/*      $NetBSD: net.c,v 1.48 2026/06/26 19:03:49 martin Exp $  */

/*
 * Copyright 1997 Piermont Information Systems Inc.
 * All rights reserved.
 *
 * Written by Philip A. Nelson for Piermont Information Systems Inc.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 * 3. The name of Piermont Information Systems Inc. may not be used to endorse
 *    or promote products derived from this software without specific prior
 *    written permission.
 *
 * THIS SOFTWARE IS PROVIDED BY PIERMONT INFORMATION SYSTEMS INC. ``AS IS''
 * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 * ARE DISCLAIMED. IN NO EVENT SHALL PIERMONT INFORMATION SYSTEMS INC. BE
 * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
 * THE POSSIBILITY OF SUCH DAMAGE.
 *
 */

/* net.c -- routines to fetch files off the network. */

#include <sys/ioctl.h>
#include <sys/param.h>
#include <sys/resource.h>
#include <sys/socket.h>
#include <sys/stat.h>
#include <sys/statvfs.h>
#include <sys/statvfs.h>
#include <sys/sysctl.h>
#include <sys/wait.h>
#include <arpa/inet.h>
#include <net/if.h>
#include <net/if_media.h>
#include <netinet/in.h>
#include <net80211/ieee80211_ioctl.h>
#include <netinet/ip_var.h>
#ifdef INET6
#include <netinet6/ip6_var.h>
#endif

#include <err.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <curses.h>
#include <time.h>
#include <unistd.h>

#include "defs.h"
#include "md.h"
#include "msg_defs.h"
#include "menu_defs.h"
#include "txtwalk.h"

int network_up = 0;
/* Access to network information */
#define MAX_NETS 15
struct net_desc {
        char if_dev[STRSIZE];
        char name[STRSIZE]; // TODO
};

static char net_dev[STRSIZE];
static char net_domain[STRSIZE];
static char net_host[STRSIZE];
static char net_ip[SSTRSIZE];
static char net_srv_ip[SSTRSIZE];
static char net_mask[SSTRSIZE];
char net_namesvr[STRSIZE];
static char net_defroute[STRSIZE];
static char net_media[STRSIZE];
static char net_ssid[STRSIZE];
static char net_passphrase[STRSIZE];
static char sl_flags[STRSIZE];
static int net_dhcpconf;
#define DHCPCONF_IPADDR         0x01
#define DHCPCONF_NAMESVR        0x02
#define DHCPCONF_HOST           0x04
#define DHCPCONF_DOMAIN         0x08
#ifdef INET6
static char net_ip6[STRSIZE];
#define IP6CONF_AUTOHOST        0x01
#endif


/* URL encode unsafe characters.  */

static char *url_encode (char *dst, const char *src, const char *ep,
                                const char *safe_chars,
                                int encode_leading_slash);

static void write_etc_hosts(FILE *f);

#define DHCPCD "/sbin/dhcpcd"
#define WPA_SUPPLICANT "/usr/sbin/wpa_supplicant"
#include <signal.h>
static int config_eth_medium(char *);
static int config_dhcp(char *);
static int config_wlan(char *);

#ifdef INET6
static int is_v6kernel (void);
#endif

/*
 * URL encode unsafe characters.  See RFC 1738.
 *
 * Copies src string to dst, encoding unsafe or reserved characters
 * in %hex form as it goes, and returning a pointer to the result.
 * The result is always a nul-terminated string even if it had to be
 * truncated to avoid overflowing the available space.
 *
 * This url_encode() function does not operate on complete URLs, it
 * operates on strings that make up parts of URLs.  For example, in a
 * URL like "ftp://username:password@host/path", the username, password,
 * host and path should each be encoded separately before they are
 * joined together with the punctuation characters.
 *
 * In most ordinary use, the path portion of a URL does not start with
 * a slash; the slash is a separator between the host portion and the
 * path portion, and is dealt with by software outside the url_encode()
 * function.  However, it is valid for url_encode() to be passed a
 * string that does begin with a slash.  For example, the string might
 * represent a password, or a path part of a URL that the user really
 * does want to begin with a slash.
 *
 * len is the length of the destination buffer.  The result will be
 * truncated if necessary to fit in the destination buffer.
 *
 * safe_chars is a string of characters that should not be encoded.  If
 * safe_chars is non-NULL, any characters in safe_chars as well as any
 * alphanumeric characters will be copied from src to dst without
 * encoding.  Some potentially useful settings for this parameter are:
 *
 *      NULL            Everything is encoded (even alphanumerics)
 *      ""              Everything except alphanumerics are encoded
 *      "/"             Alphanumerics and '/' remain unencoded
 *      "$-_.+!*'(),"   Consistent with a strict reading of RFC 1738
 *      "$-_.+!*'(),/"  As above, except '/' is not encoded
 *      "-_.+!,/"       As above, except shell special characters are encoded
 *
 * encode_leading_slash is a flag that determines whether or not to
 * encode a leading slash in a string.  If this flag is set, and if the
 * first character in the src string is '/', then the leading slash will
 * be encoded (as "%2F"), even if '/' is one of the characters in the
 * safe_chars string.  Note that only the first character of the src
 * string is affected by this flag, and that leading slashes are never
 * deleted, but either retained unchanged or encoded.
 *
 * Unsafe and reserved characters are defined in RFC 1738 section 2.2.
 * The most important parts are:
 *
 *      The characters ";", "/", "?", ":", "@", "=" and "&" are the
 *      characters which may be reserved for special meaning within a
 *      scheme. No other characters may be reserved within a scheme.
 *      [...]
 *
 *      Thus, only alphanumerics, the special characters "$-_.+!*'(),",
 *      and reserved characters used for their reserved purposes may be
 *      used unencoded within a URL.
 *
 */

