lxc-download.in revision 3cd988ccdbbb5b5794b19ad1165e48168c2dd1d9
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk#!/bin/sh
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk# Client script for LXC container images.
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk#
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk# Copyright © 2014 Stéphane Graber <stgraber@ubuntu.com>
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk#
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk# This library is free software; you can redistribute it and/or
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk# modify it under the terms of the GNU Lesser General Public
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk# License as published by the Free Software Foundation; either
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk# version 2.1 of the License, or (at your option) any later version.
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk# This library is distributed in the hope that it will be useful,
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk# but WITHOUT ANY WARRANTY; without even the implied warranty of
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk# Lesser General Public License for more details.
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk# You should have received a copy of the GNU Lesser General Public
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk# License along with this library; if not, write to the Free Software
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk# USA
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkset -eu
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkLOCALSTATEDIR="@LOCALSTATEDIR@"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkLXC_HOOK_DIR="@LXCHOOKDIR@"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkLXC_TEMPLATE_CONFIG="@LXCTEMPLATECONFIG@"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk# Defaults
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkDOWNLOAD_ARCH=
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkDOWNLOAD_BUILD=
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkDOWNLOAD_COMPAT_LEVEL=2
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkDOWNLOAD_DIST=
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkDOWNLOAD_FLUSH_CACHE="false"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkDOWNLOAD_FORCE_CACHE="false"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkDOWNLOAD_INTERACTIVE="false"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkDOWNLOAD_KEYID="0xBAEFF88C22F6E216"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkDOWNLOAD_KEYSERVER="hkp://pool.sks-keyservers.net"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkDOWNLOAD_LIST_IMAGES="false"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkDOWNLOAD_MODE="system"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkDOWNLOAD_READY_GPG="false"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkDOWNLOAD_RELEASE=
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkDOWNLOAD_SERVER="images.linuxcontainers.org"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkDOWNLOAD_SHOW_GPG_WARNING="true"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkDOWNLOAD_SHOW_HTTP_WARNING="true"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkDOWNLOAD_TARGET="system"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkDOWNLOAD_URL=
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkDOWNLOAD_USE_CACHE="false"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkDOWNLOAD_VALIDATE="true"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkDOWNLOAD_VARIANT="default"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkLXC_MAPPED_GID=
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkLXC_MAPPED_UID=
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkLXC_NAME=
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkLXC_PATH=
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkLXC_ROOTFS=
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk# Deal with GPG over http proxy
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkif [ -n "${http_proxy:-}" ]; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk DOWNLOAD_KEYSERVER="hkp://p80.pool.sks-keyservers.net:80"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkfi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk# Make sure the usual locations are in PATH
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkexport PATH=$PATH:/usr/sbin:/usr/bin:/sbin:/bin
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk# Some useful functions
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkcleanup() {
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk if [ -d "$DOWNLOAD_TEMP" ]; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk rm -Rf $DOWNLOAD_TEMP
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk fi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk}
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkwget_wrapper() {
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk for i in $(seq 3); do
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk if wget $@; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk return 0
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk fi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk done
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk return 1
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk}
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkdownload_file() {
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk if ! wget_wrapper -T 30 -q https://${DOWNLOAD_SERVER}/$1 -O $2 >/dev/null 2>&1; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk if ! wget_wrapper -T 30 -q http://${DOWNLOAD_SERVER}/$1 -O $2 >/dev/null 2>&1; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk if [ "$3" = "noexit" ]; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk return 1
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk else
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk echo "ERROR: Failed to download http://${DOWNLOAD_SERVER}/$1" 1>&2
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk exit 1
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk fi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk elif [ "$DOWNLOAD_SHOW_HTTP_WARNING" = "true" ]; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk DOWNLOAD_SHOW_HTTP_WARNING="false"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk echo "WARNING: Failed to download the file over HTTPs." 1>&2
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk echo -n " The file was instead download over HTTP. " 1>&2
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk echo "A server replay attack may be possible!" 1>&2
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk fi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk fi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk}
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkdownload_sig() {
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk if ! download_file $1 $2 noexit; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk if [ "$DOWNLOAD_VALIDATE" = "true" ]; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk if [ "$3" = "normal" ]; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk echo "ERROR: Failed to download http://${DOWNLOAD_SERVER}/$1" 1>&2
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk exit 1
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk else
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk return 1
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk fi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk else
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk return 0
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk fi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk fi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk}
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkgpg_setup() {
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk if [ "$DOWNLOAD_VALIDATE" = "false" ]; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk return
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk fi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk if [ "$DOWNLOAD_READY_GPG" = "true" ]; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk return
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk fi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk echo "Setting up the GPG keyring"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk mkdir -p "$DOWNLOAD_TEMP/gpg"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk chmod 700 "$DOWNLOAD_TEMP/gpg"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk export GNUPGHOME="$DOWNLOAD_TEMP/gpg"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk success=
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk for i in $(seq 3); do
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk if gpg --keyserver $DOWNLOAD_KEYSERVER \
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk --recv-keys ${DOWNLOAD_KEYID} >/dev/null 2>&1; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk success=1
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk break
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk fi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk done
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk if [ -z "$success" ]; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk echo "ERROR: Unable to fetch GPG key from keyserver."
