branding: add LEDE branding
[openwrt/openwrt.git] / package / network / services / dnsmasq / files / dnsmasq.init
1 #!/bin/sh /etc/rc.common
2 # Copyright (C) 2007-2012 OpenWrt.org
3
4 START=60
5
6 USE_PROCD=1
7 PROG=/usr/sbin/dnsmasq
8
9 DNS_SERVERS=""
10 DOMAIN=""
11
12 ADD_LOCAL_DOMAIN=1
13 ADD_LOCAL_HOSTNAME=1
14
15 CONFIGFILE="/var/etc/dnsmasq.conf"
16 HOSTFILE="/tmp/hosts/dhcp"
17 TRUSTANCHORSFILE="/usr/share/dnsmasq/trust-anchors.conf"
18 TIMESTAMPFILE="/etc/dnsmasq.time"
19
20 xappend() {
21 local value="$1"
22
23 echo "${value#--}" >> $CONFIGFILE
24 }
25
26 dhcp_calc() {
27 local ip="$1"
28 local res=0
29
30 while [ -n "$ip" ]; do
31 part="${ip%%.*}"
32 res="$(($res * 256))"
33 res="$(($res + $part))"
34 [ "${ip%.*}" != "$ip" ] && ip="${ip#*.}" || ip=
35 done
36 echo "$res"
37 }
38
39 dhcp_check() {
40 local ifname="$1"
41 local stamp="/var/run/dnsmasq.$ifname.dhcp"
42 local rv=0
43
44 [ -s "$stamp" ] && return $(cat "$stamp")
45
46 udhcpc -n -q -s /bin/true -t 1 -i "$ifname" >&- && rv=1 || rv=0
47
48 [ $rv -eq 1 ] && \
49 logger -t dnsmasq \
50 "found already running DHCP-server on interface '$ifname'" \
51 "refusing to start, use 'option force 1' to override"
52
53 echo $rv > "$stamp"
54 return $rv
55 }
56
57 log_once() {
58 pidof dnsmasq >/dev/null || \
59 logger -t dnsmasq "$@"
60 }
61
62 append_bool() {
63 local section="$1"
64 local option="$2"
65 local value="$3"
66 local _loctmp
67 config_get_bool _loctmp "$section" "$option" 0
68 [ $_loctmp -gt 0 ] && xappend "$value"
69 }
70
71 append_parm() {
72 local section="$1"
73 local option="$2"
74 local switch="$3"
75 local _loctmp
76 config_get _loctmp "$section" "$option"
77 [ -z "$_loctmp" ] && return 0
78 xappend "$switch=$_loctmp"
79 }
80
81 append_server() {
82 xappend "--server=$1"
83 }
84
85 append_address() {
86 xappend "--address=$1"
87 }
88
89 append_ipset() {
90 xappend "--ipset=$1"
91 }
92
93 append_interface() {
94 local ifname=$(uci_get_state network "$1" ifname "$1")
95 xappend "--interface=$ifname"
96 }
97
98 append_notinterface() {
99 local ifname=$(uci_get_state network "$1" ifname "$1")
100 xappend "--except-interface=$ifname"
101 }
102
103 append_addnhosts() {
104 xappend "--addn-hosts=$1"
105 }
106
107 append_bogusnxdomain() {
108 xappend "--bogus-nxdomain=$1"
109 }
110
111 append_pxe_service() {
112 xappend "--pxe-service=$1"
113 }
114
115 dnsmasq() {
116 local cfg="$1"
117 append_bool "$cfg" authoritative "--dhcp-authoritative"
118 append_bool "$cfg" nodaemon "--no-daemon"
119 append_bool "$cfg" domainneeded "--domain-needed"
120 append_bool "$cfg" filterwin2k "--filterwin2k"
121 append_bool "$cfg" nohosts "--no-hosts"
122 append_bool "$cfg" nonegcache "--no-negcache"
123 append_bool "$cfg" strictorder "--strict-order"
124 append_bool "$cfg" logqueries "--log-queries=extra"
125 append_bool "$cfg" noresolv "--no-resolv"
126 append_bool "$cfg" localise_queries "--localise-queries"