#define RFC1738_SAFE                            "$-_.+!*'(),"
#define RFC1738_SAFE_LESS_SHELL                 "-_.+!,"
#define RFC1738_SAFE_LESS_SHELL_PLUS_SLASH      "-_.+!,/"

static char *
url_encode(char *dst, const char *src, const char *ep,
        const char *safe_chars, int encode_leading_slash)
{
        int ch;

        ep--;

        for (; dst < ep; src++) {
                ch = *src & 0xff;
                if (ch == 0)
                        break;
                if (safe_chars != NULL &&
                    (ch != '/' || !encode_leading_slash) &&
                    (isalnum(ch) || strchr(safe_chars, ch))) {
                        *dst++ = ch;
                } else {
                        /* encode this char */
                        if (ep - dst < 3)
                                break;
                        snprintf(dst, ep - dst, "%%%02X", ch);
                        dst += 3;
                }
                encode_leading_slash = 0;
        }
        *dst = '\0';
        return dst;
}

static const char *ignored_if_names[] = {
        "gre",                  /* net */
        "ipip",                 /* netinet */
        "gif",                  /* netinet6 */
        "faith",                /* netinet6 */
        "lo",                   /* net */
        "lo0",                  /* net */
#if 0
        "mdecap",               /* netinet -- never in IF list (?) XXX */
#endif
        "ppp",                  /* net */
#if 0
        "sl",                   /* net */
#endif
        "strip",                /* net */
        "tun",                  /* net */
        /* XXX others? */
        NULL,
};

static bool
have_working_ipv4(void)
{
        uint64_t ipstats[IP_NSTATS];
        size_t size = sizeof(ipstats);

        /* At least some packets delivered to upper layers? */
        if (sysctlbyname("net.inet.ip.stats", ipstats, &size, NULL, 0) == -1)
                return false;
        if (ipstats[IP_STAT_DELIVERED] < 10)    /* arbitrary threshold */
                return false;

        /* do we have a default route? */
        if (run_program(RUN_SILENT|RUN_ERROR_OK,
            "/sbin/route  get -inet default") != 0)
                return false;

        return true;
}

#ifdef INET6
static bool
have_working_ipv6(void)
{
        uint64_t ipstats[IP6_NSTATS];
        size_t size = sizeof(ipstats);

        /* At least some packets delivered to upper layers? */
        if (sysctlbyname("net.inet6.ip6.stats", ipstats, &size, NULL, 0) == -1)
                return false;
        if (ipstats[IP6_STAT_DELIVERED] < 10)   /* arbitrary threshold */
                return false;

        /* do we have a default route? */
        if (run_program(RUN_SILENT|RUN_ERROR_OK,
            "/sbin/route  get -inet6 default") != 0)
                return false;

        return true;
}
#else
#define have_working_ipv6()     false
#endif

static int
get_ifconfig_info(struct net_desc *devs)
{
        char *buf_in;
        char *buf_tmp;
        const char **ignore;
        char *buf;
        char *tmp;
        int textsize;
        int i;

        /* Get ifconfig information */
        textsize = collect(T_OUTPUT, &buf_in, "/sbin/ifconfig -l 2>/dev/null");
        if (textsize < 0) {
                if (logfp)
                        (void)fprintf(logfp,
                            "Aborting: Could not run ifconfig.\n");
                (void)fprintf(stderr, "Could not run ifconfig.");
                exit(1);
        }

        buf = malloc (STRSIZE * sizeof(char));
        for (i = 0, buf_tmp = buf_in; i < MAX_NETS && strlen(buf_tmp) > 0
            && buf_tmp < buf_in + strlen(buf_in);) {
                tmp = stpncpy(buf, buf_tmp, strcspn(buf_tmp," \n"));
                *tmp='\0';
                buf_tmp += (strcspn(buf_tmp, " \n") + 1) * sizeof(char);

                /* Skip ignored interfaces */
                for (ignore = ignored_if_names; *ignore != NULL; ignore++) {
                        size_t len = strlen(*ignore);
                        if (strncmp(buf, *ignore, len) == 0 &&
                            isdigit((unsigned char)buf[len]))
                                break;
                }
                if (*ignore != NULL)
                        continue;

                strlcpy (devs[i].if_dev, buf, STRSIZE);
                i++;
        }
        if (i < MAX_NETS)
                devs[i].if_dev[0] = 0;  /* XXX ? */

        free(buf);
        free(buf_in);
        return i;
}

static int
do_ifreq(struct ifreq *ifr, unsigned long cmd, void *data)
{
        int sock;
        int rval;

        sock = socket(PF_INET, SOCK_DGRAM, 0);
        if (sock == -1)
                return -1;

        memset(ifr, 0, sizeof *ifr);
        ifr->ifr_data = data;
        strlcpy(ifr->ifr_name, net_dev, sizeof ifr->ifr_name);
        rval = ioctl(sock, cmd, ifr);
        close(sock);

        return rval;
}

static int
do_ifmreq(struct ifmediareq *ifmr, unsigned long cmd)
{
        int sock;
        int rval;

        sock = socket(PF_INET, SOCK_DGRAM, 0);
        if (sock == -1)
                return -1;

        memset(ifmr, 0, sizeof *ifmr);
        strlcpy(ifmr->ifm_name, net_dev, sizeof ifmr->ifm_name);
        rval = ioctl(sock, cmd, ifmr);
        close(sock);

