|
@@ -4,13 +4,13 @@ import (
|
|
"errors"
|
|
"errors"
|
|
"fmt"
|
|
"fmt"
|
|
"io/ioutil"
|
|
"io/ioutil"
|
|
- "log"
|
|
|
|
"os"
|
|
"os"
|
|
"os/exec"
|
|
"os/exec"
|
|
"strconv"
|
|
"strconv"
|
|
"strings"
|
|
"strings"
|
|
"time"
|
|
"time"
|
|
|
|
|
|
|
|
+ "github.com/gravitl/netmaker/logger"
|
|
"github.com/gravitl/netmaker/models"
|
|
"github.com/gravitl/netmaker/models"
|
|
"github.com/gravitl/netmaker/netclient/ncutils"
|
|
"github.com/gravitl/netmaker/netclient/ncutils"
|
|
"golang.zx2c4.com/wireguard/wgctrl"
|
|
"golang.zx2c4.com/wireguard/wgctrl"
|
|
@@ -64,14 +64,14 @@ func initWireguard(node *models.Node, privkey string, peers []wgtypes.PeerConfig
|
|
if node.Interface != "" {
|
|
if node.Interface != "" {
|
|
ifacename = node.Interface
|
|
ifacename = node.Interface
|
|
} else {
|
|
} else {
|
|
- Log("no server interface provided to configure", 2)
|
|
|
|
|
|
+ logger.Log(2, "no server interface provided to configure")
|
|
}
|
|
}
|
|
if node.Address == "" {
|
|
if node.Address == "" {
|
|
- Log("no server address to provided configure", 2)
|
|
|
|
|
|
+ logger.Log(2, "no server address to provided configure")
|
|
}
|
|
}
|
|
|
|
|
|
if ncutils.IsKernel() {
|
|
if ncutils.IsKernel() {
|
|
- Log("setting kernel device "+ifacename, 2)
|
|
|
|
|
|
+ logger.Log(2, "setting kernel device", ifacename)
|
|
setKernelDevice(ifacename, node.Address)
|
|
setKernelDevice(ifacename, node.Address)
|
|
}
|
|
}
|
|
|
|
|
|
@@ -87,18 +87,18 @@ func initWireguard(node *models.Node, privkey string, peers []wgtypes.PeerConfig
|
|
var newConf string
|
|
var newConf string
|
|
newConf, _ = ncutils.CreateUserSpaceConf(node.Address, key.String(), strconv.FormatInt(int64(node.ListenPort), 10), node.MTU, node.PersistentKeepalive, peers)
|
|
newConf, _ = ncutils.CreateUserSpaceConf(node.Address, key.String(), strconv.FormatInt(int64(node.ListenPort), 10), node.MTU, node.PersistentKeepalive, peers)
|
|
confPath := ncutils.GetNetclientPathSpecific() + ifacename + ".conf"
|
|
confPath := ncutils.GetNetclientPathSpecific() + ifacename + ".conf"
|
|
- Log("writing wg conf file to: "+confPath, 1)
|
|
|
|
|
|
+ logger.Log(1, "writing wg conf file to:", confPath)
|
|
err = ioutil.WriteFile(confPath, []byte(newConf), 0644)
|
|
err = ioutil.WriteFile(confPath, []byte(newConf), 0644)
|
|
if err != nil {
|
|
if err != nil {
|
|
- Log("error writing wg conf file to "+confPath+": "+err.Error(), 1)
|
|
|
|
|
|
+ logger.Log(1, "error writing wg conf file to", confPath, ":", err.Error())
|
|
return err
|
|
return err
|
|
}
|
|
}
|
|
if ncutils.IsWindows() {
|
|
if ncutils.IsWindows() {
|
|
wgConfPath := ncutils.GetWGPathSpecific() + ifacename + ".conf"
|
|
wgConfPath := ncutils.GetWGPathSpecific() + ifacename + ".conf"
|
|
- Log("writing wg conf file to: "+confPath, 1)
|
|
|
|
|
|
+ logger.Log(1, "writing wg conf file to:", confPath)
|
|
err = ioutil.WriteFile(wgConfPath, []byte(newConf), 0644)
