wireguard-android/app/src/main/java/com/wireguard/android/backend/WgQuickBackend.java

package com.wireguard.android.backend;

import android.content.Context;
import android.system.ErrnoException;
import android.system.OsConstants;
import android.util.Log;

import com.wireguard.android.model.Tunnel;
import com.wireguard.android.model.Tunnel.State;
import com.wireguard.android.model.Tunnel.Statistics;
import com.wireguard.android.util.RootShell;
import com.wireguard.android.util.ToolsInstaller;
import com.wireguard.config.Config;

import java.io.File;
import java.io.FileOutputStream;
import java.nio.charset.StandardCharsets;
import java.util.ArrayList;
import java.util.Collections;
import java.util.List;
import java.util.Set;

import java9.util.stream.Collectors;
import java9.util.stream.Stream;

/**
 * WireGuard backend that uses {@code wg-quick} to implement tunnel configuration.
 */

public final class WgQuickBackend implements Backend {
    private static final String TAG = "WireGuard/" + WgQuickBackend.class.getSimpleName();

    private final Context context;
    private final File localTemporaryDir;
    private final RootShell rootShell;
    private final ToolsInstaller toolsInstaller;

    public WgQuickBackend(final Context context, final RootShell rootShell,
                          final ToolsInstaller toolsInstaller) {
        this.context = context;
        localTemporaryDir = new File(context.getCacheDir(), "tmp");
        this.rootShell = rootShell;
        this.toolsInstaller = toolsInstaller;
    }

    @Override
    public Config applyConfig(final Tunnel tunnel, final Config config) throws Exception {
        if (tunnel.getState() == State.UP) {
            // Restart the tunnel to apply the new config.
            setState(tunnel, State.DOWN);
            try {
                bringUpTunnel(tunnel, config);
            } catch (final Exception e) {
                // The new configuration didn't work, so try to go back to the old one.
                bringUpTunnel(tunnel, tunnel.getConfig());
                throw e;
            }
        }
        return config;
    }

    private int bringUpTunnel(final Tunnel tunnel, final Config config) throws Exception {
        final File tempFile = new File(localTemporaryDir, tunnel.getName() + ".conf");
        try (FileOutputStream stream = new FileOutputStream(tempFile, false)) {
            stream.write(config.toString().getBytes(StandardCharsets.UTF_8));
        }
        final int result = rootShell.run(null, "wg-quick up '" + tempFile.getAbsolutePath() + '\'');
        if (!tempFile.delete())
            Log.w(TAG, "Couldn't delete temporary file after bringing up " + tunnel.getName());
        return result;
    }

    @Override
    public Set<String> enumerate() {
        final List<String> output = new ArrayList<>();
        // Don't throw an exception here or nothing will show up in the UI.
        try {
            toolsInstaller.ensureToolsAvailable();
            if (rootShell.run(output, "wg show interfaces") != 0 || output.isEmpty())
                return Collections.emptySet();
        } catch (final Exception e) {
            Log.w(TAG, "Unable to enumerate running tunnels", e);
            return Collections.emptySet();
        }
        // wg puts all interface names on the same line. Split them into separate elements.
        return Stream.of(output.get(0).split(" ")).collect(Collectors.toUnmodifiableSet());
    }

    @Override
    public State getState(final Tunnel tunnel) {
        return enumerate().contains(tunnel.getName()) ? State.UP : State.DOWN;
    }

    @Override
    public Statistics getStatistics(final Tunnel tunnel) {
        return new Statistics();
    }

    @Override
    public State setState(final Tunnel tunnel, State state) throws Exception {
        final State originalState = getState(tunnel);
        if (state == State.TOGGLE)
            state = originalState == State.UP ? State.DOWN : State.UP;
        if (state == originalState)
            return originalState;
        Log.d(TAG, "Changing tunnel " + tunnel.getName() + " to state " + state);
        toolsInstaller.ensureToolsAvailable();
        final int result;
        if (state == State.UP) {
            if (!new File("/sys/module/wireguard").exists())
                throw new ErrnoException("WireGuard module not loaded", OsConstants.ENODEV);
            result = bringUpTunnel(tunnel, tunnel.getConfig());
        } else {
            result = rootShell.run(null, "wg-quick down '" + tunnel.getName() + '\'');
        }
        if (result != 0)
            throw new Exception("wg-quick failed");
        return getState(tunnel);
    }
}