]> git.ipfire.org Git - thirdparty/systemd.git/blame_incremental - src/core/service.c
projects / thirdparty / systemd.git / blame_incremental
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (non-incremental) | history | HEAD
test: add test for setting service manager environment variables
[thirdparty/systemd.git] / src / core / service.c
... / ...
CommitLineData
1/* SPDX-License-Identifier: LGPL-2.1+ */
2
3#include <errno.h>
4#include <signal.h>
5#include <unistd.h>
6
7#include "sd-messages.h"
8
9#include "alloc-util.h"
10#include "async.h"
11#include "bus-error.h"
12#include "bus-kernel.h"
13#include "bus-util.h"
14#include "dbus-service.h"
15#include "def.h"
16#include "env-util.h"
17#include "escape.h"
18#include "exit-status.h"
19#include "fd-util.h"
20#include "fileio.h"
21#include "format-util.h"
22#include "fs-util.h"
23#include "load-dropin.h"
24#include "load-fragment.h"
25#include "log.h"
26#include "manager.h"
27#include "parse-util.h"
28#include "path-util.h"
29#include "process-util.h"
30#include "serialize.h"
31#include "service.h"
32#include "signal-util.h"
33#include "special.h"
34#include "stdio-util.h"
35#include "string-table.h"
36#include "string-util.h"
37#include "strv.h"
38#include "unit-name.h"
39#include "unit.h"
40#include "utf8.h"
41#include "util.h"
42
43static const UnitActiveState state_translation_table[_SERVICE_STATE_MAX] = {
44 [SERVICE_DEAD] = UNIT_INACTIVE,
45 [SERVICE_START_PRE] = UNIT_ACTIVATING,
46 [SERVICE_START] = UNIT_ACTIVATING,
47 [SERVICE_START_POST] = UNIT_ACTIVATING,
48 [SERVICE_RUNNING] = UNIT_ACTIVE,
49 [SERVICE_EXITED] = UNIT_ACTIVE,
50 [SERVICE_RELOAD] = UNIT_RELOADING,
51 [SERVICE_STOP] = UNIT_DEACTIVATING,
52 [SERVICE_STOP_WATCHDOG] = UNIT_DEACTIVATING,
53 [SERVICE_STOP_SIGTERM] = UNIT_DEACTIVATING,
54 [SERVICE_STOP_SIGKILL] = UNIT_DEACTIVATING,
55 [SERVICE_STOP_POST] = UNIT_DEACTIVATING,
56 [SERVICE_FINAL_SIGTERM] = UNIT_DEACTIVATING,
57 [SERVICE_FINAL_SIGKILL] = UNIT_DEACTIVATING,
58 [SERVICE_FAILED] = UNIT_FAILED,
59 [SERVICE_AUTO_RESTART] = UNIT_ACTIVATING
60};
61
62/* For Type=idle we never want to delay any other jobs, hence we
63 * consider idle jobs active as soon as we start working on them */
64static const UnitActiveState state_translation_table_idle[_SERVICE_STATE_MAX] = {
65 [SERVICE_DEAD] = UNIT_INACTIVE,
66 [SERVICE_START_PRE] = UNIT_ACTIVE,
67 [SERVICE_START] = UNIT_ACTIVE,
68 [SERVICE_START_POST] = UNIT_ACTIVE,
69 [SERVICE_RUNNING] = UNIT_ACTIVE,
70 [SERVICE_EXITED] = UNIT_ACTIVE,
71 [SERVICE_RELOAD] = UNIT_RELOADING,
72 [SERVICE_STOP] = UNIT_DEACTIVATING,
73 [SERVICE_STOP_WATCHDOG] = UNIT_DEACTIVATING,
74 [SERVICE_STOP_SIGTERM] = UNIT_DEACTIVATING,
75 [SERVICE_STOP_SIGKILL] = UNIT_DEACTIVATING,
76 [SERVICE_STOP_POST] = UNIT_DEACTIVATING,
77 [SERVICE_FINAL_SIGTERM] = UNIT_DEACTIVATING,
78 [SERVICE_FINAL_SIGKILL] = UNIT_DEACTIVATING,
79 [SERVICE_FAILED] = UNIT_FAILED,
80 [SERVICE_AUTO_RESTART] = UNIT_ACTIVATING
81};
82
83static int service_dispatch_inotify_io(sd_event_source *source, int fd, uint32_t events, void *userdata);
84static int service_dispatch_timer(sd_event_source *source, usec_t usec, void *userdata);
85static int service_dispatch_watchdog(sd_event_source *source, usec_t usec, void *userdata);
86static int service_dispatch_exec_io(sd_event_source *source, int fd, uint32_t events, void *userdata);
87
88static void service_enter_signal(Service *s, ServiceState state, ServiceResult f);
89static void service_enter_reload_by_notify(Service *s);
90
91static void service_init(Unit *u) {
92 Service *s = SERVICE(u);
93
94 assert(u);
95 assert(u->load_state == UNIT_STUB);
96
97 s->timeout_start_usec = u->manager->default_timeout_start_usec;
98 s->timeout_stop_usec = u->manager->default_timeout_stop_usec;
99 s->restart_usec = u->manager->default_restart_usec;
100 s->runtime_max_usec = USEC_INFINITY;
101 s->type = _SERVICE_TYPE_INVALID;
102 s->socket_fd = -1;
103 s->stdin_fd = s->stdout_fd = s->stderr_fd = -1;
104 s->guess_main_pid = true;
105
106 s->control_command_id = _SERVICE_EXEC_COMMAND_INVALID;
107
108 s->exec_context.keyring_mode = MANAGER_IS_SYSTEM(u->manager) ?
109 EXEC_KEYRING_PRIVATE : EXEC_KEYRING_INHERIT;
110
111 s->watchdog_original_usec = USEC_INFINITY;
112}
113
114static void service_unwatch_control_pid(Service *s) {
115 assert(s);
116
117 if (s->control_pid <= 0)
118 return;
119
120 unit_unwatch_pid(UNIT(s), s->control_pid);
121 s->control_pid = 0;
122}
123
124static void service_unwatch_main_pid(Service *s) {
125 assert(s);
126
127 if (s->main_pid <= 0)
128 return;
129
130 unit_unwatch_pid(UNIT(s), s->main_pid);
131 s->main_pid = 0;
132}
133
134static void service_unwatch_pid_file(Service *s) {
135 if (!s->pid_file_pathspec)
136 return;
137
138 log_unit_debug(UNIT(s), "Stopping watch for PID file %s", s->pid_file_pathspec->path);
139 path_spec_unwatch(s->pid_file_pathspec);
140 path_spec_done(s->pid_file_pathspec);
141 s->pid_file_pathspec = mfree(s->pid_file_pathspec);
142}
143
144static int service_set_main_pid(Service *s, pid_t pid) {
145 pid_t ppid;
146
147 assert(s);
148
149 if (pid <= 1)
150 return -EINVAL;
151
152 if (pid == getpid_cached())
153 return -EINVAL;
154
155 if (s->main_pid == pid && s->main_pid_known)
156 return 0;
157
158 if (s->main_pid != pid) {
159 service_unwatch_main_pid(s);
160 exec_status_start(&s->main_exec_status, pid);
161 }
162
163 s->main_pid = pid;
164 s->main_pid_known = true;
165
166 if (get_process_ppid(pid, &ppid) >= 0 && ppid != getpid_cached()) {
167 log_unit_warning(UNIT(s), "Supervising process "PID_FMT" which is not our child. We'll most likely not notice when it exits.", pid);
168 s->main_pid_alien = true;
169 } else
170 s->main_pid_alien = false;
171
172 return 0;
173}
174
175void service_close_socket_fd(Service *s) {
176 assert(s);
177
178 /* Undo the effect of service_set_socket_fd(). */
179
180 s->socket_fd = asynchronous_close(s->socket_fd);
181
182 if (UNIT_ISSET(s->accept_socket)) {
183 socket_connection_unref(SOCKET(UNIT_DEREF(s->accept_socket)));
184 unit_ref_unset(&s->accept_socket);
185 }
186}
187
188static void service_stop_watchdog(Service *s) {
189 assert(s);
190
191 s->watchdog_event_source = sd_event_source_unref(s->watchdog_event_source);
192 s->watchdog_timestamp = DUAL_TIMESTAMP_NULL;
193}
194
195static usec_t service_get_watchdog_usec(Service *s) {
196 assert(s);
197
198 if (s->watchdog_override_enable)
199 return s->watchdog_override_usec;
200
201 return s->watchdog_original_usec;
202}
203
204static void service_start_watchdog(Service *s) {
205 usec_t watchdog_usec;
206 int r;
207
208 assert(s);
209
210 watchdog_usec = service_get_watchdog_usec(s);
211 if (IN_SET(watchdog_usec, 0, USEC_INFINITY)) {
212 service_stop_watchdog(s);
213 return;
214 }
215
216 if (s->watchdog_event_source) {
217 r = sd_event_source_set_time(s->watchdog_event_source, usec_add(s->watchdog_timestamp.monotonic, watchdog_usec));
218 if (r < 0) {
219 log_unit_warning_errno(UNIT(s), r, "Failed to reset watchdog timer: %m");
220 return;
221 }
222
223 r = sd_event_source_set_enabled(s->watchdog_event_source, SD_EVENT_ONESHOT);
224 } else {
225 r = sd_event_add_time(
226 UNIT(s)->manager->event,
227 &s->watchdog_event_source,
228 CLOCK_MONOTONIC,
229 usec_add(s->watchdog_timestamp.monotonic, watchdog_usec), 0,
230 service_dispatch_watchdog, s);
231 if (r < 0) {
232 log_unit_warning_errno(UNIT(s), r, "Failed to add watchdog timer: %m");
233 return;
234 }
235
236 (void) sd_event_source_set_description(s->watchdog_event_source, "service-watchdog");
237
238 /* Let's process everything else which might be a sign
239 * of living before we consider a service died. */
240 r = sd_event_source_set_priority(s->watchdog_event_source, SD_EVENT_PRIORITY_IDLE);
241 }
242 if (r < 0)
243 log_unit_warning_errno(UNIT(s), r, "Failed to install watchdog timer: %m");
244}
245
246static void service_extend_event_source_timeout(Service *s, sd_event_source *source, usec_t extended) {
247 usec_t current;
248 int r;
249
250 assert(s);
251
252 /* Extends the specified event source timer to at least the specified time, unless it is already later
253 * anyway. */
254
255 if (!source)
256 return;
257
258 r = sd_event_source_get_time(source, &current);
259 if (r < 0) {
260 const char *desc;
261 (void) sd_event_source_get_description(s->timer_event_source, &desc);
262 log_unit_warning_errno(UNIT(s), r, "Failed to retrieve timeout time for event source '%s', ignoring: %m", strna(desc));
263 return;
264 }
265
266 if (current >= extended) /* Current timeout is already longer, ignore this. */
267 return;
268
269 r = sd_event_source_set_time(source, extended);
270 if (r < 0) {
271 const char *desc;
272 (void) sd_event_source_get_description(s->timer_event_source, &desc);
273 log_unit_warning_errno(UNIT(s), r, "Failed to set timeout time for even source '%s', ignoring %m", strna(desc));
274 }
275}
276
277static void service_extend_timeout(Service *s, usec_t extend_timeout_usec) {
278 usec_t extended;
279
280 assert(s);
281
282 if (IN_SET(extend_timeout_usec, 0, USEC_INFINITY))
283 return;
284
285 extended = usec_add(now(CLOCK_MONOTONIC), extend_timeout_usec);
286
287 service_extend_event_source_timeout(s, s->timer_event_source, extended);
288 service_extend_event_source_timeout(s, s->watchdog_event_source, extended);
289}
290
291static void service_reset_watchdog(Service *s) {
292 assert(s);
293
294 dual_timestamp_get(&s->watchdog_timestamp);
295 service_start_watchdog(s);
296}
297
298static void service_override_watchdog_timeout(Service *s, usec_t watchdog_override_usec) {
299 assert(s);
300
301 s->watchdog_override_enable = true;
302 s->watchdog_override_usec = watchdog_override_usec;
303 service_reset_watchdog(s);
304
305 log_unit_debug(UNIT(s), "watchdog_usec="USEC_FMT, s->watchdog_usec);
306 log_unit_debug(UNIT(s), "watchdog_override_usec="USEC_FMT, s->watchdog_override_usec);
307}
308
309static void service_fd_store_unlink(ServiceFDStore *fs) {
310
311 if (!fs)
312 return;
313
314 if (fs->service) {
315 assert(fs->service->n_fd_store > 0);
316 LIST_REMOVE(fd_store, fs->service->fd_store, fs);
317 fs->service->n_fd_store--;
318 }
319
320 if (fs->event_source) {
321 sd_event_source_set_enabled(fs->event_source, SD_EVENT_OFF);
322 sd_event_source_unref(fs->event_source);
323 }
324
325 free(fs->fdname);
326 safe_close(fs->fd);
327 free(fs);
328}
329
330static void service_release_fd_store(Service *s) {
331 assert(s);
332
333 if (s->n_keep_fd_store > 0)
334 return;
335
336 log_unit_debug(UNIT(s), "Releasing all stored fds");
337 while (s->fd_store)
338 service_fd_store_unlink(s->fd_store);
339
340 assert(s->n_fd_store == 0);
341}
342
343static void service_release_resources(Unit *u) {
344 Service *s = SERVICE(u);
345
346 assert(s);
347
348 if (!s->fd_store && s->stdin_fd < 0 && s->stdout_fd < 0 && s->stderr_fd < 0)
349 return;
350
351 log_unit_debug(u, "Releasing resources.");
352
353 s->stdin_fd = safe_close(s->stdin_fd);
354 s->stdout_fd = safe_close(s->stdout_fd);
355 s->stderr_fd = safe_close(s->stderr_fd);
356
357 service_release_fd_store(s);
358}
359
360static void service_done(Unit *u) {
361 Service *s = SERVICE(u);
362
363 assert(s);
364
365 s->pid_file = mfree(s->pid_file);
366 s->status_text = mfree(s->status_text);
367
368 s->exec_runtime = exec_runtime_unref(s->exec_runtime, false);
369 exec_command_free_array(s->exec_command, _SERVICE_EXEC_COMMAND_MAX);
370 s->control_command = NULL;
371 s->main_command = NULL;
372
373 dynamic_creds_unref(&s->dynamic_creds);
374
375 exit_status_set_free(&s->restart_prevent_status);
376 exit_status_set_free(&s->restart_force_status);
377 exit_status_set_free(&s->success_status);
378
379 /* This will leak a process, but at least no memory or any of
380 * our resources */
381 service_unwatch_main_pid(s);
382 service_unwatch_control_pid(s);
383 service_unwatch_pid_file(s);
384
385 if (s->bus_name) {
386 unit_unwatch_bus_name(u, s->bus_name);
387 s->bus_name = mfree(s->bus_name);
388 }
389
390 s->bus_name_owner = mfree(s->bus_name_owner);
391
392 s->usb_function_descriptors = mfree(s->usb_function_descriptors);
393 s->usb_function_strings = mfree(s->usb_function_strings);
394
395 service_close_socket_fd(s);
396 s->peer = socket_peer_unref(s->peer);
397
398 unit_ref_unset(&s->accept_socket);
399
400 service_stop_watchdog(s);
401
402 s->timer_event_source = sd_event_source_unref(s->timer_event_source);
403 s->exec_fd_event_source = sd_event_source_unref(s->exec_fd_event_source);
404
405 service_release_resources(u);
406}
407
408static int on_fd_store_io(sd_event_source *e, int fd, uint32_t revents, void *userdata) {
409 ServiceFDStore *fs = userdata;
410
411 assert(e);
412 assert(fs);
413
414 /* If we get either EPOLLHUP or EPOLLERR, it's time to remove this entry from the fd store */
415 log_unit_debug(UNIT(fs->service),
416 "Received %s on stored fd %d (%s), closing.",
417 revents & EPOLLERR ? "EPOLLERR" : "EPOLLHUP",
418 fs->fd, strna(fs->fdname));
419 service_fd_store_unlink(fs);
420 return 0;
421}
422
423static int service_add_fd_store(Service *s, int fd, const char *name) {
424 ServiceFDStore *fs;
425 int r;
426
427 /* fd is always consumed if we return >= 0 */
428
429 assert(s);
430 assert(fd >= 0);
431
432 if (s->n_fd_store >= s->n_fd_store_max)
433 return -EXFULL; /* Our store is full.
434 * Use this errno rather than E[NM]FILE to distinguish from
435 * the case where systemd itself hits the file limit. */
436
437 LIST_FOREACH(fd_store, fs, s->fd_store) {
438 r = same_fd(fs->fd, fd);
439 if (r < 0)
440 return r;
441 if (r > 0) {
442 safe_close(fd);
443 return 0; /* fd already included */
444 }
445 }
446
447 fs = new0(ServiceFDStore, 1);
448 if (!fs)
449 return -ENOMEM;
450
451 fs->fd = fd;
452 fs->service = s;
453 fs->fdname = strdup(name ?: "stored");
454 if (!fs->fdname) {
455 free(fs);
456 return -ENOMEM;
457 }
458
459 r = sd_event_add_io(UNIT(s)->manager->event, &fs->event_source, fd, 0, on_fd_store_io, fs);
460 if (r < 0 && r != -EPERM) { /* EPERM indicates fds that aren't pollable, which is OK */
461 free(fs->fdname);
462 free(fs);
463 return r;
464 } else if (r >= 0)
465 (void) sd_event_source_set_description(fs->event_source, "service-fd-store");
466
467 LIST_PREPEND(fd_store, s->fd_store, fs);
468 s->n_fd_store++;
469
470 return 1; /* fd newly stored */
471}
472
473static int service_add_fd_store_set(Service *s, FDSet *fds, const char *name) {
474 int r;
475
476 assert(s);
477
478 while (fdset_size(fds) > 0) {
479 _cleanup_close_ int fd = -1;
480
481 fd = fdset_steal_first(fds);
482 if (fd < 0)
483 break;
484
485 r = service_add_fd_store(s, fd, name);
486 if (r == -EXFULL)
487 return log_unit_warning_errno(UNIT(s), r,
488 "Cannot store more fds than FileDescriptorStoreMax=%u, closing remaining.",
489 s->n_fd_store_max);
490 if (r < 0)
491 return log_unit_error_errno(UNIT(s), r, "Failed to add fd to store: %m");
492 if (r > 0)
493 log_unit_debug(UNIT(s), "Added fd %u (%s) to fd store.", fd, strna(name));
494 fd = -1;
495 }
496
497 return 0;
498}
499
500static void service_remove_fd_store(Service *s, const char *name) {
501 ServiceFDStore *fs, *n;
502
503 assert(s);
504 assert(name);
505
506 LIST_FOREACH_SAFE(fd_store, fs, n, s->fd_store) {
507 if (!streq(fs->fdname, name))
508 continue;
509
510 log_unit_debug(UNIT(s), "Got explicit request to remove fd %i (%s), closing.", fs->fd, name);
511 service_fd_store_unlink(fs);
512 }
513}
514
515static int service_arm_timer(Service *s, usec_t usec) {
516 int r;
517
518 assert(s);
519
520 if (s->timer_event_source) {
521 r = sd_event_source_set_time(s->timer_event_source, usec);
522 if (r < 0)
523 return r;
524
525 return sd_event_source_set_enabled(s->timer_event_source, SD_EVENT_ONESHOT);
526 }
527
528 if (usec == USEC_INFINITY)
529 return 0;
530
531 r = sd_event_add_time(
532 UNIT(s)->manager->event,
533 &s->timer_event_source,
534 CLOCK_MONOTONIC,
535 usec, 0,
536 service_dispatch_timer, s);
537 if (r < 0)
538 return r;
539
540 (void) sd_event_source_set_description(s->timer_event_source, "service-timer");
541
542 return 0;
543}
544
545static int service_verify(Service *s) {
546 assert(s);
547
548 if (UNIT(s)->load_state != UNIT_LOADED)
549 return 0;
550
551 if (!s->exec_command[SERVICE_EXEC_START] && !s->exec_command[SERVICE_EXEC_STOP]
552 && UNIT(s)->success_action == EMERGENCY_ACTION_NONE) {
553 /* FailureAction= only makes sense if one of the start or stop commands is specified.
