17c478bd9Sstevel@tonic-gate /* 27c478bd9Sstevel@tonic-gate * CDDL HEADER START 37c478bd9Sstevel@tonic-gate * 47c478bd9Sstevel@tonic-gate * The contents of this file are subject to the terms of the 5ffbafc53Scomay * Common Development and Distribution License (the "License"). 6ffbafc53Scomay * You may not use this file except in compliance with the License. 77c478bd9Sstevel@tonic-gate * 87c478bd9Sstevel@tonic-gate * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 97c478bd9Sstevel@tonic-gate * or http://www.opensolaris.org/os/licensing. 107c478bd9Sstevel@tonic-gate * See the License for the specific language governing permissions 117c478bd9Sstevel@tonic-gate * and limitations under the License. 127c478bd9Sstevel@tonic-gate * 137c478bd9Sstevel@tonic-gate * When distributing Covered Code, include this CDDL HEADER in each 147c478bd9Sstevel@tonic-gate * file and include the License file at usr/src/OPENSOLARIS.LICENSE. 157c478bd9Sstevel@tonic-gate * If applicable, add the following below this CDDL HEADER, with the 167c478bd9Sstevel@tonic-gate * fields enclosed by brackets "[]" replaced with your own identifying 177c478bd9Sstevel@tonic-gate * information: Portions Copyright [yyyy] [name of copyright owner] 187c478bd9Sstevel@tonic-gate * 197c478bd9Sstevel@tonic-gate * CDDL HEADER END 207c478bd9Sstevel@tonic-gate */ 21ffbafc53Scomay 227c478bd9Sstevel@tonic-gate /* 239d5056eaSjv227347 * Copyright 2009 Sun Microsystems, Inc. All rights reserved. 247c478bd9Sstevel@tonic-gate * Use is subject to license terms. 25*e1c90a83SJerry Jelinek * Copyright 2012 Joyent, Inc. All rights reserved. 267c478bd9Sstevel@tonic-gate */ 277c478bd9Sstevel@tonic-gate 287c478bd9Sstevel@tonic-gate /* 297c478bd9Sstevel@tonic-gate * Console support for zones requires a significant infrastructure. The 307c478bd9Sstevel@tonic-gate * core pieces are contained in this file, but other portions of note 317c478bd9Sstevel@tonic-gate * are in the zlogin(1M) command, the zcons(7D) driver, and in the 327c478bd9Sstevel@tonic-gate * devfsadm(1M) misc_link generator. 337c478bd9Sstevel@tonic-gate * 347c478bd9Sstevel@tonic-gate * Care is taken to make the console behave in an "intuitive" fashion for 357c478bd9Sstevel@tonic-gate * administrators. Essentially, we try as much as possible to mimic the 367c478bd9Sstevel@tonic-gate * experience of using a system via a tip line and system controller. 377c478bd9Sstevel@tonic-gate * 387c478bd9Sstevel@tonic-gate * The zone console architecture looks like this: 397c478bd9Sstevel@tonic-gate * 407c478bd9Sstevel@tonic-gate * Global Zone | Non-Global Zone 417c478bd9Sstevel@tonic-gate * .--------------. | 427c478bd9Sstevel@tonic-gate * .-----------. | zoneadmd -z | | .--------. .---------. 437c478bd9Sstevel@tonic-gate * | zlogin -C | | myzone | | | ttymon | | syslogd | 447c478bd9Sstevel@tonic-gate * `-----------' `--------------' | `--------' `---------' 457c478bd9Sstevel@tonic-gate * | | | | | | | 467c478bd9Sstevel@tonic-gate * User | | | | | V V 477c478bd9Sstevel@tonic-gate * - - - - - - - - -|- - - -|- - - -|-|- - - - - - -|- - /dev/zconsole - - - 487c478bd9Sstevel@tonic-gate * Kernel V V | | | 497c478bd9Sstevel@tonic-gate * [AF_UNIX Socket] | `--------. .-------------' 507c478bd9Sstevel@tonic-gate * | | | 517c478bd9Sstevel@tonic-gate * | V V 527c478bd9Sstevel@tonic-gate * | +-----------+ 537c478bd9Sstevel@tonic-gate * | | ldterm, | 547c478bd9Sstevel@tonic-gate * | | etc. | 557c478bd9Sstevel@tonic-gate * | +-----------+ 567c478bd9Sstevel@tonic-gate * | +-[Anchor]--+ 577c478bd9Sstevel@tonic-gate * | | ptem | 587c478bd9Sstevel@tonic-gate * V +-----------+ 597c478bd9Sstevel@tonic-gate * +---master---+---slave---+ 607c478bd9Sstevel@tonic-gate * | | 617c478bd9Sstevel@tonic-gate * | zcons driver | 627c478bd9Sstevel@tonic-gate * | zonename="myzone" | 637c478bd9Sstevel@tonic-gate * +------------------------+ 647c478bd9Sstevel@tonic-gate * 659d5056eaSjv227347 * There are basically two major tasks which the console subsystem in 667c478bd9Sstevel@tonic-gate * zoneadmd accomplishes: 677c478bd9Sstevel@tonic-gate * 687c478bd9Sstevel@tonic-gate * - Setup and teardown of zcons driver instances. One zcons instance 697c478bd9Sstevel@tonic-gate * is maintained per zone; we take advantage of the libdevice APIs 707c478bd9Sstevel@tonic-gate * to online new instances of zcons as needed. Care is taken to 717c478bd9Sstevel@tonic-gate * prune and manage these appropriately; see init_console_dev() and 727c478bd9Sstevel@tonic-gate * destroy_console_dev(). The end result is the creation of the 737c478bd9Sstevel@tonic-gate * zcons(7D) instance and an open file descriptor to the master side. 747c478bd9Sstevel@tonic-gate * zcons instances are associated with zones via their zonename device 757c478bd9Sstevel@tonic-gate * property. This the console instance to persist across reboots, 767c478bd9Sstevel@tonic-gate * and while the zone is halted. 777c478bd9Sstevel@tonic-gate * 787c478bd9Sstevel@tonic-gate * - Acting as a server for 'zlogin -C' instances. When zlogin -C is 797c478bd9Sstevel@tonic-gate * run, zlogin connects to zoneadmd via unix domain socket. zoneadmd 807c478bd9Sstevel@tonic-gate * functions as a two-way proxy for console I/O, relaying user input 817c478bd9Sstevel@tonic-gate * to the master side of the console, and relaying output from the 827c478bd9Sstevel@tonic-gate * zone to the user. 837c478bd9Sstevel@tonic-gate */ 847c478bd9Sstevel@tonic-gate 857c478bd9Sstevel@tonic-gate #include <sys/types.h> 867c478bd9Sstevel@tonic-gate #include <sys/socket.h> 877c478bd9Sstevel@tonic-gate #include <sys/stat.h> 887c478bd9Sstevel@tonic-gate #include <sys/termios.h> 897c478bd9Sstevel@tonic-gate #include <sys/zcons.h> 90facf4a8dSllai1 #include <sys/mkdev.h> 917c478bd9Sstevel@tonic-gate 927c478bd9Sstevel@tonic-gate #include <assert.h> 937c478bd9Sstevel@tonic-gate #include <ctype.h> 947c478bd9Sstevel@tonic-gate #include <errno.h> 957c478bd9Sstevel@tonic-gate #include <fcntl.h> 967c478bd9Sstevel@tonic-gate #include <stdarg.h> 977c478bd9Sstevel@tonic-gate #include <stdio.h> 987c478bd9Sstevel@tonic-gate #include <stdlib.h> 997c478bd9Sstevel@tonic-gate #include <strings.h> 1007c478bd9Sstevel@tonic-gate #include <stropts.h> 1017c478bd9Sstevel@tonic-gate #include <thread.h> 1027c478bd9Sstevel@tonic-gate #include <ucred.h> 1037c478bd9Sstevel@tonic-gate #include <unistd.h> 1047c478bd9Sstevel@tonic-gate #include <zone.h> 1057c478bd9Sstevel@tonic-gate 1067c478bd9Sstevel@tonic-gate #include <libdevinfo.h> 