        return rval;
}

/* Fill in defaults network values for the selected interface */
static void
get_ifinterface_info(void)
{
        struct ifreq ifr;
        struct ifmediareq ifmr;
        struct sockaddr_in *sa_in = (void*)&ifr.ifr_addr;
        int modew;
        const char *media_opt;
        const char *sep;

        if (do_ifreq(&ifr, SIOCGIFADDR, NULL) == 0 &&
            sa_in->sin_addr.s_addr != 0)
                strlcpy(net_ip, inet_ntoa(sa_in->sin_addr), sizeof net_ip);

        if (do_ifreq(&ifr, SIOCGIFNETMASK, NULL) == 0 &&
            sa_in->sin_addr.s_addr != 0)
                strlcpy(net_mask, inet_ntoa(sa_in->sin_addr), sizeof net_mask);

        if (do_ifmreq(&ifmr, SIOCGIFMEDIA) == 0) {
                /* Get the name of the media word */
                modew = ifmr.ifm_current;
                strlcpy(net_media, get_media_subtype_string(modew),
                    sizeof net_media);
                /* and add any media options */
                sep = " mediaopt ";
                while ((media_opt = get_media_option_string(&modew)) != NULL) {
                        strlcat(net_media, sep, sizeof net_media);
                        strlcat(net_media, media_opt, sizeof net_media);
                        sep = ",";
                }
        }
}

#ifndef INET6
#define get_if6interface_info()
#else
static void
get_if6interface_info(void)
{
        char *textbuf, *t;
        int textsize;

        textsize = collect(T_OUTPUT, &textbuf,
            "/sbin/ifconfig %s inet6 2>/dev/null", net_dev);
        if (textsize >= 0) {
                char *p;

                (void)strtok(textbuf, "\n"); /* ignore first line */
                while ((t = strtok(NULL, "\n")) != NULL) {
                        if (strncmp(t, "\tinet6 ", 7) != 0)
                                continue;
                        t += 7;
                        if (strstr(t, "tentative") || strstr(t, "duplicated"))
                                continue;
                        if (strncmp(t, "fe80:", 5) == 0)
                                continue;

                        p = t;
                        while (*p && *p != ' ' && *p != '\n')
                                p++;
                        *p = '\0';
                        strlcpy(net_ip6, t, sizeof(net_ip6));
                        break;
                }
        }
        free(textbuf);
}
#endif

static void
get_host_info(void)
{
        char hostname[MAXHOSTNAMELEN + 1];
        char *dot;

        /* Check host (and domain?) name */
        if (gethostname(hostname, sizeof(hostname)) == 0 && hostname[0] != 0) {
                hostname[sizeof(hostname) - 1] = 0;
                /* check for a . */
                dot = strchr(hostname, '.');
                if (dot == NULL) {
                        /* if not found its just a host, punt on domain */
                        strlcpy(net_host, hostname, sizeof net_host);
                } else {
                        /* split hostname into host/domain parts */
                        *dot++ = 0;
                        strlcpy(net_host, hostname, sizeof net_host);
                        strlcpy(net_domain, dot, sizeof net_domain);
                }
        }
}

/*
 * recombine name parts split in get_host_info and config_network
 * (common code moved here from write_etc_hosts)
 */
static char *
recombine_host_domain(void)
{
        static char recombined[MAXHOSTNAMELEN + 1];
        int l = strlen(net_host) - strlen(net_domain);

        strlcpy(recombined, net_host, sizeof(recombined));

        if (strlen(net_domain) != 0 && (l <= 0 ||
            net_host[l - 1] != '.' ||
            strcasecmp(net_domain, net_host + l) != 0)) {
                /* net_host isn't an FQDN. */
                strlcat(recombined, ".", sizeof(recombined));
                strlcat(recombined, net_domain, sizeof(recombined));
        }
        return recombined;
}

#ifdef INET6
static int
is_v6kernel(void)
{
        int s;

        s = socket(PF_INET6, SOCK_DGRAM, 0);
        if (s < 0)
                return 0;
        close(s);
        return 1;
}
#endif

static int
handle_license(const char *dev)
{
        static struct {
                const char *dev;
                const char *lic;
        } licdev[] = {
                { "iwi", "/libdata/firmware/if_iwi/LICENSE.ipw2200-fw" },
                { "ipw", "/libdata/firmware/if_ipw/LICENSE" },
        };

        size_t i;

        for (i = 0; i < __arraycount(licdev); i++)
                if (strncmp(dev, licdev[i].dev, 3) == 0) {
                        char buf[64];
                        int val;
                        size_t len = sizeof(int);
                        (void)snprintf(buf, sizeof(buf), "hw.%s.accept_eula",
                            licdev[i].dev);
                        if (sysctlbyname(buf, &val, &len, NULL, 0) != -1
                            && val != 0)
                                return 1;
                        msg_fmt_display(MSG_license, "%s%s",
                            dev, licdev[i].lic);
                        if (ask_yesno(NULL)) {
                                val = 1;
                                if (sysctlbyname(buf, NULL, NULL, &val,
                                    0) == -1)
                                        return 0;
                                add_sysctl_conf("%s=1", buf);
                                return 1;
                        } else
                                return 0;
                }
        return 1;
}

/*
 * Get the information to configure the network, configure it and
 * make sure both the gateway and the name server are up.
 */
int
config_network(int force)
{
        char *textbuf;
        int  octet0;
        int  dhcp_config;
        int  nfs_root = 0;
        int  slip = 0;
        int  pid, status;
        char **ap, *slcmd[10], *in_buf;
        char buffer[STRSIZE];
        char hostname[MAXHOSTNAMELEN + 1];
        struct statvfs sb;
        struct net_desc net_devs[MAX_NETS];
        menu_ent *net_menu;
        int menu_no;
        int num_devs;
        int selected_net;
        int i;
#ifdef INET6
        int v6config = 1, rv;
#endif

