src/journal-remote/journal-upload.c

   1 /* SPDX-License-Identifier: LGPL-2.1-or-later */
   2
   3 #include <curl/curl.h>
   4 #include <fcntl.h>
   5 #include <getopt.h>
   6 #include <stdio.h>
   7 #include <sys/stat.h>
   8
   9 #include "sd-daemon.h"
  10
  11 #include "alloc-util.h"
  12 #include "build.h"
  13 #include "conf-parser.h"
  14 #include "daemon-util.h"
  15 #include "def.h"
  16 #include "env-file.h"
  17 #include "fd-util.h"
  18 #include "fileio.h"
  19 #include "format-util.h"
  20 #include "glob-util.h"
  21 #include "journal-upload.h"
  22 #include "log.h"
  23 #include "main-func.h"
  24 #include "mkdir.h"
  25 #include "parse-util.h"
  26 #include "path-util.h"
  27 #include "pretty-print.h"
  28 #include "process-util.h"
  29 #include "rlimit-util.h"
  30 #include "sigbus.h"
  31 #include "signal-util.h"
  32 #include "string-util.h"
  33 #include "strv.h"
  34 #include "tmpfile-util.h"
  35 #include "util.h"
  36
  37 #define PRIV_KEY_FILE CERTIFICATE_ROOT "/private/journal-upload.pem"
  38 #define CERT_FILE     CERTIFICATE_ROOT "/certs/journal-upload.pem"
  39 #define TRUST_FILE    CERTIFICATE_ROOT "/ca/trusted.pem"
  40 #define DEFAULT_PORT  19532
  41
  42 static const char* arg_url = NULL;
  43 static const char *arg_key = NULL;
  44 static const char *arg_cert = NULL;
  45 static const char *arg_trust = NULL;
  46 static const char *arg_directory = NULL;
  47 static char **arg_file = NULL;
  48 static const char *arg_cursor = NULL;
  49 static bool arg_after_cursor = false;
  50 static int arg_journal_type = 0;
  51 static const char *arg_machine = NULL;
  52 static bool arg_merge = false;
  53 static int arg_follow = -1;
  54 static const char *arg_save_state = NULL;
  55
  56 static void close_fd_input(Uploader *u);
  57
  58 #define SERVER_ANSWER_KEEP 2048
  59
  60 #define STATE_FILE "/var/lib/systemd/journal-upload/state"
  61
  62 #define easy_setopt(curl, opt, value, level, cmd)                       \
  63         do {                                                            \
  64                 code = curl_easy_setopt(curl, opt, value);              \
  65                 if (code) {                                             \
  66                         log_full(level,                                 \
  67                                  "curl_easy_setopt " #opt " failed: %s", \
  68                                   curl_easy_strerror(code));            \
  69                         cmd;                                            \
  70                 }                                                       \
  71         } while (0)
  72
  73 static size_t output_callback(char *buf,
  74                               size_t size,
  75                               size_t nmemb,
  76                               void *userp) {
  77         Uploader *u = userp;
  78
  79         assert(u);
  80
  81         log_debug("The server answers (%zu bytes): %.*s",
  82                   size*nmemb, (int)(size*nmemb), buf);
  83
  84         if (nmemb && !u->answer) {
  85                 u->answer = strndup(buf, size*nmemb);
  86                 if (!u->answer)
  87                         log_warning("Failed to store server answer (%zu bytes): out of memory", size*nmemb);
  88         }
  89
  90         return size * nmemb;
  91 }
  92
  93 static int check_cursor_updating(Uploader *u) {
  94         _cleanup_free_ char *temp_path = NULL;
  95         _cleanup_fclose_ FILE *f = NULL;
  96         int r;
  97
  98         if (!u->state_file)
  99                 return 0;
 100
 101         r = mkdir_parents(u->state_file, 0755);
 102         if (r < 0)
 103                 return log_error_errno(r, "Cannot create parent directory of state file %s: %m",
 104                                        u->state_file);
 105
 106         r = fopen_temporary(u->state_file, &f, &temp_path);
 107         if (r < 0)
 108                 return log_error_errno(r, "Cannot save state to %s: %m",
 109                                        u->state_file);
 110         (void) unlink(temp_path);
 111
 112         return 0;
 113 }
 114
 115 static int update_cursor_state(Uploader *u) {
 116         _cleanup_free_ char *temp_path = NULL;
 117         _cleanup_fclose_ FILE *f = NULL;
 118         int r;
 119
 120         if (!u->state_file || !u->last_cursor)
 121                 return 0;
 122
