src/machine/machined-dbus.c

   1 /* SPDX-License-Identifier: LGPL-2.1-or-later */
   2
   3 #include <errno.h>
   4 #include <unistd.h>
   5
   6 #include "sd-id128.h"
   7
   8 #include "alloc-util.h"
   9 #include "btrfs-util.h"
  10 #include "bus-common-errors.h"
  11 #include "bus-get-properties.h"
  12 #include "bus-locator.h"
  13 #include "bus-polkit.h"
  14 #include "cgroup-util.h"
  15 #include "discover-image.h"
  16 #include "errno-util.h"
  17 #include "fd-util.h"
  18 #include "fileio.h"
  19 #include "format-util.h"
  20 #include "hostname-util.h"
  21 #include "image-dbus.h"
  22 #include "io-util.h"
  23 #include "machine-dbus.h"
  24 #include "machine-pool.h"
  25 #include "machined.h"
  26 #include "missing_capability.h"
  27 #include "os-util.h"
  28 #include "path-util.h"
  29 #include "process-util.h"
  30 #include "stdio-util.h"
  31 #include "strv.h"
  32 #include "tmpfile-util.h"
  33 #include "unit-name.h"
  34 #include "user-util.h"
  35
  36 static BUS_DEFINE_PROPERTY_GET_GLOBAL(property_get_pool_path, "s", "/var/lib/machines");
  37
  38 static int property_get_pool_usage(
  39                 sd_bus *bus,
  40                 const char *path,
  41                 const char *interface,
  42                 const char *property,
  43                 sd_bus_message *reply,
  44                 void *userdata,
  45                 sd_bus_error *error) {
  46
  47         _cleanup_close_ int fd = -1;
  48         uint64_t usage = UINT64_MAX;
  49
  50         assert(bus);
  51         assert(reply);
  52
  53         fd = open("/var/lib/machines", O_RDONLY|O_CLOEXEC|O_DIRECTORY);
  54         if (fd >= 0) {
  55                 BtrfsQuotaInfo q;
  56
  57                 if (btrfs_subvol_get_subtree_quota_fd(fd, 0, &q) >= 0)
  58                         usage = q.referenced;
  59         }
  60
  61         return sd_bus_message_append(reply, "t", usage);
  62 }
  63
  64 static int property_get_pool_limit(
  65                 sd_bus *bus,
  66                 const char *path,
  67                 const char *interface,
  68                 const char *property,
  69                 sd_bus_message *reply,
  70                 void *userdata,
  71                 sd_bus_error *error) {
  72
  73         _cleanup_close_ int fd = -1;
  74         uint64_t size = UINT64_MAX;
  75
  76         assert(bus);
  77         assert(reply);
  78
  79         fd = open("/var/lib/machines", O_RDONLY|O_CLOEXEC|O_DIRECTORY);
  80         if (fd >= 0) {
  81                 BtrfsQuotaInfo q;
  82
  83                 if (btrfs_subvol_get_subtree_quota_fd(fd, 0, &q) >= 0)
  84                         size = q.referenced_max;
  85         }
  86
  87         return sd_bus_message_append(reply, "t", size);
  88 }
  89
  90 static int method_get_machine(sd_bus_message *message, void *userdata, sd_bus_error *error) {
  91         _cleanup_free_ char *p = NULL;
  92         Manager *m = userdata;
  93         Machine *machine;
  94         const char *name;
  95         int r;
  96
  97         assert(message);
  98         assert(m);
  99
 100         r = sd_bus_message_read(message, "s", &name);
 101         if (r < 0)
 102                 return r;
 103
 104         machine = hashmap_get(m->machines, name);
 105         if (!machine)
 106                 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_MACHINE, "No machine '%s' known", name);
 107
 108         p = machine_bus_path(machine);
 109         if (!p)
 110                 return -ENOMEM;
 111
 112         return sd_bus_reply_method_return(message, "o", p);
 113 }
 114
 115 static int method_get_image(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 116         _cleanup_free_ char *p = NULL;
 117         _unused_ Manager *m = userdata;
 118         const char *name;
 119         int r;
 120
 121         assert(message);
 122         assert(m);
 123
 124         r = sd_bus_message_read(message, "s", &name);
 125         if (r < 0)
 126                 return r;
 127
 128         r = image_find(IMAGE_MACHINE, name, NULL, NULL);
 129         if (r == -ENOENT)
 130                 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_IMAGE, "No image '%s' known", name);
 131         if (r < 0)
 132                 return r;
 133
 134         p = image_bus_path(name);
 135         if (!p)
 136                 return -ENOMEM;
 137
 138         return sd_bus_reply_method_return(message, "o", p);
 139 }
 140
 141 static int method_get_machine_by_pid(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 142         _cleanup_free_ char *p = NULL;
 143         Manager *m = userdata;
 144         Machine *machine = NULL;
 145         pid_t pid;
 146         int r;
 147
 148         assert(message);
 149         assert(m);
 150
 151         assert_cc(sizeof(pid_t) == sizeof(uint32_t));
 152
 153         r = sd_bus_message_read(message, "u", &pid);
 154         if (r < 0)
 155                 return r;
 156
 157         if (pid < 0)
 158                 return -EINVAL;
 159
 160         if (pid == 0) {
 161                 _cleanup_(sd_bus_creds_unrefp) sd_bus_creds *creds = NULL;
 162
 163                 r = sd_bus_query_sender_creds(message, SD_BUS_CREDS_PID, &creds);
 164                 if (r < 0)
 165                         return r;
 166
 167                 r = sd_bus_creds_get_pid(creds, &pid);
 168                 if (r < 0)
 169                         return r;
 170         }
 171
 172         r = manager_get_machine_by_pid(m, pid, &machine);
 173         if (r < 0)
 174                 return r;
 175         if (!machine)
 176                 return sd_bus_error_setf(error, BUS_ERROR_NO_MACHINE_FOR_PID, "PID "PID_FMT" does not belong to any known machine", pid);
 177
 178         p = machine_bus_path(machine);
 179         if (!p)
 180                 return -ENOMEM;
 181
 182         return sd_bus_reply_method_return(message, "o", p);
 183 }
 184
 185 static int method_list_machines(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 186         _cleanup_(sd_bus_message_unrefp) sd_bus_message *reply = NULL;
 187         Manager *m = userdata;
 188         Machine *machine;
 189         int r;
 190
 191         assert(message);
 192         assert(m);
 193
 194         r = sd_bus_message_new_method_return(message, &reply);
 195         if (r < 0)
 196                 return sd_bus_error_set_errno(error, r);
 197
 198         r = sd_bus_message_open_container(reply, 'a', "(ssso)");
 199         if (r < 0)
 200                 return sd_bus_error_set_errno(error, r);
 201
 202         HASHMAP_FOREACH(machine, m->machines) {
 203                 _cleanup_free_ char *p = NULL;
 204
 205                 p = machine_bus_path(machine);
 206                 if (!p)
 207                         return -ENOMEM;
 208
 209                 r = sd_bus_message_append(reply, "(ssso)",
 210                                           machine->name,
 211                                           strempty(machine_class_to_string(machine->class)),
 212                                           machine->service,
 213                                           p);
 214                 if (r < 0)
 215                         return sd_bus_error_set_errno(error, r);
 216         }
 217
 218         r = sd_bus_message_close_container(reply);
 219         if (r < 0)
 220                 return sd_bus_error_set_errno(error, r);
 221
 222         return sd_bus_send(NULL, reply, NULL);
 223 }
 224
 225 static int method_create_or_register_machine(Manager *manager, sd_bus_message *message, bool read_network, Machine **_m, sd_bus_error *error) {
 226         const char *name, *service, *class, *root_directory;
 227         const int32_t *netif = NULL;
 228         MachineClass c;
 229         uint32_t leader;
 230         sd_id128_t id;
 231         const void *v;
 232         Machine *m;
 233         size_t n, n_netif = 0;
 234         int r;
 235
 236         assert(manager);
 237         assert(message);
 238         assert(_m);
 239
 240         r = sd_bus_message_read(message, "s", &name);
 241         if (r < 0)
 242                 return r;
 243         if (!hostname_is_valid(name, 0))
 244                 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid machine name");
 245
 246         r = sd_bus_message_read_array(message, 'y', &v, &n);
