sbin/hastd/hastd.c

   1 /*-
   2  * SPDX-License-Identifier: BSD-2-Clause-FreeBSD
   3  *
   4  * Copyright (c) 2009-2010 The FreeBSD Foundation
   5  * Copyright (c) 2010-2011 Pawel Jakub Dawidek <pawel@dawidek.net>
   6  * All rights reserved.
   7  *
   8  * This software was developed by Pawel Jakub Dawidek under sponsorship from
   9  * the FreeBSD Foundation.
  10  *
  11  * Redistribution and use in source and binary forms, with or without
  12  * modification, are permitted provided that the following conditions
  13  * are met:
  14  * 1. Redistributions of source code must retain the above copyright
  15  *    notice, this list of conditions and the following disclaimer.
  16  * 2. Redistributions in binary form must reproduce the above copyright
  17  *    notice, this list of conditions and the following disclaimer in the
  18  *    documentation and/or other materials provided with the distribution.
  19  *
  20  * THIS SOFTWARE IS PROVIDED BY THE AUTHORS AND CONTRIBUTORS ``AS IS'' AND
  21  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  22  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  23  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHORS OR CONTRIBUTORS BE LIABLE
  24  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  25  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  26  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  27  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  28  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  29  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  30  * SUCH DAMAGE.
  31  */
  32
  33 #include <sys/cdefs.h>
  34 __FBSDID("$FreeBSD$");
  35
  36 #include <sys/param.h>
  37 #include <sys/linker.h>
  38 #include <sys/module.h>
  39 #include <sys/stat.h>
  40 #include <sys/wait.h>
  41
  42 #include <err.h>
  43 #include <errno.h>
  44 #include <libutil.h>
  45 #include <signal.h>
  46 #include <stdbool.h>
  47 #include <stdio.h>
  48 #include <stdlib.h>
  49 #include <string.h>
  50 #include <sysexits.h>
  51 #include <time.h>
  52 #include <unistd.h>
  53
  54 #include <activemap.h>
  55 #include <pjdlog.h>
  56
  57 #include "control.h"
  58 #include "event.h"
  59 #include "hast.h"
  60 #include "hast_proto.h"
  61 #include "hastd.h"
  62 #include "hooks.h"
  63 #include "subr.h"
  64
  65 /* Path to configuration file. */
  66 const char *cfgpath = HAST_CONFIG;
  67 /* Hastd configuration. */
  68 static struct hastd_config *cfg;
  69 /* Was SIGINT or SIGTERM signal received? */
  70 bool sigexit_received = false;
  71 /* Path to pidfile. */
  72 static const char *pidfile;
  73 /* Pidfile handle. */
  74 struct pidfh *pfh;
  75 /* Do we run in foreground? */
  76 static bool foreground;
  77
  78 /* How often check for hooks running for too long. */
  79 #define REPORT_INTERVAL 5
  80
  81 static void
  82 usage(void)
  83 {
  84
  85         errx(EX_USAGE, "[-dFh] [-c config] [-P pidfile]");
  86 }
  87
  88 static void
  89 g_gate_load(void)
  90 {
  91
  92         if (modfind("g_gate") == -1) {
  93                 /* Not present in kernel, try loading it. */
  94                 if (kldload("geom_gate") == -1 || modfind("g_gate") == -1) {
  95                         if (errno != EEXIST) {
  96                                 pjdlog_exit(EX_OSERR,
  97                                     "Unable to load geom_gate module");
  98                         }
  99                 }
 100         }
 101 }
 102
 103 void
 104 descriptors_cleanup(struct hast_resource *res)
 105 {
 106         struct hast_resource *tres, *tmres;
 107         struct hastd_listen *lst;
 108
 109         TAILQ_FOREACH_SAFE(tres, &cfg->hc_resources, hr_next, tmres) {
 110                 if (tres == res) {
 111                         PJDLOG_VERIFY(res->hr_role == HAST_ROLE_SECONDARY ||
 112                             (res->hr_remotein == NULL &&
 113                              res->hr_remoteout == NULL));
 114                         continue;
 115                 }
 116                 if (tres->hr_remotein != NULL)
 117                         proto_close(tres->hr_remotein);
 118                 if (tres->hr_remoteout != NULL)
 119                         proto_close(tres->hr_remoteout);
 120                 if (tres->hr_ctrl != NULL)
 121                         proto_close(tres->hr_ctrl);
 122                 if (tres->hr_event != NULL)
 123                         proto_close(tres->hr_event);
 124                 if (tres->hr_conn != NULL)
 125                         proto_close(tres->hr_conn);
 126                 TAILQ_REMOVE(&cfg->hc_resources, tres, hr_next);
 127                 free(tres);
 128         }
 129         if (cfg->hc_controlin != NULL)
 130                 proto_close(cfg->hc_controlin);
 131         proto_close(cfg->hc_controlconn);
 132         while ((lst = TAILQ_FIRST(&cfg->hc_listen)) != NULL) {
 133                 TAILQ_REMOVE(&cfg->hc_listen, lst, hl_next);
 134                 if (lst->hl_conn != NULL)
 135                         proto_close(lst->hl_conn);
 136                 free(lst);
 137         }
 138         (void)pidfile_close(pfh);
 139         hook_fini();
 140         pjdlog_fini();
 141 }
 142
 143 static const char *
 144 dtype2str(mode_t mode)
 145 {
 146
 147         if (S_ISBLK(mode))
 148                 return ("block device");
 149         else if (S_ISCHR(mode))
 150                 return ("character device");
 151         else if (S_ISDIR(mode))
 152                 return ("directory");
 153         else if (S_ISFIFO(mode))
 154                 return ("pipe or FIFO");
 155         else if (S_ISLNK(mode))
 156                 return ("symbolic link");
 157         else if (S_ISREG(mode))
 158                 return ("regular file");
 159         else if (S_ISSOCK(mode))
 160                 return ("socket");
 161         else if (S_ISWHT(mode))
 162                 return ("whiteout");
 163         else
 164                 return ("unknown");
 165 }
 166
 167 void
 168 descriptors_assert(const struct hast_resource *res, int pjdlogmode)
 169 {
 170         char msg[256];
 171         struct stat sb;
 172         long maxfd;
 173         bool isopen;
 174         mode_t mode;
 175         int fd;
 176
 177         /*
 178          * At this point descriptor to syslog socket is closed, so if we want
 179          * to log assertion message, we have to first store it in 'msg' local
 180          * buffer and then open syslog socket and log it.
