]> git.ipfire.org Git - thirdparty/systemd.git/blob - src/core/service.c
projects / thirdparty / systemd.git / blob
? search:


d7bdeb7ccaf8b460ad83154c79b56a7b989dff3d
[thirdparty/systemd.git] / src / core / service.c
1 /* SPDX-License-Identifier: LGPL-2.1-or-later */
2
3 #include <errno.h>
4 #include <sys/stat.h>
5 #include <sys/types.h>
6 #include <unistd.h>
7
8 #include "sd-messages.h"
9
10 #include "alloc-util.h"
11 #include "async.h"
12 #include "bus-error.h"
13 #include "bus-kernel.h"
14 #include "bus-util.h"
15 #include "dbus-service.h"
16 #include "dbus-unit.h"
17 #include "def.h"
18 #include "env-util.h"
19 #include "escape.h"
20 #include "exit-status.h"
21 #include "fd-util.h"
22 #include "fileio.h"
23 #include "format-util.h"
24 #include "fs-util.h"
25 #include "load-dropin.h"
26 #include "load-fragment.h"
27 #include "log.h"
28 #include "manager.h"
29 #include "parse-util.h"
30 #include "path-util.h"
31 #include "process-util.h"
32 #include "serialize.h"
33 #include "service.h"
34 #include "signal-util.h"
35 #include "special.h"
36 #include "stdio-util.h"
37 #include "string-table.h"
38 #include "string-util.h"
39 #include "strv.h"
40 #include "unit-name.h"
41 #include "unit.h"
42 #include "utf8.h"
43 #include "util.h"
44
45 static const UnitActiveState state_translation_table[_SERVICE_STATE_MAX] = {
46 [SERVICE_DEAD] = UNIT_INACTIVE,
47 [SERVICE_CONDITION] = UNIT_ACTIVATING,
48 [SERVICE_START_PRE] = UNIT_ACTIVATING,
49 [SERVICE_START] = UNIT_ACTIVATING,
50 [SERVICE_START_POST] = UNIT_ACTIVATING,
51 [SERVICE_RUNNING] = UNIT_ACTIVE,
52 [SERVICE_EXITED] = UNIT_ACTIVE,
53 [SERVICE_RELOAD] = UNIT_RELOADING,
54 [SERVICE_STOP] = UNIT_DEACTIVATING,
55 [SERVICE_STOP_WATCHDOG] = UNIT_DEACTIVATING,
56 [SERVICE_STOP_SIGTERM] = UNIT_DEACTIVATING,
57 [SERVICE_STOP_SIGKILL] = UNIT_DEACTIVATING,
58 [SERVICE_STOP_POST] = UNIT_DEACTIVATING,
59 [SERVICE_FINAL_WATCHDOG] = UNIT_DEACTIVATING,
60 [SERVICE_FINAL_SIGTERM] = UNIT_DEACTIVATING,
61 [SERVICE_FINAL_SIGKILL] = UNIT_DEACTIVATING,
62 [SERVICE_FAILED] = UNIT_FAILED,
63 [SERVICE_AUTO_RESTART] = UNIT_ACTIVATING,
64 [SERVICE_CLEANING] = UNIT_MAINTENANCE,
65 };
66
67 /* For Type=idle we never want to delay any other jobs, hence we
68 * consider idle jobs active as soon as we start working on them */
69 static const UnitActiveState state_translation_table_idle[_SERVICE_STATE_MAX] = {
70 [SERVICE_DEAD] = UNIT_INACTIVE,
71 [SERVICE_CONDITION] = UNIT_ACTIVE,
72 [SERVICE_START_PRE] = UNIT_ACTIVE,
73 [SERVICE_START] = UNIT_ACTIVE,
74 [SERVICE_START_POST] = UNIT_ACTIVE,
75 [SERVICE_RUNNING] = UNIT_ACTIVE,
76 [SERVICE_EXITED] = UNIT_ACTIVE,
77 [SERVICE_RELOAD] = UNIT_RELOADING,
78 [SERVICE_STOP] = UNIT_DEACTIVATING,
79 [SERVICE_STOP_WATCHDOG] = UNIT_DEACTIVATING,
80 [SERVICE_STOP_SIGTERM] = UNIT_DEACTIVATING,
81 [SERVICE_STOP_SIGKILL] = UNIT_DEACTIVATING,
82 [SERVICE_STOP_POST] = UNIT_DEACTIVATING,
83 [SERVICE_FINAL_WATCHDOG] = UNIT_DEACTIVATING,
84 [SERVICE_FINAL_SIGTERM] = UNIT_DEACTIVATING,
85 [SERVICE_FINAL_SIGKILL] = UNIT_DEACTIVATING,
86 [SERVICE_FAILED] = UNIT_FAILED,
87 [SERVICE_AUTO_RESTART] = UNIT_ACTIVATING,
88 [SERVICE_CLEANING] = UNIT_MAINTENANCE,
89 };
90
91 static int service_dispatch_inotify_io(sd_event_source *source, int fd, uint32_t events, void *userdata);
92 static int service_dispatch_timer(sd_event_source *source, usec_t usec, void *userdata);
93 static int service_dispatch_watchdog(sd_event_source *source, usec_t usec, void *userdata);
94 static int service_dispatch_exec_io(sd_event_source *source, int fd, uint32_t events, void *userdata);
95
96 static void service_enter_signal(Service *s, ServiceState state, ServiceResult f);
97 static void service_enter_reload_by_notify(Service *s);
98
99 static void service_init(Unit *u) {
100 Service *s = SERVICE(u);
101
102 assert(u);
103 assert(u->load_state == UNIT_STUB);
104
105 s->timeout_start_usec = u->manager->default_timeout_start_usec;
106 s->timeout_stop_usec = u->manager->default_timeout_stop_usec;
107 s->timeout_abort_usec = u->manager->default_timeout_abort_usec;
108 s->timeout_abort_set = u->manager->default_timeout_abort_set;
109 s->restart_usec = u->manager->default_restart_usec;
110 s->runtime_max_usec = USEC_INFINITY;
111 s->type = _SERVICE_TYPE_INVALID;
112 s->socket_fd = -1;
113 s->stdin_fd = s->stdout_fd = s->stderr_fd = -1;
114 s->guess_main_pid = true;
115
116 s->control_command_id = _SERVICE_EXEC_COMMAND_INVALID;
117
118 s->exec_context.keyring_mode = MANAGER_IS_SYSTEM(u->manager) ?
119 EXEC_KEYRING_PRIVATE : EXEC_KEYRING_INHERIT;
120
121 s->watchdog_original_usec = USEC_INFINITY;
122
123 s->oom_policy = _OOM_POLICY_INVALID;
124 }
125
126 static void service_unwatch_control_pid(Service *s) {
127 assert(s);
128
129 if (s->control_pid <= 0)
130 return;
131
132 unit_unwatch_pid(UNIT(s), s->control_pid);
133 s->control_pid = 0;
134 }
135
136 static void service_unwatch_main_pid(Service *s) {
137 assert(s);
138
139 if (s->main_pid <= 0)
140 return;
141
142 unit_unwatch_pid(UNIT(s), s->main_pid);
143 s->main_pid = 0;
144 }
145
146 static void service_unwatch_pid_file(Service *s) {
147 if (!s->pid_file_pathspec)
148 return;
149
150 log_unit_debug(UNIT(s), "Stopping watch for PID file %s", s->pid_file_pathspec->path);
151 path_spec_unwatch(s->pid_file_pathspec);
152 path_spec_done(s->pid_file_pathspec);
153 s->pid_file_pathspec = mfree(s->pid_file_pathspec);
154 }
155
156 static int service_set_main_pid(Service *s, pid_t pid) {
157 assert(s);
158
159 if (pid <= 1)
160 return -EINVAL;
161
162 if (pid == getpid_cached())
163 return -EINVAL;
164
165 if (s->main_pid == pid && s->main_pid_known)
166 return 0;
167
168 if (s->main_pid != pid) {
169 service_unwatch_main_pid(s);
170 exec_status_start(&s->main_exec_status, pid);
171 }
172
173 s->main_pid = pid;
174 s->main_pid_known = true;
175 s->main_pid_alien = pid_is_my_child(pid) == 0;
176
177 if (s->main_pid_alien)
178 log_unit_warning(UNIT(s), "Supervising process "PID_FMT" which is not our child. We'll most likely not notice when it exits.", pid);
179
180 return 0;
181 }
182
183 void service_close_socket_fd(Service *s) {
184 assert(s);
185
186 /* Undo the effect of service_set_socket_fd(). */
187
188 s->socket_fd = asynchronous_close(s->socket_fd);
189
190 if (UNIT_ISSET(s->accept_socket)) {
191 socket_connection_unref(SOCKET(UNIT_DEREF(s->accept_socket)));
192 unit_ref_unset(&s->accept_socket);
193 }
194 }
195
196 static void service_stop_watchdog(Service *s) {
197 assert(s);
198
199 s->watchdog_event_source = sd_event_source_unref(s->watchdog_event_source);
200 s->watchdog_timestamp = DUAL_TIMESTAMP_NULL;
201 }
202
203 static void service_start_watchdog(Service *s) {
204 usec_t watchdog_usec;
205 int r;
206
207 assert(s);
208
209 watchdog_usec = service_get_watchdog_usec(s);
210 if (IN_SET(watchdog_usec, 0, USEC_INFINITY)) {
211 service_stop_watchdog(s);
212 return;
213 }
214
215 if (s->watchdog_event_source) {
216 r = sd_event_source_set_time(s->watchdog_event_source, usec_add(s->watchdog_timestamp.monotonic, watchdog_usec));
217 if (r < 0) {
218 log_unit_warning_errno(UNIT(s), r, "Failed to reset watchdog timer: %m");
219 return;
220 }
221
222 r = sd_event_source_set_enabled(s->watchdog_event_source, SD_EVENT_ONESHOT);
223 } else {
224 r = sd_event_add_time(
225 UNIT(s)->manager->event,
226 &s->watchdog_event_source,
227 CLOCK_MONOTONIC,
228 usec_add(s->watchdog_timestamp.monotonic, watchdog_usec), 0,
229 service_dispatch_watchdog, s);
230 if (r < 0) {
231 log_unit_warning_errno(UNIT(s), r, "Failed to add watchdog timer: %m");
232 return;
233 }
234
235 (void) sd_event_source_set_description(s->watchdog_event_source, "service-watchdog");
236
237 /* Let's process everything else which might be a sign
238 * of living before we consider a service died. */
239 r = sd_event_source_set_priority(s->watchdog_event_source, SD_EVENT_PRIORITY_IDLE);
240 }
241 if (r < 0)
242 log_unit_warning_errno(UNIT(s), r, "Failed to install watchdog timer: %m");
243 }
244
245 static void service_extend_event_source_timeout(Service *s, sd_event_source *source, usec_t extended) {
246 usec_t current;
247 int r;
248
249 assert(s);
250
251 /* Extends the specified event source timer to at least the specified time, unless it is already later
252 * anyway. */
253
254 if (!source)
255 return;
256
257 r = sd_event_source_get_time(source, &current);
258 if (r < 0) {
259 const char *desc;
260 (void) sd_event_source_get_description(s->timer_event_source, &desc);
261 log_unit_warning_errno(UNIT(s), r, "Failed to retrieve timeout time for event source '%s', ignoring: %m", strna(desc));
262 return;
263 }
264
265 if (current >= extended) /* Current timeout is already longer, ignore this. */
266 return;
267
268 r = sd_event_source_set_time(source, extended);
269 if (r < 0) {
270 const char *desc;
271 (void) sd_event_source_get_description(s->timer_event_source, &desc);
272 log_unit_warning_errno(UNIT(s), r, "Failed to set timeout time for even source '%s', ignoring %m", strna(desc));
273 }
274 }
275
276 static void service_extend_timeout(Service *s, usec_t extend_timeout_usec) {
277 usec_t extended;
278
279 assert(s);
280
281 if (IN_SET(extend_timeout_usec, 0, USEC_INFINITY))
282 return;
283
284 extended = usec_add(now(CLOCK_MONOTONIC), extend_timeout_usec);
285
286 service_extend_event_source_timeout(s, s->timer_event_source, extended);
287 service_extend_event_source_timeout(s, s->watchdog_event_source, extended);
288 }
289
290 static void service_reset_watchdog(Service *s) {
291 assert(s);
292
293 dual_timestamp_get(&s->watchdog_timestamp);
294 service_start_watchdog(s);
295 }
296
297 static void service_override_watchdog_timeout(Service *s, usec_t watchdog_override_usec) {
298 assert(s);
299
300 s->watchdog_override_enable = true;
301 s->watchdog_override_usec = watchdog_override_usec;
302 service_reset_watchdog(s);
303
304 log_unit_debug(UNIT(s), "watchdog_usec="USEC_FMT, s->watchdog_usec);
305 log_unit_debug(UNIT(s), "watchdog_override_usec="USEC_FMT, s->watchdog_override_usec);
306 }
307
308 static void service_fd_store_unlink(ServiceFDStore *fs) {
309
310 if (!fs)
311 return;
312
313 if (fs->service) {
314 assert(fs->service->n_fd_store > 0);
315 LIST_REMOVE(fd_store, fs->service->fd_store, fs);
316 fs->service->n_fd_store--;
317 }
318
319 sd_event_source_disable_unref(fs->event_source);
320
321 free(fs->fdname);
322 safe_close(fs->fd);
323 free(fs);
324 }
325
326 static void service_release_fd_store(Service *s) {
327 assert(s);
328
329 if (s->n_keep_fd_store > 0)
330 return;
331
332 log_unit_debug(UNIT(s), "Releasing all stored fds");
333 while (s->fd_store)
334 service_fd_store_unlink(s->fd_store);
335
336 assert(s->n_fd_store == 0);
337 }
338
339 static void service_release_resources(Unit *u) {
340 Service *s = SERVICE(u);
341
342 assert(s);
343
344 if (!s->fd_store && s->stdin_fd < 0 && s->stdout_fd < 0 && s->stderr_fd < 0)
345 return;
346
347 log_unit_debug(u, "Releasing resources.");
348
349 s->stdin_fd = safe_close(s->stdin_fd);
350 s->stdout_fd = safe_close(s->stdout_fd);
351 s->stderr_fd = safe_close(s->stderr_fd);
352
353 service_release_fd_store(s);
354 }
355
356 static void service_done(Unit *u) {
357 Service *s = SERVICE(u);
358
359 assert(s);
360
361 s->pid_file = mfree(s->pid_file);
362 s->status_text = mfree(s->status_text);
363
364 s->exec_runtime = exec_runtime_unref(s->exec_runtime, false);
365 exec_command_free_array(s->exec_command, _SERVICE_EXEC_COMMAND_MAX);
366 s->control_command = NULL;
367 s->main_command = NULL;
368
369 dynamic_creds_unref(&s->dynamic_creds);
370
371 exit_status_set_free(&s->restart_prevent_status);
372 exit_status_set_free(&s->restart_force_status);
373 exit_status_set_free(&s->success_status);
374
375 /* This will leak a process, but at least no memory or any of
376 * our resources */
377 service_unwatch_main_pid(s);
378 service_unwatch_control_pid(s);
379 service_unwatch_pid_file(s);
380
381 if (s->bus_name) {
382 unit_unwatch_bus_name(u, s->bus_name);
383 s->bus_name = mfree(s->bus_name);
384 }
385
386 s->bus_name_owner = mfree(s->bus_name_owner);
387
388 s->usb_function_descriptors = mfree(s->usb_function_descriptors);
389 s->usb_function_strings = mfree(s->usb_function_strings);
390
391 service_close_socket_fd(s);
392 s->peer = socket_peer_unref(s->peer);
393
394 unit_ref_unset(&s->accept_socket);
395
396 service_stop_watchdog(s);
397
398 s->timer_event_source = sd_event_source_unref(s->timer_event_source);
399 s->exec_fd_event_source = sd_event_source_unref(s->exec_fd_event_source);
400
401 service_release_resources(u);
402 }
403
404 static int on_fd_store_io(sd_event_source *e, int fd, uint32_t revents, void *userdata) {
405 ServiceFDStore *fs = userdata;
406
407 assert(e);
408 assert(fs);
409
410 /* If we get either EPOLLHUP or EPOLLERR, it's time to remove this entry from the fd store */
411 log_unit_debug(UNIT(fs->service),
412 "Received %s on stored fd %d (%s), closing.",
413 revents & EPOLLERR ? "EPOLLERR" : "EPOLLHUP",
414 fs->fd, strna(fs->fdname));
415 service_fd_store_unlink(fs);
416 return 0;
417 }
418
419 static int service_add_fd_store(Service *s, int fd, const char *name, bool do_poll) {
420 ServiceFDStore *fs;
421 int r;
422
423 /* fd is always consumed if we return >= 0 */
424
425 assert(s);
426 assert(fd >= 0);
427
428 if (s->n_fd_store >= s->n_fd_store_max)
429 return -EXFULL; /* Our store is full.
430 * Use this errno rather than E[NM]FILE to distinguish from
431 * the case where systemd itself hits the file limit. */
432
433 LIST_FOREACH(fd_store, fs, s->fd_store) {
434 r = same_fd(fs->fd, fd);
435 if (r < 0)
436 return r;
437 if (r > 0) {
438 safe_close(fd);
439 return 0; /* fd already included */
440 }
441 }
442
443 fs = new(ServiceFDStore, 1);
444 if (!fs)
445 return -ENOMEM;
446
447 *fs = (ServiceFDStore) {
448 .fd = fd,
449 .service = s,
450 .do_poll = do_poll,
451 .fdname = strdup(name ?: "stored"),
452 };
453
454 if (!fs->fdname) {
455 free(fs);
456 return -ENOMEM;
457 }
458
459 if (do_poll) {
460 r = sd_event_add_io(UNIT(s)->manager->event, &fs->event_source, fd, 0, on_fd_store_io, fs);
461 if (r < 0 && r != -EPERM) { /* EPERM indicates fds that aren't pollable, which is OK */
462 free(fs->fdname);
463 free(fs);
464 return r;
465 } else if (r >= 0)
466 (void) sd_event_source_set_description(fs->event_source, "service-fd-store");
467 }
468
469 LIST_PREPEND(fd_store, s->fd_store, fs);
470 s->n_fd_store++;
471
472 return 1; /* fd newly stored */
473 }
474
475 static int service_add_fd_store_set(Service *s, FDSet *fds, const char *name, bool do_poll) {
476 int r;
477
478 assert(s);
479
480 while (fdset_size(fds) > 0) {
481 _cleanup_close_ int fd = -1;
482
483 fd = fdset_steal_first(fds);
484 if (fd < 0)
485 break;
486
487 r = service_add_fd_store(s, fd, name, do_poll);
488 if (r == -EXFULL)
489 return log_unit_warning_errno(UNIT(s), r,
490 "Cannot store more fds than FileDescriptorStoreMax=%u, closing remaining.",
491 s->n_fd_store_max);
492 if (r < 0)
493 return log_unit_error_errno(UNIT(s), r, "Failed to add fd to store: %m");
494 if (r > 0)
495 log_unit_debug(UNIT(s), "Added fd %u (%s) to fd store.", fd, strna(name));
496 fd = -1;
497 }
498
499 return 0;
500 }
501
502 static void service_remove_fd_store(Service *s, const char *name) {
503 ServiceFDStore *fs, *n;
504
505 assert(s);
506 assert(name);
507
508 LIST_FOREACH_SAFE(fd_store, fs, n, s->fd_store) {
509 if (!streq(fs->fdname, name))
510 continue;
511
512 log_unit_debug(UNIT(s), "Got explicit request to remove fd %i (%s), closing.", fs->fd, name);
513 service_fd_store_unlink(fs);
514 }
515 }
516
517 static int service_arm_timer(Service *s, usec_t usec) {
518 int r;
519
520 assert(s);
521
522 if (s->timer_event_source) {
523 r = sd_event_source_set_time(s->timer_event_source, usec);
524 if (r < 0)
525 return r;
526
527 return sd_event_source_set_enabled(s->timer_event_source, SD_EVENT_ONESHOT);
528 }
529
530 if (usec == USEC_INFINITY)
531 return 0;
532
533 r = sd_event_add_time(
534 UNIT(s)->manager->event,
535 &s->timer_event_source,
536 CLOCK_MONOTONIC,
537 usec, 0,
538 service_dispatch_timer, s);
539 if (r < 0)
540 return r;
541
542 (void) sd_event_source_set_description(s->timer_event_source, "service-timer");
543
544 return 0;
545 }
546
547 static int service_verify(Service *s) {
548 assert(s);
549 assert(UNIT(s)->load_state == UNIT_LOADED);
550
551 if (!s->exec_command[SERVICE_EXEC_START] && !s->exec_command[SERVICE_EXEC_STOP]
552 && UNIT(s)->success_action == EMERGENCY_ACTION_NONE) {
553 /* FailureAction= only makes sense if one of the start or stop commands is specified.