|
|
err = ioutil.WriteFile(wgConfPath, []byte(newConf), 0644)
|
|
if err != nil {
|
|
if err != nil {
|
|
- Log("error writing wg conf file to "+wgConfPath+": "+err.Error(), 1)
|
|
|
|
|
|
+ logger.Log(1, "error writing wg conf file to", wgConfPath, ":", err.Error())
|
|
return err
|
|
return err
|
|
}
|
|
}
|
|
confPath = wgConfPath
|
|
confPath = wgConfPath
|
|
@@ -114,7 +114,7 @@ func initWireguard(node *models.Node, privkey string, peers []wgtypes.PeerConfig
|
|
time.Sleep(time.Second >> 2)
|
|
time.Sleep(time.Second >> 2)
|
|
err = applyWGQuickConf(confPath)
|
|
err = applyWGQuickConf(confPath)
|
|
if err != nil {
|
|
if err != nil {
|
|
- Log("failed to create wireguard interface", 1)
|
|
|
|
|
|
+ logger.Log(1, "failed to create wireguard interface")
|
|
return err
|
|
return err
|
|
}
|
|
}
|
|
} else {
|
|
} else {
|
|
@@ -144,7 +144,7 @@ func initWireguard(node *models.Node, privkey string, peers []wgtypes.PeerConfig
|
|
}
|
|
}
|
|
|
|
|
|
if _, err := ncutils.RunCmd(ipExec+" link set down dev "+ifacename, false); err != nil {
|
|
if _, err := ncutils.RunCmd(ipExec+" link set down dev "+ifacename, false); err != nil {
|
|
- Log("attempted to remove interface before editing", 2)
|
|
|
|
|
|
+ logger.Log(2, "attempted to remove interface before editing")
|
|
return err
|
|
return err
|
|
}
|
|
}
|
|
|
|
|
|
@@ -154,7 +154,7 @@ func initWireguard(node *models.Node, privkey string, peers []wgtypes.PeerConfig
|
|
}
|
|
}
|
|
// set MTU of node interface
|
|
// set MTU of node interface
|
|
if _, err := ncutils.RunCmd(ipExec+" link set mtu "+strconv.Itoa(int(node.MTU))+" up dev "+ifacename, true); err != nil {
|
|
if _, err := ncutils.RunCmd(ipExec+" link set mtu "+strconv.Itoa(int(node.MTU))+" up dev "+ifacename, true); err != nil {
|
|
- Log("failed to create interface with mtu "+strconv.Itoa(int(node.MTU))+" - "+ifacename, 2)
|
|
|
|
|
|
+ logger.Log(2, "failed to create interface with mtu", strconv.Itoa(int(node.MTU)), "-", ifacename)
|
|
return err
|
|
return err
|
|
}
|
|
}
|
|
|
|
|
|
@@ -168,7 +168,7 @@ func initWireguard(node *models.Node, privkey string, peers []wgtypes.PeerConfig
|
|
}
|
|
}
|
|
}
|
|
}
|
|
if node.Address6 != "" && node.IsDualStack == "yes" {
|
|
if node.Address6 != "" && node.IsDualStack == "yes" {
|
|
- log.Println("[netclient] adding address: "+node.Address6, 1)
|
|
|
|
|
|
+ logger.Log(1, "adding address:", node.Address6)
|
|
_, _ = ncutils.RunCmd(ipExec+" address add dev "+ifacename+" "+node.Address6+"/64", true)
|
|
_, _ = ncutils.RunCmd(ipExec+" address add dev "+ifacename+" "+node.Address6+"/64", true)
|
|
}
|
|
}
|
|
}
|
|
}
|
|
@@ -207,29 +207,30 @@ func setServerPeers(iface string, keepalive int32, peers []wgtypes.PeerConfig) e
|
|
|
|
|
|
client, err := wgctrl.New()
|
|
client, err := wgctrl.New()
|
|
if err != nil {
|
|
if err != nil {
|
|
- Log("failed to start wgctrl", 0)
|
|
|
|
|
|
