mirror of
https://github.com/netbirdio/netbird.git
synced 2026-09-08 16:01:29 +02:00
88 lines
2.1 KiB
Go
88 lines
2.1 KiB
Go
//go:build darwin && !ios
|
|
|
|
package server
|
|
|
|
import (
|
|
"net"
|
|
|
|
log "github.com/sirupsen/logrus"
|
|
)
|
|
|
|
func (s *Server) platformInit() {
|
|
// no-op on macOS
|
|
}
|
|
|
|
func (s *Server) platformShutdown() {
|
|
// no-op on macOS
|
|
}
|
|
|
|
func (s *Server) platformSessionManager() virtualSessionManager {
|
|
return nil
|
|
}
|
|
|
|
// serviceAcceptLoop runs as a LaunchDaemon and proxies each VNC connection
|
|
// to the per-user agent darwinAgentManager spawns via launchctl asuser
|
|
// (the only spawn mode that lands a child in the user's Aqua session with
|
|
// WindowServer + TCC access).
|
|
func (s *Server) serviceAcceptLoop(ln net.Listener) {
|
|
if ln == nil {
|
|
return
|
|
}
|
|
|
|
mgr := s.serviceAgent()
|
|
if mgr == nil {
|
|
s.log.Error("service mode: no agent manager available")
|
|
return
|
|
}
|
|
|
|
log.Info("service mode, proxying connections to per-user agent over Unix socket")
|
|
|
|
for {
|
|
conn, err := ln.Accept()
|
|
if err != nil {
|
|
select {
|
|
case <-s.ctx.Done():
|
|
return
|
|
default:
|
|
}
|
|
s.log.Debugf("accept VNC connection: %v", err)
|
|
continue
|
|
}
|
|
|
|
// Track before any early-reject path so a concurrent Stop's
|
|
// closeActiveSessions snapshot can never miss a just-accepted
|
|
// socket and let it survive shutdown.
|
|
s.trackConn(conn)
|
|
if !s.tryAcquireConnSlot() {
|
|
s.untrackConn(conn)
|
|
s.log.Warnf("rejecting VNC connection from %s: %d concurrent connections in flight", conn.RemoteAddr(), maxConcurrentVNCConns)
|
|
_ = conn.Close()
|
|
continue
|
|
}
|
|
enableTCPKeepAlive(conn, s.log)
|
|
metered := newMetricsConn(conn, s.sessionRecorder)
|
|
s.retrackConn(conn, metered)
|
|
if !s.beginHandler() {
|
|
s.releaseConnSlot()
|
|
s.untrackConn(metered)
|
|
// The wrapper, not the raw conn: newMetricsConn has already
|
|
// started a sampling goroutine that only its own Close stops.
|
|
_ = metered.Close()
|
|
continue
|
|
}
|
|
go func(c net.Conn) {
|
|
defer s.endHandler()
|
|
defer s.releaseConnSlot()
|
|
defer s.untrackConn(c)
|
|
s.handleServiceConnection(c, mgr)
|
|
}(metered)
|
|
}
|
|
}
|
|
|
|
// newServiceAgentManager starts the manager that owns the per-user agent.
|
|
// Called once per server via Server.serviceAgent.
|
|
func (s *Server) newServiceAgentManager() (sessionAgent, func()) {
|
|
mgr := newDarwinAgentManager(s.ctx)
|
|
return mgr, mgr.stop
|
|
}
|