1077c478bd9Sstevel@tonic-gate #include <libdevice.h> 1087c478bd9Sstevel@tonic-gate #include <libzonecfg.h> 1097c478bd9Sstevel@tonic-gate 1107c478bd9Sstevel@tonic-gate #include <syslog.h> 111facf4a8dSllai1 #include <sys/modctl.h> 1127c478bd9Sstevel@tonic-gate 1137c478bd9Sstevel@tonic-gate #include "zoneadmd.h" 1147c478bd9Sstevel@tonic-gate 1157c478bd9Sstevel@tonic-gate #define ZCONSNEX_DEVTREEPATH "/pseudo/zconsnex@1" 1167c478bd9Sstevel@tonic-gate #define ZCONSNEX_FILEPATH "/devices/pseudo/zconsnex@1" 1177c478bd9Sstevel@tonic-gate 1187c478bd9Sstevel@tonic-gate #define CONSOLE_SOCKPATH ZONES_TMPDIR "/%s.console_sock" 1197c478bd9Sstevel@tonic-gate 1207c478bd9Sstevel@tonic-gate static int serverfd = -1; /* console server unix domain socket fd */ 1213f2f09c1Sdp char boot_args[BOOTARGS_MAX]; 1223f2f09c1Sdp char bad_boot_arg[BOOTARGS_MAX]; 1237c478bd9Sstevel@tonic-gate 1247c478bd9Sstevel@tonic-gate /* 1257c478bd9Sstevel@tonic-gate * The eventstream is a simple one-directional flow of messages from the 1267c478bd9Sstevel@tonic-gate * door server to the console subsystem, implemented with a pipe. 1277c478bd9Sstevel@tonic-gate * It is used to wake up the console poller when it needs to take action, 1287c478bd9Sstevel@tonic-gate * message the user, die off, etc. 1297c478bd9Sstevel@tonic-gate */ 1307c478bd9Sstevel@tonic-gate static int eventstream[2]; 1317c478bd9Sstevel@tonic-gate 1323f2f09c1Sdp 1333f2f09c1Sdp 1347c478bd9Sstevel@tonic-gate int 1357c478bd9Sstevel@tonic-gate eventstream_init() 1367c478bd9Sstevel@tonic-gate { 1377c478bd9Sstevel@tonic-gate if (pipe(eventstream) == -1) 1387c478bd9Sstevel@tonic-gate return (-1); 1397c478bd9Sstevel@tonic-gate return (0); 1407c478bd9Sstevel@tonic-gate } 1417c478bd9Sstevel@tonic-gate 1427c478bd9Sstevel@tonic-gate void 1437c478bd9Sstevel@tonic-gate eventstream_write(zone_evt_t evt) 1447c478bd9Sstevel@tonic-gate { 1457c478bd9Sstevel@tonic-gate (void) write(eventstream[0], &evt, sizeof (evt)); 1467c478bd9Sstevel@tonic-gate } 1477c478bd9Sstevel@tonic-gate 1487c478bd9Sstevel@tonic-gate static zone_evt_t 1497c478bd9Sstevel@tonic-gate eventstream_read(void) 1507c478bd9Sstevel@tonic-gate { 1517c478bd9Sstevel@tonic-gate zone_evt_t evt = Z_EVT_NULL; 1527c478bd9Sstevel@tonic-gate 1537c478bd9Sstevel@tonic-gate (void) read(eventstream[1], &evt, sizeof (evt)); 1547c478bd9Sstevel@tonic-gate return (evt); 1557c478bd9Sstevel@tonic-gate } 1567c478bd9Sstevel@tonic-gate 1577c478bd9Sstevel@tonic-gate /* 1587c478bd9Sstevel@tonic-gate * count_console_devs() and its helper count_cb() do a walk of the 1597c478bd9Sstevel@tonic-gate * subtree of the device tree where zone console nodes are represented. 1607c478bd9Sstevel@tonic-gate * The goal is to count zone console instances already setup for a zone 1617c478bd9Sstevel@tonic-gate * with the given name. More than 1 is anomolous, and our caller will 1627c478bd9Sstevel@tonic-gate * have to deal with that if we find that's the case. 1637c478bd9Sstevel@tonic-gate * 1647c478bd9Sstevel@tonic-gate * Note: this algorithm is a linear search of nodes in the zconsnex subtree 1657c478bd9Sstevel@tonic-gate * of the device tree, and could be a scalability problem, but I don't see 1667c478bd9Sstevel@tonic-gate * how to avoid it. 1677c478bd9Sstevel@tonic-gate */ 1687c478bd9Sstevel@tonic-gate 1697c478bd9Sstevel@tonic-gate /* 1707c478bd9Sstevel@tonic-gate * cb_data is shared by count_cb and destroy_cb for simplicity. 1717c478bd9Sstevel@tonic-gate */ 1727c478bd9Sstevel@tonic-gate struct cb_data { 1737c478bd9Sstevel@tonic-gate zlog_t *zlogp; 1747c478bd9Sstevel@tonic-gate int found; 1757c478bd9Sstevel@tonic-gate int killed; 1767c478bd9Sstevel@tonic-gate }; 1777c478bd9Sstevel@tonic-gate 1787c478bd9Sstevel@tonic-gate static int 1797c478bd9Sstevel@tonic-gate count_cb(di_node_t node, void *arg) 1807c478bd9Sstevel@tonic-gate { 1817c478bd9Sstevel@tonic-gate struct cb_data *cb = (struct cb_data *)arg; 1827c478bd9Sstevel@tonic-gate char *prop_data; 1837c478bd9Sstevel@tonic-gate 1847c478bd9Sstevel@tonic-gate if (di_prop_lookup_strings(DDI_DEV_T_ANY, node, "zonename", 1857c478bd9Sstevel@tonic-gate &prop_data) != -1) { 1867c478bd9Sstevel@tonic-gate assert(prop_data != NULL); 1877c478bd9Sstevel@tonic-gate if (strcmp(prop_data, zone_name) == 0) { 1887c478bd9Sstevel@tonic-gate cb->found++; 1897c478bd9Sstevel@tonic-gate return (DI_WALK_CONTINUE); 1907c478bd9Sstevel@tonic-gate } 1917c478bd9Sstevel@tonic-gate } 1927c478bd9Sstevel@tonic-gate return (DI_WALK_CONTINUE); 1937c478bd9Sstevel@tonic-gate } 1947c478bd9Sstevel@tonic-gate 1957c478bd9Sstevel@tonic-gate static int 1967c478bd9Sstevel@tonic-gate count_console_devs(zlog_t *zlogp) 1977c478bd9Sstevel@tonic-gate { 1987c478bd9Sstevel@tonic-gate di_node_t root; 1997c478bd9Sstevel@tonic-gate struct cb_data cb; 2007c478bd9Sstevel@tonic-gate 2017c478bd9Sstevel@tonic-gate bzero(&cb, sizeof (cb)); 2027c478bd9Sstevel@tonic-gate cb.zlogp = zlogp; 2037c478bd9Sstevel@tonic-gate 2047c478bd9Sstevel@tonic-gate if ((root = di_init(ZCONSNEX_DEVTREEPATH, DINFOCPYALL)) == 2057c478bd9Sstevel@tonic-gate DI_NODE_NIL) { 2067c478bd9Sstevel@tonic-gate zerror(zlogp, B_TRUE, "%s failed", "di_init"); 2077c478bd9Sstevel@tonic-gate return (-1); 2087c478bd9Sstevel@tonic-gate } 2097c478bd9Sstevel@tonic-gate 2107c478bd9Sstevel@tonic-gate (void) di_walk_node(root, DI_WALK_CLDFIRST, (void *)&cb, count_cb); 2117c478bd9Sstevel@tonic-gate di_fini(root); 2127c478bd9Sstevel@tonic-gate return (cb.found); 2137c478bd9Sstevel@tonic-gate } 2147c478bd9Sstevel@tonic-gate 2157c478bd9Sstevel@tonic-gate /* 2167c478bd9Sstevel@tonic-gate * destroy_console_devs() and its helper destroy_cb() tears down any console 2177c478bd9Sstevel@tonic-gate * instances associated with this zone. If things went very wrong, we 2187c478bd9Sstevel@tonic-gate * might have more than one console instance hanging around. This routine 2197c478bd9Sstevel@tonic-gate * hunts down and tries to remove all of them. Of course, if the console 2207c478bd9Sstevel@tonic-gate * is open, the instance will not detach, which is a potential issue. 