-
Notifications
You must be signed in to change notification settings - Fork 2
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
### Description Makes it possible to install local DNS routing for linkup. Uses of a combination of [caddy](https://caddyserver.com/) and [dnsmasq](https://thekelleys.org.uk/dnsmasq/doc.html) to achieve local TLS/SSL and DNS for this to work in a frictionless way. --------- Co-authored-by: Oliver Stenbom <[email protected]> Co-authored-by: Augusto César <[email protected]>
- Loading branch information
1 parent
43eb3d1
commit 16e3bb9
Showing
16 changed files
with
621 additions
and
123 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,196 @@ | ||
| use std::{ | ||
| fs, | ||
| process::{Command, Stdio}, | ||
| }; | ||
|
|
||
| use crate::{ | ||
| linkup_file_path, | ||
| local_config::{config_path, get_config}, | ||
| services, CliError, Result, LINKUP_CF_TLS_API_ENV_VAR, LINKUP_LOCALDNS_INSTALL, | ||
| }; | ||
|
|
||
| pub fn install(config_arg: &Option<String>) -> Result<()> { | ||
| if std::env::var(LINKUP_CF_TLS_API_ENV_VAR).is_err() { | ||
| println!("local-dns uses Cloudflare to enable https through local certificates."); | ||
| println!( | ||
| "To use it, you need to set the {} environment variable.", | ||
| LINKUP_CF_TLS_API_ENV_VAR | ||
| ); | ||
| return Err(CliError::LocalDNSInstall(format!( | ||
| "{} env var is not set", | ||
| LINKUP_CF_TLS_API_ENV_VAR | ||
| ))); | ||
| } | ||
|
|
||
| let config_path = config_path(config_arg)?; | ||
| let input_config = get_config(&config_path)?; | ||
|
|
||
| if !is_sudo() { | ||
| println!("Linkup needs sudo access to:"); | ||
| println!(" - Ensure there is a folder /etc/resolvers"); | ||
| println!(" - Create file(s) for /etc/resolver/<domain>"); | ||
| println!(" - Flush DNS cache"); | ||
| } | ||
|
|
||
| ensure_resolver_dir()?; | ||
| install_resolvers(&input_config.top_level_domains())?; | ||
| services::caddy::install_cloudflare_package()?; | ||
|
|
||
| if fs::write(linkup_file_path(LINKUP_LOCALDNS_INSTALL), "").is_err() { | ||
| return Err(CliError::LocalDNSInstall(format!( | ||
| "Failed to write install localdns file at {}", | ||
| linkup_file_path(LINKUP_LOCALDNS_INSTALL).display() | ||
| ))); | ||
| } | ||
|
|
||
| Ok(()) | ||
| } | ||
|
|
||
| pub fn uninstall(config_arg: &Option<String>) -> Result<()> { | ||
| let install_check_file = linkup_file_path(LINKUP_LOCALDNS_INSTALL); | ||
| if !install_check_file.exists() { | ||
| println!("Linkup local-dns is not installed"); | ||
| return Ok(()); | ||
| } | ||
|
|
||
| let config_path = config_path(config_arg)?; | ||
| let input_config = get_config(&config_path)?; | ||
|
|
||
| if !is_sudo() { | ||
| println!("Linkup needs sudo access to:"); | ||
| println!(" - Delete file(s) on /etc/resolver"); | ||
| println!(" - Flush DNS cache"); | ||
| } | ||
|
|
||
| uninstall_resolvers(&input_config.top_level_domains())?; | ||
|
|
||
| if let Err(err) = fs::remove_file(install_check_file) { | ||
| return Err(CliError::LocalDNSUninstall(format!( | ||
| "Failed to delete localdns file at {}. Reason: {}", | ||
| linkup_file_path(LINKUP_LOCALDNS_INSTALL).display(), | ||
| err | ||
| ))); | ||
| } | ||
|
|
||
| Ok(()) | ||
| } | ||
|
|
