|
| 1 | +#![allow(dead_code)] |
| 2 | + |
| 3 | +use std::path::Path; |
| 4 | + |
| 5 | +use crate::bootc_composefs::boot::{get_esp_partition, get_sysroot_parent_dev, BootType}; |
| 6 | +use crate::bootc_composefs::rollback::{rename_exchange_bls_entries, rename_exchange_user_cfg}; |
| 7 | +use crate::spec::Bootloader; |
| 8 | +use crate::{ |
| 9 | + bootc_composefs::status::composefs_deployment_status, composefs_consts::STATE_DIR_ABS, |
| 10 | +}; |
| 11 | +use anyhow::{Context, Result}; |
| 12 | +use bootc_initramfs_setup::{mount_at_wrapper, mount_composefs_image, open_dir}; |
| 13 | +use bootc_mount::tempmount::TempMount; |
| 14 | +use cap_std_ext::cap_std::{ambient_authority, fs::Dir}; |
| 15 | +use cap_std_ext::dirext::CapStdExtDirExt; |
| 16 | +use etc_merge::{compute_diff, merge, traverse_etc}; |
| 17 | +use rustix::fs::{fsync, renameat, CWD}; |
| 18 | +use rustix::mount::{unmount, UnmountFlags}; |
| 19 | +use rustix::path::Arg; |
| 20 | + |
| 21 | +use fn_error_context::context; |
| 22 | + |
| 23 | +pub(crate) async fn composefs_native_finalize() -> Result<()> { |
| 24 | + let host = composefs_deployment_status().await?; |
| 25 | + |
| 26 | + let booted_composefs = host.require_composefs_booted()?; |
| 27 | + |
| 28 | + let Some(staged_depl) = host.status.staged.as_ref() else { |
| 29 | + tracing::debug!("No staged deployment found"); |
| 30 | + return Ok(()); |
| 31 | + }; |
| 32 | + |
| 33 | + let staged_composefs = staged_depl.composefs.as_ref().ok_or(anyhow::anyhow!( |
| 34 | + "Staged deployment is not a composefs deployment" |
| 35 | + ))?; |
| 36 | + |
| 37 | + // Mount the booted EROFS image to get pristine etc |
| 38 | + let sysroot = open_dir(CWD, "/sysroot")?; |
| 39 | + let composefs_fd = mount_composefs_image(&sysroot, &booted_composefs.verity, false)?; |
| 40 | + |
| 41 | + let tempdir = tempfile::tempdir().context("Creating tempdir")?; |
| 42 | + mount_at_wrapper(composefs_fd, CWD, tempdir.path())?; |
| 43 | + |
| 44 | + // Perform the /etc merge |
| 45 | + let pristine_etc = Dir::open_ambient_dir(tempdir.path(), ambient_authority())?; |
| 46 | + let current_etc = Dir::open_ambient_dir("/etc", ambient_authority())?; |
| 47 | + |
| 48 | + let new_etc_path = Path::new(STATE_DIR_ABS) |
| 49 | + .join(&staged_composefs.verity) |
| 50 | + .join("etc"); |
| 51 | + |
| 52 | + let new_etc = Dir::open_ambient_dir(new_etc_path, ambient_authority())?; |
| 53 | + |
| 54 | + let (pristine_files, current_files, new_files) = |
| 55 | + traverse_etc(&pristine_etc, ¤t_etc, &new_etc)?; |
| 56 | + |
| 57 | + let diff = compute_diff(&pristine_files, ¤t_files)?; |
| 58 | + merge(¤t_etc, ¤t_files, &new_etc, &new_files, diff)?; |
| 59 | + |
| 60 | + unmount(tempdir.path(), UnmountFlags::DETACH).context("Unmounting tempdir")?; |
| 61 | + |
| 62 | + let sysroot_parent = get_sysroot_parent_dev()?; |
| 63 | + // NOTE: Assumption here that ESP will always be present |
| 64 | + let (esp_part, ..) = get_esp_partition(&sysroot_parent)?; |
| 65 | + |
| 66 | + let esp_mount = TempMount::mount_dev(&esp_part)?; |
| 67 | + let boot_dir = Dir::open_ambient_dir("/sysroot/boot", ambient_authority()) |
| 68 | + .context("Opening sysroot/boot")?; |
| 69 | + |
| 70 | + // NOTE: Assuming here we won't have two bootloaders at the same time |
| 71 | + match booted_composefs.bootloader { |
| 72 | + Bootloader::Grub => match staged_composefs.boot_type { |
| 73 | + BootType::Bls => { |
| 74 | + let entries_dir = boot_dir.open_dir("loader")?; |
| 75 | + rename_exchange_bls_entries(&entries_dir)?; |
| 76 | + } |
| 77 | + BootType::Uki => finalize_staged_grub_uki(&esp_mount.fd, &boot_dir)?, |
| 78 | + }, |
| 79 | + |
| 80 | + Bootloader::Systemd => match staged_composefs.boot_type { |
| 81 | + BootType::Bls => { |
| 82 | + let entries_dir = esp_mount.fd.open_dir("loader")?; |
| 83 | + rename_exchange_bls_entries(&entries_dir)?; |
| 84 | + } |
| 85 | + BootType::Uki => rename_staged_uki_entries(&esp_mount.fd)?, |
| 86 | + }, |
| 87 | + }; |
| 88 | + |
| 89 | + Ok(()) |
| 90 | +} |
| 91 | + |
| 92 | +#[context("Grub: Finalizing staged UKI")] |
| 93 | +fn finalize_staged_grub_uki(esp_mount: &Dir, boot_fd: &Dir) -> Result<()> { |
| 94 | + rename_staged_uki_entries(esp_mount)?; |
| 95 | + |
| 96 | + let entries_dir = boot_fd.open_dir("grub2")?; |
| 97 | + rename_exchange_user_cfg(&entries_dir)?; |
| 98 | + |
| 99 | + let entries_dir = entries_dir.reopen_as_ownedfd()?; |
| 100 | + fsync(entries_dir).context("fsync")?; |
| 101 | + |
| 102 | + Ok(()) |
| 103 | +} |
| 104 | + |
| 105 | +#[context("Renaming staged UKI entries")] |
| 106 | +fn rename_staged_uki_entries(esp_mount: &Dir) -> Result<()> { |
| 107 | + for entry in esp_mount.entries()? { |
| 108 | + let entry = entry?; |
| 109 | + |
| 110 | + let filename = entry.file_name(); |
| 111 | + let filename = filename.as_str()?; |
| 112 | + |
| 113 | + if !filename.ends_with(".staged") { |
| 114 | + continue; |
| 115 | + } |
| 116 | + |
| 117 | + renameat( |
| 118 | + &esp_mount, |
| 119 | + filename, |
| 120 | + &esp_mount, |
| 121 | + // SAFETY: We won't reach here if not for the above condition |
| 122 | + filename.strip_suffix(".staged").unwrap(), |
| 123 | + ) |
| 124 | + .context("Renaming {filename}")?; |
| 125 | + } |
| 126 | + |
| 127 | + let esp_mount = esp_mount.reopen_as_ownedfd()?; |
| 128 | + fsync(esp_mount).context("fsync")?; |
| 129 | + |
| 130 | + Ok(()) |
| 131 | +} |
0 commit comments