554 * SuccessAction= will be executed unconditionally if no commands are specified. Hence,
555 * either a command or SuccessAction= are required. */
556
557 log_unit_error(UNIT(s), "Service has no ExecStart=, ExecStop=, or SuccessAction=. Refusing.");
558 return -ENOEXEC;
559 }
560
561 if (s->type != SERVICE_ONESHOT && !s->exec_command[SERVICE_EXEC_START]) {
562 log_unit_error(UNIT(s), "Service has no ExecStart= setting, which is only allowed for Type=oneshot services. Refusing.");
563 return -ENOEXEC;
564 }
565
566 if (!s->remain_after_exit && !s->exec_command[SERVICE_EXEC_START] && UNIT(s)->success_action == EMERGENCY_ACTION_NONE) {
567 log_unit_error(UNIT(s), "Service has no ExecStart= and no SuccessAction= settings and does not have RemainAfterExit=yes set. Refusing.");
568 return -ENOEXEC;
569 }
570
571 if (s->type != SERVICE_ONESHOT && s->exec_command[SERVICE_EXEC_START]->command_next) {
572 log_unit_error(UNIT(s), "Service has more than one ExecStart= setting, which is only allowed for Type=oneshot services. Refusing.");
573 return -ENOEXEC;
574 }
575
576 if (s->type == SERVICE_ONESHOT
577 && !IN_SET(s->restart, SERVICE_RESTART_NO, SERVICE_RESTART_ON_FAILURE, SERVICE_RESTART_ON_ABNORMAL, SERVICE_RESTART_ON_WATCHDOG, SERVICE_RESTART_ON_ABORT)) {
578 log_unit_error(UNIT(s), "Service has Restart= set to either always or on-success, which isn't allowed for Type=oneshot services. Refusing.");
579 return -ENOEXEC;
580 }
581
582 if (s->type == SERVICE_ONESHOT && !exit_status_set_is_empty(&s->restart_force_status)) {
583 log_unit_error(UNIT(s), "Service has RestartForceStatus= set, which isn't allowed for Type=oneshot services. Refusing.");
584 return -ENOEXEC;
585 }
586
587 if (s->type == SERVICE_DBUS && !s->bus_name) {
588 log_unit_error(UNIT(s), "Service is of type D-Bus but no D-Bus service name has been specified. Refusing.");
589 return -ENOEXEC;
590 }
591
592 if (s->exec_context.pam_name && !IN_SET(s->kill_context.kill_mode, KILL_CONTROL_GROUP, KILL_MIXED)) {
593 log_unit_error(UNIT(s), "Service has PAM enabled. Kill mode must be set to 'control-group' or 'mixed'. Refusing.");
594 return -ENOEXEC;
595 }
596
597 if (s->usb_function_descriptors && !s->usb_function_strings)
598 log_unit_warning(UNIT(s), "Service has USBFunctionDescriptors= setting, but no USBFunctionStrings=. Ignoring.");
599
600 if (!s->usb_function_descriptors && s->usb_function_strings)
601 log_unit_warning(UNIT(s), "Service has USBFunctionStrings= setting, but no USBFunctionDescriptors=. Ignoring.");
602
603 if (s->runtime_max_usec != USEC_INFINITY && s->type == SERVICE_ONESHOT)
604 log_unit_warning(UNIT(s), "RuntimeMaxSec= has no effect in combination with Type=oneshot. Ignoring.");
605
606 return 0;
607 }
608
609 static int service_add_default_dependencies(Service *s) {
610 int r;
611
612 assert(s);
613
614 if (!UNIT(s)->default_dependencies)
615 return 0;
616
617 /* Add a number of automatic dependencies useful for the
618 * majority of services. */
619
620 if (MANAGER_IS_SYSTEM(UNIT(s)->manager)) {
621 /* First, pull in the really early boot stuff, and
622 * require it, so that we fail if we can't acquire
623 * it. */
624
625 r = unit_add_two_dependencies_by_name(UNIT(s), UNIT_AFTER, UNIT_REQUIRES, SPECIAL_SYSINIT_TARGET, true, UNIT_DEPENDENCY_DEFAULT);
626 if (r < 0)
627 return r;
628 } else {
629
630 /* In the --user instance there's no sysinit.target,
631 * in that case require basic.target instead. */
632
633 r = unit_add_dependency_by_name(UNIT(s), UNIT_REQUIRES, SPECIAL_BASIC_TARGET, true, UNIT_DEPENDENCY_DEFAULT);
634 if (r < 0)
635 return r;
636 }
637
638 /* Second, if the rest of the base system is in the same
639 * transaction, order us after it, but do not pull it in or
640 * even require it. */
641 r = unit_add_dependency_by_name(UNIT(s), UNIT_AFTER, SPECIAL_BASIC_TARGET, true, UNIT_DEPENDENCY_DEFAULT);
642 if (r < 0)
643 return r;
644
645 /* Third, add us in for normal shutdown. */
646 return unit_add_two_dependencies_by_name(UNIT(s), UNIT_BEFORE, UNIT_CONFLICTS, SPECIAL_SHUTDOWN_TARGET, true, UNIT_DEPENDENCY_DEFAULT);
647 }
648
649 static void service_fix_stdio(Service *s) {
650 assert(s);
651
652 /* Note that EXEC_INPUT_NULL and EXEC_OUTPUT_INHERIT play a special role here: they are both the
653 * default value that is subject to automatic overriding triggered by other settings and an explicit
654 * choice the user can make. We don't distinguish between these cases currently. */
655
656 if (s->exec_context.std_input == EXEC_INPUT_NULL &&
657 s->exec_context.stdin_data_size > 0)
658 s->exec_context.std_input = EXEC_INPUT_DATA;
659
660 if (IN_SET(s->exec_context.std_input,
661 EXEC_INPUT_TTY,
662 EXEC_INPUT_TTY_FORCE,
663 EXEC_INPUT_TTY_FAIL,
664 EXEC_INPUT_SOCKET,
665 EXEC_INPUT_NAMED_FD))
666 return;
667
668 /* We assume these listed inputs refer to bidirectional streams, and hence duplicating them from
669 * stdin to stdout/stderr makes sense and hence leaving EXEC_OUTPUT_INHERIT in place makes sense,
670 * too. Outputs such as regular files or sealed data memfds otoh don't really make sense to be
671 * duplicated for both input and output at the same time (since they then would cause a feedback
672 * loop), hence override EXEC_OUTPUT_INHERIT with the default stderr/stdout setting. */
673
674 if (s->exec_context.std_error == EXEC_OUTPUT_INHERIT &&
675 s->exec_context.std_output == EXEC_OUTPUT_INHERIT)
676 s->exec_context.std_error = UNIT(s)->manager->default_std_error;
677
678 if (s->exec_context.std_output == EXEC_OUTPUT_INHERIT)
679 s->exec_context.std_output = UNIT(s)->manager->default_std_output;
680 }
681
682 static int service_setup_bus_name(Service *s) {
683 int r;
684
685 assert(s);
686
687 if (s->type != SERVICE_DBUS)
688 return 0;
689
690 r = unit_add_dependency_by_name(UNIT(s), UNIT_REQUIRES, SPECIAL_DBUS_SOCKET, true, UNIT_DEPENDENCY_FILE);
691 if (r < 0)
692 return log_unit_error_errno(UNIT(s), r, "Failed to add dependency on " SPECIAL_DBUS_SOCKET ": %m");
693
694 /* We always want to be ordered against dbus.socket if both are in the transaction. */
695 r = unit_add_dependency_by_name(UNIT(s), UNIT_AFTER, SPECIAL_DBUS_SOCKET, true, UNIT_DEPENDENCY_FILE);
696 if (r < 0)
697 return log_unit_error_errno(UNIT(s), r, "Failed to add dependency on " SPECIAL_DBUS_SOCKET ": %m");
698
699 r = unit_watch_bus_name(UNIT(s), s->bus_name);
700 if (r == -EEXIST)
701 return log_unit_error_errno(UNIT(s), r, "Two services allocated for the same bus name %s, refusing operation.", s->bus_name);
702 if (r < 0)
703 return log_unit_error_errno(UNIT(s), r, "Cannot watch bus name %s: %m", s->bus_name);
704
705 return 0;
706 }
707
708 static int service_add_extras(Service *s) {
709 int r;
710
711 assert(s);
712
713 if (s->type == _SERVICE_TYPE_INVALID) {
714 /* Figure out a type automatically */
715 if (s->bus_name)
716 s->type = SERVICE_DBUS;
717 else if (s->exec_command[SERVICE_EXEC_START])
718 s->type = SERVICE_SIMPLE;
719 else
720 s->type = SERVICE_ONESHOT;
721 }
722
723 /* Oneshot services have disabled start timeout by default */
724 if (s->type == SERVICE_ONESHOT && !s->start_timeout_defined)
725 s->timeout_start_usec = USEC_INFINITY;
726
727 service_fix_stdio(s);
728
729 r = unit_patch_contexts(UNIT(s));
730 if (r < 0)
731 return r;
732
733 r = unit_add_exec_dependencies(UNIT(s), &s->exec_context);
734 if (r < 0)
735 return r;
736
737 r = unit_set_default_slice(UNIT(s));
738 if (r < 0)
739 return r;
740
741 /* If the service needs the notify socket, let's enable it automatically. */
742 if (s->notify_access == NOTIFY_NONE &&
743 (s->type == SERVICE_NOTIFY || s->watchdog_usec > 0 || s->n_fd_store_max > 0))
744 s->notify_access = NOTIFY_MAIN;
745
746 /* If no OOM policy was explicitly set, then default to the configure default OOM policy. Except when
747 * delegation is on, in that case it we assume the payload knows better what to do and can process
748 * things in a more focused way. */
749 if (s->oom_policy < 0)
750 s->oom_policy = s->cgroup_context.delegate ? OOM_CONTINUE : UNIT(s)->manager->default_oom_policy;
751
752 /* Let the kernel do the killing if that's requested. */
753 s->cgroup_context.memory_oom_group = s->oom_policy == OOM_KILL;
754
755 r = service_add_default_dependencies(s);
756 if (r < 0)
757 return r;
758
759 r = service_setup_bus_name(s);
760 if (r < 0)
761 return r;
762
763 return 0;
764 }
765
766 static int service_load(Unit *u) {
767 Service *s = SERVICE(u);
768 int r;
769
770 r = unit_load_fragment_and_dropin(u, true);
771 if (r < 0)
772 return r;
773
774 if (u->load_state != UNIT_LOADED)
775 return 0;
776
777 /* This is a new unit? Then let's add in some extras */
778 r = service_add_extras(s);
779 if (r < 0)
780 return r;
781
782 return service_verify(s);
783 }
784
785 static void service_dump(Unit *u, FILE *f, const char *prefix) {
786 char buf_restart[FORMAT_TIMESPAN_MAX], buf_start[FORMAT_TIMESPAN_MAX], buf_stop[FORMAT_TIMESPAN_MAX],
787 buf_runtime[FORMAT_TIMESPAN_MAX], buf_watchdog[FORMAT_TIMESPAN_MAX], buf_abort[FORMAT_TIMESPAN_MAX];
788 ServiceExecCommand c;
789 Service *s = SERVICE(u);
790 const char *prefix2;
791
792 assert(s);
793
794 prefix = strempty(prefix);
795 prefix2 = strjoina(prefix, "\t");
796
797 fprintf(f,
798 "%sService State: %s\n"
799 "%sResult: %s\n"
800 "%sReload Result: %s\n"
801 "%sClean Result: %s\n"
802 "%sPermissionsStartOnly: %s\n"
803 "%sRootDirectoryStartOnly: %s\n"
804 "%sRemainAfterExit: %s\n"
805 "%sGuessMainPID: %s\n"
806 "%sType: %s\n"
807 "%sRestart: %s\n"
808 "%sNotifyAccess: %s\n"
809 "%sNotifyState: %s\n"
810 "%sOOMPolicy: %s\n",
811 prefix, service_state_to_string(s->state),
812 prefix, service_result_to_string(s->result),
813 prefix, service_result_to_string(s->reload_result),
814 prefix, service_result_to_string(s->clean_result),
815 prefix, yes_no(s->permissions_start_only),
816 prefix, yes_no(s->root_directory_start_only),
817 prefix, yes_no(s->remain_after_exit),
818 prefix, yes_no(s->guess_main_pid),
819 prefix, service_type_to_string(s->type),
820 prefix, service_restart_to_string(s->restart),
821 prefix, notify_access_to_string(s->notify_access),
822 prefix, notify_state_to_string(s->notify_state),
823 prefix, oom_policy_to_string(s->oom_policy));
824
825 if (s->control_pid > 0)
826 fprintf(f,
827 "%sControl PID: "PID_FMT"\n",
828 prefix, s->control_pid);
829
830 if (s->main_pid > 0)
831 fprintf(f,
832 "%sMain PID: "PID_FMT"\n"
833 "%sMain PID Known: %s\n"
834 "%sMain PID Alien: %s\n",
835 prefix, s->main_pid,
836 prefix, yes_no(s->main_pid_known),
837 prefix, yes_no(s->main_pid_alien));
838
839 if (s->pid_file)
840 fprintf(f,
841 "%sPIDFile: %s\n",
842 prefix, s->pid_file);
843
844 if (s->bus_name)
845 fprintf(f,
846 "%sBusName: %s\n"
847 "%sBus Name Good: %s\n",
848 prefix, s->bus_name,
849 prefix, yes_no(s->bus_name_good));
850
851 if (UNIT_ISSET(s->accept_socket))
852 fprintf(f,
853 "%sAccept Socket: %s\n",
854 prefix, UNIT_DEREF(s->accept_socket)->id);
855
856 fprintf(f,
857 "%sRestartSec: %s\n"
858 "%sTimeoutStartSec: %s\n"
859 "%sTimeoutStopSec: %s\n"
860 "%sTimeoutStartFailureMode: %s\n"
861 "%sTimeoutStopFailureMode: %s\n",
862 prefix, format_timespan(buf_restart, sizeof(buf_restart), s->restart_usec, USEC_PER_SEC),
863 prefix, format_timespan(buf_start, sizeof(buf_start), s->timeout_start_usec, USEC_PER_SEC),
864 prefix, format_timespan(buf_stop, sizeof(buf_stop), s->timeout_stop_usec, USEC_PER_SEC),
865 prefix, service_timeout_failure_mode_to_string(s->timeout_start_failure_mode),
866 prefix, service_timeout_failure_mode_to_string(s->timeout_stop_failure_mode));
867
868 if (s->timeout_abort_set)
869 fprintf(f,
870 "%sTimeoutAbortSec: %s\n",
871 prefix, format_timespan(buf_abort, sizeof(buf_abort), s->timeout_abort_usec, USEC_PER_SEC));
872
873 fprintf(f,
874 "%sRuntimeMaxSec: %s\n"
875 "%sWatchdogSec: %s\n",
876 prefix, format_timespan(buf_runtime, sizeof(buf_runtime), s->runtime_max_usec, USEC_PER_SEC),
877 prefix, format_timespan(buf_watchdog, sizeof(buf_watchdog), s->watchdog_usec, USEC_PER_SEC));
878
879 kill_context_dump(&s->kill_context, f, prefix);
880 exec_context_dump(&s->exec_context, f, prefix);
881
882 for (c = 0; c < _SERVICE_EXEC_COMMAND_MAX; c++) {
883
884 if (!s->exec_command[c])
885 continue;
886
887 fprintf(f, "%s-> %s:\n",
888 prefix, service_exec_command_to_string(c));
889
890 exec_command_dump_list(s->exec_command[c], f, prefix2);
891 }
892
893 if (s->status_text)
894 fprintf(f, "%sStatus Text: %s\n",
895 prefix, s->status_text);
896
897 if (s->n_fd_store_max > 0)
898 fprintf(f,
899 "%sFile Descriptor Store Max: %u\n"
900 "%sFile Descriptor Store Current: %zu\n",
901 prefix, s->n_fd_store_max,
902 prefix, s->n_fd_store);
903
904 cgroup_context_dump(UNIT(s), f, prefix);
905 }
906
907 static int service_is_suitable_main_pid(Service *s, pid_t pid, int prio) {
908 Unit *owner;
909
910 assert(s);
911 assert(pid_is_valid(pid));
912
913 /* Checks whether the specified PID is suitable as main PID for this service. returns negative if not, 0 if the
914 * PID is questionnable but should be accepted if the source of configuration is trusted. > 0 if the PID is
915 * good */
916
917 if (pid == getpid_cached() || pid == 1) {
918 log_unit_full(UNIT(s), prio, "New main PID "PID_FMT" is the manager, refusing.", pid);
919 return -EPERM;
920 }
921
922 if (pid == s->control_pid) {
923 log_unit_full(UNIT(s), prio, "New main PID "PID_FMT" is the control process, refusing.", pid);
924 return -EPERM;
925 }
926
927 if (!pid_is_alive(pid)) {
928 log_unit_full(UNIT(s), prio, "New main PID "PID_FMT" does not exist or is a zombie.", pid);
929 return -ESRCH;
930 }
931
932 owner = manager_get_unit_by_pid(UNIT(s)->manager, pid);
933 if (owner == UNIT(s)) {
934 log_unit_debug(UNIT(s), "New main PID "PID_FMT" belongs to service, we are happy.", pid);
935 return 1; /* Yay, it's definitely a good PID */
936 }
937
938 return 0; /* Hmm it's a suspicious PID, let's accept it if configuration source is trusted */
939 }
940
941 static int service_load_pid_file(Service *s, bool may_warn) {
942 char procfs[STRLEN("/proc/self/fd/") + DECIMAL_STR_MAX(int)];
943 bool questionable_pid_file = false;
944 _cleanup_free_ char *k = NULL;
945 _cleanup_close_ int fd = -1;
946 int r, prio;
947 pid_t pid;
948
949 assert(s);
950
951 if (!s->pid_file)
952 return -ENOENT;
953
954 prio = may_warn ? LOG_INFO : LOG_DEBUG;
955
956 r = chase_symlinks(s->pid_file, NULL, CHASE_SAFE, NULL, &fd);
957 if (r == -ENOLINK) {
958 log_unit_debug_errno(UNIT(s), r,
959 "Potentially unsafe symlink chain, will now retry with relaxed checks: %s", s->pid_file);
960
961 questionable_pid_file = true;
962
963 r = chase_symlinks(s->pid_file, NULL, 0, NULL, &fd);
964 }
965 if (r < 0)
966 return log_unit_full_errno(UNIT(s), prio, fd,
967 "Can't open PID file %s (yet?) after %s: %m", s->pid_file, service_state_to_string(s->state));
968
969 /* Let's read the PID file now that we chased it down. But we need to convert the O_PATH fd
970 * chase_symlinks() returned us into a proper fd first. */
971 xsprintf(procfs, "/proc/self/fd/%i", fd);
972 r = read_one_line_file(procfs, &k);
973 if (r < 0)
974 return log_unit_error_errno(UNIT(s), r,
975 "Can't convert PID files %s O_PATH file descriptor to proper file descriptor: %m",
976 s->pid_file);
977
978 r = parse_pid(k, &pid);
979 if (r < 0)
980 return log_unit_full_errno(UNIT(s), prio, r, "Failed to parse PID from file %s: %m", s->pid_file);
981
982 if (s->main_pid_known && pid == s->main_pid)
983 return 0;
984
985 r = service_is_suitable_main_pid(s, pid, prio);
986 if (r < 0)
987 return r;
988 if (r == 0) {
989 struct stat st;
990
991 if (questionable_pid_file) {
992 log_unit_error(UNIT(s), "Refusing to accept PID outside of service control group, acquired through unsafe symlink chain: %s", s->pid_file);
993 return -EPERM;
994 }
995
996 /* Hmm, it's not clear if the new main PID is safe. Let's allow this if the PID file is owned by root */
997
998 if (fstat(fd, &st) < 0)
999 return log_unit_error_errno(UNIT(s), errno, "Failed to fstat() PID file O_PATH fd: %m");
1000
1001 if (st.st_uid != 0) {
1002 log_unit_error(UNIT(s), "New main PID "PID_FMT" does not belong to service, and PID file is not owned by root. Refusing.", pid);
1003 return -EPERM;
1004 }
1005
1006 log_unit_debug(UNIT(s), "New main PID "PID_FMT" does not belong to service, but we'll accept it since PID file is owned by root.", pid);
1007 }
1008
1009 if (s->main_pid_known) {
1010 log_unit_debug(UNIT(s), "Main PID changing: "PID_FMT" -> "PID_FMT, s->main_pid, pid);
1011
1012 service_unwatch_main_pid(s);
1013 s->main_pid_known = false;
1014 } else
1015 log_unit_debug(UNIT(s), "Main PID loaded: "PID_FMT, pid);
1016
1017 r = service_set_main_pid(s, pid);
1018 if (r < 0)
1019 return r;
1020
1021 r = unit_watch_pid(UNIT(s), pid, false);
1022 if (r < 0) /* FIXME: we need to do something here */
1023 return log_unit_warning_errno(UNIT(s), r, "Failed to watch PID "PID_FMT" for service: %m", pid);
1024
1025 return 1;
1026 }
1027
1028 static void service_search_main_pid(Service *s) {
1029 pid_t pid = 0;
1030 int r;
1031
1032 assert(s);
1033
