]> git.ipfire.org Git - thirdparty/systemd.git/blob - src/core/service.c
projects / thirdparty / systemd.git / blob
? search:
summary | shortlog | log | commit | commitdiff | tree
blame | history | raw | HEAD
Merge pull request #9148 from poettering/tidy-late
[thirdparty/systemd.git] / src / core / service.c
1 /* SPDX-License-Identifier: LGPL-2.1+ */
2 /***
3 This file is part of systemd.
4
5 Copyright 2010 Lennart Poettering
6 ***/
7
8 #include <errno.h>
9 #include <signal.h>
10 #include <unistd.h>
11
12 #include "sd-messages.h"
13
14 #include "alloc-util.h"
15 #include "async.h"
16 #include "bus-error.h"
17 #include "bus-kernel.h"
18 #include "bus-util.h"
19 #include "dbus-service.h"
20 #include "def.h"
21 #include "env-util.h"
22 #include "escape.h"
23 #include "exit-status.h"
24 #include "fd-util.h"
25 #include "fileio.h"
26 #include "format-util.h"
27 #include "fs-util.h"
28 #include "load-dropin.h"
29 #include "load-fragment.h"
30 #include "log.h"
31 #include "manager.h"
32 #include "parse-util.h"
33 #include "path-util.h"
34 #include "process-util.h"
35 #include "service.h"
36 #include "signal-util.h"
37 #include "special.h"
38 #include "stdio-util.h"
39 #include "string-table.h"
40 #include "string-util.h"
41 #include "strv.h"
42 #include "unit-name.h"
43 #include "unit.h"
44 #include "utf8.h"
45 #include "util.h"
46
47 static const UnitActiveState state_translation_table[_SERVICE_STATE_MAX] = {
48 [SERVICE_DEAD] = UNIT_INACTIVE,
49 [SERVICE_START_PRE] = UNIT_ACTIVATING,
50 [SERVICE_START] = UNIT_ACTIVATING,
51 [SERVICE_START_POST] = UNIT_ACTIVATING,
52 [SERVICE_RUNNING] = UNIT_ACTIVE,
53 [SERVICE_EXITED] = UNIT_ACTIVE,
54 [SERVICE_RELOAD] = UNIT_RELOADING,
55 [SERVICE_STOP] = UNIT_DEACTIVATING,
56 [SERVICE_STOP_SIGABRT] = UNIT_DEACTIVATING,
57 [SERVICE_STOP_SIGTERM] = UNIT_DEACTIVATING,
58 [SERVICE_STOP_SIGKILL] = UNIT_DEACTIVATING,
59 [SERVICE_STOP_POST] = UNIT_DEACTIVATING,
60 [SERVICE_FINAL_SIGTERM] = UNIT_DEACTIVATING,
61 [SERVICE_FINAL_SIGKILL] = UNIT_DEACTIVATING,
62 [SERVICE_FAILED] = UNIT_FAILED,
63 [SERVICE_AUTO_RESTART] = UNIT_ACTIVATING
64 };
65
66 /* For Type=idle we never want to delay any other jobs, hence we
67 * consider idle jobs active as soon as we start working on them */
68 static const UnitActiveState state_translation_table_idle[_SERVICE_STATE_MAX] = {
69 [SERVICE_DEAD] = UNIT_INACTIVE,
70 [SERVICE_START_PRE] = UNIT_ACTIVE,
71 [SERVICE_START] = UNIT_ACTIVE,
72 [SERVICE_START_POST] = UNIT_ACTIVE,
73 [SERVICE_RUNNING] = UNIT_ACTIVE,
74 [SERVICE_EXITED] = UNIT_ACTIVE,
75 [SERVICE_RELOAD] = UNIT_RELOADING,
76 [SERVICE_STOP] = UNIT_DEACTIVATING,
77 [SERVICE_STOP_SIGABRT] = UNIT_DEACTIVATING,
78 [SERVICE_STOP_SIGTERM] = UNIT_DEACTIVATING,
79 [SERVICE_STOP_SIGKILL] = UNIT_DEACTIVATING,
80 [SERVICE_STOP_POST] = UNIT_DEACTIVATING,
81 [SERVICE_FINAL_SIGTERM] = UNIT_DEACTIVATING,
82 [SERVICE_FINAL_SIGKILL] = UNIT_DEACTIVATING,
83 [SERVICE_FAILED] = UNIT_FAILED,
84 [SERVICE_AUTO_RESTART] = UNIT_ACTIVATING
85 };
86
87 static int service_dispatch_io(sd_event_source *source, int fd, uint32_t events, void *userdata);
88 static int service_dispatch_timer(sd_event_source *source, usec_t usec, void *userdata);
89 static int service_dispatch_watchdog(sd_event_source *source, usec_t usec, void *userdata);
90
91 static void service_enter_signal(Service *s, ServiceState state, ServiceResult f);
92 static void service_enter_reload_by_notify(Service *s);
93
94 static void service_init(Unit *u) {
95 Service *s = SERVICE(u);
96
97 assert(u);
98 assert(u->load_state == UNIT_STUB);
99
100 s->timeout_start_usec = u->manager->default_timeout_start_usec;
101 s->timeout_stop_usec = u->manager->default_timeout_stop_usec;
102 s->restart_usec = u->manager->default_restart_usec;
103 s->runtime_max_usec = USEC_INFINITY;
104 s->type = _SERVICE_TYPE_INVALID;
105 s->socket_fd = -1;
106 s->stdin_fd = s->stdout_fd = s->stderr_fd = -1;
107 s->guess_main_pid = true;
108
109 s->control_command_id = _SERVICE_EXEC_COMMAND_INVALID;
110
111 s->exec_context.keyring_mode = MANAGER_IS_SYSTEM(u->manager) ?
112 EXEC_KEYRING_PRIVATE : EXEC_KEYRING_INHERIT;
113 }
114
115 static void service_unwatch_control_pid(Service *s) {
116 assert(s);
117
118 if (s->control_pid <= 0)
119 return;
120
121 unit_unwatch_pid(UNIT(s), s->control_pid);
122 s->control_pid = 0;
123 }
124
125 static void service_unwatch_main_pid(Service *s) {
126 assert(s);
127
128 if (s->main_pid <= 0)
129 return;
130
131 unit_unwatch_pid(UNIT(s), s->main_pid);
132 s->main_pid = 0;
133 }
134
135 static void service_unwatch_pid_file(Service *s) {
136 if (!s->pid_file_pathspec)
137 return;
138
139 log_unit_debug(UNIT(s), "Stopping watch for PID file %s", s->pid_file_pathspec->path);
140 path_spec_unwatch(s->pid_file_pathspec);
141 path_spec_done(s->pid_file_pathspec);
142 s->pid_file_pathspec = mfree(s->pid_file_pathspec);
143 }
144
145 static int service_set_main_pid(Service *s, pid_t pid) {
146 pid_t ppid;
147
148 assert(s);
149
150 if (pid <= 1)
151 return -EINVAL;
152
153 if (pid == getpid_cached())
154 return -EINVAL;
155
156 if (s->main_pid == pid && s->main_pid_known)
157 return 0;
158
159 if (s->main_pid != pid) {
160 service_unwatch_main_pid(s);
161 exec_status_start(&s->main_exec_status, pid);
162 }
163
164 s->main_pid = pid;
165 s->main_pid_known = true;
166
167 if (get_process_ppid(pid, &ppid) >= 0 && ppid != getpid_cached()) {
168 log_unit_warning(UNIT(s), "Supervising process "PID_FMT" which is not our child. We'll most likely not notice when it exits.", pid);
169 s->main_pid_alien = true;
170 } else
171 s->main_pid_alien = false;
172
173 return 0;
174 }
175
176 void service_close_socket_fd(Service *s) {
177 assert(s);
178
179 /* Undo the effect of service_set_socket_fd(). */
180
181 s->socket_fd = asynchronous_close(s->socket_fd);
182
183 if (UNIT_ISSET(s->accept_socket)) {
184 socket_connection_unref(SOCKET(UNIT_DEREF(s->accept_socket)));
185 unit_ref_unset(&s->accept_socket);
186 }
187 }
188
189 static void service_stop_watchdog(Service *s) {
190 assert(s);
191
192 s->watchdog_event_source = sd_event_source_unref(s->watchdog_event_source);
193 s->watchdog_timestamp = DUAL_TIMESTAMP_NULL;
194 }
195
196 static usec_t service_get_watchdog_usec(Service *s) {
197 assert(s);
198
199 if (s->watchdog_override_enable)
200 return s->watchdog_override_usec;
201 else
202 return s->watchdog_usec;
203 }
204
205 static void service_start_watchdog(Service *s) {
206 int r;
207 usec_t watchdog_usec;
208
209 assert(s);
210
211 watchdog_usec = service_get_watchdog_usec(s);
212 if (IN_SET(watchdog_usec, 0, USEC_INFINITY))
213 return;
214
215 if (s->watchdog_event_source) {
216 r = sd_event_source_set_time(s->watchdog_event_source, usec_add(s->watchdog_timestamp.monotonic, watchdog_usec));
217 if (r < 0) {
218 log_unit_warning_errno(UNIT(s), r, "Failed to reset watchdog timer: %m");
219 return;
220 }
221
222 r = sd_event_source_set_enabled(s->watchdog_event_source, SD_EVENT_ONESHOT);
223 } else {
224 r = sd_event_add_time(
225 UNIT(s)->manager->event,
226 &s->watchdog_event_source,
227 CLOCK_MONOTONIC,
228 usec_add(s->watchdog_timestamp.monotonic, watchdog_usec), 0,
229 service_dispatch_watchdog, s);
230 if (r < 0) {
231 log_unit_warning_errno(UNIT(s), r, "Failed to add watchdog timer: %m");
232 return;
233 }
234
235 (void) sd_event_source_set_description(s->watchdog_event_source, "service-watchdog");
236
237 /* Let's process everything else which might be a sign
238 * of living before we consider a service died. */
239 r = sd_event_source_set_priority(s->watchdog_event_source, SD_EVENT_PRIORITY_IDLE);
240 }
241
242 if (r < 0)
243 log_unit_warning_errno(UNIT(s), r, "Failed to install watchdog timer: %m");
244 }
245
246 static void service_extend_timeout(Service *s, usec_t extend_timeout_usec) {
247 assert(s);
248
249 if (s->timer_event_source) {
250 uint64_t current = 0, extended = 0;
251 int r;
252
253 if (IN_SET(extend_timeout_usec, 0, USEC_INFINITY))
254 return;
255
256 extended = usec_add(now(CLOCK_MONOTONIC), extend_timeout_usec);
257
258 r = sd_event_source_get_time(s->timer_event_source, &current);
259 if (r < 0)
260 log_unit_error_errno(UNIT(s), r, "Failed to retrieve timeout timer: %m");
261 else if (extended > current) {
262 r = sd_event_source_set_time(s->timer_event_source, extended);
263 if (r < 0)
264 log_unit_warning_errno(UNIT(s), r, "Failed to set timeout timer: %m");
265 }
266
267 if (s->watchdog_event_source) {
268 /* extend watchdog if necessary. We've asked for an extended timeout so we
269 * shouldn't expect a watchdog timeout in the interval in between */
270 r = sd_event_source_get_time(s->watchdog_event_source, &current);
271 if (r < 0) {
272 log_unit_error_errno(UNIT(s), r, "Failed to retrieve watchdog timer: %m");
273 return;
274 }
275
276 if (extended > current) {
277 r = sd_event_source_set_time(s->watchdog_event_source, extended);
278 if (r < 0)
279 log_unit_warning_errno(UNIT(s), r, "Failed to set watchdog timer: %m");
280 }
281 }
282 }
283 }
284
285 static void service_reset_watchdog(Service *s) {
286 assert(s);
287
288 dual_timestamp_get(&s->watchdog_timestamp);
289 service_start_watchdog(s);
290 }
291
292 static void service_reset_watchdog_timeout(Service *s, usec_t watchdog_override_usec) {
293 assert(s);
294
295 s->watchdog_override_enable = true;
296 s->watchdog_override_usec = watchdog_override_usec;
297 service_reset_watchdog(s);
298
299 log_unit_debug(UNIT(s), "watchdog_usec="USEC_FMT, s->watchdog_usec);
300 log_unit_debug(UNIT(s), "watchdog_override_usec="USEC_FMT, s->watchdog_override_usec);
301 }
302
303 static void service_fd_store_unlink(ServiceFDStore *fs) {
304
305 if (!fs)
306 return;
307
308 if (fs->service) {
309 assert(fs->service->n_fd_store > 0);
310 LIST_REMOVE(fd_store, fs->service->fd_store, fs);
311 fs->service->n_fd_store--;
312 }
313
314 if (fs->event_source) {
315 sd_event_source_set_enabled(fs->event_source, SD_EVENT_OFF);
316 sd_event_source_unref(fs->event_source);
317 }
318
319 free(fs->fdname);
320 safe_close(fs->fd);
321 free(fs);
322 }
323
324 static void service_release_fd_store(Service *s) {
325 assert(s);
326
327 if (s->n_keep_fd_store > 0)
328 return;
329
330 log_unit_debug(UNIT(s), "Releasing all stored fds");
331 while (s->fd_store)
332 service_fd_store_unlink(s->fd_store);
333
334 assert(s->n_fd_store == 0);
335 }
336
337 static void service_release_resources(Unit *u) {
338 Service *s = SERVICE(u);
339
340 assert(s);
341
342 if (!s->fd_store && s->stdin_fd < 0 && s->stdout_fd < 0 && s->stderr_fd < 0)
343 return;
344
345 log_unit_debug(u, "Releasing resources.");
346
347 s->stdin_fd = safe_close(s->stdin_fd);
348 s->stdout_fd = safe_close(s->stdout_fd);
349 s->stderr_fd = safe_close(s->stderr_fd);
350
351 service_release_fd_store(s);
352 }
353
354 static void service_done(Unit *u) {
355 Service *s = SERVICE(u);
356
357 assert(s);
358
359 s->pid_file = mfree(s->pid_file);
360 s->status_text = mfree(s->status_text);
361
362 s->exec_runtime = exec_runtime_unref(s->exec_runtime, false);
363 exec_command_free_array(s->exec_command, _SERVICE_EXEC_COMMAND_MAX);
364 s->control_command = NULL;
365 s->main_command = NULL;
366
367 dynamic_creds_unref(&s->dynamic_creds);
368
369 exit_status_set_free(&s->restart_prevent_status);
370 exit_status_set_free(&s->restart_force_status);
371 exit_status_set_free(&s->success_status);
372
373 /* This will leak a process, but at least no memory or any of
374 * our resources */
375 service_unwatch_main_pid(s);
376 service_unwatch_control_pid(s);
377 service_unwatch_pid_file(s);
378
379 if (s->bus_name) {
380 unit_unwatch_bus_name(u, s->bus_name);
381 s->bus_name = mfree(s->bus_name);
382 }
383
384 s->bus_name_owner = mfree(s->bus_name_owner);
385
386 s->usb_function_descriptors = mfree(s->usb_function_descriptors);
387 s->usb_function_strings = mfree(s->usb_function_strings);
388
389 service_close_socket_fd(s);
390 s->peer = socket_peer_unref(s->peer);
391
392 unit_ref_unset(&s->accept_socket);
393
394 service_stop_watchdog(s);
395
396 s->timer_event_source = sd_event_source_unref(s->timer_event_source);
397
398 service_release_resources(u);
399 }
400
401 static int on_fd_store_io(sd_event_source *e, int fd, uint32_t revents, void *userdata) {
402 ServiceFDStore *fs = userdata;
403
404 assert(e);
405 assert(fs);
406
407 /* If we get either EPOLLHUP or EPOLLERR, it's time to remove this entry from the fd store */
408 log_unit_debug(UNIT(fs->service),
409 "Received %s on stored fd %d (%s), closing.",
410 revents & EPOLLERR ? "EPOLLERR" : "EPOLLHUP",
411 fs->fd, strna(fs->fdname));
412 service_fd_store_unlink(fs);
413 return 0;
414 }
415
416 static int service_add_fd_store(Service *s, int fd, const char *name) {
417 ServiceFDStore *fs;
418 int r;
419
420 /* fd is always consumed if we return >= 0 */
421
422 assert(s);
423 assert(fd >= 0);
424
425 if (s->n_fd_store >= s->n_fd_store_max)
426 return -EXFULL; /* Our store is full.
