bootc_kargs: Use kernel_cmdline for parsing

Signed-off-by: John Eckersberg <jeckersb@redhat.com>

Author: jeckersb

crates/lib/src/bootc_kargs.rs

@@ -1,5 +1,6 @@
 //! This module handles the bootc-owned kernel argument lists in `/usr/lib/bootc/kargs.d`.
 use anyhow::{Context, Result};
+use bootc_kernel_cmdline::utf8::Cmdline;
 use camino::Utf8Path;
 use cap_std_ext::cap_std::fs::Dir;
 use cap_std_ext::cap_std::fs_utf8::Dir as DirUtf8;
@@ -20,11 +21,11 @@ use crate::store::Storage;
 const KARGS_PATH: &str = "usr/lib/bootc/kargs.d";
 
 /// The default root filesystem mount specification.
-pub(crate) const ROOT: &str = "root=";
+pub(crate) const ROOT_KEY: &str = "root";
 /// This is used by dracut.
 pub(crate) const INITRD_ARG_PREFIX: &str = "rd.";
 /// The kernel argument for configuring the rootfs flags.
-pub(crate) const ROOTFLAGS: &str = "rootflags=";
+pub(crate) const ROOTFLAGS_KEY: &str = "rootflags";
 
 /// The kargs.d configuration file.
 #[derive(Deserialize)]
@@ -46,39 +47,44 @@ impl Config {
 
 /// Load and parse all bootc kargs.d files in the specified root, returning
 /// a combined list.
-pub(crate) fn get_kargs_in_root(d: &Dir, sys_arch: &str) -> Result<Vec<String>> {
+pub(crate) fn get_kargs_in_root(d: &Dir, sys_arch: &str) -> Result<Cmdline<'static>> {
     // If the directory doesn't exist, that's OK.
     let Some(d) = d.open_dir_optional(KARGS_PATH)?.map(DirUtf8::from_cap_std) else {
         return Ok(Default::default());
     };
-    let mut ret = Vec::new();
+    let mut ret = Cmdline::new();
     let entries = d.filenames_filtered_sorted(|_, name| Config::filename_matches(name))?;
     for name in entries {
         let buf = d.read_to_string(&name)?;
-        let kargs = parse_kargs_toml(&buf, sys_arch).with_context(|| format!("Parsing {name}"))?;
-        ret.extend(kargs)
+        if let Some(kargs) =
+            parse_kargs_toml(&buf, sys_arch).with_context(|| format!("Parsing {name}"))?
+        {
+            ret.extend(&kargs)
+        }
     }
     Ok(ret)
 }
 
-pub(crate) fn root_args_from_cmdline<'a>(cmdline: &'a [&str]) -> Vec<&'a str> {
-    cmdline
-        .iter()
-        .filter(|arg| {
-            arg.starts_with(ROOT)
-                || arg.starts_with(ROOTFLAGS)
-                || arg.starts_with(INITRD_ARG_PREFIX)
-        })
-        .copied()
-        .collect()
+pub(crate) fn root_args_from_cmdline(cmdline: &Cmdline) -> Cmdline<'static> {
+    let mut result = Cmdline::new();
+    for param in cmdline {
+        let key = param.key();
+        if key == ROOT_KEY.into()
+            || key == ROOTFLAGS_KEY.into()
+            || key.starts_with(INITRD_ARG_PREFIX)
+        {
+            result.add(&param);
+        }
+    }
+    result
 }
 
