2023-05-21 12:37:59 -04:00
|
|
|
package db
|
2020-06-21 06:32:08 -04:00
|
|
|
|
|
|
|
import (
|
2022-04-16 06:20:58 -04:00
|
|
|
"errors"
|
2020-06-21 06:32:08 -04:00
|
|
|
"fmt"
|
2022-09-01 18:04:31 -04:00
|
|
|
"net/netip"
|
2021-02-21 18:53:37 -05:00
|
|
|
"sort"
|
2021-10-02 17:03:34 -04:00
|
|
|
"strings"
|
2020-06-21 06:32:08 -04:00
|
|
|
"time"
|
|
|
|
|
2023-05-21 12:37:59 -04:00
|
|
|
"github.com/juanfont/headscale/hscontrol/types"
|
2023-05-11 03:09:18 -04:00
|
|
|
"github.com/juanfont/headscale/hscontrol/util"
|
|
|
|
"github.com/patrickmn/go-cache"
|
2021-08-05 13:11:26 -04:00
|
|
|
"github.com/rs/zerolog/log"
|
2022-11-24 11:00:40 -05:00
|
|
|
"gorm.io/gorm"
|
2023-06-29 06:20:22 -04:00
|
|
|
"tailscale.com/tailcfg"
|
2021-11-26 18:30:42 -05:00
|
|
|
"tailscale.com/types/key"
|
2020-06-21 06:32:08 -04:00
|
|
|
)
|
|
|
|
|
2021-11-15 14:18:14 -05:00
|
|
|
const (
|
2022-09-18 05:37:38 -04:00
|
|
|
MachineGivenNameHashLength = 8
|
|
|
|
MachineGivenNameTrimSize = 2
|
2022-02-23 08:21:46 -05:00
|
|
|
)
|
|
|
|
|
2023-05-11 03:09:18 -04:00
|
|
|
var (
|
|
|
|
ErrMachineNotFound = errors.New("machine not found")
|
|
|
|
ErrMachineRouteIsNotAvailable = errors.New("route is not available on machine")
|
|
|
|
ErrMachineNotFoundRegistrationCache = errors.New(
|
|
|
|
"machine not found in registration cache",
|
|
|
|
)
|
|
|
|
ErrCouldNotConvertMachineInterface = errors.New("failed to convert machine interface")
|
|
|
|
ErrDifferentRegisteredUser = errors.New(
|
|
|
|
"machine was previously registered with a different user",
|
|
|
|
)
|
2021-11-15 14:18:14 -05:00
|
|
|
)
|
|
|
|
|
2023-05-31 12:45:04 -04:00
|
|
|
// ListPeers returns all peers of machine, regardless of any Policy or if the node is expired.
|
2023-05-21 12:37:59 -04:00
|
|
|
func (hsdb *HSDatabase) ListPeers(machine *types.Machine) (types.Machines, error) {
|
2023-07-17 07:35:05 -04:00
|
|
|
hsdb.mu.RLock()
|
|
|
|
defer hsdb.mu.RUnlock()
|
|
|
|
|
|
|
|
return hsdb.listPeers(machine)
|
|
|
|
}
|
|
|
|
|
|
|
|
func (hsdb *HSDatabase) listPeers(machine *types.Machine) (types.Machines, error) {
|
2021-10-02 17:03:34 -04:00
|
|
|
log.Trace().
|
2021-11-04 18:11:38 -04:00
|
|
|
Caller().
|
2022-04-24 15:54:38 -04:00
|
|
|
Str("machine", machine.Hostname).
|
2021-10-04 13:39:01 -04:00
|
|
|
Msg("Finding direct peers")
|
2021-02-23 14:10:58 -05:00
|
|
|
|
2023-05-21 12:37:59 -04:00
|
|
|
machines := types.Machines{}
|
2023-05-31 03:59:15 -04:00
|
|
|
if err := hsdb.db.
|
|
|
|
Preload("AuthKey").
|
|
|
|
Preload("AuthKey.User").
|
|
|
|
Preload("User").
|
|
|
|
Preload("Routes").
|
|
|
|
Where("node_key <> ?",
|
|
|
|
machine.NodeKey).Find(&machines).Error; err != nil {
|
2023-05-21 12:37:59 -04:00
|
|
|
return types.Machines{}, err
|
2020-06-21 06:32:08 -04:00
|
|
|
}
|
|
|
|
|
2021-10-04 13:39:01 -04:00
|
|
|
sort.Slice(machines, func(i, j int) bool { return machines[i].ID < machines[j].ID })
|
2020-06-21 06:32:08 -04:00
|
|
|
|
2021-10-02 17:03:34 -04:00
|
|
|
log.Trace().
|
2021-11-04 18:11:38 -04:00
|
|
|
Caller().
|
2022-04-24 15:54:38 -04:00
|
|
|
Str("machine", machine.Hostname).
|
2022-02-25 04:26:34 -05:00
|
|
|
Msgf("Found peers: %s", machines.String())
|
2021-11-14 10:46:09 -05:00
|
|
|
|
2021-10-04 13:39:01 -04:00
|
|
|
return machines, nil
|
2020-06-21 06:32:08 -04:00
|
|
|
}
|
|
|
|
|
2023-05-21 12:37:59 -04:00
|
|
|
func (hsdb *HSDatabase) ListMachines() ([]types.Machine, error) {
|
2023-07-17 07:35:05 -04:00
|
|
|
hsdb.mu.RLock()
|
|
|
|
defer hsdb.mu.RUnlock()
|
|
|
|
|
|
|
|
return hsdb.listMachines()
|
|
|
|
}
|
|
|
|
|
|
|
|
func (hsdb *HSDatabase) listMachines() ([]types.Machine, error) {
|
2023-05-21 12:37:59 -04:00
|
|
|
machines := []types.Machine{}
|
2023-05-31 03:59:15 -04:00
|
|
|
if err := hsdb.db.
|
|
|
|
Preload("AuthKey").
|
|
|
|
Preload("AuthKey.User").
|
|
|
|
Preload("User").
|
|
|
|
Preload("Routes").
|
|
|
|
Find(&machines).Error; err != nil {
|
2021-11-04 18:11:38 -04:00
|
|
|
return nil, err
|
|
|
|
}
|
2021-11-14 10:46:09 -05:00
|
|
|
|
2021-11-04 18:11:38 -04:00
|
|
|
return machines, nil
|
|
|
|
}
|
|
|
|
|
2023-05-21 12:37:59 -04:00
|
|
|
func (hsdb *HSDatabase) ListMachinesByGivenName(givenName string) (types.Machines, error) {
|
2023-07-17 07:35:05 -04:00
|
|
|
hsdb.mu.RLock()
|
|
|
|
defer hsdb.mu.RUnlock()
|
|
|
|
|
|
|
|
return hsdb.listMachinesByGivenName(givenName)
|
|
|
|
}
|
|
|
|
|
|
|
|
func (hsdb *HSDatabase) listMachinesByGivenName(givenName string) (types.Machines, error) {
|
2023-05-21 12:37:59 -04:00
|
|
|
machines := types.Machines{}
|
2023-05-31 03:59:15 -04:00
|
|
|
if err := hsdb.db.
|
|
|
|
Preload("AuthKey").
|
|
|
|
Preload("AuthKey.User").
|
|
|
|
Preload("User").
|
|
|
|
Preload("Routes").