427 * Use this errno rather than E[NM]FILE to distinguish from
428 * the case where systemd itself hits the file limit. */
429
430 LIST_FOREACH(fd_store, fs, s->fd_store) {
431 r = same_fd(fs->fd, fd);
432 if (r < 0)
433 return r;
434 if (r > 0) {
435 safe_close(fd);
436 return 0; /* fd already included */
437 }
438 }
439
440 fs = new0(ServiceFDStore, 1);
441 if (!fs)
442 return -ENOMEM;
443
444 fs->fd = fd;
445 fs->service = s;
446 fs->fdname = strdup(name ?: "stored");
447 if (!fs->fdname) {
448 free(fs);
449 return -ENOMEM;
450 }
451
452 r = sd_event_add_io(UNIT(s)->manager->event, &fs->event_source, fd, 0, on_fd_store_io, fs);
453 if (r < 0 && r != -EPERM) { /* EPERM indicates fds that aren't pollable, which is OK */
454 free(fs->fdname);
455 free(fs);
456 return r;
457 } else if (r >= 0)
458 (void) sd_event_source_set_description(fs->event_source, "service-fd-store");
459
460 LIST_PREPEND(fd_store, s->fd_store, fs);
461 s->n_fd_store++;
462
463 return 1; /* fd newly stored */
464 }
465
466 static int service_add_fd_store_set(Service *s, FDSet *fds, const char *name) {
467 int r;
468
469 assert(s);
470
471 while (fdset_size(fds) > 0) {
472 _cleanup_close_ int fd = -1;
473
474 fd = fdset_steal_first(fds);
475 if (fd < 0)
476 break;
477
478 r = service_add_fd_store(s, fd, name);
479 if (r == -EXFULL)
480 return log_unit_warning_errno(UNIT(s), r,
481 "Cannot store more fds than FileDescriptorStoreMax=%u, closing remaining.",
482 s->n_fd_store_max);
483 if (r < 0)
484 return log_unit_error_errno(UNIT(s), r, "Failed to add fd to store: %m");
485 if (r > 0)
486 log_unit_debug(UNIT(s), "Added fd %u (%s) to fd store.", fd, strna(name));
487 fd = -1;
488 }
489
490 return 0;
491 }
492
493 static void service_remove_fd_store(Service *s, const char *name) {
494 ServiceFDStore *fs, *n;
495
496 assert(s);
497 assert(name);
498
499 LIST_FOREACH_SAFE(fd_store, fs, n, s->fd_store) {
500 if (!streq(fs->fdname, name))
501 continue;
502
503 log_unit_debug(UNIT(s), "Got explicit request to remove fd %i (%s), closing.", fs->fd, name);
504 service_fd_store_unlink(fs);
505 }
506 }
507
508 static int service_arm_timer(Service *s, usec_t usec) {
509 int r;
510
511 assert(s);
512
513 if (s->timer_event_source) {
514 r = sd_event_source_set_time(s->timer_event_source, usec);
515 if (r < 0)
516 return r;
517
518 return sd_event_source_set_enabled(s->timer_event_source, SD_EVENT_ONESHOT);
519 }
520
521 if (usec == USEC_INFINITY)
522 return 0;
523
524 r = sd_event_add_time(
525 UNIT(s)->manager->event,
526 &s->timer_event_source,
527 CLOCK_MONOTONIC,
528 usec, 0,
529 service_dispatch_timer, s);
530 if (r < 0)
531 return r;
532
533 (void) sd_event_source_set_description(s->timer_event_source, "service-timer");
534
535 return 0;
536 }
537
538 static int service_verify(Service *s) {
539 assert(s);
540
541 if (UNIT(s)->load_state != UNIT_LOADED)
542 return 0;
543
544 if (!s->exec_command[SERVICE_EXEC_START] && !s->exec_command[SERVICE_EXEC_STOP]) {
545 log_unit_error(UNIT(s), "Service lacks both ExecStart= and ExecStop= setting. Refusing.");
546 return -EINVAL;
547 }
548
549 if (s->type != SERVICE_ONESHOT && !s->exec_command[SERVICE_EXEC_START]) {
550 log_unit_error(UNIT(s), "Service has no ExecStart= setting, which is only allowed for Type=oneshot services. Refusing.");
551 return -EINVAL;
552 }
553
554 if (!s->remain_after_exit && !s->exec_command[SERVICE_EXEC_START]) {
555 log_unit_error(UNIT(s), "Service has no ExecStart= setting, which is only allowed for RemainAfterExit=yes services. Refusing.");
556 return -EINVAL;
557 }
558
559 if (s->type != SERVICE_ONESHOT && s->exec_command[SERVICE_EXEC_START]->command_next) {
560 log_unit_error(UNIT(s), "Service has more than one ExecStart= setting, which is only allowed for Type=oneshot services. Refusing.");
561 return -EINVAL;
562 }
563
564 if (s->type == SERVICE_ONESHOT && s->restart != SERVICE_RESTART_NO) {
565 log_unit_error(UNIT(s), "Service has Restart= setting other than no, which isn't allowed for Type=oneshot services. Refusing.");
566 return -EINVAL;
567 }
568
569 if (s->type == SERVICE_ONESHOT && !exit_status_set_is_empty(&s->restart_force_status)) {
570 log_unit_error(UNIT(s), "Service has RestartForceStatus= set, which isn't allowed for Type=oneshot services. Refusing.");
571 return -EINVAL;
572 }
573
574 if (s->type == SERVICE_DBUS && !s->bus_name) {
575 log_unit_error(UNIT(s), "Service is of type D-Bus but no D-Bus service name has been specified. Refusing.");
576 return -EINVAL;
577 }
578
579 if (s->bus_name && s->type != SERVICE_DBUS)
580 log_unit_warning(UNIT(s), "Service has a D-Bus service name specified, but is not of type dbus. Ignoring.");
581
582 if (s->exec_context.pam_name && !IN_SET(s->kill_context.kill_mode, KILL_CONTROL_GROUP, KILL_MIXED)) {
583 log_unit_error(UNIT(s), "Service has PAM enabled. Kill mode must be set to 'control-group' or 'mixed'. Refusing.");
584 return -EINVAL;
585 }
586
587 if (s->usb_function_descriptors && !s->usb_function_strings)
588 log_unit_warning(UNIT(s), "Service has USBFunctionDescriptors= setting, but no USBFunctionStrings=. Ignoring.");
589
590 if (!s->usb_function_descriptors && s->usb_function_strings)
591 log_unit_warning(UNIT(s), "Service has USBFunctionStrings= setting, but no USBFunctionDescriptors=. Ignoring.");
592
593 if (s->runtime_max_usec != USEC_INFINITY && s->type == SERVICE_ONESHOT)
594 log_unit_warning(UNIT(s), "MaxRuntimeSec= has no effect in combination with Type=oneshot. Ignoring.");
595
596 return 0;
597 }
598
599 static int service_add_default_dependencies(Service *s) {
600 int r;
601
602 assert(s);
603
604 if (!UNIT(s)->default_dependencies)
605 return 0;
606
607 /* Add a number of automatic dependencies useful for the
608 * majority of services. */
609
610 if (MANAGER_IS_SYSTEM(UNIT(s)->manager)) {
611 /* First, pull in the really early boot stuff, and
612 * require it, so that we fail if we can't acquire
613 * it. */
614
615 r = unit_add_two_dependencies_by_name(UNIT(s), UNIT_AFTER, UNIT_REQUIRES, SPECIAL_SYSINIT_TARGET, NULL, true, UNIT_DEPENDENCY_DEFAULT);
616 if (r < 0)
617 return r;
618 } else {
619
620 /* In the --user instance there's no sysinit.target,
621 * in that case require basic.target instead. */
622
623 r = unit_add_dependency_by_name(UNIT(s), UNIT_REQUIRES, SPECIAL_BASIC_TARGET, NULL, true, UNIT_DEPENDENCY_DEFAULT);
624 if (r < 0)
625 return r;
626 }
627
628 /* Second, if the rest of the base system is in the same
629 * transaction, order us after it, but do not pull it in or
630 * even require it. */
631 r = unit_add_dependency_by_name(UNIT(s), UNIT_AFTER, SPECIAL_BASIC_TARGET, NULL, true, UNIT_DEPENDENCY_DEFAULT);
632 if (r < 0)
633 return r;
634
635 /* Third, add us in for normal shutdown. */
636 return unit_add_two_dependencies_by_name(UNIT(s), UNIT_BEFORE, UNIT_CONFLICTS, SPECIAL_SHUTDOWN_TARGET, NULL, true, UNIT_DEPENDENCY_DEFAULT);
637 }
638
639 static void service_fix_output(Service *s) {
640 assert(s);
641
642 /* If nothing has been explicitly configured, patch default output in. If input is socket/tty we avoid this
643 * however, since in that case we want output to default to the same place as we read input from. */
644
645 if (s->exec_context.std_error == EXEC_OUTPUT_INHERIT &&
646 s->exec_context.std_output == EXEC_OUTPUT_INHERIT &&
647 s->exec_context.std_input == EXEC_INPUT_NULL)
648 s->exec_context.std_error = UNIT(s)->manager->default_std_error;
649
650 if (s->exec_context.std_output == EXEC_OUTPUT_INHERIT &&
651 s->exec_context.std_input == EXEC_INPUT_NULL)
652 s->exec_context.std_output = UNIT(s)->manager->default_std_output;
653
654 if (s->exec_context.std_input == EXEC_INPUT_NULL &&
655 s->exec_context.stdin_data_size > 0)
656 s->exec_context.std_input = EXEC_INPUT_DATA;
657 }
658
659 static int service_setup_bus_name(Service *s) {
660 int r;
661
662 assert(s);
663
664 if (!s->bus_name)
665 return 0;
666
667 r = unit_add_dependency_by_name(UNIT(s), UNIT_REQUIRES, SPECIAL_DBUS_SOCKET, NULL, true, UNIT_DEPENDENCY_FILE);
668 if (r < 0)
669 return log_unit_error_errno(UNIT(s), r, "Failed to add dependency on " SPECIAL_DBUS_SOCKET ": %m");
670
671 /* We always want to be ordered against dbus.socket if both are in the transaction. */
672 r = unit_add_dependency_by_name(UNIT(s), UNIT_AFTER, SPECIAL_DBUS_SOCKET, NULL, true, UNIT_DEPENDENCY_FILE);
673 if (r < 0)
674 return log_unit_error_errno(UNIT(s), r, "Failed to add dependency on " SPECIAL_DBUS_SOCKET ": %m");
675
676 r = unit_watch_bus_name(UNIT(s), s->bus_name);
677 if (r == -EEXIST)
678 return log_unit_error_errno(UNIT(s), r, "Two services allocated for the same bus name %s, refusing operation.", s->bus_name);
679 if (r < 0)
680 return log_unit_error_errno(UNIT(s), r, "Cannot watch bus name %s: %m", s->bus_name);
681
682 return 0;
683 }
684
685 static int service_add_extras(Service *s) {
686 int r;
687
688 assert(s);
689
690 if (s->type == _SERVICE_TYPE_INVALID) {
691 /* Figure out a type automatically */
692 if (s->bus_name)
693 s->type = SERVICE_DBUS;
694 else if (s->exec_command[SERVICE_EXEC_START])
695 s->type = SERVICE_SIMPLE;
696 else
697 s->type = SERVICE_ONESHOT;
698 }
699
700 /* Oneshot services have disabled start timeout by default */
701 if (s->type == SERVICE_ONESHOT && !s->start_timeout_defined)
702 s->timeout_start_usec = USEC_INFINITY;
703
704 service_fix_output(s);
705
706 r = unit_patch_contexts(UNIT(s));
707 if (r < 0)
708 return r;
709
710 r = unit_add_exec_dependencies(UNIT(s), &s->exec_context);
711 if (r < 0)
712 return r;
713
714 r = unit_set_default_slice(UNIT(s));
715 if (r < 0)
716 return r;
717
718 /* If the service needs the notify socket, let's enable it automatically. */
719 if (s->notify_access == NOTIFY_NONE &&
720 (s->type == SERVICE_NOTIFY || s->watchdog_usec > 0 || s->n_fd_store_max > 0))
721 s->notify_access = NOTIFY_MAIN;
722
723 r = service_add_default_dependencies(s);
724 if (r < 0)
725 return r;
726
727 r = service_setup_bus_name(s);
728 if (r < 0)
729 return r;
730
731 return 0;
732 }
733
734 static int service_load(Unit *u) {
735 Service *s = SERVICE(u);
736 int r;
737
738 assert(s);
739
740 /* Load a .service file */
741 r = unit_load_fragment(u);
742 if (r < 0)
743 return r;
744
745 /* Still nothing found? Then let's give up */
746 if (u->load_state == UNIT_STUB)
747 return -ENOENT;
748
749 /* This is a new unit? Then let's add in some extras */
750 if (u->load_state == UNIT_LOADED) {
751
752 /* We were able to load something, then let's add in
753 * the dropin directories. */
754 r = unit_load_dropin(u);
755 if (r < 0)
756 return r;
757
758 /* This is a new unit? Then let's add in some
759 * extras */
760 r = service_add_extras(s);
761 if (r < 0)
762 return r;
763 }
764
765 return service_verify(s);
766 }
767
768 static void service_dump(Unit *u, FILE *f, const char *prefix) {
769 char buf_restart[FORMAT_TIMESPAN_MAX], buf_start[FORMAT_TIMESPAN_MAX], buf_stop[FORMAT_TIMESPAN_MAX];
770 char buf_runtime[FORMAT_TIMESPAN_MAX], buf_watchdog[FORMAT_TIMESPAN_MAX];
771 ServiceExecCommand c;
772 Service *s = SERVICE(u);
773 const char *prefix2;
774
775 assert(s);
776
777 prefix = strempty(prefix);
778 prefix2 = strjoina(prefix, "\t");
779
780 fprintf(f,
781 "%sService State: %s\n"
782 "%sResult: %s\n"
783 "%sReload Result: %s\n"
784 "%sPermissionsStartOnly: %s\n"
785 "%sRootDirectoryStartOnly: %s\n"
786 "%sRemainAfterExit: %s\n"
787 "%sGuessMainPID: %s\n"
788 "%sType: %s\n"
789 "%sRestart: %s\n"
790 "%sNotifyAccess: %s\n"
791 "%sNotifyState: %s\n",
792 prefix, service_state_to_string(s->state),
793 prefix, service_result_to_string(s->result),
794 prefix, service_result_to_string(s->reload_result),
795 prefix, yes_no(s->permissions_start_only),
796 prefix, yes_no(s->root_directory_start_only),
797 prefix, yes_no(s->remain_after_exit),
798 prefix, yes_no(s->guess_main_pid),
799 prefix, service_type_to_string(s->type),
800 prefix, service_restart_to_string(s->restart),
801 prefix, notify_access_to_string(s->notify_access),
802 prefix, notify_state_to_string(s->notify_state));
803
804 if (s->control_pid > 0)
805 fprintf(f,
806 "%sControl PID: "PID_FMT"\n",
807 prefix, s->control_pid);
808
809 if (s->main_pid > 0)
810 fprintf(f,
811 "%sMain PID: "PID_FMT"\n"
812 "%sMain PID Known: %s\n"
813 "%sMain PID Alien: %s\n",
814 prefix, s->main_pid,
815 prefix, yes_no(s->main_pid_known),
816 prefix, yes_no(s->main_pid_alien));
817
818 if (s->pid_file)
819 fprintf(f,
820 "%sPIDFile: %s\n",
821 prefix, s->pid_file);
822
823 if (s->bus_name)
824 fprintf(f,
825 "%sBusName: %s\n"
826 "%sBus Name Good: %s\n",
827 prefix, s->bus_name,
828 prefix, yes_no(s->bus_name_good));
829
830 if (UNIT_ISSET(s->accept_socket))
831 fprintf(f,
832 "%sAccept Socket: %s\n",
833 prefix, UNIT_DEREF(s->accept_socket)->id);
834
835 fprintf(f,
836 "%sRestartSec: %s\n"
837 "%sTimeoutStartSec: %s\n"
838 "%sTimeoutStopSec: %s\n"
839 "%sRuntimeMaxSec: %s\n"
840 "%sWatchdogSec: %s\n",
841 prefix, format_timespan(buf_restart, sizeof(buf_restart), s->restart_usec, USEC_PER_SEC),
842 prefix, format_timespan(buf_start, sizeof(buf_start), s->timeout_start_usec, USEC_PER_SEC),
843 prefix, format_timespan(buf_stop, sizeof(buf_stop), s->timeout_stop_usec, USEC_PER_SEC),
844 prefix, format_timespan(buf_runtime, sizeof(buf_runtime), s->runtime_max_usec, USEC_PER_SEC),
845 prefix, format_timespan(buf_watchdog, sizeof(buf_watchdog), s->watchdog_usec, USEC_PER_SEC));
846
847 kill_context_dump(&s->kill_context, f, prefix);
848 exec_context_dump(&s->exec_context, f, prefix);
849
850 for (c = 0; c < _SERVICE_EXEC_COMMAND_MAX; c++) {
851
852 if (!s->exec_command[c])
853 continue;
854
855 fprintf(f, "%s-> %s:\n",
856 prefix, service_exec_command_to_string(c));
857
858 exec_command_dump_list(s->exec_command[c], f, prefix2);
859 }
860
861 if (s->status_text)
862 fprintf(f, "%sStatus Text: %s\n",
863 prefix, s->status_text);
864
865 if (s->n_fd_store_max > 0)
866 fprintf(f,
867 "%sFile Descriptor Store Max: %u\n"
868 "%sFile Descriptor Store Current: %zu\n",
869 prefix, s->n_fd_store_max,
870 prefix, s->n_fd_store);
871
872 cgroup_context_dump(&s->cgroup_context, f, prefix);
873 }
874
875 static int service_is_suitable_main_pid(Service *s, pid_t pid, int prio) {
876 Unit *owner;
877
878 assert(s);
879 assert(pid_is_valid(pid));
880
881 /* Checks whether the specified PID is suitable as main PID for this service. returns negative if not, 0 if the
882 * PID is questionnable but should be accepted if the source of configuration is trusted. > 0 if the PID is
883 * good */
884
885 if (pid == getpid_cached() || pid == 1) {
886 log_unit_full(UNIT(s), prio, 0, "New main PID "PID_FMT" is the manager, refusing.", pid);
887 return -EPERM;
888 }
889
890 if (pid == s->control_pid) {
891 log_unit_full(UNIT(s), prio, 0, "New main PID "PID_FMT" is the control process, refusing.", pid);
892 return -EPERM;
893 }
894
895 if (!pid_is_alive(pid)) {
896 log_unit_full(UNIT(s), prio, 0, "New main PID "PID_FMT" does not exist or is a zombie.", pid);
897 return -ESRCH;
898 }
899
900 owner = manager_get_unit_by_pid(UNIT(s)->manager, pid);
901 if (owner == UNIT(s)) {
902 log_unit_debug(UNIT(s), "New main PID "PID_FMT" belongs to service, we are happy.", pid);
903 return 1; /* Yay, it's definitely a good PID */
904 }
905
906 return 0; /* Hmm it's a suspicious PID, let's accept it if configuration source is trusted */
907 }
908
909 static int service_load_pid_file(Service *s, bool may_warn) {
910 char procfs[STRLEN("/proc/self/fd/") + DECIMAL_STR_MAX(int)];
911 bool questionable_pid_file = false;
912 _cleanup_free_ char *k = NULL;
913 _cleanup_close_ int fd = -1;
914 int r, prio;
915 pid_t pid;
916
917 assert(s);
918
919 if (!s->pid_file)
920 return -ENOENT;
921
922 prio = may_warn ? LOG_INFO : LOG_DEBUG;
923
924 fd = chase_symlinks(s->pid_file, NULL, CHASE_OPEN|CHASE_SAFE, NULL);
925 if (fd == -EPERM) {
926 log_unit_full(UNIT(s), LOG_DEBUG, fd, "Permission denied while opening PID file or potentially unsafe symlink chain, will now retry with relaxed checks: %s", s->pid_file);
927
928 questionable_pid_file = true;
929
