17c478bd9Sstevel@tonic-gate /* 27c478bd9Sstevel@tonic-gate * CDDL HEADER START 37c478bd9Sstevel@tonic-gate * 47c478bd9Sstevel@tonic-gate * The contents of this file are subject to the terms of the 53d7072f8Seschrock * Common Development and Distribution License (the "License"). 63d7072f8Seschrock * You may not use this file except in compliance with the License. 77c478bd9Sstevel@tonic-gate * 87c478bd9Sstevel@tonic-gate * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 97c478bd9Sstevel@tonic-gate * or http://www.opensolaris.org/os/licensing. 107c478bd9Sstevel@tonic-gate * See the License for the specific language governing permissions 117c478bd9Sstevel@tonic-gate * and limitations under the License. 127c478bd9Sstevel@tonic-gate * 137c478bd9Sstevel@tonic-gate * When distributing Covered Code, include this CDDL HEADER in each 147c478bd9Sstevel@tonic-gate * file and include the License file at usr/src/OPENSOLARIS.LICENSE. 157c478bd9Sstevel@tonic-gate * If applicable, add the following below this CDDL HEADER, with the 167c478bd9Sstevel@tonic-gate * fields enclosed by brackets "[]" replaced with your own identifying 177c478bd9Sstevel@tonic-gate * information: Portions Copyright [yyyy] [name of copyright owner] 187c478bd9Sstevel@tonic-gate * 197c478bd9Sstevel@tonic-gate * CDDL HEADER END 207c478bd9Sstevel@tonic-gate */ 217c478bd9Sstevel@tonic-gate /* 22*b1efbcd6SAlok Aggarwal * Copyright 2009 Sun Microsystems, Inc. All rights reserved. 237c478bd9Sstevel@tonic-gate * Use is subject to license terms. 247c478bd9Sstevel@tonic-gate */ 257c478bd9Sstevel@tonic-gate 267c478bd9Sstevel@tonic-gate 277c478bd9Sstevel@tonic-gate #ifndef _SYS_LOFI_H 287c478bd9Sstevel@tonic-gate #define _SYS_LOFI_H 297c478bd9Sstevel@tonic-gate 307c478bd9Sstevel@tonic-gate #include <sys/types.h> 317c478bd9Sstevel@tonic-gate #include <sys/time.h> 327c478bd9Sstevel@tonic-gate #include <sys/taskq.h> 337c478bd9Sstevel@tonic-gate #include <sys/vtoc.h> 347c478bd9Sstevel@tonic-gate #include <sys/dkio.h> 357c478bd9Sstevel@tonic-gate #include <sys/vnode.h> 367d82f0f8SDina K Nimeh #include <sys/crypto/api.h> 377c478bd9Sstevel@tonic-gate 387c478bd9Sstevel@tonic-gate #ifdef __cplusplus 397c478bd9Sstevel@tonic-gate extern "C" { 407c478bd9Sstevel@tonic-gate #endif 417c478bd9Sstevel@tonic-gate 427c478bd9Sstevel@tonic-gate /* 437c478bd9Sstevel@tonic-gate * /dev names: 447c478bd9Sstevel@tonic-gate * /dev/lofictl - master control device 457c478bd9Sstevel@tonic-gate * /dev/lofi - block devices, named by minor number 467c478bd9Sstevel@tonic-gate * /dev/rlofi - character devices, named by minor number 477c478bd9Sstevel@tonic-gate */ 487c478bd9Sstevel@tonic-gate #define LOFI_DRIVER_NAME "lofi" 497c478bd9Sstevel@tonic-gate #define LOFI_CTL_NODE "ctl" 507c478bd9Sstevel@tonic-gate #define LOFI_CTL_NAME LOFI_DRIVER_NAME LOFI_CTL_NODE 517c478bd9Sstevel@tonic-gate #define LOFI_BLOCK_NAME LOFI_DRIVER_NAME 527c478bd9Sstevel@tonic-gate #define LOFI_CHAR_NAME "r" LOFI_DRIVER_NAME 537c478bd9Sstevel@tonic-gate 5487117650Saalok #define SEGHDR 1 5587117650Saalok #define COMPRESSED 1 5687117650Saalok #define