17c478bd9Sstevel@tonic-gate /* 27c478bd9Sstevel@tonic-gate * CDDL HEADER START 37c478bd9Sstevel@tonic-gate * 47c478bd9Sstevel@tonic-gate * The contents of this file are subject to the terms of the 5ffbafc53Scomay * Common Development and Distribution License (the "License"). 6ffbafc53Scomay * You may not use this file except in compliance with the License. 77c478bd9Sstevel@tonic-gate * 87c478bd9Sstevel@tonic-gate * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 97c478bd9Sstevel@tonic-gate * or http://www.opensolaris.org/os/licensing. 107c478bd9Sstevel@tonic-gate * See the License for the specific language governing permissions 117c478bd9Sstevel@tonic-gate * and limitations under the License. 127c478bd9Sstevel@tonic-gate * 137c478bd9Sstevel@tonic-gate * When distributing Covered Code, include this CDDL HEADER in each 147c478bd9Sstevel@tonic-gate * file and include the License file at usr/src/OPENSOLARIS.LICENSE. 157c478bd9Sstevel@tonic-gate * If applicable, add the following below this CDDL HEADER, with the 167c478bd9Sstevel@tonic-gate * fields enclosed by brackets "[]" replaced with your own identifying 177c478bd9Sstevel@tonic-gate * information: Portions Copyright [yyyy] [name of copyright owner] 187c478bd9Sstevel@tonic-gate * 197c478bd9Sstevel@tonic-gate * CDDL HEADER END 207c478bd9Sstevel@tonic-gate */ 21ffbafc53Scomay 227c478bd9Sstevel@tonic-gate /* 23*9d5056eaSjv227347 * Copyright 2009 Sun Microsystems, Inc. All rights reserved. 247c478bd9Sstevel@tonic-gate * Use is subject to license terms. 257c478bd9Sstevel@tonic-gate */ 267c478bd9Sstevel@tonic-gate 277c478bd9Sstevel@tonic-gate /* 287c478bd9Sstevel@tonic-gate * Console support for zones requires a significant infrastructure. The 297c478bd9Sstevel@tonic-gate * core pieces are contained in this file, but other portions of note 307c478bd9Sstevel@tonic-gate * are in the zlogin(1M) command, the zcons(7D) driver, and in the 317c478bd9Sstevel@tonic-gate * devfsadm(1M) misc_link generator. 327c478bd9Sstevel@tonic-gate * 337c478bd9Sstevel@tonic-gate * Care is taken to make the console behave in an "intuitive" fashion for 347c478bd9Sstevel@tonic-gate * administrators. Essentially, we try as much as possible to mimic the 357c478bd9Sstevel@tonic-gate * experience of using a system via a tip line and system controller. 367c478bd9Sstevel@tonic-gate * 377c478bd9Sstevel@tonic-gate * The zone console architecture looks like this: 387c478bd9Sstevel@tonic-gate * 397c478bd9Sstevel@tonic-gate * Global Zone | Non-Global Zone 407c478bd9Sstevel@tonic-gate * .--------------. | 417c478bd9Sstevel@tonic-gate * .-----------. | zoneadmd -z | | .--------. .---------. 427c478bd9Sstevel@tonic-gate * | zlogin -C | | myzone | | | ttymon | | syslogd | 437c478bd9Sstevel@tonic-gate * `-----------' `--------------' | `--------' `---------' 447c478bd9Sstevel@tonic-gate * | | | | | | | 457c478bd9Sstevel@tonic-gate * User | | | | | V V 467c478bd9Sstevel@tonic-gate * - - - - - - - - -|- - - -|- - - -|-|- - - - - - -|- - /dev/zconsole - - - 477c478bd9Sstevel@tonic-gate * Kernel V V | | | 487c478bd9Sstevel@tonic-gate * [AF_UNIX Socket] | `--------. .-------------' 497c478bd9Sstevel@tonic-gate * | | | 507c478bd9Sstevel@tonic-gate * | V V 517c478bd9Sstevel@tonic-gate * | +-----------+ 527c478bd9Sstevel@tonic-gate * | | ldterm, | 537c478bd9Sstevel@tonic-gate * | | etc. | 547c478bd9Sstevel@tonic-gate * | +-----------+ 557c478bd9Sstevel@tonic-gate * | +-[Anchor]--+ 567c478bd9Sstevel@tonic-gate * | | ptem | 577c478bd9Sstevel@tonic-gate * V +-----------+ 587c478bd9Sstevel@tonic-gate * +---master---+---slave---+ 597c478bd9Sstevel@tonic-gate * | | 607c478bd9Sstevel@tonic-gate * | zcons driver | 617c478bd9Sstevel@tonic-gate * | zonename="myzone" | 627c478bd9Sstevel@tonic-gate * +------------------------+ 637c478bd9Sstevel@tonic-gate * 64*9d5056eaSjv227347 * There are basically two major tasks which the console subsystem in 657c478bd9Sstevel@tonic-gate * zoneadmd accomplishes: 667c478bd9Sstevel@tonic-gate * 677c478bd9Sstevel@tonic-gate * - Setup and teardown of zcons driver instances. One zcons instance 687c478bd9Sstevel@tonic-gate * is maintained per zone; we take advantage of the libdevice APIs 697c478bd9Sstevel@tonic-gate * to online new instances of zcons as needed. Care is taken to 707c478bd9Sstevel@tonic-gate * prune and manage these appropriately; see init_console_dev() and 717c478bd9Sstevel@tonic-gate * destroy_console_dev(). The end result is the creation of the 727c478bd9Sstevel@tonic-gate * zcons(7D) instance and an open file descriptor to the master side. 737c478bd9Sstevel@tonic-gate * zcons instances are associated with zones via their zonename device 747c478bd9Sstevel@tonic-gate * property. This the console instance to persist across reboots, 757c478bd9Sstevel@tonic-gate * and while the zone is halted. 767c478bd9Sstevel@tonic-gate * 777c478bd9Sstevel@tonic-gate * - Acting as a server for 'zlogin -C' instances. When zlogin -C is 787c478bd9Sstevel@tonic-gate * run, zlogin connects to zoneadmd via unix domain socket. zoneadmd 797c478bd9Sstevel@tonic-gate * functions as a two-way proxy for console I/O, relaying user input 807c478bd9Sstevel@tonic-gate * to the master side of the console, and relaying output from the 817c478bd9Sstevel@tonic-gate * zone to the user. 827c478bd9Sstevel@tonic-gate */ 837c478bd9Sstevel@tonic-gate 847c478bd9Sstevel@tonic-gate #include <sys/types.h> 857c478bd9Sstevel@tonic-gate #include <sys/socket.h> 867c478bd9Sstevel@tonic-gate #include <sys/stat.h> 877c478bd9Sstevel@tonic-gate #include <sys/termios.h> 887c478bd9Sstevel@tonic-gate #include <sys/zcons.h> 89facf4a8dSllai1 #include <sys/mkdev.h> 907c478bd9Sstevel@tonic-gate 917c478bd9Sstevel@tonic-gate #include <assert.h> 927c478bd9Sstevel@tonic-gate #include <ctype.h> 937c478bd9Sstevel@tonic-gate #include <errno.h> 947c478bd9Sstevel@tonic-gate #include <fcntl.h> 957c478bd9Sstevel@tonic-gate #include <stdarg.h> 967c478bd9Sstevel@tonic-gate #include <stdio.h> 977c478bd9Sstevel@tonic-gate #include <stdlib.h> 987c478bd9Sstevel@tonic-gate #include <strings.h> 997c478bd9Sstevel@tonic-gate #include <stropts.h> 1007c478bd9Sstevel@tonic-gate #include <thread.h> 1017c478bd9Sstevel@tonic-gate #include <ucred.h> 1027c478bd9Sstevel@tonic-gate #include <unistd.h> 1037c478bd9Sstevel@tonic-gate #include <zone.h> 1047c478bd9Sstevel@tonic-gate 1057c478bd9Sstevel@tonic-gate #include <libdevinfo.h> 