 181          */
 182         msg[0] = '\0';
 183
 184         maxfd = sysconf(_SC_OPEN_MAX);
 185         if (maxfd == -1) {
 186                 pjdlog_init(pjdlogmode);
 187                 pjdlog_prefix_set("[%s] (%s) ", res->hr_name,
 188                     role2str(res->hr_role));
 189                 pjdlog_errno(LOG_WARNING, "sysconf(_SC_OPEN_MAX) failed");
 190                 pjdlog_fini();
 191                 maxfd = 16384;
 192         }
 193         for (fd = 0; fd <= maxfd; fd++) {
 194                 if (fstat(fd, &sb) == 0) {
 195                         isopen = true;
 196                         mode = sb.st_mode;
 197                 } else if (errno == EBADF) {
 198                         isopen = false;
 199                         mode = 0;
 200                 } else {
 201                         (void)snprintf(msg, sizeof(msg),
 202                             "Unable to fstat descriptor %d: %s", fd,
 203                             strerror(errno));
 204                         break;
 205                 }
 206                 if (fd == STDIN_FILENO || fd == STDOUT_FILENO ||
 207                     fd == STDERR_FILENO) {
 208                         if (!isopen) {
 209                                 (void)snprintf(msg, sizeof(msg),
 210                                     "Descriptor %d (%s) is closed, but should be open.",
 211                                     fd, (fd == STDIN_FILENO ? "stdin" :
 212                                     (fd == STDOUT_FILENO ? "stdout" : "stderr")));
 213                                 break;
 214                         }
 215                 } else if (fd == proto_descriptor(res->hr_event)) {
 216                         if (!isopen) {
 217                                 (void)snprintf(msg, sizeof(msg),
 218                                     "Descriptor %d (event) is closed, but should be open.",
 219                                     fd);
 220                                 break;
 221                         }
 222                         if (!S_ISSOCK(mode)) {
 223                                 (void)snprintf(msg, sizeof(msg),
 224                                     "Descriptor %d (event) is %s, but should be %s.",
 225                                     fd, dtype2str(mode), dtype2str(S_IFSOCK));
 226                                 break;
 227                         }
 228                 } else if (fd == proto_descriptor(res->hr_ctrl)) {
 229                         if (!isopen) {
 230                                 (void)snprintf(msg, sizeof(msg),
 231                                     "Descriptor %d (ctrl) is closed, but should be open.",
 232                                     fd);
 233                                 break;
 234                         }
 235                         if (!S_ISSOCK(mode)) {
 236                                 (void)snprintf(msg, sizeof(msg),
 237                                     "Descriptor %d (ctrl) is %s, but should be %s.",
 238                                     fd, dtype2str(mode), dtype2str(S_IFSOCK));
 239                                 break;
 240                         }
 241                 } else if (res->hr_role == HAST_ROLE_PRIMARY &&
 242                     fd == proto_descriptor(res->hr_conn)) {
 243                         if (!isopen) {
 244                                 (void)snprintf(msg, sizeof(msg),
 245                                     "Descriptor %d (conn) is closed, but should be open.",
 246                                     fd);
 247                                 break;
 248                         }
 249                         if (!S_ISSOCK(mode)) {
 250                                 (void)snprintf(msg, sizeof(msg),
 251                                     "Descriptor %d (conn) is %s, but should be %s.",
 252                                     fd, dtype2str(mode), dtype2str(S_IFSOCK));
 253                                 break;
 254                         }
 255                 } else if (res->hr_role == HAST_ROLE_SECONDARY &&
 256                     res->hr_conn != NULL &&
 257                     fd == proto_descriptor(res->hr_conn)) {
 258                         if (isopen) {
 259                                 (void)snprintf(msg, sizeof(msg),
 260                                     "Descriptor %d (conn) is open, but should be closed.",
 261                                     fd);
 262                                 break;
 263                         }
 264                 } else if (res->hr_role == HAST_ROLE_SECONDARY &&
 265                     fd == proto_descriptor(res->hr_remotein)) {
 266                         if (!isopen) {
 267                                 (void)snprintf(msg, sizeof(msg),
 268                                     "Descriptor %d (remote in) is closed, but should be open.",
 269                                     fd);
 270                                 break;
 271                         }
 272                         if (!S_ISSOCK(mode)) {
 273                                 (void)snprintf(msg, sizeof(msg),
 274                                     "Descriptor %d (remote in) is %s, but should be %s.",
 275                                     fd, dtype2str(mode), dtype2str(S_IFSOCK));
 276                                 break;
 277                         }
 278                 } else if (res->hr_role == HAST_ROLE_SECONDARY &&
 279                     fd == proto_descriptor(res->hr_remoteout)) {
 280                         if (!isopen) {
 281                                 (void)snprintf(msg, sizeof(msg),
 282                                     "Descriptor %d (remote out) is closed, but should be open.",
 283                                     fd);
 284                                 break;
 285                         }
 286                         if (!S_ISSOCK(mode)) {
 287                                 (void)snprintf(msg, sizeof(msg),
 288                                     "Descriptor %d (remote out) is %s, but should be %s.",
 289                                     fd, dtype2str(mode), dtype2str(S_IFSOCK));
 290                                 break;
 291                         }
 292                 } else {
 293                         if (isopen) {
 294                                 (void)snprintf(msg, sizeof(msg),
 295                                     "Descriptor %d is open (%s), but should be closed.",
 296                                     fd, dtype2str(mode));
 297                                 break;
 298                         }
 299                 }
 300         }
 301         if (msg[0] != '\0') {
 302                 pjdlog_init(pjdlogmode);
 303                 pjdlog_prefix_set("[%s] (%s) ", res->hr_name,
 304                     role2str(res->hr_role));
 305                 PJDLOG_ABORT("%s", msg);
 306         }
 307 }
 308
 309 static void
 310 child_exit_log(unsigned int pid, int status)
 311 {
 312
 313         if (WIFEXITED(status) && WEXITSTATUS(status) == 0) {
 314                 pjdlog_debug(1, "Worker process exited gracefully (pid=%u).",
 315                     pid);
 316         } else if (WIFSIGNALED(status)) {
 317                 pjdlog_error("Worker process killed (pid=%u, signal=%d).",
 318                     pid, WTERMSIG(status));
 319         } else {
 320                 pjdlog_error("Worker process exited ungracefully (pid=%u, exitcode=%d).",
 321                     pid, WIFEXITED(status) ? WEXITSTATUS(status) : -1);
 322         }
 323 }
 324
 325 static void
 326 child_exit(void)
 327 {
 328         struct hast_resource *res;
 329         int status;
 330         pid_t pid;
 331
 332         while ((pid = wait3(&status, WNOHANG, NULL)) > 0) {
 333                 /* Find resource related to the process that just exited. */
 334                 TAILQ_FOREACH(res, &cfg->hc_resources, hr_next) {
 335                         if (pid == res->hr_workerpid)
 336                                 break;
 337                 }
 338                 if (res == NULL) {
 339                         /*
 340                          * This can happen when new connection arrives and we
 341                          * cancel child responsible for the old one or if this
 342                          * was hook which we executed.
 343                          */
 344                         hook_check_one(pid, status);
 345                         continue;
 346                 }
 347                 pjdlog_prefix_set("[%s] (%s) ", res->hr_name,
 348                     role2str(res->hr_role));
 349                 child_exit_log(pid, status);
 350                 child_cleanup(res);
 351                 if (res->hr_role == HAST_ROLE_PRIMARY) {
 352                         /*
 353                          * Restart child process if it was killed by signal
 354                          * or exited because of temporary problem.
