1 /* 2 * CDDL HEADER START 3 * 4 * The contents of this file are subject to the terms of the 5 * Common Development and Distribution License (the "License"). 6 * You may not use this file except in compliance with the License. 7 * 8 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 9 * or http://www.opensolaris.org/os/licensing. 10 * See the License for the specific language governing permissions 11 * and limitations under the License. 12 * 13 * When distributing Covered Code, include this CDDL HEADER in each 14 * file and include the License file at usr/src/OPENSOLARIS.LICENSE. 15 * If applicable, add the following below this CDDL HEADER, with the 16 * fields enclosed by brackets "[]" replaced with your own identifying 17 * information: Portions Copyright [yyyy] [name of copyright owner] 18 * 19 * CDDL HEADER END 20 */ 21 22 /* 23 * Copyright 2006 Sun Microsystems, Inc. All rights reserved. 24 * Use is subject to license terms. 25 */ 26 27 #ifndef _LIBZONECFG_H 28 #define _LIBZONECFG_H 29 30 #pragma ident "%Z%%M% %I% %E% SMI" 31 32 /* 33 * Zone configuration header file. 34 */ 35 36 #ifdef __cplusplus 37 extern "C" { 38 #endif 39 40 /* sys/socket.h is required by net/if.h, which has a constant needed here */ 41 #include <sys/param.h> 42 #include <sys/fstyp.h> 43 #include <sys/mount.h> 44 #include <priv.h> 45 #include <netinet/in.h> 46 #include <sys/socket.h> 47 #include <net/if.h> 48 #include <stdio.h> 49 #include <rctl.h> 50 #include <zone.h> 51 #include <sys/uuid.h> 52 53 #define ZONE_ID_UNDEFINED -1 54 55 #define Z_OK 0 56 #define Z_EMPTY_DOCUMENT 1 /* XML doc root element is null */ 57 #define Z_WRONG_DOC_TYPE 2 /* top-level XML doc element != zone */ 58 #define Z_BAD_PROPERTY 3 /* libxml-level property problem */ 59 #define Z_TEMP_FILE 4 /* problem creating temporary file */ 60 #define Z_SAVING_FILE 5 /* libxml error saving or validating */ 61 #define Z_NO_ENTRY 6 /* no such entry */ 62 #define Z_BOGUS_ZONE_NAME 7 /* illegal zone name */ 63 #define Z_REQD_RESOURCE_MISSING 8 /* required resource missing */ 64 #define Z_REQD_PROPERTY_MISSING 9 /* required property missing */ 65 #define Z_BAD_HANDLE 10 /* bad document handle */ 66 #define Z_NOMEM 11 /* out of memory (like ENOMEM) */ 67 #define Z_INVAL 12 /* invalid argument (like EINVAL) */ 68 #define Z_ACCES 13 /* permission denied (like EACCES) */ 69 #define Z_TOO_BIG 14 /* string won't fit in char array */ 70 #define Z_MISC_FS 15 /* miscellaneous file-system error */ 71 #define Z_NO_ZONE 16 /* no such zone */ 72 #define Z_NO_RESOURCE_TYPE 17 /* no/wrong resource type */ 73 #define Z_NO_RESOURCE_ID 18 /* no/wrong resource id */ 74 #define Z_NO_PROPERTY_TYPE 19 /* no/wrong property type */ 75 #define Z_NO_PROPERTY_ID 20 /* no/wrong property id */ 76 #define Z_BAD_ZONE_STATE 21 /* zone state invalid for given task */ 77 #define Z_INVALID_DOCUMENT 22 /* libxml can't validate against DTD */ 78 #define Z_NAME_IN_USE 23 /* zone name already in use (rename) */ 79 #define Z_NO_SUCH_ID 24 /* delete_index: no old ID */ 80 #define Z_UPDATING_INDEX 25 /* add/modify/delete_index problem */ 81 #define Z_LOCKING_FILE 26 /* problem locking index file */ 82 #define Z_UNLOCKING_FILE 27 /* problem unlocking index file */ 83 #define Z_SYSTEM 28 /* consult errno instead */ 84 #define Z_INSUFFICIENT_SPEC 29 /* resource insufficiently specified */ 85 #define Z_RESOLVED_PATH 34 /* resolved path mismatch */ 86 #define Z_IPV6_ADDR_PREFIX_LEN 35 /* IPv6 address prefix length needed */ 87 #define Z_BOGUS_ADDRESS 36 /* not IPv[4|6] address or host name */ 88 #define Z_PRIV_PROHIBITED 37 /* specified privilege is prohibited */ 89 #define Z_PRIV_REQUIRED 38 /* required privilege is missing */ 90 #define Z_PRIV_UNKNOWN 39 /* specified privilege is unknown */ 91 92 /* 93 * Warning: these are shared with the admin/install consolidation. 