//go:build linux
// +build linux

package exec

import (
	"fmt"
	"os"
	"os/exec"
	"path"
	"syscall"
	"time"

	warewulfconf "github.com/warewulf/warewulf/internal/pkg/config"

	"github.com/spf13/cobra"
	"github.com/warewulf/warewulf/internal/pkg/container"
	"github.com/warewulf/warewulf/internal/pkg/util"
	"github.com/warewulf/warewulf/internal/pkg/wwlog"
)

func runChildCmd(cmd *cobra.Command, args []string) error {
	child := exec.Command("/proc/self/exe", args...)
	child.SysProcAttr = &syscall.SysProcAttr{
		Cloneflags: syscall.CLONE_NEWUTS | syscall.CLONE_NEWPID | syscall.CLONE_NEWNS,
	}
	child.Stdin = cmd.InOrStdin()
	child.Stdout = cmd.OutOrStdout()
	child.Stderr = cmd.ErrOrStderr()
	return child.Run()
}

var childCommandFunc = runChildCmd

// Fork a child process with a new PID space
func runContainedCmd(cmd *cobra.Command, containerName string, args []string) (err error) {
	wwlog.Debug("runContainedCmd:args: %v", args)

	conf := warewulfconf.Get()

	runDir := container.RunDir(containerName)
	if err := os.Mkdir(runDir, 0750); err != nil {
		if _, existerr := os.Stat(runDir); !os.IsNotExist(existerr) {
			return fmt.Errorf("run directory already exists: another container command may already be running (otherwise, remove %s)", runDir)
		} else {
			return fmt.Errorf("unable to create run directory: %w", err)
		}
	}
	defer func() {
		if err := os.RemoveAll(runDir); err != nil {
			wwlog.Error("error removing run directory: %s", err)
		}
	}()

	logStr := fmt.Sprint(wwlog.GetLogLevel())
	childArgs := []string{"--warewulfconf", conf.GetWarewulfConf(), "--loglevel", logStr, "container", "exec", "__child"}
	childArgs = append(childArgs, containerName)
	for _, b := range binds {
		childArgs = append(childArgs, "--bind", b)
	}
	if nodeName != "" {
		childArgs = append(childArgs, "--node", nodeName)
	}
	childArgs = append(childArgs, "--")
	childArgs = append(childArgs, args...)
	// copy the files into the container at this stage, es in __child the
	// command syscall.Exec which replaces the __child process with the
	// exec command in the container. All the mounts, have to be done in
	// __child so that the used mounts don't propagate outside on the host
	// (see the CLONE attributes), but as for the copy option we need
	// to see if a file was modified after it was copied into the container
	// so do this here.
	// At first read out conf, the parse commandline, as copy files has the
	// same synatx as mount points
	mountPts := append(container.InitMountPnts(binds), conf.MountsContainer...)
	filesToCpy := getCopyFiles(mountPts)
	for _, cpyFile := range filesToCpy {
		if err := (cpyFile).copyToContainer(containerName); err != nil {
			wwlog.Warn("couldn't copy file: %s", err)
		}
	}
	wwlog.Verbose("Running contained command: %s", childArgs)
	retVal := childCommandFunc(cmd, childArgs)
	for _, cpyFile := range filesToCpy {
		if cpyFile.shouldRemoveFromContainer(containerName) {
			if err := cpyFile.removeFromContainer(containerName); err != nil {
				wwlog.Warn("couldn't remove file: %s", err)
			}
		}
	}
	return retVal
}

func CobraRunE(cmd *cobra.Command, args []string) error {
	wwlog.Debug("CobraRunE:args: %v", args)

	containerName := args[0]
	wwlog.Debug("CobraRunE:containerName: %v", containerName)
	if !container.ValidSource(containerName) {
		return fmt.Errorf("unknown Warewulf container: %s", containerName)
	}
	os.Setenv("WW_CONTAINER_SHELL", containerName)

	containerPath := container.RootFsDir(containerName)

	beforePasswdTime := getTime(path.Join(containerPath, "/etc/passwd"))
	wwlog.Debug("passwdTime: %v", beforePasswdTime)
	beforeGroupTime := getTime(path.Join(containerPath, "/etc/group"))
	wwlog.Debug("groupTime: %v", beforeGroupTime)