 355                          */
 356                         if (WIFSIGNALED(status) ||
 357                             (WIFEXITED(status) &&
 358                              WEXITSTATUS(status) == EX_TEMPFAIL)) {
 359                                 sleep(1);
 360                                 pjdlog_info("Restarting worker process.");
 361                                 hastd_primary(res);
 362                         } else {
 363                                 res->hr_role = HAST_ROLE_INIT;
 364                                 pjdlog_info("Changing resource role back to %s.",
 365                                     role2str(res->hr_role));
 366                         }
 367                 }
 368                 pjdlog_prefix_set("%s", "");
 369         }
 370 }
 371
 372 static bool
 373 resource_needs_restart(const struct hast_resource *res0,
 374     const struct hast_resource *res1)
 375 {
 376
 377         PJDLOG_ASSERT(strcmp(res0->hr_name, res1->hr_name) == 0);
 378
 379         if (strcmp(res0->hr_provname, res1->hr_provname) != 0)
 380                 return (true);
 381         if (strcmp(res0->hr_localpath, res1->hr_localpath) != 0)
 382                 return (true);
 383         if (res0->hr_role == HAST_ROLE_INIT ||
 384             res0->hr_role == HAST_ROLE_SECONDARY) {
 385                 if (strcmp(res0->hr_remoteaddr, res1->hr_remoteaddr) != 0)
 386                         return (true);
 387                 if (strcmp(res0->hr_sourceaddr, res1->hr_sourceaddr) != 0)
 388                         return (true);
 389                 if (res0->hr_replication != res1->hr_replication)
 390                         return (true);
 391                 if (res0->hr_checksum != res1->hr_checksum)
 392                         return (true);
 393                 if (res0->hr_compression != res1->hr_compression)
 394                         return (true);
 395                 if (res0->hr_timeout != res1->hr_timeout)
 396                         return (true);
 397                 if (strcmp(res0->hr_exec, res1->hr_exec) != 0)
 398                         return (true);
 399                 /*
 400                  * When metaflush has changed we don't really need restart,
 401                  * but it is just easier this way.
 402                  */
 403                 if (res0->hr_metaflush != res1->hr_metaflush)
 404                         return (true);
 405         }
 406         return (false);
 407 }
 408
 409 static bool
 410 resource_needs_reload(const struct hast_resource *res0,
 411     const struct hast_resource *res1)
 412 {
 413
 414         PJDLOG_ASSERT(strcmp(res0->hr_name, res1->hr_name) == 0);
 415         PJDLOG_ASSERT(strcmp(res0->hr_provname, res1->hr_provname) == 0);
 416         PJDLOG_ASSERT(strcmp(res0->hr_localpath, res1->hr_localpath) == 0);
 417
 418         if (res0->hr_role != HAST_ROLE_PRIMARY)
 419                 return (false);
 420
 421         if (strcmp(res0->hr_remoteaddr, res1->hr_remoteaddr) != 0)
 422                 return (true);
 423         if (strcmp(res0->hr_sourceaddr, res1->hr_sourceaddr) != 0)
 424                 return (true);
 425         if (res0->hr_replication != res1->hr_replication)
 426                 return (true);
 427         if (res0->hr_checksum != res1->hr_checksum)
 428                 return (true);
 429         if (res0->hr_compression != res1->hr_compression)
 430                 return (true);
 431         if (res0->hr_timeout != res1->hr_timeout)
 432                 return (true);
 433         if (strcmp(res0->hr_exec, res1->hr_exec) != 0)
 434                 return (true);
 435         if (res0->hr_metaflush != res1->hr_metaflush)
 436                 return (true);
 437         return (false);
 438 }
 439
 440 static void
 441 resource_reload(const struct hast_resource *res)
 442 {
 443         struct nv *nvin, *nvout;
 444         int error;
 445
 446         PJDLOG_ASSERT(res->hr_role == HAST_ROLE_PRIMARY);
 447
 448         nvout = nv_alloc();
 449         nv_add_uint8(nvout, CONTROL_RELOAD, "cmd");
 450         nv_add_string(nvout, res->hr_remoteaddr, "remoteaddr");
 451         nv_add_string(nvout, res->hr_sourceaddr, "sourceaddr");
 452         nv_add_int32(nvout, (int32_t)res->hr_replication, "replication");
 453         nv_add_int32(nvout, (int32_t)res->hr_checksum, "checksum");
 454         nv_add_int32(nvout, (int32_t)res->hr_compression, "compression");
 455         nv_add_int32(nvout, (int32_t)res->hr_timeout, "timeout");
 456         nv_add_string(nvout, res->hr_exec, "exec");
 457         nv_add_int32(nvout, (int32_t)res->hr_metaflush, "metaflush");
 458         if (nv_error(nvout) != 0) {
 459                 nv_free(nvout);
 460                 pjdlog_error("Unable to allocate header for reload message.");
 461                 return;
 462         }
 463         if (hast_proto_send(res, res->hr_ctrl, nvout, NULL, 0) == -1) {
 464                 pjdlog_errno(LOG_ERR, "Unable to send reload message");
 465                 nv_free(nvout);
 466                 return;
 467         }
 468         nv_free(nvout);
 469
 470         /* Receive response. */
 471         if (hast_proto_recv_hdr(res->hr_ctrl, &nvin) == -1) {
 472                 pjdlog_errno(LOG_ERR, "Unable to receive reload reply");
 473                 return;
 474         }
 475         error = nv_get_int16(nvin, "error");
 476         nv_free(nvin);
 477         if (error != 0) {
 478                 pjdlog_common(LOG_ERR, 0, error, "Reload failed");
 479                 return;
 480         }
 481 }
 482
 483 static void
 484 hastd_reload(void)
 485 {
 486         struct hastd_config *newcfg;
 487         struct hast_resource *nres, *cres, *tres;
 488         struct hastd_listen *nlst, *clst;
 489         struct pidfh *newpfh;
 490         unsigned int nlisten;
 491         uint8_t role;
 492         pid_t otherpid;
 493
 494         pjdlog_info("Reloading configuration...");
 495
 496         newpfh = NULL;
 497
 498         newcfg = yy_config_parse(cfgpath, false);
 499         if (newcfg == NULL)
 500                 goto failed;
 501
 502         /*
 503          * Check if control address has changed.
 504          */
 505         if (strcmp(cfg->hc_controladdr, newcfg->hc_controladdr) != 0) {
 506                 if (proto_server(newcfg->hc_controladdr,
 507                     &newcfg->hc_controlconn) == -1) {
 508                         pjdlog_errno(LOG_ERR,
 509                             "Unable to listen on control address %s",
 510                             newcfg->hc_controladdr);
 511                         goto failed;
 512                 }
 513         }
 514         /*
 515          * Check if any listen address has changed.
