1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
|
pub mod types {
tonic::include_proto!("mullvad_daemon.management_interface");
pub use prost_types::Timestamp;
}
use parity_tokio_ipc::Endpoint as IpcEndpoint;
#[cfg(unix)]
use std::{fs, os::unix::fs::PermissionsExt};
use std::{
io,
pin::Pin,
task::{Context, Poll},
};
use tokio::io::{AsyncRead, AsyncWrite};
use tonic::transport::{server::Connected, Endpoint, Server, Uri};
use tower::service_fn;
pub use tonic::{async_trait, transport::Channel, Code, Request, Response, Status};
pub type ManagementServiceClient =
types::management_service_client::ManagementServiceClient<Channel>;
pub use types::management_service_server::{ManagementService, ManagementServiceServer};
#[derive(err_derive::Error, Debug)]
#[error(no_from)]
pub enum Error {
#[error(display = "Management RPC server or client error")]
GrpcTransportError(#[error(source)] tonic::transport::Error),
#[error(display = "Failed to start IPC pipe/socket")]
StartServerError(#[error(source)] io::Error),
#[error(display = "Failed to initialize pipe/socket security attributes")]
SecurityAttributes(#[error(source)] io::Error),
#[error(display = "Unable to set permissions for IPC endpoint")]
PermissionsError(#[error(source)] io::Error),
}
pub async fn new_rpc_client() -> Result<ManagementServiceClient, Error> {
let ipc_path = mullvad_paths::get_rpc_socket_path();
// The URI will be ignored
let channel = Endpoint::from_static("lttp://[::]:50051")
.connect_with_connector(service_fn(move |_: Uri| {
IpcEndpoint::connect(ipc_path.clone())
}))
.await
.map_err(Error::GrpcTransportError)?;
Ok(ManagementServiceClient::new(channel))
}
pub async fn spawn_rpc_server<T: ManagementService>(
service: T,
server_start_tx: std::sync::mpsc::Sender<()>,
abort_rx: triggered::Listener,
) -> std::result::Result<(), Error> {
use futures::stream::TryStreamExt;
use parity_tokio_ipc::SecurityAttributes;
let socket_path = mullvad_paths::get_rpc_socket_path()
.to_string_lossy()
.to_string();
let mut endpoint = IpcEndpoint::new(socket_path.to_string());
endpoint.set_security_attributes(
SecurityAttributes::allow_everyone_create()
.map_err(Error::SecurityAttributes)?
.set_mode(777)
.map_err(Error::SecurityAttributes)?,
);
let incoming = endpoint.incoming().map_err(Error::StartServerError)?;
#[cfg(unix)]
fs::set_permissions(&socket_path, PermissionsExt::from_mode(0o766))
.map_err(Error::PermissionsError)?;
let _ = server_start_tx.send(());
Server::builder()
.add_service(ManagementServiceServer::new(service))
.serve_with_incoming_shutdown(incoming.map_ok(StreamBox), abort_rx)
.await
.map_err(Error::GrpcTransportError)
}
#[derive(Debug)]
struct StreamBox<T: AsyncRead + AsyncWrite>(pub T);
impl<T: AsyncRead + AsyncWrite> Connected for StreamBox<T> {}
impl<T: AsyncRead + AsyncWrite + Unpin> AsyncRead for StreamBox<T> {
fn poll_read(
mut self: Pin<&mut Self>,
cx: &mut Context<'_>,
buf: &mut [u8],
) -> Poll<std::io::Result<usize>> {
Pin::new(&mut self.0).poll_read(cx, buf)
}
}
impl<T: AsyncRead + AsyncWrite + Unpin> AsyncWrite for StreamBox<T> {
fn poll_write(
mut self: Pin<&mut Self>,
cx: &mut Context<'_>,
buf: &[u8],
) -> Poll<std::io::Result<usize>> {
Pin::new(&mut self.0).poll_write(cx, buf)
}
fn poll_flush(mut self: Pin<&mut Self>, cx: &mut Context<'_>) -> Poll<std::io::Result<()>> {
Pin::new(&mut self.0).poll_flush(cx)
}
fn poll_shutdown(mut self: Pin<&mut Self>, cx: &mut Context<'_>) -> Poll<std::io::Result<()>> {
Pin::new(&mut self.0).poll_shutdown(cx)
}
}
|
