26858dba84
This allows switching the base user identification/authentication method in the rest server. Will initially be used for single file restore VMs, where authentication is based on a ticket file, not the PBS user backend (PAM/local). To avoid putting generic types into the RestServer type for this, we merge the two calls "extract_auth_data" and "check_auth" into a single one, which can use whatever type it wants internally. Signed-off-by: Stefan Reiter <s.reiter@proxmox.com>
114 lines
3.2 KiB
Rust
114 lines
3.2 KiB
Rust
use anyhow::{bail, Error};
|
|
use futures::*;
|
|
|
|
use proxmox::try_block;
|
|
use proxmox::api::RpcEnvironmentType;
|
|
|
|
//use proxmox_backup::tools;
|
|
//use proxmox_backup::api_schema::config::*;
|
|
use proxmox_backup::server::{
|
|
self,
|
|
auth::default_api_auth,
|
|
rest::*,
|
|
};
|
|
use proxmox_backup::tools::daemon;
|
|
use proxmox_backup::auth_helpers::*;
|
|
use proxmox_backup::config;
|
|
use proxmox_backup::buildcfg;
|
|
|
|
fn main() {
|
|
proxmox_backup::tools::setup_safe_path_env();
|
|
|
|
if let Err(err) = proxmox_backup::tools::runtime::main(run()) {
|
|
eprintln!("Error: {}", err);
|
|
std::process::exit(-1);
|
|
}
|
|
}
|
|
|
|
async fn run() -> Result<(), Error> {
|
|
if let Err(err) = syslog::init(
|
|
syslog::Facility::LOG_DAEMON,
|
|
log::LevelFilter::Info,
|
|
Some("proxmox-backup-api")) {
|
|
bail!("unable to inititialize syslog - {}", err);
|
|
}
|
|
|
|
server::create_task_log_dirs()?;
|
|
|
|
config::create_configdir()?;
|
|
|
|
config::update_self_signed_cert(false)?;
|
|
|
|
proxmox_backup::rrd::create_rrdb_dir()?;
|
|
proxmox_backup::server::jobstate::create_jobstate_dir()?;
|
|
proxmox_backup::tape::create_tape_status_dir()?;
|
|
proxmox_backup::tape::create_drive_state_dir()?;
|
|
proxmox_backup::tape::create_changer_state_dir()?;
|
|
|
|
if let Err(err) = generate_auth_key() {
|
|
bail!("unable to generate auth key - {}", err);
|
|
}
|
|
let _ = private_auth_key(); // load with lazy_static
|
|
|
|
if let Err(err) = generate_csrf_key() {
|
|
bail!("unable to generate csrf key - {}", err);
|
|
}
|
|
let _ = csrf_secret(); // load with lazy_static
|
|
|
|
let mut config = server::ApiConfig::new(
|
|
buildcfg::JS_DIR,
|
|
&proxmox_backup::api2::ROUTER,
|
|
RpcEnvironmentType::PRIVILEGED,
|
|
default_api_auth(),
|
|
)?;
|
|
|
|
let mut commando_sock = server::CommandoSocket::new(server::our_ctrl_sock());
|
|
|
|
config.enable_file_log(buildcfg::API_ACCESS_LOG_FN, &mut commando_sock)?;
|
|
|
|
let rest_server = RestServer::new(config);
|
|
|
|
// http server future:
|
|
let server = daemon::create_daemon(
|
|
([127,0,0,1], 82).into(),
|
|
move |listener, ready| {
|
|
let incoming = proxmox_backup::tools::async_io::StaticIncoming::from(listener);
|
|
Ok(ready
|
|
.and_then(|_| hyper::Server::builder(incoming)
|
|
.serve(rest_server)
|
|
.with_graceful_shutdown(server::shutdown_future())
|
|
.map_err(Error::from)
|
|
)
|
|
.map(|e| {
|
|
if let Err(e) = e {
|
|
eprintln!("server error: {}", e);
|
|
}
|
|
})
|
|
)
|
|
},
|
|
"proxmox-backup.service",
|
|
);
|
|
|
|
server::write_pid(buildcfg::PROXMOX_BACKUP_API_PID_FN)?;
|
|
daemon::systemd_notify(daemon::SystemdNotify::Ready)?;
|
|
|
|
let init_result: Result<(), Error> = try_block!({
|
|
server::register_task_control_commands(&mut commando_sock)?;
|
|
commando_sock.spawn()?;
|
|
server::server_state_init()?;
|
|
Ok(())
|
|
});
|
|
|
|
if let Err(err) = init_result {
|
|
bail!("unable to start daemon - {}", err);
|
|
}
|
|
|
|
server.await?;
|
|
log::info!("server shutting down, waiting for active workers to complete");
|
|
proxmox_backup::server::last_worker_future().await?;
|
|
|
|
log::info!("done - exit server");
|
|
|
|
Ok(())
|
|
}
|