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk exit 1
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk fi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk DOWNLOAD_READY_GPG="true"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk}
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkgpg_validate() {
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk if [ "$DOWNLOAD_VALIDATE" = "false" ]; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk if [ "$DOWNLOAD_SHOW_GPG_WARNING" = "true" ]; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk echo "WARNING: Running without gpg validation!" 1>&2
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk fi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk DOWNLOAD_SHOW_GPG_WARNING="false"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk return 0
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk fi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk if ! gpg --verify $1 >/dev/zero 2>&1; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk echo "ERROR: Invalid signature for $1" 1>&2
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk exit 1
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk fi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk}
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkin_userns() {
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk [ -e /proc/self/uid_map ] || { echo no; return; }
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk while read line; do
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk fields=$(echo $line | awk '{ print $1 " " $2 " " $3 }')
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk [ "$fields" = "0 0 4294967295" ] && { echo no; return; } || true
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk echo $fields | grep -q " 0 1$" && { echo userns-root; return; } || true
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk done < /proc/self/uid_map
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk [ "$(cat /proc/self/uid_map)" = "$(cat /proc/1/uid_map)" ] && \
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk { echo userns-root; return; }
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk echo yes
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk}
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkrelevant_file() {
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk FILE_PATH="${LXC_CACHE_PATH}/$1"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk if [ -e "${FILE_PATH}-${DOWNLOAD_MODE}" ]; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk FILE_PATH="${FILE_PATH}-${DOWNLOAD_MODE}"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk fi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk if [ -e "$FILE_PATH.${DOWNLOAD_COMPAT_LEVEL}" ]; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk FILE_PATH="${FILE_PATH}.${DOWNLOAD_COMPAT_LEVEL}"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk fi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk echo $FILE_PATH
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk}
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkusage() {
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk cat <<EOF
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkLXC container image downloader
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkRequired arguments:
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk[ -d | --dist <distribution> ]: The name of the distribution
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk[ -r | --release <release> ]: Release name/version
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk[ -a | --arch <architecture> ]: Architecture of the container
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkOptional arguments:
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk[ -h | --help ]: This help message
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk[ -l | --list ]: List all available images
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk[ --variant <variant> ]: Variant of the image (default: "default")
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk[ --server <server> ]: Image server (default: "images.linuxcontainers.org")
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk[ --keyid <keyid> ]: GPG keyid (default: 0x...)
