Alex Deymo | aea4c1c | 2015-08-19 20:24:43 -0700 | [diff] [blame] | 1 | // |
| 2 | // Copyright (C) 2014 The Android Open Source Project |
| 3 | // |
| 4 | // Licensed under the Apache License, Version 2.0 (the "License"); |
| 5 | // you may not use this file except in compliance with the License. |
| 6 | // You may obtain a copy of the License at |
| 7 | // |
| 8 | // http://www.apache.org/licenses/LICENSE-2.0 |
| 9 | // |
| 10 | // Unless required by applicable law or agreed to in writing, software |
| 11 | // distributed under the License is distributed on an "AS IS" BASIS, |
| 12 | // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| 13 | // See the License for the specific language governing permissions and |
| 14 | // limitations under the License. |
| 15 | // |
Alex Deymo | c705cc8 | 2014-02-19 11:15:00 -0800 | [diff] [blame] | 16 | |
Alex Deymo | 63784a5 | 2014-05-28 10:46:14 -0700 | [diff] [blame] | 17 | #include "update_engine/update_manager/chromeos_policy.h" |
Alex Deymo | 0d11c60 | 2014-04-23 20:12:20 -0700 | [diff] [blame] | 18 | |
Gilad Arnold | e121881 | 2014-05-07 12:21:36 -0700 | [diff] [blame] | 19 | #include <algorithm> |
Gilad Arnold | 0adbc94 | 2014-05-12 10:35:43 -0700 | [diff] [blame] | 20 | #include <set> |
Alex Deymo | c705cc8 | 2014-02-19 11:15:00 -0800 | [diff] [blame] | 21 | #include <string> |
| 22 | |
Gilad Arnold | f62a4b8 | 2014-05-01 07:41:07 -0700 | [diff] [blame] | 23 | #include <base/logging.h> |
Gilad Arnold | b3b0544 | 2014-05-30 14:25:05 -0700 | [diff] [blame] | 24 | #include <base/strings/string_util.h> |
Gilad Arnold | f62a4b8 | 2014-05-01 07:41:07 -0700 | [diff] [blame] | 25 | #include <base/time/time.h> |
| 26 | |
Gilad Arnold | b3b0544 | 2014-05-30 14:25:05 -0700 | [diff] [blame] | 27 | #include "update_engine/error_code.h" |
Alex Deymo | 63784a5 | 2014-05-28 10:46:14 -0700 | [diff] [blame] | 28 | #include "update_engine/update_manager/device_policy_provider.h" |
| 29 | #include "update_engine/update_manager/policy_utils.h" |
| 30 | #include "update_engine/update_manager/shill_provider.h" |
Gilad Arnold | b3b0544 | 2014-05-30 14:25:05 -0700 | [diff] [blame] | 31 | #include "update_engine/utils.h" |
Gilad Arnold | f62a4b8 | 2014-05-01 07:41:07 -0700 | [diff] [blame] | 32 | |
Alex Deymo | 0d11c60 | 2014-04-23 20:12:20 -0700 | [diff] [blame] | 33 | using base::Time; |
| 34 | using base::TimeDelta; |
Gilad Arnold | b3b0544 | 2014-05-30 14:25:05 -0700 | [diff] [blame] | 35 | using chromeos_update_engine::ErrorCode; |
Gilad Arnold | dc4bb26 | 2014-07-23 10:45:19 -0700 | [diff] [blame] | 36 | using std::get; |
Gilad Arnold | b3b0544 | 2014-05-30 14:25:05 -0700 | [diff] [blame] | 37 | using std::max; |
Gilad Arnold | f62a4b8 | 2014-05-01 07:41:07 -0700 | [diff] [blame] | 38 | using std::min; |
Gilad Arnold | 0adbc94 | 2014-05-12 10:35:43 -0700 | [diff] [blame] | 39 | using std::set; |
Alex Deymo | c705cc8 | 2014-02-19 11:15:00 -0800 | [diff] [blame] | 40 | using std::string; |
| 41 | |
Gilad Arnold | b3b0544 | 2014-05-30 14:25:05 -0700 | [diff] [blame] | 42 | namespace { |
| 43 | |
Gilad Arnold | dc4bb26 | 2014-07-23 10:45:19 -0700 | [diff] [blame] | 44 | // Examines |err_code| and decides whether the URL index needs to be advanced, |
| 45 | // the error count for the URL incremented, or none of the above. In the first |
| 46 | // case, returns true; in the second case, increments |*url_num_error_p| and |
| 47 | // returns false; otherwise just returns false. |
Gilad Arnold | b3b0544 | 2014-05-30 14:25:05 -0700 | [diff] [blame] | 48 | // |
| 49 | // TODO(garnold) Adapted from PayloadState::UpdateFailed() (to be retired). |
Gilad Arnold | dc4bb26 | 2014-07-23 10:45:19 -0700 | [diff] [blame] | 50 | bool HandleErrorCode(ErrorCode err_code, int* url_num_error_p) { |
Gilad Arnold | b3b0544 | 2014-05-30 14:25:05 -0700 | [diff] [blame] | 51 | err_code = chromeos_update_engine::utils::GetBaseErrorCode(err_code); |
| 52 | switch (err_code) { |
| 53 | // Errors which are good indicators of a problem with a particular URL or |
| 54 | // the protocol used in the URL or entities in the communication channel |
| 55 | // (e.g. proxies). We should try the next available URL in the next update |
| 56 | // check to quickly recover from these errors. |
| 57 | case ErrorCode::kPayloadHashMismatchError: |
| 58 | case ErrorCode::kPayloadSizeMismatchError: |
| 59 | case ErrorCode::kDownloadPayloadVerificationError: |
| 60 | case ErrorCode::kDownloadPayloadPubKeyVerificationError: |
| 61 | case ErrorCode::kSignedDeltaPayloadExpectedError: |
| 62 | case ErrorCode::kDownloadInvalidMetadataMagicString: |
| 63 | case ErrorCode::kDownloadSignatureMissingInManifest: |
| 64 | case ErrorCode::kDownloadManifestParseError: |
| 65 | case ErrorCode::kDownloadMetadataSignatureError: |
| 66 | case ErrorCode::kDownloadMetadataSignatureVerificationError: |
| 67 | case ErrorCode::kDownloadMetadataSignatureMismatch: |
| 68 | case ErrorCode::kDownloadOperationHashVerificationError: |
| 69 | case ErrorCode::kDownloadOperationExecutionError: |
| 70 | case ErrorCode::kDownloadOperationHashMismatch: |
| 71 | case ErrorCode::kDownloadInvalidMetadataSize: |
| 72 | case ErrorCode::kDownloadInvalidMetadataSignature: |
| 73 | case ErrorCode::kDownloadOperationHashMissingError: |
| 74 | case ErrorCode::kDownloadMetadataSignatureMissingError: |
| 75 | case ErrorCode::kPayloadMismatchedType: |
| 76 | case ErrorCode::kUnsupportedMajorPayloadVersion: |
| 77 | case ErrorCode::kUnsupportedMinorPayloadVersion: |
| 78 | LOG(INFO) << "Advancing download URL due to error " |
| 79 | << chromeos_update_engine::utils::CodeToString(err_code) |
| 80 | << " (" << static_cast<int>(err_code) << ")"; |
Gilad Arnold | b3b0544 | 2014-05-30 14:25:05 -0700 | [diff] [blame] | 81 | return true; |
| 82 | |
| 83 | // Errors which seem to be just transient network/communication related |
| 84 | // failures and do not indicate any inherent problem with the URL itself. |
| 85 | // So, we should keep the current URL but just increment the |
| 86 | // failure count to give it more chances. This way, while we maximize our |
| 87 | // chances of downloading from the URLs that appear earlier in the response |
| 88 | // (because download from a local server URL that appears earlier in a |
| 89 | // response is preferable than downloading from the next URL which could be |
Alex Vakulenko | 072359c | 2014-07-18 11:41:07 -0700 | [diff] [blame] | 90 | // an Internet URL and thus could be more expensive). |
Gilad Arnold | b3b0544 | 2014-05-30 14:25:05 -0700 | [diff] [blame] | 91 | case ErrorCode::kError: |
| 92 | case ErrorCode::kDownloadTransferError: |
| 93 | case ErrorCode::kDownloadWriteError: |
| 94 | case ErrorCode::kDownloadStateInitializationError: |
Gilad Arnold | 684219d | 2014-07-07 14:54:57 -0700 | [diff] [blame] | 95 | case ErrorCode::kOmahaErrorInHTTPResponse: // Aggregate for HTTP errors. |
Gilad Arnold | b3b0544 | 2014-05-30 14:25:05 -0700 | [diff] [blame] | 96 | LOG(INFO) << "Incrementing URL failure count due to error " |
| 97 | << chromeos_update_engine::utils::CodeToString(err_code) |
| 98 | << " (" << static_cast<int>(err_code) << ")"; |
Gilad Arnold | dc4bb26 | 2014-07-23 10:45:19 -0700 | [diff] [blame] | 99 | *url_num_error_p += 1; |
Gilad Arnold | b3b0544 | 2014-05-30 14:25:05 -0700 | [diff] [blame] | 100 | return false; |
| 101 | |
| 102 | // Errors which are not specific to a URL and hence shouldn't result in |
| 103 | // the URL being penalized. This can happen in two cases: |
| 104 | // 1. We haven't started downloading anything: These errors don't cost us |