554 * SuccessAction= will be executed unconditionally if no commands are specified. Hence,
555 * either a command or SuccessAction= are required. */
556
557 log_unit_error(UNIT(s), "Service has no ExecStart=, ExecStop=, or SuccessAction=. Refusing.");
558 return -ENOEXEC;
559 }
560
561 if (s->type != SERVICE_ONESHOT && !s->exec_command[SERVICE_EXEC_START]) {
562 log_unit_error(UNIT(s), "Service has no ExecStart= setting, which is only allowed for Type=oneshot services. Refusing.");
563 return -ENOEXEC;
564 }
565
566 if (!s->remain_after_exit && !s->exec_command[SERVICE_EXEC_START] && UNIT(s)->success_action == EMERGENCY_ACTION_NONE) {
567 log_unit_error(UNIT(s), "Service has no ExecStart= and no SuccessAction= settings and does not have RemainAfterExit=yes set. Refusing.");
568 return -ENOEXEC;
569 }
570
571 if (s->type != SERVICE_ONESHOT && s->exec_command[SERVICE_EXEC_START]->command_next) {
572 log_unit_error(UNIT(s), "Service has more than one ExecStart= setting, which is only allowed for Type=oneshot services. Refusing.");
573 return -ENOEXEC;
574 }
575
576 if (s->type == SERVICE_ONESHOT && s->restart != SERVICE_RESTART_NO) {
577 log_unit_error(UNIT(s), "Service has Restart= setting other than no, which isn't allowed for Type=oneshot services. Refusing.");
578 return -ENOEXEC;
579 }
580
581 if (s->type == SERVICE_ONESHOT && !exit_status_set_is_empty(&s->restart_force_status)) {
582 log_unit_error(UNIT(s), "Service has RestartForceStatus= set, which isn't allowed for Type=oneshot services. Refusing.");
583 return -ENOEXEC;
584 }
585
586 if (s->type == SERVICE_DBUS && !s->bus_name) {
587 log_unit_error(UNIT(s), "Service is of type D-Bus but no D-Bus service name has been specified. Refusing.");
588 return -ENOEXEC;
589 }
590
591 if (s->bus_name && s->type != SERVICE_DBUS)
592 log_unit_warning(UNIT(s), "Service has a D-Bus service name specified, but is not of type dbus. Ignoring.");
593
594 if (s->exec_context.pam_name && !IN_SET(s->kill_context.kill_mode, KILL_CONTROL_GROUP, KILL_MIXED)) {
595 log_unit_error(UNIT(s), "Service has PAM enabled. Kill mode must be set to 'control-group' or 'mixed'. Refusing.");
596 return -ENOEXEC;
597 }
598
599 if (s->usb_function_descriptors && !s->usb_function_strings)
600 log_unit_warning(UNIT(s), "Service has USBFunctionDescriptors= setting, but no USBFunctionStrings=. Ignoring.");
601
602 if (!s->usb_function_descriptors && s->usb_function_strings)
603 log_unit_warning(UNIT(s), "Service has USBFunctionStrings= setting, but no USBFunctionDescriptors=. Ignoring.");
604
605 if (s->runtime_max_usec != USEC_INFINITY && s->type == SERVICE_ONESHOT)
606 log_unit_warning(UNIT(s), "MaxRuntimeSec= has no effect in combination with Type=oneshot. Ignoring.");
607
608 return 0;
609}
610
611static int service_add_default_dependencies(Service *s) {
612 int r;
613
614 assert(s);
615
616 if (!UNIT(s)->default_dependencies)
617 return 0;
618
619 /* Add a number of automatic dependencies useful for the
620 * majority of services. */
621
622 if (MANAGER_IS_SYSTEM(UNIT(s)->manager)) {
623 /* First, pull in the really early boot stuff, and
624 * require it, so that we fail if we can't acquire
625 * it. */
626
627 r = unit_add_two_dependencies_by_name(UNIT(s), UNIT_AFTER, UNIT_REQUIRES, SPECIAL_SYSINIT_TARGET, true, UNIT_DEPENDENCY_DEFAULT);
628 if (r < 0)
629 return r;
630 } else {
631
632 /* In the --user instance there's no sysinit.target,
633 * in that case require basic.target instead. */
634
635 r = unit_add_dependency_by_name(UNIT(s), UNIT_REQUIRES, SPECIAL_BASIC_TARGET, true, UNIT_DEPENDENCY_DEFAULT);
636 if (r < 0)
637 return r;
638 }
639
640 /* Second, if the rest of the base system is in the same
641 * transaction, order us after it, but do not pull it in or
642 * even require it. */
643 r = unit_add_dependency_by_name(UNIT(s), UNIT_AFTER, SPECIAL_BASIC_TARGET, true, UNIT_DEPENDENCY_DEFAULT);
644 if (r < 0)
645 return r;
646
647 /* Third, add us in for normal shutdown. */
648 return unit_add_two_dependencies_by_name(UNIT(s), UNIT_BEFORE, UNIT_CONFLICTS, SPECIAL_SHUTDOWN_TARGET, true, UNIT_DEPENDENCY_DEFAULT);
649}
650
651static void service_fix_output(Service *s) {
652 assert(s);
653
654 /* If nothing has been explicitly configured, patch default output in. If input is socket/tty we avoid this
655 * however, since in that case we want output to default to the same place as we read input from. */
656
657 if (s->exec_context.std_error == EXEC_OUTPUT_INHERIT &&
658 s->exec_context.std_output == EXEC_OUTPUT_INHERIT &&
659 s->exec_context.std_input == EXEC_INPUT_NULL)
660 s->exec_context.std_error = UNIT(s)->manager->default_std_error;
661
662 if (s->exec_context.std_output == EXEC_OUTPUT_INHERIT &&
663 s->exec_context.std_input == EXEC_INPUT_NULL)
664 s->exec_context.std_output = UNIT(s)->manager->default_std_output;
665
666 if (s->exec_context.std_input == EXEC_INPUT_NULL &&
667 s->exec_context.stdin_data_size > 0)
668 s->exec_context.std_input = EXEC_INPUT_DATA;
669}
670
671static int service_setup_bus_name(Service *s) {
672 int r;
673
674 assert(s);
675
676 if (!s->bus_name)
677 return 0;
678
679 r = unit_add_dependency_by_name(UNIT(s), UNIT_REQUIRES, SPECIAL_DBUS_SOCKET, true, UNIT_DEPENDENCY_FILE);
680 if (r < 0)
681 return log_unit_error_errno(UNIT(s), r, "Failed to add dependency on " SPECIAL_DBUS_SOCKET ": %m");
682
683 /* We always want to be ordered against dbus.socket if both are in the transaction. */
684 r = unit_add_dependency_by_name(UNIT(s), UNIT_AFTER, SPECIAL_DBUS_SOCKET, true, UNIT_DEPENDENCY_FILE);
685 if (r < 0)
686 return log_unit_error_errno(UNIT(s), r, "Failed to add dependency on " SPECIAL_DBUS_SOCKET ": %m");
687
688 r = unit_watch_bus_name(UNIT(s), s->bus_name);
689 if (r == -EEXIST)
690 return log_unit_error_errno(UNIT(s), r, "Two services allocated for the same bus name %s, refusing operation.", s->bus_name);
691 if (r < 0)
692 return log_unit_error_errno(UNIT(s), r, "Cannot watch bus name %s: %m", s->bus_name);
693
694 return 0;
695}
696
697static int service_add_extras(Service *s) {
698 int r;
699
700 assert(s);
701
702 if (s->type == _SERVICE_TYPE_INVALID) {
703 /* Figure out a type automatically */
704 if (s->bus_name)
705 s->type = SERVICE_DBUS;
706 else if (s->exec_command[SERVICE_EXEC_START])
707 s->type = SERVICE_SIMPLE;
708 else
709 s->type = SERVICE_ONESHOT;
710 }
711
712 /* Oneshot services have disabled start timeout by default */
713 if (s->type == SERVICE_ONESHOT && !s->start_timeout_defined)
714 s->timeout_start_usec = USEC_INFINITY;
715
716 service_fix_output(s);
717
718 r = unit_patch_contexts(UNIT(s));
719 if (r < 0)
720 return r;
721
722 r = unit_add_exec_dependencies(UNIT(s), &s->exec_context);
723 if (r < 0)
724 return r;
725
726 r = unit_set_default_slice(UNIT(s));
727 if (r < 0)
728 return r;
729
730 /* If the service needs the notify socket, let's enable it automatically. */
731 if (s->notify_access == NOTIFY_NONE &&
732 (s->type == SERVICE_NOTIFY || s->watchdog_usec > 0 || s->n_fd_store_max > 0))
733 s->notify_access = NOTIFY_MAIN;
734
735 r = service_add_default_dependencies(s);
736 if (r < 0)
737 return r;
738
739 r = service_setup_bus_name(s);
740 if (r < 0)
741 return r;
742
743 return 0;
744}
745
746static int service_load(Unit *u) {
747 Service *s = SERVICE(u);
748 int r;
749
750 assert(s);
751
752 /* Load a .service file */
753 r = unit_load_fragment(u);
754 if (r < 0)
755 return r;
756
757 /* Still nothing found? Then let's give up */
758 if (u->load_state == UNIT_STUB)
759 return -ENOENT;
760
761 /* This is a new unit? Then let's add in some extras */
762 if (u->load_state == UNIT_LOADED) {
763
764 /* We were able to load something, then let's add in
765 * the dropin directories. */
766 r = unit_load_dropin(u);
767 if (r < 0)
768 return r;
769
770 /* This is a new unit? Then let's add in some
771 * extras */
772 r = service_add_extras(s);
773 if (r < 0)
774 return r;
775 }
776
777 return service_verify(s);
778}
779
780static void service_dump(Unit *u, FILE *f, const char *prefix) {
781 char buf_restart[FORMAT_TIMESPAN_MAX], buf_start[FORMAT_TIMESPAN_MAX], buf_stop[FORMAT_TIMESPAN_MAX];
782 char buf_runtime[FORMAT_TIMESPAN_MAX], buf_watchdog[FORMAT_TIMESPAN_MAX];
783 ServiceExecCommand c;
784 Service *s = SERVICE(u);
785 const char *prefix2;
786
787 assert(s);
788
789 prefix = strempty(prefix);
790 prefix2 = strjoina(prefix, "\t");
791
792 fprintf(f,
793 "%sService State: %s\n"
794 "%sResult: %s\n"
795 "%sReload Result: %s\n"
796 "%sPermissionsStartOnly: %s\n"
797 "%sRootDirectoryStartOnly: %s\n"
798 "%sRemainAfterExit: %s\n"
799 "%sGuessMainPID: %s\n"
800 "%sType: %s\n"
801 "%sRestart: %s\n"
802 "%sNotifyAccess: %s\n"
803 "%sNotifyState: %s\n",
804 prefix, service_state_to_string(s->state),
805 prefix, service_result_to_string(s->result),
806 prefix, service_result_to_string(s->reload_result),
807 prefix, yes_no(s->permissions_start_only),
808 prefix, yes_no(s->root_directory_start_only),
809 prefix, yes_no(s->remain_after_exit),
810 prefix, yes_no(s->guess_main_pid),
811 prefix, service_type_to_string(s->type),
812 prefix, service_restart_to_string(s->restart),
813 prefix, notify_access_to_string(s->notify_access),
814 prefix, notify_state_to_string(s->notify_state));
815
816 if (s->control_pid > 0)
817 fprintf(f,
818 "%sControl PID: "PID_FMT"\n",
819 prefix, s->control_pid);
820
821 if (s->main_pid > 0)
822 fprintf(f,
823 "%sMain PID: "PID_FMT"\n"
824 "%sMain PID Known: %s\n"
825 "%sMain PID Alien: %s\n",
826 prefix, s->main_pid,
827 prefix, yes_no(s->main_pid_known),
828 prefix, yes_no(s->main_pid_alien));
829
830 if (s->pid_file)
831 fprintf(f,
832 "%sPIDFile: %s\n",
833 prefix, s->pid_file);
834
835 if (s->bus_name)
836 fprintf(f,
837 "%sBusName: %s\n"
838 "%sBus Name Good: %s\n",
839 prefix, s->bus_name,
840 prefix, yes_no(s->bus_name_good));
841
842 if (UNIT_ISSET(s->accept_socket))
843 fprintf(f,
844 "%sAccept Socket: %s\n",
845 prefix, UNIT_DEREF(s->accept_socket)->id);
846
847 fprintf(f,
848 "%sRestartSec: %s\n"
849 "%sTimeoutStartSec: %s\n"
850 "%sTimeoutStopSec: %s\n"
851 "%sRuntimeMaxSec: %s\n"
852 "%sWatchdogSec: %s\n",
853 prefix, format_timespan(buf_restart, sizeof(buf_restart), s->restart_usec, USEC_PER_SEC),
854 prefix, format_timespan(buf_start, sizeof(buf_start), s->timeout_start_usec, USEC_PER_SEC),
855 prefix, format_timespan(buf_stop, sizeof(buf_stop), s->timeout_stop_usec, USEC_PER_SEC),
856 prefix, format_timespan(buf_runtime, sizeof(buf_runtime), s->runtime_max_usec, USEC_PER_SEC),
857 prefix, format_timespan(buf_watchdog, sizeof(buf_watchdog), s->watchdog_usec, USEC_PER_SEC));
858
859 kill_context_dump(&s->kill_context, f, prefix);
860 exec_context_dump(&s->exec_context, f, prefix);
861
862 for (c = 0; c < _SERVICE_EXEC_COMMAND_MAX; c++) {
863
864 if (!s->exec_command[c])
865 continue;
866
867 fprintf(f, "%s-> %s:\n",
868 prefix, service_exec_command_to_string(c));
869
870 exec_command_dump_list(s->exec_command[c], f, prefix2);
871 }
872
873 if (s->status_text)
874 fprintf(f, "%sStatus Text: %s\n",
875 prefix, s->status_text);
876
877 if (s->n_fd_store_max > 0)
878 fprintf(f,
879 "%sFile Descriptor Store Max: %u\n"
880 "%sFile Descriptor Store Current: %zu\n",
881 prefix, s->n_fd_store_max,
882 prefix, s->n_fd_store);
883
884 cgroup_context_dump(&s->cgroup_context, f, prefix);
885}
886
887static int service_is_suitable_main_pid(Service *s, pid_t pid, int prio) {
888 Unit *owner;
889
890 assert(s);
891 assert(pid_is_valid(pid));
892
893 /* Checks whether the specified PID is suitable as main PID for this service. returns negative if not, 0 if the
894 * PID is questionnable but should be accepted if the source of configuration is trusted. > 0 if the PID is
895 * good */
896
897 if (pid == getpid_cached() || pid == 1) {
898 log_unit_full(UNIT(s), prio, 0, "New main PID "PID_FMT" is the manager, refusing.", pid);
899 return -EPERM;
900 }
901
902 if (pid == s->control_pid) {
903 log_unit_full(UNIT(s), prio, 0, "New main PID "PID_FMT" is the control process, refusing.", pid);
904 return -EPERM;
905 }
906
907 if (!pid_is_alive(pid)) {
908 log_unit_full(UNIT(s), prio, 0, "New main PID "PID_FMT" does not exist or is a zombie.", pid);
909 return -ESRCH;
910 }
911
912 owner = manager_get_unit_by_pid(UNIT(s)->manager, pid);
913 if (owner == UNIT(s)) {
914 log_unit_debug(UNIT(s), "New main PID "PID_FMT" belongs to service, we are happy.", pid);
915 return 1; /* Yay, it's definitely a good PID */
916 }
917
918 return 0; /* Hmm it's a suspicious PID, let's accept it if configuration source is trusted */
919}
920
921static int service_load_pid_file(Service *s, bool may_warn) {
922 char procfs[STRLEN("/proc/self/fd/") + DECIMAL_STR_MAX(int)];
923 bool questionable_pid_file = false;
924 _cleanup_free_ char *k = NULL;
925 _cleanup_close_ int fd = -1;
926 int r, prio;
927 pid_t pid;
928
929 assert(s);
930
931 if (!s->pid_file)
932 return -ENOENT;
933
934 prio = may_warn ? LOG_INFO : LOG_DEBUG;
935
936 fd = chase_symlinks(s->pid_file, NULL, CHASE_OPEN|CHASE_SAFE, NULL);
937 if (fd == -EPERM) {
938 log_unit_full(UNIT(s), LOG_DEBUG, fd, "Permission denied while opening PID file or potentially unsafe symlink chain, will now retry with relaxed checks: %s", s->pid_file);
939
940 questionable_pid_file = true;
941
942 fd = chase_symlinks(s->pid_file, NULL, CHASE_OPEN, NULL);
943 }
944 if (fd < 0)
945 return log_unit_full(UNIT(s), prio, fd, "Can't open PID file %s (yet?) after %s: %m", s->pid_file, service_state_to_string(s->state));
946
947 /* Let's read the PID file now that we chased it down. But we need to convert the O_PATH fd chase_symlinks() returned us into a proper fd first. */
948 xsprintf(procfs, "/proc/self/fd/%i", fd);
949 r = read_one_line_file(procfs, &k);
950 if (r < 0)
951 return log_unit_error_errno(UNIT(s), r, "Can't convert PID files %s O_PATH file descriptor to proper file descriptor: %m", s->pid_file);
952
953 r = parse_pid(k, &pid);
954 if (r < 0)
955 return log_unit_full(UNIT(s), prio, r, "Failed to parse PID from file %s: %m", s->pid_file);
956
957 if (s->main_pid_known && pid == s->main_pid)
958 return 0;
959
960 r = service_is_suitable_main_pid(s, pid, prio);
961 if (r < 0)
962 return r;
963 if (r == 0) {
964 struct stat st;
965
966 if (questionable_pid_file) {
967 log_unit_error(UNIT(s), "Refusing to accept PID outside of service control group, acquired through unsafe symlink chain: %s", s->pid_file);
968 return -EPERM;
969 }
970
971 /* Hmm, it's not clear if the new main PID is safe. Let's allow this if the PID file is owned by root */
972
973 if (fstat(fd, &st) < 0)
974 return log_unit_error_errno(UNIT(s), errno, "Failed to fstat() PID file O_PATH fd: %m");
975
976 if (st.st_uid != 0) {
977 log_unit_error(UNIT(s), "New main PID "PID_FMT" does not belong to service, and PID file is not owned by root. Refusing.", pid);
978 return -EPERM;
979 }
980
981 log_unit_debug(UNIT(s), "New main PID "PID_FMT" does not belong to service, but we'll accept it since PID file is owned by root.", pid);
982 }
983
984 if (s->main_pid_known) {
985 log_unit_debug(UNIT(s), "Main PID changing: "PID_FMT" -> "PID_FMT, s->main_pid, pid);
986
987 service_unwatch_main_pid(s);
988 s->main_pid_known = false;
989 } else
990 log_unit_debug(UNIT(s), "Main PID loaded: "PID_FMT, pid);
991
992 r = service_set_main_pid(s, pid);
993 if (r < 0)
994 return r;
995
996 r = unit_watch_pid(UNIT(s), pid);
997 if (r < 0) /* FIXME: we need to do something here */
998 return log_unit_warning_errno(UNIT(s), r, "Failed to watch PID "PID_FMT" for service: %m", pid);
999
1000 return 1;
1001}
1002
1003static void service_search_main_pid(Service *s) {
1004 pid_t pid = 0;
1005 int r;
1006
1007 assert(s);
1008
1009 /* If we know it anyway, don't ever fallback to unreliable
1010 * heuristics */
1011 if (s->main_pid_known)
1012 return;
1013
1014 if (!s->guess_main_pid)
1015 return;
1016
1017 assert(s->main_pid <= 0);
1018
1019 if (unit_search_main_pid(UNIT(s), &pid) < 0)
1020 return;
1021
1022 log_unit_debug(UNIT(s), "Main PID guessed: "PID_FMT, pid);
1023 if (service_set_main_pid(s, pid) < 0)
1024 return;
1025
1026 r = unit_watch_pid(UNIT(s), pid);
1027 if (r < 0)
1028 /* FIXME: we need to do something here */
1029 log_unit_warning_errno(UNIT(s), r, "Failed to watch PID "PID_FMT" from: %m", pid);
1030}
1031
1032static void service_set_state(Service *s, ServiceState state) {
1033 ServiceState old_state;
1034 const UnitActiveState *table;
1035
1036 assert(s);
1037
1038 table = s->type == SERVICE_IDLE ? state_translation_table_idle : state_translation_table;
1039
1040 old_state = s->state;
1041 s->state = state;
1042
1043 service_unwatch_pid_file(s);
1044
1045 if (!IN_SET(state,
1046 SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST,
1047 SERVICE_RUNNING,
