]> git.ipfire.org Git - thirdparty/systemd.git/blame - src/core/main.c
projects / thirdparty / systemd.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
conf-parser: make use of DEFINE_PARSER macro to parse mode_t
[thirdparty/systemd.git] / src / core / main.c
CommitLineData
d6c9574f 1/*-*- Mode: C; c-basic-offset: 8; indent-tabs-mode: nil -*-*/
60918275 2
a7334b09
LP		 3/***
4 This file is part of systemd.
5
6 Copyright 2010 Lennart Poettering
7
8 systemd is free software; you can redistribute it and/or modify it
5430f7f2
LP		 9 under the terms of the GNU Lesser General Public License as published by
10 the Free Software Foundation; either version 2.1 of the License, or
a7334b09
LP		 11 (at your option) any later version.
12
13 systemd is distributed in the hope that it will be useful, but
14 WITHOUT ANY WARRANTY; without even the implied warranty of
15 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
5430f7f2 16 Lesser General Public License for more details.
a7334b09 17
5430f7f2 18 You should have received a copy of the GNU Lesser General Public License
a7334b09
LP		 19 along with systemd; If not, see <http://www.gnu.org/licenses/>.
20***/
21
60918275 22#include <errno.h>
3dfc9763 23#include <fcntl.h>
f170852a 24#include <getopt.h>
97c4f35c 25#include <signal.h>
3dfc9763
LP		 26#include <stdio.h>
27#include <string.h>
664f88a7 28#include <sys/mount.h>
3dfc9763 29#include <sys/prctl.h>
b9e74c39 30#include <sys/reboot.h>
3dfc9763
LP		 31#include <sys/stat.h>
32#include <unistd.h>
b64a3d86
LP		 33#ifdef HAVE_SECCOMP
34#include <seccomp.h>
35#endif
3dfc9763
LP		 36#ifdef HAVE_VALGRIND_VALGRIND_H
37#include <valgrind/valgrind.h>
38#endif
54b434b1 39
718db961 40#include "sd-daemon.h"
718db961 41#include "sd-bus.h"
3dfc9763 42
d9d93745 43#include "architecture.h"
3dfc9763
LP		 44#include "build.h"
45#include "bus-error.h"
46#include "bus-util.h"
ec8927ca 47#include "capability.h"
24efb112 48#include "clock-util.h"
3dfc9763
LP		 49#include "conf-parser.h"
50#include "dbus-manager.h"
51#include "def.h"
52#include "env-util.h"
53#include "fdset.h"
718db961 54#include "fileio.h"
24882e06 55#include "formats-util.h"
3dfc9763
LP		 56#include "hostname-setup.h"
57#include "ima-setup.h"
58#include "killall.h"
59#include "kmod-setup.h"
d7b8eec7 60#include "load-fragment.h"
3dfc9763 61#include "log.h"
b6e66135 62#include "loopback-setup.h"
b6e66135 63#include "machine-id-setup.h"
3dfc9763
LP		 64#include "manager.h"
65#include "missing.h"
66#include "mount-setup.h"
67#include "pager.h"
68#include "process-util.h"
b6e66135 69#include "selinux-setup.h"
3dfc9763
LP		 70#include "selinux-util.h"
71#include "signal-util.h"
ffbd2c4d 72#include "smack-setup.h"
3dfc9763
LP		 73#include "special.h"
74#include "strv.h"
75#include "switch-root.h"
76#include "terminal-util.h"
77#include "virt.h"
78#include "watchdog.h"
b6e66135 79
f170852a
LP		 80static enum {
81 ACTION_RUN,
e965d56d 82 ACTION_HELP,
9ba0bc4e 83 ACTION_VERSION,
e537352b 84 ACTION_TEST,
4288f619
LP		 85 ACTION_DUMP_CONFIGURATION_ITEMS,
86 ACTION_DONE
fa0f4d8a 87} arg_action = ACTION_RUN;
fa0f4d8a 88static char *arg_default_unit = NULL;
b2c23da8 89static ManagerRunningAs arg_running_as = _MANAGER_RUNNING_AS_INVALID;
fa0f4d8a 90static bool arg_dump_core = true;
fa0f4d8a 91static int arg_crash_chvt = -1;
b9e74c39
LP		 92static bool arg_crash_shell = false;
93static bool arg_crash_reboot = false;
fa0f4d8a 94static bool arg_confirm_spawn = false;
b6e2f329 95static ShowStatus arg_show_status = _SHOW_STATUS_UNSET;
bf4df7c3 96static bool arg_switched_root = false;
b87c2aa6 97static int arg_no_pager = -1;
0c85a4f3 98static char ***arg_join_controllers = NULL;
706343f4 99static ExecOutput arg_default_std_output = EXEC_OUTPUT_JOURNAL;
0a494f1f 100static ExecOutput arg_default_std_error = EXEC_OUTPUT_INHERIT;
1f19a534
OS		 101static usec_t arg_default_restart_usec = DEFAULT_RESTART_USEC;
102static usec_t arg_default_timeout_start_usec = DEFAULT_TIMEOUT_USEC;
103static usec_t arg_default_timeout_stop_usec = DEFAULT_TIMEOUT_USEC;
3f41e1e5
LN		 104static usec_t arg_default_start_limit_interval = DEFAULT_START_LIMIT_INTERVAL;
105static unsigned arg_default_start_limit_burst = DEFAULT_START_LIMIT_BURST;
e96d6be7
LP		 106static usec_t arg_runtime_watchdog = 0;
107static usec_t arg_shutdown_watchdog = 10 * USEC_PER_MINUTE;
97d0e5f8 108static char **arg_default_environment = NULL;
517d56b1 109static struct rlimit *arg_default_rlimit[_RLIMIT_MAX] = {};
ec8927ca 110static uint64_t arg_capability_bounding_set_drop = 0;
3a43da28 111static nsec_t arg_timer_slack_nsec = NSEC_INFINITY;
bd8f585b 112static usec_t arg_default_timer_accuracy_usec = 1 * USEC_PER_MINUTE;
d3b1c508
LP		 113static Set* arg_syscall_archs = NULL;
114static FILE* arg_serialization = NULL;
085afe36
LP		 115static bool arg_default_cpu_accounting = false;
116static bool arg_default_blockio_accounting = false;
117static bool arg_default_memory_accounting = false;
03a7b521 118static bool arg_default_tasks_accounting = false;
4fc935ca 119
b87c2aa6
ZJS		 120static void pager_open_if_enabled(void) {
121
122 if (arg_no_pager <= 0)
123 return;
124
125 pager_open(false);
126}
127
b9e74c39
LP		 128noreturn static void freeze_or_reboot(void) {
129
130 if (arg_crash_reboot) {
131 log_notice("Rebooting in 10s...");
132 (void) sleep(10);
133
134 log_notice("Rebooting now...");
135 (void) reboot(RB_AUTOBOOT);
136 log_emergency_errno(errno, "Failed to reboot: %m");
137 }
138
139 log_emergency("Freezing execution.");
140 freeze();
141}
142
919ce0b7 143noreturn static void crash(int sig) {
97c4f35c 144
abb26902
LP		 145 if (getpid() != 1)
146 /* Pass this on immediately, if this is not PID 1 */
92ca4cac 147 (void) raise(sig);
abb26902 148 else if (!arg_dump_core)
4104970e 149 log_emergency("Caught <%s>, not dumping core.", signal_to_string(sig));
97c4f35c 150 else {
b92bea5d 151 struct sigaction sa = {
189d5bac 152 .sa_handler = nop_signal_handler,
b92bea5d
ZJS		 153 .sa_flags = SA_NOCLDSTOP|SA_RESTART,
154 };
97c4f35c
LP		 155 pid_t pid;
156
6f5e3f35 157 /* We want to wait for the core process, hence let's enable SIGCHLD */
92ca4cac 158 (void) sigaction(SIGCHLD, &sa, NULL);
6f5e3f35 159
ee05e779 160 pid = raw_clone(SIGCHLD, NULL);
e62d8c39 161 if (pid < 0)
56f64d95 162 log_emergency_errno(errno, "Caught <%s>, cannot fork for core dump: %m", signal_to_string(sig));
97c4f35c 163 else if (pid == 0) {
92ca4cac
LP		 164 struct rlimit rl = {
165 .rlim_cur = RLIM_INFINITY,
166 .rlim_max = RLIM_INFINITY,
167 };
97c4f35c
LP		 168
169 /* Enable default signal handler for core dump */
92ca4cac
LP		 170 sa = (struct sigaction) {
171 .sa_handler = SIG_DFL,
172 };
173 (void) sigaction(sig, &sa, NULL);
97c4f35c
LP		 174
175 /* Don't limit the core dump size */
92ca4cac 176 (void) setrlimit(RLIMIT_CORE, &rl);
97c4f35c
LP		 177
178 /* Just to be sure... */
e62d9b81 179 (void) chdir("/");
97c4f35c
LP		 180
181 /* Raise the signal again */
ee05e779 182 pid = raw_getpid();
92ca4cac 183 (void) kill(pid, sig); /* raise() would kill the parent */
97c4f35c
LP		 184
185 assert_not_reached("We shouldn't be here...");
92ca4cac 186 _exit(EXIT_FAILURE);
4fc935ca 187 } else {
8e12a6ae
LP		 188 siginfo_t status;
189 int r;
4fc935ca
LP		 190
191 /* Order things nicely. */
e62d8c39
ZJS		 192 r = wait_for_terminate(pid, &status);
193 if (r < 0)
da927ba9 194 log_emergency_errno(r, "Caught <%s>, waitpid() failed: %m", signal_to_string(sig));
8e12a6ae 195 else if (status.si_code != CLD_DUMPED)
ee05e779
ZJS		 196 log_emergency("Caught <%s>, core dump failed (child "PID_FMT", code=%s, status=%i/%s).",
197 signal_to_string(sig),
198 pid, sigchld_code_to_string(status.si_code),
199 status.si_status,
200 strna(status.si_code == CLD_EXITED
201 ? exit_status_to_string(status.si_status, EXIT_STATUS_FULL)
202 : signal_to_string(status.si_status)));
4fc935ca 203 else
4104970e 204 log_emergency("Caught <%s>, dumped core as pid "PID_FMT".", signal_to_string(sig), pid);
97c4f35c
LP		 205 }
206 }
207
b9e74c39 208 if (arg_crash_chvt >= 0)
92ca4cac 209 (void) chvt(arg_crash_chvt);
601f6a1e 210
fa0f4d8a 211 if (arg_crash_shell) {
b92bea5d
ZJS		 212 struct sigaction sa = {
213 .sa_handler = SIG_IGN,
214 .sa_flags = SA_NOCLDSTOP|SA_NOCLDWAIT|SA_RESTART,
215 };
6f5e3f35 216 pid_t pid;
8c43883a 217
b9e74c39 218 log_notice("Executing crash shell in 10s...");
92ca4cac 219 (void) sleep(10);
4fc935ca 220
6f5e3f35 221 /* Let the kernel reap children for us */
92ca4cac 222 (void) sigaction(SIGCHLD, &sa, NULL);
8c43883a 223
ee05e779 224 pid = raw_clone(SIGCHLD, NULL);
cd3bd60a 225 if (pid < 0)
56f64d95 226 log_emergency_errno(errno, "Failed to fork off crash shell: %m");
6f5e3f35 227 else if (pid == 0) {
b9e74c39 228 (void) setsid();
92ca4cac
LP		 229 (void) make_console_stdio();
230 (void) execle("/bin/sh", "/bin/sh", NULL, environ);
6f5e3f35 231
ee05e779 232 log_emergency_errno(errno, "execle() failed: %m");
b9e74c39 233 freeze_or_reboot();
92ca4cac 234 _exit(EXIT_FAILURE);
b9e74c39
LP		 235 } else {
236 log_info("Spawned crash shell as PID "PID_FMT".", pid);
237 freeze();
238 }
4fc935ca
LP		 239 }
240
b9e74c39 241 freeze_or_reboot();
97c4f35c
LP		 242}
243
244static void install_crash_handler(void) {
297d563d 245 static const struct sigaction sa = {
b92bea5d 246 .sa_handler = crash,
297d563d 247 .sa_flags = SA_NODEFER, /* So that we can raise the signal again from the signal handler */
b92bea5d 248 };
297d563d 249 int r;
97c4f35c 250
297d563d
LP		 251 /* We ignore the return value here, since, we don't mind if we
252 * cannot set up a crash handler */
253 r = sigaction_many(&sa, SIGNALS_CRASH_HANDLER, -1);
