#!/bin/sh
#
# Copyright (c) 2022-2026, Jesús Daniel Colmenares Oviedo <DtxdF@disroot.org>
# All rights reserved.
#
# Redistribution and use in source and binary forms, with or without
# modification, are permitted provided that the following conditions are met:
#
# * Redistributions of source code must retain the above copyright notice, this
#   list of conditions and the following disclaimer.
#
# * Redistributions in binary form must reproduce the above copyright notice,
#   this list of conditions and the following disclaimer in the documentation
#   and/or other materials provided with the distribution.
#
# * Neither the name of the copyright holder nor the names of its
#   contributors may be used to endorse or promote products derived from
#   this software without specific prior written permission.
#
# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
# AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
# DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
# FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
# SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
# CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
# OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
# OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

lib_load "${LIBDIR}/check_func"
lib_load "${LIBDIR}/colors"
lib_load "${LIBDIR}/jail"
lib_load "${LIBDIR}/random"

cmd_desc="Execute commands in a jail."

cmd_main()
{
	local entity="$1"; shift
	if lib_check_empty "${entity}"; then
		cmd_usage
		exit ${EX_USAGE}
	fi

	case "${entity}" in
		all|jaildir|chroot|jexec|local) ;;
		*) cmd_usage; exit ${EX_USAGE} ;;
	esac

	cmd_${entity} "$@"
}

cmd_all()
{
	local _o
	local opt_failsafe=0
	local input_file="/dev/null"
	local errlevel=0
	local jail_name

	while getopts ":ei:" _o; do
		case "${_o}" in
			e)
				opt_failsafe=1
				;;
			i)
				input_file="${OPTARG}"
				;;
			*)
				cmd_usage
				exit ${EX_USAGE}
				;;
		esac
	done
	shift $((OPTIND-1))

	command="$1"; shift
	if [ -z "${command}" ]; then
		cmd_usage
		exit ${EX_USAGE}
	fi

	case "${command}" in
		chroot|jexec|local) ;;
		*) lib_err ${EX_DATAERR} "Valid commands: chroot, jexec, local."
	esac

	"${APPJAIL_PROGRAM}" jail list -HIpt name | while IFS= read -r jail_name
	do
		lib_set_logprefix " [`random_color`${jail_name}${COLOR_DEFAULT}]"

		lib_debug "Running: $@"

		"${APPJAIL_PROGRAM}" cmd "${command}" "${jail_name}" "$@" < "${input_file}"

		errlevel=$?

		if [ ${errlevel} -ne 0 ]; then
			if [ ${opt_failsafe} -eq 1 ]; then
				lib_err ${errlevel} "Stop caused by a non-zero value."
			fi
		fi
	done
}

cmd_jaildir()
{
	if [ ! -d "${JAILDIR}" ]; then
		lib_err ${EX_NOINPUT} "Cannot find the \`${JAILDIR}\` directory."
	fi

	# If no commands are provided
	if [ $# -eq 0 ]; then
		set -- "${SHELL:-/bin/sh}"
	fi

	(cd "${JAILDIR}"; command -- "$@")
}

cmd_chroot()
{
	local jail_name

	jail_name="$1"; shift
	if lib_check_empty "${jail_name}"; then
		cmd_usage
		exit ${EX_USAGE}
	fi

	jail_path="${JAILDIR}/${jail_name}/jail"
	if [ ! -d "${jail_path}" ]; then
		lib_err ${EX_NOINPUT} "Cannot find the jail \`${jail_name}\`"
	fi

	chroot -- "${jail_path}" "$@"
}

cmd_jexec()
{
	local _o
	local opt_clean=1
	local jail_username=
	local host_username=
	local workdir="/"
	local jail_name
	local jexec_args=
	local env=

	jail_name="$1"; shift
	if lib_check_empty "${jail_name}"; then
		cmd_usage
		exit ${EX_USAGE}
	fi

	while getopts ":le:U:u:w:" _o; do
		case "${_o}" in
			e|U|u|w)
				if lib_check_empty "${OPTARG}"; then
					cmd_usage
					exit ${EX_USAGE}
				fi
				;;
		esac

		case "${_o}" in
			l)
				opt_clean=0
				;;
			e)
				local env_var="${OPTARG}"
				if ! lib_check_env "${env_var}"; then
					lib_err ${EX_DATAERR} "Invalid environment variable '${env_var}'"
				fi

				env_var=`lib_escape_string "${env_var}"`

				if [ -z "${env}" ]; then
					env="-e \"${env_var}\""
				else
					env="${env} -e \"${env_var}\""
				fi
				;;
			U)
				jail_username="${OPTARG}"
				;;
			u)
				host_username="${OPTARG}"
				;;
			w)
				workdir="${OPTARG}"
				;;
			*)
				cmd_usage
				exit ${EX_USAGE}
				;;
		esac
	done
	shift $((OPTIND-1))

	if ! lib_check_jailname "${jail_name}"; then
		lib_err ${EX_DATAERR} "Invalid jail name \"${jail_name}\""
	fi

	if [ ! -d "${JAILDIR}/${jail_name}/jail" ]; then
		lib_err ${EX_NOINPUT} "Cannot find the jail \`${jail_name}\`"
	fi

	if ! lib_jail_exists "${jail_name}"; then
		lib_warn -- "${jail_name} is not running."
		return 0
	fi

	if ! lib_jail_created_by_appjail "${jail_name}"; then
		lib_warn -- "${jail_name} has not been created by appjail."
		return 0
	fi

	if [ ${opt_clean} -eq 1 ]; then
		jexec_args="-l"
	fi

	local jexec
	jexec="${UTILDIR}/jexec/jexec"

	local juexec
	juexec="${UTILDIR}/juexec/juexec"

	local opt_use_juexec=0
	local uid= gid= home= shell=
	local escape_jail_username

	if ! lib_check_empty "${jail_username}"; then
		local jail_type
		jail_type=`lib_ajconf get -Vnt "${JAILDIR}/${jail_name}/conf/config.conf" jail_type` || exit $?