        FILE *f;
        time_t now;

        if (network_up)
                return (1);

        num_devs = get_ifconfig_info(net_devs);

        if (num_devs < 1) {
                /* No network interfaces found! */
                hit_enter_to_continue(NULL, MSG_nonet);
                return -1;
        }

        if (!force && (have_working_ipv4() || have_working_ipv6())) {
                if (ask_yesno(MSG_network_ok)) {
                        network_up = 1;
                        return 1;
                }
        }

        net_menu = calloc(num_devs, sizeof(*net_menu));
        if (net_menu == NULL) {
                err_msg_win(err_outofmem);
                return -1;
        }

        for (i = 0; i < num_devs; i++) {
                net_menu[i].opt_name = net_devs[i].if_dev;
                net_menu[i].opt_flags = OPT_EXIT;
                net_menu[i].opt_action = set_menu_select;
        }

        menu_no = new_menu(MSG_netdevs,
                net_menu, num_devs, -1, 4, 0, 0,
                MC_SCROLL,
                NULL, NULL, NULL, NULL, MSG_cancel);
again:
        selected_net = -1;
        msg_display(MSG_asknetdev);
        process_menu(menu_no, &selected_net);
        msg_clear();

        if (selected_net == -1) {
                free_menu(menu_no);
                free(net_menu);
                return 0;
        }

        network_up = 1;
        dhcp_config = 0;

        strlcpy(net_dev, net_devs[selected_net].if_dev, sizeof net_dev);

        if (!handle_license(net_dev))
                goto done;

        slip = net_dev[0] == 's' && net_dev[1] == 'l' &&
            isdigit((unsigned char)net_dev[2]);

        /* If root is on NFS do not reconfigure the interface. */
        if (statvfs("/", &sb) == 0 && strcmp(sb.f_fstypename, "nfs") == 0) {
                nfs_root = 1;
                get_ifinterface_info();
                get_if6interface_info();
                get_host_info();
        } else if (!slip) {
                /* Preload any defaults we can find */
                get_ifinterface_info();
                get_if6interface_info();
                get_host_info();

                /* domain and host */
                msg_display(MSG_netinfo);

                if (!config_wlan(net_dev)) {
                        config_eth_medium(net_dev);
                }

                net_dhcpconf = 0;
                /* try a dhcp configuration */
                dhcp_config = config_dhcp(net_dev);
                if (dhcp_config) {
                        char *nline;

                        /* Get newly configured data off interface. */
                        get_ifinterface_info();
                        get_if6interface_info();
                        get_host_info();

                        net_dhcpconf |= DHCPCONF_IPADDR;

                        /*
                         * Extract default route from output of
                         * 'route -n show'
                         */
                        if (collect(T_OUTPUT, &textbuf,
                            "/sbin/route -n show | "
                            "while read dest gateway flags;"
                            " do [ \"$dest\" = default ] && {"
                            " echo \"$gateway\"; break; };"
                            " done" ) > 0)
                                strlcpy(net_defroute, textbuf,
                                    sizeof net_defroute);
                        free(textbuf);
                        if ((nline = strchr(net_defroute, '\n')))
                                *nline = '\0';

                        /* pull nameserver info out of /etc/resolv.conf */
                        if (collect(T_OUTPUT, &textbuf,
                            "cat /etc/resolv.conf 2>/dev/null |"
                            " while read keyword address rest;"
                            " do [ \"$keyword\" = nameserver ] &&"
                            " { echo \"$address\"; break; };"
                            " done" ) > 0)
                                strlcpy(net_namesvr, textbuf,
                                    sizeof net_namesvr);
                        free(textbuf);
                        if ((nline = strchr(net_namesvr, '\n')))
                                *nline = '\0';
                        if (net_namesvr[0] != '\0')
                                net_dhcpconf |= DHCPCONF_NAMESVR;

                        /* pull domain info out of /etc/resolv.conf */
                        if (collect(T_OUTPUT, &textbuf,
                            "cat /etc/resolv.conf 2>/dev/null |"
                            " while read keyword domain rest;"
                            " do [ \"$keyword\" = domain ] &&"
                            " { echo \"$domain\"; break; };"
                            " done" ) > 0)
                                strlcpy(net_domain, textbuf,
                                    sizeof net_domain);
                        free(textbuf);
                        if (net_domain[0] == '\0') {
                                /* pull domain info out of /etc/resolv.conf */
                                if (collect(T_OUTPUT, &textbuf,
                                    "cat /etc/resolv.conf 2>/dev/null |"
                                    " while read keyword search rest;"
                                    " do [ \"$keyword\" = search ] &&"
                                    " { echo \"$search\"; break; };"
                                    " done" ) > 0)
                                        strlcpy(net_domain, textbuf,
                                            sizeof net_domain);
                                free(textbuf);
                        }
                        if ((nline = strchr(net_domain, '\n')))
                                *nline = '\0';
                        if (net_domain[0] != '\0')
                                net_dhcpconf |= DHCPCONF_DOMAIN;

                        if (gethostname(net_host, sizeof(net_host)) == 0 &&
                            net_host[0] != 0)
                                net_dhcpconf |= DHCPCONF_HOST;
                }
        }

