enclaveos/src/init/system.rs

use libc::{ c_ulong, c_int, c_void };
use std::{
    mem::{zeroed, size_of},
    ffi::CString,
    fs::File,
    os::unix::io::AsRawFd,
    fmt,
};

pub struct SystemError {
    pub message: String,
}
impl fmt::Display for SystemError {
    fn fmt(&self, f: &mut fmt::Formatter) -> fmt::Result {
        write!(f, "{} {}", boot_time(), self.message)
    }
}

// Log dmesg formatted log to console
pub fn dmesg(message: String){
    println!("{} {}", boot_time(), message);
}

// Dmesg formatted seconds since boot
pub fn boot_time() -> String {
    use libc::{clock_gettime, timespec, CLOCK_BOOTTIME};
    let mut t = timespec { tv_sec: 0, tv_nsec: 0 };
    unsafe { clock_gettime(CLOCK_BOOTTIME, &mut t as *mut timespec); }
    format!("[ {: >4}.{}]", t.tv_sec, t.tv_nsec / 1000).to_string()
}

// Unconditionally reboot the system now
pub fn reboot(){
    use libc::{reboot, RB_AUTOBOOT};
    unsafe {
        reboot(RB_AUTOBOOT);
    }
}

// libc::mount casting/error wrapper
pub fn mount(
    src: &str,
    target: &str,
    fstype: &str,
    flags: c_ulong,
    data: &str,
) -> Result<(), SystemError> {
    use libc::mount;
    let src_cs = CString::new(src).unwrap();
    let fstype_cs = CString::new(fstype).unwrap();
    let data_cs = CString::new(data).unwrap();
    let target_cs = CString::new(target).unwrap();
    if unsafe {
        mount(
            src_cs.as_ptr(),
            target_cs.as_ptr(),
            fstype_cs.as_ptr(),
            flags,
            data_cs.as_ptr() as *const c_void
        )
    } != 0 {
        Err(SystemError { message: format!("Failed to mount: {}", target) })
    } else {
        Ok(())
    }
}

// libc::freopen casting/error wrapper
pub fn freopen(
    filename: &str,
    mode: &str,
    file: c_int,
) -> Result<(), SystemError> {
    use libc::{freopen, fdopen};
    let filename_cs = CString::new(filename).unwrap();
    let mode_cs = CString::new(mode).unwrap();
    if unsafe {
        freopen(
            filename_cs.as_ptr(),
            mode_cs.as_ptr(),
            fdopen(file, mode_cs.as_ptr() as *const i8)
        )
    }.is_null() {
        Err(SystemError { message: format!("Failed to freopen: {}", filename) })
    } else {
        Ok(())
    }
}

// Insert kernel module into memory
pub fn insmod(path: &str) -> Result<(), SystemError> {
    use libc::{syscall, SYS_finit_module};
    let file = File::open(path).unwrap();
    let fd = file.as_raw_fd();
    if unsafe { syscall(SYS_finit_module, fd, &[0u8; 1], 0) } < 0 {
        Err(SystemError {
            message: format!("Failed to insert kernel module: {}", path)
        })
    } else {
        Ok(())
    }
}

// Instantiate a socket
pub fn socket_connect(
    family: c_int,
    port: u32,
    cid: u32,
) -> Result<c_int, SystemError> {
    use libc::{connect, socket, sockaddr, sockaddr_vm, SOCK_STREAM};
    let fd = unsafe { socket(family, SOCK_STREAM, 0) };
    if unsafe {
        let mut sa: sockaddr_vm = zeroed();
        sa.svm_family = family as _;
        sa.svm_port = port;
        sa.svm_cid = cid;
        connect(
            fd,
            &sa as *const _ as *mut sockaddr,
            size_of::<sockaddr_vm>() as _,
        )
    } < 0 {
        Err(SystemError {
            message: format!("Failed to connect to socket: {}", family)
        })
    } else {
        Ok(fd)
    }
}

// Seed an entropy sample into the kernel randomness pool.
pub fn seed_entropy(
    size: usize,
    source: fn(usize) -> Result<Vec<u8>, SystemError>,
) -> Result<usize, SystemError> {
    use std::io::Write;

	let entropy_sample = match source(size) {
        Ok(sample)=> sample,
        Err(e)=> { return Err(e) },
    };

	use std::fs::OpenOptions;
    let mut random_fd = match OpenOptions::new()
        .read(true)
        .write(true)
        .open("/dev/urandom")
    {
        Ok(file) => file,
        Err(_) => {
            return Err(SystemError {
				message: String::from("Failed to open /dev/urandom"),
			});
    	},
    };

    // 5.10+ kernel entropy pools are made of BLAKE2 hashes fixed at 256 bit
    // The RNDADDENTROPY crediting system is now complexity with no gain.
    // We just simply write samples to /dev/urandom now.
    // See: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.119
	match random_fd.write_all(&entropy_sample) {
        Ok(()) => Ok(entropy_sample.len()),
        Err(_) => {
    	    return Err(SystemError {
		    	message: String::from("Failed to write to /dev/urandom"),
		    });
        }
	}
}