mirror of
https://github.com/gravitl/netmaker.git
synced 2024-11-14 05:40:50 +08:00
251 lines
7.2 KiB
Go
251 lines
7.2 KiB
Go
package functions
|
|
|
|
import (
|
|
"context"
|
|
"encoding/json"
|
|
"errors"
|
|
"fmt"
|
|
"log"
|
|
"math/rand"
|
|
"os/exec"
|
|
"time"
|
|
|
|
nodepb "github.com/gravitl/netmaker/grpc"
|
|
"github.com/gravitl/netmaker/models"
|
|
"github.com/gravitl/netmaker/netclient/auth"
|
|
"github.com/gravitl/netmaker/netclient/config"
|
|
"github.com/gravitl/netmaker/netclient/daemon"
|
|
"github.com/gravitl/netmaker/netclient/local"
|
|
"github.com/gravitl/netmaker/netclient/ncutils"
|
|
"github.com/gravitl/netmaker/netclient/server"
|
|
"github.com/gravitl/netmaker/netclient/wireguard"
|
|
"golang.zx2c4.com/wireguard/wgctrl/wgtypes"
|
|
"google.golang.org/grpc"
|
|
)
|
|
|
|
// JoinNetwork - helps a client join a network
|
|
func JoinNetwork(cfg config.ClientConfig, privateKey string) error {
|
|
if cfg.Node.Network == "" {
|
|
return errors.New("no network provided")
|
|
}
|
|
|
|
var err error
|
|
if cfg.Node.IsServer != "yes" {
|
|
if local.HasNetwork(cfg.Network) {
|
|
err := errors.New("ALREADY_INSTALLED. Netclient appears to already be installed for " + cfg.Network + ". To re-install, please remove by executing 'sudo netclient leave -n " + cfg.Network + "'. Then re-run the install command.")
|
|
return err
|
|
}
|
|
if cfg.FWMark == 0 {
|
|
rand.Seed(time.Now().UnixNano())
|
|
var min int32 = 1000
|
|
var max int32 = 9999
|
|
cfg.FWMark = rand.Int31n(max-min) + min
|
|
}
|
|
|
|
err = config.Write(&cfg, cfg.Network)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
if cfg.Node.Password == "" {
|
|
cfg.Node.Password = ncutils.GenPass()
|
|
}
|
|
auth.StoreSecret(cfg.Node.Password, cfg.Node.Network)
|
|
}
|
|
|
|
if cfg.Node.LocalRange != "" && cfg.Node.LocalAddress == "" {
|
|
log.Println("local vpn, getting local address from range: " + cfg.Node.LocalRange)
|
|
cfg.Node.LocalAddress = getLocalIP(cfg.Node)
|
|
}
|
|
|
|
// set endpoint if blank. set to local if local net, retrieve from function if not
|
|
if cfg.Node.Endpoint == "" {
|
|
if cfg.Node.IsLocal == "yes" && cfg.Node.LocalAddress != "" {
|
|
cfg.Node.Endpoint = cfg.Node.LocalAddress
|
|
} else {
|
|
cfg.Node.Endpoint, err = ncutils.GetPublicIP()
|
|
}
|
|
if err != nil || cfg.Node.Endpoint == "" {
|
|
ncutils.Log("Error setting cfg.Node.Endpoint.")
|
|
return err
|
|
}
|
|
}
|
|
// Generate and set public/private WireGuard Keys
|
|
if privateKey == "" {
|
|
wgPrivatekey, err := wgtypes.GeneratePrivateKey()
|
|
if err != nil {
|
|
log.Fatal(err)
|
|
}
|
|
privateKey = wgPrivatekey.String()
|
|
cfg.Node.PublicKey = wgPrivatekey.PublicKey().String()
|
|
}
|
|
|
|
// Find and set node MacAddress
|
|
if cfg.Node.MacAddress == "" {
|
|
macs, err := ncutils.GetMacAddr()
|
|
if err != nil {
|
|
return err
|
|
} else if len(macs) == 0 {
|
|
log.Fatal("could not retrieve mac address")
|
|
} else {
|
|
cfg.Node.MacAddress = macs[0]
|
|
}
|
|
}
|
|
if ncutils.IsLinux() {
|
|
_, err := exec.LookPath("resolvectl")
|
|
if err != nil {
|
|
ncutils.PrintLog("resolvectl not present", 2)
|
|
ncutils.PrintLog("unable to configure DNS automatically, disabling automated DNS management", 2)
|
|
cfg.Node.DNSOn = "no"
|
|
}
|
|
}
|
|
|
|
if ncutils.IsFreeBSD() {
|
|
cfg.Node.UDPHolePunch = "no"
|
|
}
|
|
// make sure name is appropriate, if not, give blank name
|
|
cfg.Node.Name = formatName(cfg.Node)
|
|
// differentiate between client/server here
|
|
var node models.Node // fill this node with appropriate calls
|
|
postnode := &models.Node{
|
|
Password: cfg.Node.Password,
|
|
MacAddress: cfg.Node.MacAddress,
|
|
AccessKey: cfg.Server.AccessKey,
|
|
IsStatic: cfg.Node.IsStatic,
|
|
Network: cfg.Network,
|
|
ListenPort: cfg.Node.ListenPort,
|
|
PostUp: cfg.Node.PostUp,
|
|
PostDown: cfg.Node.PostDown,
|
|
PersistentKeepalive: cfg.Node.PersistentKeepalive,
|
|
LocalAddress: cfg.Node.LocalAddress,
|
|
Interface: cfg.Node.Interface,
|
|
PublicKey: cfg.Node.PublicKey,
