feat: source port config validation

package/Dockerfile

@@ -76,6 +76,7 @@ COPY package/etc/local_config /etc/syslog-ng/local_config
 COPY package/etc/local_config /etc/syslog-ng/local_config
 COPY package/sbin/entrypoint.sh /
 COPY package/sbin/healthcheck.sh /
+COPY package/sbin/source_ports_validator.py /
 
 ENV SC4S_CONTAINER_OPTS=--no-caps
 ARG VERSION=unknown

package/Dockerfile.lite

@@ -98,6 +98,7 @@ COPY package/lite/etc/addons /etc/syslog-ng/addons
 
 COPY package/sbin/entrypoint.sh /
 COPY package/sbin/healthcheck.sh /
+COPY package/sbin/source_ports_validator.py /
 
 
 RUN chmod -R 755 /etc/syslog-ng/

package/sbin/entrypoint.sh

@@ -201,6 +201,8 @@ fi
 export SOURCE_SIMPLE_SET=$(printenv | grep '^SC4S_LISTEN_SIMPLE_.*_PORT=.' | sed 's/^SC4S_LISTEN_SIMPLE_//;s/_..._PORT\=.*//;s/_[^_]*_PORT\=.*//' | sort | uniq |  xargs echo | sed 's/ /,/g' | tr '[:upper:]' '[:lower:]' )
 export SOURCE_ALL_SET=$(printenv | grep '^SC4S_LISTEN_.*_PORT=.' | grep -v "disabled" | sed 's/^SC4S_LISTEN_//;s/_..._PORT\=.*//;s/_[^_]*_PORT\=.*//' | sort | uniq |  xargs echo | sed 's/ /,/g' | tr '[:lower:]' '[:upper:]' )
 
+python3 /source_ports_validator.py
+
 syslog-ng --no-caps --preprocess-into=- | grep vendor_product | grep set | grep -v 'set(.\$' | sed 's/^ *//' | grep 'value("fields.sc4s_vendor_product"' | grep -v "\`vendor_product\`" | sed s/^set\(// | cut -d',' -f1 | sed 's/\"//g' >/tmp/keys
 syslog-ng --no-caps --preprocess-into=- | grep 'meta_key(.' | sed 's/^ *meta_key(.//' | sed "s/')//" >>/tmp/keys
 rm -f $SC4S_ETC/conf.d/local/context/splunk_metadata.csv.example >/dev/null || true

package/sbin/source_ports_validator.py

@@ -0,0 +1,42 @@
+import os
+import logging
+
+
+logger = logging.getLogger(__name__)
+
+
+def is_valid_port(raw_port: str) -> bool:
+    return raw_port.isdigit() and int(raw_port) < 10000
+
+
+def validate_source_ports(sources: list[str]) -> None:
+    source_ports = []
+    for source in sources:
+        tcp_ports = os.getenv(f"SC4S_LISTEN_{source}_TCP_PORT", "disabled").split(",")
+        udp_ports = os.getenv(f"SC4S_LISTEN_{source}_UDP_PORT", "disabled").split(",")
+        tls_ports = os.getenv(f"SC4S_LISTEN_{source}_TLS_PORT", "disabled").split(",")
+
+        source_ports.extend((source, port, "TCP") for port in tcp_ports)
+        source_ports.extend((source, port, "UDP") for port in udp_ports)
+        source_ports.extend((source, port, "TLS") for port in tls_ports)
+
+
+    busy_ports = set()
+    for source, port, proto in source_ports:
+        env_var = f"SC4S_LISTEN_{source}_{port}_PORT"
+
+        if port in ["disabled", ""]:
+            continue
+        elif not is_valid_port(port):
+            logger.error(f"{env_var}: {port} should be valid int [0, 10000]")
+        elif source != "DEFAULT" and port in ["514", "614", "6514"]:
+            logger.error(f"{env_var}: Impossible to use default ports like {port}")
+        elif (port, proto) in busy_ports:
+            logger.error(f"{env_var}: {port} already used in another source, use unique port")
+        else:
+            busy_ports.add((port, proto))
+
+
+if __name__ == "__main__":
+    sources = os.getenv("SOURCE_ALL_SET").split(",")
+    validate_source_ports(sources)