|
|
|
|
Where("given_name = ?", givenName).Find(&machines).Error; err != nil {
|
2022-10-21 08:42:37 -04:00
|
|
|
return nil, err
|
|
|
|
}
|
|
|
|
|
|
|
|
return machines, nil
|
|
|
|
}
|
|
|
|
|
2023-01-17 11:43:44 -05:00
|
|
|
// GetMachine finds a Machine by name and user and returns the Machine struct.
|
2023-05-21 12:37:59 -04:00
|
|
|
func (hsdb *HSDatabase) GetMachine(user string, name string) (*types.Machine, error) {
|
2023-07-17 07:35:05 -04:00
|
|
|
hsdb.mu.RLock()
|
|
|
|
defer hsdb.mu.RUnlock()
|
|
|
|
|
2023-05-11 03:09:18 -04:00
|
|
|
machines, err := hsdb.ListMachinesByUser(user)
|
2021-03-14 06:38:42 -04:00
|
|
|
if err != nil {
|
|
|
|
return nil, err
|
|
|
|
}
|
|
|
|
|
2021-11-04 18:11:38 -04:00
|
|
|
for _, m := range machines {
|
2022-04-24 15:54:38 -04:00
|
|
|
if m.Hostname == name {
|
2023-08-09 16:20:05 -04:00
|
|
|
return m, nil
|
2021-03-14 06:38:42 -04:00
|
|
|
}
|
|
|
|
}
|
2021-11-14 10:46:09 -05:00
|
|
|
|
2022-07-29 11:35:21 -04:00
|
|
|
return nil, ErrMachineNotFound
|
2021-03-14 06:38:42 -04:00
|
|
|
}
|
|
|
|
|
2023-01-17 11:43:44 -05:00
|
|
|
// GetMachineByGivenName finds a Machine by given name and user and returns the Machine struct.
|
2023-05-21 12:37:59 -04:00
|
|
|
func (hsdb *HSDatabase) GetMachineByGivenName(
|
|
|
|
user string,
|
|
|
|
givenName string,
|
|
|
|
) (*types.Machine, error) {
|
2023-07-17 07:35:05 -04:00
|
|
|
hsdb.mu.RLock()
|
|
|
|
defer hsdb.mu.RUnlock()
|
2022-08-31 07:41:01 -04:00
|
|
|
|
2023-07-17 07:35:05 -04:00
|
|
|
machine := types.Machine{}
|
|
|
|
if err := hsdb.db.
|
|
|
|
Preload("AuthKey").
|
|
|
|
Preload("AuthKey.User").
|
|
|
|
Preload("User").
|
|
|
|
Preload("Routes").
|
|
|
|
Where("given_name = ?", givenName).First(&machine).Error; err != nil {
|
|
|
|
return nil, err
|
2022-08-31 07:41:01 -04:00
|
|
|
}
|
|
|
|
|
|
|
|
return nil, ErrMachineNotFound
|
|
|
|
}
|
|
|
|
|
2021-11-13 03:39:04 -05:00
|
|
|
// GetMachineByID finds a Machine by ID and returns the Machine struct.
|
2023-05-21 12:37:59 -04:00
|
|
|
func (hsdb *HSDatabase) GetMachineByID(id uint64) (*types.Machine, error) {
|
2023-07-17 07:35:05 -04:00
|
|
|
hsdb.mu.RLock()
|
|
|
|
defer hsdb.mu.RUnlock()
|
|
|
|
|
2023-05-31 09:11:09 -04:00
|
|
|
mach := types.Machine{}
|
2023-05-31 03:59:15 -04:00
|
|
|
if result := hsdb.db.
|
|
|
|
Preload("AuthKey").
|
|
|
|
Preload("AuthKey.User").
|
|
|
|
Preload("User").
|
|
|
|
Preload("Routes").
|
2023-05-31 09:11:09 -04:00
|
|
|
Find(&types.Machine{ID: id}).First(&mach); result.Error != nil {
|
2021-07-16 18:14:22 -04:00
|
|
|
return nil, result.Error
|
|
|
|
}
|
2021-11-14 10:46:09 -05:00
|
|
|
|
2023-05-31 09:11:09 -04:00
|
|
|
return &mach, nil
|
2021-07-16 18:14:22 -04:00
|
|
|
}
|
|
|
|
|
2022-08-10 07:15:31 -04:00
|
|
|
// GetMachineByMachineKey finds a Machine by its MachineKey and returns the Machine struct.
|
2023-05-11 03:09:18 -04:00
|
|
|
func (hsdb *HSDatabase) GetMachineByMachineKey(
|
2021-11-26 18:30:42 -05:00
|
|
|
machineKey key.MachinePublic,
|
2023-05-21 12:37:59 -04:00
|
|
|
) (*types.Machine, error) {
|
2023-07-17 07:35:05 -04:00
|
|
|
hsdb.mu.RLock()
|
|
|
|
defer hsdb.mu.RUnlock()
|
|
|
|
|
2023-05-31 09:11:09 -04:00
|
|
|
mach := types.Machine{}
|
2023-05-31 03:59:15 -04:00
|
|
|
if result := hsdb.db.
|
|
|
|
Preload("AuthKey").
|
|
|
|
Preload("AuthKey.User").
|
|
|
|
Preload("User").
|
|
|
|
Preload("Routes").
|
2023-05-31 09:11:09 -04:00
|
|
|
First(&mach, "machine_key = ?", util.MachinePublicKeyStripPrefix(machineKey)); result.Error != nil {
|
2021-10-02 16:58:28 -04:00
|
|
|
return nil, result.Error
|
|
|
|
}
|
2021-11-14 10:46:09 -05:00
|
|
|
|
2023-05-31 09:11:09 -04:00
|
|
|
return &mach, nil
|
2021-10-02 16:58:28 -04:00
|
|
|
}
|
|
|
|
|
2022-08-10 10:03:33 -04:00
|
|
|
// GetMachineByNodeKey finds a Machine by its current NodeKey.
|
2023-05-11 03:09:18 -04:00
|
|
|
func (hsdb *HSDatabase) GetMachineByNodeKey(
|
2022-08-10 07:15:31 -04:00
|
|
|
nodeKey key.NodePublic,
|
2023-05-21 12:37:59 -04:00
|
|
|
) (*types.Machine, error) {
|
2023-07-17 07:35:05 -04:00
|
|
|
hsdb.mu.RLock()
|
|
|
|
defer hsdb.mu.RUnlock()
|
|
|
|
|
2023-05-21 12:37:59 -04:00
|
|
|
machine := types.Machine{}
|
2023-05-31 03:59:15 -04:00
|
|
|
if result := hsdb.db.
|
|
|
|
Preload("AuthKey").
|
|
|
|
Preload("AuthKey.User").
|
|
|
|
Preload("User").
|
|
|
|
Preload("Routes").
|
|
|
|
First(&machine, "node_key = ?",
|
|
|
|
util.NodePublicKeyStripPrefix(nodeKey)); result.Error != nil {
|
2022-08-10 07:15:31 -04:00
|
|
|
return nil, result.Error
|
|
|
|
}
|
|
|
|
|
|
|
|
return &machine, nil
|
|
|
|
}
|
|
|
|
|
2022-12-09 11:56:43 -05:00
|
|
|
// GetMachineByAnyNodeKey finds a Machine by its MachineKey, its current NodeKey or the old one, and returns the Machine struct.