254 if (r < 0)
255 log_debug_errno(r, "I had trouble setting up the crash handler, ignoring: %m");
97c4f35c 256}
f170852a 257
56d96fc0
LP		 258static int console_setup(void) {
259 _cleanup_close_ int tty_fd = -1;
260 int r;
80876c20 261
512947d4 262 tty_fd = open_terminal("/dev/console", O_WRONLY|O_NOCTTY|O_CLOEXEC);
23bbb0de
MS		 263 if (tty_fd < 0)
264 return log_error_errno(tty_fd, "Failed to open /dev/console: %m");
80876c20 265
56d96fc0
LP		 266 /* We don't want to force text mode. plymouth may be showing
267 * pictures already from initrd. */
512947d4 268 r = reset_terminal_fd(tty_fd, false);
23bbb0de
MS		 269 if (r < 0)
270 return log_error_errno(r, "Failed to reset /dev/console: %m");
843d2643 271
56d96fc0 272 return 0;
80876c20
LP		 273}
274
b9e74c39
LP		 275static int parse_crash_chvt(const char *value) {
276 int b;
277
278 if (safe_atoi(value, &arg_crash_chvt) >= 0)
279 return 0;
280
281 b = parse_boolean(value);
282 if (b < 0)
283 return b;
284
285 if (b > 0)
286 arg_crash_chvt = 0; /* switch to where kmsg goes */
287 else
288 arg_crash_chvt = -1; /* turn off switching */
289
290 return 0;
291}
292
059cb385 293static int parse_proc_cmdline_item(const char *key, const char *value) {
f170852a
LP		 294
295 static const char * const rlmap[] = {
ed370f5d 296 "emergency", SPECIAL_EMERGENCY_TARGET,
099663ff 297 "-b", SPECIAL_EMERGENCY_TARGET,
5329ab10 298 "rescue", SPECIAL_RESCUE_TARGET,
ed370f5d
LP		 299 "single", SPECIAL_RESCUE_TARGET,
300 "-s", SPECIAL_RESCUE_TARGET,
301 "s", SPECIAL_RESCUE_TARGET,
302 "S", SPECIAL_RESCUE_TARGET,
303 "1", SPECIAL_RESCUE_TARGET,
d5d8429a
LP		 304 "2", SPECIAL_MULTI_USER_TARGET,
305 "3", SPECIAL_MULTI_USER_TARGET,
306 "4", SPECIAL_MULTI_USER_TARGET,
307 "5", SPECIAL_GRAPHICAL_TARGET,
f170852a 308 };
059cb385 309 int r;
f170852a 310
059cb385 311 assert(key);
5192bd19 312
059cb385 313 if (streq(key, "systemd.unit") && value) {
bf4df7c3
LP		 314
315 if (!in_initrd())
e6e242ad 316 return free_and_strdup(&arg_default_unit, value);
bf4df7c3 317
059cb385 318 } else if (streq(key, "rd.systemd.unit") && value) {
bf4df7c3 319
ca05941b 320 if (in_initrd())
e6e242ad 321 return free_and_strdup(&arg_default_unit, value);
f170852a 322
059cb385 323 } else if (streq(key, "systemd.dump_core") && value) {
4fc935ca 324
059cb385 325 r = parse_boolean(value);
fb472900 326 if (r < 0)
059cb385 327 log_warning("Failed to parse dump core switch %s. Ignoring.", value);
4fc935ca 328 else
fa0f4d8a 329 arg_dump_core = r;
4fc935ca 330
b9e74c39
LP		 331 } else if (streq(key, "systemd.crash_chvt") && value) {
332
333 if (parse_crash_chvt(value) < 0)
334 log_warning("Failed to parse crash chvt switch %s. Ignoring.", value);
335
059cb385 336 } else if (streq(key, "systemd.crash_shell") && value) {
4fc935ca 337
059cb385 338 r = parse_boolean(value);
fb472900 339 if (r < 0)
059cb385 340 log_warning("Failed to parse crash shell switch %s. Ignoring.", value);
4fc935ca 341 else
fa0f4d8a 342 arg_crash_shell = r;
5e7ee61c 343
b9e74c39 344 } else if (streq(key, "systemd.crash_reboot") && value) {
5e7ee61c 345
b9e74c39
LP		 346 r = parse_boolean(value);
347 if (r < 0)
348 log_warning("Failed to parse crash reboot switch %s. Ignoring.", value);
5e7ee61c 349 else
b9e74c39 350 arg_crash_reboot = r;
5e7ee61c 351
059cb385 352 } else if (streq(key, "systemd.confirm_spawn") && value) {
601f6a1e 353
059cb385
LP		 354 r = parse_boolean(value);
355 if (r < 0)
356 log_warning("Failed to parse confirm spawn switch %s. Ignoring.", value);
601f6a1e 357 else
059cb385 358 arg_confirm_spawn = r;
601f6a1e 359
059cb385 360 } else if (streq(key, "systemd.show_status") && value) {
9e58ff9c 361
059cb385 362 r = parse_show_status(value, &arg_show_status);
d450b6f2 363 if (r < 0)
059cb385
LP		 364 log_warning("Failed to parse show status switch %s. Ignoring.", value);
365
366 } else if (streq(key, "systemd.default_standard_output") && value) {
0a494f1f 367
059cb385 368 r = exec_output_from_string(value);
fb472900 369 if (r < 0)
059cb385 370 log_warning("Failed to parse default standard output switch %s. Ignoring.", value);
0a494f1f
LP		 371 else
372 arg_default_std_output = r;
0a494f1f 373
059cb385
LP		 374 } else if (streq(key, "systemd.default_standard_error") && value) {
375
376 r = exec_output_from_string(value);
fb472900 377 if (r < 0)
059cb385 378 log_warning("Failed to parse default standard error switch %s. Ignoring.", value);
0a494f1f
LP		 379 else
380 arg_default_std_error = r;
9e7c5357 381
059cb385
LP		 382 } else if (streq(key, "systemd.setenv") && value) {
383
384 if (env_assignment_is_valid(value)) {
e21fea24
KS		 385 char **env;
386
059cb385 387 env = strv_env_set(arg_default_environment, value);
e21fea24
KS		 388 if (env)
389 arg_default_environment = env;
390 else
279d3c9c 391 log_warning_errno(ENOMEM, "Setting environment variable '%s' failed, ignoring: %m", value);
e21fea24 392 } else
059cb385 393 log_warning("Environment variable name '%s' is not valid. Ignoring.", value);
9e58ff9c 394
059cb385 395 } else if (streq(key, "quiet") && !value) {
d7b15e0a 396
b6e2f329 397 if (arg_show_status == _SHOW_STATUS_UNSET)
d450b6f2 398 arg_show_status = SHOW_STATUS_AUTO;
059cb385
LP		 399
400 } else if (streq(key, "debug") && !value) {
d7b15e0a 401
1de1c9c3
LP		 402 /* Note that log_parse_environment() handles 'debug'
403 * too, and sets the log level to LOG_DEBUG. */
d7b15e0a 404
75f86906 405 if (detect_container() > 0)
b2103dcc 406 log_set_target(LOG_TARGET_CONSOLE);
059cb385
LP		 407
408 } else if (!in_initrd() && !value) {
f170852a
LP		 409 unsigned i;
410
411 /* SysV compatibility */
f170852a 412 for (i = 0; i < ELEMENTSOF(rlmap); i += 2)
059cb385 413 if (streq(key, rlmap[i]))
e6e242ad 414 return free_and_strdup(&arg_default_unit, rlmap[i+1]);
f170852a
LP		 415 }
416
417 return 0;
418}
419
e8e581bf
ZJS		 420#define DEFINE_SETTER(name, func, descr) \
421 static int name(const char *unit, \
422 const char *filename, \
423 unsigned line, \
424 const char *section, \
71a61510 425 unsigned section_line, \
e8e581bf
ZJS		 426 const char *lvalue, \
427 int ltype, \
428 const char *rvalue, \
429 void *data, \
430 void *userdata) { \
431 \
432 int r; \
433 \
434 assert(filename); \
435 assert(lvalue); \
436 assert(rvalue); \
437 \
438 r = func(rvalue); \
439 if (r < 0) \
d1cefe0a
LP		 440 log_syntax(unit, LOG_ERR, filename, line, r, \
441 "Invalid " descr "'%s': %m", \
442 rvalue); \
e8e581bf
ZJS		 443 \
444 return 0; \
445 }
487393e9 446
e8e581bf
ZJS		 447DEFINE_SETTER(config_parse_level2, log_set_max_level_from_string, "log level")
448DEFINE_SETTER(config_parse_target, log_set_target_from_string, "target")
449DEFINE_SETTER(config_parse_color, log_show_color_from_string, "color" )
450DEFINE_SETTER(config_parse_location, log_show_location_from_string, "location")
487393e9 451
4d7213b2
LP		 452static int config_parse_cpu_affinity2(
453 const char *unit,
454 const char *filename,
455 unsigned line,
456 const char *section,
457 unsigned section_line,
458 const char *lvalue,
459 int ltype,
460 const char *rvalue,
461 void *data,
462 void *userdata) {
487393e9 463
4b40bc38 464 _cleanup_cpu_free_ cpu_set_t *c = NULL;
f5c72b73 465 int ncpus;
487393e9 466
765d143b 467 ncpus = parse_cpu_set_and_warn(rvalue, &c, unit, filename, line, lvalue);
f5c72b73
FB		 468 if (ncpus < 0)
469 return ncpus;
487393e9 470
f5c72b73
FB		 471 if (sched_setaffinity(0, CPU_ALLOC_SIZE(ncpus), c) < 0)
472 log_warning("Failed to set CPU affinity: %m");
487393e9 473
487393e9
LP		 474 return 0;
475}
476
4d7213b2
LP		 477static int config_parse_show_status(
478 const char* unit,
479 const char *filename,
480 unsigned line,
481 const char *section,
482 unsigned section_line,
483 const char *lvalue,
484 int ltype,
485 const char *rvalue,
486 void *data,
487 void *userdata) {
488
489 int k;
490 ShowStatus *b = data;
491
492 assert(filename);
493 assert(lvalue);
494 assert(rvalue);
495 assert(data);
496
497 k = parse_show_status(rvalue, b);
498 if (k < 0) {
12ca818f 499 log_syntax(unit, LOG_ERR, filename, line, k, "Failed to parse show status setting, ignoring: %s", rvalue);
4d7213b2
LP		 500 return 0;
501 }
502
503 return 0;
504}
505
b9e74c39
LP		 506static int config_parse_crash_chvt(
507 const char* unit,
508 const char *filename,
509 unsigned line,
510 const char *section,
511 unsigned section_line,
512 const char *lvalue,
513 int ltype,
514 const char *rvalue,
515 void *data,
516 void *userdata) {
517
518 int r;
519
520 assert(filename);
521 assert(lvalue);
522 assert(rvalue);
523 assert(data);
524
525 r = parse_crash_chvt(rvalue);
526 if (r < 0) {
527 log_syntax(unit, LOG_ERR, filename, line, r, "Failed to parse CrashChangeVT= setting, ignoring: %s", rvalue);
528 return 0;
529 }
530
531 return 0;
532}
533
e8e581bf
ZJS		 534static int config_parse_join_controllers(const char *unit,
535 const char *filename,
536 unsigned line,
537 const char *section,
71a61510 538 unsigned section_line,
e8e581bf
ZJS		 539 const char *lvalue,
540 int ltype,
541 const char *rvalue,
542 void *data,
543 void *userdata) {
0c85a4f3 544
3875c85b 545 const char *whole_rvalue = rvalue;
0c85a4f3 546 unsigned n = 0;
0c85a4f3
LP		 547
548 assert(filename);
549 assert(lvalue);
550 assert(rvalue);
551
fe382237 552 arg_join_controllers = strv_free_free(arg_join_controllers);
0c85a4f3 553
d4ebeb4f
FB		 554 for (;;) {
555 _cleanup_free_ char *word = NULL;
556 char **l;
557 int r;
0c85a4f3 558
d4ebeb4f 559 r = extract_first_word(&rvalue, &word, WHITESPACE, EXTRACT_QUOTES);
3875c85b
FB		 560 if (r < 0) {
561 log_syntax(unit, LOG_ERR, filename, line, r, "Invalid value for %s: %s", lvalue, whole_rvalue);