94 * Do not insert states between any of the currently defined states, 95 * and any new states must be evaluated for impact on range comparisons. 96 */ 97 #define ZONE_STATE_CONFIGURED 0 98 #define ZONE_STATE_INCOMPLETE 1 99 #define ZONE_STATE_INSTALLED 2 100 #define ZONE_STATE_READY 3 101 #define ZONE_STATE_RUNNING 4 102 #define ZONE_STATE_SHUTTING_DOWN 5 103 #define ZONE_STATE_DOWN 6 104 #define ZONE_STATE_MOUNTED 7 105 106 #define ZONE_STATE_MAXSTRLEN 14 107 108 #define LIBZONECFG_PATH "libzonecfg.so.1" 109 110 #define ZONE_CONFIG_ROOT "/etc/zones" 111 #define ZONE_INDEX_FILE ZONE_CONFIG_ROOT "/index" 112 113 /* Owner, group, and mode (defined by packaging) for the config directory */ 114 #define ZONE_CONFIG_UID 0 /* root */ 115 #define ZONE_CONFIG_GID 3 /* sys */ 116 #define ZONE_CONFIG_MODE 0755 117 118 /* Owner, group, and mode (defined by packaging) for the index file */ 119 #define ZONE_INDEX_UID 0 /* root */ 120 #define ZONE_INDEX_GID 3 /* sys */ 121 #define ZONE_INDEX_MODE 0644 122 123 /* The maximum length of the VERSION string in the pkginfo(4) file. */ 124 #define ZONE_PKG_VERSMAX 256 125 126 /* 127 * Bit flag definitions for passing into libzonecfg functions. 128 */ 129 #define ZONE_DRY_RUN 0x01 130 131 /* 132 * The integer field expresses the current values on a get. 133 * On a put, it represents the new values if >= 0 or "don't change" if < 0. 134 */ 135 struct zoneent { 136 char zone_name[ZONENAME_MAX]; /* name of the zone */ 137 int zone_state; /* configured | incomplete | installed */ 138 char zone_path[MAXPATHLEN]; /* path to zone storage */ 139 uuid_t zone_uuid; /* unique ID for zone */ 140 char zone_newname[ZONENAME_MAX]; /* for doing renames */ 141 }; 142 143 typedef struct zone_dochandle *zone_dochandle_t; /* opaque handle */ 144 145 typedef uint_t zone_state_t; 146 147 typedef struct zone_fsopt { 148 struct zone_fsopt *zone_fsopt_next; 149 char zone_fsopt_opt[MAX_MNTOPT_STR]; 150 } zone_fsopt_t; 151 152 struct zone_fstab { 153 char zone_fs_special[MAXPATHLEN]; /* special file */ 154 char zone_fs_dir[MAXPATHLEN]; /* mount point */ 155 char zone_fs_type[FSTYPSZ]; /* e.g. ufs */ 156 zone_fsopt_t *zone_fs_options; /* mount options */ 157 char zone_fs_raw[MAXPATHLEN]; /* device to fsck */ 158 }; 159 160 struct zone_nwiftab { 161 char zone_nwif_address[INET6_ADDRSTRLEN]; 162 char zone_nwif_physical[LIFNAMSIZ]; 163 }; 164 165 struct zone_devtab { 166 char zone_dev_match[MAXPATHLEN]; 167 }; 168 169 struct zone_rctlvaltab { 170 char zone_rctlval_priv[MAXNAMELEN]; 171 char zone_rctlval_limit[MAXNAMELEN]; 172 char zone_rctlval_action[MAXNAMELEN]; 173 struct zone_rctlvaltab *zone_rctlval_next; 174 }; 175 176 struct zone_rctltab { 177 char zone_rctl_name[MAXNAMELEN]; 178 struct zone_rctlvaltab *zone_rctl_valptr; 179 }; 180 181 struct zone_attrtab { 182 char zone_attr_name[MAXNAMELEN]; 183 char zone_attr_type[MAXNAMELEN]; 184 char zone_attr_value[2 * BUFSIZ]; 185 }; 186 187 struct zone_dstab { 188 char zone_dataset_name[MAXNAMELEN]; 189 }; 190 191 struct zone_pkgtab { 192 char zone_pkg_name[MAXNAMELEN]; 193 char zone_pkg_version[ZONE_PKG_VERSMAX]; 194 }; 195 196 struct zone_patchtab { 197 char zone_patch_id[MAXNAMELEN]; 198 }; 199 200 struct zone_devpermtab { 201 char zone_devperm_name[MAXPATHLEN]; 202 uid_t zone_devperm_uid; 203 gid_t zone_devperm_gid; 204 mode_t zone_devperm_mode; 205 char *zone_devperm_acl; 206 }; 207 208 /* 209 * Basic configuration management routines. 