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk[ --keyserver <keyserver> ]: GPG keyserver to use
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk[ --no-validate ]: Disable GPG validation (not recommended)
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk[ --flush-cache ]: Flush the local copy (if present)
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk[ --force-cache ]; Force the use of the local copy even if expired
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkLXC internal arguments (do not pass manually!):
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk[ --name <name> ]: The container name
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk[ --path <path> ]: The path to the container
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk[ --rootfs <rootfs> ]: The path to the container's rootfs
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk[ --mapped-uid <map> ]: A uid map (user namespaces)
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk[ --mapped-gid <map> ]: A gid map (user namespaces)
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkEOF
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk return 0
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk}
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkoptions=$(getopt -o d:r:a:hl -l dist:,release:,arch:,help,list,variant:,\
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkserver:,keyid:,keyserver:,no-validate,flush-cache,force-cache,name:,path:,\
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkrootfs:,mapped-uid:,mapped-gid: -- "$@")
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkif [ $? -ne 0 ]; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk usage
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk exit 1
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkfi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkeval set -- "$options"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkwhile :; do
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk case "$1" in
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk -h|--help) usage && exit 1;;
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk -l|--list) DOWNLOAD_LIST_IMAGES="true"; shift 1;;
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk -d|--dist) DOWNLOAD_DIST=$2; shift 2;;
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk -r|--release) DOWNLOAD_RELEASE=$2; shift 2;;
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk -a|--arch) DOWNLOAD_ARCH=$2; shift 2;;
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk --variant) DOWNLOAD_VARIANT=$2; shift 2;;
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk --server) DOWNLOAD_SERVER=$2; shift 2;;
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk --keyid) DOWNLOAD_KEYID=$2; shift 2;;
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk --keyserver) DOWNLOAD_KEYSERVER=$2; shift 2;;
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk --no-validate) DOWNLOAD_VALIDATE="false"; shift 1;;
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk --flush-cache) DOWNLOAD_FLUSH_CACHE="true"; shift 1;;
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk --force-cache) DOWNLOAD_FORCE_CACHE="true"; shift 1;;
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk --name) LXC_NAME=$2; shift 2;;
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk --path) LXC_PATH=$2; shift 2;;
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk --rootfs) LXC_ROOTFS=$2; shift 2;;
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk --mapped-uid) LXC_MAPPED_UID=$2; shift 2;;
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk --mapped-gid) LXC_MAPPED_GID=$2; shift 2;;
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk *) break;;
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk esac
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkdone
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk# Check for required binaries
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkfor bin in tar xz wget; do
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk if ! type $bin >/dev/null 2>&1; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk echo "ERROR: Missing required tool: $bin" 1>&2
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk exit 1
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk fi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkdone
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk# Check for GPG
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkif [ "$DOWNLOAD_VALIDATE" = "true" ]; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk if ! type gpg >/dev/null 2>&1; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk echo "ERROR: Missing recommended tool: gpg" 1>&2
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk echo "You can workaround this by using --no-validate." 1>&2
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk exit 1
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk fi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkfi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk# Check that we have all variables we need
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkif [ -z "$LXC_NAME" ] || [ -z "$LXC_PATH" ] || [ -z "$LXC_ROOTFS" ]; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk echo "ERROR: Not running through LXC." 1>&2
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk exit 1
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkfi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkUSERNS=$(in_userns)
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkif [ "$USERNS" != "no" ]; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk if [ "$USERNS" = "yes" ]; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk if [ -z "$LXC_MAPPED_UID" ] || [ "$LXC_MAPPED_UID" = "-1" ]; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk echo "ERROR: In a user namespace without a map." 1>&2
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk exit 1
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk fi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk DOWNLOAD_MODE="user"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk DOWNLOAD_TARGET="user"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk else
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk DOWNLOAD_MODE="user"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk DOWNLOAD_TARGET="system"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk fi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkfi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkif [ -z "$DOWNLOAD_DIST" ] || [ -z "$DOWNLOAD_RELEASE" ] || \
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk [ -z "$DOWNLOAD_ARCH" ]; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk DOWNLOAD_INTERACTIVE="true"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkfi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk# Trap all exit signals
