webmin/bsdfdisk/zfs_create.cgi

#!/usr/local/bin/perl
# Create a ZFS filesystem (dataset) within the pool owning this device

use strict;
use warnings;
no warnings 'redefine';
no warnings 'uninitialized';
require './bsdfdisk-lib.pl';
our ( %in, %text, $module_name );
&ReadParse();
&error_setup( $text{'newfs_zfs_err'} );

# Validate input parameters to prevent command injection
$in{'device'} =~ /^[a-zA-Z0-9_\/.-]+$/ or &error("Invalid device name");
$in{'device'} !~ /\.\./                or &error("Invalid device name");
$in{'slice'}  =~ /^\d+$/               or &error("Invalid slice number");
$in{'part'}   =~ /^[a-z]$/ or &error("Invalid partition letter") if $in{'part'};

&has_command('zfs') or &error( $text{'newfs_zfs_nozfs'} );

# Get the disk and slice
my @disks = &list_disks_partitions();
my ($disk) = grep { $_->{'device'} eq $in{'device'} } @disks;
$disk || &error( $text{'disk_egone'} );
my ($slice) = grep { $_->{'number'} eq $in{'slice'} } @{ $disk->{'slices'} };
$slice || &error( $text{'slice_egone'} );
my ( $object, $part );
if ( $in{'part'} ne '' ) {
    ($part) = grep { $_->{'letter'} eq $in{'part'} } @{ $slice->{'parts'} };
    $part || &error( $text{'part_egone'} );
    $object = $part;
}
else {
    $object = $slice;
}

# Determine ZFS pool for this device
my $zdev = get_zfs_device_info($object);
$zdev || &error( $text{'newfs_zfs_notinpool'} );
my $parent = $zdev->{'pool'};

# Validate dataset name
my $name = $in{'zfs'};
$name =~ s/^\s+|\s+$//g if defined $name;
$name && $name =~ /^[a-zA-Z0-9_\-.:]+$/ or &error( $text{'newfs_zfs_badname'} );
my $dataset = $parent . "/" . $name;

# Allowed property values
my %allowed = (
    'recordsize' =>
      { map { $_ => 1 } qw(512 1K 2K 4K 8K 16K 32K 64K 128K 256K 512K 1M) },
    'compression' => { map { $_ => 1 } qw(on off lz4 gzip) },
    'atime'       => { map { $_ => 1 } qw(on off) },
    'sync'        => { map { $_ => 1 } qw(standard always disabled) },
    'exec'        => { map { $_ => 1 } qw(on off) },
    'canmount'    => { map { $_ => 1 } qw(on off noauto) },
    'acltype'     => { map { $_ => 1 } qw(nfsv4 posixacl) },
    'aclinherit'  => {
        map { $_ => 1 }
          qw(discard noallow restricted passthrough passthrough-x)
    },
    'aclmode' => { map { $_ => 1 } qw(discard groupmask passthrough) },
    'xattr'   => { map { $_ => 1 } qw(on off sa) },
);

my @props =
  qw(recordsize compression atime sync exec canmount acltype aclinherit aclmode xattr);
my @opts;
foreach my $p (@props) {
    next if ( !defined $in{$p} || $in{$p} eq '' || $in{$p} eq 'default' );
    $allowed{$p} && $allowed{$p}->{ $in{$p} }
      or &error( &text( 'newfs_zfs_badopt', $p ) );
    push( @opts, "-o $p=" . &quote_path( $in{$p} ) );
}
if ( defined $in{'mountpoint'} && $in{'mountpoint'} ne '' ) {
    push( @opts, "-o mountpoint=" . &quote_path( $in{'mountpoint'} ) );
}

&ui_print_unbuffered_header( $object->{'desc'}, $text{'newfs_zfs_title'}, "" );

print &text( 'newfs_zfs_creating', "<tt>" . &html_escape($dataset) . "</tt>" ),
  "<br>\n";
print "<pre>\n";
my $cmd = "zfs create " . join( " ", @opts ) . " " . &quote_path($dataset);
&additional_log( 'exec', undef, $cmd );
my $fh;
&open_execute_command( $fh, $cmd, 2 );
if ($fh) {
    while (<$fh>) { print &html_escape($_); }
    close($fh);
}
print "</pre>";
if ($?) {
    print $text{'newfs_zfs_failed'}, "<p>\n";
}
else {
    # Optional ACL inherit flags
    if ( $in{'add_inherit'} ) {
        my $cmd2 = acl_inherit_flags_cmd($dataset);
        if ($cmd2) { system($cmd2); }
    }
    print $text{'newfs_zfs_done'}, "<p>\n";
    &webmin_log( "zfs-create", "dataset", $dataset, { parent => $parent } );
}

if ( $in{'part'} ne '' ) {
    &ui_print_footer(
        "edit_part.cgi?device=$in{'device'}&"
          . "slice=$in{'slice'}&part=$in{'part'}",
        $text{'part_return'}
    );
}
else {
    &ui_print_footer(
        "edit_slice.cgi?device=$in{'device'}&" . "slice=$in{'slice'}",
        $text{'slice_return'} );
}