        /*
         * Prompt for hostname and domain, even when using DHCP. The names
         * discovered on the network may not match the desired values
         * for the target system.
         */ 
        strlcpy(hostname, recombine_host_domain(), MAXHOSTNAMELEN);
        msg_prompt_add(MSG_net_host, net_host, net_host,
            sizeof net_host);
        msg_prompt_add(MSG_net_domain, net_domain, net_domain,
            sizeof net_domain);
        if (strcmp(hostname, recombine_host_domain()) != 0) {
                net_dhcpconf &= ~(DHCPCONF_DOMAIN|DHCPCONF_HOST);
        }

        if (!dhcp_config) {
                /* Manually configure IPv4 */
                if (!nfs_root)
                        msg_prompt_add(MSG_net_ip, net_ip, net_ip,
                            sizeof net_ip);
                if (slip)
                        msg_prompt_add(MSG_net_srv_ip, net_srv_ip, net_srv_ip,
                            sizeof net_srv_ip);
                else if (!nfs_root) {
                        /* We don't want netmasks for SLIP */
                        octet0 = atoi(net_ip);
                        if (!net_mask[0]) {
                                if (0 <= octet0 && octet0 <= 127)
                                        strlcpy(net_mask, "0xff000000",
                                        sizeof(net_mask));
                                else if (128 <= octet0 && octet0 <= 191)
                                        strlcpy(net_mask, "0xffff0000",
                                        sizeof(net_mask));
                                else if (192 <= octet0 && octet0 <= 223)
                                        strlcpy(net_mask, "0xffffff00",
                                        sizeof(net_mask));
                        }
                        msg_prompt_add(MSG_net_mask, net_mask, net_mask,
                            sizeof net_mask);
                }
                msg_prompt_add(MSG_net_defroute, net_defroute, net_defroute,
                    sizeof net_defroute);
        }

        if (!(net_dhcpconf & DHCPCONF_NAMESVR)) {
#ifdef INET6
                if (v6config) {
                        rv = 0;
                        process_menu(MENU_namesrv6, &rv);
                        if (!rv)
                                msg_prompt_add(MSG_net_namesrv, net_namesvr,
                                    net_namesvr, sizeof net_namesvr);
                } else
#endif
                msg_prompt_add(MSG_net_namesrv, net_namesvr, net_namesvr,
                    sizeof net_namesvr);
        }

        /* confirm the setting */
        msg_clear();
        if (slip)
                msg_fmt_table_add(MSG_netok_slip, "%s%s%s%s%s%s%s%s%s",
                    net_domain,
                    net_host,
                    *net_namesvr == '\0' ? "<none>" : net_namesvr,
                    net_dev,
                    *net_media == '\0' ? "<default>" : net_media,
                    *net_ip == '\0' ? "<none>" : net_ip,
                    *net_srv_ip == '\0' ? "<none>" : net_srv_ip,
                    *net_mask == '\0' ? "<none>" : net_mask,
                    *net_defroute == '\0' ? "<none>" : net_defroute);
        else
                msg_fmt_table_add(MSG_netok, "%s%s%s%s%s%s%s%s",
                    net_domain,
                    net_host,
                    *net_namesvr == '\0' ? "<none>" : net_namesvr,
                    net_dev,
                    *net_media == '\0' ? "<default>" : net_media,
                    *net_ip == '\0' ? "<none>" : net_ip,
                    *net_mask == '\0' ? "<none>" : net_mask,
                    *net_defroute == '\0' ? "<none>" : net_defroute);
#ifdef INET6
        msg_fmt_table_add(MSG_netokv6, "%s",
                     !is_v6kernel() ? "<not supported>" : net_ip6);
#endif
done:
        if (!ask_yesno(MSG_netok_ok))
                goto again;

        free_menu(menu_no);
        free(net_menu);

        run_program(0, "/sbin/ifconfig lo0 127.0.0.1");

        /* dhcpcd will have configured it all for us */
        if (dhcp_config) {
                fflush(NULL);
                network_up = 1;
                return network_up;
        }

        /*
         * we may want to perform checks against inconsistent configuration,
         * like IPv4 DNS server without IPv4 configuration.
         */

        /* Create /etc/resolv.conf if a nameserver was given */
        if (net_namesvr[0] != '\0') {
                f = fopen("/etc/resolv.conf", "w");
                if (f == NULL) {
                        if (logfp)
                                (void)fprintf(logfp,
                                    "%s", msg_string(MSG_resolv));
                        (void)fprintf(stderr, "%s", msg_string(MSG_resolv));
                        exit(1);
                }
                scripting_fprintf(NULL, "cat <<EOF >/etc/resolv.conf\n");
                time(&now);
                scripting_fprintf(f, ";\n; BIND data file\n; %s %s;\n",
                    "Created by NetBSD sysinst on", safectime(&now));
                if (net_domain[0] != '\0')
                        scripting_fprintf(f, "search %s\n", net_domain);
                if (net_namesvr[0] != '\0')
                        scripting_fprintf(f, "nameserver %s\n", net_namesvr);
                scripting_fprintf(NULL, "EOF\n");
                fflush(NULL);
                fclose(f);
        }

        if (net_ip[0] != '\0') {
                if (slip) {
                        /* XXX: needs 'ifconfig sl0 create' much earlier */
                        /* Set SLIP interface UP */
                        run_program(0, "/sbin/ifconfig %s inet %s %s up",
                            net_dev, net_ip, net_srv_ip);
                        strcpy(sl_flags, "-s 115200 -l /dev/tty00");
                        msg_prompt_win(MSG_slattach, -1, 12, 70, 0,
                                sl_flags, sl_flags, sizeof sl_flags);

                        /* XXX: wtf isn't run_program() used here? */
                        pid = fork();
                        if (pid == 0) {
                                strcpy(buffer, "/sbin/slattach ");
                                strcat(buffer, sl_flags);
                                in_buf = buffer;

