mirror of
https://github.com/gravitl/netmaker.git
synced 2024-11-14 13:44:37 +08:00
323 lines
8.7 KiB
Go
323 lines
8.7 KiB
Go
package functions
|
|
|
|
import (
|
|
"context"
|
|
"encoding/json"
|
|
"errors"
|
|
"os"
|
|
"runtime"
|
|
"strings"
|
|
|
|
nodepb "github.com/gravitl/netmaker/grpc"
|
|
"github.com/gravitl/netmaker/models"
|
|
"github.com/gravitl/netmaker/netclient/auth"
|
|
"github.com/gravitl/netmaker/netclient/config"
|
|
"github.com/gravitl/netmaker/netclient/local"
|
|
"github.com/gravitl/netmaker/netclient/ncutils"
|
|
"github.com/gravitl/netmaker/netclient/wireguard"
|
|
"golang.zx2c4.com/wireguard/wgctrl/wgtypes"
|
|
"google.golang.org/grpc"
|
|
"google.golang.org/grpc/metadata"
|
|
//homedir "github.com/mitchellh/go-homedir"
|
|
)
|
|
|
|
func isDeleteError(err error) bool {
|
|
return err != nil && strings.Contains(err.Error(), models.NODE_DELETE)
|
|
}
|
|
|
|
func checkIP(node *models.Node, servercfg config.ServerConfig, cliconf config.ClientConfig, network string) bool {
|
|
ipchange := false
|
|
var err error
|
|
if node.Roaming == "yes" && node.IsStatic != "yes" {
|
|
if node.IsLocal == "no" {
|
|
extIP, err := ncutils.GetPublicIP()
|
|
if err != nil {
|
|
ncutils.PrintLog("error encountered checking ip addresses: "+err.Error(), 1)
|
|
}
|
|
if node.Endpoint != extIP && extIP != "" {
|
|
ncutils.PrintLog("endpoint has changed from "+
|
|
node.Endpoint+" to "+extIP, 1)
|
|
ncutils.PrintLog("updating address", 1)
|
|
node.Endpoint = extIP
|
|
ipchange = true
|
|
}
|
|
intIP, err := getPrivateAddr()
|
|
if err != nil {
|
|
ncutils.PrintLog("error encountered checking ip addresses: "+err.Error(), 1)
|
|
}
|
|
if node.LocalAddress != intIP && intIP != "" {
|
|
ncutils.PrintLog("local Address has changed from "+
|
|
node.LocalAddress+" to "+intIP, 1)
|
|
ncutils.PrintLog("updating address", 1)
|
|
node.LocalAddress = intIP
|
|
ipchange = true
|
|
}
|
|
} else {
|
|
localIP, err := ncutils.GetLocalIP(node.LocalRange)
|
|
if err != nil {
|
|
ncutils.PrintLog("error encountered checking ip addresses: "+err.Error(), 1)
|
|
}
|
|
if node.Endpoint != localIP && localIP != "" {
|
|
ncutils.PrintLog("endpoint has changed from "+
|
|
node.Endpoint+" to "+localIP, 1)
|
|
ncutils.PrintLog("updating address", 1)
|
|
node.Endpoint = localIP
|
|
node.LocalAddress = localIP
|
|
ipchange = true
|
|
}
|
|
}
|
|
}
|
|
if ipchange {
|
|
err = config.ModConfig(node)
|
|
if err != nil {
|
|
ncutils.PrintLog("error modifying config file: "+err.Error(), 1)
|
|
return false
|
|
}
|
|
err = wireguard.SetWGConfig(network, false)
|
|
if err != nil {
|
|
ncutils.PrintLog("error setting wireguard config: "+err.Error(), 1)
|
|
return false
|
|
}
|
|
}
|
|
return ipchange && err == nil
|
|
}
|
|
|
|
// DEPRECATED
|
|
// func setDNS(node *models.Node, servercfg config.ServerConfig, nodecfg *models.Node) {
|
|
// if nodecfg.DNSOn == "yes" {
|
|
// ifacename := node.Interface
|
|
// nameserver := servercfg.CoreDNSAddr
|
|
// network := node.Network
|
|
// local.UpdateDNS(ifacename, network, nameserver)
|
|
// }
|
|
// }
|
|
|
|
func checkNodeActions(node *models.Node, networkName string, servercfg config.ServerConfig, localNode *models.Node, cfg *config.ClientConfig) string {
|
|