 123         r = fopen_temporary(u->state_file, &f, &temp_path);
 124         if (r < 0)
 125                 goto fail;
 126
 127         fprintf(f,
 128                 "# This is private data. Do not parse.\n"
 129                 "LAST_CURSOR=%s\n",
 130                 u->last_cursor);
 131
 132         r = fflush_and_check(f);
 133         if (r < 0)
 134                 goto fail;
 135
 136         if (rename(temp_path, u->state_file) < 0) {
 137                 r = -errno;
 138                 goto fail;
 139         }
 140
 141         return 0;
 142
 143 fail:
 144         if (temp_path)
 145                 (void) unlink(temp_path);
 146
 147         (void) unlink(u->state_file);
 148
 149         return log_error_errno(r, "Failed to save state %s: %m", u->state_file);
 150 }
 151
 152 static int load_cursor_state(Uploader *u) {
 153         int r;
 154
 155         if (!u->state_file)
 156                 return 0;
 157
 158         r = parse_env_file(NULL, u->state_file, "LAST_CURSOR", &u->last_cursor);
 159         if (r == -ENOENT)
 160                 log_debug("State file %s is not present.", u->state_file);
 161         else if (r < 0)
 162                 return log_error_errno(r, "Failed to read state file %s: %m",
 163                                        u->state_file);
 164         else
 165                 log_debug("Last cursor was %s", u->last_cursor);
 166
 167         return 0;
 168 }
 169
 170 int start_upload(Uploader *u,
 171                  size_t (*input_callback)(void *ptr,
 172                                           size_t size,
 173                                           size_t nmemb,
 174                                           void *userdata),
 175                  void *data) {
 176         CURLcode code;
 177
 178         assert(u);
 179         assert(input_callback);
 180
 181         if (!u->header) {
 182                 struct curl_slist *h;
 183
 184                 h = curl_slist_append(NULL, "Content-Type: application/vnd.fdo.journal");
 185                 if (!h)
 186                         return log_oom();
 187
 188                 h = curl_slist_append(h, "Transfer-Encoding: chunked");
 189                 if (!h) {
 190                         curl_slist_free_all(h);
 191                         return log_oom();
 192                 }
 193
 194                 h = curl_slist_append(h, "Accept: text/plain");
 195                 if (!h) {
 196                         curl_slist_free_all(h);
 197                         return log_oom();
 198                 }
 199
 200                 u->header = h;
 201         }
 202
 203         if (!u->easy) {
 204                 CURL *curl;
 205
 206                 curl = curl_easy_init();
 207                 if (!curl)
 208                         return log_error_errno(SYNTHETIC_ERRNO(ENOSR),
 209                                                "Call to curl_easy_init failed.");
 210
 211                 /* tell it to POST to the URL */
 212                 easy_setopt(curl, CURLOPT_POST, 1L,
 213                             LOG_ERR, return -EXFULL);
 214
 215                 easy_setopt(curl, CURLOPT_ERRORBUFFER, u->error,
 216                             LOG_ERR, return -EXFULL);
 217
 218                 /* set where to write to */
 219                 easy_setopt(curl, CURLOPT_WRITEFUNCTION, output_callback,
 220                             LOG_ERR, return -EXFULL);
 221
 222                 easy_setopt(curl, CURLOPT_WRITEDATA, data,
 223                             LOG_ERR, return -EXFULL);
 224
 225                 /* set where to read from */
 226                 easy_setopt(curl, CURLOPT_READFUNCTION, input_callback,
 227                             LOG_ERR, return -EXFULL);
 228
 229                 easy_setopt(curl, CURLOPT_READDATA, data,
 230                             LOG_ERR, return -EXFULL);
 231
 232                 /* use our special own mime type and chunked transfer */
 233                 easy_setopt(curl, CURLOPT_HTTPHEADER, u->header,
 234                             LOG_ERR, return -EXFULL);
 235
 236                 if (DEBUG_LOGGING)
 237                         /* enable verbose for easier tracing */
 238                         easy_setopt(curl, CURLOPT_VERBOSE, 1L, LOG_WARNING, );
 239
 240                 easy_setopt(curl, CURLOPT_USERAGENT,
 241                             "systemd-journal-upload " GIT_VERSION,
 242                             LOG_WARNING, );