		if [ -n "${jail_type}" ] && \
				[ "${jail_type}" = "${JAIL_TYPE_DEBOOTSTRAP}" ] && \
				"${jexec}" -l -- "${jail_name}" which getent > /dev/null 2>&1; then
			uid=`"${jexec}" -l -- "${jail_name}" getent passwd "${jail_username}" 2> /dev/null | cut -d: -f3`
			gid=`"${jexec}" -l -- "${jail_name}" getent passwd "${jail_username}" 2> /dev/null | cut -d: -f4`

			if [ -n "${uid}" -a -n "${gid}" ]; then
				opt_use_juexec=1

				home=`"${jexec}" -l -- "${jail_name}" getent passwd "${jail_username}" 2> /dev/null | cut -d: -f6`
				shell=`"${jexec}" -l -- "${jail_name}" getent passwd "${jail_username}" 2> /dev/null | cut -d: -f7`
			fi
		fi

		escape_jail_username=`lib_escape_string "${jail_username}"`

		if [ ${opt_use_juexec} -eq 0 ]; then
			jexec_args="${jexec_args} -U \"${escape_jail_username}\""
		fi
	elif ! lib_check_empty "${host_username}"; then
		local escape_host_username
		escape_host_username=`lib_escape_string "${host_username}"`

		jexec_args="${jexec_args} -u \"${escape_host_username}\""
	fi

	local escape_jail_name
	escape_jail_name=`lib_escape_string "${jail_name}"`

	local escape_workdir
	escape_workdir=`lib_escape_string "${workdir}"`

	# Add workdir parameter.
	jexec_args="${jexec_args} -d \"${escape_workdir}\""

	# Need to set this before user environment.
	if [ ${opt_use_juexec} -eq 1 ]; then
		jexec_args="${jexec_args} -e \"USER=${escape_jail_username}\""

		if ! lib_check_empty "${home}"; then
			local escape_home
			escape_home=`lib_escape_string "${home}"`

			jexec_args="${jexec_args} -e \"HOME=${escape_home}\""
		fi

		if ! lib_check_empty "${shell}"; then
			local escape_shell
			escape_shell=`lib_escape_string "${shell}"`

			jexec_args="${jexec_args} -e \"SHELL=${escape_shell}\""
		fi
	fi

	# Add env parameters.
	jexec_args="${jexec_args} ${env}"

	# Specify the jail
	if [ ${opt_use_juexec} -eq 0 ]; then
		jexec_args="${jexec_args} -- \"${escape_jail_name}\""
	else
		local escape_uid
		escape_uid=`lib_escape_string "${uid}"`

		local escape_gid
		escape_gid=`lib_escape_string "${gid}"`

		jexec_args="${jexec_args} -- \"${escape_uid}\":\"${escape_gid}\" \"${escape_jail_name}\""
	fi

	# Command and arguments.
	local arg

	for arg in "$@"; do
		local escape_arg=
		if ! lib_check_empty "${arg}"; then
			escape_arg=`lib_escape_string "${arg}"`
		fi

		jexec_args="${jexec_args} \"${escape_arg}\""
	done

	if [ ${opt_use_juexec} -eq 0 ]; then
		local escape_jexec
		escape_jexec=`lib_escape_string "${jexec}"`

		sh -c "\"${escape_jexec}\" ${jexec_args}"
	else
		local escape_juexec
		escape_juexec=`lib_escape_string "${juexec}"`

		sh -c "\"${escape_juexec}\" ${jexec_args}"
	fi
}

cmd_local()
{
	local _o
	local opt_jails=0
	local opt_jail=1
	local opt_rootdir=0
	local jail_name
	local basedir

	jail_name="$1"; shift
	if lib_check_empty "${jail_name}"; then
		cmd_usage
		exit ${EX_USAGE}
	fi

	while getopts ":jr" _o; do
		case "${_o}" in
			j)
				opt_jail=1
				opt_rootdir=0
				;;
			r)
				opt_rootdir=1
				opt_jail=0
				;;
			*)
				cmd_usage
				exit ${EX_USAGE}
				;;
		esac
	done
	shift $((OPTIND-1))

	if [ ${opt_jail} -eq 1 ]; then
		basedir="${JAILDIR}/${jail_name}/jail"
	elif [ ${opt_rootdir} -eq 1 ]; then
		basedir="${JAILDIR}/${jail_name}"
	else
		cmd_usage
		exit ${EX_USAGE}
	fi

	if [ ! -d "${basedir}" ]; then
		lib_err ${EX_NOINPUT} "Cannot find the \`${basedir}\` directory."
	fi

	# If no commands are provided
	if [ $# -eq 0 ]; then
		set -- "${SHELL:-/bin/sh}"
	fi

	(cd "${basedir}"; command -- "$@")
}

cmd_help()
{
	man 1 appjail-cmd
}

cmd_usage()
{
	cat << EOF
usage: cmd all [-e] [-i <file>] <target> [<args> ...]
       cmd chroot <jail> [<command> [<args> ...]]
       cmd jaildir [<command> [<args> ...]]
       cmd jexec <jail> [-l] [[-U <username>|-u <username>]]
               [<command> [<args> ...]]
       cmd local <jail> [[-j|-r]] [<command> [<args> ...]]
EOF
}