1048 SERVICE_RELOAD,
1049 SERVICE_STOP, SERVICE_STOP_WATCHDOG, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
1050 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL,
1051 SERVICE_AUTO_RESTART))
1052 s->timer_event_source = sd_event_source_unref(s->timer_event_source);
1053
1054 if (!IN_SET(state,
1055 SERVICE_START, SERVICE_START_POST,
1056 SERVICE_RUNNING, SERVICE_RELOAD,
1057 SERVICE_STOP, SERVICE_STOP_WATCHDOG, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
1058 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL)) {
1059 service_unwatch_main_pid(s);
1060 s->main_command = NULL;
1061 }
1062
1063 if (!IN_SET(state,
1064 SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST,
1065 SERVICE_RELOAD,
1066 SERVICE_STOP, SERVICE_STOP_WATCHDOG, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
1067 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL)) {
1068 service_unwatch_control_pid(s);
1069 s->control_command = NULL;
1070 s->control_command_id = _SERVICE_EXEC_COMMAND_INVALID;
1071 }
1072
1073 if (IN_SET(state, SERVICE_DEAD, SERVICE_FAILED, SERVICE_AUTO_RESTART)) {
1074 unit_unwatch_all_pids(UNIT(s));
1075 unit_dequeue_rewatch_pids(UNIT(s));
1076 }
1077
1078 if (!IN_SET(state,
1079 SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST,
1080 SERVICE_RUNNING, SERVICE_RELOAD,
1081 SERVICE_STOP, SERVICE_STOP_WATCHDOG, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
1082 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL) &&
1083 !(state == SERVICE_DEAD && UNIT(s)->job))
1084 service_close_socket_fd(s);
1085
1086 if (state != SERVICE_START)
1087 s->exec_fd_event_source = sd_event_source_unref(s->exec_fd_event_source);
1088
1089 if (!IN_SET(state, SERVICE_START_POST, SERVICE_RUNNING, SERVICE_RELOAD))
1090 service_stop_watchdog(s);
1091
1092 /* For the inactive states unit_notify() will trim the cgroup,
1093 * but for exit we have to do that ourselves... */
1094 if (state == SERVICE_EXITED && !MANAGER_IS_RELOADING(UNIT(s)->manager))
1095 unit_prune_cgroup(UNIT(s));
1096
1097 if (old_state != state)
1098 log_unit_debug(UNIT(s), "Changed %s -> %s", service_state_to_string(old_state), service_state_to_string(state));
1099
1100 unit_notify(UNIT(s), table[old_state], table[state],
1101 (s->reload_result == SERVICE_SUCCESS ? 0 : UNIT_NOTIFY_RELOAD_FAILURE) |
1102 (s->will_auto_restart ? UNIT_NOTIFY_WILL_AUTO_RESTART : 0));
1103}
1104
1105static usec_t service_coldplug_timeout(Service *s) {
1106 assert(s);
1107
1108 switch (s->deserialized_state) {
1109
1110 case SERVICE_START_PRE:
1111 case SERVICE_START:
1112 case SERVICE_START_POST:
1113 case SERVICE_RELOAD:
1114 return usec_add(UNIT(s)->state_change_timestamp.monotonic, s->timeout_start_usec);
1115
1116 case SERVICE_RUNNING:
1117 return usec_add(UNIT(s)->active_enter_timestamp.monotonic, s->runtime_max_usec);
1118
1119 case SERVICE_STOP:
1120 case SERVICE_STOP_WATCHDOG:
1121 case SERVICE_STOP_SIGTERM:
1122 case SERVICE_STOP_SIGKILL:
1123 case SERVICE_STOP_POST:
1124 case SERVICE_FINAL_SIGTERM:
1125 case SERVICE_FINAL_SIGKILL:
1126 return usec_add(UNIT(s)->state_change_timestamp.monotonic, s->timeout_stop_usec);
1127
1128 case SERVICE_AUTO_RESTART:
1129 return usec_add(UNIT(s)->inactive_enter_timestamp.monotonic, s->restart_usec);
1130
1131 default:
1132 return USEC_INFINITY;
1133 }
1134}
1135
1136static int service_coldplug(Unit *u) {
1137 Service *s = SERVICE(u);
1138 int r;
1139
1140 assert(s);
1141 assert(s->state == SERVICE_DEAD);
1142
1143 if (s->deserialized_state == s->state)
1144 return 0;
1145
1146 r = service_arm_timer(s, service_coldplug_timeout(s));
1147 if (r < 0)
1148 return r;
1149
1150 if (s->main_pid > 0 &&
1151 pid_is_unwaited(s->main_pid) &&
1152 (IN_SET(s->deserialized_state,
1153 SERVICE_START, SERVICE_START_POST,
1154 SERVICE_RUNNING, SERVICE_RELOAD,
1155 SERVICE_STOP, SERVICE_STOP_WATCHDOG, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
1156 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL))) {
1157 r = unit_watch_pid(UNIT(s), s->main_pid);
1158 if (r < 0)
1159 return r;
1160 }
1161
1162 if (s->control_pid > 0 &&
1163 pid_is_unwaited(s->control_pid) &&
1164 IN_SET(s->deserialized_state,
1165 SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST,
1166 SERVICE_RELOAD,
1167 SERVICE_STOP, SERVICE_STOP_WATCHDOG, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
1168 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL)) {
1169 r = unit_watch_pid(UNIT(s), s->control_pid);
1170 if (r < 0)
1171 return r;
1172 }
1173
1174 if (!IN_SET(s->deserialized_state, SERVICE_DEAD, SERVICE_FAILED, SERVICE_AUTO_RESTART)) {
1175 (void) unit_enqueue_rewatch_pids(u);
1176 (void) unit_setup_dynamic_creds(u);
1177 (void) unit_setup_exec_runtime(u);
1178 }
1179
1180 if (IN_SET(s->deserialized_state, SERVICE_START_POST, SERVICE_RUNNING, SERVICE_RELOAD))
1181 service_start_watchdog(s);
1182
1183 if (UNIT_ISSET(s->accept_socket)) {
1184 Socket* socket = SOCKET(UNIT_DEREF(s->accept_socket));
1185
1186 if (socket->max_connections_per_source > 0) {
1187 SocketPeer *peer;
1188
1189 /* Make a best-effort attempt at bumping the connection count */
1190 if (socket_acquire_peer(socket, s->socket_fd, &peer) > 0) {
1191 socket_peer_unref(s->peer);
1192 s->peer = peer;
1193 }
1194 }
1195 }
1196
1197 service_set_state(s, s->deserialized_state);
1198 return 0;
1199}
1200
1201static int service_collect_fds(
1202 Service *s,
1203 int **fds,
1204 char ***fd_names,
1205 size_t *n_socket_fds,
1206 size_t *n_storage_fds) {
1207
1208 _cleanup_strv_free_ char **rfd_names = NULL;
1209 _cleanup_free_ int *rfds = NULL;
1210 size_t rn_socket_fds = 0, rn_storage_fds = 0;
1211 int r;
1212
1213 assert(s);
1214 assert(fds);
1215 assert(fd_names);
1216 assert(n_socket_fds);
1217 assert(n_storage_fds);
1218
1219 if (s->socket_fd >= 0) {
1220
1221 /* Pass the per-connection socket */
1222
1223 rfds = new(int, 1);
1224 if (!rfds)
1225 return -ENOMEM;
1226 rfds[0] = s->socket_fd;
1227
1228 rfd_names = strv_new("connection");
1229 if (!rfd_names)
1230 return -ENOMEM;
1231
1232 rn_socket_fds = 1;
1233 } else {
1234 Iterator i;
1235 void *v;
1236 Unit *u;
1237
1238 /* Pass all our configured sockets for singleton services */
1239
1240 HASHMAP_FOREACH_KEY(v, u, UNIT(s)->dependencies[UNIT_TRIGGERED_BY], i) {
1241 _cleanup_free_ int *cfds = NULL;
1242 Socket *sock;
1243 int cn_fds;
1244
1245 if (u->type != UNIT_SOCKET)
1246 continue;
1247
1248 sock = SOCKET(u);
1249
1250 cn_fds = socket_collect_fds(sock, &cfds);
1251 if (cn_fds < 0)
1252 return cn_fds;
1253
1254 if (cn_fds <= 0)
1255 continue;
1256
1257 if (!rfds) {
1258 rfds = TAKE_PTR(cfds);
1259 rn_socket_fds = cn_fds;
1260 } else {
1261 int *t;
1262
1263 t = reallocarray(rfds, rn_socket_fds + cn_fds, sizeof(int));
1264 if (!t)
1265 return -ENOMEM;
1266
1267 memcpy(t + rn_socket_fds, cfds, cn_fds * sizeof(int));
1268
1269 rfds = t;
1270 rn_socket_fds += cn_fds;
1271 }
1272
1273 r = strv_extend_n(&rfd_names, socket_fdname(sock), cn_fds);
1274 if (r < 0)
1275 return r;
1276 }
1277 }
1278
1279 if (s->n_fd_store > 0) {
1280 ServiceFDStore *fs;
1281 size_t n_fds;
1282 char **nl;
1283 int *t;
1284
1285 t = reallocarray(rfds, rn_socket_fds + s->n_fd_store, sizeof(int));
1286 if (!t)
1287 return -ENOMEM;
1288
1289 rfds = t;
1290
1291 nl = reallocarray(rfd_names, rn_socket_fds + s->n_fd_store + 1, sizeof(char *));
1292 if (!nl)
1293 return -ENOMEM;
1294
1295 rfd_names = nl;
1296 n_fds = rn_socket_fds;
1297
1298 LIST_FOREACH(fd_store, fs, s->fd_store) {
1299 rfds[n_fds] = fs->fd;
1300 rfd_names[n_fds] = strdup(strempty(fs->fdname));
1301 if (!rfd_names[n_fds])
1302 return -ENOMEM;
1303
1304 rn_storage_fds++;
1305 n_fds++;
1306 }
1307
1308 rfd_names[n_fds] = NULL;
1309 }
1310
1311 *fds = TAKE_PTR(rfds);
1312 *fd_names = TAKE_PTR(rfd_names);
1313 *n_socket_fds = rn_socket_fds;
1314 *n_storage_fds = rn_storage_fds;
1315
1316 return 0;
1317}
1318
1319static int service_allocate_exec_fd_event_source(
1320 Service *s,
1321 int fd,
1322 sd_event_source **ret_event_source) {
1323
1324 _cleanup_(sd_event_source_unrefp) sd_event_source *source = NULL;
1325 int r;
1326
1327 assert(s);
1328 assert(fd >= 0);
1329 assert(ret_event_source);
1330
1331 r = sd_event_add_io(UNIT(s)->manager->event, &source, fd, 0, service_dispatch_exec_io, s);
1332 if (r < 0)
1333 return log_unit_error_errno(UNIT(s), r, "Failed to allocate exec_fd event source: %m");
1334
1335 /* This is a bit lower priority than SIGCHLD, as that carries a lot more interesting failure information */
1336
1337 r = sd_event_source_set_priority(source, SD_EVENT_PRIORITY_NORMAL-3);
1338 if (r < 0)
1339 return log_unit_error_errno(UNIT(s), r, "Failed to adjust priority of exec_fd event source: %m");
1340
1341 (void) sd_event_source_set_description(source, "service event_fd");
1342
1343 r = sd_event_source_set_io_fd_own(source, true);
1344 if (r < 0)
1345 return log_unit_error_errno(UNIT(s), r, "Failed to pass ownership of fd to event source: %m");
1346
1347 *ret_event_source = TAKE_PTR(source);
1348 return 0;
1349}
1350
1351static int service_allocate_exec_fd(
1352 Service *s,
1353 sd_event_source **ret_event_source,
1354 int* ret_exec_fd) {
1355
1356 _cleanup_close_pair_ int p[2] = { -1, -1 };
1357 int r;
1358
1359 assert(s);
1360 assert(ret_event_source);
1361 assert(ret_exec_fd);
1362
1363 if (pipe2(p, O_CLOEXEC|O_NONBLOCK) < 0)
1364 return log_unit_error_errno(UNIT(s), errno, "Failed to allocate exec_fd pipe: %m");
1365
1366 r = service_allocate_exec_fd_event_source(s, p[0], ret_event_source);
1367 if (r < 0)
1368 return r;
1369
1370 p[0] = -1;
1371 *ret_exec_fd = TAKE_FD(p[1]);
1372
1373 return 0;
1374}
1375
1376static bool service_exec_needs_notify_socket(Service *s, ExecFlags flags) {
1377 assert(s);
1378
1379 /* Notifications are accepted depending on the process and
1380 * the access setting of the service:
1381 * process: \ access: NONE MAIN EXEC ALL
1382 * main no yes yes yes
1383 * control no no yes yes
1384 * other (forked) no no no yes */
1385
1386 if (flags & EXEC_IS_CONTROL)
1387 /* A control process */
1388 return IN_SET(s->notify_access, NOTIFY_EXEC, NOTIFY_ALL);
1389
1390 /* We only spawn main processes and control processes, so any
1391 * process that is not a control process is a main process */
1392 return s->notify_access != NOTIFY_NONE;
1393}
1394
1395static int service_spawn(
1396 Service *s,
1397 ExecCommand *c,
1398 usec_t timeout,
1399 ExecFlags flags,
1400 pid_t *_pid) {
1401
1402 _cleanup_(exec_params_clear) ExecParameters exec_params = {
1403 .flags = flags,
1404 .stdin_fd = -1,
1405 .stdout_fd = -1,
1406 .stderr_fd = -1,
1407 .exec_fd = -1,
1408 };
1409 _cleanup_strv_free_ char **final_env = NULL, **our_env = NULL, **fd_names = NULL;
1410 _cleanup_(sd_event_source_unrefp) sd_event_source *exec_fd_source = NULL;
1411 size_t n_socket_fds = 0, n_storage_fds = 0, n_env = 0;
1412 _cleanup_close_ int exec_fd = -1;
1413 _cleanup_free_ int *fds = NULL;
1414 pid_t pid;
1415 int r;
1416
1417 assert(s);
1418 assert(c);
1419 assert(_pid);
1420
1421 r = unit_prepare_exec(UNIT(s));
1422 if (r < 0)
1423 return r;
1424
1425 if (flags & EXEC_IS_CONTROL) {
1426 /* If this is a control process, mask the permissions/chroot application if this is requested. */
1427 if (s->permissions_start_only)
1428 exec_params.flags &= ~EXEC_APPLY_SANDBOXING;
1429 if (s->root_directory_start_only)
1430 exec_params.flags &= ~EXEC_APPLY_CHROOT;
1431 }
1432
1433 if ((flags & EXEC_PASS_FDS) ||
1434 s->exec_context.std_input == EXEC_INPUT_SOCKET ||
1435 s->exec_context.std_output == EXEC_OUTPUT_SOCKET ||
1436 s->exec_context.std_error == EXEC_OUTPUT_SOCKET) {
1437
1438 r = service_collect_fds(s, &fds, &fd_names, &n_socket_fds, &n_storage_fds);
1439 if (r < 0)
1440 return r;
1441
1442 log_unit_debug(UNIT(s), "Passing %zu fds to service", n_socket_fds + n_storage_fds);
1443 }
1444
1445 if (!FLAGS_SET(flags, EXEC_IS_CONTROL) && s->type == SERVICE_EXEC) {
1446 assert(!s->exec_fd_event_source);
1447
1448 r = service_allocate_exec_fd(s, &exec_fd_source, &exec_fd);
1449 if (r < 0)
1450 return r;
1451 }
1452
1453 r = service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), timeout));
1454 if (r < 0)
1455 return r;
1456
1457 our_env = new0(char*, 9);
1458 if (!our_env)
1459 return -ENOMEM;
1460
1461 if (service_exec_needs_notify_socket(s, flags))
1462 if (asprintf(our_env + n_env++, "NOTIFY_SOCKET=%s", UNIT(s)->manager->notify_socket) < 0)
1463 return -ENOMEM;
1464
1465 if (s->main_pid > 0)
1466 if (asprintf(our_env + n_env++, "MAINPID="PID_FMT, s->main_pid) < 0)
1467 return -ENOMEM;
1468
1469 if (MANAGER_IS_USER(UNIT(s)->manager))
1470 if (asprintf(our_env + n_env++, "MANAGERPID="PID_FMT, getpid_cached()) < 0)
1471 return -ENOMEM;
1472
1473 if (s->socket_fd >= 0) {
1474 union sockaddr_union sa;
1475 socklen_t salen = sizeof(sa);
1476
1477 /* If this is a per-connection service instance, let's set $REMOTE_ADDR and $REMOTE_PORT to something
1478 * useful. Note that we do this only when we are still connected at this point in time, which we might
1479 * very well not be. Hence we ignore all errors when retrieving peer information (as that might result
1480 * in ENOTCONN), and just use whate we can use. */
1481
1482 if (getpeername(s->socket_fd, &sa.sa, &salen) >= 0 &&
1483 IN_SET(sa.sa.sa_family, AF_INET, AF_INET6, AF_VSOCK)) {
1484
1485 _cleanup_free_ char *addr = NULL;
1486 char *t;
1487 unsigned port;
1488
1489 r = sockaddr_pretty(&sa.sa, salen, true, false, &addr);
1490 if (r < 0)
1491 return r;
1492
1493 t = strappend("REMOTE_ADDR=", addr);
1494 if (!t)
1495 return -ENOMEM;
1496 our_env[n_env++] = t;
1497
1498 r = sockaddr_port(&sa.sa, &port);
1499 if (r < 0)
1500 return r;
1501
1502 if (asprintf(&t, "REMOTE_PORT=%u", port) < 0)
1503 return -ENOMEM;
1504 our_env[n_env++] = t;
1505 }
1506 }
1507
1508 if (flags & EXEC_SETENV_RESULT) {
1509 if (asprintf(our_env + n_env++, "SERVICE_RESULT=%s", service_result_to_string(s->result)) < 0)
1510 return -ENOMEM;
1511
1512 if (s->main_exec_status.pid > 0 &&
1513 dual_timestamp_is_set(&s->main_exec_status.exit_timestamp)) {
1514 if (asprintf(our_env + n_env++, "EXIT_CODE=%s", sigchld_code_to_string(s->main_exec_status.code)) < 0)
1515 return -ENOMEM;
1516
1517 if (s->main_exec_status.code == CLD_EXITED)
1518 r = asprintf(our_env + n_env++, "EXIT_STATUS=%i", s->main_exec_status.status);
1519 else
1520 r = asprintf(our_env + n_env++, "EXIT_STATUS=%s", signal_to_string(s->main_exec_status.status));
1521 if (r < 0)
1522 return -ENOMEM;
1523 }
1524 }
1525
1526 r = unit_set_exec_params(UNIT(s), &exec_params);
1527 if (r < 0)
1528 return r;
1529
1530 final_env = strv_env_merge(2, exec_params.environment, our_env, NULL);
1531 if (!final_env)
1532 return -ENOMEM;
1533
1534 /* System services should get a new keyring by default. */
1535 SET_FLAG(exec_params.flags, EXEC_NEW_KEYRING, MANAGER_IS_SYSTEM(UNIT(s)->manager));
1536
1537 /* System D-Bus needs nss-systemd disabled, so that we don't deadlock */
1538 SET_FLAG(exec_params.flags, EXEC_NSS_BYPASS_BUS,
1539 MANAGER_IS_SYSTEM(UNIT(s)->manager) && unit_has_name(UNIT(s), SPECIAL_DBUS_SERVICE));
1540
1541 strv_free_and_replace(exec_params.environment, final_env);
1542 exec_params.fds = fds;
1543 exec_params.fd_names = fd_names;
1544 exec_params.n_socket_fds = n_socket_fds;
1545 exec_params.n_storage_fds = n_storage_fds;
1546 exec_params.watchdog_usec = service_get_watchdog_usec(s);
1547 exec_params.selinux_context_net = s->socket_fd_selinux_context_net;
1548 if (s->type == SERVICE_IDLE)
1549 exec_params.idle_pipe = UNIT(s)->manager->idle_pipe;
1550 exec_params.stdin_fd = s->stdin_fd;
1551 exec_params.stdout_fd = s->stdout_fd;
1552 exec_params.stderr_fd = s->stderr_fd;
1553 exec_params.exec_fd = exec_fd;
1554
1555 r = exec_spawn(UNIT(s),
1556 c,
1557 &s->exec_context,
1558 &exec_params,
1559 s->exec_runtime,
1560 &s->dynamic_creds,
1561 &pid);
1562 if (r < 0)
1563 return r;
1564
1565 s->exec_fd_event_source = TAKE_PTR(exec_fd_source);
1566 s->exec_fd_hot = false;
1567
1568 r = unit_watch_pid(UNIT(s), pid);
1569 if (r < 0) /* FIXME: we need to do something here */
1570 return r;
1571
1572 *_pid = pid;
1573
1574 return 0;
1575}
1576
1577static int main_pid_good(Service *s) {
1578 assert(s);
1579
1580 /* Returns 0 if the pid is dead, > 0 if it is good, < 0 if we don't know */
1581
1582 /* If we know the pid file, then let's just check if it is
1583 * still valid */
1584 if (s->main_pid_known) {
1585
1586 /* If it's an alien child let's check if it is still
1587 * alive ... */
1588 if (s->main_pid_alien && s->main_pid > 0)
1589 return pid_is_alive(s->main_pid);
1590
1591 /* .. otherwise assume we'll get a SIGCHLD for it,
1592 * which we really should wait for to collect exit
1593 * status and code */
1594 return s->main_pid > 0;