 243
 244                 if (!streq_ptr(arg_key, "-") && (arg_key || startswith(u->url, "https://"))) {
 245                         easy_setopt(curl, CURLOPT_SSLKEY, arg_key ?: PRIV_KEY_FILE,
 246                                     LOG_ERR, return -EXFULL);
 247                         easy_setopt(curl, CURLOPT_SSLCERT, arg_cert ?: CERT_FILE,
 248                                     LOG_ERR, return -EXFULL);
 249                 }
 250
 251                 if (STRPTR_IN_SET(arg_trust, "-", "all"))
 252                         easy_setopt(curl, CURLOPT_SSL_VERIFYPEER, 0,
 253                                     LOG_ERR, return -EUCLEAN);
 254                 else if (arg_trust || startswith(u->url, "https://"))
 255                         easy_setopt(curl, CURLOPT_CAINFO, arg_trust ?: TRUST_FILE,
 256                                     LOG_ERR, return -EXFULL);
 257
 258                 if (arg_key || arg_trust)
 259                         easy_setopt(curl, CURLOPT_SSLVERSION, CURL_SSLVERSION_TLSv1,
 260                                     LOG_WARNING, );
 261
 262                 u->easy = curl;
 263         } else {
 264                 /* truncate the potential old error message */
 265                 u->error[0] = '\0';
 266
 267                 free(u->answer);
 268                 u->answer = 0;
 269         }
 270
 271         /* upload to this place */
 272         code = curl_easy_setopt(u->easy, CURLOPT_URL, u->url);
 273         if (code)
 274                 return log_error_errno(SYNTHETIC_ERRNO(EXFULL),
 275                                        "curl_easy_setopt CURLOPT_URL failed: %s",
 276                                        curl_easy_strerror(code));
 277
 278         u->uploading = true;
 279
 280         return 0;
 281 }
 282
 283 static size_t fd_input_callback(void *buf, size_t size, size_t nmemb, void *userp) {
 284         Uploader *u = userp;
 285         ssize_t n;
 286
 287         assert(u);
 288         assert(nmemb < SSIZE_MAX / size);
 289
 290         if (u->input < 0)
 291                 return 0;
 292
 293         assert(!size_multiply_overflow(size, nmemb));
 294
 295         n = read(u->input, buf, size * nmemb);
 296         log_debug("%s: allowed %zu, read %zd", __func__, size*nmemb, n);
 297         if (n > 0)
 298                 return n;
 299
 300         u->uploading = false;
 301         if (n < 0) {
 302                 log_error_errno(errno, "Aborting transfer after read error on input: %m.");
 303                 return CURL_READFUNC_ABORT;
 304         }
 305
 306         log_debug("Reached EOF");
 307         close_fd_input(u);
 308         return 0;
 309 }
 310
 311 static void close_fd_input(Uploader *u) {
 312         assert(u);
 313
 314         u->input = safe_close(u->input);
 315         u->timeout = 0;
 316 }
 317
 318 static int dispatch_fd_input(sd_event_source *event,
 319                              int fd,
 320                              uint32_t revents,
 321                              void *userp) {
 322         Uploader *u = userp;
 323
 324         assert(u);
 325         assert(fd >= 0);
 326
 327         if (revents & EPOLLHUP) {
 328                 log_debug("Received HUP");
 329                 close_fd_input(u);
 330                 return 0;
 331         }
 332
 333         if (!(revents & EPOLLIN)) {
 334                 log_warning("Unexpected poll event %"PRIu32".", revents);
 335                 return -EINVAL;
 336         }
 337
 338         if (u->uploading) {
 339                 log_warning("dispatch_fd_input called when uploading, ignoring.");
 340                 return 0;
 341         }
 342
 343         return start_upload(u, fd_input_callback, u);
 344 }
 345
 346 static int open_file_for_upload(Uploader *u, const char *filename) {
 347         int fd, r = 0;
 348
 349         if (streq(filename, "-"))
 350                 fd = STDIN_FILENO;
 351         else {
 352                 fd = open(filename, O_RDONLY|O_CLOEXEC|O_NOCTTY);
 353                 if (fd < 0)
 354                         return log_error_errno(errno, "Failed to open %s: %m", filename);
 355         }
 356
 357         u->input = fd;
 358
 359         if (arg_follow) {
 360                 r = sd_event_add_io(u->events, &u->input_event,
 361                                     fd, EPOLLIN, dispatch_fd_input, u);
 362                 if (r < 0) {