127 append_bool "$cfg" readethers "--read-ethers"
128 append_bool "$cfg" dbus "--enable-dbus"
129 append_bool "$cfg" boguspriv "--bogus-priv"
130 append_bool "$cfg" expandhosts "--expand-hosts"
131 config_get tftp_root "$cfg" "tftp_root"
132 [ -d "$tftp_root" ] && append_bool "$cfg" enable_tftp "--enable-tftp"
133 append_bool "$cfg" tftp_no_fail "--tftp-no-fail"
134 append_bool "$cfg" nonwildcard "--bind-dynamic"
135 append_bool "$cfg" fqdn "--dhcp-fqdn"
136 append_bool "$cfg" proxydnssec "--proxy-dnssec"
137 append_bool "$cfg" localservice "--local-service"
138 append_bool "$cfg" quietdhcp "--quiet-dhcp"
139 append_bool "$cfg" sequential_ip "--dhcp-sequential-ip"
140 append_bool "$cfg" allservers "--all-servers"
141 append_bool "$cfg" noping "--no-ping"
142
143 append_parm "$cfg" dhcpscript "--dhcp-script"
144 append_parm "$cfg" cachesize "--cache-size"
145 append_parm "$cfg" dnsforwardmax "--dns-forward-max"
146 append_parm "$cfg" port "--port"
147 append_parm "$cfg" ednspacket_max "--edns-packet-max"
148 append_parm "$cfg" dhcpleasemax "--dhcp-lease-max"
149 append_parm "$cfg" "queryport" "--query-port"
150 append_parm "$cfg" "minport" "--min-port"
151 append_parm "$cfg" "domain" "--domain"
152 append_parm "$cfg" "local" "--server"
153 config_list_foreach "$cfg" "server" append_server
154 config_list_foreach "$cfg" "address" append_address
155 config_list_foreach "$cfg" "ipset" append_ipset
156 config_list_foreach "$cfg" "interface" append_interface
157 config_list_foreach "$cfg" "notinterface" append_notinterface
158 config_list_foreach "$cfg" "addnhosts" append_addnhosts
159 config_list_foreach "$cfg" "bogusnxdomain" append_bogusnxdomain
160 append_parm "$cfg" "leasefile" "--dhcp-leasefile"
161 append_parm "$cfg" "resolvfile" "--resolv-file"
162 append_parm "$cfg" "serversfile" "--servers-file"
163 append_parm "$cfg" "tftp_root" "--tftp-root"
164 append_parm "$cfg" "dhcp_boot" "--dhcp-boot"
165 append_parm "$cfg" "local_ttl" "--local-ttl"
166 append_parm "$cfg" "pxe_prompt" "--pxe-prompt"
167 config_list_foreach "$cfg" "pxe_service" append_pxe_service
168 config_get DOMAIN "$cfg" domain
169
170 config_get_bool ADD_LOCAL_DOMAIN "$cfg" add_local_domain 1
171 config_get_bool ADD_LOCAL_HOSTNAME "$cfg" add_local_hostname 1
172
173 config_get_bool readethers "$cfg" readethers
174 [ "$readethers" = "1" -a \! -e "/etc/ethers" ] && touch /etc/ethers
175
176 config_get leasefile $cfg leasefile
177 [ -n "$leasefile" -a \! -e "$leasefile" ] && touch "$leasefile"
178 config_get_bool cachelocal "$cfg" cachelocal 1
179
180 config_get hostsfile "$cfg" dhcphostsfile
181 [ -e "$hostsfile" ] && xappend "--dhcp-hostsfile=$hostsfile"
182
183 local rebind
184 config_get_bool rebind "$cfg" rebind_protection 1
185 [ $rebind -gt 0 ] && {
186 log_once \
187 "DNS rebinding protection is active," \
188 "will discard upstream RFC1918 responses!"
