226 lines
6.2 KiB
Rust
226 lines
6.2 KiB
Rust
use std::path::{Path,PathBuf};
|
|
use std::fs;
|
|
use crate::{Result,ImageHeader,MetaInfo,Mount,PublicKey,public_key_for_channel};
|
|
|
|
#[derive(Clone)]
|
|
pub struct Partition {
|
|
path: PathBuf,
|
|
hinfo: Option<HeaderInfo>,
|
|
is_mounted: bool,
|
|
}
|
|
|
|
#[derive(Clone)]
|
|
struct HeaderInfo {
|
|
header: ImageHeader,
|
|
metainfo: MetaInfo,
|
|
// None if no public key available for channel named in metainfo
|
|
pubkey: Option<PublicKey>,
|
|
}
|
|
|
|
impl Partition {
|
|
pub fn rootfs_partitions() -> Result<Vec<Partition>> {
|
|
let mut v = Vec::new();
|
|
for path in rootfs_partition_paths()? {
|
|
let partition = Partition::load(&path)?;
|
|
v.push(partition);
|
|
}
|
|
v.sort_unstable_by(|a,b| a.path().cmp(b.path()));
|
|
Ok(v)
|
|
}
|
|
|
|
fn load(dev: &Path) -> Result<Partition> {
|
|
let is_mounted = is_in_use(dev)?;
|
|
let header = Partition::load_header(dev)?;
|
|
Ok(Partition::new(dev, header, is_mounted))
|
|
}
|
|
|
|
fn load_header(dev: &Path) -> Result<Option<HeaderInfo>> {
|
|
let header = ImageHeader::from_partition(dev)?;
|
|
if !header.is_magic_valid() {
|
|
return Ok(None);
|
|
}
|
|
let metainfo = match header.metainfo() {
|
|
Ok(metainfo) => metainfo,
|
|
Err(e) => {
|
|
warn!("Reading partition {}: {}", dev.display(), e);
|
|
return Ok(None);
|
|
},
|
|
};
|
|
|
|
let pubkey = match public_key_for_channel(metainfo.channel()) {
|
|
Ok(result) => result,
|
|
Err(err) => {
|
|
warn!("Error parsing pubkey for channel '{}': {}", metainfo.channel(), err);
|
|
None
|
|
}
|
|
};
|
|
|
|
Ok(Some(HeaderInfo {
|
|
header, metainfo, pubkey,
|
|
}))
|
|
}
|
|
|
|
fn new(path: &Path, hinfo: Option<HeaderInfo>, is_mounted: bool) -> Partition {
|
|
Partition {
|
|
path: path.to_owned(),
|
|
hinfo, is_mounted,
|
|
}
|
|
}
|
|
|
|
pub fn path(&self) -> &Path {
|
|
&self.path
|
|
}
|
|
|
|
pub fn is_mounted(&self) -> bool {
|
|
self.is_mounted
|
|
}
|
|
|
|
pub fn is_initialized(&self) -> bool {
|
|
self.hinfo.is_some()
|
|
}
|
|
|
|
pub fn header(&self) -> &ImageHeader {
|
|
assert!(self.is_initialized());
|
|
&self.hinfo.as_ref().unwrap().header
|
|
}
|
|
|
|
fn header_mut(&mut self) -> &mut ImageHeader {
|
|
assert!(self.is_initialized());
|
|
&mut self.hinfo.as_mut().unwrap().header
|
|
}
|
|
|
|
pub fn metainfo(&self) -> &MetaInfo {
|
|
assert!(self.is_initialized());
|
|
&self.hinfo.as_ref().unwrap().metainfo
|
|
}
|
|
|
|
pub fn is_new(&self) -> bool {
|
|
self.header().status() == ImageHeader::STATUS_NEW
|
|
}
|
|
|
|
pub fn is_good(&self) -> bool {
|
|
self.header().status() == ImageHeader::STATUS_GOOD
|
|
}
|
|
|
|
pub fn is_preferred(&self) -> bool {
|
|
self.header().has_flag(ImageHeader::FLAG_PREFER_BOOT)
|
|
}
|
|
|
|
pub fn is_sig_failed(&self) -> bool {
|
|
self.header().status() == ImageHeader::STATUS_BAD_SIG
|
|
}
|
|
|
|
pub fn is_signature_valid(&self) -> bool {
|
|
if let Some(ref hinfo) = self.hinfo {
|
|
if let Some(ref pubkey) = hinfo.pubkey {
|
|
return pubkey.verify(
|
|
&self.header().metainfo_bytes(),
|
|
&self.header().signature())
|
|
|
|
}
|
|
}
|
|
false
|
|
}
|
|
|
|
pub fn has_public_key(&self) -> bool {
|
|
if let Some(ref h) = self.hinfo {
|
|
h.pubkey.is_some()
|
|
} else {
|
|
false
|
|
}
|
|
}
|
|
|
|
pub fn write_status(&mut self, status: u8) -> Result<()> {
|
|
self.header_mut().set_status(status);
|
|
self.header().write_partition(&self.path)
|
|
}
|
|
|
|
pub fn set_flag_and_write(&mut self, flag: u8) -> Result<()> {
|
|
self.header_mut().set_flag(flag);
|
|
self.header().write_partition(&self.path)
|
|
}
|
|
|
|
pub fn clear_flag_and_write(&mut self, flag: u8) -> Result<()> {
|
|
self.header_mut().clear_flag(flag);
|
|
self.header().write_partition(&self.path)
|
|
}
|
|
|
|
/// Called at boot to perform various checks and possibly
|
|
/// update the status field to an error state.
