use PVE::LXC::Setup::Oracle;

use PVE::LXC::Setup::ALTLinux;

    oracle    => 'PVE::LXC::Setup::Oracle',

    altlinux  => 'PVE::LXC::Setup::ALTLinux',

    } elsif (-f  "$rootdir/etc/altlinux-release") {

	return "altlinux";

    } elsif (-f  "$rootdir/etc/oracle-release") {

	return "oracle";

package PVE::LXC::Setup::Oracle;

use strict;

use warnings;

use PVE::LXC::Setup::CentOS;

use base qw(PVE::LXC::Setup::CentOS);

sub new {

	my ($class, $conf, $rootdir) = @_;

	my $release = PVE::Tools::file_read_firstline("$rootdir/etc/oracle-release");

	die "unable to read version info\n" if !defined($release);

	my $version;

	if ($release =~ m/release\s+(\d+\.\d+)(\.\d+)?/){

		if ($1 >= 6 && $1 < 8){

			$version = $1;

		}

	}

	die "unsupported oracle release '$release'\n" if !$version;

	my $self = { conf => $conf, rootdir => $rootdir, version => $version };

	$conf->{ostype} = "oracle";

	return bless $self, $class;

}

1;

package PVE::LXC::Setup::ALTLinux;

use strict;

use warnings;

use PVE::LXC::Setup::Base;

use base qw(PVE::LXC::Setup::Base);

sub new {

	my $ostype = "altlinux";

	my ($class, $conf, $rootdir) = @_;

	my $version = PVE::Tools::file_read_firstline("$rootdir/etc/$ostype-release");

	my $self = { conf => $conf, rootdir => $rootdir, version => $version };

	$conf->{ostype} = $ostype;

	return bless $self, $class;

}

sub set_hostname {

	my ($self, $conf) = @_;

	# Redhat wants the fqdn in /etc/sysconfig/network's HOSTNAME

	my $hostname = $conf->{hostname} || 'localhost';

	my $sysconfig_network = "/etc/sysconfig/network";

	my $oldname;

	my $data = $self->ct_file_get_contents($sysconfig_network);

	if ($data =~ m/^HOSTNAME=\s*(\S+)\s*$/m){

		$oldname = $1;

	}

	my $hosts_fn = "/etc/hosts";

	my ($ipv4, $ipv6) = PVE::LXC::get_primary_ips($conf);

	my $hostip = $ipv4 || $ipv6;

	my ($searchdomains) = $self->lookup_dns_conf($conf);

	$self->update_etc_hosts($hostip, $oldname, $hostname, $searchdomains);

	if ($self->ct_file_exists($sysconfig_network)){

		my $data = $self->ct_file_get_contents($sysconfig_network);

		if ($data !~ s/^HOSTNAME=\h*(\S+)\h*$/HOSTNAME=$hostname/m){

			$data .= "HOSTNAME=$hostname\n";

		}

		$self->ct_file_set_contents($sysconfig_network, $data);

	}

}

sub setup_init {

	my ($self, $conf) = @_;

	my $filename = "/etc/inittab";

	return if !$self->ct_file_exists($filename);

	my $ttycount = PVE::LXC::Config->get_tty_count($conf);

	my $inittab = $self->ct_file_get_contents($filename);

	my @lines = grep {

		# remove getty lines

		!/^\s*\d+:\d+:[^:]*:.*getty/ &&

		# remove power lines

		!/^\s*p[fno0]:/

	} split(/\n/, $inittab);

	$inittab = join("\n", @lines) . "\n";

	$inittab .= "p0::powerfail:/sbin/shutdown -f -h +2 \"Power failure, system shutting down...\"\n";

	for (my $id = 1; $id <= $ttycount; $id++){

		next if $id == 7; # reserved for X11

		my $levels = ($id == 1) ? '234' : '2345';

		$inittab .= "$id:$levels:respawn:/sbin/mingetty tty$id\n";

	}

	$self->ct_file_set_contents($filename, $inittab);

}

sub setup_network {

	my ($self, $conf) = @_;

#	my $gw;

	foreach my $k (keys %$conf) {

		next if $k !~ m/^net(\d+)$/;

		my $d = PVE::LXC::Config->parse_lxc_network($conf->{$k});

		next if !$d->{name};

		my $ifpath = "/etc/net/ifaces/$d->{name}";

		$self->ct_make_path($ifpath);

		my $optfile = "$ifpath/options";

		my $addrfile = "$ifpath/ipv4address";

		my $routefile = "$ifpath/ipv4route";

		my $options = "TYPE=eth\n";

		my $address = '';

		my $routes = '';

		if ($d->{ip} && $d->{ip} ne 'manual'){

			if ($d->{ip} eq 'dhcp'){

				$options .= "BOOTPROTO=dhcp\n";

			} else {

				$options .= "BOOTPROTO=static\n";

				$address = "$d->{ip}\n";

				if (defined($d->{gw})){

					$routes .= "default via $d->{gw}\n";

					$self->ct_modify_file($routefile, $routes, delete => 1, prepend => 1);

				}

				$self->ct_file_set_contents($addrfile, $address);

			}

			$self->ct_file_set_contents($optfile, $options);

		}

	}

}

1;

# This derives from the global common config

lxc.include = /usr/share/lxc/config/common.conf

# Allow for 6 tty devices by default

lxc.tty = 6

# Doesn't support consoles in /dev/lxc/

#lxc.devttydir =

# Capabilities

# Uncomment these if you don't run anything that needs the capability, and

# would like the container to run with less privilege.

#

# Dropping sys_admin disables container root from doing a lot of things

# that could be bad like re-mounting lxc fstab entries rw for example,

# but also disables some useful things like being able to nfs mount, and

# things that are already namespaced with ns_capable() kernel checks, like

# hostname(1).

# lxc.cap.drop = sys_admin

# lxc.cap.drop = net_raw          # breaks dhcp/ping

# lxc.cap.drop = setgid           # breaks login (initgroups/setgroups)

# lxc.cap.drop = dac_read_search  # breaks login (pam unix_chkpwd)

# lxc.cap.drop = setuid           # breaks sshd,nfs statd

# lxc.cap.drop = audit_control    # breaks sshd (set_loginuid failed)

# lxc.cap.drop = audit_write

# lxc.cap.drop = setpcap          # big big login delays in Fedora 20 systemd

lxc.cap.drop = setfcap sys_nice sys_pacct sys_rawio

# This derives from the global userns config

lxc.include = /usr/share/lxc/config/userns.conf