2217c478bd9Sstevel@tonic-gate */ 2227c478bd9Sstevel@tonic-gate static int 2237c478bd9Sstevel@tonic-gate destroy_cb(di_node_t node, void *arg) 2247c478bd9Sstevel@tonic-gate { 2257c478bd9Sstevel@tonic-gate struct cb_data *cb = (struct cb_data *)arg; 2267c478bd9Sstevel@tonic-gate char *prop_data; 2277c478bd9Sstevel@tonic-gate char *tmp; 2287c478bd9Sstevel@tonic-gate char devpath[MAXPATHLEN]; 2297c478bd9Sstevel@tonic-gate devctl_hdl_t hdl; 2307c478bd9Sstevel@tonic-gate 2317c478bd9Sstevel@tonic-gate if (di_prop_lookup_strings(DDI_DEV_T_ANY, node, "zonename", 2327c478bd9Sstevel@tonic-gate &prop_data) == -1) 2337c478bd9Sstevel@tonic-gate return (DI_WALK_CONTINUE); 2347c478bd9Sstevel@tonic-gate 2357c478bd9Sstevel@tonic-gate assert(prop_data != NULL); 2367c478bd9Sstevel@tonic-gate if (strcmp(prop_data, zone_name) != 0) { 2377c478bd9Sstevel@tonic-gate /* this is the console for a different zone */ 2387c478bd9Sstevel@tonic-gate return (DI_WALK_CONTINUE); 2397c478bd9Sstevel@tonic-gate } 2407c478bd9Sstevel@tonic-gate 2417c478bd9Sstevel@tonic-gate cb->found++; 2427c478bd9Sstevel@tonic-gate tmp = di_devfs_path(node); 2437c478bd9Sstevel@tonic-gate (void) snprintf(devpath, sizeof (devpath), "/devices/%s", tmp); 2447c478bd9Sstevel@tonic-gate di_devfs_path_free(tmp); 2457c478bd9Sstevel@tonic-gate 2467c478bd9Sstevel@tonic-gate if ((hdl = devctl_device_acquire(devpath, 0)) == NULL) { 2477c478bd9Sstevel@tonic-gate zerror(cb->zlogp, B_TRUE, "WARNING: console %s found, " 2487c478bd9Sstevel@tonic-gate "but it could not be controlled.", devpath); 2497c478bd9Sstevel@tonic-gate return (DI_WALK_CONTINUE); 2507c478bd9Sstevel@tonic-gate } 2517c478bd9Sstevel@tonic-gate if (devctl_device_remove(hdl) == 0) { 2527c478bd9Sstevel@tonic-gate cb->killed++; 2537c478bd9Sstevel@tonic-gate } else { 2547c478bd9Sstevel@tonic-gate zerror(cb->zlogp, B_TRUE, "WARNING: console %s found, " 2557c478bd9Sstevel@tonic-gate "but it could not be removed.", devpath); 2567c478bd9Sstevel@tonic-gate } 2577c478bd9Sstevel@tonic-gate devctl_release(hdl); 2587c478bd9Sstevel@tonic-gate return (DI_WALK_CONTINUE); 2597c478bd9Sstevel@tonic-gate } 2607c478bd9Sstevel@tonic-gate 2617c478bd9Sstevel@tonic-gate static int 2627c478bd9Sstevel@tonic-gate destroy_console_devs(zlog_t *zlogp) 2637c478bd9Sstevel@tonic-gate { 2649d5056eaSjv227347 char conspath[MAXPATHLEN]; 2657c478bd9Sstevel@tonic-gate di_node_t root; 2667c478bd9Sstevel@tonic-gate struct cb_data cb; 2679d5056eaSjv227347 int masterfd; 2689d5056eaSjv227347 int slavefd; 2699d5056eaSjv227347 2709d5056eaSjv227347 /* 2719d5056eaSjv227347 * Signal the master side to release its handle on the slave side by 2729d5056eaSjv227347 * issuing a ZC_RELEASESLAVE ioctl. 2739d5056eaSjv227347 */ 2749d5056eaSjv227347 (void) snprintf(conspath, sizeof (conspath), "/dev/zcons/%s/%s", 2759d5056eaSjv227347 zone_name, ZCONS_MASTER_NAME); 2769d5056eaSjv227347 if ((masterfd = open(conspath, O_RDWR | O_NOCTTY)) != -1) { 2779d5056eaSjv227347 (void) snprintf(conspath, sizeof (conspath), "/dev/zcons/%s/%s", 2789d5056eaSjv227347 zone_name, ZCONS_SLAVE_NAME); 2799d5056eaSjv227347 if ((slavefd = open(conspath, O_RDWR | O_NOCTTY)) != -1) { 2809d5056eaSjv227347 if (ioctl(masterfd, ZC_RELEASESLAVE, 2819d5056eaSjv227347 (caddr_t)(intptr_t)slavefd) != 0) 2829d5056eaSjv227347 zerror(zlogp, B_TRUE, "WARNING: error while " 2839d5056eaSjv227347 "releasing slave handle of zone console for" 2849d5056eaSjv227347 " %s", zone_name); 2859d5056eaSjv227347 (void) close(slavefd); 2869d5056eaSjv227347 } else { 2879d5056eaSjv227347 zerror(zlogp, B_TRUE, "WARNING: could not open slave " 2889d5056eaSjv227347 "side of zone console for %s to release slave " 2899d5056eaSjv227347 "handle", zone_name); 2909d5056eaSjv227347 } 2919d5056eaSjv227347 (void) close(masterfd); 2929d5056eaSjv227347 } else { 2939d5056eaSjv227347 zerror(zlogp, B_TRUE, "WARNING: could not open master side of " 2949d5056eaSjv227347 "zone console for %s to release slave handle", zone_name); 2959d5056eaSjv227347 } 2967c478bd9Sstevel@tonic-gate 2977c478bd9Sstevel@tonic-gate bzero(&cb, sizeof (cb)); 2987c478bd9Sstevel@tonic-gate cb.zlogp = zlogp; 2997c478bd9Sstevel@tonic-gate 3007c478bd9Sstevel@tonic-gate if ((root = di_init(ZCONSNEX_DEVTREEPATH, DINFOCPYALL)) == 3017c478bd9Sstevel@tonic-gate DI_NODE_NIL) { 3027c478bd9Sstevel@tonic-gate zerror(zlogp, B_TRUE, "%s failed", "di_init"); 3037c478bd9Sstevel@tonic-gate return (-1); 3047c478bd9Sstevel@tonic-gate } 3057c478bd9Sstevel@tonic-gate 3067c478bd9Sstevel@tonic-gate (void) di_walk_node(root, DI_WALK_CLDFIRST, (void *)&cb, destroy_cb); 3077c478bd9Sstevel@tonic-gate if (cb.found > 1) { 3087c478bd9Sstevel@tonic-gate zerror(zlogp, B_FALSE, "WARNING: multiple zone console " 3097c478bd9Sstevel@tonic-gate "instances detected for zone '%s'; %d of %d " 3107c478bd9Sstevel@tonic-gate "successfully removed.", 3117c478bd9Sstevel@tonic-gate zone_name, cb.killed, cb.found); 3127c478bd9Sstevel@tonic-gate } 3137c478bd9Sstevel@tonic-gate 3147c478bd9Sstevel@tonic-gate di_fini(root); 3157c478bd9Sstevel@tonic-gate return (0); 3167c478bd9Sstevel@tonic-gate } 3177c478bd9Sstevel@tonic-gate 3187c478bd9Sstevel@tonic-gate /* 3197c478bd9Sstevel@tonic-gate * init_console_dev() drives the device-tree configuration of the zone 3207c478bd9Sstevel@tonic-gate * console device. The general strategy is to use the libdevice (devctl) 3217c478bd9Sstevel@tonic-gate * interfaces to instantiate a new zone console node. We do a lot of 3227c478bd9Sstevel@tonic-gate * sanity checking, and are careful to reuse a console if one exists. 3237c478bd9Sstevel@tonic-gate * 3247c478bd9Sstevel@tonic-gate * Once the device is in the device tree, we kick devfsadm via di_init_devs() 3257c478bd9Sstevel@tonic-gate * to ensure that the appropriate symlinks (to the master and slave console 3267c478bd9Sstevel@tonic-gate * devices) are placed in /dev in the global zone. 3277c478bd9Sstevel@tonic-gate */ 3287c478bd9Sstevel@tonic-gate static int 3297c478bd9Sstevel@tonic-gate init_console_dev(zlog_t *zlogp) 3307c478bd9Sstevel@tonic-gate { 3319d5056eaSjv227347 char conspath[MAXPATHLEN]; 3329d5056eaSjv227347 devctl_hdl_t bus_hdl = NULL; 3339d5056eaSjv227347 devctl_hdl_t dev_hdl = NULL; 3347c478bd9Sstevel@tonic-gate devctl_ddef_t ddef_hdl = NULL; 3357c478bd9Sstevel@tonic-gate di_devlink_handle_t dl = NULL; 3369d5056eaSjv227347 int rv = -1; 3379d5056eaSjv227347 int ndevs; 3389d5056eaSjv227347 int masterfd; 3399d5056eaSjv227347 int slavefd; 340*e1c90a83SJerry Jelinek int i; 3417c478bd9Sstevel@tonic-gate 3427c478bd9Sstevel@tonic-gate /* 3437c478bd9Sstevel@tonic-gate * Don't re-setup console if it is working and ready already; just 3447c478bd9Sstevel@tonic-gate * skip ahead to making devlinks, which we do for sanity's sake. 3457c478bd9Sstevel@tonic-gate */ 3467c478bd9Sstevel@tonic-gate ndevs = count_console_devs(zlogp); 3477c478bd9Sstevel@tonic-gate if (ndevs == 1) { 3487c478bd9Sstevel@tonic-gate goto devlinks; 3497c478bd9Sstevel@tonic-gate } else if (ndevs > 1 || ndevs == -1) { 3507c478bd9Sstevel@tonic-gate /* 3517c478bd9Sstevel@tonic-gate * For now, this seems like a reasonable but harsh punishment. 