1595 }
1596
1597 /* We don't know the pid */
1598 return -EAGAIN;
1599}
1600
1601static int control_pid_good(Service *s) {
1602 assert(s);
1603
1604 /* Returns 0 if the control PID is dead, > 0 if it is good. We never actually return < 0 here, but in order to
1605 * make this function as similar as possible to main_pid_good() and cgroup_good(), we pretend that < 0 also
1606 * means: we can't figure it out. */
1607
1608 return s->control_pid > 0;
1609}
1610
1611static int cgroup_good(Service *s) {
1612 int r;
1613
1614 assert(s);
1615
1616 /* Returns 0 if the cgroup is empty or doesn't exist, > 0 if it is exists and is populated, < 0 if we can't
1617 * figure it out */
1618
1619 if (!UNIT(s)->cgroup_path)
1620 return 0;
1621
1622 r = cg_is_empty_recursive(SYSTEMD_CGROUP_CONTROLLER, UNIT(s)->cgroup_path);
1623 if (r < 0)
1624 return r;
1625
1626 return r == 0;
1627}
1628
1629static bool service_shall_restart(Service *s) {
1630 assert(s);
1631
1632 /* Don't restart after manual stops */
1633 if (s->forbid_restart)
1634 return false;
1635
1636 /* Never restart if this is configured as special exception */
1637 if (exit_status_set_test(&s->restart_prevent_status, s->main_exec_status.code, s->main_exec_status.status))
1638 return false;
1639
1640 /* Restart if the exit code/status are configured as restart triggers */
1641 if (exit_status_set_test(&s->restart_force_status, s->main_exec_status.code, s->main_exec_status.status))
1642 return true;
1643
1644 switch (s->restart) {
1645
1646 case SERVICE_RESTART_NO:
1647 return false;
1648
1649 case SERVICE_RESTART_ALWAYS:
1650 return true;
1651
1652 case SERVICE_RESTART_ON_SUCCESS:
1653 return s->result == SERVICE_SUCCESS;
1654
1655 case SERVICE_RESTART_ON_FAILURE:
1656 return s->result != SERVICE_SUCCESS;
1657
1658 case SERVICE_RESTART_ON_ABNORMAL:
1659 return !IN_SET(s->result, SERVICE_SUCCESS, SERVICE_FAILURE_EXIT_CODE);
1660
1661 case SERVICE_RESTART_ON_WATCHDOG:
1662 return s->result == SERVICE_FAILURE_WATCHDOG;
1663
1664 case SERVICE_RESTART_ON_ABORT:
1665 return IN_SET(s->result, SERVICE_FAILURE_SIGNAL, SERVICE_FAILURE_CORE_DUMP);
1666
1667 default:
1668 assert_not_reached("unknown restart setting");
1669 }
1670}
1671
1672static bool service_will_restart(Unit *u) {
1673 Service *s = SERVICE(u);
1674
1675 assert(s);
1676
1677 if (s->will_auto_restart)
1678 return true;
1679 if (s->state == SERVICE_AUTO_RESTART)
1680 return true;
1681 if (!UNIT(s)->job)
1682 return false;
1683 if (UNIT(s)->job->type == JOB_START)
1684 return true;
1685
1686 return false;
1687}
1688
1689static void service_enter_dead(Service *s, ServiceResult f, bool allow_restart) {
1690 int r;
1691
1692 assert(s);
1693
1694 /* If there's a stop job queued before we enter the DEAD state, we shouldn't act on Restart=, in order to not
1695 * undo what has already been enqueued. */
1696 if (unit_stop_pending(UNIT(s)))
1697 allow_restart = false;
1698
1699 if (s->result == SERVICE_SUCCESS)
1700 s->result = f;
1701
1702 unit_log_result(UNIT(s), s->result == SERVICE_SUCCESS, service_result_to_string(s->result));
1703
1704 if (allow_restart && service_shall_restart(s))
1705 s->will_auto_restart = true;
1706
1707 /* Make sure service_release_resources() doesn't destroy our FD store, while we are changing through
1708 * SERVICE_FAILED/SERVICE_DEAD before entering into SERVICE_AUTO_RESTART. */
1709 s->n_keep_fd_store ++;
1710
1711 service_set_state(s, s->result != SERVICE_SUCCESS ? SERVICE_FAILED : SERVICE_DEAD);
1712
1713 if (s->will_auto_restart) {
1714 s->will_auto_restart = false;
1715
1716 r = service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), s->restart_usec));
1717 if (r < 0) {
1718 s->n_keep_fd_store--;
1719 goto fail;
1720 }
1721
1722 service_set_state(s, SERVICE_AUTO_RESTART);
1723 } else
1724 /* If we shan't restart, then flush out the restart counter. But don't do that immediately, so that the
1725 * user can still introspect the counter. Do so on the next start. */
1726 s->flush_n_restarts = true;
1727
1728 /* The new state is in effect, let's decrease the fd store ref counter again. Let's also readd us to the GC
1729 * queue, so that the fd store is possibly gc'ed again */
1730 s->n_keep_fd_store--;
1731 unit_add_to_gc_queue(UNIT(s));
1732
1733 /* The next restart might not be a manual stop, hence reset the flag indicating manual stops */
1734 s->forbid_restart = false;
1735
1736 /* We want fresh tmpdirs in case service is started again immediately */
1737 s->exec_runtime = exec_runtime_unref(s->exec_runtime, true);
1738
1739 if (s->exec_context.runtime_directory_preserve_mode == EXEC_PRESERVE_NO ||
1740 (s->exec_context.runtime_directory_preserve_mode == EXEC_PRESERVE_RESTART && !service_will_restart(UNIT(s))))
1741 /* Also, remove the runtime directory */
1742 exec_context_destroy_runtime_directory(&s->exec_context, UNIT(s)->manager->prefix[EXEC_DIRECTORY_RUNTIME]);
1743
1744 /* Get rid of the IPC bits of the user */
1745 unit_unref_uid_gid(UNIT(s), true);
1746
1747 /* Release the user, and destroy it if we are the only remaining owner */
1748 dynamic_creds_destroy(&s->dynamic_creds);
1749
1750 /* Try to delete the pid file. At this point it will be
1751 * out-of-date, and some software might be confused by it, so
1752 * let's remove it. */
1753 if (s->pid_file)
1754 (void) unlink(s->pid_file);
1755
1756 return;
1757
1758fail:
1759 log_unit_warning_errno(UNIT(s), r, "Failed to run install restart timer: %m");
1760 service_enter_dead(s, SERVICE_FAILURE_RESOURCES, false);
1761}
1762
1763static void service_enter_stop_post(Service *s, ServiceResult f) {
1764 int r;
1765 assert(s);
1766
1767 if (s->result == SERVICE_SUCCESS)
1768 s->result = f;
1769
1770 service_unwatch_control_pid(s);
1771 (void) unit_enqueue_rewatch_pids(UNIT(s));
1772
1773 s->control_command = s->exec_command[SERVICE_EXEC_STOP_POST];
1774 if (s->control_command) {
1775 s->control_command_id = SERVICE_EXEC_STOP_POST;
1776
1777 r = service_spawn(s,
1778 s->control_command,
1779 s->timeout_stop_usec,
1780 EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_APPLY_TTY_STDIN|EXEC_IS_CONTROL|EXEC_SETENV_RESULT,
1781 &s->control_pid);
1782 if (r < 0)
1783 goto fail;
1784
1785 service_set_state(s, SERVICE_STOP_POST);
1786 } else
1787 service_enter_signal(s, SERVICE_FINAL_SIGTERM, SERVICE_SUCCESS);
1788
1789 return;
1790
1791fail:
1792 log_unit_warning_errno(UNIT(s), r, "Failed to run 'stop-post' task: %m");
1793 service_enter_signal(s, SERVICE_FINAL_SIGTERM, SERVICE_FAILURE_RESOURCES);
1794}
1795
1796static int state_to_kill_operation(ServiceState state) {
1797 switch (state) {
1798
1799 case SERVICE_STOP_WATCHDOG:
1800 return KILL_WATCHDOG;
1801
1802 case SERVICE_STOP_SIGTERM:
1803 case SERVICE_FINAL_SIGTERM:
1804 return KILL_TERMINATE;
1805
1806 case SERVICE_STOP_SIGKILL:
1807 case SERVICE_FINAL_SIGKILL:
1808 return KILL_KILL;
1809
1810 default:
1811 return _KILL_OPERATION_INVALID;
1812 }
1813}
1814
1815static void service_enter_signal(Service *s, ServiceState state, ServiceResult f) {
1816 int r;
1817
1818 assert(s);
1819
1820 if (s->result == SERVICE_SUCCESS)
1821 s->result = f;
1822
1823 /* Before sending any signal, make sure we track all members of this cgroup */
1824 (void) unit_watch_all_pids(UNIT(s));
1825
1826 /* Also, enqueue a job that we recheck all our PIDs a bit later, given that it's likely some processes have
1827 * died now */
1828 (void) unit_enqueue_rewatch_pids(UNIT(s));
1829
1830 r = unit_kill_context(
1831 UNIT(s),
1832 &s->kill_context,
1833 state_to_kill_operation(state),
1834 s->main_pid,
1835 s->control_pid,
1836 s->main_pid_alien);
1837 if (r < 0)
1838 goto fail;
1839
1840 if (r > 0) {
1841 r = service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), s->timeout_stop_usec));
1842 if (r < 0)
1843 goto fail;
1844
1845 service_set_state(s, state);
1846 } else if (IN_SET(state, SERVICE_STOP_WATCHDOG, SERVICE_STOP_SIGTERM) && s->kill_context.send_sigkill)
1847 service_enter_signal(s, SERVICE_STOP_SIGKILL, SERVICE_SUCCESS);
1848 else if (IN_SET(state, SERVICE_STOP_WATCHDOG, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL))
1849 service_enter_stop_post(s, SERVICE_SUCCESS);
1850 else if (state == SERVICE_FINAL_SIGTERM && s->kill_context.send_sigkill)
1851 service_enter_signal(s, SERVICE_FINAL_SIGKILL, SERVICE_SUCCESS);
1852 else
1853 service_enter_dead(s, SERVICE_SUCCESS, true);
1854
1855 return;
1856
1857fail:
1858 log_unit_warning_errno(UNIT(s), r, "Failed to kill processes: %m");
1859
1860 if (IN_SET(state, SERVICE_STOP_WATCHDOG, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL))
1861 service_enter_stop_post(s, SERVICE_FAILURE_RESOURCES);
1862 else
1863 service_enter_dead(s, SERVICE_FAILURE_RESOURCES, true);
1864}
1865
1866static void service_enter_stop_by_notify(Service *s) {
1867 assert(s);
1868
1869 (void) unit_enqueue_rewatch_pids(UNIT(s));
1870
1871 service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), s->timeout_stop_usec));
1872
1873 /* The service told us it's stopping, so it's as if we SIGTERM'd it. */
1874 service_set_state(s, SERVICE_STOP_SIGTERM);
1875}
1876
1877static void service_enter_stop(Service *s, ServiceResult f) {
1878 int r;
1879
1880 assert(s);
1881
1882 if (s->result == SERVICE_SUCCESS)
1883 s->result = f;
1884
1885 service_unwatch_control_pid(s);
1886 (void) unit_enqueue_rewatch_pids(UNIT(s));
1887
1888 s->control_command = s->exec_command[SERVICE_EXEC_STOP];
1889 if (s->control_command) {
1890 s->control_command_id = SERVICE_EXEC_STOP;
1891
1892 r = service_spawn(s,
1893 s->control_command,
1894 s->timeout_stop_usec,
1895 EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_IS_CONTROL|EXEC_SETENV_RESULT,
1896 &s->control_pid);
1897 if (r < 0)
1898 goto fail;
1899
1900 service_set_state(s, SERVICE_STOP);
1901 } else
1902 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_SUCCESS);
1903
1904 return;
1905
1906fail:
1907 log_unit_warning_errno(UNIT(s), r, "Failed to run 'stop' task: %m");
1908 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_RESOURCES);
1909}
1910
1911static bool service_good(Service *s) {
1912 int main_pid_ok;
1913 assert(s);
1914
1915 if (s->type == SERVICE_DBUS && !s->bus_name_good)
1916 return false;
1917
1918 main_pid_ok = main_pid_good(s);
1919 if (main_pid_ok > 0) /* It's alive */
1920 return true;
1921 if (main_pid_ok == 0) /* It's dead */
1922 return false;
1923
1924 /* OK, we don't know anything about the main PID, maybe
1925 * because there is none. Let's check the control group
1926 * instead. */
1927
1928 return cgroup_good(s) != 0;
1929}
1930
1931static void service_enter_running(Service *s, ServiceResult f) {
1932 assert(s);
1933
1934 if (s->result == SERVICE_SUCCESS)
1935 s->result = f;
1936
1937 service_unwatch_control_pid(s);
1938
1939 if (s->result != SERVICE_SUCCESS)
1940 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
1941 else if (service_good(s)) {
1942
1943 /* If there are any queued up sd_notify() notifications, process them now */
1944 if (s->notify_state == NOTIFY_RELOADING)
1945 service_enter_reload_by_notify(s);
1946 else if (s->notify_state == NOTIFY_STOPPING)
1947 service_enter_stop_by_notify(s);
1948 else {
1949 service_set_state(s, SERVICE_RUNNING);
1950 service_arm_timer(s, usec_add(UNIT(s)->active_enter_timestamp.monotonic, s->runtime_max_usec));
1951 }
1952
1953 } else if (s->remain_after_exit)
1954 service_set_state(s, SERVICE_EXITED);
1955 else
1956 service_enter_stop(s, SERVICE_SUCCESS);
1957}
1958
1959static void service_enter_start_post(Service *s) {
1960 int r;
1961 assert(s);
1962
1963 service_unwatch_control_pid(s);
1964 service_reset_watchdog(s);
1965
1966 s->control_command = s->exec_command[SERVICE_EXEC_START_POST];
1967 if (s->control_command) {
1968 s->control_command_id = SERVICE_EXEC_START_POST;
1969
1970 r = service_spawn(s,
1971 s->control_command,
1972 s->timeout_start_usec,
1973 EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_IS_CONTROL,
1974 &s->control_pid);
1975 if (r < 0)
1976 goto fail;
1977
1978 service_set_state(s, SERVICE_START_POST);
1979 } else
1980 service_enter_running(s, SERVICE_SUCCESS);
1981
1982 return;
1983
1984fail:
1985 log_unit_warning_errno(UNIT(s), r, "Failed to run 'start-post' task: %m");
1986 service_enter_stop(s, SERVICE_FAILURE_RESOURCES);
1987}
1988
1989static void service_kill_control_process(Service *s) {
1990 int r;
1991
1992 assert(s);
1993
1994 if (s->control_pid <= 0)
1995 return;
1996
1997 r = kill_and_sigcont(s->control_pid, SIGKILL);
1998 if (r < 0) {
1999 _cleanup_free_ char *comm = NULL;
2000
2001 (void) get_process_comm(s->control_pid, &comm);
2002
2003 log_unit_debug_errno(UNIT(s), r, "Failed to kill control process " PID_FMT " (%s), ignoring: %m",
2004 s->control_pid, strna(comm));
2005 }
2006}
2007
2008static void service_enter_start(Service *s) {
2009 ExecCommand *c;
2010 usec_t timeout;
2011 pid_t pid;
2012 int r;
2013
2014 assert(s);
2015
2016 service_unwatch_control_pid(s);
2017 service_unwatch_main_pid(s);
2018
2019 unit_warn_leftover_processes(UNIT(s));
2020
2021 if (s->type == SERVICE_FORKING) {
2022 s->control_command_id = SERVICE_EXEC_START;
2023 c = s->control_command = s->exec_command[SERVICE_EXEC_START];
2024
2025 s->main_command = NULL;
2026 } else {
2027 s->control_command_id = _SERVICE_EXEC_COMMAND_INVALID;
2028 s->control_command = NULL;
2029
2030 c = s->main_command = s->exec_command[SERVICE_EXEC_START];
2031 }
2032
2033 if (!c) {
2034 if (s->type != SERVICE_ONESHOT) {
2035 /* There's no command line configured for the main command? Hmm, that is strange. This can only
2036 * happen if the configuration changes at runtime. In this case, let's enter a failure
2037 * state. */
2038 log_unit_error(UNIT(s), "There's no 'start' task anymore we could start.");
2039 r = -ENXIO;
2040 goto fail;
2041 }
2042
2043 /* We force a fake state transition here. Otherwise, the unit would go directly from
2044 * SERVICE_DEAD to SERVICE_DEAD without SERVICE_ACTIVATING or SERVICE_ACTIVE
2045 * inbetween. This way we can later trigger actions that depend on the state
2046 * transition, including SuccessAction=. */
2047 service_set_state(s, SERVICE_START);
2048
2049 service_enter_start_post(s);
2050 return;
2051 }
2052
2053 if (IN_SET(s->type, SERVICE_SIMPLE, SERVICE_IDLE))
2054 /* For simple + idle this is the main process. We don't apply any timeout here, but
2055 * service_enter_running() will later apply the .runtime_max_usec timeout. */
2056 timeout = USEC_INFINITY;
2057 else
2058 timeout = s->timeout_start_usec;
2059
2060 r = service_spawn(s,
2061 c,
2062 timeout,
2063 EXEC_PASS_FDS|EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_APPLY_TTY_STDIN|EXEC_SET_WATCHDOG,
2064 &pid);
2065 if (r < 0)
2066 goto fail;
2067
2068 if (IN_SET(s->type, SERVICE_SIMPLE, SERVICE_IDLE)) {
2069 /* For simple services we immediately start
2070 * the START_POST binaries. */
2071
2072 service_set_main_pid(s, pid);
2073 service_enter_start_post(s);
2074
2075 } else if (s->type == SERVICE_FORKING) {
2076
2077 /* For forking services we wait until the start
2078 * process exited. */
2079
2080 s->control_pid = pid;
2081 service_set_state(s, SERVICE_START);
2082
2083 } else if (IN_SET(s->type, SERVICE_ONESHOT, SERVICE_DBUS, SERVICE_NOTIFY, SERVICE_EXEC)) {
2084
2085 /* For oneshot services we wait until the start process exited, too, but it is our main process. */
2086
2087 /* For D-Bus services we know the main pid right away, but wait for the bus name to appear on the
2088 * bus. 'notify' and 'exec' services are similar. */
2089
2090 service_set_main_pid(s, pid);
2091 service_set_state(s, SERVICE_START);
2092 } else
2093 assert_not_reached("Unknown service type");
2094
2095 return;
2096
2097fail:
2098 log_unit_warning_errno(UNIT(s), r, "Failed to run 'start' task: %m");
2099 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_RESOURCES);
2100}
2101
2102static void service_enter_start_pre(Service *s) {
2103 int r;
2104
2105 assert(s);
2106
2107 service_unwatch_control_pid(s);
2108
2109 s->control_command = s->exec_command[SERVICE_EXEC_START_PRE];
2110 if (s->control_command) {
2111
2112 unit_warn_leftover_processes(UNIT(s));
2113
2114 s->control_command_id = SERVICE_EXEC_START_PRE;
2115
2116 r = service_spawn(s,
2117 s->control_command,
2118 s->timeout_start_usec,
2119 EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_IS_CONTROL|EXEC_APPLY_TTY_STDIN,
2120 &s->control_pid);
2121 if (r < 0)
2122 goto fail;
2123
2124 service_set_state(s, SERVICE_START_PRE);
2125 } else
2126 service_enter_start(s);
2127
2128 return;
2129
2130fail:
2131 log_unit_warning_errno(UNIT(s), r, "Failed to run 'start-pre' task: %m");
2132 service_enter_dead(s, SERVICE_FAILURE_RESOURCES, true);
2133}
2134
2135static void service_enter_restart(Service *s) {
