-
Notifications
You must be signed in to change notification settings - Fork 412
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
OCPBUGS-16921: daemon: Make binary writing idempotent #3825
Changes from all commits
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -466,40 +466,54 @@ func ReexecuteForTargetRoot(target string) error { | |
// Otherwise, we assume that there's no suffixing needed. Hopefully | ||
// by RHEL10 the MCD will have fundamentally changed and we won't be doing the | ||
// chroot() thing anymore. | ||
klog.Info("not chrooting for source=rhel-%s target=rhel-%s", sourceMajor, targetMajor) | ||
klog.Infof("not chrooting for source=rhel-%s target=rhel-%s", sourceMajor, targetMajor) | ||
} | ||
} else { | ||
klog.Info("assuming we can use container binary chroot() to host") | ||
} | ||
sourceBinary := "/usr/bin/machine-config-daemon" + sourceBinarySuffix | ||
src, err := os.Open(sourceBinary) | ||
if err != nil { | ||
return fmt.Errorf("opening %s: %w", sourceBinary, err) | ||
} | ||
defer src.Close() | ||
|
||
targetBinBase := "run/bin/machine-config-daemon" | ||
targetBin := filepath.Join(target, targetBinBase) | ||
targetBinDir := filepath.Dir(targetBin) | ||
if _, err := os.Stat(targetBinDir); err != nil { | ||
if err := os.Mkdir(targetBinDir, 0o755); err != nil { | ||
return fmt.Errorf("mkdir %s: %w", targetBinDir, err) | ||
} | ||
} | ||
|
||
f, err := os.Create(targetBin) | ||
// Be idempotent | ||
targetBinExist, err := fileExists(targetBin) | ||
if err != nil { | ||
return fmt.Errorf("writing %s: %w", targetBin, err) | ||
return err | ||
} | ||
if _, err := io.Copy(f, src); err != nil { | ||
if !targetBinExist { | ||
sourceBinary := "/usr/bin/machine-config-daemon" + sourceBinarySuffix | ||
src, err := os.Open(sourceBinary) | ||
if err != nil { | ||
return fmt.Errorf("opening %s: %w", sourceBinary, err) | ||
} | ||
defer src.Close() | ||
|
||
targetBinDir := filepath.Dir(targetBin) | ||
// Before creating targetBinDir, ensure that it doesn't exist | ||
targetBinDirExist, err := directoryExists(targetBinDir) | ||
if err != nil { | ||
return err | ||
} | ||
if !targetBinDirExist { | ||
if err := os.Mkdir(targetBinDir, 0o755); err != nil { | ||
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Are we making the assumption that the error of the above is errnotfound? Might be helpful to make it explicit There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. umm, I am not sure adding here additional error check will add much value. Irrespective of what is the error, we are returning the error anyway with no further action needed. There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Sorry, I meant the error return from os.Stat(), must like my other comment below, not the os.Mkdir There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. fixed |
||
return fmt.Errorf("mkdir %s: %w", targetBinDir, err) | ||
} | ||
} | ||
|
||
f, err := os.Create(targetBin) | ||
if err != nil { | ||
return fmt.Errorf("writing %s: %w", targetBin, err) | ||
} | ||
if _, err := io.Copy(f, src); err != nil { | ||
f.Close() | ||
return fmt.Errorf("writing %s: %w", targetBin, err) | ||
} | ||
if err := f.Chmod(0o755); err != nil { | ||
return err | ||
} | ||
// Must close our writable fd | ||
f.Close() | ||
return fmt.Errorf("writing %s: %w", targetBin, err) | ||
} | ||
if err := f.Chmod(0o755); err != nil { | ||
return err | ||
} | ||
// Must close our writable fd | ||
f.Close() | ||
|
||
if err := syscall.Chroot(target); err != nil { | ||
return fmt.Errorf("failed to chroot to %s: %w", target, err) | ||
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Actually sorry, hold on a second...I think I was wrong in our chat. We do need to chroot right? We just don't want to re-exec...
Something more like
?
But there's still something weird going on here because I don't understand how we can be recursing here...IOW why are we getting that error of having the text file being busy?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
you are right, we don't need these new binaries copy stuff but we do need to chroot. This happens when doing things in hurry :/