netavark 1.9.0

A container network stack
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78

use crate::{
    dns::aardvark::AardvarkEntry,
    error::{NetavarkError, NetavarkResult},
    firewall::FirewallDriver,
};

use std::{ffi::OsString, net::IpAddr, os::fd::BorrowedFd, path::Path};

use super::{
    bridge::Bridge,
    constants, netlink,
    plugin::PluginDriver,
    types::{Network, PerNetworkOptions, PortMapping, StatusBlock},
    vlan::Vlan,
};
use std::os::unix::fs::PermissionsExt;

pub struct DriverInfo<'a> {
    pub firewall: &'a dyn FirewallDriver,
    pub container_id: &'a String,
    pub container_name: &'a String,
    pub container_dns_servers: &'a Option<Vec<IpAddr>>,
    pub netns_host: BorrowedFd<'a>,
    pub netns_container: BorrowedFd<'a>,
    pub netns_path: &'a str,
    pub network: &'a Network,
    pub per_network_opts: &'a PerNetworkOptions,
    pub port_mappings: &'a Option<Vec<PortMapping>>,
    pub dns_port: u16,
    pub config_dir: &'a Path,
    pub rootless: bool,
}

pub trait NetworkDriver {
    /// validate the driver options
    fn validate(&mut self) -> NetavarkResult<()>;
    /// setup the network interfaces/firewall rules for this driver
    fn setup(
        &self,
        netlink_sockets: (&mut netlink::Socket, &mut netlink::Socket),
    ) -> NetavarkResult<(StatusBlock, Option<AardvarkEntry>)>;
    /// teardown the network interfaces/firewall rules for this driver
    fn teardown(
        &self,
        netlink_sockets: (&mut netlink::Socket, &mut netlink::Socket),
    ) -> NetavarkResult<()>;

    /// return the network name
    fn network_name(&self) -> String;
}

pub fn get_network_driver<'a>(
    info: DriverInfo<'a>,
    plugins_directories: &Option<Vec<OsString>>,
) -> NetavarkResult<Box<dyn NetworkDriver + 'a>> {
    match info.network.driver.as_str() {
        constants::DRIVER_BRIDGE => Ok(Box::new(Bridge::new(info))),
        constants::DRIVER_IPVLAN | constants::DRIVER_MACVLAN => Ok(Box::new(Vlan::new(info))),

        name => {
            if let Some(dirs) = plugins_directories {
                for path in dirs.iter() {
                    let path = Path::new(path).join(name);
                    if let Ok(meta) = path.metadata() {
                        if meta.is_file() && meta.permissions().mode() & 0o111 != 0 {
                            return Ok(Box::new(PluginDriver::new(path, info)));
                        }
                    }
                }
            }

            Err(NetavarkError::Message(format!(
                "unknown network driver \"{}\"",
                info.network.driver
            )))
        }
    }
}