 247         if (r < 0)
 248                 return r;
 249         if (n == 0)
 250                 id = SD_ID128_NULL;
 251         else if (n == 16)
 252                 memcpy(&id, v, n);
 253         else
 254                 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid machine ID parameter");
 255
 256         r = sd_bus_message_read(message, "ssus", &service, &class, &leader, &root_directory);
 257         if (r < 0)
 258                 return r;
 259
 260         if (read_network) {
 261                 r = sd_bus_message_read_array(message, 'i', (const void**) &netif, &n_netif);
 262                 if (r < 0)
 263                         return r;
 264
 265                 n_netif /= sizeof(int32_t);
 266
 267                 for (size_t i = 0; i < n_netif; i++) {
 268                         if (netif[i] <= 0)
 269                                 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid network interface index %i", netif[i]);
 270                 }
 271         }
 272
 273         if (isempty(class))
 274                 c = _MACHINE_CLASS_INVALID;
 275         else {
 276                 c = machine_class_from_string(class);
 277                 if (c < 0)
 278                         return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid machine class parameter");
 279         }
 280
 281         if (leader == 1)
 282                 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid leader PID");
 283
 284         if (!isempty(root_directory) && !path_is_absolute(root_directory))
 285                 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Root directory must be empty or an absolute path");
 286
 287         if (leader == 0) {
 288                 _cleanup_(sd_bus_creds_unrefp) sd_bus_creds *creds = NULL;
 289
 290                 r = sd_bus_query_sender_creds(message, SD_BUS_CREDS_PID, &creds);
 291                 if (r < 0)
 292                         return r;
 293
 294                 assert_cc(sizeof(uint32_t) == sizeof(pid_t));
 295
 296                 r = sd_bus_creds_get_pid(creds, (pid_t*) &leader);
 297                 if (r < 0)
 298                         return r;
 299         }
 300
 301         if (hashmap_get(manager->machines, name))
 302                 return sd_bus_error_setf(error, BUS_ERROR_MACHINE_EXISTS, "Machine '%s' already exists", name);
 303
 304         r = manager_add_machine(manager, name, &m);
 305         if (r < 0)
 306                 return r;
 307
 308         m->leader = leader;
 309         m->class = c;
 310         m->id = id;
 311
 312         if (!isempty(service)) {
 313                 m->service = strdup(service);
 314                 if (!m->service) {
 315                         r = -ENOMEM;
 316                         goto fail;
 317                 }
 318         }
 319
 320         if (!isempty(root_directory)) {
 321                 m->root_directory = strdup(root_directory);
 322                 if (!m->root_directory) {
 323                         r = -ENOMEM;
 324                         goto fail;
 325                 }
 326         }
 327
 328         if (n_netif > 0) {
 329                 assert_cc(sizeof(int32_t) == sizeof(int));
 330                 m->netif = memdup(netif, sizeof(int32_t) * n_netif);
 331                 if (!m->netif) {
 332                         r = -ENOMEM;
 333                         goto fail;
 334                 }
 335
 336                 m->n_netif = n_netif;
 337         }
 338
 339         *_m = m;
 340
 341         return 1;
 342
 343 fail:
 344         machine_add_to_gc_queue(m);
 345         return r;
 346 }
 347
 348 static int method_create_machine_internal(sd_bus_message *message, bool read_network, void *userdata, sd_bus_error *error) {
 349         Manager *manager = userdata;
 350         Machine *m = NULL;
 351         int r;
 352
 353         assert(message);
 354         assert(manager);
 355
 356         r = method_create_or_register_machine(manager, message, read_network, &m, error);
 357         if (r < 0)
 358                 return r;
 359
 360         r = sd_bus_message_enter_container(message, 'a', "(sv)");
 361         if (r < 0)
 362                 goto fail;
 363
 364         r = machine_start(m, message, error);
 365         if (r < 0)
 366                 goto fail;
 367
 368         m->create_message = sd_bus_message_ref(message);
 369         return 1;
 370
 371 fail:
 372         machine_add_to_gc_queue(m);
 373         return r;
 374 }
 375
 376 static int method_create_machine_with_network(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 377         return method_create_machine_internal(message, true, userdata, error);
 378 }
 379
 380 static int method_create_machine(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 381         return method_create_machine_internal(message, false, userdata, error);
 382 }
 383
 384 static int method_register_machine_internal(sd_bus_message *message, bool read_network, void *userdata, sd_bus_error *error) {
 385         Manager *manager = userdata;
 386         _cleanup_free_ char *p = NULL;
 387         Machine *m = NULL;
 388         int r;
 389
 390         assert(message);
 391         assert(manager);
 392
 393         r = method_create_or_register_machine(manager, message, read_network, &m, error);
 394         if (r < 0)
 395                 return r;
 396
 397         r = cg_pid_get_unit(m->leader, &m->unit);
 398         if (r < 0) {
 399                 r = sd_bus_error_set_errnof(error, r,
 400                                             "Failed to determine unit of process "PID_FMT" : %m",
 401                                             m->leader);
 402                 goto fail;
 403         }
 404
 405         r = machine_start(m, NULL, error);
 406         if (r < 0)
 407                 goto fail;
 408
 409         p = machine_bus_path(m);
 410         if (!p) {
 411                 r = -ENOMEM;
 412                 goto fail;
 413         }
 414
 415         return sd_bus_reply_method_return(message, "o", p);
 416
 417 fail:
 418         machine_add_to_gc_queue(m);
 419         return r;
 420 }
 421
 422 static int method_register_machine_with_network(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 423         return method_register_machine_internal(message, true, userdata, error);
 424 }
 425
 426 static int method_register_machine(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 427         return method_register_machine_internal(message, false, userdata, error);
 428 }
 429
 430 static int redirect_method_to_machine(sd_bus_message *message, Manager *m, sd_bus_error *error, sd_bus_message_handler_t method) {
 431         Machine *machine;
 432         const char *name;
 433         int r;
 434
 435         assert(message);
 436         assert(m);
 437         assert(method);
 438
 439         r = sd_bus_message_read(message, "s", &name);
 440         if (r < 0)
 441                 return sd_bus_error_set_errno(error, r);
 442
 443         machine = hashmap_get(m->machines, name);
 444         if (!machine)
 445                 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_MACHINE, "No machine '%s' known", name);
 446
 447         return method(message, machine, error);
 448 }
 449
 450 static int method_unregister_machine(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 451         return redirect_method_to_machine(message, userdata, error, bus_machine_method_unregister);
 452 }
 453
 454 static int method_terminate_machine(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 455         return redirect_method_to_machine(message, userdata, error, bus_machine_method_terminate);
 456 }
 457
 458 static int method_kill_machine(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 459         return redirect_method_to_machine(message, userdata, error, bus_machine_method_kill);
 460 }
 461
 462 static int method_get_machine_addresses(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 463         return redirect_method_to_machine(message, userdata, error, bus_machine_method_get_addresses);
 464 }
 465
 466 static int method_get_machine_os_release(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 467         return redirect_method_to_machine(message, userdata, error, bus_machine_method_get_os_release);