3527c478bd9Sstevel@tonic-gate * If needed, we could try to get clever and delete all but 3537c478bd9Sstevel@tonic-gate * the console which is pointed at by the current symlink. 3547c478bd9Sstevel@tonic-gate */ 3557c478bd9Sstevel@tonic-gate if (destroy_console_devs(zlogp) == -1) { 3567c478bd9Sstevel@tonic-gate goto error; 3577c478bd9Sstevel@tonic-gate } 3587c478bd9Sstevel@tonic-gate } 3597c478bd9Sstevel@tonic-gate 3607c478bd9Sstevel@tonic-gate /* 3617c478bd9Sstevel@tonic-gate * Time to make the consoles! 3627c478bd9Sstevel@tonic-gate */ 3637c478bd9Sstevel@tonic-gate if ((bus_hdl = devctl_bus_acquire(ZCONSNEX_FILEPATH, 0)) == NULL) { 3647c478bd9Sstevel@tonic-gate zerror(zlogp, B_TRUE, "%s failed", "devctl_bus_acquire"); 3657c478bd9Sstevel@tonic-gate goto error; 3667c478bd9Sstevel@tonic-gate } 3677c478bd9Sstevel@tonic-gate if ((ddef_hdl = devctl_ddef_alloc("zcons", 0)) == NULL) { 3687c478bd9Sstevel@tonic-gate zerror(zlogp, B_TRUE, "failed to allocate ddef handle"); 3697c478bd9Sstevel@tonic-gate goto error; 3707c478bd9Sstevel@tonic-gate } 3717c478bd9Sstevel@tonic-gate /* 3727c478bd9Sstevel@tonic-gate * Set three properties on this node; the first is the name of the 3737c478bd9Sstevel@tonic-gate * zone; the second is a flag which lets pseudo know that it is 3747c478bd9Sstevel@tonic-gate * OK to automatically allocate an instance # for this device; 3757c478bd9Sstevel@tonic-gate * the third tells the device framework not to auto-detach this 3767c478bd9Sstevel@tonic-gate * node-- we need the node to still be there when we ask devfsadmd 3777c478bd9Sstevel@tonic-gate * to make links, and when we need to open it. 3787c478bd9Sstevel@tonic-gate */ 3797c478bd9Sstevel@tonic-gate if (devctl_ddef_string(ddef_hdl, "zonename", zone_name) == -1) { 3807c478bd9Sstevel@tonic-gate zerror(zlogp, B_TRUE, "failed to create zonename property"); 3817c478bd9Sstevel@tonic-gate goto error; 3827c478bd9Sstevel@tonic-gate } 3837c478bd9Sstevel@tonic-gate if (devctl_ddef_int(ddef_hdl, "auto-assign-instance", 1) == -1) { 3847c478bd9Sstevel@tonic-gate zerror(zlogp, B_TRUE, "failed to create auto-assign-instance " 3857c478bd9Sstevel@tonic-gate "property"); 3867c478bd9Sstevel@tonic-gate goto error; 3877c478bd9Sstevel@tonic-gate } 3887c478bd9Sstevel@tonic-gate if (devctl_ddef_int(ddef_hdl, "ddi-no-autodetach", 1) == -1) { 3897c478bd9Sstevel@tonic-gate zerror(zlogp, B_TRUE, "failed to create ddi-no-auto-detach " 3907c478bd9Sstevel@tonic-gate "property"); 3917c478bd9Sstevel@tonic-gate goto error; 3927c478bd9Sstevel@tonic-gate } 3937c478bd9Sstevel@tonic-gate if (devctl_bus_dev_create(bus_hdl, ddef_hdl, 0, &dev_hdl) == -1) { 3947c478bd9Sstevel@tonic-gate zerror(zlogp, B_TRUE, "failed to create console node"); 3957c478bd9Sstevel@tonic-gate goto error; 3967c478bd9Sstevel@tonic-gate } 3977c478bd9Sstevel@tonic-gate 3987c478bd9Sstevel@tonic-gate devlinks: 3997c478bd9Sstevel@tonic-gate if ((dl = di_devlink_init("zcons", DI_MAKE_LINK)) != NULL) { 4007c478bd9Sstevel@tonic-gate (void) di_devlink_fini(&dl); 4017c478bd9Sstevel@tonic-gate } else { 4027c478bd9Sstevel@tonic-gate zerror(zlogp, B_TRUE, "failed to create devlinks"); 4037c478bd9Sstevel@tonic-gate goto error; 4047c478bd9Sstevel@tonic-gate } 4057c478bd9Sstevel@tonic-gate 4069d5056eaSjv227347 /* 4079d5056eaSjv227347 * Open the master side of the console and issue the ZC_HOLDSLAVE ioctl, 4089d5056eaSjv227347 * which will cause the master to retain a reference to the slave. 4099d5056eaSjv227347 * This prevents ttymon from blowing through the slave's STREAMS anchor. 4109d5056eaSjv227347 */ 4119d5056eaSjv227347 (void) snprintf(conspath, sizeof (conspath), "/dev/zcons/%s/%s", 4129d5056eaSjv227347 zone_name, ZCONS_MASTER_NAME); 4139d5056eaSjv227347 if ((masterfd = open(conspath, O_RDWR | O_NOCTTY)) == -1) { 4149d5056eaSjv227347 zerror(zlogp, B_TRUE, "ERROR: could not open master side of " 4159d5056eaSjv227347 "zone console for %s to acquire slave handle", zone_name); 4169d5056eaSjv227347 goto error; 4179d5056eaSjv227347 } 4189d5056eaSjv227347 (void) snprintf(conspath, sizeof (conspath), "/dev/zcons/%s/%s", 4199d5056eaSjv227347 zone_name, ZCONS_SLAVE_NAME); 4209d5056eaSjv227347 if ((slavefd = open(conspath, O_RDWR | O_NOCTTY)) == -1) { 4219d5056eaSjv227347 zerror(zlogp, B_TRUE, "ERROR: could not open slave side of zone" 4229d5056eaSjv227347 " console for %s to acquire slave handle", zone_name); 4239d5056eaSjv227347 (void) close(masterfd); 4249d5056eaSjv227347 goto error; 4259d5056eaSjv227347 } 426*e1c90a83SJerry Jelinek /* 427*e1c90a83SJerry Jelinek * This ioctl can occasionally return ENXIO if devfs doesn't have 428*e1c90a83SJerry Jelinek * everything plumbed up yet due to heavy zone startup load. Wait for 429*e1c90a83SJerry Jelinek * 1 sec. and retry a few times before we fail to boot the zone. 430*e1c90a83SJerry Jelinek */ 431*e1c90a83SJerry Jelinek for (i = 0; i < 5; i++) { 432*e1c90a83SJerry Jelinek if (ioctl(masterfd, ZC_HOLDSLAVE, (caddr_t)(intptr_t)slavefd) 433*e1c90a83SJerry Jelinek == 0) { 4347c478bd9Sstevel@tonic-gate rv = 0; 435*e1c90a83SJerry Jelinek break; 436*e1c90a83SJerry Jelinek } else if (errno != ENXIO) { 437*e1c90a83SJerry Jelinek break; 438*e1c90a83SJerry Jelinek } 439*e1c90a83SJerry Jelinek (void) sleep(1); 440*e1c90a83SJerry Jelinek } 441*e1c90a83SJerry Jelinek if (rv != 0) 4429d5056eaSjv227347 zerror(zlogp, B_TRUE, "ERROR: error while acquiring slave " 4439d5056eaSjv227347 "handle of zone console for %s", zone_name); 444*e1c90a83SJerry Jelinek 4459d5056eaSjv227347 (void) close(slavefd); 4469d5056eaSjv227347 (void) close(masterfd); 4479d5056eaSjv227347 4487c478bd9Sstevel@tonic-gate error: 4497c478bd9Sstevel@tonic-gate if (ddef_hdl) 4507c478bd9Sstevel@tonic-gate devctl_ddef_free(ddef_hdl); 4517c478bd9Sstevel@tonic-gate if (bus_hdl) 4527c478bd9Sstevel@tonic-gate devctl_release(bus_hdl); 4537c478bd9Sstevel@tonic-gate if (dev_hdl) 4547c478bd9Sstevel@tonic-gate devctl_release(dev_hdl); 4557c478bd9Sstevel@tonic-gate return (rv); 4567c478bd9Sstevel@tonic-gate } 4577c478bd9Sstevel@tonic-gate 4587c478bd9Sstevel@tonic-gate static int 4597c478bd9Sstevel@tonic-gate init_console_sock(zlog_t *zlogp) 4607c478bd9Sstevel@tonic-gate { 4617c478bd9Sstevel@tonic-gate int servfd; 4627c478bd9Sstevel@tonic-gate struct sockaddr_un servaddr; 4637c478bd9Sstevel@tonic-gate 