| 105 | // anything in terms of actual payload bytes, so we should just do the |
| 106 | // regular retries at the next update check. |
| 107 | // 2. We have successfully downloaded the payload: In this case, the |
| 108 | // payload attempt number would have been incremented and would take care |
Alex Vakulenko | 072359c | 2014-07-18 11:41:07 -0700 | [diff] [blame] | 109 | // of the back-off at the next update check. |
Gilad Arnold | b3b0544 | 2014-05-30 14:25:05 -0700 | [diff] [blame] | 110 | // In either case, there's no need to update URL index or failure count. |
| 111 | case ErrorCode::kOmahaRequestError: |
| 112 | case ErrorCode::kOmahaResponseHandlerError: |
| 113 | case ErrorCode::kPostinstallRunnerError: |
| 114 | case ErrorCode::kFilesystemCopierError: |
| 115 | case ErrorCode::kInstallDeviceOpenError: |
| 116 | case ErrorCode::kKernelDeviceOpenError: |
| 117 | case ErrorCode::kDownloadNewPartitionInfoError: |
| 118 | case ErrorCode::kNewRootfsVerificationError: |
| 119 | case ErrorCode::kNewKernelVerificationError: |
| 120 | case ErrorCode::kPostinstallBootedFromFirmwareB: |
| 121 | case ErrorCode::kPostinstallFirmwareRONotUpdatable: |
| 122 | case ErrorCode::kOmahaRequestEmptyResponseError: |
| 123 | case ErrorCode::kOmahaRequestXMLParseError: |
| 124 | case ErrorCode::kOmahaResponseInvalid: |
| 125 | case ErrorCode::kOmahaUpdateIgnoredPerPolicy: |
| 126 | case ErrorCode::kOmahaUpdateDeferredPerPolicy: |
| 127 | case ErrorCode::kOmahaUpdateDeferredForBackoff: |
| 128 | case ErrorCode::kPostinstallPowerwashError: |
| 129 | case ErrorCode::kUpdateCanceledByChannelChange: |
David Zeuthen | f3e2801 | 2014-08-26 18:23:52 -0400 | [diff] [blame] | 130 | case ErrorCode::kOmahaRequestXMLHasEntityDecl: |
Allie Wood | eb9e6d8 | 2015-04-17 13:55:30 -0700 | [diff] [blame] | 131 | case ErrorCode::kFilesystemVerifierError: |
Gilad Arnold | b3b0544 | 2014-05-30 14:25:05 -0700 | [diff] [blame] | 132 | LOG(INFO) << "Not changing URL index or failure count due to error " |
| 133 | << chromeos_update_engine::utils::CodeToString(err_code) |
| 134 | << " (" << static_cast<int>(err_code) << ")"; |
| 135 | return false; |
| 136 | |
| 137 | case ErrorCode::kSuccess: // success code |
| 138 | case ErrorCode::kUmaReportedMax: // not an error code |
| 139 | case ErrorCode::kOmahaRequestHTTPResponseBase: // aggregated already |
| 140 | case ErrorCode::kDevModeFlag: // not an error code |
| 141 | case ErrorCode::kResumedFlag: // not an error code |
| 142 | case ErrorCode::kTestImageFlag: // not an error code |
| 143 | case ErrorCode::kTestOmahaUrlFlag: // not an error code |
| 144 | case ErrorCode::kSpecialFlags: // not an error code |
| 145 | // These shouldn't happen. Enumerating these explicitly here so that we |
| 146 | // can let the compiler warn about new error codes that are added to |
| 147 | // action_processor.h but not added here. |
| 148 | LOG(WARNING) << "Unexpected error " |
| 149 | << chromeos_update_engine::utils::CodeToString(err_code) |
| 150 | << " (" << static_cast<int>(err_code) << ")"; |
| 151 | // Note: Not adding a default here so as to let the compiler warn us of |
| 152 | // any new enums that were added in the .h but not listed in this switch. |
| 153 | } |
| 154 | return false; |
| 155 | } |
| 156 | |
Gilad Arnold | dc4bb26 | 2014-07-23 10:45:19 -0700 | [diff] [blame] | 157 | // Checks whether |url| can be used under given download restrictions. |
| 158 | bool IsUrlUsable(const string& url, bool http_allowed) { |
Alex Vakulenko | 6a9d349 | 2015-06-15 12:53:22 -0700 | [diff] [blame] | 159 | return http_allowed || !base::StartsWithASCII(url, "http://", false); |
Gilad Arnold | b3b0544 | 2014-05-30 14:25:05 -0700 | [diff] [blame] | 160 | } |
| 161 | |
| 162 | } // namespace |
| 163 | |
Alex Deymo | 63784a5 | 2014-05-28 10:46:14 -0700 | [diff] [blame] | 164 | namespace chromeos_update_manager { |
Alex Deymo | c705cc8 | 2014-02-19 11:15:00 -0800 | [diff] [blame] | 165 | |
Gilad Arnold | a2e8eaa | 2014-09-24 13:12:33 -0700 | [diff] [blame] | 166 | const int ChromeOSPolicy::kTimeoutInitialInterval = 7 * 60; |
Alex Deymo | 14e7dde | 2015-10-20 14:46:33 -0700 | [diff] [blame^] | 167 | |
| 168 | // TODO(deymo): Split the update_manager policies for Brillo and ChromeOS and |
| 169 | // make the update check periodic interval configurable. |
| 170 | #ifdef __ANDROID__ |
| 171 | const int ChromeOSPolicy::kTimeoutPeriodicInterval = 5 * 60 * 60; |
| 172 | #else |
Gilad Arnold | a2e8eaa | 2014-09-24 13:12:33 -0700 | [diff] [blame] | 173 | const int ChromeOSPolicy::kTimeoutPeriodicInterval = 45 * 60; |
Alex Deymo | 14e7dde | 2015-10-20 14:46:33 -0700 | [diff] [blame^] | 174 | #endif // __ANDROID__ |
| 175 | |
Gilad Arnold | a2e8eaa | 2014-09-24 13:12:33 -0700 | [diff] [blame] | 176 | const int ChromeOSPolicy::kTimeoutMaxBackoffInterval = 4 * 60 * 60; |
| 177 | const int ChromeOSPolicy::kTimeoutRegularFuzz = 10 * 60; |
Gilad Arnold | dc4bb26 | 2014-07-23 10:45:19 -0700 | [diff] [blame] | 178 | const int ChromeOSPolicy::kAttemptBackoffMaxIntervalInDays = 16; |
| 179 | const int ChromeOSPolicy::kAttemptBackoffFuzzInHours = 12; |
Gilad Arnold | 349ac83 | 2014-10-06 14:20:28 -0700 | [diff] [blame] | 180 | const int ChromeOSPolicy::kMaxP2PAttempts = 10; |
| 181 | const int ChromeOSPolicy::kMaxP2PAttemptsPeriodInSeconds = 5 * 24 * 60 * 60; |
Gilad Arnold | a2e8eaa | 2014-09-24 13:12:33 -0700 | [diff] [blame] | 182 | |
Alex Deymo | 0d11c60 | 2014-04-23 20:12:20 -0700 | [diff] [blame] | 183 | EvalStatus ChromeOSPolicy::UpdateCheckAllowed( |
| 184 | EvaluationContext* ec, State* state, string* error, |
| 185 | UpdateCheckParams* result) const { |
Gilad Arnold | 42f253b | 2014-06-25 12:39:17 -0700 | [diff] [blame] | 186 | // Set the default return values. |
| 187 | result->updates_enabled = true; |
| 188 | result->target_channel.clear(); |
Gilad Arnold | d4b3032 | 2014-07-21 15:35:27 -0700 | [diff] [blame] | 189 | result->target_version_prefix.clear(); |
Gilad Arnold | 44dc3bf | 2014-07-18 23:39:38 -0700 | [diff] [blame] | 190 | result->is_interactive = false; |
Gilad Arnold | 42f253b | 2014-06-25 12:39:17 -0700 | [diff] [blame] | 191 | |
Gilad Arnold | a1eabcd | 2014-07-09 15:42:40 -0700 | [diff] [blame] | 192 | DevicePolicyProvider* const dp_provider = state->device_policy_provider(); |
Gilad Arnold | 44dc3bf | 2014-07-18 23:39:38 -0700 | [diff] [blame] | 193 | UpdaterProvider* const updater_provider = state->updater_provider(); |
Gilad Arnold | a1eabcd | 2014-07-09 15:42:40 -0700 | [diff] [blame] | 194 | SystemProvider* const system_provider = state->system_provider(); |
| 195 | |
Gilad Arnold | 44dc3bf | 2014-07-18 23:39:38 -0700 | [diff] [blame] | 196 | // Do not perform any updates if booted from removable device. This decision |
| 197 | // is final. |
Alex Deymo | 763e7db | 2015-08-27 21:08:08 -0700 | [diff] [blame] | 198 | const unsigned int* num_slots_p = ec->GetValue( |
| 199 | system_provider->var_num_slots()); |
| 200 | if (!num_slots_p || *num_slots_p < 2) { |
| 201 | LOG(INFO) << "Not enough slots for A/B updates, disabling update checks."; |
Gilad Arnold | bfc44f7 | 2014-07-09 14:41:39 -0700 | [diff] [blame] | 202 | result->updates_enabled = false; |
| 203 | return EvalStatus::kSucceeded; |
| 204 | } |
| 205 | |
Gilad Arnold | 42f253b | 2014-06-25 12:39:17 -0700 | [diff] [blame] | 206 | const bool* device_policy_is_loaded_p = ec->GetValue( |
| 207 | dp_provider->var_device_policy_is_loaded()); |
| 208 | if (device_policy_is_loaded_p && *device_policy_is_loaded_p) { |
