159 lines
4.0 KiB
Bash
159 lines
4.0 KiB
Bash
#!/bin/sh
|
|
set -eu
|
|
|
|
mkdir -p /run/bird
|
|
|
|
SOCK_PATH="/run/bird/bird.ctl"
|
|
PROTO="${OBSERVE_PROTO:-rpki_tcp}"
|
|
INTERVAL="${OBSERVE_INTERVAL:-30}"
|
|
RPKI_HOST="${RPKI_HOST:-host.docker.internal}"
|
|
RPKI_PORT="${RPKI_PORT:-323}"
|
|
|
|
BIRD_CONFIG_PATH="${BIRD_CONFIG_PATH:-/config/bird.conf}"
|
|
|
|
ASPA_TABLE="${OBSERVE_ASPA_TABLE:-rtr_aspa}"
|
|
ROA4_TABLE="${OBSERVE_ROA4_TABLE:-rtr_roa_v4}"
|
|
ROA6_TABLE="${OBSERVE_ROA6_TABLE:-rtr_roa_v6}"
|
|
|
|
ASPA_COUNT="${OBSERVE_ASPA_COUNT:-3}"
|
|
ROA4_COUNT="${OBSERVE_ROA4_COUNT:-3}"
|
|
ROA6_COUNT="${OBSERVE_ROA6_COUNT:-3}"
|
|
|
|
SHOW_ASPA="${SHOW_ASPA:-1}"
|
|
SHOW_ROA4="${SHOW_ROA4:-1}"
|
|
SHOW_ROA6="${SHOW_ROA6:-1}"
|
|
SSH_HOST_PUBKEY_PATH="${SSH_HOST_PUBKEY_PATH:-/config/ssh/ssh_host_rsa_key.pub}"
|
|
SSH_KNOWN_HOSTS_PATH="${SSH_KNOWN_HOSTS_PATH:-/run/bird/known_hosts}"
|
|
|
|
ensure_ssh_known_hosts() {
|
|
if [ -s "$SSH_KNOWN_HOSTS_PATH" ]; then
|
|
return
|
|
fi
|
|
|
|
if [ ! -r "$SSH_HOST_PUBKEY_PATH" ]; then
|
|
echo "[entrypoint] WARNING: SSH host key file not found: $SSH_HOST_PUBKEY_PATH"
|
|
return
|
|
fi
|
|
|
|
set -- $(awk 'NF >= 2 { print $1, $2; exit }' "$SSH_HOST_PUBKEY_PATH")
|
|
if [ $# -ne 2 ]; then
|
|
echo "[entrypoint] WARNING: invalid SSH host key format in $SSH_HOST_PUBKEY_PATH"
|
|
return
|
|
fi
|
|
|
|
key_type="$1"
|
|
key_data="$2"
|
|
|
|
if echo "$key_type" | grep -q '^ssh-'; then
|
|
{
|
|
echo "$RPKI_HOST $key_type $key_data"
|
|
echo "[$RPKI_HOST]:$RPKI_PORT $key_type $key_data"
|
|
} > "$SSH_KNOWN_HOSTS_PATH"
|
|
else
|
|
cp "$SSH_HOST_PUBKEY_PATH" "$SSH_KNOWN_HOSTS_PATH"
|
|
fi
|
|
|
|
chmod 600 "$SSH_KNOWN_HOSTS_PATH" || true
|
|
echo "[entrypoint] generated known_hosts: $SSH_KNOWN_HOSTS_PATH"
|
|
}
|
|
|
|
print_first_n_objects() {
|
|
table_name="$1"
|
|
max_objects="$2"
|
|
|
|
birdc -s "$SOCK_PATH" show route table "$table_name" all 2>/dev/null | awk -v max="$max_objects" '
|
|
BEGIN {
|
|
count = 0
|
|
}
|
|
|
|
# 直接跳过空行
|
|
/^[[:space:]]*$/ {
|
|
next
|
|
}
|
|
|
|
# 保留 birdc 的表头
|
|
/^BIRD / {
|
|
print
|
|
next
|
|
}
|
|
|
|
/^Table / {
