cgproxy/cgattach.cpp

#include <iostream>
#include <fstream>
#include <unistd.h>
#include <stdlib.h>
#include <stdio.h>
#include <string.h>
#include <sys/types.h>
#include <sys/stat.h>
#include <regex>
using namespace std;

void print_usage(){
    fprintf(stderr, "usage: cgattach <pid> <cgroup>\n");
}

bool exist(string path){
    struct stat st;
    if (stat(path.c_str(),&st)!=-1){
        return S_ISDIR(st.st_mode);
    }
    return false;
}

bool validate(string pid, string cgroup){
    bool pid_v=regex_match(pid,regex("^[0-9]+$"));
    bool cg_v=regex_match(cgroup,regex("^\\/[a-zA-Z0-9\\-_./@]+$"));
    if (pid_v && cg_v) return true;
    // cout<<pid_v<<" "<<cg_v<<endl;
    print_usage();
    exit(EXIT_FAILURE);
}

int main(int argc,char *argv[]){
    setuid(0);
    setgid(0);
    if (getuid()!=0||getgid()!=0){
        fprintf(stderr, "cgattach need setuid sticky bit\n");
        exit(EXIT_FAILURE);
    }

    if (argc!=3){
        print_usage();
        exit(EXIT_FAILURE);
    }

    string pid=string(argv[1]);
    string cgroup_target=string(argv[2]);
    validate(pid, cgroup_target);
    string cgroup_mount_point="/sys/fs/cgroup";
    string cgroup_target_path=cgroup_mount_point+cgroup_target;
    string cgroup_target_procs=cgroup_target_path+"/cgroup.procs"; // only support cgroup v2

    // check if exist, we won't create it if not exist 
    if (!exist(cgroup_target_path)){
        if (mkdir(cgroup_target_path.c_str(), S_IRWXU|S_IRGRP|S_IXGRP|S_IROTH|S_IXOTH)==0){
            fprintf(stdout, "created cgroup %s success\n",cgroup_target.c_str());    
        }else{
            fprintf(stderr, "created cgroup %s failed\n",cgroup_target.c_str());
            exit(EXIT_FAILURE);
        }
        // fprintf(stderr, "cgroup %s not exist\n",cgroup_target.c_str());
        // exit(EXIT_FAILURE);
    }

    // put pid to target cgroup
    ofstream procs(cgroup_target_procs,ofstream::app);
    if (!procs.is_open()){
        fprintf(stderr, "open file %s failed\n",cgroup_target_procs.c_str());
        exit(EXIT_FAILURE);
    }
    procs<<pid.c_str()<<endl;
    procs.close();

    // maybe there some write error, for example process pid not exist
    if (!procs){
        fprintf(stderr, "write %s to %s failed, maybe process %s not exist\n",pid.c_str(),cgroup_target_procs.c_str(),pid.c_str());
        exit(EXIT_FAILURE);
    }
    return EXIT_SUCCESS;
}