UNCOMPRESSED 0 5787117650Saalok #define MAXALGLEN 36 5887117650Saalok 597c478bd9Sstevel@tonic-gate /* 607c478bd9Sstevel@tonic-gate * 617c478bd9Sstevel@tonic-gate * Use is: 627c478bd9Sstevel@tonic-gate * ld = open("/dev/lofictl", O_RDWR | O_EXCL); 637c478bd9Sstevel@tonic-gate * 647c478bd9Sstevel@tonic-gate * lofi must be opened exclusively. Access is controlled by permissions on 657c478bd9Sstevel@tonic-gate * the device, which is 644 by default. Write-access is required for ioctls 667c478bd9Sstevel@tonic-gate * that change state, but only read-access is required for the ioctls that 677c478bd9Sstevel@tonic-gate * return information. Basically, only root can add and remove files, but 687c478bd9Sstevel@tonic-gate * non-root can look at the current lists. 697c478bd9Sstevel@tonic-gate * 707c478bd9Sstevel@tonic-gate * ioctl usage: 717c478bd9Sstevel@tonic-gate * 727c478bd9Sstevel@tonic-gate * kernel ioctls 737c478bd9Sstevel@tonic-gate * 747c478bd9Sstevel@tonic-gate * strcpy(li.li_filename, "somefilename"); 757c478bd9Sstevel@tonic-gate * ioctl(ld, LOFI_MAP_FILE, &li); 767c478bd9Sstevel@tonic-gate * newminor = li.li_minor; 777c478bd9Sstevel@tonic-gate * 787c478bd9Sstevel@tonic-gate * strcpy(li.li_filename, "somefilename"); 797c478bd9Sstevel@tonic-gate * ioctl(ld, LOFI_UNMAP_FILE, &li); 807c478bd9Sstevel@tonic-gate * 817c478bd9Sstevel@tonic-gate * strcpy(li.li_filename, "somefilename"); 827c478bd9Sstevel@tonic-gate * li.li_minor = minor_number; 837c478bd9Sstevel@tonic-gate * ioctl(ld, LOFI_MAP_FILE_MINOR, &li); 847c478bd9Sstevel@tonic-gate * 857c478bd9Sstevel@tonic-gate * li.li_minor = minor_number; 867c478bd9Sstevel@tonic-gate * ioctl(ld, LOFI_UNMAP_FILE_MINOR, &li); 877c478bd9Sstevel@tonic-gate * 887c478bd9Sstevel@tonic-gate * li.li_minor = minor_number; 897c478bd9Sstevel@tonic-gate * ioctl(ld, LOFI_GET_FILENAME, &li); 907d82f0f8SDina K Nimeh * filename = li.li_filename; 917d82f0f8SDina K Nimeh * encrypted = li.li_crypto_enabled; 927c478bd9Sstevel@tonic-gate * 937c478bd9Sstevel@tonic-gate * strcpy(li.li_filename, "somefilename"); 947c478bd9Sstevel@tonic-gate * ioctl(ld, LOFI_GET_MINOR, &li); 957d82f0f8SDina K Nimeh * minor = li.li_minor; 967c478bd9Sstevel@tonic-gate * 977c478bd9Sstevel@tonic-gate * li.li_minor = 0; 987c478bd9Sstevel@tonic-gate * ioctl(ld, LOFI_GET_MAXMINOR, &li); 997c478bd9Sstevel@tonic-gate * maxminor = li.li_minor; 1007c478bd9Sstevel@tonic-gate * 10187117650Saalok * strcpy(li.li_filename, "somefilename"); 10287117650Saalok * li.li_minor = 0; 10387117650Saalok * ioctl(ld, LOFI_CHECK_COMPRESSED, &li); 10487117650Saalok * 1053d7072f8Seschrock * If the 'li_force' flag is set for any of the LOFI_UNMAP_* commands, then if 1063d7072f8Seschrock * the device is busy, the underlying vnode will be closed, and any subsequent 1073d7072f8Seschrock * operations will fail. It will behave as if the device had been forcibly 1083d7072f8Seschrock * removed, so the DKIOCSTATE ioctl will return DKIO_DEV_GONE. When the device 1093d7072f8Seschrock * is last closed, it will be torn down. 1103d7072f8Seschrock * 11193239addSjohnlev * If the 'li_cleanup' flag is set for any of the LOFI_UNMAP_* commands, then 11293239addSjohnlev * if the device is busy, it is marked for removal at the next time it is 11393239addSjohnlev * no longer held open by anybody. When the device is last closed, it will be 11493239addSjohnlev * torn down. 11593239addSjohnlev * 1167c478bd9Sstevel@tonic-gate * Oh, and last but not least: these ioctls are totally private and only 1177c478bd9Sstevel@tonic-gate * for use by lofiadm(1M). 