210 */ 211 extern zone_dochandle_t zonecfg_init_handle(void); 212 extern int zonecfg_get_handle(const char *, zone_dochandle_t); 213 extern int zonecfg_get_snapshot_handle(const char *, zone_dochandle_t); 214 extern int zonecfg_get_template_handle(const char *, const char *, 215 zone_dochandle_t); 216 extern int zonecfg_check_handle(zone_dochandle_t); 217 extern void zonecfg_fini_handle(zone_dochandle_t); 218 extern int zonecfg_destroy(const char *, boolean_t); 219 extern int zonecfg_destroy_snapshot(const char *); 220 extern int zonecfg_save(zone_dochandle_t); 221 extern int zonecfg_create_snapshot(const char *); 222 extern char *zonecfg_strerror(int); 223 extern int zonecfg_access(const char *, int); 224 extern void zonecfg_set_root(const char *); 225 extern const char *zonecfg_get_root(void); 226 extern boolean_t zonecfg_in_alt_root(void); 227 228 /* 229 * Zone name, path to zone directory, autoboot setting, pool and boot 230 * arguments. 231 */ 232 extern int zonecfg_validate_zonename(const char *); 233 extern int zonecfg_get_name(zone_dochandle_t, char *, size_t); 234 extern int zonecfg_set_name(zone_dochandle_t, char *); 235 extern int zonecfg_get_zonepath(zone_dochandle_t, char *, size_t); 236 extern int zonecfg_set_zonepath(zone_dochandle_t, char *); 237 extern int zonecfg_get_autoboot(zone_dochandle_t, boolean_t *); 238 extern int zonecfg_set_autoboot(zone_dochandle_t, boolean_t); 239 extern int zonecfg_get_pool(zone_dochandle_t, char *, size_t); 240 extern int zonecfg_set_pool(zone_dochandle_t, char *); 241 extern int zonecfg_get_bootargs(zone_dochandle_t, char *, size_t); 242 extern int zonecfg_set_bootargs(zone_dochandle_t, char *); 243 244 /* 245 * Filesystem configuration. 246 */ 247 extern int zonecfg_add_filesystem(zone_dochandle_t, struct zone_fstab *); 248 extern int zonecfg_delete_filesystem(zone_dochandle_t, 249 struct zone_fstab *); 250 extern int zonecfg_modify_filesystem(zone_dochandle_t, 251 struct zone_fstab *, struct zone_fstab *); 252 extern int zonecfg_lookup_filesystem(zone_dochandle_t, 253 struct zone_fstab *); 254 extern int zonecfg_add_ipd(zone_dochandle_t, struct zone_fstab *); 255 extern int zonecfg_delete_ipd(zone_dochandle_t, struct zone_fstab *); 256 extern int zonecfg_modify_ipd(zone_dochandle_t, 257 struct zone_fstab *, struct zone_fstab *); 258 extern int zonecfg_lookup_ipd(zone_dochandle_t, struct zone_fstab *); 259 extern int zonecfg_add_fs_option(struct zone_fstab *, char *); 260 extern int zonecfg_remove_fs_option(struct zone_fstab *, char *); 261 extern void zonecfg_free_fs_option_list(zone_fsopt_t *); 262 extern int zonecfg_find_mounts(char *, int(*)(const char *, void *), 263 void *); 264 265 /* 266 * Network interface configuration. 267 */ 268 extern int zonecfg_add_nwif(zone_dochandle_t, struct zone_nwiftab *); 269 extern int zonecfg_delete_nwif(zone_dochandle_t, struct zone_nwiftab *); 270 extern int zonecfg_modify_nwif(zone_dochandle_t, struct zone_nwiftab *, 271 struct zone_nwiftab *); 272 extern int zonecfg_lookup_nwif(zone_dochandle_t, struct zone_nwiftab *); 273 274 /* 275 * Device configuration and rule matching. 