||
| fn ensure_resolver_dir() -> Result<()> { | ||
| Command::new("sudo") | ||
| .args(["mkdir", "/etc/resolver"]) | ||
| .stdout(Stdio::null()) | ||
| .stderr(Stdio::null()) | ||
| .status() | ||
| .map_err(|err| { | ||
| CliError::LocalDNSInstall(format!( | ||
| "failed to create /etc/resolver folder. Reason: {}", | ||
| err | ||
| )) | ||
| })?; | ||
|
|
||
| Ok(()) | ||
| } | ||
|
|
||
| fn install_resolvers(resolve_domains: &[String]) -> Result<()> { | ||
| for domain in resolve_domains.iter() { | ||
| let cmd_str = format!( | ||
| "echo \"nameserver 127.0.0.1\nport 8053\" > /etc/resolver/{}", | ||
| domain | ||
| ); | ||
| let status = Command::new("sudo") | ||
| .arg("bash") | ||
| .arg("-c") | ||
| .arg(&cmd_str) | ||
| .status() | ||
| .map_err(|err| { | ||
| CliError::LocalDNSInstall(format!( | ||
| "Failed to install resolver for domain {} to /etc/resolver/{}. Reason: {}", | ||
| domain, domain, err | ||
| )) | ||
| })?; | ||
|
|
||
| if !status.success() { | ||
| return Err(CliError::LocalDNSInstall(format!( | ||
| "Failed to install resolver for domain {} to /etc/resolver/{}", | ||
| domain, domain | ||
| ))); | ||
| } | ||
| } | ||
|
|
||
| flush_dns_cache()?; | ||
| kill_dns_responder()?; | ||
|
|
||
| Ok(()) | ||
| } | ||
|
|
||
| fn uninstall_resolvers(resolve_domains: &[String]) -> Result<()> { | ||
| for domain in resolve_domains.iter() { | ||
| let folder = format!("/etc/resolver/{}", domain); | ||
| Command::new("sudo") | ||
| .args(["rm", "-rf", &folder]) | ||
| .stdout(Stdio::null()) | ||
| .stderr(Stdio::null()) | ||
| .status() | ||
| .map_err(|err| { | ||
| CliError::LocalDNSUninstall(format!( | ||
| "Failed to delete /etc/resolver/{}. Reason: {}", | ||
| domain, err | ||
| )) | ||
| })?; | ||
| } | ||
|
|
||
| flush_dns_cache()?; | ||
| kill_dns_responder()?; | ||
|
|
||
| Ok(()) | ||
| } | ||
|
|
||
| fn flush_dns_cache() -> Result<()> { | ||
| let status_flush = Command::new("sudo") | ||
| .args(["dscacheutil", "-flushcache"]) | ||
| .status() | ||
| .map_err(|_err| { | ||
| CliError::LocalDNSInstall("Failed to run dscacheutil -flushcache".into()) | ||
| })?; | ||
|
|
||
| if !status_flush.success() { | ||
| return Err(CliError::LocalDNSInstall( | ||
| "Failed to run dscacheutil -flushcache".into(), | ||
| )); | ||
| } | ||
|
|
||
| Ok(()) | ||
| } | ||
|
|
||
| fn kill_dns_responder() -> Result<()> { | ||
| let status_kill_responder = Command::new("sudo") | ||
| .args(["killall", "-HUP", "mDNSResponder"]) | ||
| .status() | ||
| .map_err(|_err| { | ||
| CliError::LocalDNSInstall("Failed to run killall -HUP mDNSResponder".into()) | ||
| })?; | ||
|
|
||
| if !status_kill_responder.success() { | ||
| return Err(CliError::LocalDNSInstall( | ||
| "Failed to run killall -HUP mDNSResponder".into(), | ||
| )); | ||
| } | ||
|
|
||
| Ok(()) | ||
| } | ||
|
|
||
| fn is_sudo() -> bool { | ||
| let sudo_check = Command::new("sudo") | ||
| .arg("-n") | ||
| .arg("true") | ||
| .stdin(Stdio::null()) | ||
| .stdout(Stdio::null()) | ||
| .stderr(Stdio::null()) | ||
| .status(); | ||
|
|
||
| if let Ok(exit_status) = sudo_check { | ||
| return exit_status.success(); | ||
| } | ||
|
|
||
| false | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.