1187c478bd9Sstevel@tonic-gate * 1197c478bd9Sstevel@tonic-gate */ 1207c478bd9Sstevel@tonic-gate 1217d82f0f8SDina K Nimeh typedef enum iv_method { 1227d82f0f8SDina K Nimeh IVM_NONE, /* no iv needed, iv is null */ 1237d82f0f8SDina K Nimeh IVM_ENC_BLKNO /* iv is logical block no. encrypted */ 1247d82f0f8SDina K Nimeh } iv_method_t; 1257d82f0f8SDina K Nimeh 1267c478bd9Sstevel@tonic-gate struct lofi_ioctl { 1277c478bd9Sstevel@tonic-gate uint32_t li_minor; 1283d7072f8Seschrock boolean_t li_force; 12993239addSjohnlev boolean_t li_cleanup; 1306f02aa44SDina K Nimeh char li_filename[MAXPATHLEN]; 1317d82f0f8SDina K Nimeh 1327d82f0f8SDina K Nimeh /* the following fields are required for compression support */ 13387117650Saalok char li_algorithm[MAXALGLEN]; 1347d82f0f8SDina K Nimeh 1357d82f0f8SDina K Nimeh /* the following fields are required for encryption support */ 1367d82f0f8SDina K Nimeh boolean_t li_crypto_enabled; 1377d82f0f8SDina K Nimeh crypto_mech_name_t li_cipher; /* for data */ 1387d82f0f8SDina K Nimeh uint32_t li_key_len; /* for data */ 1397d82f0f8SDina K Nimeh char li_key[56]; /* for data: max 448-bit Blowfish key */ 1407d82f0f8SDina K Nimeh crypto_mech_name_t li_iv_cipher; /* for iv derivation */ 1417d82f0f8SDina K Nimeh uint32_t li_iv_len; /* for iv derivation */ 1427d82f0f8SDina K Nimeh iv_method_t li_iv_type; /* for iv derivation */ 1437c478bd9Sstevel@tonic-gate }; 1447c478bd9Sstevel@tonic-gate 1457c478bd9Sstevel@tonic-gate #define LOFI_IOC_BASE (('L' << 16) | ('F' << 8)) 1467c478bd9Sstevel@tonic-gate 1477c478bd9Sstevel@tonic-gate #define LOFI_MAP_FILE (LOFI_IOC_BASE | 0x01) 1487c478bd9Sstevel@tonic-gate #define LOFI_MAP_FILE_MINOR (LOFI_IOC_BASE | 0x02) 1497c478bd9Sstevel@tonic-gate #define LOFI_UNMAP_FILE (LOFI_IOC_BASE | 0x03) 1507c478bd9Sstevel@tonic-gate #define LOFI_UNMAP_FILE_MINOR (LOFI_IOC_BASE | 0x04) 1517c478bd9Sstevel@tonic-gate #define LOFI_GET_FILENAME (LOFI_IOC_BASE | 0x05) 1527c478bd9Sstevel@tonic-gate #define LOFI_GET_MINOR (LOFI_IOC_BASE | 0x06) 1537c478bd9Sstevel@tonic-gate #define LOFI_GET_MAXMINOR (LOFI_IOC_BASE | 0x07) 15487117650Saalok #define LOFI_CHECK_COMPRESSED (LOFI_IOC_BASE | 0x08) 1557c478bd9Sstevel@tonic-gate 1567c478bd9Sstevel@tonic-gate /* 1577c478bd9Sstevel@tonic-gate * file types that might be usable with lofi, maybe. Only regular 1587c478bd9Sstevel@tonic-gate * files are documented though. 