 468 }
 469
 470 static int method_list_images(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 471         _cleanup_(sd_bus_message_unrefp) sd_bus_message *reply = NULL;
 472         _cleanup_hashmap_free_ Hashmap *images = NULL;
 473         _unused_ Manager *m = userdata;
 474         Image *image;
 475         int r;
 476
 477         assert(message);
 478         assert(m);
 479
 480         images = hashmap_new(&image_hash_ops);
 481         if (!images)
 482                 return -ENOMEM;
 483
 484         r = image_discover(IMAGE_MACHINE, NULL, images);
 485         if (r < 0)
 486                 return r;
 487
 488         r = sd_bus_message_new_method_return(message, &reply);
 489         if (r < 0)
 490                 return r;
 491
 492         r = sd_bus_message_open_container(reply, 'a', "(ssbttto)");
 493         if (r < 0)
 494                 return r;
 495
 496         HASHMAP_FOREACH(image, images) {
 497                 _cleanup_free_ char *p = NULL;
 498
 499                 p = image_bus_path(image->name);
 500                 if (!p)
 501                         return -ENOMEM;
 502
 503                 r = sd_bus_message_append(reply, "(ssbttto)",
 504                                           image->name,
 505                                           image_type_to_string(image->type),
 506                                           image->read_only,
 507                                           image->crtime,
 508                                           image->mtime,
 509                                           image->usage,
 510                                           p);
 511                 if (r < 0)
 512                         return r;
 513         }
 514
 515         r = sd_bus_message_close_container(reply);
 516         if (r < 0)
 517                 return r;
 518
 519         return sd_bus_send(NULL, reply, NULL);
 520 }
 521
 522 static int method_open_machine_pty(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 523         return redirect_method_to_machine(message, userdata, error, bus_machine_method_open_pty);
 524 }
 525
 526 static int method_open_machine_login(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 527         return redirect_method_to_machine(message, userdata, error, bus_machine_method_open_login);
 528 }
 529
 530 static int method_open_machine_shell(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 531         return redirect_method_to_machine(message, userdata, error, bus_machine_method_open_shell);
 532 }
 533
 534 static int method_bind_mount_machine(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 535         return redirect_method_to_machine(message, userdata, error, bus_machine_method_bind_mount);
 536 }
 537
 538 static int method_copy_machine(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 539         return redirect_method_to_machine(message, userdata, error, bus_machine_method_copy);
 540 }
 541
 542 static int method_open_machine_root_directory(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 543         return redirect_method_to_machine(message, userdata, error, bus_machine_method_open_root_directory);
 544 }
 545
 546 static int method_get_machine_uid_shift(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 547         return redirect_method_to_machine(message, userdata, error, bus_machine_method_get_uid_shift);
 548 }
 549
 550 static int redirect_method_to_image(sd_bus_message *message, Manager *m, sd_bus_error *error, sd_bus_message_handler_t method) {
 551         _cleanup_(image_unrefp) Image* i = NULL;
 552         const char *name;
 553         int r;
 554
 555         assert(message);
 556         assert(m);
 557         assert(method);
 558
 559         r = sd_bus_message_read(message, "s", &name);
 560         if (r < 0)
 561                 return r;
 562
 563         if (!image_name_is_valid(name))
 564                 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Image name '%s' is invalid.", name);
 565
 566         r = image_find(IMAGE_MACHINE, name, NULL, &i);
 567         if (r == -ENOENT)
 568                 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_IMAGE, "No image '%s' known", name);
 569         if (r < 0)
 570                 return r;
 571
 572         i->userdata = m;
 573         return method(message, i, error);
 574 }
 575
 576 static int method_remove_image(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 577         return redirect_method_to_image(message, userdata, error, bus_image_method_remove);
 578 }
 579
 580 static int method_rename_image(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 581         return redirect_method_to_image(message, userdata, error, bus_image_method_rename);
 582 }
 583
 584 static int method_clone_image(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 585         return redirect_method_to_image(message, userdata, error, bus_image_method_clone);
 586 }
 587
 588 static int method_mark_image_read_only(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 589         return redirect_method_to_image(message, userdata, error, bus_image_method_mark_read_only);
 590 }
 591
 592 static int method_get_image_hostname(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 593         return redirect_method_to_image(message, userdata, error, bus_image_method_get_hostname);
 594 }
 595
 596 static int method_get_image_machine_id(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 597         return redirect_method_to_image(message, userdata, error, bus_image_method_get_machine_id);
 598 }
 599
 600 static int method_get_image_machine_info(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 601         return redirect_method_to_image(message, userdata, error, bus_image_method_get_machine_info);
 602 }
 603
 604 static int method_get_image_os_release(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 605         return redirect_method_to_image(message, userdata, error, bus_image_method_get_os_release);
 606 }
 607
 608 static int clean_pool_done(Operation *operation, int ret, sd_bus_error *error) {
 609         _cleanup_(sd_bus_message_unrefp) sd_bus_message *reply = NULL;
 610         _cleanup_fclose_ FILE *f = NULL;
 611         bool success;
 612         size_t n;
 613         int r;
 614
 615         assert(operation);
 616         assert(operation->extra_fd >= 0);
 617
 618         if (lseek(operation->extra_fd, 0, SEEK_SET) == (off_t) -1)
 619                 return -errno;
 620
 621         f = take_fdopen(&operation->extra_fd, "r");
 622         if (!f)
 623                 return -errno;
 624
 625         /* The resulting temporary file starts with a boolean value that indicates success or not. */
 626         errno = 0;
 627         n = fread(&success, 1, sizeof(success), f);
 628         if (n != sizeof(success))
 629                 return ret < 0 ? ret : errno_or_else(EIO);
 630
 631         if (ret < 0) {
 632                 _cleanup_free_ char *name = NULL;
 633
 634                 /* The clean-up operation failed. In this case the resulting temporary file should contain a boolean
 635                  * set to false followed by the name of the failed image. Let's try to read this and use it for the
 636                  * error message. If we can't read it, don't mind, and return the naked error. */
 637
 638                 if (success) /* The resulting temporary file could not be updated, ignore it. */
 639                         return ret;
 640
 641                 r = read_nul_string(f, LONG_LINE_MAX, &name);
 642                 if (r <= 0) /* Same here... */
 643                         return ret;
 644
 645                 return sd_bus_error_set_errnof(error, ret, "Failed to remove image %s: %m", name);
 646         }
 647
 648         assert(success);
 649
 650         r = sd_bus_message_new_method_return(operation->message, &reply);
 651         if (r < 0)
 652                 return r;
 653
 654         r = sd_bus_message_open_container(reply, 'a', "(st)");
 655         if (r < 0)
 656                 return r;
 657
 658         /* On success the resulting temporary file will contain a list of image names that were removed followed by
 659          * their size on disk. Let's read that and turn it into a bus message. */
 660         for (;;) {