 363                         if (r != -EPERM || arg_follow > 0)
 364                                 return log_error_errno(r, "Failed to register input event: %m");
 365
 366                         /* Normal files should just be consumed without polling. */
 367                         r = start_upload(u, fd_input_callback, u);
 368                 }
 369         }
 370
 371         return r;
 372 }
 373
 374 static int dispatch_sigterm(sd_event_source *event,
 375                             const struct signalfd_siginfo *si,
 376                             void *userdata) {
 377         Uploader *u = userdata;
 378
 379         assert(u);
 380
 381         log_received_signal(LOG_INFO, si);
 382
 383         close_fd_input(u);
 384         close_journal_input(u);
 385
 386         sd_event_exit(u->events, 0);
 387         return 0;
 388 }
 389
 390 static int setup_signals(Uploader *u) {
 391         int r;
 392
 393         assert(u);
 394
 395         assert_se(sigprocmask_many(SIG_SETMASK, NULL, SIGINT, SIGTERM, -1) >= 0);
 396
 397         r = sd_event_add_signal(u->events, &u->sigterm_event, SIGTERM, dispatch_sigterm, u);
 398         if (r < 0)
 399                 return r;
 400
 401         r = sd_event_add_signal(u->events, &u->sigint_event, SIGINT, dispatch_sigterm, u);
 402         if (r < 0)
 403                 return r;
 404
 405         return 0;
 406 }
 407
 408 static int setup_uploader(Uploader *u, const char *url, const char *state_file) {
 409         int r;
 410         const char *host, *proto = "";
 411
 412         assert(u);
 413         assert(url);
 414
 415         *u = (Uploader) {
 416                 .input = -1
 417         };
 418
 419         host = STARTSWITH_SET(url, "http://", "https://");
 420         if (!host) {
 421                 host = url;
 422                 proto = "https://";
 423         }
 424
 425         if (strchr(host, ':'))
 426                 u->url = strjoin(proto, url, "/upload");
 427         else {
 428                 char *t;
 429                 size_t x;
 430
 431                 t = strdupa(url);
 432                 x = strlen(t);
 433                 while (x > 0 && t[x - 1] == '/')
 434                         t[x - 1] = '\0';
 435
 436                 u->url = strjoin(proto, t, ":" STRINGIFY(DEFAULT_PORT), "/upload");
 437         }
 438         if (!u->url)
 439                 return log_oom();
 440
 441         u->state_file = state_file;
 442
 443         r = sd_event_default(&u->events);
 444         if (r < 0)
 445                 return log_error_errno(r, "sd_event_default failed: %m");
 446
 447         r = setup_signals(u);
 448         if (r < 0)
 449                 return log_error_errno(r, "Failed to set up signals: %m");
 450
 451         (void) sd_watchdog_enabled(false, &u->watchdog_usec);
 452
 453         return load_cursor_state(u);
 454 }
 455
 456 static void destroy_uploader(Uploader *u) {
 457         assert(u);
 458
 459         curl_easy_cleanup(u->easy);
 460         curl_slist_free_all(u->header);
 461         free(u->answer);
 462
 463         free(u->last_cursor);
 464         free(u->current_cursor);
 465
 466         free(u->url);
 467
 468         u->input_event = sd_event_source_unref(u->input_event);
 469
 470         close_fd_input(u);
 471         close_journal_input(u);
 472
 473         sd_event_source_unref(u->sigterm_event);
 474         sd_event_source_unref(u->sigint_event);
 475         sd_event_unref(u->events);
 476 }
 477
 478 static int perform_upload(Uploader *u) {
 479         CURLcode code;
 480         long status;
 481
 482         assert(u);
 483
 484         u->watchdog_timestamp = now(CLOCK_MONOTONIC);
 485         code = curl_easy_perform(u->easy);
 486         if (code) {
 487                 if (u->error[0])
 488                         log_error("Upload to %s failed: %.*s",
 489                                   u->url, (int) sizeof(u->error), u->error);
 490                 else
 491                         log_error("Upload to %s failed: %s",
 492                                   u->url, curl_easy_strerror(code));
 493                 return -EIO;
 494         }
 495
 496         code = curl_easy_getinfo(u->easy, CURLINFO_RESPONSE_CODE, &status);
 497         if (code)
 498                 return log_error_errno(SYNTHETIC_ERRNO(EUCLEAN),
 499                                        "Failed to retrieve response code: %s",