1034 /* If we know it anyway, don't ever fall back to unreliable
1035 * heuristics */
1036 if (s->main_pid_known)
1037 return;
1038
1039 if (!s->guess_main_pid)
1040 return;
1041
1042 assert(s->main_pid <= 0);
1043
1044 if (unit_search_main_pid(UNIT(s), &pid) < 0)
1045 return;
1046
1047 log_unit_debug(UNIT(s), "Main PID guessed: "PID_FMT, pid);
1048 if (service_set_main_pid(s, pid) < 0)
1049 return;
1050
1051 r = unit_watch_pid(UNIT(s), pid, false);
1052 if (r < 0)
1053 /* FIXME: we need to do something here */
1054 log_unit_warning_errno(UNIT(s), r, "Failed to watch PID "PID_FMT" from: %m", pid);
1055 }
1056
1057 static void service_set_state(Service *s, ServiceState state) {
1058 ServiceState old_state;
1059 const UnitActiveState *table;
1060
1061 assert(s);
1062
1063 if (s->state != state)
1064 bus_unit_send_pending_change_signal(UNIT(s), false);
1065
1066 table = s->type == SERVICE_IDLE ? state_translation_table_idle : state_translation_table;
1067
1068 old_state = s->state;
1069 s->state = state;
1070
1071 service_unwatch_pid_file(s);
1072
1073 if (!IN_SET(state,
1074 SERVICE_CONDITION, SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST,
1075 SERVICE_RUNNING,
1076 SERVICE_RELOAD,
1077 SERVICE_STOP, SERVICE_STOP_WATCHDOG, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
1078 SERVICE_FINAL_WATCHDOG, SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL,
1079 SERVICE_AUTO_RESTART,
1080 SERVICE_CLEANING))
1081 s->timer_event_source = sd_event_source_unref(s->timer_event_source);
1082
1083 if (!IN_SET(state,
1084 SERVICE_START, SERVICE_START_POST,
1085 SERVICE_RUNNING, SERVICE_RELOAD,
1086 SERVICE_STOP, SERVICE_STOP_WATCHDOG, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
1087 SERVICE_FINAL_WATCHDOG, SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL)) {
1088 service_unwatch_main_pid(s);
1089 s->main_command = NULL;
1090 }
1091
1092 if (!IN_SET(state,
1093 SERVICE_CONDITION, SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST,
1094 SERVICE_RELOAD,
1095 SERVICE_STOP, SERVICE_STOP_WATCHDOG, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
1096 SERVICE_FINAL_WATCHDOG, SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL,
1097 SERVICE_CLEANING)) {
1098 service_unwatch_control_pid(s);
1099 s->control_command = NULL;
1100 s->control_command_id = _SERVICE_EXEC_COMMAND_INVALID;
1101 }
1102
1103 if (IN_SET(state, SERVICE_DEAD, SERVICE_FAILED, SERVICE_AUTO_RESTART)) {
1104 unit_unwatch_all_pids(UNIT(s));
1105 unit_dequeue_rewatch_pids(UNIT(s));
1106 }
1107
1108 if (!IN_SET(state,
1109 SERVICE_CONDITION, SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST,
1110 SERVICE_RUNNING, SERVICE_RELOAD,
1111 SERVICE_STOP, SERVICE_STOP_WATCHDOG, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
1112 SERVICE_FINAL_WATCHDOG, SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL) &&
1113 !(state == SERVICE_DEAD && UNIT(s)->job))
1114 service_close_socket_fd(s);
1115
1116 if (state != SERVICE_START)
1117 s->exec_fd_event_source = sd_event_source_unref(s->exec_fd_event_source);
1118
1119 if (!IN_SET(state, SERVICE_START_POST, SERVICE_RUNNING, SERVICE_RELOAD))
1120 service_stop_watchdog(s);
1121
1122 /* For the inactive states unit_notify() will trim the cgroup,
1123 * but for exit we have to do that ourselves... */
1124 if (state == SERVICE_EXITED && !MANAGER_IS_RELOADING(UNIT(s)->manager))
1125 unit_prune_cgroup(UNIT(s));
1126
1127 if (old_state != state)
1128 log_unit_debug(UNIT(s), "Changed %s -> %s", service_state_to_string(old_state), service_state_to_string(state));
1129
1130 unit_notify(UNIT(s), table[old_state], table[state],
1131 (s->reload_result == SERVICE_SUCCESS ? 0 : UNIT_NOTIFY_RELOAD_FAILURE) |
1132 (s->will_auto_restart ? UNIT_NOTIFY_WILL_AUTO_RESTART : 0) |
1133 (s->result == SERVICE_SKIP_CONDITION ? UNIT_NOTIFY_SKIP_CONDITION : 0));
1134 }
1135
1136 static usec_t service_coldplug_timeout(Service *s) {
1137 assert(s);
1138
1139 switch (s->deserialized_state) {
1140
1141 case SERVICE_CONDITION:
1142 case SERVICE_START_PRE:
1143 case SERVICE_START:
1144 case SERVICE_START_POST:
1145 case SERVICE_RELOAD:
1146 return usec_add(UNIT(s)->state_change_timestamp.monotonic, s->timeout_start_usec);
1147
1148 case SERVICE_RUNNING:
1149 return usec_add(UNIT(s)->active_enter_timestamp.monotonic, s->runtime_max_usec);
1150
1151 case SERVICE_STOP:
1152 case SERVICE_STOP_SIGTERM:
1153 case SERVICE_STOP_SIGKILL:
1154 case SERVICE_STOP_POST:
1155 case SERVICE_FINAL_SIGTERM:
1156 case SERVICE_FINAL_SIGKILL:
1157 return usec_add(UNIT(s)->state_change_timestamp.monotonic, s->timeout_stop_usec);
1158
1159 case SERVICE_STOP_WATCHDOG:
1160 case SERVICE_FINAL_WATCHDOG:
1161 return usec_add(UNIT(s)->state_change_timestamp.monotonic, service_timeout_abort_usec(s));
1162
1163 case SERVICE_AUTO_RESTART:
1164 return usec_add(UNIT(s)->inactive_enter_timestamp.monotonic, s->restart_usec);
1165
1166 case SERVICE_CLEANING:
1167 return usec_add(UNIT(s)->state_change_timestamp.monotonic, s->exec_context.timeout_clean_usec);
1168
1169 default:
1170 return USEC_INFINITY;
1171 }
1172 }
1173
1174 static int service_coldplug(Unit *u) {
1175 Service *s = SERVICE(u);
1176 int r;
1177
1178 assert(s);
1179 assert(s->state == SERVICE_DEAD);
1180
1181 if (s->deserialized_state == s->state)
1182 return 0;
1183
1184 r = service_arm_timer(s, service_coldplug_timeout(s));
1185 if (r < 0)
1186 return r;
1187
1188 if (s->main_pid > 0 &&
1189 pid_is_unwaited(s->main_pid) &&
1190 (IN_SET(s->deserialized_state,
1191 SERVICE_START, SERVICE_START_POST,
1192 SERVICE_RUNNING, SERVICE_RELOAD,
1193 SERVICE_STOP, SERVICE_STOP_WATCHDOG, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
1194 SERVICE_FINAL_WATCHDOG, SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL))) {
1195 r = unit_watch_pid(UNIT(s), s->main_pid, false);
1196 if (r < 0)
1197 return r;
1198 }
1199
1200 if (s->control_pid > 0 &&
1201 pid_is_unwaited(s->control_pid) &&
1202 IN_SET(s->deserialized_state,
1203 SERVICE_CONDITION, SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST,
1204 SERVICE_RELOAD,
1205 SERVICE_STOP, SERVICE_STOP_WATCHDOG, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
1206 SERVICE_FINAL_WATCHDOG, SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL,
1207 SERVICE_CLEANING)) {
1208 r = unit_watch_pid(UNIT(s), s->control_pid, false);
1209 if (r < 0)
1210 return r;
1211 }
1212
1213 if (!IN_SET(s->deserialized_state, SERVICE_DEAD, SERVICE_FAILED, SERVICE_AUTO_RESTART, SERVICE_CLEANING)) {
1214 (void) unit_enqueue_rewatch_pids(u);
1215 (void) unit_setup_dynamic_creds(u);
1216 (void) unit_setup_exec_runtime(u);
1217 }
1218
1219 if (IN_SET(s->deserialized_state, SERVICE_START_POST, SERVICE_RUNNING, SERVICE_RELOAD))
1220 service_start_watchdog(s);
1221
1222 if (UNIT_ISSET(s->accept_socket)) {
1223 Socket* socket = SOCKET(UNIT_DEREF(s->accept_socket));
1224
1225 if (socket->max_connections_per_source > 0) {
1226 SocketPeer *peer;
1227
1228 /* Make a best-effort attempt at bumping the connection count */
1229 if (socket_acquire_peer(socket, s->socket_fd, &peer) > 0) {
1230 socket_peer_unref(s->peer);
1231 s->peer = peer;
1232 }
1233 }
1234 }
1235
1236 service_set_state(s, s->deserialized_state);
1237 return 0;
1238 }
1239
1240 static int service_collect_fds(
1241 Service *s,
1242 int **fds,
1243 char ***fd_names,
1244 size_t *n_socket_fds,
1245 size_t *n_storage_fds) {
1246
1247 _cleanup_strv_free_ char **rfd_names = NULL;
1248 _cleanup_free_ int *rfds = NULL;
1249 size_t rn_socket_fds = 0, rn_storage_fds = 0;
1250 int r;
1251
1252 assert(s);
1253 assert(fds);
1254 assert(fd_names);
1255 assert(n_socket_fds);
1256 assert(n_storage_fds);
1257
1258 if (s->socket_fd >= 0) {
1259
1260 /* Pass the per-connection socket */
1261
1262 rfds = new(int, 1);
1263 if (!rfds)
1264 return -ENOMEM;
1265 rfds[0] = s->socket_fd;
1266
1267 rfd_names = strv_new("connection");
1268 if (!rfd_names)
1269 return -ENOMEM;
1270
1271 rn_socket_fds = 1;
1272 } else {
1273 void *v;
1274 Unit *u;
1275
1276 /* Pass all our configured sockets for singleton services */
1277
1278 HASHMAP_FOREACH_KEY(v, u, UNIT(s)->dependencies[UNIT_TRIGGERED_BY]) {
1279 _cleanup_free_ int *cfds = NULL;
1280 Socket *sock;
1281 int cn_fds;
1282
1283 if (u->type != UNIT_SOCKET)
1284 continue;
1285
1286 sock = SOCKET(u);
1287
1288 cn_fds = socket_collect_fds(sock, &cfds);
1289 if (cn_fds < 0)
1290 return cn_fds;
1291
1292 if (cn_fds <= 0)
1293 continue;
1294
1295 if (!rfds) {
1296 rfds = TAKE_PTR(cfds);
1297 rn_socket_fds = cn_fds;
1298 } else {
1299 int *t;
1300
1301 t = reallocarray(rfds, rn_socket_fds + cn_fds, sizeof(int));
1302 if (!t)
1303 return -ENOMEM;
1304
1305 memcpy(t + rn_socket_fds, cfds, cn_fds * sizeof(int));
1306
1307 rfds = t;
1308 rn_socket_fds += cn_fds;
1309 }
1310
1311 r = strv_extend_n(&rfd_names, socket_fdname(sock), cn_fds);
1312 if (r < 0)
1313 return r;
1314 }
1315 }
1316
1317 if (s->n_fd_store > 0) {
1318 ServiceFDStore *fs;
1319 size_t n_fds;
1320 char **nl;
1321 int *t;
1322
1323 t = reallocarray(rfds, rn_socket_fds + s->n_fd_store, sizeof(int));
1324 if (!t)
1325 return -ENOMEM;
1326
1327 rfds = t;
1328
1329 nl = reallocarray(rfd_names, rn_socket_fds + s->n_fd_store + 1, sizeof(char *));
1330 if (!nl)
1331 return -ENOMEM;
1332
1333 rfd_names = nl;
1334 n_fds = rn_socket_fds;
1335
1336 LIST_FOREACH(fd_store, fs, s->fd_store) {
1337 rfds[n_fds] = fs->fd;
1338 rfd_names[n_fds] = strdup(strempty(fs->fdname));
1339 if (!rfd_names[n_fds])
1340 return -ENOMEM;
1341
1342 rn_storage_fds++;
1343 n_fds++;
1344 }
1345
1346 rfd_names[n_fds] = NULL;
1347 }
1348
1349 *fds = TAKE_PTR(rfds);
1350 *fd_names = TAKE_PTR(rfd_names);
1351 *n_socket_fds = rn_socket_fds;
1352 *n_storage_fds = rn_storage_fds;
1353
1354 return 0;
1355 }
1356
1357 static int service_allocate_exec_fd_event_source(
1358 Service *s,
1359 int fd,
1360 sd_event_source **ret_event_source) {
1361
1362 _cleanup_(sd_event_source_unrefp) sd_event_source *source = NULL;
1363 int r;
1364
1365 assert(s);
1366 assert(fd >= 0);
1367 assert(ret_event_source);
1368
1369 r = sd_event_add_io(UNIT(s)->manager->event, &source, fd, 0, service_dispatch_exec_io, s);
1370 if (r < 0)
1371 return log_unit_error_errno(UNIT(s), r, "Failed to allocate exec_fd event source: %m");
1372
1373 /* This is a bit lower priority than SIGCHLD, as that carries a lot more interesting failure information */
1374
1375 r = sd_event_source_set_priority(source, SD_EVENT_PRIORITY_NORMAL-3);
1376 if (r < 0)
1377 return log_unit_error_errno(UNIT(s), r, "Failed to adjust priority of exec_fd event source: %m");
1378
1379 (void) sd_event_source_set_description(source, "service event_fd");
1380
1381 r = sd_event_source_set_io_fd_own(source, true);
1382 if (r < 0)
1383 return log_unit_error_errno(UNIT(s), r, "Failed to pass ownership of fd to event source: %m");
1384
1385 *ret_event_source = TAKE_PTR(source);
1386 return 0;
1387 }
1388
1389 static int service_allocate_exec_fd(
1390 Service *s,
1391 sd_event_source **ret_event_source,
1392 int* ret_exec_fd) {
1393
1394 _cleanup_close_pair_ int p[2] = { -1, -1 };
1395 int r;
1396
1397 assert(s);
1398 assert(ret_event_source);
1399 assert(ret_exec_fd);
1400
1401 if (pipe2(p, O_CLOEXEC|O_NONBLOCK) < 0)
1402 return log_unit_error_errno(UNIT(s), errno, "Failed to allocate exec_fd pipe: %m");
1403
1404 r = service_allocate_exec_fd_event_source(s, p[0], ret_event_source);
1405 if (r < 0)
1406 return r;
1407
1408 p[0] = -1;
1409 *ret_exec_fd = TAKE_FD(p[1]);
1410
1411 return 0;
1412 }
1413
1414 static bool service_exec_needs_notify_socket(Service *s, ExecFlags flags) {
1415 assert(s);
1416
1417 /* Notifications are accepted depending on the process and
1418 * the access setting of the service:
1419 * process: \ access: NONE MAIN EXEC ALL
1420 * main no yes yes yes
1421 * control no no yes yes
1422 * other (forked) no no no yes */
1423
1424 if (flags & EXEC_IS_CONTROL)
1425 /* A control process */
1426 return IN_SET(s->notify_access, NOTIFY_EXEC, NOTIFY_ALL);
1427
1428 /* We only spawn main processes and control processes, so any
1429 * process that is not a control process is a main process */
1430 return s->notify_access != NOTIFY_NONE;
1431 }
1432
1433 static int service_spawn(
1434 Service *s,
1435 ExecCommand *c,
1436 usec_t timeout,
1437 ExecFlags flags,
1438 pid_t *_pid) {
1439
1440 _cleanup_(exec_params_clear) ExecParameters exec_params = {
1441 .flags = flags,
1442 .stdin_fd = -1,
1443 .stdout_fd = -1,
1444 .stderr_fd = -1,
1445 .exec_fd = -1,
1446 };
1447 _cleanup_(sd_event_source_unrefp) sd_event_source *exec_fd_source = NULL;
1448 _cleanup_strv_free_ char **final_env = NULL, **our_env = NULL;
1449 size_t n_env = 0;
1450 pid_t pid;
1451 int r;
1452
1453 assert(s);
1454 assert(c);
1455 assert(_pid);
1456
1457 r = unit_prepare_exec(UNIT(s)); /* This realizes the cgroup, among other things */
1458 if (r < 0)
1459 return r;
1460
1461 if (flags & EXEC_IS_CONTROL) {
1462 /* If this is a control process, mask the permissions/chroot application if this is requested. */
1463 if (s->permissions_start_only)
1464 exec_params.flags &= ~EXEC_APPLY_SANDBOXING;
1465 if (s->root_directory_start_only)
1466 exec_params.flags &= ~EXEC_APPLY_CHROOT;
1467 }
1468
1469 if ((flags & EXEC_PASS_FDS) ||
1470 s->exec_context.std_input == EXEC_INPUT_SOCKET ||
1471 s->exec_context.std_output == EXEC_OUTPUT_SOCKET ||
1472 s->exec_context.std_error == EXEC_OUTPUT_SOCKET) {
1473
1474 r = service_collect_fds(s,
1475 &exec_params.fds,
1476 &exec_params.fd_names,
1477 &exec_params.n_socket_fds,
1478 &exec_params.n_storage_fds);
1479 if (r < 0)
1480 return r;
1481
1482 log_unit_debug(UNIT(s), "Passing %zu fds to service", exec_params.n_socket_fds + exec_params.n_storage_fds);
1483 }
1484
1485 if (!FLAGS_SET(flags, EXEC_IS_CONTROL) && s->type == SERVICE_EXEC) {
1486 assert(!s->exec_fd_event_source);
1487
1488 r = service_allocate_exec_fd(s, &exec_fd_source, &exec_params.exec_fd);
1489 if (r < 0)
1490 return r;
1491 }
1492
1493 r = service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), timeout));
1494 if (r < 0)
1495 return r;
1496
1497 our_env = new0(char*, 10);
1498 if (!our_env)
1499 return -ENOMEM;
1500
1501 if (service_exec_needs_notify_socket(s, flags))
1502 if (asprintf(our_env + n_env++, "NOTIFY_SOCKET=%s", UNIT(s)->manager->notify_socket) < 0)
1503 return -ENOMEM;
1504
1505 if (s->main_pid > 0)
1506 if (asprintf(our_env + n_env++, "MAINPID="PID_FMT, s->main_pid) < 0)
1507 return -ENOMEM;
1508
1509 if (MANAGER_IS_USER(UNIT(s)->manager))
1510 if (asprintf(our_env + n_env++, "MANAGERPID="PID_FMT, getpid_cached()) < 0)
1511 return -ENOMEM;
1512
1513 if (s->pid_file)
1514 if (asprintf(our_env + n_env++, "PIDFILE=%s", s->pid_file) < 0)
1515 return -ENOMEM;
1516
1517 if (s->socket_fd >= 0) {
1518 union sockaddr_union sa;
1519 socklen_t salen = sizeof(sa);
1520
1521 /* If this is a per-connection service instance, let's set $REMOTE_ADDR and $REMOTE_PORT to something
1522 * useful. Note that we do this only when we are still connected at this point in time, which we might
1523 * very well not be. Hence we ignore all errors when retrieving peer information (as that might result
1524 * in ENOTCONN), and just use whate we can use. */
1525
1526 if (getpeername(s->socket_fd, &sa.sa, &salen) >= 0 &&
1527 IN_SET(sa.sa.sa_family, AF_INET, AF_INET6, AF_VSOCK)) {
1528 _cleanup_free_ char *addr = NULL;
1529 char *t;
1530 unsigned port;
1531
1532 r = sockaddr_pretty(&sa.sa, salen, true, false, &addr);
1533 if (r < 0)
1534 return r;
1535
1536 t = strjoin("REMOTE_ADDR=", addr);
1537 if (!t)
1538 return -ENOMEM;
1539 our_env[n_env++] = t;
1540
1541 r = sockaddr_port(&sa.sa, &port);
1542 if (r < 0)
1543 return r;
1544
1545 if (asprintf(&t, "REMOTE_PORT=%u", port) < 0)
1546 return -ENOMEM;
1547 our_env[n_env++] = t;
1548 }
1549 }
1550
1551 if (flags & EXEC_SETENV_RESULT) {
1552 if (asprintf(our_env + n_env++, "SERVICE_RESULT=%s", service_result_to_string(s->result)) < 0)
1553 return -ENOMEM;
1554
1555 if (s->main_exec_status.pid > 0 &&
1556 dual_timestamp_is_set(&s->main_exec_status.exit_timestamp)) {
1557 if (asprintf(our_env + n_env++, "EXIT_CODE=%s", sigchld_code_to_string(s->main_exec_status.code)) < 0)
1558 return -ENOMEM;
1559
1560 if (s->main_exec_status.code == CLD_EXITED)
1561 r = asprintf(our_env + n_env++, "EXIT_STATUS=%i", s->main_exec_status.status);
1562 else
1563 r = asprintf(our_env + n_env++, "EXIT_STATUS=%s", signal_to_string(s->main_exec_status.status));
1564 if (r < 0)
1565 return -ENOMEM;
1566 }
1567 }
1568
1569 r = unit_set_exec_params(UNIT(s), &exec_params);
1570 if (r < 0)
1571 return r;
1572
1573 final_env = strv_env_merge(2, exec_params.environment, our_env, NULL);
1574 if (!final_env)
1575 return -ENOMEM;
1576
1577 /* System D-Bus needs nss-systemd disabled, so that we don't deadlock */
1578 SET_FLAG(exec_params.flags, EXEC_NSS_BYPASS_BUS,
1579 MANAGER_IS_SYSTEM(UNIT(s)->manager) && unit_has_name(UNIT(s), SPECIAL_DBUS_SERVICE));
1580
1581 strv_free_and_replace(exec_params.environment, final_env);
1582 exec_params.watchdog_usec = service_get_watchdog_usec(s);
1583 exec_params.selinux_context_net = s->socket_fd_selinux_context_net;