                                for (ap = slcmd; (*ap = strsep(&in_buf, " ")) != NULL;)
                                if (**ap != '\0')
                                        ++ap;

                                execvp(slcmd[0], slcmd);
                        } else
                                wait4(pid, &status, WNOHANG, 0);
                } else if (!nfs_root) {
                        if (net_mask[0] != '\0') {
                                run_program(0, "/sbin/ifconfig %s inet %s netmask %s",
                                    net_dev, net_ip, net_mask);
                        } else {
                                run_program(0, "/sbin/ifconfig %s inet %s",
                                net_dev, net_ip);
                        }
                }
        }

        /* Set host name */
        if (net_host[0] != '\0')
                sethostname(net_host, strlen(net_host));

        /* Set a default route if one was given */
        if (!nfs_root && net_defroute[0] != '\0') {
                run_program(RUN_DISPLAY | RUN_PROGRESS,
                                "/sbin/route -n flush -inet");
                run_program(RUN_DISPLAY | RUN_PROGRESS,
                                "/sbin/route -n add default %s", net_defroute);
        }

        /*
         * wait for addresses to become valid
         */
        if (!nfs_root) {
                msg_display_add(MSG_wait_network);
                network_up = !run_program(RUN_DISPLAY | RUN_PROGRESS,
                    "/sbin/ifconfig -w 15 -W 5");
        } else {
                /* Assume network is up. */
                network_up = 1;
        }

        fflush(NULL);

        return network_up;
}

const char *
url_proto(unsigned int xfer)
{
        switch (xfer) {
        case XFER_FTP:          return "ftp";
        case XFER_HTTP:         return "http";
        case XFER_HTTPS:        return "https";
        }

        return "";
}

void
make_url(char *urlbuffer, struct ftpinfo *f, const char *dir)
{
        char ftp_user_encoded[STRSIZE];
        char ftp_dir_encoded[STRSIZE];
        char *cp;
        const char *dir2;

        /*
         * f->pass is quite likely to contain unsafe characters
         * that need to be encoded in the URL (for example,
         * "@", ":" and "/" need quoting).  Let's be
         * paranoid and also encode f->user and f->dir.  (For
         * example, f->dir could easily contain '~', which is
         * unsafe by a strict reading of RFC 1738).
         */
        if (strcmp("ftp", f->user) == 0 && f->pass[0] == 0) {
                ftp_user_encoded[0] = 0;
        } else {
                cp = url_encode(ftp_user_encoded, f->user,
                        ftp_user_encoded + sizeof ftp_user_encoded - 1,
                        RFC1738_SAFE_LESS_SHELL, 0);
                *cp++ = ':';
                cp = url_encode(cp, f->pass,
                        ftp_user_encoded + sizeof ftp_user_encoded - 1,
                        NULL, 0);
                *cp++ = '@';
                *cp = 0;
        }
        cp = url_encode(ftp_dir_encoded, f->dir,
                        ftp_dir_encoded + sizeof ftp_dir_encoded - 1,
                        RFC1738_SAFE_LESS_SHELL_PLUS_SLASH, 1);
        if (cp != ftp_dir_encoded && cp[-1] != '/')
                *cp++ = '/';

        dir2 = dir;
        while (*dir2 == '/')
                ++dir2;

        url_encode(cp, dir2,
                        ftp_dir_encoded + sizeof ftp_dir_encoded,
                        RFC1738_SAFE_LESS_SHELL_PLUS_SLASH, 0);

        snprintf(urlbuffer, STRSIZE, "%s://%s%s/%s", url_proto(f->xfer),
            ftp_user_encoded, f->xfer_host[XFER_HOST(f->xfer)],
            ftp_dir_encoded);
}


/* ftp_fetch() and pkgsrc_fetch() are essentially the same, with a different
 * ftpinfo var and pkgsrc always using .tgz suffix, while for
 * regular sets we only use .tgz for source sets on some architectures. */
static int do_ftp_fetch(const char *, bool, struct ftpinfo *, bool);

static int
ftp_fetch(const char *set_name)
{
        return do_ftp_fetch(set_name, use_tgz_for_set(set_name), &ftp, false);
}

static int
pkgsrc_fetch(const char *set_name)
{
        return do_ftp_fetch(set_name, true, &pkgsrc, true);
}

static int
do_ftp_fetch(const char *set_name, bool force_tgz, struct ftpinfo *f, bool in_chroot)
{
        const char *ftp_opt;
        char url[STRSIZE];
        int rval;
        bool remove_target_resolv = false;

        /*
         * Invoke ftp to fetch the file.
         */
        if (strcmp("ftp", f->user) == 0 && f->pass[0] == 0) {
                /* do anon ftp */
                ftp_opt = "-a ";
        } else {
                ftp_opt = "";
        }

        if (in_chroot) {
                if (access(target_expand("/etc/resolv.conf"), R_OK) != 0) {
                        dup_file_into_target("/etc/resolv.conf");
                        remove_target_resolv = true;
                }
        }

        make_url(url, f, set_dir_for_set(set_name));
        rval = run_program(RUN_DISPLAY | RUN_PROGRESS | RUN_XFER_DIR | (in_chroot?RUN_CHROOT:0),
                    "/usr/bin/ftp %s%s/%s%s",
                    ftp_opt, url, set_name,
                    force_tgz ? dist_tgz_postfix : dist_postfix);

        if (remove_target_resolv)
                unlink(target_expand("/etc/resolv.conf"));

        return rval ? SET_RETRY : SET_OK;
}


// XXX: check MSG_netnotup_continueanyway and MSG_netnotup

int
get_pkgsrc(void)
{
        int rv = -1;

        process_menu(MENU_pkgsrc, &rv);

        if (rv == SET_SKIP)
                return SET_SKIP;

        fetch_fn = pkgsrc_fetch;
        snprintf(ext_dir_pkgsrc, sizeof ext_dir_pkgsrc, "%s/%s",
            target_prefix(), xfer_dir + (*xfer_dir == '/'));

        return SET_OK;
}

int
get_via_ftp(unsigned int xfer)
{
        arg_rv arg;

        if (!network_up)
                config_network(0);

        arg.rv = -1;
        arg.arg = (void*)(uintptr_t)(xfer);
        process_menu(MENU_ftpsource, &arg);

        if (arg.rv == SET_RETRY)
                return SET_RETRY;