d4ebeb4f 562 return r;
3875c85b 563 }
d4ebeb4f
FB		 564 if (r == 0)
565 break;
0c85a4f3 566
d4ebeb4f 567 l = strv_split(word, ",");
1592ec21 568 if (!l)
aa8aeac0 569 return log_oom();
0c85a4f3
LP		 570 strv_uniq(l);
571
572 if (strv_length(l) <= 1) {
573 strv_free(l);
574 continue;
575 }
576
577 if (!arg_join_controllers) {
578 arg_join_controllers = new(char**, 2);
579 if (!arg_join_controllers) {
580 strv_free(l);
14212119 581 return log_oom();
0c85a4f3
LP		 582 }
583
584 arg_join_controllers[0] = l;
585 arg_join_controllers[1] = NULL;
586
587 n = 1;
588 } else {
589 char ***a;
590 char ***t;
591
592 t = new0(char**, n+2);
593 if (!t) {
594 strv_free(l);
14212119 595 return log_oom();
0c85a4f3
LP		 596 }
597
598 n = 0;
599
600 for (a = arg_join_controllers; *a; a++) {
601
602 if (strv_overlap(*a, l)) {
e3e45d4f 603 if (strv_extend_strv(&l, *a) < 0) {
0c85a4f3
LP		 604 strv_free(l);
605 strv_free_free(t);
14212119 606 return log_oom();
0c85a4f3
LP		 607 }
608
0c85a4f3
LP		 609 } else {
610 char **c;
611
612 c = strv_copy(*a);
613 if (!c) {
614 strv_free(l);
615 strv_free_free(t);
14212119 616 return log_oom();
0c85a4f3
LP		 617 }
618
619 t[n++] = c;
620 }
621 }
622
623 t[n++] = strv_uniq(l);
624
625 strv_free_free(arg_join_controllers);
626 arg_join_controllers = t;
627 }
628 }
d4ebeb4f 629 if (!isempty(rvalue))
12ca818f 630 log_syntax(unit, LOG_ERR, filename, line, 0, "Trailing garbage, ignoring.");
0c85a4f3
LP		 631
632 return 0;
633}
634
487393e9
LP		 635static int parse_config_file(void) {
636
f975e971 637 const ConfigTableItem items[] = {
d3b1c508
LP		 638 { "Manager", "LogLevel", config_parse_level2, 0, NULL },
639 { "Manager", "LogTarget", config_parse_target, 0, NULL },
640 { "Manager", "LogColor", config_parse_color, 0, NULL },
641 { "Manager", "LogLocation", config_parse_location, 0, NULL },
642 { "Manager", "DumpCore", config_parse_bool, 0, &arg_dump_core },
b9e74c39
LP		 643 { "Manager", "CrashChVT", /* legacy */ config_parse_crash_chvt, 0, NULL },
644 { "Manager", "CrashChangeVT", config_parse_crash_chvt, 0, NULL },
d3b1c508 645 { "Manager", "CrashShell", config_parse_bool, 0, &arg_crash_shell },
b9e74c39 646 { "Manager", "CrashReboot", config_parse_bool, 0, &arg_crash_reboot },
d3b1c508 647 { "Manager", "ShowStatus", config_parse_show_status, 0, &arg_show_status },
d3b1c508
LP		 648 { "Manager", "CPUAffinity", config_parse_cpu_affinity2, 0, NULL },
649 { "Manager", "JoinControllers", config_parse_join_controllers, 0, &arg_join_controllers },
650 { "Manager", "RuntimeWatchdogSec", config_parse_sec, 0, &arg_runtime_watchdog },
651 { "Manager", "ShutdownWatchdogSec", config_parse_sec, 0, &arg_shutdown_watchdog },
652 { "Manager", "CapabilityBoundingSet", config_parse_bounding_set, 0, &arg_capability_bounding_set_drop },
89fffa27 653#ifdef HAVE_SECCOMP
d3b1c508 654 { "Manager", "SystemCallArchitectures", config_parse_syscall_archs, 0, &arg_syscall_archs },
89fffa27 655#endif
d3b1c508 656 { "Manager", "TimerSlackNSec", config_parse_nsec, 0, &arg_timer_slack_nsec },
bd8f585b 657 { "Manager", "DefaultTimerAccuracySec", config_parse_sec, 0, &arg_default_timer_accuracy_usec },
d3b1c508
LP		 658 { "Manager", "DefaultStandardOutput", config_parse_output, 0, &arg_default_std_output },
659 { "Manager", "DefaultStandardError", config_parse_output, 0, &arg_default_std_error },
660 { "Manager", "DefaultTimeoutStartSec", config_parse_sec, 0, &arg_default_timeout_start_usec },
661 { "Manager", "DefaultTimeoutStopSec", config_parse_sec, 0, &arg_default_timeout_stop_usec },
662 { "Manager", "DefaultRestartSec", config_parse_sec, 0, &arg_default_restart_usec },
663 { "Manager", "DefaultStartLimitInterval", config_parse_sec, 0, &arg_default_start_limit_interval },
664 { "Manager", "DefaultStartLimitBurst", config_parse_unsigned, 0, &arg_default_start_limit_burst },
665 { "Manager", "DefaultEnvironment", config_parse_environ, 0, &arg_default_environment },
666 { "Manager", "DefaultLimitCPU", config_parse_limit, 0, &arg_default_rlimit[RLIMIT_CPU] },
667 { "Manager", "DefaultLimitFSIZE", config_parse_limit, 0, &arg_default_rlimit[RLIMIT_FSIZE] },
668 { "Manager", "DefaultLimitDATA", config_parse_limit, 0, &arg_default_rlimit[RLIMIT_DATA] },
669 { "Manager", "DefaultLimitSTACK", config_parse_limit, 0, &arg_default_rlimit[RLIMIT_STACK] },
670 { "Manager", "DefaultLimitCORE", config_parse_limit, 0, &arg_default_rlimit[RLIMIT_CORE] },
671 { "Manager", "DefaultLimitRSS", config_parse_limit, 0, &arg_default_rlimit[RLIMIT_RSS] },
672 { "Manager", "DefaultLimitNOFILE", config_parse_limit, 0, &arg_default_rlimit[RLIMIT_NOFILE] },
673 { "Manager", "DefaultLimitAS", config_parse_limit, 0, &arg_default_rlimit[RLIMIT_AS] },
674 { "Manager", "DefaultLimitNPROC", config_parse_limit, 0, &arg_default_rlimit[RLIMIT_NPROC] },
675 { "Manager", "DefaultLimitMEMLOCK", config_parse_limit, 0, &arg_default_rlimit[RLIMIT_MEMLOCK] },
676 { "Manager", "DefaultLimitLOCKS", config_parse_limit, 0, &arg_default_rlimit[RLIMIT_LOCKS] },
677 { "Manager", "DefaultLimitSIGPENDING", config_parse_limit, 0, &arg_default_rlimit[RLIMIT_SIGPENDING] },
678 { "Manager", "DefaultLimitMSGQUEUE", config_parse_limit, 0, &arg_default_rlimit[RLIMIT_MSGQUEUE] },
679 { "Manager", "DefaultLimitNICE", config_parse_limit, 0, &arg_default_rlimit[RLIMIT_NICE] },
680 { "Manager", "DefaultLimitRTPRIO", config_parse_limit, 0, &arg_default_rlimit[RLIMIT_RTPRIO] },
681 { "Manager", "DefaultLimitRTTIME", config_parse_limit, 0, &arg_default_rlimit[RLIMIT_RTTIME] },
085afe36
LP		 682 { "Manager", "DefaultCPUAccounting", config_parse_bool, 0, &arg_default_cpu_accounting },
683 { "Manager", "DefaultBlockIOAccounting", config_parse_bool, 0, &arg_default_blockio_accounting },
684 { "Manager", "DefaultMemoryAccounting", config_parse_bool, 0, &arg_default_memory_accounting },
03a7b521 685 { "Manager", "DefaultTasksAccounting", config_parse_bool, 0, &arg_default_tasks_accounting },
d3b1c508 686 {}
487393e9
LP		 687 };
688
1b907b5c 689 const char *fn, *conf_dirs_nulstr;
487393e9 690
b2c23da8
LP		 691 fn = arg_running_as == MANAGER_SYSTEM ? PKGSYSCONFDIR "/system.conf" : PKGSYSCONFDIR "/user.conf";
692 conf_dirs_nulstr = arg_running_as == MANAGER_SYSTEM ? CONF_DIRS_NULSTR("systemd/system.conf") : CONF_DIRS_NULSTR("systemd/user.conf");
1b907b5c
JT		 693 config_parse_many(fn, conf_dirs_nulstr, "Manager\0",
694 config_item_table_lookup, items, false, NULL);
487393e9 695
487393e9
LP		 696 return 0;
697}
698
06af2a04
TB		 699static void manager_set_defaults(Manager *m) {
700
701 assert(m);
702
703 m->default_timer_accuracy_usec = arg_default_timer_accuracy_usec;
704 m->default_std_output = arg_default_std_output;
705 m->default_std_error = arg_default_std_error;
706 m->default_timeout_start_usec = arg_default_timeout_start_usec;
707 m->default_timeout_stop_usec = arg_default_timeout_stop_usec;
708 m->default_restart_usec = arg_default_restart_usec;
709 m->default_start_limit_interval = arg_default_start_limit_interval;
710 m->default_start_limit_burst = arg_default_start_limit_burst;
711 m->default_cpu_accounting = arg_default_cpu_accounting;
712 m->default_blockio_accounting = arg_default_blockio_accounting;
713 m->default_memory_accounting = arg_default_memory_accounting;
03a7b521 714 m->default_tasks_accounting = arg_default_tasks_accounting;
06af2a04
TB		 715
716 manager_set_default_rlimits(m, arg_default_rlimit);
717 manager_environment_add(m, NULL, arg_default_environment);
718}
719
f170852a
LP		 720static int parse_argv(int argc, char *argv[]) {
721
722 enum {
723 ARG_LOG_LEVEL = 0x100,
724 ARG_LOG_TARGET,
bbe63281
LP		 725 ARG_LOG_COLOR,
726 ARG_LOG_LOCATION,
2f198e2f 727 ARG_UNIT,
edb9aaa8 728 ARG_SYSTEM,
af2d49f7 729 ARG_USER,
e537352b 730 ARG_TEST,
b87c2aa6 731 ARG_NO_PAGER,
9ba0bc4e 732 ARG_VERSION,
80876c20 733 ARG_DUMP_CONFIGURATION_ITEMS,
9e58ff9c 734 ARG_DUMP_CORE,
b9e74c39 735 ARG_CRASH_CHVT,
9e58ff9c 736 ARG_CRASH_SHELL,
b9e74c39 737 ARG_CRASH_REBOOT,
a16e1123 738 ARG_CONFIRM_SPAWN,
9e58ff9c 739 ARG_SHOW_STATUS,
4288f619 740 ARG_DESERIALIZE,
2660882b 741 ARG_SWITCHED_ROOT,
0a494f1f
LP		 742 ARG_DEFAULT_STD_OUTPUT,
743 ARG_DEFAULT_STD_ERROR
f170852a
LP		 744 };
745
746 static const struct option options[] = {
a16e1123
LP		 747 { "log-level", required_argument, NULL, ARG_LOG_LEVEL },
748 { "log-target", required_argument, NULL, ARG_LOG_TARGET },
bbe63281
LP		 749 { "log-color", optional_argument, NULL, ARG_LOG_COLOR },
750 { "log-location", optional_argument, NULL, ARG_LOG_LOCATION },
2f198e2f 751 { "unit", required_argument, NULL, ARG_UNIT },
edb9aaa8 752 { "system", no_argument, NULL, ARG_SYSTEM },
af2d49f7 753 { "user", no_argument, NULL, ARG_USER },
a16e1123 754 { "test", no_argument, NULL, ARG_TEST },
b87c2aa6 755 { "no-pager", no_argument, NULL, ARG_NO_PAGER },
a16e1123 756 { "help", no_argument, NULL, 'h' },
9ba0bc4e 757 { "version", no_argument, NULL, ARG_VERSION },
a16e1123 758 { "dump-configuration-items", no_argument, NULL, ARG_DUMP_CONFIGURATION_ITEMS },
a5d87bf0 759 { "dump-core", optional_argument, NULL, ARG_DUMP_CORE },
b9e74c39 760 { "crash-chvt", required_argument, NULL, ARG_CRASH_CHVT },
a5d87bf0 761 { "crash-shell", optional_argument, NULL, ARG_CRASH_SHELL },
b9e74c39 762 { "crash-reboot", optional_argument, NULL, ARG_CRASH_REBOOT },
a5d87bf0 763 { "confirm-spawn", optional_argument, NULL, ARG_CONFIRM_SPAWN },
6e98720f 764 { "show-status", optional_argument, NULL, ARG_SHOW_STATUS },
a16e1123 765 { "deserialize", required_argument, NULL, ARG_DESERIALIZE },
2660882b 766 { "switched-root", no_argument, NULL, ARG_SWITCHED_ROOT },
0a494f1f