1067c478bd9Sstevel@tonic-gate #include <libdevice.h> 1077c478bd9Sstevel@tonic-gate #include <libzonecfg.h> 1087c478bd9Sstevel@tonic-gate 1097c478bd9Sstevel@tonic-gate #include <syslog.h> 110facf4a8dSllai1 #include <sys/modctl.h> 111facf4a8dSllai1 #include <sys/fs/sdev_node.h> 1127c478bd9Sstevel@tonic-gate 1137c478bd9Sstevel@tonic-gate #include "zoneadmd.h" 1147c478bd9Sstevel@tonic-gate 1157c478bd9Sstevel@tonic-gate #define ZCONSNEX_DEVTREEPATH "/pseudo/zconsnex@1" 1167c478bd9Sstevel@tonic-gate #define ZCONSNEX_FILEPATH "/devices/pseudo/zconsnex@1" 1177c478bd9Sstevel@tonic-gate 1187c478bd9Sstevel@tonic-gate #define CONSOLE_SOCKPATH ZONES_TMPDIR "/%s.console_sock" 1197c478bd9Sstevel@tonic-gate 1207c478bd9Sstevel@tonic-gate static int serverfd = -1; /* console server unix domain socket fd */ 1213f2f09c1Sdp char boot_args[BOOTARGS_MAX]; 1223f2f09c1Sdp char bad_boot_arg[BOOTARGS_MAX]; 1237c478bd9Sstevel@tonic-gate 1247c478bd9Sstevel@tonic-gate /* 1257c478bd9Sstevel@tonic-gate * The eventstream is a simple one-directional flow of messages from the 1267c478bd9Sstevel@tonic-gate * door server to the console subsystem, implemented with a pipe. 1277c478bd9Sstevel@tonic-gate * It is used to wake up the console poller when it needs to take action, 1287c478bd9Sstevel@tonic-gate * message the user, die off, etc. 1297c478bd9Sstevel@tonic-gate */ 1307c478bd9Sstevel@tonic-gate static int eventstream[2]; 1317c478bd9Sstevel@tonic-gate 1323f2f09c1Sdp 1333f2f09c1Sdp 1347c478bd9Sstevel@tonic-gate int 1357c478bd9Sstevel@tonic-gate eventstream_init() 1367c478bd9Sstevel@tonic-gate { 1377c478bd9Sstevel@tonic-gate if (pipe(eventstream) == -1) 1387c478bd9Sstevel@tonic-gate return (-1); 1397c478bd9Sstevel@tonic-gate return (0); 1407c478bd9Sstevel@tonic-gate } 1417c478bd9Sstevel@tonic-gate 1427c478bd9Sstevel@tonic-gate void 1437c478bd9Sstevel@tonic-gate eventstream_write(zone_evt_t evt) 1447c478bd9Sstevel@tonic-gate { 1457c478bd9Sstevel@tonic-gate (void) write(eventstream[0], &evt, sizeof (evt)); 1467c478bd9Sstevel@tonic-gate } 1477c478bd9Sstevel@tonic-gate 1487c478bd9Sstevel@tonic-gate static zone_evt_t 1497c478bd9Sstevel@tonic-gate eventstream_read(void) 1507c478bd9Sstevel@tonic-gate { 1517c478bd9Sstevel@tonic-gate zone_evt_t evt = Z_EVT_NULL; 1527c478bd9Sstevel@tonic-gate 1537c478bd9Sstevel@tonic-gate (void) read(eventstream[1], &evt, sizeof (evt)); 1547c478bd9Sstevel@tonic-gate return (evt); 1557c478bd9Sstevel@tonic-gate } 1567c478bd9Sstevel@tonic-gate 1577c478bd9Sstevel@tonic-gate /* 1587c478bd9Sstevel@tonic-gate * count_console_devs() and its helper count_cb() do a walk of the 1597c478bd9Sstevel@tonic-gate * subtree of the device tree where zone console nodes are represented. 1607c478bd9Sstevel@tonic-gate * The goal is to count zone console instances already setup for a zone 1617c478bd9Sstevel@tonic-gate * with the given name. More than 1 is anomolous, and our caller will 1627c478bd9Sstevel@tonic-gate * have to deal with that if we find that's the case. 1637c478bd9Sstevel@tonic-gate * 1647c478bd9Sstevel@tonic-gate * Note: this algorithm is a linear search of nodes in the zconsnex subtree 1657c478bd9Sstevel@tonic-gate * of the device tree, and could be a scalability problem, but I don't see 1667c478bd9Sstevel@tonic-gate * how to avoid it. 1677c478bd9Sstevel@tonic-gate */ 1687c478bd9Sstevel@tonic-gate 1697c478bd9Sstevel@tonic-gate /* 1707c478bd9Sstevel@tonic-gate * cb_data is shared by count_cb and destroy_cb for simplicity. 1717c478bd9Sstevel@tonic-gate */ 1727c478bd9Sstevel@tonic-gate struct cb_data { 1737c478bd9Sstevel@tonic-gate zlog_t *zlogp; 1747c478bd9Sstevel@tonic-gate int found; 1757c478bd9Sstevel@tonic-gate int killed; 1767c478bd9Sstevel@tonic-gate }; 1777c478bd9Sstevel@tonic-gate 1787c478bd9Sstevel@tonic-gate static int 1797c478bd9Sstevel@tonic-gate count_cb(di_node_t node, void *arg) 1807c478bd9Sstevel@tonic-gate { 1817c478bd9Sstevel@tonic-gate struct cb_data *cb = (struct cb_data *)arg; 1827c478bd9Sstevel@tonic-gate char *prop_data; 1837c478bd9Sstevel@tonic-gate 1847c478bd9Sstevel@tonic-gate if (di_prop_lookup_strings(DDI_DEV_T_ANY, node, "zonename", 1857c478bd9Sstevel@tonic-gate &prop_data) != -1) { 1867c478bd9Sstevel@tonic-gate assert(prop_data != NULL); 1877c478bd9Sstevel@tonic-gate if (strcmp(prop_data, zone_name) == 0) { 1887c478bd9Sstevel@tonic-gate cb->found++; 1897c478bd9Sstevel@tonic-gate return (DI_WALK_CONTINUE); 1907c478bd9Sstevel@tonic-gate } 1917c478bd9Sstevel@tonic-gate } 1927c478bd9Sstevel@tonic-gate return (DI_WALK_CONTINUE); 1937c478bd9Sstevel@tonic-gate } 1947c478bd9Sstevel@tonic-gate 1957c478bd9Sstevel@tonic-gate static int 1967c478bd9Sstevel@tonic-gate count_console_devs(zlog_t *zlogp) 1977c478bd9Sstevel@tonic-gate { 1987c478bd9Sstevel@tonic-gate di_node_t root; 1997c478bd9Sstevel@tonic-gate struct cb_data cb; 2007c478bd9Sstevel@tonic-gate 2017c478bd9Sstevel@tonic-gate bzero(&cb, sizeof (cb)); 2027c478bd9Sstevel@tonic-gate cb.zlogp = zlogp; 2037c478bd9Sstevel@tonic-gate 2047c478bd9Sstevel@tonic-gate if ((root = di_init(ZCONSNEX_DEVTREEPATH, DINFOCPYALL)) == 2057c478bd9Sstevel@tonic-gate DI_NODE_NIL) { 2067c478bd9Sstevel@tonic-gate zerror(zlogp, B_TRUE, "%s failed", "di_init"); 2077c478bd9Sstevel@tonic-gate return (-1); 2087c478bd9Sstevel@tonic-gate } 2097c478bd9Sstevel@tonic-gate 2107c478bd9Sstevel@tonic-gate (void) di_walk_node(root, DI_WALK_CLDFIRST, (void *)&cb, count_cb); 2117c478bd9Sstevel@tonic-gate di_fini(root); 2127c478bd9Sstevel@tonic-gate return (cb.found); 2137c478bd9Sstevel@tonic-gate } 2147c478bd9Sstevel@tonic-gate 2157c478bd9Sstevel@tonic-gate /* 2167c478bd9Sstevel@tonic-gate * destroy_console_devs() and its helper destroy_cb() tears down any console 2177c478bd9Sstevel@tonic-gate * instances associated with this zone. If things went very wrong, we 2187c478bd9Sstevel@tonic-gate * might have more than one console instance hanging around. This routine 2197c478bd9Sstevel@tonic-gate * hunts down and tries to remove all of them. Of course, if the console 2207c478bd9Sstevel@tonic-gate * is open, the instance will not detach, which is a potential issue. 