 /// Load kargs.d files from the target ostree commit root
 pub(crate) fn get_kargs_from_ostree_root(
     repo: &ostree::Repo,
     root: &ostree::RepoFile,
     sys_arch: &str,
-) -> Result<Vec<String>> {
+) -> Result<Cmdline<'static>> {
     let kargsd = root.resolve_relative_path(KARGS_PATH);
     let kargsd = kargsd.downcast_ref::<ostree::RepoFile>().expect("downcast");
     if !kargsd.query_exists(gio::Cancellable::NONE) {
@@ -92,12 +98,12 @@ fn get_kargs_from_ostree(
     repo: &ostree::Repo,
     fetched_tree: &ostree::RepoFile,
     sys_arch: &str,
-) -> Result<Vec<String>> {
+) -> Result<Cmdline<'static>> {
     let cancellable = gio::Cancellable::NONE;
     let queryattrs = "standard::name,standard::type";
     let queryflags = gio::FileQueryInfoFlags::NOFOLLOW_SYMLINKS;
     let fetched_iter = fetched_tree.enumerate_children(queryattrs, queryflags, cancellable)?;
-    let mut ret = Vec::new();
+    let mut ret = Cmdline::new();
     while let Some(fetched_info) = fetched_iter.next_file(cancellable)? {
         // only read and parse the file if it is a toml file
         let name = fetched_info.name();
@@ -119,9 +125,11 @@ fn get_kargs_from_ostree(
         let mut reader =
             ostree_ext::prelude::InputStreamExtManual::into_read(file_content.unwrap());
         let s = std::io::read_to_string(&mut reader)?;
-        let parsed_kargs =
-            parse_kargs_toml(&s, sys_arch).with_context(|| format!("Parsing {name}"))?;
-        ret.extend(parsed_kargs);
+        if let Some(parsed_kargs) =
+            parse_kargs_toml(&s, sys_arch).with_context(|| format!("Parsing {name}"))?
+        {
+            ret.extend(&parsed_kargs);
+        }
     }
     Ok(ret)
 }
@@ -133,20 +141,19 @@ pub(crate) fn get_kargs(
     sysroot: &Storage,
     merge_deployment: &Deployment,
     fetched: &ImageState,
-) -> Result<Vec<String>> {
+) -> Result<Cmdline<'static>> {
     let cancellable = gio::Cancellable::NONE;
     let ostree = sysroot.get_ostree()?;
     let repo = &ostree.repo();
-    let mut kargs = vec![];
     let sys_arch = std::env::consts::ARCH;
 
     // Get the kargs used for the merge in the bootloader config
-    if let Some(bootconfig) = ostree::Deployment::bootconfig(merge_deployment) {
-        if let Some(options) = ostree::BootconfigParser::get(&bootconfig, "options") {
-            let options = options.split_whitespace().map(|s| s.to_owned());
-            kargs.extend(options);
-        }
-    };
+    let mut kargs = ostree::Deployment::bootconfig(merge_deployment)
+        .and_then(|bootconfig| {
+            ostree::BootconfigParser::get(&bootconfig, "options")
+                .map(|options| Cmdline::from(options.to_string()))
+        })
+        .unwrap_or_default();
 
     // Get the kargs in kargs.d of the merge
     let merge_root = &crate::utils::deployment_fd(ostree, merge_deployment)?;
@@ -161,50 +168,56 @@ pub(crate) fn get_kargs(
     // A special case: if there's no kargs.d directory in the pending (fetched) image,
     // then we can just use the combined current kargs + kargs from booted
     if !fetched_tree.query_exists(cancellable) {
-        kargs.extend(existing_kargs);
+        kargs.extend(&existing_kargs);
         return Ok(kargs);
     }
 
     // Fetch the kernel arguments from the new root
     let remote_kargs = get_kargs_from_ostree(repo, &fetched_tree, sys_arch)?;
 
-    // get the diff between the existing and remote kargs
-    let mut added_kargs = remote_kargs
-        .clone()
-        .into_iter()
-        .filter(|item| !existing_kargs.contains(item))
-        .collect::<Vec<_>>();
-    let removed_kargs = existing_kargs
-        .clone()
-        .into_iter()
-        .filter(|item| !remote_kargs.contains(item))
-        .collect::<Vec<_>>();
+    // Calculate the diff between the existing and remote kargs
+    let added_kargs: Vec<_> = remote_kargs
+        .iter()
+        .filter(|item| !existing_kargs.iter().any(|existing| *item == existing))
+        .collect();
+    let removed_kargs: Vec<_> = existing_kargs
+        .iter()
+        .filter(|item| !remote_kargs.iter().any(|remote| *item == remote))
+        .collect();
 
     tracing::debug!(
         "kargs: added={:?} removed={:?}",
         &added_kargs,
         removed_kargs
     );
 
-    // apply the diff to the system kargs
-    kargs.retain(|x| !removed_kargs.contains(x));
-    kargs.append(&mut added_kargs);
+    // Apply the diff to the system kargs
+    for arg in &removed_kargs {
+        kargs.remove_exact(arg);
+    }
+    for arg in &added_kargs {
+        kargs.add(arg);
+    }
 
     Ok(kargs)
 }
 
 /// This parses a bootc kargs.d toml file, returning the resulting
 /// vector of kernel arguments. Architecture matching is performed using
 /// `sys_arch`.
-fn parse_kargs_toml(contents: &str, sys_arch: &str) -> Result<Vec<String>> {
+fn parse_kargs_toml(contents: &str, sys_arch: &str) -> Result<Option<Cmdline<'static>>> {
     let de: Config = toml::from_str(contents)?;
     // if arch specified, apply kargs only if the arch matches
     // if arch not specified, apply kargs unconditionally
     let matched = de
         .match_architectures
         .map(|arches| arches.iter().any(|s| s == sys_arch))
         .unwrap_or(true);
-    let r = if matched { de.kargs } else { Vec::new() };
+    let r = if matched {
+        Some(Cmdline::from(de.kargs.join(" ")))
+    } else {
+        None
+    };
     Ok(r)
 }
 