 500                                        curl_easy_strerror(code));
 501
 502         if (status >= 300)
 503                 return log_error_errno(SYNTHETIC_ERRNO(EIO),
 504                                        "Upload to %s failed with code %ld: %s",
 505                                        u->url, status, strna(u->answer));
 506         else if (status < 200)
 507                 return log_error_errno(SYNTHETIC_ERRNO(EIO),
 508                                        "Upload to %s finished with unexpected code %ld: %s",
 509                                        u->url, status, strna(u->answer));
 510         else
 511                 log_debug("Upload finished successfully with code %ld: %s",
 512                           status, strna(u->answer));
 513
 514         free_and_replace(u->last_cursor, u->current_cursor);
 515
 516         return update_cursor_state(u);
 517 }
 518
 519 static int config_parse_path_or_ignore(
 520                 const char *unit,
 521                 const char *filename,
 522                 unsigned line,
 523                 const char *section,
 524                 unsigned section_line,
 525                 const char *lvalue,
 526                 int ltype,
 527                 const char *rvalue,
 528                 void *data,
 529                 void *userdata) {
 530
 531         _cleanup_free_ char *n = NULL;
 532         bool fatal = ltype;
 533         char **s = data;
 534         int r;
 535
 536         assert(filename);
 537         assert(lvalue);
 538         assert(rvalue);
 539         assert(data);
 540
 541         if (isempty(rvalue))
 542                 goto finalize;
 543
 544         n = strdup(rvalue);
 545         if (!n)
 546                 return log_oom();
 547
 548         if (streq(n, "-"))
 549                 goto finalize;
 550
 551         r = path_simplify_and_warn(n, PATH_CHECK_ABSOLUTE | (fatal ? PATH_CHECK_FATAL : 0), unit, filename, line, lvalue);
 552         if (r < 0)
 553                 return fatal ? -ENOEXEC : 0;
 554
 555 finalize:
 556         return free_and_replace(*s, n);
 557 }
 558
 559 static int parse_config(void) {
 560         const ConfigTableItem items[] = {
 561                 { "Upload",  "URL",                    config_parse_string,         0, &arg_url    },
 562                 { "Upload",  "ServerKeyFile",          config_parse_path_or_ignore, 0, &arg_key    },
 563                 { "Upload",  "ServerCertificateFile",  config_parse_path_or_ignore, 0, &arg_cert   },
 564                 { "Upload",  "TrustedCertificateFile", config_parse_path_or_ignore, 0, &arg_trust  },
 565                 {}
 566         };
 567
 568         return config_parse_many_nulstr(
 569                         PKGSYSCONFDIR "/journal-upload.conf",
 570                         CONF_PATHS_NULSTR("systemd/journal-upload.conf.d"),
 571                         "Upload\0",
 572                         config_item_table_lookup, items,
 573                         CONFIG_PARSE_WARN,
 574                         NULL,
 575                         NULL);
 576 }
 577
 578 static int help(void) {
 579         _cleanup_free_ char *link = NULL;
 580         int r;
 581
 582         r = terminal_urlify_man("systemd-journal-upload.service", "8", &link);
 583         if (r < 0)
 584                 return log_oom();
 585
 586         printf("%s -u URL {FILE|-}...\n\n"
 587                "Upload journal events to a remote server.\n\n"
 588                "  -h --help                 Show this help\n"
 589                "     --version              Show package version\n"
 590                "  -u --url=URL              Upload to this address (default port "
 591                                             STRINGIFY(DEFAULT_PORT) ")\n"
 592                "     --key=FILENAME         Specify key in PEM format (default:\n"
 593                "                            \"" PRIV_KEY_FILE "\")\n"
 594                "     --cert=FILENAME        Specify certificate in PEM format (default:\n"
 595                "                            \"" CERT_FILE "\")\n"
 596                "     --trust=FILENAME|all   Specify CA certificate or disable checking (default:\n"
 597                "                            \"" TRUST_FILE "\")\n"
 598                "     --system               Use the system journal\n"
 599                "     --user                 Use the user journal for the current user\n"