 661                 _cleanup_free_ char *name = NULL;
 662                 uint64_t size;
 663
 664                 r = read_nul_string(f, LONG_LINE_MAX, &name);
 665                 if (r < 0)
 666                         return r;
 667                 if (r == 0) /* reached the end */
 668                         break;
 669
 670                 errno = 0;
 671                 n = fread(&size, 1, sizeof(size), f);
 672                 if (n != sizeof(size))
 673                         return errno_or_else(EIO);
 674
 675                 r = sd_bus_message_append(reply, "(st)", name, size);
 676                 if (r < 0)
 677                         return r;
 678         }
 679
 680         r = sd_bus_message_close_container(reply);
 681         if (r < 0)
 682                 return r;
 683
 684         return sd_bus_send(NULL, reply, NULL);
 685 }
 686
 687 static int method_clean_pool(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 688         enum {
 689                 REMOVE_ALL,
 690                 REMOVE_HIDDEN,
 691         } mode;
 692
 693         _cleanup_close_pair_ int errno_pipe_fd[2] = { -1, -1 };
 694         _cleanup_close_ int result_fd = -1;
 695         Manager *m = userdata;
 696         Operation *operation;
 697         const char *mm;
 698         pid_t child;
 699         int r;
 700
 701         assert(message);
 702
 703         if (m->n_operations >= OPERATIONS_MAX)
 704                 return sd_bus_error_setf(error, SD_BUS_ERROR_LIMITS_EXCEEDED, "Too many ongoing operations.");
 705
 706         r = sd_bus_message_read(message, "s", &mm);
 707         if (r < 0)
 708                 return r;
 709
 710         if (streq(mm, "all"))
 711                 mode = REMOVE_ALL;
 712         else if (streq(mm, "hidden"))
 713                 mode = REMOVE_HIDDEN;
 714         else
 715                 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Unknown mode '%s'.", mm);
 716
 717         r = bus_verify_polkit_async(
 718                         message,
 719                         CAP_SYS_ADMIN,
 720                         "org.freedesktop.machine1.manage-machines",
 721                         NULL,
 722                         false,
 723                         UID_INVALID,
 724                         &m->polkit_registry,
 725                         error);
 726         if (r < 0)
 727                 return r;
 728         if (r == 0)
 729                 return 1; /* Will call us back */
 730
 731         if (pipe2(errno_pipe_fd, O_CLOEXEC|O_NONBLOCK) < 0)
 732                 return sd_bus_error_set_errnof(error, errno, "Failed to create pipe: %m");
 733
 734         /* Create a temporary file we can dump information about deleted images into. We use a temporary file for this
 735          * instead of a pipe or so, since this might grow quit large in theory and we don't want to process this
 736          * continuously */
 737         result_fd = open_tmpfile_unlinkable(NULL, O_RDWR|O_CLOEXEC);
 738         if (result_fd < 0)
 739                 return -errno;
 740
 741         /* This might be a slow operation, run it asynchronously in a background process */
 742         r = safe_fork("(sd-clean)", FORK_RESET_SIGNALS, &child);
 743         if (r < 0)
 744                 return sd_bus_error_set_errnof(error, r, "Failed to fork(): %m");
 745         if (r == 0) {
 746                 _cleanup_hashmap_free_ Hashmap *images = NULL;
 747                 bool success = true;
 748                 Image *image;
 749                 ssize_t l;
 750
 751                 errno_pipe_fd[0] = safe_close(errno_pipe_fd[0]);
 752
 753                 images = hashmap_new(&image_hash_ops);
 754                 if (!images) {
 755                         r = -ENOMEM;
 756                         goto child_fail;
 757                 }
 758
 759                 r = image_discover(IMAGE_MACHINE, NULL, images);
 760                 if (r < 0)
 761                         goto child_fail;
 762
 763                 l = write(result_fd, &success, sizeof(success));
 764                 if (l < 0) {
 765                         r = -errno;
 766                         goto child_fail;
 767                 }
 768
 769                 HASHMAP_FOREACH(image, images) {
 770
 771                         /* We can't remove vendor images (i.e. those in /usr) */
 772                         if (IMAGE_IS_VENDOR(image))
 773                                 continue;
 774
 775                         if (IMAGE_IS_HOST(image))
 776                                 continue;
 777
 778                         if (mode == REMOVE_HIDDEN && !IMAGE_IS_HIDDEN(image))
 779                                 continue;
 780
 781                         r = image_remove(image);
 782                         if (r == -EBUSY) /* keep images that are currently being used. */
 783                                 continue;
 784                         if (r < 0) {
 785                                 /* If the operation failed, let's override everything we wrote, and instead write there at which image we failed. */
 786                                 success = false;
 787                                 (void) ftruncate(result_fd, 0);
 788                                 (void) lseek(result_fd, 0, SEEK_SET);
 789                                 (void) write(result_fd, &success, sizeof(success));
 790                                 (void) write(result_fd, image->name, strlen(image->name)+1);
 791                                 goto child_fail;
 792                         }
 793
 794                         l = write(result_fd, image->name, strlen(image->name)+1);
 795                         if (l < 0) {
 796                                 r = -errno;
 797                                 goto child_fail;
 798                         }
 799
 800                         l = write(result_fd, &image->usage_exclusive, sizeof(image->usage_exclusive));
 801                         if (l < 0) {
 802                                 r = -errno;
 803                                 goto child_fail;
 804                         }
 805                 }
 806
 807                 result_fd = safe_close(result_fd);
 808                 _exit(EXIT_SUCCESS);
 809
 810         child_fail:
 811                 (void) write(errno_pipe_fd[1], &r, sizeof(r));
 812                 _exit(EXIT_FAILURE);
 813         }
 814
 815         errno_pipe_fd[1] = safe_close(errno_pipe_fd[1]);
 816
 817         /* The clean-up might take a while, hence install a watch on the child and return */
 818
 819         r = operation_new(m, NULL, child, message, errno_pipe_fd[0], &operation);
 820         if (r < 0) {
 821                 (void) sigkill_wait(child);
 822                 return r;
 823         }
 824
 825         operation->extra_fd = result_fd;
 826         operation->done = clean_pool_done;
 827
 828         result_fd = -1;
 829         errno_pipe_fd[0] = -1;
 830
 831         return 1;
 832 }
 833
 834 static int method_set_pool_limit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 835         Manager *m = userdata;
 836         uint64_t limit;
 837         int r;
 838
 839         assert(message);
 840
 841         r = sd_bus_message_read(message, "t", &limit);
 842         if (r < 0)
 843                 return r;
 844         if (!FILE_SIZE_VALID_OR_INFINITY(limit))
 845                 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "New limit out of range");
 846
 847         r = bus_verify_polkit_async(
 848                         message,
 849                         CAP_SYS_ADMIN,
 850                         "org.freedesktop.machine1.manage-machines",
 851                         NULL,
 852                         false,
 853                         UID_INVALID,
 854                         &m->polkit_registry,
 855                         error);
 856         if (r < 0)
 857                 return r;
 858         if (r == 0)
 859                 return 1; /* Will call us back */
 860
 861         /* Set up the machine directory if necessary */
 862         r = setup_machine_directory(error);
 863         if (r < 0)
 864                 return r;
 865
 866         (void) btrfs_qgroup_set_limit("/var/lib/machines", 0, limit);
 867
 868         r = btrfs_subvol_set_subtree_quota_limit("/var/lib/machines", 0, limit);