1584 if (s->type == SERVICE_IDLE)
1585 exec_params.idle_pipe = UNIT(s)->manager->idle_pipe;
1586 exec_params.stdin_fd = s->stdin_fd;
1587 exec_params.stdout_fd = s->stdout_fd;
1588 exec_params.stderr_fd = s->stderr_fd;
1589
1590 r = exec_spawn(UNIT(s),
1591 c,
1592 &s->exec_context,
1593 &exec_params,
1594 s->exec_runtime,
1595 &s->dynamic_creds,
1596 &pid);
1597 if (r < 0)
1598 return r;
1599
1600 s->exec_fd_event_source = TAKE_PTR(exec_fd_source);
1601 s->exec_fd_hot = false;
1602
1603 r = unit_watch_pid(UNIT(s), pid, true);
1604 if (r < 0)
1605 return r;
1606
1607 *_pid = pid;
1608
1609 return 0;
1610 }
1611
1612 static int main_pid_good(Service *s) {
1613 assert(s);
1614
1615 /* Returns 0 if the pid is dead, > 0 if it is good, < 0 if we don't know */
1616
1617 /* If we know the pid file, then let's just check if it is
1618 * still valid */
1619 if (s->main_pid_known) {
1620
1621 /* If it's an alien child let's check if it is still
1622 * alive ... */
1623 if (s->main_pid_alien && s->main_pid > 0)
1624 return pid_is_alive(s->main_pid);
1625
1626 /* .. otherwise assume we'll get a SIGCHLD for it,
1627 * which we really should wait for to collect exit
1628 * status and code */
1629 return s->main_pid > 0;
1630 }
1631
1632 /* We don't know the pid */
1633 return -EAGAIN;
1634 }
1635
1636 static int control_pid_good(Service *s) {
1637 assert(s);
1638
1639 /* Returns 0 if the control PID is dead, > 0 if it is good. We never actually return < 0 here, but in order to
1640 * make this function as similar as possible to main_pid_good() and cgroup_good(), we pretend that < 0 also
1641 * means: we can't figure it out. */
1642
1643 return s->control_pid > 0;
1644 }
1645
1646 static int cgroup_good(Service *s) {
1647 int r;
1648
1649 assert(s);
1650
1651 /* Returns 0 if the cgroup is empty or doesn't exist, > 0 if it is exists and is populated, < 0 if we can't
1652 * figure it out */
1653
1654 if (!UNIT(s)->cgroup_path)
1655 return 0;
1656
1657 r = cg_is_empty_recursive(SYSTEMD_CGROUP_CONTROLLER, UNIT(s)->cgroup_path);
1658 if (r < 0)
1659 return r;
1660
1661 return r == 0;
1662 }
1663
1664 static bool service_shall_restart(Service *s, const char **reason) {
1665 assert(s);
1666
1667 /* Don't restart after manual stops */
1668 if (s->forbid_restart) {
1669 *reason = "manual stop";
1670 return false;
1671 }
1672
1673 /* Never restart if this is configured as special exception */
1674 if (exit_status_set_test(&s->restart_prevent_status, s->main_exec_status.code, s->main_exec_status.status)) {
1675 *reason = "prevented by exit status";
1676 return false;
1677 }
1678
1679 /* Restart if the exit code/status are configured as restart triggers */
1680 if (exit_status_set_test(&s->restart_force_status, s->main_exec_status.code, s->main_exec_status.status)) {
1681 *reason = "forced by exit status";
1682 return true;
1683 }
1684
1685 *reason = "restart setting";
1686 switch (s->restart) {
1687
1688 case SERVICE_RESTART_NO:
1689 return false;
1690
1691 case SERVICE_RESTART_ALWAYS:
1692 return true;
1693
1694 case SERVICE_RESTART_ON_SUCCESS:
1695 return s->result == SERVICE_SUCCESS;
1696
1697 case SERVICE_RESTART_ON_FAILURE:
1698 return !IN_SET(s->result, SERVICE_SUCCESS, SERVICE_SKIP_CONDITION);
1699
1700 case SERVICE_RESTART_ON_ABNORMAL:
1701 return !IN_SET(s->result, SERVICE_SUCCESS, SERVICE_FAILURE_EXIT_CODE, SERVICE_SKIP_CONDITION);
1702
1703 case SERVICE_RESTART_ON_WATCHDOG:
1704 return s->result == SERVICE_FAILURE_WATCHDOG;
1705
1706 case SERVICE_RESTART_ON_ABORT:
1707 return IN_SET(s->result, SERVICE_FAILURE_SIGNAL, SERVICE_FAILURE_CORE_DUMP);
1708
1709 default:
1710 assert_not_reached("unknown restart setting");
1711 }
1712 }
1713
1714 static bool service_will_restart(Unit *u) {
1715 Service *s = SERVICE(u);
1716
1717 assert(s);
1718
1719 if (s->will_auto_restart)
1720 return true;
1721 if (s->state == SERVICE_AUTO_RESTART)
1722 return true;
1723
1724 return unit_will_restart_default(u);
1725 }
1726
1727 static void service_enter_dead(Service *s, ServiceResult f, bool allow_restart) {
1728 ServiceState end_state;
1729 int r;
1730
1731 assert(s);
1732
1733 /* If there's a stop job queued before we enter the DEAD state, we shouldn't act on Restart=, in order to not
1734 * undo what has already been enqueued. */
1735 if (unit_stop_pending(UNIT(s)))
1736 allow_restart = false;
1737
1738 if (s->result == SERVICE_SUCCESS)
1739 s->result = f;
1740
1741 if (s->result == SERVICE_SUCCESS) {
1742 unit_log_success(UNIT(s));
1743 end_state = SERVICE_DEAD;
1744 } else if (s->result == SERVICE_SKIP_CONDITION) {
1745 unit_log_skip(UNIT(s), service_result_to_string(s->result));
1746 end_state = SERVICE_DEAD;
1747 } else {
1748 unit_log_failure(UNIT(s), service_result_to_string(s->result));
1749 end_state = SERVICE_FAILED;
1750 }
1751 unit_warn_leftover_processes(UNIT(s), unit_log_leftover_process_stop);
1752
1753 if (!allow_restart)
1754 log_unit_debug(UNIT(s), "Service restart not allowed.");
1755 else {
1756 const char *reason;
1757 bool shall_restart;
1758
1759 shall_restart = service_shall_restart(s, &reason);
1760 log_unit_debug(UNIT(s), "Service will %srestart (%s)",
1761 shall_restart ? "" : "not ",
1762 reason);
1763 if (shall_restart)
1764 s->will_auto_restart = true;
1765 }
1766
1767 /* Make sure service_release_resources() doesn't destroy our FD store, while we are changing through
1768 * SERVICE_FAILED/SERVICE_DEAD before entering into SERVICE_AUTO_RESTART. */
1769 s->n_keep_fd_store ++;
1770
1771 service_set_state(s, end_state);
1772
1773 if (s->will_auto_restart) {
1774 s->will_auto_restart = false;
1775
1776 r = service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), s->restart_usec));
1777 if (r < 0) {
1778 s->n_keep_fd_store--;
1779 goto fail;
1780 }
1781
1782 service_set_state(s, SERVICE_AUTO_RESTART);
1783 } else
1784 /* If we shan't restart, then flush out the restart counter. But don't do that immediately, so that the
1785 * user can still introspect the counter. Do so on the next start. */
1786 s->flush_n_restarts = true;
1787
1788 /* The new state is in effect, let's decrease the fd store ref counter again. Let's also re-add us to the GC
1789 * queue, so that the fd store is possibly gc'ed again */
1790 s->n_keep_fd_store--;
1791 unit_add_to_gc_queue(UNIT(s));
1792
1793 /* The next restart might not be a manual stop, hence reset the flag indicating manual stops */
1794 s->forbid_restart = false;
1795
1796 /* We want fresh tmpdirs in case service is started again immediately */
1797 s->exec_runtime = exec_runtime_unref(s->exec_runtime, true);
1798
1799 /* Also, remove the runtime directory */
1800 unit_destroy_runtime_data(UNIT(s), &s->exec_context);
1801
1802 /* Get rid of the IPC bits of the user */
1803 unit_unref_uid_gid(UNIT(s), true);
1804
1805 /* Release the user, and destroy it if we are the only remaining owner */
1806 dynamic_creds_destroy(&s->dynamic_creds);
1807
1808 /* Try to delete the pid file. At this point it will be
1809 * out-of-date, and some software might be confused by it, so
1810 * let's remove it. */
1811 if (s->pid_file)
1812 (void) unlink(s->pid_file);
1813
1814 /* Reset TTY ownership if necessary */
1815 exec_context_revert_tty(&s->exec_context);
1816
1817 return;
1818
1819 fail:
1820 log_unit_warning_errno(UNIT(s), r, "Failed to run install restart timer: %m");
1821 service_enter_dead(s, SERVICE_FAILURE_RESOURCES, false);
1822 }
1823
1824 static void service_enter_stop_post(Service *s, ServiceResult f) {
1825 int r;
1826 assert(s);
1827
1828 if (s->result == SERVICE_SUCCESS)
1829 s->result = f;
1830
1831 service_unwatch_control_pid(s);
1832 (void) unit_enqueue_rewatch_pids(UNIT(s));
1833
1834 s->control_command = s->exec_command[SERVICE_EXEC_STOP_POST];
1835 if (s->control_command) {
1836 s->control_command_id = SERVICE_EXEC_STOP_POST;
1837
1838 r = service_spawn(s,
1839 s->control_command,
1840 s->timeout_stop_usec,
1841 EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_APPLY_TTY_STDIN|EXEC_IS_CONTROL|EXEC_SETENV_RESULT|EXEC_CONTROL_CGROUP,
1842 &s->control_pid);
1843 if (r < 0)
1844 goto fail;
1845
1846 service_set_state(s, SERVICE_STOP_POST);
1847 } else
1848 service_enter_signal(s, SERVICE_FINAL_SIGTERM, SERVICE_SUCCESS);
1849
1850 return;
1851
1852 fail:
1853 log_unit_warning_errno(UNIT(s), r, "Failed to run 'stop-post' task: %m");
1854 service_enter_signal(s, SERVICE_FINAL_SIGTERM, SERVICE_FAILURE_RESOURCES);
1855 }
1856
1857 static int state_to_kill_operation(Service *s, ServiceState state) {
1858 switch (state) {
1859
1860 case SERVICE_STOP_WATCHDOG:
1861 case SERVICE_FINAL_WATCHDOG:
1862 return KILL_WATCHDOG;
1863
1864 case SERVICE_STOP_SIGTERM:
1865 if (unit_has_job_type(UNIT(s), JOB_RESTART))
1866 return KILL_RESTART;
1867 _fallthrough_;
1868
1869 case SERVICE_FINAL_SIGTERM:
1870 return KILL_TERMINATE;
1871
1872 case SERVICE_STOP_SIGKILL:
1873 case SERVICE_FINAL_SIGKILL:
1874 return KILL_KILL;
1875
1876 default:
1877 return _KILL_OPERATION_INVALID;
1878 }
1879 }
1880
1881 static void service_enter_signal(Service *s, ServiceState state, ServiceResult f) {
1882 int kill_operation, r;
1883
1884 assert(s);
1885
1886 if (s->result == SERVICE_SUCCESS)
1887 s->result = f;
1888
1889 /* Before sending any signal, make sure we track all members of this cgroup */
1890 (void) unit_watch_all_pids(UNIT(s));
1891
1892 /* Also, enqueue a job that we recheck all our PIDs a bit later, given that it's likely some processes have
1893 * died now */
1894 (void) unit_enqueue_rewatch_pids(UNIT(s));
1895
1896 kill_operation = state_to_kill_operation(s, state);
1897 r = unit_kill_context(
1898 UNIT(s),
1899 &s->kill_context,
1900 kill_operation,
1901 s->main_pid,
1902 s->control_pid,
1903 s->main_pid_alien);
1904 if (r < 0)
1905 goto fail;
1906
1907 if (r > 0) {
1908 r = service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC),
1909 kill_operation == KILL_WATCHDOG ? service_timeout_abort_usec(s) : s->timeout_stop_usec));
1910 if (r < 0)
1911 goto fail;
1912
1913 service_set_state(s, state);
1914 } else if (IN_SET(state, SERVICE_STOP_WATCHDOG, SERVICE_STOP_SIGTERM) && s->kill_context.send_sigkill)
1915 service_enter_signal(s, SERVICE_STOP_SIGKILL, SERVICE_SUCCESS);
1916 else if (IN_SET(state, SERVICE_STOP_WATCHDOG, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL))
1917 service_enter_stop_post(s, SERVICE_SUCCESS);
1918 else if (IN_SET(state, SERVICE_FINAL_WATCHDOG, SERVICE_FINAL_SIGTERM) && s->kill_context.send_sigkill)
1919 service_enter_signal(s, SERVICE_FINAL_SIGKILL, SERVICE_SUCCESS);
1920 else
1921 service_enter_dead(s, SERVICE_SUCCESS, true);
1922
1923 return;
1924
1925 fail:
1926 log_unit_warning_errno(UNIT(s), r, "Failed to kill processes: %m");
1927
1928 if (IN_SET(state, SERVICE_STOP_WATCHDOG, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL))
1929 service_enter_stop_post(s, SERVICE_FAILURE_RESOURCES);
1930 else
1931 service_enter_dead(s, SERVICE_FAILURE_RESOURCES, true);
1932 }
1933
1934 static void service_enter_stop_by_notify(Service *s) {
1935 assert(s);
1936
1937 (void) unit_enqueue_rewatch_pids(UNIT(s));
1938
1939 service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), s->timeout_stop_usec));
1940
1941 /* The service told us it's stopping, so it's as if we SIGTERM'd it. */
1942 service_set_state(s, SERVICE_STOP_SIGTERM);
1943 }
1944
1945 static void service_enter_stop(Service *s, ServiceResult f) {
1946 int r;
1947
1948 assert(s);
1949
1950 if (s->result == SERVICE_SUCCESS)
1951 s->result = f;
1952
1953 service_unwatch_control_pid(s);
1954 (void) unit_enqueue_rewatch_pids(UNIT(s));
1955
1956 s->control_command = s->exec_command[SERVICE_EXEC_STOP];
1957 if (s->control_command) {
1958 s->control_command_id = SERVICE_EXEC_STOP;
1959
1960 r = service_spawn(s,
1961 s->control_command,
1962 s->timeout_stop_usec,
1963 EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_IS_CONTROL|EXEC_SETENV_RESULT|EXEC_CONTROL_CGROUP,
1964 &s->control_pid);
1965 if (r < 0)
1966 goto fail;
1967
1968 service_set_state(s, SERVICE_STOP);
1969 } else
1970 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_SUCCESS);
1971
1972 return;
1973
1974 fail:
1975 log_unit_warning_errno(UNIT(s), r, "Failed to run 'stop' task: %m");
1976 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_RESOURCES);
1977 }
1978
1979 static bool service_good(Service *s) {
1980 int main_pid_ok;
1981 assert(s);
1982
1983 if (s->type == SERVICE_DBUS && !s->bus_name_good)
1984 return false;
1985
1986 main_pid_ok = main_pid_good(s);
1987 if (main_pid_ok > 0) /* It's alive */
1988 return true;
1989 if (main_pid_ok == 0) /* It's dead */
1990 return false;
1991
1992 /* OK, we don't know anything about the main PID, maybe
1993 * because there is none. Let's check the control group
1994 * instead. */
1995
1996 return cgroup_good(s) != 0;
1997 }
1998
1999 static void service_enter_running(Service *s, ServiceResult f) {
2000 assert(s);
2001
2002 if (s->result == SERVICE_SUCCESS)
2003 s->result = f;
2004
2005 service_unwatch_control_pid(s);
2006
2007 if (s->result != SERVICE_SUCCESS)
2008 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
2009 else if (service_good(s)) {
2010
2011 /* If there are any queued up sd_notify() notifications, process them now */
2012 if (s->notify_state == NOTIFY_RELOADING)
2013 service_enter_reload_by_notify(s);
2014 else if (s->notify_state == NOTIFY_STOPPING)
2015 service_enter_stop_by_notify(s);
2016 else {
2017 service_set_state(s, SERVICE_RUNNING);
2018 service_arm_timer(s, usec_add(UNIT(s)->active_enter_timestamp.monotonic, s->runtime_max_usec));
2019 }
2020
2021 } else if (s->remain_after_exit)
2022 service_set_state(s, SERVICE_EXITED);
2023 else
2024 service_enter_stop(s, SERVICE_SUCCESS);
2025 }
2026
2027 static void service_enter_start_post(Service *s) {
2028 int r;
2029 assert(s);
2030
2031 service_unwatch_control_pid(s);
2032 service_reset_watchdog(s);
2033
2034 s->control_command = s->exec_command[SERVICE_EXEC_START_POST];
2035 if (s->control_command) {
2036 s->control_command_id = SERVICE_EXEC_START_POST;
2037
2038 r = service_spawn(s,
2039 s->control_command,
2040 s->timeout_start_usec,
2041 EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_IS_CONTROL|EXEC_CONTROL_CGROUP,
2042 &s->control_pid);
2043 if (r < 0)
2044 goto fail;
2045
2046 service_set_state(s, SERVICE_START_POST);
2047 } else
2048 service_enter_running(s, SERVICE_SUCCESS);
2049
2050 return;
2051
2052 fail:
2053 log_unit_warning_errno(UNIT(s), r, "Failed to run 'start-post' task: %m");
2054 service_enter_stop(s, SERVICE_FAILURE_RESOURCES);
2055 }
2056
2057 static void service_kill_control_process(Service *s) {
2058 int r;
2059
2060 assert(s);
2061
2062 if (s->control_pid <= 0)
2063 return;
2064
2065 r = kill_and_sigcont(s->control_pid, SIGKILL);
2066 if (r < 0) {
2067 _cleanup_free_ char *comm = NULL;
2068
2069 (void) get_process_comm(s->control_pid, &comm);
2070
2071 log_unit_debug_errno(UNIT(s), r, "Failed to kill control process " PID_FMT " (%s), ignoring: %m",
2072 s->control_pid, strna(comm));
2073 }
2074 }
2075
2076 static int service_adverse_to_leftover_processes(Service *s) {
2077 assert(s);
2078
2079 /* KillMode=mixed and control group are used to indicate that all process should be killed off.
2080 * SendSIGKILL= is used for services that require a clean shutdown. These are typically database
2081 * service where a SigKilled process would result in a lengthy recovery and who's shutdown or startup
2082 * time is quite variable (so Timeout settings aren't of use).
2083 *
2084 * Here we take these two factors and refuse to start a service if there are existing processes
2085 * within a control group. Databases, while generally having some protection against multiple
2086 * instances running, lets not stress the rigor of these. Also ExecStartPre= parts of the service
2087 * aren't as rigoriously written to protect aganst against multiple use. */
2088
2089 if (unit_warn_leftover_processes(UNIT(s), unit_log_leftover_process_start) > 0 &&
2090 IN_SET(s->kill_context.kill_mode, KILL_MIXED, KILL_CONTROL_GROUP) &&
2091 !s->kill_context.send_sigkill)
2092 return log_unit_error_errno(UNIT(s), SYNTHETIC_ERRNO(EBUSY),
2093 "Will not start SendSIGKILL=no service of type KillMode=control-group or mixed while processes exist");
2094
2095 return 0;
2096 }
2097
2098 static void service_enter_start(Service *s) {
2099 ExecCommand *c;
2100 usec_t timeout;
2101 pid_t pid;
2102 int r;
2103
2104 assert(s);
2105
2106 service_unwatch_control_pid(s);
2107 service_unwatch_main_pid(s);
2108
2109 r = service_adverse_to_leftover_processes(s);
2110 if (r < 0)
2111 goto fail;
2112
2113 if (s->type == SERVICE_FORKING) {
2114 s->control_command_id = SERVICE_EXEC_START;
2115 c = s->control_command = s->exec_command[SERVICE_EXEC_START];
2116
2117 s->main_command = NULL;
2118 } else {
2119 s->control_command_id = _SERVICE_EXEC_COMMAND_INVALID;
2120 s->control_command = NULL;
2121
2122 c = s->main_command = s->exec_command[SERVICE_EXEC_START];
2123 }
2124
2125 if (!c) {
2126 if (s->type != SERVICE_ONESHOT) {
2127 /* There's no command line configured for the main command? Hmm, that is strange.