| 209 | // Check whether updates are disabled by policy. |
| 210 | const bool* update_disabled_p = ec->GetValue( |
| 211 | dp_provider->var_update_disabled()); |
Gilad Arnold | ec7f916 | 2014-07-15 13:24:46 -0700 | [diff] [blame] | 212 | if (update_disabled_p && *update_disabled_p) { |
| 213 | LOG(INFO) << "Updates disabled by policy, blocking update checks."; |
Gilad Arnold | 42f253b | 2014-06-25 12:39:17 -0700 | [diff] [blame] | 214 | return EvalStatus::kAskMeAgainLater; |
Gilad Arnold | ec7f916 | 2014-07-15 13:24:46 -0700 | [diff] [blame] | 215 | } |
Gilad Arnold | 42f253b | 2014-06-25 12:39:17 -0700 | [diff] [blame] | 216 | |
Gilad Arnold | d4b3032 | 2014-07-21 15:35:27 -0700 | [diff] [blame] | 217 | // Determine whether a target version prefix is dictated by policy. |
| 218 | const string* target_version_prefix_p = ec->GetValue( |
| 219 | dp_provider->var_target_version_prefix()); |
| 220 | if (target_version_prefix_p) |
| 221 | result->target_version_prefix = *target_version_prefix_p; |
| 222 | |
Gilad Arnold | 42f253b | 2014-06-25 12:39:17 -0700 | [diff] [blame] | 223 | // Determine whether a target channel is dictated by policy. |
| 224 | const bool* release_channel_delegated_p = ec->GetValue( |
| 225 | dp_provider->var_release_channel_delegated()); |
| 226 | if (release_channel_delegated_p && !(*release_channel_delegated_p)) { |
| 227 | const string* release_channel_p = ec->GetValue( |
| 228 | dp_provider->var_release_channel()); |
| 229 | if (release_channel_p) |
| 230 | result->target_channel = *release_channel_p; |
| 231 | } |
| 232 | } |
| 233 | |
Gilad Arnold | 44dc3bf | 2014-07-18 23:39:38 -0700 | [diff] [blame] | 234 | // First, check to see if an interactive update was requested. |
Gilad Arnold | ec7f916 | 2014-07-15 13:24:46 -0700 | [diff] [blame] | 235 | const UpdateRequestStatus* forced_update_requested_p = ec->GetValue( |
| 236 | updater_provider->var_forced_update_requested()); |
| 237 | if (forced_update_requested_p && |
| 238 | *forced_update_requested_p != UpdateRequestStatus::kNone) { |
| 239 | result->is_interactive = |
| 240 | (*forced_update_requested_p == UpdateRequestStatus::kInteractive); |
| 241 | LOG(INFO) << "Forced update signaled (" |
| 242 | << (result->is_interactive ? "interactive" : "periodic") |
| 243 | << "), allowing update check."; |
Gilad Arnold | 44dc3bf | 2014-07-18 23:39:38 -0700 | [diff] [blame] | 244 | return EvalStatus::kSucceeded; |
| 245 | } |
| 246 | |
| 247 | // The logic thereafter applies to periodic updates. Bear in mind that we |
| 248 | // should not return a final "no" if any of these criteria are not satisfied, |
| 249 | // because the system may still update due to an interactive update request. |
| 250 | |
| 251 | // Unofficial builds should not perform periodic update checks. |
| 252 | const bool* is_official_build_p = ec->GetValue( |
| 253 | system_provider->var_is_official_build()); |
| 254 | if (is_official_build_p && !(*is_official_build_p)) { |
Gilad Arnold | ec7f916 | 2014-07-15 13:24:46 -0700 | [diff] [blame] | 255 | LOG(INFO) << "Unofficial build, blocking periodic update checks."; |
Gilad Arnold | 44dc3bf | 2014-07-18 23:39:38 -0700 | [diff] [blame] | 256 | return EvalStatus::kAskMeAgainLater; |
| 257 | } |
| 258 | |
| 259 | // If OOBE is enabled, wait until it is completed. |
| 260 | const bool* is_oobe_enabled_p = ec->GetValue( |
| 261 | state->config_provider()->var_is_oobe_enabled()); |
| 262 | if (is_oobe_enabled_p && *is_oobe_enabled_p) { |
| 263 | const bool* is_oobe_complete_p = ec->GetValue( |
| 264 | system_provider->var_is_oobe_complete()); |
Gilad Arnold | ec7f916 | 2014-07-15 13:24:46 -0700 | [diff] [blame] | 265 | if (is_oobe_complete_p && !(*is_oobe_complete_p)) { |
| 266 | LOG(INFO) << "OOBE not completed, blocking update checks."; |
Gilad Arnold | 44dc3bf | 2014-07-18 23:39:38 -0700 | [diff] [blame] | 267 | return EvalStatus::kAskMeAgainLater; |
Gilad Arnold | ec7f916 | 2014-07-15 13:24:46 -0700 | [diff] [blame] | 268 | } |
Gilad Arnold | 44dc3bf | 2014-07-18 23:39:38 -0700 | [diff] [blame] | 269 | } |
| 270 | |
| 271 | // Ensure that periodic update checks are timed properly. |
Alex Deymo | 0d11c60 | 2014-04-23 20:12:20 -0700 | [diff] [blame] | 272 | Time next_update_check; |
| 273 | if (NextUpdateCheckTime(ec, state, error, &next_update_check) != |
| 274 | EvalStatus::kSucceeded) { |
| 275 | return EvalStatus::kFailed; |
| 276 | } |
Gilad Arnold | ec7f916 | 2014-07-15 13:24:46 -0700 | [diff] [blame] | 277 | if (!ec->IsWallclockTimeGreaterThan(next_update_check)) { |
| 278 | LOG(INFO) << "Periodic check interval not satisfied, blocking until " |
| 279 | << chromeos_update_engine::utils::ToString(next_update_check); |
Alex Deymo | 0d11c60 | 2014-04-23 20:12:20 -0700 | [diff] [blame] | 280 | return EvalStatus::kAskMeAgainLater; |
Gilad Arnold | ec7f916 | 2014-07-15 13:24:46 -0700 | [diff] [blame] | 281 | } |
Alex Deymo | 0d11c60 | 2014-04-23 20:12:20 -0700 | [diff] [blame] | 282 | |
| 283 | // It is time to check for an update. |
Gilad Arnold | ec7f916 | 2014-07-15 13:24:46 -0700 | [diff] [blame] | 284 | LOG(INFO) << "Allowing update check."; |
Alex Deymo | e636c3c | 2014-03-11 19:02:08 -0700 | [diff] [blame] | 285 | return EvalStatus::kSucceeded; |
Alex Deymo | c705cc8 | 2014-02-19 11:15:00 -0800 | [diff] [blame] | 286 | } |
| 287 | |
Gilad Arnold | f62a4b8 | 2014-05-01 07:41:07 -0700 | [diff] [blame] | 288 | EvalStatus ChromeOSPolicy::UpdateCanStart( |
| 289 | EvaluationContext* ec, |
| 290 | State* state, |
| 291 | string* error, |
Gilad Arnold | 42f253b | 2014-06-25 12:39:17 -0700 | [diff] [blame] | 292 | UpdateDownloadParams* result, |
Gilad Arnold | d78caf9 | 2014-09-24 09:28:14 -0700 | [diff] [blame] | 293 | const UpdateState update_state) const { |
Gilad Arnold | dc4bb26 | 2014-07-23 10:45:19 -0700 | [diff] [blame] | 294 | // Set the default return values. Note that we set persisted values (backoff, |
| 295 | // scattering) to the same values presented in the update state. The reason is |
| 296 | // that preemptive returns, such as the case where an update check is due, |
| 297 | // should not clear off the said values; rather, it is the deliberate |
| 298 | // inference of new values that should cause them to be reset. |
Gilad Arnold | 14a9e70 | 2014-10-08 08:09:09 -0700 | [diff] [blame] | 299 | result->update_can_start = false; |
Gilad Arnold | f62a4b8 | 2014-05-01 07:41:07 -0700 | [diff] [blame] | 300 | result->cannot_start_reason = UpdateCannotStartReason::kUndefined; |
Gilad Arnold | b3b0544 | 2014-05-30 14:25:05 -0700 | [diff] [blame] | 301 | result->download_url_idx = -1; |
Gilad Arnold | 14a9e70 | 2014-10-08 08:09:09 -0700 | [diff] [blame] | 302 | result->download_url_allowed = true; |
| 303 | result->download_url_num_errors = 0; |
Gilad Arnold | b2f9919 | 2014-10-07 13:01:52 -0700 | [diff] [blame] | 304 | result->p2p_downloading_allowed = false; |
| 305 | result->p2p_sharing_allowed = false; |
Gilad Arnold | dc4bb26 | 2014-07-23 10:45:19 -0700 | [diff] [blame] | 306 | result->do_increment_failures = false; |
| 307 | result->backoff_expiry = update_state.backoff_expiry; |
| 308 | result->scatter_wait_period = update_state.scatter_wait_period; |
| 309 | result->scatter_check_threshold = update_state.scatter_check_threshold; |
Gilad Arnold | f62a4b8 | 2014-05-01 07:41:07 -0700 | [diff] [blame] | 310 | |
| 311 | // Make sure that we're not due for an update check. |
| 312 | UpdateCheckParams check_result; |
| 313 | EvalStatus check_status = UpdateCheckAllowed(ec, state, error, &check_result); |