 869         if (r == -ENOTTY)
 870                 return sd_bus_error_setf(error, SD_BUS_ERROR_NOT_SUPPORTED, "Quota is only supported on btrfs.");
 871         if (r < 0)
 872                 return sd_bus_error_set_errnof(error, r, "Failed to adjust quota limit: %m");
 873
 874         return sd_bus_reply_method_return(message, NULL);
 875 }
 876
 877 static int method_set_image_limit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 878         return redirect_method_to_image(message, userdata, error, bus_image_method_set_limit);
 879 }
 880
 881 static int method_map_from_machine_user(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 882         Manager *m = userdata;
 883         const char *name;
 884         Machine *machine;
 885         uint32_t uid;
 886         uid_t converted;
 887         int r;
 888
 889         r = sd_bus_message_read(message, "su", &name, &uid);
 890         if (r < 0)
 891                 return r;
 892
 893         if (!uid_is_valid(uid))
 894                 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid user ID " UID_FMT, uid);
 895
 896         machine = hashmap_get(m->machines, name);
 897         if (!machine)
 898                 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_MACHINE, "No machine '%s' known", name);
 899
 900         if (machine->class != MACHINE_CONTAINER)
 901                 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Not supported for non-container machines.");
 902
 903         r = machine_translate_uid(machine, uid, &converted);
 904         if (r == -ESRCH)
 905                 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_USER_MAPPING, "Machine '%s' has no matching user mappings.", name);
 906         if (r < 0)
 907                 return r;
 908
 909         return sd_bus_reply_method_return(message, "u", (uint32_t) converted);
 910 }
 911
 912 static int method_map_to_machine_user(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 913         _cleanup_free_ char *o = NULL;
 914         Manager *m = userdata;
 915         Machine *machine;
 916         uid_t uid, converted;
 917         int r;
 918
 919         r = sd_bus_message_read(message, "u", &uid);
 920         if (r < 0)
 921                 return r;
 922         if (!uid_is_valid(uid))
 923                 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid user ID " UID_FMT, uid);
 924         if (uid < 0x10000)
 925                 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_USER_MAPPING, "User " UID_FMT " belongs to host UID range", uid);
 926
 927         r = manager_find_machine_for_uid(m, uid, &machine, &converted);
 928         if (r < 0)
 929                 return r;
 930         if (!r)
 931                 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_USER_MAPPING, "No matching user mapping for " UID_FMT ".", uid);
 932
 933         o = machine_bus_path(machine);
 934         if (!o)
 935                 return -ENOMEM;
 936
 937         return sd_bus_reply_method_return(message, "sou", machine->name, o, (uint32_t) converted);
 938 }
 939
 940 static int method_map_from_machine_group(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 941         Manager *m = userdata;
 942         const char *name;
 943         Machine *machine;
 944         gid_t converted;
 945         uint32_t gid;
 946         int r;
 947
 948         r = sd_bus_message_read(message, "su", &name, &gid);
 949         if (r < 0)
 950                 return r;
 951
 952         if (!gid_is_valid(gid))
 953                 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid group ID " GID_FMT, gid);
 954
 955         machine = hashmap_get(m->machines, name);
 956         if (!machine)
 957                 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_MACHINE, "No machine '%s' known", name);
 958
 959         if (machine->class != MACHINE_CONTAINER)
 960                 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Not supported for non-container machines.");
 961
 962         r = machine_translate_gid(machine, gid, &converted);
 963         if (r == -ESRCH)
 964                 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_USER_MAPPING, "Machine '%s' has no matching group mappings.", name);
 965         if (r < 0)
 966                 return r;
 967
 968         return sd_bus_reply_method_return(message, "u", (uint32_t) converted);
 969 }
 970
 971 static int method_map_to_machine_group(sd_bus_message *message, void *userdata, sd_bus_error *error) {
 972         _cleanup_free_ char *o = NULL;
 973         Manager *m = userdata;
 974         Machine *machine;
 975         gid_t gid, converted;
 976         int r;
 977
 978         r = sd_bus_message_read(message, "u", &gid);
 979         if (r < 0)
 980                 return r;
 981         if (!gid_is_valid(gid))
 982                 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid group ID " GID_FMT, gid);
 983         if (gid < 0x10000)
 984                 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_GROUP_MAPPING, "Group " GID_FMT " belongs to host GID range", gid);
 985
 986         r = manager_find_machine_for_gid(m, gid, &machine, &converted);
 987         if (r < 0)
 988                 return r;
 989         if (!r)
 990                 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_GROUP_MAPPING, "No matching group mapping for " GID_FMT ".", gid);
 991
 992         o = machine_bus_path(machine);
 993         if (!o)
 994                 return -ENOMEM;
 995
 996         return sd_bus_reply_method_return(message, "sou", machine->name, o, (uint32_t) converted);
 997 }
 998
 999 const sd_bus_vtable manager_vtable[] = {
1000         SD_BUS_VTABLE_START(0),
1001
1002         SD_BUS_PROPERTY("PoolPath", "s", property_get_pool_path, 0, 0),
1003         SD_BUS_PROPERTY("PoolUsage", "t", property_get_pool_usage, 0, 0),
1004         SD_BUS_PROPERTY("PoolLimit", "t", property_get_pool_limit, 0, 0),
1005
1006         SD_BUS_METHOD_WITH_NAMES("GetMachine",
1007                                  "s",
1008                                  SD_BUS_PARAM(name),
1009                                  "o",
1010                                  SD_BUS_PARAM(machine),
1011                                  method_get_machine,
1012                                  SD_BUS_VTABLE_UNPRIVILEGED),
1013         SD_BUS_METHOD_WITH_NAMES("GetImage",
1014                                  "s",
1015                                  SD_BUS_PARAM(name),
1016                                  "o",
1017                                  SD_BUS_PARAM(image),
1018                                  method_get_image,
1019                                  SD_BUS_VTABLE_UNPRIVILEGED),
1020         SD_BUS_METHOD_WITH_NAMES("GetMachineByPID",
1021                                  "u",
1022                                  SD_BUS_PARAM(pid),
1023                                  "o",
1024                                  SD_BUS_PARAM(machine),
1025                                  method_get_machine_by_pid,
1026                                  SD_BUS_VTABLE_UNPRIVILEGED),
1027         SD_BUS_METHOD_WITH_NAMES("ListMachines",
1028                                  NULL,,
1029                                  "a(ssso)",
1030                                  SD_BUS_PARAM(machines),
1031                                  method_list_machines,
1032                                  SD_BUS_VTABLE_UNPRIVILEGED),
1033         SD_BUS_METHOD_WITH_NAMES("ListImages",
1034                                  NULL,,
1035                                  "a(ssbttto)",
1036                                  SD_BUS_PARAM(images),
1037                                  method_list_images,
1038                                  SD_BUS_VTABLE_UNPRIVILEGED),
1039         SD_BUS_METHOD_WITH_NAMES("CreateMachine",
1040                                  "sayssusa(sv)",
1041                                  SD_BUS_PARAM(name)
1042                                  SD_BUS_PARAM(id)
1043                                  SD_BUS_PARAM(service)
1044                                  SD_BUS_PARAM(class)
1045                                  SD_BUS_PARAM(leader)
1046                                  SD_BUS_PARAM(root_directory)
1047                                  SD_BUS_PARAM(scope_properties),