 516          */
 517         nlisten = 0;
 518         TAILQ_FOREACH(nlst, &newcfg->hc_listen, hl_next) {
 519                 TAILQ_FOREACH(clst, &cfg->hc_listen, hl_next) {
 520                         if (strcmp(nlst->hl_addr, clst->hl_addr) == 0)
 521                                 break;
 522                 }
 523                 if (clst != NULL && clst->hl_conn != NULL) {
 524                         pjdlog_info("Keep listening on address %s.",
 525                             nlst->hl_addr);
 526                         nlst->hl_conn = clst->hl_conn;
 527                         nlisten++;
 528                 } else if (proto_server(nlst->hl_addr, &nlst->hl_conn) == 0) {
 529                         pjdlog_info("Listening on new address %s.",
 530                             nlst->hl_addr);
 531                         nlisten++;
 532                 } else {
 533                         pjdlog_errno(LOG_WARNING,
 534                             "Unable to listen on address %s", nlst->hl_addr);
 535                 }
 536         }
 537         if (nlisten == 0) {
 538                 pjdlog_error("No addresses to listen on.");
 539                 goto failed;
 540         }
 541         /*
 542          * Check if pidfile's path has changed.
 543          */
 544         if (!foreground && pidfile == NULL &&
 545             strcmp(cfg->hc_pidfile, newcfg->hc_pidfile) != 0) {
 546                 newpfh = pidfile_open(newcfg->hc_pidfile, 0600, &otherpid);
 547                 if (newpfh == NULL) {
 548                         if (errno == EEXIST) {
 549                                 pjdlog_errno(LOG_WARNING,
 550                                     "Another hastd is already running, pidfile: %s, pid: %jd.",
 551                                     newcfg->hc_pidfile, (intmax_t)otherpid);
 552                         } else {
 553                                 pjdlog_errno(LOG_WARNING,
 554                                     "Unable to open or create pidfile %s",
 555                                     newcfg->hc_pidfile);
 556                         }
 557                 } else if (pidfile_write(newpfh) == -1) {
 558                         /* Write PID to a file. */
 559                         pjdlog_errno(LOG_WARNING,
 560                             "Unable to write PID to file %s",
 561                             newcfg->hc_pidfile);
 562                 } else {
 563                         pjdlog_debug(1, "PID stored in %s.",
 564                             newcfg->hc_pidfile);
 565                 }
 566         }
 567
 568         /* No failures from now on. */
 569
 570         /*
 571          * Switch to new control socket.
 572          */
 573         if (newcfg->hc_controlconn != NULL) {
 574                 pjdlog_info("Control socket changed from %s to %s.",
 575                     cfg->hc_controladdr, newcfg->hc_controladdr);
 576                 proto_close(cfg->hc_controlconn);
 577                 cfg->hc_controlconn = newcfg->hc_controlconn;
 578                 newcfg->hc_controlconn = NULL;
 579                 strlcpy(cfg->hc_controladdr, newcfg->hc_controladdr,
 580                     sizeof(cfg->hc_controladdr));
 581         }
 582         /*
 583          * Switch to new pidfile.
 584          */
 585         if (newpfh != NULL) {
 586                 pjdlog_info("Pidfile changed from %s to %s.", cfg->hc_pidfile,
 587                     newcfg->hc_pidfile);
 588                 (void)pidfile_remove(pfh);
 589                 pfh = newpfh;
 590                 (void)strlcpy(cfg->hc_pidfile, newcfg->hc_pidfile,
 591                     sizeof(cfg->hc_pidfile));
 592         }
 593         /*
 594          * Switch to new listen addresses. Close all that were removed.
 595          */
 596         while ((clst = TAILQ_FIRST(&cfg->hc_listen)) != NULL) {
 597                 TAILQ_FOREACH(nlst, &newcfg->hc_listen, hl_next) {
 598                         if (strcmp(nlst->hl_addr, clst->hl_addr) == 0)
 599                                 break;
 600                 }
 601                 if (nlst == NULL && clst->hl_conn != NULL) {
 602                         proto_close(clst->hl_conn);
 603                         pjdlog_info("No longer listening on address %s.",
 604                             clst->hl_addr);
 605                 }
 606                 TAILQ_REMOVE(&cfg->hc_listen, clst, hl_next);
 607                 free(clst);
 608         }
 609         TAILQ_CONCAT(&cfg->hc_listen, &newcfg->hc_listen, hl_next);
 610
 611         /*
 612          * Stop and remove resources that were removed from the configuration.
 613          */
 614         TAILQ_FOREACH_SAFE(cres, &cfg->hc_resources, hr_next, tres) {
 615                 TAILQ_FOREACH(nres, &newcfg->hc_resources, hr_next) {
 616                         if (strcmp(cres->hr_name, nres->hr_name) == 0)
 617                                 break;
 618                 }
 619                 if (nres == NULL) {
 620                         control_set_role(cres, HAST_ROLE_INIT);
 621                         TAILQ_REMOVE(&cfg->hc_resources, cres, hr_next);
 622                         pjdlog_info("Resource %s removed.", cres->hr_name);
 623                         free(cres);
 624                 }
 625         }
 626         /*
 627          * Move new resources to the current configuration.
 628          */
 629         TAILQ_FOREACH_SAFE(nres, &newcfg->hc_resources, hr_next, tres) {
 630                 TAILQ_FOREACH(cres, &cfg->hc_resources, hr_next) {
 631                         if (strcmp(cres->hr_name, nres->hr_name) == 0)
 632                                 break;
 633                 }
 634                 if (cres == NULL) {
 635                         TAILQ_REMOVE(&newcfg->hc_resources, nres, hr_next);
 636                         TAILQ_INSERT_TAIL(&cfg->hc_resources, nres, hr_next);
 637                         pjdlog_info("Resource %s added.", nres->hr_name);
 638                 }
 639         }
 640         /*
 641          * Deal with modified resources.
 642          * Depending on what has changed exactly we might want to perform
 643          * different actions.
 644          *
 645          * We do full resource restart in the following situations:
 646          * Resource role is INIT or SECONDARY.
 647          * Resource role is PRIMARY and path to local component or provider
 648          * name has changed.
 649          * In case of PRIMARY, the worker process will be killed and restarted,
 650          * which also means removing /dev/hast/<name> provider and
 651          * recreating it.
 652          *
 653          * We do just reload (send SIGHUP to worker process) if we act as
 654          * PRIMARY, but only if remote address, source address, replication
 655          * mode, timeout, execution path or metaflush has changed.
 656          * For those, there is no need to restart worker process.
 657          * If PRIMARY receives SIGHUP, it will reconnect if remote address or
 658          * source address has changed or it will set new timeout if only timeout
 659          * has changed or it will update metaflush if only metaflush has
 660          * changed.
