You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
237 lines
8.5 KiB
237 lines
8.5 KiB
#!/usr/bin/env lua
|
|
|
|
dkjson = require("dkjson")
|
|
uci = require("uci")
|
|
|
|
UCI = {}
|
|
|
|
--- Return the configuration defaults as a table suitable for JSON output
|
|
--
|
|
-- Mostly taken from yggdrasil -genconf -json
|
|
-- @return table with configuration defaults
|
|
function UCI.defaults()
|
|
return {
|
|
AdminListen = "unix:///var/run/yggdrasil.sock", IfName = "ygg0",
|
|
NodeInfoPrivacy = false, IfTAPMode = false,
|
|
LinkLocalTCPPort = 0, IfMTU = 65535,
|
|
|
|
Peers = { }, Listen = { }, MulticastInterfaces = { }, AllowedEncryptionPublicKeys = { },
|
|
InterfacePeers = setmetatable({ }, {__jsontype = "object"}),
|
|
NodeInfo = setmetatable({ }, {__jsontype = "object"}),
|
|
|
|
SessionFirewall = {
|
|
Enable = false,
|
|
AllowFromDirect = true,
|
|
AllowFromRemote = true,
|
|
AlwaysAllowOutbound = true,
|
|
WhitelistEncryptionPublicKeys = { },
|
|
BlacklistEncryptionPublicKeys = { }
|
|
},
|
|
TunnelRouting = {
|
|
Enable = false,
|
|
IPv6RemoteSubnets = setmetatable({ }, {__jsontype = "object"}),
|
|
IPv6LocalSubnets = { },
|
|
IPv4RemoteSubnets = setmetatable({ }, {__jsontype = "object"}),
|
|
IPv4LocalSubnets = { }
|
|
},
|
|
SwitchOptions = { MaxTotalQueueSize = 4194304 }
|
|
}
|
|
end
|
|
|
|
--- Return the yggdrasil configuration as a table suitable for JSON output
|
|
--
|
|
-- @return table with yggdrasil configuration
|
|
function UCI.get()
|
|
local obj = UCI.defaults()
|
|
|
|
local cursor = uci.cursor()
|
|
local config = cursor:get_all("yggdrasil", "yggdrasil")
|
|
if not config then return obj end
|
|
|
|
obj.EncryptionPublicKey = config.EncryptionPublicKey
|
|
obj.EncryptionPrivateKey = config.EncryptionPrivateKey
|
|
obj.SigningPublicKey = config.SigningPublicKey
|
|
obj.SigningPrivateKey = config.SigningPrivateKey
|
|
obj.AdminListen = config.AdminListen or obj.AdminListen
|
|
obj.IfName = config.IfName or obj.IfName
|
|
obj.NodeInfo = dkjson.decode(config.NodeInfo) or obj.NodeInfo
|
|
for _, v in pairs({ "NodeInfoPrivacy", "IfTAPMode" }) do
|
|
if config[v] ~= nil then obj[v] = to_bool(config[v]) end
|
|
end
|
|
for _, v in pairs({ "LinkLocalTCPPort", "IfMTU" }) do
|
|
if config[v] ~= nil then obj[v] = tonumber(config[v]) end
|
|
end
|
|
|
|
cursor:foreach("yggdrasil", "peer", function (s)
|
|
table.insert(obj.Peers, s.uri)
|
|
end)
|
|
cursor:foreach("yggdrasil", "listen_address", function (s)
|
|
table.insert(obj.Listen, s.uri)
|
|
end)
|
|
cursor:foreach("yggdrasil", "multicast_interface", function (s)
|
|
table.insert(obj.MulticastInterfaces, s.name)
|
|
end)
|
|
cursor:foreach("yggdrasil", "allowed_encryption_public_key", function (s)
|
|
table.insert(obj.AllowedEncryptionPublicKeys, s.key)
|
|
end)
|
|
|
|
cursor:foreach("yggdrasil", "interface_peer", function (s)
|
|
if obj.InterfacePeers[s.interface] == nil then
|
|
obj.InterfacePeers[s.interface] = {}
|
|
end
|
|
table.insert(obj.InterfacePeers[s["interface"]], s.uri)
|
|
end)
|
|
|
|
-- session firewall config
|
|
local session_firewall_config = { "Enable", "AllowFromDirect", "AllowFromRemote", "AlwaysAllowOutbound" }
