GitHub-Mirror/systemd
1
0
Fork 0
mirror of https://github.com/systemd/systemd synced 2025-10-06 00:13:24 +02:00
Code Issues Releases Wiki Activity

ssh-proxy: Add support for per user machined

Browse Source 
Let's check both the per user machined and the system machined instead
of only the system machined. We give preference to the per user machined
and fall back to the system machined.
This commit is contained in:
Daan De Meyer
2025-09-26 09:39:23 +02:00
committed by Lennart Poettering
parent bd4c39a384
commit 677785c8f8
1 changed files with 46 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

58
src/ssh-generator/ssh-proxy.c
View File

@@ -10,10 +10,10 @@
#include "iovec-util.h"
#include "log.h"
#include "main-func.h"
#include "path-lookup.h"
#include "socket-util.h"
#include "string-util.h"
#include "strv.h"
#include "varlink-util.h"
static int process_vsock_cid(unsigned cid, const char *port) {
int r;
@@ -135,23 +135,57 @@ static int process_vsock_mux(const char *path, const char *port) {
return 0;
}
static int process_machine(const char *machine, const char *port) {
static int fetch_machine(const char *machine, RuntimeScope scope, sd_json_variant **ret) {
int r;
assert(machine);
assert(ret);
_cleanup_free_ char *addr = NULL;
r = runtime_directory_generic(scope, "machine/io.systemd.Machine", &addr);
if (r < 0)
return r;
_cleanup_(sd_varlink_unrefp) sd_varlink *vl = NULL;
r = sd_varlink_connect_address(&vl, addr);
if (r < 0)
return log_error_errno(r, "Failed to connect to machined on %s: %m", addr);
_cleanup_(sd_json_variant_unrefp) sd_json_variant *result = NULL;
const char *error_id;
r = sd_varlink_callbo(
vl,
"io.systemd.Machine.List",
&result,
&error_id,
SD_JSON_BUILD_PAIR("name", SD_JSON_BUILD_STRING(machine)));
if (r < 0)
return log_error_errno(r, "Failed to issue io.systemd.Machine.List() varlink call: %m");
if (error_id) {
if (streq(error_id, "io.systemd.Machine.NoSuchMachine"))
return -ESRCH;
r = sd_varlink_error_to_errno(error_id, result); /* If this is a system errno style error, output it with %m */
if (r != -EBADR)
return log_error_errno(r, "Failed to issue io.systemd.Machine.List() varlink call: %m");
return log_error_errno(r, "Failed to issue io.systemd.Machine.List() varlink call: %s", error_id);
}
*ret = TAKE_PTR(result);
return 0;
}
static int process_machine(const char *machine, const char *port) {
int r;
assert(machine);
assert(port);
r = sd_varlink_connect_address(&vl, "/run/systemd/machine/io.systemd.Machine");
if (r < 0)
return log_error_errno(r, "Failed to connect to machined on /run/systemd/machine/io.systemd.Machine: %m");
_cleanup_(sd_json_variant_unrefp) sd_json_variant *result = NULL;
r = varlink_callbo_and_log(
vl,
"io.systemd.Machine.List",
&result,
SD_JSON_BUILD_PAIR("name", SD_JSON_BUILD_STRING(machine)));
r = fetch_machine(machine, RUNTIME_SCOPE_USER, &result);
if (r == -ESRCH)
r = fetch_machine(machine, RUNTIME_SCOPE_SYSTEM, &result);
if (r < 0)
return r;
@@ -167,7 +201,7 @@ static int process_machine(const char *machine, const char *port) {
return log_error_errno(r, "Failed to parse Varlink reply: %m");
if (cid == VMADDR_CID_ANY)
return log_error_errno(SYNTHETIC_ERRNO(EINVAL), "Machine has no AF_VSOCK CID assigned.");
return log_error_errno(SYNTHETIC_ERRNO(EINVAL), "Machine %s has no AF_VSOCK CID assigned.", machine);
return process_vsock_cid(cid, port);
}