| // Copyright 2017 The Chromium OS Authors. All rights reserved. |
| // Use of this source code is governed by a BSD-style license that can be |
| // found in the LICENSE file. |
| |
| #ifndef VM_TOOLS_CONCIERGE_TERMINA_VM_H_ |
| #define VM_TOOLS_CONCIERGE_TERMINA_VM_H_ |
| |
| #include <stdint.h> |
| #include <unistd.h> |
| |
| #include <map> |
| #include <memory> |
| #include <string> |
| #include <vector> |
| |
| #include <arc/network/mac_address_generator.h> |
| #include <arc/network/subnet.h> |
| #include <base/files/file_path.h> |
| #include <base/files/scoped_temp_dir.h> |
| #include <base/macros.h> |
| #include <base/time/time.h> |
| #include <brillo/process.h> |
| #include <vm_concierge/proto_bindings/service.pb.h> |
| #include <vm_protos/proto_bindings/vm_guest.grpc.pb.h> |
| |
| #include "vm_tools/concierge/seneschal_server_proxy.h" |
| #include "vm_tools/concierge/vm_interface.h" |
| #include "vm_tools/concierge/vsock_cid_pool.h" |
| |
| namespace vm_tools { |
| namespace concierge { |
| |
| struct VmFeatures { |
| // Enable GPU in the started VM. |
| bool gpu; |
| |
| // Provide software-based virtual Trusted Platform Module to the VM. |
| bool software_tpm; |
| |
| // Enable audio capture function in the started VM. |
| bool audio_capture; |
| }; |
| |
| // Represents a single instance of a running termina VM. |
| class TerminaVm final : public VmInterface { |
| public: |
| // Type of a disk image. |
| enum class DiskImageType { |
| // Raw disk image file. |
| RAW, |
| |
| // QCOW2 disk image. |
| QCOW2, |
| }; |
| |
| // Describes a disk image to be mounted inside the VM. |
| struct Disk { |
| // Path to the disk image on the host. |
| base::FilePath path; |
| |
| // Whether the disk should be writable by the VM. |
| bool writable; |
| }; |
| |
| // Starts a new virtual machine. Returns nullptr if the virtual machine |
| // failed to start for any reason. |
| static std::unique_ptr<TerminaVm> Create( |
| base::FilePath kernel, |
| base::FilePath rootfs, |
| std::vector<Disk> disks, |
| arc_networkd::MacAddress mac_addr, |
| std::unique_ptr<arc_networkd::Subnet> subnet, |
| uint32_t vsock_cid, |
| std::unique_ptr<SeneschalServerProxy> seneschal_server_proxy, |
| base::FilePath runtime_dir, |
| std::string rootfs_device, |
| std::string stateful_device, |
| VmFeatures features); |
| ~TerminaVm() override; |
| |
| // Configures the network interfaces inside the VM. Returns true iff |
| // successful. |
| bool ConfigureNetwork(const std::vector<std::string>& nameservers, |
| const std::vector<std::string>& search_domains); |
| |
| // Mounts a file system inside the VM. Both |source| (if it is a file path) |
| // and |target| must be valid paths inside the VM. Returns true on success. |
| bool Mount(std::string source, |
| std::string target, |
| std::string fstype, |
| uint64_t mountflags, |
| std::string options); |
| |
| // Starts Termina-specific services in the guest. |
| bool StartTermina(std::string lxd_subnet, |
| std::string* out_error, |
| vm_tools::StartTerminaResponse* response); |
| |
| // Mount a 9p file system inside the VM. The guest VM connects to a server |
| // listening on the vsock port |port| and mounts the file system on |target|. |
| bool Mount9P(uint32_t port, std::string target); |
| |
| // Sets the resolv.conf in the VM to |config|. Returns true if successful, |
| // false if the resolv.conf in the guest could not be updated. |
| bool SetResolvConfig(const std::vector<std::string>& nameservers, |
| const std::vector<std::string>& search_domains) override; |
| |
| // Set the guest time to the current time as given by gettimeofday. |
| bool SetTime(std::string* failure_reason) override; |
| |
| // Sets the container subnet for this VM to |subnet|. This subnet is intended |
| // to be provided to a container runtime as a DHCP pool. |
| void SetContainerSubnet(std::unique_ptr<arc_networkd::Subnet> subnet); |
| |
| // The pid of the child process. |
| pid_t pid() { return process_.pid(); } |
| |
| // The VM's cid. |
| uint32_t cid() const { return vsock_cid_; } |
| |
| bool enable_gpu() const { return features_.gpu; } |
| |
| // The 9p server managed by seneschal that provides access to shared files for |
| // this VM. Returns 0 if there is no seneschal server associated with this |
| // VM. |
| uint32_t seneschal_server_handle() const { |
| if (seneschal_server_proxy_) { |
| return seneschal_server_proxy_->handle(); |
| } |
| |
| return 0; |
| } |
| |
| // The IPv4 address of the VM's gateway in network byte order. |
| uint32_t GatewayAddress() const; |
| |
| // The IPv4 address of the VM in network byte order. |
| uint32_t IPv4Address() const; |
| |
| // The netmask of the VM's subnet in network byte order. |
| uint32_t Netmask() const; |
| |
| // The VM's container subnet netmask in network byte order. Returns INADDR_ANY |
| // if there is no container subnet. |
