#!/bin/sh

# Copyright (C) 2014-2021 Daniel Baumann <daniel.baumann@open-infrastructure.net>
#
# SPDX-License-Identifier: GPL-3.0+
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program.  If not, see <https://www.gnu.org/licenses/>.

set -e

PROJECT="open-infrastructure"
SOFTWARE="compute-tools"
PROGRAM="container"
COMMAND="$(basename ${0})"

CONFIG="/etc/${SOFTWARE}/config"
HOOKS="/etc/${SOFTWARE}/hooks"
MACHINES="/var/lib/machines"

START="false"
SYSTEMCTL="true"

Parameters ()
{
	OPTIONS_ALL=""

	GETOPT_LONGOPTIONS="name:,force,nspawn,start,verbose,"
	GETOPT_OPTIONS="n:,f,v,"

	PARAMETERS="$(getopt --longoptions ${GETOPT_LONGOPTIONS} --name=${COMMAND} --options ${GETOPT_OPTIONS} --shell sh -- ${@})"

	if [ "${?}" != "0" ]
	then
		echo "'${COMMAND}': getopt exit" >&2
		exit 1
	fi

	eval set -- "${PARAMETERS}"

	while true
	do
		case "${1}" in
			-n|--name)
				NAME="${2}"
				shift 2
				;;

			-f|--force)
				FORCE="true"
				shift 1

				OPTIONS_ALL="${OPTIONS_ALL} --force"
				;;

			--nspawn)
				# internal option
				SYSTEMCTL="false"
				shift 1
				;;

			--start)
				# internal option
				START="true"
				SYSTEMCTL="false"
				shift 1
				;;

			-v|--verbose)
				VERBOSE="true"
				shift 1

				OPTIONS_ALL="${OPTIONS_ALL} --verbose"
				;;

			--)
				shift 1
				break
				;;

			*)
				echo "'${COMMAND}': getopt error" >&2
				exit 1
				;;
		esac
	done
}

Usage ()
{
	echo "Usage: ${PROGRAM} ${COMMAND} -n|--name NAME [-f|--force]" >&2
	exit 1
}

Parameters "${@}"

if [ -z "${NAME}" ]
then
	Usage
fi

# hooks
export NAME

case "${NAME}" in
	ALL)
		NAMES="$(${PROGRAM} list --format shell --stopped)"

		for NAME in ${NAMES}
		do
			${PROGRAM} start --name ${NAME} ${OPTIONS_ALL} || true
		done

		exit 0
		;;
esac

case "${START}" in
	false)
		STATE="$(machinectl show ${NAME} 2>&1 | awk -FState= '/^State=/ { print $2 }')"

		case "${STATE}" in
			running)
				echo "'${NAME}': container is already started" >&2
				exit 1
				;;
		esac
		;;
esac

if [ -e "${MACHINES}/.#${NAME}.lck" ]
then
	case "${FORCE}" in
		true)
			rm -f "${MACHINES}/.#${NAME}.lck"

			VETHS="$(awk -Fnetwork-veth-extra= '/^network-veth-extra=/ { print $2 }' ${CONFIG}/${NAME}.conf | awk -F: '{ print $1 }')"

			for VETH in ${VETHS}
			do
				ip link delete ${VETH} > /dev/null 2>&1 || true
			done
			;;

		*)
			echo "'${NAME}': container is locked" >&2
			exit 1
			;;
	esac
fi

HOST_ARCHITECTURE="$(dpkg --print-architecture)"
#FIXME
#MACHINE_ARCHITECTURE="$(chroot ${MACHINES}/${NAME} dpkg --print-architecture)"
MACHINE_ARCHITECTURE=amd64

case "${HOST_ARCHITECTURE}" in
	amd64)
		case "${MACHINE_ARCHITECTURE}" in
			i386)
				SETARCH="setarch i686"
				;;

			*)
				SETARCH=""
				;;
		esac
		;;
esac

case "${START}" in
	start)
		;;

	*)
		# Pre hooks
		for FILE in "${HOOKS}/pre-${COMMAND}".* "${HOOKS}/${NAME}.pre-${COMMAND}"
		do
			if [ -x "${FILE}" ]
			then
				"${FILE}"
			fi
		done
		;;
esac

# config
if [ -e "${CONFIG}/${NAME}.conf" ]
then
	BOOT="$(awk -Fboot= '/^boot=/ { print $2 }' ${CONFIG}/${NAME}.conf || echo yes)"

	case "${BOOT}" in
		yes)
			BOOT="--boot"
			;;

		*)
			BOOT=""
			;;
	esac

	CAPABILITY="$(awk -Fcapability= '/^capability=/ { print $2 }' ${CONFIG}/${NAME}.conf)"

	case "${CAPABILITY}" in
		"")
			CAPABILITY=""
			;;

		*)
			CAPABILITY="--capability=${CAPABILITY}"
			;;
	esac

	DIRECTORY="$(awk -Fdirectory= '/^directory=/ { print $2 }' ${CONFIG}/${NAME}.conf || echo ${MACHINES}/${NAMES})"