LP		 767 { "default-standard-output", required_argument, NULL, ARG_DEFAULT_STD_OUTPUT, },
768 { "default-standard-error", required_argument, NULL, ARG_DEFAULT_STD_ERROR, },
fb472900 769 {}
f170852a
LP		 770 };
771
772 int c, r;
773
774 assert(argc >= 1);
775 assert(argv);
776
b770165a
LP		 777 if (getpid() == 1)
778 opterr = 0;
779
099663ff 780 while ((c = getopt_long(argc, argv, "hDbsz:", options, NULL)) >= 0)
f170852a
LP		 781
782 switch (c) {
783
784 case ARG_LOG_LEVEL:
fb472900
ZJS		 785 r = log_set_max_level_from_string(optarg);
786 if (r < 0) {
f170852a
LP		 787 log_error("Failed to parse log level %s.", optarg);
788 return r;
789 }
790
791 break;
792
793 case ARG_LOG_TARGET:
fb472900
ZJS		 794 r = log_set_target_from_string(optarg);
795 if (r < 0) {
f170852a
LP		 796 log_error("Failed to parse log target %s.", optarg);
797 return r;
798 }
799
800 break;
801
bbe63281
LP		 802 case ARG_LOG_COLOR:
803
d0b170c8 804 if (optarg) {
fb472900
ZJS		 805 r = log_show_color_from_string(optarg);
806 if (r < 0) {
d0b170c8
LP		 807 log_error("Failed to parse log color setting %s.", optarg);
808 return r;
809 }
810 } else
811 log_show_color(true);
bbe63281
LP		 812
813 break;
814
815 case ARG_LOG_LOCATION:
d0b170c8 816 if (optarg) {
fb472900
ZJS		 817 r = log_show_location_from_string(optarg);
818 if (r < 0) {
d0b170c8
LP		 819 log_error("Failed to parse log location setting %s.", optarg);
820 return r;
821 }
822 } else
823 log_show_location(true);
bbe63281
LP		 824
825 break;
826
0a494f1f 827 case ARG_DEFAULT_STD_OUTPUT:
fb472900
ZJS		 828 r = exec_output_from_string(optarg);
829 if (r < 0) {
0a494f1f
LP		 830 log_error("Failed to parse default standard output setting %s.", optarg);
831 return r;
832 } else
833 arg_default_std_output = r;
834 break;
835
836 case ARG_DEFAULT_STD_ERROR:
fb472900
ZJS		 837 r = exec_output_from_string(optarg);
838 if (r < 0) {
0a494f1f
LP		 839 log_error("Failed to parse default standard error output setting %s.", optarg);
840 return r;
841 } else
842 arg_default_std_error = r;
843 break;
844
2f198e2f 845 case ARG_UNIT:
f170852a 846
e6e242ad 847 r = free_and_strdup(&arg_default_unit, optarg);
23bbb0de
MS		 848 if (r < 0)
849 return log_error_errno(r, "Failed to set default unit %s: %m", optarg);
f170852a
LP		 850
851 break;
852
edb9aaa8 853 case ARG_SYSTEM:
b2c23da8 854 arg_running_as = MANAGER_SYSTEM;
edb9aaa8 855 break;
a5dab5ce 856
af2d49f7 857 case ARG_USER:
b2c23da8 858 arg_running_as = MANAGER_USER;
a5dab5ce 859 break;
a5dab5ce 860
e965d56d 861 case ARG_TEST:
fa0f4d8a 862 arg_action = ACTION_TEST;
b87c2aa6
ZJS		 863 if (arg_no_pager < 0)
864 arg_no_pager = true;
865 break;
866
867 case ARG_NO_PAGER:
868 arg_no_pager = true;
e965d56d
LP		 869 break;
870
9ba0bc4e
ZJS		 871 case ARG_VERSION:
872 arg_action = ACTION_VERSION;
873 break;
874
e537352b 875 case ARG_DUMP_CONFIGURATION_ITEMS:
fa0f4d8a 876 arg_action = ACTION_DUMP_CONFIGURATION_ITEMS;
e537352b
LP		 877 break;
878
9e58ff9c 879 case ARG_DUMP_CORE:
b9e74c39
LP		 880 if (!optarg)
881 arg_dump_core = true;
882 else {
883 r = parse_boolean(optarg);
884 if (r < 0)
885 return log_error_errno(r, "Failed to parse dump core boolean: %s", optarg);
886 arg_dump_core = r;
a5d87bf0 887 }
b9e74c39
LP		 888 break;
889
890 case ARG_CRASH_CHVT:
891 r = parse_crash_chvt(optarg);
892 if (r < 0)
893 return log_error_errno(r, "Failed to parse crash virtual terminal index: %s", optarg);
9e58ff9c
LP		 894 break;
895
896 case ARG_CRASH_SHELL:
b9e74c39
LP		 897 if (!optarg)
898 arg_crash_shell = true;
899 else {
900 r = parse_boolean(optarg);
901 if (r < 0)
902 return log_error_errno(r, "Failed to parse crash shell boolean: %s", optarg);
903 arg_crash_shell = r;
904 }
905 break;
906
907 case ARG_CRASH_REBOOT:
908 if (!optarg)
909 arg_crash_reboot = true;
910 else {
911 r = parse_boolean(optarg);
912 if (r < 0)
913 return log_error_errno(r, "Failed to parse crash shell boolean: %s", optarg);
914 arg_crash_reboot = r;
a5d87bf0 915 }
9e58ff9c
LP		 916 break;
917
80876c20 918 case ARG_CONFIRM_SPAWN:
a5d87bf0
LP		 919 r = optarg ? parse_boolean(optarg) : 1;
920 if (r < 0) {
921 log_error("Failed to parse confirm spawn boolean %s.", optarg);
922 return r;
923 }
924 arg_confirm_spawn = r;
80876c20
LP		 925 break;
926
9e58ff9c 927 case ARG_SHOW_STATUS:
d450b6f2
ZJS		 928 if (optarg) {
929 r = parse_show_status(optarg, &arg_show_status);
930 if (r < 0) {
931 log_error("Failed to parse show status boolean %s.", optarg);
932 return r;
933 }
934 } else
935 arg_show_status = SHOW_STATUS_YES;
6e98720f 936 break;
a5d87bf0 937
a16e1123
LP		 938 case ARG_DESERIALIZE: {
939 int fd;
940 FILE *f;
941
01e10de3
LP		 942 r = safe_atoi(optarg, &fd);
943 if (r < 0 || fd < 0) {
a16e1123 944 log_error("Failed to parse deserialize option %s.", optarg);
b9e74c39 945 return -EINVAL;
a16e1123
LP		 946 }
947
b9e74c39 948 (void) fd_cloexec(fd, true);
01e10de3
LP		 949
950 f = fdopen(fd, "r");
4a62c710
MS		 951 if (!f)
952 return log_error_errno(errno, "Failed to open serialization fd: %m");
a16e1123 953
74ca738f 954 safe_fclose(arg_serialization);
d3b1c508 955 arg_serialization = f;
a16e1123
LP		 956
957 break;
958 }
959
2660882b 960 case ARG_SWITCHED_ROOT:
bf4df7c3 961 arg_switched_root = true;
d03bc1b8
HH		 962 break;
963
f170852a 964 case 'h':
fa0f4d8a 965 arg_action = ACTION_HELP;
b87c2aa6
ZJS		 966 if (arg_no_pager < 0)
967 arg_no_pager = true;
f170852a
LP		 968 break;
969
1d2e23ab
LP		 970 case 'D':
971 log_set_max_level(LOG_DEBUG);
972 break;
973
099663ff
LP		 974 case 'b':
975 case 's':
976 case 'z':
977 /* Just to eat away the sysvinit kernel
978 * cmdline args without getopt() error
979 * messages that we'll parse in
980 * parse_proc_cmdline_word() or ignore. */
f170852a 981
099663ff 982 case '?':
601185b4 983 if (getpid() != 1)
099663ff 984 return -EINVAL;
601185b4
ZJS		 985 else
986 return 0;
099663ff 987
601185b4
ZJS		 988 default:
989 assert_not_reached("Unhandled option code.");
f170852a
LP		 990 }
991
d821e6d6
LP		 992 if (optind < argc && getpid() != 1) {
993 /* Hmm, when we aren't run as init system
994 * let's complain about excess arguments */
995
996 log_error("Excess arguments.");
997 return -EINVAL;
998 }
999
f170852a
LP		 1000 return 0;
1001}
1002
1003static int help(void) {
1004
2e33c433 1005 printf("%s [OPTIONS...]\n\n"
af2d49f7 1006 "Starts up and maintains the system or user services.\n\n"
e537352b 1007 " -h --help Show this help\n"
e537352b 1008 " --test Determine startup sequence, dump it and exit\n"
b87c2aa6 1009 " --no-pager Do not pipe output into a pager\n"
80876c20 1010 " --dump-configuration-items Dump understood unit configuration items\n"
9e58ff9c 1011 " --unit=UNIT Set default unit\n"
edb9aaa8 1012 " --system Run a system instance, even if PID != 1\n"
af2d49f7 1013 " --user Run a user instance\n"
b9e74c39
LP		 1014 " --dump-core[=BOOL] Dump core on crash\n"
1015 " --crash-vt=NR Change to specified VT on crash\n"
1016 " --crash-reboot[=BOOL] Reboot on crash\n"
1017 " --crash-shell[=BOOL] Run shell on crash\n"
1018 " --confirm-spawn[=BOOL] Ask for confirmation when spawning processes\n"
1019 " --show-status[=BOOL] Show status updates on the console during bootup\n"
c1dc6153 1020 " --log-target=TARGET Set log target (console, journal, kmsg, journal-or-kmsg, null)\n"
9e58ff9c 1021 " --log-level=LEVEL Set log level (debug, info, notice, warning, err, crit, alert, emerg)\n"
b9e74c39
LP		 1022 " --log-color[=BOOL] Highlight important log messages\n"
1023 " --log-location[=BOOL] Include code location in log messages\n"
0a494f1f
LP		 1024 " --default-standard-output= Set default standard output for services\n"
1025 " --default-standard-error= Set default standard error output for services\n",
5b6319dc 1026 program_invocation_short_name);
f170852a
LP		 1027
1028 return 0;
1029}
1030
b3680f49 1031static int prepare_reexecute(Manager *m, FILE **_f, FDSet **_fds, bool switching_root) {
48b90859
LP		 1032 _cleanup_fdset_free_ FDSet *fds = NULL;
1033 _cleanup_fclose_ FILE *f = NULL;
a16e1123
LP		 1034 int r;
1035
1036 assert(m);
1037 assert(_f);
1038 assert(_fds);
1039
6b78f9b4 1040 r = manager_open_serialization(m, &f);
48b90859
LP		 1041 if (r < 0)
1042 return log_error_errno(r, "Failed to create serialization file: %m");
a16e1123 1043
71445ae7
LP		 1044 /* Make sure nothing is really destructed when we shut down */
1045 m->n_reloading ++;
718db961 1046 bus_manager_send_reloading(m, true);
71445ae7 1047
6b78f9b4 1048 fds = fdset_new();
48b90859
LP		 1049 if (!fds)
1050 return log_oom();
a16e1123 1051
b3680f49 1052 r = manager_serialize(m, f, fds, switching_root);
48b90859
LP		 1053 if (r < 0)
1054 return log_error_errno(r, "Failed to serialize state: %m");
a16e1123 1055
48b90859
LP		 1056 if (fseeko(f, 0, SEEK_SET) == (off_t) -1)
1057 return log_error_errno(errno, "Failed to rewind serialization fd: %m");
a16e1123 1058
6b78f9b4 1059 r = fd_cloexec(fileno(f), false);
48b90859
LP		 1060 if (r < 0)
1061 return log_error_errno(r, "Failed to disable O_CLOEXEC for serialization: %m");
a16e1123 1062
6b78f9b4 1063 r = fdset_cloexec(fds, false);
48b90859
LP		 1064 if (r < 0)
1065 return log_error_errno(r, "Failed to disable O_CLOEXEC for serialization fds: %m");
a16e1123
LP		 1066
1067 *_f = f;
1068 *_fds = fds;
1069
48b90859
LP		 1070 f = NULL;
1071 fds = NULL;
a16e1123 1072
48b90859 1073 return 0;
a16e1123
LP		 1074}
1075
4096d6f5
LP		 1076static int bump_rlimit_nofile(struct rlimit *saved_rlimit) {
1077 struct rlimit nl;
1078 int r;
1079
1080 assert(saved_rlimit);
1081
1082 /* Save the original RLIMIT_NOFILE so that we can reset it