2217c478bd9Sstevel@tonic-gate */ 2227c478bd9Sstevel@tonic-gate static int 2237c478bd9Sstevel@tonic-gate destroy_cb(di_node_t node, void *arg) 2247c478bd9Sstevel@tonic-gate { 2257c478bd9Sstevel@tonic-gate struct cb_data *cb = (struct cb_data *)arg; 2267c478bd9Sstevel@tonic-gate char *prop_data; 2277c478bd9Sstevel@tonic-gate char *tmp; 2287c478bd9Sstevel@tonic-gate char devpath[MAXPATHLEN]; 2297c478bd9Sstevel@tonic-gate devctl_hdl_t hdl; 2307c478bd9Sstevel@tonic-gate 2317c478bd9Sstevel@tonic-gate if (di_prop_lookup_strings(DDI_DEV_T_ANY, node, "zonename", 2327c478bd9Sstevel@tonic-gate &prop_data) == -1) 2337c478bd9Sstevel@tonic-gate return (DI_WALK_CONTINUE); 2347c478bd9Sstevel@tonic-gate 2357c478bd9Sstevel@tonic-gate assert(prop_data != NULL); 2367c478bd9Sstevel@tonic-gate if (strcmp(prop_data, zone_name) != 0) { 2377c478bd9Sstevel@tonic-gate /* this is the console for a different zone */ 2387c478bd9Sstevel@tonic-gate return (DI_WALK_CONTINUE); 2397c478bd9Sstevel@tonic-gate } 2407c478bd9Sstevel@tonic-gate 2417c478bd9Sstevel@tonic-gate cb->found++; 2427c478bd9Sstevel@tonic-gate tmp = di_devfs_path(node); 2437c478bd9Sstevel@tonic-gate (void) snprintf(devpath, sizeof (devpath), "/devices/%s", tmp); 2447c478bd9Sstevel@tonic-gate di_devfs_path_free(tmp); 2457c478bd9Sstevel@tonic-gate 2467c478bd9Sstevel@tonic-gate if ((hdl = devctl_device_acquire(devpath, 0)) == NULL) { 2477c478bd9Sstevel@tonic-gate zerror(cb->zlogp, B_TRUE, "WARNING: console %s found, " 2487c478bd9Sstevel@tonic-gate "but it could not be controlled.", devpath); 2497c478bd9Sstevel@tonic-gate return (DI_WALK_CONTINUE); 2507c478bd9Sstevel@tonic-gate } 2517c478bd9Sstevel@tonic-gate if (devctl_device_remove(hdl) == 0) { 2527c478bd9Sstevel@tonic-gate cb->killed++; 2537c478bd9Sstevel@tonic-gate } else { 2547c478bd9Sstevel@tonic-gate zerror(cb->zlogp, B_TRUE, "WARNING: console %s found, " 2557c478bd9Sstevel@tonic-gate "but it could not be removed.", devpath); 2567c478bd9Sstevel@tonic-gate } 2577c478bd9Sstevel@tonic-gate devctl_release(hdl); 2587c478bd9Sstevel@tonic-gate return (DI_WALK_CONTINUE); 2597c478bd9Sstevel@tonic-gate } 2607c478bd9Sstevel@tonic-gate 2617c478bd9Sstevel@tonic-gate static int 2627c478bd9Sstevel@tonic-gate destroy_console_devs(zlog_t *zlogp) 2637c478bd9Sstevel@tonic-gate { 264*9d5056eaSjv227347 char conspath[MAXPATHLEN]; 2657c478bd9Sstevel@tonic-gate di_node_t root; 2667c478bd9Sstevel@tonic-gate struct cb_data cb; 267*9d5056eaSjv227347 int masterfd; 268*9d5056eaSjv227347 int slavefd; 269*9d5056eaSjv227347 270*9d5056eaSjv227347 /* 271*9d5056eaSjv227347 * Signal the master side to release its handle on the slave side by 272*9d5056eaSjv227347 * issuing a ZC_RELEASESLAVE ioctl. 273*9d5056eaSjv227347 */ 274*9d5056eaSjv227347 (void) snprintf(conspath, sizeof (conspath), "/dev/zcons/%s/%s", 275*9d5056eaSjv227347 zone_name, ZCONS_MASTER_NAME); 276*9d5056eaSjv227347 if ((masterfd = open(conspath, O_RDWR | O_NOCTTY)) != -1) { 277*9d5056eaSjv227347 (void) snprintf(conspath, sizeof (conspath), "/dev/zcons/%s/%s", 278*9d5056eaSjv227347 zone_name, ZCONS_SLAVE_NAME); 279*9d5056eaSjv227347 if ((slavefd = open(conspath, O_RDWR | O_NOCTTY)) != -1) { 280*9d5056eaSjv227347 if (ioctl(masterfd, ZC_RELEASESLAVE, 281*9d5056eaSjv227347 (caddr_t)(intptr_t)slavefd) != 0) 282*9d5056eaSjv227347 zerror(zlogp, B_TRUE, "WARNING: error while " 283*9d5056eaSjv227347 "releasing slave handle of zone console for" 284*9d5056eaSjv227347 " %s", zone_name); 285*9d5056eaSjv227347 (void) close(slavefd); 286*9d5056eaSjv227347 } else { 287*9d5056eaSjv227347 zerror(zlogp, B_TRUE, "WARNING: could not open slave " 288*9d5056eaSjv227347 "side of zone console for %s to release slave " 289*9d5056eaSjv227347 "handle", zone_name); 290*9d5056eaSjv227347 } 291*9d5056eaSjv227347 (void) close(masterfd); 292*9d5056eaSjv227347 } else { 293*9d5056eaSjv227347 zerror(zlogp, B_TRUE, "WARNING: could not open master side of " 294*9d5056eaSjv227347 "zone console for %s to release slave handle", zone_name); 295*9d5056eaSjv227347 } 2967c478bd9Sstevel@tonic-gate 2977c478bd9Sstevel@tonic-gate bzero(&cb, sizeof (cb)); 2987c478bd9Sstevel@tonic-gate cb.zlogp = zlogp; 2997c478bd9Sstevel@tonic-gate 3007c478bd9Sstevel@tonic-gate if ((root = di_init(ZCONSNEX_DEVTREEPATH, DINFOCPYALL)) == 3017c478bd9Sstevel@tonic-gate DI_NODE_NIL) { 3027c478bd9Sstevel@tonic-gate zerror(zlogp, B_TRUE, "%s failed", "di_init"); 3037c478bd9Sstevel@tonic-gate return (-1); 3047c478bd9Sstevel@tonic-gate } 3057c478bd9Sstevel@tonic-gate 3067c478bd9Sstevel@tonic-gate (void) di_walk_node(root, DI_WALK_CLDFIRST, (void *)&cb, destroy_cb); 3077c478bd9Sstevel@tonic-gate if (cb.found > 1) { 3087c478bd9Sstevel@tonic-gate zerror(zlogp, B_FALSE, "WARNING: multiple zone console " 3097c478bd9Sstevel@tonic-gate "instances detected for zone '%s'; %d of %d " 3107c478bd9Sstevel@tonic-gate "successfully removed.", 3117c478bd9Sstevel@tonic-gate zone_name, cb.killed, cb.found); 3127c478bd9Sstevel@tonic-gate } 3137c478bd9Sstevel@tonic-gate 3147c478bd9Sstevel@tonic-gate di_fini(root); 3157c478bd9Sstevel@tonic-gate return (0); 3167c478bd9Sstevel@tonic-gate } 3177c478bd9Sstevel@tonic-gate 3187c478bd9Sstevel@tonic-gate /* 3197c478bd9Sstevel@tonic-gate * init_console_dev() drives the device-tree configuration of the zone 3207c478bd9Sstevel@tonic-gate * console device. The general strategy is to use the libdevice (devctl) 3217c478bd9Sstevel@tonic-gate * interfaces to instantiate a new zone console node. We do a lot of 3227c478bd9Sstevel@tonic-gate * sanity checking, and are careful to reuse a console if one exists. 3237c478bd9Sstevel@tonic-gate * 3247c478bd9Sstevel@tonic-gate * Once the device is in the device tree, we kick devfsadm via di_init_devs() 3257c478bd9Sstevel@tonic-gate * to ensure that the appropriate symlinks (to the master and slave console 3267c478bd9Sstevel@tonic-gate * devices) are placed in /dev in the global zone. 3277c478bd9Sstevel@tonic-gate */ 3287c478bd9Sstevel@tonic-gate static int 3297c478bd9Sstevel@tonic-gate init_console_dev(zlog_t *zlogp) 3307c478bd9Sstevel@tonic-gate { 331*9d5056eaSjv227347 char conspath[MAXPATHLEN]; 332*9d5056eaSjv227347 devctl_hdl_t bus_hdl = NULL; 333*9d5056eaSjv227347 devctl_hdl_t dev_hdl = NULL; 3347c478bd9Sstevel@tonic-gate devctl_ddef_t ddef_hdl = NULL; 3357c478bd9Sstevel@tonic-gate di_devlink_handle_t dl = NULL; 336*9d5056eaSjv227347 int rv = -1; 337*9d5056eaSjv227347 int ndevs; 338*9d5056eaSjv227347 int masterfd; 339*9d5056eaSjv227347 int slavefd; 3407c478bd9Sstevel@tonic-gate 3417c478bd9Sstevel@tonic-gate /* 3427c478bd9Sstevel@tonic-gate * Don't re-setup console if it is working and ready already; just 3437c478bd9Sstevel@tonic-gate * skip ahead to making devlinks, which we do for sanity's sake. 3447c478bd9Sstevel@tonic-gate */ 3457c478bd9Sstevel@tonic-gate ndevs = count_console_devs(zlogp); 3467c478bd9Sstevel@tonic-gate if (ndevs == 1) { 3477c478bd9Sstevel@tonic-gate goto devlinks; 3487c478bd9Sstevel@tonic-gate } else if (ndevs > 1 || ndevs == -1) { 3497c478bd9Sstevel@tonic-gate /* 3507c478bd9Sstevel@tonic-gate * For now, this seems like a reasonable but harsh punishment. 