	DRIVES="$(awk -Fdrive= '/^drive=/ { print $2 }' ${CONFIG}/${NAME}.conf)"

	case "${DRIVES}" in
		"")
			;;

		*)
			for DRIVE_ITEM in ${DRIVES}
			do
				DRIVE="${DRIVE} -drive ${DRIVE_ITEM}"
			done
			;;
	esac

	DEVICES="$(awk -Fdevice= '/^device=/ { print $2 }' ${CONFIG}/${NAME}.conf)"

	case "${DEVICES}" in
		"")
			;;

		*)
			for DEVICE_ITEM in ${DEVICES}
			do
				DEVICE="${DEVICE} -device ${DEVICE_ITEM}"
			done
			;;
	esac

	MEMORY="-m $(awk -Fmemory= '/^memory=/ { print $2 }' ${CONFIG}/${NAME}.conf)"

	if [ -z "$(awk -Fserial= '/^serial=/ { print $2 }' ${CONFIG}/${NAME}.conf)" ]
	then
		SERIAL=""
	else
		SERIAL="-serial $(awk -Fserial= '/^serial=/ { print $2 }' ${CONFIG}/${NAME}.conf)"
	fi

	RAW_OPTIONS="$(awk -Fraw-options= '/^raw-options=/ { print $2 }' ${CONFIG}/${NAME}.conf)"
	# FIXME empty

	BIOS_FILE="$(awk -Fbios= '/^bios=/ { print $2 }' ${CONFIG}/${NAME}.conf)"

	case "${BIOS_FILE}" in
		"")
			BIOS=""
			;;

		*)
			BIOS="-bios ${BIOS_FILE}"
			;;
	esac

	NETDEVS="$(awk -Fvm.netdev= '/^vm.netdev=/ { print $2 }' ${CONFIG}/${NAME}.conf)"

	case "${NETDEVS}" in
		"")
			;;

		*)
			OLDIFS="${IFS}"
			IFS='
'
			for NETDEV_ITEM in ${NETDEVS}
			do
				NETDEV="${NETDEV} -netdev ${NETDEV_ITEM}"
			done
			IFS="${OLDIFS}"
			;;
	esac

	DROP_CAPABILITY="$(awk -Fdrop-capability= '/^drop-capability=/ { print $2 }' ${CONFIG}/${NAME}.conf)"

	case "${DROP_CAPABILITY}" in
		"")
			DROP_CAPABILITY=""
			;;

		*)
			DROP_CAPABILITY="--drop-capability=${DROP_CAPABILITY}"
			;;
	esac

	LINK_JOURNAL="$(awk -Flink-journal= '/^link-journal=/ { print $2 }' ${CONFIG}/${NAME}.conf || echo no)"

	case "${LINK_JOURNAL}" in
		yes)
			LINK_JOURNAL="--link-journal=yes"
			;;

		*)
			LINK_JOURNAL="--link-journal=no"
			;;
	esac

	MACHINE="--machine=${NAME}"

	NETWORK_VETH_EXTRA=""

	VETHS="$(awk -Fnetwork-veth-extra= '/^network-veth-extra=/ { print $2 }' ${CONFIG}/${NAME}.conf)"

	case "${VETHS}" in
		"")
			;;

		*)
			for VETH in ${VETHS}
			do
				INTERFACE="$(echo ${VETH} | awk -F: '{ print $1 }')"
				INTERFACE_ID="$(echo ${VETH} | awk -F: '{ print $2 }')"

				NETWORK_VETH_EXTRA="${NETWORK_VETH_EXTRA} -netdev tap,id=${INTERFACE_ID},ifname=${INTERFACE},script=no,downscript=no -device virtio-net-pci,netdev=${INTERFACE_ID}"

				if [ "$(echo ${INTERFACE} | wc -c)" -gt 15 ]
				then
					echo "'${INTERFACE}': name exceeds maximum of 15 characters, network might be not working."
				fi
			done
			;;
	esac

	PRIVATE_USERS="$(awk -Fprivate-users= '/^private-users=/ { print $2 }' ${CONFIG}/${NAME}.conf || echo no)"

	case "${PRIVATE_USERS}" in
		yes)
			PRIVATE_USERS="--private-users=yes"
			;;

		*)
			PRIVATE_USERS="--private-users=no"
			;;
	esac

	REGISTER="$(awk -Fregister= '/^register=/ { print $2 }' ${CONFIG}/${NAME}.conf || echo yes)"

	case "${REGISTER}" in
		yes)
			REGISTER="--register=yes"
			;;

		*)
			REGISTER="--register=no"
			;;
	esac

	BLOCK_IO_DEVICE_WEIGHT="$(awk -FBlockIODeviceWeight= '/^BlockIODeviceWeight=/ { print $2 }' ${CONFIG}/${NAME}.conf)"

	if [ -n "${BLOCK_IO_DEVICE_WEIGHT}" ]
	then
		BLOCK_IO_DEVICE_WEIGHT="BlockIODeviceWeight=${BLOCK_IO_DEVICE_WEIGHT}"
		SET_PROPERTY="true"
	fi

