 'There is no selected ClockVM, aborting.'
|
|
sys.exit(1)
|
|
|
|
if not clock_vm.is_running():
|
|
print >> sys.stderr, 'ClockVM not started, exiting!'
|
|
sys.exit(1)
|
|
|
|
net_vm = get_netvm_of_vm(clock_vm)
|
|
if options.verbose:
|
|
print >> sys.stderr, '--> Waiting for network for ClockVM.'
|
|
|
|
# Ignore retcode, try even if nm-online failed - user can setup network manually
|
|
# on-online has timeout 30sec by default
|
|
net_vm.run('nm-online -x', verbose=options.verbose, gui=False, wait=True,
|
|
ignore_stderr=True)
|
|
|
|
# Sync clock
|
|
if clock_vm.run('QUBESRPC qubes.SyncNtpClock dom0', user="root",
|
|
verbose=options.verbose, gui=False, wait=True, ignore_stderr=True) \
|
|
!= 0:
|
|
if options.force:
|
|
print >> sys.stderr, 'Time sync failed! - Syncing with dom0 ' \
|
|
'anyway as requested'
|
|
else:
|
|
print >> sys.stderr, 'Time sync failed! - Exiting'
|
|
sys.exit(1)
|
|
else:
|
|
# Use the date format based on RFC2822 to avoid localisation issues
|
|
p = clock_vm.run('date -u -Iseconds', verbose=options.verbose,
|
|
gui=False, passio_popen=True, ignore_stderr=True)
|
|
date_out = p.stdout.read(100)
|
|
date_out = date_out.strip()
|
|
if not re.match(r'^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\+0000$', date_out):
|
|
print >> sys.stderr, 'Invalid date output, aborting!'
|
|
sys.exit(1)
|
|
|
|
# Sync dom0 time
|
|
if options.verbose:
|
|
print >> sys.stderr, '--> Syncing dom0 clock.'
|
|
|
|
subprocess.check_call(['sudo', 'date', '-u', '-Iseconds', '-s', date_out],
|
|
stdout=None if options.verbose else open(os.devnull, 'w'))
|
|
subprocess.check_call(['sudo', 'hwclock', '--systohc'],
|
|
stdout=None if options.verbose else open(os.devnull, 'w'))
|
|
|
|
# Sync other VMs clock
|
|
for vm in qvm_collection.values():
|
|
if vm.is_running() and vm.qid != 0 and vm.qid != clock_vm.qid:
|
|
if options.verbose:
|
|
print >> sys.stderr, '--> Syncing \'%s\' clock.' % vm.name
|
|
try:
|
|
vm.run_service("qubes.SetDateTime", user="root",
|
|
localcmd="date -u -Iseconds")
|
|
except Exception as e:
|
|
print >> sys.stderr, "ERROR syncing time in VM '%s': %s" % (vm.name, str(e))
|
|
pass
|
|
|
|
# order is important!
|
|
os.unlink(lockfile_name)
|
|
lockfile.close()
|
|
|
|
main()
|
|
|