930 fd = chase_symlinks(s->pid_file, NULL, CHASE_OPEN, NULL);
931 }
932 if (fd < 0)
933 return log_unit_full(UNIT(s), prio, fd, "Can't open PID file %s (yet?) after %s: %m", s->pid_file, service_state_to_string(s->state));
934
935 /* Let's read the PID file now that we chased it down. But we need to convert the O_PATH fd chase_symlinks() returned us into a proper fd first. */
936 xsprintf(procfs, "/proc/self/fd/%i", fd);
937 r = read_one_line_file(procfs, &k);
938 if (r < 0)
939 return log_unit_error_errno(UNIT(s), r, "Can't convert PID files %s O_PATH file descriptor to proper file descriptor: %m", s->pid_file);
940
941 r = parse_pid(k, &pid);
942 if (r < 0)
943 return log_unit_full(UNIT(s), prio, r, "Failed to parse PID from file %s: %m", s->pid_file);
944
945 if (s->main_pid_known && pid == s->main_pid)
946 return 0;
947
948 r = service_is_suitable_main_pid(s, pid, prio);
949 if (r < 0)
950 return r;
951 if (r == 0) {
952 struct stat st;
953
954 if (questionable_pid_file) {
955 log_unit_error(UNIT(s), "Refusing to accept PID outside of service control group, acquired through unsafe symlink chain: %s", s->pid_file);
956 return -EPERM;
957 }
958
959 /* Hmm, it's not clear if the new main PID is safe. Let's allow this if the PID file is owned by root */
960
961 if (fstat(fd, &st) < 0)
962 return log_unit_error_errno(UNIT(s), errno, "Failed to fstat() PID file O_PATH fd: %m");
963
964 if (st.st_uid != 0) {
965 log_unit_error(UNIT(s), "New main PID "PID_FMT" does not belong to service, and PID file is not owned by root. Refusing.", pid);
966 return -EPERM;
967 }
968
969 log_unit_debug(UNIT(s), "New main PID "PID_FMT" does not belong to service, but we'll accept it since PID file is owned by root.", pid);
970 }
971
972 if (s->main_pid_known) {
973 log_unit_debug(UNIT(s), "Main PID changing: "PID_FMT" -> "PID_FMT, s->main_pid, pid);
974
975 service_unwatch_main_pid(s);
976 s->main_pid_known = false;
977 } else
978 log_unit_debug(UNIT(s), "Main PID loaded: "PID_FMT, pid);
979
980 r = service_set_main_pid(s, pid);
981 if (r < 0)
982 return r;
983
984 r = unit_watch_pid(UNIT(s), pid);
985 if (r < 0) /* FIXME: we need to do something here */
986 return log_unit_warning_errno(UNIT(s), r, "Failed to watch PID "PID_FMT" for service: %m", pid);
987
988 return 1;
989 }
990
991 static void service_search_main_pid(Service *s) {
992 pid_t pid = 0;
993 int r;
994
995 assert(s);
996
997 /* If we know it anyway, don't ever fallback to unreliable
998 * heuristics */
999 if (s->main_pid_known)
1000 return;
1001
1002 if (!s->guess_main_pid)
1003 return;
1004
1005 assert(s->main_pid <= 0);
1006
1007 if (unit_search_main_pid(UNIT(s), &pid) < 0)
1008 return;
1009
1010 log_unit_debug(UNIT(s), "Main PID guessed: "PID_FMT, pid);
1011 if (service_set_main_pid(s, pid) < 0)
1012 return;
1013
1014 r = unit_watch_pid(UNIT(s), pid);
1015 if (r < 0)
1016 /* FIXME: we need to do something here */
1017 log_unit_warning_errno(UNIT(s), r, "Failed to watch PID "PID_FMT" from: %m", pid);
1018 }
1019
1020 static void service_set_state(Service *s, ServiceState state) {
1021 ServiceState old_state;
1022 const UnitActiveState *table;
1023
1024 assert(s);
1025
1026 table = s->type == SERVICE_IDLE ? state_translation_table_idle : state_translation_table;
1027
1028 old_state = s->state;
1029 s->state = state;
1030
1031 service_unwatch_pid_file(s);
1032
1033 if (!IN_SET(state,
1034 SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST,
1035 SERVICE_RUNNING,
1036 SERVICE_RELOAD,
1037 SERVICE_STOP, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
1038 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL,
1039 SERVICE_AUTO_RESTART))
1040 s->timer_event_source = sd_event_source_unref(s->timer_event_source);
1041
1042 if (!IN_SET(state,
1043 SERVICE_START, SERVICE_START_POST,
1044 SERVICE_RUNNING, SERVICE_RELOAD,
1045 SERVICE_STOP, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
1046 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL)) {
1047 service_unwatch_main_pid(s);
1048 s->main_command = NULL;
1049 }
1050
1051 if (!IN_SET(state,
1052 SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST,
1053 SERVICE_RELOAD,
1054 SERVICE_STOP, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
1055 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL)) {
1056 service_unwatch_control_pid(s);
1057 s->control_command = NULL;
1058 s->control_command_id = _SERVICE_EXEC_COMMAND_INVALID;
1059 }
1060
1061 if (IN_SET(state, SERVICE_DEAD, SERVICE_FAILED, SERVICE_AUTO_RESTART)) {
1062 unit_unwatch_all_pids(UNIT(s));
1063 unit_dequeue_rewatch_pids(UNIT(s));
1064 }
1065
1066 if (!IN_SET(state,
1067 SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST,
1068 SERVICE_RUNNING, SERVICE_RELOAD,
1069 SERVICE_STOP, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
1070 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL) &&
1071 !(state == SERVICE_DEAD && UNIT(s)->job))
1072 service_close_socket_fd(s);
1073
1074 if (!IN_SET(state, SERVICE_START_POST, SERVICE_RUNNING, SERVICE_RELOAD))
1075 service_stop_watchdog(s);
1076
1077 /* For the inactive states unit_notify() will trim the cgroup,
1078 * but for exit we have to do that ourselves... */
1079 if (state == SERVICE_EXITED && !MANAGER_IS_RELOADING(UNIT(s)->manager))
1080 unit_prune_cgroup(UNIT(s));
1081
1082 if (old_state != state)
1083 log_unit_debug(UNIT(s), "Changed %s -> %s", service_state_to_string(old_state), service_state_to_string(state));
1084
1085 unit_notify(UNIT(s), table[old_state], table[state],
1086 (s->reload_result == SERVICE_SUCCESS ? 0 : UNIT_NOTIFY_RELOAD_FAILURE) |
1087 (s->will_auto_restart ? UNIT_NOTIFY_WILL_AUTO_RESTART : 0));
1088 }
1089
1090 static usec_t service_coldplug_timeout(Service *s) {
1091 assert(s);
1092
1093 switch (s->deserialized_state) {
1094
1095 case SERVICE_START_PRE:
1096 case SERVICE_START:
1097 case SERVICE_START_POST:
1098 case SERVICE_RELOAD:
1099 return usec_add(UNIT(s)->state_change_timestamp.monotonic, s->timeout_start_usec);
1100
1101 case SERVICE_RUNNING:
1102 return usec_add(UNIT(s)->active_enter_timestamp.monotonic, s->runtime_max_usec);
1103
1104 case SERVICE_STOP:
1105 case SERVICE_STOP_SIGABRT:
1106 case SERVICE_STOP_SIGTERM:
1107 case SERVICE_STOP_SIGKILL:
1108 case SERVICE_STOP_POST:
1109 case SERVICE_FINAL_SIGTERM:
1110 case SERVICE_FINAL_SIGKILL:
1111 return usec_add(UNIT(s)->state_change_timestamp.monotonic, s->timeout_stop_usec);
1112
1113 case SERVICE_AUTO_RESTART:
1114 return usec_add(UNIT(s)->inactive_enter_timestamp.monotonic, s->restart_usec);
1115
1116 default:
1117 return USEC_INFINITY;
1118 }
1119 }
1120
1121 static int service_coldplug(Unit *u) {
1122 Service *s = SERVICE(u);
1123 int r;
1124
1125 assert(s);
1126 assert(s->state == SERVICE_DEAD);
1127
1128 if (s->deserialized_state == s->state)
1129 return 0;
1130
1131 r = service_arm_timer(s, service_coldplug_timeout(s));
1132 if (r < 0)
1133 return r;
1134
1135 if (s->main_pid > 0 &&
1136 pid_is_unwaited(s->main_pid) &&
1137 (IN_SET(s->deserialized_state,
1138 SERVICE_START, SERVICE_START_POST,
1139 SERVICE_RUNNING, SERVICE_RELOAD,
1140 SERVICE_STOP, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
1141 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL))) {
1142 r = unit_watch_pid(UNIT(s), s->main_pid);
1143 if (r < 0)
1144 return r;
1145 }
1146
1147 if (s->control_pid > 0 &&
1148 pid_is_unwaited(s->control_pid) &&
1149 IN_SET(s->deserialized_state,
1150 SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST,
1151 SERVICE_RELOAD,
1152 SERVICE_STOP, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
1153 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL)) {
1154 r = unit_watch_pid(UNIT(s), s->control_pid);
1155 if (r < 0)
1156 return r;
1157 }
1158
1159 if (!IN_SET(s->deserialized_state, SERVICE_DEAD, SERVICE_FAILED, SERVICE_AUTO_RESTART)) {
1160 (void) unit_enqueue_rewatch_pids(u);
1161 (void) unit_setup_dynamic_creds(u);
1162 (void) unit_setup_exec_runtime(u);
1163 }
1164
1165 if (IN_SET(s->deserialized_state, SERVICE_START_POST, SERVICE_RUNNING, SERVICE_RELOAD))
1166 service_start_watchdog(s);
1167
1168 if (UNIT_ISSET(s->accept_socket)) {
1169 Socket* socket = SOCKET(UNIT_DEREF(s->accept_socket));
1170
1171 if (socket->max_connections_per_source > 0) {
1172 SocketPeer *peer;
1173
1174 /* Make a best-effort attempt at bumping the connection count */
1175 if (socket_acquire_peer(socket, s->socket_fd, &peer) > 0) {
1176 socket_peer_unref(s->peer);
1177 s->peer = peer;
1178 }
1179 }
1180 }
1181
1182 service_set_state(s, s->deserialized_state);
1183 return 0;
1184 }
1185
1186 static int service_collect_fds(Service *s,
1187 int **fds,
1188 char ***fd_names,
1189 unsigned *n_storage_fds,
1190 unsigned *n_socket_fds) {
1191
1192 _cleanup_strv_free_ char **rfd_names = NULL;
1193 _cleanup_free_ int *rfds = NULL;
1194 unsigned rn_socket_fds = 0, rn_storage_fds = 0;
1195 int r;
1196
1197 assert(s);
1198 assert(fds);
1199 assert(fd_names);
1200 assert(n_socket_fds);
1201
1202 if (s->socket_fd >= 0) {
1203
1204 /* Pass the per-connection socket */
1205
1206 rfds = new(int, 1);
1207 if (!rfds)
1208 return -ENOMEM;
1209 rfds[0] = s->socket_fd;
1210
1211 rfd_names = strv_new("connection", NULL);
1212 if (!rfd_names)
1213 return -ENOMEM;
1214
1215 rn_socket_fds = 1;
1216 } else {
1217 Iterator i;
1218 void *v;
1219 Unit *u;
1220
1221 /* Pass all our configured sockets for singleton services */
1222
1223 HASHMAP_FOREACH_KEY(v, u, UNIT(s)->dependencies[UNIT_TRIGGERED_BY], i) {
1224 _cleanup_free_ int *cfds = NULL;
1225 Socket *sock;
1226 int cn_fds;
1227
1228 if (u->type != UNIT_SOCKET)
1229 continue;
1230
1231 sock = SOCKET(u);
1232
1233 cn_fds = socket_collect_fds(sock, &cfds);
1234 if (cn_fds < 0)
1235 return cn_fds;
1236
1237 if (cn_fds <= 0)
1238 continue;
1239
1240 if (!rfds) {
1241 rfds = TAKE_PTR(cfds);
1242 rn_socket_fds = cn_fds;
1243 } else {
1244 int *t;
1245
1246 t = reallocarray(rfds, rn_socket_fds + cn_fds, sizeof(int));
1247 if (!t)
1248 return -ENOMEM;
1249
1250 memcpy(t + rn_socket_fds, cfds, cn_fds * sizeof(int));
1251
1252 rfds = t;
1253 rn_socket_fds += cn_fds;
1254 }
1255
1256 r = strv_extend_n(&rfd_names, socket_fdname(sock), cn_fds);
1257 if (r < 0)
1258 return r;
1259 }
1260 }
1261
1262 if (s->n_fd_store > 0) {
1263 ServiceFDStore *fs;
1264 unsigned n_fds;
1265 char **nl;
1266 int *t;
1267
1268 t = reallocarray(rfds, rn_socket_fds + s->n_fd_store, sizeof(int));
1269 if (!t)
1270 return -ENOMEM;
1271
1272 rfds = t;
1273
1274 nl = reallocarray(rfd_names, rn_socket_fds + s->n_fd_store + 1, sizeof(char *));
1275 if (!nl)
1276 return -ENOMEM;
1277
1278 rfd_names = nl;
1279 n_fds = rn_socket_fds;
1280
1281 LIST_FOREACH(fd_store, fs, s->fd_store) {
1282 rfds[n_fds] = fs->fd;
1283 rfd_names[n_fds] = strdup(strempty(fs->fdname));
1284 if (!rfd_names[n_fds])
1285 return -ENOMEM;
1286
1287 rn_storage_fds++;
1288 n_fds++;
1289 }
1290
1291 rfd_names[n_fds] = NULL;
1292 }
1293
1294 *fds = TAKE_PTR(rfds);
1295 *fd_names = TAKE_PTR(rfd_names);
1296 *n_socket_fds = rn_socket_fds;
1297 *n_storage_fds = rn_storage_fds;
1298
1299 return 0;
1300 }
1301
1302 static bool service_exec_needs_notify_socket(Service *s, ExecFlags flags) {
1303 assert(s);
1304
1305 /* Notifications are accepted depending on the process and
1306 * the access setting of the service:
1307 * process: \ access: NONE MAIN EXEC ALL
1308 * main no yes yes yes
1309 * control no no yes yes
1310 * other (forked) no no no yes */
1311
1312 if (flags & EXEC_IS_CONTROL)
1313 /* A control process */
1314 return IN_SET(s->notify_access, NOTIFY_EXEC, NOTIFY_ALL);
1315
1316 /* We only spawn main processes and control processes, so any
1317 * process that is not a control process is a main process */
1318 return s->notify_access != NOTIFY_NONE;
1319 }
1320
1321 static int service_spawn(
1322 Service *s,
1323 ExecCommand *c,
1324 usec_t timeout,
1325 ExecFlags flags,
1326 pid_t *_pid) {
1327
1328 ExecParameters exec_params = {
1329 .flags = flags,
1330 .stdin_fd = -1,
1331 .stdout_fd = -1,
1332 .stderr_fd = -1,
1333 };
1334 _cleanup_strv_free_ char **final_env = NULL, **our_env = NULL, **fd_names = NULL;
1335 unsigned n_storage_fds = 0, n_socket_fds = 0, n_env = 0;
1336 _cleanup_free_ int *fds = NULL;
1337 pid_t pid;
1338 int r;
1339
1340 assert(s);
1341 assert(c);
1342 assert(_pid);
1343
1344 r = unit_prepare_exec(UNIT(s));
1345 if (r < 0)
1346 return r;
1347
1348 if (flags & EXEC_IS_CONTROL) {
1349 /* If this is a control process, mask the permissions/chroot application if this is requested. */
1350 if (s->permissions_start_only)
1351 exec_params.flags &= ~EXEC_APPLY_SANDBOXING;
1352 if (s->root_directory_start_only)
1353 exec_params.flags &= ~EXEC_APPLY_CHROOT;
1354 }
1355
1356 if ((flags & EXEC_PASS_FDS) ||
1357 s->exec_context.std_input == EXEC_INPUT_SOCKET ||
1358 s->exec_context.std_output == EXEC_OUTPUT_SOCKET ||
1359 s->exec_context.std_error == EXEC_OUTPUT_SOCKET) {
1360
1361 r = service_collect_fds(s, &fds, &fd_names, &n_storage_fds, &n_socket_fds);
1362 if (r < 0)
1363 return r;
1364
1365 log_unit_debug(UNIT(s), "Passing %i fds to service", n_storage_fds + n_socket_fds);
1366 }
1367
1368 r = service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), timeout));
1369 if (r < 0)
1370 return r;
1371
1372 our_env = new0(char*, 9);
1373 if (!our_env)
1374 return -ENOMEM;
1375
1376 if (service_exec_needs_notify_socket(s, flags))
1377 if (asprintf(our_env + n_env++, "NOTIFY_SOCKET=%s", UNIT(s)->manager->notify_socket) < 0)
1378 return -ENOMEM;
1379
1380 if (s->main_pid > 0)
1381 if (asprintf(our_env + n_env++, "MAINPID="PID_FMT, s->main_pid) < 0)
1382 return -ENOMEM;
1383
1384 if (MANAGER_IS_USER(UNIT(s)->manager))
1385 if (asprintf(our_env + n_env++, "MANAGERPID="PID_FMT, getpid_cached()) < 0)
1386 return -ENOMEM;
1387
1388 if (s->socket_fd >= 0) {
1389 union sockaddr_union sa;
1390 socklen_t salen = sizeof(sa);
1391
1392 /* If this is a per-connection service instance, let's set $REMOTE_ADDR and $REMOTE_PORT to something
1393 * useful. Note that we do this only when we are still connected at this point in time, which we might
1394 * very well not be. Hence we ignore all errors when retrieving peer information (as that might result
1395 * in ENOTCONN), and just use whate we can use. */
1396
1397 if (getpeername(s->socket_fd, &sa.sa, &salen) >= 0 &&
1398 IN_SET(sa.sa.sa_family, AF_INET, AF_INET6, AF_VSOCK)) {
1399
1400 _cleanup_free_ char *addr = NULL;
1401 char *t;
1402 unsigned port;
1403
1404 r = sockaddr_pretty(&sa.sa, salen, true, false, &addr);
1405 if (r < 0)
1406 return r;
1407
1408 t = strappend("REMOTE_ADDR=", addr);
1409 if (!t)
1410 return -ENOMEM;
1411 our_env[n_env++] = t;
1412
1413 r = sockaddr_port(&sa.sa, &port);
1414 if (r < 0)
1415 return r;
1416
1417 if (asprintf(&t, "REMOTE_PORT=%u", port) < 0)
1418 return -ENOMEM;
1419 our_env[n_env++] = t;
1420 }
1421 }
1422
1423 if (flags & EXEC_SETENV_RESULT) {
1424 if (asprintf(our_env + n_env++, "SERVICE_RESULT=%s", service_result_to_string(s->result)) < 0)
1425 return -ENOMEM;
1426
1427 if (s->main_exec_status.pid > 0 &&
1428 dual_timestamp_is_set(&s->main_exec_status.exit_timestamp)) {
1429 if (asprintf(our_env + n_env++, "EXIT_CODE=%s", sigchld_code_to_string(s->main_exec_status.code)) < 0)
1430 return -ENOMEM;
1431
1432 if (s->main_exec_status.code == CLD_EXITED)
1433 r = asprintf(our_env + n_env++, "EXIT_STATUS=%i", s->main_exec_status.status);
1434 else
1435 r = asprintf(our_env + n_env++, "EXIT_STATUS=%s", signal_to_string(s->main_exec_status.status));
1436 if (r < 0)
1437 return -ENOMEM;
1438 }
1439 }
1440
1441 unit_set_exec_params(UNIT(s), &exec_params);
1442
1443 final_env = strv_env_merge(2, exec_params.environment, our_env, NULL);
1444 if (!final_env)
1445 return -ENOMEM;
1446
1447 /* System services should get a new keyring by default. */
1448 SET_FLAG(exec_params.flags, EXEC_NEW_KEYRING, MANAGER_IS_SYSTEM(UNIT(s)->manager));
1449
1450 /* System D-Bus needs nss-systemd disabled, so that we don't deadlock */
1451 SET_FLAG(exec_params.flags, EXEC_NSS_BYPASS_BUS,