276 */ 277 extern int zonecfg_add_dev(zone_dochandle_t, struct zone_devtab *); 278 extern int zonecfg_delete_dev(zone_dochandle_t, struct zone_devtab *); 279 extern int zonecfg_modify_dev(zone_dochandle_t, struct zone_devtab *, 280 struct zone_devtab *); 281 extern int zonecfg_lookup_dev(zone_dochandle_t, struct zone_devtab *); 282 extern int zonecfg_match_dev(zone_dochandle_t, char *, 283 struct zone_devtab *); 284 285 /* 286 * Resource control configuration. 287 */ 288 extern int zonecfg_add_rctl(zone_dochandle_t, struct zone_rctltab *); 289 extern int zonecfg_delete_rctl(zone_dochandle_t, struct zone_rctltab *); 290 extern int zonecfg_modify_rctl(zone_dochandle_t, struct zone_rctltab *, 291 struct zone_rctltab *); 292 extern int zonecfg_lookup_rctl(zone_dochandle_t, struct zone_rctltab *); 293 extern int zonecfg_add_rctl_value(struct zone_rctltab *, 294 struct zone_rctlvaltab *); 295 extern int zonecfg_remove_rctl_value(struct zone_rctltab *, 296 struct zone_rctlvaltab *); 297 extern void zonecfg_free_rctl_value_list(struct zone_rctlvaltab *); 298 299 /* 300 * Generic attribute configuration and type/value extraction. 301 */ 302 extern int zonecfg_add_attr(zone_dochandle_t, struct zone_attrtab *); 303 extern int zonecfg_delete_attr(zone_dochandle_t, struct zone_attrtab *); 304 extern int zonecfg_modify_attr(zone_dochandle_t, struct zone_attrtab *, 305 struct zone_attrtab *); 306 extern int zonecfg_lookup_attr(zone_dochandle_t, struct zone_attrtab *); 307 extern int zonecfg_get_attr_boolean(const struct zone_attrtab *, 308 boolean_t *); 309 extern int zonecfg_get_attr_int(const struct zone_attrtab *, int64_t *); 310 extern int zonecfg_get_attr_string(const struct zone_attrtab *, char *, 311 size_t); 312 extern int zonecfg_get_attr_uint(const struct zone_attrtab *, uint64_t *); 313 314 /* 315 * ZFS configuration. 316 */ 317 extern int zonecfg_add_ds(zone_dochandle_t, struct zone_dstab *); 318 extern int zonecfg_delete_ds(zone_dochandle_t, struct zone_dstab *); 319 extern int zonecfg_modify_ds(zone_dochandle_t, struct zone_dstab *, 320 struct zone_dstab *); 321 extern int zonecfg_lookup_ds(zone_dochandle_t, struct zone_dstab *); 322 323 /* 324 * attach/detach support. 325 */ 326 extern int zonecfg_get_attach_handle(const char *, const char *, 327 boolean_t, zone_dochandle_t); 328 extern int zonecfg_attach_manifest(int, zone_dochandle_t, 329 zone_dochandle_t); 330 extern int zonecfg_detach_save(zone_dochandle_t, uint_t); 331 extern int zonecfg_get_detach_info(zone_dochandle_t, boolean_t); 332 extern boolean_t zonecfg_detached(const char *); 333 extern void zonecfg_rm_detached(zone_dochandle_t, boolean_t forced); 334 extern int zonecfg_devwalk(zone_dochandle_t handle, 335 int (*cb)(const char *, uid_t, gid_t, mode_t, const char *, void *), 336 void *data); 337 extern int zonecfg_devperms_apply(zone_dochandle_t, const char *, 338 uid_t, gid_t, mode_t, const char *); 339 340 341 /* 342 * '*ent' iterator routines. 343 */ 344 extern int zonecfg_setfsent(zone_dochandle_t); 345 extern int zonecfg_getfsent(zone_dochandle_t, struct zone_fstab *); 346 extern int zonecfg_endfsent(zone_dochandle_t); 347 extern int zonecfg_setipdent(zone_dochandle_t); 348 extern int zonecfg_getipdent(zone_dochandle_t, struct zone_fstab *); 349 extern int zonecfg_endipdent(zone_dochandle_t); 350 extern int zonecfg_setnwifent(zone_dochandle_t); 351 extern int zonecfg_getnwifent(zone_dochandle_t, struct zone_nwiftab *); 352 extern int zonecfg_endnwifent(zone_dochandle_t); 353 extern int zonecfg_setdevent(zone_dochandle_t); 354 extern int zonecfg_getdevent(zone_dochandle_t, struct zone_devtab *); 355 extern int zonecfg_enddevent(zone_dochandle_t); 356 extern int zonecfg_setattrent(zone_dochandle_t); 357 extern int