189 xappend "--stop-dns-rebind"
190
191 local rebind_localhost
192 config_get_bool rebind_localhost "$cfg" rebind_localhost 0
193 [ $rebind_localhost -gt 0 ] && {
194 log_once "Allowing 127.0.0.0/8 responses"
195 xappend "--rebind-localhost-ok"
196 }
197
198 append_rebind_domain() {
199 log_once "Allowing RFC1918 responses for domain $1"
200 xappend "--rebind-domain-ok=$1"
201 }
202
203 config_list_foreach "$cfg" rebind_domain append_rebind_domain
204 }
205
206 config_get_bool dnssec "$cfg" dnssec 0
207 [ "$dnssec" -gt 0 ] && {
208 xappend "--conf-file=$TRUSTANCHORSFILE"
209 xappend "--dnssec"
210 xappend "--dnssec-timestamp=$TIMESTAMPFILE"
211 append_bool "$cfg" dnsseccheckunsigned "--dnssec-check-unsigned"
212 }
213
214 dhcp_option_add "$cfg" "" 0
215
216 xappend "--dhcp-broadcast=tag:needs-broadcast"
217
218 mkdir -p /tmp/hosts /tmp/dnsmasq.d
219 xappend "--addn-hosts=/tmp/hosts"
220 xappend "--conf-dir=/tmp/dnsmasq.d"
221 xappend "--user=dnsmasq"
222 xappend "--group=dnsmasq"
223
224 echo >> $CONFIGFILE
225
226 config_get_bool enable_tftp "$cfg" enable_tftp 0
227 [ "$enable_tftp" -gt 0 ] && {
228 config_get tftp_root "$cfg" tftp_root
229 append EXTRA_MOUNT $tftp_root
230 }
231 }
232
233 dhcp_subscrid_add() {
234 local cfg="$1"
235
236 config_get networkid "$cfg" networkid
237 [ -n "$networkid" ] || return 0
238
239 config_get subscriberid "$cfg" subscriberid
240 [ -n "$subscriberid" ] || return 0
241
242 xappend "--dhcp-subscrid=$networkid,$subscriberid"
243
244 config_get_bool force "$cfg" force 0
245
246 dhcp_option_add "$cfg" "$networkid" "$force"
247 }
248
249 dhcp_remoteid_add() {
250 local cfg="$1"
251
252 config_get networkid "$cfg" networkid
253 [ -n "$networkid" ] || return 0
254
255 config_get remoteid "$cfg" remoteid
256 [ -n "$remoteid" ] || return 0
257
258 xappend "--dhcp-remoteid=$networkid,$remoteid"
259
260 config_get_bool force "$cfg" force 0
261
262 dhcp_option_add "$cfg" "$networkid" "$force"
263 }
264
265 dhcp_circuitid_add() {
266 local cfg="$1"
267
268 config_get networkid "$cfg" networkid
269 [ -n "$networkid" ] || return 0
270
271 config_get circuitid "$cfg" circuitid
272 [ -n "$circuitid" ] || return 0
273
274 xappend "--dhcp-circuitid=$networkid,$circuitid"
275
276 config_get_bool force "$cfg" force 0
277
278 dhcp_option_add "$cfg" "$networkid" "$force"
279 }
280
281 dhcp_userclass_add() {
282 local cfg="$1"
283
284 config_get networkid "$cfg" networkid
285 [ -n "$networkid" ] || return 0
286
287 config_get userclass "$cfg" userclass
288 [ -n "$userclass" ] || return 0
289
290 xappend "--dhcp-userclass=$networkid,$userclass"
291
292 config_get_bool force "$cfg" force 0
293
294 dhcp_option_add "$cfg" "$networkid" "$force"
295 }
296
297 dhcp_vendorclass_add() {
298 local cfg="$1"
299
300 config_get networkid "$cfg" networkid
301 [ -n "$networkid" ] || return 0
302
303 config_get vendorclass "$cfg" vendorclass
304 [ -n "$vendorclass" ] || return 0
305
306 xappend "--dhcp-vendorclass=$networkid,$vendorclass"
307
308 config_get_bool force "$cfg" force 0
309
310 dhcp_option_add "$cfg" "$networkid" "$force"
311 }
312
313 dhcp_host_add() {
314 local cfg="$1"
315
316 config_get_bool force "$cfg" force 0
317
318 config_get networkid "$cfg" networkid
319 [ -n "$networkid" ] && dhcp_option_add "$cfg" "$networkid" "$force"