1452 MANAGER_IS_SYSTEM(UNIT(s)->manager) && unit_has_name(UNIT(s), SPECIAL_DBUS_SERVICE));
1453
1454 exec_params.argv = c->argv;
1455 exec_params.environment = final_env;
1456 exec_params.fds = fds;
1457 exec_params.fd_names = fd_names;
1458 exec_params.n_storage_fds = n_storage_fds;
1459 exec_params.n_socket_fds = n_socket_fds;
1460 exec_params.watchdog_usec = s->watchdog_usec;
1461 exec_params.selinux_context_net = s->socket_fd_selinux_context_net;
1462 if (s->type == SERVICE_IDLE)
1463 exec_params.idle_pipe = UNIT(s)->manager->idle_pipe;
1464 exec_params.stdin_fd = s->stdin_fd;
1465 exec_params.stdout_fd = s->stdout_fd;
1466 exec_params.stderr_fd = s->stderr_fd;
1467
1468 r = exec_spawn(UNIT(s),
1469 c,
1470 &s->exec_context,
1471 &exec_params,
1472 s->exec_runtime,
1473 &s->dynamic_creds,
1474 &pid);
1475 if (r < 0)
1476 return r;
1477
1478 r = unit_watch_pid(UNIT(s), pid);
1479 if (r < 0) /* FIXME: we need to do something here */
1480 return r;
1481
1482 *_pid = pid;
1483
1484 return 0;
1485 }
1486
1487 static int main_pid_good(Service *s) {
1488 assert(s);
1489
1490 /* Returns 0 if the pid is dead, > 0 if it is good, < 0 if we don't know */
1491
1492 /* If we know the pid file, then let's just check if it is
1493 * still valid */
1494 if (s->main_pid_known) {
1495
1496 /* If it's an alien child let's check if it is still
1497 * alive ... */
1498 if (s->main_pid_alien && s->main_pid > 0)
1499 return pid_is_alive(s->main_pid);
1500
1501 /* .. otherwise assume we'll get a SIGCHLD for it,
1502 * which we really should wait for to collect exit
1503 * status and code */
1504 return s->main_pid > 0;
1505 }
1506
1507 /* We don't know the pid */
1508 return -EAGAIN;
1509 }
1510
1511 static int control_pid_good(Service *s) {
1512 assert(s);
1513
1514 /* Returns 0 if the control PID is dead, > 0 if it is good. We never actually return < 0 here, but in order to
1515 * make this function as similar as possible to main_pid_good() and cgroup_good(), we pretend that < 0 also
1516 * means: we can't figure it out. */
1517
1518 return s->control_pid > 0;
1519 }
1520
1521 static int cgroup_good(Service *s) {
1522 int r;
1523
1524 assert(s);
1525
1526 /* Returns 0 if the cgroup is empty or doesn't exist, > 0 if it is exists and is populated, < 0 if we can't
1527 * figure it out */
1528
1529 if (!UNIT(s)->cgroup_path)
1530 return 0;
1531
1532 r = cg_is_empty_recursive(SYSTEMD_CGROUP_CONTROLLER, UNIT(s)->cgroup_path);
1533 if (r < 0)
1534 return r;
1535
1536 return r == 0;
1537 }
1538
1539 static bool service_shall_restart(Service *s) {
1540 assert(s);
1541
1542 /* Don't restart after manual stops */
1543 if (s->forbid_restart)
1544 return false;
1545
1546 /* Never restart if this is configured as special exception */
1547 if (exit_status_set_test(&s->restart_prevent_status, s->main_exec_status.code, s->main_exec_status.status))
1548 return false;
1549
1550 /* Restart if the exit code/status are configured as restart triggers */
1551 if (exit_status_set_test(&s->restart_force_status, s->main_exec_status.code, s->main_exec_status.status))
1552 return true;
1553
1554 switch (s->restart) {
1555
1556 case SERVICE_RESTART_NO:
1557 return false;
1558
1559 case SERVICE_RESTART_ALWAYS:
1560 return true;
1561
1562 case SERVICE_RESTART_ON_SUCCESS:
1563 return s->result == SERVICE_SUCCESS;
1564
1565 case SERVICE_RESTART_ON_FAILURE:
1566 return s->result != SERVICE_SUCCESS;
1567
1568 case SERVICE_RESTART_ON_ABNORMAL:
1569 return !IN_SET(s->result, SERVICE_SUCCESS, SERVICE_FAILURE_EXIT_CODE);
1570
1571 case SERVICE_RESTART_ON_WATCHDOG:
1572 return s->result == SERVICE_FAILURE_WATCHDOG;
1573
1574 case SERVICE_RESTART_ON_ABORT:
1575 return IN_SET(s->result, SERVICE_FAILURE_SIGNAL, SERVICE_FAILURE_CORE_DUMP);
1576
1577 default:
1578 assert_not_reached("unknown restart setting");
1579 }
1580 }
1581
1582 static bool service_will_restart(Unit *u) {
1583 Service *s = SERVICE(u);
1584
1585 assert(s);
1586
1587 if (s->will_auto_restart)
1588 return true;
1589 if (s->state == SERVICE_AUTO_RESTART)
1590 return true;
1591 if (!UNIT(s)->job)
1592 return false;
1593 if (UNIT(s)->job->type == JOB_START)
1594 return true;
1595
1596 return false;
1597 }
1598
1599 static void service_enter_dead(Service *s, ServiceResult f, bool allow_restart) {
1600 int r;
1601
1602 assert(s);
1603
1604 /* If there's a stop job queued before we enter the DEAD state, we shouldn't act on Restart=, in order to not
1605 * undo what has already been enqueued. */
1606 if (unit_stop_pending(UNIT(s)))
1607 allow_restart = false;
1608
1609 if (s->result == SERVICE_SUCCESS)
1610 s->result = f;
1611
1612 if (s->result != SERVICE_SUCCESS)
1613 log_unit_warning(UNIT(s), "Failed with result '%s'.", service_result_to_string(s->result));
1614
1615 if (allow_restart && service_shall_restart(s))
1616 s->will_auto_restart = true;
1617
1618 /* Make sure service_release_resources() doesn't destroy our FD store, while we are changing through
1619 * SERVICE_FAILED/SERVICE_DEAD before entering into SERVICE_AUTO_RESTART. */
1620 s->n_keep_fd_store ++;
1621
1622 service_set_state(s, s->result != SERVICE_SUCCESS ? SERVICE_FAILED : SERVICE_DEAD);
1623
1624 if (s->will_auto_restart) {
1625 s->will_auto_restart = false;
1626
1627 r = service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), s->restart_usec));
1628 if (r < 0) {
1629 s->n_keep_fd_store--;
1630 goto fail;
1631 }
1632
1633 service_set_state(s, SERVICE_AUTO_RESTART);
1634 } else
1635 /* If we shan't restart, then flush out the restart counter. But don't do that immediately, so that the
1636 * user can still introspect the counter. Do so on the next start. */
1637 s->flush_n_restarts = true;
1638
1639 /* The new state is in effect, let's decrease the fd store ref counter again. Let's also readd us to the GC
1640 * queue, so that the fd store is possibly gc'ed again */
1641 s->n_keep_fd_store--;
1642 unit_add_to_gc_queue(UNIT(s));
1643
1644 /* The next restart might not be a manual stop, hence reset the flag indicating manual stops */
1645 s->forbid_restart = false;
1646
1647 /* We want fresh tmpdirs in case service is started again immediately */
1648 s->exec_runtime = exec_runtime_unref(s->exec_runtime, true);
1649
1650 if (s->exec_context.runtime_directory_preserve_mode == EXEC_PRESERVE_NO ||
1651 (s->exec_context.runtime_directory_preserve_mode == EXEC_PRESERVE_RESTART && !service_will_restart(UNIT(s))))
1652 /* Also, remove the runtime directory */
1653 exec_context_destroy_runtime_directory(&s->exec_context, UNIT(s)->manager->prefix[EXEC_DIRECTORY_RUNTIME]);
1654
1655 /* Get rid of the IPC bits of the user */
1656 unit_unref_uid_gid(UNIT(s), true);
1657
1658 /* Release the user, and destroy it if we are the only remaining owner */
1659 dynamic_creds_destroy(&s->dynamic_creds);
1660
1661 /* Try to delete the pid file. At this point it will be
1662 * out-of-date, and some software might be confused by it, so
1663 * let's remove it. */
1664 if (s->pid_file)
1665 (void) unlink(s->pid_file);
1666
1667 return;
1668
1669 fail:
1670 log_unit_warning_errno(UNIT(s), r, "Failed to run install restart timer: %m");
1671 service_enter_dead(s, SERVICE_FAILURE_RESOURCES, false);
1672 }
1673
1674 static void service_enter_stop_post(Service *s, ServiceResult f) {
1675 int r;
1676 assert(s);
1677
1678 if (s->result == SERVICE_SUCCESS)
1679 s->result = f;
1680
1681 service_unwatch_control_pid(s);
1682
1683 (void) unit_enqueue_rewatch_pids(UNIT(s));
1684
1685 s->control_command = s->exec_command[SERVICE_EXEC_STOP_POST];
1686 if (s->control_command) {
1687 s->control_command_id = SERVICE_EXEC_STOP_POST;
1688
1689 r = service_spawn(s,
1690 s->control_command,
1691 s->timeout_stop_usec,
1692 EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_APPLY_TTY_STDIN|EXEC_IS_CONTROL|EXEC_SETENV_RESULT,
1693 &s->control_pid);
1694 if (r < 0)
1695 goto fail;
1696
1697 service_set_state(s, SERVICE_STOP_POST);
1698 } else
1699 service_enter_signal(s, SERVICE_FINAL_SIGTERM, SERVICE_SUCCESS);
1700
1701 return;
1702
1703 fail:
1704 log_unit_warning_errno(UNIT(s), r, "Failed to run 'stop-post' task: %m");
1705 service_enter_signal(s, SERVICE_FINAL_SIGTERM, SERVICE_FAILURE_RESOURCES);
1706 }
1707
1708 static int state_to_kill_operation(ServiceState state) {
1709 switch (state) {
1710
1711 case SERVICE_STOP_SIGABRT:
1712 return KILL_ABORT;
1713
1714 case SERVICE_STOP_SIGTERM:
1715 case SERVICE_FINAL_SIGTERM:
1716 return KILL_TERMINATE;
1717
1718 case SERVICE_STOP_SIGKILL:
1719 case SERVICE_FINAL_SIGKILL:
1720 return KILL_KILL;
1721
1722 default:
1723 return _KILL_OPERATION_INVALID;
1724 }
1725 }
1726
1727 static void service_enter_signal(Service *s, ServiceState state, ServiceResult f) {
1728 int r;
1729
1730 assert(s);
1731
1732 if (s->result == SERVICE_SUCCESS)
1733 s->result = f;
1734
1735 /* Before sending any signal, make sure we track all members of this cgroup */
1736 (void) unit_watch_all_pids(UNIT(s));
1737
1738 /* Also, enqueue a job that we recheck all our PIDs a bit later, given that it's likely some processes have
1739 * died now */
1740 (void) unit_enqueue_rewatch_pids(UNIT(s));
1741
1742 r = unit_kill_context(
1743 UNIT(s),
1744 &s->kill_context,
1745 state_to_kill_operation(state),
1746 s->main_pid,
1747 s->control_pid,
1748 s->main_pid_alien);
1749 if (r < 0)
1750 goto fail;
1751
1752 if (r > 0) {
1753 r = service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), s->timeout_stop_usec));
1754 if (r < 0)
1755 goto fail;
1756
1757 service_set_state(s, state);
1758 } else if (IN_SET(state, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM) && s->kill_context.send_sigkill)
1759 service_enter_signal(s, SERVICE_STOP_SIGKILL, SERVICE_SUCCESS);
1760 else if (IN_SET(state, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL))
1761 service_enter_stop_post(s, SERVICE_SUCCESS);
1762 else if (state == SERVICE_FINAL_SIGTERM && s->kill_context.send_sigkill)
1763 service_enter_signal(s, SERVICE_FINAL_SIGKILL, SERVICE_SUCCESS);
1764 else
1765 service_enter_dead(s, SERVICE_SUCCESS, true);
1766
1767 return;
1768
1769 fail:
1770 log_unit_warning_errno(UNIT(s), r, "Failed to kill processes: %m");
1771
1772 if (IN_SET(state, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL))
1773 service_enter_stop_post(s, SERVICE_FAILURE_RESOURCES);
1774 else
1775 service_enter_dead(s, SERVICE_FAILURE_RESOURCES, true);
1776 }
1777
1778 static void service_enter_stop_by_notify(Service *s) {
1779 assert(s);
1780
1781 (void) unit_enqueue_rewatch_pids(UNIT(s));
1782
1783 service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), s->timeout_stop_usec));
1784
1785 /* The service told us it's stopping, so it's as if we SIGTERM'd it. */
1786 service_set_state(s, SERVICE_STOP_SIGTERM);
1787 }
1788
1789 static void service_enter_stop(Service *s, ServiceResult f) {
1790 int r;
1791
1792 assert(s);
1793
1794 if (s->result == SERVICE_SUCCESS)
1795 s->result = f;
1796
1797 service_unwatch_control_pid(s);
1798 (void) unit_enqueue_rewatch_pids(UNIT(s));
1799
1800 s->control_command = s->exec_command[SERVICE_EXEC_STOP];
1801 if (s->control_command) {
1802 s->control_command_id = SERVICE_EXEC_STOP;
1803
1804 r = service_spawn(s,
1805 s->control_command,
1806 s->timeout_stop_usec,
1807 EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_IS_CONTROL|EXEC_SETENV_RESULT,
1808 &s->control_pid);
1809 if (r < 0)
1810 goto fail;
1811
1812 service_set_state(s, SERVICE_STOP);
1813 } else
1814 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_SUCCESS);
1815
1816 return;
1817
1818 fail:
1819 log_unit_warning_errno(UNIT(s), r, "Failed to run 'stop' task: %m");
1820 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_RESOURCES);
1821 }
1822
1823 static bool service_good(Service *s) {
1824 int main_pid_ok;
1825 assert(s);
1826
1827 if (s->type == SERVICE_DBUS && !s->bus_name_good)
1828 return false;
1829
1830 main_pid_ok = main_pid_good(s);
1831 if (main_pid_ok > 0) /* It's alive */
1832 return true;
1833 if (main_pid_ok == 0) /* It's dead */
1834 return false;
1835
1836 /* OK, we don't know anything about the main PID, maybe
1837 * because there is none. Let's check the control group
1838 * instead. */
1839
1840 return cgroup_good(s) != 0;
1841 }
1842
1843 static void service_enter_running(Service *s, ServiceResult f) {
1844 assert(s);
1845
1846 if (s->result == SERVICE_SUCCESS)
1847 s->result = f;
1848
1849 service_unwatch_control_pid(s);
1850
1851 if (s->result != SERVICE_SUCCESS)
1852 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
1853 else if (service_good(s)) {
1854
1855 /* If there are any queued up sd_notify() notifications, process them now */
1856 if (s->notify_state == NOTIFY_RELOADING)
1857 service_enter_reload_by_notify(s);
1858 else if (s->notify_state == NOTIFY_STOPPING)
1859 service_enter_stop_by_notify(s);
1860 else {
1861 service_set_state(s, SERVICE_RUNNING);
1862 service_arm_timer(s, usec_add(UNIT(s)->active_enter_timestamp.monotonic, s->runtime_max_usec));
1863 }
1864
1865 } else if (s->remain_after_exit)
1866 service_set_state(s, SERVICE_EXITED);
1867 else
1868 service_enter_stop(s, SERVICE_SUCCESS);
1869 }
1870
1871 static void service_enter_start_post(Service *s) {
1872 int r;
1873 assert(s);
1874
1875 service_unwatch_control_pid(s);
1876 service_reset_watchdog(s);
1877
1878 s->control_command = s->exec_command[SERVICE_EXEC_START_POST];
1879 if (s->control_command) {
1880 s->control_command_id = SERVICE_EXEC_START_POST;
1881
1882 r = service_spawn(s,
1883 s->control_command,
1884 s->timeout_start_usec,
1885 EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_IS_CONTROL,
1886 &s->control_pid);
1887 if (r < 0)
1888 goto fail;
1889
1890 service_set_state(s, SERVICE_START_POST);
1891 } else
1892 service_enter_running(s, SERVICE_SUCCESS);
1893
1894 return;
1895
1896 fail:
1897 log_unit_warning_errno(UNIT(s), r, "Failed to run 'start-post' task: %m");
1898 service_enter_stop(s, SERVICE_FAILURE_RESOURCES);
1899 }
1900
1901 static void service_kill_control_process(Service *s) {
1902 int r;
1903
1904 assert(s);
1905
1906 if (s->control_pid <= 0)
1907 return;
1908
1909 r = kill_and_sigcont(s->control_pid, SIGKILL);
1910 if (r < 0) {
1911 _cleanup_free_ char *comm = NULL;
1912
1913 (void) get_process_comm(s->control_pid, &comm);
1914
1915 log_unit_debug_errno(UNIT(s), r, "Failed to kill control process " PID_FMT " (%s), ignoring: %m",
1916 s->control_pid, strna(comm));
1917 }
1918 }
1919
1920 static void service_enter_start(Service *s) {
1921 ExecCommand *c;
1922 usec_t timeout;
1923 pid_t pid;
1924 int r;
1925
1926 assert(s);
1927
1928 service_unwatch_control_pid(s);
1929 service_unwatch_main_pid(s);
1930
1931 unit_warn_leftover_processes(UNIT(s));
1932
1933 if (s->type == SERVICE_FORKING) {
1934 s->control_command_id = SERVICE_EXEC_START;
1935 c = s->control_command = s->exec_command[SERVICE_EXEC_START];
1936
1937 s->main_command = NULL;
1938 } else {
1939 s->control_command_id = _SERVICE_EXEC_COMMAND_INVALID;
1940 s->control_command = NULL;
1941
1942 c = s->main_command = s->exec_command[SERVICE_EXEC_START];
1943 }
1944
1945 if (!c) {
1946 if (s->type != SERVICE_ONESHOT) {
1947 /* There's no command line configured for the main command? Hmm, that is strange. This can only
1948 * happen if the configuration changes at runtime. In this case, let's enter a failure
1949 * state. */
1950 log_unit_error(UNIT(s), "There's no 'start' task anymore we could start: %m");
1951 r = -ENXIO;
1952 goto fail;
1953 }
1954
1955 service_enter_start_post(s);
1956 return;
1957 }
1958
1959 if (IN_SET(s->type, SERVICE_SIMPLE, SERVICE_IDLE))
1960 /* For simple + idle this is the main process. We don't apply any timeout here, but
1961 * service_enter_running() will later apply the .runtime_max_usec timeout. */
1962 timeout = USEC_INFINITY;
1963 else
1964 timeout = s->timeout_start_usec;
1965
1966 r = service_spawn(s,
1967 c,
1968 timeout,
1969 EXEC_PASS_FDS|EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_APPLY_TTY_STDIN|EXEC_SET_WATCHDOG,
1970 &pid);
1971 if (r < 0)
1972 goto fail;
1973
1974 if (IN_SET(s->type, SERVICE_SIMPLE, SERVICE_IDLE)) {