1597c478bd9Sstevel@tonic-gate */ 1607c478bd9Sstevel@tonic-gate #define S_ISLOFIABLE(mode) \ 1617c478bd9Sstevel@tonic-gate (S_ISREG(mode) || S_ISBLK(mode) || S_ISCHR(mode)) 1627c478bd9Sstevel@tonic-gate 1637c478bd9Sstevel@tonic-gate #if defined(_KERNEL) 1647c478bd9Sstevel@tonic-gate 1657c478bd9Sstevel@tonic-gate /* 1667c478bd9Sstevel@tonic-gate * We limit the maximum number of active lofi devices to 128, which seems very 1677c478bd9Sstevel@tonic-gate * large. You can tune this by changing lofi_max_files in /etc/system. 1687c478bd9Sstevel@tonic-gate * If you change it dynamically, which you probably shouldn't do, make sure 1697c478bd9Sstevel@tonic-gate * to only _increase_ it. 1707c478bd9Sstevel@tonic-gate */ 1717c478bd9Sstevel@tonic-gate #define LOFI_MAX_FILES 128 1727c478bd9Sstevel@tonic-gate extern uint32_t lofi_max_files; 1737c478bd9Sstevel@tonic-gate 1747c478bd9Sstevel@tonic-gate #define V_ISLOFIABLE(vtype) \ 1757c478bd9Sstevel@tonic-gate ((vtype == VREG) || (vtype == VBLK) || (vtype == VCHR)) 1767c478bd9Sstevel@tonic-gate 1777d82f0f8SDina K Nimeh /* 1787d82f0f8SDina K Nimeh * Need exactly 6 bytes to identify encrypted lofi image 1797d82f0f8SDina K Nimeh */ 1807d82f0f8SDina K Nimeh extern const char lofi_crypto_magic[6]; 1817d82f0f8SDina K Nimeh #define LOFI_CRYPTO_MAGIC { 'C', 'F', 'L', 'O', 'F', 'I' } 1827d82f0f8SDina K Nimeh #define LOFI_CRYPTO_VERSION ((uint16_t)0) 1837d82f0f8SDina K Nimeh #define LOFI_CRYPTO_DATA_SECTOR ((uint32_t)16) /* for version 0 */ 1847d82f0f8SDina K Nimeh 1857d82f0f8SDina K Nimeh /* 1867d82f0f8SDina K Nimeh * Crypto metadata for encrypted lofi images 1877d82f0f8SDina K Nimeh * The fields here only satisfy initial implementation requirements. 1887d82f0f8SDina K Nimeh */ 1897d82f0f8SDina K Nimeh struct crypto_meta { 1907d82f0f8SDina K Nimeh char magic[6]; /* LOFI_CRYPTO_MAGIC */ 1917d82f0f8SDina K Nimeh uint16_t version; /* version of encrypted lofi */ 1927d82f0f8SDina K Nimeh char reserved1[96]; /* future use */ 1937d82f0f8SDina K Nimeh uint32_t data_sector; /* start of data area */ 1947d82f0f8SDina K Nimeh char pad[404]; /* end on DEV_BSIZE bdry */ 1957d82f0f8SDina K Nimeh /* second header block is not defined at this time */ 1967d82f0f8SDina K Nimeh }; 1977d82f0f8SDina K Nimeh 1987c478bd9Sstevel@tonic-gate struct lofi_state { 1997c478bd9Sstevel@tonic-gate char *ls_filename; /* filename to open */ 2007c478bd9Sstevel@tonic-gate size_t ls_filename_sz; 2017c478bd9Sstevel@tonic-gate struct vnode *ls_vp; /* open vnode */ 2023d7072f8Seschrock kmutex_t ls_vp_lock; /* protects ls_vp */ 2033d7072f8Seschrock kcondvar_t ls_vp_cv; /* signal changes to ls_vp */ 2043d7072f8Seschrock uint32_t ls_vp_iocount; /* # pending I/O requests */ 2053d7072f8Seschrock boolean_t ls_vp_closereq; /* force close requested */ 2067c478bd9Sstevel@tonic-gate u_offset_t ls_vp_size; 2077c478bd9Sstevel@tonic-gate uint32_t ls_blk_open; 2087c478bd9Sstevel@tonic-gate uint32_t ls_chr_open; 2097c478bd9Sstevel@tonic-gate uint32_t ls_lyr_open_count; 2107c478bd9Sstevel@tonic-gate int ls_openflag; 21193239addSjohnlev boolean_t ls_cleanup; /* cleanup on close */ 2127c478bd9Sstevel@tonic-gate taskq_t *ls_taskq; 2137c478bd9Sstevel@tonic-gate kstat_t *ls_kstat; 2147c478bd9Sstevel@tonic-gate kmutex_t ls_kstat_lock; 2157c478bd9Sstevel@tonic-gate struct dk_geom ls_dkg; 2167c478bd9Sstevel@tonic-gate struct vtoc