pipework

#!/bin/bash
set -e

case "$1" in
    --wait)
	while ! grep -q ^1$ /sys/class/net/eth1/carrier 2>/dev/null
	do sleep 1
	done
	exit 0
	;;
esac

IFNAME=$1
GUESTNAME=$2
IPADDR=$3
MACADDR=$4

[ "$IPADDR" ] || {
    echo "Syntax:"
    echo "pipework <hostinterface> <guest> <ipaddr>/<subnet>[@default_gateway] [macaddr]"
    echo "pipework <hostinterface> <guest> dhcp [macaddr]"
    echo "pipework --wait"
    exit 1
}

# First step: determine type of first argument (bridge, physical interface...)
if [ -d /sys/class/net/$IFNAME ]
then
    if [ -d /sys/class/net/$IFNAME/bridge ]
    then 
        IFTYPE=bridge
        BRTYPE=linux
    elif $(which ovs-vsctl >/dev/null) && $(ovs-vsctl list-br|grep -q ^$IFNAME$)
    then 
        IFTYPE=bridge
        BRTYPE=openvswitch
    else IFTYPE=phys
    fi
else
    case "$IFNAME" in
	br*)
	    IFTYPE=bridge
	    ;;
	*)
	    echo "I do not know how to setup interface $IFNAME."
	    exit 1
	    ;;
    esac
fi

# Second step: find the guest (for now, we only support LXC containers)
while read dev mnt fstype options dump fsck
do
    [ "$fstype" != "cgroup" ] && continue
    echo $options | grep -qw devices || continue
    CGROUPMNT=$mnt
done < /proc/mounts

[ "$CGROUPMNT" ] || {
    echo "Could not locate cgroup mount point."
    exit 1
}

# Try to find a cgroup matching exactly the provided name.
N=$(find "$CGROUPMNT" -name "$GUESTNAME" | wc -l)
case "$N" in
    0)
	# If we didn't find anything, try to lookup the container with Docker.
	if which docker >/dev/null
	then
	    DOCKERID=$(docker inspect -format='{{.ID}}' $GUESTNAME)
	    [ "$DOCKERID" = "<no value>" ] && {
		echo "Container $GUESTNAME not found, and unknown to Docker."
		exit 1
	    }
	    NN=$(find "$CGROUPMNT" -name "$DOCKERID" | wc -l)
	    case "$NN" in
		0)
		    echo "Container $GUESTNAME doesn't seem to be running."
		    exit 1
		    ;;
		1)
		    GUESTNAME=$DOCKERID
		    ;;
		*)
		    echo "Multiple cgroup entries for container $GUESTNAME."
		    exit 1
		    ;;
	    esac
	else
	    echo "Container $GUESTNAME not found, and Docker not installed."
	    exit 1
	fi
	;;
    1)
	true
	;;
    *)
	echo "Found more than one container matching $GUESTNAME."
	exit 1
	;;
esac

if [ "$IPADDR" = "dhcp" ]
then
    # We use udhcpc to obtain the DHCP lease, make sure it's installed.
    which udhcpc >/dev/null || {
	echo "You asked for DHCP; please install udhcpc first."
	exit 1
    }
else
    # Check if a subnet mask was provided.
    echo $IPADDR | grep -q / || {
	echo "The IP address should include a netmask."
	echo "Maybe you meant $IPADDR/24 ?"
	exit 1
    }
    # Check if a gateway address was provided.
    if echo $IPADDR | grep -q @
    then
        GATEWAY=$(echo $IPADDR | cut -d@ -f2)
        IPADDR=$(echo $IPADDR | cut -d@ -f1)
    else
        GATEWAY=
    fi
fi

NSPID=$(head -n 1 $(find "$CGROUPMNT" -name "$GUESTNAME" | head -n 1)/tasks)
[ "$NSPID" ] || {
    echo "Could not find a process inside container $GUESTNAME."
    exit 1
}
mkdir -p /var/run/netns
rm -f /var/run/netns/$NSPID
ln -s /proc/$NSPID/ns/net /var/run/netns/$NSPID


# Check if we need to create a bridge.
[ $IFTYPE = bridge ] && [ ! -d /sys/class/net/$IFNAME ] && {
    ip link add $IFNAME type bridge
    ip link set $IFNAME up
}

# If it's a bridge, we need to create a veth pair
[ $IFTYPE = bridge ] && {
    LOCAL_IFNAME=vethl$NSPID
    GUEST_IFNAME=vethg$NSPID
    ip link add name $LOCAL_IFNAME type veth peer name $GUEST_IFNAME
    case "$BRTYPE" in
        linux)
            (ip link set $LOCAL_IFNAME master $IFNAME > /dev/null 2>&1) || (brctl addif $IFNAME $LOCAL_IFNAME)
            ;;
        openvswitch)
            ovs-vsctl add-port $IFNAME $LOCAL_IFNAME
            ;;
    esac
    ip link set $LOCAL_IFNAME up
}

# If it's a physical interface, create a macvlan subinterface
[ $IFTYPE = phys ] && {
    GUEST_IFNAME=macvlan$NSPID
    ip link add link $IFNAME dev $GUEST_IFNAME type macvlan mode bridge
    ip link set $IFNAME up
}

ip link set $GUEST_IFNAME netns $NSPID
ip netns exec $NSPID ip link set $GUEST_IFNAME name eth1
[ "$MACADDR" ] && ip netns exec $NSPID ip link set eth1 address $MACADDR
if [ "$IPADDR" = "dhcp" ]
then
    ip netns exec $NSPID udhcpc -qi eth1
else
    ip netns exec $NSPID ip addr add $IPADDR dev eth1
    ip netns exec $NSPID ip link set eth1 up
    [ "$GATEWAY" ] && {
	ip netns exec $NSPID ip route replace default via $GATEWAY
    }
fi
exit 0