2136 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2137 int r;
2138
2139 assert(s);
2140
2141 if (UNIT(s)->job && UNIT(s)->job->type == JOB_STOP) {
2142 /* Don't restart things if we are going down anyway */
2143 log_unit_info(UNIT(s), "Stop job pending for unit, delaying automatic restart.");
2144
2145 r = service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), s->restart_usec));
2146 if (r < 0)
2147 goto fail;
2148
2149 return;
2150 }
2151
2152 /* Any units that are bound to this service must also be
2153 * restarted. We use JOB_RESTART (instead of the more obvious
2154 * JOB_START) here so that those dependency jobs will be added
2155 * as well. */
2156 r = manager_add_job(UNIT(s)->manager, JOB_RESTART, UNIT(s), JOB_FAIL, &error, NULL);
2157 if (r < 0)
2158 goto fail;
2159
2160 /* Count the jobs we enqueue for restarting. This counter is maintained as long as the unit isn't fully
2161 * stopped, i.e. as long as it remains up or remains in auto-start states. The use can reset the counter
2162 * explicitly however via the usual "systemctl reset-failure" logic. */
2163 s->n_restarts ++;
2164 s->flush_n_restarts = false;
2165
2166 log_struct(LOG_INFO,
2167 "MESSAGE_ID=" SD_MESSAGE_UNIT_RESTART_SCHEDULED_STR,
2168 LOG_UNIT_ID(UNIT(s)),
2169 LOG_UNIT_INVOCATION_ID(UNIT(s)),
2170 LOG_UNIT_MESSAGE(UNIT(s), "Scheduled restart job, restart counter is at %u.", s->n_restarts),
2171 "N_RESTARTS=%u", s->n_restarts);
2172
2173 /* Notify clients about changed restart counter */
2174 unit_add_to_dbus_queue(UNIT(s));
2175
2176 /* Note that we stay in the SERVICE_AUTO_RESTART state here,
2177 * it will be canceled as part of the service_stop() call that
2178 * is executed as part of JOB_RESTART. */
2179
2180 return;
2181
2182fail:
2183 log_unit_warning(UNIT(s), "Failed to schedule restart job: %s", bus_error_message(&error, -r));
2184 service_enter_dead(s, SERVICE_FAILURE_RESOURCES, false);
2185}
2186
2187static void service_enter_reload_by_notify(Service *s) {
2188 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2189 int r;
2190
2191 assert(s);
2192
2193 service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), s->timeout_start_usec));
2194 service_set_state(s, SERVICE_RELOAD);
2195
2196 /* service_enter_reload_by_notify is never called during a reload, thus no loops are possible. */
2197 r = manager_propagate_reload(UNIT(s)->manager, UNIT(s), JOB_FAIL, &error);
2198 if (r < 0)
2199 log_unit_warning(UNIT(s), "Failed to schedule propagation of reload: %s", bus_error_message(&error, -r));
2200}
2201
2202static void service_enter_reload(Service *s) {
2203 int r;
2204
2205 assert(s);
2206
2207 service_unwatch_control_pid(s);
2208 s->reload_result = SERVICE_SUCCESS;
2209
2210 s->control_command = s->exec_command[SERVICE_EXEC_RELOAD];
2211 if (s->control_command) {
2212 s->control_command_id = SERVICE_EXEC_RELOAD;
2213
2214 r = service_spawn(s,
2215 s->control_command,
2216 s->timeout_start_usec,
2217 EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_IS_CONTROL,
2218 &s->control_pid);
2219 if (r < 0)
2220 goto fail;
2221
2222 service_set_state(s, SERVICE_RELOAD);
2223 } else
2224 service_enter_running(s, SERVICE_SUCCESS);
2225
2226 return;
2227
2228fail:
2229 log_unit_warning_errno(UNIT(s), r, "Failed to run 'reload' task: %m");
2230 s->reload_result = SERVICE_FAILURE_RESOURCES;
2231 service_enter_running(s, SERVICE_SUCCESS);
2232}
2233
2234static void service_run_next_control(Service *s) {
2235 usec_t timeout;
2236 int r;
2237
2238 assert(s);
2239 assert(s->control_command);
2240 assert(s->control_command->command_next);
2241
2242 assert(s->control_command_id != SERVICE_EXEC_START);
2243
2244 s->control_command = s->control_command->command_next;
2245 service_unwatch_control_pid(s);
2246
2247 if (IN_SET(s->state, SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST, SERVICE_RUNNING, SERVICE_RELOAD))
2248 timeout = s->timeout_start_usec;
2249 else
2250 timeout = s->timeout_stop_usec;
2251
2252 r = service_spawn(s,
2253 s->control_command,
2254 timeout,
2255 EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_IS_CONTROL|
2256 (IN_SET(s->control_command_id, SERVICE_EXEC_START_PRE, SERVICE_EXEC_STOP_POST) ? EXEC_APPLY_TTY_STDIN : 0)|
2257 (IN_SET(s->control_command_id, SERVICE_EXEC_STOP, SERVICE_EXEC_STOP_POST) ? EXEC_SETENV_RESULT : 0),
2258 &s->control_pid);
2259 if (r < 0)
2260 goto fail;
2261
2262 return;
2263
2264fail:
2265 log_unit_warning_errno(UNIT(s), r, "Failed to run next control task: %m");
2266
2267 if (IN_SET(s->state, SERVICE_START_PRE, SERVICE_START_POST, SERVICE_STOP))
2268 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_RESOURCES);
2269 else if (s->state == SERVICE_STOP_POST)
2270 service_enter_dead(s, SERVICE_FAILURE_RESOURCES, true);
2271 else if (s->state == SERVICE_RELOAD) {
2272 s->reload_result = SERVICE_FAILURE_RESOURCES;
2273 service_enter_running(s, SERVICE_SUCCESS);
2274 } else
2275 service_enter_stop(s, SERVICE_FAILURE_RESOURCES);
2276}
2277
2278static void service_run_next_main(Service *s) {
2279 pid_t pid;
2280 int r;
2281
2282 assert(s);
2283 assert(s->main_command);
2284 assert(s->main_command->command_next);
2285 assert(s->type == SERVICE_ONESHOT);
2286
2287 s->main_command = s->main_command->command_next;
2288 service_unwatch_main_pid(s);
2289
2290 r = service_spawn(s,
2291 s->main_command,
2292 s->timeout_start_usec,
2293 EXEC_PASS_FDS|EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_APPLY_TTY_STDIN|EXEC_SET_WATCHDOG,
2294 &pid);
2295 if (r < 0)
2296 goto fail;
2297
2298 service_set_main_pid(s, pid);
2299
2300 return;
2301
2302fail:
2303 log_unit_warning_errno(UNIT(s), r, "Failed to run next main task: %m");
2304 service_enter_stop(s, SERVICE_FAILURE_RESOURCES);
2305}
2306
2307static int service_start(Unit *u) {
2308 Service *s = SERVICE(u);
2309 int r;
2310
2311 assert(s);
2312
2313 /* We cannot fulfill this request right now, try again later
2314 * please! */
2315 if (IN_SET(s->state,
2316 SERVICE_STOP, SERVICE_STOP_WATCHDOG, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
2317 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL))
2318 return -EAGAIN;
2319
2320 /* Already on it! */
2321 if (IN_SET(s->state, SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST))
2322 return 0;
2323
2324 /* A service that will be restarted must be stopped first to
2325 * trigger BindsTo and/or OnFailure dependencies. If a user
2326 * does not want to wait for the holdoff time to elapse, the
2327 * service should be manually restarted, not started. We
2328 * simply return EAGAIN here, so that any start jobs stay
2329 * queued, and assume that the auto restart timer will
2330 * eventually trigger the restart. */
2331 if (s->state == SERVICE_AUTO_RESTART)
2332 return -EAGAIN;
2333
2334 assert(IN_SET(s->state, SERVICE_DEAD, SERVICE_FAILED));
2335
2336 /* Make sure we don't enter a busy loop of some kind. */
2337 r = unit_start_limit_test(u);
2338 if (r < 0) {
2339 service_enter_dead(s, SERVICE_FAILURE_START_LIMIT_HIT, false);
2340 return r;
2341 }
2342
2343 r = unit_acquire_invocation_id(u);
2344 if (r < 0)
2345 return r;
2346
2347 s->result = SERVICE_SUCCESS;
2348 s->reload_result = SERVICE_SUCCESS;
2349 s->main_pid_known = false;
2350 s->main_pid_alien = false;
2351 s->forbid_restart = false;
2352
2353 s->status_text = mfree(s->status_text);
2354 s->status_errno = 0;
2355
2356 s->notify_state = NOTIFY_UNKNOWN;
2357
2358 s->watchdog_original_usec = s->watchdog_usec;
2359 s->watchdog_override_enable = false;
2360 s->watchdog_override_usec = USEC_INFINITY;
2361
2362 exec_command_reset_status_list_array(s->exec_command, _SERVICE_EXEC_COMMAND_MAX);
2363 exec_status_reset(&s->main_exec_status);
2364
2365 /* This is not an automatic restart? Flush the restart counter then */
2366 if (s->flush_n_restarts) {
2367 s->n_restarts = 0;
2368 s->flush_n_restarts = false;
2369 }
2370
2371 u->reset_accounting = true;
2372
2373 service_enter_start_pre(s);
2374 return 1;
2375}
2376
2377static int service_stop(Unit *u) {
2378 Service *s = SERVICE(u);
2379
2380 assert(s);
2381
2382 /* Don't create restart jobs from manual stops. */
2383 s->forbid_restart = true;
2384
2385 /* Already on it */
2386 if (IN_SET(s->state,
2387 SERVICE_STOP, SERVICE_STOP_WATCHDOG, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
2388 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL))
2389 return 0;
2390
2391 /* A restart will be scheduled or is in progress. */
2392 if (s->state == SERVICE_AUTO_RESTART) {
2393 service_set_state(s, SERVICE_DEAD);
2394 return 0;
2395 }
2396
2397 /* If there's already something running we go directly into
2398 * kill mode. */
2399 if (IN_SET(s->state, SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST, SERVICE_RELOAD)) {
2400 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_SUCCESS);
2401 return 0;
2402 }
2403
2404 assert(IN_SET(s->state, SERVICE_RUNNING, SERVICE_EXITED));
2405
2406 service_enter_stop(s, SERVICE_SUCCESS);
2407 return 1;
2408}
2409
2410static int service_reload(Unit *u) {
2411 Service *s = SERVICE(u);
2412
2413 assert(s);
2414
2415 assert(IN_SET(s->state, SERVICE_RUNNING, SERVICE_EXITED));
2416
2417 service_enter_reload(s);
2418 return 1;
2419}
2420
2421_pure_ static bool service_can_reload(Unit *u) {
2422 Service *s = SERVICE(u);
2423
2424 assert(s);
2425
2426 return !!s->exec_command[SERVICE_EXEC_RELOAD];
2427}
2428
2429static unsigned service_exec_command_index(Unit *u, ServiceExecCommand id, ExecCommand *current) {
2430 Service *s = SERVICE(u);
2431 unsigned idx = 0;
2432 ExecCommand *first, *c;
2433
2434 assert(s);
2435
2436 first = s->exec_command[id];
2437
2438 /* Figure out where we are in the list by walking back to the beginning */
2439 for (c = current; c != first; c = c->command_prev)
2440 idx++;
2441
2442 return idx;
2443}
2444
2445static int service_serialize_exec_command(Unit *u, FILE *f, ExecCommand *command) {
2446 _cleanup_free_ char *args = NULL, *p = NULL;
2447 size_t allocated = 0, length = 0;
2448 Service *s = SERVICE(u);
2449 const char *type, *key;
2450 ServiceExecCommand id;
2451 unsigned idx;
2452 char **arg;
2453
2454 assert(s);
2455 assert(f);
2456
2457 if (!command)
2458 return 0;
2459
2460 if (command == s->control_command) {
2461 type = "control";
2462 id = s->control_command_id;
2463 } else {
2464 type = "main";
2465 id = SERVICE_EXEC_START;
2466 }
2467
2468 idx = service_exec_command_index(u, id, command);
2469
2470 STRV_FOREACH(arg, command->argv) {
2471 _cleanup_free_ char *e = NULL;
2472 size_t n;
2473
2474 e = cescape(*arg);
2475 if (!e)
2476 return log_oom();
2477
2478 n = strlen(e);
2479 if (!GREEDY_REALLOC(args, allocated, length + 1 + n + 1))
2480 return log_oom();
2481
2482 if (length > 0)
2483 args[length++] = ' ';
2484
2485 memcpy(args + length, e, n);
2486 length += n;
2487 }
2488
2489 if (!GREEDY_REALLOC(args, allocated, length + 1))
2490 return log_oom();
2491
2492 args[length++] = 0;
2493
2494 p = cescape(command->path);
2495 if (!p)
2496 return -ENOMEM;
2497
2498 key = strjoina(type, "-command");
2499 return serialize_item_format(f, key, "%s %u %s %s", service_exec_command_to_string(id), idx, p, args);
2500}
2501
2502static int service_serialize(Unit *u, FILE *f, FDSet *fds) {
2503 Service *s = SERVICE(u);
2504 ServiceFDStore *fs;
2505 int r;
2506
2507 assert(u);
2508 assert(f);
2509 assert(fds);
2510
2511 (void) serialize_item(f, "state", service_state_to_string(s->state));
2512 (void) serialize_item(f, "result", service_result_to_string(s->result));
2513 (void) serialize_item(f, "reload-result", service_result_to_string(s->reload_result));
2514
2515 if (s->control_pid > 0)
2516 (void) serialize_item_format(f, "control-pid", PID_FMT, s->control_pid);
2517
2518 if (s->main_pid_known && s->main_pid > 0)
2519 (void) serialize_item_format(f, "main-pid", PID_FMT, s->main_pid);
2520
2521 (void) serialize_bool(f, "main-pid-known", s->main_pid_known);
2522 (void) serialize_bool(f, "bus-name-good", s->bus_name_good);
2523 (void) serialize_bool(f, "bus-name-owner", s->bus_name_owner);
2524
2525 (void) serialize_item_format(f, "n-restarts", "%u", s->n_restarts);
2526 (void) serialize_bool(f, "flush-n-restarts", s->flush_n_restarts);
2527
2528 r = serialize_item_escaped(f, "status-text", s->status_text);
2529 if (r < 0)
2530 return r;
2531
2532 service_serialize_exec_command(u, f, s->control_command);
2533 service_serialize_exec_command(u, f, s->main_command);
2534
2535 r = serialize_fd(f, fds, "stdin-fd", s->stdin_fd);
2536 if (r < 0)
2537 return r;
2538 r = serialize_fd(f, fds, "stdout-fd", s->stdout_fd);
2539 if (r < 0)
2540 return r;
2541 r = serialize_fd(f, fds, "stderr-fd", s->stderr_fd);
2542 if (r < 0)
2543 return r;
2544
2545 if (s->exec_fd_event_source) {
2546 r = serialize_fd(f, fds, "exec-fd", sd_event_source_get_io_fd(s->exec_fd_event_source));
2547 if (r < 0)
2548 return r;
2549
2550 (void) serialize_bool(f, "exec-fd-hot", s->exec_fd_hot);
2551 }
2552
2553 if (UNIT_ISSET(s->accept_socket)) {
2554 r = serialize_item(f, "accept-socket", UNIT_DEREF(s->accept_socket)->id);
2555 if (r < 0)
2556 return r;
2557 }
2558
2559 r = serialize_fd(f, fds, "socket-fd", s->socket_fd);
2560 if (r < 0)
2561 return r;
2562
2563 LIST_FOREACH(fd_store, fs, s->fd_store) {
2564 _cleanup_free_ char *c = NULL;
2565 int copy;
2566
2567 copy = fdset_put_dup(fds, fs->fd);
2568 if (copy < 0)
2569 return log_error_errno(copy, "Failed to copy file descriptor for serialization: %m");
2570
2571 c = cescape(fs->fdname);
2572 if (!c)
2573 return log_oom();
2574
2575 (void) serialize_item_format(f, "fd-store-fd", "%i %s", copy, c);
2576 }
2577
2578 if (s->main_exec_status.pid > 0) {
2579 (void) serialize_item_format(f, "main-exec-status-pid", PID_FMT, s->main_exec_status.pid);
2580 (void) serialize_dual_timestamp(f, "main-exec-status-start", &s->main_exec_status.start_timestamp);
2581 (void) serialize_dual_timestamp(f, "main-exec-status-exit", &s->main_exec_status.exit_timestamp);
2582
2583 if (dual_timestamp_is_set(&s->main_exec_status.exit_timestamp)) {
2584 (void) serialize_item_format(f, "main-exec-status-code", "%i", s->main_exec_status.code);
2585 (void) serialize_item_format(f, "main-exec-status-status", "%i", s->main_exec_status.status);
2586 }
2587 }
2588
2589 (void) serialize_dual_timestamp(f, "watchdog-timestamp", &s->watchdog_timestamp);
2590 (void) serialize_bool(f, "forbid-restart", s->forbid_restart);
2591
2592 if (s->watchdog_override_enable)
2593 (void) serialize_item_format(f, "watchdog-override-usec", USEC_FMT, s->watchdog_override_usec);
2594
2595 if (s->watchdog_original_usec != USEC_INFINITY)
2596 (void) serialize_item_format(f, "watchdog-original-usec", USEC_FMT, s->watchdog_original_usec);
2597
2598 return 0;
2599}
2600
2601static int service_deserialize_exec_command(Unit *u, const char *key, const char *value) {
2602 Service *s = SERVICE(u);
2603 int r;
2604 unsigned idx = 0, i;
2605 bool control, found = false;
2606 ServiceExecCommand id = _SERVICE_EXEC_COMMAND_INVALID;
2607 ExecCommand *command = NULL;
2608 _cleanup_free_ char *path = NULL;
2609 _cleanup_strv_free_ char **argv = NULL;
2610
2611 enum ExecCommandState {
2612 STATE_EXEC_COMMAND_TYPE,
2613 STATE_EXEC_COMMAND_INDEX,
2614 STATE_EXEC_COMMAND_PATH,
2615 STATE_EXEC_COMMAND_ARGS,
2616 _STATE_EXEC_COMMAND_MAX,
2617 _STATE_EXEC_COMMAND_INVALID = -1,
2618 } state;
2619
2620 assert(s);
2621 assert(key);
2622 assert(value);
2623
2624 control = streq(key, "control-command");
2625
2626 state = STATE_EXEC_COMMAND_TYPE;
2627
2628 for (;;) {
2629 _cleanup_free_ char *arg = NULL;
2630
2631 r = extract_first_word(&value, &arg, NULL, EXTRACT_CUNESCAPE);
2632 if (r < 0)
2633 return r;
2634 if (r == 0)
2635 break;
2636
2637 switch (state) {
2638 case STATE_EXEC_COMMAND_TYPE:
2639 id = service_exec_command_from_string(arg);
2640 if (id < 0)
2641 return -EINVAL;
2642
2643 state = STATE_EXEC_COMMAND_INDEX;
2644 break;
2645 case STATE_EXEC_COMMAND_INDEX:
2646 r = safe_atou(arg, &idx);
2647 if (r < 0)
2648 return -EINVAL;
2649
2650 state = STATE_EXEC_COMMAND_PATH;
2651 break;
2652 case STATE_EXEC_COMMAND_PATH:
2653 path = TAKE_PTR(arg);
2654 state = STATE_EXEC_COMMAND_ARGS;
2655
2656 if (!path_is_absolute(path))
2657 return -EINVAL;
2658 break;
2659 case STATE_EXEC_COMMAND_ARGS:
2660 r = strv_extend(&argv, arg);
2661 if (r < 0)
2662 return -ENOMEM;
2663 break;
2664 default:
2665 assert_not_reached("Unknown error at deserialization of exec command");
2666 break;
2667 }
2668 }
2669
2670 if (state != STATE_EXEC_COMMAND_ARGS)
2671 return -EINVAL;
2672
2673 /* Let's check whether exec command on given offset matches data that we just deserialized */
2674 for (command = s->exec_command[id], i = 0; command; command = command->command_next, i++) {
2675 if (i != idx)
2676 continue;