2128 * This can only happen if the configuration changes at runtime. In this case,
2129 * let's enter a failure state. */
2130 log_unit_error(UNIT(s), "There's no 'start' task anymore we could start.");
2131 r = -ENXIO;
2132 goto fail;
2133 }
2134
2135 /* We force a fake state transition here. Otherwise, the unit would go directly from
2136 * SERVICE_DEAD to SERVICE_DEAD without SERVICE_ACTIVATING or SERVICE_ACTIVE
2137 * in between. This way we can later trigger actions that depend on the state
2138 * transition, including SuccessAction=. */
2139 service_set_state(s, SERVICE_START);
2140
2141 service_enter_start_post(s);
2142 return;
2143 }
2144
2145 if (IN_SET(s->type, SERVICE_SIMPLE, SERVICE_IDLE))
2146 /* For simple + idle this is the main process. We don't apply any timeout here, but
2147 * service_enter_running() will later apply the .runtime_max_usec timeout. */
2148 timeout = USEC_INFINITY;
2149 else
2150 timeout = s->timeout_start_usec;
2151
2152 r = service_spawn(s,
2153 c,
2154 timeout,
2155 EXEC_PASS_FDS|EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_APPLY_TTY_STDIN|EXEC_SET_WATCHDOG|EXEC_WRITE_CREDENTIALS,
2156 &pid);
2157 if (r < 0)
2158 goto fail;
2159
2160 if (IN_SET(s->type, SERVICE_SIMPLE, SERVICE_IDLE)) {
2161 /* For simple services we immediately start
2162 * the START_POST binaries. */
2163
2164 service_set_main_pid(s, pid);
2165 service_enter_start_post(s);
2166
2167 } else if (s->type == SERVICE_FORKING) {
2168
2169 /* For forking services we wait until the start
2170 * process exited. */
2171
2172 s->control_pid = pid;
2173 service_set_state(s, SERVICE_START);
2174
2175 } else if (IN_SET(s->type, SERVICE_ONESHOT, SERVICE_DBUS, SERVICE_NOTIFY, SERVICE_EXEC)) {
2176
2177 /* For oneshot services we wait until the start process exited, too, but it is our main process. */
2178
2179 /* For D-Bus services we know the main pid right away, but wait for the bus name to appear on the
2180 * bus. 'notify' and 'exec' services are similar. */
2181
2182 service_set_main_pid(s, pid);
2183 service_set_state(s, SERVICE_START);
2184 } else
2185 assert_not_reached("Unknown service type");
2186
2187 return;
2188
2189 fail:
2190 log_unit_warning_errno(UNIT(s), r, "Failed to run 'start' task: %m");
2191 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_RESOURCES);
2192 }
2193
2194 static void service_enter_start_pre(Service *s) {
2195 int r;
2196
2197 assert(s);
2198
2199 service_unwatch_control_pid(s);
2200
2201 s->control_command = s->exec_command[SERVICE_EXEC_START_PRE];
2202 if (s->control_command) {
2203
2204 r = service_adverse_to_leftover_processes(s);
2205 if (r < 0)
2206 goto fail;
2207
2208 s->control_command_id = SERVICE_EXEC_START_PRE;
2209
2210 r = service_spawn(s,
2211 s->control_command,
2212 s->timeout_start_usec,
2213 EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_IS_CONTROL|EXEC_APPLY_TTY_STDIN,
2214 &s->control_pid);
2215 if (r < 0)
2216 goto fail;
2217
2218 service_set_state(s, SERVICE_START_PRE);
2219 } else
2220 service_enter_start(s);
2221
2222 return;
2223
2224 fail:
2225 log_unit_warning_errno(UNIT(s), r, "Failed to run 'start-pre' task: %m");
2226 service_enter_dead(s, SERVICE_FAILURE_RESOURCES, true);
2227 }
2228
2229 static void service_enter_condition(Service *s) {
2230 int r;
2231
2232 assert(s);
2233
2234 service_unwatch_control_pid(s);
2235
2236 s->control_command = s->exec_command[SERVICE_EXEC_CONDITION];
2237 if (s->control_command) {
2238
2239 r = service_adverse_to_leftover_processes(s);
2240 if (r < 0)
2241 goto fail;
2242
2243 s->control_command_id = SERVICE_EXEC_CONDITION;
2244
2245 r = service_spawn(s,
2246 s->control_command,
2247 s->timeout_start_usec,
2248 EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_IS_CONTROL|EXEC_APPLY_TTY_STDIN,
2249 &s->control_pid);
2250
2251 if (r < 0)
2252 goto fail;
2253
2254 service_set_state(s, SERVICE_CONDITION);
2255 } else
2256 service_enter_start_pre(s);
2257
2258 return;
2259
2260 fail:
2261 log_unit_warning_errno(UNIT(s), r, "Failed to run 'exec-condition' task: %m");
2262 service_enter_dead(s, SERVICE_FAILURE_RESOURCES, true);
2263 }
2264
2265 static void service_enter_restart(Service *s) {
2266 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2267 int r;
2268
2269 assert(s);
2270
2271 if (unit_has_job_type(UNIT(s), JOB_STOP)) {
2272 /* Don't restart things if we are going down anyway */
2273 log_unit_info(UNIT(s), "Stop job pending for unit, delaying automatic restart.");
2274
2275 r = service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), s->restart_usec));
2276 if (r < 0)
2277 goto fail;
2278
2279 return;
2280 }
2281
2282 /* Any units that are bound to this service must also be
2283 * restarted. We use JOB_RESTART (instead of the more obvious
2284 * JOB_START) here so that those dependency jobs will be added
2285 * as well. */
2286 r = manager_add_job(UNIT(s)->manager, JOB_RESTART, UNIT(s), JOB_REPLACE, NULL, &error, NULL);
2287 if (r < 0)
2288 goto fail;
2289
2290 /* Count the jobs we enqueue for restarting. This counter is maintained as long as the unit isn't fully
2291 * stopped, i.e. as long as it remains up or remains in auto-start states. The use can reset the counter
2292 * explicitly however via the usual "systemctl reset-failure" logic. */
2293 s->n_restarts ++;
2294 s->flush_n_restarts = false;
2295
2296 log_struct(LOG_INFO,
2297 "MESSAGE_ID=" SD_MESSAGE_UNIT_RESTART_SCHEDULED_STR,
2298 LOG_UNIT_ID(UNIT(s)),
2299 LOG_UNIT_INVOCATION_ID(UNIT(s)),
2300 LOG_UNIT_MESSAGE(UNIT(s), "Scheduled restart job, restart counter is at %u.", s->n_restarts),
2301 "N_RESTARTS=%u", s->n_restarts);
2302
2303 /* Notify clients about changed restart counter */
2304 unit_add_to_dbus_queue(UNIT(s));
2305
2306 /* Note that we stay in the SERVICE_AUTO_RESTART state here,
2307 * it will be canceled as part of the service_stop() call that
2308 * is executed as part of JOB_RESTART. */
2309
2310 return;
2311
2312 fail:
2313 log_unit_warning(UNIT(s), "Failed to schedule restart job: %s", bus_error_message(&error, r));
2314 service_enter_dead(s, SERVICE_FAILURE_RESOURCES, false);
2315 }
2316
2317 static void service_enter_reload_by_notify(Service *s) {
2318 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2319 int r;
2320
2321 assert(s);
2322
2323 service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), s->timeout_start_usec));
2324 service_set_state(s, SERVICE_RELOAD);
2325
2326 /* service_enter_reload_by_notify is never called during a reload, thus no loops are possible. */
2327 r = manager_propagate_reload(UNIT(s)->manager, UNIT(s), JOB_FAIL, &error);
2328 if (r < 0)
2329 log_unit_warning(UNIT(s), "Failed to schedule propagation of reload: %s", bus_error_message(&error, r));
2330 }
2331
2332 static void service_enter_reload(Service *s) {
2333 int r;
2334
2335 assert(s);
2336
2337 service_unwatch_control_pid(s);
2338 s->reload_result = SERVICE_SUCCESS;
2339
2340 s->control_command = s->exec_command[SERVICE_EXEC_RELOAD];
2341 if (s->control_command) {
2342 s->control_command_id = SERVICE_EXEC_RELOAD;
2343
2344 r = service_spawn(s,
2345 s->control_command,
2346 s->timeout_start_usec,
2347 EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_IS_CONTROL|EXEC_CONTROL_CGROUP,
2348 &s->control_pid);
2349 if (r < 0)
2350 goto fail;
2351
2352 service_set_state(s, SERVICE_RELOAD);
2353 } else
2354 service_enter_running(s, SERVICE_SUCCESS);
2355
2356 return;
2357
2358 fail:
2359 log_unit_warning_errno(UNIT(s), r, "Failed to run 'reload' task: %m");
2360 s->reload_result = SERVICE_FAILURE_RESOURCES;
2361 service_enter_running(s, SERVICE_SUCCESS);
2362 }
2363
2364 static void service_run_next_control(Service *s) {
2365 usec_t timeout;
2366 int r;
2367
2368 assert(s);
2369 assert(s->control_command);
2370 assert(s->control_command->command_next);
2371
2372 assert(s->control_command_id != SERVICE_EXEC_START);
2373
2374 s->control_command = s->control_command->command_next;
2375 service_unwatch_control_pid(s);
2376
2377 if (IN_SET(s->state, SERVICE_CONDITION, SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST, SERVICE_RUNNING, SERVICE_RELOAD))
2378 timeout = s->timeout_start_usec;
2379 else
2380 timeout = s->timeout_stop_usec;
2381
2382 r = service_spawn(s,
2383 s->control_command,
2384 timeout,
2385 EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_IS_CONTROL|
2386 (IN_SET(s->control_command_id, SERVICE_EXEC_CONDITION, SERVICE_EXEC_START_PRE, SERVICE_EXEC_STOP_POST) ? EXEC_APPLY_TTY_STDIN : 0)|
2387 (IN_SET(s->control_command_id, SERVICE_EXEC_STOP, SERVICE_EXEC_STOP_POST) ? EXEC_SETENV_RESULT : 0)|
2388 (IN_SET(s->control_command_id, SERVICE_EXEC_START_POST, SERVICE_EXEC_RELOAD, SERVICE_EXEC_STOP, SERVICE_EXEC_STOP_POST) ? EXEC_CONTROL_CGROUP : 0),
2389 &s->control_pid);
2390 if (r < 0)
2391 goto fail;
2392
2393 return;
2394
2395 fail:
2396 log_unit_warning_errno(UNIT(s), r, "Failed to run next control task: %m");
2397
2398 if (IN_SET(s->state, SERVICE_CONDITION, SERVICE_START_PRE, SERVICE_START_POST, SERVICE_STOP))
2399 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_RESOURCES);
2400 else if (s->state == SERVICE_STOP_POST)
2401 service_enter_dead(s, SERVICE_FAILURE_RESOURCES, true);
2402 else if (s->state == SERVICE_RELOAD) {
2403 s->reload_result = SERVICE_FAILURE_RESOURCES;
2404 service_enter_running(s, SERVICE_SUCCESS);
2405 } else
2406 service_enter_stop(s, SERVICE_FAILURE_RESOURCES);
2407 }
2408
2409 static void service_run_next_main(Service *s) {
2410 pid_t pid;
2411 int r;
2412
2413 assert(s);
2414 assert(s->main_command);
2415 assert(s->main_command->command_next);
2416 assert(s->type == SERVICE_ONESHOT);
2417
2418 s->main_command = s->main_command->command_next;
2419 service_unwatch_main_pid(s);
2420
2421 r = service_spawn(s,
2422 s->main_command,
2423 s->timeout_start_usec,
2424 EXEC_PASS_FDS|EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_APPLY_TTY_STDIN|EXEC_SET_WATCHDOG,
2425 &pid);
2426 if (r < 0)
2427 goto fail;
2428
2429 service_set_main_pid(s, pid);
2430
2431 return;
2432
2433 fail:
2434 log_unit_warning_errno(UNIT(s), r, "Failed to run next main task: %m");
2435 service_enter_stop(s, SERVICE_FAILURE_RESOURCES);
2436 }
2437
2438 static int service_start(Unit *u) {
2439 Service *s = SERVICE(u);
2440 int r;
2441
2442 assert(s);
2443
2444 /* We cannot fulfill this request right now, try again later
2445 * please! */
2446 if (IN_SET(s->state,
2447 SERVICE_STOP, SERVICE_STOP_WATCHDOG, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
2448 SERVICE_FINAL_WATCHDOG, SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL, SERVICE_CLEANING))
2449 return -EAGAIN;
2450
2451 /* Already on it! */
2452 if (IN_SET(s->state, SERVICE_CONDITION, SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST))
2453 return 0;
2454
2455 /* A service that will be restarted must be stopped first to
2456 * trigger BindsTo and/or OnFailure dependencies. If a user
2457 * does not want to wait for the holdoff time to elapse, the
2458 * service should be manually restarted, not started. We
2459 * simply return EAGAIN here, so that any start jobs stay
2460 * queued, and assume that the auto restart timer will
2461 * eventually trigger the restart. */
2462 if (s->state == SERVICE_AUTO_RESTART)
2463 return -EAGAIN;
2464
2465 assert(IN_SET(s->state, SERVICE_DEAD, SERVICE_FAILED));
2466
2467 /* Make sure we don't enter a busy loop of some kind. */
2468 r = unit_test_start_limit(u);
2469 if (r < 0) {
2470 service_enter_dead(s, SERVICE_FAILURE_START_LIMIT_HIT, false);
2471 return r;
2472 }
2473
2474 r = unit_acquire_invocation_id(u);
2475 if (r < 0)
2476 return r;
2477
2478 s->result = SERVICE_SUCCESS;
2479 s->reload_result = SERVICE_SUCCESS;
2480 s->main_pid_known = false;
2481 s->main_pid_alien = false;
2482 s->forbid_restart = false;
2483
2484 s->status_text = mfree(s->status_text);
2485 s->status_errno = 0;
2486
2487 s->notify_state = NOTIFY_UNKNOWN;
2488
2489 s->watchdog_original_usec = s->watchdog_usec;
2490 s->watchdog_override_enable = false;
2491 s->watchdog_override_usec = USEC_INFINITY;
2492
2493 exec_command_reset_status_list_array(s->exec_command, _SERVICE_EXEC_COMMAND_MAX);
2494 exec_status_reset(&s->main_exec_status);
2495
2496 /* This is not an automatic restart? Flush the restart counter then */
2497 if (s->flush_n_restarts) {
2498 s->n_restarts = 0;
2499 s->flush_n_restarts = false;
2500 }
2501
2502 u->reset_accounting = true;
2503
2504 service_enter_condition(s);
2505 return 1;
2506 }
2507
2508 static int service_stop(Unit *u) {
2509 Service *s = SERVICE(u);
2510
2511 assert(s);
2512
2513 /* Don't create restart jobs from manual stops. */
2514 s->forbid_restart = true;
2515
2516 /* Already on it */
2517 if (IN_SET(s->state,
2518 SERVICE_STOP, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
2519 SERVICE_FINAL_WATCHDOG, SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL))
2520 return 0;
2521
2522 /* A restart will be scheduled or is in progress. */
2523 if (s->state == SERVICE_AUTO_RESTART) {
2524 service_set_state(s, SERVICE_DEAD);
2525 return 0;
2526 }
2527
2528 /* If there's already something running we go directly into
2529 * kill mode. */
2530 if (IN_SET(s->state, SERVICE_CONDITION, SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST, SERVICE_RELOAD, SERVICE_STOP_WATCHDOG)) {
2531 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_SUCCESS);
2532 return 0;
2533 }
2534
2535 /* If we are currently cleaning, then abort it, brutally. */
2536 if (s->state == SERVICE_CLEANING) {
2537 service_enter_signal(s, SERVICE_FINAL_SIGKILL, SERVICE_SUCCESS);
2538 return 0;
2539 }
2540
2541 assert(IN_SET(s->state, SERVICE_RUNNING, SERVICE_EXITED));
2542
2543 service_enter_stop(s, SERVICE_SUCCESS);
2544 return 1;
2545 }
2546
2547 static int service_reload(Unit *u) {
2548 Service *s = SERVICE(u);
2549
2550 assert(s);
2551
2552 assert(IN_SET(s->state, SERVICE_RUNNING, SERVICE_EXITED));
2553
2554 service_enter_reload(s);
2555 return 1;
2556 }
2557
2558 _pure_ static bool service_can_reload(Unit *u) {
2559 Service *s = SERVICE(u);
2560
2561 assert(s);
2562
2563 return !!s->exec_command[SERVICE_EXEC_RELOAD];
2564 }
2565
2566 static unsigned service_exec_command_index(Unit *u, ServiceExecCommand id, ExecCommand *current) {
2567 Service *s = SERVICE(u);
2568 unsigned idx = 0;
2569 ExecCommand *first, *c;
2570
2571 assert(s);
2572 assert(id >= 0);
2573 assert(id < _SERVICE_EXEC_COMMAND_MAX);
2574
2575 first = s->exec_command[id];
2576
2577 /* Figure out where we are in the list by walking back to the beginning */
2578 for (c = current; c != first; c = c->command_prev)
2579 idx++;
2580
2581 return idx;
2582 }
2583
2584 static int service_serialize_exec_command(Unit *u, FILE *f, ExecCommand *command) {
2585 _cleanup_free_ char *args = NULL, *p = NULL;
2586 size_t allocated = 0, length = 0;
2587 Service *s = SERVICE(u);
2588 const char *type, *key;
2589 ServiceExecCommand id;
2590 unsigned idx;
2591 char **arg;
2592
2593 assert(s);
2594 assert(f);
2595
2596 if (!command)
2597 return 0;
2598
2599 if (command == s->control_command) {
2600 type = "control";
2601 id = s->control_command_id;
2602 } else {
2603 type = "main";
2604 id = SERVICE_EXEC_START;
2605 }
2606
2607 idx = service_exec_command_index(u, id, command);
2608
2609 STRV_FOREACH(arg, command->argv) {
2610 _cleanup_free_ char *e = NULL;
2611 size_t n;
2612
2613 e = cescape(*arg);
2614 if (!e)
2615 return log_oom();
2616
2617 n = strlen(e);
2618 if (!GREEDY_REALLOC(args, allocated, length + 2 + n + 2))
2619 return log_oom();
2620
2621 if (length > 0)
2622 args[length++] = ' ';
2623
2624 args[length++] = '"';
2625 memcpy(args + length, e, n);
2626 length += n;
2627 args[length++] = '"';
2628 }
2629
2630 if (!GREEDY_REALLOC(args, allocated, length + 1))
2631 return log_oom();
2632
2633 args[length++] = 0;
2634
2635 p = cescape(command->path);
2636 if (!p)
2637 return log_oom();
2638
2639 key = strjoina(type, "-command");
2640 (void) serialize_item_format(f, key, "%s %u %s %s", service_exec_command_to_string(id), idx, p, args);
2641
2642 return 0;
2643 }
2644
2645 static int service_serialize(Unit *u, FILE *f, FDSet *fds) {
2646 Service *s = SERVICE(u);
2647 ServiceFDStore *fs;
2648 int r;
2649
2650 assert(u);
2651 assert(f);
2652 assert(fds);
2653
2654 (void) serialize_item(f, "state", service_state_to_string(s->state));
2655 (void) serialize_item(f, "result", service_result_to_string(s->result));
2656 (void) serialize_item(f, "reload-result", service_result_to_string(s->reload_result));
2657
2658 if (s->control_pid > 0)
2659 (void) serialize_item_format(f, "control-pid", PID_FMT, s->control_pid);
2660
2661 if (s->main_pid_known && s->main_pid > 0)
2662 (void) serialize_item_format(f, "main-pid", PID_FMT, s->main_pid);
2663
2664 (void) serialize_bool(f, "main-pid-known", s->main_pid_known);
2665 (void) serialize_bool(f, "bus-name-good", s->bus_name_good);
2666 (void) serialize_bool(f, "bus-name-owner", s->bus_name_owner);
2667
2668 (void) serialize_item_format(f, "n-restarts", "%u", s->n_restarts);
2669 (void) serialize_bool(f, "flush-n-restarts", s->flush_n_restarts);
2670
2671 r = serialize_item_escaped(f, "status-text", s->status_text);
2672 if (r < 0)
2673 return r;
2674
2675 service_serialize_exec_command(u, f, s->control_command);
2676 service_serialize_exec_command(u, f, s->main_command);
2677
2678 r = serialize_fd(f, fds, "stdin-fd", s->stdin_fd);
2679 if (r < 0)
2680 return r;
2681 r = serialize_fd(f, fds, "stdout-fd", s->stdout_fd);
2682 if (r < 0)
2683 return r;
2684 r = serialize_fd(f, fds, "stderr-fd", s->stderr_fd);
2685 if (r < 0)
2686 return r;
2687
2688 if (s->exec_fd_event_source) {
2689 r = serialize_fd(f, fds, "exec-fd", sd_event_source_get_io_fd(s->exec_fd_event_source));
2690 if (r < 0)
2691 return r;
2692
2693 (void) serialize_bool(f, "exec-fd-hot", s->exec_fd_hot);
2694 }
2695
2696 if (UNIT_ISSET(s->accept_socket)) {
2697 r = serialize_item(f, "accept-socket", UNIT_DEREF(s->accept_socket)->id);
2698 if (r < 0)
2699 return r;
2700 }
2701
2702 r = serialize_fd(f, fds, "socket-fd", s->socket_fd);
2703 if (r < 0)
2704 return r;
2705
2706 LIST_FOREACH(fd_store, fs, s->fd_store) {
2707 _cleanup_free_ char *c = NULL;
2708 int copy;
2709
2710 copy = fdset_put_dup(fds, fs->fd);
2711 if (copy < 0)
2712 return log_error_errno(copy, "Failed to copy file descriptor for serialization: %m");
2713
2714 c = cescape(fs->fdname);
2715 if (!c)
2716 return log_oom();
2717
2718 (void) serialize_item_format(f, "fd-store-fd", "%i \"%s\" %i", copy, c, fs->do_poll);
2719 }
2720
2721 if (s->main_exec_status.pid > 0) {
2722 (void) serialize_item_format(f, "main-exec-status-pid", PID_FMT, s->main_exec_status.pid);
2723 (void) serialize_dual_timestamp(f, "main-exec-status-start", &s->main_exec_status.start_timestamp);
2724 (void) serialize_dual_timestamp(f, "main-exec-status-exit", &s->main_exec_status.exit_timestamp);
2725
2726 if (dual_timestamp_is_set(&s->main_exec_status.exit_timestamp)) {
2727 (void) serialize_item_format(f, "main-exec-status-code", "%i", s->main_exec_status.code);
2728 (void) serialize_item_format(f, "main-exec-status-status", "%i", s->main_exec_status.status);
2729 }
2730 }
2731
2732 (void) serialize_dual_timestamp(f, "watchdog-timestamp", &s->watchdog_timestamp);
2733 (void) serialize_bool(f, "forbid-restart", s->forbid_restart);
2734
2735 if (s->watchdog_override_enable)
2736 (void) serialize_item_format(f, "watchdog-override-usec", USEC_FMT, s->watchdog_override_usec);
2737
2738 if (s->watchdog_original_usec != USEC_INFINITY)
2739 (void) serialize_item_format(f, "watchdog-original-usec", USEC_FMT, s->watchdog_original_usec);
2740
2741 return 0;
2742 }
2743
2744 static int service_deserialize_exec_command(
2745 Unit *u,
2746 const char *key,
2747 const char *value) {
2748
2749 Service *s = SERVICE(u);
2750 int r;
2751 unsigned idx = 0, i;
2752 bool control, found = false;
2753 ServiceExecCommand id = _SERVICE_EXEC_COMMAND_INVALID;
2754 ExecCommand *command = NULL;
2755 _cleanup_free_ char *path = NULL;
2756 _cleanup_strv_free_ char **argv = NULL;
2757
2758 enum ExecCommandState {
2759 STATE_EXEC_COMMAND_TYPE,
2760 STATE_EXEC_COMMAND_INDEX,
2761 STATE_EXEC_COMMAND_PATH,
2762 STATE_EXEC_COMMAND_ARGS,
2763 _STATE_EXEC_COMMAND_MAX,
2764 _STATE_EXEC_COMMAND_INVALID = -1,
2765 } state;
2766
2767 assert(s);
2768 assert(key);
2769 assert(value);
2770
2771 control = streq(key, "control-command");
2772
2773 state = STATE_EXEC_COMMAND_TYPE;
2774
2775 for (;;) {
2776 _cleanup_free_ char *arg = NULL;
2777
