|
@@ -1,320 +0,0 @@
|
|
|
-package functions
|
|
|
-
|
|
|
-import (
|
|
|
- "context"
|
|
|
- "encoding/json"
|
|
|
- "errors"
|
|
|
- "os"
|
|
|
- "runtime"
|
|
|
- "strings"
|
|
|
-
|
|
|
- nodepb "github.com/gravitl/netmaker/grpc"
|
|
|
- "github.com/gravitl/netmaker/models"
|
|
|
- "github.com/gravitl/netmaker/netclient/auth"
|
|
|
- "github.com/gravitl/netmaker/netclient/config"
|
|
|
- "github.com/gravitl/netmaker/netclient/local"
|
|
|
- "github.com/gravitl/netmaker/netclient/ncutils"
|
|
|
- "github.com/gravitl/netmaker/netclient/wireguard"
|
|
|
- "golang.zx2c4.com/wireguard/wgctrl/wgtypes"
|
|
|
- "google.golang.org/grpc"
|
|
|
- "google.golang.org/grpc/metadata"
|
|
|
- //homedir "github.com/mitchellh/go-homedir"
|
|
|
-)
|
|
|
-
|
|
|
-func isDeleteError(err error) bool {
|
|
|
- return err != nil && strings.Contains(err.Error(), models.NODE_DELETE)
|
|
|
-}
|
|
|
-
|
|
|
-func checkIP(node *models.Node, servercfg config.ServerConfig, cliconf config.ClientConfig, network string) bool {
|
|
|
- ipchange := false
|
|
|
- var err error
|
|
|
- if node.IsStatic != "yes" {
|
|
|
- if node.IsLocal == "no" {
|
|
|
- extIP, err := ncutils.GetPublicIP()
|
|
|
- if err != nil {
|
|
|
- ncutils.PrintLog("error encountered checking public ip addresses: "+err.Error(), 1)
|
|
|
- }
|
|
|
- if node.Endpoint != extIP && extIP != "" {
|
|
|
- ncutils.PrintLog("endpoint has changed from "+
|
|
|
- node.Endpoint+" to "+extIP, 1)
|
|
|
- ncutils.PrintLog("updating address", 1)
|
|
|
- node.Endpoint = extIP
|
|
|
- ipchange = true
|
|
|
- }
|
|
|
- intIP, err := getPrivateAddr()
|
|
|
- if err != nil {
|
|
|
- ncutils.PrintLog("error encountered checking private ip addresses: "+err.Error(), 1)
|
|
|
- }
|
|
|
- if node.LocalAddress != intIP && intIP != "" {
|
|
|
- ncutils.PrintLog("local Address has changed from "+
|
|
|
- node.LocalAddress+" to "+intIP, 1)
|
|
|
- ncutils.PrintLog("updating address", 1)
|
|
|
- node.LocalAddress = intIP
|
|
|
- ipchange = true
|
|
|
- }
|
|
|
- } else if node.IsLocal == "yes" && node.LocalRange != "" {
|
|
|
- localIP, err := ncutils.GetLocalIP(node.LocalRange)
|
|
|
- if err != nil {
|
|
|
- ncutils.PrintLog("error encountered checking local ip addresses: "+err.Error(), 1)
|
|
|
- }
|
|
|
- if node.Endpoint != localIP && localIP != "" {
|
|
|
- ncutils.PrintLog("endpoint has changed from "+
|
|
|
- node.Endpoint+" to "+localIP, 1)
|
|
|
- ncutils.PrintLog("updating address", 1)
|
|
|
- node.Endpoint = localIP
|
|
|
- node.LocalAddress = localIP
|
|
|
- ipchange = true
|
|
|
- }
|
|
|
- }
|
|
|
- }
|
|
|
- if ipchange {
|
|
|
- err = config.ModConfig(node)
|
|
|
- if err != nil {
|
|
|
- ncutils.PrintLog("error modifying config file: "+err.Error(), 1)