4647c478bd9Sstevel@tonic-gate bzero(&servaddr, sizeof (servaddr)); 4657c478bd9Sstevel@tonic-gate servaddr.sun_family = AF_UNIX; 4667c478bd9Sstevel@tonic-gate (void) snprintf(servaddr.sun_path, sizeof (servaddr.sun_path), 4677c478bd9Sstevel@tonic-gate CONSOLE_SOCKPATH, zone_name); 4687c478bd9Sstevel@tonic-gate 4697c478bd9Sstevel@tonic-gate if ((servfd = socket(AF_UNIX, SOCK_STREAM, 0)) == -1) { 4707c478bd9Sstevel@tonic-gate zerror(zlogp, B_TRUE, "console setup: could not create socket"); 4717c478bd9Sstevel@tonic-gate return (-1); 4727c478bd9Sstevel@tonic-gate } 4737c478bd9Sstevel@tonic-gate (void) unlink(servaddr.sun_path); 4747c478bd9Sstevel@tonic-gate 4757c478bd9Sstevel@tonic-gate if (bind(servfd, (struct sockaddr *)&servaddr, 4767c478bd9Sstevel@tonic-gate sizeof (servaddr)) == -1) { 4777c478bd9Sstevel@tonic-gate zerror(zlogp, B_TRUE, 4787c478bd9Sstevel@tonic-gate "console setup: could not bind to socket"); 4797c478bd9Sstevel@tonic-gate goto out; 4807c478bd9Sstevel@tonic-gate } 4817c478bd9Sstevel@tonic-gate 4827c478bd9Sstevel@tonic-gate if (listen(servfd, 4) == -1) { 4837c478bd9Sstevel@tonic-gate zerror(zlogp, B_TRUE, 4847c478bd9Sstevel@tonic-gate "console setup: could not listen on socket"); 4857c478bd9Sstevel@tonic-gate goto out; 4867c478bd9Sstevel@tonic-gate } 4877c478bd9Sstevel@tonic-gate return (servfd); 4887c478bd9Sstevel@tonic-gate 4897c478bd9Sstevel@tonic-gate out: 4907c478bd9Sstevel@tonic-gate (void) unlink(servaddr.sun_path); 4917c478bd9Sstevel@tonic-gate (void) close(servfd); 4927c478bd9Sstevel@tonic-gate return (-1); 4937c478bd9Sstevel@tonic-gate } 4947c478bd9Sstevel@tonic-gate 4957c478bd9Sstevel@tonic-gate static void 4967c478bd9Sstevel@tonic-gate destroy_console_sock(int servfd) 4977c478bd9Sstevel@tonic-gate { 4987c478bd9Sstevel@tonic-gate char path[MAXPATHLEN]; 4997c478bd9Sstevel@tonic-gate 5007c478bd9Sstevel@tonic-gate (void) snprintf(path, sizeof (path), CONSOLE_SOCKPATH, zone_name); 5017c478bd9Sstevel@tonic-gate (void) unlink(path); 5027c478bd9Sstevel@tonic-gate (void) shutdown(servfd, SHUT_RDWR); 5037c478bd9Sstevel@tonic-gate (void) close(servfd); 5047c478bd9Sstevel@tonic-gate } 5057c478bd9Sstevel@tonic-gate 5067c478bd9Sstevel@tonic-gate /* 5077c478bd9Sstevel@tonic-gate * Read the "ident" string from the client's descriptor; this routine also 5087c478bd9Sstevel@tonic-gate * tolerates being called with pid=NULL, for times when you want to "eat" 5097c478bd9Sstevel@tonic-gate * the ident string from a client without saving it. 5107c478bd9Sstevel@tonic-gate */ 5117c478bd9Sstevel@tonic-gate static int 5127c478bd9Sstevel@tonic-gate get_client_ident(int clifd, pid_t *pid, char *locale, size_t locale_len) 5137c478bd9Sstevel@tonic-gate { 5147c478bd9Sstevel@tonic-gate char buf[BUFSIZ], *bufp; 5157c478bd9Sstevel@tonic-gate size_t buflen = sizeof (buf); 5167c478bd9Sstevel@tonic-gate char c = '\0'; 5177c478bd9Sstevel@tonic-gate int i = 0, r; 5187c478bd9Sstevel@tonic-gate 5197c478bd9Sstevel@tonic-gate /* "eat up the ident string" case, for simplicity */ 5207c478bd9Sstevel@tonic-gate if (pid == NULL) { 5217c478bd9Sstevel@tonic-gate assert(locale == NULL && locale_len == 0); 5227c478bd9Sstevel@tonic-gate while (read(clifd, &c, 1) == 1) { 5237c478bd9Sstevel@tonic-gate if (c == '\n') 5247c478bd9Sstevel@tonic-gate return (0); 5257c478bd9Sstevel@tonic-gate } 5267c478bd9Sstevel@tonic-gate } 5277c478bd9Sstevel@tonic-gate 5287c478bd9Sstevel@tonic-gate bzero(buf, sizeof (buf)); 5297c478bd9Sstevel@tonic-gate while ((buflen > 1) && (r = read(clifd, &c, 1)) == 1) { 5307c478bd9Sstevel@tonic-gate buflen--; 5317c478bd9Sstevel@tonic-gate if (c == '\n') 5327c478bd9Sstevel@tonic-gate break; 5337c478bd9Sstevel@tonic-gate 5347c478bd9Sstevel@tonic-gate buf[i] = c; 5357c478bd9Sstevel@tonic-gate i++; 5367c478bd9Sstevel@tonic-gate } 5377c478bd9Sstevel@tonic-gate if (r == -1) 5387c478bd9Sstevel@tonic-gate return (-1); 5397c478bd9Sstevel@tonic-gate 5407c478bd9Sstevel@tonic-gate /* 5417c478bd9Sstevel@tonic-gate * We've filled the buffer, but still haven't seen \n. Keep eating 5427c478bd9Sstevel@tonic-gate * until we find it; we don't expect this to happen, but this is 5437c478bd9Sstevel@tonic-gate * defensive. 5447c478bd9Sstevel@tonic-gate */ 5457c478bd9Sstevel@tonic-gate if (c != '\n') { 5467c478bd9Sstevel@tonic-gate while ((r = read(clifd, &c, sizeof (c))) > 0) 5477c478bd9Sstevel@tonic-gate if (c == '\n') 5487c478bd9Sstevel@tonic-gate break; 5497c478bd9Sstevel@tonic-gate } 5507c478bd9Sstevel@tonic-gate 5517c478bd9Sstevel@tonic-gate /* 5527c478bd9Sstevel@tonic-gate * Parse buffer for message of the form: IDENT <pid> <locale> 5537c478bd9Sstevel@tonic-gate */ 5547c478bd9Sstevel@tonic-gate bufp = buf; 5557c478bd9Sstevel@tonic-gate if (strncmp(bufp, "IDENT ", 6) != 0) 5567c478bd9Sstevel@tonic-gate return (-1); 5577c478bd9Sstevel@tonic-gate bufp += 6; 5587c478bd9Sstevel@tonic-gate errno = 0; 5597c478bd9Sstevel@tonic-gate *pid = strtoll(bufp, &bufp, 10); 5607c478bd9Sstevel@tonic-gate if (errno != 0) 5617c478bd9Sstevel@tonic-gate return (-1); 5627c478bd9Sstevel@tonic-gate 5637c478bd9Sstevel@tonic-gate while (*bufp != '\0' && isspace(*bufp)) 5647c478bd9Sstevel@tonic-gate bufp++; 5657c478bd9Sstevel@tonic-gate (void) strlcpy(locale, bufp, locale_len); 5667c478bd9Sstevel@tonic-gate 5677c478bd9Sstevel@tonic-gate return (0); 5687c478bd9Sstevel@tonic-gate } 5697c478bd9Sstevel@tonic-gate 5707c478bd9Sstevel@tonic-gate static int 5717c478bd9Sstevel@tonic-gate accept_client(int servfd, pid_t *pid, char *locale, size_t locale_len) 5727c478bd9Sstevel@tonic-gate { 5737c478bd9Sstevel@tonic-gate int connfd; 5747c478bd9Sstevel@tonic-gate struct sockaddr_un cliaddr; 5757c478bd9Sstevel@tonic-gate socklen_t clilen; 5767c478bd9Sstevel@tonic-gate 5777c478bd9Sstevel@tonic-gate clilen = sizeof (cliaddr); 5787c478bd9Sstevel@tonic-gate connfd = accept(servfd, (struct sockaddr *)&cliaddr, &clilen); 5797c478bd9Sstevel@tonic-gate if (connfd == -1) 5807c478bd9Sstevel@tonic-gate return (-1); 5817c478bd9Sstevel@tonic-gate if (get_client_ident(connfd, pid, locale, locale_len) == -1) { 5827c478bd9Sstevel@tonic-gate (void) shutdown(connfd, SHUT_RDWR); 5837c478bd9Sstevel@tonic-gate (void) close(connfd); 5847c478bd9Sstevel@tonic-gate return (-1); 5857c478bd9Sstevel@tonic-gate } 5867c478bd9Sstevel@tonic-gate (void) write(connfd, "OK\n", 3); 5877c478bd9Sstevel@tonic-gate return (connfd); 5887c478bd9Sstevel@tonic-gate } 5897c478bd9Sstevel@tonic-gate 5907c478bd9Sstevel@tonic-gate static void 5917c478bd9Sstevel@tonic-gate