 600                "  -m --merge                Use  all available journals\n"
 601                "  -M --machine=CONTAINER    Operate on local container\n"
 602                "  -D --directory=PATH       Use journal files from directory\n"
 603                "     --file=PATH            Use this journal file\n"
 604                "     --cursor=CURSOR        Start at the specified cursor\n"
 605                "     --after-cursor=CURSOR  Start after the specified cursor\n"
 606                "     --follow[=BOOL]        Do [not] wait for input\n"
 607                "     --save-state[=FILE]    Save uploaded cursors (default \n"
 608                "                            " STATE_FILE ")\n"
 609                "\nSee the %s for details.\n",
 610                program_invocation_short_name,
 611                link);
 612
 613         return 0;
 614 }
 615
 616 static int parse_argv(int argc, char *argv[]) {
 617         enum {
 618                 ARG_VERSION = 0x100,
 619                 ARG_KEY,
 620                 ARG_CERT,
 621                 ARG_TRUST,
 622                 ARG_USER,
 623                 ARG_SYSTEM,
 624                 ARG_FILE,
 625                 ARG_CURSOR,
 626                 ARG_AFTER_CURSOR,
 627                 ARG_FOLLOW,
 628                 ARG_SAVE_STATE,
 629         };
 630
 631         static const struct option options[] = {
 632                 { "help",         no_argument,       NULL, 'h'                },
 633                 { "version",      no_argument,       NULL, ARG_VERSION        },
 634                 { "url",          required_argument, NULL, 'u'                },
 635                 { "key",          required_argument, NULL, ARG_KEY            },
 636                 { "cert",         required_argument, NULL, ARG_CERT           },
 637                 { "trust",        required_argument, NULL, ARG_TRUST          },
 638                 { "system",       no_argument,       NULL, ARG_SYSTEM         },
 639                 { "user",         no_argument,       NULL, ARG_USER           },
 640                 { "merge",        no_argument,       NULL, 'm'                },
 641                 { "machine",      required_argument, NULL, 'M'                },
 642                 { "directory",    required_argument, NULL, 'D'                },
 643                 { "file",         required_argument, NULL, ARG_FILE           },
 644                 { "cursor",       required_argument, NULL, ARG_CURSOR         },
 645                 { "after-cursor", required_argument, NULL, ARG_AFTER_CURSOR   },
 646                 { "follow",       optional_argument, NULL, ARG_FOLLOW         },
 647                 { "save-state",   optional_argument, NULL, ARG_SAVE_STATE     },
 648                 {}
 649         };
 650
 651         int c, r;
 652
 653         assert(argc >= 0);
 654         assert(argv);
 655
 656         opterr = 0;
 657
 658         while ((c = getopt_long(argc, argv, "hu:mM:D:", options, NULL)) >= 0)
 659                 switch(c) {
 660                 case 'h':
 661                         return help();
 662
 663                 case ARG_VERSION:
 664                         return version();
 665
 666                 case 'u':
 667                         if (arg_url)
 668                                 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
 669                                                        "cannot use more than one --url");
 670
 671                         arg_url = optarg;
 672                         break;
 673
 674                 case ARG_KEY:
 675                         if (arg_key)
 676                                 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
 677                                                        "cannot use more than one --key");
 678
 679                         arg_key = optarg;
 680                         break;
 681
 682                 case ARG_CERT:
 683                         if (arg_cert)
 684                                 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
 685                                                        "cannot use more than one --cert");
 686
 687                         arg_cert = optarg;
 688                         break;
 689
 690                 case ARG_TRUST:
 691                         if (arg_trust)
 692                                 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
