#!/bin/ksh -p

#

# CDDL HEADER START

#

# The contents of this file are subject to the terms of the

# Common Development and Distribution License (the "License").

# You may not use this file except in compliance with the License.

#

# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE

# or http://www.opensolaris.org/os/licensing.

# See the License for the specific language governing permissions

# and limitations under the License.

#

# When distributing Covered Code, include this CDDL HEADER in each

# file and include the License file at usr/src/OPENSOLARIS.LICENSE.

# If applicable, add the following below this CDDL HEADER, with the

# fields enclosed by brackets "[]" replaced with your own identifying

# information: Portions Copyright [yyyy] [name of copyright owner]

#

# CDDL HEADER END

#

#

# NOTE: this script runs in the global zone and touches the non-global

# zone, so care should be taken to validate any modifications so that they

# are safe.

. /usr/lib/brand/solaris10/common.ksh

LOGFILE=

MSG_PREFIX="p2v: "

EXIT_CODE=1

usage()

{

	echo "$0 [-s] [-m msgprefix] [-u] [-v] [-b patchid]* zonename" >&2

	exit $EXIT_CODE

}

# Clean up on interrupt

trap_cleanup()

{

	msg=$(gettext "Postprocessing cancelled due to interrupt.")

	error "$msg"

	if (( $zone_is_running != 0 )); then

		error "$e_shutdown" "$ZONENAME"

		/usr/sbin/zoneadm -z $ZONENAME halt

	fi

	exit $EXIT_CODE

}

#

# Disable any existing live-upgrade configuration.

# We have already called safe_dir to validate the etc/lu directory.

#

fix_lu()

{

	ludir=$ZONEROOT/etc/lu

	[[ ! -d $ludir ]] && return

	safe_rm etc/lutab

	safe_rm etc/lu/.BE_CONFIG

	safe_rm etc/lu/.CURR_VARS

	safe_rm etc/lu/ludb.local.xml

	for i in $ludir/ICF* $ludir/vtoc* $ludir/GRUB*

	do

		nm=`basename $i`

		safe_rm etc/lu/$nm

	done

}

#

# For an exclusive stack zone, fix up the network configuration files.

# We need to do this even if unconfiguring the zone so sys-unconfig works

# correctly.

#

fix_net()

{

	[[ "$STACK_TYPE" == "shared" ]] && return

	NETIF_CNT=$(/usr/bin/ls $ZONEROOT/etc/hostname.* 2>/dev/null | \

	    /usr/bin/wc -l)

	if (( $NETIF_CNT != 1 )); then

		vlog "$v_nonetfix"

		return

	fi

	NET=$(LC_ALL=C /usr/sbin/zonecfg -z $ZONENAME info net)

	if (( $? != 0 )); then

		error "$e_badinfo" "net"

		return

	fi

	NETIF=$(echo $NET | /usr/bin/nawk '{

		for (i = 1; i < NF; i++) {

			if ($i == "physical:") {

				if (length(net) == 0) {

					i++

					net = $i

				} else {

					multiple=1

				}

			}

		}

	}

	END {	if (!multiple)

			print net

	}')

	if [[ -z "$NETIF" ]]; then

		vlog "$v_nonetfix"

		return

	fi

	OLD_HOSTNET=$(/usr/bin/ls $ZONEROOT/etc/hostname.*)

	if [[ "$OLD_HOSTNET" != "$ZONEROOT/etc/hostname.$NETIF" ]]; then

		safe_move $OLD_HOSTNET $ZONEROOT/etc/hostname.$NETIF

	fi

}

#

# Disable all of the shares since the zone cannot be an NFS server.

# Note that we disable the various instances of the svc:/network/shares/group

# SMF service in the fix_smf function. 

#

fix_nfs()