|
|
for _, v in pairs(session_firewall_config) do
|
|
if config["SessionFirewall_"..v] ~= nil then
|
|
obj.SessionFirewall[v] = to_bool(config["SessionFirewall_"..v])
|
|
end
|
|
end
|
|
cursor:foreach("yggdrasil", "whitelisted_encryption_public_key", function (s)
|
|
table.insert(obj.SessionFirewall.WhitelistEncryptionPublicKeys, s.key)
|
|
end)
|
|
cursor:foreach("yggdrasil", "blacklisted_encryption_public_key", function (s)
|
|
table.insert(obj.SessionFirewall.BlacklistEncryptionPublicKeys, s.key)
|
|
end)
|
|
-- /session firewall config
|
|
|
|
-- tunnel routing config
|
|
if config.TunnelRouting_Enable ~= nil then
|
|
obj.TunnelRouting.Enable = to_bool(config.TunnelRouting_Enable)
|
|
end
|
|
cursor:foreach("yggdrasil", "ipv6_remote_subnet", function (s)
|
|
obj.TunnelRouting.IPv6RemoteSubnets[s.subnet] = s.key
|
|
end)
|
|
cursor:foreach("yggdrasil", "ipv6_local_subnet", function (s)
|
|
table.insert(obj.TunnelRouting.IPv6LocalSubnets, s.subnet)
|
|
end)
|
|
cursor:foreach("yggdrasil", "ipv4_remote_subnet", function (s)
|
|
obj.TunnelRouting.IPv4RemoteSubnets[s.subnet] = s.key
|
|
end)
|
|
cursor:foreach("yggdrasil", "ipv4_local_subnet", function (s)
|
|
table.insert(obj.TunnelRouting.IPv4LocalSubnets, s.subnet)
|
|
end)
|
|
-- /tunnel routing config
|
|
|
|
if config.SwitchOptions_MaxTotalQueueSize ~= nil then
|
|
obj.SwitchOptions.MaxTotalQueueSize = tonumber(config.SwitchOptions_MaxTotalQueueSize)
|
|
end
|
|
|
|
return obj
|
|
end
|
|
|
|
--- Parse and save updated configuration from JSON input
|
|
--
|
|
-- Transforms general settings into UCI sections, and replaces the UCI config's
|
|
-- contents with them.
|
|
-- @param table JSON input
|
|
-- @return Boolean whether saving succeeded
|
|
function UCI.set(obj)
|
|
local cursor = uci.cursor()
|
|
|
|
for i, section in pairs(cursor:get_all("yggdrasil")) do
|
|
cursor:delete("yggdrasil", section[".name"])
|
|
end
|
|
|
|
|
|
cursor:set("yggdrasil", "yggdrasil", "yggdrasil")
|
|
cursor:set("yggdrasil", "yggdrasil", "EncryptionPublicKey", obj.EncryptionPublicKey)
|
|
cursor:set("yggdrasil", "yggdrasil", "EncryptionPrivateKey", obj.EncryptionPrivateKey)
|
|
cursor:set("yggdrasil", "yggdrasil", "SigningPublicKey", obj.SigningPublicKey)
|
|
cursor:set("yggdrasil", "yggdrasil", "SigningPrivateKey", obj.SigningPrivateKey)
|
|
cursor:set("yggdrasil", "yggdrasil", "AdminListen", obj.AdminListen)
|
|
cursor:set("yggdrasil", "yggdrasil", "IfName", obj.IfName)
|
|
cursor:set("yggdrasil", "yggdrasil", "NodeInfoPrivacy", to_int(obj.NodeInfoPrivacy))
|
|
cursor:set("yggdrasil", "yggdrasil", "NodeInfo", dkjson.encode(obj.NodeInfo))
|
|
cursor:set("yggdrasil", "yggdrasil", "IfTAPMode", to_int(obj.IfTAPMode))
|
|
cursor:set("yggdrasil", "yggdrasil", "LinkLocalTCPPort", obj.LinkLocalTCPPort)
|
|
cursor:set("yggdrasil", "yggdrasil", "IfMTU", obj.IfMTU)
|
|
|
|
set_values(cursor, "peer", "uri", obj.Peers)
|
|
set_values(cursor, "listen_address", "uri", obj.Listen)
|
|
set_values(cursor, "multicast_interface", "name", obj.MulticastInterfaces)
|
|
set_values(cursor, "allowed_encryption_public_key", "key", obj.AllowedEncryptionPublicKeys)
|
|