 661          */
 662         TAILQ_FOREACH_SAFE(nres, &newcfg->hc_resources, hr_next, tres) {
 663                 TAILQ_FOREACH(cres, &cfg->hc_resources, hr_next) {
 664                         if (strcmp(cres->hr_name, nres->hr_name) == 0)
 665                                 break;
 666                 }
 667                 PJDLOG_ASSERT(cres != NULL);
 668                 if (resource_needs_restart(cres, nres)) {
 669                         pjdlog_info("Resource %s configuration was modified, restarting it.",
 670                             cres->hr_name);
 671                         role = cres->hr_role;
 672                         control_set_role(cres, HAST_ROLE_INIT);
 673                         TAILQ_REMOVE(&cfg->hc_resources, cres, hr_next);
 674                         free(cres);
 675                         TAILQ_REMOVE(&newcfg->hc_resources, nres, hr_next);
 676                         TAILQ_INSERT_TAIL(&cfg->hc_resources, nres, hr_next);
 677                         control_set_role(nres, role);
 678                 } else if (resource_needs_reload(cres, nres)) {
 679                         pjdlog_info("Resource %s configuration was modified, reloading it.",
 680                             cres->hr_name);
 681                         strlcpy(cres->hr_remoteaddr, nres->hr_remoteaddr,
 682                             sizeof(cres->hr_remoteaddr));
 683                         strlcpy(cres->hr_sourceaddr, nres->hr_sourceaddr,
 684                             sizeof(cres->hr_sourceaddr));
 685                         cres->hr_replication = nres->hr_replication;
 686                         cres->hr_checksum = nres->hr_checksum;
 687                         cres->hr_compression = nres->hr_compression;
 688                         cres->hr_timeout = nres->hr_timeout;
 689                         strlcpy(cres->hr_exec, nres->hr_exec,
 690                             sizeof(cres->hr_exec));
 691                         cres->hr_metaflush = nres->hr_metaflush;
 692                         if (cres->hr_workerpid != 0)
 693                                 resource_reload(cres);
 694                 }
 695         }
 696
 697         yy_config_free(newcfg);
 698         pjdlog_info("Configuration reloaded successfully.");
 699         return;
 700 failed:
 701         if (newcfg != NULL) {
 702                 if (newcfg->hc_controlconn != NULL)
 703                         proto_close(newcfg->hc_controlconn);
 704                 while ((nlst = TAILQ_FIRST(&newcfg->hc_listen)) != NULL) {
 705                         if (nlst->hl_conn != NULL) {
 706                                 TAILQ_FOREACH(clst, &cfg->hc_listen, hl_next) {
 707                                         if (strcmp(nlst->hl_addr,
 708                                             clst->hl_addr) == 0) {
 709                                                 break;
 710                                         }
 711                                 }
 712                                 if (clst == NULL || clst->hl_conn == NULL)
 713                                         proto_close(nlst->hl_conn);
 714                         }
 715                         TAILQ_REMOVE(&newcfg->hc_listen, nlst, hl_next);
 716                         free(nlst);
 717                 }
 718                 yy_config_free(newcfg);
 719         }
 720         if (newpfh != NULL)
 721                 (void)pidfile_remove(newpfh);
 722         pjdlog_warning("Configuration not reloaded.");
 723 }
 724
 725 static void
 726 terminate_workers(void)
 727 {
 728         struct hast_resource *res;
 729
 730         pjdlog_info("Termination signal received, exiting.");
 731         TAILQ_FOREACH(res, &cfg->hc_resources, hr_next) {
 732                 if (res->hr_workerpid == 0)
 733                         continue;
 734                 pjdlog_info("Terminating worker process (resource=%s, role=%s, pid=%u).",
 735                     res->hr_name, role2str(res->hr_role), res->hr_workerpid);
 736                 if (kill(res->hr_workerpid, SIGTERM) == 0)
 737                         continue;
 738                 pjdlog_errno(LOG_WARNING,
 739                     "Unable to send signal to worker process (resource=%s, role=%s, pid=%u).",
 740                     res->hr_name, role2str(res->hr_role), res->hr_workerpid);
 741         }
 742 }
 743
 744 static void
 745 listen_accept(struct hastd_listen *lst)
 746 {
 747         struct hast_resource *res;
 748         struct proto_conn *conn;
 749         struct nv *nvin, *nvout, *nverr;
 750         const char *resname;
 751         const unsigned char *token;
 752         char laddr[256], raddr[256];
 753         uint8_t version;
 754         size_t size;
 755         pid_t pid;
 756         int status;
 757
 758         proto_local_address(lst->hl_conn, laddr, sizeof(laddr));
 759         pjdlog_debug(1, "Accepting connection to %s.", laddr);
 760
 761         if (proto_accept(lst->hl_conn, &conn) == -1) {
 762                 pjdlog_errno(LOG_ERR, "Unable to accept connection %s", laddr);
 763                 return;
 764         }
 765
 766         proto_local_address(conn, laddr, sizeof(laddr));
 767         proto_remote_address(conn, raddr, sizeof(raddr));
 768         pjdlog_info("Connection from %s to %s.", raddr, laddr);
 769
 770         /* Error in setting timeout is not critical, but why should it fail? */
 771         if (proto_timeout(conn, HAST_TIMEOUT) == -1)
 772                 pjdlog_errno(LOG_WARNING, "Unable to set connection timeout");
 773
 774         nvin = nvout = nverr = NULL;
 775
 776         /*
 777          * Before receiving any data see if remote host have access to any
 778          * resource.
 779          */
 780         TAILQ_FOREACH(res, &cfg->hc_resources, hr_next) {
 781                 if (proto_address_match(conn, res->hr_remoteaddr))
 782                         break;
 783         }
 784         if (res == NULL) {
 785                 pjdlog_error("Client %s isn't known.", raddr);
 786                 goto close;
 787         }
 788         /* Ok, remote host can access at least one resource. */
 789
 790         if (hast_proto_recv_hdr(conn, &nvin) == -1) {
 791                 pjdlog_errno(LOG_ERR, "Unable to receive header from %s",
 792                     raddr);
 793                 goto close;
 794         }
 795
 796         resname = nv_get_string(nvin, "resource");
 797         if (resname == NULL) {
 798                 pjdlog_error("No 'resource' field in the header received from %s.",
 799                     raddr);
 800                 goto close;
 801         }
 802         pjdlog_debug(2, "%s: resource=%s", raddr, resname);
 803         version = nv_get_uint8(nvin, "version");
 804         pjdlog_debug(2, "%s: version=%hhu", raddr, version);
 805         if (version == 0) {
 806                 /*
 807                  * If no version is sent, it means this is protocol version 1.
 808                  */
 809                 version = 1;
 810         }
 811         token = nv_get_uint8_array(nvin, &size, "token");
 812         /*
 813          * NULL token means that this is first connection.
 814          */
 815         if (token != NULL && size != sizeof(res->hr_token)) {
 816                 pjdlog_error("Received token of invalid size from %s (expected %zu, got %zu).",
 817                     raddr, sizeof(res->hr_token), size);
 818                 goto close;
 819         }
 820
 821         /*
 822          * From now on we want to send errors to the remote node.