|
|
|
- return false
|
|
|
- }
|
|
|
- err = wireguard.SetWGConfig(network, false)
|
|
|
- if err != nil {
|
|
|
- ncutils.PrintLog("error setting wireguard config: "+err.Error(), 1)
|
|
|
- return false
|
|
|
- }
|
|
|
- }
|
|
|
- return ipchange && err == nil
|
|
|
-}
|
|
|
-
|
|
|
-// DEPRECATED
|
|
|
-// func setDNS(node *models.Node, servercfg config.ServerConfig, nodecfg *models.Node) {
|
|
|
-// if nodecfg.DNSOn == "yes" {
|
|
|
-// ifacename := node.Interface
|
|
|
-// nameserver := servercfg.CoreDNSAddr
|
|
|
-// network := node.Network
|
|
|
-// local.UpdateDNS(ifacename, network, nameserver)
|
|
|
-// }
|
|
|
-// }
|
|
|
-
|
|
|
-func checkNodeActions(node *models.Node, networkName string, servercfg config.ServerConfig, localNode *models.Node, cfg *config.ClientConfig) string {
|
|
|
- if (node.Action == models.NODE_UPDATE_KEY || localNode.Action == models.NODE_UPDATE_KEY) &&
|
|
|
- node.IsStatic != "yes" {
|
|
|
- err := wireguard.SetWGKeyConfig(networkName, servercfg.GRPCAddress)
|
|
|
- if err != nil {
|
|
|
- ncutils.PrintLog("unable to process reset keys request: "+err.Error(), 1)
|
|
|
- return ""
|
|
|
- }
|
|
|
- }
|
|
|
- if node.Action == models.NODE_DELETE || localNode.Action == models.NODE_DELETE {
|
|
|
- err := RemoveLocalInstance(cfg, networkName)
|
|
|
- if err != nil {
|
|
|
- ncutils.PrintLog("error deleting locally: "+err.Error(), 1)
|
|
|
- }
|
|
|
- return models.NODE_DELETE
|
|
|
- }
|
|
|
- return ""
|
|
|
-}
|
|
|
-
|
|
|
-// CheckConfig - checks if current config of client needs update, see flow below
|
|
|
-/**
|
|
|
- * Pull changes if any (interface refresh)
|
|
|
- * - Save it
|
|
|
- * Check local changes for (ipAddress, publickey, configfile changes) (interface refresh)
|
|
|
- * - Save it
|
|
|
- * - Push it
|
|
|
- * Pull Peers (sync)
|
|
|
- */
|
|
|
-func CheckConfig(cliconf config.ClientConfig) error {
|
|
|
-
|
|
|
- network := cliconf.Network
|
|
|
- cfg, err := config.ReadConfig(network)
|
|
|
- if err != nil {
|
|
|
- return err
|
|
|
- }
|
|
|
- servercfg := cfg.Server
|
|
|
- currentNode := cfg.Node
|
|
|
-
|
|
|
- newNode, err := Pull(network, false)
|
|
|
- if isDeleteError(err) {
|
|
|
- return RemoveLocalInstance(cfg, network)
|
|
|
- }
|
|
|
- if err != nil {
|
|
|
- return err
|
|
|
- }
|
|
|
- if newNode.IsPending == "yes" {
|
|
|
- return errors.New("node is pending")
|
|
|
- }
|
|
|
- actionCompleted := checkNodeActions(newNode, network, servercfg, ¤tNode, cfg)
|
|
|
- if actionCompleted == models.NODE_DELETE {
|
|
|
- return errors.New("node has been removed")
|
|
|
- }
|
|
|
- // Check if ip changed and push if so
|
|
|
- checkIP(newNode, servercfg, cliconf, network)
