- bootcd doesn't support extended attribute bits, so "setattr --barrier

[util-vserver.git] / scripts / vcached

diff --git a/scripts/vcached b/scripts/vcached
index 67ba17f..19e0dff 100755 (executable)
--- a/scripts/vcached
+++ b/scripts/vcached
@@ -5,7 +5,8 @@
 # Description: A daemon that periodically preallocates vservers and stores
 # them in a cache.  Preallocated vservers from the cache may be then used to 
 # instantiate real vservers. Requires that /var/run/vcached.pid does not
-# exist on startup. Should start/stop/restart from /etc/init.d.
+# exist on startup. Should start/stop/restart from /etc/init.d. Can also be
+# run periodically with -s from /etc/cron.d.
 #
 # Based on work by:
 # 
@@ -16,17 +17,18 @@
 # Mark Huang <mlhuang@cs.princeton.edu>
 # Copyright (c) 2004  The Trustees of Princeton University (Trustees).
 #
-# $Id: vcached,v 1.5 2004/10/12 21:27:15 mlhuang Exp $
+# $Id: vcached,v 1.9 2004/11/23 14:47:35 mlhuang Exp $
 #
 
 # get configuration
 . /etc/vcached.conf
 
 # parse options
-while getopts 'fdl:' OPT ; do
+while getopts 'fdsl:' OPT ; do
     case "$OPT" in
         f) foreground=1 ;;
         d) debug=1 ;;
+       s) single=1 ;;
        l) exec 1>>$OPTARG ; exec 2>>$OPTARG ;;
     esac
 done
@@ -55,8 +57,10 @@ test -e "$UTIL_VSERVER_VARS" || {
 }
 . "$UTIL_VSERVER_VARS"
 
+# make sure barrier bit is set on /vservers to prevent chroot() escapes
+$PKGLIBDIR/setattr --barrier $VROOTDIR
+
 # take out the trash
-chattr -R -i "$VROOTDIR/.vtmp"
 rm -rf "$VROOTDIR/.vtmp"
 
 mkdir -p "$VROOTDIR/.vcache"
@@ -74,15 +78,25 @@ while : ; do
            RETVAL=$?
            # move it to .vcache when complete
            if [ $RETVAL -eq 0 ] ; then
+                # sanity check
+               vnewsize=$(du -s "$TMP" | awk "{ print \$1 }")
+               vrefsize=$(du -s "$VROOTDIR/vserver-reference" | awk "{ print \$1 }")
+               if [ $vnewsize -lt $vrefsize ] ; then
+                   echo "WARNING: Unexpected for 'du -s $VROOTDIR/$NAME'=$vnewsize to be less than 'du -s $VROOTDIR/vserver-reference'=$vrefsize"
+               fi
+
                mv "$TMP" "$VROOTDIR/.vcache/v$i"
                echo "$(date) v$i ready"
            else
                echo "$(date) Error $RETVAL building v$i"
-               chattr -R -i "$TMP"
                rm -rf "$TMP"
            fi
        fi
     done
+    # just run once
+    if [ $single -ne 0 ] ; then
+       break
+    fi
     [ $debug -ne 0 ] && echo "$(date) Sleeping for $period seconds"
     sleep $period
 done