|
2023-05-11 03:09:18 -04:00
|
|
|
func (hsdb *HSDatabase) GetMachineByAnyKey(
|
2022-12-09 11:56:43 -05:00
|
|
|
machineKey key.MachinePublic, nodeKey key.NodePublic, oldNodeKey key.NodePublic,
|
2023-05-21 12:37:59 -04:00
|
|
|
) (*types.Machine, error) {
|
2023-07-17 07:35:05 -04:00
|
|
|
hsdb.mu.RLock()
|
|
|
|
defer hsdb.mu.RUnlock()
|
|
|
|
|
2023-05-21 12:37:59 -04:00
|
|
|
machine := types.Machine{}
|
2023-05-31 03:59:15 -04:00
|
|
|
if result := hsdb.db.
|
|
|
|
Preload("AuthKey").
|
|
|
|
Preload("AuthKey.User").
|
|
|
|
Preload("User").
|
|
|
|
Preload("Routes").
|
|
|
|
First(&machine, "machine_key = ? OR node_key = ? OR node_key = ?",
|
|
|
|
util.MachinePublicKeyStripPrefix(machineKey),
|
|
|
|
util.NodePublicKeyStripPrefix(nodeKey),
|
|
|
|
util.NodePublicKeyStripPrefix(oldNodeKey)); result.Error != nil {
|
2022-08-13 15:03:02 -04:00
|
|
|
return nil, result.Error
|
|
|
|
}
|
|
|
|
|
|
|
|
return &machine, nil
|
|
|
|
}
|
|
|
|
|
2023-07-17 07:35:05 -04:00
|
|
|
func (hsdb *HSDatabase) MachineReloadFromDatabase(machine *types.Machine) error {
|
|
|
|
hsdb.mu.RLock()
|
|
|
|
defer hsdb.mu.RUnlock()
|
|
|
|
|
2023-05-11 03:09:18 -04:00
|
|
|
if result := hsdb.db.Find(machine).First(&machine); result.Error != nil {
|
2021-08-18 18:17:38 -04:00
|
|
|
return result.Error
|
|
|
|
}
|
2021-11-14 10:46:09 -05:00
|
|
|
|
2021-08-18 18:17:38 -04:00
|
|
|
return nil
|
|
|
|
}
|
|
|
|
|
2022-04-25 15:16:14 -04:00
|
|
|
// SetTags takes a Machine struct pointer and update the forced tags.
|
2023-05-11 03:09:18 -04:00
|
|
|
func (hsdb *HSDatabase) SetTags(
|
2023-05-21 12:37:59 -04:00
|
|
|
machine *types.Machine,
|
2023-05-11 03:09:18 -04:00
|
|
|
tags []string,
|
2023-05-21 12:37:59 -04:00
|
|
|
) error {
|
2023-07-17 07:35:05 -04:00
|
|
|
hsdb.mu.Lock()
|
|
|
|
defer hsdb.mu.Unlock()
|
|
|
|
|
2022-07-25 04:54:51 -04:00
|
|
|
newTags := []string{}
|
|
|
|
for _, tag := range tags {
|
2023-05-11 03:09:18 -04:00
|
|
|
if !util.StringOrPrefixListContains(newTags, tag) {
|
2022-07-25 04:54:51 -04:00
|
|
|
newTags = append(newTags, tag)
|
|
|
|
}
|
|
|
|
}
|
2022-05-30 09:31:06 -04:00
|
|
|
|
2023-07-17 07:35:05 -04:00
|
|
|
if err := hsdb.db.Model(machine).Updates(types.Machine{
|
|
|
|
ForcedTags: newTags,
|
|
|
|
}).Error; err != nil {
|
2022-05-30 09:31:06 -04:00
|
|
|
return fmt.Errorf("failed to update tags for machine in the database: %w", err)
|
|
|
|
}
|
2022-04-15 07:11:41 -04:00
|
|
|
|
2023-06-29 06:20:22 -04:00
|
|
|
hsdb.notifier.NotifyWithIgnore(types.StateUpdate{
|
|
|
|
Type: types.StatePeerChanged,
|
2023-08-09 16:20:05 -04:00
|
|
|
Changed: types.Machines{machine},
|
2023-06-29 06:20:22 -04:00
|
|
|
}, machine.MachineKey)
|
2021-11-22 14:51:16 -05:00
|
|
|
|
2022-05-30 09:31:06 -04:00
|
|
|
return nil
|
2021-11-21 08:40:19 -05:00
|
|
|
}
|
|
|
|
|
2022-04-24 16:10:50 -04:00
|
|
|
// RenameMachine takes a Machine struct and a new GivenName for the machines
|
|
|
|
// and renames it.
|
2023-05-21 12:37:59 -04:00
|
|
|
func (hsdb *HSDatabase) RenameMachine(machine *types.Machine, newName string) error {
|
2023-07-17 07:35:05 -04:00
|
|
|
hsdb.mu.Lock()
|
|
|
|
defer hsdb.mu.Unlock()
|
|
|
|
|
2023-05-21 12:37:59 -04:00
|
|
|
err := util.CheckForFQDNRules(
|
2022-03-13 17:55:36 -04:00
|
|
|
newName,
|
|
|
|
)
|
|
|
|
if err != nil {
|
|
|
|
log.Error().
|
|
|
|
Caller().
|
|
|
|
Str("func", "RenameMachine").
|
2022-04-24 15:54:38 -04:00
|
|
|
Str("machine", machine.Hostname).
|
2022-03-13 17:55:36 -04:00
|
|
|
Str("newName", newName).
|
2023-07-17 07:35:05 -04:00
|
|
|
Err(err).
|
|
|
|
Msg("failed to rename machine")
|
2022-03-13 17:55:36 -04:00
|
|
|
|
2022-04-24 15:54:38 -04:00
|
|
|
return err
|
2022-03-13 17:55:36 -04:00
|
|
|
}
|
2022-04-24 15:54:38 -04:00
|
|
|
machine.GivenName = newName
|
2022-03-13 17:03:20 -04:00
|
|
|
|
2023-07-17 07:35:05 -04:00
|
|
|
if err := hsdb.db.Model(machine).Updates(types.Machine{
|
|
|
|
GivenName: newName,
|
|
|
|
}).Error; err != nil {
|
|
|
|
return fmt.Errorf("failed to rename machine in the database: %w", err)
|
|
|
|
}
|
|
|
|
|
2023-06-29 06:20:22 -04:00
|
|
|
hsdb.notifier.NotifyWithIgnore(types.StateUpdate{
|
|
|
|
Type: types.StatePeerChanged,
|
2023-08-09 16:20:05 -04:00
|
|
|
Changed: types.Machines{machine},
|
2023-06-29 06:20:22 -04:00
|
|
|
}, machine.MachineKey)
|
2022-03-13 17:03:20 -04:00
|
|
|
|
2022-04-24 15:54:38 -04:00
|
|
|
return nil
|
2022-03-13 17:03:20 -04:00
|
|
|
}
|
|
|
|
|
2023-07-17 07:35:05 -04:00
|
|
|
// MachineSetExpiry takes a Machine struct and a new expiry time.