 693                                                        "cannot use more than one --trust");
 694
 695                         arg_trust = optarg;
 696                         break;
 697
 698                 case ARG_SYSTEM:
 699                         arg_journal_type |= SD_JOURNAL_SYSTEM;
 700                         break;
 701
 702                 case ARG_USER:
 703                         arg_journal_type |= SD_JOURNAL_CURRENT_USER;
 704                         break;
 705
 706                 case 'm':
 707                         arg_merge = true;
 708                         break;
 709
 710                 case 'M':
 711                         if (arg_machine)
 712                                 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
 713                                                        "cannot use more than one --machine/-M");
 714
 715                         arg_machine = optarg;
 716                         break;
 717
 718                 case 'D':
 719                         if (arg_directory)
 720                                 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
 721                                                        "cannot use more than one --directory/-D");
 722
 723                         arg_directory = optarg;
 724                         break;
 725
 726                 case ARG_FILE:
 727                         r = glob_extend(&arg_file, optarg, GLOB_NOCHECK);
 728                         if (r < 0)
 729                                 return log_error_errno(r, "Failed to add paths: %m");
 730                         break;
 731
 732                 case ARG_CURSOR:
 733                         if (arg_cursor)
 734                                 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
 735                                                        "cannot use more than one --cursor/--after-cursor");
 736
 737                         arg_cursor = optarg;
 738                         break;
 739
 740                 case ARG_AFTER_CURSOR:
 741                         if (arg_cursor)
 742                                 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
 743                                                        "cannot use more than one --cursor/--after-cursor");
 744
 745                         arg_cursor = optarg;
 746                         arg_after_cursor = true;
 747                         break;
 748
 749                 case ARG_FOLLOW:
 750                         if (optarg) {
 751                                 r = parse_boolean(optarg);
 752                                 if (r < 0)
 753                                         return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
 754                                                                "Failed to parse --follow= parameter.");
 755
 756                                 arg_follow = !!r;
 757                         } else
 758                                 arg_follow = true;
 759
 760                         break;
 761
 762                 case ARG_SAVE_STATE:
 763                         arg_save_state = optarg ?: STATE_FILE;
 764                         break;
 765
 766                 case '?':
 767                         return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
 768                                                "Unknown option %s.",
 769                                                argv[optind - 1]);
 770
 771                 case ':':
 772                         return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
 773                                                "Missing argument to %s.",
 774                                                argv[optind - 1]);
 775
 776                 default:
 777                         assert_not_reached("Unhandled option code.");
 778                 }
 779
 780         if (!arg_url)
 781                 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
 782                                        "Required --url/-u option missing.");
 783
 784         if (!!arg_key != !!arg_cert)
 785                 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
 786                                        "Options --key and --cert must be used together.");
 787
 788         if (optind < argc && (arg_directory || arg_file || arg_machine || arg_journal_type))