| uint32_t ContainerNetmask() const; |
| |
| // The VM's container subnet prefix length. Returns 0 if there is no container |
| // subnet. |
| size_t ContainerPrefixLength() const; |
| |
| // The first address in the VM's container subnet in network byte order. |
| // Returns INADDR_ANY if there is no container subnet. |
| uint32_t ContainerSubnet() const; |
| |
| // Name of the guest block device for the rootfs (e.g. /dev/vda, /dev/pmem0). |
| std::string RootfsDevice() const { return rootfs_device_; } |
| |
| // Name of the guest block device for the stateful filesystem (e.g. /dev/vdb). |
| std::string StatefulDevice() const { return stateful_device_; } |
| |
| // Whether a TremplinStartedSignal has been received for the VM. |
| bool IsTremplinStarted() const { return is_tremplin_started_; } |
| |
| // VmInterface overrides. |
| // Shuts down the VM. First attempts a clean shutdown of the VM by sending |
| // a Shutdown RPC to maitre'd. If that fails, attempts to shut down the VM |
| // using the control socket for the hypervisor. If that fails, then sends a |
| // SIGTERM to the hypervisor. Finally, if nothing works forcibly stops the VM |
| // by sending it a SIGKILL. Returns true if the VM was shut down and false |
| // otherwise. |
| bool Shutdown() override; |
| VmInterface::Info GetInfo() override; |
| bool AttachUsbDevice(uint8_t bus, |
| uint8_t addr, |
| uint16_t vid, |
| uint16_t pid, |
| int fd, |
| UsbControlResponse* response) override; |
| bool DetachUsbDevice(uint8_t port, UsbControlResponse* response) override; |
| bool ListUsbDevice(std::vector<UsbDevice>* devices) override; |
| void HandleSuspendImminent() override; |
| void HandleSuspendDone() override; |
| bool GetVmEnterpriseReportingInfo( |
| GetVmEnterpriseReportingInfoResponse* response) override; |
| |
| void SetTremplinStarted() override { is_tremplin_started_ = true; } |
| void VmToolsStateChanged(bool running) override { NOTREACHED(); } |
| |
| // Adjusts the amount of CPU the Termina VM processes are allowed to use. |
| static bool SetVmCpuRestriction(CpuRestrictionState cpu_restriction_state); |
| |
| static std::unique_ptr<TerminaVm> CreateForTesting( |
| arc_networkd::MacAddress mac_addr, |
| std::unique_ptr<arc_networkd::Subnet> subnet, |
| uint32_t vsock_cid, |
| base::FilePath runtime_dir, |
| std::string rootfs_device, |
| std::string stateful_device, |
| std::string kernel_version, |
| std::unique_ptr<vm_tools::Maitred::Stub> stub); |
| |
| private: |
| TerminaVm(arc_networkd::MacAddress mac_addr, |
| std::unique_ptr<arc_networkd::Subnet> subnet, |
| uint32_t vsock_cid, |
| std::unique_ptr<SeneschalServerProxy> seneschal_server_proxy, |
| base::FilePath runtime_dir, |
| std::string rootfs_device, |
| std::string stateful_device, |
| VmFeatures features); |
| |
| // Returns the path to the VM control socket. |
| std::string GetVmSocketPath() const; |
| |
| // Starts the VM with the given kernel and root file system. |
| bool Start(base::FilePath kernel, |
| base::FilePath rootfs, |
| std::vector<Disk> disks); |
| |
| // Runs a crosvm subcommend. |
| void RunCrosvmCommand(std::string command); |
| |
| // Helper version to record the VM kernel version at startup. |
| void RecordKernelVersionForEnterpriseReporting(); |
| |
| void set_kernel_version_for_testing(std::string kernel_version); |
| void set_stub_for_testing(std::unique_ptr<vm_tools::Maitred::Stub> stub); |
| |
| // EUI-48 mac address for the VM's network interface. |
| arc_networkd::MacAddress mac_addr_; |
| |
| // The /30 subnet assigned to the VM. |
| std::unique_ptr<arc_networkd::Subnet> subnet_; |
| |
| // An optional /28 container subnet. |
| std::unique_ptr<arc_networkd::Subnet> container_subnet_; |
| |
| // Virtual socket context id to be used when communicating with this VM. |
| uint32_t vsock_cid_; |
| |
| // Proxy to the server providing shared directory access for this VM. |
| std::unique_ptr<SeneschalServerProxy> seneschal_server_proxy_; |
| |
| // Runtime directory for this VM. |
| base::ScopedTempDir runtime_dir_; |
| |
| // Flags passed to vmc start. |
| VmFeatures features_; |
| |
| // Handle to the VM process. |
| brillo::ProcessImpl process_; |
| |
| // Handle to logger(1) process. |
| brillo::ProcessImpl logger_process_; |
| |
| // Stub for making RPC requests to the maitre'd process inside the VM. |
| std::unique_ptr<vm_tools::Maitred::Stub> stub_; |
| |
| // Whether a TremplinStartedSignal has been received for the VM. |
| bool is_tremplin_started_ = false; |
| |
| // Kernel version retrieved at startup. |
| std::string kernel_version_; |
| |
| // Rootfs device name. |
| std::string rootfs_device_; |
| |
| // Stateful device name. |
| std::string stateful_device_; |
| |
| DISALLOW_COPY_AND_ASSIGN(TerminaVm); |
| }; |
| |
| } // namespace concierge |
| } // namespace vm_tools |
| |
| #endif // VM_TOOLS_CONCIERGE_TERMINA_VM_H_ |