2677
2678 found = strv_equal(argv, command->argv) && streq(command->path, path);
2679 break;
2680 }
2681
2682 if (!found) {
2683 /* Command at the index we serialized is different, let's look for command that exactly
2684 * matches but is on different index. If there is no such command we will not resume execution. */
2685 for (command = s->exec_command[id]; command; command = command->command_next)
2686 if (strv_equal(command->argv, argv) && streq(command->path, path))
2687 break;
2688 }
2689
2690 if (command && control)
2691 s->control_command = command;
2692 else if (command)
2693 s->main_command = command;
2694 else
2695 log_unit_warning(u, "Current command vanished from the unit file, execution of the command list won't be resumed.");
2696
2697 return 0;
2698}
2699
2700static int service_deserialize_item(Unit *u, const char *key, const char *value, FDSet *fds) {
2701 Service *s = SERVICE(u);
2702 int r;
2703
2704 assert(u);
2705 assert(key);
2706 assert(value);
2707 assert(fds);
2708
2709 if (streq(key, "state")) {
2710 ServiceState state;
2711
2712 state = service_state_from_string(value);
2713 if (state < 0)
2714 log_unit_debug(u, "Failed to parse state value: %s", value);
2715 else
2716 s->deserialized_state = state;
2717 } else if (streq(key, "result")) {
2718 ServiceResult f;
2719
2720 f = service_result_from_string(value);
2721 if (f < 0)
2722 log_unit_debug(u, "Failed to parse result value: %s", value);
2723 else if (f != SERVICE_SUCCESS)
2724 s->result = f;
2725
2726 } else if (streq(key, "reload-result")) {
2727 ServiceResult f;
2728
2729 f = service_result_from_string(value);
2730 if (f < 0)
2731 log_unit_debug(u, "Failed to parse reload result value: %s", value);
2732 else if (f != SERVICE_SUCCESS)
2733 s->reload_result = f;
2734
2735 } else if (streq(key, "control-pid")) {
2736 pid_t pid;
2737
2738 if (parse_pid(value, &pid) < 0)
2739 log_unit_debug(u, "Failed to parse control-pid value: %s", value);
2740 else
2741 s->control_pid = pid;
2742 } else if (streq(key, "main-pid")) {
2743 pid_t pid;
2744
2745 if (parse_pid(value, &pid) < 0)
2746 log_unit_debug(u, "Failed to parse main-pid value: %s", value);
2747 else
2748 (void) service_set_main_pid(s, pid);
2749 } else if (streq(key, "main-pid-known")) {
2750 int b;
2751
2752 b = parse_boolean(value);
2753 if (b < 0)
2754 log_unit_debug(u, "Failed to parse main-pid-known value: %s", value);
2755 else
2756 s->main_pid_known = b;
2757 } else if (streq(key, "bus-name-good")) {
2758 int b;
2759
2760 b = parse_boolean(value);
2761 if (b < 0)
2762 log_unit_debug(u, "Failed to parse bus-name-good value: %s", value);
2763 else
2764 s->bus_name_good = b;
2765 } else if (streq(key, "bus-name-owner")) {
2766 r = free_and_strdup(&s->bus_name_owner, value);
2767 if (r < 0)
2768 log_unit_error_errno(u, r, "Unable to deserialize current bus owner %s: %m", value);
2769 } else if (streq(key, "status-text")) {
2770 char *t;
2771
2772 r = cunescape(value, 0, &t);
2773 if (r < 0)
2774 log_unit_debug_errno(u, r, "Failed to unescape status text '%s': %m", value);
2775 else
2776 free_and_replace(s->status_text, t);
2777
2778 } else if (streq(key, "accept-socket")) {
2779 Unit *socket;
2780
2781 r = manager_load_unit(u->manager, value, NULL, NULL, &socket);
2782 if (r < 0)
2783 log_unit_debug_errno(u, r, "Failed to load accept-socket unit '%s': %m", value);
2784 else {
2785 unit_ref_set(&s->accept_socket, u, socket);
2786 SOCKET(socket)->n_connections++;
2787 }
2788
2789 } else if (streq(key, "socket-fd")) {
2790 int fd;
2791
2792 if (safe_atoi(value, &fd) < 0 || fd < 0 || !fdset_contains(fds, fd))
2793 log_unit_debug(u, "Failed to parse socket-fd value: %s", value);
2794 else {
2795 asynchronous_close(s->socket_fd);
2796 s->socket_fd = fdset_remove(fds, fd);
2797 }
2798 } else if (streq(key, "fd-store-fd")) {
2799 const char *fdv;
2800 size_t pf;
2801 int fd;
2802
2803 pf = strcspn(value, WHITESPACE);
2804 fdv = strndupa(value, pf);
2805
2806 if (safe_atoi(fdv, &fd) < 0 || fd < 0 || !fdset_contains(fds, fd))
2807 log_unit_debug(u, "Failed to parse fd-store-fd value: %s", value);
2808 else {
2809 _cleanup_free_ char *t = NULL;
2810 const char *fdn;
2811
2812 fdn = value + pf;
2813 fdn += strspn(fdn, WHITESPACE);
2814 (void) cunescape(fdn, 0, &t);
2815
2816 r = service_add_fd_store(s, fd, t);
2817 if (r < 0)
2818 log_unit_error_errno(u, r, "Failed to add fd to store: %m");
2819 else
2820 fdset_remove(fds, fd);
2821 }
2822
2823 } else if (streq(key, "main-exec-status-pid")) {
2824 pid_t pid;
2825
2826 if (parse_pid(value, &pid) < 0)
2827 log_unit_debug(u, "Failed to parse main-exec-status-pid value: %s", value);
2828 else
2829 s->main_exec_status.pid = pid;
2830 } else if (streq(key, "main-exec-status-code")) {
2831 int i;
2832
2833 if (safe_atoi(value, &i) < 0)
2834 log_unit_debug(u, "Failed to parse main-exec-status-code value: %s", value);
2835 else
2836 s->main_exec_status.code = i;
2837 } else if (streq(key, "main-exec-status-status")) {
2838 int i;
2839
2840 if (safe_atoi(value, &i) < 0)
2841 log_unit_debug(u, "Failed to parse main-exec-status-status value: %s", value);
2842 else
2843 s->main_exec_status.status = i;
2844 } else if (streq(key, "main-exec-status-start"))
2845 deserialize_dual_timestamp(value, &s->main_exec_status.start_timestamp);
2846 else if (streq(key, "main-exec-status-exit"))
2847 deserialize_dual_timestamp(value, &s->main_exec_status.exit_timestamp);
2848 else if (streq(key, "watchdog-timestamp"))
2849 deserialize_dual_timestamp(value, &s->watchdog_timestamp);
2850 else if (streq(key, "forbid-restart")) {
2851 int b;
2852
2853 b = parse_boolean(value);
2854 if (b < 0)
2855 log_unit_debug(u, "Failed to parse forbid-restart value: %s", value);
2856 else
2857 s->forbid_restart = b;
2858 } else if (streq(key, "stdin-fd")) {
2859 int fd;
2860
2861 if (safe_atoi(value, &fd) < 0 || fd < 0 || !fdset_contains(fds, fd))
2862 log_unit_debug(u, "Failed to parse stdin-fd value: %s", value);
2863 else {
2864 asynchronous_close(s->stdin_fd);
2865 s->stdin_fd = fdset_remove(fds, fd);
2866 s->exec_context.stdio_as_fds = true;
2867 }
2868 } else if (streq(key, "stdout-fd")) {
2869 int fd;
2870
2871 if (safe_atoi(value, &fd) < 0 || fd < 0 || !fdset_contains(fds, fd))
2872 log_unit_debug(u, "Failed to parse stdout-fd value: %s", value);
2873 else {
2874 asynchronous_close(s->stdout_fd);
2875 s->stdout_fd = fdset_remove(fds, fd);
2876 s->exec_context.stdio_as_fds = true;
2877 }
2878 } else if (streq(key, "stderr-fd")) {
2879 int fd;
2880
2881 if (safe_atoi(value, &fd) < 0 || fd < 0 || !fdset_contains(fds, fd))
2882 log_unit_debug(u, "Failed to parse stderr-fd value: %s", value);
2883 else {
2884 asynchronous_close(s->stderr_fd);
2885 s->stderr_fd = fdset_remove(fds, fd);
2886 s->exec_context.stdio_as_fds = true;
2887 }
2888 } else if (streq(key, "exec-fd")) {
2889 int fd;
2890
2891 if (safe_atoi(value, &fd) < 0 || fd < 0 || !fdset_contains(fds, fd))
2892 log_unit_debug(u, "Failed to parse exec-fd value: %s", value);
2893 else {
2894 s->exec_fd_event_source = sd_event_source_unref(s->exec_fd_event_source);
2895
2896 fd = fdset_remove(fds, fd);
2897 if (service_allocate_exec_fd_event_source(s, fd, &s->exec_fd_event_source) < 0)
2898 safe_close(fd);
2899 }
2900 } else if (streq(key, "watchdog-override-usec")) {
2901 if (deserialize_usec(value, &s->watchdog_override_usec) < 0)
2902 log_unit_debug(u, "Failed to parse watchdog_override_usec value: %s", value);
2903 else
2904 s->watchdog_override_enable = true;
2905
2906 } else if (streq(key, "watchdog-original-usec")) {
2907 if (deserialize_usec(value, &s->watchdog_original_usec) < 0)
2908 log_unit_debug(u, "Failed to parse watchdog_original_usec value: %s", value);
2909
2910 } else if (STR_IN_SET(key, "main-command", "control-command")) {
2911 r = service_deserialize_exec_command(u, key, value);
2912 if (r < 0)
2913 log_unit_debug_errno(u, r, "Failed to parse serialized command \"%s\": %m", value);
2914
2915 } else if (streq(key, "n-restarts")) {
2916 r = safe_atou(value, &s->n_restarts);
2917 if (r < 0)
2918 log_unit_debug_errno(u, r, "Failed to parse serialized restart counter '%s': %m", value);
2919
2920 } else if (streq(key, "flush-n-restarts")) {
2921 r = parse_boolean(value);
2922 if (r < 0)
2923 log_unit_debug_errno(u, r, "Failed to parse serialized flush restart counter setting '%s': %m", value);
2924 else
2925 s->flush_n_restarts = r;
2926 } else
2927 log_unit_debug(u, "Unknown serialization key: %s", key);
2928
2929 return 0;
2930}
2931
2932_pure_ static UnitActiveState service_active_state(Unit *u) {
2933 const UnitActiveState *table;
2934
2935 assert(u);
2936
2937 table = SERVICE(u)->type == SERVICE_IDLE ? state_translation_table_idle : state_translation_table;
2938
2939 return table[SERVICE(u)->state];
2940}
2941
2942static const char *service_sub_state_to_string(Unit *u) {
2943 assert(u);
2944
2945 return service_state_to_string(SERVICE(u)->state);
2946}
2947
2948static bool service_may_gc(Unit *u) {
2949 Service *s = SERVICE(u);
2950
2951 assert(s);
2952
2953 /* Never clean up services that still have a process around, even if the service is formally dead. Note that
2954 * unit_may_gc() already checked our cgroup for us, we just check our two additional PIDs, too, in case they
2955 * have moved outside of the cgroup. */
2956
2957 if (main_pid_good(s) > 0 ||
2958 control_pid_good(s) > 0)
2959 return false;
2960
2961 return true;
2962}
2963
2964static int service_retry_pid_file(Service *s) {
2965 int r;
2966
2967 assert(s->pid_file);
2968 assert(IN_SET(s->state, SERVICE_START, SERVICE_START_POST));
2969
2970 r = service_load_pid_file(s, false);
2971 if (r < 0)
2972 return r;
2973
2974 service_unwatch_pid_file(s);
2975
2976 service_enter_running(s, SERVICE_SUCCESS);
2977 return 0;
2978}
2979
2980static int service_watch_pid_file(Service *s) {
2981 int r;
2982
2983 log_unit_debug(UNIT(s), "Setting watch for PID file %s", s->pid_file_pathspec->path);
2984
2985 r = path_spec_watch(s->pid_file_pathspec, service_dispatch_inotify_io);
2986 if (r < 0)
2987 goto fail;
2988
2989 /* the pidfile might have appeared just before we set the watch */
2990 log_unit_debug(UNIT(s), "Trying to read PID file %s in case it changed", s->pid_file_pathspec->path);
2991 service_retry_pid_file(s);
2992
2993 return 0;
2994fail:
2995 log_unit_error_errno(UNIT(s), r, "Failed to set a watch for PID file %s: %m", s->pid_file_pathspec->path);
2996 service_unwatch_pid_file(s);
2997 return r;
2998}
2999
3000static int service_demand_pid_file(Service *s) {
3001 PathSpec *ps;
3002
3003 assert(s->pid_file);
3004 assert(!s->pid_file_pathspec);
3005
3006 ps = new0(PathSpec, 1);
3007 if (!ps)
3008 return -ENOMEM;
3009
3010 ps->unit = UNIT(s);
3011 ps->path = strdup(s->pid_file);
3012 if (!ps->path) {
3013 free(ps);
3014 return -ENOMEM;
3015 }
3016
3017 path_simplify(ps->path, false);
3018
3019 /* PATH_CHANGED would not be enough. There are daemons (sendmail) that
3020 * keep their PID file open all the time. */
3021 ps->type = PATH_MODIFIED;
3022 ps->inotify_fd = -1;
3023
3024 s->pid_file_pathspec = ps;
3025
3026 return service_watch_pid_file(s);
3027}
3028
3029static int service_dispatch_inotify_io(sd_event_source *source, int fd, uint32_t events, void *userdata) {
3030 PathSpec *p = userdata;
3031 Service *s;
3032
3033 assert(p);
3034
3035 s = SERVICE(p->unit);
3036
3037 assert(s);
3038 assert(fd >= 0);
3039 assert(IN_SET(s->state, SERVICE_START, SERVICE_START_POST));
3040 assert(s->pid_file_pathspec);
3041 assert(path_spec_owns_inotify_fd(s->pid_file_pathspec, fd));
3042
3043 log_unit_debug(UNIT(s), "inotify event");
3044
3045 if (path_spec_fd_event(p, events) < 0)
3046 goto fail;
3047
3048 if (service_retry_pid_file(s) == 0)
3049 return 0;
3050
3051 if (service_watch_pid_file(s) < 0)
3052 goto fail;
3053
3054 return 0;
3055
3056fail:
3057 service_unwatch_pid_file(s);
3058 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_RESOURCES);
3059 return 0;
3060}
3061
3062static int service_dispatch_exec_io(sd_event_source *source, int fd, uint32_t events, void *userdata) {
3063 Service *s = SERVICE(userdata);
3064
3065 assert(s);
3066
3067 log_unit_debug(UNIT(s), "got exec-fd event");
3068
3069 /* If Type=exec is set, we'll consider a service started successfully the instant we invoked execve()
3070 * successfully for it. We implement this through a pipe() towards the child, which the kernel automatically
3071 * closes for us due to O_CLOEXEC on execve() in the child, which then triggers EOF on the pipe in the
3072 * parent. We need to be careful however, as there are other reasons that we might cause the child's side of
3073 * the pipe to be closed (for example, a simple exit()). To deal with that we'll ignore EOFs on the pipe unless
3074 * the child signalled us first that it is about to call the execve(). It does so by sending us a simple
3075 * non-zero byte via the pipe. We also provide the child with a way to inform us in case execve() failed: if it
3076 * sends a zero byte we'll ignore POLLHUP on the fd again. */
3077
3078 for (;;) {
3079 uint8_t x;
3080 ssize_t n;
3081
3082 n = read(fd, &x, sizeof(x));
3083 if (n < 0) {
3084 if (errno == EAGAIN) /* O_NONBLOCK in effect → everything queued has now been processed. */
3085 return 0;
3086
3087 return log_unit_error_errno(UNIT(s), errno, "Failed to read from exec_fd: %m");
3088 }
3089 if (n == 0) { /* EOF → the event we are waiting for */
3090
3091 s->exec_fd_event_source = sd_event_source_unref(s->exec_fd_event_source);
3092
3093 if (s->exec_fd_hot) { /* Did the child tell us to expect EOF now? */
3094 log_unit_debug(UNIT(s), "Got EOF on exec-fd");
3095
3096 s->exec_fd_hot = false;
3097
3098 /* Nice! This is what we have been waiting for. Transition to next state. */
3099 if (s->type == SERVICE_EXEC && s->state == SERVICE_START)
3100 service_enter_start_post(s);
3101 } else
3102 log_unit_debug(UNIT(s), "Got EOF on exec-fd while it was disabled, ignoring.");
3103
3104 return 0;
3105 }
3106
3107 /* A byte was read → this turns on/off the exec fd logic */
3108 assert(n == sizeof(x));
3109 s->exec_fd_hot = x;
3110 }
3111
3112 return 0;
3113}
3114
3115static void service_notify_cgroup_empty_event(Unit *u) {
3116 Service *s = SERVICE(u);
3117
3118 assert(u);
3119
3120 log_unit_debug(u, "cgroup is empty");
3121
3122 switch (s->state) {
3123
3124 /* Waiting for SIGCHLD is usually more interesting,
3125 * because it includes return codes/signals. Which is
3126 * why we ignore the cgroup events for most cases,
3127 * except when we don't know pid which to expect the
3128 * SIGCHLD for. */
3129
3130 case SERVICE_START:
3131 if (s->type == SERVICE_NOTIFY &&
3132 main_pid_good(s) == 0 &&
3133 control_pid_good(s) == 0) {
3134 /* No chance of getting a ready notification anymore */
3135 service_enter_stop_post(s, SERVICE_FAILURE_PROTOCOL);
3136 break;
3137 }
3138
3139 _fallthrough_;
3140 case SERVICE_START_POST:
3141 if (s->pid_file_pathspec &&
3142 main_pid_good(s) == 0 &&
3143 control_pid_good(s) == 0) {
3144
3145 /* Give up hoping for the daemon to write its PID file */
3146 log_unit_warning(u, "Daemon never wrote its PID file. Failing.");
3147
3148 service_unwatch_pid_file(s);
3149 if (s->state == SERVICE_START)
3150 service_enter_stop_post(s, SERVICE_FAILURE_PROTOCOL);
3151 else
3152 service_enter_stop(s, SERVICE_FAILURE_PROTOCOL);
3153 }
3154 break;
3155
3156 case SERVICE_RUNNING:
3157 /* service_enter_running() will figure out what to do */
3158 service_enter_running(s, SERVICE_SUCCESS);
3159 break;
3160
3161 case SERVICE_STOP_WATCHDOG:
3162 case SERVICE_STOP_SIGTERM:
3163 case SERVICE_STOP_SIGKILL:
3164
3165 if (main_pid_good(s) <= 0 && control_pid_good(s) <= 0)
3166 service_enter_stop_post(s, SERVICE_SUCCESS);
3167
3168 break;
3169
3170 case SERVICE_STOP_POST:
3171 case SERVICE_FINAL_SIGTERM:
3172 case SERVICE_FINAL_SIGKILL:
3173 if (main_pid_good(s) <= 0 && control_pid_good(s) <= 0)
3174 service_enter_dead(s, SERVICE_SUCCESS, true);
3175
3176 break;
3177
3178 default:
3179 ;
3180 }
3181}
3182
3183static void service_sigchld_event(Unit *u, pid_t pid, int code, int status) {
3184 bool notify_dbus = true;
3185 Service *s = SERVICE(u);
3186 ServiceResult f;
3187
3188 assert(s);
3189 assert(pid >= 0);
3190
3191 if (is_clean_exit(code, status, s->type == SERVICE_ONESHOT ? EXIT_CLEAN_COMMAND : EXIT_CLEAN_DAEMON, &s->success_status))
3192 f = SERVICE_SUCCESS;
3193 else if (code == CLD_EXITED)
3194 f = SERVICE_FAILURE_EXIT_CODE;
3195 else if (code == CLD_KILLED)
3196 f = SERVICE_FAILURE_SIGNAL;
3197 else if (code == CLD_DUMPED)
3198 f = SERVICE_FAILURE_CORE_DUMP;
3199 else
3200 assert_not_reached("Unknown code");
3201
3202 if (s->main_pid == pid) {
3203 /* Forking services may occasionally move to a new PID.