 823          */
 824         nverr = nv_alloc();
 825
 826         /* Find resource related to this connection. */
 827         TAILQ_FOREACH(res, &cfg->hc_resources, hr_next) {
 828                 if (strcmp(resname, res->hr_name) == 0)
 829                         break;
 830         }
 831         /* Have we found the resource? */
 832         if (res == NULL) {
 833                 pjdlog_error("No resource '%s' as requested by %s.",
 834                     resname, raddr);
 835                 nv_add_stringf(nverr, "errmsg", "Resource not configured.");
 836                 goto fail;
 837         }
 838
 839         /* Now that we know resource name setup log prefix. */
 840         pjdlog_prefix_set("[%s] (%s) ", res->hr_name, role2str(res->hr_role));
 841
 842         /* Does the remote host have access to this resource? */
 843         if (!proto_address_match(conn, res->hr_remoteaddr)) {
 844                 pjdlog_error("Client %s has no access to the resource.", raddr);
 845                 nv_add_stringf(nverr, "errmsg", "No access to the resource.");
 846                 goto fail;
 847         }
 848         /* Is the resource marked as secondary? */
 849         if (res->hr_role != HAST_ROLE_SECONDARY) {
 850                 pjdlog_warning("We act as %s for the resource and not as %s as requested by %s.",
 851                     role2str(res->hr_role), role2str(HAST_ROLE_SECONDARY),
 852                     raddr);
 853                 nv_add_stringf(nverr, "errmsg",
 854                     "Remote node acts as %s for the resource and not as %s.",
 855                     role2str(res->hr_role), role2str(HAST_ROLE_SECONDARY));
 856                 if (res->hr_role == HAST_ROLE_PRIMARY) {
 857                         /*
 858                          * If we act as primary request the other side to wait
 859                          * for us a bit, as we might be finishing cleanups.
 860                          */
 861                         nv_add_uint8(nverr, 1, "wait");
 862                 }
 863                 goto fail;
 864         }
 865         /* Does token (if exists) match? */
 866         if (token != NULL && memcmp(token, res->hr_token,
 867             sizeof(res->hr_token)) != 0) {
 868                 pjdlog_error("Token received from %s doesn't match.", raddr);
 869                 nv_add_stringf(nverr, "errmsg", "Token doesn't match.");
 870                 goto fail;
 871         }
 872         /*
 873          * If there is no token, but we have half-open connection
 874          * (only remotein) or full connection (worker process is running)
 875          * we have to cancel those and accept the new connection.
 876          */
 877         if (token == NULL) {
 878                 PJDLOG_ASSERT(res->hr_remoteout == NULL);
 879                 pjdlog_debug(1, "Initial connection from %s.", raddr);
 880                 if (res->hr_workerpid != 0) {
 881                         PJDLOG_ASSERT(res->hr_remotein == NULL);
 882                         pjdlog_debug(1,
 883                             "Worker process exists (pid=%u), stopping it.",
 884                             (unsigned int)res->hr_workerpid);
 885                         /* Stop child process. */
 886                         if (kill(res->hr_workerpid, SIGINT) == -1) {
 887                                 pjdlog_errno(LOG_ERR,
 888                                     "Unable to stop worker process (pid=%u)",
 889                                     (unsigned int)res->hr_workerpid);
 890                                 /*
 891                                  * Other than logging the problem we
 892                                  * ignore it - nothing smart to do.
 893                                  */
 894                         }
 895                         /* Wait for it to exit. */
 896                         else if ((pid = waitpid(res->hr_workerpid,
 897                             &status, 0)) != res->hr_workerpid) {
 898                                 /* We can only log the problem. */
 899                                 pjdlog_errno(LOG_ERR,
 900                                     "Waiting for worker process (pid=%u) failed",
 901                                     (unsigned int)res->hr_workerpid);
 902                         } else {
 903                                 child_exit_log(res->hr_workerpid, status);
 904                         }
 905                         child_cleanup(res);
 906                 } else if (res->hr_remotein != NULL) {
 907                         char oaddr[256];
 908
 909                         proto_remote_address(res->hr_remotein, oaddr,
 910                             sizeof(oaddr));
 911                         pjdlog_debug(1,
 912                             "Canceling half-open connection from %s on connection from %s.",
 913                             oaddr, raddr);
 914                         proto_close(res->hr_remotein);
 915                         res->hr_remotein = NULL;
 916                 }
 917         }
 918
 919         /*
 920          * Checks and cleanups are done.
 921          */
 922
 923         if (token == NULL) {
 924                 if (version > HAST_PROTO_VERSION) {
 925                         pjdlog_info("Remote protocol version %hhu is not supported, falling back to version %hhu.",
 926                             version, (unsigned char)HAST_PROTO_VERSION);
 927                         version = HAST_PROTO_VERSION;
 928                 }
 929                 pjdlog_debug(1, "Negotiated protocol version %hhu.", version);
 930                 res->hr_version = version;
 931                 arc4random_buf(res->hr_token, sizeof(res->hr_token));
 932                 nvout = nv_alloc();
 933                 nv_add_uint8(nvout, version, "version");
 934                 nv_add_uint8_array(nvout, res->hr_token,
 935                     sizeof(res->hr_token), "token");
 936                 if (nv_error(nvout) != 0) {
 937                         pjdlog_common(LOG_ERR, 0, nv_error(nvout),
 938                             "Unable to prepare return header for %s", raddr);
 939                         nv_add_stringf(nverr, "errmsg",
 940                             "Remote node was unable to prepare return header: %s.",
 941                             strerror(nv_error(nvout)));
 942                         goto fail;
 943                 }
 944                 if (hast_proto_send(res, conn, nvout, NULL, 0) == -1) {
 945                         int error = errno;
 946
 947                         pjdlog_errno(LOG_ERR, "Unable to send response to %s",
 948                             raddr);
 949                         nv_add_stringf(nverr, "errmsg",
 950                             "Remote node was unable to send response: %s.",
 951                             strerror(error));
 952                         goto fail;
 953                 }
 954                 res->hr_remotein = conn;
 955                 pjdlog_debug(1, "Incoming connection from %s configured.",
 956                     raddr);
 957         } else {
 958                 res->hr_remoteout = conn;
 959                 pjdlog_debug(1, "Outgoing connection to %s configured.", raddr);
