wehub-resource-sync
e84fb4a79e
container project - merge build / Invoke build (push) Successful in 1s
95 lines
3.5 KiB
Swift
95 lines
3.5 KiB
Swift
//===----------------------------------------------------------------------===//
|
|
// Copyright © 2025-2026 Apple Inc. and the container project authors.
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// https://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
//===----------------------------------------------------------------------===//
|
|
|
|
import ArgumentParser
|
|
import ContainerAPIClient
|
|
import ContainerPersistence
|
|
import ContainerizationError
|
|
import ContainerizationExtras
|
|
import DNSServer
|
|
import Foundation
|
|
|
|
extension Application {
|
|
public struct DNSCreate: AsyncLoggableCommand {
|
|
public static let configuration = CommandConfiguration(
|
|
commandName: "create",
|
|
abstract: "Create a local DNS domain for containers (must run as an administrator)"
|
|
)
|
|
|
|
@OptionGroup
|
|
public var logOptions: Flags.Logging
|
|
|
|
@Option(name: .long, help: "Set the ip address to be redirected to localhost")
|
|
var localhost: String?
|
|
|
|
@Argument(help: "The local domain name")
|
|
var domainName: String
|
|
|
|
public init() {}
|
|
|
|
public func run() async throws {
|
|
var localhostIP: IPAddress? = nil
|
|
if let localhost {
|
|
localhostIP = try? IPAddress(localhost)
|
|
guard let localhostIP, case .v4(_) = localhostIP else {
|
|
throw ContainerizationError(.invalidArgument, message: "invalid IPv4 address: \(localhost)")
|
|
}
|
|
}
|
|
|
|
guard let domainName = try? DNSName(domainName) else {
|
|
throw ContainerizationError(.invalidArgument, message: "invalid domain name: \(domainName)")
|
|
}
|
|
|
|
let resolver: HostDNSResolver = HostDNSResolver()
|
|
do {
|
|
try resolver.createDomain(name: domainName, localhost: localhostIP)
|
|
} catch let error as ContainerizationError {
|
|
throw error
|
|
} catch {
|
|
throw ContainerizationError(.invalidState, message: "cannot create domain (try sudo?)")
|
|
}
|
|
|
|
let pf = PacketFilter()
|
|
if let from = localhostIP {
|
|
let to = try! IPAddress("127.0.0.1")
|
|
do {
|
|
try pf.createRedirectRule(from: from, to: to, domain: domainName)
|
|
} catch {
|
|
_ = try resolver.deleteDomain(name: domainName)
|
|
throw error
|
|
}
|
|
}
|
|
print(domainName.pqdn)
|
|
|
|
if localhostIP != nil {
|
|
do {
|
|
try pf.reinitialize()
|
|
} catch let error as ContainerizationError {
|
|
throw error
|
|
} catch {
|
|
throw ContainerizationError(.invalidState, message: "failed loading pf rules")
|
|
}
|
|
}
|
|
|
|
do {
|
|
try HostDNSResolver.reinitialize()
|
|
} catch {
|
|
throw ContainerizationError(.invalidState, message: "mDNSResponder restart failed, run `sudo killall -HUP mDNSResponder` to deactivate domain")
|
|
}
|
|
}
|
|
}
|
|
}
|