3204 * As long as they update the PID file before exiting the old
3205 * PID, they're fine. */
3206 if (service_load_pid_file(s, false) > 0)
3207 return;
3208
3209 s->main_pid = 0;
3210 exec_status_exit(&s->main_exec_status, &s->exec_context, pid, code, status);
3211
3212 if (s->main_command) {
3213 /* If this is not a forking service than the
3214 * main process got started and hence we copy
3215 * the exit status so that it is recorded both
3216 * as main and as control process exit
3217 * status */
3218
3219 s->main_command->exec_status = s->main_exec_status;
3220
3221 if (s->main_command->flags & EXEC_COMMAND_IGNORE_FAILURE)
3222 f = SERVICE_SUCCESS;
3223 } else if (s->exec_command[SERVICE_EXEC_START]) {
3224
3225 /* If this is a forked process, then we should
3226 * ignore the return value if this was
3227 * configured for the starter process */
3228
3229 if (s->exec_command[SERVICE_EXEC_START]->flags & EXEC_COMMAND_IGNORE_FAILURE)
3230 f = SERVICE_SUCCESS;
3231 }
3232
3233 /* When this is a successful exit, let's log about the exit code on DEBUG level. If this is a failure
3234 * and the process exited on its own via exit(), then let's make this a NOTICE, under the assumption
3235 * that the service already logged the reason at a higher log level on its own. (Internally,
3236 * unit_log_process_exit() will possibly bump this to WARNING if the service died due to a signal.) */
3237 unit_log_process_exit(
3238 u, f == SERVICE_SUCCESS ? LOG_DEBUG : LOG_NOTICE,
3239 "Main process",
3240 service_exec_command_to_string(SERVICE_EXEC_START),
3241 code, status);
3242
3243 if (s->result == SERVICE_SUCCESS)
3244 s->result = f;
3245
3246 if (s->main_command &&
3247 s->main_command->command_next &&
3248 s->type == SERVICE_ONESHOT &&
3249 f == SERVICE_SUCCESS) {
3250
3251 /* There is another command to *
3252 * execute, so let's do that. */
3253
3254 log_unit_debug(u, "Running next main command for state %s.", service_state_to_string(s->state));
3255 service_run_next_main(s);
3256
3257 } else {
3258
3259 /* The service exited, so the service is officially
3260 * gone. */
3261 s->main_command = NULL;
3262
3263 switch (s->state) {
3264
3265 case SERVICE_START_POST:
3266 case SERVICE_RELOAD:
3267 case SERVICE_STOP:
3268 /* Need to wait until the operation is
3269 * done */
3270 break;
3271
3272 case SERVICE_START:
3273 if (s->type == SERVICE_ONESHOT) {
3274 /* This was our main goal, so let's go on */
3275 if (f == SERVICE_SUCCESS)
3276 service_enter_start_post(s);
3277 else
3278 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3279 break;
3280 } else if (s->type == SERVICE_NOTIFY) {
3281 /* Only enter running through a notification, so that the
3282 * SERVICE_START state signifies that no ready notification
3283 * has been received */
3284 if (f != SERVICE_SUCCESS)
3285 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3286 else if (!s->remain_after_exit || s->notify_access == NOTIFY_MAIN)
3287 /* The service has never been and will never be active */
3288 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_PROTOCOL);
3289 break;
3290 }
3291
3292 _fallthrough_;
3293 case SERVICE_RUNNING:
3294 service_enter_running(s, f);
3295 break;
3296
3297 case SERVICE_STOP_WATCHDOG:
3298 case SERVICE_STOP_SIGTERM:
3299 case SERVICE_STOP_SIGKILL:
3300
3301 if (control_pid_good(s) <= 0)
3302 service_enter_stop_post(s, f);
3303
3304 /* If there is still a control process, wait for that first */
3305 break;
3306
3307 case SERVICE_STOP_POST:
3308 case SERVICE_FINAL_SIGTERM:
3309 case SERVICE_FINAL_SIGKILL:
3310
3311 if (control_pid_good(s) <= 0)
3312 service_enter_dead(s, f, true);
3313 break;
3314
3315 default:
3316 assert_not_reached("Uh, main process died at wrong time.");
3317 }
3318 }
3319
3320 } else if (s->control_pid == pid) {
3321 s->control_pid = 0;
3322
3323 if (s->control_command) {
3324 exec_status_exit(&s->control_command->exec_status, &s->exec_context, pid, code, status);
3325
3326 if (s->control_command->flags & EXEC_COMMAND_IGNORE_FAILURE)
3327 f = SERVICE_SUCCESS;
3328 }
3329
3330 unit_log_process_exit(
3331 u, f == SERVICE_SUCCESS ? LOG_DEBUG : LOG_NOTICE,
3332 "Control process",
3333 service_exec_command_to_string(s->control_command_id),
3334 code, status);
3335
3336 if (s->result == SERVICE_SUCCESS)
3337 s->result = f;
3338
3339 if (s->control_command &&
3340 s->control_command->command_next &&
3341 f == SERVICE_SUCCESS) {
3342
3343 /* There is another command to *
3344 * execute, so let's do that. */
3345
3346 log_unit_debug(u, "Running next control command for state %s.", service_state_to_string(s->state));
3347 service_run_next_control(s);
3348
3349 } else {
3350 /* No further commands for this step, so let's
3351 * figure out what to do next */
3352
3353 s->control_command = NULL;
3354 s->control_command_id = _SERVICE_EXEC_COMMAND_INVALID;
3355
3356 log_unit_debug(u, "Got final SIGCHLD for state %s.", service_state_to_string(s->state));
3357
3358 switch (s->state) {
3359
3360 case SERVICE_START_PRE:
3361 if (f == SERVICE_SUCCESS)
3362 service_enter_start(s);
3363 else
3364 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3365 break;
3366
3367 case SERVICE_START:
3368 if (s->type != SERVICE_FORKING)
3369 /* Maybe spurious event due to a reload that changed the type? */
3370 break;
3371
3372 if (f != SERVICE_SUCCESS) {
3373 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3374 break;
3375 }
3376
3377 if (s->pid_file) {
3378 bool has_start_post;
3379 int r;
3380
3381 /* Let's try to load the pid file here if we can.
3382 * The PID file might actually be created by a START_POST
3383 * script. In that case don't worry if the loading fails. */
3384
3385 has_start_post = s->exec_command[SERVICE_EXEC_START_POST];
3386 r = service_load_pid_file(s, !has_start_post);
3387 if (!has_start_post && r < 0) {
3388 r = service_demand_pid_file(s);
3389 if (r < 0 || cgroup_good(s) == 0)
3390 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_PROTOCOL);
3391 break;
3392 }
3393 } else
3394 service_search_main_pid(s);
3395
3396 service_enter_start_post(s);
3397 break;
3398
3399 case SERVICE_START_POST:
3400 if (f != SERVICE_SUCCESS) {
3401 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3402 break;
3403 }
3404
3405 if (s->pid_file) {
3406 int r;
3407
3408 r = service_load_pid_file(s, true);
3409 if (r < 0) {
3410 r = service_demand_pid_file(s);
3411 if (r < 0 || cgroup_good(s) == 0)
3412 service_enter_stop(s, SERVICE_FAILURE_PROTOCOL);
3413 break;
3414 }
3415 } else
3416 service_search_main_pid(s);
3417
3418 service_enter_running(s, SERVICE_SUCCESS);
3419 break;
3420
3421 case SERVICE_RELOAD:
3422 if (f == SERVICE_SUCCESS)
3423 if (service_load_pid_file(s, true) < 0)
3424 service_search_main_pid(s);
3425
3426 s->reload_result = f;
3427 service_enter_running(s, SERVICE_SUCCESS);
3428 break;
3429
3430 case SERVICE_STOP:
3431 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3432 break;
3433
3434 case SERVICE_STOP_WATCHDOG:
3435 case SERVICE_STOP_SIGTERM:
3436 case SERVICE_STOP_SIGKILL:
3437 if (main_pid_good(s) <= 0)
3438 service_enter_stop_post(s, f);
3439
3440 /* If there is still a service
3441 * process around, wait until
3442 * that one quit, too */
3443 break;
3444
3445 case SERVICE_STOP_POST:
3446 case SERVICE_FINAL_SIGTERM:
3447 case SERVICE_FINAL_SIGKILL:
3448 if (main_pid_good(s) <= 0)
3449 service_enter_dead(s, f, true);
3450 break;
3451
3452 default:
3453 assert_not_reached("Uh, control process died at wrong time.");
3454 }
3455 }
3456 } else /* Neither control nor main PID? If so, don't notify about anything */
3457 notify_dbus = false;
3458
3459 /* Notify clients about changed exit status */
3460 if (notify_dbus)
3461 unit_add_to_dbus_queue(u);
3462
3463 /* If we get a SIGCHLD event for one of the processes we were interested in, then we look for others to watch,
3464 * under the assumption that we'll sooner or later get a SIGCHLD for them, as the original process we watched
3465 * was probably the parent of them, and they are hence now our children. */
3466 (void) unit_enqueue_rewatch_pids(u);
3467}
3468
3469static int service_dispatch_timer(sd_event_source *source, usec_t usec, void *userdata) {
3470 Service *s = SERVICE(userdata);
3471
3472 assert(s);
3473 assert(source == s->timer_event_source);
3474
3475 switch (s->state) {
3476
3477 case SERVICE_START_PRE:
3478 case SERVICE_START:
3479 log_unit_warning(UNIT(s), "%s operation timed out. Terminating.", s->state == SERVICE_START ? "Start" : "Start-pre");
3480 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_TIMEOUT);
3481 break;
3482
3483 case SERVICE_START_POST:
3484 log_unit_warning(UNIT(s), "Start-post operation timed out. Stopping.");
3485 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_TIMEOUT);
3486 break;
3487
3488 case SERVICE_RUNNING:
3489 log_unit_warning(UNIT(s), "Service reached runtime time limit. Stopping.");
3490 service_enter_stop(s, SERVICE_FAILURE_TIMEOUT);
3491 break;
3492
3493 case SERVICE_RELOAD:
3494 log_unit_warning(UNIT(s), "Reload operation timed out. Killing reload process.");
3495 service_kill_control_process(s);
3496 s->reload_result = SERVICE_FAILURE_TIMEOUT;
3497 service_enter_running(s, SERVICE_SUCCESS);
3498 break;
3499
3500 case SERVICE_STOP:
3501 log_unit_warning(UNIT(s), "Stopping timed out. Terminating.");
3502 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_TIMEOUT);
3503 break;
3504
3505 case SERVICE_STOP_WATCHDOG:
3506 log_unit_warning(UNIT(s), "State 'stop-watchdog' timed out. Terminating.");
3507 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_TIMEOUT);
3508 break;
3509
3510 case SERVICE_STOP_SIGTERM:
3511 if (s->kill_context.send_sigkill) {
3512 log_unit_warning(UNIT(s), "State 'stop-sigterm' timed out. Killing.");
3513 service_enter_signal(s, SERVICE_STOP_SIGKILL, SERVICE_FAILURE_TIMEOUT);
3514 } else {
3515 log_unit_warning(UNIT(s), "State 'stop-sigterm' timed out. Skipping SIGKILL.");
3516 service_enter_stop_post(s, SERVICE_FAILURE_TIMEOUT);
3517 }
3518
3519 break;
3520
3521 case SERVICE_STOP_SIGKILL:
3522 /* Uh, we sent a SIGKILL and it is still not gone?