1975 /* For simple services we immediately start
1976 * the START_POST binaries. */
1977
1978 service_set_main_pid(s, pid);
1979 service_enter_start_post(s);
1980
1981 } else if (s->type == SERVICE_FORKING) {
1982
1983 /* For forking services we wait until the start
1984 * process exited. */
1985
1986 s->control_pid = pid;
1987 service_set_state(s, SERVICE_START);
1988
1989 } else if (IN_SET(s->type, SERVICE_ONESHOT, SERVICE_DBUS, SERVICE_NOTIFY)) {
1990
1991 /* For oneshot services we wait until the start
1992 * process exited, too, but it is our main process. */
1993
1994 /* For D-Bus services we know the main pid right away,
1995 * but wait for the bus name to appear on the
1996 * bus. Notify services are similar. */
1997
1998 service_set_main_pid(s, pid);
1999 service_set_state(s, SERVICE_START);
2000 } else
2001 assert_not_reached("Unknown service type");
2002
2003 return;
2004
2005 fail:
2006 log_unit_warning_errno(UNIT(s), r, "Failed to run 'start' task: %m");
2007 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_RESOURCES);
2008 }
2009
2010 static void service_enter_start_pre(Service *s) {
2011 int r;
2012
2013 assert(s);
2014
2015 service_unwatch_control_pid(s);
2016
2017 s->control_command = s->exec_command[SERVICE_EXEC_START_PRE];
2018 if (s->control_command) {
2019
2020 unit_warn_leftover_processes(UNIT(s));
2021
2022 s->control_command_id = SERVICE_EXEC_START_PRE;
2023
2024 r = service_spawn(s,
2025 s->control_command,
2026 s->timeout_start_usec,
2027 EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_IS_CONTROL|EXEC_APPLY_TTY_STDIN,
2028 &s->control_pid);
2029 if (r < 0)
2030 goto fail;
2031
2032 service_set_state(s, SERVICE_START_PRE);
2033 } else
2034 service_enter_start(s);
2035
2036 return;
2037
2038 fail:
2039 log_unit_warning_errno(UNIT(s), r, "Failed to run 'start-pre' task: %m");
2040 service_enter_dead(s, SERVICE_FAILURE_RESOURCES, true);
2041 }
2042
2043 static void service_enter_restart(Service *s) {
2044 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2045 int r;
2046
2047 assert(s);
2048
2049 if (UNIT(s)->job && UNIT(s)->job->type == JOB_STOP) {
2050 /* Don't restart things if we are going down anyway */
2051 log_unit_info(UNIT(s), "Stop job pending for unit, delaying automatic restart.");
2052
2053 r = service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), s->restart_usec));
2054 if (r < 0)
2055 goto fail;
2056
2057 return;
2058 }
2059
2060 /* Any units that are bound to this service must also be
2061 * restarted. We use JOB_RESTART (instead of the more obvious
2062 * JOB_START) here so that those dependency jobs will be added
2063 * as well. */
2064 r = manager_add_job(UNIT(s)->manager, JOB_RESTART, UNIT(s), JOB_FAIL, &error, NULL);
2065 if (r < 0)
2066 goto fail;
2067
2068 /* Count the jobs we enqueue for restarting. This counter is maintained as long as the unit isn't fully
2069 * stopped, i.e. as long as it remains up or remains in auto-start states. The use can reset the counter
2070 * explicitly however via the usual "systemctl reset-failure" logic. */
2071 s->n_restarts ++;
2072 s->flush_n_restarts = false;
2073
2074 log_struct(LOG_INFO,
2075 "MESSAGE_ID=" SD_MESSAGE_UNIT_RESTART_SCHEDULED_STR,
2076 LOG_UNIT_ID(UNIT(s)),
2077 LOG_UNIT_INVOCATION_ID(UNIT(s)),
2078 LOG_UNIT_MESSAGE(UNIT(s), "Scheduled restart job, restart counter is at %u.", s->n_restarts),
2079 "N_RESTARTS=%u", s->n_restarts);
2080
2081 /* Notify clients about changed restart counter */
2082 unit_add_to_dbus_queue(UNIT(s));
2083
2084 /* Note that we stay in the SERVICE_AUTO_RESTART state here,
2085 * it will be canceled as part of the service_stop() call that
2086 * is executed as part of JOB_RESTART. */
2087
2088 return;
2089
2090 fail:
2091 log_unit_warning(UNIT(s), "Failed to schedule restart job: %s", bus_error_message(&error, -r));
2092 service_enter_dead(s, SERVICE_FAILURE_RESOURCES, false);
2093 }
2094
2095 static void service_enter_reload_by_notify(Service *s) {
2096 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2097 int r;
2098
2099 assert(s);
2100
2101 service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), s->timeout_start_usec));
2102 service_set_state(s, SERVICE_RELOAD);
2103
2104 /* service_enter_reload_by_notify is never called during a reload, thus no loops are possible. */
2105 r = manager_propagate_reload(UNIT(s)->manager, UNIT(s), JOB_FAIL, &error);
2106 if (r < 0)
2107 log_unit_warning(UNIT(s), "Failed to schedule propagation of reload: %s", bus_error_message(&error, -r));
2108 }
2109
2110 static void service_enter_reload(Service *s) {
2111 int r;
2112
2113 assert(s);
2114
2115 service_unwatch_control_pid(s);
2116 s->reload_result = SERVICE_SUCCESS;
2117
2118 s->control_command = s->exec_command[SERVICE_EXEC_RELOAD];
2119 if (s->control_command) {
2120 s->control_command_id = SERVICE_EXEC_RELOAD;
2121
2122 r = service_spawn(s,
2123 s->control_command,
2124 s->timeout_start_usec,
2125 EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_IS_CONTROL,
2126 &s->control_pid);
2127 if (r < 0)
2128 goto fail;
2129
2130 service_set_state(s, SERVICE_RELOAD);
2131 } else
2132 service_enter_running(s, SERVICE_SUCCESS);
2133
2134 return;
2135
2136 fail:
2137 log_unit_warning_errno(UNIT(s), r, "Failed to run 'reload' task: %m");
2138 s->reload_result = SERVICE_FAILURE_RESOURCES;
2139 service_enter_running(s, SERVICE_SUCCESS);
2140 }
2141
2142 static void service_run_next_control(Service *s) {
2143 usec_t timeout;
2144 int r;
2145
2146 assert(s);
2147 assert(s->control_command);
2148 assert(s->control_command->command_next);
2149
2150 assert(s->control_command_id != SERVICE_EXEC_START);
2151
2152 s->control_command = s->control_command->command_next;
2153 service_unwatch_control_pid(s);
2154
2155 if (IN_SET(s->state, SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST, SERVICE_RUNNING, SERVICE_RELOAD))
2156 timeout = s->timeout_start_usec;
2157 else
2158 timeout = s->timeout_stop_usec;
2159
2160 r = service_spawn(s,
2161 s->control_command,
2162 timeout,
2163 EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_IS_CONTROL|
2164 (IN_SET(s->control_command_id, SERVICE_EXEC_START_PRE, SERVICE_EXEC_STOP_POST) ? EXEC_APPLY_TTY_STDIN : 0)|
2165 (IN_SET(s->control_command_id, SERVICE_EXEC_STOP, SERVICE_EXEC_STOP_POST) ? EXEC_SETENV_RESULT : 0),
2166 &s->control_pid);
2167 if (r < 0)
2168 goto fail;
2169
2170 return;
2171
2172 fail:
2173 log_unit_warning_errno(UNIT(s), r, "Failed to run next control task: %m");
2174
2175 if (IN_SET(s->state, SERVICE_START_PRE, SERVICE_START_POST, SERVICE_STOP))
2176 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_RESOURCES);
2177 else if (s->state == SERVICE_STOP_POST)
2178 service_enter_dead(s, SERVICE_FAILURE_RESOURCES, true);
2179 else if (s->state == SERVICE_RELOAD) {
2180 s->reload_result = SERVICE_FAILURE_RESOURCES;
2181 service_enter_running(s, SERVICE_SUCCESS);
2182 } else
2183 service_enter_stop(s, SERVICE_FAILURE_RESOURCES);
2184 }
2185
2186 static void service_run_next_main(Service *s) {
2187 pid_t pid;
2188 int r;
2189
2190 assert(s);
2191 assert(s->main_command);
2192 assert(s->main_command->command_next);
2193 assert(s->type == SERVICE_ONESHOT);
2194
2195 s->main_command = s->main_command->command_next;
2196 service_unwatch_main_pid(s);
2197
2198 r = service_spawn(s,
2199 s->main_command,
2200 s->timeout_start_usec,
2201 EXEC_PASS_FDS|EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_APPLY_TTY_STDIN|EXEC_SET_WATCHDOG,
2202 &pid);
2203 if (r < 0)
2204 goto fail;
2205
2206 service_set_main_pid(s, pid);
2207
2208 return;
2209
2210 fail:
2211 log_unit_warning_errno(UNIT(s), r, "Failed to run next main task: %m");
2212 service_enter_stop(s, SERVICE_FAILURE_RESOURCES);
2213 }
2214
2215 static int service_start(Unit *u) {
2216 Service *s = SERVICE(u);
2217 int r;
2218
2219 assert(s);
2220
2221 /* We cannot fulfill this request right now, try again later
2222 * please! */
2223 if (IN_SET(s->state,
2224 SERVICE_STOP, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
2225 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL))
2226 return -EAGAIN;
2227
2228 /* Already on it! */
2229 if (IN_SET(s->state, SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST))
2230 return 0;
2231
2232 /* A service that will be restarted must be stopped first to
2233 * trigger BindsTo and/or OnFailure dependencies. If a user
2234 * does not want to wait for the holdoff time to elapse, the
2235 * service should be manually restarted, not started. We
2236 * simply return EAGAIN here, so that any start jobs stay
2237 * queued, and assume that the auto restart timer will
2238 * eventually trigger the restart. */
2239 if (s->state == SERVICE_AUTO_RESTART)
2240 return -EAGAIN;
2241
2242 assert(IN_SET(s->state, SERVICE_DEAD, SERVICE_FAILED));
2243
2244 /* Make sure we don't enter a busy loop of some kind. */
2245 r = unit_start_limit_test(u);
2246 if (r < 0) {
2247 service_enter_dead(s, SERVICE_FAILURE_START_LIMIT_HIT, false);
2248 return r;
2249 }
2250
2251 r = unit_acquire_invocation_id(u);
2252 if (r < 0)
2253 return r;
2254
2255 s->result = SERVICE_SUCCESS;
2256 s->reload_result = SERVICE_SUCCESS;
2257 s->main_pid_known = false;
2258 s->main_pid_alien = false;
2259 s->forbid_restart = false;
2260
2261 u->reset_accounting = true;
2262
2263 s->status_text = mfree(s->status_text);
2264 s->status_errno = 0;
2265
2266 s->notify_state = NOTIFY_UNKNOWN;
2267
2268 s->watchdog_override_enable = false;
2269 s->watchdog_override_usec = 0;
2270
2271 /* This is not an automatic restart? Flush the restart counter then */
2272 if (s->flush_n_restarts) {
2273 s->n_restarts = 0;
2274 s->flush_n_restarts = false;
2275 }
2276
2277 service_enter_start_pre(s);
2278 return 1;
2279 }
2280
2281 static int service_stop(Unit *u) {
2282 Service *s = SERVICE(u);
2283
2284 assert(s);
2285
2286 /* Don't create restart jobs from manual stops. */
2287 s->forbid_restart = true;
2288
2289 /* Already on it */
2290 if (IN_SET(s->state,
2291 SERVICE_STOP, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
2292 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL))
2293 return 0;
2294
2295 /* A restart will be scheduled or is in progress. */
2296 if (s->state == SERVICE_AUTO_RESTART) {
2297 service_set_state(s, SERVICE_DEAD);
2298 return 0;
2299 }
2300
2301 /* If there's already something running we go directly into
2302 * kill mode. */
2303 if (IN_SET(s->state, SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST, SERVICE_RELOAD)) {
2304 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_SUCCESS);
2305 return 0;
2306 }
2307
2308 assert(IN_SET(s->state, SERVICE_RUNNING, SERVICE_EXITED));
2309
2310 service_enter_stop(s, SERVICE_SUCCESS);
2311 return 1;
2312 }
2313
2314 static int service_reload(Unit *u) {
2315 Service *s = SERVICE(u);
2316
2317 assert(s);
2318
2319 assert(IN_SET(s->state, SERVICE_RUNNING, SERVICE_EXITED));
2320
2321 service_enter_reload(s);
2322 return 1;
2323 }
2324
2325 _pure_ static bool service_can_reload(Unit *u) {
2326 Service *s = SERVICE(u);
2327
2328 assert(s);
2329
2330 return !!s->exec_command[SERVICE_EXEC_RELOAD];
2331 }
2332
2333 static unsigned service_exec_command_index(Unit *u, ServiceExecCommand id, ExecCommand *current) {
2334 Service *s = SERVICE(u);
2335 unsigned idx = 0;
2336 ExecCommand *first, *c;
2337
2338 assert(s);
2339
2340 first = s->exec_command[id];
2341
2342 /* Figure out where we are in the list by walking back to the beginning */
2343 for (c = current; c != first; c = c->command_prev)
2344 idx++;
2345
2346 return idx;
2347 }
2348
2349 static int service_serialize_exec_command(Unit *u, FILE *f, ExecCommand *command) {
2350 Service *s = SERVICE(u);
2351 ServiceExecCommand id;
2352 unsigned idx;
2353 const char *type;
2354 char **arg;
2355 _cleanup_free_ char *args = NULL, *p = NULL;
2356 size_t allocated = 0, length = 0;
2357
2358 assert(s);
2359 assert(f);
2360
2361 if (!command)
2362 return 0;
2363
2364 if (command == s->control_command) {
2365 type = "control";
2366 id = s->control_command_id;
2367 } else {
2368 type = "main";
2369 id = SERVICE_EXEC_START;
2370 }
2371
2372 idx = service_exec_command_index(u, id, command);
2373
2374 STRV_FOREACH(arg, command->argv) {
2375 size_t n;
2376 _cleanup_free_ char *e = NULL;
2377
2378 e = xescape(*arg, WHITESPACE);
2379 if (!e)
2380 return -ENOMEM;
2381
2382 n = strlen(e);
2383 if (!GREEDY_REALLOC(args, allocated, length + 1 + n + 1))
2384 return -ENOMEM;
2385
2386 if (length > 0)
2387 args[length++] = ' ';
2388
2389 memcpy(args + length, e, n);
2390 length += n;
2391 }
2392
2393 if (!GREEDY_REALLOC(args, allocated, length + 1))
2394 return -ENOMEM;
2395 args[length++] = 0;
2396
2397 p = xescape(command->path, WHITESPACE);
2398 if (!p)
2399 return -ENOMEM;
2400
2401 fprintf(f, "%s-command=%s %u %s %s\n", type, service_exec_command_to_string(id), idx, p, args);
2402
2403 return 0;
2404 }
2405
2406 static int service_serialize(Unit *u, FILE *f, FDSet *fds) {
2407 Service *s = SERVICE(u);
2408 ServiceFDStore *fs;
2409 int r;
2410
2411 assert(u);
2412 assert(f);
2413 assert(fds);
2414
2415 unit_serialize_item(u, f, "state", service_state_to_string(s->state));
2416 unit_serialize_item(u, f, "result", service_result_to_string(s->result));
2417 unit_serialize_item(u, f, "reload-result", service_result_to_string(s->reload_result));
2418
2419 if (s->control_pid > 0)
2420 unit_serialize_item_format(u, f, "control-pid", PID_FMT, s->control_pid);
2421
2422 if (s->main_pid_known && s->main_pid > 0)
2423 unit_serialize_item_format(u, f, "main-pid", PID_FMT, s->main_pid);
2424
2425 unit_serialize_item(u, f, "main-pid-known", yes_no(s->main_pid_known));
2426 unit_serialize_item(u, f, "bus-name-good", yes_no(s->bus_name_good));
2427 unit_serialize_item(u, f, "bus-name-owner", s->bus_name_owner);
2428
2429 unit_serialize_item_format(u, f, "n-restarts", "%u", s->n_restarts);
2430 unit_serialize_item(u, f, "flush-n-restarts", yes_no(s->flush_n_restarts));
2431
2432 r = unit_serialize_item_escaped(u, f, "status-text", s->status_text);
2433 if (r < 0)
2434 return r;
2435
2436 service_serialize_exec_command(u, f, s->control_command);
2437 service_serialize_exec_command(u, f, s->main_command);
2438
2439 r = unit_serialize_item_fd(u, f, fds, "stdin-fd", s->stdin_fd);
2440 if (r < 0)
2441 return r;
2442 r = unit_serialize_item_fd(u, f, fds, "stdout-fd", s->stdout_fd);
2443 if (r < 0)
2444 return r;
2445 r = unit_serialize_item_fd(u, f, fds, "stderr-fd", s->stderr_fd);
2446 if (r < 0)
2447 return r;
2448
2449 if (UNIT_ISSET(s->accept_socket)) {
2450 r = unit_serialize_item(u, f, "accept-socket", UNIT_DEREF(s->accept_socket)->id);
2451 if (r < 0)
2452 return r;
2453 }
2454
2455 r = unit_serialize_item_fd(u, f, fds, "socket-fd", s->socket_fd);
2456 if (r < 0)
2457 return r;
2458
2459 LIST_FOREACH(fd_store, fs, s->fd_store) {
2460 _cleanup_free_ char *c = NULL;
2461 int copy;
2462
2463 copy = fdset_put_dup(fds, fs->fd);
2464 if (copy < 0)
2465 return copy;
2466
2467 c = cescape(fs->fdname);
2468
2469 unit_serialize_item_format(u, f, "fd-store-fd", "%i %s", copy, strempty(c));
2470 }
2471
2472 if (s->main_exec_status.pid > 0) {
2473 unit_serialize_item_format(u, f, "main-exec-status-pid", PID_FMT, s->main_exec_status.pid);
2474 dual_timestamp_serialize(f, "main-exec-status-start", &s->main_exec_status.start_timestamp);
2475 dual_timestamp_serialize(f, "main-exec-status-exit", &s->main_exec_status.exit_timestamp);
2476
2477 if (dual_timestamp_is_set(&s->main_exec_status.exit_timestamp)) {
2478 unit_serialize_item_format(u, f, "main-exec-status-code", "%i", s->main_exec_status.code);
2479 unit_serialize_item_format(u, f, "main-exec-status-status", "%i", s->main_exec_status.status);
2480 }
2481 }
2482
2483 dual_timestamp_serialize(f, "watchdog-timestamp", &s->watchdog_timestamp);
2484
2485 unit_serialize_item(u, f, "forbid-restart", yes_no(s->forbid_restart));
2486
2487 if (s->watchdog_override_enable)
2488 unit_serialize_item_format(u, f, "watchdog-override-usec", USEC_FMT, s->watchdog_override_usec);
2489
2490 return 0;
2491 }
2492
