remowt-agent 0.1.0

remowt on-host agent serving fs/pty/systemd endpoints over bifrostlink
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53

use anyhow::{anyhow, bail};
use nix::unistd::User;
use remowt_polkit_shared::Identity;
use remowt_ui_prompt::Prompter;
use tokio::io::AsyncWriteExt as _;
use tokio::net::UnixStream;
use tracing::debug;

use super::protocol::run_conversation;
use super::Helper;

/// Polkit 127 introduced an alternative backend similar to `lach.PolkitHelper`
const SOCKET_PATH: &str = "/run/polkit/agent-helper.socket";

#[derive(Clone)]
pub struct SocketHelper<F> {
	pub fallback: F,
}

impl<F: Helper + Sync> Helper for SocketHelper<F> {
	async fn help_me<P: Prompter + Send + Sync + 'static>(
		&self,
		cookie: &str,
		prompt: P,
		identity: Identity,
	) -> anyhow::Result<()> {
		let Some(uid) = identity.uid() else {
			bail!("can't process identity");
		};

		let stream = match UnixStream::connect(SOCKET_PATH).await {
			Ok(stream) => stream,
			Err(e) => {
				debug!("agent-helper.socket unavailable ({e}), using fallback helper");
				return self.fallback.help_me(cookie, prompt, identity).await;
			}
		};

		let user = User::from_uid(uid)
			.map_err(|e| anyhow!("error querying user: {e}"))?
			.ok_or_else(|| anyhow!("user not found"))?;

		assert!(!cookie.contains('\n'));
		let (reader, mut writer) = stream.into_split();

		writer.write_all(user.name.as_bytes()).await?;
		writer.write_all(b"\n").await?;
		writer.write_all(cookie.as_bytes()).await?;
		writer.write_all(b"\n").await?;

		run_conversation(reader, writer, prompt).await
	}
}