	BLOCK_IO_READ_BANDWIDTH="$(awk -FBlockIOReadBandwidth= '/^BlockIOReadBandwidth=/ { print $2 }' ${CONFIG}/${NAME}.conf)"

	if [ -n "${BLOCK_IO_READ_BANDWIDTH}" ]
	then
		BLOCK_IO_READ_BANDWIDTH="BlockIOReadBandwidth=${BLOCK_IO_READ_BANDWIDTH}"
		SET_PROPERTY="true"
	fi

	BLOCK_IO_WEIGHT="$(awk -FBlockIOWeight= '/^BlockIOWeight=/ { print $2 }' ${CONFIG}/${NAME}.conf)"

	if [ -n "${BLOCK_IO_WEIGHT}" ]
	then
		BLOCK_IO_WEIGHT="BlockIOWeight=${BLOCK_IO_WEIGHT}"
		SET_PROPERTY="true"
	fi

	BLOCK_IO_WRITE_BANDWIDTH="$(awk -FBlockIOWriteBandwidth=/= '/^BlockIOWriteBandwidth=/ { print $2 }' ${CONFIG}/${NAME}.conf)"

	if [ -n "${BLOCK_IO_WRITE_BANDWIDTH}" ]
	then
		BLOCK_IO_WRITE_BANDWIDTH="BlockIOWriteBandwidth=${BLOCK_IO_WRITE_BANDWIDTH}"
		SET_PROPERTY="true"
	fi

	CPU_QUOTA="$(awk -FCPUQuota= '/^CPUQuota=/ { print $2 }' ${CONFIG}/${NAME}.conf)"

	if [ -n "${CPU_QUOTA}" ]
	then
		CPU_QUOTA="CPUQuota=${CPU_QUOTA}"
		SET_PROPERTY="true"
	fi

	CPU_SHARES="$(awk -FCPUShares= '/^CPUShares=/ { print $2 }' ${CONFIG}/${NAME}.conf)"

	if [ -n "${CPU_SHARES}" ]
	then
		CPU_SHARES="CPUShares=${CPU_SHARES}"
		SET_PROPERTY="true"
	fi

	MEMORY_LIMIT="$(awk -FMemoryLimit= '/^MemoryLimit=/ { print $2 }' ${CONFIG}/${NAME}.conf)"

	if [ -n "${MEMORY_LIMIT}" ]
	then
		MEMORY_LIMIT="MemoryLimit=${MEMORY_LIMIT}"
		SET_PROPERTY="true"
	fi

	TASKS_MAX="$(awk -FTasksMax= '/^TasksMax=/ { print $2 }' ${CONFIG}/${NAME}.conf)"

	if [ -n "${TASKS_MAX}" ]
	then
		TASKS_MAX="TasksMax=${TASKS_MAX}"
		SET_PROPERTY="true"
	fi
fi

case "${SYSTEMCTL}" in
	true)
		systemctl start kvm@${NAME}.service

		# Post hooks
		for FILE in "${HOOKS}/post-${COMMAND}".* "${HOOKS}/${NAME}.post-${COMMAND}"
		do
			if [ -x "${FILE}" ]
			then
				"${FILE}"
			fi
		done

		exit 0
		;;
esac

case "${START}" in
	true)
		;;

	*)
		# Run

		case "${VERBOSE}" in
			true)
				echo -n "Starting container ${NAME}..."
				;;
		esac

		qemu-system-x86_64 \
			-machine  accel=kvm:tcg \
			${DRIVE} \
			${MEMORY} \
			-name ${NAME} \
			${DEVICE} \
			${NETDEV} \
			${BIOS} \
			${SERIAL} \
			${RAW_OPTIONS}

		case "${VERBOSE}" in
			true)
				echo " done."
				;;
		esac
		;;
esac

# we have to wait for systemd-nspawn to create the veth interfaces
sleep 1
NETWORK_BRIDGES="$(awk -Fcnt.network-bridge= '/^cnt.network-bridge=/ { print $2 }' ${CONFIG}/${NAME}.conf)"

case "${NETWORK_BRIDGES}" in
	"")
		;;

	*)
		for BRIDGE_DEFINITION in ${NETWORK_BRIDGES}
		do
			INTERFACE="$(echo ${BRIDGE_DEFINITION} | awk -F: '{ print $1 }')"
			BRIDGE="$(echo ${BRIDGE_DEFINITION} | awk -F: '{ print $2 }')"

			if [ "$(echo ${INTERFACE} | wc -c)" -gt 15 ]
			then
				echo "'${INTERFACE}': name exceeds maximum of 15 characters, network might be not working."
			fi

			if [ -n "${BRIDGE}" ] && [ -n "${INTERFACE}" ]
			then

				ip link set "${INTERFACE}" up
				ovs-vsctl --may-exist add-port "${BRIDGE}" "${INTERFACE}"

			else
				echo "Warning bridge definition '${BRIDGE_DEFINITION}' not recognized (expected <bridge>:<interface>): Ignoring"
			fi
		done
		;;
esac