2493 static int service_deserialize_exec_command(Unit *u, const char *key, const char *value) {
2494 Service *s = SERVICE(u);
2495 int r;
2496 unsigned idx = 0, i;
2497 bool control, found = false;
2498 ServiceExecCommand id = _SERVICE_EXEC_COMMAND_INVALID;
2499 ExecCommand *command = NULL;
2500 _cleanup_free_ char *path = NULL;
2501 _cleanup_strv_free_ char **argv = NULL;
2502
2503 enum ExecCommandState {
2504 STATE_EXEC_COMMAND_TYPE,
2505 STATE_EXEC_COMMAND_INDEX,
2506 STATE_EXEC_COMMAND_PATH,
2507 STATE_EXEC_COMMAND_ARGS,
2508 _STATE_EXEC_COMMAND_MAX,
2509 _STATE_EXEC_COMMAND_INVALID = -1,
2510 } state;
2511
2512 assert(s);
2513 assert(key);
2514 assert(value);
2515
2516 control = streq(key, "control-command");
2517
2518 state = STATE_EXEC_COMMAND_TYPE;
2519
2520 for (;;) {
2521 _cleanup_free_ char *arg = NULL;
2522
2523 r = extract_first_word(&value, &arg, NULL, EXTRACT_CUNESCAPE);
2524 if (r == 0)
2525 break;
2526 else if (r < 0)
2527 return r;
2528
2529 switch (state) {
2530 case STATE_EXEC_COMMAND_TYPE:
2531 id = service_exec_command_from_string(arg);
2532 if (id < 0)
2533 return -EINVAL;
2534
2535 state = STATE_EXEC_COMMAND_INDEX;
2536 break;
2537 case STATE_EXEC_COMMAND_INDEX:
2538 r = safe_atou(arg, &idx);
2539 if (r < 0)
2540 return -EINVAL;
2541
2542 state = STATE_EXEC_COMMAND_PATH;
2543 break;
2544 case STATE_EXEC_COMMAND_PATH:
2545 path = TAKE_PTR(arg);
2546 state = STATE_EXEC_COMMAND_ARGS;
2547
2548 if (!path_is_absolute(path))
2549 return -EINVAL;
2550 break;
2551 case STATE_EXEC_COMMAND_ARGS:
2552 r = strv_extend(&argv, arg);
2553 if (r < 0)
2554 return -ENOMEM;
2555 break;
2556 default:
2557 assert_not_reached("Unknown error at deserialization of exec command");
2558 break;
2559 }
2560 }
2561
2562 if (state != STATE_EXEC_COMMAND_ARGS)
2563 return -EINVAL;
2564
2565 /* Let's check whether exec command on given offset matches data that we just deserialized */
2566 for (command = s->exec_command[id], i = 0; command; command = command->command_next, i++) {
2567 if (i != idx)
2568 continue;
2569
2570 found = strv_equal(argv, command->argv) && streq(command->path, path);
2571 break;
2572 }
2573
2574 if (!found) {
2575 /* Command at the index we serialized is different, let's look for command that exactly
2576 * matches but is on different index. If there is no such command we will not resume execution. */
2577 for (command = s->exec_command[id]; command; command = command->command_next)
2578 if (strv_equal(command->argv, argv) && streq(command->path, path))
2579 break;
2580 }
2581
2582 if (command && control)
2583 s->control_command = command;
2584 else if (command)
2585 s->main_command = command;
2586 else
2587 log_unit_warning(u, "Current command vanished from the unit file, execution of the command list won't be resumed.");
2588
2589 return 0;
2590 }
2591
2592 static int service_deserialize_item(Unit *u, const char *key, const char *value, FDSet *fds) {
2593 Service *s = SERVICE(u);
2594 int r;
2595
2596 assert(u);
2597 assert(key);
2598 assert(value);
2599 assert(fds);
2600
2601 if (streq(key, "state")) {
2602 ServiceState state;
2603
2604 state = service_state_from_string(value);
2605 if (state < 0)
2606 log_unit_debug(u, "Failed to parse state value: %s", value);
2607 else
2608 s->deserialized_state = state;
2609 } else if (streq(key, "result")) {
2610 ServiceResult f;
2611
2612 f = service_result_from_string(value);
2613 if (f < 0)
2614 log_unit_debug(u, "Failed to parse result value: %s", value);
2615 else if (f != SERVICE_SUCCESS)
2616 s->result = f;
2617
2618 } else if (streq(key, "reload-result")) {
2619 ServiceResult f;
2620
2621 f = service_result_from_string(value);
2622 if (f < 0)
2623 log_unit_debug(u, "Failed to parse reload result value: %s", value);
2624 else if (f != SERVICE_SUCCESS)
2625 s->reload_result = f;
2626
2627 } else if (streq(key, "control-pid")) {
2628 pid_t pid;
2629
2630 if (parse_pid(value, &pid) < 0)
2631 log_unit_debug(u, "Failed to parse control-pid value: %s", value);
2632 else
2633 s->control_pid = pid;
2634 } else if (streq(key, "main-pid")) {
2635 pid_t pid;
2636
2637 if (parse_pid(value, &pid) < 0)
2638 log_unit_debug(u, "Failed to parse main-pid value: %s", value);
2639 else
2640 (void) service_set_main_pid(s, pid);
2641 } else if (streq(key, "main-pid-known")) {
2642 int b;
2643
2644 b = parse_boolean(value);
2645 if (b < 0)
2646 log_unit_debug(u, "Failed to parse main-pid-known value: %s", value);
2647 else
2648 s->main_pid_known = b;
2649 } else if (streq(key, "bus-name-good")) {
2650 int b;
2651
2652 b = parse_boolean(value);
2653 if (b < 0)
2654 log_unit_debug(u, "Failed to parse bus-name-good value: %s", value);
2655 else
2656 s->bus_name_good = b;
2657 } else if (streq(key, "bus-name-owner")) {
2658 r = free_and_strdup(&s->bus_name_owner, value);
2659 if (r < 0)
2660 log_unit_error_errno(u, r, "Unable to deserialize current bus owner %s: %m", value);
2661 } else if (streq(key, "status-text")) {
2662 char *t;
2663
2664 r = cunescape(value, 0, &t);
2665 if (r < 0)
2666 log_unit_debug_errno(u, r, "Failed to unescape status text: %s", value);
2667 else {
2668 free(s->status_text);
2669 s->status_text = t;
2670 }
2671
2672 } else if (streq(key, "accept-socket")) {
2673 Unit *socket;
2674
2675 r = manager_load_unit(u->manager, value, NULL, NULL, &socket);
2676 if (r < 0)
2677 log_unit_debug_errno(u, r, "Failed to load accept-socket unit: %s", value);
2678 else {
2679 unit_ref_set(&s->accept_socket, u, socket);
2680 SOCKET(socket)->n_connections++;
2681 }
2682
2683 } else if (streq(key, "socket-fd")) {
2684 int fd;
2685
2686 if (safe_atoi(value, &fd) < 0 || fd < 0 || !fdset_contains(fds, fd))
2687 log_unit_debug(u, "Failed to parse socket-fd value: %s", value);
2688 else {
2689 asynchronous_close(s->socket_fd);
2690 s->socket_fd = fdset_remove(fds, fd);
2691 }
2692 } else if (streq(key, "fd-store-fd")) {
2693 const char *fdv;
2694 size_t pf;
2695 int fd;
2696
2697 pf = strcspn(value, WHITESPACE);
2698 fdv = strndupa(value, pf);
2699
2700 if (safe_atoi(fdv, &fd) < 0 || fd < 0 || !fdset_contains(fds, fd))
2701 log_unit_debug(u, "Failed to parse fd-store-fd value: %s", value);
2702 else {
2703 _cleanup_free_ char *t = NULL;
2704 const char *fdn;
2705
2706 fdn = value + pf;
2707 fdn += strspn(fdn, WHITESPACE);
2708 (void) cunescape(fdn, 0, &t);
2709
2710 r = service_add_fd_store(s, fd, t);
2711 if (r < 0)
2712 log_unit_error_errno(u, r, "Failed to add fd to store: %m");
2713 else
2714 fdset_remove(fds, fd);
2715 }
2716
2717 } else if (streq(key, "main-exec-status-pid")) {
2718 pid_t pid;
2719
2720 if (parse_pid(value, &pid) < 0)
2721 log_unit_debug(u, "Failed to parse main-exec-status-pid value: %s", value);
2722 else
2723 s->main_exec_status.pid = pid;
2724 } else if (streq(key, "main-exec-status-code")) {
2725 int i;
2726
2727 if (safe_atoi(value, &i) < 0)
2728 log_unit_debug(u, "Failed to parse main-exec-status-code value: %s", value);
2729 else
2730 s->main_exec_status.code = i;
2731 } else if (streq(key, "main-exec-status-status")) {
2732 int i;
2733
2734 if (safe_atoi(value, &i) < 0)
2735 log_unit_debug(u, "Failed to parse main-exec-status-status value: %s", value);
2736 else
2737 s->main_exec_status.status = i;
2738 } else if (streq(key, "main-exec-status-start"))
2739 dual_timestamp_deserialize(value, &s->main_exec_status.start_timestamp);
2740 else if (streq(key, "main-exec-status-exit"))
2741 dual_timestamp_deserialize(value, &s->main_exec_status.exit_timestamp);
2742 else if (streq(key, "watchdog-timestamp"))
2743 dual_timestamp_deserialize(value, &s->watchdog_timestamp);
2744 else if (streq(key, "forbid-restart")) {
2745 int b;
2746
2747 b = parse_boolean(value);
2748 if (b < 0)
2749 log_unit_debug(u, "Failed to parse forbid-restart value: %s", value);
2750 else
2751 s->forbid_restart = b;
2752 } else if (streq(key, "stdin-fd")) {
2753 int fd;
2754
2755 if (safe_atoi(value, &fd) < 0 || fd < 0 || !fdset_contains(fds, fd))
2756 log_unit_debug(u, "Failed to parse stdin-fd value: %s", value);
2757 else {
2758 asynchronous_close(s->stdin_fd);
2759 s->stdin_fd = fdset_remove(fds, fd);
2760 s->exec_context.stdio_as_fds = true;
2761 }
2762 } else if (streq(key, "stdout-fd")) {
2763 int fd;
2764
2765 if (safe_atoi(value, &fd) < 0 || fd < 0 || !fdset_contains(fds, fd))
2766 log_unit_debug(u, "Failed to parse stdout-fd value: %s", value);
2767 else {
2768 asynchronous_close(s->stdout_fd);
2769 s->stdout_fd = fdset_remove(fds, fd);
2770 s->exec_context.stdio_as_fds = true;
2771 }
2772 } else if (streq(key, "stderr-fd")) {
2773 int fd;
2774
2775 if (safe_atoi(value, &fd) < 0 || fd < 0 || !fdset_contains(fds, fd))
2776 log_unit_debug(u, "Failed to parse stderr-fd value: %s", value);
2777 else {
2778 asynchronous_close(s->stderr_fd);
2779 s->stderr_fd = fdset_remove(fds, fd);
2780 s->exec_context.stdio_as_fds = true;
2781 }
2782 } else if (streq(key, "watchdog-override-usec")) {
2783 usec_t watchdog_override_usec;
2784 if (timestamp_deserialize(value, &watchdog_override_usec) < 0)
2785 log_unit_debug(u, "Failed to parse watchdog_override_usec value: %s", value);
2786 else {
2787 s->watchdog_override_enable = true;
2788 s->watchdog_override_usec = watchdog_override_usec;
2789 }
2790 } else if (STR_IN_SET(key, "main-command", "control-command")) {
2791 r = service_deserialize_exec_command(u, key, value);
2792 if (r < 0)
2793 log_unit_debug_errno(u, r, "Failed to parse serialized command \"%s\": %m", value);
2794
2795 } else if (streq(key, "n-restarts")) {
2796 r = safe_atou(value, &s->n_restarts);
2797 if (r < 0)
2798 log_unit_debug_errno(u, r, "Failed to parse serialized restart counter '%s': %m", value);
2799
2800 } else if (streq(key, "flush-n-restarts")) {
2801 r = parse_boolean(value);
2802 if (r < 0)
2803 log_unit_debug_errno(u, r, "Failed to parse serialized flush restart counter setting '%s': %m", value);
2804 else
2805 s->flush_n_restarts = r;
2806 } else
2807 log_unit_debug(u, "Unknown serialization key: %s", key);
2808
2809 return 0;
2810 }
2811
2812 _pure_ static UnitActiveState service_active_state(Unit *u) {
2813 const UnitActiveState *table;
2814
2815 assert(u);
2816
2817 table = SERVICE(u)->type == SERVICE_IDLE ? state_translation_table_idle : state_translation_table;
2818
2819 return table[SERVICE(u)->state];
2820 }
2821
2822 static const char *service_sub_state_to_string(Unit *u) {
2823 assert(u);
2824
2825 return service_state_to_string(SERVICE(u)->state);
2826 }
2827
2828 static bool service_may_gc(Unit *u) {
2829 Service *s = SERVICE(u);
2830
2831 assert(s);
2832
2833 /* Never clean up services that still have a process around, even if the service is formally dead. Note that
2834 * unit_may_gc() already checked our cgroup for us, we just check our two additional PIDs, too, in case they
2835 * have moved outside of the cgroup. */
2836
2837 if (main_pid_good(s) > 0 ||
2838 control_pid_good(s) > 0)
2839 return false;
2840
2841 return true;
2842 }
2843
2844 static int service_retry_pid_file(Service *s) {
2845 int r;
2846
2847 assert(s->pid_file);
2848 assert(IN_SET(s->state, SERVICE_START, SERVICE_START_POST));
2849
2850 r = service_load_pid_file(s, false);
2851 if (r < 0)
2852 return r;
2853
2854 service_unwatch_pid_file(s);
2855
2856 service_enter_running(s, SERVICE_SUCCESS);
2857 return 0;
2858 }
2859
2860 static int service_watch_pid_file(Service *s) {
2861 int r;
2862
2863 log_unit_debug(UNIT(s), "Setting watch for PID file %s", s->pid_file_pathspec->path);
2864
2865 r = path_spec_watch(s->pid_file_pathspec, service_dispatch_io);
2866 if (r < 0)
2867 goto fail;
2868
2869 /* the pidfile might have appeared just before we set the watch */
2870 log_unit_debug(UNIT(s), "Trying to read PID file %s in case it changed", s->pid_file_pathspec->path);
2871 service_retry_pid_file(s);
2872
2873 return 0;
2874 fail:
2875 log_unit_error_errno(UNIT(s), r, "Failed to set a watch for PID file %s: %m", s->pid_file_pathspec->path);
2876 service_unwatch_pid_file(s);
2877 return r;
2878 }
2879
2880 static int service_demand_pid_file(Service *s) {
2881 PathSpec *ps;
2882
2883 assert(s->pid_file);
2884 assert(!s->pid_file_pathspec);
2885
2886 ps = new0(PathSpec, 1);
2887 if (!ps)
2888 return -ENOMEM;
2889
2890 ps->unit = UNIT(s);
2891 ps->path = strdup(s->pid_file);
2892 if (!ps->path) {
2893 free(ps);
2894 return -ENOMEM;
2895 }
2896
2897 path_simplify(ps->path, false);
2898
2899 /* PATH_CHANGED would not be enough. There are daemons (sendmail) that
2900 * keep their PID file open all the time. */
2901 ps->type = PATH_MODIFIED;
2902 ps->inotify_fd = -1;
2903
2904 s->pid_file_pathspec = ps;
2905
2906 return service_watch_pid_file(s);
2907 }
2908
2909 static int service_dispatch_io(sd_event_source *source, int fd, uint32_t events, void *userdata) {
2910 PathSpec *p = userdata;
2911 Service *s;
2912
2913 assert(p);
2914
2915 s = SERVICE(p->unit);
2916
2917 assert(s);
2918 assert(fd >= 0);
2919 assert(IN_SET(s->state, SERVICE_START, SERVICE_START_POST));
2920 assert(s->pid_file_pathspec);
2921 assert(path_spec_owns_inotify_fd(s->pid_file_pathspec, fd));
2922
2923 log_unit_debug(UNIT(s), "inotify event");
2924
2925 if (path_spec_fd_event(p, events) < 0)
2926 goto fail;
2927
2928 if (service_retry_pid_file(s) == 0)
2929 return 0;
2930
2931 if (service_watch_pid_file(s) < 0)
2932 goto fail;
2933
2934 return 0;
2935
2936 fail:
2937 service_unwatch_pid_file(s);
2938 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_RESOURCES);
2939 return 0;
2940 }
2941
2942 static void service_notify_cgroup_empty_event(Unit *u) {
2943 Service *s = SERVICE(u);
2944
2945 assert(u);
2946
2947 log_unit_debug(u, "cgroup is empty");
2948
2949 switch (s->state) {
2950
2951 /* Waiting for SIGCHLD is usually more interesting,
2952 * because it includes return codes/signals. Which is
2953 * why we ignore the cgroup events for most cases,
2954 * except when we don't know pid which to expect the
2955 * SIGCHLD for. */
2956
2957 case SERVICE_START:
2958 if (s->type == SERVICE_NOTIFY &&
2959 main_pid_good(s) == 0 &&
2960 control_pid_good(s) == 0) {
2961 /* No chance of getting a ready notification anymore */
2962 service_enter_stop_post(s, SERVICE_FAILURE_PROTOCOL);
2963 break;
2964 }
2965
2966 _fallthrough_;
2967 case SERVICE_START_POST:
2968 if (s->pid_file_pathspec &&
2969 main_pid_good(s) == 0 &&
2970 control_pid_good(s) == 0) {
2971
2972 /* Give up hoping for the daemon to write its PID file */
2973 log_unit_warning(u, "Daemon never wrote its PID file. Failing.");
2974
2975 service_unwatch_pid_file(s);
2976 if (s->state == SERVICE_START)
2977 service_enter_stop_post(s, SERVICE_FAILURE_PROTOCOL);
2978 else
2979 service_enter_stop(s, SERVICE_FAILURE_PROTOCOL);
2980 }
2981 break;
2982
2983 case SERVICE_RUNNING:
2984 /* service_enter_running() will figure out what to do */
2985 service_enter_running(s, SERVICE_SUCCESS);
2986 break;
2987
2988 case SERVICE_STOP_SIGABRT:
2989 case SERVICE_STOP_SIGTERM:
2990 case SERVICE_STOP_SIGKILL:
2991
2992 if (main_pid_good(s) <= 0 && control_pid_good(s) <= 0)
2993 service_enter_stop_post(s, SERVICE_SUCCESS);
2994
2995 break;
2996
2997 case SERVICE_STOP_POST:
2998 case SERVICE_FINAL_SIGTERM:
2999 case SERVICE_FINAL_SIGKILL:
3000 if (main_pid_good(s) <= 0 && control_pid_good(s) <= 0)
3001 service_enter_dead(s, SERVICE_SUCCESS, true);
3002
3003 break;
3004
3005 default:
3006 ;
3007 }
3008 }
3009
3010 static void service_sigchld_event(Unit *u, pid_t pid, int code, int status) {
3011 bool notify_dbus = true;
3012 Service *s = SERVICE(u);
3013 ServiceResult f;
3014
3015 assert(s);
3016 assert(pid >= 0);
3017
3018 if (is_clean_exit(code, status, s->type == SERVICE_ONESHOT ? EXIT_CLEAN_COMMAND : EXIT_CLEAN_DAEMON, &s->success_status))
3019 f = SERVICE_SUCCESS;
3020 else if (code == CLD_EXITED)
3021 f = SERVICE_FAILURE_EXIT_CODE;
3022 else if (code == CLD_KILLED)
3023 f = SERVICE_FAILURE_SIGNAL;
3024 else if (code == CLD_DUMPED)
3025 f = SERVICE_FAILURE_CORE_DUMP;
3026 else
3027 assert_not_reached("Unknown code");
3028
3029 if (s->main_pid == pid) {
3030 /* Forking services may occasionally move to a new PID.