1083 * later when transitioning from the initrd to the main
1084 * systemd or suchlike. */
4a62c710
MS		 1085 if (getrlimit(RLIMIT_NOFILE, saved_rlimit) < 0)
1086 return log_error_errno(errno, "Reading RLIMIT_NOFILE failed: %m");
4096d6f5
LP		 1087
1088 /* Make sure forked processes get the default kernel setting */
1089 if (!arg_default_rlimit[RLIMIT_NOFILE]) {
1090 struct rlimit *rl;
1091
1092 rl = newdup(struct rlimit, saved_rlimit, 1);
1093 if (!rl)
1094 return log_oom();
1095
1096 arg_default_rlimit[RLIMIT_NOFILE] = rl;
1097 }
1098
1099 /* Bump up the resource limit for ourselves substantially */
1100 nl.rlim_cur = nl.rlim_max = 64*1024;
1101 r = setrlimit_closest(RLIMIT_NOFILE, &nl);
23bbb0de
MS		 1102 if (r < 0)
1103 return log_error_errno(r, "Setting RLIMIT_NOFILE failed: %m");
4096d6f5
LP		 1104
1105 return 0;
1106}
1107
6ee5bbf8 1108static void test_mtab(void) {
6ee5bbf8 1109
5b4c0131
LP		 1110 static const char ok[] =
1111 "/proc/self/mounts\0"
1112 "/proc/mounts\0"
1113 "../proc/self/mounts\0"
1114 "../proc/mounts\0";
80758717 1115
5b4c0131
LP		 1116 _cleanup_free_ char *p = NULL;
1117 int r;
6ee5bbf8 1118
5b4c0131
LP		 1119 /* Check that /etc/mtab is a symlink to the right place or
1120 * non-existing. But certainly not a file, or a symlink to
1121 * some weird place... */
6ee5bbf8 1122
5b4c0131
LP		 1123 r = readlink_malloc("/etc/mtab", &p);
1124 if (r == -ENOENT)
1125 return;
1126 if (r >= 0 && nulstr_contains(ok, p))
1127 return;
6ee5bbf8 1128
bcce7187
DM		 1129 log_error("/etc/mtab is not a symlink or not pointing to /proc/self/mounts. "
1130 "This is not supported anymore. "
1131 "Please make sure to replace this file by a symlink to avoid incorrect or misleading mount(8) output.");
b9e74c39 1132 freeze_or_reboot();
80758717
LP		 1133}
1134
1135static void test_usr(void) {
80758717 1136
ed1c99fc 1137 /* Check that /usr is not a separate fs */
80758717 1138
871c44a7
LP		 1139 if (dir_is_empty("/usr") <= 0)
1140 return;
1141
8b173b5e 1142 log_warning("/usr appears to be on its own filesystem and is not already mounted. This is not a supported setup. "
871c44a7
LP		 1143 "Some things will probably break (sometimes even silently) in mysterious ways. "
1144 "Consult http://freedesktop.org/wiki/Software/systemd/separate-usr-is-broken for more information.");
1145}
1146
a07fdfa3
LP		 1147static int initialize_join_controllers(void) {
1148 /* By default, mount "cpu" + "cpuacct" together, and "net_cls"
1149 * + "net_prio". We'd like to add "cpuset" to the mix, but
f131770b 1150 * "cpuset" doesn't really work for groups with no initialized
a07fdfa3
LP		 1151 * attributes. */
1152
1153 arg_join_controllers = new(char**, 3);
1154 if (!arg_join_controllers)
1155 return -ENOMEM;
1156
1157 arg_join_controllers[0] = strv_new("cpu", "cpuacct", NULL);
fe382237
LP		 1158 if (!arg_join_controllers[0])
1159 goto oom;
a6b26d90 1160
fe382237
LP		 1161 arg_join_controllers[1] = strv_new("net_cls", "net_prio", NULL);
1162 if (!arg_join_controllers[1])
1163 goto oom;
a07fdfa3 1164
fe382237 1165 arg_join_controllers[2] = NULL;
a07fdfa3 1166 return 0;
fe382237
LP		 1167
1168oom:
1169 arg_join_controllers = strv_free_free(arg_join_controllers);
1170 return -ENOMEM;
a07fdfa3
LP		 1171}
1172
d3b1c508
LP		 1173static int enforce_syscall_archs(Set *archs) {
1174#ifdef HAVE_SECCOMP
1175 scmp_filter_ctx *seccomp;
1176 Iterator i;
1177 void *id;
1178 int r;
1179
1180 seccomp = seccomp_init(SCMP_ACT_ALLOW);
1181 if (!seccomp)
1182 return log_oom();
1183
1184 SET_FOREACH(id, arg_syscall_archs, i) {
1185 r = seccomp_arch_add(seccomp, PTR_TO_UINT32(id) - 1);
1186 if (r == -EEXIST)
1187 continue;
1188 if (r < 0) {
da927ba9 1189 log_error_errno(r, "Failed to add architecture to seccomp: %m");
d3b1c508
LP		 1190 goto finish;
1191 }
1192 }
1193
8a8bf3c0
LP		 1194 r = seccomp_attr_set(seccomp, SCMP_FLTATR_CTL_NNP, 0);
1195 if (r < 0) {
da927ba9 1196 log_error_errno(r, "Failed to unset NO_NEW_PRIVS: %m");
8a8bf3c0
LP		 1197 goto finish;
1198 }
1199
d3b1c508
LP		 1200 r = seccomp_load(seccomp);
1201 if (r < 0)
da927ba9 1202 log_error_errno(r, "Failed to add install architecture seccomp: %m");
d3b1c508
LP		 1203
1204finish:
1205 seccomp_release(seccomp);
1206 return r;
1207#else
1208 return 0;
1209#endif
1210}
1211
b6e2f329
LP		 1212static int status_welcome(void) {
1213 _cleanup_free_ char *pretty_name = NULL, *ansi_color = NULL;
1214 int r;
1215
1216 r = parse_env_file("/etc/os-release", NEWLINE,
1217 "PRETTY_NAME", &pretty_name,
1218 "ANSI_COLOR", &ansi_color,
1219 NULL);
ece174c5 1220 if (r == -ENOENT)
5ae4d543
LP		 1221 r = parse_env_file("/usr/lib/os-release", NEWLINE,
1222 "PRETTY_NAME", &pretty_name,
1223 "ANSI_COLOR", &ansi_color,
1224 NULL);
b6e2f329
LP		 1225
1226 if (r < 0 && r != -ENOENT)
da927ba9 1227 log_warning_errno(r, "Failed to read os-release file: %m");
b6e2f329
LP		 1228
1229 return status_printf(NULL, false, false,
1230 "\nWelcome to \x1B[%sm%s\x1B[0m!\n",
1231 isempty(ansi_color) ? "1" : ansi_color,
1232 isempty(pretty_name) ? "Linux" : pretty_name);
1233}
1234
fdd25311
LP		 1235static int write_container_id(void) {
1236 const char *c;
1237
1238 c = getenv("container");
1239 if (isempty(c))
1240 return 0;
1241
4c1fc3e4 1242 return write_string_file("/run/systemd/container", c, WRITE_STRING_FILE_CREATE);
fdd25311
LP		 1243}
1244
60918275
LP		 1245int main(int argc, char *argv[]) {
1246 Manager *m = NULL;
22f4096c 1247 int r, retval = EXIT_FAILURE;
9d76d730
LP		 1248 usec_t before_startup, after_startup;
1249 char timespan[FORMAT_TIMESPAN_MAX];
a16e1123
LP		 1250 FDSet *fds = NULL;
1251 bool reexecute = false;
b9080b03 1252 const char *shutdown_verb = NULL;
86caf095
LP		 1253 dual_timestamp initrd_timestamp = DUAL_TIMESTAMP_NULL;
1254 dual_timestamp userspace_timestamp = DUAL_TIMESTAMP_NULL;
1255 dual_timestamp kernel_timestamp = DUAL_TIMESTAMP_NULL;
1256 dual_timestamp security_start_timestamp = DUAL_TIMESTAMP_NULL;
1257 dual_timestamp security_finish_timestamp = DUAL_TIMESTAMP_NULL;
5d6b1584 1258 static char systemd[] = "systemd";
2660882b 1259 bool skip_setup = false;
d3b1c508 1260 unsigned j;
0b3325e7 1261 bool loaded_policy = false;
e96d6be7 1262 bool arm_reboot_watchdog = false;
bf4df7c3 1263 bool queue_default_job = false;
5f5c2f38 1264 bool empty_etc = false;
41669317 1265 char *switch_root_dir = NULL, *switch_root_init = NULL;
86caf095 1266 struct rlimit saved_rlimit_nofile = RLIMIT_MAKE_CONST(0);
cb6531be 1267 const char *error_message = NULL;
27b14a22 1268
058dc6f3 1269#ifdef HAVE_SYSV_COMPAT
2cb1a60d 1270 if (getpid() != 1 && strstr(program_invocation_short_name, "init")) {
35b8ca3a 1271 /* This is compatibility support for SysV, where
2cb1a60d
LP		 1272 * calling init as a user is identical to telinit. */
1273
1274 errno = -ENOENT;
1275 execv(SYSTEMCTL_BINARY_PATH, argv);
56f64d95 1276 log_error_errno(errno, "Failed to exec " SYSTEMCTL_BINARY_PATH ": %m");
2cb1a60d
LP		 1277 return 1;
1278 }
058dc6f3 1279#endif
2cb1a60d 1280
c3a170f3
HH		 1281 dual_timestamp_from_monotonic(&kernel_timestamp, 0);
1282 dual_timestamp_get(&userspace_timestamp);
1283
0b3325e7
LP		 1284 /* Determine if this is a reexecution or normal bootup. We do
1285 * the full command line parsing much later, so let's just
1286 * have a quick peek here. */
db813c2a
LP		 1287 if (strv_find(argv+1, "--deserialize"))
1288 skip_setup = true;
0b3325e7 1289
2660882b
LP		 1290 /* If we have switched root, do all the special setup
1291 * things */
db813c2a
LP		 1292 if (strv_find(argv+1, "--switched-root"))
1293 skip_setup = false;
d03bc1b8 1294
f3b6a3ed
LP		 1295 /* If we get started via the /sbin/init symlink then we are
1296 called 'init'. After a subsequent reexecution we are then
1297 called 'systemd'. That is confusing, hence let's call us
1298 systemd right-away. */
f3b6a3ed
LP		 1299 program_invocation_short_name = systemd;
1300 prctl(PR_SET_NAME, systemd);
5d6b1584 1301
9a0e6896
LP		 1302 saved_argv = argv;
1303 saved_argc = argc;
f3b6a3ed 1304
2cc59dbf 1305 log_show_color(isatty(STDERR_FILENO) > 0);
c1dc6153 1306 log_set_upgrade_syslog_to_journal(true);
bbe63281 1307
90dc8c2e
MG		 1308 /* Disable the umask logic */
1309 if (getpid() == 1)
1310 umask(0);
1311
75f86906 1312 if (getpid() == 1 && detect_container() <= 0) {
4f8d551f 1313
a866073d 1314 /* Running outside of a container as PID 1 */
b2c23da8 1315 arg_running_as = MANAGER_SYSTEM;
a866073d
LP		 1316 make_null_stdio();
1317 log_set_target(LOG_TARGET_KMSG);
1318 log_open();
1319
21bf2ab0 1320 if (in_initrd())
c3a170f3 1321 initrd_timestamp = userspace_timestamp;
c3ba6250 1322
2660882b 1323 if (!skip_setup) {
8f838d8a 1324 mount_setup_early();
c2e0d600 1325 dual_timestamp_get(&security_start_timestamp);
cb6531be
ZJS		 1326 if (mac_selinux_setup(&loaded_policy) < 0) {
1327 error_message = "Failed to load SELinux policy";
0b3325e7 1328 goto finish;
cb6531be
ZJS		 1329 } else if (ima_setup() < 0) {
1330 error_message = "Failed to load IMA policy";
81611586 1331 goto finish;
cb6531be
ZJS		 1332 } else if (mac_smack_setup(&loaded_policy) < 0) {
1333 error_message = "Failed to load SMACK policy";
ffbd2c4d 1334 goto finish;
cb6531be 1335 }
c2e0d600 1336 dual_timestamp_get(&security_finish_timestamp);
81611586 1337 }
0b3325e7 1338
cb6531be
ZJS		 1339 if (mac_selinux_init(NULL) < 0) {
1340 error_message = "Failed to initialize SELinux policy";
0ff4cdd9 1341 goto finish;
cb6531be 1342 }
7948c4df 1343
72edcff5 1344 if (!skip_setup) {
24efb112 1345 if (clock_is_localtime() > 0) {
0b3325e7 1346 int min;
7948c4df 1347
c264aeab
KS		 1348 /*
1349 * The very first call of settimeofday() also does a time warp in the kernel.