{

	zonedfs=$ZONEROOT/etc/dfs

	[[ ! -d $zonedfs ]] && return

	if [[ -h $zonedfs/dfstab || ! -f $zonedfs/dfstab ]]; then

		error "$e_badfile" "/etc/dfs/dfstab"

		return

	fi

	tmpfile=$(mktemp -t)

	if [[ $? == 1 || -z "$tmpfile" ]]; then

		error "$e_tmpfile"

		return

	fi

	/usr/bin/nawk '{

		if (substr($1, 0, 1) == "#") {

			print $0

		} else {

			print "#", $0

			modified=1

		}

	}

	END {

		if (modified == 1) {

			printf("# Modified by p2v ")

			system("/usr/bin/date")

			exit 0

		}

		exit 1

	}' $zonedfs/dfstab >>$tmpfile

	if (( $? == 0 )); then

		if [[ ! -f $zonedfs/dfstab.pre_p2v ]]; then

			safe_copy $zonedfs/dfstab $zonedfs/dfstab.pre_p2v

		fi

		safe_copy $tmpfile $zonedfs/dfstab

		chown root:sys $zonedfs/dfstab || \

		    fail_fatal "$f_chown" "$zonedfs/dfstab"

		chmod 644 $zonedfs/dfstab || \

		    fail_fatal "$f_chmod" "$zonedfs/dfstab"

	fi

	/usr/bin/rm -f $tmpfile

}

#

# Comment out most of the old mounts since they are either unneeded or

# likely incorrect within a zone.  Specific mounts can be manually 

# reenabled if the corresponding device is added to the zone.

#

fix_vfstab()

{

	if [[ -h $ZONEROOT/etc/vfstab || ! -f $ZONEROOT/etc/vfstab ]]; then

		error "$e_badfile" "/etc/vfstab"

		return

	fi

	tmpfile=$(mktemp -t)

	if [[ $? == 1 || -z "$tmpfile" ]]; then

		error "$e_tmpfile"

		return

	fi

	/usr/bin/nawk '{

		if (substr($1, 0, 1) == "#") {

			print $0

		} else if ($1 == "fd" || $1 == "/proc" || $1 == "swap" ||

		    $1 == "ctfs" || $1 == "objfs" || $1 == "sharefs" ||

		    $4 == "nfs" || $4 == "lofs") {

			print $0

		} else {

			print "#", $0

			modified=1

		}

	}

	END {

		if (modified == 1) {

			printf("# Modified by p2v ")

			system("/usr/bin/date")

			exit 0

		}

		exit 1

	}' $ZONEROOT/etc/vfstab >>$tmpfile

	if (( $? == 0 )); then

		if [[ ! -f $ZONEROOT/etc/vfstab.pre_p2v ]]; then

			safe_copy $ZONEROOT/etc/vfstab \

			    $ZONEROOT/etc/vfstab.pre_p2v

		fi

		safe_copy $tmpfile $ZONEROOT/etc/vfstab

		chown root:sys $ZONEROOT/etc/vfstab || \

		    fail_fatal "$f_chown" "$ZONEROOT/etc/vfstab"

		chmod 644 $ZONEROOT/etc/vfstab || \

		    fail_fatal "$f_chmod" "$ZONEROOT/etc/vfstab"

	fi

	/usr/bin/rm -f $tmpfile

}

#

# Collect the data needed to delete SMF services.  Since we're p2v-ing a

# physical image there are SMF services which must be deleted.

#

fix_smf_pre_uoa()

{

	#

	# Start by getting the svc manifests that are delivered by hollow

	# pkgs then use 'svccfg inventory' to get the names of the svcs

	# delivered by those manifests.  The svc names are saved into a

	# temporary file.

	#

	SMFTMPFILE=$(mktemp -t smf.XXXXXX)

	if [[ $? == 1 || -z "$SMFTMPFILE" ]]; then

		error "$e_tmpfile"

		return

	fi

	for i in $ZONEROOT/var/sadm/pkg/*

	do

		pkg=$(/usr/bin/basename $i)

		[[ ! -f $ZONEROOT/var/sadm/pkg/$pkg/save/pspool/$pkg/pkgmap ]] \

		    && continue

		/usr/bin/egrep -s "SUNW_PKG_HOLLOW=true" \

		    $ZONEROOT/var/sadm/pkg/$pkg/pkginfo || continue

		for j in $(/usr/bin/nawk '{if ($2 == "f" &&

		    substr($4, 1, 17) == "var/svc/manifest/") print $4}' \

		    $ZONEROOT/var/sadm/pkg/$pkg/save/pspool/$pkg/pkgmap)

		do

			svcs=$(SVCCFG_NOVALIDATE=1 \

			    SVCCFG_REPOSITORY=$ZONEROOT/etc/svc/repository.db \

			    /usr/sbin/svccfg inventory $ZONEROOT/$j)

			for k in $svcs

			do

				echo $k /$j >> $SMFTMPFILE

			done

		done

	done

}

#

# Delete or disable SMF services.

# Zone is booted to milestone=none when this function is called.

# Use the SMF data collected by fix_smf_pre_uoa() to delete the services.

#

fix_smf()