2778 r = extract_first_word(&value, &arg, NULL, EXTRACT_CUNESCAPE | EXTRACT_UNQUOTE);
2779 if (r < 0)
2780 return r;
2781 if (r == 0)
2782 break;
2783
2784 switch (state) {
2785 case STATE_EXEC_COMMAND_TYPE:
2786 id = service_exec_command_from_string(arg);
2787 if (id < 0)
2788 return -EINVAL;
2789
2790 state = STATE_EXEC_COMMAND_INDEX;
2791 break;
2792 case STATE_EXEC_COMMAND_INDEX:
2793 r = safe_atou(arg, &idx);
2794 if (r < 0)
2795 return -EINVAL;
2796
2797 state = STATE_EXEC_COMMAND_PATH;
2798 break;
2799 case STATE_EXEC_COMMAND_PATH:
2800 path = TAKE_PTR(arg);
2801 state = STATE_EXEC_COMMAND_ARGS;
2802
2803 if (!path_is_absolute(path))
2804 return -EINVAL;
2805 break;
2806 case STATE_EXEC_COMMAND_ARGS:
2807 r = strv_extend(&argv, arg);
2808 if (r < 0)
2809 return -ENOMEM;
2810 break;
2811 default:
2812 assert_not_reached("Unknown error at deserialization of exec command");
2813 break;
2814 }
2815 }
2816
2817 if (state != STATE_EXEC_COMMAND_ARGS)
2818 return -EINVAL;
2819
2820 /* Let's check whether exec command on given offset matches data that we just deserialized */
2821 for (command = s->exec_command[id], i = 0; command; command = command->command_next, i++) {
2822 if (i != idx)
2823 continue;
2824
2825 found = strv_equal(argv, command->argv) && streq(command->path, path);
2826 break;
2827 }
2828
2829 if (!found) {
2830 /* Command at the index we serialized is different, let's look for command that exactly
2831 * matches but is on different index. If there is no such command we will not resume execution. */
2832 for (command = s->exec_command[id]; command; command = command->command_next)
2833 if (strv_equal(command->argv, argv) && streq(command->path, path))
2834 break;
2835 }
2836
2837 if (command && control) {
2838 s->control_command = command;
2839 s->control_command_id = id;
2840 } else if (command)
2841 s->main_command = command;
2842 else
2843 log_unit_warning(u, "Current command vanished from the unit file, execution of the command list won't be resumed.");
2844
2845 return 0;
2846 }
2847
2848 static int service_deserialize_item(Unit *u, const char *key, const char *value, FDSet *fds) {
2849 Service *s = SERVICE(u);
2850 int r;
2851
2852 assert(u);
2853 assert(key);
2854 assert(value);
2855 assert(fds);
2856
2857 if (streq(key, "state")) {
2858 ServiceState state;
2859
2860 state = service_state_from_string(value);
2861 if (state < 0)
2862 log_unit_debug(u, "Failed to parse state value: %s", value);
2863 else
2864 s->deserialized_state = state;
2865 } else if (streq(key, "result")) {
2866 ServiceResult f;
2867
2868 f = service_result_from_string(value);
2869 if (f < 0)
2870 log_unit_debug(u, "Failed to parse result value: %s", value);
2871 else if (f != SERVICE_SUCCESS)
2872 s->result = f;
2873
2874 } else if (streq(key, "reload-result")) {
2875 ServiceResult f;
2876
2877 f = service_result_from_string(value);
2878 if (f < 0)
2879 log_unit_debug(u, "Failed to parse reload result value: %s", value);
2880 else if (f != SERVICE_SUCCESS)
2881 s->reload_result = f;
2882
2883 } else if (streq(key, "control-pid")) {
2884 pid_t pid;
2885
2886 if (parse_pid(value, &pid) < 0)
2887 log_unit_debug(u, "Failed to parse control-pid value: %s", value);
2888 else
2889 s->control_pid = pid;
2890 } else if (streq(key, "main-pid")) {
2891 pid_t pid;
2892
2893 if (parse_pid(value, &pid) < 0)
2894 log_unit_debug(u, "Failed to parse main-pid value: %s", value);
2895 else
2896 (void) service_set_main_pid(s, pid);
2897 } else if (streq(key, "main-pid-known")) {
2898 int b;
2899
2900 b = parse_boolean(value);
2901 if (b < 0)
2902 log_unit_debug(u, "Failed to parse main-pid-known value: %s", value);
2903 else
2904 s->main_pid_known = b;
2905 } else if (streq(key, "bus-name-good")) {
2906 int b;
2907
2908 b = parse_boolean(value);
2909 if (b < 0)
2910 log_unit_debug(u, "Failed to parse bus-name-good value: %s", value);
2911 else
2912 s->bus_name_good = b;
2913 } else if (streq(key, "bus-name-owner")) {
2914 r = free_and_strdup(&s->bus_name_owner, value);
2915 if (r < 0)
2916 log_unit_error_errno(u, r, "Unable to deserialize current bus owner %s: %m", value);
2917 } else if (streq(key, "status-text")) {
2918 char *t;
2919
2920 r = cunescape(value, 0, &t);
2921 if (r < 0)
2922 log_unit_debug_errno(u, r, "Failed to unescape status text '%s': %m", value);
2923 else
2924 free_and_replace(s->status_text, t);
2925
2926 } else if (streq(key, "accept-socket")) {
2927 Unit *socket;
2928
2929 r = manager_load_unit(u->manager, value, NULL, NULL, &socket);
2930 if (r < 0)
2931 log_unit_debug_errno(u, r, "Failed to load accept-socket unit '%s': %m", value);
2932 else {
2933 unit_ref_set(&s->accept_socket, u, socket);
2934 SOCKET(socket)->n_connections++;
2935 }
2936
2937 } else if (streq(key, "socket-fd")) {
2938 int fd;
2939
2940 if (safe_atoi(value, &fd) < 0 || fd < 0 || !fdset_contains(fds, fd))
2941 log_unit_debug(u, "Failed to parse socket-fd value: %s", value);
2942 else {
2943 asynchronous_close(s->socket_fd);
2944 s->socket_fd = fdset_remove(fds, fd);
2945 }
2946 } else if (streq(key, "fd-store-fd")) {
2947 _cleanup_free_ char *fdv = NULL, *fdn = NULL, *fdp = NULL;
2948 int fd;
2949 int do_poll;
2950
2951 r = extract_first_word(&value, &fdv, NULL, 0);
2952 if (r <= 0 || safe_atoi(fdv, &fd) < 0 || fd < 0 || !fdset_contains(fds, fd)) {
2953 log_unit_debug(u, "Failed to parse fd-store-fd value: %s", value);
2954 return 0;
2955 }
2956
2957 r = extract_first_word(&value, &fdn, NULL, EXTRACT_CUNESCAPE | EXTRACT_UNQUOTE);
2958 if (r <= 0) {
2959 log_unit_debug_errno(u, r, "Failed to parse fd-store-fd value \"%s\": %m", value);
2960 return 0;
2961 }
2962
2963 r = extract_first_word(&value, &fdp, NULL, 0);
2964 if (r == 0) {
2965 /* If the value is not present, we assume the default */
2966 do_poll = 1;
2967 } else if (r < 0 || safe_atoi(fdp, &do_poll) < 0) {
2968 log_unit_debug_errno(u, r, "Failed to parse fd-store-fd value \"%s\": %m", value);
2969 return 0;
2970 }
2971
2972 r = service_add_fd_store(s, fd, fdn, do_poll);
2973 if (r < 0)
2974 log_unit_error_errno(u, r, "Failed to add fd to store: %m");
2975 else
2976 fdset_remove(fds, fd);
2977 } else if (streq(key, "main-exec-status-pid")) {
2978 pid_t pid;
2979
2980 if (parse_pid(value, &pid) < 0)
2981 log_unit_debug(u, "Failed to parse main-exec-status-pid value: %s", value);
2982 else
2983 s->main_exec_status.pid = pid;
2984 } else if (streq(key, "main-exec-status-code")) {
2985 int i;
2986
2987 if (safe_atoi(value, &i) < 0)
2988 log_unit_debug(u, "Failed to parse main-exec-status-code value: %s", value);
2989 else
2990 s->main_exec_status.code = i;
2991 } else if (streq(key, "main-exec-status-status")) {
2992 int i;
2993
2994 if (safe_atoi(value, &i) < 0)
2995 log_unit_debug(u, "Failed to parse main-exec-status-status value: %s", value);
2996 else
2997 s->main_exec_status.status = i;
2998 } else if (streq(key, "main-exec-status-start"))
2999 deserialize_dual_timestamp(value, &s->main_exec_status.start_timestamp);
3000 else if (streq(key, "main-exec-status-exit"))
3001 deserialize_dual_timestamp(value, &s->main_exec_status.exit_timestamp);
3002 else if (streq(key, "watchdog-timestamp"))
3003 deserialize_dual_timestamp(value, &s->watchdog_timestamp);
3004 else if (streq(key, "forbid-restart")) {
3005 int b;
3006
3007 b = parse_boolean(value);
3008 if (b < 0)
3009 log_unit_debug(u, "Failed to parse forbid-restart value: %s", value);
3010 else
3011 s->forbid_restart = b;
3012 } else if (streq(key, "stdin-fd")) {
3013 int fd;
3014
3015 if (safe_atoi(value, &fd) < 0 || fd < 0 || !fdset_contains(fds, fd))
3016 log_unit_debug(u, "Failed to parse stdin-fd value: %s", value);
3017 else {
3018 asynchronous_close(s->stdin_fd);
3019 s->stdin_fd = fdset_remove(fds, fd);
3020 s->exec_context.stdio_as_fds = true;
3021 }
3022 } else if (streq(key, "stdout-fd")) {
3023 int fd;
3024
3025 if (safe_atoi(value, &fd) < 0 || fd < 0 || !fdset_contains(fds, fd))
3026 log_unit_debug(u, "Failed to parse stdout-fd value: %s", value);
3027 else {
3028 asynchronous_close(s->stdout_fd);
3029 s->stdout_fd = fdset_remove(fds, fd);
3030 s->exec_context.stdio_as_fds = true;
3031 }
3032 } else if (streq(key, "stderr-fd")) {
3033 int fd;
3034
3035 if (safe_atoi(value, &fd) < 0 || fd < 0 || !fdset_contains(fds, fd))
3036 log_unit_debug(u, "Failed to parse stderr-fd value: %s", value);
3037 else {
3038 asynchronous_close(s->stderr_fd);
3039 s->stderr_fd = fdset_remove(fds, fd);
3040 s->exec_context.stdio_as_fds = true;
3041 }
3042 } else if (streq(key, "exec-fd")) {
3043 int fd;
3044
3045 if (safe_atoi(value, &fd) < 0 || fd < 0 || !fdset_contains(fds, fd))
3046 log_unit_debug(u, "Failed to parse exec-fd value: %s", value);
3047 else {
3048 s->exec_fd_event_source = sd_event_source_unref(s->exec_fd_event_source);
3049
3050 fd = fdset_remove(fds, fd);
3051 if (service_allocate_exec_fd_event_source(s, fd, &s->exec_fd_event_source) < 0)
3052 safe_close(fd);
3053 }
3054 } else if (streq(key, "watchdog-override-usec")) {
3055 if (deserialize_usec(value, &s->watchdog_override_usec) < 0)
3056 log_unit_debug(u, "Failed to parse watchdog_override_usec value: %s", value);
3057 else
3058 s->watchdog_override_enable = true;
3059
3060 } else if (streq(key, "watchdog-original-usec")) {
3061 if (deserialize_usec(value, &s->watchdog_original_usec) < 0)
3062 log_unit_debug(u, "Failed to parse watchdog_original_usec value: %s", value);
3063
3064 } else if (STR_IN_SET(key, "main-command", "control-command")) {
3065 r = service_deserialize_exec_command(u, key, value);
3066 if (r < 0)
3067 log_unit_debug_errno(u, r, "Failed to parse serialized command \"%s\": %m", value);
3068
3069 } else if (streq(key, "n-restarts")) {
3070 r = safe_atou(value, &s->n_restarts);
3071 if (r < 0)
3072 log_unit_debug_errno(u, r, "Failed to parse serialized restart counter '%s': %m", value);
3073
3074 } else if (streq(key, "flush-n-restarts")) {
3075 r = parse_boolean(value);
3076 if (r < 0)
3077 log_unit_debug_errno(u, r, "Failed to parse serialized flush restart counter setting '%s': %m", value);
3078 else
3079 s->flush_n_restarts = r;
3080 } else
3081 log_unit_debug(u, "Unknown serialization key: %s", key);
3082
3083 return 0;
3084 }
3085
3086 _pure_ static UnitActiveState service_active_state(Unit *u) {
3087 const UnitActiveState *table;
3088
3089 assert(u);
3090
3091 table = SERVICE(u)->type == SERVICE_IDLE ? state_translation_table_idle : state_translation_table;
3092
3093 return table[SERVICE(u)->state];
3094 }
3095
3096 static const char *service_sub_state_to_string(Unit *u) {
3097 assert(u);
3098
3099 return service_state_to_string(SERVICE(u)->state);
3100 }
3101
3102 static bool service_may_gc(Unit *u) {
3103 Service *s = SERVICE(u);
3104
3105 assert(s);
3106
3107 /* Never clean up services that still have a process around, even if the service is formally dead. Note that
3108 * unit_may_gc() already checked our cgroup for us, we just check our two additional PIDs, too, in case they
3109 * have moved outside of the cgroup. */
3110
3111 if (main_pid_good(s) > 0 ||
3112 control_pid_good(s) > 0)
3113 return false;
3114
3115 return true;
3116 }
3117
3118 static int service_retry_pid_file(Service *s) {
3119 int r;
3120
3121 assert(s->pid_file);
3122 assert(IN_SET(s->state, SERVICE_START, SERVICE_START_POST));
3123
3124 r = service_load_pid_file(s, false);
3125 if (r < 0)
3126 return r;
3127
3128 service_unwatch_pid_file(s);
3129
3130 service_enter_running(s, SERVICE_SUCCESS);
3131 return 0;
3132 }
3133
3134 static int service_watch_pid_file(Service *s) {
3135 int r;
3136
3137 log_unit_debug(UNIT(s), "Setting watch for PID file %s", s->pid_file_pathspec->path);
3138
3139 r = path_spec_watch(s->pid_file_pathspec, service_dispatch_inotify_io);
3140 if (r < 0)
3141 goto fail;
3142
3143 /* the pidfile might have appeared just before we set the watch */
3144 log_unit_debug(UNIT(s), "Trying to read PID file %s in case it changed", s->pid_file_pathspec->path);
3145 service_retry_pid_file(s);
3146
3147 return 0;
3148 fail:
3149 log_unit_error_errno(UNIT(s), r, "Failed to set a watch for PID file %s: %m", s->pid_file_pathspec->path);
3150 service_unwatch_pid_file(s);
3151 return r;
3152 }
3153
3154 static int service_demand_pid_file(Service *s) {
3155 PathSpec *ps;
3156
3157 assert(s->pid_file);
3158 assert(!s->pid_file_pathspec);
3159
3160 ps = new0(PathSpec, 1);
3161 if (!ps)
3162 return -ENOMEM;
3163
3164 ps->unit = UNIT(s);
3165 ps->path = strdup(s->pid_file);
3166 if (!ps->path) {
3167 free(ps);
3168 return -ENOMEM;
3169 }
3170
3171 path_simplify(ps->path, false);
3172
3173 /* PATH_CHANGED would not be enough. There are daemons (sendmail) that
3174 * keep their PID file open all the time. */
3175 ps->type = PATH_MODIFIED;
3176 ps->inotify_fd = -1;
3177
3178 s->pid_file_pathspec = ps;
3179
3180 return service_watch_pid_file(s);
3181 }
3182
3183 static int service_dispatch_inotify_io(sd_event_source *source, int fd, uint32_t events, void *userdata) {
3184 PathSpec *p = userdata;
3185 Service *s;
3186
3187 assert(p);
3188
3189 s = SERVICE(p->unit);
3190
3191 assert(s);
3192 assert(fd >= 0);
3193 assert(IN_SET(s->state, SERVICE_START, SERVICE_START_POST));
3194 assert(s->pid_file_pathspec);
3195 assert(path_spec_owns_inotify_fd(s->pid_file_pathspec, fd));
3196
3197 log_unit_debug(UNIT(s), "inotify event");
3198
3199 if (path_spec_fd_event(p, events) < 0)
3200 goto fail;
3201
3202 if (service_retry_pid_file(s) == 0)
3203 return 0;
3204
3205 if (service_watch_pid_file(s) < 0)
3206 goto fail;
3207
3208 return 0;
3209
3210 fail:
3211 service_unwatch_pid_file(s);
3212 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_RESOURCES);
3213 return 0;
3214 }
3215
3216 static int service_dispatch_exec_io(sd_event_source *source, int fd, uint32_t events, void *userdata) {
3217 Service *s = SERVICE(userdata);
3218
3219 assert(s);
3220
3221 log_unit_debug(UNIT(s), "got exec-fd event");
3222
3223 /* If Type=exec is set, we'll consider a service started successfully the instant we invoked execve()
3224 * successfully for it. We implement this through a pipe() towards the child, which the kernel automatically
3225 * closes for us due to O_CLOEXEC on execve() in the child, which then triggers EOF on the pipe in the
3226 * parent. We need to be careful however, as there are other reasons that we might cause the child's side of
3227 * the pipe to be closed (for example, a simple exit()). To deal with that we'll ignore EOFs on the pipe unless
3228 * the child signalled us first that it is about to call the execve(). It does so by sending us a simple
3229 * non-zero byte via the pipe. We also provide the child with a way to inform us in case execve() failed: if it
3230 * sends a zero byte we'll ignore POLLHUP on the fd again. */
3231
3232 for (;;) {
3233 uint8_t x;
3234 ssize_t n;
3235
3236 n = read(fd, &x, sizeof(x));
3237 if (n < 0) {
3238 if (errno == EAGAIN) /* O_NONBLOCK in effect → everything queued has now been processed. */
3239 return 0;
3240
3241 return log_unit_error_errno(UNIT(s), errno, "Failed to read from exec_fd: %m");
3242 }
3243 if (n == 0) { /* EOF → the event we are waiting for */
3244
3245 s->exec_fd_event_source = sd_event_source_unref(s->exec_fd_event_source);
3246
3247 if (s->exec_fd_hot) { /* Did the child tell us to expect EOF now? */
3248 log_unit_debug(UNIT(s), "Got EOF on exec-fd");
3249
3250 s->exec_fd_hot = false;
3251
3252 /* Nice! This is what we have been waiting for. Transition to next state. */
3253 if (s->type == SERVICE_EXEC && s->state == SERVICE_START)
3254 service_enter_start_post(s);
3255 } else
3256 log_unit_debug(UNIT(s), "Got EOF on exec-fd while it was disabled, ignoring.");
3257
3258 return 0;
3259 }
3260
3261 /* A byte was read → this turns on/off the exec fd logic */
3262 assert(n == sizeof(x));
3263 s->exec_fd_hot = x;
3264 }
3265
3266 return 0;
3267 }
3268
3269 static void service_notify_cgroup_empty_event(Unit *u) {
3270 Service *s = SERVICE(u);
3271
3272 assert(u);
3273
3274 log_unit_debug(u, "Control group is empty.");
3275
3276 switch (s->state) {
3277
3278 /* Waiting for SIGCHLD is usually more interesting,
3279 * because it includes return codes/signals. Which is
3280 * why we ignore the cgroup events for most cases,
3281 * except when we don't know pid which to expect the
3282 * SIGCHLD for. */
3283
3284 case SERVICE_START:
3285 if (s->type == SERVICE_NOTIFY &&
3286 main_pid_good(s) == 0 &&
3287 control_pid_good(s) == 0) {
3288 /* No chance of getting a ready notification anymore */
3289 service_enter_stop_post(s, SERVICE_FAILURE_PROTOCOL);
3290 break;
3291 }
3292
3293 _fallthrough_;
3294 case SERVICE_START_POST:
3295 if (s->pid_file_pathspec &&
3296 main_pid_good(s) == 0 &&
3297 control_pid_good(s) == 0) {
3298
3299 /* Give up hoping for the daemon to write its PID file */
3300 log_unit_warning(u, "Daemon never wrote its PID file. Failing.");
3301
3302 service_unwatch_pid_file(s);
3303 if (s->state == SERVICE_START)
3304 service_enter_stop_post(s, SERVICE_FAILURE_PROTOCOL);
3305 else
3306 service_enter_stop(s, SERVICE_FAILURE_PROTOCOL);
3307 }
3308 break;
3309
3310 case SERVICE_RUNNING:
3311 /* service_enter_running() will figure out what to do */
3312 service_enter_running(s, SERVICE_SUCCESS);
3313 break;
3314
3315 case SERVICE_STOP_WATCHDOG:
3316 case SERVICE_STOP_SIGTERM:
3317 case SERVICE_STOP_SIGKILL:
3318
3319 if (main_pid_good(s) <= 0 && control_pid_good(s) <= 0)
3320 service_enter_stop_post(s, SERVICE_SUCCESS);
3321
3322 break;
3323
3324 case SERVICE_STOP_POST:
3325 case SERVICE_FINAL_WATCHDOG:
3326 case SERVICE_FINAL_SIGTERM:
3327 case SERVICE_FINAL_SIGKILL:
3328 if (main_pid_good(s) <= 0 && control_pid_good(s) <= 0)
3329 service_enter_dead(s, SERVICE_SUCCESS, true);
3330
3331 break;
3332
3333 /* If the cgroup empty notification comes when the unit is not active, we must have failed to clean
3334 * up the cgroup earlier and should do it now. */
3335 case SERVICE_DEAD:
3336 case SERVICE_FAILED:
3337 unit_prune_cgroup(u);
3338 break;
3339
3340 default:
3341 ;
3342 }
3343 }
3344
3345 static void service_notify_cgroup_oom_event(Unit *u) {
3346 Service *s = SERVICE(u);
3347
3348 log_unit_debug(u, "Process of control group was killed by the OOM killer.");
3349
3350 if (s->oom_policy == OOM_CONTINUE)
3351 return;
3352
3353 switch (s->state) {
3354
3355 case SERVICE_CONDITION:
3356 case SERVICE_START_PRE:
3357 case SERVICE_START:
3358 case SERVICE_START_POST:
3359 case SERVICE_STOP:
3360 if (s->oom_policy == OOM_STOP)
3361 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_OOM_KILL);
3362 else if (s->oom_policy == OOM_KILL)
3363 service_enter_signal(s, SERVICE_STOP_SIGKILL, SERVICE_FAILURE_OOM_KILL);
3364
3365 break;
3366
3367 case SERVICE_EXITED:
3368 case SERVICE_RUNNING:
3369 if (s->oom_policy == OOM_STOP)
3370 service_enter_stop(s, SERVICE_FAILURE_OOM_KILL);
3371 else if (s->oom_policy == OOM_KILL)
3372 service_enter_signal(s, SERVICE_STOP_SIGKILL, SERVICE_FAILURE_OOM_KILL);
3373
3374 break;
3375
3376 case SERVICE_STOP_WATCHDOG:
3377 case SERVICE_STOP_SIGTERM:
3378 service_enter_signal(s, SERVICE_STOP_SIGKILL, SERVICE_FAILURE_OOM_KILL);
3379 break;
3380
3381 case SERVICE_STOP_SIGKILL:
3382 case SERVICE_FINAL_SIGKILL:
3383 if (s->result == SERVICE_SUCCESS)
3384 s->result = SERVICE_FAILURE_OOM_KILL;
3385 break;
3386
3387 case SERVICE_STOP_POST:
3388 case SERVICE_FINAL_SIGTERM:
3389 service_enter_signal(s, SERVICE_FINAL_SIGKILL, SERVICE_FAILURE_OOM_KILL);
3390 break;
3391
3392 default:
3393 ;
3394 }
3395 }
3396
3397 static void service_sigchld_event(Unit *u, pid_t pid, int code, int status) {
3398 bool notify_dbus = true;
3399 Service *s = SERVICE(u);
3400 ServiceResult f;
3401 ExitClean clean_mode;
3402
3403 assert(s);
3404 assert(pid >= 0);
3405
3406 /* Oneshot services and non-SERVICE_EXEC_START commands should not be
3407 * considered daemons as they are typically not long running. */
3408 if (s->type == SERVICE_ONESHOT || (s->control_pid == pid && s->control_command_id != SERVICE_EXEC_START))
3409 clean_mode = EXIT_CLEAN_COMMAND;
3410 else
3411 clean_mode = EXIT_CLEAN_DAEMON;
3412
3413 if (is_clean_exit(code, status, clean_mode, &s->success_status))
3414 f = SERVICE_SUCCESS;
3415 else if (code == CLD_EXITED)
3416 f = SERVICE_FAILURE_EXIT_CODE;
3417 else if (code == CLD_KILLED)
3418 f = SERVICE_FAILURE_SIGNAL;
3419 else if (code == CLD_DUMPED)
3420 f = SERVICE_FAILURE_CORE_DUMP;
3421 else
3422 assert_not_reached("Unknown code");
3423
3424 if (s->main_pid == pid) {
3425 /* Forking services may occasionally move to a new PID.