 960                 hastd_secondary(res, nvin);
 961         }
 962         nv_free(nvin);
 963         nv_free(nvout);
 964         nv_free(nverr);
 965         pjdlog_prefix_set("%s", "");
 966         return;
 967 fail:
 968         if (nv_error(nverr) != 0) {
 969                 pjdlog_common(LOG_ERR, 0, nv_error(nverr),
 970                     "Unable to prepare error header for %s", raddr);
 971                 goto close;
 972         }
 973         if (hast_proto_send(NULL, conn, nverr, NULL, 0) == -1) {
 974                 pjdlog_errno(LOG_ERR, "Unable to send error to %s", raddr);
 975                 goto close;
 976         }
 977 close:
 978         if (nvin != NULL)
 979                 nv_free(nvin);
 980         if (nvout != NULL)
 981                 nv_free(nvout);
 982         if (nverr != NULL)
 983                 nv_free(nverr);
 984         proto_close(conn);
 985         pjdlog_prefix_set("%s", "");
 986 }
 987
 988 static void
 989 connection_migrate(struct hast_resource *res)
 990 {
 991         struct proto_conn *conn;
 992         int16_t val = 0;
 993
 994         pjdlog_prefix_set("[%s] (%s) ", res->hr_name, role2str(res->hr_role));
 995
 996         PJDLOG_ASSERT(res->hr_role == HAST_ROLE_PRIMARY);
 997
 998         if (proto_recv(res->hr_conn, &val, sizeof(val)) == -1) {
 999                 pjdlog_errno(LOG_WARNING,
1000                     "Unable to receive connection command");
1001                 return;
1002         }
1003         if (proto_client(res->hr_sourceaddr[0] != '\0' ? res->hr_sourceaddr : NULL,
1004             res->hr_remoteaddr, &conn) == -1) {
1005                 val = errno;
1006                 pjdlog_errno(LOG_WARNING,
1007                     "Unable to create outgoing connection to %s",
1008                     res->hr_remoteaddr);
1009                 goto out;
1010         }
1011         if (proto_connect(conn, -1) == -1) {
1012                 val = errno;
1013                 pjdlog_errno(LOG_WARNING, "Unable to connect to %s",
1014                     res->hr_remoteaddr);
1015                 proto_close(conn);
1016                 goto out;
1017         }
1018         val = 0;
1019 out:
1020         if (proto_send(res->hr_conn, &val, sizeof(val)) == -1) {
1021                 pjdlog_errno(LOG_WARNING,
1022                     "Unable to send reply to connection request");
1023         }
1024         if (val == 0 && proto_connection_send(res->hr_conn, conn) == -1)
1025                 pjdlog_errno(LOG_WARNING, "Unable to send connection");
1026
1027         pjdlog_prefix_set("%s", "");
1028 }
1029
1030 static void
1031 check_signals(void)
1032 {
1033         struct timespec sigtimeout;
1034         sigset_t mask;
1035         int signo;
1036
1037         sigtimeout.tv_sec = 0;
1038         sigtimeout.tv_nsec = 0;
1039
1040         PJDLOG_VERIFY(sigemptyset(&mask) == 0);
1041         PJDLOG_VERIFY(sigaddset(&mask, SIGHUP) == 0);
1042         PJDLOG_VERIFY(sigaddset(&mask, SIGINT) == 0);
1043         PJDLOG_VERIFY(sigaddset(&mask, SIGTERM) == 0);
1044         PJDLOG_VERIFY(sigaddset(&mask, SIGCHLD) == 0);
1045
1046         while ((signo = sigtimedwait(&mask, NULL, &sigtimeout)) != -1) {
1047                 switch (signo) {
1048                 case SIGINT:
1049                 case SIGTERM:
1050                         sigexit_received = true;
1051                         terminate_workers();
1052                         proto_close(cfg->hc_controlconn);
1053                         exit(EX_OK);
1054                         break;
1055                 case SIGCHLD:
1056                         child_exit();
1057                         break;
1058                 case SIGHUP:
1059                         hastd_reload();
1060                         break;
1061                 default:
1062                         PJDLOG_ABORT("Unexpected signal (%d).", signo);
1063                 }
1064         }
1065 }
1066
1067 static void
1068 main_loop(void)
1069 {
1070         struct hast_resource *res;
1071         struct hastd_listen *lst;
1072         struct timeval seltimeout;
1073         int fd, maxfd, ret;
1074         time_t lastcheck, now;
1075         fd_set rfds;
1076
1077         lastcheck = time(NULL);
1078         seltimeout.tv_sec = REPORT_INTERVAL;
1079         seltimeout.tv_usec = 0;
1080
1081         for (;;) {
1082                 check_signals();
1083
1084                 /* Setup descriptors for select(2). */
1085                 FD_ZERO(&rfds);
1086                 maxfd = fd = proto_descriptor(cfg->hc_controlconn);
1087                 PJDLOG_ASSERT(fd >= 0);
1088                 FD_SET(fd, &rfds);
1089                 TAILQ_FOREACH(lst, &cfg->hc_listen, hl_next) {
1090                         if (lst->hl_conn == NULL)
1091                                 continue;
1092                         fd = proto_descriptor(lst->hl_conn);
1093                         PJDLOG_ASSERT(fd >= 0);
1094                         FD_SET(fd, &rfds);
1095                         maxfd = MAX(fd, maxfd);
1096                 }
1097                 TAILQ_FOREACH(res, &cfg->hc_resources, hr_next) {
1098                         if (res->hr_event == NULL)
1099                                 continue;
1100                         fd = proto_descriptor(res->hr_event);
1101                         PJDLOG_ASSERT(fd >= 0);
1102                         FD_SET(fd, &rfds);
1103                         maxfd = MAX(fd, maxfd);
1104                         if (res->hr_role == HAST_ROLE_PRIMARY) {
1105                                 /* Only primary workers asks for connections. */
1106                                 PJDLOG_ASSERT(res->hr_conn != NULL);
1107                                 fd = proto_descriptor(res->hr_conn);
1108                                 PJDLOG_ASSERT(fd >= 0);
1109                                 FD_SET(fd, &rfds);
1110                                 maxfd = MAX(fd, maxfd);
1111                         } else {
1112                                 PJDLOG_ASSERT(res->hr_conn == NULL);
1113                         }
1114                 }
1115
1116                 PJDLOG_ASSERT(maxfd + 1 <= (int)FD_SETSIZE);
1117                 ret = select(maxfd + 1, &rfds, NULL, NULL, &seltimeout);
1118                 now = time(NULL);
1119                 if (lastcheck + REPORT_INTERVAL <= now) {
1120                         hook_check();
1121                         lastcheck = now;
1122                 }
1123                 if (ret == 0) {
1124                         /*
1125                          * select(2) timed out, so there should be no
1126                          * descriptors to check.
1127                          */
1128                         continue;
1129                 } else if (ret == -1) {
1130                         if (errno == EINTR)
1131                                 continue;
1132                         KEEP_ERRNO((void)pidfile_remove(pfh));
1133                         pjdlog_exit(EX_OSERR, "select() failed");
1134                 }
1135
1136                 /*
1137                  * Check for signals before we do anything to update our
1138                  * info about terminated workers in the meantime.