1350 *
1351 * In the rtc-in-local time mode, we set the kernel's timezone, and rely on
1352 * external tools to take care of maintaining the RTC and do all adjustments.
1353 * This matches the behavior of Windows, which leaves the RTC alone if the
1354 * registry tells that the RTC runs in UTC.
1355 */
24efb112 1356 r = clock_set_timezone(&min);
0b3325e7 1357 if (r < 0)
da927ba9 1358 log_error_errno(r, "Failed to apply local time delta, ignoring: %m");
0b3325e7
LP		 1359 else
1360 log_info("RTC configured in localtime, applying delta of %i minutes to system time.", min);
19e65613
KS		 1361 } else if (!in_initrd()) {
1362 /*
c264aeab 1363 * Do a dummy very first call to seal the kernel's time warp magic.
19e65613
KS		 1364 *
1365 * Do not call this this from inside the initrd. The initrd might not
1366 * carry /etc/adjtime with LOCAL, but the real system could be set up
1367 * that way. In such case, we need to delay the time-warp or the sealing
1368 * until we reach the real system.
c264aeab
KS		 1369 *
1370 * Do no set the kernel's timezone. The concept of local time cannot
1371 * be supported reliably, the time will jump or be incorrect at every daylight
1372 * saving time change. All kernel local time concepts will be treated
1373 * as UTC that way.
19e65613 1374 */
c264aeab 1375 clock_reset_timewarp();
72edcff5
KS		 1376 }
1377 }
a866073d
LP		 1378
1379 /* Set the default for later on, but don't actually
1380 * open the logs like this for now. Note that if we
1381 * are transitioning from the initrd there might still
1382 * be journal fd open, and we shouldn't attempt
1383 * opening that before we parsed /proc/cmdline which
1384 * might redirect output elsewhere. */
1385 log_set_target(LOG_TARGET_JOURNAL_OR_KMSG);
1386
1387 } else if (getpid() == 1) {
a866073d 1388 /* Running inside a container, as PID 1 */
b2c23da8 1389 arg_running_as = MANAGER_SYSTEM;
a866073d 1390 log_set_target(LOG_TARGET_CONSOLE);
99f09825 1391 log_close_console(); /* force reopen of /dev/console */
a866073d
LP		 1392 log_open();
1393
1394 /* For the later on, see above... */
1395 log_set_target(LOG_TARGET_JOURNAL);
1396
c3a170f3
HH		 1397 /* clear the kernel timestamp,
1398 * because we are in a container */
1399 kernel_timestamp.monotonic = 0ULL;
1400 kernel_timestamp.realtime = 0ULL;
a866073d 1401
c3a170f3 1402 } else {
a866073d 1403 /* Running as user instance */
b2c23da8 1404 arg_running_as = MANAGER_USER;
eeecf6e6 1405 log_set_target(LOG_TARGET_AUTO);
871e5809 1406 log_open();
c3a170f3
HH		 1407
1408 /* clear the kernel timestamp,
1409 * because we are not PID 1 */
6513d561 1410 kernel_timestamp = DUAL_TIMESTAMP_NULL;
bbe63281 1411 }
a5dab5ce 1412
0c85a4f3 1413 /* Initialize default unit */
e6e242ad 1414 r = free_and_strdup(&arg_default_unit, SPECIAL_DEFAULT_TARGET);
6afa301b 1415 if (r < 0) {
da927ba9 1416 log_emergency_errno(r, "Failed to set default unit %s: %m", SPECIAL_DEFAULT_TARGET);
cb6531be 1417 error_message = "Failed to set default unit";
f170852a 1418 goto finish;
14212119 1419 }
60918275 1420
a07fdfa3 1421 r = initialize_join_controllers();
cb6531be 1422 if (r < 0) {
ff9b60f3 1423 error_message = "Failed to initialize cgroup controllers";
0c85a4f3 1424 goto finish;
cb6531be 1425 }
0c85a4f3 1426
f170852a
LP		 1427 /* Mount /proc, /sys and friends, so that /proc/cmdline and
1428 * /proc/$PID/fd is available. */
c1dae1b3 1429 if (getpid() == 1) {
f84f9974
LP		 1430
1431 /* Load the kernel modules early, so that we kdbus.ko is loaded before kdbusfs shall be mounted */
2e75e2a8
DM		 1432 if (!skip_setup)
1433 kmod_setup();
2e75e2a8 1434
0c85a4f3 1435 r = mount_setup(loaded_policy);
cb6531be
ZJS		 1436 if (r < 0) {
1437 error_message = "Failed to mount API filesystems";
8efe3c01 1438 goto finish;
cb6531be 1439 }
0c85a4f3 1440 }
4ade7963
LP		 1441
1442 /* Reset all signal handlers. */
ce30c8dc
LP		 1443 (void) reset_all_signal_handlers();
1444 (void) ignore_signals(SIGNALS_IGNORE, -1);
078e4539 1445
cb6531be
ZJS		 1446 if (parse_config_file() < 0) {
1447 error_message = "Failed to parse config file";
487393e9 1448 goto finish;
cb6531be 1449 }
487393e9 1450
b2c23da8 1451 if (arg_running_as == MANAGER_SYSTEM) {
b5884878
LP		 1452 r = parse_proc_cmdline(parse_proc_cmdline_item);
1453 if (r < 0)
da927ba9 1454 log_warning_errno(r, "Failed to parse kernel command line, ignoring: %m");
b5884878 1455 }
f170852a 1456
1de1c9c3
LP		 1457 /* Note that this also parses bits from the kernel command
1458 * line, including "debug". */
f170852a
LP		 1459 log_parse_environment();
1460
cb6531be
ZJS		 1461 if (parse_argv(argc, argv) < 0) {
1462 error_message = "Failed to parse commandline arguments";
f170852a 1463 goto finish;
cb6531be 1464 }
f170852a 1465
6bae23a0
TB		 1466 if (arg_action == ACTION_TEST &&
1467 geteuid() == 0) {
b5c6cf87
LP		 1468 log_error("Don't run test mode as root.");
1469 goto finish;
1470 }
1471
b2c23da8 1472 if (arg_running_as == MANAGER_USER &&
6bae23a0
TB		 1473 arg_action == ACTION_RUN &&
1474 sd_booted() <= 0) {
1475 log_error("Trying to run as user instance, but the system has not been booted with systemd.");
1476 goto finish;
1477 }
1478
b2c23da8 1479 if (arg_running_as == MANAGER_SYSTEM &&
fe783b03
LP		 1480 arg_action == ACTION_RUN &&
1481 running_in_chroot() > 0) {
1482 log_error("Cannot be run in a chroot() environment.");
1483 goto finish;
1484 }
1485
0d8c31ff
ZJS		 1486 if (arg_action == ACTION_TEST)
1487 skip_setup = true;
1488
b87c2aa6
ZJS		 1489 pager_open_if_enabled();
1490
fa0f4d8a 1491 if (arg_action == ACTION_HELP) {
f170852a
LP		 1492 retval = help();
1493 goto finish;
9ba0bc4e
ZJS		 1494 } else if (arg_action == ACTION_VERSION) {
1495 retval = version();
1496 goto finish;
fa0f4d8a 1497 } else if (arg_action == ACTION_DUMP_CONFIGURATION_ITEMS) {
e537352b 1498 unit_dump_config_items(stdout);
22f4096c 1499 retval = EXIT_SUCCESS;
e537352b 1500 goto finish;
fa0f4d8a 1501 } else if (arg_action == ACTION_DONE) {
22f4096c 1502 retval = EXIT_SUCCESS;
4288f619 1503 goto finish;
f170852a
LP		 1504 }
1505
b2c23da8 1506 if (arg_running_as == MANAGER_USER &&
8be28fb1
KS		 1507 !getenv("XDG_RUNTIME_DIR")) {
1508 log_error("Trying to run as user instance, but $XDG_RUNTIME_DIR is not set.");
1509 goto finish;
1510 }
1511
fa0f4d8a 1512 assert_se(arg_action == ACTION_RUN || arg_action == ACTION_TEST);
f170852a 1513
871e5809
LP		 1514 /* Close logging fds, in order not to confuse fdset below */
1515 log_close();
1516
a16e1123 1517 /* Remember open file descriptors for later deserialization */
01e10de3
LP		 1518 r = fdset_new_fill(&fds);
1519 if (r < 0) {
da927ba9 1520 log_emergency_errno(r, "Failed to allocate fd set: %m");
cb6531be 1521 error_message = "Failed to allocate fd set";
01e10de3
LP		 1522 goto finish;
1523 } else
1524 fdset_cloexec(fds, true);
a16e1123 1525
d3b1c508
LP		 1526 if (arg_serialization)
1527 assert_se(fdset_remove(fds, fileno(arg_serialization)) >= 0);
a16e1123 1528
b2c23da8 1529 if (arg_running_as == MANAGER_SYSTEM)
80876c20
LP		 1530 /* Become a session leader if we aren't one yet. */
1531 setsid();
4ade7963 1532
befb5b6a 1533 /* Move out of the way, so that we won't block unmounts */
d250afe7 1534 assert_se(chdir("/") == 0);
befb5b6a 1535
2146621b
LP		 1536 /* Reset the console, but only if this is really init and we
1537 * are freshly booted */
b2c23da8 1538 if (arg_running_as == MANAGER_SYSTEM && arg_action == ACTION_RUN) {
56d96fc0
LP		 1539
1540 /* If we are init, we connect stdin/stdout/stderr to
1541 * /dev/null and make sure we don't have a controlling
1542 * tty. */
1543 release_terminal();
1544
1545 if (getpid() == 1 && !skip_setup)
1546 console_setup();
1547 }
4ade7963 1548
18149b9f 1549 /* Open the logging devices, if possible and necessary */
843d2643 1550 log_open();
4ade7963 1551
b6e2f329
LP		 1552 if (arg_show_status == _SHOW_STATUS_UNSET)
1553 arg_show_status = SHOW_STATUS_YES;
1554
5373d602
LP		 1555 /* Make sure we leave a core dump without panicing the
1556 * kernel. */
ab422445 1557 if (getpid() == 1) {
4fc935ca 1558 install_crash_handler();
97c4f35c 1559
0c85a4f3
LP		 1560 r = mount_cgroup_controllers(arg_join_controllers);
1561 if (r < 0)
1562 goto finish;
1563 }
1564
b2c23da8 1565 if (arg_running_as == MANAGER_SYSTEM) {
75f86906 1566 int v;
c20f5ac7 1567
0d8c31ff
ZJS		 1568 log_info(PACKAGE_STRING " running in %ssystem mode. (" SYSTEMD_FEATURES ")",
1569 arg_action == ACTION_TEST ? "test " : "" );
c20f5ac7 1570
75f86906
LP		 1571 v = detect_virtualization();
1572 if (v > 0)
1573 log_info("Detected virtualization %s.", virtualization_to_string(v));
c20f5ac7 1574
fdd25311
LP		 1575 write_container_id();
1576
d3f86679 1577 log_info("Detected architecture %s.", architecture_to_string(uname_architecture()));
d9d93745 1578
26a1efdf
LP		 1579 if (in_initrd())
1580 log_info("Running in initial RAM disk.");
1581
3408ba01
LP		 1582 /* Let's check whether /etc is already populated. We
1583 * don't actually really check for that, but use
1584 * /etc/machine-id as flag file. This allows container
1585 * managers and installers to provision a couple of
1586 * files already. If the container manager wants to
1587 * provision the machine ID itself it should pass
ee33e53a 1588 * $container_uuid to PID 1. */
3408ba01 1589
baa1bdf7 1590 empty_etc = access("/etc/machine-id", F_OK) < 0;
5f5c2f38
LP		 1591 if (empty_etc)
1592 log_info("Running with unpopulated /etc.");