reject_client(int servfd, pid_t clientpid) 5927c478bd9Sstevel@tonic-gate { 5937c478bd9Sstevel@tonic-gate int connfd; 5947c478bd9Sstevel@tonic-gate struct sockaddr_un cliaddr; 5957c478bd9Sstevel@tonic-gate socklen_t clilen; 5967c478bd9Sstevel@tonic-gate char nak[MAXPATHLEN]; 5977c478bd9Sstevel@tonic-gate 5987c478bd9Sstevel@tonic-gate clilen = sizeof (cliaddr); 5997c478bd9Sstevel@tonic-gate connfd = accept(servfd, (struct sockaddr *)&cliaddr, &clilen); 6007c478bd9Sstevel@tonic-gate 6017c478bd9Sstevel@tonic-gate /* 6027c478bd9Sstevel@tonic-gate * After hear its ident string, tell client to get lost. 6037c478bd9Sstevel@tonic-gate */ 6047c478bd9Sstevel@tonic-gate if (get_client_ident(connfd, NULL, NULL, 0) == 0) { 6057c478bd9Sstevel@tonic-gate (void) snprintf(nak, sizeof (nak), "%lu\n", 6067c478bd9Sstevel@tonic-gate clientpid); 6077c478bd9Sstevel@tonic-gate (void) write(connfd, nak, strlen(nak)); 6087c478bd9Sstevel@tonic-gate } 6097c478bd9Sstevel@tonic-gate (void) shutdown(connfd, SHUT_RDWR); 6107c478bd9Sstevel@tonic-gate (void) close(connfd); 6117c478bd9Sstevel@tonic-gate } 6127c478bd9Sstevel@tonic-gate 6137c478bd9Sstevel@tonic-gate static void 6147c478bd9Sstevel@tonic-gate event_message(int clifd, char *clilocale, zone_evt_t evt) 6157c478bd9Sstevel@tonic-gate { 6163f2f09c1Sdp char *str, *lstr = NULL; 6173f2f09c1Sdp char lmsg[BUFSIZ]; 6183f2f09c1Sdp char outbuf[BUFSIZ]; 6197c478bd9Sstevel@tonic-gate 6207c478bd9Sstevel@tonic-gate if (clifd == -1) 6217c478bd9Sstevel@tonic-gate return; 6227c478bd9Sstevel@tonic-gate 6237c478bd9Sstevel@tonic-gate switch (evt) { 6247c478bd9Sstevel@tonic-gate case Z_EVT_ZONE_BOOTING: 6253f2f09c1Sdp if (*boot_args == '\0') { 6263f2f09c1Sdp str = "NOTICE: Zone booting up"; 6273f2f09c1Sdp break; 6283f2f09c1Sdp } 6293f2f09c1Sdp /*LINTED*/ 6303f2f09c1Sdp (void) snprintf(lmsg, sizeof (lmsg), localize_msg(clilocale, 6313f2f09c1Sdp "NOTICE: Zone booting up with arguments: %s"), boot_args); 6323f2f09c1Sdp lstr = lmsg; 6337c478bd9Sstevel@tonic-gate break; 6347c478bd9Sstevel@tonic-gate case Z_EVT_ZONE_READIED: 6353f2f09c1Sdp str = "NOTICE: Zone readied"; 6367c478bd9Sstevel@tonic-gate break; 6377c478bd9Sstevel@tonic-gate case Z_EVT_ZONE_HALTED: 6383f2f09c1Sdp str = "NOTICE: Zone halted"; 6397c478bd9Sstevel@tonic-gate break; 6407c478bd9Sstevel@tonic-gate case Z_EVT_ZONE_REBOOTING: 6413f2f09c1Sdp if (*boot_args == '\0') { 6423f2f09c1Sdp str = "NOTICE: Zone rebooting"; 6433f2f09c1Sdp break; 6443f2f09c1Sdp } 6453f2f09c1Sdp /*LINTED*/ 6463f2f09c1Sdp (void) snprintf(lmsg, sizeof (lmsg), localize_msg(clilocale, 6473f2f09c1Sdp "NOTICE: Zone rebooting with arguments: %s"), boot_args); 6483f2f09c1Sdp lstr = lmsg; 6497c478bd9Sstevel@tonic-gate break; 6507c478bd9Sstevel@tonic-gate case Z_EVT_ZONE_UNINSTALLING: 6513f2f09c1Sdp str = "NOTICE: Zone is being uninstalled. Disconnecting..."; 6527c478bd9Sstevel@tonic-gate break; 653ffbafc53Scomay case Z_EVT_ZONE_BOOTFAILED: 6543f2f09c1Sdp str = "NOTICE: Zone boot failed"; 6553f2f09c1Sdp break; 6563f2f09c1Sdp case Z_EVT_ZONE_BADARGS: 6573f2f09c1Sdp /*LINTED*/ 6583f2f09c1Sdp (void) snprintf(lmsg, sizeof (lmsg), 6593f2f09c1Sdp localize_msg(clilocale, 6603f2f09c1Sdp "WARNING: Ignoring invalid boot arguments: %s"), 6613f2f09c1Sdp bad_boot_arg); 6623f2f09c1Sdp lstr = lmsg; 663ffbafc53Scomay break; 6647c478bd9Sstevel@tonic-gate default: 6657c478bd9Sstevel@tonic-gate return; 6667c478bd9Sstevel@tonic-gate } 6673f2f09c1Sdp 6683f2f09c1Sdp if (lstr == NULL) 6693f2f09c1Sdp lstr = localize_msg(clilocale, str); 6703f2f09c1Sdp (void) snprintf(outbuf, sizeof (outbuf), "\r\n[%s]\r\n", lstr); 6713f2f09c1Sdp (void) write(clifd, outbuf, strlen(outbuf)); 6727c478bd9Sstevel@tonic-gate } 6737c478bd9Sstevel@tonic-gate 6747c478bd9Sstevel@tonic-gate /* 6757c478bd9Sstevel@tonic-gate * Check to see if the client at the other end of the socket is still 6767c478bd9Sstevel@tonic-gate * alive; we know it is not if it throws EPIPE at us when we try to write 6777c478bd9Sstevel@tonic-gate * an otherwise harmless 0-length message to it. 6787c478bd9Sstevel@tonic-gate */ 6797c478bd9Sstevel@tonic-gate static int 6807c478bd9Sstevel@tonic-gate test_client(int clifd) 6817c478bd9Sstevel@tonic-gate { 6827c478bd9Sstevel@tonic-gate if ((write(clifd, "", 0) == -1) && errno == EPIPE) 6837c478bd9Sstevel@tonic-gate return (-1); 6847c478bd9Sstevel@tonic-gate return (0); 6857c478bd9Sstevel@tonic-gate } 6867c478bd9Sstevel@tonic-gate 6877c478bd9Sstevel@tonic-gate /* 6887c478bd9Sstevel@tonic-gate * This routine drives the console I/O loop. It polls for input from the 6897c478bd9Sstevel@tonic-gate * master side of the console (output to the console), and from the client 6907c478bd9Sstevel@tonic-gate * (input from the console user). Additionally, it polls on the server fd, 6917c478bd9Sstevel@tonic-gate * and disconnects any clients that might try to hook up with the zone while 6927c478bd9Sstevel@tonic-gate * the console is in use. 6937c478bd9Sstevel@tonic-gate * 6947c478bd9Sstevel@tonic-gate * When the client first calls us up, it is expected to send a line giving 6957c478bd9Sstevel@tonic-gate * its "identity"; this consists of the string 'IDENT <pid> <locale>'. 6967c478bd9Sstevel@tonic-gate * This is so that we can report that the console is busy along with 6977c478bd9Sstevel@tonic-gate * some diagnostics about who has it busy; the locale is used so that 6987c478bd9Sstevel@tonic-gate * asynchronous messages about zone state (like the NOTICE: zone halted 6997c478bd9Sstevel@tonic-gate * messages) can be output in the user's locale. 