@@ -216,17 +229,23 @@ mod tests {
 
     use super::*;
 
+    fn assert_cmdline_eq(cmdline: &Cmdline, expected_params: &[&str]) {
+        let actual_params: Vec<_> = cmdline.iter_str().collect();
+        assert_eq!(actual_params, expected_params);
+    }
+
     #[test]
     /// Verify that kargs are only applied to supported architectures
     fn test_arch() {
         // no arch specified, kargs ensure that kargs are applied unconditionally
         let sys_arch = "x86_64";
         let file_content = r##"kargs = ["console=tty0", "nosmt"]"##.to_string();
-        let parsed_kargs = parse_kargs_toml(&file_content, sys_arch).unwrap();
-        assert_eq!(parsed_kargs, ["console=tty0", "nosmt"]);
+        let parsed_kargs = parse_kargs_toml(&file_content, sys_arch).unwrap().unwrap();
+        assert_cmdline_eq(&parsed_kargs, &["console=tty0", "nosmt"]);
+
         let sys_arch = "aarch64";
-        let parsed_kargs = parse_kargs_toml(&file_content, sys_arch).unwrap();
-        assert_eq!(parsed_kargs, ["console=tty0", "nosmt"]);
+        let parsed_kargs = parse_kargs_toml(&file_content, sys_arch).unwrap().unwrap();
+        assert_cmdline_eq(&parsed_kargs, &["console=tty0", "nosmt"]);
 
         // one arch matches and one doesn't, ensure that kargs are only applied for the matching arch
         let sys_arch = "aarch64";
@@ -235,25 +254,26 @@ match-architectures = ["x86_64"]
 "##
         .to_string();
         let parsed_kargs = parse_kargs_toml(&file_content, sys_arch).unwrap();
-        assert_eq!(parsed_kargs, [] as [String; 0]);
+        assert!(parsed_kargs.is_none());
         let file_content = r##"kargs = ["console=tty0", "nosmt"]
 match-architectures = ["aarch64"]
 "##
         .to_string();
-        let parsed_kargs = parse_kargs_toml(&file_content, sys_arch).unwrap();
-        assert_eq!(parsed_kargs, ["console=tty0", "nosmt"]);
+        let parsed_kargs = parse_kargs_toml(&file_content, sys_arch).unwrap().unwrap();
+        assert_cmdline_eq(&parsed_kargs, &["console=tty0", "nosmt"]);
 
         // multiple arch specified, ensure that kargs are applied to both archs
         let sys_arch = "x86_64";
         let file_content = r##"kargs = ["console=tty0", "nosmt"]
 match-architectures = ["x86_64", "aarch64"]
 "##
         .to_string();
-        let parsed_kargs = parse_kargs_toml(&file_content, sys_arch).unwrap();
-        assert_eq!(parsed_kargs, ["console=tty0", "nosmt"]);
+        let parsed_kargs = parse_kargs_toml(&file_content, sys_arch).unwrap().unwrap();
+        assert_cmdline_eq(&parsed_kargs, &["console=tty0", "nosmt"]);
+
         let sys_arch = "aarch64";
-        let parsed_kargs = parse_kargs_toml(&file_content, sys_arch).unwrap();
-        assert_eq!(parsed_kargs, ["console=tty0", "nosmt"]);
+        let parsed_kargs = parse_kargs_toml(&file_content, sys_arch).unwrap().unwrap();
+        assert_cmdline_eq(&parsed_kargs, &["console=tty0", "nosmt"]);
     }
 
     #[test]
@@ -285,18 +305,18 @@ match-architectures = ["x86_64", "aarch64"]
         let td = cap_std_ext::cap_tempfile::TempDir::new(cap_std::ambient_authority())?;
 
