⬢ DragonFlyBSD Kernel Audit
DF-5724 / serial_vm.sh
← back to finding ↓ download raw 
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
#!/bin/sh
# DF-5724 — guest with a WRITABLE serial console (same rig as the proven
# DF-5561/DF-5720 rigs) so ddb can be driven live from the host.
# See findings/poc/DF-5723/serial_vm.sh for the twin.
set -eu
cd "$(dirname "$0")/../../../dfbsd-qemu"

DISK="disk.qcow2"
PIDFILE="vm.pid"
BOOTLOG="/tmp/opencode/df-5724-serial.log"
SOCK="/tmp/opencode/df-5724-ser.sock"
SSH_OPTS="-F config -o ConnectTimeout=8 -o BatchMode=yes"

status_up() { ssh $SSH_OPTS dfbsd-maxx true >/dev/null 2>&1; }

case "${1:-}" in
up)
    if status_up; then echo "already up"; exit 0; fi
    if [ -f "$PIDFILE" ] && kill -0 "$(cat "$PIDFILE" 2>/dev/null)" 2>/dev/null; then
        echo "qemu already running (pid $(cat "$PIDFILE"))" >&2; exit 1
    fi
    rm -f "$PIDFILE" "$SOCK"; : > "$BOOTLOG"
    echo "booting guest with socket serial: $SOCK (log: $BOOTLOG)"
    qemu-system-x86_64 \
        -enable-kvm -m 4096 -smp 6 \
        -drive file="$DISK",if=virtio,format=qcow2 \
        -netdev user,id=n0,hostfwd=tcp:127.0.0.1:5522-:22 \
        -device virtio-net-pci,netdev=n0 \
        -display none -monitor unix:"boot-mon.sock",server=on,wait=off \
        -chardev socket,id=ser0,path="$SOCK",server=on,wait=off,logfile="$BOOTLOG" \
        -serial chardev:ser0 \
        -daemonize -pidfile "$PIDFILE"
    echo "waiting for ssh..."
    i=0; while [ $i -lt 150 ]; do
        if status_up; then echo "up (pid $(cat "$PIDFILE"))"; exit 0; fi
        sleep 3; i=$((i+3))
    done
    echo "TIMEOUT waiting for ssh; tail $BOOTLOG" >&2; exit 1
    ;;
down)
    ./vm.sh down || true
    ;;
status)
    if status_up; then echo up; else echo down; fi
    ;;
log)
    tail -n "${2:-40}" "$BOOTLOG"
    ;;
*)
    echo "usage: $0 up|down|status|log [n]" >&2; exit 2
    ;;
esac