7007c478bd9Sstevel@tonic-gate */ 7017c478bd9Sstevel@tonic-gate static void 7027c478bd9Sstevel@tonic-gate do_console_io(zlog_t *zlogp, int consfd, int servfd) 7037c478bd9Sstevel@tonic-gate { 7047c478bd9Sstevel@tonic-gate struct pollfd pollfds[4]; 7057c478bd9Sstevel@tonic-gate char ibuf[BUFSIZ]; 7067c478bd9Sstevel@tonic-gate int cc, ret; 7077c478bd9Sstevel@tonic-gate int clifd = -1; 7087c478bd9Sstevel@tonic-gate int pollerr = 0; 7097c478bd9Sstevel@tonic-gate char clilocale[MAXPATHLEN]; 7107c478bd9Sstevel@tonic-gate pid_t clipid = 0; 7117c478bd9Sstevel@tonic-gate 7127c478bd9Sstevel@tonic-gate /* console side, watch for read events */ 7137c478bd9Sstevel@tonic-gate pollfds[0].fd = consfd; 7147c478bd9Sstevel@tonic-gate pollfds[0].events = POLLIN | POLLRDNORM | POLLRDBAND | 7157c478bd9Sstevel@tonic-gate POLLPRI | POLLERR | POLLHUP | POLLNVAL; 7167c478bd9Sstevel@tonic-gate 7177c478bd9Sstevel@tonic-gate /* client side, watch for read events */ 7187c478bd9Sstevel@tonic-gate pollfds[1].fd = clifd; 7197c478bd9Sstevel@tonic-gate pollfds[1].events = pollfds[0].events; 7207c478bd9Sstevel@tonic-gate 7217c478bd9Sstevel@tonic-gate /* the server socket; watch for events (new connections) */ 7227c478bd9Sstevel@tonic-gate pollfds[2].fd = servfd; 7237c478bd9Sstevel@tonic-gate pollfds[2].events = pollfds[0].events; 7247c478bd9Sstevel@tonic-gate 7257c478bd9Sstevel@tonic-gate /* the eventstram; watch for events (e.g.: zone halted) */ 7267c478bd9Sstevel@tonic-gate pollfds[3].fd = eventstream[1]; 7277c478bd9Sstevel@tonic-gate pollfds[3].events = pollfds[0].events; 7287c478bd9Sstevel@tonic-gate 7297c478bd9Sstevel@tonic-gate for (;;) { 7307c478bd9Sstevel@tonic-gate pollfds[0].revents = pollfds[1].revents = 0; 7317c478bd9Sstevel@tonic-gate pollfds[2].revents = pollfds[3].revents = 0; 7327c478bd9Sstevel@tonic-gate 7337c478bd9Sstevel@tonic-gate ret = poll(pollfds, 7347c478bd9Sstevel@tonic-gate sizeof (pollfds) / sizeof (struct pollfd), -1); 7357c478bd9Sstevel@tonic-gate if (ret == -1 && errno != EINTR) { 7367c478bd9Sstevel@tonic-gate zerror(zlogp, B_TRUE, "poll failed"); 7377c478bd9Sstevel@tonic-gate /* we are hosed, close connection */ 7387c478bd9Sstevel@tonic-gate break; 7397c478bd9Sstevel@tonic-gate } 7407c478bd9Sstevel@tonic-gate 7417c478bd9Sstevel@tonic-gate /* event from console side */ 7427c478bd9Sstevel@tonic-gate if (pollfds[0].revents) { 7437c478bd9Sstevel@tonic-gate if (pollfds[0].revents & 7447c478bd9Sstevel@tonic-gate (POLLIN | POLLRDNORM | POLLRDBAND | POLLPRI)) { 7457c478bd9Sstevel@tonic-gate errno = 0; 7467c478bd9Sstevel@tonic-gate cc = read(consfd, ibuf, BUFSIZ); 7477c478bd9Sstevel@tonic-gate if (cc <= 0 && (errno != EINTR) && 7487c478bd9Sstevel@tonic-gate (errno != EAGAIN)) 7497c478bd9Sstevel@tonic-gate break; 7507c478bd9Sstevel@tonic-gate /* 7517c478bd9Sstevel@tonic-gate * Lose I/O if no one is listening 7527c478bd9Sstevel@tonic-gate */ 7537c478bd9Sstevel@tonic-gate if (clifd != -1 && cc > 0) 7547c478bd9Sstevel@tonic-gate (void) write(clifd, ibuf, cc); 7557c478bd9Sstevel@tonic-gate } else { 7567c478bd9Sstevel@tonic-gate pollerr = pollfds[0].revents; 7577c478bd9Sstevel@tonic-gate zerror(zlogp, B_FALSE, 7587c478bd9Sstevel@tonic-gate "closing connection with (console) " 7597c478bd9Sstevel@tonic-gate "pollerr %d\n", pollerr); 7607c478bd9Sstevel@tonic-gate break; 7617c478bd9Sstevel@tonic-gate } 7627c478bd9Sstevel@tonic-gate } 7637c478bd9Sstevel@tonic-gate 7647c478bd9Sstevel@tonic-gate /* event from client side */ 7657c478bd9Sstevel@tonic-gate if (pollfds[1].revents) { 7667c478bd9Sstevel@tonic-gate if (pollfds[1].revents & 7677c478bd9Sstevel@tonic-gate (POLLIN | POLLRDNORM | POLLRDBAND | POLLPRI)) { 7687c478bd9Sstevel@tonic-gate errno = 0; 7697c478bd9Sstevel@tonic-gate cc = read(clifd, ibuf, BUFSIZ); 7707c478bd9Sstevel@tonic-gate if (cc <= 0 && (errno != EINTR) && 7717c478bd9Sstevel@tonic-gate (errno != EAGAIN)) 7727c478bd9Sstevel@tonic-gate break; 7737c478bd9Sstevel@tonic-gate (void) write(consfd, ibuf, cc); 7747c478bd9Sstevel@tonic-gate } else { 7757c478bd9Sstevel@tonic-gate pollerr = pollfds[1].revents; 7767c478bd9Sstevel@tonic-gate zerror(zlogp, B_FALSE, 7777c478bd9Sstevel@tonic-gate "closing connection with (client) " 7787c478bd9Sstevel@tonic-gate "pollerr %d\n", pollerr); 7797c478bd9Sstevel@tonic-gate break; 7807c478bd9Sstevel@tonic-gate } 7817c478bd9Sstevel@tonic-gate } 7827c478bd9Sstevel@tonic-gate 7837c478bd9Sstevel@tonic-gate /* event from server socket */ 7847c478bd9Sstevel@tonic-gate if (pollfds[2].revents && 7857c478bd9Sstevel@tonic-gate (pollfds[2].revents & (POLLIN | POLLRDNORM))) { 7867c478bd9Sstevel@tonic-gate if (clifd != -1) { 7877c478bd9Sstevel@tonic-gate /* 7887c478bd9Sstevel@tonic-gate * Test the client to see if it is really 7897c478bd9Sstevel@tonic-gate * still alive. If it has died but we 7907c478bd9Sstevel@tonic-gate * haven't yet detected that, we might 7917c478bd9Sstevel@tonic-gate * deny a legitimate connect attempt. If it 7927c478bd9Sstevel@tonic-gate * is dead, we break out; once we tear down 7937c478bd9Sstevel@tonic-gate * the old connection, the new connection 7947c478bd9Sstevel@tonic-gate * will happen. 7957c478bd9Sstevel@tonic-gate */ 7967c478bd9Sstevel@tonic-gate if (test_client(clifd) == -1) { 7977c478bd9Sstevel@tonic-gate break; 7987c478bd9Sstevel@tonic-gate } 7997c478bd9Sstevel@tonic-gate /* we're already handling a client */ 8007c478bd9Sstevel@tonic-gate reject_client(servfd, clipid); 8017c478bd9Sstevel@tonic-gate 8027c478bd9Sstevel@tonic-gate 8037c478bd9Sstevel@tonic-gate } else if ((clifd = accept_client(servfd, &clipid, 8047c478bd9Sstevel@tonic-gate clilocale, sizeof (clilocale))) != -1) { 8057c478bd9Sstevel@tonic-gate pollfds[1].fd = clifd; 8067c478bd9Sstevel@tonic-gate 8077c478bd9Sstevel@tonic-gate } else { 8087c478bd9Sstevel@tonic-gate break; 8097c478bd9Sstevel@tonic-gate } 8107c478bd9Sstevel@tonic-gate } 8117c478bd9Sstevel@tonic-gate 8127c478bd9Sstevel@tonic-gate /* 8137c478bd9Sstevel@tonic-gate * Watch for events on the eventstream. This is how we get 8147c478bd9Sstevel@tonic-gate * notified of the zone halting, etc. It provides us a 8157c478bd9Sstevel@tonic-gate * "wakeup" from poll when important things happen, which 8167c478bd9Sstevel@tonic-gate * is good. 8177c478bd9Sstevel@tonic-gate */ 8187c478bd9Sstevel@tonic-gate if (pollfds[3].revents) { 8197c478bd9Sstevel@tonic-gate int evt = eventstream_read(); 8207c478bd9Sstevel@tonic-gate /* 8217c478bd9Sstevel@tonic-gate * After we drain out the event, if we aren't servicing 8227c478bd9Sstevel@tonic-gate * a console client, we hop back out to our caller, 8237c478bd9Sstevel@tonic-gate * which will check to see if it is time to shutdown 8247c478bd9Sstevel@tonic-gate * the daemon, or if we should take another console 8257c478bd9Sstevel@tonic-gate * service lap. 8267c478bd9Sstevel@tonic-gate */ 8277c478bd9Sstevel@tonic-gate if (clifd == -1) { 8287c478bd9Sstevel@tonic-gate break; 8297c478bd9Sstevel@tonic-gate } 8307c478bd9Sstevel@tonic-gate event_message(clifd, clilocale, evt); 8317c478bd9Sstevel@tonic-gate /* 8327c478bd9Sstevel@tonic-gate * Special handling for the message that the zone is 8337c478bd9Sstevel@tonic-gate * uninstalling; we boot the client, then break out 8347c478bd9Sstevel@tonic-gate * of this function. When we return to the 8357c478bd9Sstevel@tonic-gate * serve_console loop, we will see that the zone is 8367c478bd9Sstevel@tonic-gate * in a state < READY, and so zoneadmd will shutdown. 