X-Git-Url: http://git.onelab.eu/?a=blobdiff_plain;f=src%2Fvsh.c;h=ee6ba7679cabd65eaf804a3697fb899429df9464;hb=f0dcb66045f9b148d076e3ffc190bd01441fa3dd;hp=435ea05e272fc2f03448beca8a43d712790b0c37;hpb=90a45a54b72ac11634940f452c85361d2fa167ba;p=util-vserver.git diff --git a/src/vsh.c b/src/vsh.c index 435ea05..ee6ba76 100644 --- a/src/vsh.c +++ b/src/vsh.c @@ -27,8 +27,8 @@ #include #include #include -#include #include +#include #include #include #include @@ -48,30 +48,9 @@ #undef CONFIG_VSERVER_LEGACY -/* Null byte made explicit */ -#define NULLBYTE_SIZE 1 - /* Base for all vserver roots for chroot */ #define VSERVER_ROOT_BASE "/vservers" -static int -_PERROR(const char *format, char *file, int line, int _errno, ...) -{ - va_list ap; - - va_start(ap, _errno); - fprintf(stderr, "%s:%d: ", file, line); - vfprintf(stderr, format, ap); - if (_errno) - fprintf(stderr, ": %s (%d)", strerror(_errno), _errno); - fputs("\n", stderr); - fflush(stderr); - - return _errno; -} - -#define PERROR(format, args...) _PERROR(format, __FILE__, __LINE__, errno, ## args) - /* Change to root:root (before entering new context) */ static int setuidgid_root() { @@ -200,69 +179,6 @@ static int sandbox_chroot(uid_t uid) return 0; } -#define WHITESPACE(buffer,index,len) \ - while(isspace((int)buffer[index])) \ - if (index < len) index++; else goto out; - -struct resources { - char *name; - unsigned long long *limit; -}; - -#define VSERVERCONF "/etc/vservers/" -static void get_limits(char *context, struct resources *list){ - FILE *fb; - size_t len = strlen(VSERVERCONF) + strlen(context) + strlen(".conf") + NULLBYTE_SIZE; - char *conf = (char *)malloc(len); - struct resources *r; - - sprintf(conf, "%s%s.conf", VSERVERCONF, context); - - /* open the conf file for reading */ - fb = fopen(conf,"r"); - if (fb != NULL) { - size_t index; - char *buffer = malloc(1000); - char *p; - - /* the conf file exist */ - while((p=fgets(buffer,1000-1,fb))!=NULL) { - index = 0; - len = strnlen(buffer,1000); - WHITESPACE(buffer,index,len); - if (buffer[index] == '#') - continue; - - for (r=list; r->name; r++) - if ((p=strstr(&buffer[index],r->name))!=NULL) { - /* adjust index into buffer */ - index+= (p-&buffer[index])+strlen(r->name); - - /* skip over whitespace */ - WHITESPACE(buffer,index,len); - - /* expecting to see = sign */ - if (buffer[index++]!='=') goto out; - - /* skip over whitespace */ - WHITESPACE(buffer,index,len); - - /* expecting to see a digit for number */ - if (!isdigit((int)buffer[index])) goto out; - - *r->limit = atoi(&buffer[index]); - break; - } - } - out: - free(buffer); - } else { - fprintf(stderr,"cannot open %s\n",conf); - } - free(conf); -} - - static int sandbox_processes(xid_t ctx, char *context) { #ifdef CONFIG_VSERVER_LEGACY @@ -281,31 +197,43 @@ static int sandbox_processes(xid_t ctx, char *context) exit(1); } #else - rspec_t rspec; - unsigned long long cpu = VC_LIM_KEEP; - unsigned long long mem = VC_LIM_KEEP; - unsigned long long task = VC_LIM_KEEP; - unsigned long long cpuguaranteed = 0; - struct resources list[] = - {{"MEMLIMIT", &mem}, - {"CPULIMIT", &cpu}, - {"CPUGUARANTEED", &cpuguaranteed}, - {"TASKLIMIT", &task}, - {0,0}}; - - get_limits(context,list); + int ctx_is_new; + struct sliver_resources slr; + char hostname[HOST_NAME_MAX+1]; + pl_get_limits(context,&slr); + + if (gethostname(hostname, sizeof hostname) == -1) + { + PERROR("gethostname(...)"); + exit(1); + } + + /* check whether the slice has been taken off of the whitelist */ + if (slr.vs_whitelisted==0) + { + fprintf(stderr, "*** %s: %s has not been allocated resources on this node ***\n", hostname, context); + exit(0); + } + + /* check whether the slice has been suspended */ + if (slr.vs_cpu==0) + { + fprintf(stderr, "*** %s: %s has zero cpu resources and presumably it has been disabled/suspended ***\n", hostname, context); + exit(0); + } + (void) (sandbox_chroot(ctx)); - rspec.cpu_share = cpu; - rspec.cpu_sched_flags = (VC_VXF_SCHED_HARD | - (cpuguaranteed ? 0 : VC_VXF_SCHED_SHARE)); - rspec.mem_limit = mem; - rspec.task_limit = task; - if (pl_chcontext(ctx, 0, ~vc_get_insecurebcaps(), &rspec)) + if ((ctx_is_new = pl_chcontext(ctx, ~vc_get_insecurebcaps(),&slr)) < 0) { PERROR("pl_chcontext(%u)", ctx); exit(1); } + if (ctx_is_new) + { + pl_set_limits(ctx,&slr); + pl_setup_done(ctx); + } #endif return 0; }