1048                                  "o",
1049                                  SD_BUS_PARAM(path),
1050                                  method_create_machine, 0),
1051         SD_BUS_METHOD_WITH_NAMES("CreateMachineWithNetwork",
1052                                  "sayssusaia(sv)",
1053                                  SD_BUS_PARAM(name)
1054                                  SD_BUS_PARAM(id)
1055                                  SD_BUS_PARAM(service)
1056                                  SD_BUS_PARAM(class)
1057                                  SD_BUS_PARAM(leader)
1058                                  SD_BUS_PARAM(root_directory)
1059                                  SD_BUS_PARAM(ifindices)
1060                                  SD_BUS_PARAM(scope_properties),
1061                                  "o",
1062                                  SD_BUS_PARAM(path),
1063                                  method_create_machine_with_network, 0),
1064         SD_BUS_METHOD_WITH_NAMES("RegisterMachine",
1065                                  "sayssus",
1066                                  SD_BUS_PARAM(name)
1067                                  SD_BUS_PARAM(id)
1068                                  SD_BUS_PARAM(service)
1069                                  SD_BUS_PARAM(class)
1070                                  SD_BUS_PARAM(leader)
1071                                  SD_BUS_PARAM(root_directory),
1072                                  "o",
1073                                  SD_BUS_PARAM(path),
1074                                  method_register_machine, 0),
1075         SD_BUS_METHOD_WITH_NAMES("RegisterMachineWithNetwork",
1076                                  "sayssusai",
1077                                  SD_BUS_PARAM(name)
1078                                  SD_BUS_PARAM(id)
1079                                  SD_BUS_PARAM(service)
1080                                  SD_BUS_PARAM(class)
1081                                  SD_BUS_PARAM(leader)
1082                                  SD_BUS_PARAM(root_directory)
1083                                  SD_BUS_PARAM(ifindices),
1084                                  "o",
1085                                  SD_BUS_PARAM(path),
1086                                  method_register_machine_with_network, 0),
1087         SD_BUS_METHOD_WITH_NAMES("UnregisterMachine",
1088                                  "s",
1089                                  SD_BUS_PARAM(name),
1090                                  NULL,,
1091                                  method_unregister_machine,
1092                                  SD_BUS_VTABLE_UNPRIVILEGED),
1093         SD_BUS_METHOD_WITH_NAMES("TerminateMachine",
1094                                  "s",
1095                                  SD_BUS_PARAM(id),
1096                                  NULL,,
1097                                  method_terminate_machine,
1098                                  SD_BUS_VTABLE_UNPRIVILEGED),
1099         SD_BUS_METHOD_WITH_NAMES("KillMachine",
1100                                  "ssi",
1101                                  SD_BUS_PARAM(name)
1102                                  SD_BUS_PARAM(who)
1103                                  SD_BUS_PARAM(signal),
1104                                  NULL,,
1105                                  method_kill_machine,
1106                                  SD_BUS_VTABLE_UNPRIVILEGED),
1107         SD_BUS_METHOD_WITH_NAMES("GetMachineAddresses",
1108                                  "s",
1109                                  SD_BUS_PARAM(name),
1110                                  "a(iay)",
1111                                  SD_BUS_PARAM(addresses),
1112                                  method_get_machine_addresses,
1113                                  SD_BUS_VTABLE_UNPRIVILEGED),
1114         SD_BUS_METHOD_WITH_NAMES("GetMachineOSRelease",
1115                                  "s",
1116                                  SD_BUS_PARAM(name),
1117                                  "a{ss}",
1118                                  SD_BUS_PARAM(fields),
1119                                  method_get_machine_os_release,
1120                                  SD_BUS_VTABLE_UNPRIVILEGED),
1121         SD_BUS_METHOD_WITH_NAMES("OpenMachinePTY",
1122                                  "s",
1123                                  SD_BUS_PARAM(name),
1124                                  "hs",
1125                                  SD_BUS_PARAM(pty)
1126                                  SD_BUS_PARAM(pty_path),
1127                                  method_open_machine_pty,
1128                                  0),
1129         SD_BUS_METHOD_WITH_NAMES("OpenMachineLogin",
1130                                  "s",
1131                                  SD_BUS_PARAM(name),
1132                                  "hs",
1133                                  SD_BUS_PARAM(pty)
1134                                  SD_BUS_PARAM(pty_path),
1135                                  method_open_machine_login,
1136                                  SD_BUS_VTABLE_UNPRIVILEGED),
1137         SD_BUS_METHOD_WITH_NAMES("OpenMachineShell",
1138                                  "sssasas",
1139                                  SD_BUS_PARAM(name)
1140                                  SD_BUS_PARAM(user)
1141                                  SD_BUS_PARAM(path)
1142                                  SD_BUS_PARAM(args)
1143                                  SD_BUS_PARAM(environment),
1144                                  "hs",
1145                                  SD_BUS_PARAM(pty)
1146                                  SD_BUS_PARAM(pty_path),
1147                                  method_open_machine_shell,
1148                                  SD_BUS_VTABLE_UNPRIVILEGED),
1149         SD_BUS_METHOD_WITH_NAMES("BindMountMachine",
1150                                  "sssbb",
1151                                  SD_BUS_PARAM(name)
1152                                  SD_BUS_PARAM(source)
1153                                  SD_BUS_PARAM(destination)
1154                                  SD_BUS_PARAM(read_only)
1155                                  SD_BUS_PARAM(mkdir),
1156                                  NULL,,
1157                                  method_bind_mount_machine,
1158                                  SD_BUS_VTABLE_UNPRIVILEGED),
1159         SD_BUS_METHOD_WITH_NAMES("CopyFromMachine",
1160                                  "sss",
1161                                  SD_BUS_PARAM(name)
1162                                  SD_BUS_PARAM(source)
1163                                  SD_BUS_PARAM(destination),
1164                                  NULL,,
1165                                  method_copy_machine,
1166                                  SD_BUS_VTABLE_UNPRIVILEGED),
1167         SD_BUS_METHOD_WITH_NAMES("CopyToMachine",
1168                                  "sss",
1169                                  SD_BUS_PARAM(name)
1170                                  SD_BUS_PARAM(source)
1171                                  SD_BUS_PARAM(destination),
1172                                  NULL,,
1173                                  method_copy_machine,
1174                                  SD_BUS_VTABLE_UNPRIVILEGED),
1175         SD_BUS_METHOD_WITH_NAMES("OpenMachineRootDirectory",
1176                                  "s",
1177                                  SD_BUS_PARAM(name),
1178                                  "h",
1179                                  SD_BUS_PARAM(fd),
1180                                  method_open_machine_root_directory,
1181                                  SD_BUS_VTABLE_UNPRIVILEGED),
1182         SD_BUS_METHOD_WITH_NAMES("GetMachineUIDShift",
1183                                  "s",
1184                                  SD_BUS_PARAM(name),
1185                                  "u",
1186                                  SD_BUS_PARAM(shift),
1187                                  method_get_machine_uid_shift,
1188                                  SD_BUS_VTABLE_UNPRIVILEGED),
1189         SD_BUS_METHOD_WITH_NAMES("RemoveImage",
1190                                  "s",
1191                                  SD_BUS_PARAM(name),
1192                                  NULL,,
1193                                  method_remove_image,
