#!/usr/bin/env python3
#
# Copyright (C) 2022 VyOS maintainers and contributors
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License version 2 or later as
# published by the Free Software Foundation.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program.  If not, see <http://www.gnu.org/licenses/>.

# T2199: Migrate interface firewall nodes to firewall interfaces <ifname> <direction> name/ipv6-name <name>
# T2199: Migrate zone-policy to firewall node

import re

from sys import argv
from sys import exit

from vyos.configtree import ConfigTree
from vyos.ifconfig import Section

if len(argv) < 2:
    print("Must specify file name!")
    exit(1)

file_name = argv[1]

with open(file_name, 'r') as f:
    config_file = f.read()

base = ['firewall']
zone_base = ['zone-policy']
config = ConfigTree(config_file)

if not config.exists(base) and not config.exists(zone_base):
    # Nothing to do
    exit(0)

def migrate_interface(config, iftype, ifname, vif=None, vifs=None, vifc=None):
    if_path = ['interfaces', iftype, ifname]
    ifname_full = ifname

    if vif:
        if_path += ['vif', vif]
        ifname_full = f'{ifname}.{vif}'
    elif vifs:
        if_path += ['vif-s', vifs]
        ifname_full = f'{ifname}.{vifs}'
        if vifc:
            if_path += ['vif-c', vifc]
            ifname_full = f'{ifname}.{vifs}.{vifc}'

    if not config.exists(if_path + ['firewall']):
        return

    if not config.exists(['firewall', 'interface']):
        config.set(['firewall', 'interface'])
        config.set_tag(['firewall', 'interface'])

    config.copy(if_path + ['firewall'], ['firewall', 'interface', ifname_full])
    config.delete(if_path + ['firewall'])

for iftype in config.list_nodes(['interfaces']):
    for ifname in config.list_nodes(['interfaces', iftype]):
        migrate_interface(config, iftype, ifname)

        if config.exists(['interfaces', iftype, ifname, 'vif']):
            for vif in config.list_nodes(['interfaces', iftype, ifname, 'vif']):
                migrate_interface(config, iftype, ifname, vif=vif)

        if config.exists(['interfaces', iftype, ifname, 'vif-s']):
            for vifs in config.list_nodes(['interfaces', iftype, ifname, 'vif-s']):
                migrate_interface(config, iftype, ifname, vifs=vifs)

                if config.exists(['interfaces', iftype, ifname, 'vif-s', vifs, 'vif-c']):
                    for vifc in config.list_nodes(['interfaces', iftype, ifname, 'vif-s', vifs, 'vif-c']):
                        migrate_interface(config, iftype, ifname, vifs=vifs, vifc=vifc)

if config.exists(zone_base + ['zone']):
    config.set(['firewall', 'zone'])
    config.set_tag(['firewall', 'zone'])

    for zone in config.list_nodes(zone_base + ['zone']):
        config.copy(zone_base + ['zone', zone], ['firewall', 'zone', zone])
    config.delete(zone_base)

try:
    with open(file_name, 'w') as f:
        f.write(config.to_string())
except OSError as e:
    print("Failed to save the modified config: {}".format(e))
    exit(1)