#!/usr/bin/ksh -p
# Copyright (c) 2009, 2015, Oracle and/or its affiliates. All rights reserved.
#

# Load SMF constants and functions
. /lib/svc/share/smf_include.sh

if [[ -z "$SMF_FMRI" ]]; then
	echo "this script can only be invoked by smf(5)"
	exit $SMF_EXIT_ERR_NOSMF
fi

case "$1" in
'start')
	# Handles server startup

	# retrieve the pkg_root property. If the variable is left empty
	# pkg_root is /
	pkg_root=$(svcprop -p pkg/pkg_root $SMF_FMRI)
	if [[ $? -ne 0 ]]; then
		echo "service property pkg/pkg_root not defined for" \
		    "service: $SMF_FMRI"
		exit $SMF_EXIT_ERR_CONFIG
	fi

	# make sure pkg_root ends with a /
	echo $pkg_root | grep /$ >/dev/null
	if [[ $? -ne 0 ]]; then
		pkg_root="${pkg_root}/"
	fi

        # if configured readonly & standalone, refresh the depot service,
        # if is is present, and exit immediately as a transient service.
        readonly=$(svcprop -p pkg/readonly $SMF_FMRI)
        standalone=$(svcprop -p pkg/standalone $SMF_FMRI)
        if [[ "$readonly" == "true" ]] && [[ "$standalone" == "false" ]] && \
           [[ -f /usr/lib/pkg.depot-config ]]; then
                svcadm refresh svc:/application/pkg/depot
                svcadm enable svc:/application/pkg/depot
                smf_method_exit $SMF_EXIT_TEMP_TRANSIENT \
                    "managed_by_depot" \
                    "svc:/application/pkg/depot configuration updated."
        fi

	# adjust the PYTHONPATH to point to the current environment
	# we need to make sure to adjust the PYTHONPATH accordingly
	# to a Python 2.7 or 3.4 environment
	python_ver=$(head -1 ${pkg_root}usr/lib/pkg.depotd 2>/dev/null |
	    awk -F/ '{print $NF}')
	if [[ $python_ver != *python* ]]; then
		echo "invalid python version $python_ver found in"
		echo "${pkg_root}usr/lib/pkg.depotd"
		exit $SMF_EXIT_ERR_FATAL
	fi

	PYTHONPATH=${pkg_root}usr/lib/${python_ver}/vendor-packages/:$PYTHONPATH

	export PYTHONPATH

	#
	# If this process has net_privaddr, then we pass it along.
	# If not, we ensure that we don't specify it, since that will
	# cause ppriv to throw an error.
	#
	privaddr=""
	ppriv -v $$ | grep 'E: ' | grep net_privaddr > /dev/null 2>&1
	if [[ $? == 0 ]]; then
		echo "Dropping net_privaddr privilege."
		privaddr=",net_privaddr"
	fi

	#
	# Build up the privileges available starting with "basic".  This
	# provides some protection even when pkg.depotd runs as root.
	#
	wrapper="ppriv -s \
            A=basic,-file_link_any,-proc_info,-proc_session$privaddr -e"

	# Build the command to start pkg.depotd.
	cmd="$wrapper ${pkg_root}usr/lib/pkg.depotd --cfg $SMF_FMRI"

	# Echo the command so that the log contains the command used to start
	# pkg.depotd.
	echo $cmd

	exec $cmd

	;;

'stop')

        # if configured readonly & standalone, exit immediately as transient
        # unless we've got a running pkg.depotd process, which happens if the
        # user has modified the pkg/server configuration, but hasn't restarted
        # the server in order to apply those changes.
        readonly=$(svcprop -p pkg/readonly $SMF_FMRI)
        standalone=$(svcprop -p pkg/standalone $SMF_FMRI)

        if [[ "$readonly" == "true" ]] && [[ "$standalone" == "false" ]]  && \
            [[ -f /usr/lib/pkg.depot-config ]] ; then
                svcadm refresh svc:/application/pkg/depot
                if [ -z "$2" ] ; then
                        # there's no existing pkg.depotd - we can exit now.
                        echo "depot in use, stop method script complete."
                        exit $SMF_EXIT_OK
                fi
        fi

	#
	# Strategy: First, try shutting down pkg.depotd using polite kill.  Use up
	# as much as possible of the allotted timeout period waiting for polite
	# kill to take effect.  As time runs out, try a more aggressive kill.
	#
	SVC_TIMEOUT=`svcprop -p stop/timeout_seconds $SMF_FMRI`
	if [[ $? -ne 0 ]]; then
		echo "service property stop/timeout_seconds not defined" \
		    "for service: $SMF_FMRI"
		exit $SMF_EXIT_ERR_CONFIG
	fi

	#
	# Note that we're working around an oddity in smf_kill_contract: it
	# waits in 5 second chunks and can overshoot the specified timeout
	# by as many as 4 seconds.  Example: a specified wait of 6 will result
	# in a wait of 10 seconds in reality.  Since we may potentially do a
	# first kill and then a second, we must ensure that at least 8 seconds
	# of slop is left in reserve.  To be paranoid, we go for 10.
	#
	((POLITE=$SVC_TIMEOUT - 10))
	if [[ $POLITE -gt 0 ]]; then
		smf_kill_contract $2 TERM 1 $POLITE
		ret=$?
		# '2' indicates timeout with non-empty contract.
		if [[ $ret -eq 2 ]]; then
			echo "Gentle contract kill timed out after" \
			    "$POLITE seconds, trying SIGKILL." >&2
			#
			# Again, despite the specified timeout, this will
			# take a minimum of 5 seconds to complete.
			#
			smf_kill_contract $2 KILL 1 1
			if [[ $ret -ne 0 ]]; then
				exit $SMF_EXIT_ERR_FATAL
			fi
		fi
	else
		# If the timeout is too short, we just try once, politely.
		smf_kill_contract $2 TERM
	fi
	;;

*)
	echo "Usage: $0 { start | stop }"
	exit $SMF_EXIT_ERR_CONFIG
	;;

esac
exit $SMF_EXIT_OK