|
|
DNSOn: cfg.Node.DNSOn,
|
|
Name: cfg.Node.Name,
|
|
Endpoint: cfg.Node.Endpoint,
|
|
SaveConfig: cfg.Node.SaveConfig,
|
|
UDPHolePunch: cfg.Node.UDPHolePunch,
|
|
}
|
|
|
|
if cfg.Node.IsServer != "yes" {
|
|
ncutils.Log("joining " + cfg.Network + " at " + cfg.Server.GRPCAddress)
|
|
var wcclient nodepb.NodeServiceClient
|
|
|
|
conn, err := grpc.Dial(cfg.Server.GRPCAddress,
|
|
ncutils.GRPCRequestOpts(cfg.Server.GRPCSSL))
|
|
|
|
if err != nil {
|
|
log.Fatalf("Unable to establish client connection to "+cfg.Server.GRPCAddress+": %v", err)
|
|
}
|
|
defer conn.Close()
|
|
wcclient = nodepb.NewNodeServiceClient(conn)
|
|
|
|
if err = config.ModConfig(postnode); err != nil {
|
|
return err
|
|
}
|
|
data, err := json.Marshal(postnode)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
// Create node on server
|
|
res, err := wcclient.CreateNode(
|
|
context.TODO(),
|
|
&nodepb.Object{
|
|
Data: string(data),
|
|
Type: nodepb.NODE_TYPE,
|
|
},
|
|
)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
ncutils.PrintLog("node created on remote server...updating configs", 1)
|
|
|
|
nodeData := res.Data
|
|
if err = json.Unmarshal([]byte(nodeData), &node); err != nil {
|
|
return err
|
|
}
|
|
}
|
|
|
|
// get free port based on returned default listen port
|
|
node.ListenPort, err = ncutils.GetFreePort(node.ListenPort)
|
|
if err != nil {
|
|
fmt.Printf("Error retrieving port: %v", err)
|
|
}
|
|
|
|
// safety check. If returned node from server is local, but not currently configured as local, set to local addr
|
|
if cfg.Node.IsLocal != "yes" && node.IsLocal == "yes" && node.LocalRange != "" {
|
|
node.LocalAddress, err = ncutils.GetLocalIP(node.LocalRange)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
node.Endpoint = node.LocalAddress
|
|
}
|
|
if ncutils.IsFreeBSD() {
|
|
node.UDPHolePunch = "no"
|
|
cfg.Node.IsStatic = "yes"
|
|
}
|
|
|
|
if node.IsServer != "yes" { // == handle client side ==
|
|
err = config.ModConfig(&node)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
err = wireguard.StorePrivKey(privateKey, cfg.Network)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
if node.IsPending == "yes" {
|
|
ncutils.Log("Node is marked as PENDING.")
|
|
ncutils.Log("Awaiting approval from Admin before configuring WireGuard.")
|
|
if cfg.Daemon != "off" {
|
|
return daemon.InstallDaemon(cfg)
|
|
}
|
|
}
|
|
// pushing any local changes to server before starting wireguard
|
|
err = Push(cfg.Network)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
// attempt to make backup
|
|
if err = config.SaveBackup(node.Network); err != nil {
|
|
ncutils.Log("failed to make backup, node will not auto restore if config is corrupted")
|
|
}
|
|
}
|
|
|
|
ncutils.Log("retrieving peers")
|
|
peers, hasGateway, gateways, err := server.GetPeers(node.MacAddress, cfg.Network, cfg.Server.GRPCAddress, node.IsDualStack == "yes", node.IsIngressGateway == "yes", node.IsServer == "yes")
|
|
if err != nil && !ncutils.IsEmptyRecord(err) {
|
|
ncutils.Log("failed to retrieve peers")
|
|
return err
|
|
}
|
|
|
|
ncutils.Log("starting wireguard")
|
|
err = wireguard.InitWireguard(&node, privateKey, peers, hasGateway, gateways, false)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
if cfg.Daemon != "off" {
|
|
err = daemon.InstallDaemon(cfg)
|
|
}
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
return err
|
|
}
|
|
|
|
// format name appropriately. Set to blank on failure
|
|
func formatName(node models.Node) string {
|
|
// Logic to properly format name
|
|
if !node.NameInNodeCharSet() {
|
|
node.Name = ncutils.DNSFormatString(node.Name)
|
|
}
|
|
if len(node.Name) > models.MAX_NAME_LENGTH {
|
|
node.Name = ncutils.ShortenString(node.Name, models.MAX_NAME_LENGTH)
|
|
}
|
|
if !node.NameInNodeCharSet() || len(node.Name) > models.MAX_NAME_LENGTH {
|
|
ncutils.PrintLog("could not properly format name: "+node.Name, 1)
|
|
ncutils.PrintLog("setting name to blank", 1)
|
|
node.Name = ""
|
|
}
|
|
return node.Name
|
|
}
|