320
321 config_get_bool enable "$cfg" enable 1
322 [ "$enable" = "0" ] && return 0
323
324 config_get name "$cfg" name
325 config_get ip "$cfg" ip
326 [ -n "$ip" -o -n "$name" ] || return 0
327
328 config_get_bool dns "$cfg" dns 0
329 [ "$dns" = "1" -a -n "$ip" -a -n "$name" ] && {
330 echo "$ip $name${DOMAIN:+.$DOMAIN}" >> $HOSTFILE
331 }
332
333 config_get mac "$cfg" mac
334 if [ -n "$mac" ]; then
335 # --dhcp-host=00:20:e0:3b:13:af,192.168.0.199,lap
336 macs=""
337 for m in $mac; do append macs "$m" ","; done
338 else
339 # --dhcp-host=lap,192.168.0.199
340 [ -n "$name" ] || return 0
341 macs="$name"
342 name=""
343 fi
344
345 config_get tag "$cfg" tag
346
347 config_get_bool broadcast "$cfg" broadcast 0
348 [ "$broadcast" = "0" ] && broadcast=
349
350 config_get leasetime "$cfg" leasetime
351
352 xappend "--dhcp-host=$macs${networkid:+,net:$networkid}${broadcast:+,set:needs-broadcast}${tag:+,set:$tag}${ip:+,$ip}${name:+,$name}${leasetime:+,$leasetime}"
353 }
354
355 dhcp_tag_add() {
356 local cfg="$1"
357
358 tag="$cfg"
359
360 [ -n "$tag" ] || return 0
361
362 config_get_bool force "$cfg" force 0
363 [ "$force" = "0" ] && force=
364
365 config_get option "$cfg" dhcp_option
366 for o in $option; do
367 xappend "--dhcp-option${force:+-force}=tag:$tag,$o"
368 done
369 }
370
371 dhcp_mac_add() {
372 local cfg="$1"
373
374 config_get networkid "$cfg" networkid
375 [ -n "$networkid" ] || return 0
376
377 config_get mac "$cfg" mac
378 [ -n "$mac" ] || return 0
379
380 xappend "--dhcp-mac=$networkid,$mac"
381
382 dhcp_option_add "$cfg" "$networkid"
383 }
384
385 dhcp_boot_add() {
386 local cfg="$1"
387
388 config_get networkid "$cfg" networkid
389
390 config_get filename "$cfg" filename
391 [ -n "$filename" ] || return 0
392
393 config_get servername "$cfg" servername
394 config_get serveraddress "$cfg" serveraddress
395
396 [ -n "$serveraddress" -a ! -n "$servername" ] && return 0
397
398 xappend "--dhcp-boot=${networkid:+net:$networkid,}${filename}${servername:+,$servername}${serveraddress:+,$serveraddress}"
399
400 config_get_bool force "$cfg" force 0
401
402 dhcp_option_add "$cfg" "$networkid" "$force"
403 }
404
405
406 dhcp_add() {
407 local cfg="$1"
408 config_get net "$cfg" interface
409 [ -n "$net" ] || return 0
410
411 config_get dhcpv4 "$cfg" dhcpv4
412 [ "$dhcpv4" != "disabled" ] || return 0
413
414 config_get networkid "$cfg" networkid
415 [ -n "$networkid" ] || networkid="$net"
416
417 network_get_subnet subnet "$net" || return 0
418 network_get_device ifname "$net" || return 0
419 network_get_protocol proto "$net" || return 0
420
421 [ "$cachelocal" = "0" ] && network_get_dnsserver dnsserver "$net" && {
422 DNS_SERVERS="$DNS_SERVERS $dnsserver"
423 }
424
425 append_bool "$cfg" ignore "--no-dhcp-interface=$ifname" && return 0
426
427 # Do not support non-static interfaces for now
428 [ static = "$proto" ] || return 0
429
430 # Override interface netmask with dhcp config if applicable
431 config_get netmask "$cfg" netmask "${subnet##*/}"
432
433 #check for an already active dhcp server on the interface, unless 'force' is set
434 config_get_bool force "$cfg" force 0
435 [ $force -gt 0 ] || dhcp_check "$ifname" || return 0
436
437 config_get start "$cfg" start
438 config_get limit "$cfg" limit
