mirror of
https://github.com/slackhq/nebula.git
synced 2026-11-15 11:06:52 +01:00
Build slackhq/nebula#1821 ("who is this vpn address?" over a local HTTP+JSON socket) on the command registry, so the lookup is one command on every surface and the socket is one more local API. identity - `identity [-address <vpn addr>[:port]]`: no address reports this node; with one, this node or the peer behind an established tunnel - Certificate fields only: name, vpn addresses, networks, unsafe networks, groups, fingerprint, issuer, validity, cert version; a peer's fingerprint is the one nebula computed when it verified the cert - Port accepted and stripped, 4in6 unmapped, so a RemoteAddr passes straight through - No tunnel is a commands.NotFound; an empty -address is refused - Lighthouse TXT lookup shares the owner and peer lookups, keeps answering with the initiating certificate, and no longer panics without a default cert - Served on ssh and nebula ctl too Info API - Off until `local_api.info.enabled` with `socket` and optional quoted octal `socket_mode` (default "0600"); nothing derived - Serves commands declaring Command.Identity plus help; others 403 naming their surfaces. TestInfoAPISurface pins the set to identity - GET /v1 is the schema; GET /v1/<cmd>?<flag>=<value> runs one; body is the -json rendering via commands.Render; commands.PresentationFormat reads json/pretty from the query the way a line is read - 400 commands.ParamError, 403 commands.WithheldError (what Resolve now returns for a withheld name, so help and dispatch type-check it too), 404 NotFound or unknown, 500 Run error, refusal with no reason, or recovered panic with no detail; no redirects; every miss is JSON - listen takes a mode: bind under umask 0077 then chmod; "0660" plus a searchable dir opens it to a group - The chmod, at bind and on a mode-only reload, goes through chmodSocket, which never follows a link: a user who can write the socket's directory could otherwise swap the node for a link and have a root daemon put 0660 or 0666 on any file. Only a socket we own is chmoded. On linux the node is held open O_PATH|O_NOFOLLOW, checked by fstat, and chmoded through /proc/self/fd, so the check and the chmod land on one inode; fchmodat2 is the fallback without /proc. On darwin and the BSDs it is an Lstat check and fchmodat(AT_SYMLINK_NOFOLLOW). clearStale Lstats too, so a dangling link is refused rather than followed by bind on darwin - One endpoint type owns bind under mutex, bind-before-release move, context watch and stop/unlink; each server supplies what it serves - Reloadable through the same reconcile shape as the control socket: mode applied in place, unparsable section keeps what runs, control socket path refused by name - Wire returns Endpoints{Control, Info} with one Stop - Windows unsupported for now (a pipe has no mode); warned once Tests: identity lookups and shapes; API filter, status codes, panic recovery, socket mode, rebind, cancellation; config parsing incl. bare 0660; Wire transitions; e2e of two nebulas with the info API resolving the peer by address and port, through shared test.HTTPDo/HTTPGet helpers. Goldens gain identity. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
153 lines
3.6 KiB
Go
153 lines
3.6 KiB
Go
package main
|
|
|
|
import (
|
|
"fmt"
|
|
"log"
|
|
"os"
|
|
|
|
"github.com/kardianos/service"
|
|
"github.com/slackhq/nebula"
|
|
"github.com/slackhq/nebula/config"
|
|
"github.com/slackhq/nebula/localapi"
|
|
"github.com/slackhq/nebula/logging"
|
|
)
|
|
|
|
var logger service.Logger
|
|
|
|
type program struct {
|
|
configPath *string
|
|
build string
|
|
control *nebula.Control
|
|
local *localapi.Endpoints
|
|
}
|
|
|
|
func (p *program) Start(s service.Service) error {
|
|
// Start should not block.
|
|
logger.Info("Nebula service starting.")