|
|
|
|
func (hsdb *HSDatabase) MachineSetExpiry(machine *types.Machine, expiry time.Time) error {
|
|
|
|
hsdb.mu.Lock()
|
|
|
|
defer hsdb.mu.Unlock()
|
2021-11-22 14:32:11 -05:00
|
|
|
|
2023-07-17 07:35:05 -04:00
|
|
|
return hsdb.machineSetExpiry(machine, expiry)
|
|
|
|
}
|
2021-11-22 14:51:16 -05:00
|
|
|
|
2023-07-17 07:35:05 -04:00
|
|
|
func (hsdb *HSDatabase) machineSetExpiry(machine *types.Machine, expiry time.Time) error {
|
|
|
|
if err := hsdb.db.Model(machine).Updates(types.Machine{
|
2023-09-11 07:23:29 -04:00
|
|
|
Expiry: &expiry,
|
2023-07-17 07:35:05 -04:00
|
|
|
}).Error; err != nil {
|
2022-05-31 05:03:08 -04:00
|
|
|
return fmt.Errorf(
|
|
|
|
"failed to refresh machine (update expiration) in the database: %w",
|
|
|
|
err,
|
|
|
|
)
|
2022-05-30 09:31:06 -04:00
|
|
|
}
|
|
|
|
|
2023-07-17 07:35:05 -04:00
|
|
|
hsdb.notifier.NotifyWithIgnore(types.StateUpdate{
|
|
|
|
Type: types.StatePeerChanged,
|
2023-08-09 16:20:05 -04:00
|
|
|
Changed: types.Machines{machine},
|
2023-07-17 07:35:05 -04:00
|
|
|
}, machine.MachineKey)
|
|
|
|
|
2022-05-30 09:31:06 -04:00
|
|
|
return nil
|
2021-11-22 14:32:11 -05:00
|
|
|
}
|
|
|
|
|
2023-07-17 07:35:05 -04:00
|
|
|
// DeleteMachine deletes a Machine from the database.
|
2023-05-21 12:37:59 -04:00
|
|
|
func (hsdb *HSDatabase) DeleteMachine(machine *types.Machine) error {
|
2023-07-17 07:35:05 -04:00
|
|
|
hsdb.mu.Lock()
|
|
|
|
defer hsdb.mu.Unlock()
|
|
|
|
|
|
|
|
return hsdb.deleteMachine(machine)
|
|
|
|
}
|
|
|
|
|
|
|
|
func (hsdb *HSDatabase) deleteMachine(machine *types.Machine) error {
|
|
|
|
err := hsdb.deleteMachineRoutes(machine)
|
2023-03-06 03:05:40 -05:00
|
|
|
if err != nil {
|
|
|
|
return err
|
|
|
|
}
|
|
|
|
|
2023-07-17 07:35:05 -04:00
|
|
|
// Unscoped causes the machine to be fully removed from the database.
|
|
|
|
if err := hsdb.db.Unscoped().Delete(&machine).Error; err != nil {
|
2021-07-16 18:14:22 -04:00
|
|
|
return err
|
|
|
|
}
|
2021-07-25 11:59:48 -04:00
|
|
|
|
2023-07-17 07:35:05 -04:00
|
|
|
hsdb.notifier.NotifyAll(types.StateUpdate{
|
|
|
|
Type: types.StatePeerRemoved,
|
|
|
|
Removed: []tailcfg.NodeID{tailcfg.NodeID(machine.ID)},
|
|
|
|
})
|
|
|
|
|
2022-02-12 16:04:00 -05:00
|
|
|
return nil
|
2021-07-16 18:14:22 -04:00
|
|
|
}
|
|
|
|
|
2023-09-11 07:18:31 -04:00
|
|
|
// UpdateLastSeen sets a machine's last seen field indicating that we
|
|
|
|
// have recently communicating with this machine.
|
|
|
|
// This is mostly used to indicate if a machine is online and is not
|
|
|
|
// extremely important to make sure is fully correct and to avoid
|
|
|
|
// holding up the hot path, does not contain any locks and isnt
|
|
|
|
// concurrency safe. But that should be ok.
|
|
|
|
func (hsdb *HSDatabase) UpdateLastSeen(machine *types.Machine) error {
|
2023-07-17 07:35:05 -04:00
|
|
|
return hsdb.db.Model(machine).Updates(types.Machine{
|
2023-09-11 07:18:31 -04:00
|
|
|
LastSeen: machine.LastSeen,
|
2022-01-16 05:59:03 -05:00
|
|
|
}).Error
|
|
|
|
}
|
|
|
|
|
2023-05-11 03:09:18 -04:00
|
|
|
func (hsdb *HSDatabase) RegisterMachineFromAuthCallback(
|
|
|
|
cache *cache.Cache,
|
2022-08-10 07:15:31 -04:00
|
|
|
nodeKeyStr string,
|
2023-01-17 11:43:44 -05:00
|
|
|
userName string,
|
2022-12-14 19:10:26 -05:00
|
|
|
machineExpiry *time.Time,
|
2022-02-28 03:06:39 -05:00
|
|
|
registrationMethod string,
|
2023-05-21 12:37:59 -04:00
|
|
|
) (*types.Machine, error) {
|
2023-07-17 07:35:05 -04:00
|
|
|
hsdb.mu.Lock()
|
|
|
|
defer hsdb.mu.Unlock()
|
|
|
|
|
2022-11-05 04:07:22 -04:00
|
|
|
nodeKey := key.NodePublic{}
|
|
|
|
err := nodeKey.UnmarshalText([]byte(nodeKeyStr))
|
|
|
|
if err != nil {
|
|
|
|
return nil, err
|
|
|
|
}
|
|
|
|
|
2022-12-09 11:56:43 -05:00
|
|
|
log.Debug().
|
|
|
|
Str("nodeKey", nodeKey.ShortString()).
|
2023-01-17 11:43:44 -05:00
|
|
|
Str("userName", userName).
|
2022-12-09 11:56:43 -05:00
|
|
|
Str("registrationMethod", registrationMethod).
|
2023-01-11 07:21:30 -05:00
|
|
|
Str("expiresAt", fmt.Sprintf("%v", machineExpiry)).
|
2022-12-09 11:56:43 -05:00
|
|
|
Msg("Registering machine from API/CLI or auth callback")
|
|
|
|
|
2023-05-11 03:09:18 -04:00
|
|
|
if machineInterface, ok := cache.Get(util.NodePublicKeyStripPrefix(nodeKey)); ok {
|
2023-05-21 12:37:59 -04:00
|
|
|
if registrationMachine, ok := machineInterface.(types.Machine); ok {
|
2023-07-17 07:35:05 -04:00
|
|
|
user, err := hsdb.getUser(userName)
|
2022-02-28 11:34:28 -05:00
|
|
|
if err != nil {
|
|
|
|
return nil, fmt.Errorf(
|
2023-01-17 11:43:44 -05:00
|
|
|
"failed to find user in register machine from auth callback, %w",
|
2022-02-28 11:34:28 -05:00
|
|
|
err,
|
|
|
|
)
|
|
|
|
}
|
2021-11-04 18:11:38 -04:00
|
|
|
|
2023-01-17 11:43:44 -05:00
|
|
|
// Registration of expired machine with different user
|
2022-09-18 05:37:38 -04:00
|
|
|
if registrationMachine.ID != 0 &&
|
2023-01-17 11:43:44 -05:00
|
|
|
registrationMachine.UserID != user.ID {
|
|
|
|
return nil, ErrDifferentRegisteredUser
|
2022-08-19 06:38:39 -04:00
|
|
|
}
|
|
|
|
|
2023-01-17 11:43:44 -05:00
|
|
|
registrationMachine.UserID = user.ID
|
2022-02-28 11:34:28 -05:00
|
|
|
registrationMachine.RegisterMethod = registrationMethod
|
2021-11-26 18:30:42 -05:00
|
|
|
|
2022-12-14 19:10:26 -05:00
|
|
|
if machineExpiry != nil {
|
|
|
|
registrationMachine.Expiry = machineExpiry
|
|
|
|
}
|
|
|
|
|
2023-07-17 07:35:05 -04:00
|
|
|
machine, err := hsdb.registerMachine(
|
2022-02-28 11:34:28 -05:00
|
|
|
registrationMachine,
|
2022-02-28 03:06:39 -05:00
|
|
|
)
|
2021-11-04 18:11:38 -04:00
|
|
|
|
2022-08-19 06:38:39 -04:00
|
|
|
if err == nil {
|
2023-05-11 03:09:18 -04:00
|
|
|
cache.Delete(nodeKeyStr)
|
2022-08-19 06:38:39 -04:00
|
|
|
}
|
|
|
|
|
2022-02-28 03:06:39 -05:00
|
|
|
return machine, err
|
|
|
|
} else {
|
2022-07-29 11:35:21 -04:00
|
|
|
return nil, ErrCouldNotConvertMachineInterface
|
2021-11-22 14:32:52 -05:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2022-07-29 11:35:21 -04:00
|
|
|
return nil, ErrMachineNotFoundRegistrationCache
|
2022-02-28 03:06:39 -05:00
|
|
|
}
|
2021-11-22 14:32:52 -05:00
|
|
|
|
2021-11-13 03:39:04 -05:00
|
|
|
// RegisterMachine is executed from the CLI to register a new Machine using its MachineKey.