|
|
print
|
|
next
|
|
}
|
|
|
|
# 非缩进且不是表头，视为一个新对象的开始
|
|
/^[^[:space:]]/ {
|
|
count++
|
|
if (count > max) {
|
|
exit
|
|
}
|
|
print
|
|
next
|
|
}
|
|
|
|
# 缩进内容，只有在已进入前 max 个对象时才打印
|
|
{
|
|
if (count > 0 && count <= max) {
|
|
print
|
|
}
|
|
}
|
|
' || true
|
|
}
|
|
|
|
echo "[entrypoint] starting bird"
|
|
echo "[entrypoint] config : $BIRD_CONFIG_PATH"
|
|
echo "[entrypoint] observe proto : $PROTO"
|
|
echo "[entrypoint] observe interval : $INTERVAL"
|
|
echo "[entrypoint] target : $RPKI_HOST:$RPKI_PORT"
|
|
echo "[entrypoint] show aspa : $SHOW_ASPA ($ASPA_TABLE, first $ASPA_COUNT objects)"
|
|
echo "[entrypoint] show roa4 : $SHOW_ROA4 ($ROA4_TABLE, first $ROA4_COUNT objects)"
|
|
echo "[entrypoint] show roa6 : $SHOW_ROA6 ($ROA6_TABLE, first $ROA6_COUNT objects)"
|
|
|
|
if [ "$PROTO" = "rpki_ssh" ] || grep -q 'transport[[:space:]]\+ssh' "$BIRD_CONFIG_PATH"; then
|
|
ensure_ssh_known_hosts
|
|
fi
|
|
|
|
if nc -zvw3 "$RPKI_HOST" "$RPKI_PORT"; then
|
|
echo "[entrypoint] TCP connectivity to $RPKI_HOST:$RPKI_PORT OK"
|
|
else
|
|
echo "[entrypoint] WARNING: cannot connect to $RPKI_HOST:$RPKI_PORT before BIRD starts"
|
|
fi
|
|
|
|
bird -f -c "$BIRD_CONFIG_PATH" -s "$SOCK_PATH" &
|
|
BIRD_PID="$!"
|
|
|
|
sleep 1
|
|
|
|
case "$INTERVAL" in
|
|
''|*[!0-9]*)
|
|
INTERVAL=0
|
|
;;
|
|
esac
|
|
|
|
if [ "$INTERVAL" -gt 0 ]; then
|
|
while kill -0 "$BIRD_PID" 2>/dev/null; do
|
|
echo "==== $(date -u +"%Y-%m-%dT%H:%M:%SZ") RPKI snapshot ($PROTO) ===="
|
|
birdc -s "$SOCK_PATH" show protocols all "$PROTO" || true
|
|
|
|
if [ "$SHOW_ASPA" = "1" ]; then
|
|
echo "---- ASPA table ($ASPA_TABLE, first ${ASPA_COUNT} objects) ----"
|
|
print_first_n_objects "$ASPA_TABLE" "$ASPA_COUNT"
|
|
fi
|
|
|
|
if [ "$SHOW_ROA4" = "1" ]; then
|
|
echo "---- ROA4 table ($ROA4_TABLE, first ${ROA4_COUNT} objects) ----"
|
|
print_first_n_objects "$ROA4_TABLE" "$ROA4_COUNT"
|
|
fi
|
|
|
|
if [ "$SHOW_ROA6" = "1" ]; then
|
|
echo "---- ROA6 table ($ROA6_TABLE, first ${ROA6_COUNT} objects) ----"
|
|
print_first_n_objects "$ROA6_TABLE" "$ROA6_COUNT"
|
|
fi
|
|
|
|
sleep "$INTERVAL"
|
|
done
|
|
fi
|
|
|
|
wait "$BIRD_PID"
|