+ logger.Log(0, "failed to start wgctrl")
|
|
return err
|
|
return err
|
|
}
|
|
}
|
|
|
|
|
|
device, err := client.Device(iface)
|
|
device, err := client.Device(iface)
|
|
if err != nil {
|
|
if err != nil {
|
|
- Log("failed to parse interface", 0)
|
|
|
|
|
|
+ logger.Log(0, "failed to parse interface")
|
|
return err
|
|
return err
|
|
}
|
|
}
|
|
devicePeers := device.Peers
|
|
devicePeers := device.Peers
|
|
if len(devicePeers) > 1 && len(peers) == 0 {
|
|
if len(devicePeers) > 1 && len(peers) == 0 {
|
|
- Log("no peers pulled", 1)
|
|
|
|
|
|
+ logger.Log(1, "no peers pulled")
|
|
return err
|
|
return err
|
|
}
|
|
}
|
|
|
|
|
|
for _, peer := range peers {
|
|
for _, peer := range peers {
|
|
-
|
|
|
|
- for _, currentPeer := range devicePeers {
|
|
|
|
- if currentPeer.AllowedIPs[0].String() == peer.AllowedIPs[0].String() &&
|
|
|
|
- currentPeer.PublicKey.String() != peer.PublicKey.String() {
|
|
|
|
- _, err := ncutils.RunCmd("wg set "+iface+" peer "+currentPeer.PublicKey.String()+" remove", true)
|
|
|
|
- if err != nil {
|
|
|
|
- log.Println("error removing peer", peer.Endpoint.String())
|
|
|
|
|
|
+ if len(peer.AllowedIPs) > 0 {
|
|
|
|
+ for _, currentPeer := range devicePeers {
|
|
|
|
+ if len(currentPeer.AllowedIPs) > 0 && currentPeer.AllowedIPs[0].String() == peer.AllowedIPs[0].String() &&
|
|
|
|
+ currentPeer.PublicKey.String() != peer.PublicKey.String() {
|
|
|
|
+ _, err := ncutils.RunCmd("wg set "+iface+" peer "+currentPeer.PublicKey.String()+" remove", true)
|
|
|
|
+ if err != nil {
|
|
|
|
+ logger.Log(0, "error removing peer", peer.Endpoint.String())
|
|
|
|
+ }
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
@@ -255,21 +256,23 @@ func setServerPeers(iface string, keepalive int32, peers []wgtypes.PeerConfig) e
|
|
" allowed-ips "+allowedips, true)
|
|
" allowed-ips "+allowedips, true)
|
|
}
|
|
}
|
|
if err != nil {
|
|
if err != nil {
|
|
- Log("error setting peer "+peer.PublicKey.String(), 1)
|
|
|
|
|
|
+ logger.Log(2, "error setting peer", peer.PublicKey.String())
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
|
|
for _, currentPeer := range devicePeers {
|
|
for _, currentPeer := range devicePeers {
|
|
- shouldDelete := true
|
|
|
|
- for _, peer := range peers {
|
|
|
|
- if peer.AllowedIPs[0].String() == currentPeer.AllowedIPs[0].String() {
|
|
|
|
- shouldDelete = false
|
|
|
|
|
|
+ if len(currentPeer.AllowedIPs) > 0 {
|
|
|
|
+ shouldDelete := true
|
|
|
|
+ for _, peer := range peers {
|
|
|
|
+ if len(peer.AllowedIPs) > 0 && peer.AllowedIPs[0].String() == currentPeer.AllowedIPs[0].String() {
|
|
|
|
+ shouldDelete = false
|
|
|
|
+ }
|
|
}
|
|
}
|
|
- }
|
|
|
|
- if shouldDelete {
|
|
|
|
- output, err := ncutils.RunCmd("wg set "+iface+" peer "+currentPeer.PublicKey.String()+" remove", true)
|
|
|
|
- if err != nil {
|
|
|
|
- log.Println(output, "error removing peer", currentPeer.PublicKey.String())