|
2023-07-17 07:35:05 -04:00
|
|
|
func (hsdb *HSDatabase) RegisterMachine(machine types.Machine) (*types.Machine, error) {
|
|
|
|
hsdb.mu.Lock()
|
|
|
|
defer hsdb.mu.Unlock()
|
|
|
|
|
|
|
|
return hsdb.registerMachine(machine)
|
|
|
|
}
|
|
|
|
|
|
|
|
func (hsdb *HSDatabase) registerMachine(machine types.Machine) (*types.Machine, error) {
|
2022-12-09 11:56:43 -05:00
|
|
|
log.Debug().
|
|
|
|
Str("machine", machine.Hostname).
|
2022-02-28 11:34:28 -05:00
|
|
|
Str("machine_key", machine.MachineKey).
|
2022-12-09 11:56:43 -05:00
|
|
|
Str("node_key", machine.NodeKey).
|
2023-01-17 11:43:44 -05:00
|
|
|
Str("user", machine.User.Name).
|
2021-11-26 18:30:42 -05:00
|
|
|
Msg("Registering machine")
|
2021-11-22 14:32:52 -05:00
|
|
|
|
2022-12-09 11:56:43 -05:00
|
|
|
// If the machine exists and we had already IPs for it, we just save it
|
|
|
|
// so we store the machine.Expire and machine.Nodekey that has been set when
|
|
|
|
// adding it to the registrationCache
|
|
|
|
if len(machine.IPAddresses) > 0 {
|
2023-05-11 03:09:18 -04:00
|
|
|
if err := hsdb.db.Save(&machine).Error; err != nil {
|
2022-12-09 11:56:43 -05:00
|
|
|
return nil, fmt.Errorf("failed register existing machine in the database: %w", err)
|
|
|
|
}
|
|
|
|
|
|
|
|
log.Trace().
|
|
|
|
Caller().
|
|
|
|
Str("machine", machine.Hostname).
|
|
|
|
Str("machine_key", machine.MachineKey).
|
|
|
|
Str("node_key", machine.NodeKey).
|
2023-01-17 11:43:44 -05:00
|
|
|
Str("user", machine.User.Name).
|
2022-12-09 11:56:43 -05:00
|
|
|
Msg("Machine authorized again")
|
|
|
|
|
|
|
|
return &machine, nil
|
|
|
|
}
|
2021-11-04 18:11:38 -04:00
|
|
|
|
2023-05-11 03:09:18 -04:00
|
|
|
hsdb.ipAllocationMutex.Lock()
|
|
|
|
defer hsdb.ipAllocationMutex.Unlock()
|
2022-02-24 08:18:18 -05:00
|
|
|
|
2023-05-11 03:09:18 -04:00
|
|
|
ips, err := hsdb.getAvailableIPs()
|
2021-11-04 18:11:38 -04:00
|
|
|
if err != nil {
|
|
|
|
log.Error().
|
|
|
|
Caller().
|
|
|
|
Err(err).
|
2022-04-24 15:54:38 -04:00
|
|
|
Str("machine", machine.Hostname).
|
2021-11-04 18:11:38 -04:00
|
|
|
Msg("Could not find IP for the new machine")
|
2021-11-14 10:46:09 -05:00
|
|
|
|
2021-11-04 18:11:38 -04:00
|
|
|
return nil, err
|
|
|
|
}
|
|
|
|
|
2022-01-16 08:16:59 -05:00
|
|
|
machine.IPAddresses = ips
|
2022-02-27 12:40:10 -05:00
|
|
|
|
2023-05-11 03:09:18 -04:00
|
|
|
if err := hsdb.db.Save(&machine).Error; err != nil {
|
2022-05-30 09:31:06 -04:00
|
|
|
return nil, fmt.Errorf("failed register(save) machine in the database: %w", err)
|
|
|
|
}
|
2021-11-04 18:11:38 -04:00
|
|
|
|
|
|
|
log.Trace().
|
|
|
|
Caller().
|
2022-04-24 15:54:38 -04:00
|
|
|
Str("machine", machine.Hostname).
|
2023-05-31 03:59:37 -04:00
|
|
|
Str("ip", strings.Join(ips.StringSlice(), ",")).
|
2021-11-04 18:11:38 -04:00
|
|
|
Msg("Machine registered with the database")
|
|
|
|
|
2022-02-28 11:34:28 -05:00
|
|
|
return &machine, nil
|
2021-11-04 18:11:38 -04:00
|
|
|
}
|
|
|
|
|
2023-05-21 12:37:59 -04:00
|
|
|
// MachineSetNodeKey sets the node key of a machine and saves it to the database.
|
|
|
|
func (hsdb *HSDatabase) MachineSetNodeKey(machine *types.Machine, nodeKey key.NodePublic) error {
|
2023-07-17 07:35:05 -04:00
|
|
|
hsdb.mu.Lock()
|
|
|
|
defer hsdb.mu.Unlock()
|
2023-05-21 12:37:59 -04:00
|
|
|
|
2023-07-17 07:35:05 -04:00
|
|
|
if err := hsdb.db.Model(machine).Updates(types.Machine{
|
|
|
|
NodeKey: util.NodePublicKeyStripPrefix(nodeKey),
|
|
|
|
}).Error; err != nil {
|
2023-05-21 12:37:59 -04:00
|
|
|
return err
|
|
|
|
}
|
|
|
|
|
|
|
|
return nil
|
|
|
|
}
|
|
|
|
|
|
|
|
// MachineSetMachineKey sets the machine key of a machine and saves it to the database.
|
|
|
|
func (hsdb *HSDatabase) MachineSetMachineKey(
|
|
|
|
machine *types.Machine,
|
2023-07-17 07:35:05 -04:00
|
|
|
machineKey key.MachinePublic,
|
2023-05-21 12:37:59 -04:00
|
|
|
) error {
|
2023-07-17 07:35:05 -04:00
|
|
|
hsdb.mu.Lock()
|
|
|
|
defer hsdb.mu.Unlock()
|
2023-05-21 12:37:59 -04:00
|
|
|
|
2023-07-17 07:35:05 -04:00
|
|
|
if err := hsdb.db.Model(machine).Updates(types.Machine{
|
|
|
|
MachineKey: util.MachinePublicKeyStripPrefix(machineKey),
|
|
|
|
}).Error; err != nil {
|
2023-05-21 12:37:59 -04:00
|
|
|
return err
|
|
|
|
}
|
|
|
|
|
|
|
|
return nil
|
|
|
|
}
|
|
|
|
|
|
|
|
// MachineSave saves a machine object to the database, prefer to use a specific save method rather
|
|
|
|
// than this. It is intended to be used when we are changing or.
