| /* SPDX-License-Identifier: LGPL-2.1-or-later */ |
| #pragma once |
| |
| #include <sys/vfs.h> |
| |
| #include "sd-id128.h" |
| |
| #include "cryptsetup-util.h" |
| #include "homework-password-cache.h" |
| #include "loop-util.h" |
| #include "missing_fs.h" /* for FS_KEY_DESCRIPTOR_SIZE, do not include linux/fs.h */ |
| #include "missing_keyctl.h" |
| #include "missing_syscall.h" |
| #include "user-record.h" |
| #include "user-record-util.h" |
| |
| typedef struct HomeSetup { |
| char *dm_name; /* "home-<username>" */ |
| char *dm_node; /* "/dev/mapper/home-<username>" */ |
| |
| LoopDevice *loop; |
| struct crypt_device *crypt_device; |
| int root_fd; |
| int image_fd; |
| sd_id128_t found_partition_uuid; |
| sd_id128_t found_luks_uuid; |
| sd_id128_t found_fs_uuid; |
| |
| uint8_t fscrypt_key_descriptor[FS_KEY_DESCRIPTOR_SIZE]; |
| |
| void *volume_key; |
| size_t volume_key_size; |
| |
| key_serial_t key_serial; |
| |
| bool undo_dm:1; |
| bool undo_mount:1; /* Whether to unmount /run/systemd/user-home-mount */ |
| bool do_offline_fitrim:1; |
| bool do_offline_fallocate:1; |
| bool do_mark_clean:1; |
| bool do_drop_caches:1; |
| |
| uint64_t partition_offset; |
| uint64_t partition_size; |
| |
| char *mount_suffix; /* The directory to use as home dir is this path below /run/systemd/user-home-mount */ |
| |
| char *temporary_image_path; |
| } HomeSetup; |
| |
| #define HOME_SETUP_INIT \ |
| { \ |
| .root_fd = -EBADF, \ |
| .image_fd = -EBADF, \ |
| .partition_offset = UINT64_MAX, \ |
| .partition_size = UINT64_MAX, \ |
| .key_serial = -1, \ |
| } |
| |
| /* Various flags for the operation of setting up a home directory */ |
| typedef enum HomeSetupFlags { |
| HOME_SETUP_ALREADY_ACTIVATED = 1 << 0, /* Open an already activated home, rather than activate it afresh */ |
| |
| /* CIFS backend: */ |
| HOME_SETUP_CIFS_MKDIR = 1 << 1, /* Create CIFS subdir when missing */ |
| |
| /* Applies only for resize operations */ |
| HOME_SETUP_RESIZE_DONT_SYNC_IDENTITIES = 1 << 2, /* Don't sync identity records into home and LUKS header */ |
| HOME_SETUP_RESIZE_MINIMIZE = 1 << 3, /* Shrink to minimal size */ |
| HOME_SETUP_RESIZE_DONT_GROW = 1 << 4, /* If the resize would grow, gracefully terminate operation */ |
| HOME_SETUP_RESIZE_DONT_SHRINK = 1 << 5, /* If the resize would shrink, gracefully terminate operation */ |
| HOME_SETUP_RESIZE_DONT_UNDO = 1 << 6, /* Leave loopback/DM device context open after successful operation */ |
| } HomeSetupFlags; |
| |
| int home_setup_done(HomeSetup *setup); |
| |
| int home_setup_undo_mount(HomeSetup *setup, int level); |
| int home_setup_undo_dm(HomeSetup *setup, int level); |
| |
| int keyring_unlink(key_serial_t k); |
| |
| int home_setup(UserRecord *h, HomeSetupFlags flags, HomeSetup *setup, PasswordCache *cache, UserRecord **ret_header_home); |
| |
| int home_refresh(UserRecord *h, HomeSetupFlags flags, HomeSetup *setup, UserRecord *header_home, PasswordCache *cache, struct statfs *ret_statfs, UserRecord **ret_new_home); |
| |
| int home_maybe_shift_uid(UserRecord *h, HomeSetupFlags flags, HomeSetup *setup); |
| int home_populate(UserRecord *h, int dir_fd); |
| |
| int home_load_embedded_identity(UserRecord *h, int root_fd, UserRecord *header_home, UserReconcileMode mode, PasswordCache *cache, UserRecord **ret_embedded_home, UserRecord **ret_new_home); |
| int home_store_embedded_identity(UserRecord *h, int root_fd, uid_t uid, UserRecord *old_home); |
| int home_extend_embedded_identity(UserRecord *h, UserRecord *used, HomeSetup *setup); |
| |
| int user_record_authenticate(UserRecord *h, UserRecord *secret, PasswordCache *cache, bool strict_verify); |
| |
| int home_sync_and_statfs(int root_fd, struct statfs *ret); |
| |
| #define HOME_RUNTIME_WORK_DIR "/run/systemd/user-home-mount" |