90 lines
2.7 KiB
Bash
Executable File
90 lines
2.7 KiB
Bash
Executable File
#!/bin/bash
|
|
set -e
|
|
|
|
BRIDGE=weave
|
|
CONTAINER_IFNAME=ethwe
|
|
MTU=65535
|
|
|
|
SCRIPT_DIR=$(dirname $(readlink -f $0))
|
|
COMMAND=$1
|
|
IPADDR=$2
|
|
|
|
usage() {
|
|
echo "Usage:"
|
|
echo "weave <ipaddr>/<subnet> launch [-passwd <passwd>] <peer_host> ..."
|
|
echo "weave <ipaddr>/<subnet> run <docker run args> ..."
|
|
exit 1
|
|
}
|
|
|
|
shift 2 || usage
|
|
|
|
# pre-create bridge so we can set the MTU
|
|
[ ! -d /sys/class/net/$BRIDGE ] && {
|
|
ip link add dev $BRIDGE type bridge
|
|
ip link set dev $BRIDGE address 7a:$(od -txC -An -N5 /dev/random | tr \ : | tail -c+2)
|
|
# attempting to set the bridge MTU to a high value directly
|
|
# fails. Bridges take the lowest MTU of their interfaces. So
|
|
# instead we create a temporary interface with the desired MTU,
|
|
# attach that to the bridge, and then remove it again.
|
|
ip link add name v${CONTAINER_IFNAME}du mtu $MTU type dummy
|
|
ip link set dev v${CONTAINER_IFNAME}du master $BRIDGE
|
|
ip link del dev v${CONTAINER_IFNAME}du
|
|
ip link set dev $BRIDGE up
|
|
}
|
|
|
|
# We set the router name to the bridge mac since that is stable across
|
|
# re-creations of the containers.
|
|
#
|
|
# TODO use the mac of one of the physical host interfaces (eth0,
|
|
# wlan0, etc) so the name becomes stable across host restarts.
|
|
MACADDR=$(</sys/class/net/$BRIDGE/address)
|
|
|
|
case "$COMMAND" in
|
|
launch)
|
|
CONTAINER=$(docker run --privileged -d --name=weave -p 6783:6783/tcp -p 6783:6783/udp $WEAVE_DOCKER_ARGS zettio/weave -name $MACADDR "$@")
|
|
IFACE=eth0
|
|
;;
|
|
run)
|
|
CONTAINER=$(docker run -d "$@")
|
|
IFACE=$CONTAINER_IFNAME
|
|
;;
|
|
*)
|
|
echo "Unknown weave command '$COMMAND'"
|
|
usage
|
|
;;
|
|
esac
|
|
|
|
# the following borrows from https://github.com/jpetazzo/pipework
|
|
|
|
DOCKERPID=$(docker inspect --format='{{ .State.Pid }}' $CONTAINER)
|
|
[ "$DOCKERPID" = 0 ] && {
|
|
echo "Docker inspect returned invalid PID 0"
|
|
exit 1
|
|
}
|
|
[ "$DOCKERPID" = "<no value>" ] && {
|
|
echo "Container $CONTAINER unknown to Docker."
|
|
exit 1
|
|
}
|
|
|
|
NSPID=$DOCKERPID
|
|
|
|
[ ! -d /var/run/netns ] && mkdir -p /var/run/netns
|
|
[ -f /var/run/netns/$NSPID ] && rm -f /var/run/netns/$NSPID
|
|
ln -s /proc/$NSPID/ns/net /var/run/netns/$NSPID
|
|
|
|
LOCAL_IFNAME="v${CONTAINER_IFNAME}pl${NSPID}"
|
|
GUEST_IFNAME="v${CONTAINER_IFNAME}pg${NSPID}"
|
|
ip link add name $LOCAL_IFNAME mtu $MTU type veth peer name $GUEST_IFNAME mtu $MTU
|
|
ip link set $LOCAL_IFNAME master $BRIDGE
|
|
ip link set $LOCAL_IFNAME up
|
|
ip link set $GUEST_IFNAME netns $NSPID
|
|
ip netns exec $NSPID ip link set $GUEST_IFNAME name $CONTAINER_IFNAME
|
|
ip netns exec $NSPID ip addr add $IPADDR dev $CONTAINER_IFNAME
|
|
ip netns exec $NSPID ip link set $CONTAINER_IFNAME up
|
|
|
|
ip netns exec $NSPID ethtool -K $IFACE tx off > /dev/null
|
|
|
|
[ -f /var/run/netns/$NSPID ] && rm -f /var/run/netns/$NSPID
|
|
|
|
echo $CONTAINER
|