| 314 | if (check_status == EvalStatus::kFailed) |
| 315 | return EvalStatus::kFailed; |
Gilad Arnold | 14a9e70 | 2014-10-08 08:09:09 -0700 | [diff] [blame] | 316 | bool is_check_due = (check_status == EvalStatus::kSucceeded && |
| 317 | check_result.updates_enabled == true); |
Gilad Arnold | f62a4b8 | 2014-05-01 07:41:07 -0700 | [diff] [blame] | 318 | |
Gilad Arnold | dc4bb26 | 2014-07-23 10:45:19 -0700 | [diff] [blame] | 319 | // Check whether backoff applies, and if not then which URL can be used for |
| 320 | // downloading. These require scanning the download error log, and so they are |
| 321 | // done together. |
| 322 | UpdateBackoffAndDownloadUrlResult backoff_url_result; |
| 323 | EvalStatus backoff_url_status = UpdateBackoffAndDownloadUrl( |
| 324 | ec, state, error, &backoff_url_result, update_state); |
Gilad Arnold | 14a9e70 | 2014-10-08 08:09:09 -0700 | [diff] [blame] | 325 | if (backoff_url_status == EvalStatus::kFailed) |
| 326 | return EvalStatus::kFailed; |
| 327 | result->download_url_idx = backoff_url_result.url_idx; |
| 328 | result->download_url_num_errors = backoff_url_result.url_num_errors; |
| 329 | result->do_increment_failures = backoff_url_result.do_increment_failures; |
| 330 | result->backoff_expiry = backoff_url_result.backoff_expiry; |
| 331 | bool is_backoff_active = |
| 332 | (backoff_url_status == EvalStatus::kAskMeAgainLater) || |
| 333 | !backoff_url_result.backoff_expiry.is_null(); |
Gilad Arnold | dc4bb26 | 2014-07-23 10:45:19 -0700 | [diff] [blame] | 334 | |
Gilad Arnold | f62a4b8 | 2014-05-01 07:41:07 -0700 | [diff] [blame] | 335 | DevicePolicyProvider* const dp_provider = state->device_policy_provider(); |
Gilad Arnold | 14a9e70 | 2014-10-08 08:09:09 -0700 | [diff] [blame] | 336 | bool is_scattering_active = false; |
| 337 | EvalStatus scattering_status = EvalStatus::kSucceeded; |
Gilad Arnold | f62a4b8 | 2014-05-01 07:41:07 -0700 | [diff] [blame] | 338 | |
| 339 | const bool* device_policy_is_loaded_p = ec->GetValue( |
| 340 | dp_provider->var_device_policy_is_loaded()); |
| 341 | if (device_policy_is_loaded_p && *device_policy_is_loaded_p) { |
Gilad Arnold | 76a11f6 | 2014-05-20 09:02:12 -0700 | [diff] [blame] | 342 | // Check whether scattering applies to this update attempt. We should not be |
| 343 | // scattering if this is an interactive update check, or if OOBE is enabled |
| 344 | // but not completed. |
| 345 | // |
| 346 | // Note: current code further suppresses scattering if a "deadline" |
Gilad Arnold | f62a4b8 | 2014-05-01 07:41:07 -0700 | [diff] [blame] | 347 | // attribute is found in the Omaha response. However, it appears that the |
Gilad Arnold | 76a11f6 | 2014-05-20 09:02:12 -0700 | [diff] [blame] | 348 | // presence of this attribute is merely indicative of an OOBE update, during |
| 349 | // which we suppress scattering anyway. |
Gilad Arnold | 14a9e70 | 2014-10-08 08:09:09 -0700 | [diff] [blame] | 350 | bool is_scattering_applicable = false; |
Gilad Arnold | dc4bb26 | 2014-07-23 10:45:19 -0700 | [diff] [blame] | 351 | result->scatter_wait_period = kZeroInterval; |
| 352 | result->scatter_check_threshold = 0; |
| 353 | if (!update_state.is_interactive) { |
Gilad Arnold | 76a11f6 | 2014-05-20 09:02:12 -0700 | [diff] [blame] | 354 | const bool* is_oobe_enabled_p = ec->GetValue( |
| 355 | state->config_provider()->var_is_oobe_enabled()); |
| 356 | if (is_oobe_enabled_p && !(*is_oobe_enabled_p)) { |
Gilad Arnold | 14a9e70 | 2014-10-08 08:09:09 -0700 | [diff] [blame] | 357 | is_scattering_applicable = true; |
Gilad Arnold | 76a11f6 | 2014-05-20 09:02:12 -0700 | [diff] [blame] | 358 | } else { |
| 359 | const bool* is_oobe_complete_p = ec->GetValue( |
Gilad Arnold | b3b0544 | 2014-05-30 14:25:05 -0700 | [diff] [blame] | 360 | state->system_provider()->var_is_oobe_complete()); |
Gilad Arnold | 14a9e70 | 2014-10-08 08:09:09 -0700 | [diff] [blame] | 361 | is_scattering_applicable = (is_oobe_complete_p && *is_oobe_complete_p); |
Gilad Arnold | 76a11f6 | 2014-05-20 09:02:12 -0700 | [diff] [blame] | 362 | } |
| 363 | } |
| 364 | |
| 365 | // Compute scattering values. |
Gilad Arnold | 14a9e70 | 2014-10-08 08:09:09 -0700 | [diff] [blame] | 366 | if (is_scattering_applicable) { |
Gilad Arnold | f62a4b8 | 2014-05-01 07:41:07 -0700 | [diff] [blame] | 367 | UpdateScatteringResult scatter_result; |
Gilad Arnold | 14a9e70 | 2014-10-08 08:09:09 -0700 | [diff] [blame] | 368 | scattering_status = UpdateScattering(ec, state, error, &scatter_result, |
| 369 | update_state); |
| 370 | if (scattering_status == EvalStatus::kFailed) { |
| 371 | return EvalStatus::kFailed; |
| 372 | } else { |
| 373 | result->scatter_wait_period = scatter_result.wait_period; |
| 374 | result->scatter_check_threshold = scatter_result.check_threshold; |
| 375 | if (scattering_status == EvalStatus::kAskMeAgainLater || |
| 376 | scatter_result.is_scattering) |
| 377 | is_scattering_active = true; |
Gilad Arnold | f62a4b8 | 2014-05-01 07:41:07 -0700 | [diff] [blame] | 378 | } |
| 379 | } |
Gilad Arnold | 78ecbfc | 2014-10-22 14:38:25 -0700 | [diff] [blame] | 380 | } |
Gilad Arnold | f62a4b8 | 2014-05-01 07:41:07 -0700 | [diff] [blame] | 381 | |
Gilad Arnold | 78ecbfc | 2014-10-22 14:38:25 -0700 | [diff] [blame] | 382 | // Find out whether P2P is globally enabled. |
| 383 | bool p2p_enabled; |
| 384 | EvalStatus p2p_enabled_status = P2PEnabled(ec, state, error, &p2p_enabled); |
| 385 | if (p2p_enabled_status != EvalStatus::kSucceeded) |
| 386 | return EvalStatus::kFailed; |
| 387 | |
| 388 | // Is P2P is enabled, consider allowing it for downloading and/or sharing. |
| 389 | if (p2p_enabled) { |
| 390 | // Sharing via P2P is allowed if not disabled by Omaha. |
| 391 | if (update_state.p2p_sharing_disabled) { |
| 392 | LOG(INFO) << "Blocked P2P sharing because it is disabled by Omaha."; |
Gilad Arnold | b2f9919 | 2014-10-07 13:01:52 -0700 | [diff] [blame] | 393 | } else { |
Gilad Arnold | 78ecbfc | 2014-10-22 14:38:25 -0700 | [diff] [blame] | 394 | result->p2p_sharing_allowed = true; |
Gilad Arnold | ef8d087 | 2014-10-03 14:14:06 -0700 | [diff] [blame] | 395 | } |
Gilad Arnold | f62a4b8 | 2014-05-01 07:41:07 -0700 | [diff] [blame] | 396 | |
Gilad Arnold | 78ecbfc | 2014-10-22 14:38:25 -0700 | [diff] [blame] | 397 | // Downloading via P2P is allowed if not disabled by Omaha, an update is not |
| 398 | // interactive, and other limits haven't been reached. |
| 399 | if (update_state.p2p_downloading_disabled) { |
| 400 | LOG(INFO) << "Blocked P2P downloading because it is disabled by Omaha."; |
| 401 | } else if (update_state.is_interactive) { |
| 402 | LOG(INFO) << "Blocked P2P downloading because update is interactive."; |
Gilad Arnold | b2f9919 | 2014-10-07 13:01:52 -0700 | [diff] [blame] | 403 | } else if (update_state.p2p_num_attempts >= kMaxP2PAttempts) { |
Gilad Arnold | 78ecbfc | 2014-10-22 14:38:25 -0700 | [diff] [blame] | 404 | LOG(INFO) << "Blocked P2P downloading as it was attempted too many " |
| 405 | "times."; |
Gilad Arnold | b2f9919 | 2014-10-07 13:01:52 -0700 | [diff] [blame] | 406 | } else if (!update_state.p2p_first_attempted.is_null() && |
| 407 | ec->IsWallclockTimeGreaterThan( |
| 408 | update_state.p2p_first_attempted + |
| 409 | TimeDelta::FromSeconds(kMaxP2PAttemptsPeriodInSeconds))) { |
Gilad Arnold | 78ecbfc | 2014-10-22 14:38:25 -0700 | [diff] [blame] | 410 | LOG(INFO) << "Blocked P2P downloading as its usage timespan exceeds " |
| 411 | "limit."; |
Gilad Arnold | b2f9919 | 2014-10-07 13:01:52 -0700 | [diff] [blame] | 412 | } else { |