d8160f21 1593 } else {
1f97091d
LP		 1594 _cleanup_free_ char *t;
1595
1596 t = uid_to_name(getuid());
0d8c31ff
ZJS		 1597 log_debug(PACKAGE_STRING " running in %suser mode for user "UID_FMT"/%s. (" SYSTEMD_FEATURES ")",
1598 arg_action == ACTION_TEST ? " test" : "", getuid(), t);
d8160f21 1599 }
a5dab5ce 1600
b2c23da8 1601 if (arg_running_as == MANAGER_SYSTEM && !skip_setup) {
031886ed 1602 if (arg_show_status > 0)
888c6216
LP		 1603 status_welcome();
1604
888c6216 1605 hostname_setup();
489388fb 1606 machine_id_setup(NULL);
888c6216 1607 loopback_setup();
490aed58 1608
6ee5bbf8 1609 test_mtab();
80758717 1610 test_usr();
af5bc85d 1611 }
302e8c4c 1612
b2c23da8 1613 if (arg_running_as == MANAGER_SYSTEM && arg_runtime_watchdog > 0)
e96d6be7
LP		 1614 watchdog_set_timeout(&arg_runtime_watchdog);
1615
3a43da28 1616 if (arg_timer_slack_nsec != NSEC_INFINITY)
aa0f64ac 1617 if (prctl(PR_SET_TIMERSLACK, arg_timer_slack_nsec) < 0)
56f64d95 1618 log_error_errno(errno, "Failed to adjust timer slack: %m");
aa0f64ac 1619
ec8927ca 1620 if (arg_capability_bounding_set_drop) {
31c885e9 1621 r = capability_bounding_set_drop_usermode(arg_capability_bounding_set_drop);
ec8927ca 1622 if (r < 0) {
da927ba9 1623 log_emergency_errno(r, "Failed to drop capability bounding set of usermode helpers: %m");
cb6531be 1624 error_message = "Failed to drop capability bounding set of usermode helpers";
ec8927ca
LP		 1625 goto finish;
1626 }
31c885e9 1627 r = capability_bounding_set_drop(arg_capability_bounding_set_drop, true);
939b8f14 1628 if (r < 0) {
da927ba9 1629 log_emergency_errno(r, "Failed to drop capability bounding set: %m");
cb6531be 1630 error_message = "Failed to drop capability bounding set";
939b8f14
LP		 1631 goto finish;
1632 }
ec8927ca
LP		 1633 }
1634
d3b1c508
LP		 1635 if (arg_syscall_archs) {
1636 r = enforce_syscall_archs(arg_syscall_archs);
cb6531be
ZJS		 1637 if (r < 0) {
1638 error_message = "Failed to set syscall architectures";
d3b1c508 1639 goto finish;
cb6531be 1640 }
d3b1c508
LP		 1641 }
1642
61b9b203 1643 if (arg_running_as == MANAGER_USER)
d4447f4d 1644 /* Become reaper of our children */
61b9b203 1645 if (prctl(PR_SET_CHILD_SUBREAPER, 1) < 0)
56f64d95 1646 log_warning_errno(errno, "Failed to make us a subreaper: %m");
d4447f4d 1647
b2c23da8 1648 if (arg_running_as == MANAGER_SYSTEM) {
4096d6f5
LP		 1649 bump_rlimit_nofile(&saved_rlimit_nofile);
1650
5f5c2f38 1651 if (empty_etc) {
304b3079 1652 r = unit_file_preset_all(UNIT_FILE_SYSTEM, false, NULL, UNIT_FILE_PRESET_ENABLE_ONLY, false, NULL, 0);
5f5c2f38 1653 if (r < 0)
da927ba9 1654 log_warning_errno(r, "Failed to populate /etc with preset unit settings, ignoring: %m");
5f5c2f38
LP		 1655 else
1656 log_info("Populated /etc with preset unit settings.");
1657 }
1658 }
1659
0d8c31ff 1660 r = manager_new(arg_running_as, arg_action == ACTION_TEST, &m);
e96d6be7 1661 if (r < 0) {
da927ba9 1662 log_emergency_errno(r, "Failed to allocate manager object: %m");
cb6531be 1663 error_message = "Failed to allocate manager object";
60918275
LP		 1664 goto finish;
1665 }
1666
9e58ff9c 1667 m->confirm_spawn = arg_confirm_spawn;
e96d6be7
LP		 1668 m->runtime_watchdog = arg_runtime_watchdog;
1669 m->shutdown_watchdog = arg_shutdown_watchdog;
c3a170f3
HH		 1670 m->userspace_timestamp = userspace_timestamp;
1671 m->kernel_timestamp = kernel_timestamp;
c3a170f3 1672 m->initrd_timestamp = initrd_timestamp;
c2e0d600
TA		 1673 m->security_start_timestamp = security_start_timestamp;
1674 m->security_finish_timestamp = security_finish_timestamp;
9e58ff9c 1675
06af2a04 1676 manager_set_defaults(m);
27d340c7 1677 manager_set_show_status(m, arg_show_status);
e2680723 1678 manager_set_first_boot(m, empty_etc);
27d340c7 1679
bf4df7c3 1680 /* Remember whether we should queue the default job */
d3b1c508 1681 queue_default_job = !arg_serialization || arg_switched_root;
bf4df7c3 1682
9d76d730
LP		 1683 before_startup = now(CLOCK_MONOTONIC);
1684
d3b1c508 1685 r = manager_startup(m, arg_serialization, fds);
e96d6be7 1686 if (r < 0)
da927ba9 1687 log_error_errno(r, "Failed to fully start up daemon: %m");
a16e1123 1688
bf4df7c3
LP		 1689 /* This will close all file descriptors that were opened, but
1690 * not claimed by any unit. */
2feceb5e 1691 fds = fdset_free(fds);
f50e0a01 1692
74ca738f 1693 arg_serialization = safe_fclose(arg_serialization);
bf4df7c3
LP		 1694
1695 if (queue_default_job) {
718db961 1696 _cleanup_bus_error_free_ sd_bus_error error = SD_BUS_ERROR_NULL;
1c27d3f3 1697 Unit *target = NULL;
bacbccb7 1698 Job *default_unit_job;
398ef8ba 1699
fa0f4d8a 1700 log_debug("Activating default unit: %s", arg_default_unit);
a16e1123 1701
e96d6be7 1702 r = manager_load_unit(m, arg_default_unit, NULL, &error, &target);
718db961
LP		 1703 if (r < 0)
1704 log_error("Failed to load default target: %s", bus_error_message(&error, r));
1705 else if (target->load_state == UNIT_ERROR || target->load_state == UNIT_NOT_FOUND)
c33b3297 1706 log_error_errno(target->load_error, "Failed to load default target: %m");
ac155bb8 1707 else if (target->load_state == UNIT_MASKED)
6daf4f90 1708 log_error("Default target masked.");
27b14a22 1709
ac155bb8 1710 if (!target || target->load_state != UNIT_LOADED) {
a16e1123 1711 log_info("Trying to load rescue target...");
1c27d3f3 1712
e96d6be7
LP		 1713 r = manager_load_unit(m, SPECIAL_RESCUE_TARGET, NULL, &error, &target);
1714 if (r < 0) {
4104970e 1715 log_emergency("Failed to load rescue target: %s", bus_error_message(&error, r));
cb6531be 1716 error_message = "Failed to load rescue target";
a16e1123 1717 goto finish;
11ddb6f4 1718 } else if (target->load_state == UNIT_ERROR || target->load_state == UNIT_NOT_FOUND) {
c33b3297 1719 log_emergency_errno(target->load_error, "Failed to load rescue target: %m");
cb6531be 1720 error_message = "Failed to load rescue target";
1c27d3f3 1721 goto finish;
ac155bb8 1722 } else if (target->load_state == UNIT_MASKED) {
4104970e 1723 log_emergency("Rescue target masked.");
cb6531be 1724 error_message = "Rescue target masked";
00dc5d76 1725 goto finish;
a16e1123
LP		 1726 }
1727 }
37d88da7 1728
ac155bb8 1729 assert(target->load_state == UNIT_LOADED);
00dc5d76 1730
fa0f4d8a 1731 if (arg_action == ACTION_TEST) {
40d50879 1732 printf("-> By units:\n");
a16e1123
LP		 1733 manager_dump_units(m, stdout, "\t");
1734 }
1735
95f1b47d 1736 r = manager_add_job(m, JOB_START, target, JOB_ISOLATE, false, &error, &default_unit_job);
ab17a050 1737 if (r == -EPERM) {
718db961 1738 log_debug("Default target could not be isolated, starting instead: %s", bus_error_message(&error, r));
ab17a050
LP		 1739
1740 r = manager_add_job(m, JOB_START, target, JOB_REPLACE, false, &error, &default_unit_job);
1741 if (r < 0) {
4104970e 1742 log_emergency("Failed to start default target: %s", bus_error_message(&error, r));
cb6531be 1743 error_message = "Failed to start default target";
ab17a050
LP		 1744 goto finish;
1745 }
1746 } else if (r < 0) {
4104970e 1747 log_emergency("Failed to isolate default target: %s", bus_error_message(&error, r));
cb6531be 1748 error_message = "Failed to isolate default target";
37d88da7
LP		 1749 goto finish;
1750 }
ab17a050 1751
bacbccb7 1752 m->default_unit_job_id = default_unit_job->id;
60918275 1753
07672f49
LP		 1754 after_startup = now(CLOCK_MONOTONIC);
1755 log_full(arg_action == ACTION_TEST ? LOG_INFO : LOG_DEBUG,
1756 "Loaded units and determined initial transaction in %s.",
fdb14b7e 1757 format_timespan(timespan, sizeof(timespan), after_startup - before_startup, 100 * USEC_PER_MSEC));
07672f49 1758
fa0f4d8a 1759 if (arg_action == ACTION_TEST) {
40d50879 1760 printf("-> By jobs:\n");
a16e1123 1761 manager_dump_jobs(m, stdout, "\t");
22f4096c 1762 retval = EXIT_SUCCESS;
a16e1123
LP		 1763 goto finish;
1764 }
e965d56d 1765 }
d46de8a1 1766
a16e1123 1767 for (;;) {
e96d6be7
LP		 1768 r = manager_loop(m);
1769 if (r < 0) {
da927ba9 1770 log_emergency_errno(r, "Failed to run main loop: %m");
cb6531be 1771 error_message = "Failed to run main loop";
a16e1123
LP		 1772 goto finish;
1773 }
11dd41ce 1774
a16e1123 1775 switch (m->exit_code) {
e965d56d 1776
a16e1123 1777 case MANAGER_RELOAD:
e015090f 1778 log_info("Reloading.");
06af2a04
TB		 1779
1780 r = parse_config_file();
1781 if (r < 0)
1782 log_error("Failed to parse config file.");
1783
1784 manager_set_defaults(m);
1785
e96d6be7
LP		 1786 r = manager_reload(m);
1787 if (r < 0)
da927ba9 1788 log_error_errno(r, "Failed to reload: %m");
a16e1123 1789 break;
cea8e32e 1790
a16e1123 1791 case MANAGER_REEXECUTE:
664f88a7 1792
cb6531be 1793 if (prepare_reexecute(m, &arg_serialization, &fds, false) < 0) {
6b9af963 1794 error_message = "Failed to prepare for reexecution";
a16e1123 1795 goto finish;
cb6531be 1796 }
60918275 1797
a16e1123 1798 reexecute = true;
e015090f 1799 log_notice("Reexecuting.");
a16e1123
LP		 1800 goto finish;
1801
664f88a7
LP		 1802 case MANAGER_SWITCH_ROOT:
1803 /* Steal the switch root parameters */
41669317 1804 switch_root_dir = m->switch_root;
664f88a7
LP		 1805 switch_root_init = m->switch_root_init;
1806 m->switch_root = m->switch_root_init = NULL;
1807
1808 if (!switch_root_init)
cb6531be 1809 if (prepare_reexecute(m, &arg_serialization, &fds, true) < 0) {
6b9af963 1810 error_message = "Failed to prepare for reexecution";
664f88a7 1811 goto finish;
cb6531be 1812 }
664f88a7
LP		 1813