|
|
|
- return Push(network)
|
|
|
-}
|
|
|
-
|
|
|
-// Pull - pulls the latest config from the server, if manual it will overwrite
|
|
|
-func Pull(network string, manual bool) (*models.Node, error) {
|
|
|
- cfg, err := config.ReadConfig(network)
|
|
|
- if err != nil {
|
|
|
- return nil, err
|
|
|
- }
|
|
|
- node := cfg.Node
|
|
|
- //servercfg := cfg.Server
|
|
|
-
|
|
|
- if cfg.Node.IPForwarding == "yes" && !ncutils.IsWindows() {
|
|
|
- if err = local.SetIPForwarding(); err != nil {
|
|
|
- return nil, err
|
|
|
- }
|
|
|
- }
|
|
|
- var resNode models.Node // just need to fill this with either server calls or client calls
|
|
|
-
|
|
|
- var header metadata.MD
|
|
|
- var wcclient nodepb.NodeServiceClient
|
|
|
- var ctx context.Context
|
|
|
-
|
|
|
- if cfg.Node.IsServer != "yes" {
|
|
|
- conn, err := grpc.Dial(cfg.Server.GRPCAddress,
|
|
|
- ncutils.GRPCRequestOpts(cfg.Server.GRPCSSL))
|
|
|
- if err != nil {
|
|
|
- ncutils.PrintLog("Cant dial GRPC server: "+err.Error(), 1)
|
|
|
- return nil, err
|
|
|
- }
|
|
|
- defer conn.Close()
|
|
|
- wcclient = nodepb.NewNodeServiceClient(conn)
|
|
|
-
|
|
|
- ctx, err = auth.SetJWT(wcclient, network)
|
|
|
- if err != nil {
|
|
|
- ncutils.PrintLog("Failed to authenticate: "+err.Error(), 1)
|
|
|
- return nil, err
|
|
|
- }
|
|
|
- data, err := json.Marshal(&node)
|
|
|
- if err != nil {
|
|
|
- ncutils.PrintLog("Failed to parse node config: "+err.Error(), 1)
|
|
|
- return nil, err
|
|
|
- }
|
|
|
-
|
|
|
- req := &nodepb.Object{
|
|
|
- Data: string(data),
|
|
|
- Type: nodepb.NODE_TYPE,
|
|
|
- }
|
|
|
-
|
|
|
- readres, err := wcclient.ReadNode(ctx, req, grpc.Header(&header))
|
|
|
- if err != nil {
|
|
|
- return nil, err
|
|
|
- }
|
|
|
-
|
|
|
- if err = json.Unmarshal([]byte(readres.Data), &resNode); err != nil {
|
|
|
- return nil, err
|
|
|
- }
|
|
|
- }
|
|
|
- // ensure that the OS never changes
|
|
|
- resNode.OS = runtime.GOOS
|
|
|
- if resNode.PullChanges == "yes" || manual {
|
|
|
- // check for interface change
|
|
|
- if cfg.Node.Interface != resNode.Interface {
|
|
|
- if err = DeleteInterface(cfg.Node.Interface, cfg.Node.PostDown); err != nil {
|
|
|
- ncutils.PrintLog("could not delete old interface "+cfg.Node.Interface, 1)
|
|
|
- }
|
|
|
- }
|
|
|
- resNode.PullChanges = "no"
|
|
|
- if err = config.ModConfig(&resNode); err != nil {
|
|
|
- return nil, err
|
|
|
- }
|
|
|
- if err = wireguard.SetWGConfig(network, false); err != nil {
|
|
|
- return nil, err
|
|
|
- }
|
|
|
- nodeData, err := json.Marshal(&resNode)
|
|
|
- if err != nil {
|
|
|
- return &resNode, err
|
|
|
- }
|
|
|
-
|
|
|
- if resNode.IsServer != "yes" {
|
|
|
- if wcclient == nil || ctx == nil {
