mirror of
https://github.com/edgelesssys/constellation.git
synced 2025-09-19 20:44:52 -04:00
image: verbose debugging options (#1159)
This commit is contained in:
parent
6ae2bc9772
commit
efc0cec4e1
9 changed files with 95 additions and 8 deletions
|
@ -16,6 +16,7 @@ import (
|
|||
"crypto/rand"
|
||||
"errors"
|
||||
"fmt"
|
||||
"io/fs"
|
||||
"net"
|
||||
"os"
|
||||
"path/filepath"
|
||||
|
@ -32,6 +33,7 @@ import (
|
|||
"github.com/edgelesssys/constellation/v2/internal/logger"
|
||||
"github.com/edgelesssys/constellation/v2/internal/nodestate"
|
||||
"github.com/spf13/afero"
|
||||
"go.uber.org/zap"
|
||||
)
|
||||
|
||||
const (
|
||||
|
@ -74,9 +76,8 @@ func New(log *logger.Logger, csp string, diskPath string, fs afero.Afero,
|
|||
// PrepareExistingDisk requests and waits for a decryption key to remap the encrypted state disk.
|
||||
// Once the disk is mapped, the function taints the node as initialized by updating it's PCRs.
|
||||
func (s *Manager) PrepareExistingDisk(recover RecoveryDoer) error {
|
||||
s.log.Infof("Preparing existing state disk")
|
||||
uuid := s.mapper.DiskUUID()
|
||||
|
||||
s.log.With(zap.String("uuid", uuid)).Infof("Preparing existing state disk")
|
||||
endpoint := net.JoinHostPort("0.0.0.0", strconv.Itoa(constants.RecoveryPort))
|
||||
|
||||
passphrase, measurementSecret, err := recover.Do(uuid, endpoint)
|
||||
|
@ -91,6 +92,7 @@ func (s *Manager) PrepareExistingDisk(recover RecoveryDoer) error {
|
|||
if err := s.mounter.MkdirAll(stateDiskMountPath, os.ModePerm); err != nil {
|
||||
return err
|
||||
}
|
||||
|
||||
// we do not care about cleaning up the mount point on error, since any errors returned here should cause a boot failure
|
||||
if err := s.mounter.Mount(filepath.Join("/dev/mapper/", stateDiskMappedName), stateDiskMountPath, "ext4", syscall.MS_RDONLY, ""); err != nil {
|
||||
return err
|
||||
|
@ -100,6 +102,7 @@ func (s *Manager) PrepareExistingDisk(recover RecoveryDoer) error {
|
|||
if err != nil {
|
||||
return err
|
||||
}
|
||||
|
||||
clusterID, err := attestation.DeriveClusterID(measurementSecret, measurementSalt)
|
||||
if err != nil {
|
||||
return err
|
||||
|
@ -119,7 +122,7 @@ func (s *Manager) PrepareExistingDisk(recover RecoveryDoer) error {
|
|||
|
||||
// PrepareNewDisk prepares an instances state disk by formatting the disk as a LUKS device using a random passphrase.
|
||||
func (s *Manager) PrepareNewDisk() error {
|
||||
s.log.Infof("Preparing new state disk")
|
||||
s.log.With(zap.String("uuid", s.mapper.DiskUUID())).Infof("Preparing new state disk")
|
||||
|
||||
// generate and save temporary passphrase
|
||||
passphrase := make([]byte, crypto.RNGLengthDefault)
|
||||
|
@ -165,6 +168,51 @@ func (s *Manager) saveConfiguration(passphrase []byte) error {
|
|||
return s.config.Generate(stateDiskMappedName, s.diskPath, filepath.Join(keyPath, keyFile), cryptsetupOptions)
|
||||
}
|
||||
|
||||
// LogDevices logs all available block devices and partitions (lsblk like).
|
||||
func (s *Manager) LogDevices() error {
|
||||
var devices []fs.FileInfo
|
||||
dirs, err := os.ReadDir("/sys/class/block")
|
||||
if err != nil {
|
||||
return err
|
||||
}
|
||||
for _, file := range dirs {
|
||||
if file.IsDir() {
|
||||
continue
|
||||
}
|
||||
fileInfo, err := file.Info()
|
||||
if err != nil {
|
||||
return err
|
||||
}
|
||||
devices = append(devices, fileInfo)
|
||||
}
|
||||
|
||||
s.log.Infof("List of all available block devices and partitions:")
|
||||
for _, device := range devices {
|
||||
var stat syscall.Statfs_t
|
||||
dev := "/dev/" + device.Name()
|
||||
if err := syscall.Statfs(dev, &stat); err != nil {
|
||||
s.log.With(zap.Error(err)).Errorf("failed to statfs %s", dev)
|
||||
continue
|
||||
}
|
||||
|
||||
// get the raw size, in bytes
|
||||
size := stat.Blocks * uint64(stat.Bsize)
|
||||
free := stat.Bfree * uint64(stat.Bsize)
|
||||
avail := stat.Bavail * uint64(stat.Bsize)
|
||||
|
||||
s.log.Infof(
|
||||
"Name: %-15s, Size: %-10d, Mode: %s, ModTime: %s, Size = %-10d, Free = %-10d, Available = %-10d\n",
|
||||
dev,
|
||||
device.Size(),
|
||||
device.Mode(),
|
||||
device.ModTime(),
|
||||
size,
|
||||
free,
|
||||
avail)
|
||||
}
|
||||
return nil
|
||||
}
|
||||
|
||||
// RecoveryServer interface serves a recovery server.
|
||||
type RecoveryServer interface {
|
||||
Serve(context.Context, net.Listener, string) (key, secret []byte, err error)
|
||||
|
@ -195,6 +243,7 @@ func NewNodeRecoverer(recoveryServer RecoveryServer, rejoinClient RejoinClient)
|
|||
func (r *NodeRecoverer) Do(uuid, endpoint string) (passphrase, measurementSecret []byte, err error) {
|
||||
ctx, cancel := context.WithCancel(context.Background())
|
||||
defer cancel()
|
||||
|
||||
lis, err := net.Listen("tcp", endpoint)
|
||||
if err != nil {
|
||||
return nil, nil, err
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue