#!/bin/bash -e # vim: set ts=4 sw=4 sts=4 et : # # bind-dirs # Binds directories which allows changes in TemplateBasedVM to persist. # # To umount all bind-dirs, just pass any arg in $1, like umount # # Copyright (C) 2014 - 2015 Jason Mehring # Copyright (C) 2014 - 2015 Patrick Schleizer # License: GPL-2+ # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 # of the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program. If not, see . set -x prerequisite() { qubes_vm_persistence="$(qubesdb-read /qubes-vm-persistence)" if [ ! "$qubes_vm_persistence" = "rw-only" ]; then true "No TemplateBasedVM detected. Exiting." exit 0 fi } init() { [ -n "$rw_dest_dir" ] || rw_dest_dir="/rw/bind-dirs" mkdir --parents "$rw_dest_dir" } legacy() { if [ -d /rw/srv/qubes-whonix ]; then mv /rw/srv/qubes-whonix /rw/bind-dirs || true fi if [ -d /rw/srv/whonix ]; then mv /rw/srv/whonix /rw/bind-dirs || true fi } bind_dirs() { ## legend ## fso: file system object ## ro: read-only ## rw: read-write for fso_ro in ${binds[@]}; do fso_rw="${rw_dest_dir}${fso_ro}" # Make sure fso_ro is not mounted. umount "$fso_ro" 2> /dev/null || true if [ -n "$1" ]; then true "Umounting $1 only..." continue fi ## If $fso_ro is a symlink, see where it links to, then replace that ## symlink with the file it linked to. This is because mount does not ## following symlinks. ## For more discussion and symlink and other special files, see: ## https://phabricator.whonix.org/T414 if [ -h "$fso_ro" ]; then fso_real_location="$(realpath "$fso_ro")" unlink "$fso_ro" if [ -f "$fso_real_location" ]; then cp --archive --recursive "$fso_real_location" "$fso_ro" else true "$fso_real_location is not a file, skipping." fi fi # Initially copy over data directories to /rw if rw directory does not exist. if [ -d "$fso_ro" ]; then if [ ! -d "$fso_rw" ]; then cp --archive --recursive --parents "$fso_ro" "$rw_dest_dir" fi elif [ -f "$fso_ro" ]; then if [ ! -f "$fso_rw" ]; then cp --archive --recursive "$fso_ro" "$fso_rw" fi else true "$fso_ro does not exist, skipping." continue fi # Bind the fso. mount --bind "$fso_rw" "$fso_ro" done } main() { prerequisite ${1+"$@"} init ${1+"$@"} legacy ${1+"$@"} bind_dirs ${1+"$@"} } for source_folder in /usr/lib/qubes-bind-dirs.d /etc/qubes-bind-dirs.d /rw/config/qubes-bind-dirs.d ; do true "source_folder: $source_folder" if [ ! -d "$source_folder" ]; then continue fi for file_name in "$source_folder/"*".conf" ; do bash -n "$file_name" source "$file_name" done done main ${1+"$@"}