if (node.Action == models.NODE_UPDATE_KEY || localNode.Action == models.NODE_UPDATE_KEY) &&
|
|
node.IsStatic != "yes" {
|
|
err := wireguard.SetWGKeyConfig(networkName, servercfg.GRPCAddress)
|
|
if err != nil {
|
|
ncutils.PrintLog("unable to process reset keys request: "+err.Error(), 1)
|
|
return ""
|
|
}
|
|
}
|
|
if node.Action == models.NODE_DELETE || localNode.Action == models.NODE_DELETE {
|
|
err := RemoveLocalInstance(cfg, networkName)
|
|
if err != nil {
|
|
ncutils.PrintLog("error deleting locally: "+err.Error(), 1)
|
|
}
|
|
return models.NODE_DELETE
|
|
}
|
|
return ""
|
|
}
|
|
|
|
// CheckConfig - checks if current config of client needs update, see flow below
|
|
/**
|
|
* Pull changes if any (interface refresh)
|
|
* - Save it
|
|
* Check local changes for (ipAddress, publickey, configfile changes) (interface refresh)
|
|
* - Save it
|
|
* - Push it
|
|
* Pull Peers (sync)
|
|
*/
|
|
func CheckConfig(cliconf config.ClientConfig) error {
|
|
|
|
network := cliconf.Network
|
|
cfg, err := config.ReadConfig(network)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
servercfg := cfg.Server
|
|
currentNode := cfg.Node
|
|
|
|
newNode, err := Pull(network, false)
|
|
if isDeleteError(err) {
|
|
return RemoveLocalInstance(cfg, network)
|
|
}
|
|
if err != nil {
|
|
return err
|
|
}
|
|
if newNode.IsPending == "yes" {
|
|
return errors.New("node is pending")
|
|
}
|
|
actionCompleted := checkNodeActions(newNode, network, servercfg, ¤tNode, cfg)
|
|
if actionCompleted == models.NODE_DELETE {
|
|
return errors.New("node has been removed")
|
|
}
|
|
// Check if ip changed and push if so
|
|
checkIP(newNode, servercfg, cliconf, network)
|
|
return Push(network)
|
|
}
|
|
|
|
// Pull - pulls the latest config from the server, if manual it will overwrite
|
|
func Pull(network string, manual bool) (*models.Node, error) {
|
|
cfg, err := config.ReadConfig(network)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
node := cfg.Node
|
|
//servercfg := cfg.Server
|
|
|
|
if cfg.Node.IPForwarding == "yes" && !ncutils.IsWindows() {
|
|
if err = local.SetIPForwarding(); err != nil {
|
|
return nil, err
|
|
}
|
|
}
|
|
var resNode models.Node // just need to fill this with either server calls or client calls
|
|
|
|
var header metadata.MD
|
|
var wcclient nodepb.NodeServiceClient
|
|
var ctx context.Context
|
|
|
|
if cfg.Node.IsServer != "yes" {
|
|
conn, err := grpc.Dial(cfg.Server.GRPCAddress,
|
|
ncutils.GRPCRequestOpts(cfg.Server.GRPCSSL))
|
|
if err != nil {
|
|
ncutils.PrintLog("Cant dial GRPC server: "+err.Error(), 1)
|
|
return nil, err
|
|
}
|
|
defer conn.Close()
|
|
wcclient = nodepb.NewNodeServiceClient(conn)
|
|
|
|
ctx, err = auth.SetJWT(wcclient, network)
|
|
if err != nil {
|
|
ncutils.PrintLog("Failed to authenticate: "+err.Error(), 1)
|
|
return nil, err
|
|
}
|
|
|
|
data, err := json.Marshal(&node)
|
|
if err != nil {
|
|
ncutils.PrintLog("Failed to parse node config: "+err.Error(), 1)
|
|
return nil, err
|
|
}
|
|
|
|
req := &nodepb.Object{
|
|
Data: string(data),
|
|
Type: nodepb.NODE_TYPE,
|
|
}
|
|
|
|
readres, err := wcclient.ReadNode(ctx, req, grpc.Header(&header))
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
if err = json.Unmarshal([]byte(readres.Data), &resNode); err != nil {