 789                 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
 790                                        "Input arguments make no sense with journal input.");
 791
 792         return 1;
 793 }
 794
 795 static int open_journal(sd_journal **j) {
 796         int r;
 797
 798         if (arg_directory)
 799                 r = sd_journal_open_directory(j, arg_directory, arg_journal_type);
 800         else if (arg_file)
 801                 r = sd_journal_open_files(j, (const char**) arg_file, 0);
 802         else if (arg_machine) {
 803 #pragma GCC diagnostic push
 804 #pragma GCC diagnostic ignored "-Wdeprecated-declarations"
 805                 /* FIXME: replace with D-Bus call OpenMachineRootDirectory() so that things also work with raw disk images */
 806                 r = sd_journal_open_container(j, arg_machine, 0);
 807 #pragma GCC diagnostic pop
 808         } else
 809                 r = sd_journal_open(j, !arg_merge*SD_JOURNAL_LOCAL_ONLY + arg_journal_type);
 810         if (r < 0)
 811                 log_error_errno(r, "Failed to open %s: %m",
 812                                 arg_directory ? arg_directory : arg_file ? "files" : "journal");
 813         return r;
 814 }
 815
 816 static int run(int argc, char **argv) {
 817         _cleanup_(destroy_uploader) Uploader u = {};
 818         _cleanup_(notify_on_cleanup) const char *notify_message = NULL;
 819         bool use_journal;
 820         int r;
 821
 822         log_show_color(true);
 823         log_parse_environment_cli();
 824
 825         /* The journal merging logic potentially needs a lot of fds. */
 826         (void) rlimit_nofile_bump(HIGH_RLIMIT_NOFILE);
 827
 828         r = parse_config();
 829         if (r < 0)
 830                 return r;
 831
 832         r = parse_argv(argc, argv);
 833         if (r <= 0)
 834                 return r;
 835
 836         sigbus_install();
 837
 838         r = setup_uploader(&u, arg_url, arg_save_state);
 839         if (r < 0)
 840                 return r;
 841
 842         sd_event_set_watchdog(u.events, true);
 843
 844         r = check_cursor_updating(&u);
 845         if (r < 0)
 846                 return r;
 847
 848         log_debug("%s running as pid "PID_FMT,
 849                   program_invocation_short_name, getpid_cached());
 850
 851         use_journal = optind >= argc;
 852         if (use_journal) {
 853                 sd_journal *j;
 854                 r = open_journal(&j);
 855                 if (r < 0)
 856                         return r;
 857                 r = open_journal_for_upload(&u, j,
 858                                             arg_cursor ?: u.last_cursor,
 859                                             arg_cursor ? arg_after_cursor : true,
 860                                             !!arg_follow);
 861                 if (r < 0)
 862                         return r;
 863         }
 864
 865         notify_message = notify_start("READY=1\n"
 866                                       "STATUS=Processing input...",
 867                                       NOTIFY_STOPPING);
 868
 869         for (;;) {
 870                 r = sd_event_get_state(u.events);
 871                 if (r < 0)
 872                         return r;
 873                 if (r == SD_EVENT_FINISHED)
 874                         return 0;
 875
 876                 if (use_journal) {
 877                         if (!u.journal)
 878                                 return 0;
 879
 880                         r = check_journal_input(&u);
 881                 } else if (u.input < 0 && !use_journal) {
 882                         if (optind >= argc)
 883                                 return 0;
 884
 885                         log_debug("Using %s as input.", argv[optind]);
 886                         r = open_file_for_upload(&u, argv[optind++]);
 887                 }
 888                 if (r < 0)
 889                         return r;
 890
 891                 if (u.uploading) {
 892                         r = perform_upload(&u);
 893                         if (r < 0)
 894                                 return r;
 895                 }
 896
 897                 r = sd_event_run(u.events, u.timeout);
 898                 if (r < 0)
 899                         return log_error_errno(r, "Failed to run event loop: %m");
 900         }
 901 }
 902
 903 DEFINE_MAIN_FUNCTION(run);