{

	# 

	# Zone was already booted to milestone=none, wait until SMF door exists.

	#

	for i in 0 1 2 3 4 5 6 7 8 9

	do

		[[ -r $ZONEROOT/etc/svc/volatile/repository_door ]] && break

		sleep 5

	done

	if [[ $i -eq 9 && ! -r $ZONEROOT/etc/svc/volatile/repository_door ]];

	then

		error "$e_nosmf"

		/usr/bin/rm -f $SMFTMPFILE

		return

	fi

	insttmpfile=$(mktemp -t instsmf.XXXXXX)

	if [[ $? == 1 || -z "$insttmpfile" ]]; then

		error "$e_tmpfile"

		/usr/bin/rm -f $SMFTMPFILE

		return

	fi

	vlog "$v_rmhollowsvcs"

        while read fmri mfst

	do

		# Delete the svc.

		vlog "$v_delsvc" "$fmri"

		echo "/usr/sbin/svccfg delete -f $fmri"

		echo "/usr/sbin/svccfg delhash -d $mfst"

		echo "rm -f $mfst"

	done < $SMFTMPFILE > $ZONEROOT/tmp/smf_rm

	/usr/sbin/zlogin -S $ZONENAME /bin/sh /tmp/smf_rm >/dev/null 2>&1

	/usr/bin/rm -f $SMFTMPFILE

	# Get a list of the svcs that now exist in the zone.

	LANG=C /usr/sbin/zlogin -S $ZONENAME /usr/bin/svcs -aH | \

	    /usr/bin/nawk '{print $3}' >>$insttmpfile

	[[ -n $LOGFILE ]] && \

	    printf "[$(date)] ${MSG_PREFIX}${v_svcsinzone}\n" >&2

	[[ -n $LOGFILE ]] && cat $insttmpfile >&2

	#

	# Fix network services if shared stack.

	#

	if [[ "$STACK_TYPE" == "shared" ]]; then

		vlog "$v_fixnetsvcs"

		NETPHYSDEF="svc:/network/physical:default"

		NETPHYSNWAM="svc:/network/physical:nwam"

		/usr/bin/egrep -s "$NETPHYSDEF" $insttmpfile

		if (( $? == 0 )); then

			vlog "$v_enblsvc" "$NETPHYSDEF"

			/usr/sbin/zlogin -S $ZONENAME \

			    /usr/sbin/svcadm enable $NETPHYSDEF || \

			    error "$e_dissvc" "$NETPHYSDEF"

		fi

		/usr/bin/egrep -s "$NETPHYSNWAM" $insttmpfile

		if (( $? == 0 )); then

			vlog "$v_dissvc" "$NETPHYSNWAM"

			/usr/sbin/zlogin -S $ZONENAME \

			    /usr/sbin/svcadm disable $NETPHYSNWAM || \

			    error "$e_enblsvc" "$NETPHYSNWAM"

		fi

		for i in $(/usr/bin/egrep network/routing $insttmpfile)

		do

			# Disable the svc.

			vlog "$v_dissvc" "$i"

			/usr/sbin/zlogin -S $ZONENAME \

			    /usr/sbin/svcadm disable $i || \

			    error "$e_dissvc" $i

		done

	fi

	#

	# Disable well-known services that don't run in a zone.

	#

	vlog "$v_rminvalidsvcs"

	for i in $(/usr/bin/egrep -hv "^#" \

	    /usr/lib/brand/solaris10/smf_disable.lst \

	    /etc/brand/solaris10/smf_disable.conf)

	do

		# Skip svcs not installed in the zone.

		/usr/bin/egrep -s "$i:" $insttmpfile || continue

		# Disable the svc.

		vlog "$v_dissvc" "$i"

