mirror of
https://github.com/safing/portmaster
synced 2025-09-01 18:19:12 +00:00
108 lines
2.8 KiB
Go
108 lines
2.8 KiB
Go
package captain
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
"os"
|
|
"sync"
|
|
|
|
"github.com/safing/portmaster/service/mgr"
|
|
"github.com/safing/portmaster/service/updates"
|
|
"github.com/safing/portmaster/spn/conf"
|
|
"github.com/safing/portmaster/spn/hub"
|
|
"github.com/safing/portmaster/spn/navigator"
|
|
"github.com/safing/portmaster/spn/ships"
|
|
)
|
|
|
|
var (
|
|
intelResource *updates.Artifact
|
|
intelResourceName = "main-intel.yaml"
|
|
intelResourceMapName = "main"
|
|
intelResourceUpdateLock sync.Mutex
|
|
)
|
|
|
|
func registerIntelUpdateHook() error {
|
|
module.instance.IntelUpdates().EventResourcesUpdated.AddCallback("update SPN intel", func(wc *mgr.WorkerCtx, s struct{}) (cancel bool, err error) {
|
|
return false, updateSPNIntel(wc.Ctx(), nil)
|
|
})
|
|
|
|
module.instance.Config().EventConfigChange.AddCallback("update SPN intel", func(wc *mgr.WorkerCtx, s struct{}) (cancel bool, err error) {
|
|
return false, updateSPNIntel(wc.Ctx(), nil)
|
|
})
|
|
|
|
return nil
|
|
}
|
|
|
|
func updateSPNIntel(_ context.Context, _ interface{}) (err error) {
|
|
intelResourceUpdateLock.Lock()
|
|
defer intelResourceUpdateLock.Unlock()
|
|
|
|
// Only update SPN intel when using the matching map.
|
|
if conf.MainMapName != intelResourceMapName {
|
|
return fmt.Errorf("intel resource not for map %q", conf.MainMapName)
|
|
}
|
|
|
|
// Get possibly updated file.
|
|
file, err := module.instance.IntelUpdates().GetFile(intelResourceName)
|
|
if err != nil {
|
|
return fmt.Errorf("failed to get SPN intel update: %w", err)
|
|
}
|
|
|
|
// Check if file is newer.
|
|
// Continue on check failure.
|
|
newer, ok := file.IsNewerThan(intelResource)
|
|
if ok && !newer {
|
|
return nil
|
|
}
|
|
|
|
// Load intel file from disk.
|
|
intelData, err := os.ReadFile(file.Path())
|
|
if err != nil {
|
|
return fmt.Errorf("failed to load SPN intel update: %w", err)
|
|
}
|
|
|
|
// Parse and apply intel data.
|
|
intel, err := hub.ParseIntel(intelData)
|
|
if err != nil {
|
|
return fmt.Errorf("failed to parse SPN intel update: %w", err)
|
|
}
|
|
|
|
// Apply new intel.
|
|
setVirtualNetworkConfig(intel.VirtualNetworks)
|
|
err = navigator.Main.UpdateIntel(intel, cfgOptionTrustNodeNodes())
|
|
if err != nil {
|
|
return fmt.Errorf("failed to update intel on map: %w", err)
|
|
}
|
|
|
|
intelResource = file
|
|
return nil
|
|
}
|
|
|
|
func resetSPNIntel() {
|
|
intelResourceUpdateLock.Lock()
|
|
defer intelResourceUpdateLock.Unlock()
|
|
|
|
intelResource = nil
|
|
}
|
|
|
|
func setVirtualNetworkConfig(configs []*hub.VirtualNetworkConfig) {
|
|
// Do nothing if not public Hub.
|
|
if !conf.PublicHub() {
|
|
return
|
|
}
|
|
// Reset if there are no virtual networks configured.
|
|
if len(configs) == 0 {
|
|
ships.SetVirtualNetworkConfig(nil)
|
|
}
|
|
|
|
// Check if we are in a virtual network.
|
|
for _, config := range configs {
|
|
if _, ok := config.Mapping[publicIdentity.Hub.ID]; ok {
|
|
ships.SetVirtualNetworkConfig(config)
|
|
return
|
|
}
|
|
}
|
|
|
|
// If not, reset - we might have been in one before.
|
|
ships.SetVirtualNetworkConfig(nil)
|
|
}
|