3523 * Must be something we cannot kill, so let's just be
3524 * weirded out and continue */
3525
3526 log_unit_warning(UNIT(s), "Processes still around after SIGKILL. Ignoring.");
3527 service_enter_stop_post(s, SERVICE_FAILURE_TIMEOUT);
3528 break;
3529
3530 case SERVICE_STOP_POST:
3531 log_unit_warning(UNIT(s), "State 'stop-post' timed out. Terminating.");
3532 service_enter_signal(s, SERVICE_FINAL_SIGTERM, SERVICE_FAILURE_TIMEOUT);
3533 break;
3534
3535 case SERVICE_FINAL_SIGTERM:
3536 if (s->kill_context.send_sigkill) {
3537 log_unit_warning(UNIT(s), "State 'stop-final-sigterm' timed out. Killing.");
3538 service_enter_signal(s, SERVICE_FINAL_SIGKILL, SERVICE_FAILURE_TIMEOUT);
3539 } else {
3540 log_unit_warning(UNIT(s), "State 'stop-final-sigterm' timed out. Skipping SIGKILL. Entering failed mode.");
3541 service_enter_dead(s, SERVICE_FAILURE_TIMEOUT, false);
3542 }
3543
3544 break;
3545
3546 case SERVICE_FINAL_SIGKILL:
3547 log_unit_warning(UNIT(s), "Processes still around after final SIGKILL. Entering failed mode.");
3548 service_enter_dead(s, SERVICE_FAILURE_TIMEOUT, true);
3549 break;
3550
3551 case SERVICE_AUTO_RESTART:
3552 if (s->restart_usec > 0) {
3553 char buf_restart[FORMAT_TIMESPAN_MAX];
3554 log_unit_info(UNIT(s),
3555 "Service RestartSec=%s expired, scheduling restart.",
3556 format_timespan(buf_restart, sizeof buf_restart, s->restart_usec, USEC_PER_SEC));
3557 } else
3558 log_unit_info(UNIT(s),
3559 "Service has no hold-off time (RestartSec=0), scheduling restart.");
3560
3561 service_enter_restart(s);
3562 break;
3563
3564 default:
3565 assert_not_reached("Timeout at wrong time.");
3566 }
3567
3568 return 0;
3569}
3570
3571static int service_dispatch_watchdog(sd_event_source *source, usec_t usec, void *userdata) {
3572 Service *s = SERVICE(userdata);
3573 char t[FORMAT_TIMESPAN_MAX];
3574 usec_t watchdog_usec;
3575
3576 assert(s);
3577 assert(source == s->watchdog_event_source);
3578
3579 watchdog_usec = service_get_watchdog_usec(s);
3580
3581 if (UNIT(s)->manager->service_watchdogs) {
3582 log_unit_error(UNIT(s), "Watchdog timeout (limit %s)!",
3583 format_timespan(t, sizeof(t), watchdog_usec, 1));
3584
3585 service_enter_signal(s, SERVICE_STOP_WATCHDOG, SERVICE_FAILURE_WATCHDOG);
3586 } else
3587 log_unit_warning(UNIT(s), "Watchdog disabled! Ignoring watchdog timeout (limit %s)!",
3588 format_timespan(t, sizeof(t), watchdog_usec, 1));
3589
3590 return 0;
3591}
3592
3593static bool service_notify_message_authorized(Service *s, pid_t pid, char **tags, FDSet *fds) {
3594 assert(s);
3595
3596 if (s->notify_access == NOTIFY_NONE) {
3597 log_unit_warning(UNIT(s), "Got notification message from PID "PID_FMT", but reception is disabled.", pid);
3598 return false;
3599 }
3600
3601 if (s->notify_access == NOTIFY_MAIN && pid != s->main_pid) {
3602 if (s->main_pid != 0)
3603 log_unit_warning(UNIT(s), "Got notification message from PID "PID_FMT", but reception only permitted for main PID "PID_FMT, pid, s->main_pid);
3604 else
3605 log_unit_warning(UNIT(s), "Got notification message from PID "PID_FMT", but reception only permitted for main PID which is currently not known", pid);
3606
3607 return false;
3608 }
3609
3610 if (s->notify_access == NOTIFY_EXEC && pid != s->main_pid && pid != s->control_pid) {
3611 if (s->main_pid != 0 && s->control_pid != 0)
3612 log_unit_warning(UNIT(s), "Got notification message from PID "PID_FMT", but reception only permitted for main PID "PID_FMT" and control PID "PID_FMT,
3613 pid, s->main_pid, s->control_pid);
3614 else if (s->main_pid != 0)
3615 log_unit_warning(UNIT(s), "Got notification message from PID "PID_FMT", but reception only permitted for main PID "PID_FMT, pid, s->main_pid);
3616 else if (s->control_pid != 0)
3617 log_unit_warning(UNIT(s), "Got notification message from PID "PID_FMT", but reception only permitted for control PID "PID_FMT, pid, s->control_pid);
3618 else
3619 log_unit_warning(UNIT(s), "Got notification message from PID "PID_FMT", but reception only permitted for main PID and control PID which are currently not known", pid);
3620
3621 return false;
3622 }
3623
3624 return true;
3625}
3626
3627static void service_notify_message(
3628 Unit *u,
3629 const struct ucred *ucred,
3630 char **tags,
3631 FDSet *fds) {
3632
3633 Service *s = SERVICE(u);
3634 bool notify_dbus = false;
3635 const char *e;
3636 char **i;
3637 int r;
3638
3639 assert(u);
3640 assert(ucred);
3641
3642 if (!service_notify_message_authorized(SERVICE(u), ucred->pid, tags, fds))
3643 return;
3644
3645 if (DEBUG_LOGGING) {
3646 _cleanup_free_ char *cc = NULL;
3647
3648 cc = strv_join(tags, ", ");
3649 log_unit_debug(u, "Got notification message from PID "PID_FMT" (%s)", ucred->pid, isempty(cc) ? "n/a" : cc);
3650 }
3651
3652 /* Interpret MAINPID= */
3653 e = strv_find_startswith(tags, "MAINPID=");
3654 if (e && IN_SET(s->state, SERVICE_START, SERVICE_START_POST, SERVICE_RUNNING, SERVICE_RELOAD)) {
3655 pid_t new_main_pid;
3656
3657 if (parse_pid(e, &new_main_pid) < 0)
3658 log_unit_warning(u, "Failed to parse MAINPID= field in notification message, ignoring: %s", e);
3659 else if (!s->main_pid_known || new_main_pid != s->main_pid) {
3660
3661 r = service_is_suitable_main_pid(s, new_main_pid, LOG_WARNING);
3662 if (r == 0) {
3663 /* The new main PID is a bit suspicous, which is OK if the sender is privileged. */
3664
3665 if (ucred->uid == 0) {
3666 log_unit_debug(u, "New main PID "PID_FMT" does not belong to service, but we'll accept it as the request to change it came from a privileged process.", new_main_pid);
3667 r = 1;
3668 } else
3669 log_unit_debug(u, "New main PID "PID_FMT" does not belong to service, refusing.", new_main_pid);
3670 }
3671 if (r > 0) {
3672 service_set_main_pid(s, new_main_pid);
3673
3674 r = unit_watch_pid(UNIT(s), new_main_pid);
3675 if (r < 0)
3676 log_unit_warning_errno(UNIT(s), r, "Failed to watch new main PID "PID_FMT" for service: %m", new_main_pid);
3677
3678 notify_dbus = true;
3679 }
3680 }
3681 }
3682
3683 /* Interpret READY=/STOPPING=/RELOADING=. Last one wins. */
3684 STRV_FOREACH_BACKWARDS(i, tags) {
3685
3686 if (streq(*i, "READY=1")) {
3687 s->notify_state = NOTIFY_READY;
3688
3689 /* Type=notify services inform us about completed
3690 * initialization with READY=1 */
3691 if (s->type == SERVICE_NOTIFY && s->state == SERVICE_START)
3692 service_enter_start_post(s);
3693
3694 /* Sending READY=1 while we are reloading informs us
3695 * that the reloading is complete */
3696 if (s->state == SERVICE_RELOAD && s->control_pid == 0)
3697 service_enter_running(s, SERVICE_SUCCESS);
3698
3699 notify_dbus = true;
3700 break;
3701
3702 } else if (streq(*i, "RELOADING=1")) {
3703 s->notify_state = NOTIFY_RELOADING;
3704
3705 if (s->state == SERVICE_RUNNING)
3706 service_enter_reload_by_notify(s);
3707
3708 notify_dbus = true;
3709 break;
3710
3711 } else if (streq(*i, "STOPPING=1")) {
3712 s->notify_state = NOTIFY_STOPPING;
3713
3714 if (s->state == SERVICE_RUNNING)
3715 service_enter_stop_by_notify(s);
3716
3717 notify_dbus = true;
3718 break;
3719 }
3720 }
3721
3722 /* Interpret STATUS= */
3723 e = strv_find_startswith(tags, "STATUS=");
3724 if (e) {
3725 _cleanup_free_ char *t = NULL;
3726
3727 if (!isempty(e)) {
3728 /* Note that this size limit check is mostly paranoia: since the datagram size we are willing
3729 * to process is already limited to NOTIFY_BUFFER_MAX, this limit here should never be hit. */
3730 if (strlen(e) > STATUS_TEXT_MAX)
3731 log_unit_warning(u, "Status message overly long (%zu > %u), ignoring.", strlen(e), STATUS_TEXT_MAX);
3732 else if (!utf8_is_valid(e))
3733 log_unit_warning(u, "Status message in notification message is not UTF-8 clean, ignoring.");
3734 else {
3735 t = strdup(e);
3736 if (!t)
3737 log_oom();
3738 }
3739 }
3740
3741 if (!streq_ptr(s->status_text, t)) {
3742 free_and_replace(s->status_text, t);
3743 notify_dbus = true;
3744 }
3745 }
3746
3747 /* Interpret ERRNO= */
3748 e = strv_find_startswith(tags, "ERRNO=");
3749 if (e) {
3750 int status_errno;
3751
3752 status_errno = parse_errno(e);
3753 if (status_errno < 0)
3754 log_unit_warning_errno(u, status_errno,
3755 "Failed to parse ERRNO= field value '%s' in notification message: %m", e);
3756 else if (s->status_errno != status_errno) {
3757 s->status_errno = status_errno;
3758 notify_dbus = true;
3759 }
3760 }
3761
3762 /* Interpret EXTEND_TIMEOUT= */
3763 e = strv_find_startswith(tags, "EXTEND_TIMEOUT_USEC=");
3764 if (e) {
3765 usec_t extend_timeout_usec;
3766 if (safe_atou64(e, &extend_timeout_usec) < 0)
3767 log_unit_warning(u, "Failed to parse EXTEND_TIMEOUT_USEC=%s", e);
3768 else
3769 service_extend_timeout(s, extend_timeout_usec);
3770 }
3771
3772 /* Interpret WATCHDOG= */
3773 if (strv_find(tags, "WATCHDOG=1"))
3774 service_reset_watchdog(s);
3775
3776 e = strv_find_startswith(tags, "WATCHDOG_USEC=");
3777 if (e) {
3778 usec_t watchdog_override_usec;
3779 if (safe_atou64(e, &watchdog_override_usec) < 0)
3780 log_unit_warning(u, "Failed to parse WATCHDOG_USEC=%s", e);
3781 else
3782 service_override_watchdog_timeout(s, watchdog_override_usec);
3783 }
3784
3785 /* Process FD store messages. Either FDSTOREREMOVE=1 for removal, or FDSTORE=1 for addition. In both cases,
3786 * process FDNAME= for picking the file descriptor name to use. Note that FDNAME= is required when removing
3787 * fds, but optional when pushing in new fds, for compatibility reasons. */
3788 if (strv_find(tags, "FDSTOREREMOVE=1")) {
3789 const char *name;
3790
3791 name = strv_find_startswith(tags, "FDNAME=");
3792 if (!name || !fdname_is_valid(name))
3793 log_unit_warning(u, "FDSTOREREMOVE=1 requested, but no valid file descriptor name passed, ignoring.");
3794 else
3795 service_remove_fd_store(s, name);
3796
3797 } else if (strv_find(tags, "FDSTORE=1")) {
3798 const char *name;
3799
3800 name = strv_find_startswith(tags, "FDNAME=");
3801 if (name && !fdname_is_valid(name)) {
3802 log_unit_warning(u, "Passed FDNAME= name is invalid, ignoring.");
3803 name = NULL;
3804 }
3805
3806 (void) service_add_fd_store_set(s, fds, name);
3807 }
3808
3809 /* Notify clients about changed status or main pid */
3810 if (notify_dbus)
3811 unit_add_to_dbus_queue(u);
3812}
3813
3814static int service_get_timeout(Unit *u, usec_t *timeout) {
3815 Service *s = SERVICE(u);
3816 uint64_t t;
3817 int r;
3818
3819 if (!s->timer_event_source)
3820 return 0;
3821
3822 r = sd_event_source_get_time(s->timer_event_source, &t);
3823 if (r < 0)
3824 return r;
3825 if (t == USEC_INFINITY)
3826 return 0;
3827
3828 *timeout = t;
3829 return 1;
3830}
3831
3832static void service_bus_name_owner_change(
3833 Unit *u,
3834 const char *name,
3835 const char *old_owner,
3836 const char *new_owner) {
3837
3838 Service *s = SERVICE(u);
3839 int r;
3840
3841 assert(s);
3842 assert(name);
3843
3844 assert(streq(s->bus_name, name));
3845 assert(old_owner || new_owner);
3846
3847 if (old_owner && new_owner)
3848 log_unit_debug(u, "D-Bus name %s changed owner from %s to %s", name, old_owner, new_owner);
3849 else if (old_owner)
3850 log_unit_debug(u, "D-Bus name %s no longer registered by %s", name, old_owner);
3851 else
3852 log_unit_debug(u, "D-Bus name %s now registered by %s", name, new_owner);
3853
3854 s->bus_name_good = !!new_owner;
3855
3856 /* Track the current owner, so we can reconstruct changes after a daemon reload */
3857 r = free_and_strdup(&s->bus_name_owner, new_owner);
3858 if (r < 0) {
3859 log_unit_error_errno(u, r, "Unable to set new bus name owner %s: %m", new_owner);
3860 return;
3861 }
3862
3863 if (s->type == SERVICE_DBUS) {
3864
3865 /* service_enter_running() will figure out what to
3866 * do */
3867 if (s->state == SERVICE_RUNNING)
3868 service_enter_running(s, SERVICE_SUCCESS);
3869 else if (s->state == SERVICE_START && new_owner)
3870 service_enter_start_post(s);
3871
3872 } else if (new_owner &&
3873 s->main_pid <= 0 &&
3874 IN_SET(s->state,
3875 SERVICE_START,
3876 SERVICE_START_POST,
3877 SERVICE_RUNNING,
3878 SERVICE_RELOAD)) {
3879
3880 _cleanup_(sd_bus_creds_unrefp) sd_bus_creds *creds = NULL;
3881 pid_t pid;
3882
3883 /* Try to acquire PID from bus service */
3884
3885 r = sd_bus_get_name_creds(u->manager->api_bus, name, SD_BUS_CREDS_PID, &creds);
3886 if (r >= 0)
3887 r = sd_bus_creds_get_pid(creds, &pid);
3888 if (r >= 0) {
3889 log_unit_debug(u, "D-Bus name %s is now owned by process " PID_FMT, name, pid);
3890
3891 service_set_main_pid(s, pid);
3892 unit_watch_pid(UNIT(s), pid);
3893 }
3894 }
3895}
3896
3897int service_set_socket_fd(Service *s, int fd, Socket *sock, bool selinux_context_net) {
3898 _cleanup_free_ char *peer = NULL;
3899 int r;
3900
3901 assert(s);
3902 assert(fd >= 0);
3903
3904 /* This is called by the socket code when instantiating a new service for a stream socket and the socket needs
3905 * to be configured. We take ownership of the passed fd on success. */
3906
3907 if (UNIT(s)->load_state != UNIT_LOADED)
3908 return -EINVAL;
3909
3910 if (s->socket_fd >= 0)
3911 return -EBUSY;
3912
3913 if (s->state != SERVICE_DEAD)
3914 return -EAGAIN;
3915
3916 if (getpeername_pretty(fd, true, &peer) >= 0) {
3917
3918 if (UNIT(s)->description) {
3919 _cleanup_free_ char *a;
3920
3921 a = strjoin(UNIT(s)->description, " (", peer, ")");
3922 if (!a)
3923 return -ENOMEM;
3924
3925 r = unit_set_description(UNIT(s), a);
3926 } else
3927 r = unit_set_description(UNIT(s), peer);
3928
3929 if (r < 0)
3930 return r;
3931 }
3932
3933 r = unit_add_two_dependencies(UNIT(sock), UNIT_BEFORE, UNIT_TRIGGERS, UNIT(s), false, UNIT_DEPENDENCY_IMPLICIT);
3934 if (r < 0)
3935 return r;
3936
3937 s->socket_fd = fd;
3938 s->socket_fd_selinux_context_net = selinux_context_net;
3939
3940 unit_ref_set(&s->accept_socket, UNIT(s), UNIT(sock));
3941 return 0;
3942}
3943
3944static void service_reset_failed(Unit *u) {
3945 Service *s = SERVICE(u);
3946
3947 assert(s);
3948
3949 if (s->state == SERVICE_FAILED)
3950 service_set_state(s, SERVICE_DEAD);
3951
3952 s->result = SERVICE_SUCCESS;
3953 s->reload_result = SERVICE_SUCCESS;
3954 s->n_restarts = 0;
3955 s->flush_n_restarts = false;
3956}
3957
3958static int service_kill(Unit *u, KillWho who, int signo, sd_bus_error *error) {
3959 Service *s = SERVICE(u);
3960
3961 assert(s);
3962
3963 return unit_kill_common(u, who, signo, s->main_pid, s->control_pid, error);
3964}
3965
3966static int service_main_pid(Unit *u) {
3967 Service *s = SERVICE(u);
3968
3969 assert(s);
3970
3971 return s->main_pid;
3972}
3973
3974static int service_control_pid(Unit *u) {
3975 Service *s = SERVICE(u);
3976
3977 assert(s);
3978
3979 return s->control_pid;
3980}
3981
3982static bool service_needs_console(Unit *u) {
3983 Service *s = SERVICE(u);
3984
3985 assert(s);
3986
3987 /* We provide our own implementation of this here, instead of relying of the generic implementation
3988 * unit_needs_console() provides, since we want to return false if we are in SERVICE_EXITED state. */
3989
3990 if (!exec_context_may_touch_console(&s->exec_context))
3991 return false;
3992
3993 return IN_SET(s->state,
3994 SERVICE_START_PRE,
3995 SERVICE_START,
3996 SERVICE_START_POST,
3997 SERVICE_RUNNING,
3998 SERVICE_RELOAD,
3999 SERVICE_STOP,
4000 SERVICE_STOP_WATCHDOG,
4001 SERVICE_STOP_SIGTERM,
4002 SERVICE_STOP_SIGKILL,
4003 SERVICE_STOP_POST,
4004 SERVICE_FINAL_SIGTERM,
4005 SERVICE_FINAL_SIGKILL);
4006}
4007
4008static const char* const service_restart_table[_SERVICE_RESTART_MAX] = {
4009 [SERVICE_RESTART_NO] = "no",
4010 [SERVICE_RESTART_ON_SUCCESS] = "on-success",
4011 [SERVICE_RESTART_ON_FAILURE] = "on-failure",
4012 [SERVICE_RESTART_ON_ABNORMAL] = "on-abnormal",
4013 [SERVICE_RESTART_ON_WATCHDOG] = "on-watchdog",
4014 [SERVICE_RESTART_ON_ABORT] = "on-abort",
4015 [SERVICE_RESTART_ALWAYS] = "always",
4016};
4017
4018DEFINE_STRING_TABLE_LOOKUP(service_restart, ServiceRestart);
4019
4020static const char* const service_type_table[_SERVICE_TYPE_MAX] = {
4021 [SERVICE_SIMPLE] = "simple",
4022 [SERVICE_FORKING] = "forking",
4023 [SERVICE_ONESHOT] = "oneshot",
4024 [SERVICE_DBUS] = "dbus",
4025 [SERVICE_NOTIFY] = "notify",
4026 [SERVICE_IDLE] = "idle",
4027 [SERVICE_EXEC] = "exec",
4028};
4029
4030DEFINE_STRING_TABLE_LOOKUP(service_type, ServiceType);
4031
4032static const char* const service_exec_command_table[_SERVICE_EXEC_COMMAND_MAX] = {
4033 [SERVICE_EXEC_START_PRE] = "ExecStartPre",
4034 [SERVICE_EXEC_START] = "ExecStart",
4035 [SERVICE_EXEC_START_POST] = "ExecStartPost",
4036 [SERVICE_EXEC_RELOAD] = "ExecReload",
4037 [SERVICE_EXEC_STOP] = "ExecStop",
4038 [SERVICE_EXEC_STOP_POST] = "ExecStopPost",
4039};
4040
4041DEFINE_STRING_TABLE_LOOKUP(service_exec_command, ServiceExecCommand);
4042
4043static const char* const notify_state_table[_NOTIFY_STATE_MAX] = {
4044 [NOTIFY_UNKNOWN] = "unknown",
4045 [NOTIFY_READY] = "ready",
4046 [NOTIFY_RELOADING] = "reloading",
4047 [NOTIFY_STOPPING] = "stopping",
4048};
4049
4050DEFINE_STRING_TABLE_LOOKUP(notify_state, NotifyState);
4051
4052static const char* const service_result_table[_SERVICE_RESULT_MAX] = {
4053 [SERVICE_SUCCESS] = "success",
4054 [SERVICE_FAILURE_RESOURCES] = "resources",
4055 [SERVICE_FAILURE_PROTOCOL] = "protocol",
4056 [SERVICE_FAILURE_TIMEOUT] = "timeout",
4057 [SERVICE_FAILURE_EXIT_CODE] = "exit-code",
4058 [SERVICE_FAILURE_SIGNAL] = "signal",
4059 [SERVICE_FAILURE_CORE_DUMP] = "core-dump",
4060 [SERVICE_FAILURE_WATCHDOG] = "watchdog",
4061 [SERVICE_FAILURE_START_LIMIT_HIT] = "start-limit-hit",
4062};
4063
4064DEFINE_STRING_TABLE_LOOKUP(service_result, ServiceResult);
4065
4066const UnitVTable service_vtable = {
4067 .object_size = sizeof(Service),
4068 .exec_context_offset = offsetof(Service, exec_context),
4069 .cgroup_context_offset = offsetof(Service, cgroup_context),
4070 .kill_context_offset = offsetof(Service, kill_context),
4071 .exec_runtime_offset = offsetof(Service, exec_runtime),
4072 .dynamic_creds_offset = offsetof(Service, dynamic_creds),
4073
4074 .sections =
4075 "Unit\0"
4076 "Service\0"
4077 "Install\0",
4078 .private_section = "Service",
4079
4080 .can_transient = true,
4081 .can_delegate = true,
4082
4083 .init = service_init,
4084 .done = service_done,
4085 .load = service_load,
4086 .release_resources = service_release_resources,
4087
4088 .coldplug = service_coldplug,
4089
4090 .dump = service_dump,
4091
4092 .start = service_start,
4093 .stop = service_stop,
4094 .reload = service_reload,
4095
4096 .can_reload = service_can_reload,
4097
4098 .kill = service_kill,
4099
4100 .serialize = service_serialize,
4101 .deserialize_item = service_deserialize_item,
4102
4103 .active_state = service_active_state,
4104 .sub_state_to_string = service_sub_state_to_string,
4105
4106 .will_restart = service_will_restart,
4107
4108 .may_gc = service_may_gc,
4109
4110 .sigchld_event = service_sigchld_event,
4111
4112 .reset_failed = service_reset_failed,
4113
4114 .notify_cgroup_empty = service_notify_cgroup_empty_event,
4115 .notify_message = service_notify_message,
4116
4117 .main_pid = service_main_pid,
4118 .control_pid = service_control_pid,
4119
4120 .bus_name_owner_change = service_bus_name_owner_change,
4121
4122 .bus_vtable = bus_service_vtable,
4123 .bus_set_property = bus_service_set_property,
4124 .bus_commit_properties = bus_service_commit_properties,
4125
4126 .get_timeout = service_get_timeout,
4127 .needs_console = service_needs_console,
4128
4129 .status_message_formats = {
4130 .starting_stopping = {
4131 [0] = "Starting %s...",
4132 [1] = "Stopping %s...",
4133 },
4134 .finished_start_job = {
4135 [JOB_DONE] = "Started %s.",
4136 [JOB_FAILED] = "Failed to start %s.",
4137 },
4138 .finished_stop_job = {
4139 [JOB_DONE] = "Stopped %s.",
4140 [JOB_FAILED] = "Stopped (with error) %s.",
4141 },
4142 },
4143};
Unnamed repository; edit this file 'description' to name the repository.