|
|
|
- return &cfg.Node, errors.New("issue initializing gRPC client")
|
|
|
- }
|
|
|
- req := &nodepb.Object{
|
|
|
- Data: string(nodeData),
|
|
|
- Type: nodepb.NODE_TYPE,
|
|
|
- Metadata: "",
|
|
|
- }
|
|
|
- _, err = wcclient.UpdateNode(ctx, req, grpc.Header(&header))
|
|
|
- if err != nil {
|
|
|
- return &resNode, err
|
|
|
- }
|
|
|
- }
|
|
|
- } else {
|
|
|
- if err = wireguard.SetWGConfig(network, true); err != nil {
|
|
|
- if errors.Is(err, os.ErrNotExist) && !ncutils.IsFreeBSD() {
|
|
|
- return Pull(network, true)
|
|
|
- } else {
|
|
|
- return nil, err
|
|
|
- }
|
|
|
- }
|
|
|
- }
|
|
|
- var bkupErr = config.SaveBackup(network)
|
|
|
- if bkupErr != nil {
|
|
|
- ncutils.Log("unable to update backup file")
|
|
|
- }
|
|
|
-
|
|
|
- return &resNode, err
|
|
|
-}
|
|
|
-
|
|
|
-// Push - pushes current client configuration to server
|
|
|
-func Push(network string) error {
|
|
|
-
|
|
|
- cfg, err := config.ReadConfig(network)
|
|
|
- if err != nil {
|
|
|
- return err
|
|
|
- }
|
|
|
- postnode := cfg.Node
|
|
|
- // always set the OS on client
|
|
|
- postnode.OS = runtime.GOOS
|
|
|
- postnode.SetLastCheckIn()
|
|
|
-
|
|
|
- var header metadata.MD
|
|
|
- var wcclient nodepb.NodeServiceClient
|
|
|
- conn, err := grpc.Dial(cfg.Server.GRPCAddress,
|
|
|
- ncutils.GRPCRequestOpts(cfg.Server.GRPCSSL))
|
|
|
- if err != nil {
|
|
|
- ncutils.PrintLog("Cant dial GRPC server: "+err.Error(), 1)
|
|
|
- return err
|
|
|
- }
|
|
|
- defer conn.Close()
|
|
|
- wcclient = nodepb.NewNodeServiceClient(conn)
|
|
|
-
|
|
|
- ctx, err := auth.SetJWT(wcclient, network)
|
|
|
- if err != nil {
|
|
|
- ncutils.PrintLog("Failed to authenticate with server: "+err.Error(), 1)
|
|
|
- return err
|
|
|
- }
|
|
|
- if postnode.IsPending != "yes" {
|
|
|
- privateKey, err := wireguard.RetrievePrivKey(network)
|
|
|
- if err != nil {
|
|
|
- return err
|
|
|
- }
|
|
|
- privateKeyWG, err := wgtypes.ParseKey(privateKey)
|
|
|
- if err != nil {
|
|
|
- return err
|
|
|
- }
|
|
|
- if postnode.PublicKey != privateKeyWG.PublicKey().String() {
|
|
|
- postnode.PublicKey = privateKeyWG.PublicKey().String()
|
|
|
- }
|
|
|
- }
|
|
|
- nodeData, err := json.Marshal(&postnode)
|
|
|
- if err != nil {
|
|
|
- return err
|
|
|
- }
|
|
|
-
|
|
|
- req := &nodepb.Object{
|
|
|
- Data: string(nodeData),
|
|
|
- Type: nodepb.NODE_TYPE,
|
|
|
- Metadata: "",
|
|
|
- }
|
|
|
- data, err := wcclient.UpdateNode(ctx, req, grpc.Header(&header))
|
|
|
- if err != nil {
|
|
|
- return err
|
|
|
- }
|
|
|
- err = json.Unmarshal([]byte(data.Data), &postnode)
|
|
|
- if err != nil {
|
|
|
- return err
|
|
|
- }
|
|
|
- err = config.ModConfig(&postnode)
|
|
|
- return err
|
|
|
-}
|