/* SPDX-License-Identifier: LGPL-2.1-or-later */ #include "bus-polkit.h" #include "varlink-io.systemd.MountFileSystem.h" static SD_VARLINK_DEFINE_ENUM_TYPE( PartitionDesignator, SD_VARLINK_DEFINE_ENUM_VALUE(root), SD_VARLINK_DEFINE_ENUM_VALUE(usr), SD_VARLINK_DEFINE_ENUM_VALUE(home), SD_VARLINK_DEFINE_ENUM_VALUE(srv), SD_VARLINK_DEFINE_ENUM_VALUE(esp), SD_VARLINK_DEFINE_ENUM_VALUE(xbootldr), SD_VARLINK_DEFINE_ENUM_VALUE(swap), SD_VARLINK_DEFINE_ENUM_VALUE(root_verity), SD_VARLINK_DEFINE_ENUM_VALUE(usr_verity), SD_VARLINK_DEFINE_ENUM_VALUE(root_verity_sig), SD_VARLINK_DEFINE_ENUM_VALUE(usr_verity_sig), SD_VARLINK_DEFINE_ENUM_VALUE(tmp), SD_VARLINK_DEFINE_ENUM_VALUE(var)); static SD_VARLINK_DEFINE_STRUCT_TYPE( PartitionInfo, SD_VARLINK_DEFINE_FIELD(designator, SD_VARLINK_STRING, 0), SD_VARLINK_DEFINE_FIELD(writable, SD_VARLINK_BOOL, 0), SD_VARLINK_DEFINE_FIELD(growFileSystem, SD_VARLINK_BOOL, 0), SD_VARLINK_DEFINE_FIELD(partitionNumber, SD_VARLINK_INT, SD_VARLINK_NULLABLE), SD_VARLINK_DEFINE_FIELD(architecture, SD_VARLINK_STRING, SD_VARLINK_NULLABLE), SD_VARLINK_DEFINE_FIELD(partitionUuid, SD_VARLINK_STRING, SD_VARLINK_NULLABLE), SD_VARLINK_DEFINE_FIELD(fileSystemType, SD_VARLINK_STRING, 0), SD_VARLINK_DEFINE_FIELD(partitionLabel, SD_VARLINK_STRING, SD_VARLINK_NULLABLE), SD_VARLINK_DEFINE_FIELD(size, SD_VARLINK_INT, 0), SD_VARLINK_DEFINE_FIELD(offset, SD_VARLINK_INT, 0), SD_VARLINK_DEFINE_FIELD(mountFileDescriptor, SD_VARLINK_INT, 0)); static SD_VARLINK_DEFINE_METHOD( MountImage, SD_VARLINK_DEFINE_INPUT(imageFileDescriptor, SD_VARLINK_INT, 0), SD_VARLINK_DEFINE_INPUT(userNamespaceFileDescriptor, SD_VARLINK_INT, SD_VARLINK_NULLABLE), SD_VARLINK_DEFINE_INPUT(readOnly, SD_VARLINK_BOOL, SD_VARLINK_NULLABLE), SD_VARLINK_DEFINE_INPUT(growFileSystems, SD_VARLINK_BOOL, SD_VARLINK_NULLABLE), SD_VARLINK_DEFINE_INPUT(password, SD_VARLINK_STRING, SD_VARLINK_NULLABLE), SD_VARLINK_DEFINE_INPUT(imagePolicy, SD_VARLINK_STRING, SD_VARLINK_NULLABLE), VARLINK_DEFINE_POLKIT_INPUT, SD_VARLINK_DEFINE_OUTPUT_BY_TYPE(partitions, PartitionInfo, SD_VARLINK_ARRAY), SD_VARLINK_DEFINE_OUTPUT(imagePolicy, SD_VARLINK_STRING, 0), SD_VARLINK_DEFINE_OUTPUT(imageSize, SD_VARLINK_INT, 0), SD_VARLINK_DEFINE_OUTPUT(sectorSize, SD_VARLINK_INT, 0), SD_VARLINK_DEFINE_OUTPUT(imageName, SD_VARLINK_STRING, SD_VARLINK_NULLABLE), SD_VARLINK_DEFINE_OUTPUT(imageUuid, SD_VARLINK_STRING, SD_VARLINK_NULLABLE)); static SD_VARLINK_DEFINE_ENUM_TYPE( MountMapMode, SD_VARLINK_FIELD_COMMENT("Map the caller's UID to root in the user namespace, do not map anything else."), SD_VARLINK_DEFINE_ENUM_VALUE(root), SD_VARLINK_FIELD_COMMENT("Map the foreign UID range to the base UID range in