#!/bin/bash # # useradd(8) wrapper for vservers # # Mark Huang # Copyright (C) 2004-2006 The Trustees of Princeton University # # $Id$ # : ${UTIL_VSERVER_VARS:=/usr/lib/util-vserver/util-vserver-vars} test -e "$UTIL_VSERVER_VARS" || { echo "Can not find util-vserver installation; aborting..." exit 1 } . "$UTIL_VSERVER_VARS" shopt -s nullglob # Defaults TYPE="default" usage() { TYPES= pushd "$__DEFAULT_VSERVERDIR/.vref" >/dev/null for ref in * ; do if [ -z "$TYPES" ] ; then TYPES=$ref else TYPES="$TYPES, $ref" fi done popd >/dev/null echo "Usage: vuseradd [OPTION]... [NAME]" echo " -t Reference image type ($TYPES)" exit 1 } # Get options while getopts "t:" opt ; do case $opt in t) TYPE="$OPTARG" ;; *) usage ;; esac done shift $(($OPTIND - 1)) # Get slice name [ -z "$1" ] && usage NAME=$1 # Add slices group to /etc/group if not already present groupadd slices 2>/dev/null || : # Add slice name to /etc/passwd useradd -g slices -s /bin/vsh $NAME -p '*' USERID=`id -u $NAME` GROUPID=`id -g $NAME` GROUPNAME=`id -gn $NAME` # Create /etc/vservers configuration files if [ ! -d $__CONFDIR/$NAME ] ; then # Move away the guest contents for now if [ -d $__DEFAULT_VSERVERDIR/$NAME ] ; then mkdir -p "$__DEFAULT_VSERVERDIR/.vtmp" TMP=$(mktemp -d "$__DEFAULT_VSERVERDIR/.vtmp/$NAME.XXXXXX") mv $__DEFAULT_VSERVERDIR/$NAME "$TMP" HAS_VSERVERDIR=1 else HAS_VSERVERDIR=0 fi $_VSERVER $NAME build -m skeleton --context $USERID \ --interface nodev:0.0.0.0/0 \ --flags persistent,~info_init,sched_hard RETVAL=$? DIR=$__CONFDIR/$NAME if [ $RETVAL -ne 0 ] ; then echo "Error $RETVAL building $DIR" rm -rf $DIR $__DEFAULT_VSERVERDIR/$NAME fi mkdir -p $DIR/apps/init $DIR/rlimits $DIR/sched $DIR/dlimits/0 echo default > $DIR/apps/init/mark echo 1000 > $DIR/rlimits/nproc.hard # Set persistent for the network context echo persistent > $DIR/nflags # Set up the scheduler echo 100 > $DIR/sched/interval echo 1000 > $DIR/sched/interval2 echo 0 > $DIR/sched/fill-rate echo 1 > $DIR/sched/fill-rate2 touch $DIR/sched/idle-time echo 100 > $DIR/sched/tokens echo 50 > $DIR/sched/tokens-min echo 100 > $DIR/sched/tokens-max # Set up disk limits (unlimited) echo `$_READLINK $DIR/vdir` > $DIR/dlimits/0/directory echo 2 > $DIR/dlimits/0/reserved echo -1 > $DIR/dlimits/0/inodes_total echo -1 > $DIR/dlimits/0/space_total # Disable mount namespaces touch $DIR/nonamespace # Remove the basically empty guest directory rm -rf $__DEFAULT_VSERVERDIR/$NAME # Move the guest back if [ "$HAS_VSERVERDIR" = 1 ] ; then mv "$TMP/$NAME" $__DEFAULT_VSERVERDIR/$NAME rm -rf "$TMP" fi fi if [ ! -d "$__DEFAULT_VSERVERDIR/$NAME" ] ; then # Check the cache if [ "$TYPE" = "default" ] ; then for i in "$__DEFAULT_VSERVERDIR/.vcache/"* ; do [ -d "$i" ] && mv "$i" "$__DEFAULT_VSERVERDIR/$NAME" && break done fi # Build slice from reference image if [ ! -d "$__DEFAULT_VSERVERDIR/$NAME" ] ; then REF="$__DEFAULT_VSERVERDIR/.vref/$TYPE" # Build in temporary directory mkdir -p "$__DEFAULT_VSERVERDIR/.vtmp" TMP=$(mktemp -d "$__DEFAULT_VSERVERDIR/.vtmp/$NAME.XXXXXX") "$_VCLONE" "$REF"/ "$TMP"/ RETVAL=$? # Move it to its permanent location when complete if [ $RETVAL -eq 0 ] ; then mv "$TMP" "$__DEFAULT_VSERVERDIR/$NAME" else echo "Error $RETVAL building $__DEFAULT_VSERVERDIR/$NAME" rm -rf "$TMP" $__CONFDIR/$NAME $__PKGSTATEDIR/$NAME.ctx userdel -r $NAME exit $RETVAL fi fi fi if [ -d "$__DEFAULT_VSERVERDIR/$NAME" ] ; then # Fix permissions chmod 755 "$__DEFAULT_VSERVERDIR/$NAME" # Add user in vserver $_VSERVER $NAME start --rescue sh -c \ "groupadd -g $GROUPID $GROUPNAME ; useradd -m -u $USERID -g $GROUPID -p '' $NAME" # Stop the guest (since it's persistent) $_VSERVER $NAME stop # Add an unrestricted entry to /etc/sudoers file if [ -f "$__DEFAULT_VSERVERDIR/$NAME/etc/sudoers" ] && \ ! grep -q "^$NAME" "$__DEFAULT_VSERVERDIR/$NAME/etc/sudoers" ; then echo "$NAME ALL=(ALL) ALL" >> "$__DEFAULT_VSERVERDIR/$NAME/etc/sudoers" fi cp -a /dev/fuse $__DEFAULT_VSERVERDIR/$NAME/dev/ fi exit 0