tpm: Add socket module

Add SocketDev struct. Methods in SocketDev will be used to read & write
to Ctrl channel created by swtpm.

Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
Co-authored-by: Sean Yoo <t-seanyoo@microsoft.com>
This commit is contained in:
Praveen K Paladugu 2022-09-09 03:31:56 +00:00 committed by Rob Bradford
parent e3213c8a79
commit 58b902d036
4 changed files with 153 additions and 0 deletions

2
Cargo.lock generated
View File

@ -1166,8 +1166,10 @@ version = "0.1.0"
dependencies = [ dependencies = [
"anyhow", "anyhow",
"byteorder", "byteorder",
"libc",
"log", "log",
"thiserror", "thiserror",
"vmm-sys-util",
] ]
[[package]] [[package]]

View File

@ -8,5 +8,7 @@ version = "0.1.0"
[dependencies] [dependencies]
anyhow = "1.0.56" anyhow = "1.0.56"
byteorder = "1.4.3" byteorder = "1.4.3"
libc = "0.2.133"
log = "0.4.14" log = "0.4.14"
thiserror = "1.0.30" thiserror = "1.0.30"
vmm-sys-util = "0.10.0"

View File

@ -3,6 +3,11 @@
// SPDX-License-Identifier: Apache-2.0 // SPDX-License-Identifier: Apache-2.0
// //
#[macro_use]
extern crate log;
pub mod socket;
use anyhow::anyhow; use anyhow::anyhow;
use byteorder::{BigEndian, ReadBytesExt}; use byteorder::{BigEndian, ReadBytesExt};
use std::convert::TryInto; use std::convert::TryInto;

144
tpm/src/socket.rs Normal file
View File

@ -0,0 +1,144 @@
// Copyright © 2022, Microsoft Corporation
//
// SPDX-License-Identifier: Apache-2.0
//
use crate::TPM_CRB_BUFFER_MAX;
use anyhow::anyhow;
use std::io::Read;
use std::os::unix::io::{AsRawFd, RawFd};
use std::os::unix::net::UnixStream;
use thiserror::Error;
use vmm_sys_util::sock_ctrl_msg::ScmSocket;
#[derive(Error, Debug)]
pub enum Error {
#[error("Cannot connect to tpm Socket: {0}")]
ConnectToSocket(#[source] anyhow::Error),
#[error("Failed to read from socket: {0}")]
ReadFromSocket(#[source] anyhow::Error),
#[error("Failed to write to socket: {0}")]
WriteToSocket(#[source] anyhow::Error),
}
type Result<T> = anyhow::Result<T, Error>;
#[derive(PartialEq)]
enum SocketDevState {
Disconnected,
Connecting,
Connected,
}
pub struct SocketDev {
state: SocketDevState,
stream: Option<UnixStream>,
// Fd sent to swtpm process for Data Channel
write_msgfd: RawFd,
// Data Channel used by Cloud-Hypervisor
data_fd: RawFd,
// Control Channel used by Cloud-Hypervisor
control_fd: RawFd,
}
impl Default for SocketDev {
fn default() -> Self {
Self::new()
}
}
impl SocketDev {
pub fn new() -> Self {
Self {
state: SocketDevState::Disconnected,
stream: None,
write_msgfd: -1,
control_fd: -1,
data_fd: -1,
}
}
pub fn init(&mut self, path: String) -> Result<()> {
self.connect(&path)?;
Ok(())
}
pub fn connect(&mut self, socket_path: &str) -> Result<()> {
self.state = SocketDevState::Connecting;
let s = UnixStream::connect(socket_path).map_err(|e| {
Error::ConnectToSocket(anyhow!("Failed to connect to tpm Socket. Error: {:?}", e))
})?;
self.control_fd = s.as_raw_fd();
self.stream = Some(s);
self.state = SocketDevState::Connected;
debug!("Connected to tpm socket path : {:?}", socket_path);
Ok(())
}
pub fn set_datafd(&mut self, fd: RawFd) {
self.data_fd = fd;
}
pub fn set_msgfd(&mut self, fd: RawFd) {
self.write_msgfd = fd;
}
pub fn send_full(&self, buf: &[u8]) -> Result<usize> {
let write_fd = self.write_msgfd;
let size = self
.stream
.as_ref()
.unwrap()
.send_with_fd(buf, write_fd)
.map_err(|e| {
Error::WriteToSocket(anyhow!("Failed to write to Socket. Error: {:?}", e))
})?;
Ok(size)
}
pub fn write(&mut self, buf: &[u8]) -> Result<usize> {
if self.stream.is_none() {
return Err(Error::WriteToSocket(anyhow!(
"Stream for tpm socket was not initialized"
)));
}
if matches!(self.state, SocketDevState::Connected) {
let ret = self.send_full(buf)?;
// swtpm will receive data Fd after a successful send
// Reset cached write_msgfd after a successful send
// Ideally, write_msgfd is reset after first Ctrl Command
if ret > 0 && self.write_msgfd != 0 {
self.write_msgfd = 0;
}
Ok(ret)
} else {
Err(Error::WriteToSocket(anyhow!(
"TPM Socket was not in Connected State"
)))
}
}
pub fn read(&mut self, buf: &mut [u8]) -> Result<usize> {
let newbuf: &mut [u8] = &mut [0; TPM_CRB_BUFFER_MAX];
if self.stream.is_none() {
return Err(Error::ReadFromSocket(anyhow!(
"Stream for tpm socket was not initialized"
)));
}
let mut socket = self.stream.as_ref().unwrap();
let size: usize = socket.read(newbuf).map_err(|e| {
Error::ReadFromSocket(anyhow!("Failed to read from socket. Error Code {:?}", e))
})?;
if buf.len() < size {
return Err(Error::ReadFromSocket(anyhow!(
"Input buffer is of insufficient size"
)));
}
buf[0..size].clone_from_slice(&newbuf[0..size]);
Ok(size)
}
}