the user namespace (i.e. UID zero and above), covering 64K users."), SD_VARLINK_DEFINE_ENUM_VALUE(foreign), SD_VARLINK_FIELD_COMMENT("Apply an identity (1:1) mapping, but limit it to 64K users."), SD_VARLINK_DEFINE_ENUM_VALUE(identity), SD_VARLINK_FIELD_COMMENT("Determine automatically based on provided directory and caller."), SD_VARLINK_DEFINE_ENUM_VALUE(auto)); static SD_VARLINK_DEFINE_METHOD( MountDirectory, SD_VARLINK_FIELD_COMMENT("Directory file descriptor of the directory to assign to the user namespace. Must be a regular, i.e. non-O_PATH file descriptor."), SD_VARLINK_DEFINE_INPUT(directoryFileDescriptor, SD_VARLINK_INT, 0), SD_VARLINK_FIELD_COMMENT("File descriptor to the user namespace to assign this directory to. If not specified uses the host user namespace."), SD_VARLINK_DEFINE_INPUT(userNamespaceFileDescriptor, SD_VARLINK_INT, SD_VARLINK_NULLABLE), SD_VARLINK_FIELD_COMMENT("Whether to mark the resulting mount file descriptor as read-only. If not specified defaults to false."), SD_VARLINK_DEFINE_INPUT(readOnly, SD_VARLINK_BOOL, SD_VARLINK_NULLABLE), SD_VARLINK_FIELD_COMMENT("Which kinda of UID/GID mapping to apply to the resulting mount file descriptor."), SD_VARLINK_DEFINE_INPUT_BY_TYPE(mode, MountMapMode, SD_VARLINK_NULLABLE), VARLINK_DEFINE_POLKIT_INPUT, SD_VARLINK_FIELD_COMMENT("The freshly allocated mount file descriptor for the mount."), SD_VARLINK_DEFINE_OUTPUT(mountFileDescriptor, SD_VARLINK_INT, 0)); static SD_VARLINK_DEFINE_ERROR(IncompatibleImage); static SD_VARLINK_DEFINE_ERROR(MultipleRootPartitionsFound); static SD_VARLINK_DEFINE_ERROR(RootPartitionNotFound); static SD_VARLINK_DEFINE_ERROR(DeniedByImagePolicy); static SD_VARLINK_DEFINE_ERROR(KeyNotFound); static SD_VARLINK_DEFINE_ERROR(VerityFailure); SD_VARLINK_DEFINE_INTERFACE( io_systemd_MountFileSystem, "io.systemd.MountFileSystem", SD_VARLINK_INTERFACE_COMMENT("APIs for unprivileged mounting."), SD_VARLINK_SYMBOL_COMMENT("Encodes the designated purpose of a partition."), &vl_type_PartitionDesignator, SD_VARLINK_SYMBOL_COMMENT("Information about a specific partition."), &vl_type_PartitionInfo, SD_VARLINK_SYMBOL_COMMENT("Selects the type of UID/GID mapping to apply."), &vl_type_MountMapMode, SD_VARLINK_SYMBOL_COMMENT("Takes a disk image file descriptor as input, returns a set of mount file descriptors for it."), &vl_method_MountImage, SD_VARLINK_SYMBOL_COMMENT("Takes a directory file descriptor as input, returns a mount file descriptor."), &vl_method_MountDirectory, &vl_error_IncompatibleImage, &vl_error_MultipleRootPartitionsFound, &vl_error_RootPartitionNotFound, &vl_error_DeniedByImagePolicy, &vl_error_KeyNotFound, &vl_error_VerityFailure);