1194                                  SD_BUS_VTABLE_UNPRIVILEGED),
1195         SD_BUS_METHOD_WITH_NAMES("RenameImage",
1196                                  "ss",
1197                                  SD_BUS_PARAM(name)
1198                                  SD_BUS_PARAM(new_name),
1199                                  NULL,,
1200                                  method_rename_image,
1201                                  SD_BUS_VTABLE_UNPRIVILEGED),
1202         SD_BUS_METHOD_WITH_NAMES("CloneImage",
1203                                  "ssb",
1204                                  SD_BUS_PARAM(name)
1205                                  SD_BUS_PARAM(new_name)
1206                                  SD_BUS_PARAM(read_only),
1207                                  NULL,,
1208                                  method_clone_image,
1209                                  SD_BUS_VTABLE_UNPRIVILEGED),
1210         SD_BUS_METHOD_WITH_NAMES("MarkImageReadOnly",
1211                                  "sb",
1212                                  SD_BUS_PARAM(name)
1213                                  SD_BUS_PARAM(read_only),
1214                                  NULL,,
1215                                  method_mark_image_read_only,
1216                                  SD_BUS_VTABLE_UNPRIVILEGED),
1217         SD_BUS_METHOD_WITH_NAMES("GetImageHostname",
1218                                  "s",
1219                                  SD_BUS_PARAM(name),
1220                                  "s",
1221                                  SD_BUS_PARAM(hostname),
1222                                  method_get_image_hostname,
1223                                  SD_BUS_VTABLE_UNPRIVILEGED),
1224         SD_BUS_METHOD_WITH_NAMES("GetImageMachineID",
1225                                  "s",
1226                                  SD_BUS_PARAM(name),
1227                                  "ay",
1228                                  SD_BUS_PARAM(id),
1229                                  method_get_image_machine_id,
1230                                  SD_BUS_VTABLE_UNPRIVILEGED),
1231         SD_BUS_METHOD_WITH_NAMES("GetImageMachineInfo",
1232                                  "s",
1233                                  SD_BUS_PARAM(name),
1234                                  "a{ss}",
1235                                  SD_BUS_PARAM(machine_info),
1236                                  method_get_image_machine_info,
1237                                  SD_BUS_VTABLE_UNPRIVILEGED),
1238         SD_BUS_METHOD_WITH_NAMES("GetImageOSRelease",
1239                                  "s",
1240                                  SD_BUS_PARAM(name),
1241                                  "a{ss}",
1242                                  SD_BUS_PARAM(os_release),
1243                                  method_get_image_os_release,
1244                                  SD_BUS_VTABLE_UNPRIVILEGED),
1245         SD_BUS_METHOD_WITH_NAMES("SetPoolLimit",
1246                                  "t",
1247                                  SD_BUS_PARAM(size),
1248                                  NULL,,
1249                                  method_set_pool_limit,
1250                                  SD_BUS_VTABLE_UNPRIVILEGED),
1251         SD_BUS_METHOD_WITH_NAMES("SetImageLimit",
1252                                  "st",
1253                                  SD_BUS_PARAM(name)
1254                                  SD_BUS_PARAM(size),
1255                                  NULL,,
1256                                  method_set_image_limit,
1257                                  SD_BUS_VTABLE_UNPRIVILEGED),
1258         SD_BUS_METHOD_WITH_NAMES("CleanPool",
1259                                  "s",
1260                                  SD_BUS_PARAM(mode),
1261                                  "a(st)",
1262                                  SD_BUS_PARAM(images),
1263                                  method_clean_pool,
1264                                  SD_BUS_VTABLE_UNPRIVILEGED),
1265         SD_BUS_METHOD_WITH_NAMES("MapFromMachineUser",
1266                                  "su",
1267                                  SD_BUS_PARAM(name)
1268                                  SD_BUS_PARAM(uid_inner),
1269                                  "u",
1270                                  SD_BUS_PARAM(uid_outer),
1271                                  method_map_from_machine_user,
1272                                  SD_BUS_VTABLE_UNPRIVILEGED),
1273         SD_BUS_METHOD_WITH_NAMES("MapToMachineUser",
1274                                  "u",
1275                                  SD_BUS_PARAM(uid_outer),
1276                                  "sou",
1277                                  SD_BUS_PARAM(machine_name)
1278                                  SD_BUS_PARAM(machine_path)
1279                                  SD_BUS_PARAM(uid_inner),
1280                                  method_map_to_machine_user,
1281                                  SD_BUS_VTABLE_UNPRIVILEGED),
1282         SD_BUS_METHOD_WITH_NAMES("MapFromMachineGroup",
1283                                  "su",
1284                                  SD_BUS_PARAM(name)
1285                                  SD_BUS_PARAM(gid_inner),
1286                                  "u",
1287                                  SD_BUS_PARAM(gid_outer),
1288                                  method_map_from_machine_group,
1289                                  SD_BUS_VTABLE_UNPRIVILEGED),
1290         SD_BUS_METHOD_WITH_NAMES("MapToMachineGroup",
1291                                  "u",
1292                                  SD_BUS_PARAM(gid_outer),
1293                                  "sou",
1294                                  SD_BUS_PARAM(machine_name)
1295                                  SD_BUS_PARAM(machine_path)
1296                                  SD_BUS_PARAM(gid_inner),
1297                                  method_map_to_machine_group,
1298                                  SD_BUS_VTABLE_UNPRIVILEGED),
1299
1300         SD_BUS_SIGNAL_WITH_NAMES("MachineNew",
1301                                  "so",
1302                                  SD_BUS_PARAM(machine)
1303                                  SD_BUS_PARAM(path),
1304                                  0),
1305         SD_BUS_SIGNAL_WITH_NAMES("MachineRemoved",
1306                                  "so",
1307                                  SD_BUS_PARAM(machine)
1308                                  SD_BUS_PARAM(path),
1309                                  0),
1310
1311         SD_BUS_VTABLE_END
1312 };
1313
1314 const BusObjectImplementation manager_object = {
1315         "/org/freedesktop/machine1",
1316         "org.freedesktop.machine1.Manager",
1317         .vtables = BUS_VTABLES(manager_vtable),
1318         .children = BUS_IMPLEMENTATIONS( &machine_object,
1319                                          &image_object ),
1320 };
1321
1322 int match_job_removed(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1323         const char *path, *result, *unit;
1324         Manager *m = userdata;
1325         Machine *machine;
1326         uint32_t id;
1327         int r;
1328
1329         assert(message);
1330         assert(m);
1331
1332         r = sd_bus_message_read(message, "uoss", &id, &path, &unit, &result);
1333         if (r < 0) {
1334                 bus_log_parse_error(r);
1335                 return 0;
1336         }
1337
1338         machine = hashmap_get(m->machine_units, unit);
1339         if (!machine)
1340                 return 0;
1341
1342         if (streq_ptr(path, machine->scope_job)) {
1343                 machine->scope_job = mfree(machine->scope_job);
1344
1345                 if (machine->started) {
1346                         if (streq(result, "done"))
1347                                 machine_send_create_reply(machine, NULL);
1348                         else {
1349                                 _cleanup_(sd_bus_error_free) sd_bus_error e = SD_BUS_ERROR_NULL;
1350
1351                                 sd_bus_error_setf(&e, BUS_ERROR_JOB_FAILED, "Start job for unit %s failed with '%s'", unit, result);
1352
1353                                 machine_send_create_reply(machine, &e);
1354                         }
1355                 }
1356
1357                 machine_save(machine);
1358         }
1359