3031 * As long as they update the PID file before exiting the old
3032 * PID, they're fine. */
3033 if (service_load_pid_file(s, false) > 0)
3034 return;
3035
3036 s->main_pid = 0;
3037 exec_status_exit(&s->main_exec_status, &s->exec_context, pid, code, status);
3038
3039 if (s->main_command) {
3040 /* If this is not a forking service than the
3041 * main process got started and hence we copy
3042 * the exit status so that it is recorded both
3043 * as main and as control process exit
3044 * status */
3045
3046 s->main_command->exec_status = s->main_exec_status;
3047
3048 if (s->main_command->flags & EXEC_COMMAND_IGNORE_FAILURE)
3049 f = SERVICE_SUCCESS;
3050 } else if (s->exec_command[SERVICE_EXEC_START]) {
3051
3052 /* If this is a forked process, then we should
3053 * ignore the return value if this was
3054 * configured for the starter process */
3055
3056 if (s->exec_command[SERVICE_EXEC_START]->flags & EXEC_COMMAND_IGNORE_FAILURE)
3057 f = SERVICE_SUCCESS;
3058 }
3059
3060 /* When this is a successful exit, let's log about the exit code on DEBUG level. If this is a failure
3061 * and the process exited on its own via exit(), then let's make this a NOTICE, under the assumption
3062 * that the service already logged the reason at a higher log level on its own. However, if the service
3063 * died due to a signal, then it most likely didn't say anything about any reason, hence let's raise
3064 * our log level to WARNING then. */
3065
3066 log_struct(f == SERVICE_SUCCESS ? LOG_DEBUG :
3067 (code == CLD_EXITED ? LOG_NOTICE : LOG_WARNING),
3068 LOG_UNIT_MESSAGE(u, "Main process exited, code=%s, status=%i/%s",
3069 sigchld_code_to_string(code), status,
3070 strna(code == CLD_EXITED
3071 ? exit_status_to_string(status, EXIT_STATUS_FULL)
3072 : signal_to_string(status))),
3073 "EXIT_CODE=%s", sigchld_code_to_string(code),
3074 "EXIT_STATUS=%i", status,
3075 LOG_UNIT_ID(u),
3076 LOG_UNIT_INVOCATION_ID(u));
3077
3078 if (s->result == SERVICE_SUCCESS)
3079 s->result = f;
3080
3081 if (s->main_command &&
3082 s->main_command->command_next &&
3083 s->type == SERVICE_ONESHOT &&
3084 f == SERVICE_SUCCESS) {
3085
3086 /* There is another command to *
3087 * execute, so let's do that. */
3088
3089 log_unit_debug(u, "Running next main command for state %s.", service_state_to_string(s->state));
3090 service_run_next_main(s);
3091
3092 } else {
3093
3094 /* The service exited, so the service is officially
3095 * gone. */
3096 s->main_command = NULL;
3097
3098 switch (s->state) {
3099
3100 case SERVICE_START_POST:
3101 case SERVICE_RELOAD:
3102 case SERVICE_STOP:
3103 /* Need to wait until the operation is
3104 * done */
3105 break;
3106
3107 case SERVICE_START:
3108 if (s->type == SERVICE_ONESHOT) {
3109 /* This was our main goal, so let's go on */
3110 if (f == SERVICE_SUCCESS)
3111 service_enter_start_post(s);
3112 else
3113 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3114 break;
3115 } else if (s->type == SERVICE_NOTIFY) {
3116 /* Only enter running through a notification, so that the
3117 * SERVICE_START state signifies that no ready notification
3118 * has been received */
3119 if (f != SERVICE_SUCCESS)
3120 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3121 else if (!s->remain_after_exit || s->notify_access == NOTIFY_MAIN)
3122 /* The service has never been and will never be active */
3123 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_PROTOCOL);
3124 break;
3125 }
3126
3127 _fallthrough_;
3128 case SERVICE_RUNNING:
3129 service_enter_running(s, f);
3130 break;
3131
3132 case SERVICE_STOP_SIGABRT:
3133 case SERVICE_STOP_SIGTERM:
3134 case SERVICE_STOP_SIGKILL:
3135
3136 if (control_pid_good(s) <= 0)
3137 service_enter_stop_post(s, f);
3138
3139 /* If there is still a control process, wait for that first */
3140 break;
3141
3142 case SERVICE_STOP_POST:
3143 case SERVICE_FINAL_SIGTERM:
3144 case SERVICE_FINAL_SIGKILL:
3145
3146 if (control_pid_good(s) <= 0)
3147 service_enter_dead(s, f, true);
3148 break;
3149
3150 default:
3151 assert_not_reached("Uh, main process died at wrong time.");
3152 }
3153 }
3154
3155 } else if (s->control_pid == pid) {
3156 s->control_pid = 0;
3157
3158 if (s->control_command) {
3159 exec_status_exit(&s->control_command->exec_status, &s->exec_context, pid, code, status);
3160
3161 if (s->control_command->flags & EXEC_COMMAND_IGNORE_FAILURE)
3162 f = SERVICE_SUCCESS;
3163 }
3164
3165 log_unit_full(u, f == SERVICE_SUCCESS ? LOG_DEBUG : LOG_NOTICE, 0,
3166 "Control process exited, code=%s status=%i",
3167 sigchld_code_to_string(code), status);
3168
3169 if (s->result == SERVICE_SUCCESS)
3170 s->result = f;
3171
3172 if (s->control_command &&
3173 s->control_command->command_next &&
3174 f == SERVICE_SUCCESS) {
3175
3176 /* There is another command to *
3177 * execute, so let's do that. */
3178
3179 log_unit_debug(u, "Running next control command for state %s.", service_state_to_string(s->state));
3180 service_run_next_control(s);
3181
3182 } else {
3183 /* No further commands for this step, so let's
3184 * figure out what to do next */
3185
3186 s->control_command = NULL;
3187 s->control_command_id = _SERVICE_EXEC_COMMAND_INVALID;
3188
3189 log_unit_debug(u, "Got final SIGCHLD for state %s.", service_state_to_string(s->state));
3190
3191 switch (s->state) {
3192
3193 case SERVICE_START_PRE:
3194 if (f == SERVICE_SUCCESS)
3195 service_enter_start(s);
3196 else
3197 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3198 break;
3199
3200 case SERVICE_START:
3201 if (s->type != SERVICE_FORKING)
3202 /* Maybe spurious event due to a reload that changed the type? */
3203 break;
3204
3205 if (f != SERVICE_SUCCESS) {
3206 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3207 break;
3208 }
3209
3210 if (s->pid_file) {
3211 bool has_start_post;
3212 int r;
3213
3214 /* Let's try to load the pid file here if we can.
3215 * The PID file might actually be created by a START_POST
3216 * script. In that case don't worry if the loading fails. */
3217
3218 has_start_post = !!s->exec_command[SERVICE_EXEC_START_POST];
3219 r = service_load_pid_file(s, !has_start_post);
3220 if (!has_start_post && r < 0) {
3221 r = service_demand_pid_file(s);
3222 if (r < 0 || cgroup_good(s) == 0)
3223 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_PROTOCOL);
3224 break;
3225 }
3226 } else
3227 service_search_main_pid(s);
3228
3229 service_enter_start_post(s);
3230 break;
3231
3232 case SERVICE_START_POST:
3233 if (f != SERVICE_SUCCESS) {
3234 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3235 break;
3236 }
3237
3238 if (s->pid_file) {
3239 int r;
3240
3241 r = service_load_pid_file(s, true);
3242 if (r < 0) {
3243 r = service_demand_pid_file(s);
3244 if (r < 0 || cgroup_good(s) == 0)
3245 service_enter_stop(s, SERVICE_FAILURE_PROTOCOL);
3246 break;
3247 }
3248 } else
3249 service_search_main_pid(s);
3250
3251 service_enter_running(s, SERVICE_SUCCESS);
3252 break;
3253
3254 case SERVICE_RELOAD:
3255 if (f == SERVICE_SUCCESS)
3256 if (service_load_pid_file(s, true) < 0)
3257 service_search_main_pid(s);
3258
3259 s->reload_result = f;
3260 service_enter_running(s, SERVICE_SUCCESS);
3261 break;
3262
3263 case SERVICE_STOP:
3264 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3265 break;
3266
3267 case SERVICE_STOP_SIGABRT:
3268 case SERVICE_STOP_SIGTERM:
3269 case SERVICE_STOP_SIGKILL:
3270 if (main_pid_good(s) <= 0)
3271 service_enter_stop_post(s, f);
3272
3273 /* If there is still a service
3274 * process around, wait until
3275 * that one quit, too */
3276 break;
3277
3278 case SERVICE_STOP_POST:
3279 case SERVICE_FINAL_SIGTERM:
3280 case SERVICE_FINAL_SIGKILL:
3281 if (main_pid_good(s) <= 0)
3282 service_enter_dead(s, f, true);
3283 break;
3284
3285 default:
3286 assert_not_reached("Uh, control process died at wrong time.");
3287 }
3288 }
3289 } else /* Neither control nor main PID? If so, don't notify about anything */
3290 notify_dbus = false;
3291
3292 /* Notify clients about changed exit status */
3293 if (notify_dbus)
3294 unit_add_to_dbus_queue(u);
3295
3296 /* If we get a SIGCHLD event for one of the processes we were interested in, then we look for others to watch,
3297 * under the assumption that we'll sooner or later get a SIGCHLD for them, as the original process we watched
3298 * was probably the parent of them, and they are hence now our children. */
3299 (void) unit_enqueue_rewatch_pids(u);
3300 }
3301
3302 static int service_dispatch_timer(sd_event_source *source, usec_t usec, void *userdata) {
3303 Service *s = SERVICE(userdata);
3304
3305 assert(s);
3306 assert(source == s->timer_event_source);
3307
3308 switch (s->state) {
3309
3310 case SERVICE_START_PRE:
3311 case SERVICE_START:
3312 log_unit_warning(UNIT(s), "%s operation timed out. Terminating.", s->state == SERVICE_START ? "Start" : "Start-pre");
3313 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_TIMEOUT);
3314 break;
3315
3316 case SERVICE_START_POST:
3317 log_unit_warning(UNIT(s), "Start-post operation timed out. Stopping.");
3318 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_TIMEOUT);
3319 break;
3320
3321 case SERVICE_RUNNING:
3322 log_unit_warning(UNIT(s), "Service reached runtime time limit. Stopping.");
3323 service_enter_stop(s, SERVICE_FAILURE_TIMEOUT);
3324 break;
3325
3326 case SERVICE_RELOAD:
3327 log_unit_warning(UNIT(s), "Reload operation timed out. Killing reload process.");
3328 service_kill_control_process(s);
3329 s->reload_result = SERVICE_FAILURE_TIMEOUT;
3330 service_enter_running(s, SERVICE_SUCCESS);
3331 break;
3332
3333 case SERVICE_STOP:
3334 log_unit_warning(UNIT(s), "Stopping timed out. Terminating.");
3335 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_TIMEOUT);
3336 break;
3337
3338 case SERVICE_STOP_SIGABRT:
3339 log_unit_warning(UNIT(s), "State 'stop-sigabrt' timed out. Terminating.");
3340 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_TIMEOUT);
3341 break;
3342
3343 case SERVICE_STOP_SIGTERM:
3344 if (s->kill_context.send_sigkill) {
3345 log_unit_warning(UNIT(s), "State 'stop-sigterm' timed out. Killing.");
3346 service_enter_signal(s, SERVICE_STOP_SIGKILL, SERVICE_FAILURE_TIMEOUT);
3347 } else {
3348 log_unit_warning(UNIT(s), "State 'stop-sigterm' timed out. Skipping SIGKILL.");
3349 service_enter_stop_post(s, SERVICE_FAILURE_TIMEOUT);
3350 }
3351
3352 break;
3353
3354 case SERVICE_STOP_SIGKILL:
3355 /* Uh, we sent a SIGKILL and it is still not gone?
