ezjail/ezjail-admin

#!/bin/sh

# ugly: this variable is set during port install time
ezjail_prefix=EZJAIL_PREFIX
ezjail_jailcfgs=${ezjail_prefix}/etc/ezjail

if [ "0" != "`id -u`" ]; then
  echo "Retry as root"; exit 1;
fi

if [ -f ${ezjail_prefix}/etc/ezjail.conf ]; then
  . ${ezjail_prefix}/etc/ezjail.conf;
fi

# set defaults
ezjail_jaildir=${ezjail_jaildir:-"/usr/jails"}
ezjail_jailtemplate=${ezjail_jailtemplate:-"$ezjail_jaildir/newjail"}
ezjail_jailbase=${ezjail_jailbase:-"$ezjail_jaildir/basejail"}
ezjail_sourcetree=${ezjail_sourcetree:-"/usr/src"}

ezjail_mount_enable=${ezjail_mount_enable:-"YES"}
ezjail_devfs_enable=${ezjail_devfs_enable:-"YES"}
ezjail_devfs_ruleset=${ezjail_devfs_ruleset:-"devfsrules_jail"}
ezjail_procfs_enable=${ezjail_procfs_enable:-"YES"}
ezjail_fdescfs_enable=${ezjail_fdescfs_enable:-"YES"}

# check for command
if [ -z "$1" ]; then
  echo "Usage: `basename $0` [create|delete|list|update] {params}";
  exit 1;
fi

case "$1" in
create)
  shift
  args=`getopt xr: $*`
  if [ $? != 0 ]; then
    echo 'Usage: ezjail create [-r jailroot] [-x] jailname jailip';
    exit 1;
  fi

  newjail_root=
  newjail_softlink=
  newjail_fill="YES"

  set -- $args
  for arg do
    case $arg in
      -x) newjail_fill="NO"; shift;;
      -r) newjail_root="$2"; shift 2;;
      --) shift; break;;
    esac
  done;
  newjail_name=$1;  newjail_ip=$2;  shift 2;

  # wee need at least a name and an ip for new jail
  if [ -z "$newjail_name" -o -z "$newjail_ip" -o $# != 0 ]; then
    echo 'Usage: ezjail create [-r jailroot] [-x] jailname jailip'; exit 1;
  fi

  # relative paths don't make sense in rc.scripts
  if [ ${ezjail_jaildir#/} = ${ezjail_jaildir} ]; then
    echo Error: Need an absolute path in ezjail_jaildir, it is currently set to: $ezjail_jaildir
    exit 1;
  fi

  # jail names must not have names that irritate file systems,
  # excluding dots from this list was done intentionally to
  # allow foo.com style directory names, however, the jail
  # name will be foo_com in most scripts
  newjail_name=`echo $newjail_name | tr /~ __`;
  newjail_root=${newjail_root:-"$ezjail_jaildir/$newjail_name"}
  newjail_nname=`echo $newjail_name | tr . _`;

  # if jail root specified on command line is not absolute,
  # make it absolute inside our jail directory
  if [ ${newjail_root#/} = ${newjail_root} ]; then
    newjail_root=$ezjail_jaildir/$newjail_root
  fi

  # if jail root specified on command line does not lie
  # within our jail directory, we need to create a softlink
  if [ ${newjail_root##${ezjail_jaildir}} = $newjail_root ]; then
    newjail_softlink=$ezjail_jaildir/`basename $newjail_root`
    if [ -e $newjail_softlink -a $newjail_fill = "YES" ]; then
      echo Error: an ezjail already exists at $newjail_softlink
      exit 1;
    fi
  fi

  # now take a copy of our template jail
  if [ $newjail_fill = "YES" ]; then
    mkdir -p ${newjail_root} && cd ${ezjail_jailtemplate} \
          && find * | cpio -p -v ${newjail_root}
  fi

  # if a soft link is necessary, create it now
  if [ $newjail_softlink ]; then
    ln -s $newjail_root $newjail_softlink
  fi

  # if the automount feature is not disabled, create an
  # fstab entry for new jail
  echo $ezjail_jailbase	$newjail_root/basejail	nullfs	ro	0	0 > /etc/fstab.$newjail_nname

  # now, where everything seems to have gone right,
  # create control file in ezjails config dir
  mkdir -p $ezjail_jailcfgs
  echo export jail_${newjail_nname}_hostname=\"${newjail_name}\"                >> ${ezjail_jailcfgs}/${newjail_nname}
  echo export jail_${newjail_nname}_ip=\"${newjail_ip}\"                        >> ${ezjail_jailcfgs}/${newjail_nname}
  echo export jail_${newjail_nname}_rootdir=\"${newjail_root}\"                 >> ${ezjail_jailcfgs}/${newjail_nname}
  echo export jail_${newjail_nname}_exec=\"/bin/sh /etc/rc\"                    >> ${ezjail_jailcfgs}/${newjail_nname}
  echo export jail_${newjail_nname}_mount_enable=\"${ezjail_mount_enable}\"     >> ${ezjail_jailcfgs}/${newjail_nname}
  echo export jail_${newjail_nname}_devfs_enable=\"${ezjail_devfs_enable}\"     >> ${ezjail_jailcfgs}/${newjail_nname}
  echo export jail_${newjail_nname}_devfs_ruleset=\"devfsrules_jail\"           >> ${ezjail_jailcfgs}/${newjail_nname}
  echo export jail_${newjail_nname}_procfs_enable=\"${ezjail_procfs_enable}\"   >> ${ezjail_jailcfgs}/${newjail_nname}
  echo export jail_${newjail_nname}_fdescfs_enable=\"${ezjail_fdescfs_enable}\" >> ${ezjail_jailcfgs}/${newjail_nname}

  ;;
delete)

  ;;
list)

  ;;
update)
  shift
  args=`getopt is: $*`
  if [ $? != 0 ]; then
    echo 'Usage: ezjail update [-s sourcetree] [-i]';
    exit 1;
  fi

  updatejail_installaction="world"

  set -- $args
  for arg do
    case $arg in
      -i) updatejail_installaction="installworld"; shift;;
      -s) ezjail_sourcetree="$2"; shift 2;;
      --) shift; break;;
    esac
  done;

  if [ ! -d ${ezjail_sourcetree} ]; then
    echo "Cannot find your copy of the FreeBSD source tree in $ezjail_sourcetree."; exit 1;
  fi

  cd ${ezjail_sourcetree}
  rm -rf ${ezjail_jailfull}; mkdir -p ${ezjail_jailfull}
  make ${updatejail_installaction} DESTDIR=${ezjail_jailfull}
  make distribution DESTDIR=${ezjail_jailfull}

  cd ${ezjail_jailfull}
  mkdir -p ${ezjail_jailbase}
  for a in bin sbin usr/bin usr/include usr/lib usr/libexec usr/sbin usr/src usr/share; do
    find ${a} | cpio -d -p -v ${ezjail_jailbase};
    chflags -R noschg ${a}; rm -r ${a}; ln -s /basejail/${a} ${a}
  done
  mkdir basejail
  ln -s /basejail/usr/ports usr/ports

  if [ -d ${ezjail_jailtemplate} ]; then
    rm -rf ${ezjail_jailtemplate}_old
    mv ${ezjail_jailtemplate} ${ezjail_jailtemplate}_old
  fi
  mv ${ezjail_jailfull} ${ezjail_jailtemplate}

  ;;
*)
  echo "Usage: `basename $0` [create|delete|list|update] {params}"; exit;
  ;;
esac