#! /bin/sh # $NetBSD: mksandbox,v 1.33.2.2 2004/07/08 08:37:24 agc Exp $ # # # Copyright (c) 2002 Alistair G. Crooks. All rights reserved. # # Redistribution and use in source and binary forms, with or without # modification, are permitted provided that the following conditions # are met: # 1. Redistributions of source code must retain the above copyright # notice, this list of conditions and the following disclaimer. # 2. Redistributions in binary form must reproduce the above copyright # notice, this list of conditions and the following disclaimer in the # documentation and/or other materials provided with the distribution. # 3. All advertising materials mentioning features or use of this software # must display the following acknowledgement: # This product includes software developed by Alistair G. Crooks # for the NetBSD project. # 4. The name of the author may not be used to endorse or promote # products derived from this software without specific prior written # permission. # # THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS # OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED # WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE # ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY # DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL # DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE # GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS # INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, # WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING # NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS # SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. # # Usage: mksandbox [--pkgsrc=dir] [--src=srcdir] [--verbose] sandbox-dir # # A small shell script to set up a sandbox (usually for a pkgsrc bulk # build), using null mounts. pkgsrc=/usr/pkgsrc src=/usr/src kernel="" sandboxMountDirs="/bin /sbin /lib /libexec /usr/X11R6 /usr/bin /usr/games /usr/include /usr/lib /usr/libdata /usr/libexec /usr/lkm /usr/share /usr/sbin /var/mail" sandboxEmptyDirs="/var/run /var/log /var/spool/mqueue" sandboxEmptyFiles="/var/run/utmp /var/run/utmpx /var/log/wtmp /var/log/wtmpx /var/log/lastlog /var/log/lastlogx" usage() { echo "Usage: mksandbox [--pkgsrc=dir] [--src=srcdir] [--verbose] sandbox-dir" exit 1 } err() { echo "error: $1" exit 1 } opsys=`uname -s` case "$opsys" in Darwin) bmakeprog=bmake chmodprog=/bin/chmod chownprog=/usr/sbin/chown cpprog=/bin/cp gtarprog=/usr/bin/gnutar idprog=/usr/bin/id mkdirprog="/bin/mkdir -p" mountflags="-t null" mountprog=/sbin/mount paxprog=/bin/pax sedprog=/usr/bin/sed ;; Linux) bmakeprog=bmake chmodprog=/bin/chmod chownprog=/bin/chown cpprog=/bin/cp gtarprog=/bin/tar idprog=/usr/bin/id mkdirprog="/bin/mkdir -p" mountflags="--bind" mountprog=/sbin/mount paxprog="" sedprog=/bin/sed ;; NetBSD) bmakeprog=make chmodprog=/bin/chmod chownprog=/usr/sbin/chown cpprog=/bin/cp gtarprog=/usr/bin/tar idprog=/usr/bin/id kernel=/netbsd mkdirprog="/bin/mkdir -p" mountflags="-t null" mountprog=/sbin/mount paxprog=/bin/pax sedprog=/usr/bin/sed ;; SunOS) bmakeprog=bmake chmodprog=/usr/bin/chmod chownprog=/usr/bin/chown cpprog=/usr/bin/cp gtarprog="" idprog=/usr/xpg4/bin/id mkdirprog="/usr/bin/mkdir -p" mountflags="-F lofs" mountprog=/sbin/mount paxprog=/bin/pax sedprog=/usr/xpg4/bin/sed sandboxMountDirs="/bin /sbin /kernel /lib /proc /opt/SUNWspro /usr/X11R6 /usr/5bin /usr/bin /usr/ccs /usr/dt /usr/games /usr/include /usr/lib /usr/openwin /usr/share /usr/sbin /usr/ucb /usr/ucblib /usr/xpg4 /var/mail /var/sadm" sandboxEmptyDirs="$sandboxEmptyDirs /usr/tmp /var/tmp" ;; *) echo "Unknown Operating System ($opsys) - good luck" bmakeprog=bmake chmodprog=chmod chownprog=chown cpprog=cp gtarprog="tar" idprog="id" mkdirprog="mkdir -p" mountflags="-t null" mountprog=mount paxprog=pax sedprog=sed ;; esac while [ $# -gt 0 ]; do case "$1" in --pkgsrc=*) pkgsrc=`echo $1 | $sedprog -e 's|^--pkgsrc=||'` ;; --src=*) src=`echo $1 | $sedprog -e 's|^--src=||'` ;; --verbose) set -x ;; -*) usage ;; *) break ;; esac shift done if [ $# -ne 1 ]; then usage fi if [ `$idprog -u` -ne 0 ]; then err "You must be root to run this script." fi if [ ! -d $pkgsrc ]; then err "pkgsrc directory $pkgsrc does not exist." fi if [ ! -d $src ]; then err "source directory $src does not exist." fi sandbox=$1 sandbox_script="$sandbox/sandbox" packages=`(cd $pkgsrc/pkgtools/pkglint; $bmakeprog show-var VARNAME=PACKAGES)` distfiles=`(cd $pkgsrc/pkgtools/pkglint; $bmakeprog show-var VARNAME=DISTDIR)` localbase=`(cd $pkgsrc/pkgtools/pkglint; $bmakeprog show-var VARNAME=LOCALBASE)` pkg_dbdir=`(cd $pkgsrc/pkgtools/pkglint; $bmakeprog show-var VARNAME=PKG_DBDIR)` localpatches=`(cd $pkgsrc/pkgtools/pkglint; $bmakeprog show-var VARNAME=LOCALPATCHES)` $mkdirprog $sandbox cat > $sandbox_script <> $sandbox_script done echo "Making /tmp in $sandbox" $mkdirprog $sandbox/tmp $sandbox/var/tmp $chmodprog 1777 $sandbox/tmp $sandbox/var/tmp echo "Making /var/games in $sandbox" $mkdirprog $sandbox/var/games $chownprog games:games $sandbox/var/games $chmodprog 2775 $sandbox/var/games for d in $sandboxEmptyDirs; do test -d $d || continue echo "Making $d in $sandbox" $mkdirprog $sandbox$d done for f in $sandboxEmptyFiles; do test -f $f || continue echo "Making $f in $sandbox" $cpprog /dev/null $sandbox$f done echo "Mount $src from $sandbox" $mkdirprog $sandbox/usr/src $mountprog $mountflags -r $src $sandbox/usr/src echo "$src /usr/src ro \\" >> $sandbox_script echo "Mount $pkgsrc from $sandbox" $mkdirprog $sandbox/usr/pkgsrc $mountprog $mountflags $pkgsrc $sandbox/usr/pkgsrc echo "$pkgsrc /usr/pkgsrc rw \\" >> $sandbox_script echo "Mounting $packages and $distfiles from $sandbox" $mkdirprog $sandbox/$packages $sandbox/$distfiles $mkdirprog $packages $distfiles $mountprog $mountflags $packages $sandbox/$packages $mountprog $mountflags $distfiles $sandbox/$distfiles echo "$packages $packages rw \\" >> $sandbox_script echo "$distfiles $distfiles rw \\" >> $sandbox_script test -n "$localpatches" && echo "$localpatches $localpatches rw \\" >> $sandbox_script cat >> $sandbox_script <