		/usr/sbin/zlogin -S $ZONENAME /usr/sbin/svcadm disable $i || \

		    error "$e_dissvc" $i

	done

	#

	# Since zones can't be NFS servers, disable all of the instances of

	# the shares svc.

	#

	for i in $(/usr/bin/egrep network/shares/group $insttmpfile)

	do

		vlog "$v_dissvc" "$i"

		/usr/sbin/zlogin -S $ZONENAME /usr/sbin/svcadm disable $i || \

		    error "$e_dissvc" $i

	done

	/usr/bin/rm -f $insttmpfile

}

#

# Remove well-known pkgs that do not work inside a zone.

#

rm_pkgs()

{

	/usr/bin/cat <<-EOF > $ZONEROOT/tmp/admin || fatal "$e_adminf"

	mail=

	instance=overwrite

	partial=nocheck

	runlevel=nocheck

	idepend=nocheck

	rdepend=nocheck

	space=nocheck

	setuid=nocheck

	conflict=nocheck

	action=nocheck

	basedir=default

	EOF

	for i in $(/usr/bin/egrep -hv "^#" /usr/lib/brand/solaris10/pkgrm.lst \

	    /etc/brand/solaris10/pkgrm.conf)

	do

		[[ ! -d $ZONEROOT/var/sadm/pkg/$i ]] && continue

		vlog "$v_rmpkg" "$i"

		/usr/sbin/zlogin -S $ZONENAME \

		    /usr/sbin/pkgrm -na /tmp/admin $i >&2 || error "$e_rmpkg" $i

	done

}

#

# Zoneadmd writes a one-line index file into the zone when the zone boots,

# so any information about installed zones from the original system will

# be lost at that time.  Here we'll warn the sysadmin about any pre-existing

# zones that they might want to clean up by hand, but we'll leave the zonepaths

# in place in case they're on shared storage and will be migrated to

# a new host.

#

warn_zones()

{

	zoneconfig=$ZONEROOT/etc/zones

	[[ ! -d $zoneconfig ]] && return

	if [[ -h $zoneconfig/index || ! -f $zoneconfig/index ]]; then

		error "$e_badfile" "/etc/zones/index"

		return

	fi

	NGZ=$(/usr/bin/nawk -F: '{

		if (substr($1, 0, 1) == "#" || $1 == "global")

			continue

		if ($2 == "installed")

			printf("%s ", $1)

	}' $zoneconfig/index)

	# Return if there are no installed zones to warn about.

	[[ -z "$NGZ" ]] && return

	log "$v_rmzones" "$NGZ"

	NGZP=$(/usr/bin/nawk -F: '{

		if (substr($1, 0, 1) == "#" || $1 == "global")

			continue

		if ($2 == "installed")

			printf("%s ", $3)

	}' $zoneconfig/index)

	log "$v_rmzonepaths"

	for i in $NGZP

	do

		log "    %s" "$i"

	done

}

#

# ^C Should cleanup; if the zone is running, it should try to halt it.

#

zone_is_running=0

trap trap_cleanup INT

#

# Parse the command line options.

#

OPT_U=

OPT_V=

OPT_M=

OPT_L=

while getopts "uvm:l:" opt

do

	case "$opt" in

		u)	OPT_U="-u";;

		v)	OPT_V="-v";;

		m)	MSG_PREFIX="$OPTARG"; OPT_M="-m \"$OPTARG\"";;

		l)	LOGFILE="$OPTARG"; OPT_L="-l \"$OPTARG\"";;

		*)	usage;;

	esac

done

shift OPTIND-1

(( $# < 1 )) && usage

(( $# > 2 )) && usage

[[ -n $LOGFILE ]] && exec 2>>$LOGFILE

ZONENAME=$1

ZONEPATH=$2

# XXX shared/common script currently uses lower case zonename & zonepath

zonename="$ZONENAME"

zonepath="$ZONEPATH"

ZONEROOT=$ZONEPATH/root

e_badinfo=$(gettext "Failed to get '%s' zone resource")

e_badfile=$(gettext "Invalid '%s' file within the zone")

v_mkdirs=$(gettext "Creating mount points")

v_nonetfix=$(gettext "Cannot update /etc/hostname.{net} file")

v_adjust=$(gettext "Updating the image to run within a zone")