Gilad Arnold | 14a9e70 | 2014-10-08 08:09:09 -0700 | [diff] [blame] | 413 | // P2P download is allowed; if backoff or scattering are active, be sure |
| 414 | // to suppress them, yet prevent any download URL from being used. |
Gilad Arnold | b2f9919 | 2014-10-07 13:01:52 -0700 | [diff] [blame] | 415 | result->p2p_downloading_allowed = true; |
Gilad Arnold | 14a9e70 | 2014-10-08 08:09:09 -0700 | [diff] [blame] | 416 | if (is_backoff_active || is_scattering_active) { |
| 417 | is_backoff_active = is_scattering_active = false; |
| 418 | result->download_url_allowed = false; |
| 419 | } |
Gilad Arnold | b2f9919 | 2014-10-07 13:01:52 -0700 | [diff] [blame] | 420 | } |
Gilad Arnold | f62a4b8 | 2014-05-01 07:41:07 -0700 | [diff] [blame] | 421 | } |
| 422 | |
Gilad Arnold | 14a9e70 | 2014-10-08 08:09:09 -0700 | [diff] [blame] | 423 | // Check for various deterrents. |
| 424 | if (is_check_due) { |
| 425 | result->cannot_start_reason = UpdateCannotStartReason::kCheckDue; |
| 426 | return EvalStatus::kSucceeded; |
| 427 | } |
| 428 | if (is_backoff_active) { |
| 429 | result->cannot_start_reason = UpdateCannotStartReason::kBackoff; |
| 430 | return backoff_url_status; |
| 431 | } |
| 432 | if (is_scattering_active) { |
| 433 | result->cannot_start_reason = UpdateCannotStartReason::kScattering; |
| 434 | return scattering_status; |
| 435 | } |
Gilad Arnold | b2f9919 | 2014-10-07 13:01:52 -0700 | [diff] [blame] | 436 | if (result->download_url_idx < 0 && !result->p2p_downloading_allowed) { |
Gilad Arnold | dc4bb26 | 2014-07-23 10:45:19 -0700 | [diff] [blame] | 437 | result->cannot_start_reason = UpdateCannotStartReason::kCannotDownload; |
Gilad Arnold | 14a9e70 | 2014-10-08 08:09:09 -0700 | [diff] [blame] | 438 | return EvalStatus::kSucceeded; |
Gilad Arnold | b3b0544 | 2014-05-30 14:25:05 -0700 | [diff] [blame] | 439 | } |
| 440 | |
Gilad Arnold | 14a9e70 | 2014-10-08 08:09:09 -0700 | [diff] [blame] | 441 | // Update is good to go. |
| 442 | result->update_can_start = true; |
Gilad Arnold | af2f6ae | 2014-04-28 14:14:52 -0700 | [diff] [blame] | 443 | return EvalStatus::kSucceeded; |
| 444 | } |
| 445 | |
Gilad Arnold | a8262e2 | 2014-06-02 13:54:27 -0700 | [diff] [blame] | 446 | // TODO(garnold) Logic in this method is based on |
| 447 | // ConnectionManager::IsUpdateAllowedOver(); be sure to deprecate the latter. |
| 448 | // |
| 449 | // TODO(garnold) The current logic generally treats the list of allowed |
| 450 | // connections coming from the device policy as a whitelist, meaning that it |
| 451 | // can only be used for enabling connections, but not disable them. Further, |
| 452 | // certain connection types (like Bluetooth) cannot be enabled even by policy. |
| 453 | // In effect, the only thing that device policy can change is to enable |
| 454 | // updates over a cellular network (disabled by default). We may want to |
| 455 | // revisit this semantics, allowing greater flexibility in defining specific |
| 456 | // permissions over all types of networks. |
Gilad Arnold | 684219d | 2014-07-07 14:54:57 -0700 | [diff] [blame] | 457 | EvalStatus ChromeOSPolicy::UpdateDownloadAllowed( |
Gilad Arnold | a8262e2 | 2014-06-02 13:54:27 -0700 | [diff] [blame] | 458 | EvaluationContext* ec, |
| 459 | State* state, |
| 460 | string* error, |
| 461 | bool* result) const { |
| 462 | // Get the current connection type. |
| 463 | ShillProvider* const shill_provider = state->shill_provider(); |
| 464 | const ConnectionType* conn_type_p = ec->GetValue( |
| 465 | shill_provider->var_conn_type()); |
| 466 | POLICY_CHECK_VALUE_AND_FAIL(conn_type_p, error); |
| 467 | ConnectionType conn_type = *conn_type_p; |
| 468 | |
| 469 | // If we're tethering, treat it as a cellular connection. |
| 470 | if (conn_type != ConnectionType::kCellular) { |
| 471 | const ConnectionTethering* conn_tethering_p = ec->GetValue( |
| 472 | shill_provider->var_conn_tethering()); |
| 473 | POLICY_CHECK_VALUE_AND_FAIL(conn_tethering_p, error); |
| 474 | if (*conn_tethering_p == ConnectionTethering::kConfirmed) |
| 475 | conn_type = ConnectionType::kCellular; |
| 476 | } |
| 477 | |
| 478 | // By default, we allow updates for all connection types, with exceptions as |
| 479 | // noted below. This also determines whether a device policy can override the |
| 480 | // default. |
| 481 | *result = true; |
| 482 | bool device_policy_can_override = false; |
| 483 | switch (conn_type) { |
| 484 | case ConnectionType::kBluetooth: |
| 485 | *result = false; |
| 486 | break; |
| 487 | |
| 488 | case ConnectionType::kCellular: |
| 489 | *result = false; |
| 490 | device_policy_can_override = true; |
| 491 | break; |
| 492 | |
| 493 | case ConnectionType::kUnknown: |
| 494 | if (error) |
| 495 | *error = "Unknown connection type"; |
| 496 | return EvalStatus::kFailed; |
| 497 | |
| 498 | default: |
| 499 | break; // Nothing to do. |
| 500 | } |
| 501 | |
| 502 | // If update is allowed, we're done. |
| 503 | if (*result) |
| 504 | return EvalStatus::kSucceeded; |
| 505 | |
| 506 | // Check whether the device policy specifically allows this connection. |
Gilad Arnold | a8262e2 | 2014-06-02 13:54:27 -0700 | [diff] [blame] | 507 | if (device_policy_can_override) { |
| 508 | DevicePolicyProvider* const dp_provider = state->device_policy_provider(); |
| 509 | const bool* device_policy_is_loaded_p = ec->GetValue( |
| 510 | dp_provider->var_device_policy_is_loaded()); |
| 511 | if (device_policy_is_loaded_p && *device_policy_is_loaded_p) { |
| 512 | const set<ConnectionType>* allowed_conn_types_p = ec->GetValue( |
| 513 | dp_provider->var_allowed_connection_types_for_update()); |
| 514 | if (allowed_conn_types_p) { |
| 515 | if (allowed_conn_types_p->count(conn_type)) { |
| 516 | *result = true; |
| 517 | return EvalStatus::kSucceeded; |
| 518 | } |
Gilad Arnold | 28d6be6 | 2014-06-30 14:04:04 -0700 | [diff] [blame] | 519 | } else if (conn_type == ConnectionType::kCellular) { |
| 520 | // Local user settings can allow updates over cellular iff a policy was |
| 521 | // loaded but no allowed connections were specified in it. |
| 522 | const bool* update_over_cellular_allowed_p = ec->GetValue( |
| 523 | state->updater_provider()->var_cellular_enabled()); |
| 524 | if (update_over_cellular_allowed_p && *update_over_cellular_allowed_p) |
| 525 | *result = true; |
Gilad Arnold | a8262e2 | 2014-06-02 13:54:27 -0700 | [diff] [blame] | 526 | } |
| 527 | } |
| 528 | } |
| 529 | |
Gilad Arnold | 28d6be6 | 2014-06-30 14:04:04 -0700 | [diff] [blame] | 530 | return (*result ? EvalStatus::kSucceeded : EvalStatus::kAskMeAgainLater); |
Gilad Arnold | a8262e2 | 2014-06-02 13:54:27 -0700 | [diff] [blame] | 531 | } |
| 532 | |
Gilad Arnold | 78ecbfc | 2014-10-22 14:38:25 -0700 | [diff] [blame] | 533 | EvalStatus ChromeOSPolicy::P2PEnabled(EvaluationContext* ec, |
| 534 | State* state, |
| 535 | std::string* error, |
| 536 | bool* result) const { |
| 537 | bool enabled = false; |
| 538 | |
| 539 | // Determine whether use of P2P is allowed by policy. Even if P2P is not |
| 540 | // explicitly allowed, we allow it if the device is enterprise enrolled (that |
| 541 | // is, missing or empty owner string). |
| 542 | DevicePolicyProvider* const dp_provider = state->device_policy_provider(); |
| 543 | const bool* device_policy_is_loaded_p = ec->GetValue( |
| 544 | dp_provider->var_device_policy_is_loaded()); |
| 545 | if (device_policy_is_loaded_p && *device_policy_is_loaded_p) { |
| 546 | const bool* policy_au_p2p_enabled_p = ec->GetValue( |
| 547 | dp_provider->var_au_p2p_enabled()); |
| 548 | if (policy_au_p2p_enabled_p) { |
| 549 | enabled = *policy_au_p2p_enabled_p; |