zonecfg_getattrent(zone_dochandle_t, struct zone_attrtab *); 358 extern int zonecfg_endattrent(zone_dochandle_t); 359 extern int zonecfg_setrctlent(zone_dochandle_t); 360 extern int zonecfg_getrctlent(zone_dochandle_t, struct zone_rctltab *); 361 extern int zonecfg_endrctlent(zone_dochandle_t); 362 extern int zonecfg_setdsent(zone_dochandle_t); 363 extern int zonecfg_getdsent(zone_dochandle_t, struct zone_dstab *); 364 extern int zonecfg_enddsent(zone_dochandle_t); 365 extern int zonecfg_setpkgent(zone_dochandle_t); 366 extern int zonecfg_getpkgent(zone_dochandle_t, struct zone_pkgtab *); 367 extern int zonecfg_endpkgent(zone_dochandle_t); 368 extern int zonecfg_setpatchent(zone_dochandle_t); 369 extern int zonecfg_getpatchent(zone_dochandle_t, struct zone_patchtab *); 370 extern int zonecfg_endpatchent(zone_dochandle_t); 371 extern int zonecfg_setdevperment(zone_dochandle_t); 372 extern int zonecfg_getdevperment(zone_dochandle_t, 373 struct zone_devpermtab *); 374 extern int zonecfg_enddevperment(zone_dochandle_t); 375 376 /* 377 * Privilege-related functions. 378 */ 379 extern int zonecfg_default_privset(priv_set_t *); 380 extern int zonecfg_get_privset(zone_dochandle_t, priv_set_t *, 381 char **); 382 extern int zonecfg_get_limitpriv(zone_dochandle_t, char **); 383 extern int zonecfg_set_limitpriv(zone_dochandle_t, char *); 384 385 /* 386 * Higher-level routines. 387 */ 388 extern int zone_get_rootpath(char *, char *, size_t); 389 extern int zone_get_zonepath(char *, char *, size_t); 390 extern int zone_get_state(char *, zone_state_t *); 391 extern int zone_set_state(char *, zone_state_t); 392 extern char *zone_state_str(zone_state_t); 393 extern int zonecfg_get_name_by_uuid(const uuid_t, char *, size_t); 394 extern int zonecfg_get_uuid(const char *, uuid_t); 395 396 /* 397 * Iterator for configured zones. 398 */ 399 extern FILE *setzoneent(void); 400 extern char *getzoneent(FILE *); 401 extern struct zoneent *getzoneent_private(FILE *); 402 extern void endzoneent(FILE *); 403 404 /* 405 * File-system-related convenience functions. 406 */ 407 extern boolean_t zonecfg_valid_fs_type(const char *); 408 409 /* 410 * Network-related convenience functions. 411 */ 412 extern boolean_t zonecfg_same_net_address(char *, char *); 413 extern int zonecfg_valid_net_address(char *, struct lifreq *); 414 415 /* 416 * Rctl-related common functions. 417 */ 418 extern boolean_t zonecfg_is_rctl(const char *); 419 extern boolean_t zonecfg_valid_rctlname(const char *); 420 extern boolean_t zonecfg_valid_rctlblk(const rctlblk_t *); 421 extern boolean_t zonecfg_valid_rctl(const char *, const rctlblk_t *); 422 extern int zonecfg_construct_rctlblk(const struct zone_rctlvaltab *, 423 rctlblk_t *); 424 425 /* 426 * Live Upgrade support functions. Shared between ON and install gate. 427 */ 428 extern FILE *zonecfg_open_scratch(const char *, boolean_t); 429 extern int zonecfg_lock_scratch(FILE *); 430 extern void zonecfg_close_scratch(FILE *); 431 extern int zonecfg_get_scratch(FILE *, char *, size_t, char *, size_t, char *, 432 size_t); 433 extern int zonecfg_find_scratch(FILE *, const char *, const char *, char *, 434 size_t); 435 extern int zonecfg_reverse_scratch(FILE *, const char *, char *, size_t, 436 char *, size_t); 437 extern int zonecfg_add_scratch(FILE *, const char *, const char *, 438 const char *); 439 extern int zonecfg_delete_scratch(FILE *, const char *); 440 extern boolean_t zonecfg_is_scratch(const char *); 441 442 #ifdef __cplusplus 443 } 444 #endif 445 446 #endif /* _LIBZONECFG_H */ 447