|
|
|
|
func (hsdb *HSDatabase) MachineSave(machine *types.Machine) error {
|
2023-07-17 07:35:05 -04:00
|
|
|
hsdb.mu.Lock()
|
|
|
|
defer hsdb.mu.Unlock()
|
|
|
|
|
2023-05-21 12:37:59 -04:00
|
|
|
if err := hsdb.db.Save(machine).Error; err != nil {
|
|
|
|
return err
|
|
|
|
}
|
|
|
|
|
|
|
|
return nil
|
|
|
|
}
|
|
|
|
|
2022-11-24 11:00:40 -05:00
|
|
|
// GetAdvertisedRoutes returns the routes that are be advertised by the given machine.
|
2023-05-21 12:37:59 -04:00
|
|
|
func (hsdb *HSDatabase) GetAdvertisedRoutes(machine *types.Machine) ([]netip.Prefix, error) {
|
2023-07-17 07:35:05 -04:00
|
|
|
hsdb.mu.RLock()
|
|
|
|
defer hsdb.mu.RUnlock()
|
|
|
|
|
|
|
|
return hsdb.getAdvertisedRoutes(machine)
|
|
|
|
}
|
|
|
|
|
|
|
|
func (hsdb *HSDatabase) getAdvertisedRoutes(machine *types.Machine) ([]netip.Prefix, error) {
|
2023-05-21 12:37:59 -04:00
|
|
|
routes := types.Routes{}
|
2022-11-24 11:00:40 -05:00
|
|
|
|
2023-05-11 03:09:18 -04:00
|
|
|
err := hsdb.db.
|
2022-11-24 11:00:40 -05:00
|
|
|
Preload("Machine").
|
|
|
|
Where("machine_id = ? AND advertised = ?", machine.ID, true).Find(&routes).Error
|
|
|
|
if err != nil && !errors.Is(err, gorm.ErrRecordNotFound) {
|
|
|
|
log.Error().
|
|
|
|
Caller().
|
|
|
|
Err(err).
|
|
|
|
Str("machine", machine.Hostname).
|
|
|
|
Msg("Could not get advertised routes for machine")
|
2022-11-25 10:29:45 -05:00
|
|
|
|
2022-11-24 11:00:40 -05:00
|
|
|
return nil, err
|
|
|
|
}
|
|
|
|
|
|
|
|
prefixes := []netip.Prefix{}
|
|
|
|
for _, route := range routes {
|
|
|
|
prefixes = append(prefixes, netip.Prefix(route.Prefix))
|
|
|
|
}
|
|
|
|
|
|
|
|
return prefixes, nil
|
2021-11-04 18:11:38 -04:00
|
|
|
}
|
|
|
|
|
2022-11-24 11:00:40 -05:00
|
|
|
// GetEnabledRoutes returns the routes that are enabled for the machine.
|
2023-05-21 12:37:59 -04:00
|
|
|
func (hsdb *HSDatabase) GetEnabledRoutes(machine *types.Machine) ([]netip.Prefix, error) {
|
2023-07-17 07:35:05 -04:00
|
|
|
hsdb.mu.RLock()
|
|
|
|
defer hsdb.mu.RUnlock()
|
|
|
|
|
|
|
|
return hsdb.getEnabledRoutes(machine)
|
|
|
|
}
|
|
|
|
|
|
|
|
func (hsdb *HSDatabase) getEnabledRoutes(machine *types.Machine) ([]netip.Prefix, error) {
|
2023-05-21 12:37:59 -04:00
|
|
|
routes := types.Routes{}
|
2022-11-24 11:00:40 -05:00
|
|
|
|
2023-05-11 03:09:18 -04:00
|
|
|
err := hsdb.db.
|
2022-11-24 11:00:40 -05:00
|
|
|
Preload("Machine").
|
|
|
|
Where("machine_id = ? AND advertised = ? AND enabled = ?", machine.ID, true, true).
|
|
|
|
Find(&routes).Error
|
|
|
|
if err != nil && !errors.Is(err, gorm.ErrRecordNotFound) {
|
|
|
|
log.Error().
|
|
|
|
Caller().
|
|
|
|
Err(err).
|
|
|
|
Str("machine", machine.Hostname).
|
|
|
|
Msg("Could not get enabled routes for machine")
|
2022-11-25 10:29:45 -05:00
|
|
|
|
2022-11-24 11:00:40 -05:00
|
|
|
return nil, err
|
|
|
|
}
|
|
|
|
|
|
|
|
prefixes := []netip.Prefix{}
|
|
|
|
for _, route := range routes {
|
|
|
|
prefixes = append(prefixes, netip.Prefix(route.Prefix))
|
|
|
|
}
|
|
|
|
|
|
|
|
return prefixes, nil
|
2021-11-04 18:11:38 -04:00
|
|
|
}
|
|
|
|
|
2023-05-21 12:37:59 -04:00
|
|
|
func (hsdb *HSDatabase) IsRoutesEnabled(machine *types.Machine, routeStr string) bool {
|
2023-07-17 07:35:05 -04:00
|
|
|
hsdb.mu.RLock()
|
|
|
|
defer hsdb.mu.RUnlock()
|
|
|
|
|
2022-09-01 18:04:31 -04:00
|
|
|
route, err := netip.ParsePrefix(routeStr)
|
2021-11-04 18:11:38 -04:00
|
|
|
if err != nil {
|
|
|
|
return false
|
|
|
|
}
|
|
|
|
|
2023-07-17 07:35:05 -04:00
|
|
|
enabledRoutes, err := hsdb.getEnabledRoutes(machine)
|
2022-11-24 11:00:40 -05:00
|
|
|
if err != nil {
|
|
|
|
log.Error().Err(err).Msg("Could not get enabled routes")
|
2022-11-25 10:29:45 -05:00
|
|
|
|
2022-11-24 11:00:40 -05:00
|
|
|
return false
|
|
|
|
}
|
2021-11-04 18:11:38 -04:00
|
|
|
|
|
|
|
for _, enabledRoute := range enabledRoutes {
|
|
|
|
if route == enabledRoute {
|
|
|
|
return true
|
|
|
|
}
|
|
|
|
}
|
2021-11-14 10:46:09 -05:00
|
|
|
|
2021-11-04 18:11:38 -04:00
|
|
|
return false
|
|
|
|
}
|
|
|
|
|
2023-06-29 06:20:22 -04:00
|
|
|
func OnlineMachineMap(peers types.Machines) map[tailcfg.NodeID]bool {
|
|
|
|
ret := make(map[tailcfg.NodeID]bool)
|
|
|
|
|
|
|
|
for _, peer := range peers {
|
|
|
|
ret[tailcfg.NodeID(peer.ID)] = peer.IsOnline()
|
|
|
|
}
|
|
|
|
|
|
|
|
return ret
|
|
|
|
}
|
|
|
|
|
|
|
|
func (hsdb *HSDatabase) ListOnlineMachines(
|
|
|
|
machine *types.Machine,
|
|
|
|
) (map[tailcfg.NodeID]bool, error) {
|
2023-07-17 07:35:05 -04:00
|
|
|
hsdb.mu.RLock()
|
|
|
|
defer hsdb.mu.RUnlock()
|
|
|
|
|
|
|
|
peers, err := hsdb.listPeers(machine)
|
2023-06-29 06:20:22 -04:00
|
|
|
if err != nil {
|
|
|
|
return nil, err
|
|
|
|
}
|
|
|
|
|
|
|
|
return OnlineMachineMap(peers), nil
|
|
|
|
}
|
|
|
|
|
2023-01-22 17:39:42 -05:00
|
|
|
// enableRoutes enables new routes based on a list of new routes.