        /* We'll fetch each file just before installing it */
        fetch_fn = ftp_fetch;
        ftp.xfer = xfer;
        snprintf(ext_dir_bin, sizeof ext_dir_bin, "%s/%s", target_prefix(),
            xfer_dir + (*xfer_dir == '/'));
        snprintf(ext_dir_src, sizeof ext_dir_src, "%s/%s", target_prefix(),
            xfer_dir + (*xfer_dir == '/'));

        return SET_OK;
}

int
get_via_nfs(void)
{
        struct statvfs sb;
        int rv;

        /* If root is on NFS and we have sets, skip this step. */
        if (statvfs(set_dir_bin, &sb) == 0 &&
            strcmp(sb.f_fstypename, "nfs") == 0) {
                strlcpy(ext_dir_bin, set_dir_bin, sizeof ext_dir_bin);
                strlcpy(ext_dir_src, set_dir_src, sizeof ext_dir_src);
                return SET_OK;
        }

        /* Get server and filepath */
        rv = -1;
        process_menu(MENU_nfssource, &rv);

        if (rv == SET_RETRY)
                return SET_RETRY;

        /* Mount it */
        if (run_program(0, "/sbin/mount -r -o -2,-i,-r=1024 -t nfs %s:%s /mnt2",
            nfs_host, nfs_dir))
                return SET_RETRY;

        mnt2_mounted = 1;

        snprintf(ext_dir_bin, sizeof ext_dir_bin, "/mnt2/%s", set_dir_bin);
        snprintf(ext_dir_src, sizeof ext_dir_src, "/mnt2/%s", set_dir_src);

        /* return location, don't clean... */
        return SET_OK;
}

/*
 * write the new contents of /etc/hosts to the specified file
 */
static void
write_etc_hosts(FILE *f)
{
        scripting_fprintf(f, "#\n");
        scripting_fprintf(f, "# Added by NetBSD sysinst\n");
        scripting_fprintf(f, "#\n");

        if (net_domain[0] != '\0')
                scripting_fprintf(f, "127.0.0.1 localhost.%s\n", net_domain);

        scripting_fprintf(f, "%s\t", net_ip);
        if (net_domain[0] != '\0')
                scripting_fprintf(f, "%s ", recombine_host_domain());
        scripting_fprintf(f, "%s\n", net_host);
}

/*
 * Write the network config info the user entered via menus into the
 * config files in the target disk.  Be careful not to lose any
 * information we don't immediately add back, in case the install
 * target is the currently-active root.
 */
void
mnt_net_config(void)
{
        char ifconfig_fn[STRSIZE];
        FILE *ifconf = NULL;

        if (!network_up)
                return;
        if (!ask_yesno(MSG_mntnetconfig))
                return;

        /* Write hostname to /etc/rc.conf */
        if ((net_dhcpconf & DHCPCONF_HOST) == 0)
                if (del_rc_conf("hostname") == 0)
                        add_rc_conf("hostname=%s\n", recombine_host_domain());

        /* Copy resolv.conf to target.  If DHCP was used to create it,
         * it will be replaced on next boot anyway. */
        if (net_namesvr[0] != '\0')
                dup_file_into_target("/etc/resolv.conf");

        /* Copy wpa_supplicant.conf to target. */
        if (net_ssid[0] != '\0')
                dup_file_into_target("/etc/wpa_supplicant.conf");

        /*
         * bring the interface up, it will be necessary for IPv6, and
         * it won't make trouble with IPv4 case either
         */
        snprintf(ifconfig_fn, sizeof ifconfig_fn, "/etc/ifconfig.%s", net_dev);
        ifconf = target_fopen(ifconfig_fn, "w");
        if (ifconf != NULL) {
                scripting_fprintf(NULL, "cat <<EOF >>%s%s\n",
                    target_prefix(), ifconfig_fn);
                scripting_fprintf(ifconf, "up\n");
                if (*net_media != '\0')
                        scripting_fprintf(ifconf, "media %s\n", net_media);
                scripting_fprintf(NULL, "EOF\n");
        }

        if ((net_dhcpconf & DHCPCONF_IPADDR) == 0) {
                FILE *hosts;

                /* Write IPaddr and netmask to /etc/ifconfig.if[0-9] */
                if (ifconf != NULL) {
                        scripting_fprintf(NULL, "cat <<EOF >>%s%s\n",
                            target_prefix(), ifconfig_fn);
                        if (*net_media != '\0')
                                scripting_fprintf(ifconf,
                                    "%s netmask %s media %s\n",
                                    net_ip, net_mask, net_media);
                        else
                                scripting_fprintf(ifconf, "%s netmask %s\n",
                                    net_ip, net_mask);
                        scripting_fprintf(NULL, "EOF\n");
                }