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpktrap cleanup EXIT HUP INT TERM
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkif ! type mktemp >/dev/null 2>&1; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk DOWNLOAD_TEMP=/tmp/lxc-download.$$
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk mkdir -p $DOWNLOAD_TEMP
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkelse
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk DOWNLOAD_TEMP=$(mktemp -d)
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkfi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk# Simply list images
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkif [ "$DOWNLOAD_LIST_IMAGES" = "true" ] || \
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk [ "$DOWNLOAD_INTERACTIVE" = "true" ]; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk # Initialize GPG
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk gpg_setup
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk # Grab the index
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk DOWNLOAD_INDEX_PATH=/meta/1.0/index-${DOWNLOAD_MODE}
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk echo "Downloading the image index"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk if ! download_file ${DOWNLOAD_INDEX_PATH}.${DOWNLOAD_COMPAT_LEVEL} \
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk ${DOWNLOAD_TEMP}/index noexit ||
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk ! download_sig ${DOWNLOAD_INDEX_PATH}.${DOWNLOAD_COMPAT_LEVEL}.asc \
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk ${DOWNLOAD_TEMP}/index.asc noexit; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk download_file ${DOWNLOAD_INDEX_PATH} ${DOWNLOAD_TEMP}/index normal
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk download_sig ${DOWNLOAD_INDEX_PATH}.asc \
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk ${DOWNLOAD_TEMP}/index.asc normal
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk fi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk gpg_validate ${DOWNLOAD_TEMP}/index.asc
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk # Parse it
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk echo ""
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk echo "---"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk printf "DIST\tRELEASE\tARCH\tVARIANT\tBUILD\n"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk echo "---"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk while read line; do
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk # Basic CSV parser
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk OLD_IFS=$IFS
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk IFS=";"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk set -- $line
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk IFS=$OLD_IFS
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk [ -n "$DOWNLOAD_DIST" ] && [ "$1" != "$DOWNLOAD_DIST" ] && continue
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk [ -n "$DOWNLOAD_RELEASE" ] && [ "$2" != "$DOWNLOAD_RELEASE" ] && continue
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk [ -n "$DOWNLOAD_ARCH" ] && [ "$3" != "$DOWNLOAD_ARCH" ] && continue
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk [ -n "$DOWNLOAD_VARIANT" ] && [ "$4" != "$DOWNLOAD_VARIANT" ] && continue
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk [ -z "$5" ] || [ -z "$6" ] && continue
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk printf "$1\t$2\t$3\t$4\t$5\n"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk done < ${DOWNLOAD_TEMP}/index
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk echo "---"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk if [ "$DOWNLOAD_LIST_IMAGES" = "true" ]; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk exit 1
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk fi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk # Interactive mode
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk echo ""
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk if [ -z "$DOWNLOAD_DIST" ]; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk echo -n "Distribution: "
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk read DOWNLOAD_DIST
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk fi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk if [ -z "$DOWNLOAD_RELEASE" ]; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk echo -n "Release: "
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk read DOWNLOAD_RELEASE
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk fi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk if [ -z "$DOWNLOAD_ARCH" ]; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk echo -n "Architecture: "
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk read DOWNLOAD_ARCH
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk fi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk echo ""
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkfi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk# Setup the cache
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkif [ "$DOWNLOAD_TARGET" = "system" ]; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk LXC_CACHE_BASE="$LOCALSTATEDIR/cache/lxc/"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkelse
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk LXC_CACHE_BASE="$HOME/.cache/lxc/"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkfi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkLXC_CACHE_PATH="$LXC_CACHE_BASE/download/$DOWNLOAD_DIST"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkLXC_CACHE_PATH="$LXC_CACHE_PATH/$DOWNLOAD_RELEASE/$DOWNLOAD_ARCH/"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkLXC_CACHE_PATH="$LXC_CACHE_PATH/$DOWNLOAD_VARIANT"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkif [ -d "$LXC_CACHE_PATH" ]; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk if [ "$DOWNLOAD_FLUSH_CACHE" = "true" ]; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk echo "Flushing the cache..."
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk rm -Rf $LXC_CACHE_PATH
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk elif [ "$DOWNLOAD_FORCE_CACHE" = "true" ]; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk DOWNLOAD_USE_CACHE="true"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk else
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk DOWNLOAD_USE_CACHE="true"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk if [ -e "$(relevant_file expiry)" ]; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk if [ "$(cat $(relevant_file expiry))" -lt $(date +%s) ]; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk echo "The cached copy has expired, re-downloading..."