ls_vtoc; 2177c478bd9Sstevel@tonic-gate struct dk_cinfo ls_ci; 21887117650Saalok 21987117650Saalok /* the following fields are required for compression support */ 22087117650Saalok int ls_comp_algorithm_index; /* idx into compress_table */ 22187117650Saalok char ls_comp_algorithm[MAXALGLEN]; 22287117650Saalok uint32_t ls_uncomp_seg_sz; /* sz of uncompressed segment */ 22387117650Saalok uint32_t ls_comp_index_sz; /* number of index entries */ 22487117650Saalok uint32_t ls_comp_seg_shift; /* exponent for byte shift */ 22587117650Saalok uint32_t ls_uncomp_last_seg_sz; /* sz of last uncomp segment */ 22687117650Saalok uint64_t ls_comp_offbase; /* offset of actual compressed data */ 22787117650Saalok uint64_t *ls_comp_seg_index; /* array of index entries */ 22887117650Saalok caddr_t ls_comp_index_data; /* index pages loaded from file */ 22987117650Saalok uint32_t ls_comp_index_data_sz; 23087117650Saalok u_offset_t ls_vp_comp_size; /* actual compressed file size */ 2317d82f0f8SDina K Nimeh 2327d82f0f8SDina K Nimeh /* the following fields are required for encryption support */ 2337d82f0f8SDina K Nimeh boolean_t ls_crypto_enabled; 2347d82f0f8SDina K Nimeh u_offset_t ls_crypto_offset; /* crypto meta size */ 2357d82f0f8SDina K Nimeh struct crypto_meta ls_crypto; 2367d82f0f8SDina K Nimeh crypto_mechanism_t ls_mech; /* for data encr/decr */ 2377d82f0f8SDina K Nimeh crypto_key_t ls_key; /* for data encr/decr */ 2387d82f0f8SDina K Nimeh crypto_mechanism_t ls_iv_mech; /* for iv derivation */ 2397d82f0f8SDina K Nimeh size_t ls_iv_len; /* for iv derivation */ 2407d82f0f8SDina K Nimeh iv_method_t ls_iv_type; /* for iv derivation */ 2417d82f0f8SDina K Nimeh kmutex_t ls_crypto_lock; 2427d82f0f8SDina K Nimeh crypto_ctx_template_t ls_ctx_tmpl; 2437d82f0f8SDina K Nimeh 2447c478bd9Sstevel@tonic-gate }; 2457c478bd9Sstevel@tonic-gate 24687117650Saalok #endif /* _KERNEL */ 24787117650Saalok 24887117650Saalok /* 24987117650Saalok * Common signature for all lofi compress functions 25087117650Saalok */ 25187117650Saalok typedef int lofi_compress_func_t(void *src, size_t srclen, void *dst, 25287117650Saalok size_t *destlen, int level); 25387117650Saalok 25487117650Saalok /* 25587117650Saalok * Information about each compression function 25687117650Saalok */ 25787117650Saalok typedef struct lofi_compress_info { 25887117650Saalok lofi_compress_func_t *l_decompress; 25987117650Saalok lofi_compress_func_t *l_compress; 26087117650Saalok int l_level; 26187117650Saalok char *l_name; /* algorithm name */ 26287117650Saalok } lofi_compress_info_t; 26387117650Saalok 26487117650Saalok enum lofi_compress { 26587117650Saalok LOFI_COMPRESS_GZIP = 0, 26687117650Saalok LOFI_COMPRESS_GZIP_6 = 1, 26787117650Saalok LOFI_COMPRESS_GZIP_9 = 2, 268*b1efbcd6SAlok Aggarwal LOFI_COMPRESS_LZMA = 3, 26987117650Saalok LOFI_COMPRESS_FUNCTIONS 27087117650Saalok }; 2717c478bd9Sstevel@tonic-gate 2727c478bd9Sstevel@tonic-gate #ifdef __cplusplus 2737c478bd9Sstevel@tonic-gate } 2747c478bd9Sstevel@tonic-gate #endif 2757c478bd9Sstevel@tonic-gate 2767c478bd9Sstevel@tonic-gate #endif /* _SYS_LOFI_H */ 277