|
|
for interface, peers in pairs(obj.InterfacePeers) do
|
|
for _, v in pairs(peers) do
|
|
local name = cursor:add("yggdrasil", "interface_peer")
|
|
cursor:set("yggdrasil", name, "interface", interface)
|
|
cursor:set("yggdrasil", name, "uri", v)
|
|
end
|
|
end
|
|
|
|
-- session firewall config
|
|
cursor:set("yggdrasil", "yggdrasil", "SessionFirewall_Enable", to_int(obj.SessionFirewall.Enable))
|
|
cursor:set("yggdrasil", "yggdrasil", "SessionFirewall_AllowFromDirect", to_int(obj.SessionFirewall.AllowFromDirect))
|
|
cursor:set("yggdrasil", "yggdrasil", "SessionFirewall_AllowFromRemote", to_int(obj.SessionFirewall.AllowFromRemote))
|
|
cursor:set("yggdrasil", "yggdrasil", "SessionFirewall_AlwaysAllowOutbound", to_int(obj.SessionFirewall.AlwaysAllowOutbound))
|
|
set_values(cursor, "whitelisted_encryption_public_key", "key", obj.SessionFirewall.WhitelistEncryptionPublicKeys)
|
|
set_values(cursor, "blacklisted_encryption_public_key", "key", obj.SessionFirewall.BlacklistEncryptionPublicKeys)
|
|
-- /session firewall config
|
|
|
|
-- tunnel routing config
|
|
cursor:set("yggdrasil", "yggdrasil", "TunnelRouting_Enable", to_int(obj.TunnelRouting.Enable))
|
|
if obj.TunnelRouting.IPv6RemoteSubnets ~= nil then
|
|
for subnet, key in pairs(obj.TunnelRouting.IPv6RemoteSubnets) do
|
|
local name = cursor:add("yggdrasil", "ipv6_remote_subnet")
|
|
cursor:set("yggdrasil", name, "subnet", subnet)
|
|
cursor:set("yggdrasil", name, "key", key)
|
|
end
|
|
end
|
|
set_values(cursor, "ipv6_local_subnet", "subnet", obj.TunnelRouting.IPv6LocalSubnets)
|
|
if obj.TunnelRouting.IPv4RemoteSubnets ~= nil then
|
|
for subnet, key in pairs(obj.TunnelRouting.IPv4RemoteSubnets) do
|
|
local name = cursor:add("yggdrasil", "ipv4_remote_subnet")
|
|
cursor:set("yggdrasil", name, "subnet", subnet)
|
|
cursor:set("yggdrasil", name, "key", key)
|
|
end
|
|
end
|
|
set_values(cursor, "ipv4_local_subnet", "subnet", obj.TunnelRouting.IPv4LocalSubnets)
|
|
-- /tunnel routing config
|
|
|
|
cursor:set("yggdrasil", "yggdrasil", "SwitchOptions_MaxTotalQueueSize", obj.SwitchOptions.MaxTotalQueueSize)
|
|
|
|
return cursor:commit("yggdrasil")
|
|
end
|
|
|
|
function set_values(cursor, section_name, parameter, values)
|
|
if values == nil then return false end
|
|
|
|
for k, v in pairs(values) do
|
|
local name = cursor:add("yggdrasil", section_name)
|
|
cursor:set("yggdrasil", name, parameter, v)
|
|
end
|
|
end
|
|
|
|
function to_int(bool) return bool and '1' or '0' end
|
|
|
|
function to_bool(int) return int ~= '0' end
|
|
|
|
function help()
|
|
print("JSON interface to /etc/config/yggdrasil\n\nExamples: \
|
|
ygguci get > /tmp/etc/yggdrasil.conf \
|
|
cat /tmp/etc/yggdrasil.conf | ygguci set \
|
|
uci changes \
|
|
ygguci get | yggdrasil -useconf")
|
|
end
|
|
|
|
-- main
|
|
|
|
if arg[1] == "get" then
|
|
local json = dkjson.encode(UCI.get(), { indent = true })
|
|
print(json)
|
|
elseif arg[1] == "set" then
|
|
local json = io.stdin:read("*a")
|
|
local obj, pos, err = dkjson.decode(json, 1, nil)
|
|
|
|
if obj then
|
|
UCI.set(obj)
|
|
else
|
|
print("dkjson: " .. err)
|
|
os.exit(1)
|
|
end
|
|
else
|
|
help()
|
|
end
|