	err := runContainedCmd(cmd, containerName, args[1:])
	if err != nil {
		return fmt.Errorf("failed executing container command: %s", err)
	}

	if util.IsFile(path.Join(containerPath, "/etc/warewulf/container_exit.sh")) {
		wwlog.Verbose("Found clean script: /etc/warewulf/container_exit.sh")
		err = runContainedCmd(cmd, containerName, []string{"/bin/sh", "/etc/warewulf/container_exit.sh"})
		if err != nil {
			return fmt.Errorf("failed executing exit script: %s", err)
		}
	}

	userdbChanged := false
	if !beforePasswdTime.IsZero() {
		afterPasswdTime := getTime(path.Join(containerPath, "/etc/passwd"))
		wwlog.Debug("passwdTime: %v", afterPasswdTime)
		if beforePasswdTime.Before(afterPasswdTime) {
			if !SyncUser {
				wwlog.Warn("/etc/passwd has been modified, maybe you want to run syncuser")
			}
			userdbChanged = true
		}
	}
	if !beforeGroupTime.IsZero() {
		afterGroupTime := getTime(path.Join(containerPath, "/etc/group"))
		wwlog.Debug("groupTime: %v", afterGroupTime)
		if beforeGroupTime.Before(afterGroupTime) {
			if !SyncUser {
				wwlog.Warn("/etc/group has been modified, maybe you want to run syncuser")
			}
			userdbChanged = true
		}
	}
	if userdbChanged && SyncUser {
		err = container.SyncUids(containerName, false)
		if err != nil {
			wwlog.Error("Error in user sync, fix error and run 'syncuser' manually: %s", err)
		}
	}

	if Build {
		wwlog.Info("Building container image: %s", containerName)
		err = container.Build(containerName, false)
		if err != nil {
			return fmt.Errorf("could not build container image: %s: %s", containerName, err)
		}
	}
	return nil
}

func getTime(path string) time.Time {
	if fileStat, err := os.Stat(path); err != nil {
		return time.Time{}
	} else {
		unixStat := fileStat.Sys().(*syscall.Stat_t)
		return time.Unix(int64(unixStat.Mtim.Sec), int64(unixStat.Mtim.Nsec))
	}
}

func SetBinds(myBinds []string) {
	binds = append(binds, myBinds...)
}

func SetNode(myNode string) {
	nodeName = myNode
}

// file name and last modification time so we can remove the file if it wasn't modified
type copyFile struct {
	fileName string
	src      string
	modTime  time.Time
}

func (this *copyFile) containerDest(containerName string) string {
	return path.Join(container.RootFsDir(containerName), this.fileName)
}

func (this *copyFile) copyToContainer(containerName string) error {
	containerDest := this.containerDest(containerName)
	if _, err := os.Stat(path.Dir(containerDest)); err != nil {
		return err
	} else if _, err := os.Stat(containerDest); err == nil {
		return err
	} else if _, err := os.Stat(this.src); err != nil {
		return err
	} else if err := util.CopyFile(this.src, containerDest); err != nil {
		return err
	} else if stat, err := os.Stat(containerDest); err != nil {
		return err
	} else {
		this.modTime = stat.ModTime()
		return nil
	}
}

func (this *copyFile) shouldRemoveFromContainer(containerName string) bool {
	containerDest := this.containerDest(containerName)
	if this.modTime.IsZero() {
		wwlog.Debug("file was not previously copied: %s", this.fileName)
		return false
	} else if destStat, err := os.Stat(containerDest); err != nil {
		wwlog.Verbose("file is no longer present: %s (%s)", this.fileName, err)
		return false
	} else if destStat.ModTime() == this.modTime {
		wwlog.Verbose("don't remove modified file:", this.fileName)
		return false
	} else {
		return true
	}
}

func (this *copyFile) removeFromContainer(containerName string) error {
	containerDest := this.containerDest(containerName)
	return os.Remove(containerDest)
}

/*
Check the objects we want to copy in, instead of mounting
*/
func getCopyFiles(binds []*warewulfconf.MountEntry) (copyObjects []*copyFile) {
	for _, bind := range binds {
		if bind.Copy() {
			copyObjects = append(copyObjects, &copyFile{
				fileName: bind.Dest,
				src:      bind.Source,
			})
		}
	}
	return
}