         // No directory
-        assert_eq!(get_kargs_in_root(&td, "x86_64").unwrap().len(), 0);
+        assert_eq!(get_kargs_in_root(&td, "x86_64").unwrap().iter().count(), 0);
         // Empty directory
         td.create_dir_all("usr/lib/bootc/kargs.d")?;
-        assert_eq!(get_kargs_in_root(&td, "x86_64").unwrap().len(), 0);
+        assert_eq!(get_kargs_in_root(&td, "x86_64").unwrap().iter().count(), 0);
         // Non-toml file
         td.write("usr/lib/bootc/kargs.d/somegarbage", "garbage")?;
-        assert_eq!(get_kargs_in_root(&td, "x86_64").unwrap().len(), 0);
+        assert_eq!(get_kargs_in_root(&td, "x86_64").unwrap().iter().count(), 0);
 
         write_test_kargs(&td)?;
 
         let args = get_kargs_in_root(&td, "x86_64").unwrap();
-        similar_asserts::assert_eq!(args, ["console=tty0", "nosmt", "console=ttyS1"]);
+        assert_cmdline_eq(&args, &["console=tty0", "nosmt", "console=ttyS1"]);
 
         Ok(())
     }
@@ -354,7 +374,7 @@ match-architectures = ["x86_64", "aarch64"]
 
         ostree_commit(repo, &test_rootfs, ".".into(), "testref")?;
         // Helper closure to read the kargs
-        let get_kargs = |sys_arch: &str| -> Result<Vec<String>> {
+        let get_kargs = |sys_arch: &str| -> Result<Cmdline<'static>> {
             let rootfs = repo.read_commit("testref", cancellable)?.0;
             let rootfs = rootfs.downcast_ref::<ostree::RepoFile>().unwrap();
             let fetched_tree = rootfs.resolve_relative_path("/usr/lib/bootc/kargs.d");
@@ -368,14 +388,14 @@ match-architectures = ["x86_64", "aarch64"]
         };
 
         // rootfs is empty
-        assert_eq!(get_kargs("x86_64").unwrap().len(), 0);
+        assert_eq!(get_kargs("x86_64").unwrap().iter().count(), 0);
 
         test_rootfs.create_dir_all("usr/lib/bootc/kargs.d")?;
         write_test_kargs(&test_rootfs).unwrap();
         ostree_commit(repo, &test_rootfs, ".".into(), "testref")?;
 
         let args = get_kargs("x86_64").unwrap();
-        similar_asserts::assert_eq!(args, ["console=tty0", "nosmt", "console=ttyS1"]);
+        assert_cmdline_eq(&args, &["console=tty0", "nosmt", "console=ttyS1"]);
 
         Ok(())
     }

crates/lib/src/deploy.rs

@@ -7,6 +7,7 @@ use std::io::{BufRead, Write};
 
 use anyhow::Ok;
 use anyhow::{anyhow, Context, Result};
+use bootc_kernel_cmdline::utf8::Cmdline;
 use cap_std::fs::{Dir, MetadataExt};
 use cap_std_ext::cap_std;
 use cap_std_ext::dirext::CapStdExtDirExt;
@@ -588,9 +589,9 @@ async fn deploy(
     let (stateroot, override_kargs) = match &from {
         MergeState::MergeDeployment(deployment) => {
             let kargs = crate::bootc_kargs::get_kargs(sysroot, &deployment, image)?;
-            (deployment.stateroot().into(), kargs)
+            (deployment.stateroot().into(), Some(kargs))
         }
-        MergeState::Reset { stateroot, kargs } => (stateroot.clone(), kargs.clone()),
+        MergeState::Reset { stateroot, kargs } => (stateroot.clone(), Some(kargs.clone())),
     };
     // Clone all the things to move to worker thread
     let ostree = sysroot.get_ostree_cloned()?;
@@ -607,13 +608,15 @@ async fn deploy(
             let stateroot = Some(stateroot);
             let mut opts = ostree::SysrootDeployTreeOpts::default();
 
-            // Because the C API expects a Vec<&str>, we need to generate a new Vec<>
-            // that borrows.
-            let override_kargs = override_kargs
-                .iter()
-                .map(|s| s.as_str())
-                .collect::<Vec<_>>();
-            opts.override_kernel_argv = Some(&override_kargs);
+            // Because the C API expects a Vec<&str>, convert the Cmdline to string slices.
+            // The references borrow from the Cmdline, which outlives this usage.
+            let override_kargs_refs = override_kargs
+                .as_ref()
+                .map(|kargs| kargs.iter_str().collect::<Vec<_>>());
+            if let Some(kargs) = override_kargs_refs.as_ref() {
+                opts.override_kernel_argv = Some(kargs);
+            }
+
             let deployments = ostree.deployments();
             let merge_deployment = merge_deployment.map(|m| &deployments[m]);
             let origin = glib::KeyFile::new();
@@ -658,7 +661,7 @@ pub(crate) enum MergeState {
     /// provided initial state.
     Reset {
         stateroot: String,
-        kargs: Vec<String>,
+        kargs: Cmdline<'static>,
     },
 }
 impl MergeState {