|
|
///
|
|
/// Mark `STATUS_TRY_BOOT` partition as `STATUS_FAILED`.
|
|
///
|
|
/// If a partition that had prior signature failure now
|
|
/// has a valid signature set to STATUS_NEW
|
|
///
|
|
pub fn boot_scan(&mut self) -> Result<()> {
|
|
if !self.is_initialized() {
|
|
return Ok(())
|
|
}
|
|
if self.header().status() == ImageHeader::STATUS_TRY_BOOT {
|
|
warn!("Partition {} has STATUS_TRY_BOOT, assuming it failed boot attempt and marking STATUS_FAILED", self.path().display());
|
|
self.write_status(ImageHeader::STATUS_FAILED)?;
|
|
}
|
|
if self.is_sig_failed() && self.is_signature_valid() {
|
|
self.write_status(ImageHeader::STATUS_NEW)?;
|
|
}
|
|
Ok(())
|
|
}
|
|
}
|
|
|
|
fn is_in_use(path: &Path) -> Result<bool> {
|
|
if Mount::is_path_mounted(path)? {
|
|
return Ok(true);
|
|
}
|
|
let holders = count_block_holders(path)?;
|
|
Ok(holders > 0)
|
|
}
|
|
|
|
//
|
|
// Resolve /dev/mapper/citadel-rootfsX symlink to actual device name
|
|
// and then inspect directory /sys/block/${DEV}/holders and return
|
|
// the number of entries this directory contains. If this directory
|
|
// is not empty then device belongs to another device mapping.
|
|
//
|
|
fn count_block_holders(path: &Path) -> Result<usize> {
|
|
if !path.exists() {
|
|
bail!("Path to rootfs device does not exist: {}", path.display());
|
|
}
|
|
let resolved = fs::canonicalize(path)?;
|
|
let fname = match resolved.file_name() {
|
|
Some(s) => s,
|
|
None => bail!("path does not have filename?"),
|
|
};
|
|
let holders_dir =
|
|
Path::new("/sys/block")
|
|
.join(fname)
|
|
.join("holders");
|
|
let count = fs::read_dir(holders_dir)?.count();
|
|
Ok(count)
|
|
}
|
|
|
|
fn rootfs_partition_paths() -> Result<Vec<PathBuf>> {
|
|
let mut rootfs_paths = Vec::new();
|
|
for dent in fs::read_dir("/dev/mapper")? {
|
|
let path = dent?.path();
|
|
if is_path_rootfs(&path) {
|
|
rootfs_paths.push(path);
|
|
}
|
|
}
|
|
Ok(rootfs_paths)
|
|
}
|
|
|
|
fn is_path_rootfs(path: &Path) -> bool {
|
|
path_filename(path).starts_with("citadel-rootfs")
|
|
}
|
|
|
|
fn path_filename(path: &Path) -> &str {
|
|
if let Some(osstr) = path.file_name() {
|
|
if let Some(name) = osstr.to_str() {
|
|
return name;
|
|
}
|
|
}
|
|
""
|
|
}
|
|
|