3517c478bd9Sstevel@tonic-gate * If needed, we could try to get clever and delete all but 3527c478bd9Sstevel@tonic-gate * the console which is pointed at by the current symlink. 3537c478bd9Sstevel@tonic-gate */ 3547c478bd9Sstevel@tonic-gate if (destroy_console_devs(zlogp) == -1) { 3557c478bd9Sstevel@tonic-gate goto error; 3567c478bd9Sstevel@tonic-gate } 3577c478bd9Sstevel@tonic-gate } 3587c478bd9Sstevel@tonic-gate 3597c478bd9Sstevel@tonic-gate /* 3607c478bd9Sstevel@tonic-gate * Time to make the consoles! 3617c478bd9Sstevel@tonic-gate */ 3627c478bd9Sstevel@tonic-gate if ((bus_hdl = devctl_bus_acquire(ZCONSNEX_FILEPATH, 0)) == NULL) { 3637c478bd9Sstevel@tonic-gate zerror(zlogp, B_TRUE, "%s failed", "devctl_bus_acquire"); 3647c478bd9Sstevel@tonic-gate goto error; 3657c478bd9Sstevel@tonic-gate } 3667c478bd9Sstevel@tonic-gate if ((ddef_hdl = devctl_ddef_alloc("zcons", 0)) == NULL) { 3677c478bd9Sstevel@tonic-gate zerror(zlogp, B_TRUE, "failed to allocate ddef handle"); 3687c478bd9Sstevel@tonic-gate goto error; 3697c478bd9Sstevel@tonic-gate } 3707c478bd9Sstevel@tonic-gate /* 3717c478bd9Sstevel@tonic-gate * Set three properties on this node; the first is the name of the 3727c478bd9Sstevel@tonic-gate * zone; the second is a flag which lets pseudo know that it is 3737c478bd9Sstevel@tonic-gate * OK to automatically allocate an instance # for this device; 3747c478bd9Sstevel@tonic-gate * the third tells the device framework not to auto-detach this 3757c478bd9Sstevel@tonic-gate * node-- we need the node to still be there when we ask devfsadmd 3767c478bd9Sstevel@tonic-gate * to make links, and when we need to open it. 3777c478bd9Sstevel@tonic-gate */ 3787c478bd9Sstevel@tonic-gate if (devctl_ddef_string(ddef_hdl, "zonename", zone_name) == -1) { 3797c478bd9Sstevel@tonic-gate zerror(zlogp, B_TRUE, "failed to create zonename property"); 3807c478bd9Sstevel@tonic-gate goto error; 3817c478bd9Sstevel@tonic-gate } 3827c478bd9Sstevel@tonic-gate if (devctl_ddef_int(ddef_hdl, "auto-assign-instance", 1) == -1) { 3837c478bd9Sstevel@tonic-gate zerror(zlogp, B_TRUE, "failed to create auto-assign-instance " 3847c478bd9Sstevel@tonic-gate "property"); 3857c478bd9Sstevel@tonic-gate goto error; 3867c478bd9Sstevel@tonic-gate } 3877c478bd9Sstevel@tonic-gate if (devctl_ddef_int(ddef_hdl, "ddi-no-autodetach", 1) == -1) { 3887c478bd9Sstevel@tonic-gate zerror(zlogp, B_TRUE, "failed to create ddi-no-auto-detach " 3897c478bd9Sstevel@tonic-gate "property"); 3907c478bd9Sstevel@tonic-gate goto error; 3917c478bd9Sstevel@tonic-gate } 3927c478bd9Sstevel@tonic-gate if (devctl_bus_dev_create(bus_hdl, ddef_hdl, 0, &dev_hdl) == -1) { 3937c478bd9Sstevel@tonic-gate zerror(zlogp, B_TRUE, "failed to create console node"); 3947c478bd9Sstevel@tonic-gate goto error; 3957c478bd9Sstevel@tonic-gate } 3967c478bd9Sstevel@tonic-gate 3977c478bd9Sstevel@tonic-gate devlinks: 3987c478bd9Sstevel@tonic-gate if ((dl = di_devlink_init("zcons", DI_MAKE_LINK)) != NULL) { 3997c478bd9Sstevel@tonic-gate (void) di_devlink_fini(&dl); 4007c478bd9Sstevel@tonic-gate } else { 4017c478bd9Sstevel@tonic-gate zerror(zlogp, B_TRUE, "failed to create devlinks"); 4027c478bd9Sstevel@tonic-gate goto error; 4037c478bd9Sstevel@tonic-gate } 4047c478bd9Sstevel@tonic-gate 405*9d5056eaSjv227347 /* 406*9d5056eaSjv227347 * Open the master side of the console and issue the ZC_HOLDSLAVE ioctl, 407*9d5056eaSjv227347 * which will cause the master to retain a reference to the slave. 408*9d5056eaSjv227347 * This prevents ttymon from blowing through the slave's STREAMS anchor. 409*9d5056eaSjv227347 */ 410*9d5056eaSjv227347 (void) snprintf(conspath, sizeof (conspath), "/dev/zcons/%s/%s", 411*9d5056eaSjv227347 zone_name, ZCONS_MASTER_NAME); 412*9d5056eaSjv227347 if ((masterfd = open(conspath, O_RDWR | O_NOCTTY)) == -1) { 413*9d5056eaSjv227347 zerror(zlogp, B_TRUE, "ERROR: could not open master side of " 414*9d5056eaSjv227347 "zone console for %s to acquire slave handle", zone_name); 415*9d5056eaSjv227347 goto error; 416*9d5056eaSjv227347 } 417*9d5056eaSjv227347 (void) snprintf(conspath, sizeof (conspath), "/dev/zcons/%s/%s", 418*9d5056eaSjv227347 zone_name, ZCONS_SLAVE_NAME); 419*9d5056eaSjv227347 if ((slavefd = open(conspath, O_RDWR | O_NOCTTY)) == -1) { 420*9d5056eaSjv227347 zerror(zlogp, B_TRUE, "ERROR: could not open slave side of zone" 421*9d5056eaSjv227347 " console for %s to acquire slave handle", zone_name); 422*9d5056eaSjv227347 (void) close(masterfd); 423*9d5056eaSjv227347 goto error; 424*9d5056eaSjv227347 } 425*9d5056eaSjv227347 if (ioctl(masterfd, ZC_HOLDSLAVE, (caddr_t)(intptr_t)slavefd) == 0) 4267c478bd9Sstevel@tonic-gate rv = 0; 427*9d5056eaSjv227347 else 428*9d5056eaSjv227347 zerror(zlogp, B_TRUE, "ERROR: error while acquiring slave " 429*9d5056eaSjv227347 "handle of zone console for %s", zone_name); 430*9d5056eaSjv227347 (void) close(slavefd); 431*9d5056eaSjv227347 (void) close(masterfd); 432*9d5056eaSjv227347 4337c478bd9Sstevel@tonic-gate error: 4347c478bd9Sstevel@tonic-gate if (ddef_hdl) 4357c478bd9Sstevel@tonic-gate devctl_ddef_free(ddef_hdl); 4367c478bd9Sstevel@tonic-gate if (bus_hdl) 4377c478bd9Sstevel@tonic-gate devctl_release(bus_hdl); 4387c478bd9Sstevel@tonic-gate if (dev_hdl) 4397c478bd9Sstevel@tonic-gate devctl_release(dev_hdl); 4407c478bd9Sstevel@tonic-gate return (rv); 4417c478bd9Sstevel@tonic-gate } 4427c478bd9Sstevel@tonic-gate 4437c478bd9Sstevel@tonic-gate static int 4447c478bd9Sstevel@tonic-gate init_console_sock(zlog_t *zlogp) 4457c478bd9Sstevel@tonic-gate { 4467c478bd9Sstevel@tonic-gate int servfd; 4477c478bd9Sstevel@tonic-gate struct sockaddr_un servaddr; 4487c478bd9Sstevel@tonic-gate 4497c478bd9Sstevel@tonic-gate bzero(&servaddr, sizeof (servaddr)); 4507c478bd9Sstevel@tonic-gate servaddr.sun_family = AF_UNIX; 4517c478bd9Sstevel@tonic-gate (void) snprintf(servaddr.sun_path, sizeof (servaddr.sun_path), 4527c478bd9Sstevel@tonic-gate CONSOLE_SOCKPATH, zone_name); 4537c478bd9Sstevel@tonic-gate 4547c478bd9Sstevel@tonic-gate if ((servfd = socket(AF_UNIX, SOCK_STREAM, 0)) == -1) { 4557c478bd9Sstevel@tonic-gate zerror(zlogp, B_TRUE, "console setup: could not create socket"); 4567c478bd9Sstevel@tonic-gate return (-1); 4577c478bd9Sstevel@tonic-gate } 4587c478bd9Sstevel@tonic-gate (void) unlink(servaddr.sun_path); 4597c478bd9Sstevel@tonic-gate 4607c478bd9Sstevel@tonic-gate if (bind(servfd, (struct sockaddr *)&servaddr, 4617c478bd9Sstevel@tonic-gate sizeof (servaddr)) == -1) { 4627c478bd9Sstevel@tonic-gate zerror(zlogp, B_TRUE, 4637c478bd9Sstevel@tonic-gate "console setup: could not bind to socket"); 4647c478bd9Sstevel@tonic-gate goto out; 4657c478bd9Sstevel@tonic-gate } 4667c478bd9Sstevel@tonic-gate 4677c478bd9Sstevel@tonic-gate if (listen(servfd, 4) == -1) { 4687c478bd9Sstevel@tonic-gate zerror(zlogp, B_TRUE, 4697c478bd9Sstevel@tonic-gate "console setup: could not listen on socket"); 4707c478bd9Sstevel@tonic-gate goto out; 4717c478bd9Sstevel@tonic-gate } 4727c478bd9Sstevel@tonic-gate return (servfd); 4737c478bd9Sstevel@tonic-gate 4747c478bd9Sstevel@tonic-gate out: 4757c478bd9Sstevel@tonic-gate (void) unlink(servaddr.sun_path); 4767c478bd9Sstevel@tonic-gate (void) close(servfd); 4777c478bd9Sstevel@tonic-gate return (-1); 4787c478bd9Sstevel@tonic-gate } 4797c478bd9Sstevel@tonic-gate 4807c478bd9Sstevel@tonic-gate static void 4817c478bd9Sstevel@tonic-gate destroy_console_sock(int servfd) 4827c478bd9Sstevel@tonic-gate { 4837c478bd9Sstevel@tonic-gate char path[MAXPATHLEN]; 4847c478bd9Sstevel@tonic-gate 4857c478bd9Sstevel@tonic-gate (void) snprintf(path, sizeof (path), CONSOLE_SOCKPATH, zone_name); 4867c478bd9Sstevel@tonic-gate (void) unlink(path); 4877c478bd9Sstevel@tonic-gate (void) shutdown(servfd, SHUT_RDWR); 4887c478bd9Sstevel@tonic-gate (void) close(servfd); 4897c478bd9Sstevel@tonic-gate } 4907c478bd9Sstevel@tonic-gate 4917c478bd9Sstevel@tonic-gate /* 4927c478bd9Sstevel@tonic-gate * Read the "ident" string from the client's descriptor; this routine also 4937c478bd9Sstevel@tonic-gate * tolerates being called with pid=NULL, for times when you want to "eat" 4947c478bd9Sstevel@tonic-gate * the ident string from a client without saving it. 4957c478bd9Sstevel@tonic-gate */ 4967c478bd9Sstevel@tonic-gate static int 4977c478bd9Sstevel@tonic-gate get_client_ident(int clifd, pid_t *pid, char *locale, size_t locale_len) 4987c478bd9Sstevel@tonic-gate { 4997c478bd9Sstevel@tonic-gate char buf[BUFSIZ], *bufp; 5007c478bd9Sstevel@tonic-gate size_t buflen = sizeof (buf); 5017c478bd9Sstevel@tonic-gate char c = '\0'; 5027c478bd9Sstevel@tonic-gate int i = 0, r; 5037c478bd9Sstevel@tonic-gate 5047c478bd9Sstevel@tonic-gate /* "eat up the ident string" case, for simplicity */ 5057c478bd9Sstevel@tonic-gate if (pid == NULL) { 5067c478bd9Sstevel@tonic-gate assert(locale == NULL && locale_len == 0); 5077c478bd9Sstevel@tonic-gate while (read(clifd, &c, 1) == 1) { 5087c478bd9Sstevel@tonic-gate if (c == '\n') 5097c478bd9Sstevel@tonic-gate return (0); 5107c478bd9Sstevel@tonic-gate } 5117c478bd9Sstevel@tonic-gate } 5127c478bd9Sstevel@tonic-gate 5137c478bd9Sstevel@tonic-gate bzero(buf, sizeof (buf)); 5147c478bd9Sstevel@tonic-gate while ((buflen > 1) && (r = read(clifd, &c, 1)) == 1) { 5157c478bd9Sstevel@tonic-gate buflen--; 5167c478bd9Sstevel@tonic-gate if (c == '\n') 5177c478bd9Sstevel@tonic-gate break; 5187c478bd9Sstevel@tonic-gate 5197c478bd9Sstevel@tonic-gate buf[i] = c; 5207c478bd9Sstevel@tonic-gate i++; 5217c478bd9Sstevel@tonic-gate } 5227c478bd9Sstevel@tonic-gate if (r == -1) 5237c478bd9Sstevel@tonic-gate return (-1); 5247c478bd9Sstevel@tonic-gate 5257c478bd9Sstevel@tonic-gate /* 5267c478bd9Sstevel@tonic-gate * We've filled the buffer, but still haven't seen \n. Keep eating 5277c478bd9Sstevel@tonic-gate * until we find it; we don't expect this to happen, but this is 5287c478bd9Sstevel@tonic-gate * defensive. 5297c478bd9Sstevel@tonic-gate */ 5307c478bd9Sstevel@tonic-gate if (c != '\n') { 5317c478bd9Sstevel@tonic-gate while ((r = read(clifd, &c, sizeof (c))) > 0) 5327c478bd9Sstevel@tonic-gate if (c == '\n') 5337c478bd9Sstevel@tonic-gate break; 5347c478bd9Sstevel@tonic-gate } 5357c478bd9Sstevel@tonic-gate 5367c478bd9Sstevel@tonic-gate /* 5377c478bd9Sstevel@tonic-gate * Parse buffer for message of the form: IDENT <pid> <locale> 5387c478bd9Sstevel@tonic-gate */ 5397c478bd9Sstevel@tonic-gate bufp = buf; 5407c478bd9Sstevel@tonic-gate if (strncmp(bufp, "IDENT ", 6) != 0) 5417c478bd9Sstevel@tonic-gate return (-1); 5427c478bd9Sstevel@tonic-gate bufp += 6; 5437c478bd9Sstevel@tonic-gate errno = 0; 5447c478bd9Sstevel@tonic-gate *pid = strtoll(bufp, &bufp, 10); 5457c478bd9Sstevel@tonic-gate if (errno != 0) 5467c478bd9Sstevel@tonic-gate return (-1); 5477c478bd9Sstevel@tonic-gate 5487c478bd9Sstevel@tonic-gate while (*bufp != '\0' && isspace(*bufp)) 5497c478bd9Sstevel@tonic-gate bufp++; 5507c478bd9Sstevel@tonic-gate (void) strlcpy(locale, bufp, locale_len); 5517c478bd9Sstevel@tonic-gate 5527c478bd9Sstevel@tonic-gate return (0); 5537c478bd9Sstevel@tonic-gate } 5547c478bd9Sstevel@tonic-gate 5557c478bd9Sstevel@tonic-gate static int 5567c478bd9Sstevel@tonic-gate accept_client(int servfd, pid_t *pid, char *locale, size_t locale_len) 5577c478bd9Sstevel@tonic-gate { 5587c478bd9Sstevel@tonic-gate int connfd; 5597c478bd9Sstevel@tonic-gate struct sockaddr_un cliaddr; 5607c478bd9Sstevel@tonic-gate socklen_t clilen; 5617c478bd9Sstevel@tonic-gate 5627c478bd9Sstevel@tonic-gate clilen = sizeof (cliaddr); 5637c478bd9Sstevel@tonic-gate connfd = accept(servfd, (struct sockaddr *)&cliaddr, &clilen); 5647c478bd9Sstevel@tonic-gate if (connfd == -1) 5657c478bd9Sstevel@tonic-gate return (-1); 5667c478bd9Sstevel@tonic-gate if (get_client_ident(connfd, pid, locale, locale_len) == -1) { 5677c478bd9Sstevel@tonic-gate (void) shutdown(connfd, SHUT_RDWR); 5687c478bd9Sstevel@tonic-gate (void) close(connfd); 5697c478bd9Sstevel@tonic-gate return (-1); 5707c478bd9Sstevel@tonic-gate } 5717c478bd9Sstevel@tonic-gate (void) write(connfd, "OK\n", 3); 5727c478bd9Sstevel@tonic-gate return (connfd); 5737c478bd9Sstevel@tonic-gate } 5747c478bd9Sstevel@tonic-gate 5757c478bd9Sstevel@tonic-gate static void 5767c478bd9Sstevel@tonic-gate reject_client(int servfd, pid_t clientpid) 5777c478bd9Sstevel@tonic-gate { 5787c478bd9Sstevel@tonic-gate int connfd; 5797c478bd9Sstevel@tonic-gate struct sockaddr_un cliaddr; 5807c478bd9Sstevel@tonic-gate socklen_t clilen; 5817c478bd9Sstevel@tonic-gate char