|
2023-05-21 12:37:59 -04:00
|
|
|
func (hsdb *HSDatabase) enableRoutes(machine *types.Machine, routeStrs ...string) error {
|
2022-09-01 18:04:31 -04:00
|
|
|
newRoutes := make([]netip.Prefix, len(routeStrs))
|
2021-11-04 18:11:38 -04:00
|
|
|
for index, routeStr := range routeStrs {
|
2022-09-01 18:04:31 -04:00
|
|
|
route, err := netip.ParsePrefix(routeStr)
|
2021-11-04 18:11:38 -04:00
|
|
|
if err != nil {
|
|
|
|
return err
|
|
|
|
}
|
|
|
|
|
|
|
|
newRoutes[index] = route
|
|
|
|
}
|
|
|
|
|
2023-07-17 07:35:05 -04:00
|
|
|
advertisedRoutes, err := hsdb.getAdvertisedRoutes(machine)
|
2022-11-24 11:00:40 -05:00
|
|
|
if err != nil {
|
|
|
|
return err
|
|
|
|
}
|
|
|
|
|
2021-11-04 18:11:38 -04:00
|
|
|
for _, newRoute := range newRoutes {
|
2023-05-11 03:09:18 -04:00
|
|
|
if !util.StringOrPrefixListContains(advertisedRoutes, newRoute) {
|
2021-11-13 03:36:45 -05:00
|
|
|
return fmt.Errorf(
|
2021-11-15 14:18:14 -05:00
|
|
|
"route (%s) is not available on node %s: %w",
|
2022-04-24 15:54:38 -04:00
|
|
|
machine.Hostname,
|
2022-07-29 11:35:21 -04:00
|
|
|
newRoute, ErrMachineRouteIsNotAvailable,
|
2021-11-13 03:36:45 -05:00
|
|
|
)
|
2021-11-04 18:11:38 -04:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2022-11-24 11:00:40 -05:00
|
|
|
// Separate loop so we don't leave things in a half-updated state
|
|
|
|
for _, prefix := range newRoutes {
|
2023-05-21 12:37:59 -04:00
|
|
|
route := types.Route{}
|
2023-05-11 03:09:18 -04:00
|
|
|
err := hsdb.db.Preload("Machine").
|
2023-05-21 12:37:59 -04:00
|
|
|
Where("machine_id = ? AND prefix = ?", machine.ID, types.IPPrefix(prefix)).
|
2022-11-24 11:00:40 -05:00
|
|
|
First(&route).Error
|
|
|
|
if err == nil {
|
|
|
|
route.Enabled = true
|
2022-05-30 09:31:06 -04:00
|
|
|
|
2022-11-24 11:00:40 -05:00
|
|
|
// Mark already as primary if there is only this node offering this subnet
|
|
|
|
// (and is not an exit route)
|
2023-05-21 12:37:59 -04:00
|
|
|
if !route.IsExitRoute() {
|
2023-05-11 03:09:18 -04:00
|
|
|
route.IsPrimary = hsdb.isUniquePrefix(route)
|
2022-11-24 11:00:40 -05:00
|
|
|
}
|
|
|
|
|
2023-05-11 03:09:18 -04:00
|
|
|
err = hsdb.db.Save(&route).Error
|
2022-11-24 11:00:40 -05:00
|
|
|
if err != nil {
|
|
|
|
return fmt.Errorf("failed to enable route: %w", err)
|
|
|
|
}
|
|
|
|
} else {
|
|
|
|
return fmt.Errorf("failed to find route: %w", err)
|
|
|
|
}
|
2022-05-30 09:31:06 -04:00
|
|
|
}
|
2021-11-04 18:11:38 -04:00
|
|
|
|
2023-06-29 06:20:22 -04:00
|
|
|
hsdb.notifier.NotifyWithIgnore(types.StateUpdate{
|
|
|
|
Type: types.StatePeerChanged,
|
2023-08-09 16:20:05 -04:00
|
|
|
Changed: types.Machines{machine},
|
2023-06-29 06:20:22 -04:00
|
|
|
}, machine.MachineKey)
|
2022-12-20 16:03:15 -05:00
|
|
|
|
2021-11-04 18:11:38 -04:00
|
|
|
return nil
|
|
|
|
}
|
|
|
|
|
2023-07-17 07:35:05 -04:00
|
|
|
func generateGivenName(suppliedName string, randomSuffix bool) (string, error) {
|
2023-06-12 09:29:34 -04:00
|
|
|
normalizedHostname, err := util.NormalizeToFQDNRulesConfigFromViper(
|
2022-05-16 14:30:43 -04:00
|
|
|
suppliedName,
|
|
|
|
)
|
|
|
|
if err != nil {
|
|
|
|
return "", err
|
|
|
|
}
|
|
|
|
|
2022-08-31 07:41:01 -04:00
|
|
|
if randomSuffix {
|
|
|
|
// Trim if a hostname will be longer than 63 chars after adding the hash.
|
2023-05-21 12:37:59 -04:00
|
|
|
trimmedHostnameLength := util.LabelHostnameLength - MachineGivenNameHashLength - MachineGivenNameTrimSize
|
2022-08-31 07:41:01 -04:00
|
|
|
if len(normalizedHostname) > trimmedHostnameLength {
|
|
|
|
normalizedHostname = normalizedHostname[:trimmedHostnameLength]
|
|
|
|
}
|
|
|
|
|
2023-05-11 03:09:18 -04:00
|
|
|
suffix, err := util.GenerateRandomStringDNSSafe(MachineGivenNameHashLength)
|
2022-08-31 07:41:01 -04:00
|
|
|
if err != nil {
|
|
|
|
return "", err
|
|
|
|
}
|
|
|
|
|
|
|
|
normalizedHostname += "-" + suffix
|
|
|
|
}
|
|
|
|
|
|
|
|
return normalizedHostname, nil
|
|
|
|
}
|
|
|
|
|
2023-05-11 03:09:18 -04:00
|
|
|
func (hsdb *HSDatabase) GenerateGivenName(machineKey string, suppliedName string) (string, error) {
|
2023-07-17 07:35:05 -04:00
|
|
|
hsdb.mu.RLock()
|
|
|
|
defer hsdb.mu.RUnlock()
|
|
|
|
|
|
|
|
givenName, err := generateGivenName(suppliedName, false)
|
2022-05-16 14:30:43 -04:00
|
|
|
if err != nil {
|
|
|
|
return "", err
|
|
|
|
}
|
|
|
|
|
2022-08-31 07:41:01 -04:00
|
|
|
// Tailscale rules (may differ) https://tailscale.com/kb/1098/machine-names/
|
2023-07-17 07:35:05 -04:00
|
|
|
machines, err := hsdb.listMachinesByGivenName(givenName)
|
2022-10-21 08:42:37 -04:00
|
|
|
if err != nil {
|
|
|
|
return "", err
|
|
|
|
}
|
2022-08-31 07:41:01 -04:00
|
|
|
|
2022-10-21 08:42:37 -04:00
|
|
|
for _, machine := range machines {
|
|
|
|
if machine.MachineKey != machineKey && machine.GivenName == givenName {
|
2023-07-17 07:35:05 -04:00
|
|
|
postfixedName, err := generateGivenName(suppliedName, true)
|
2022-10-21 08:42:37 -04:00
|
|
|
if err != nil {
|
|
|
|
return "", err
|
|
|
|
}
|
|
|
|
|
|
|
|
givenName = postfixedName
|
|
|
|
}
|
2022-05-16 14:30:43 -04:00
|
|
|
}
|
|
|
|
|
2022-08-31 07:41:01 -04:00
|
|
|
return givenName, nil
|
2022-05-16 14:30:43 -04:00
|
|
|
}
|
2023-04-16 06:26:35 -04:00
|
|
|
|
2023-05-21 12:37:59 -04:00
|
|
|
func (hsdb *HSDatabase) ExpireEphemeralMachines(inactivityThreshhold time.Duration) {
|
2023-07-17 07:35:05 -04:00
|
|
|
hsdb.mu.Lock()
|
|
|
|
defer hsdb.mu.Unlock()
|
|
|
|
|
|
|
|
users, err := hsdb.listUsers()
|
2023-05-21 12:37:59 -04:00
|
|
|
if err != nil {
|
|
|
|
log.Error().Err(err).Msg("Error listing users")
|
|
|
|
|
|
|
|
return
|
|
|
|
}
|
2023-04-16 06:26:35 -04:00
|
|
|
|
2023-05-21 12:37:59 -04:00
|
|
|
for _, user := range users {
|
2023-07-17 07:35:05 -04:00
|
|
|
machines, err := hsdb.listMachinesByUser(user.Name)
|
2023-05-21 12:37:59 -04:00
|
|
|
if err != nil {
|
|
|
|
log.Error().