                /*
                 * Add IPaddr/hostname to  /etc/hosts.
                 * Be careful not to clobber any existing contents.
                 * Relies on ordered search of /etc/hosts. XXX YP?
                 */
                hosts = target_fopen("/etc/hosts", "a");
                if (hosts != 0) {
                        scripting_fprintf(NULL, "cat <<EOF >>%s/etc/hosts\n",
                            target_prefix());
                        write_etc_hosts(hosts);
                        (void)fclose(hosts);
                        scripting_fprintf(NULL, "EOF\n");
                }

                if (del_rc_conf("defaultroute") == 0)
                        add_rc_conf("defaultroute=\"%s\"\n", net_defroute);
        } else {
                /*
                 * Start dhcpcd quietly and in master mode, but restrict
                 * it to our interface
                 */
                add_rc_conf("dhcpcd=YES\n");
                add_rc_conf("dhcpcd_flags=\"-qM %s\"\n", net_dev);
        }

        if (net_ssid[0] != '\0') {
                add_rc_conf("wpa_supplicant=YES\n");
                add_rc_conf("wpa_supplicant_flags=\"-B -s -i %s -D bsd -c /etc/wpa_supplicant.conf\"\n", net_dev);
        }

        if (ifconf)
                fclose(ifconf);

        fflush(NULL);
}

int
config_wlan(char *inter)
{
        FILE *wpa_conf = NULL;
        char wpa_cmd[256];
        struct ifreq ifr = {0};
        struct ieee80211_nwid nwid = {0};

        /* skip non-WLAN devices */
        if (do_ifreq(&ifr, SIOCG80211NWID, &nwid) == -1)
                return 0;

        if (!file_mode_match(WPA_SUPPLICANT, S_IFREG))
                return 0;

        msg_prompt_add(MSG_net_ssid, net_ssid, net_ssid,
                        sizeof net_ssid);
        if (net_ssid[0] == '\0')
                return 0;

        msg_prompt_noecho(MSG_net_passphrase, net_passphrase, net_passphrase,
                        sizeof net_passphrase);

        wpa_conf = fopen("/etc/wpa_supplicant.conf", "a");
        if (wpa_conf == NULL)
                return 0;

        scripting_fprintf(NULL,
            "cat <<EOF >>%s/etc/wpa_supplicant.conf\n",
            target_prefix());
        scripting_fprintf(wpa_conf, "\n#\n");
        scripting_fprintf(wpa_conf, "# Added by NetBSD sysinst\n");
        scripting_fprintf(wpa_conf, "#\n");
        scripting_fprintf(wpa_conf, "network={\n");
        scripting_fprintf(wpa_conf,
            "\tssid=\"%s\"\n", net_ssid);
        if (net_passphrase[0] != '\0') {
                scripting_fprintf(wpa_conf, "\tpsk=\"%s\"\n",
                    net_passphrase);
        } else {
                scripting_fprintf(wpa_conf, "\tkey_mgmt=NONE\n");
        }
        scripting_fprintf(wpa_conf, "\tscan_ssid=1\n");
        scripting_fprintf(wpa_conf, "}\n");
        (void)fclose(wpa_conf);
        scripting_fprintf(NULL, "EOF\n");

        if (run_program(RUN_DISPLAY | RUN_PROGRESS,
            "/sbin/ifconfig %s up", inter) != 0)
                return 0;

        /*
         * have to use system() here to avoid the server process dying
         */
        if (snprintf(wpa_cmd, sizeof(wpa_cmd),
            WPA_SUPPLICANT
            " -B -s -i %s -D bsd -c /etc/wpa_supplicant.conf", inter) < 0)
                return 0;
        (void)do_system(wpa_cmd);

        return 1;
}

int
config_dhcp(char *inter)
{
        int dhcpautoconf;

        /*
         * Don't bother checking for an existing instance of dhcpcd, just
         * ask it to renew the lease.  It will fork and daemonize if there
         * wasn't already an instance.
         */

        if (!file_mode_match(DHCPCD, S_IFREG))
                return 0;
        if (ask_yesno(MSG_Perform_autoconfiguration)) {
                /* spawn off dhcpcd and wait for parent to exit */
                dhcpautoconf = run_program(RUN_DISPLAY | RUN_PROGRESS,
                    "%s -d -n %s", DHCPCD, inter);
                return dhcpautoconf ? 0 : 1;
        }
        return 0;
}


int
config_eth_medium(char *inter)
{
        char *textbuf = NULL;

        for (;;) {
                msg_prompt_add(MSG_net_media, net_media, net_media,
                                sizeof net_media);

                /*
                 * ifconfig does not allow media specifiers on
                 * IFM_MANUAL interfaces.  Our UI gives no way
                 * to set an option back
                 * to null-string if it gets accidentally set.
                 * Check for plausible alternatives.
                 */
                if (strcmp(net_media, "<default>") == 0 ||
                    strcmp(net_media, "default") == 0 ||
                    strcmp(net_media, "<manual>") == 0 ||
                    strcmp(net_media, "manual") == 0 ||
                    strcmp(net_media, "<none>") == 0 ||
                    strcmp(net_media, "none") == 0 ||
                    strcmp(net_media, " ") == 0) {
                        *net_media = '\0';
                }

                if (*net_media == '\0')
                        break;
                /*
                 * We must set the media type here - to give dhcp
                 * a chance
                 */
                if (run_program(0, "/sbin/ifconfig %s media %s",
                            net_dev, net_media) == 0)
                        break;
                /* Failed to set - output the supported values */
                if (collect(T_OUTPUT, &textbuf, "/sbin/ifconfig -m %s |"
                            "while IFS=; read line;"
                            " do [ \"$line\" = \"${line#*media}\" ] || "
                            "echo $line;"
                            " done", net_dev ) > 0)
                        msg_display(textbuf);
                free(textbuf);
        }
        return 0;
}