nak[MAXPATHLEN]; 5827c478bd9Sstevel@tonic-gate 5837c478bd9Sstevel@tonic-gate clilen = sizeof (cliaddr); 5847c478bd9Sstevel@tonic-gate connfd = accept(servfd, (struct sockaddr *)&cliaddr, &clilen); 5857c478bd9Sstevel@tonic-gate 5867c478bd9Sstevel@tonic-gate /* 5877c478bd9Sstevel@tonic-gate * After hear its ident string, tell client to get lost. 5887c478bd9Sstevel@tonic-gate */ 5897c478bd9Sstevel@tonic-gate if (get_client_ident(connfd, NULL, NULL, 0) == 0) { 5907c478bd9Sstevel@tonic-gate (void) snprintf(nak, sizeof (nak), "%lu\n", 5917c478bd9Sstevel@tonic-gate clientpid); 5927c478bd9Sstevel@tonic-gate (void) write(connfd, nak, strlen(nak)); 5937c478bd9Sstevel@tonic-gate } 5947c478bd9Sstevel@tonic-gate (void) shutdown(connfd, SHUT_RDWR); 5957c478bd9Sstevel@tonic-gate (void) close(connfd); 5967c478bd9Sstevel@tonic-gate } 5977c478bd9Sstevel@tonic-gate 5987c478bd9Sstevel@tonic-gate static void 5997c478bd9Sstevel@tonic-gate event_message(int clifd, char *clilocale, zone_evt_t evt) 6007c478bd9Sstevel@tonic-gate { 6013f2f09c1Sdp char *str, *lstr = NULL; 6023f2f09c1Sdp char lmsg[BUFSIZ]; 6033f2f09c1Sdp char outbuf[BUFSIZ]; 6047c478bd9Sstevel@tonic-gate 6057c478bd9Sstevel@tonic-gate if (clifd == -1) 6067c478bd9Sstevel@tonic-gate return; 6077c478bd9Sstevel@tonic-gate 6087c478bd9Sstevel@tonic-gate switch (evt) { 6097c478bd9Sstevel@tonic-gate case Z_EVT_ZONE_BOOTING: 6103f2f09c1Sdp if (*boot_args == '\0') { 6113f2f09c1Sdp str = "NOTICE: Zone booting up"; 6123f2f09c1Sdp break; 6133f2f09c1Sdp } 6143f2f09c1Sdp /*LINTED*/ 6153f2f09c1Sdp (void) snprintf(lmsg, sizeof (lmsg), localize_msg(clilocale, 6163f2f09c1Sdp "NOTICE: Zone booting up with arguments: %s"), boot_args); 6173f2f09c1Sdp lstr = lmsg; 6187c478bd9Sstevel@tonic-gate break; 6197c478bd9Sstevel@tonic-gate case Z_EVT_ZONE_READIED: 6203f2f09c1Sdp str = "NOTICE: Zone readied"; 6217c478bd9Sstevel@tonic-gate break; 6227c478bd9Sstevel@tonic-gate case Z_EVT_ZONE_HALTED: 6233f2f09c1Sdp str = "NOTICE: Zone halted"; 6247c478bd9Sstevel@tonic-gate break; 6257c478bd9Sstevel@tonic-gate case Z_EVT_ZONE_REBOOTING: 6263f2f09c1Sdp if (*boot_args == '\0') { 6273f2f09c1Sdp str = "NOTICE: Zone rebooting"; 6283f2f09c1Sdp break; 6293f2f09c1Sdp } 6303f2f09c1Sdp /*LINTED*/ 6313f2f09c1Sdp (void) snprintf(lmsg, sizeof (lmsg), localize_msg(clilocale, 6323f2f09c1Sdp "NOTICE: Zone rebooting with arguments: %s"), boot_args); 6333f2f09c1Sdp lstr = lmsg; 6347c478bd9Sstevel@tonic-gate break; 6357c478bd9Sstevel@tonic-gate case Z_EVT_ZONE_UNINSTALLING: 6363f2f09c1Sdp str = "NOTICE: Zone is being uninstalled. Disconnecting..."; 6377c478bd9Sstevel@tonic-gate break; 638ffbafc53Scomay case Z_EVT_ZONE_BOOTFAILED: 6393f2f09c1Sdp str = "NOTICE: Zone boot failed"; 6403f2f09c1Sdp break; 6413f2f09c1Sdp case Z_EVT_ZONE_BADARGS: 6423f2f09c1Sdp /*LINTED*/ 6433f2f09c1Sdp (void) snprintf(lmsg, sizeof (lmsg), 6443f2f09c1Sdp localize_msg(clilocale, 6453f2f09c1Sdp "WARNING: Ignoring invalid boot arguments: %s"), 6463f2f09c1Sdp bad_boot_arg); 6473f2f09c1Sdp lstr = lmsg; 648ffbafc53Scomay break; 6497c478bd9Sstevel@tonic-gate default: 6507c478bd9Sstevel@tonic-gate return; 6517c478bd9Sstevel@tonic-gate } 6523f2f09c1Sdp 6533f2f09c1Sdp if (lstr == NULL) 6543f2f09c1Sdp lstr = localize_msg(clilocale, str); 6553f2f09c1Sdp (void) snprintf(outbuf, sizeof (outbuf), "\r\n[%s]\r\n", lstr); 6563f2f09c1Sdp (void) write(clifd, outbuf, strlen(outbuf)); 6577c478bd9Sstevel@tonic-gate } 6587c478bd9Sstevel@tonic-gate 6597c478bd9Sstevel@tonic-gate /* 6607c478bd9Sstevel@tonic-gate * Check to see if the client at the other end of the socket is still 6617c478bd9Sstevel@tonic-gate * alive; we know it is not if it throws EPIPE at us when we try to write 6627c478bd9Sstevel@tonic-gate * an otherwise harmless 0-length message to it. 6637c478bd9Sstevel@tonic-gate */ 6647c478bd9Sstevel@tonic-gate static int 6657c478bd9Sstevel@tonic-gate test_client(int clifd) 6667c478bd9Sstevel@tonic-gate { 6677c478bd9Sstevel@tonic-gate if ((write(clifd, "", 0) == -1) && errno == EPIPE) 6687c478bd9Sstevel@tonic-gate return (-1); 6697c478bd9Sstevel@tonic-gate return (0); 6707c478bd9Sstevel@tonic-gate } 6717c478bd9Sstevel@tonic-gate 6727c478bd9Sstevel@tonic-gate /* 6737c478bd9Sstevel@tonic-gate * This routine drives the console I/O loop. It polls for input from the 6747c478bd9Sstevel@tonic-gate * master side of the console (output to the console), and from the client 6757c478bd9Sstevel@tonic-gate * (input from the console user). Additionally, it polls on the server fd, 6767c478bd9Sstevel@tonic-gate * and disconnects any clients that might try to hook up with the zone while 6777c478bd9Sstevel@tonic-gate * the console is in use. 6787c478bd9Sstevel@tonic-gate * 6797c478bd9Sstevel@tonic-gate * When the client first calls us up, it is expected to send a line giving 6807c478bd9Sstevel@tonic-gate * its "identity"; this consists of the string 'IDENT <pid> <locale>'. 6817c478bd9Sstevel@tonic-gate * This is so that we can report that the console is busy along with 6827c478bd9Sstevel@tonic-gate * some diagnostics about who has it busy; the locale is used so that 6837c478bd9Sstevel@tonic-gate * asynchronous messages about zone state (like the NOTICE: zone halted 6847c478bd9Sstevel@tonic-gate * messages) can be output in the user's locale. 6857c478bd9Sstevel@tonic-gate */ 6867c478bd9Sstevel@tonic-gate static void 6877c478bd9Sstevel@tonic-gate do_console_io(zlog_t *zlogp, int consfd, int servfd) 6887c478bd9Sstevel@tonic-gate { 6897c478bd9Sstevel@tonic-gate struct pollfd pollfds[4]; 6907c478bd9Sstevel@tonic-gate char ibuf[BUFSIZ]; 6917c478bd9Sstevel@tonic-gate int cc, ret; 6927c478bd9Sstevel@tonic-gate int clifd = -1; 6937c478bd9Sstevel@tonic-gate int pollerr = 0; 6947c478bd9Sstevel@tonic-gate char clilocale[MAXPATHLEN]; 6957c478bd9Sstevel@tonic-gate pid_t clipid = 0; 6967c478bd9Sstevel@tonic-gate 6977c478bd9Sstevel@tonic-gate /* console side, watch for read events */ 6987c478bd9Sstevel@tonic-gate pollfds[0].fd = consfd; 6997c478bd9Sstevel@tonic-gate pollfds[0].events = POLLIN | POLLRDNORM | POLLRDBAND | 7007c478bd9Sstevel@tonic-gate POLLPRI | POLLERR | POLLHUP | POLLNVAL; 7017c478bd9Sstevel@tonic-gate 7027c478bd9Sstevel@tonic-gate /* client side, watch for read events */ 7037c478bd9Sstevel@tonic-gate pollfds[1].fd = clifd; 7047c478bd9Sstevel@tonic-gate pollfds[1].events = pollfds[0].events; 7057c478bd9Sstevel@tonic-gate 7067c478bd9Sstevel@tonic-gate /* the server socket; watch for events (new connections) */ 7077c478bd9Sstevel@tonic-gate pollfds[2].fd = servfd; 7087c478bd9Sstevel@tonic-gate pollfds[2].events = pollfds[0].events; 7097c478bd9Sstevel@tonic-gate 7107c478bd9Sstevel@tonic-gate /* the eventstram; watch for events (e.g.: zone halted) */ 7117c478bd9Sstevel@tonic-gate pollfds[3].fd = eventstream[1]; 7127c478bd9Sstevel@tonic-gate pollfds[3].events = pollfds[0].events; 7137c478bd9Sstevel@tonic-gate 7147c478bd9Sstevel@tonic-gate for (;;) { 7157c478bd9Sstevel@tonic-gate pollfds[0].revents = pollfds[1].revents = 0; 7167c478bd9Sstevel@tonic-gate pollfds[2].revents = pollfds[3].revents = 0; 7177c478bd9Sstevel@tonic-gate 7187c478bd9Sstevel@tonic-gate ret = poll(pollfds, 7197c478bd9Sstevel@tonic-gate sizeof (pollfds) / sizeof (struct pollfd), -1); 7207c478bd9Sstevel@tonic-gate if (ret == -1 && errno != EINTR) { 7217c478bd9Sstevel@tonic-gate zerror(zlogp, B_TRUE, "poll failed"); 7227c478bd9Sstevel@tonic-gate /* we are hosed, close connection */ 7237c478bd9Sstevel@tonic-gate break; 7247c478bd9Sstevel@tonic-gate } 7257c478bd9Sstevel@tonic-gate 7267c478bd9Sstevel@tonic-gate /* event from console side */ 7277c478bd9Sstevel@tonic-gate if (pollfds[0].revents) { 7287c478bd9Sstevel@tonic-gate if (pollfds[0].revents & 7297c478bd9Sstevel@tonic-gate (POLLIN | POLLRDNORM | POLLRDBAND | POLLPRI)) { 7307c478bd9Sstevel@tonic-gate errno = 0; 7317c478bd9Sstevel@tonic-gate cc = read(consfd, ibuf, BUFSIZ); 7327c478bd9Sstevel@tonic-gate if (cc <= 0 && (errno != EINTR) && 7337c478bd9Sstevel@tonic-gate (errno != EAGAIN)) 7347c478bd9Sstevel@tonic-gate break; 7357c478bd9Sstevel@tonic-gate /* 7367c478bd9Sstevel@tonic-gate * Lose I/O if no one is listening 7377c478bd9Sstevel@tonic-gate */ 7387c478bd9Sstevel@tonic-gate if (clifd != -1 && cc > 0) 7397c478bd9Sstevel@tonic-gate (void) write(clifd, ibuf, cc); 7407c478bd9Sstevel@tonic-gate } else { 7417c478bd9Sstevel@tonic-gate pollerr = pollfds[0].revents; 7427c478bd9Sstevel@tonic-gate zerror(zlogp, B_FALSE, 7437c478bd9Sstevel@tonic-gate "closing connection with (console) " 7447c478bd9Sstevel@tonic-gate "pollerr %d\n", pollerr); 7457c478bd9Sstevel@tonic-gate break; 7467c478bd9Sstevel@tonic-gate } 7477c478bd9Sstevel@tonic-gate } 7487c478bd9Sstevel@tonic-gate 7497c478bd9Sstevel@tonic-gate /* event from client side */ 7507c478bd9Sstevel@tonic-gate if (pollfds[1].revents) { 7517c478bd9Sstevel@tonic-gate if (pollfds[1].revents & 7527c478bd9Sstevel@tonic-gate (POLLIN | POLLRDNORM | POLLRDBAND | POLLPRI)) { 7537c478bd9Sstevel@tonic-gate errno = 0; 7547c478bd9Sstevel@tonic-gate cc = read(clifd, ibuf, BUFSIZ); 7557c478bd9Sstevel@tonic-gate if (cc <= 0 && (errno != EINTR) && 7567c478bd9Sstevel@tonic-gate (errno != EAGAIN)) 7577c478bd9Sstevel@tonic-gate break; 7587c478bd9Sstevel@tonic-gate (void) write(consfd, ibuf, cc); 7597c478bd9Sstevel@tonic-gate } else { 7607c478bd9Sstevel@tonic-gate pollerr = pollfds[1].revents; 7617c478bd9Sstevel@tonic-gate zerror(zlogp, B_FALSE, 7627c478bd9Sstevel@tonic-gate "closing connection with (client) " 7637c478bd9Sstevel@tonic-gate "pollerr %d\n", pollerr); 7647c478bd9Sstevel@tonic-gate break; 7657c478bd9Sstevel@tonic-gate } 7667c478bd9Sstevel@tonic-gate } 7677c478bd9Sstevel@tonic-gate 7687c478bd9Sstevel@tonic-gate /* event from server socket */ 7697c478bd9Sstevel@tonic-gate if (pollfds[2].revents && 7707c478bd9Sstevel@tonic-gate (pollfds[2].revents & (POLLIN | POLLRDNORM))) { 7717c478bd9Sstevel@tonic-gate if (clifd != -1) { 7727c478bd9Sstevel@tonic-gate /* 7737c478bd9Sstevel@tonic-gate * Test the client to see if it is really 7747c478bd9Sstevel@tonic-gate * still alive. If it has died but we 7757c478bd9Sstevel@tonic-gate * haven't yet detected that, we might 7767c478bd9Sstevel@tonic-gate * deny a legitimate connect attempt. If it 7777c478bd9Sstevel@tonic-gate * is dead, we break out; once we tear down 7787c478bd9Sstevel@tonic-gate * the old connection, the new connection 7797c478bd9Sstevel@tonic-gate * will happen. 7807c478bd9Sstevel@tonic-gate */ 7817c478bd9Sstevel@tonic-gate if (test_client(clifd) == -1) { 7827c478bd9Sstevel@tonic-gate break; 7837c478bd9Sstevel@tonic-gate } 7847c478bd9Sstevel@tonic-gate /* we're already handling a client */ 7857c478bd9Sstevel@tonic-gate reject_client(servfd, clipid); 7867c478bd9Sstevel@tonic-gate 7877c478bd9Sstevel@tonic-gate 7887c478bd9Sstevel@tonic-gate } else if ((clifd = accept_client(servfd, &clipid, 7897c478bd9Sstevel@tonic-gate clilocale, sizeof (clilocale))) != -1) { 7907c478bd9Sstevel@tonic-gate pollfds[1].fd = clifd; 7917c478bd9Sstevel@tonic-gate 7927c478bd9Sstevel@tonic-gate } else { 7937c478bd9Sstevel@tonic-gate break; 7947c478bd9Sstevel@tonic-gate } 7957c478bd9Sstevel@tonic-gate } 7967c478bd9Sstevel@tonic-gate 7977c478bd9Sstevel@tonic-gate /* 7987c478bd9Sstevel@tonic-gate * Watch for events on the eventstream. This is how we get 7997c478bd9Sstevel@tonic-gate * notified of the zone halting, etc. It provides us a 8007c478bd9Sstevel@tonic-gate * "wakeup" from poll when important things happen, which 8017c478bd9Sstevel@tonic-gate * is good. 8027c478bd9Sstevel@tonic-gate */ 8037c478bd9Sstevel@tonic-gate if (pollfds[3].revents) { 8047c478bd9Sstevel@tonic-gate int evt = eventstream_read(); 8057c478bd9Sstevel@tonic-gate /* 8067c478bd9Sstevel@tonic-gate * After we drain out the event, if we aren't servicing 8077c478bd9Sstevel@tonic-gate * a console client, we hop back out to our caller, 8087c478bd9Sstevel@tonic-gate * which will check to see if it is time to shutdown 8097c478bd9Sstevel@tonic-gate * the daemon, or if we should take another console 8107c478bd9Sstevel@tonic-gate * service lap. 8117c478bd9Sstevel@tonic-gate */ 8127c478bd9Sstevel@tonic-gate if (clifd == -1) { 8137c478bd9Sstevel@tonic-gate break; 8147c478bd9Sstevel@tonic-gate } 8157c478bd9Sstevel@tonic-gate event_message(clifd, clilocale, evt); 8167c478bd9Sstevel@tonic-gate /* 8177c478bd9Sstevel@tonic-gate * Special handling for the message that the zone is 8187c478bd9Sstevel@tonic-gate * uninstalling; we boot the client, then break out 8197c478bd9Sstevel@tonic-gate * of this function. When we return to the 8207c478bd9Sstevel@tonic-gate * serve_console loop, we will see that the zone is 8217c478bd9Sstevel@tonic-gate * in a state < READY, and so zoneadmd will shutdown. 