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk DOWNLOAD_USE_CACHE="false"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk fi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk fi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk fi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkfi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk# Download what's needed
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkif [ "$DOWNLOAD_USE_CACHE" = "false" ]; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk # Initialize GPG
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk gpg_setup
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk # Grab the index
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk DOWNLOAD_INDEX_PATH=/meta/1.0/index-${DOWNLOAD_MODE}
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk echo "Downloading the image index"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk if ! download_file ${DOWNLOAD_INDEX_PATH}.${DOWNLOAD_COMPAT_LEVEL} \
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk ${DOWNLOAD_TEMP}/index noexit ||
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk ! download_sig ${DOWNLOAD_INDEX_PATH}.${DOWNLOAD_COMPAT_LEVEL}.asc \
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk ${DOWNLOAD_TEMP}/index.asc noexit; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk download_file ${DOWNLOAD_INDEX_PATH} ${DOWNLOAD_TEMP}/index normal
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk download_sig ${DOWNLOAD_INDEX_PATH}.asc \
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk ${DOWNLOAD_TEMP}/index.asc normal
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk fi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk gpg_validate ${DOWNLOAD_TEMP}/index.asc
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk # Parse it
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk while read line; do
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk # Basic CSV parser
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk OLD_IFS=$IFS
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk IFS=";"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk set -- $line
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk IFS=$OLD_IFS
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk if [ "$1" != "$DOWNLOAD_DIST" ] || \
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk [ "$2" != "$DOWNLOAD_RELEASE" ] || \
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk [ "$3" != "$DOWNLOAD_ARCH" ] || \
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk [ "$4" != "$DOWNLOAD_VARIANT" ] || \
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk [ -z "$6" ]; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk continue
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk fi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk DOWNLOAD_BUILD=$5
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk DOWNLOAD_URL=$6
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk break
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk done < ${DOWNLOAD_TEMP}/index
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk if [ -z "$DOWNLOAD_URL" ]; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk echo "ERROR: Couldn't find a matching image." 1>&1
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk exit 1
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk fi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk if [ -d "$LXC_CACHE_PATH" ] && [ -f "$LXC_CACHE_PATH/build_id" ] && \
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk [ "$(cat $LXC_CACHE_PATH/build_id)" = "$DOWNLOAD_BUILD" ]; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk echo "The cache is already up to date."
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk echo "Using image from local cache"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk else
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk # Download the actual files
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk echo "Downloading the rootfs"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk download_file $DOWNLOAD_URL/rootfs.tar.xz \
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk ${DOWNLOAD_TEMP}/rootfs.tar.xz normal
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk download_sig $DOWNLOAD_URL/rootfs.tar.xz.asc \
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk ${DOWNLOAD_TEMP}/rootfs.tar.xz.asc normal
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk gpg_validate ${DOWNLOAD_TEMP}/rootfs.tar.xz.asc
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk echo "Downloading the metadata"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk download_file $DOWNLOAD_URL/meta.tar.xz \
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk ${DOWNLOAD_TEMP}/meta.tar.xz normal
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk download_sig $DOWNLOAD_URL/meta.tar.xz.asc \
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk ${DOWNLOAD_TEMP}/meta.tar.xz.asc normal
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk gpg_validate ${DOWNLOAD_TEMP}/meta.tar.xz.asc
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk if [ -d $LXC_CACHE_PATH ]; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk rm -Rf $LXC_CACHE_PATH
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk fi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk mkdir -p $LXC_CACHE_PATH
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk mv ${DOWNLOAD_TEMP}/rootfs.tar.xz $LXC_CACHE_PATH
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk if ! tar Jxf ${DOWNLOAD_TEMP}/meta.tar.xz -C $LXC_CACHE_PATH; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk echo "ERROR: Invalid rootfs tarball." 2>&1
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk exit 1
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk fi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk echo $DOWNLOAD_BUILD > $LXC_CACHE_PATH/build_id
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk if [ -n "$LXC_MAPPED_UID" ] && [ "$LXC_MAPPED_UID" != "-1" ]; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk chown -R $LXC_MAPPED_UID $LXC_CACHE_BASE >/dev/null 2>&1 || true
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk fi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk if [ -n "$LXC_MAPPED_GID" ] && [ "$LXC_MAPPED_GID" != "-1" ]; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk chgrp -R $LXC_MAPPED_GID $LXC_CACHE_BASE >/dev/null 2>&1 || true
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk fi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk echo "The image cache is now ready"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk fi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkelse
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk echo "Using image from local cache"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkfi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk# Unpack the rootfs