439 config_get leasetime "$cfg" leasetime
440 config_get options "$cfg" options
441 config_get_bool dynamicdhcp "$cfg" dynamicdhcp 1
442
443 leasetime="${leasetime:-12h}"
444 start="$(dhcp_calc "${start:-100}")"
445 limit="${limit:-150}"
446 [ "$limit" -gt 0 ] && limit=$((limit-1))
447 eval "$(ipcalc.sh "${subnet%%/*}" $netmask $start $limit)"
448 if [ "$dynamicdhcp" = "0" ]; then END="static"; fi
449 xappend "--dhcp-range=$networkid,$START,$END,$NETMASK,$leasetime${options:+ $options}"
450
451 dhcp_option_add "$cfg" "$networkid"
452 }
453
454 dhcp_option_add() {
455 local cfg="$1"
456 local networkid="$2"
457 local force="$3"
458
459 [ "$force" = "0" ] && force=
460
461 config_get dhcp_option "$cfg" dhcp_option
462 for o in $dhcp_option; do
463 xappend "--dhcp-option${force:+-force}=${networkid:+$networkid,}$o"
464 done
465
466 }
467
468 dhcp_domain_add() {
469 local cfg="$1"
470 local ip name names record
471
472 config_get names "$cfg" name "$2"
473 [ -n "$names" ] || return 0
474
475 config_get ip "$cfg" ip "$3"
476 [ -n "$ip" ] || return 0
477
478 for name in $names; do
479 record="${record:+$record }$name"
480 done
481
482 echo "$ip $record" >> $HOSTFILE
483 }
484
485 dhcp_srv_add() {
486 local cfg="$1"
487
488 config_get srv "$cfg" srv
489 [ -n "$srv" ] || return 0
490
491 config_get target "$cfg" target
492 [ -n "$target" ] || return 0
493
494 config_get port "$cfg" port
495 [ -n "$port" ] || return 0
496
497 config_get class "$cfg" class
498 config_get weight "$cfg" weight
499
500 local service="$srv,$target,$port${class:+,$class${weight:+,$weight}}"
501
502 xappend "--srv-host=$service"
503 }
504
505 dhcp_mx_add() {
506 local cfg="$1"
507 local domain relay pref
508
509 config_get domain "$cfg" domain
510 [ -n "$domain" ] || return 0
511
512 config_get relay "$cfg" relay
513 [ -n "$relay" ] || return 0
514
515 config_get pref "$cfg" pref 0
516
517 local service="$domain,$relay,$pref"
518
519 xappend "--mx-host=$service"
520 }
521
522 dhcp_cname_add() {
523 local cfg="$1"
524 local cname target
525
526 config_get cname "$cfg" cname
527 [ -n "$cname" ] || return 0
528
529 config_get target "$cfg" target
530 [ -n "$target" ] || return 0
531
532 xappend "--cname=${cname},${target}"
533 }
534
535 dhcp_hostrecord_add() {
536 local cfg="$1"
537 local names addresses record val
538
539 config_get names "$cfg" name "$2"
540 if [ -z "$names" ]; then
541 return 0
542 fi
543
544 config_get addresses "$cfg" ip "$3"
545 if [ -z "$addresses" ]; then
546 return 0
547 fi
548
549 for val in $names $addresses; do
550 record="${record:+$record,}$val"
551 done
552
553 xappend "--host-record=$record"
554 }
555
556 dhcp_relay_add() {
557 local cfg="$1"
558 local local_addr server_addr interface
559
560 config_get local_addr "$cfg" local_addr
561 [ -n "$local_addr" ] || return 0
562
563 config_get server_addr "$cfg" server_addr
564 [ -n "$server_addr" ] || return 0
565
566 config_get interface "$cfg" interface
567 if [ -z "$interface" ]; then
568 xappend "--dhcp-relay=$local_addr,$server_addr"
569 else
570 xappend "--dhcp-relay=$local_addr,$server_addr,$interface"
571 fi
572 }
573
574 service_triggers()
575 {
576 procd_add_reload_trigger "dhcp"
577 }
578
579 boot() {
580 # Will be launched through hotplug