| 550 | } else { |
| 551 | const string* policy_owner_p = ec->GetValue(dp_provider->var_owner()); |
| 552 | if (!policy_owner_p || policy_owner_p->empty()) |
| 553 | enabled = true; |
| 554 | } |
| 555 | } |
| 556 | |
| 557 | // Enable P2P, if so mandated by the updater configuration. This is additive |
| 558 | // to whether or not P2P is enabled by device policy. |
| 559 | if (!enabled) { |
| 560 | const bool* updater_p2p_enabled_p = ec->GetValue( |
| 561 | state->updater_provider()->var_p2p_enabled()); |
| 562 | enabled = updater_p2p_enabled_p && *updater_p2p_enabled_p; |
| 563 | } |
| 564 | |
| 565 | *result = enabled; |
| 566 | return EvalStatus::kSucceeded; |
| 567 | } |
| 568 | |
| 569 | EvalStatus ChromeOSPolicy::P2PEnabledChanged(EvaluationContext* ec, |
| 570 | State* state, |
| 571 | std::string* error, |
| 572 | bool* result, |
| 573 | bool prev_result) const { |
| 574 | EvalStatus status = P2PEnabled(ec, state, error, result); |
| 575 | if (status == EvalStatus::kSucceeded && *result == prev_result) |
| 576 | return EvalStatus::kAskMeAgainLater; |
| 577 | return status; |
| 578 | } |
| 579 | |
Alex Deymo | 0d11c60 | 2014-04-23 20:12:20 -0700 | [diff] [blame] | 580 | EvalStatus ChromeOSPolicy::NextUpdateCheckTime(EvaluationContext* ec, |
| 581 | State* state, string* error, |
| 582 | Time* next_update_check) const { |
Gilad Arnold | a0258a5 | 2014-07-10 16:21:19 -0700 | [diff] [blame] | 583 | UpdaterProvider* const updater_provider = state->updater_provider(); |
| 584 | |
Alex Deymo | 0d11c60 | 2014-04-23 20:12:20 -0700 | [diff] [blame] | 585 | // Don't check for updates too often. We limit the update checks to once every |
| 586 | // some interval. The interval is kTimeoutInitialInterval the first time and |
| 587 | // kTimeoutPeriodicInterval for the subsequent update checks. If the update |
| 588 | // check fails, we increase the interval between the update checks |
| 589 | // exponentially until kTimeoutMaxBackoffInterval. Finally, to avoid having |
| 590 | // many chromebooks running update checks at the exact same time, we add some |
| 591 | // fuzz to the interval. |
| 592 | const Time* updater_started_time = |
Gilad Arnold | a0258a5 | 2014-07-10 16:21:19 -0700 | [diff] [blame] | 593 | ec->GetValue(updater_provider->var_updater_started_time()); |
Alex Deymo | 0d11c60 | 2014-04-23 20:12:20 -0700 | [diff] [blame] | 594 | POLICY_CHECK_VALUE_AND_FAIL(updater_started_time, error); |
| 595 | |
Alex Deymo | f329b93 | 2014-10-30 01:37:48 -0700 | [diff] [blame] | 596 | const Time* last_checked_time = |
Gilad Arnold | a0258a5 | 2014-07-10 16:21:19 -0700 | [diff] [blame] | 597 | ec->GetValue(updater_provider->var_last_checked_time()); |
Alex Deymo | 0d11c60 | 2014-04-23 20:12:20 -0700 | [diff] [blame] | 598 | |
| 599 | const uint64_t* seed = ec->GetValue(state->random_provider()->var_seed()); |
| 600 | POLICY_CHECK_VALUE_AND_FAIL(seed, error); |
| 601 | |
| 602 | PRNG prng(*seed); |
| 603 | |
Gilad Arnold | 38b1402 | 2014-07-09 12:45:56 -0700 | [diff] [blame] | 604 | // If this is the first attempt, compute and return an initial value. |
Alex Deymo | 0d11c60 | 2014-04-23 20:12:20 -0700 | [diff] [blame] | 605 | if (!last_checked_time || *last_checked_time < *updater_started_time) { |
Alex Deymo | 0d11c60 | 2014-04-23 20:12:20 -0700 | [diff] [blame] | 606 | *next_update_check = *updater_started_time + FuzzedInterval( |
| 607 | &prng, kTimeoutInitialInterval, kTimeoutRegularFuzz); |
| 608 | return EvalStatus::kSucceeded; |
| 609 | } |
Gilad Arnold | 38b1402 | 2014-07-09 12:45:56 -0700 | [diff] [blame] | 610 | |
Gilad Arnold | a0258a5 | 2014-07-10 16:21:19 -0700 | [diff] [blame] | 611 | // Check whether the server is enforcing a poll interval; if not, this value |
| 612 | // will be zero. |
| 613 | const unsigned int* server_dictated_poll_interval = ec->GetValue( |
| 614 | updater_provider->var_server_dictated_poll_interval()); |
| 615 | POLICY_CHECK_VALUE_AND_FAIL(server_dictated_poll_interval, error); |
Alex Deymo | 0d11c60 | 2014-04-23 20:12:20 -0700 | [diff] [blame] | 616 | |
Gilad Arnold | a0258a5 | 2014-07-10 16:21:19 -0700 | [diff] [blame] | 617 | int interval = *server_dictated_poll_interval; |
| 618 | int fuzz = 0; |
| 619 | |
Alex Vakulenko | 072359c | 2014-07-18 11:41:07 -0700 | [diff] [blame] | 620 | // If no poll interval was dictated by server compute a back-off period, |
Gilad Arnold | a0258a5 | 2014-07-10 16:21:19 -0700 | [diff] [blame] | 621 | // starting from a predetermined base periodic interval and increasing |
| 622 | // exponentially by the number of consecutive failed attempts. |
| 623 | if (interval == 0) { |
| 624 | const unsigned int* consecutive_failed_update_checks = ec->GetValue( |
| 625 | updater_provider->var_consecutive_failed_update_checks()); |
| 626 | POLICY_CHECK_VALUE_AND_FAIL(consecutive_failed_update_checks, error); |
| 627 | |
| 628 | interval = kTimeoutPeriodicInterval; |
| 629 | unsigned int num_failures = *consecutive_failed_update_checks; |
| 630 | while (interval < kTimeoutMaxBackoffInterval && num_failures) { |
| 631 | interval *= 2; |
| 632 | num_failures--; |
Alex Deymo | 0d11c60 | 2014-04-23 20:12:20 -0700 | [diff] [blame] | 633 | } |
| 634 | } |
| 635 | |
Alex Vakulenko | 072359c | 2014-07-18 11:41:07 -0700 | [diff] [blame] | 636 | // We cannot back off longer than the predetermined maximum interval. |
Gilad Arnold | a0258a5 | 2014-07-10 16:21:19 -0700 | [diff] [blame] | 637 | if (interval > kTimeoutMaxBackoffInterval) |
| 638 | interval = kTimeoutMaxBackoffInterval; |
| 639 | |
Alex Vakulenko | 072359c | 2014-07-18 11:41:07 -0700 | [diff] [blame] | 640 | // We cannot back off shorter than the predetermined periodic interval. Also, |
Gilad Arnold | a0258a5 | 2014-07-10 16:21:19 -0700 | [diff] [blame] | 641 | // in this case set the fuzz to a predetermined regular value. |
| 642 | if (interval <= kTimeoutPeriodicInterval) { |
| 643 | interval = kTimeoutPeriodicInterval; |
| 644 | fuzz = kTimeoutRegularFuzz; |
| 645 | } |
| 646 | |
| 647 | // If not otherwise determined, defer to a fuzz of +/-(interval / 2). |
Gilad Arnold | 38b1402 | 2014-07-09 12:45:56 -0700 | [diff] [blame] | 648 | if (fuzz == 0) |
| 649 | fuzz = interval; |
| 650 | |
Alex Deymo | 0d11c60 | 2014-04-23 20:12:20 -0700 | [diff] [blame] | 651 | *next_update_check = *last_checked_time + FuzzedInterval( |
Gilad Arnold | 38b1402 | 2014-07-09 12:45:56 -0700 | [diff] [blame] | 652 | &prng, interval, fuzz); |
Alex Deymo | 0d11c60 | 2014-04-23 20:12:20 -0700 | [diff] [blame] | 653 | return EvalStatus::kSucceeded; |
| 654 | } |
| 655 | |
| 656 | TimeDelta ChromeOSPolicy::FuzzedInterval(PRNG* prng, int interval, int fuzz) { |
Gilad Arnold | e121881 | 2014-05-07 12:21:36 -0700 | [diff] [blame] | 657 | DCHECK_GE(interval, 0); |
| 658 | DCHECK_GE(fuzz, 0); |
Alex Deymo | 0d11c60 | 2014-04-23 20:12:20 -0700 | [diff] [blame] | 659 | int half_fuzz = fuzz / 2; |
Alex Deymo | 0d11c60 | 2014-04-23 20:12:20 -0700 | [diff] [blame] | 660 | // This guarantees the output interval is non negative. |
Gilad Arnold | b3b0544 | 2014-05-30 14:25:05 -0700 | [diff] [blame] | 661 | int interval_min = max(interval - half_fuzz, 0); |
Gilad Arnold | e121881 | 2014-05-07 12:21:36 -0700 | [diff] [blame] | 662 | int interval_max = interval + half_fuzz; |
| 663 | return TimeDelta::FromSeconds(prng->RandMinMax(interval_min, interval_max)); |
Alex Deymo | 0d11c60 | 2014-04-23 20:12:20 -0700 | [diff] [blame] | 664 | } |
| 665 | |
Gilad Arnold | dc4bb26 | 2014-07-23 10:45:19 -0700 | [diff] [blame] | 666 | EvalStatus ChromeOSPolicy::UpdateBackoffAndDownloadUrl( |