3356 * Must be something we cannot kill, so let's just be
3357 * weirded out and continue */
3358
3359 log_unit_warning(UNIT(s), "Processes still around after SIGKILL. Ignoring.");
3360 service_enter_stop_post(s, SERVICE_FAILURE_TIMEOUT);
3361 break;
3362
3363 case SERVICE_STOP_POST:
3364 log_unit_warning(UNIT(s), "State 'stop-post' timed out. Terminating.");
3365 service_enter_signal(s, SERVICE_FINAL_SIGTERM, SERVICE_FAILURE_TIMEOUT);
3366 break;
3367
3368 case SERVICE_FINAL_SIGTERM:
3369 if (s->kill_context.send_sigkill) {
3370 log_unit_warning(UNIT(s), "State 'stop-final-sigterm' timed out. Killing.");
3371 service_enter_signal(s, SERVICE_FINAL_SIGKILL, SERVICE_FAILURE_TIMEOUT);
3372 } else {
3373 log_unit_warning(UNIT(s), "State 'stop-final-sigterm' timed out. Skipping SIGKILL. Entering failed mode.");
3374 service_enter_dead(s, SERVICE_FAILURE_TIMEOUT, false);
3375 }
3376
3377 break;
3378
3379 case SERVICE_FINAL_SIGKILL:
3380 log_unit_warning(UNIT(s), "Processes still around after final SIGKILL. Entering failed mode.");
3381 service_enter_dead(s, SERVICE_FAILURE_TIMEOUT, true);
3382 break;
3383
3384 case SERVICE_AUTO_RESTART:
3385 if (s->restart_usec > 0) {
3386 char buf_restart[FORMAT_TIMESPAN_MAX];
3387 log_unit_info(UNIT(s),
3388 "Service RestartSec=%s expired, scheduling restart.",
3389 format_timespan(buf_restart, sizeof buf_restart, s->restart_usec, USEC_PER_SEC));
3390 } else
3391 log_unit_info(UNIT(s),
3392 "Service has no hold-off time (RestartSec=0), scheduling restart.");
3393
3394 service_enter_restart(s);
3395 break;
3396
3397 default:
3398 assert_not_reached("Timeout at wrong time.");
3399 }
3400
3401 return 0;
3402 }
3403
3404 static int service_dispatch_watchdog(sd_event_source *source, usec_t usec, void *userdata) {
3405 Service *s = SERVICE(userdata);
3406 char t[FORMAT_TIMESPAN_MAX];
3407 usec_t watchdog_usec;
3408
3409 assert(s);
3410 assert(source == s->watchdog_event_source);
3411
3412 watchdog_usec = service_get_watchdog_usec(s);
3413
3414 if (UNIT(s)->manager->service_watchdogs) {
3415 log_unit_error(UNIT(s), "Watchdog timeout (limit %s)!",
3416 format_timespan(t, sizeof(t), watchdog_usec, 1));
3417
3418 service_enter_signal(s, SERVICE_STOP_SIGABRT, SERVICE_FAILURE_WATCHDOG);
3419 } else
3420 log_unit_warning(UNIT(s), "Watchdog disabled! Ignoring watchdog timeout (limit %s)!",
3421 format_timespan(t, sizeof(t), watchdog_usec, 1));
3422
3423 return 0;
3424 }
3425
3426 static bool service_notify_message_authorized(Service *s, pid_t pid, char **tags, FDSet *fds) {
3427 assert(s);
3428
3429 if (s->notify_access == NOTIFY_NONE) {
3430 log_unit_warning(UNIT(s), "Got notification message from PID "PID_FMT", but reception is disabled.", pid);
3431 return false;
3432 }
3433
3434 if (s->notify_access == NOTIFY_MAIN && pid != s->main_pid) {
3435 if (s->main_pid != 0)
3436 log_unit_warning(UNIT(s), "Got notification message from PID "PID_FMT", but reception only permitted for main PID "PID_FMT, pid, s->main_pid);
3437 else
3438 log_unit_warning(UNIT(s), "Got notification message from PID "PID_FMT", but reception only permitted for main PID which is currently not known", pid);
3439
3440 return false;
3441 }
3442
3443 if (s->notify_access == NOTIFY_EXEC && pid != s->main_pid && pid != s->control_pid) {
3444 if (s->main_pid != 0 && s->control_pid != 0)
3445 log_unit_warning(UNIT(s), "Got notification message from PID "PID_FMT", but reception only permitted for main PID "PID_FMT" and control PID "PID_FMT,
3446 pid, s->main_pid, s->control_pid);
3447 else if (s->main_pid != 0)
3448 log_unit_warning(UNIT(s), "Got notification message from PID "PID_FMT", but reception only permitted for main PID "PID_FMT, pid, s->main_pid);
3449 else if (s->control_pid != 0)
3450 log_unit_warning(UNIT(s), "Got notification message from PID "PID_FMT", but reception only permitted for control PID "PID_FMT, pid, s->control_pid);
3451 else
3452 log_unit_warning(UNIT(s), "Got notification message from PID "PID_FMT", but reception only permitted for main PID and control PID which are currently not known", pid);
3453
3454 return false;
3455 }
3456
3457 return true;
3458 }
3459
3460 static void service_notify_message(
3461 Unit *u,
3462 const struct ucred *ucred,
3463 char **tags,
3464 FDSet *fds) {
3465
3466 Service *s = SERVICE(u);
3467 bool notify_dbus = false;
3468 const char *e;
3469 char **i;
3470 int r;
3471
3472 assert(u);
3473 assert(ucred);
3474
3475 if (!service_notify_message_authorized(SERVICE(u), ucred->pid, tags, fds))
3476 return;
3477
3478 if (DEBUG_LOGGING) {
3479 _cleanup_free_ char *cc = NULL;
3480
3481 cc = strv_join(tags, ", ");
3482 log_unit_debug(u, "Got notification message from PID "PID_FMT" (%s)", ucred->pid, isempty(cc) ? "n/a" : cc);
3483 }
3484
3485 /* Interpret MAINPID= */
3486 e = strv_find_startswith(tags, "MAINPID=");
3487 if (e && IN_SET(s->state, SERVICE_START, SERVICE_START_POST, SERVICE_RUNNING, SERVICE_RELOAD)) {
3488 pid_t new_main_pid;
3489
3490 if (parse_pid(e, &new_main_pid) < 0)
3491 log_unit_warning(u, "Failed to parse MAINPID= field in notification message, ignoring: %s", e);
3492 else if (!s->main_pid_known || new_main_pid != s->main_pid) {
3493
3494 r = service_is_suitable_main_pid(s, new_main_pid, LOG_WARNING);
3495 if (r == 0) {
3496 /* The new main PID is a bit suspicous, which is OK if the sender is privileged. */
3497
3498 if (ucred->uid == 0) {
3499 log_unit_debug(u, "New main PID "PID_FMT" does not belong to service, but we'll accept it as the request to change it came from a privileged process.", new_main_pid);
3500 r = 1;
3501 } else
3502 log_unit_debug(u, "New main PID "PID_FMT" does not belong to service, refusing.", new_main_pid);
3503 }
3504 if (r > 0) {
3505 service_set_main_pid(s, new_main_pid);
3506 unit_watch_pid(UNIT(s), new_main_pid);
3507 notify_dbus = true;
3508 }
3509 }
3510 }
3511
3512 /* Interpret READY=/STOPPING=/RELOADING=. Last one wins. */
3513 STRV_FOREACH_BACKWARDS(i, tags) {
3514
3515 if (streq(*i, "READY=1")) {
3516 s->notify_state = NOTIFY_READY;
3517
3518 /* Type=notify services inform us about completed
3519 * initialization with READY=1 */
3520 if (s->type == SERVICE_NOTIFY && s->state == SERVICE_START)
3521 service_enter_start_post(s);
3522
3523 /* Sending READY=1 while we are reloading informs us
3524 * that the reloading is complete */
3525 if (s->state == SERVICE_RELOAD && s->control_pid == 0)
3526 service_enter_running(s, SERVICE_SUCCESS);
3527
3528 notify_dbus = true;
3529 break;
3530
3531 } else if (streq(*i, "RELOADING=1")) {
3532 s->notify_state = NOTIFY_RELOADING;
3533
3534 if (s->state == SERVICE_RUNNING)
3535 service_enter_reload_by_notify(s);
3536
3537 notify_dbus = true;
3538 break;
3539
3540 } else if (streq(*i, "STOPPING=1")) {
3541 s->notify_state = NOTIFY_STOPPING;
3542
3543 if (s->state == SERVICE_RUNNING)
3544 service_enter_stop_by_notify(s);
3545
3546 notify_dbus = true;
3547 break;
3548 }
3549 }
3550
3551 /* Interpret STATUS= */
3552 e = strv_find_startswith(tags, "STATUS=");
3553 if (e) {
3554 _cleanup_free_ char *t = NULL;
3555
3556 if (!isempty(e)) {
3557 if (!utf8_is_valid(e))
3558 log_unit_warning(u, "Status message in notification message is not UTF-8 clean.");
3559 else {
3560 t = strdup(e);
3561 if (!t)
3562 log_oom();
3563 }
3564 }
3565
3566 if (!streq_ptr(s->status_text, t)) {
3567 free_and_replace(s->status_text, t);
3568 notify_dbus = true;
3569 }
3570 }
3571
3572 /* Interpret ERRNO= */
3573 e = strv_find_startswith(tags, "ERRNO=");
3574 if (e) {
3575 int status_errno;
3576
3577 status_errno = parse_errno(e);
3578 if (status_errno < 0)
3579 log_unit_warning_errno(u, status_errno,
3580 "Failed to parse ERRNO= field in notification message: %s", e);
3581 else if (s->status_errno != status_errno) {
3582 s->status_errno = status_errno;
3583 notify_dbus = true;
3584 }
3585 }
3586
3587 /* Interpret EXTEND_TIMEOUT= */
3588 e = strv_find_startswith(tags, "EXTEND_TIMEOUT_USEC=");
3589 if (e) {
3590 usec_t extend_timeout_usec;
3591 if (safe_atou64(e, &extend_timeout_usec) < 0)
3592 log_unit_warning(u, "Failed to parse EXTEND_TIMEOUT_USEC=%s", e);
3593 else
3594 service_extend_timeout(s, extend_timeout_usec);
3595 }
3596
3597 /* Interpret WATCHDOG= */
3598 if (strv_find(tags, "WATCHDOG=1"))
3599 service_reset_watchdog(s);
3600
3601 e = strv_find_startswith(tags, "WATCHDOG_USEC=");
3602 if (e) {
3603 usec_t watchdog_override_usec;
3604 if (safe_atou64(e, &watchdog_override_usec) < 0)
3605 log_unit_warning(u, "Failed to parse WATCHDOG_USEC=%s", e);
3606 else
3607 service_reset_watchdog_timeout(s, watchdog_override_usec);
3608 }
3609
3610 /* Process FD store messages. Either FDSTOREREMOVE=1 for removal, or FDSTORE=1 for addition. In both cases,
3611 * process FDNAME= for picking the file descriptor name to use. Note that FDNAME= is required when removing
3612 * fds, but optional when pushing in new fds, for compatibility reasons. */
3613 if (strv_find(tags, "FDSTOREREMOVE=1")) {
3614 const char *name;
3615
3616 name = strv_find_startswith(tags, "FDNAME=");
3617 if (!name || !fdname_is_valid(name))
3618 log_unit_warning(u, "FDSTOREREMOVE=1 requested, but no valid file descriptor name passed, ignoring.");
3619 else
3620 service_remove_fd_store(s, name);
3621
3622 } else if (strv_find(tags, "FDSTORE=1")) {
3623 const char *name;
3624
3625 name = strv_find_startswith(tags, "FDNAME=");
3626 if (name && !fdname_is_valid(name)) {
3627 log_unit_warning(u, "Passed FDNAME= name is invalid, ignoring.");
3628 name = NULL;
3629 }
3630
3631 (void) service_add_fd_store_set(s, fds, name);
3632 }
3633
3634 /* Notify clients about changed status or main pid */
3635 if (notify_dbus)
3636 unit_add_to_dbus_queue(u);
3637 }
3638
3639 static int service_get_timeout(Unit *u, usec_t *timeout) {
3640 Service *s = SERVICE(u);
3641 uint64_t t;
3642 int r;
3643
3644 if (!s->timer_event_source)
3645 return 0;
3646
3647 r = sd_event_source_get_time(s->timer_event_source, &t);
3648 if (r < 0)
3649 return r;
3650 if (t == USEC_INFINITY)
3651 return 0;
3652
3653 *timeout = t;
3654 return 1;
3655 }
3656
3657 static void service_bus_name_owner_change(
3658 Unit *u,
3659 const char *name,
3660 const char *old_owner,
3661 const char *new_owner) {
3662
3663 Service *s = SERVICE(u);
3664 int r;
3665
3666 assert(s);
3667 assert(name);
3668
3669 assert(streq(s->bus_name, name));
3670 assert(old_owner || new_owner);
3671
3672 if (old_owner && new_owner)
3673 log_unit_debug(u, "D-Bus name %s changed owner from %s to %s", name, old_owner, new_owner);
3674 else if (old_owner)
3675 log_unit_debug(u, "D-Bus name %s no longer registered by %s", name, old_owner);
3676 else
3677 log_unit_debug(u, "D-Bus name %s now registered by %s", name, new_owner);
3678
3679 s->bus_name_good = !!new_owner;
3680
3681 /* Track the current owner, so we can reconstruct changes after a daemon reload */
3682 r = free_and_strdup(&s->bus_name_owner, new_owner);
3683 if (r < 0) {
3684 log_unit_error_errno(u, r, "Unable to set new bus name owner %s: %m", new_owner);
3685 return;
3686 }
3687
3688 if (s->type == SERVICE_DBUS) {
3689
3690 /* service_enter_running() will figure out what to
3691 * do */
3692 if (s->state == SERVICE_RUNNING)
3693 service_enter_running(s, SERVICE_SUCCESS);
3694 else if (s->state == SERVICE_START && new_owner)
3695 service_enter_start_post(s);
3696
3697 } else if (new_owner &&
3698 s->main_pid <= 0 &&
3699 IN_SET(s->state,
3700 SERVICE_START,
3701 SERVICE_START_POST,
3702 SERVICE_RUNNING,
3703 SERVICE_RELOAD)) {
3704
3705 _cleanup_(sd_bus_creds_unrefp) sd_bus_creds *creds = NULL;
3706 pid_t pid;
3707
3708 /* Try to acquire PID from bus service */
3709
3710 r = sd_bus_get_name_creds(u->manager->api_bus, name, SD_BUS_CREDS_PID, &creds);
3711 if (r >= 0)
3712 r = sd_bus_creds_get_pid(creds, &pid);
3713 if (r >= 0) {
3714 log_unit_debug(u, "D-Bus name %s is now owned by process " PID_FMT, name, pid);
3715
3716 service_set_main_pid(s, pid);
3717 unit_watch_pid(UNIT(s), pid);
3718 }
3719 }
3720 }
3721
3722 int service_set_socket_fd(Service *s, int fd, Socket *sock, bool selinux_context_net) {
3723 _cleanup_free_ char *peer = NULL;
3724 int r;
3725
3726 assert(s);
3727 assert(fd >= 0);
3728
3729 /* This is called by the socket code when instantiating a new service for a stream socket and the socket needs
3730 * to be configured. We take ownership of the passed fd on success. */
3731
3732 if (UNIT(s)->load_state != UNIT_LOADED)
3733 return -EINVAL;
3734
3735 if (s->socket_fd >= 0)
3736 return -EBUSY;
3737
3738 if (s->state != SERVICE_DEAD)
3739 return -EAGAIN;
3740
3741 if (getpeername_pretty(fd, true, &peer) >= 0) {
3742
3743 if (UNIT(s)->description) {
3744 _cleanup_free_ char *a;
3745
3746 a = strjoin(UNIT(s)->description, " (", peer, ")");
3747 if (!a)
3748 return -ENOMEM;
3749
3750 r = unit_set_description(UNIT(s), a);
3751 } else
3752 r = unit_set_description(UNIT(s), peer);
3753
3754 if (r < 0)
3755 return r;
3756 }
3757
3758 r = unit_add_two_dependencies(UNIT(sock), UNIT_BEFORE, UNIT_TRIGGERS, UNIT(s), false, UNIT_DEPENDENCY_IMPLICIT);
3759 if (r < 0)
3760 return r;
3761
3762 s->socket_fd = fd;
3763 s->socket_fd_selinux_context_net = selinux_context_net;
3764
3765 unit_ref_set(&s->accept_socket, UNIT(s), UNIT(sock));
3766 return 0;
3767 }
3768
3769 static void service_reset_failed(Unit *u) {
3770 Service *s = SERVICE(u);
3771
3772 assert(s);
3773
3774 if (s->state == SERVICE_FAILED)
3775 service_set_state(s, SERVICE_DEAD);
3776
3777 s->result = SERVICE_SUCCESS;
3778 s->reload_result = SERVICE_SUCCESS;
3779 s->n_restarts = 0;
3780 s->flush_n_restarts = false;
3781 }
3782
3783 static int service_kill(Unit *u, KillWho who, int signo, sd_bus_error *error) {
3784 Service *s = SERVICE(u);
3785
3786 assert(s);
3787
3788 return unit_kill_common(u, who, signo, s->main_pid, s->control_pid, error);
3789 }
3790
3791 static int service_main_pid(Unit *u) {
3792 Service *s = SERVICE(u);
3793
3794 assert(s);
3795
3796 return s->main_pid;
3797 }
3798
3799 static int service_control_pid(Unit *u) {
3800 Service *s = SERVICE(u);
3801
3802 assert(s);
3803
3804 return s->control_pid;
3805 }
3806
3807 static bool service_needs_console(Unit *u) {
3808 Service *s = SERVICE(u);
3809
3810 assert(s);
3811
3812 /* We provide our own implementation of this here, instead of relying of the generic implementation
3813 * unit_needs_console() provides, since we want to return false if we are in SERVICE_EXITED state. */
3814
3815 if (!exec_context_may_touch_console(&s->exec_context))
3816 return false;
3817
3818 return IN_SET(s->state,
3819 SERVICE_START_PRE,
3820 SERVICE_START,
3821 SERVICE_START_POST,
3822 SERVICE_RUNNING,
3823 SERVICE_RELOAD,
3824 SERVICE_STOP,
3825 SERVICE_STOP_SIGABRT,
3826 SERVICE_STOP_SIGTERM,
3827 SERVICE_STOP_SIGKILL,
3828 SERVICE_STOP_POST,
3829 SERVICE_FINAL_SIGTERM,
3830 SERVICE_FINAL_SIGKILL);
3831 }
3832
3833 static const char* const service_restart_table[_SERVICE_RESTART_MAX] = {
3834 [SERVICE_RESTART_NO] = "no",
3835 [SERVICE_RESTART_ON_SUCCESS] = "on-success",
3836 [SERVICE_RESTART_ON_FAILURE] = "on-failure",
3837 [SERVICE_RESTART_ON_ABNORMAL] = "on-abnormal",
3838 [SERVICE_RESTART_ON_WATCHDOG] = "on-watchdog",
3839 [SERVICE_RESTART_ON_ABORT] = "on-abort",
3840 [SERVICE_RESTART_ALWAYS] = "always",
3841 };
3842
3843 DEFINE_STRING_TABLE_LOOKUP(service_restart, ServiceRestart);
3844
3845 static const char* const service_type_table[_SERVICE_TYPE_MAX] = {
3846 [SERVICE_SIMPLE] = "simple",
3847 [SERVICE_FORKING] = "forking",
3848 [SERVICE_ONESHOT] = "oneshot",
3849 [SERVICE_DBUS] = "dbus",
3850 [SERVICE_NOTIFY] = "notify",
3851 [SERVICE_IDLE] = "idle"
3852 };
3853
3854 DEFINE_STRING_TABLE_LOOKUP(service_type, ServiceType);
3855
3856 static const char* const service_exec_command_table[_SERVICE_EXEC_COMMAND_MAX] = {
3857 [SERVICE_EXEC_START_PRE] = "ExecStartPre",
3858 [SERVICE_EXEC_START] = "ExecStart",
3859 [SERVICE_EXEC_START_POST] = "ExecStartPost",
3860 [SERVICE_EXEC_RELOAD] = "ExecReload",
3861 [SERVICE_EXEC_STOP] = "ExecStop",
3862 [SERVICE_EXEC_STOP_POST] = "ExecStopPost",
3863 };
3864
3865 DEFINE_STRING_TABLE_LOOKUP(service_exec_command, ServiceExecCommand);
3866
3867 static const char* const notify_state_table[_NOTIFY_STATE_MAX] = {
3868 [NOTIFY_UNKNOWN] = "unknown",
3869 [NOTIFY_READY] = "ready",
3870 [NOTIFY_RELOADING] = "reloading",
3871 [NOTIFY_STOPPING] = "stopping",
3872 };
3873
3874 DEFINE_STRING_TABLE_LOOKUP(notify_state, NotifyState);
3875
3876 static const char* const service_result_table[_SERVICE_RESULT_MAX] = {
3877 [SERVICE_SUCCESS] = "success",
3878 [SERVICE_FAILURE_RESOURCES] = "resources",
3879 [SERVICE_FAILURE_PROTOCOL] = "protocol",
3880 [SERVICE_FAILURE_TIMEOUT] = "timeout",
3881 [SERVICE_FAILURE_EXIT_CODE] = "exit-code",
3882 [SERVICE_FAILURE_SIGNAL] = "signal",
3883 [SERVICE_FAILURE_CORE_DUMP] = "core-dump",
3884 [SERVICE_FAILURE_WATCHDOG] = "watchdog",
3885 [SERVICE_FAILURE_START_LIMIT_HIT] = "start-limit-hit",
3886 };
3887
3888 DEFINE_STRING_TABLE_LOOKUP(service_result, ServiceResult);
3889
3890 const UnitVTable service_vtable = {
3891 .object_size = sizeof(Service),
3892 .exec_context_offset = offsetof(Service, exec_context),
3893 .cgroup_context_offset = offsetof(Service, cgroup_context),
3894 .kill_context_offset = offsetof(Service, kill_context),
3895 .exec_runtime_offset = offsetof(Service, exec_runtime),
3896 .dynamic_creds_offset = offsetof(Service, dynamic_creds),
3897
3898 .sections =
3899 "Unit\0"
3900 "Service\0"
3901 "Install\0",
3902 .private_section = "Service",
3903
3904 .can_transient = true,
3905 .can_delegate = true,
3906
3907 .init = service_init,
3908 .done = service_done,
3909 .load = service_load,
3910 .release_resources = service_release_resources,
3911
3912 .coldplug = service_coldplug,
3913
3914 .dump = service_dump,
3915
3916 .start = service_start,
3917 .stop = service_stop,
3918 .reload = service_reload,
3919
3920 .can_reload = service_can_reload,
3921
3922 .kill = service_kill,
3923
3924 .serialize = service_serialize,
3925 .deserialize_item = service_deserialize_item,
3926
3927 .active_state = service_active_state,
3928 .sub_state_to_string = service_sub_state_to_string,
3929
3930 .will_restart = service_will_restart,
3931
3932 .may_gc = service_may_gc,
3933
3934 .sigchld_event = service_sigchld_event,
3935
3936 .reset_failed = service_reset_failed,
3937
3938 .notify_cgroup_empty = service_notify_cgroup_empty_event,
3939 .notify_message = service_notify_message,
3940
3941 .main_pid = service_main_pid,
3942 .control_pid = service_control_pid,
3943
3944 .bus_name_owner_change = service_bus_name_owner_change,
3945
3946 .bus_vtable = bus_service_vtable,
3947 .bus_set_property = bus_service_set_property,
3948 .bus_commit_properties = bus_service_commit_properties,
3949
3950 .get_timeout = service_get_timeout,
3951 .needs_console = service_needs_console,
3952
3953 .status_message_formats = {
3954 .starting_stopping = {
3955 [0] = "Starting %s...",
3956 [1] = "Stopping %s...",
3957 },
3958 .finished_start_job = {
3959 [JOB_DONE] = "Started %s.",
3960 [JOB_FAILED] = "Failed to start %s.",
3961 },
3962 .finished_stop_job = {
3963 [JOB_DONE] = "Stopped %s.",
3964 [JOB_FAILED] = "Stopped (with error) %s.",
3965 },
3966 },
3967 };
Unnamed repository; edit this file 'description' to name the repository.