1814 reexecute = true;
1815 log_notice("Switching root.");
1816 goto finish;
1817
287419c1 1818 case MANAGER_EXIT:
97792515
LP		 1819 retval = m->return_value;
1820
8ebfe0cb 1821 if (m->running_as == MANAGER_USER) {
8ebfe0cb
DH		 1822 log_debug("Exit.");
1823 goto finish;
1824 }
1825
1826 /* fallthrough */
b9080b03
FF		 1827 case MANAGER_REBOOT:
1828 case MANAGER_POWEROFF:
1829 case MANAGER_HALT:
1830 case MANAGER_KEXEC: {
1831 static const char * const table[_MANAGER_EXIT_CODE_MAX] = {
287419c1 1832 [MANAGER_EXIT] = "exit",
b9080b03
FF		 1833 [MANAGER_REBOOT] = "reboot",
1834 [MANAGER_POWEROFF] = "poweroff",
1835 [MANAGER_HALT] = "halt",
1836 [MANAGER_KEXEC] = "kexec"
1837 };
1838
1839 assert_se(shutdown_verb = table[m->exit_code]);
e96d6be7 1840 arm_reboot_watchdog = m->exit_code == MANAGER_REBOOT;
b9080b03
FF		 1841
1842 log_notice("Shutting down.");
1843 goto finish;
1844 }
1845
a16e1123
LP		 1846 default:
1847 assert_not_reached("Unknown exit code.");
1848 }
1849 }
f170852a 1850
60918275 1851finish:
b87c2aa6
ZJS		 1852 pager_close();
1853
97792515 1854 if (m)
81f5fc2d 1855 arg_shutdown_watchdog = m->shutdown_watchdog;
fe382237 1856
06d8d842 1857 m = manager_free(m);
60918275 1858
1f6b4113 1859 for (j = 0; j < ELEMENTSOF(arg_default_rlimit); j++)
a1e58e8e 1860 arg_default_rlimit[j] = mfree(arg_default_rlimit[j]);
c93ff2e9 1861
97b11eed 1862 arg_default_unit = mfree(arg_default_unit);
fe382237 1863 arg_join_controllers = strv_free_free(arg_join_controllers);
97b11eed 1864 arg_default_environment = strv_free(arg_default_environment);
525d3cc7 1865 arg_syscall_archs = set_free(arg_syscall_archs);
d3b1c508 1866
cc56fafe 1867 mac_selinux_finish();
b2bb3dbe 1868
a16e1123 1869 if (reexecute) {
664f88a7 1870 const char **args;
e564a982 1871 unsigned i, args_size;
a16e1123 1872
664f88a7
LP		 1873 /* Close and disarm the watchdog, so that the new
1874 * instance can reinitialize it, but doesn't get
1875 * rebooted while we do that */
1876 watchdog_close(true);
a16e1123 1877
4096d6f5
LP		 1878 /* Reset the RLIMIT_NOFILE to the kernel default, so
1879 * that the new systemd can pass the kernel default to
1880 * its child processes */
1881 if (saved_rlimit_nofile.rlim_cur > 0)
92ca4cac 1882 (void) setrlimit(RLIMIT_NOFILE, &saved_rlimit_nofile);
4096d6f5 1883
41669317 1884 if (switch_root_dir) {
cee530bb
LP		 1885 /* Kill all remaining processes from the
1886 * initrd, but don't wait for them, so that we
1887 * can handle the SIGCHLD for them after
1888 * deserializing. */
0bee65f0 1889 broadcast_signal(SIGTERM, false, true);
bd3fa1d2 1890
5a4bf02f
HH		 1891 /* And switch root with MS_MOVE, because we remove the old directory afterwards and detach it. */
1892 r = switch_root(switch_root_dir, "/mnt", true, MS_MOVE);
41669317 1893 if (r < 0)
da927ba9 1894 log_error_errno(r, "Failed to switch root, trying to continue: %m");
41669317 1895 }
a16e1123 1896
d03bc1b8 1897 args_size = MAX(6, argc+1);
e564a982 1898 args = newa(const char*, args_size);
a16e1123 1899
664f88a7 1900 if (!switch_root_init) {
5ffa8c81 1901 char sfd[DECIMAL_STR_MAX(int) + 1];
a16e1123 1902
664f88a7
LP		 1903 /* First try to spawn ourselves with the right
1904 * path, and with full serialization. We do
1905 * this only if the user didn't specify an
1906 * explicit init to spawn. */
edb9aaa8 1907
d3b1c508 1908 assert(arg_serialization);
664f88a7 1909 assert(fds);
edb9aaa8 1910
5ffa8c81 1911 xsprintf(sfd, "%i", fileno(arg_serialization));
edb9aaa8 1912
664f88a7
LP		 1913 i = 0;
1914 args[i++] = SYSTEMD_BINARY_PATH;
41669317 1915 if (switch_root_dir)
2660882b 1916 args[i++] = "--switched-root";
b2c23da8 1917 args[i++] = arg_running_as == MANAGER_SYSTEM ? "--system" : "--user";
664f88a7
LP		 1918 args[i++] = "--deserialize";
1919 args[i++] = sfd;
1920 args[i++] = NULL;
edb9aaa8 1921
ce8aba56
KS		 1922 /* do not pass along the environment we inherit from the kernel or initrd */
1923 if (switch_root_dir)
92ca4cac 1924 (void) clearenv();
ce8aba56 1925
e564a982 1926 assert(i <= args_size);
92ca4cac 1927 (void) execv(args[0], (char* const*) args);
664f88a7 1928 }
6e98720f 1929
664f88a7
LP		 1930 /* Try the fallback, if there is any, without any
1931 * serialization. We pass the original argv[] and
1932 * envp[]. (Well, modulo the ordering changes due to
1933 * getopt() in argv[], and some cleanups in envp[],
1934 * but let's hope that doesn't matter.) */
a16e1123 1935
74ca738f 1936 arg_serialization = safe_fclose(arg_serialization);
2feceb5e 1937 fds = fdset_free(fds);
a16e1123 1938
a504223d 1939 /* Reopen the console */
92ca4cac 1940 (void) make_console_stdio();
a504223d 1941
d3b1c508 1942 for (j = 1, i = 1; j < (unsigned) argc; j++)
664f88a7 1943 args[i++] = argv[j];
a16e1123 1944 args[i++] = NULL;
e564a982 1945 assert(i <= args_size);
b8f83232 1946
1b6d7fa7 1947 /* Reenable any blocked signals, especially important
5a85ca1c 1948 * if we switch from initial ramdisk to init=... */
ce30c8dc
LP		 1949 (void) reset_all_signal_handlers();
1950 (void) reset_signal_mask();
5a85ca1c 1951
b8f83232
LP		 1952 if (switch_root_init) {
1953 args[0] = switch_root_init;
92ca4cac 1954 (void) execv(args[0], (char* const*) args);
56f64d95 1955 log_warning_errno(errno, "Failed to execute configured init, trying fallback: %m");
b8f83232
LP		 1956 }
1957
1958 args[0] = "/sbin/init";
92ca4cac 1959 (void) execv(args[0], (char* const*) args);
a16e1123 1960
745e2fb7
KS		 1961 if (errno == ENOENT) {
1962 log_warning("No /sbin/init, trying fallback");
b8f83232 1963
745e2fb7
KS		 1964 args[0] = "/bin/sh";
1965 args[1] = NULL;
92ca4cac 1966 (void) execv(args[0], (char* const*) args);
56f64d95 1967 log_error_errno(errno, "Failed to execute /bin/sh, giving up: %m");
745e2fb7 1968 } else
56f64d95 1969 log_warning_errno(errno, "Failed to execute /sbin/init, giving up: %m");
a16e1123
LP		 1970 }
1971
74ca738f 1972 arg_serialization = safe_fclose(arg_serialization);
2feceb5e 1973 fds = fdset_free(fds);
a16e1123 1974
54b434b1
LP		 1975#ifdef HAVE_VALGRIND_VALGRIND_H
1976 /* If we are PID 1 and running under valgrind, then let's exit
1977 * here explicitly. valgrind will only generate nice output on
1978 * exit(), not on exec(), hence let's do the former not the
1979 * latter here. */
1980 if (getpid() == 1 && RUNNING_ON_VALGRIND)
1981 return 0;
1982#endif
1983
b9080b03 1984 if (shutdown_verb) {
b1e90ec5 1985 char log_level[DECIMAL_STR_MAX(int) + 1];
287419c1
AC		 1986 char exit_code[DECIMAL_STR_MAX(uint8_t) + 1];
1987 const char* command_line[11] = {
b9080b03
FF		 1988 SYSTEMD_SHUTDOWN_BINARY_PATH,
1989 shutdown_verb,
b1e90ec5
ZJS		 1990 "--log-level", log_level,
1991 "--log-target",
b9080b03 1992 };
b1e90ec5 1993 unsigned pos = 5;
e3e45d4f 1994 _cleanup_strv_free_ char **env_block = NULL;
15bd5aee
LP		 1995
1996 assert(command_line[pos] == NULL);
e3e45d4f 1997 env_block = strv_copy(environ);
b9080b03 1998
5ffa8c81 1999 xsprintf(log_level, "%d", log_get_max_level());
b1e90ec5
ZJS		 2000
2001 switch (log_get_target()) {
92ca4cac 2002
b1e90ec5
ZJS		 2003 case LOG_TARGET_KMSG:
2004 case LOG_TARGET_JOURNAL_OR_KMSG:
2005 case LOG_TARGET_SYSLOG_OR_KMSG:
2006 command_line[pos++] = "kmsg";
2007 break;
2008
10f00ff1
ILG		 2009 case LOG_TARGET_NULL:
2010 command_line[pos++] = "null";
2011 break;
2012
b1e90ec5
ZJS		 2013 case LOG_TARGET_CONSOLE:
2014 default:
2015 command_line[pos++] = "console";
2016 break;
2017 };
2018
2019 if (log_get_show_color())
2020 command_line[pos++] = "--log-color";
2021
2022 if (log_get_show_location())
2023 command_line[pos++] = "--log-location";
2024
287419c1
AC		 2025 if (streq(shutdown_verb, "exit")) {
2026 command_line[pos++] = "--exit-code";
2027 command_line[pos++] = exit_code;
97792515 2028 xsprintf(exit_code, "%d", retval);
287419c1
AC		 2029 }
2030
26abdc73 2031 assert(pos < ELEMENTSOF(command_line));
b1e90ec5 2032
e96d6be7 2033 if (arm_reboot_watchdog && arg_shutdown_watchdog > 0) {
e3e45d4f 2034 char *e;
d18f337c 2035
e96d6be7
LP		 2036 /* If we reboot let's set the shutdown
2037 * watchdog and tell the shutdown binary to
2038 * repeatedly ping it */
c2cc6b9a
LP		 2039 r = watchdog_set_timeout(&arg_shutdown_watchdog);
2040 watchdog_close(r < 0);
e96d6be7 2041
e3e45d4f
SP		 2042 /* Tell the binary how often to ping, ignore failure */
2043 if (asprintf(&e, "WATCHDOG_USEC="USEC_FMT, arg_shutdown_watchdog) > 0)
92ca4cac 2044 (void) strv_push(&env_block, e);
e3e45d4f 2045 } else
e96d6be7
LP		 2046 watchdog_close(true);
2047
66713f77
LP		 2048 /* Avoid the creation of new processes forked by the
2049 * kernel; at this point, we will not listen to the
2050 * signals anyway */
75f86906 2051 if (detect_container() <= 0)
e155a0aa 2052 (void) cg_uninstall_release_agent(SYSTEMD_CGROUP_CONTROLLER);
ad929bcc 2053
d18f337c 2054 execve(SYSTEMD_SHUTDOWN_BINARY_PATH, (char **) command_line, env_block);
56f64d95 2055 log_error_errno(errno, "Failed to execute shutdown binary, %s: %m",
b1e90ec5 2056 getpid() == 1 ? "freezing" : "quitting");
b9080b03
FF		 2057 }
2058
cb6531be
ZJS		 2059 if (getpid() == 1) {
2060 if (error_message)
2061 manager_status_printf(NULL, STATUS_TYPE_EMERGENCY,
1fc464f6 2062 ANSI_HIGHLIGHT_RED "!!!!!!" ANSI_NORMAL,
cb6531be 2063 "%s, freezing.", error_message);
b9e74c39 2064 freeze_or_reboot();
cb6531be 2065 }
c3b3c274 2066
60918275
LP		 2067 return retval;
2068}
Unnamed repository; edit this file 'description' to name the repository.