f-34: route: fix missing route for metadata #34

Signed-off-by: GnomeZworc <nicolas.boufidjeline@g3e.fr>
This commit is contained in:
GnomeZworc 2026-08-24 22:57:03 +02:00
commit a2170fff08
Signed by: nicolas.boufideline
GPG key ID: 4406BBBF8845D632
5 changed files with 32 additions and 12 deletions

View file

@ -6,17 +6,20 @@ import (
"os" "os"
"path/filepath" "path/filepath"
"strings" "strings"
"git.g3e.fr/syonad/two/internal/metadata"
) )
func GenerateConfig(c Config) (string, map[string]string, error) { func GenerateConfig(c Config) (string, map[string]string, error) {
if c.InterfaceIP == nil {
return "", nil, fmt.Errorf("interface ip is required: guests would have no route to the metadata server")
}
mask := fmt.Sprintf("%d.%d.%d.%d", c.Network.Mask[0], c.Network.Mask[1], c.Network.Mask[2], c.Network.Mask[3]) mask := fmt.Sprintf("%d.%d.%d.%d", c.Network.Mask[0], c.Network.Mask[1], c.Network.Mask[2], c.Network.Mask[3])
var sb strings.Builder var sb strings.Builder
fmt.Fprintf(&sb, "no-resolv\n") fmt.Fprintf(&sb, "no-resolv\n")
fmt.Fprintf(&sb, "dhcp-range=%s,static,%s,12h\n", c.Network.IP.String(), mask) fmt.Fprintf(&sb, "dhcp-range=%s,static,%s,12h\n", c.Network.IP.String(), mask)
if c.VPCRoute != nil { fmt.Fprintf(&sb, "dhcp-option=121,%s\n", strings.Join(classlessRoutes(c), ","))
fmt.Fprintf(&sb, "dhcp-option=121,%s,%s\n", c.VPCRoute.String(), c.VPCGateway.String())
}
if c.DefaultGateway != nil { if c.DefaultGateway != nil {
fmt.Fprintf(&sb, "dhcp-option=3,%s\n", c.DefaultGateway.String()) fmt.Fprintf(&sb, "dhcp-option=3,%s\n", c.DefaultGateway.String())
} else { } else {
@ -40,6 +43,19 @@ func GenerateConfig(c Config) (string, map[string]string, error) {
return outPath, entries, os.WriteFile(outPath, []byte(sb.String()), 0644) return outPath, entries, os.WriteFile(outPath, []byte(sb.String()), 0644)
} }
func classlessRoutes(c Config) []string {
nextHop := c.InterfaceIP.String()
routes := []string{metadata.ServiceIP + "/32," + nextHop}
if c.VPCRoute != nil {
routes = append(routes, c.VPCRoute.String()+","+nextHop)
}
if c.DefaultGateway != nil {
routes = append(routes, "0.0.0.0/0,"+c.DefaultGateway.String())
}
return routes
}
func incrementIP(ip net.IP) { func incrementIP(ip net.IP) {
for j := len(ip) - 1; j >= 0; j-- { for j := len(ip) - 1; j >= 0; j-- {
ip[j]++ ip[j]++

View file

@ -8,9 +8,9 @@ const DefaultConfDir = "/etc/dnsmasq.d"
type Config struct { type Config struct {
Network *net.IPNet Network *net.IPNet
VPCGateway net.IP // next-hop for VPCRoute (option 121) InterfaceIP net.IP // subnet gateway; next-hop for the metadata and VPC routes
VPCRoute *net.IPNet // if non-nil, emit dhcp-option=121,VPCRoute,VPCGateway VPCRoute *net.IPNet // if non-nil, routed via InterfaceIP in option 121
DefaultGateway net.IP // if non-nil, emit dhcp-option=3,DefaultGateway; if nil, emit a bare dhcp-option=3 to suppress the dnsmasq default DefaultGateway net.IP // if non-nil, default route via option 3 and 0.0.0.0/0 in option 121
Name string Name string
ConfDir string ConfDir string
} }

View file

@ -3,6 +3,8 @@ package iptables
import ( import (
"fmt" "fmt"
"os/exec" "os/exec"
"git.g3e.fr/syonad/two/internal/metadata"
) )
func addRule(args ...string) error { func addRule(args ...string) error {
@ -16,7 +18,7 @@ func deleteRule(args ...string) error {
func AddMetadataRedirect(vmIP, gatewayIP, metadataPort string) error { func AddMetadataRedirect(vmIP, gatewayIP, metadataPort string) error {
if err := addRule("PREROUTING", if err := addRule("PREROUTING",
"-s", vmIP+"/32", "-s", vmIP+"/32",
"-d", "169.254.169.254/32", "-d", metadata.ServiceIP+"/32",
"-p", "tcp", "-m", "tcp", "-p", "tcp", "-m", "tcp",
"--dport", "80", "--dport", "80",
"-j", "DNAT", "-j", "DNAT",
@ -30,7 +32,7 @@ func AddMetadataRedirect(vmIP, gatewayIP, metadataPort string) error {
func DeleteMetadataRedirect(vmIP, gatewayIP, metadataPort string) error { func DeleteMetadataRedirect(vmIP, gatewayIP, metadataPort string) error {
if err := deleteRule("PREROUTING", if err := deleteRule("PREROUTING",
"-s", vmIP+"/32", "-s", vmIP+"/32",
"-d", "169.254.169.254/32", "-d", metadata.ServiceIP+"/32",
"-p", "tcp", "-m", "tcp", "-p", "tcp", "-m", "tcp",
"--dport", "80", "--dport", "80",
"-j", "DNAT", "-j", "DNAT",

View file

@ -1,5 +1,7 @@
package metadata package metadata
const ServiceIP = "169.254.169.254"
type NoCloudData struct { type NoCloudData struct {
MetaData string MetaData string
UserData string UserData string

View file

@ -139,10 +139,10 @@ func startDHCP(db *badger.DB, subnetName string, d subnetData) error {
Network: d.cidr, Network: d.cidr,
Name: d.vpc + "_" + d.bridge, Name: d.vpc + "_" + d.bridge,
ConfDir: dhcp.DefaultConfDir, ConfDir: dhcp.DefaultConfDir,
InterfaceIP: d.interfaceIP,
} }
switch d.mode { switch d.mode {
case "vxlan": case "vxlan":
conf.VPCGateway = d.interfaceIP
conf.VPCRoute = d.vpcCIDR conf.VPCRoute = d.vpcCIDR
case "bridge": case "bridge":
if d.defaultRoute { if d.defaultRoute {