8227c478bd9Sstevel@tonic-gate */ 8237c478bd9Sstevel@tonic-gate if (evt == Z_EVT_ZONE_UNINSTALLING) { 8247c478bd9Sstevel@tonic-gate break; 8257c478bd9Sstevel@tonic-gate } 8267c478bd9Sstevel@tonic-gate } 8277c478bd9Sstevel@tonic-gate 8287c478bd9Sstevel@tonic-gate } 8297c478bd9Sstevel@tonic-gate 8307c478bd9Sstevel@tonic-gate if (clifd != -1) { 8317c478bd9Sstevel@tonic-gate (void) shutdown(clifd, SHUT_RDWR); 8327c478bd9Sstevel@tonic-gate (void) close(clifd); 8337c478bd9Sstevel@tonic-gate } 8347c478bd9Sstevel@tonic-gate } 8357c478bd9Sstevel@tonic-gate 8367c478bd9Sstevel@tonic-gate int 8377c478bd9Sstevel@tonic-gate init_console(zlog_t *zlogp) 8387c478bd9Sstevel@tonic-gate { 8397c478bd9Sstevel@tonic-gate if (init_console_dev(zlogp) == -1) { 8407c478bd9Sstevel@tonic-gate zerror(zlogp, B_FALSE, 8417c478bd9Sstevel@tonic-gate "console setup: device initialization failed"); 8427c478bd9Sstevel@tonic-gate return (-1); 8437c478bd9Sstevel@tonic-gate } 8447c478bd9Sstevel@tonic-gate 8457c478bd9Sstevel@tonic-gate if ((serverfd = init_console_sock(zlogp)) == -1) { 8467c478bd9Sstevel@tonic-gate zerror(zlogp, B_FALSE, 8477c478bd9Sstevel@tonic-gate "console setup: socket initialization failed"); 8487c478bd9Sstevel@tonic-gate return (-1); 8497c478bd9Sstevel@tonic-gate } 8507c478bd9Sstevel@tonic-gate return (0); 8517c478bd9Sstevel@tonic-gate } 8527c478bd9Sstevel@tonic-gate 8537c478bd9Sstevel@tonic-gate /* 8547c478bd9Sstevel@tonic-gate * serve_console() is the master loop for driving console I/O. It is also the 8557c478bd9Sstevel@tonic-gate * routine which is ultimately responsible for "pulling the plug" on zoneadmd 8567c478bd9Sstevel@tonic-gate * when it realizes that the daemon should shut down. 8577c478bd9Sstevel@tonic-gate * 8587c478bd9Sstevel@tonic-gate * The rules for shutdown are: there must be no console client, and the zone 8597c478bd9Sstevel@tonic-gate * state must be < ready. However, we need to give things a chance to actually 8607c478bd9Sstevel@tonic-gate * get going when the daemon starts up-- otherwise the daemon would immediately 8617c478bd9Sstevel@tonic-gate * exit on startup if the zone was in the installed state, so we first drop 8627c478bd9Sstevel@tonic-gate * into the do_console_io() loop in order to give *something* a chance to 8637c478bd9Sstevel@tonic-gate * happen. 8647c478bd9Sstevel@tonic-gate */ 8657c478bd9Sstevel@tonic-gate void 8667c478bd9Sstevel@tonic-gate serve_console(zlog_t *zlogp) 8677c478bd9Sstevel@tonic-gate { 8687c478bd9Sstevel@tonic-gate int masterfd; 8697c478bd9Sstevel@tonic-gate zone_state_t zstate; 8707c478bd9Sstevel@tonic-gate char conspath[MAXPATHLEN]; 8717c478bd9Sstevel@tonic-gate 8727c478bd9Sstevel@tonic-gate (void) snprintf(conspath, sizeof (conspath), 8737c478bd9Sstevel@tonic-gate "/dev/zcons/%s/%s", zone_name, ZCONS_MASTER_NAME); 8747c478bd9Sstevel@tonic-gate 8757c478bd9Sstevel@tonic-gate for (;;) { 8767c478bd9Sstevel@tonic-gate masterfd = open(conspath, O_RDWR|O_NONBLOCK|O_NOCTTY); 8777c478bd9Sstevel@tonic-gate if (masterfd == -1) { 8787c478bd9Sstevel@tonic-gate zerror(zlogp, B_TRUE, "failed to open console master"); 8797c478bd9Sstevel@tonic-gate (void) mutex_lock(&lock); 8807c478bd9Sstevel@tonic-gate goto death; 8817c478bd9Sstevel@tonic-gate } 8827c478bd9Sstevel@tonic-gate 8837c478bd9Sstevel@tonic-gate /* 8847c478bd9Sstevel@tonic-gate * Setting RPROTDIS on the stream means that the control 8857c478bd9Sstevel@tonic-gate * portion of messages received (which we don't care about) 8867c478bd9Sstevel@tonic-gate * will be discarded by the stream head. If we allowed such 8877c478bd9Sstevel@tonic-gate * messages, we wouldn't be able to use read(2), as it fails 8887c478bd9Sstevel@tonic-gate * (EBADMSG) when a message with a control element is received. 8897c478bd9Sstevel@tonic-gate */ 8907c478bd9Sstevel@tonic-gate if (ioctl(masterfd, I_SRDOPT, RNORM|RPROTDIS) == -1) { 8917c478bd9Sstevel@tonic-gate zerror(zlogp, B_TRUE, "failed to set options on " 8927c478bd9Sstevel@tonic-gate "console master"); 8937c478bd9Sstevel@tonic-gate (void) mutex_lock(&lock); 8947c478bd9Sstevel@tonic-gate goto death; 8957c478bd9Sstevel@tonic-gate } 8967c478bd9Sstevel@tonic-gate 8977c478bd9Sstevel@tonic-gate do_console_io(zlogp, masterfd, serverfd); 8987c478bd9Sstevel@tonic-gate 8997c478bd9Sstevel@tonic-gate /* 9007c478bd9Sstevel@tonic-gate * We would prefer not to do this, but hostile zone processes 9017c478bd9Sstevel@tonic-gate * can cause the stream to become tainted, and reads will 9027c478bd9Sstevel@tonic-gate * fail. So, in case something has gone seriously ill, 9037c478bd9Sstevel@tonic-gate * we dismantle the stream and reopen the console when we 9047c478bd9Sstevel@tonic-gate * take another lap. 9057c478bd9Sstevel@tonic-gate */ 9067c478bd9Sstevel@tonic-gate (void) close(masterfd); 9077c478bd9Sstevel@tonic-gate 9087c478bd9Sstevel@tonic-gate (void) mutex_lock(&lock); 9097c478bd9Sstevel@tonic-gate /* 9107c478bd9Sstevel@tonic-gate * We need to set death_throes (see below) atomically with 9117c478bd9Sstevel@tonic-gate * respect to noticing that (a) we have no console client and 9127c478bd9Sstevel@tonic-gate * (b) the zone is not installed. Otherwise we could get a 9137c478bd9Sstevel@tonic-gate * request to boot during this time. Once we set death_throes, 9147c478bd9Sstevel@tonic-gate * any incoming door stuff will be turned away. 9157c478bd9Sstevel@tonic-gate */ 9167c478bd9Sstevel@tonic-gate if (zone_get_state(zone_name, &zstate) == Z_OK) { 9177c478bd9Sstevel@tonic-gate if (zstate < ZONE_STATE_READY) 9187c478bd9Sstevel@tonic-gate goto death; 9197c478bd9Sstevel@tonic-gate } else { 9207c478bd9Sstevel@tonic-gate zerror(zlogp, B_FALSE, 9217c478bd9Sstevel@tonic-gate "unable to determine state of zone"); 9227c478bd9Sstevel@tonic-gate goto death; 9237c478bd9Sstevel@tonic-gate } 9247c478bd9Sstevel@tonic-gate /* 9257c478bd9Sstevel@tonic-gate * Even if zone_get_state() fails, stay conservative, and 9267c478bd9Sstevel@tonic-gate * take another lap. 9277c478bd9Sstevel@tonic-gate */ 9287c478bd9Sstevel@tonic-gate (void) mutex_unlock(&lock); 9297c478bd9Sstevel@tonic-gate } 9307c478bd9Sstevel@tonic-gate 9317c478bd9Sstevel@tonic-gate death: 9327c478bd9Sstevel@tonic-gate assert(MUTEX_HELD(&lock)); 9337c478bd9Sstevel@tonic-gate in_death_throes = B_TRUE; 9347c478bd9Sstevel@tonic-gate (void) mutex_unlock(&lock); 9357c478bd9Sstevel@tonic-gate 9367c478bd9Sstevel@tonic-gate destroy_console_sock(serverfd); 9377c478bd9Sstevel@tonic-gate (void) destroy_console_devs(zlogp); 9387c478bd9Sstevel@tonic-gate } 939