1360         machine_add_to_gc_queue(machine);
1361         return 0;
1362 }
1363
1364 int match_properties_changed(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1365         _cleanup_free_ char *unit = NULL;
1366         const char *path;
1367         Manager *m = userdata;
1368         Machine *machine;
1369         int r;
1370
1371         assert(message);
1372         assert(m);
1373
1374         path = sd_bus_message_get_path(message);
1375         if (!path)
1376                 return 0;
1377
1378         r = unit_name_from_dbus_path(path, &unit);
1379         if (r == -EINVAL) /* not for a unit */
1380                 return 0;
1381         if (r < 0) {
1382                 log_oom();
1383                 return 0;
1384         }
1385
1386         machine = hashmap_get(m->machine_units, unit);
1387         if (!machine)
1388                 return 0;
1389
1390         machine_add_to_gc_queue(machine);
1391         return 0;
1392 }
1393
1394 int match_unit_removed(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1395         const char *path, *unit;
1396         Manager *m = userdata;
1397         Machine *machine;
1398         int r;
1399
1400         assert(message);
1401         assert(m);
1402
1403         r = sd_bus_message_read(message, "so", &unit, &path);
1404         if (r < 0) {
1405                 bus_log_parse_error(r);
1406                 return 0;
1407         }
1408
1409         machine = hashmap_get(m->machine_units, unit);
1410         if (!machine)
1411                 return 0;
1412
1413         machine_add_to_gc_queue(machine);
1414         return 0;
1415 }
1416
1417 int match_reloading(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1418         Manager *m = userdata;
1419         Machine *machine;
1420         int b, r;
1421
1422         assert(message);
1423         assert(m);
1424
1425         r = sd_bus_message_read(message, "b", &b);
1426         if (r < 0) {
1427                 bus_log_parse_error(r);
1428                 return 0;
1429         }
1430         if (b)
1431                 return 0;
1432
1433         /* systemd finished reloading, let's recheck all our machines */
1434         log_debug("System manager has been reloaded, rechecking machines...");
1435
1436         HASHMAP_FOREACH(machine, m->machines)
1437                 machine_add_to_gc_queue(machine);
1438
1439         return 0;
1440 }
1441
1442 int manager_unref_unit(
1443                 Manager *m,
1444                 const char *unit,
1445                 sd_bus_error *error) {
1446
1447         assert(m);
1448         assert(unit);
1449
1450         return bus_call_method(m->bus, bus_systemd_mgr, "UnrefUnit", error, NULL, "s", unit);
1451 }
1452
1453 int manager_stop_unit(Manager *manager, const char *unit, sd_bus_error *error, char **job) {
1454         _cleanup_(sd_bus_message_unrefp) sd_bus_message *reply = NULL;
1455         int r;
1456
1457         assert(manager);
1458         assert(unit);
1459
1460         r = bus_call_method(manager->bus, bus_systemd_mgr, "StopUnit", error, &reply, "ss", unit, "fail");
1461         if (r < 0) {
1462                 if (sd_bus_error_has_names(error, BUS_ERROR_NO_SUCH_UNIT,
1463                                                   BUS_ERROR_LOAD_FAILED)) {
1464
1465                         if (job)
1466                                 *job = NULL;
1467
1468                         sd_bus_error_free(error);
1469                         return 0;
1470                 }
1471
1472                 return r;
1473         }
1474
1475         if (job) {
1476                 const char *j;
1477                 char *copy;
1478
1479                 r = sd_bus_message_read(reply, "o", &j);
1480                 if (r < 0)
1481                         return r;
1482
1483                 copy = strdup(j);
1484                 if (!copy)
1485                         return -ENOMEM;
1486
1487                 *job = copy;
1488         }
1489
1490         return 1;
1491 }
1492
1493 int manager_kill_unit(Manager *manager, const char *unit, int signo, sd_bus_error *error) {
1494         assert(manager);
1495         assert(unit);
1496
1497         return bus_call_method(manager->bus, bus_systemd_mgr, "KillUnit", error, NULL, "ssi", unit, "all", signo);
1498 }
1499
1500 int manager_unit_is_active(Manager *manager, const char *unit) {
1501         _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1502         _cleanup_(sd_bus_message_unrefp) sd_bus_message *reply = NULL;
1503         _cleanup_free_ char *path = NULL;
1504         const char *state;
1505         int r;
1506
1507         assert(manager);
1508         assert(unit);
1509
1510         path = unit_dbus_path_from_name(unit);
1511         if (!path)
1512                 return -ENOMEM;
1513
1514         r = sd_bus_get_property(
1515                         manager->bus,
1516                         "org.freedesktop.systemd1",
1517                         path,
1518                         "org.freedesktop.systemd1.Unit",
1519                         "ActiveState",
1520                         &error,
1521                         &reply,
1522                         "s");
1523         if (r < 0) {
1524                 if (sd_bus_error_has_names(&error, SD_BUS_ERROR_NO_REPLY,
1525                                                    SD_BUS_ERROR_DISCONNECTED))
1526                         return true;
1527
1528                 if (sd_bus_error_has_names(&error, BUS_ERROR_NO_SUCH_UNIT,
1529                                                    BUS_ERROR_LOAD_FAILED))
1530                         return false;
1531
1532                 return r;
1533         }
1534
1535         r = sd_bus_message_read(reply, "s", &state);
1536         if (r < 0)
1537                 return -EINVAL;
1538
1539         return !STR_IN_SET(state, "inactive", "failed");
1540 }
1541
1542 int manager_job_is_active(Manager *manager, const char *path) {
1543         _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1544         _cleanup_(sd_bus_message_unrefp) sd_bus_message *reply = NULL;
1545         int r;
1546
1547         assert(manager);
1548         assert(path);
1549
1550         r = sd_bus_get_property(
1551                         manager->bus,
1552                         "org.freedesktop.systemd1",
1553                         path,
1554                         "org.freedesktop.systemd1.Job",
1555                         "State",
1556                         &error,
1557                         &reply,
1558                         "s");
1559         if (r < 0) {
1560                 if (sd_bus_error_has_names(&error, SD_BUS_ERROR_NO_REPLY,
1561                                                    SD_BUS_ERROR_DISCONNECTED))
1562                         return true;
1563
1564                 if (sd_bus_error_has_name(&error, SD_BUS_ERROR_UNKNOWN_OBJECT))
1565                         return false;
1566
1567                 return r;
1568         }
1569
1570         /* We don't actually care about the state really. The fact
1571          * that we could read the job state is enough for us */
1572
1573         return true;
1574 }
1575
1576 int manager_get_machine_by_pid(Manager *m, pid_t pid, Machine **machine) {
1577         Machine *mm;
1578         int r;
1579
1580         assert(m);
1581         assert(pid >= 1);
1582         assert(machine);
1583
1584         mm = hashmap_get(m->machine_leaders, PID_TO_PTR(pid));
1585         if (!mm) {
1586                 _cleanup_free_ char *unit = NULL;
1587
1588                 r = cg_pid_get_unit(pid, &unit);
1589                 if (r >= 0)
1590                         mm = hashmap_get(m->machine_units, unit);
1591         }
1592         if (!mm)
1593                 return 0;
1594
1595         *machine = mm;
1596         return 1;
1597 }
1598
1599 int manager_add_machine(Manager *m, const char *name, Machine **_machine) {
1600         Machine *machine;
1601
1602         assert(m);
1603         assert(name);
1604
1605         machine = hashmap_get(m->machines, name);
1606         if (!machine) {
1607                 machine = machine_new(m, _MACHINE_CLASS_INVALID, name);
1608                 if (!machine)
1609                         return -ENOMEM;
1610         }
1611
1612         if (_machine)
1613                 *_machine = machine;
1614
1615         return 0;
1616 }