Alex Deymo | f329b93 | 2014-10-30 01:37:48 -0700 | [diff] [blame] | 667 | EvaluationContext* ec, State* state, string* error, |
Gilad Arnold | dc4bb26 | 2014-07-23 10:45:19 -0700 | [diff] [blame] | 668 | UpdateBackoffAndDownloadUrlResult* result, |
| 669 | const UpdateState& update_state) const { |
| 670 | // Sanity checks. |
| 671 | DCHECK_GE(update_state.download_errors_max, 0); |
| 672 | |
| 673 | // Set default result values. |
| 674 | result->do_increment_failures = false; |
| 675 | result->backoff_expiry = update_state.backoff_expiry; |
| 676 | result->url_idx = -1; |
| 677 | result->url_num_errors = 0; |
| 678 | |
| 679 | const bool* is_official_build_p = ec->GetValue( |
| 680 | state->system_provider()->var_is_official_build()); |
| 681 | bool is_official_build = (is_official_build_p ? *is_official_build_p : true); |
| 682 | |
| 683 | // Check whether backoff is enabled. |
| 684 | bool may_backoff = false; |
| 685 | if (update_state.is_backoff_disabled) { |
| 686 | LOG(INFO) << "Backoff disabled by Omaha."; |
| 687 | } else if (update_state.is_interactive) { |
| 688 | LOG(INFO) << "No backoff for interactive updates."; |
| 689 | } else if (update_state.is_delta_payload) { |
| 690 | LOG(INFO) << "No backoff for delta payloads."; |
| 691 | } else if (!is_official_build) { |
| 692 | LOG(INFO) << "No backoff for unofficial builds."; |
| 693 | } else { |
| 694 | may_backoff = true; |
Gilad Arnold | b3b0544 | 2014-05-30 14:25:05 -0700 | [diff] [blame] | 695 | } |
| 696 | |
Gilad Arnold | dc4bb26 | 2014-07-23 10:45:19 -0700 | [diff] [blame] | 697 | // If previous backoff still in effect, block. |
| 698 | if (may_backoff && !update_state.backoff_expiry.is_null() && |
| 699 | !ec->IsWallclockTimeGreaterThan(update_state.backoff_expiry)) { |
| 700 | LOG(INFO) << "Previous backoff has not expired, waiting."; |
| 701 | return EvalStatus::kAskMeAgainLater; |
| 702 | } |
Gilad Arnold | b3b0544 | 2014-05-30 14:25:05 -0700 | [diff] [blame] | 703 | |
| 704 | // Determine whether HTTP downloads are forbidden by policy. This only |
| 705 | // applies to official system builds; otherwise, HTTP is always enabled. |
| 706 | bool http_allowed = true; |
Gilad Arnold | dc4bb26 | 2014-07-23 10:45:19 -0700 | [diff] [blame] | 707 | if (is_official_build) { |
Gilad Arnold | b3b0544 | 2014-05-30 14:25:05 -0700 | [diff] [blame] | 708 | DevicePolicyProvider* const dp_provider = state->device_policy_provider(); |
| 709 | const bool* device_policy_is_loaded_p = ec->GetValue( |
| 710 | dp_provider->var_device_policy_is_loaded()); |
| 711 | if (device_policy_is_loaded_p && *device_policy_is_loaded_p) { |
| 712 | const bool* policy_http_downloads_enabled_p = ec->GetValue( |
| 713 | dp_provider->var_http_downloads_enabled()); |
| 714 | http_allowed = (!policy_http_downloads_enabled_p || |
| 715 | *policy_http_downloads_enabled_p); |
| 716 | } |
| 717 | } |
| 718 | |
Gilad Arnold | dc4bb26 | 2014-07-23 10:45:19 -0700 | [diff] [blame] | 719 | int url_idx = update_state.last_download_url_idx; |
| 720 | if (url_idx < 0) |
| 721 | url_idx = -1; |
| 722 | bool do_advance_url = false; |
| 723 | bool is_failure_occurred = false; |
| 724 | Time err_time; |
| 725 | |
| 726 | // Scan the relevant part of the download error log, tracking which URLs are |
| 727 | // being used, and accounting the number of errors for each URL. Note that |
| 728 | // this process may not traverse all errors provided, as it may decide to bail |
| 729 | // out midway depending on the particular errors exhibited, the number of |
| 730 | // failures allowed, etc. When this ends, |url_idx| will point to the last URL |
| 731 | // used (-1 if starting fresh), |do_advance_url| will determine whether the |
| 732 | // URL needs to be advanced, and |err_time| the point in time when the last |
| 733 | // reported error occurred. Additionally, if the error log indicates that an |
| 734 | // update attempt has failed (abnormal), then |is_failure_occurred| will be |
| 735 | // set to true. |
| 736 | const int num_urls = update_state.download_urls.size(); |
| 737 | int prev_url_idx = -1; |
| 738 | int url_num_errors = update_state.last_download_url_num_errors; |
| 739 | Time prev_err_time; |
| 740 | bool is_first = true; |
| 741 | for (const auto& err_tuple : update_state.download_errors) { |
| 742 | // Do some sanity checks. |
| 743 | int used_url_idx = get<0>(err_tuple); |
| 744 | if (is_first && url_idx >= 0 && used_url_idx != url_idx) { |
| 745 | LOG(WARNING) << "First URL in error log (" << used_url_idx |
| 746 | << ") not as expected (" << url_idx << ")"; |
Gilad Arnold | b3b0544 | 2014-05-30 14:25:05 -0700 | [diff] [blame] | 747 | } |
Gilad Arnold | dc4bb26 | 2014-07-23 10:45:19 -0700 | [diff] [blame] | 748 | is_first = false; |
| 749 | url_idx = used_url_idx; |
| 750 | if (url_idx < 0 || url_idx >= num_urls) { |
| 751 | LOG(ERROR) << "Download error log contains an invalid URL index (" |
| 752 | << url_idx << ")"; |
| 753 | return EvalStatus::kFailed; |
| 754 | } |
| 755 | err_time = get<2>(err_tuple); |
| 756 | if (!(prev_err_time.is_null() || err_time >= prev_err_time)) { |
| 757 | // TODO(garnold) Monotonicity cannot really be assumed when dealing with |
| 758 | // wallclock-based timestamps. However, we're making a simplifying |
| 759 | // assumption so as to keep the policy implementation straightforward, for |
| 760 | // now. In general, we should convert all timestamp handling in the |
| 761 | // UpdateManager to use monotonic time (instead of wallclock), including |
| 762 | // the computation of various expiration times (backoff, scattering, etc). |
| 763 | // The client will do whatever conversions necessary when |
| 764 | // persisting/retrieving these values across reboots. See chromium:408794. |
| 765 | LOG(ERROR) << "Download error timestamps not monotonically increasing."; |
| 766 | return EvalStatus::kFailed; |
| 767 | } |
| 768 | prev_err_time = err_time; |
Gilad Arnold | b3b0544 | 2014-05-30 14:25:05 -0700 | [diff] [blame] | 769 | |
Gilad Arnold | dc4bb26 | 2014-07-23 10:45:19 -0700 | [diff] [blame] | 770 | // Ignore errors that happened before the last known failed attempt. |
| 771 | if (!update_state.failures_last_updated.is_null() && |
| 772 | err_time <= update_state.failures_last_updated) |
| 773 | continue; |
| 774 | |
| 775 | if (prev_url_idx >= 0) { |
| 776 | if (url_idx < prev_url_idx) { |
| 777 | LOG(ERROR) << "The URLs in the download error log have wrapped around (" |
| 778 | << prev_url_idx << "->" << url_idx |
| 779 | << "). This should not have happened and means that there's " |
| 780 | "a bug. To be conservative, we record a failed attempt " |
| 781 | "(invalidating the rest of the error log) and resume " |
| 782 | "download from the first usable URL."; |
| 783 | url_idx = -1; |
| 784 | is_failure_occurred = true; |
| 785 | break; |
| 786 | } |
| 787 | |
| 788 | if (url_idx > prev_url_idx) { |
| 789 | url_num_errors = 0; |
| 790 | do_advance_url = false; |
| 791 | } |
| 792 | } |
| 793 | |
| 794 | if (HandleErrorCode(get<1>(err_tuple), &url_num_errors) || |
| 795 | url_num_errors > update_state.download_errors_max) |
| 796 | do_advance_url = true; |
| 797 | |
| 798 | prev_url_idx = url_idx; |
Gilad Arnold | b3b0544 | 2014-05-30 14:25:05 -0700 | [diff] [blame] | 799 | } |
| 800 | |
Gilad Arnold | dc4bb26 | 2014-07-23 10:45:19 -0700 | [diff] [blame] | 801 | // If required, advance to the next usable URL. If the URLs wraparound, we |
| 802 | // mark an update attempt failure. Also be sure to set the download error |
