ubase/switch_root.c

/* See LICENSE file for copyright and license details. */
#include <sys/mount.h>
#include <sys/stat.h>
#include <sys/vfs.h>

#include <dirent.h>
#include <fcntl.h>
#include <limits.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <unistd.h>

#include "util.h"

#define RAMFS_MAGIC		0x858458f6	/* some random number */
#define TMPFS_MAGIC		0x01021994

static void
delete_content(const char *dir, dev_t curdevice)
{
	char path[PATH_MAX];
	DIR *d;
	struct stat st;
	struct dirent *dent;

	/* don't dive into other filesystems */
	if (lstat(dir, &st) < 0 || st.st_dev != curdevice)
		return;
	if (!(d = opendir(dir)))
		return;
	while ((dent = readdir(d))) {
		if (strcmp(dent->d_name, ".") == 0 ||
		    strcmp(dent->d_name, "..") == 0)
			continue;

		/* build path and dive deeper */
		if (strlcpy(path, dir, sizeof(path)) >= sizeof(path))
			eprintf("path too long\n");
		if (path[strlen(path) - 1] != '/')
			if (strlcat(path, "/", sizeof(path)) >= sizeof(path))
				eprintf("path too long\n");
		if (strlcat(path, dent->d_name, sizeof(path)) >= sizeof(path))
			eprintf("path too long\n");

		if (lstat(path, &st) < 0)
			weprintf("lstat %s:", path);

		if (S_ISDIR(st.st_mode)) {
			delete_content(path, curdevice);
			if (rmdir(path) < 0)
				weprintf("rmdir %s:", path);
		} else {
			if (unlink(path) < 0)
				weprintf("unlink %s:", path);
		}
	}
	closedir(d);
}

static void
usage(void)
{
	eprintf("usage: %s [-c console] [newroot] [init] (PID 1)\n", argv0);
}

int
main(int argc, char *argv[])
{
	char *console = NULL;
	dev_t curdev;
	struct stat st;
	struct statfs stfs;

	ARGBEGIN {
	case 'c':
		console = EARGF(usage());
		break;
	default:
		usage();
	} ARGEND;

	/* check number of args and if we are PID 1 */
	if (argc != 2 || getpid() != 1)
		usage();

	/* chdir to newroot and make sure it's a different fs */
	if (chdir(argv[0]))
		eprintf("chdir %s:", argv[0]);

	if (stat("/", &st))
		eprintf("stat %s:", "/");

	curdev = st.st_dev;
	if (stat(".", &st))
		eprintf("stat %s:", ".");
	if (st.st_dev == curdev)
		usage();

	/* avoids trouble with real filesystems */
	if (stat("/init", &st) || !S_ISREG(st.st_mode))
		eprintf("/init is not a regular file\n");

	statfs("/", &stfs);
	if ((unsigned)stfs.f_type != RAMFS_MAGIC && (unsigned)stfs.f_type != TMPFS_MAGIC)
		eprintf("current filesystem is not a RAMFS or TMPFS\n");

	/* wipe / */
	delete_content("/", curdev);

	/* overmount / with newroot and chroot into it */
	if (mount(".", "/", NULL, MS_MOVE, NULL))
		eprintf("mount %s:", ".");

	if (chroot("."))
		eprintf("chroot failed\n");

	/* if -c is set, redirect stdin/stdout/stderr to console */
	if (console) {
		close(STDIN_FILENO);
		if (open(console, O_RDWR) == -1)
			eprintf("open %s:", console);
		if (dup2(STDIN_FILENO, STDOUT_FILENO) != STDOUT_FILENO)
			eprintf("dup2 %s:", "stdin,stdout");
		if (dup2(STDIN_FILENO, STDERR_FILENO) != STDERR_FILENO)
			eprintf("dup2 %s:", "stdin,stderr");
	}

	/* execute init */
	execv(argv[1], argv);
	eprintf("can't execute '%s'\n", argv[1]);
	return 1;
}