#!/bin/sh
#
# cgproxy	Cgroup manager daemon
#
# chkconfig: - 12 90
# description: The cgroup manager accepts cgroup administration requests \
#              over dbus, honoring privilege by root users in mapped user \
#              namespaces over the non-root mapped uids.  This allows safe \
#              nesting of lxc containers by unprivileged users.
# processname: cgproxy
# pidfile: /run/cgproxy.pid
### BEGIN INIT INFO
# Provides:          cgproxy
# Required-Start:    cgmanager
# Required-Stop:
# Default-Start:    2 3 4 5
# Default-Stop:     0 1 6
# Short-Description: Cgroup manager daemon
# Description:
#  The cgroup manager accepts cgroup administration requests
#  over dbus, honoring privilege by root users in mapped user
#  namespaces over the non-root mapped uids.  This allows safe
#  nesting of lxc containers by unprivileged users.
### END INIT INFO

# Do not load RH compatibility interface.
WITHOUT_RC_COMPAT=1

# Source function library.
. /etc/init.d/functions

SourceIfNotEmpty /etc/sysconfig/cgmanager

BASEOPTS="--daemon"
PIDFILE=/run/cgproxy.pid
LOCKFILE=/var/lock/subsys/cgproxy
RETVAL=0

DAEMON_ARGS="$BASEOPTS $cgmanager_opts"


start()
{
	# cgproxy should only run on container unless on older kernel
	if ! cgproxy --check-master && [ -e /proc/self/ns/pid ]; then
		echo -n "cgproxy should only run on container or on old kernel"
		echo_passed
		echo
		return 1
	fi

	start_daemon --pidfile "$PIDFILE" --lockfile "$LOCKFILE" --expect-user root -- cgproxy $DAEMON_ARGS
	RETVAL=$?
	return $RETVAL
}

stop()
{
	stop_daemon --pidfile "$PIDFILE" --lockfile "$LOCKFILE" --expect-user root -- cgproxy
	RETVAL=$?
	return $RETVAL
}

restart()
{
	stop
	start
}

reload()
{
	msg_reloading cgproxy
	stop_daemon --pidfile "$PIDFILE" --expect-user root -HUP -- cgproxy
	RETVAL=$?
	return $RETVAL
}

# See how we were called.
case "$1" in
	start)
		start
		;;
	stop)
		stop
		;;
	reload)
		reload
		;;
	restart)
		restart
		;;
	condstop)
		if [ -e "$LOCKFILE" ]; then
			stop
		fi
		;;
	condrestart)
		if [ -e "$LOCKFILE" ]; then
			restart
		fi
		;;
	condreload)
		if [ -e "$LOCKFILE" ]; then
			reload
		fi
		;;
	status)
		status --pidfile "$PIDFILE" --expect-user root -- cgproxy
		RETVAL=$?
		;;
	*)
		msg_usage "${0##*/} {start|stop|reload|restart|condstop|condrestart|condreload|status}"
		RETVAL=1
esac

exit $RETVAL