|
|
|
|
l := newPlatformLogger()
|
|
|
|
c := config.NewC(l)
|
|
err := c.Load(*p.configPath)
|
|
if err != nil {
|
|
return fmt.Errorf("failed to load config: %s", err)
|
|
}
|
|
|
|
if err := logging.ApplyConfig(l, c); err != nil {
|
|
return fmt.Errorf("failed to apply logging config: %s", err)
|
|
}
|
|
c.RegisterReloadCallback(func(c *config.C, r *config.Reload) {
|
|
if err := logging.ApplyConfig(l, c); err != nil {
|
|
l.Error("Failed to reconfigure logger on reload", "error", err)
|
|
r.Failed()
|
|
}
|
|
})
|
|
|
|
p.control, err = nebula.Main(c, false, Build, l, nil)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
if err := p.control.Start(); err != nil {
|
|
return err
|
|
}
|
|
|
|
// Now that we're started, stand up the local APIs.
|
|
p.local = localapi.Wire(p.control.Context(), l, c, p.control.Commands())
|
|
|
|
// Nebula can stop itself on a fatal packet reader error, make sure to log it if it happens.
|
|
go func() {
|
|
if err := p.control.Wait(); err != nil {
|
|
logger.Error(fmt.Sprintf("Nebula stopped due to fatal error: %v", err))
|
|
// os.Exit skips deferred calls and races the sockets' own context watchers,
|
|
// so they are removed here, as cmd/nebula does.
|
|
p.local.Stop()
|
|
os.Exit(2)
|
|
}
|
|
}()
|
|
|
|
return nil
|
|
}
|
|
|
|
func (p *program) Stop(s service.Service) error {
|
|
logger.Info("Nebula service stopping.")
|
|
|
|
if p.local != nil {
|
|
p.local.Stop()
|
|
}
|
|
|
|
if p.control == nil {
|
|
return nil
|
|
}
|
|
|
|
p.control.Stop()
|
|
|
|
// block until nebula has fully drained before reporting stopped.
|
|
// error logging is handled by Start.
|
|
_ = p.control.Wait()
|
|
return nil
|
|
}
|
|
|
|
func doService(configPath *string, build string, serviceFlag *string) error {
|
|
if *configPath == "" {
|
|
p, err := config.DefaultPath()
|
|
if err != nil {
|
|
return err
|
|
}
|
|
*configPath = p
|
|
}
|
|
|
|
svcConfig := &service.Config{
|
|
Name: "Nebula",
|
|
DisplayName: "Nebula Network Service",
|
|
Description: "Nebula network connectivity daemon for encrypted communications",
|
|
Arguments: []string{"-service", "run", "-config", *configPath},
|
|
}
|
|
|
|
prg := &program{
|
|
configPath: configPath,
|
|
build: build,
|
|
}
|
|
|
|
// Here are what the different loggers are doing:
|
|
// - `log` is the standard go log utility, meant to be used while the process is still attached to stdout/stderr
|
|
// - `logger` is the service log utility that may be attached to a special place depending on OS (Windows will have it attached to the event log)
|
|
// - in program.Start we build a *slog.Logger via newPlatformLogger; on non-Windows that is a stdout-backed slog logger, on Windows it routes records through the service logger
|
|
s, err := service.New(prg, svcConfig)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
errs := make(chan error, 5)
|
|
logger, err = s.Logger(errs)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
go func() {
|
|
for {
|
|
err := <-errs
|
|
if err != nil {
|
|
// Route any errors from the system logger to stdout as a best effort to notice issues there
|
|
log.Print(err)
|
|
}
|
|
}
|
|
}()
|
|
|
|
switch *serviceFlag {
|
|
case "run":
|
|
if err := s.Run(); err != nil {
|
|
// Route any errors to the system logger and report the failure
|
|
logger.Error(err)
|
|
return err
|
|
}
|
|
default:
|
|
if err := service.Control(s, *serviceFlag); err != nil {
|
|
log.Printf("Valid actions: %q\n", service.ControlAction)
|
|
return err
|
|
}
|
|
}
|
|
|
|
return nil
|
|
}
|