3426 * As long as they update the PID file before exiting the old
3427 * PID, they're fine. */
3428 if (service_load_pid_file(s, false) > 0)
3429 return;
3430
3431 s->main_pid = 0;
3432 exec_status_exit(&s->main_exec_status, &s->exec_context, pid, code, status);
3433
3434 if (s->main_command) {
3435 /* If this is not a forking service than the
3436 * main process got started and hence we copy
3437 * the exit status so that it is recorded both
3438 * as main and as control process exit
3439 * status */
3440
3441 s->main_command->exec_status = s->main_exec_status;
3442
3443 if (s->main_command->flags & EXEC_COMMAND_IGNORE_FAILURE)
3444 f = SERVICE_SUCCESS;
3445 } else if (s->exec_command[SERVICE_EXEC_START]) {
3446
3447 /* If this is a forked process, then we should
3448 * ignore the return value if this was
3449 * configured for the starter process */
3450
3451 if (s->exec_command[SERVICE_EXEC_START]->flags & EXEC_COMMAND_IGNORE_FAILURE)
3452 f = SERVICE_SUCCESS;
3453 }
3454
3455 unit_log_process_exit(
3456 u,
3457 "Main process",
3458 service_exec_command_to_string(SERVICE_EXEC_START),
3459 f == SERVICE_SUCCESS,
3460 code, status);
3461
3462 if (s->result == SERVICE_SUCCESS)
3463 s->result = f;
3464
3465 if (s->main_command &&
3466 s->main_command->command_next &&
3467 s->type == SERVICE_ONESHOT &&
3468 f == SERVICE_SUCCESS) {
3469
3470 /* There is another command to *
3471 * execute, so let's do that. */
3472
3473 log_unit_debug(u, "Running next main command for state %s.", service_state_to_string(s->state));
3474 service_run_next_main(s);
3475
3476 } else {
3477
3478 /* The service exited, so the service is officially
3479 * gone. */
3480 s->main_command = NULL;
3481
3482 switch (s->state) {
3483
3484 case SERVICE_START_POST:
3485 case SERVICE_RELOAD:
3486 case SERVICE_STOP:
3487 /* Need to wait until the operation is
3488 * done */
3489 break;
3490
3491 case SERVICE_START:
3492 if (s->type == SERVICE_ONESHOT) {
3493 /* This was our main goal, so let's go on */
3494 if (f == SERVICE_SUCCESS)
3495 service_enter_start_post(s);
3496 else
3497 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3498 break;
3499 } else if (s->type == SERVICE_NOTIFY) {
3500 /* Only enter running through a notification, so that the
3501 * SERVICE_START state signifies that no ready notification
3502 * has been received */
3503 if (f != SERVICE_SUCCESS)
3504 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3505 else if (!s->remain_after_exit || s->notify_access == NOTIFY_MAIN)
3506 /* The service has never been and will never be active */
3507 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_PROTOCOL);
3508 break;
3509 }
3510
3511 _fallthrough_;
3512 case SERVICE_RUNNING:
3513 service_enter_running(s, f);
3514 break;
3515
3516 case SERVICE_STOP_WATCHDOG:
3517 case SERVICE_STOP_SIGTERM:
3518 case SERVICE_STOP_SIGKILL:
3519
3520 if (control_pid_good(s) <= 0)
3521 service_enter_stop_post(s, f);
3522
3523 /* If there is still a control process, wait for that first */
3524 break;
3525
3526 case SERVICE_STOP_POST:
3527
3528 if (control_pid_good(s) <= 0)
3529 service_enter_signal(s, SERVICE_FINAL_SIGTERM, f);
3530
3531 break;
3532
3533 case SERVICE_FINAL_WATCHDOG:
3534 case SERVICE_FINAL_SIGTERM:
3535 case SERVICE_FINAL_SIGKILL:
3536
3537 if (control_pid_good(s) <= 0)
3538 service_enter_dead(s, f, true);
3539 break;
3540
3541 default:
3542 assert_not_reached("Uh, main process died at wrong time.");
3543 }
3544 }
3545
3546 } else if (s->control_pid == pid) {
3547 s->control_pid = 0;
3548
3549 /* ExecCondition= calls that exit with (0, 254] should invoke skip-like behavior instead of failing */
3550 if (f == SERVICE_FAILURE_EXIT_CODE && s->state == SERVICE_CONDITION && status < 255)
3551 f = SERVICE_SKIP_CONDITION;
3552
3553 if (s->control_command) {
3554 exec_status_exit(&s->control_command->exec_status, &s->exec_context, pid, code, status);
3555
3556 if (s->control_command->flags & EXEC_COMMAND_IGNORE_FAILURE)
3557 f = SERVICE_SUCCESS;
3558 }
3559
3560 unit_log_process_exit(
3561 u,
3562 "Control process",
3563 service_exec_command_to_string(s->control_command_id),
3564 f == SERVICE_SUCCESS,
3565 code, status);
3566
3567 if (s->state != SERVICE_RELOAD && s->result == SERVICE_SUCCESS)
3568 s->result = f;
3569
3570 if (s->control_command &&
3571 s->control_command->command_next &&
3572 f == SERVICE_SUCCESS) {
3573
3574 /* There is another command to *
3575 * execute, so let's do that. */
3576
3577 log_unit_debug(u, "Running next control command for state %s.", service_state_to_string(s->state));
3578 service_run_next_control(s);
3579
3580 } else {
3581 /* No further commands for this step, so let's
3582 * figure out what to do next */
3583
3584 s->control_command = NULL;
3585 s->control_command_id = _SERVICE_EXEC_COMMAND_INVALID;
3586
3587 log_unit_debug(u, "Got final SIGCHLD for state %s.", service_state_to_string(s->state));
3588
3589 switch (s->state) {
3590
3591 case SERVICE_CONDITION:
3592 if (f == SERVICE_SUCCESS)
3593 service_enter_start_pre(s);
3594 else
3595 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3596 break;
3597
3598 case SERVICE_START_PRE:
3599 if (f == SERVICE_SUCCESS)
3600 service_enter_start(s);
3601 else
3602 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3603 break;
3604
3605 case SERVICE_START:
3606 if (s->type != SERVICE_FORKING)
3607 /* Maybe spurious event due to a reload that changed the type? */
3608 break;
3609
3610 if (f != SERVICE_SUCCESS) {
3611 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3612 break;
3613 }
3614
3615 if (s->pid_file) {
3616 bool has_start_post;
3617 int r;
3618
3619 /* Let's try to load the pid file here if we can.
3620 * The PID file might actually be created by a START_POST
3621 * script. In that case don't worry if the loading fails. */
3622
3623 has_start_post = s->exec_command[SERVICE_EXEC_START_POST];
3624 r = service_load_pid_file(s, !has_start_post);
3625 if (!has_start_post && r < 0) {
3626 r = service_demand_pid_file(s);
3627 if (r < 0 || cgroup_good(s) == 0)
3628 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_PROTOCOL);
3629 break;
3630 }
3631 } else
3632 service_search_main_pid(s);
3633
3634 service_enter_start_post(s);
3635 break;
3636
3637 case SERVICE_START_POST:
3638 if (f != SERVICE_SUCCESS) {
3639 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3640 break;
3641 }
3642
3643 if (s->pid_file) {
3644 int r;
3645
3646 r = service_load_pid_file(s, true);
3647 if (r < 0) {
3648 r = service_demand_pid_file(s);
3649 if (r < 0 || cgroup_good(s) == 0)
3650 service_enter_stop(s, SERVICE_FAILURE_PROTOCOL);
3651 break;
3652 }
3653 } else
3654 service_search_main_pid(s);
3655
3656 service_enter_running(s, SERVICE_SUCCESS);
3657 break;
3658
3659 case SERVICE_RELOAD:
3660 if (f == SERVICE_SUCCESS)
3661 if (service_load_pid_file(s, true) < 0)
3662 service_search_main_pid(s);
3663
3664 s->reload_result = f;
3665 service_enter_running(s, SERVICE_SUCCESS);
3666 break;
3667
3668 case SERVICE_STOP:
3669 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3670 break;
3671
3672 case SERVICE_STOP_WATCHDOG:
3673 case SERVICE_STOP_SIGTERM:
3674 case SERVICE_STOP_SIGKILL:
3675 if (main_pid_good(s) <= 0)
3676 service_enter_stop_post(s, f);
3677
3678 /* If there is still a service process around, wait until
3679 * that one quit, too */
3680 break;
3681
3682 case SERVICE_STOP_POST:
3683 if (main_pid_good(s) <= 0)
3684 service_enter_signal(s, SERVICE_FINAL_SIGTERM, f);
3685 break;
3686
3687 case SERVICE_FINAL_WATCHDOG:
3688 case SERVICE_FINAL_SIGTERM:
3689 case SERVICE_FINAL_SIGKILL:
3690 if (main_pid_good(s) <= 0)
3691 service_enter_dead(s, f, true);
3692 break;
3693
3694 case SERVICE_CLEANING:
3695
3696 if (s->clean_result == SERVICE_SUCCESS)
3697 s->clean_result = f;
3698
3699 service_enter_dead(s, SERVICE_SUCCESS, false);
3700 break;
3701
3702 default:
3703 assert_not_reached("Uh, control process died at wrong time.");
3704 }
3705 }
3706 } else /* Neither control nor main PID? If so, don't notify about anything */
3707 notify_dbus = false;
3708
3709 /* Notify clients about changed exit status */
3710 if (notify_dbus)
3711 unit_add_to_dbus_queue(u);
3712
3713 /* We watch the main/control process otherwise we can't retrieve the unit they
3714 * belong to with cgroupv1. But if they are not our direct child, we won't get a
3715 * SIGCHLD for them. Therefore we need to look for others to watch so we can
3716 * detect when the cgroup becomes empty. Note that the control process is always
3717 * our child so it's pointless to watch all other processes. */
3718 if (!control_pid_good(s))
3719 if (!s->main_pid_known || s->main_pid_alien)
3720 (void) unit_enqueue_rewatch_pids(u);
3721 }
3722
3723 static int service_dispatch_timer(sd_event_source *source, usec_t usec, void *userdata) {
3724 Service *s = SERVICE(userdata);
3725
3726 assert(s);
3727 assert(source == s->timer_event_source);
3728
3729 switch (s->state) {
3730
3731 case SERVICE_CONDITION:
3732 case SERVICE_START_PRE:
3733 case SERVICE_START:
3734 case SERVICE_START_POST:
3735 switch (s->timeout_start_failure_mode) {
3736
3737 case SERVICE_TIMEOUT_TERMINATE:
3738 log_unit_warning(UNIT(s), "%s operation timed out. Terminating.", service_state_to_string(s->state));
3739 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_TIMEOUT);
3740 break;
3741
3742 case SERVICE_TIMEOUT_ABORT:
3743 log_unit_warning(UNIT(s), "%s operation timed out. Aborting.", service_state_to_string(s->state));
3744 service_enter_signal(s, SERVICE_STOP_WATCHDOG, SERVICE_FAILURE_TIMEOUT);
3745 break;
3746
3747 case SERVICE_TIMEOUT_KILL:
3748 if (s->kill_context.send_sigkill) {
3749 log_unit_warning(UNIT(s), "%s operation timed out. Killing.", service_state_to_string(s->state));
3750 service_enter_signal(s, SERVICE_STOP_SIGKILL, SERVICE_FAILURE_TIMEOUT);
3751 } else {
3752 log_unit_warning(UNIT(s), "%s operation timed out. Skipping SIGKILL.", service_state_to_string(s->state));
3753 service_enter_stop_post(s, SERVICE_FAILURE_TIMEOUT);
3754 }
3755 break;
3756
3757 default:
3758 assert_not_reached("unknown timeout mode");
3759 }
3760 break;
3761
3762 case SERVICE_RUNNING:
3763 log_unit_warning(UNIT(s), "Service reached runtime time limit. Stopping.");
3764 service_enter_stop(s, SERVICE_FAILURE_TIMEOUT);
3765 break;
3766
3767 case SERVICE_RELOAD:
3768 log_unit_warning(UNIT(s), "Reload operation timed out. Killing reload process.");
3769 service_kill_control_process(s);
3770 s->reload_result = SERVICE_FAILURE_TIMEOUT;
3771 service_enter_running(s, SERVICE_SUCCESS);
3772 break;
3773
3774 case SERVICE_STOP:
3775 switch (s->timeout_stop_failure_mode) {
3776
3777 case SERVICE_TIMEOUT_TERMINATE:
3778 log_unit_warning(UNIT(s), "Stopping timed out. Terminating.");
3779 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_TIMEOUT);
3780 break;
3781
3782 case SERVICE_TIMEOUT_ABORT:
3783 log_unit_warning(UNIT(s), "Stopping timed out. Aborting.");
3784 service_enter_signal(s, SERVICE_STOP_WATCHDOG, SERVICE_FAILURE_TIMEOUT);
3785 break;
3786
3787 case SERVICE_TIMEOUT_KILL:
3788 if (s->kill_context.send_sigkill) {
3789 log_unit_warning(UNIT(s), "Stopping timed out. Killing.");
3790 service_enter_signal(s, SERVICE_STOP_SIGKILL, SERVICE_FAILURE_TIMEOUT);
3791 } else {
3792 log_unit_warning(UNIT(s), "Stopping timed out. Skipping SIGKILL.");
3793 service_enter_stop_post(s, SERVICE_FAILURE_TIMEOUT);
3794 }
3795 break;
3796
3797 default:
3798 assert_not_reached("unknown timeout mode");
3799 }
3800 break;
3801
3802 case SERVICE_STOP_WATCHDOG:
3803 if (s->kill_context.send_sigkill) {
3804 log_unit_warning(UNIT(s), "State 'stop-watchdog' timed out. Killing.");
3805 service_enter_signal(s, SERVICE_STOP_SIGKILL, SERVICE_FAILURE_TIMEOUT);
3806 } else {
3807 log_unit_warning(UNIT(s), "State 'stop-watchdog' timed out. Skipping SIGKILL.");
3808 service_enter_stop_post(s, SERVICE_FAILURE_TIMEOUT);
3809 }
3810 break;
3811
3812 case SERVICE_STOP_SIGTERM:
3813 if (s->timeout_stop_failure_mode == SERVICE_TIMEOUT_ABORT) {
3814 log_unit_warning(UNIT(s), "State 'stop-sigterm' timed out. Aborting.");
3815 service_enter_signal(s, SERVICE_STOP_WATCHDOG, SERVICE_FAILURE_TIMEOUT);
3816 } else if (s->kill_context.send_sigkill) {
3817 log_unit_warning(UNIT(s), "State 'stop-sigterm' timed out. Killing.");
3818 service_enter_signal(s, SERVICE_STOP_SIGKILL, SERVICE_FAILURE_TIMEOUT);
3819 } else {
3820 log_unit_warning(UNIT(s), "State 'stop-sigterm' timed out. Skipping SIGKILL.");
3821 service_enter_stop_post(s, SERVICE_FAILURE_TIMEOUT);
3822 }
3823
3824 break;
3825
3826 case SERVICE_STOP_SIGKILL:
3827 /* Uh, we sent a SIGKILL and it is still not gone?
3828 * Must be something we cannot kill, so let's just be
3829 * weirded out and continue */
3830
3831 log_unit_warning(UNIT(s), "Processes still around after SIGKILL. Ignoring.");
3832 service_enter_stop_post(s, SERVICE_FAILURE_TIMEOUT);
3833 break;
3834
3835 case SERVICE_STOP_POST:
3836 switch (s->timeout_stop_failure_mode) {
3837
3838 case SERVICE_TIMEOUT_TERMINATE:
3839 log_unit_warning(UNIT(s), "State 'stop-post' timed out. Terminating.");
3840 service_enter_signal(s, SERVICE_FINAL_SIGTERM, SERVICE_FAILURE_TIMEOUT);
3841 break;
3842
3843 case SERVICE_TIMEOUT_ABORT:
3844 log_unit_warning(UNIT(s), "State 'stop-post' timed out. Aborting.");
3845 service_enter_signal(s, SERVICE_FINAL_WATCHDOG, SERVICE_FAILURE_TIMEOUT);
3846 break;
3847
3848 case SERVICE_TIMEOUT_KILL:
3849 if (s->kill_context.send_sigkill) {
3850 log_unit_warning(UNIT(s), "State 'stop-post' timed out. Killing.");
3851 service_enter_signal(s, SERVICE_FINAL_SIGKILL, SERVICE_FAILURE_TIMEOUT);
3852 } else {
3853 log_unit_warning(UNIT(s), "State 'stop-post' timed out. Skipping SIGKILL. Entering failed mode.");
3854 service_enter_dead(s, SERVICE_FAILURE_TIMEOUT, false);
3855 }
3856 break;
3857
3858 default:
3859 assert_not_reached("unknown timeout mode");
3860 }
3861 break;
3862
3863 case SERVICE_FINAL_WATCHDOG:
3864 if (s->kill_context.send_sigkill) {
3865 log_unit_warning(UNIT(s), "State 'final-watchdog' timed out. Killing.");
3866 service_enter_signal(s, SERVICE_FINAL_SIGKILL, SERVICE_FAILURE_TIMEOUT);
3867 } else {
3868 log_unit_warning(UNIT(s), "State 'final-watchdog' timed out. Skipping SIGKILL. Entering failed mode.");
3869 service_enter_dead(s, SERVICE_FAILURE_TIMEOUT, false);
3870 }
3871 break;
3872
3873 case SERVICE_FINAL_SIGTERM:
3874 if (s->timeout_stop_failure_mode == SERVICE_TIMEOUT_ABORT) {
3875 log_unit_warning(UNIT(s), "State 'final-sigterm' timed out. Aborting.");
3876 service_enter_signal(s, SERVICE_FINAL_WATCHDOG, SERVICE_FAILURE_TIMEOUT);
3877 } else if (s->kill_context.send_sigkill) {
3878 log_unit_warning(UNIT(s), "State 'final-sigterm' timed out. Killing.");
3879 service_enter_signal(s, SERVICE_FINAL_SIGKILL, SERVICE_FAILURE_TIMEOUT);
3880 } else {
3881 log_unit_warning(UNIT(s), "State 'final-sigterm' timed out. Skipping SIGKILL. Entering failed mode.");
3882 service_enter_dead(s, SERVICE_FAILURE_TIMEOUT, false);
3883 }
3884
3885 break;
3886
3887 case SERVICE_FINAL_SIGKILL:
3888 log_unit_warning(UNIT(s), "Processes still around after final SIGKILL. Entering failed mode.");
3889 service_enter_dead(s, SERVICE_FAILURE_TIMEOUT, true);
3890 break;
3891
3892 case SERVICE_AUTO_RESTART:
3893 if (s->restart_usec > 0) {
3894 char buf_restart[FORMAT_TIMESPAN_MAX];
3895 log_unit_debug(UNIT(s),
3896 "Service RestartSec=%s expired, scheduling restart.",
3897 format_timespan(buf_restart, sizeof buf_restart, s->restart_usec, USEC_PER_SEC));
3898 } else
3899 log_unit_debug(UNIT(s),
3900 "Service has no hold-off time (RestartSec=0), scheduling restart.");
3901
3902 service_enter_restart(s);
3903 break;
3904
3905 case SERVICE_CLEANING:
3906 log_unit_warning(UNIT(s), "Cleaning timed out. killing.");
3907
3908 if (s->clean_result == SERVICE_SUCCESS)
3909 s->clean_result = SERVICE_FAILURE_TIMEOUT;
3910
3911 service_enter_signal(s, SERVICE_FINAL_SIGKILL, 0);
3912 break;
3913
3914 default:
3915 assert_not_reached("Timeout at wrong time.");
3916 }
3917
3918 return 0;
3919 }
3920
3921 static int service_dispatch_watchdog(sd_event_source *source, usec_t usec, void *userdata) {
3922 Service *s = SERVICE(userdata);
3923 char t[FORMAT_TIMESPAN_MAX];
3924 usec_t watchdog_usec;
3925
3926 assert(s);
3927 assert(source == s->watchdog_event_source);
3928
3929 watchdog_usec = service_get_watchdog_usec(s);
3930
3931 if (UNIT(s)->manager->service_watchdogs) {
3932 log_unit_error(UNIT(s), "Watchdog timeout (limit %s)!",
3933 format_timespan(t, sizeof(t), watchdog_usec, 1));
3934
3935 service_enter_signal(s, SERVICE_STOP_WATCHDOG, SERVICE_FAILURE_WATCHDOG);
3936 } else
3937 log_unit_warning(UNIT(s), "Watchdog disabled! Ignoring watchdog timeout (limit %s)!",
3938 format_timespan(t, sizeof(t), watchdog_usec, 1));
3939
3940 return 0;
3941 }
3942
3943 static bool service_notify_message_authorized(Service *s, pid_t pid, FDSet *fds) {
3944 assert(s);
3945
3946 if (s->notify_access == NOTIFY_NONE) {
3947 log_unit_warning(UNIT(s), "Got notification message from PID "PID_FMT", but reception is disabled.", pid);
3948 return false;
3949 }
3950
3951 if (s->notify_access == NOTIFY_MAIN && pid != s->main_pid) {
3952 if (s->main_pid != 0)
3953 log_unit_warning(UNIT(s), "Got notification message from PID "PID_FMT", but reception only permitted for main PID "PID_FMT, pid, s->main_pid);
3954 else
3955 log_unit_warning(UNIT(s), "Got notification message from PID "PID_FMT", but reception only permitted for main PID which is currently not known", pid);
3956
3957 return false;
3958 }
3959
3960 if (s->notify_access == NOTIFY_EXEC && pid != s->main_pid && pid != s->control_pid) {
3961 if (s->main_pid != 0 && s->control_pid != 0)
3962 log_unit_warning(UNIT(s), "Got notification message from PID "PID_FMT", but reception only permitted for main PID "PID_FMT" and control PID "PID_FMT,
3963 pid, s->main_pid, s->control_pid);
3964 else if (s->main_pid != 0)
3965 log_unit_warning(UNIT(s), "Got notification message from PID "PID_FMT", but reception only permitted for main PID "PID_FMT, pid, s->main_pid);
3966 else if (s->control_pid != 0)
3967 log_unit_warning(UNIT(s), "Got notification message from PID "PID_FMT", but reception only permitted for control PID "PID_FMT, pid, s->control_pid);
3968 else
3969 log_unit_warning(UNIT(s), "Got notification message from PID "PID_FMT", but reception only permitted for main PID and control PID which are currently not known", pid);
3970
3971 return false;
3972 }
3973
3974 return true;
3975 }
3976
3977 static void service_force_watchdog(Service *s) {
3978 if (!UNIT(s)->manager->service_watchdogs)
3979 return;
3980
3981 log_unit_error(UNIT(s), "Watchdog request (last status: %s)!",
3982 s->status_text ? s->status_text : "<unset>");
3983
3984 service_enter_signal(s, SERVICE_STOP_WATCHDOG, SERVICE_FAILURE_WATCHDOG);
3985 }
3986
3987 static void service_notify_message(
3988 Unit *u,
3989 const struct ucred *ucred,
3990 char * const *tags,
3991 FDSet *fds) {
