Martynas Pumputis
89221f117b
Please see https://github.com/weaveworks/weave/issues/2388#issuecomment-228365069 for more details.
60 lines
1.6 KiB
Go
60 lines
1.6 KiB
Go
package net
|
|
|
|
import (
|
|
"runtime"
|
|
|
|
"github.com/vishvananda/netlink"
|
|
"github.com/vishvananda/netns"
|
|
)
|
|
|
|
// NB: The following function is unsafe, because:
|
|
// - It changes a network namespace (netns) of an OS thread which runs
|
|
// the function. During execution, the Go runtime might clone a new OS thread
|
|
// for scheduling other go-routines, thus they might end up running in
|
|
// a "wrong" netns.
|
|
// - runtime.LockOSThread does not guarantee that a spawned go-routine on
|
|
// the locked thread will be run by it. Thus, the work function is
|
|
// not allowed to spawn any go-routine which is dependent on the given netns.
|
|
|
|
// Please see https://github.com/weaveworks/weave/issues/2388#issuecomment-228365069
|
|
// for more details and make sure that you understand the implications before
|
|
// using the function!
|
|
func WithNetNSUnsafe(ns netns.NsHandle, work func() error) error {
|
|
runtime.LockOSThread()
|
|
defer runtime.UnlockOSThread()
|
|
|
|
oldNs, err := netns.Get()
|
|
if err == nil {
|
|
defer oldNs.Close()
|
|
|
|
err = netns.Set(ns)
|
|
if err == nil {
|
|
defer netns.Set(oldNs)
|
|
|
|
err = work()
|
|
}
|
|
}
|
|
|
|
return err
|
|
}
|
|
|
|
func WithNetNSLinkUnsafe(ns netns.NsHandle, ifName string, work func(link netlink.Link) error) error {
|
|
return WithNetNSUnsafe(ns, func() error {
|
|
link, err := netlink.LinkByName(ifName)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
return work(link)
|
|
})
|
|
}
|
|
|
|
func WithNetNSLinkByPidUnsafe(pid int, ifName string, work func(link netlink.Link) error) error {
|
|
ns, err := netns.GetFromPid(pid)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
defer ns.Close()
|
|
|
|
return WithNetNSLinkUnsafe(ns, ifName, work)
|
|
}
|