|
|
return nil, err
|
|
}
|
|
}
|
|
// ensure that the OS never changes
|
|
resNode.OS = runtime.GOOS
|
|
if resNode.PullChanges == "yes" || manual {
|
|
// check for interface change
|
|
if cfg.Node.Interface != resNode.Interface {
|
|
if err = DeleteInterface(cfg.Node.Interface, cfg.Node.PostDown); err != nil {
|
|
ncutils.PrintLog("could not delete old interface "+cfg.Node.Interface, 1)
|
|
}
|
|
}
|
|
resNode.PullChanges = "no"
|
|
if err = config.ModConfig(&resNode); err != nil {
|
|
return nil, err
|
|
}
|
|
if err = wireguard.SetWGConfig(network, false); err != nil {
|
|
return nil, err
|
|
}
|
|
nodeData, err := json.Marshal(&resNode)
|
|
if err != nil {
|
|
return &resNode, err
|
|
}
|
|
if resNode.IsServer != "yes" {
|
|
if wcclient == nil || ctx == nil {
|
|
return &cfg.Node, errors.New("issue initializing gRPC client")
|
|
}
|
|
req := &nodepb.Object{
|
|
Data: string(nodeData),
|
|
Type: nodepb.NODE_TYPE,
|
|
Metadata: "",
|
|
}
|
|
_, err = wcclient.UpdateNode(ctx, req, grpc.Header(&header))
|
|
if err != nil {
|
|
return &resNode, err
|
|
}
|
|
}
|
|
} else {
|
|
if err = wireguard.SetWGConfig(network, true); err != nil {
|
|
if errors.Is(err, os.ErrNotExist) && !ncutils.IsFreeBSD() {
|
|
return Pull(network, true)
|
|
} else {
|
|
return nil, err
|
|
}
|
|
}
|
|
}
|
|
//if ncutils.IsLinux() {
|
|
// setDNS(&resNode, servercfg, &cfg.Node)
|
|
//}
|
|
var bkupErr = config.SaveBackup(network)
|
|
if bkupErr != nil {
|
|
ncutils.Log("unable to update backup file")
|
|
}
|
|
|
|
return &resNode, err
|
|
}
|
|
|
|
// Push - pushes current client configuration to server
|
|
func Push(network string) error {
|
|
|
|
cfg, err := config.ReadConfig(network)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
postnode := cfg.Node
|
|
// always set the OS on client
|
|
postnode.OS = runtime.GOOS
|
|
postnode.SetLastCheckIn()
|
|
|
|
var header metadata.MD
|
|
var wcclient nodepb.NodeServiceClient
|
|
conn, err := grpc.Dial(cfg.Server.GRPCAddress,
|
|
ncutils.GRPCRequestOpts(cfg.Server.GRPCSSL))
|
|
if err != nil {
|
|
ncutils.PrintLog("Cant dial GRPC server: "+err.Error(), 1)
|
|
return err
|
|
}
|
|
defer conn.Close()
|
|
wcclient = nodepb.NewNodeServiceClient(conn)
|
|
|
|
ctx, err := auth.SetJWT(wcclient, network)
|
|
if err != nil {
|
|
ncutils.PrintLog("Failed to authenticate with server: "+err.Error(), 1)
|
|
return err
|
|
}
|
|
if postnode.IsPending != "yes" {
|
|
privateKey, err := wireguard.RetrievePrivKey(network)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
privateKeyWG, err := wgtypes.ParseKey(privateKey)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
if postnode.PublicKey != privateKeyWG.PublicKey().String() {
|
|
postnode.PublicKey = privateKeyWG.PublicKey().String()
|
|
}
|
|
}
|
|
nodeData, err := json.Marshal(&postnode)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
req := &nodepb.Object{
|
|
Data: string(nodeData),
|
|
Type: nodepb.NODE_TYPE,
|
|
Metadata: "",
|
|
}
|
|
data, err := wcclient.UpdateNode(ctx, req, grpc.Header(&header))
|
|
if err != nil {
|
|
return err
|
|
}
|
|
err = json.Unmarshal([]byte(data.Data), &postnode)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
err = config.ModConfig(&postnode)
|
|
return err
|
|
}
|