581 return 0
582 }
583
584 start_service() {
585 include /lib/functions
586
587 config_load dhcp
588
589 # before we can call xappend
590 mkdir -p /var/run/dnsmasq/
591 mkdir -p $(dirname $CONFIGFILE)
592 mkdir -p /var/lib/misc
593 touch /tmp/dhcp.leases
594
595 if [ ! -f "$TIMESTAMPFILE" ]; then
596 touch "$TIMESTAMPFILE"
597 chown dnsmasq.dnsmasq "$TIMESTAMPFILE"
598 fi
599
600 echo "# auto-generated config file from /etc/config/dhcp" > $CONFIGFILE
601 echo "# auto-generated config file from /etc/config/dhcp" > $HOSTFILE
602
603 # if we did this last, we could override auto-generated config
604 [ -f /etc/dnsmasq.conf ] && {
605 xappend "--conf-file=/etc/dnsmasq.conf"
606 }
607
608 args=""
609 config_foreach dnsmasq dnsmasq
610 config_foreach dhcp_host_add host
611 echo >> $CONFIGFILE
612 config_foreach dhcp_boot_add boot
613 config_foreach dhcp_mac_add mac
614 config_foreach dhcp_tag_add tag
615 config_foreach dhcp_vendorclass_add vendorclass
616 config_foreach dhcp_userclass_add userclass
617 config_foreach dhcp_circuitid_add circuitid
618 config_foreach dhcp_remoteid_add remoteid
619 config_foreach dhcp_subscrid_add subscrid
620 config_foreach dhcp_domain_add domain
621 config_foreach dhcp_hostrecord_add hostrecord
622 config_foreach dhcp_relay_add relay
623
624 # add own hostname
625 [ $ADD_LOCAL_HOSTNAME -eq 1 ] && {
626 local lanaddr lanaddr6
627 local ulaprefix="$(uci_get network @globals[0] ula_prefix)"
628 local hostname="$(uci_get system @system[0] hostname Lede)"
629
630 network_get_ipaddr lanaddr "lan" && {
631 dhcp_domain_add "" "$hostname" "$lanaddr"
632 }
633
634 [ -n "$ulaprefix" ] && network_get_ipaddrs6 lanaddr6 "lan" && {
635 for lanaddr6 in $lanaddr6; do
636 case "$lanaddr6" in
637 "${ulaprefix%%:/*}"*)
638 dhcp_domain_add "" "$hostname" "$lanaddr6"
639 ;;
640 esac
641 done
642 }
643 }
644
645 echo >> $CONFIGFILE
646 config_foreach dhcp_srv_add srvhost
647 config_foreach dhcp_mx_add mxhost
648 echo >> $CONFIGFILE
649
650 config_get odhcpd_is_active odhcpd maindhcp
651 if [ "$odhcpd_is_active" != "1" ]; then
652 config_foreach dhcp_add dhcp
653 fi
654
655 echo >> $CONFIGFILE
656 config_foreach dhcp_cname_add cname
657 echo >> $CONFIGFILE
658
659 rm -f /tmp/resolv.conf
660 [ $ADD_LOCAL_DOMAIN -eq 1 ] && [ -n "$DOMAIN" ] && {
661 echo "search $DOMAIN" >> /tmp/resolv.conf
662 }
663 DNS_SERVERS="$DNS_SERVERS 127.0.0.1"
664 for DNS_SERVER in $DNS_SERVERS ; do
665 echo "nameserver $DNS_SERVER" >> /tmp/resolv.conf
666 done
667
668 procd_open_instance
669 procd_set_param command $PROG -C $CONFIGFILE -k -x /var/run/dnsmasq/dnsmasq.pid
670 procd_set_param file $CONFIGFILE
671 procd_set_param respawn
672
673 procd_add_jail dnsmasq ubus log
674 procd_add_jail_mount $CONFIGFILE $TRUSTANCHORSFILE $HOSTFILE /etc/passwd /etc/group /etc/TZ /dev/null /dev/urandom /etc/dnsmasq.conf /tmp/dnsmasq.d /tmp/resolv.conf.auto /etc/hosts /etc/ethers $EXTRA_MOUNT
675 procd_add_jail_mount_rw /var/run/dnsmasq/ /tmp/dhcp.leases $TIMESTAMPFILE
676
677 procd_close_instance
678 }
679
680 reload_service() {
681 rc_procd start_service "$@"
682 return 0
683 }
684
685 stop_service() {
686 [ -f /tmp/resolv.conf ] && {
687 rm -f /tmp/resolv.conf
688 ln -s /tmp/resolv.conf.auto /tmp/resolv.conf
689 }
690 rm -f /var/run/dnsmasq.*.dhcp
691 }