1139                  */
1140                 check_signals();
1141
1142                 if (FD_ISSET(proto_descriptor(cfg->hc_controlconn), &rfds))
1143                         control_handle(cfg);
1144                 TAILQ_FOREACH(lst, &cfg->hc_listen, hl_next) {
1145                         if (lst->hl_conn == NULL)
1146                                 continue;
1147                         if (FD_ISSET(proto_descriptor(lst->hl_conn), &rfds))
1148                                 listen_accept(lst);
1149                 }
1150                 TAILQ_FOREACH(res, &cfg->hc_resources, hr_next) {
1151                         if (res->hr_event == NULL)
1152                                 continue;
1153                         if (FD_ISSET(proto_descriptor(res->hr_event), &rfds)) {
1154                                 if (event_recv(res) == 0)
1155                                         continue;
1156                                 /* The worker process exited? */
1157                                 proto_close(res->hr_event);
1158                                 res->hr_event = NULL;
1159                                 if (res->hr_conn != NULL) {
1160                                         proto_close(res->hr_conn);
1161                                         res->hr_conn = NULL;
1162                                 }
1163                                 continue;
1164                         }
1165                         if (res->hr_role == HAST_ROLE_PRIMARY) {
1166                                 PJDLOG_ASSERT(res->hr_conn != NULL);
1167                                 if (FD_ISSET(proto_descriptor(res->hr_conn),
1168                                     &rfds)) {
1169                                         connection_migrate(res);
1170                                 }
1171                         } else {
1172                                 PJDLOG_ASSERT(res->hr_conn == NULL);
1173                         }
1174                 }
1175         }
1176 }
1177
1178 static void
1179 dummy_sighandler(int sig __unused)
1180 {
1181         /* Nothing to do. */
1182 }
1183
1184 int
1185 main(int argc, char *argv[])
1186 {
1187         struct hastd_listen *lst;
1188         pid_t otherpid;
1189         int debuglevel;
1190         sigset_t mask;
1191
1192         foreground = false;
1193         debuglevel = 0;
1194
1195         for (;;) {
1196                 int ch;
1197
1198                 ch = getopt(argc, argv, "c:dFhP:");
1199                 if (ch == -1)
1200                         break;
1201                 switch (ch) {
1202                 case 'c':
1203                         cfgpath = optarg;
1204                         break;
1205                 case 'd':
1206                         debuglevel++;
1207                         break;
1208                 case 'F':
1209                         foreground = true;
1210                         break;
1211                 case 'P':
1212                         pidfile = optarg;
1213                         break;
1214                 case 'h':
1215                 default:
1216                         usage();
1217                 }
1218         }
1219         argc -= optind;
1220         argv += optind;
1221
1222         pjdlog_init(PJDLOG_MODE_STD);
1223         pjdlog_debug_set(debuglevel);
1224
1225         closefrom(MAX(MAX(STDIN_FILENO, STDOUT_FILENO), STDERR_FILENO) + 1);
1226         g_gate_load();
1227
1228         /*
1229          * When path to the configuration file is relative, obtain full path,
1230          * so we can always find the file, even after daemonizing and changing
1231          * working directory to /.
1232          */
1233         if (cfgpath[0] != '/') {
1234                 const char *newcfgpath;
1235
1236                 newcfgpath = realpath(cfgpath, NULL);
1237                 if (newcfgpath == NULL) {
1238                         pjdlog_exit(EX_CONFIG,
1239                             "Unable to obtain full path of %s", cfgpath);
1240                 }
1241                 cfgpath = newcfgpath;
1242         }
1243
1244         cfg = yy_config_parse(cfgpath, true);
1245         PJDLOG_ASSERT(cfg != NULL);
1246
1247         if (pidfile != NULL) {
1248                 if (strlcpy(cfg->hc_pidfile, pidfile,
1249                     sizeof(cfg->hc_pidfile)) >= sizeof(cfg->hc_pidfile)) {
1250                         pjdlog_exitx(EX_CONFIG, "Pidfile path is too long.");
1251                 }
1252         }
1253
1254         if (pidfile != NULL || !foreground) {
1255                 pfh = pidfile_open(cfg->hc_pidfile, 0600, &otherpid);
1256                 if (pfh == NULL) {
1257                         if (errno == EEXIST) {
1258                                 pjdlog_exitx(EX_TEMPFAIL,
1259                                     "Another hastd is already running, pidfile: %s, pid: %jd.",
1260                                     cfg->hc_pidfile, (intmax_t)otherpid);
1261                         }
1262                         /*
1263                          * If we cannot create pidfile for other reasons,
1264                          * only warn.
1265                          */
1266                         pjdlog_errno(LOG_WARNING,
1267                             "Unable to open or create pidfile %s",
1268                             cfg->hc_pidfile);
1269                 }
1270         }
1271
1272         /*
1273          * Restore default actions for interesting signals in case parent
1274          * process (like init(8)) decided to ignore some of them (like SIGHUP).
1275          */
1276         PJDLOG_VERIFY(signal(SIGHUP, SIG_DFL) != SIG_ERR);
1277         PJDLOG_VERIFY(signal(SIGINT, SIG_DFL) != SIG_ERR);
1278         PJDLOG_VERIFY(signal(SIGTERM, SIG_DFL) != SIG_ERR);
1279         /*
1280          * Because SIGCHLD is ignored by default, setup dummy handler for it,
1281          * so we can mask it.
1282          */
1283         PJDLOG_VERIFY(signal(SIGCHLD, dummy_sighandler) != SIG_ERR);
1284
1285         PJDLOG_VERIFY(sigemptyset(&mask) == 0);
1286         PJDLOG_VERIFY(sigaddset(&mask, SIGHUP) == 0);
1287         PJDLOG_VERIFY(sigaddset(&mask, SIGINT) == 0);
1288         PJDLOG_VERIFY(sigaddset(&mask, SIGTERM) == 0);
1289         PJDLOG_VERIFY(sigaddset(&mask, SIGCHLD) == 0);
1290         PJDLOG_VERIFY(sigprocmask(SIG_SETMASK, &mask, NULL) == 0);
1291
1292         /* Listen on control address. */
1293         if (proto_server(cfg->hc_controladdr, &cfg->hc_controlconn) == -1) {
1294                 KEEP_ERRNO((void)pidfile_remove(pfh));
1295                 pjdlog_exit(EX_OSERR, "Unable to listen on control address %s",
1296                     cfg->hc_controladdr);
1297         }
1298         /* Listen for remote connections. */
1299         TAILQ_FOREACH(lst, &cfg->hc_listen, hl_next) {
1300                 if (proto_server(lst->hl_addr, &lst->hl_conn) == -1) {
1301                         KEEP_ERRNO((void)pidfile_remove(pfh));
1302                         pjdlog_exit(EX_OSERR, "Unable to listen on address %s",
1303                             lst->hl_addr);
1304                 }
1305         }
1306
1307         if (!foreground) {
1308                 if (daemon(0, 0) == -1) {
1309                         KEEP_ERRNO((void)pidfile_remove(pfh));
1310                         pjdlog_exit(EX_OSERR, "Unable to daemonize");
1311                 }
1312
1313                 /* Start logging to syslog. */
1314                 pjdlog_mode_set(PJDLOG_MODE_SYSLOG);
1315         }
1316         if (pidfile != NULL || !foreground) {
1317                 /* Write PID to a file. */
1318                 if (pidfile_write(pfh) == -1) {
1319                         pjdlog_errno(LOG_WARNING,
1320                             "Unable to write PID to a file %s",
1321                             cfg->hc_pidfile);
1322                 } else {
1323                         pjdlog_debug(1, "PID stored in %s.", cfg->hc_pidfile);
1324                 }
1325         }
1326
1327         pjdlog_info("Started successfully, running protocol version %d.",
1328             HAST_PROTO_VERSION);
1329
1330         pjdlog_debug(1, "Listening on control address %s.",
1331             cfg->hc_controladdr);
1332         TAILQ_FOREACH(lst, &cfg->hc_listen, hl_next)
1333                 pjdlog_info("Listening on address %s.", lst->hl_addr);
1334
1335         hook_init();
1336
1337         main_loop();
1338
1339         exit(0);
1340 }