|
|
|
|
Err(err).
|
|
|
|
Str("user", user.Name).
|
|
|
|
Msg("Error listing machines in user")
|
|
|
|
|
|
|
|
return
|
|
|
|
}
|
|
|
|
|
2023-06-29 06:20:22 -04:00
|
|
|
expired := make([]tailcfg.NodeID, 0)
|
2023-05-21 12:37:59 -04:00
|
|
|
for idx, machine := range machines {
|
|
|
|
if machine.IsEphemeral() && machine.LastSeen != nil &&
|
|
|
|
time.Now().
|
|
|
|
After(machine.LastSeen.Add(inactivityThreshhold)) {
|
2023-06-29 06:20:22 -04:00
|
|
|
expired = append(expired, tailcfg.NodeID(machine.ID))
|
|
|
|
|
2023-05-21 12:37:59 -04:00
|
|
|
log.Info().
|
|
|
|
Str("machine", machine.Hostname).
|
|
|
|
Msg("Ephemeral client removed from database")
|
|
|
|
|
2023-08-09 16:20:05 -04:00
|
|
|
err = hsdb.deleteMachine(machines[idx])
|
2023-05-21 12:37:59 -04:00
|
|
|
if err != nil {
|
|
|
|
log.Error().
|
|
|
|
Err(err).
|
|
|
|
Str("machine", machine.Hostname).
|
|
|
|
Msg("🤮 Cannot delete ephemeral machine from the database")
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2023-06-29 06:20:22 -04:00
|
|
|
if len(expired) > 0 {
|
|
|
|
hsdb.notifier.NotifyAll(types.StateUpdate{
|
|
|
|
Type: types.StatePeerRemoved,
|
|
|
|
Removed: expired,
|
|
|
|
})
|
2023-05-21 12:37:59 -04:00
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2023-06-21 05:29:52 -04:00
|
|
|
func (hsdb *HSDatabase) ExpireExpiredMachines(lastCheck time.Time) time.Time {
|
2023-07-17 07:35:05 -04:00
|
|
|
hsdb.mu.Lock()
|
|
|
|
defer hsdb.mu.Unlock()
|
|
|
|
|
2023-06-21 05:29:52 -04:00
|
|
|
// use the time of the start of the function to ensure we
|
|
|
|
// dont miss some machines by returning it _after_ we have
|
|
|
|
// checked everything.
|
|
|
|
started := time.Now()
|
|
|
|
|
2023-07-17 07:35:05 -04:00
|
|
|
users, err := hsdb.listUsers()
|
2023-05-21 12:37:59 -04:00
|
|
|
if err != nil {
|
|
|
|
log.Error().Err(err).Msg("Error listing users")
|
|
|
|
|
2023-06-21 05:29:52 -04:00
|
|
|
return time.Unix(0, 0)
|
2023-05-21 12:37:59 -04:00
|
|
|
}
|
|
|
|
|
|
|
|
for _, user := range users {
|
2023-07-17 07:35:05 -04:00
|
|
|
machines, err := hsdb.listMachinesByUser(user.Name)
|
2023-05-21 12:37:59 -04:00
|
|
|
if err != nil {
|
|
|
|
log.Error().
|
|
|
|
Err(err).
|
|
|
|
Str("user", user.Name).
|
|
|
|
Msg("Error listing machines in user")
|
|
|
|
|
2023-06-21 05:29:52 -04:00
|
|
|
return time.Unix(0, 0)
|
2023-05-21 12:37:59 -04:00
|
|
|
}
|
|
|
|
|
2023-06-29 06:20:22 -04:00
|
|
|
expired := make([]tailcfg.NodeID, 0)
|
2023-05-21 12:37:59 -04:00
|
|
|
for index, machine := range machines {
|
|
|
|
if machine.IsExpired() &&
|
2023-06-21 05:29:52 -04:00
|
|
|
machine.Expiry.After(lastCheck) {
|
2023-06-29 06:20:22 -04:00
|
|
|
expired = append(expired, tailcfg.NodeID(machine.ID))
|
2023-05-21 12:37:59 -04:00
|
|
|
|
2023-07-17 07:35:05 -04:00
|
|
|
now := time.Now()
|
2023-08-09 16:20:05 -04:00
|
|
|
err := hsdb.machineSetExpiry(machines[index], now)
|
2023-05-21 12:37:59 -04:00
|
|
|
if err != nil {
|
|
|
|
log.Error().
|
|
|
|
Err(err).
|
|
|
|
Str("machine", machine.Hostname).
|
|
|
|
Str("name", machine.GivenName).
|
|
|
|
Msg("🤮 Cannot expire machine")
|
|
|
|
} else {
|
|
|
|
log.Info().
|
|
|
|
Str("machine", machine.Hostname).
|
|
|
|
Str("name", machine.GivenName).
|
|
|
|
Msg("Machine successfully expired")
|
|
|
|
}
|
2023-04-16 06:26:35 -04:00
|
|
|
}
|
|
|
|
}
|
2023-05-21 12:37:59 -04:00
|
|
|
|
2023-06-29 06:20:22 -04:00
|
|
|
if len(expired) > 0 {
|
|
|
|
hsdb.notifier.NotifyAll(types.StateUpdate{
|
|
|
|
Type: types.StatePeerRemoved,
|
|
|
|
Removed: expired,
|
|
|
|
})
|
2023-05-21 12:37:59 -04:00
|
|
|
}
|
|
|
|
}
|
2023-06-21 05:29:52 -04:00
|
|
|
|
|
|
|
return started
|
2023-05-21 12:37:59 -04:00
|
|
|
}
|