3992
3993 Service *s = SERVICE(u);
3994 bool notify_dbus = false;
3995 const char *e;
3996 char * const *i;
3997 int r;
3998
3999 assert(u);
4000 assert(ucred);
4001
4002 if (!service_notify_message_authorized(SERVICE(u), ucred->pid, fds))
4003 return;
4004
4005 if (DEBUG_LOGGING) {
4006 _cleanup_free_ char *cc = NULL;
4007
4008 cc = strv_join(tags, ", ");
4009 log_unit_debug(u, "Got notification message from PID "PID_FMT" (%s)", ucred->pid, isempty(cc) ? "n/a" : cc);
4010 }
4011
4012 /* Interpret MAINPID= */
4013 e = strv_find_startswith(tags, "MAINPID=");
4014 if (e && IN_SET(s->state, SERVICE_START, SERVICE_START_POST, SERVICE_RUNNING, SERVICE_RELOAD)) {
4015 pid_t new_main_pid;
4016
4017 if (parse_pid(e, &new_main_pid) < 0)
4018 log_unit_warning(u, "Failed to parse MAINPID= field in notification message, ignoring: %s", e);
4019 else if (!s->main_pid_known || new_main_pid != s->main_pid) {
4020
4021 r = service_is_suitable_main_pid(s, new_main_pid, LOG_WARNING);
4022 if (r == 0) {
4023 /* The new main PID is a bit suspicious, which is OK if the sender is privileged. */
4024
4025 if (ucred->uid == 0) {
4026 log_unit_debug(u, "New main PID "PID_FMT" does not belong to service, but we'll accept it as the request to change it came from a privileged process.", new_main_pid);
4027 r = 1;
4028 } else
4029 log_unit_debug(u, "New main PID "PID_FMT" does not belong to service, refusing.", new_main_pid);
4030 }
4031 if (r > 0) {
4032 service_set_main_pid(s, new_main_pid);
4033
4034 r = unit_watch_pid(UNIT(s), new_main_pid, false);
4035 if (r < 0)
4036 log_unit_warning_errno(UNIT(s), r, "Failed to watch new main PID "PID_FMT" for service: %m", new_main_pid);
4037
4038 notify_dbus = true;
4039 }
4040 }
4041 }
4042
4043 /* Interpret READY=/STOPPING=/RELOADING=. Last one wins. */
4044 STRV_FOREACH_BACKWARDS(i, tags) {
4045
4046 if (streq(*i, "READY=1")) {
4047 s->notify_state = NOTIFY_READY;
4048
4049 /* Type=notify services inform us about completed
4050 * initialization with READY=1 */
4051 if (s->type == SERVICE_NOTIFY && s->state == SERVICE_START)
4052 service_enter_start_post(s);
4053
4054 /* Sending READY=1 while we are reloading informs us
4055 * that the reloading is complete */
4056 if (s->state == SERVICE_RELOAD && s->control_pid == 0)
4057 service_enter_running(s, SERVICE_SUCCESS);
4058
4059 notify_dbus = true;
4060 break;
4061
4062 } else if (streq(*i, "RELOADING=1")) {
4063 s->notify_state = NOTIFY_RELOADING;
4064
4065 if (s->state == SERVICE_RUNNING)
4066 service_enter_reload_by_notify(s);
4067
4068 notify_dbus = true;
4069 break;
4070
4071 } else if (streq(*i, "STOPPING=1")) {
4072 s->notify_state = NOTIFY_STOPPING;
4073
4074 if (s->state == SERVICE_RUNNING)
4075 service_enter_stop_by_notify(s);
4076
4077 notify_dbus = true;
4078 break;
4079 }
4080 }
4081
4082 /* Interpret STATUS= */
4083 e = strv_find_startswith(tags, "STATUS=");
4084 if (e) {
4085 _cleanup_free_ char *t = NULL;
4086
4087 if (!isempty(e)) {
4088 /* Note that this size limit check is mostly paranoia: since the datagram size we are willing
4089 * to process is already limited to NOTIFY_BUFFER_MAX, this limit here should never be hit. */
4090 if (strlen(e) > STATUS_TEXT_MAX)
4091 log_unit_warning(u, "Status message overly long (%zu > %u), ignoring.", strlen(e), STATUS_TEXT_MAX);
4092 else if (!utf8_is_valid(e))
4093 log_unit_warning(u, "Status message in notification message is not UTF-8 clean, ignoring.");
4094 else {
4095 t = strdup(e);
4096 if (!t)
4097 log_oom();
4098 }
4099 }
4100
4101 if (!streq_ptr(s->status_text, t)) {
4102 free_and_replace(s->status_text, t);
4103 notify_dbus = true;
4104 }
4105 }
4106
4107 /* Interpret ERRNO= */
4108 e = strv_find_startswith(tags, "ERRNO=");
4109 if (e) {
4110 int status_errno;
4111
4112 status_errno = parse_errno(e);
4113 if (status_errno < 0)
4114 log_unit_warning_errno(u, status_errno,
4115 "Failed to parse ERRNO= field value '%s' in notification message: %m", e);
4116 else if (s->status_errno != status_errno) {
4117 s->status_errno = status_errno;
4118 notify_dbus = true;
4119 }
4120 }
4121
4122 /* Interpret EXTEND_TIMEOUT= */
4123 e = strv_find_startswith(tags, "EXTEND_TIMEOUT_USEC=");
4124 if (e) {
4125 usec_t extend_timeout_usec;
4126 if (safe_atou64(e, &extend_timeout_usec) < 0)
4127 log_unit_warning(u, "Failed to parse EXTEND_TIMEOUT_USEC=%s", e);
4128 else
4129 service_extend_timeout(s, extend_timeout_usec);
4130 }
4131
4132 /* Interpret WATCHDOG= */
4133 e = strv_find_startswith(tags, "WATCHDOG=");
4134 if (e) {
4135 if (streq(e, "1"))
4136 service_reset_watchdog(s);
4137 else if (streq(e, "trigger"))
4138 service_force_watchdog(s);
4139 else
4140 log_unit_warning(u, "Passed WATCHDOG= field is invalid, ignoring.");
4141 }
4142
4143 e = strv_find_startswith(tags, "WATCHDOG_USEC=");
4144 if (e) {
4145 usec_t watchdog_override_usec;
4146 if (safe_atou64(e, &watchdog_override_usec) < 0)
4147 log_unit_warning(u, "Failed to parse WATCHDOG_USEC=%s", e);
4148 else
4149 service_override_watchdog_timeout(s, watchdog_override_usec);
4150 }
4151
4152 /* Process FD store messages. Either FDSTOREREMOVE=1 for removal, or FDSTORE=1 for addition. In both cases,
4153 * process FDNAME= for picking the file descriptor name to use. Note that FDNAME= is required when removing
4154 * fds, but optional when pushing in new fds, for compatibility reasons. */
4155 if (strv_find(tags, "FDSTOREREMOVE=1")) {
4156 const char *name;
4157
4158 name = strv_find_startswith(tags, "FDNAME=");
4159 if (!name || !fdname_is_valid(name))
4160 log_unit_warning(u, "FDSTOREREMOVE=1 requested, but no valid file descriptor name passed, ignoring.");
4161 else
4162 service_remove_fd_store(s, name);
4163
4164 } else if (strv_find(tags, "FDSTORE=1")) {
4165 const char *name;
4166
4167 name = strv_find_startswith(tags, "FDNAME=");
4168 if (name && !fdname_is_valid(name)) {
4169 log_unit_warning(u, "Passed FDNAME= name is invalid, ignoring.");
4170 name = NULL;
4171 }
4172
4173 (void) service_add_fd_store_set(s, fds, name, !strv_contains(tags, "FDPOLL=0"));
4174 }
4175
4176 /* Notify clients about changed status or main pid */
4177 if (notify_dbus)
4178 unit_add_to_dbus_queue(u);
4179 }
4180
4181 static int service_get_timeout(Unit *u, usec_t *timeout) {
4182 Service *s = SERVICE(u);
4183 uint64_t t;
4184 int r;
4185
4186 if (!s->timer_event_source)
4187 return 0;
4188
4189 r = sd_event_source_get_time(s->timer_event_source, &t);
4190 if (r < 0)
4191 return r;
4192 if (t == USEC_INFINITY)
4193 return 0;
4194
4195 *timeout = t;
4196 return 1;
4197 }
4198
4199 static void service_bus_name_owner_change(Unit *u, const char *new_owner) {
4200
4201 Service *s = SERVICE(u);
4202 int r;
4203
4204 assert(s);
4205
4206 if (new_owner)
4207 log_unit_debug(u, "D-Bus name %s now owned by %s", s->bus_name, new_owner);
4208 else
4209 log_unit_debug(u, "D-Bus name %s now not owned by anyone.", s->bus_name);
4210
4211 s->bus_name_good = new_owner;
4212
4213 /* Track the current owner, so we can reconstruct changes after a daemon reload */
4214 r = free_and_strdup(&s->bus_name_owner, new_owner);
4215 if (r < 0) {
4216 log_unit_error_errno(u, r, "Unable to set new bus name owner %s: %m", new_owner);
4217 return;
4218 }
4219
4220 if (s->type == SERVICE_DBUS) {
4221
4222 /* service_enter_running() will figure out what to
4223 * do */
4224 if (s->state == SERVICE_RUNNING)
4225 service_enter_running(s, SERVICE_SUCCESS);
4226 else if (s->state == SERVICE_START && new_owner)
4227 service_enter_start_post(s);
4228
4229 } else if (new_owner &&
4230 s->main_pid <= 0 &&
4231 IN_SET(s->state,
4232 SERVICE_START,
4233 SERVICE_START_POST,
4234 SERVICE_RUNNING,
4235 SERVICE_RELOAD)) {
4236
4237 _cleanup_(sd_bus_creds_unrefp) sd_bus_creds *creds = NULL;
4238 pid_t pid;
4239
4240 /* Try to acquire PID from bus service */
4241
4242 r = sd_bus_get_name_creds(u->manager->api_bus, s->bus_name, SD_BUS_CREDS_PID, &creds);
4243 if (r >= 0)
4244 r = sd_bus_creds_get_pid(creds, &pid);
4245 if (r >= 0) {
4246 log_unit_debug(u, "D-Bus name %s is now owned by process " PID_FMT, s->bus_name, pid);
4247
4248 service_set_main_pid(s, pid);
4249 unit_watch_pid(UNIT(s), pid, false);
4250 }
4251 }
4252 }
4253
4254 int service_set_socket_fd(Service *s, int fd, Socket *sock, bool selinux_context_net) {
4255 _cleanup_free_ char *peer = NULL;
4256 int r;
4257
4258 assert(s);
4259 assert(fd >= 0);
4260
4261 /* This is called by the socket code when instantiating a new service for a stream socket and the socket needs
4262 * to be configured. We take ownership of the passed fd on success. */
4263
4264 if (UNIT(s)->load_state != UNIT_LOADED)
4265 return -EINVAL;
4266
4267 if (s->socket_fd >= 0)
4268 return -EBUSY;
4269
4270 if (s->state != SERVICE_DEAD)
4271 return -EAGAIN;
4272
4273 if (getpeername_pretty(fd, true, &peer) >= 0) {
4274
4275 if (UNIT(s)->description) {
4276 _cleanup_free_ char *a;
4277
4278 a = strjoin(UNIT(s)->description, " (", peer, ")");
4279 if (!a)
4280 return -ENOMEM;
4281
4282 r = unit_set_description(UNIT(s), a);
4283 } else
4284 r = unit_set_description(UNIT(s), peer);
4285
4286 if (r < 0)
4287 return r;
4288 }
4289
4290 r = unit_add_two_dependencies(UNIT(sock), UNIT_BEFORE, UNIT_TRIGGERS, UNIT(s), false, UNIT_DEPENDENCY_IMPLICIT);
4291 if (r < 0)
4292 return r;
4293
4294 s->socket_fd = fd;
4295 s->socket_fd_selinux_context_net = selinux_context_net;
4296
4297 unit_ref_set(&s->accept_socket, UNIT(s), UNIT(sock));
4298 return 0;
4299 }
4300
4301 static void service_reset_failed(Unit *u) {
4302 Service *s = SERVICE(u);
4303
4304 assert(s);
4305
4306 if (s->state == SERVICE_FAILED)
4307 service_set_state(s, SERVICE_DEAD);
4308
4309 s->result = SERVICE_SUCCESS;
4310 s->reload_result = SERVICE_SUCCESS;
4311 s->clean_result = SERVICE_SUCCESS;
4312 s->n_restarts = 0;
4313 s->flush_n_restarts = false;
4314 }
4315
4316 static int service_kill(Unit *u, KillWho who, int signo, sd_bus_error *error) {
4317 Service *s = SERVICE(u);
4318
4319 assert(s);
4320
4321 return unit_kill_common(u, who, signo, s->main_pid, s->control_pid, error);
4322 }
4323
4324 static int service_main_pid(Unit *u) {
4325 Service *s = SERVICE(u);
4326
4327 assert(s);
4328
4329 return s->main_pid;
4330 }
4331
4332 static int service_control_pid(Unit *u) {
4333 Service *s = SERVICE(u);
4334
4335 assert(s);
4336
4337 return s->control_pid;
4338 }
4339
4340 static bool service_needs_console(Unit *u) {
4341 Service *s = SERVICE(u);
4342
4343 assert(s);
4344
4345 /* We provide our own implementation of this here, instead of relying of the generic implementation
4346 * unit_needs_console() provides, since we want to return false if we are in SERVICE_EXITED state. */
4347
4348 if (!exec_context_may_touch_console(&s->exec_context))
4349 return false;
4350
4351 return IN_SET(s->state,
4352 SERVICE_CONDITION,
4353 SERVICE_START_PRE,
4354 SERVICE_START,
4355 SERVICE_START_POST,
4356 SERVICE_RUNNING,
4357 SERVICE_RELOAD,
4358 SERVICE_STOP,
4359 SERVICE_STOP_WATCHDOG,
4360 SERVICE_STOP_SIGTERM,
4361 SERVICE_STOP_SIGKILL,
4362 SERVICE_STOP_POST,
4363 SERVICE_FINAL_WATCHDOG,
4364 SERVICE_FINAL_SIGTERM,
4365 SERVICE_FINAL_SIGKILL);
4366 }
4367
4368 static int service_exit_status(Unit *u) {
4369 Service *s = SERVICE(u);
4370
4371 assert(u);
4372
4373 if (s->main_exec_status.pid <= 0 ||
4374 !dual_timestamp_is_set(&s->main_exec_status.exit_timestamp))
4375 return -ENODATA;
4376
4377 if (s->main_exec_status.code != CLD_EXITED)
4378 return -EBADE;
4379
4380 return s->main_exec_status.status;
4381 }
4382
4383 static int service_clean(Unit *u, ExecCleanMask mask) {
4384 _cleanup_strv_free_ char **l = NULL;
4385 Service *s = SERVICE(u);
4386 int r;
4387
4388 assert(s);
4389 assert(mask != 0);
4390
4391 if (s->state != SERVICE_DEAD)
4392 return -EBUSY;
4393
4394 r = exec_context_get_clean_directories(&s->exec_context, u->manager->prefix, mask, &l);
4395 if (r < 0)
4396 return r;
4397
4398 if (strv_isempty(l))
4399 return -EUNATCH;
4400
4401 service_unwatch_control_pid(s);
4402 s->clean_result = SERVICE_SUCCESS;
4403 s->control_command = NULL;
4404 s->control_command_id = _SERVICE_EXEC_COMMAND_INVALID;
4405
4406 r = service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), s->exec_context.timeout_clean_usec));
4407 if (r < 0)
4408 goto fail;
4409
4410 r = unit_fork_and_watch_rm_rf(u, l, &s->control_pid);
4411 if (r < 0)
4412 goto fail;
4413
4414 service_set_state(s, SERVICE_CLEANING);
4415
4416 return 0;
4417
4418 fail:
4419 log_unit_warning_errno(u, r, "Failed to initiate cleaning: %m");
4420 s->clean_result = SERVICE_FAILURE_RESOURCES;
4421 s->timer_event_source = sd_event_source_unref(s->timer_event_source);
4422 return r;
4423 }
4424
4425 static int service_can_clean(Unit *u, ExecCleanMask *ret) {
4426 Service *s = SERVICE(u);
4427
4428 assert(s);
4429
4430 return exec_context_get_clean_mask(&s->exec_context, ret);
4431 }
4432
4433 static const char *service_finished_job(Unit *u, JobType t, JobResult result) {
4434 if (t == JOB_START && result == JOB_DONE) {
4435 Service *s = SERVICE(u);
4436
4437 if (s->type == SERVICE_ONESHOT)
4438 return "Finished %s.";
4439 }
4440
4441 /* Fall back to generic */
4442 return NULL;
4443 }
4444
4445 static const char* const service_restart_table[_SERVICE_RESTART_MAX] = {
4446 [SERVICE_RESTART_NO] = "no",
4447 [SERVICE_RESTART_ON_SUCCESS] = "on-success",
4448 [SERVICE_RESTART_ON_FAILURE] = "on-failure",
4449 [SERVICE_RESTART_ON_ABNORMAL] = "on-abnormal",
4450 [SERVICE_RESTART_ON_WATCHDOG] = "on-watchdog",
4451 [SERVICE_RESTART_ON_ABORT] = "on-abort",
4452 [SERVICE_RESTART_ALWAYS] = "always",
4453 };
4454
4455 DEFINE_STRING_TABLE_LOOKUP(service_restart, ServiceRestart);
4456
4457 static const char* const service_type_table[_SERVICE_TYPE_MAX] = {
4458 [SERVICE_SIMPLE] = "simple",
4459 [SERVICE_FORKING] = "forking",
4460 [SERVICE_ONESHOT] = "oneshot",
4461 [SERVICE_DBUS] = "dbus",
4462 [SERVICE_NOTIFY] = "notify",
4463 [SERVICE_IDLE] = "idle",
4464 [SERVICE_EXEC] = "exec",
4465 };
4466
4467 DEFINE_STRING_TABLE_LOOKUP(service_type, ServiceType);
4468
4469 static const char* const service_exec_command_table[_SERVICE_EXEC_COMMAND_MAX] = {
4470 [SERVICE_EXEC_CONDITION] = "ExecCondition",
4471 [SERVICE_EXEC_START_PRE] = "ExecStartPre",
4472 [SERVICE_EXEC_START] = "ExecStart",
4473 [SERVICE_EXEC_START_POST] = "ExecStartPost",
4474 [SERVICE_EXEC_RELOAD] = "ExecReload",
4475 [SERVICE_EXEC_STOP] = "ExecStop",
4476 [SERVICE_EXEC_STOP_POST] = "ExecStopPost",
4477 };
4478
4479 DEFINE_STRING_TABLE_LOOKUP(service_exec_command, ServiceExecCommand);
4480
4481 static const char* const service_exec_ex_command_table[_SERVICE_EXEC_COMMAND_MAX] = {
4482 [SERVICE_EXEC_CONDITION] = "ExecConditionEx",
4483 [SERVICE_EXEC_START_PRE] = "ExecStartPreEx",
4484 [SERVICE_EXEC_START] = "ExecStartEx",
4485 [SERVICE_EXEC_START_POST] = "ExecStartPostEx",
4486 [SERVICE_EXEC_RELOAD] = "ExecReloadEx",
4487 [SERVICE_EXEC_STOP] = "ExecStopEx",
4488 [SERVICE_EXEC_STOP_POST] = "ExecStopPostEx",
4489 };
4490
4491 DEFINE_STRING_TABLE_LOOKUP(service_exec_ex_command, ServiceExecCommand);
4492
4493 static const char* const notify_state_table[_NOTIFY_STATE_MAX] = {
4494 [NOTIFY_UNKNOWN] = "unknown",
4495 [NOTIFY_READY] = "ready",
4496 [NOTIFY_RELOADING] = "reloading",
4497 [NOTIFY_STOPPING] = "stopping",
4498 };
4499
4500 DEFINE_STRING_TABLE_LOOKUP(notify_state, NotifyState);
4501
4502 static const char* const service_result_table[_SERVICE_RESULT_MAX] = {
4503 [SERVICE_SUCCESS] = "success",
4504 [SERVICE_FAILURE_RESOURCES] = "resources",
4505 [SERVICE_FAILURE_PROTOCOL] = "protocol",
4506 [SERVICE_FAILURE_TIMEOUT] = "timeout",
4507 [SERVICE_FAILURE_EXIT_CODE] = "exit-code",
4508 [SERVICE_FAILURE_SIGNAL] = "signal",
4509 [SERVICE_FAILURE_CORE_DUMP] = "core-dump",
4510 [SERVICE_FAILURE_WATCHDOG] = "watchdog",
4511 [SERVICE_FAILURE_START_LIMIT_HIT] = "start-limit-hit",
4512 [SERVICE_FAILURE_OOM_KILL] = "oom-kill",
4513 [SERVICE_SKIP_CONDITION] = "exec-condition",
4514 };
4515
4516 DEFINE_STRING_TABLE_LOOKUP(service_result, ServiceResult);
4517
4518 static const char* const service_timeout_failure_mode_table[_SERVICE_TIMEOUT_FAILURE_MODE_MAX] = {
4519 [SERVICE_TIMEOUT_TERMINATE] = "terminate",
4520 [SERVICE_TIMEOUT_ABORT] = "abort",
4521 [SERVICE_TIMEOUT_KILL] = "kill",
4522 };
4523
4524 DEFINE_STRING_TABLE_LOOKUP(service_timeout_failure_mode, ServiceTimeoutFailureMode);
4525
4526 const UnitVTable service_vtable = {
4527 .object_size = sizeof(Service),
4528 .exec_context_offset = offsetof(Service, exec_context),
4529 .cgroup_context_offset = offsetof(Service, cgroup_context),
4530 .kill_context_offset = offsetof(Service, kill_context),
4531 .exec_runtime_offset = offsetof(Service, exec_runtime),
4532 .dynamic_creds_offset = offsetof(Service, dynamic_creds),
4533
4534 .sections =
4535 "Unit\0"
4536 "Service\0"
4537 "Install\0",
4538 .private_section = "Service",
4539
4540 .can_transient = true,
4541 .can_delegate = true,
4542 .can_fail = true,
4543 .can_set_managed_oom = true,
4544
4545 .init = service_init,
4546 .done = service_done,
4547 .load = service_load,
4548 .release_resources = service_release_resources,
4549
4550 .coldplug = service_coldplug,
4551
4552 .dump = service_dump,
4553
4554 .start = service_start,
4555 .stop = service_stop,
4556 .reload = service_reload,
4557
4558 .can_reload = service_can_reload,
4559
4560 .kill = service_kill,
4561 .clean = service_clean,
4562 .can_clean = service_can_clean,
4563
4564 .freeze = unit_freeze_vtable_common,
4565 .thaw = unit_thaw_vtable_common,
4566
4567 .serialize = service_serialize,
4568 .deserialize_item = service_deserialize_item,
4569
4570 .active_state = service_active_state,
4571 .sub_state_to_string = service_sub_state_to_string,
4572
4573 .will_restart = service_will_restart,
4574
4575 .may_gc = service_may_gc,
4576
4577 .sigchld_event = service_sigchld_event,
4578
4579 .reset_failed = service_reset_failed,
4580
4581 .notify_cgroup_empty = service_notify_cgroup_empty_event,
4582 .notify_cgroup_oom = service_notify_cgroup_oom_event,
4583 .notify_message = service_notify_message,
4584
4585 .main_pid = service_main_pid,
4586 .control_pid = service_control_pid,
4587
4588 .bus_name_owner_change = service_bus_name_owner_change,
4589
4590 .bus_set_property = bus_service_set_property,
4591 .bus_commit_properties = bus_service_commit_properties,
4592
4593 .get_timeout = service_get_timeout,
4594 .needs_console = service_needs_console,
4595 .exit_status = service_exit_status,
4596
4597 .status_message_formats = {
4598 .starting_stopping = {
4599 [0] = "Starting %s...",
4600 [1] = "Stopping %s...",
4601 },
4602 .finished_start_job = {
4603 [JOB_FAILED] = "Failed to start %s.",
4604 [JOB_SKIPPED] = "Skipped %s.",
4605 },
4606 .finished_stop_job = {
4607 [JOB_DONE] = "Stopped %s.",
4608 [JOB_FAILED] = "Stopped (with error) %s.",
4609 },
4610 .finished_job = service_finished_job,
4611 },
4612 };
Unnamed repository; edit this file 'description' to name the repository.