|
|
|
|
|
|
+ if shouldDelete {
|
|
|
|
+ output, err := ncutils.RunCmd("wg set "+iface+" peer "+currentPeer.PublicKey.String()+" remove", true)
|
|
|
|
+ if err != nil {
|
|
|
|
+ logger.Log(0, output, "error removing peer", currentPeer.PublicKey.String())
|
|
|
|
+ }
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
@@ -291,10 +294,10 @@ func setWGConfig(node models.Node, network string, peerupdate bool) error {
|
|
if peerupdate {
|
|
if peerupdate {
|
|
var iface string = node.Interface
|
|
var iface string = node.Interface
|
|
err = setServerPeers(iface, node.PersistentKeepalive, peers)
|
|
err = setServerPeers(iface, node.PersistentKeepalive, peers)
|
|
- Log("updated peers on server "+node.Name, 2)
|
|
|
|
|
|
+ logger.Log(2, "updated peers on server", node.Name)
|
|
} else {
|
|
} else {
|
|
err = initWireguard(&node, privkey, peers, hasGateway, gateways)
|
|
err = initWireguard(&node, privkey, peers, hasGateway, gateways)
|
|
- Log("finished setting wg config on server "+node.Name, 3)
|
|
|
|
|
|
+ logger.Log(3, "finished setting wg config on server", node.Name)
|
|
}
|
|
}
|
|
return err
|
|
return err
|
|
}
|
|
}
|
|
@@ -326,12 +329,12 @@ func removeLocalServer(node *models.Node) error {
|
|
var ifacename = node.Interface
|
|
var ifacename = node.Interface
|
|
var err error
|
|
var err error
|
|
if err = RemovePrivKey(node.ID); err != nil {
|
|
if err = RemovePrivKey(node.ID); err != nil {
|
|
- Log("failed to remove server conf from db "+node.ID, 1)
|
|
|
|
|
|
+ logger.Log(1, "failed to remove server conf from db", node.ID)
|
|
}
|
|
}
|
|
if ifacename != "" {
|
|
if ifacename != "" {
|
|
if !ncutils.IsKernel() {
|
|
if !ncutils.IsKernel() {
|
|
if err = RemoveConf(ifacename, true); err == nil {
|
|
if err = RemoveConf(ifacename, true); err == nil {
|
|
- Log("removed WireGuard interface: "+ifacename, 1)
|
|
|
|
|
|
+ logger.Log(1, "removed WireGuard interface:", ifacename)
|
|
}
|
|
}
|
|
} else {
|
|
} else {
|
|
ipExec, err := exec.LookPath("ip")
|
|
ipExec, err := exec.LookPath("ip")
|
|
@@ -341,8 +344,8 @@ func removeLocalServer(node *models.Node) error {
|
|
out, err := ncutils.RunCmd(ipExec+" link del "+ifacename, false)
|
|
out, err := ncutils.RunCmd(ipExec+" link del "+ifacename, false)
|
|
dontprint := strings.Contains(out, "does not exist") || strings.Contains(out, "Cannot find device")
|
|
dontprint := strings.Contains(out, "does not exist") || strings.Contains(out, "Cannot find device")
|
|
if err != nil && !dontprint {
|
|
if err != nil && !dontprint {
|
|
- Log("error running command: "+ipExec+" link del "+ifacename, 1)
|
|
|
|
- Log(out, 1)
|
|
|
|
|
|
+ logger.Log(1, "error running command:", ipExec, "link del", ifacename)
|
|
|
|
+ logger.Log(1, out)
|
|
}
|
|
}
|
|
if node.PostDown != "" {
|
|
if node.PostDown != "" {
|
|
runcmds := strings.Split(node.PostDown, "; ")
|
|
runcmds := strings.Split(node.PostDown, "; ")
|