| 803 | // count to zero. |
| 804 | if (url_idx < 0 || do_advance_url) { |
| 805 | url_num_errors = 0; |
| 806 | int start_url_idx = -1; |
| 807 | do { |
| 808 | if (++url_idx == num_urls) { |
| 809 | url_idx = 0; |
| 810 | // We only mark failure if an actual advancing of a URL was required. |
| 811 | if (do_advance_url) |
| 812 | is_failure_occurred = true; |
| 813 | } |
| 814 | |
| 815 | if (start_url_idx < 0) |
| 816 | start_url_idx = url_idx; |
| 817 | else if (url_idx == start_url_idx) |
| 818 | url_idx = -1; // No usable URL. |
| 819 | } while (url_idx >= 0 && |
| 820 | !IsUrlUsable(update_state.download_urls[url_idx], http_allowed)); |
| 821 | } |
| 822 | |
| 823 | // If we have a download URL but a failure was observed, compute a new backoff |
| 824 | // expiry (if allowed). The backoff period is generally 2 ^ (num_failures - 1) |
| 825 | // days, bounded by the size of int and kAttemptBackoffMaxIntervalInDays, and |
| 826 | // fuzzed by kAttemptBackoffFuzzInHours hours. Backoff expiry is computed from |
| 827 | // the latest recorded time of error. |
| 828 | Time backoff_expiry; |
| 829 | if (url_idx >= 0 && is_failure_occurred && may_backoff) { |
| 830 | CHECK(!err_time.is_null()) |
| 831 | << "We must have an error timestamp if a failure occurred!"; |
| 832 | const uint64_t* seed = ec->GetValue(state->random_provider()->var_seed()); |
| 833 | POLICY_CHECK_VALUE_AND_FAIL(seed, error); |
| 834 | PRNG prng(*seed); |
Alex Deymo | f329b93 | 2014-10-30 01:37:48 -0700 | [diff] [blame] | 835 | int exp = min(update_state.num_failures, |
Gilad Arnold | dc4bb26 | 2014-07-23 10:45:19 -0700 | [diff] [blame] | 836 | static_cast<int>(sizeof(int)) * 8 - 2); |
| 837 | TimeDelta backoff_interval = TimeDelta::FromDays( |
Alex Deymo | f329b93 | 2014-10-30 01:37:48 -0700 | [diff] [blame] | 838 | min(1 << exp, kAttemptBackoffMaxIntervalInDays)); |
Gilad Arnold | dc4bb26 | 2014-07-23 10:45:19 -0700 | [diff] [blame] | 839 | TimeDelta backoff_fuzz = TimeDelta::FromHours(kAttemptBackoffFuzzInHours); |
| 840 | TimeDelta wait_period = FuzzedInterval(&prng, backoff_interval.InSeconds(), |
| 841 | backoff_fuzz.InSeconds()); |
| 842 | backoff_expiry = err_time + wait_period; |
| 843 | |
| 844 | // If the newly computed backoff already expired, nullify it. |
| 845 | if (ec->IsWallclockTimeGreaterThan(backoff_expiry)) |
| 846 | backoff_expiry = Time(); |
| 847 | } |
| 848 | |
| 849 | result->do_increment_failures = is_failure_occurred; |
| 850 | result->backoff_expiry = backoff_expiry; |
Gilad Arnold | b3b0544 | 2014-05-30 14:25:05 -0700 | [diff] [blame] | 851 | result->url_idx = url_idx; |
Gilad Arnold | dc4bb26 | 2014-07-23 10:45:19 -0700 | [diff] [blame] | 852 | result->url_num_errors = url_num_errors; |
Gilad Arnold | b3b0544 | 2014-05-30 14:25:05 -0700 | [diff] [blame] | 853 | return EvalStatus::kSucceeded; |
| 854 | } |
| 855 | |
Gilad Arnold | f62a4b8 | 2014-05-01 07:41:07 -0700 | [diff] [blame] | 856 | EvalStatus ChromeOSPolicy::UpdateScattering( |
| 857 | EvaluationContext* ec, |
| 858 | State* state, |
| 859 | string* error, |
| 860 | UpdateScatteringResult* result, |
| 861 | const UpdateState& update_state) const { |
| 862 | // Preconditions. These stem from the postconditions and usage contract. |
| 863 | DCHECK(update_state.scatter_wait_period >= kZeroInterval); |
| 864 | DCHECK_GE(update_state.scatter_check_threshold, 0); |
| 865 | |
| 866 | // Set default result values. |
| 867 | result->is_scattering = false; |
| 868 | result->wait_period = kZeroInterval; |
| 869 | result->check_threshold = 0; |
| 870 | |
| 871 | DevicePolicyProvider* const dp_provider = state->device_policy_provider(); |
| 872 | |
| 873 | // Ensure that a device policy is loaded. |
| 874 | const bool* device_policy_is_loaded_p = ec->GetValue( |
| 875 | dp_provider->var_device_policy_is_loaded()); |
| 876 | if (!(device_policy_is_loaded_p && *device_policy_is_loaded_p)) |
| 877 | return EvalStatus::kSucceeded; |
| 878 | |
| 879 | // Is scattering enabled by policy? |
| 880 | const TimeDelta* scatter_factor_p = ec->GetValue( |
| 881 | dp_provider->var_scatter_factor()); |
| 882 | if (!scatter_factor_p || *scatter_factor_p == kZeroInterval) |
| 883 | return EvalStatus::kSucceeded; |
| 884 | |
| 885 | // Obtain a pseudo-random number generator. |
| 886 | const uint64_t* seed = ec->GetValue(state->random_provider()->var_seed()); |
| 887 | POLICY_CHECK_VALUE_AND_FAIL(seed, error); |
| 888 | PRNG prng(*seed); |
| 889 | |
| 890 | // Step 1: Maintain the scattering wait period. |
| 891 | // |
| 892 | // If no wait period was previously determined, or it no longer fits in the |
| 893 | // scatter factor, then generate a new one. Otherwise, keep the one we have. |
Gilad Arnold | f62a4b8 | 2014-05-01 07:41:07 -0700 | [diff] [blame] | 894 | TimeDelta wait_period = update_state.scatter_wait_period; |
| 895 | if (wait_period == kZeroInterval || wait_period > *scatter_factor_p) { |
| 896 | wait_period = TimeDelta::FromSeconds( |
| 897 | prng.RandMinMax(1, scatter_factor_p->InSeconds())); |
| 898 | } |
| 899 | |
Gilad Arnold | dc4bb26 | 2014-07-23 10:45:19 -0700 | [diff] [blame] | 900 | // If we surpassed the wait period or the max scatter period associated with |
Gilad Arnold | f62a4b8 | 2014-05-01 07:41:07 -0700 | [diff] [blame] | 901 | // the update, then no wait is needed. |
| 902 | Time wait_expires = (update_state.first_seen + |
| 903 | min(wait_period, update_state.scatter_wait_period_max)); |
Gilad Arnold | a65fced | 2014-07-23 09:01:31 -0700 | [diff] [blame] | 904 | if (ec->IsWallclockTimeGreaterThan(wait_expires)) |
Gilad Arnold | f62a4b8 | 2014-05-01 07:41:07 -0700 | [diff] [blame] | 905 | wait_period = kZeroInterval; |
| 906 | |
| 907 | // Step 2: Maintain the update check threshold count. |
| 908 | // |
| 909 | // If an update check threshold is not specified then generate a new |
| 910 | // one. |
| 911 | int check_threshold = update_state.scatter_check_threshold; |
| 912 | if (check_threshold == 0) { |
| 913 | check_threshold = prng.RandMinMax( |
| 914 | update_state.scatter_check_threshold_min, |
| 915 | update_state.scatter_check_threshold_max); |
| 916 | } |
| 917 | |
| 918 | // If the update check threshold is not within allowed range then nullify it. |
| 919 | // TODO(garnold) This is compliant with current logic found in |
| 920 | // OmahaRequestAction::IsUpdateCheckCountBasedWaitingSatisfied(). We may want |
| 921 | // to change it so that it behaves similarly to the wait period case, namely |
| 922 | // if the current value exceeds the maximum, we set a new one within range. |
| 923 | if (check_threshold > update_state.scatter_check_threshold_max) |
| 924 | check_threshold = 0; |
| 925 | |
| 926 | // If the update check threshold is non-zero and satisfied, then nullify it. |
| 927 | if (check_threshold > 0 && update_state.num_checks >= check_threshold) |
| 928 | check_threshold = 0; |
| 929 | |
| 930 | bool is_scattering = (wait_period != kZeroInterval || check_threshold); |
| 931 | EvalStatus ret = EvalStatus::kSucceeded; |
| 932 | if (is_scattering && wait_period == update_state.scatter_wait_period && |
| 933 | check_threshold == update_state.scatter_check_threshold) |
| 934 | ret = EvalStatus::kAskMeAgainLater; |
| 935 | result->is_scattering = is_scattering; |
| 936 | result->wait_period = wait_period; |
| 937 | result->check_threshold = check_threshold; |
| 938 | return ret; |
| 939 | } |
| 940 | |
Alex Deymo | 63784a5 | 2014-05-28 10:46:14 -0700 | [diff] [blame] | 941 | } // namespace chromeos_update_manager |