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkecho "Unpacking the rootfs"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkEXCLUDES=""
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkexcludelist=$(relevant_file excludes)
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkif [ -f "${excludelist}" ]; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk while read line; do
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk EXCLUDES="$EXCLUDES --exclude=$line"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk done < $excludelist
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkfi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpktar --anchored ${EXCLUDES} --numeric-owner -xpJf \
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk ${LXC_CACHE_PATH}/rootfs.tar.xz -C ${LXC_ROOTFS}
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkmkdir -p ${LXC_ROOTFS}/dev/pts/
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk# Setup the configuration
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkconfigfile=$(relevant_file config)
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkfstab=$(relevant_file fstab)
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkif [ ! -e $configfile ]; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk echo "ERROR: meta tarball is missing the configuration file" 1>&2
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk exit 1
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkfi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk## Extract all the network config entries
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpksed -i -e "/lxc.network/{w ${LXC_PATH}/config-network" -e "d}" \
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk ${LXC_PATH}/config
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk## Extract any other config entry
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpksed -i -e "/lxc./{w ${LXC_PATH}/config-auto" -e "d}" ${LXC_PATH}/config
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk## Append the defaults
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkecho "" >> ${LXC_PATH}/config
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkecho "# Distribution configuration" >> ${LXC_PATH}/config
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkcat $configfile >> ${LXC_PATH}/config
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk## Add the container-specific config
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkecho "" >> ${LXC_PATH}/config
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkecho "# Container specific configuration" >> ${LXC_PATH}/config
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkif [ -e "${LXC_PATH}/config-auto" ]; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk cat ${LXC_PATH}/config-auto >> ${LXC_PATH}/config
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk rm ${LXC_PATH}/config-auto
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkfi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkif [ -e "$fstab" ]; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk echo "lxc.mount = ${LXC_PATH}/fstab" >> ${LXC_PATH}/config
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkfi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkecho "lxc.utsname = ${LXC_NAME}" >> ${LXC_PATH}/config
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk## Re-add the previously removed network config
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkif [ -e "${LXC_PATH}/config-network" ]; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk echo "" >> ${LXC_PATH}/config
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk echo "# Network configuration" >> ${LXC_PATH}/config
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk cat ${LXC_PATH}/config-network >> ${LXC_PATH}/config
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk rm ${LXC_PATH}/config-network
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkfi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkTEMPLATE_FILES="${LXC_PATH}/config"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk# Setup the fstab
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkif [ -e $fstab ]; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk cp ${fstab} ${LXC_PATH}/fstab
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk TEMPLATE_FILES="$TEMPLATE_FILES ${LXC_PATH}/fstab"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkfi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk# Look for extra templates
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkif [ -e "$(relevant_file templates)" ]; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk while read line; do
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk fullpath=${LXC_ROOTFS}/$line
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk [ ! -e "$fullpath" ] && continue
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk TEMPLATE_FILES="$TEMPLATE_FILES $fullpath"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk done < $(relevant_file templates)
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkfi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk# Replace variables in all templates
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkfor file in $TEMPLATE_FILES; do
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk [ ! -f "$file" ] && continue
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk sed -i "s#LXC_NAME#$LXC_NAME#g" $file
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk sed -i "s#LXC_PATH#$LXC_PATH#g" $file
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk sed -i "s#LXC_ROOTFS#$LXC_ROOTFS#g" $file
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk sed -i "s#LXC_TEMPLATE_CONFIG#$LXC_TEMPLATE_CONFIG#g" $file
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk sed -i "s#LXC_HOOK_DIR#$LXC_HOOK_DIR#g" $file
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkdone
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkif [ -n "$LXC_MAPPED_UID" ] && [ "$LXC_MAPPED_UID" != "-1" ]; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk chown $LXC_MAPPED_UID $LXC_PATH/config $LXC_PATH/fstab >/dev/null 2>&1 || true
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkfi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkif [ -n "$LXC_MAPPED_GID" ] && [ "$LXC_MAPPED_GID" != "-1" ]; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk chgrp $LXC_MAPPED_GID $LXC_PATH/config $LXC_PATH/fstab >/dev/null 2>&1 || true
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkfi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkif [ -e "$(relevant_file create-message)" ]; then
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk echo ""
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk echo "---"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk cat "$(relevant_file create-message)"
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkfi
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpkexit 0
45916cd2fec6e79bca5dee0421bd39e3c2910d1ejpk