8377c478bd9Sstevel@tonic-gate */ 8387c478bd9Sstevel@tonic-gate if (evt == Z_EVT_ZONE_UNINSTALLING) { 8397c478bd9Sstevel@tonic-gate break; 8407c478bd9Sstevel@tonic-gate } 8417c478bd9Sstevel@tonic-gate } 8427c478bd9Sstevel@tonic-gate 8437c478bd9Sstevel@tonic-gate } 8447c478bd9Sstevel@tonic-gate 8457c478bd9Sstevel@tonic-gate if (clifd != -1) { 8467c478bd9Sstevel@tonic-gate (void) shutdown(clifd, SHUT_RDWR); 8477c478bd9Sstevel@tonic-gate (void) close(clifd); 8487c478bd9Sstevel@tonic-gate } 8497c478bd9Sstevel@tonic-gate } 8507c478bd9Sstevel@tonic-gate 8517c478bd9Sstevel@tonic-gate int 8527c478bd9Sstevel@tonic-gate init_console(zlog_t *zlogp) 8537c478bd9Sstevel@tonic-gate { 8547c478bd9Sstevel@tonic-gate if (init_console_dev(zlogp) == -1) { 8557c478bd9Sstevel@tonic-gate zerror(zlogp, B_FALSE, 8567c478bd9Sstevel@tonic-gate "console setup: device initialization failed"); 8577c478bd9Sstevel@tonic-gate return (-1); 8587c478bd9Sstevel@tonic-gate } 8597c478bd9Sstevel@tonic-gate 8607c478bd9Sstevel@tonic-gate if ((serverfd = init_console_sock(zlogp)) == -1) { 8617c478bd9Sstevel@tonic-gate zerror(zlogp, B_FALSE, 8627c478bd9Sstevel@tonic-gate "console setup: socket initialization failed"); 8637c478bd9Sstevel@tonic-gate return (-1); 8647c478bd9Sstevel@tonic-gate } 8657c478bd9Sstevel@tonic-gate return (0); 8667c478bd9Sstevel@tonic-gate } 8677c478bd9Sstevel@tonic-gate 8687c478bd9Sstevel@tonic-gate /* 8697c478bd9Sstevel@tonic-gate * serve_console() is the master loop for driving console I/O. It is also the 8707c478bd9Sstevel@tonic-gate * routine which is ultimately responsible for "pulling the plug" on zoneadmd 8717c478bd9Sstevel@tonic-gate * when it realizes that the daemon should shut down. 8727c478bd9Sstevel@tonic-gate * 8737c478bd9Sstevel@tonic-gate * The rules for shutdown are: there must be no console client, and the zone 8747c478bd9Sstevel@tonic-gate * state must be < ready. However, we need to give things a chance to actually 8757c478bd9Sstevel@tonic-gate * get going when the daemon starts up-- otherwise the daemon would immediately 8767c478bd9Sstevel@tonic-gate * exit on startup if the zone was in the installed state, so we first drop 8777c478bd9Sstevel@tonic-gate * into the do_console_io() loop in order to give *something* a chance to 8787c478bd9Sstevel@tonic-gate * happen. 8797c478bd9Sstevel@tonic-gate */ 8807c478bd9Sstevel@tonic-gate void 8817c478bd9Sstevel@tonic-gate serve_console(zlog_t *zlogp) 8827c478bd9Sstevel@tonic-gate { 8837c478bd9Sstevel@tonic-gate int masterfd; 8847c478bd9Sstevel@tonic-gate zone_state_t zstate; 8857c478bd9Sstevel@tonic-gate char conspath[MAXPATHLEN]; 8867c478bd9Sstevel@tonic-gate 8877c478bd9Sstevel@tonic-gate (void) snprintf(conspath, sizeof (conspath), 8887c478bd9Sstevel@tonic-gate "/dev/zcons/%s/%s", zone_name, ZCONS_MASTER_NAME); 8897c478bd9Sstevel@tonic-gate 8907c478bd9Sstevel@tonic-gate for (;;) { 8917c478bd9Sstevel@tonic-gate masterfd = open(conspath, O_RDWR|O_NONBLOCK|O_NOCTTY); 8927c478bd9Sstevel@tonic-gate if (masterfd == -1) { 8937c478bd9Sstevel@tonic-gate zerror(zlogp, B_TRUE, "failed to open console master"); 8947c478bd9Sstevel@tonic-gate (void) mutex_lock(&lock); 8957c478bd9Sstevel@tonic-gate goto death; 8967c478bd9Sstevel@tonic-gate } 8977c478bd9Sstevel@tonic-gate 8987c478bd9Sstevel@tonic-gate /* 8997c478bd9Sstevel@tonic-gate * Setting RPROTDIS on the stream means that the control 9007c478bd9Sstevel@tonic-gate * portion of messages received (which we don't care about) 9017c478bd9Sstevel@tonic-gate * will be discarded by the stream head. If we allowed such 9027c478bd9Sstevel@tonic-gate * messages, we wouldn't be able to use read(2), as it fails 9037c478bd9Sstevel@tonic-gate * (EBADMSG) when a message with a control element is received. 9047c478bd9Sstevel@tonic-gate */ 9057c478bd9Sstevel@tonic-gate if (ioctl(masterfd, I_SRDOPT, RNORM|RPROTDIS) == -1) { 9067c478bd9Sstevel@tonic-gate zerror(zlogp, B_TRUE, "failed to set options on " 9077c478bd9Sstevel@tonic-gate "console master"); 9087c478bd9Sstevel@tonic-gate (void) mutex_lock(&lock); 9097c478bd9Sstevel@tonic-gate goto death; 9107c478bd9Sstevel@tonic-gate } 9117c478bd9Sstevel@tonic-gate 9127c478bd9Sstevel@tonic-gate do_console_io(zlogp, masterfd, serverfd); 9137c478bd9Sstevel@tonic-gate 9147c478bd9Sstevel@tonic-gate /* 9157c478bd9Sstevel@tonic-gate * We would prefer not to do this, but hostile zone processes 9167c478bd9Sstevel@tonic-gate * can cause the stream to become tainted, and reads will 9177c478bd9Sstevel@tonic-gate * fail. So, in case something has gone seriously ill, 9187c478bd9Sstevel@tonic-gate * we dismantle the stream and reopen the console when we 9197c478bd9Sstevel@tonic-gate * take another lap. 9207c478bd9Sstevel@tonic-gate */ 9217c478bd9Sstevel@tonic-gate (void) close(masterfd); 9227c478bd9Sstevel@tonic-gate 9237c478bd9Sstevel@tonic-gate (void) mutex_lock(&lock); 9247c478bd9Sstevel@tonic-gate /* 9257c478bd9Sstevel@tonic-gate * We need to set death_throes (see below) atomically with 9267c478bd9Sstevel@tonic-gate * respect to noticing that (a) we have no console client and 9277c478bd9Sstevel@tonic-gate * (b) the zone is not installed. Otherwise we could get a 9287c478bd9Sstevel@tonic-gate * request to boot during this time. Once we set death_throes, 9297c478bd9Sstevel@tonic-gate * any incoming door stuff will be turned away. 9307c478bd9Sstevel@tonic-gate */ 9317c478bd9Sstevel@tonic-gate if (zone_get_state(zone_name, &zstate) == Z_OK) { 9327c478bd9Sstevel@tonic-gate if (zstate < ZONE_STATE_READY) 9337c478bd9Sstevel@tonic-gate goto death; 9347c478bd9Sstevel@tonic-gate } else { 9357c478bd9Sstevel@tonic-gate zerror(zlogp, B_FALSE, 9367c478bd9Sstevel@tonic-gate "unable to determine state of zone"); 9377c478bd9Sstevel@tonic-gate goto death; 9387c478bd9Sstevel@tonic-gate } 9397c478bd9Sstevel@tonic-gate /* 9407c478bd9Sstevel@tonic-gate * Even if zone_get_state() fails, stay conservative, and 9417c478bd9Sstevel@tonic-gate * take another lap. 9427c478bd9Sstevel@tonic-gate */ 9437c478bd9Sstevel@tonic-gate (void) mutex_unlock(&lock); 9447c478bd9Sstevel@tonic-gate } 9457c478bd9Sstevel@tonic-gate 9467c478bd9Sstevel@tonic-gate death: 9477c478bd9Sstevel@tonic-gate assert(MUTEX_HELD(&lock)); 9487c478bd9Sstevel@tonic-gate in_death_throes = B_TRUE; 9497c478bd9Sstevel@tonic-gate (void) mutex_unlock(&lock); 9507c478bd9Sstevel@tonic-gate 9517c478bd9Sstevel@tonic-gate destroy_console_sock(serverfd); 9527c478bd9Sstevel@tonic-gate (void) destroy_console_devs(zlogp); 9537c478bd9Sstevel@tonic-gate } 954