]> git.ipfire.org Git - thirdparty/systemd.git/blob - src/resolve/resolvectl.c
tree-wide: "unparseable" → "unparsable"
[thirdparty/systemd.git] / src / resolve / resolvectl.c
1 /* SPDX-License-Identifier: LGPL-2.1+ */
2
3 #include <getopt.h>
4 #include <locale.h>
5 #include <net/if.h>
6
7 #include "sd-bus.h"
8 #include "sd-netlink.h"
9
10 #include "af-list.h"
11 #include "alloc-util.h"
12 #include "bus-common-errors.h"
13 #include "bus-error.h"
14 #include "bus-locator.h"
15 #include "bus-map-properties.h"
16 #include "dns-domain.h"
17 #include "escape.h"
18 #include "format-table.h"
19 #include "format-util.h"
20 #include "gcrypt-util.h"
21 #include "main-func.h"
22 #include "missing_network.h"
23 #include "netlink-util.h"
24 #include "pager.h"
25 #include "parse-util.h"
26 #include "pretty-print.h"
27 #include "resolvconf-compat.h"
28 #include "resolvectl.h"
29 #include "resolved-def.h"
30 #include "resolved-dns-packet.h"
31 #include "socket-netlink.h"
32 #include "sort-util.h"
33 #include "stdio-util.h"
34 #include "string-table.h"
35 #include "strv.h"
36 #include "terminal-util.h"
37 #include "verbs.h"
38
39 static int arg_family = AF_UNSPEC;
40 static int arg_ifindex = 0;
41 static char *arg_ifname = NULL;
42 static uint16_t arg_type = 0;
43 static uint16_t arg_class = 0;
44 static bool arg_legend = true;
45 static uint64_t arg_flags = 0;
46 static PagerFlags arg_pager_flags = 0;
47 bool arg_ifindex_permissive = false; /* If true, don't generate an error if the specified interface index doesn't exist */
48 static const char *arg_service_family = NULL;
49
50 typedef enum RawType {
51 RAW_NONE,
52 RAW_PAYLOAD,
53 RAW_PACKET,
54 } RawType;
55 static RawType arg_raw = RAW_NONE;
56
57 ExecutionMode arg_mode = MODE_RESOLVE_HOST;
58
59 char **arg_set_dns = NULL;
60 char **arg_set_domain = NULL;
61 static const char *arg_set_llmnr = NULL;
62 static const char *arg_set_mdns = NULL;
63 static const char *arg_set_dns_over_tls = NULL;
64 static const char *arg_set_dnssec = NULL;
65 static char **arg_set_nta = NULL;
66
67 STATIC_DESTRUCTOR_REGISTER(arg_ifname, freep);
68 STATIC_DESTRUCTOR_REGISTER(arg_set_dns, strv_freep);
69 STATIC_DESTRUCTOR_REGISTER(arg_set_domain, strv_freep);
70 STATIC_DESTRUCTOR_REGISTER(arg_set_nta, strv_freep);
71
72 typedef enum StatusMode {
73 STATUS_ALL,
74 STATUS_DNS,
75 STATUS_DOMAIN,
76 STATUS_DEFAULT_ROUTE,
77 STATUS_LLMNR,
78 STATUS_MDNS,
79 STATUS_PRIVATE,
80 STATUS_DNSSEC,
81 STATUS_NTA,
82 } StatusMode;
83
84 typedef struct InterfaceInfo {
85 int index;
86 const char *name;
87 } InterfaceInfo;
88
89 static int interface_info_compare(const InterfaceInfo *a, const InterfaceInfo *b) {
90 int r;
91
92 r = CMP(a->index, b->index);
93 if (r != 0)
94 return r;
95
96 return strcmp_ptr(a->name, b->name);
97 }
98
99 int ifname_mangle(const char *s) {
100 _cleanup_free_ char *iface = NULL;
101 const char *dot;
102 int ifi;
103
104 assert(s);
105
106 dot = strchr(s, '.');
107 if (dot) {
108 log_debug("Ignoring protocol specifier '%s'.", dot + 1);
109 iface = strndup(s, dot - s);
110
111 } else
112 iface = strdup(s);
113 if (!iface)
114 return log_oom();
115
116 ifi = resolve_interface(NULL, iface);
117 if (ifi < 0) {
118 if (ifi == -ENODEV && arg_ifindex_permissive) {
119 log_debug("Interface '%s' not found, but -f specified, ignoring.", iface);
120 return 0; /* done */
121 }
122
123 return log_error_errno(ifi, "Failed to resolve interface \"%s\": %m", iface);
124 }
125
126 if (arg_ifindex > 0 && arg_ifindex != ifi)
127 return log_error_errno(SYNTHETIC_ERRNO(EINVAL), "Specified multiple different interfaces. Refusing.");
128
129 arg_ifindex = ifi;
130 free_and_replace(arg_ifname, iface);
131
132 return 1;
133 }
134
135 static void print_source(uint64_t flags, usec_t rtt) {
136 char rtt_str[FORMAT_TIMESTAMP_MAX];
137
138 if (!arg_legend)
139 return;
140
141 if (flags == 0)
142 return;
143
144 printf("\n%s-- Information acquired via", ansi_grey());
145
146 if (flags != 0)
147 printf(" protocol%s%s%s%s%s",
148 flags & SD_RESOLVED_DNS ? " DNS" :"",
149 flags & SD_RESOLVED_LLMNR_IPV4 ? " LLMNR/IPv4" : "",
150 flags & SD_RESOLVED_LLMNR_IPV6 ? " LLMNR/IPv6" : "",
151 flags & SD_RESOLVED_MDNS_IPV4 ? " mDNS/IPv4" : "",
152 flags & SD_RESOLVED_MDNS_IPV6 ? " mDNS/IPv6" : "");
153
154 assert_se(format_timespan(rtt_str, sizeof(rtt_str), rtt, 100));
155
156 printf(" in %s.%s\n"
157 "%s-- Data is authenticated: %s%s\n",
158 rtt_str, ansi_normal(),
159 ansi_grey(), yes_no(flags & SD_RESOLVED_AUTHENTICATED), ansi_normal());
160 }
161
162 static void print_ifindex_comment(int printed_so_far, int ifindex) {
163 char ifname[IF_NAMESIZE + 1];
164
165 if (ifindex <= 0)
166 return;
167
168 if (!format_ifname(ifindex, ifname))
169 log_warning_errno(errno, "Failed to resolve interface name for index %i, ignoring: %m", ifindex);
170 else
171 printf("%*s%s-- link: %s%s",
172 60 > printed_so_far ? 60 - printed_so_far : 0, " ", /* Align comment to the 60th column */
173 ansi_grey(), ifname, ansi_normal());
174 }
175
176 static int resolve_host(sd_bus *bus, const char *name) {
177 _cleanup_(sd_bus_message_unrefp) sd_bus_message *req = NULL, *reply = NULL;
178 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
179 const char *canonical = NULL;
180 unsigned c = 0;
181 uint64_t flags;
182 usec_t ts;
183 int r;
184
185 assert(name);
186
187 log_debug("Resolving %s (family %s, interface %s).", name, af_to_name(arg_family) ?: "*", isempty(arg_ifname) ? "*" : arg_ifname);
188
189 r = bus_message_new_method_call(bus, &req, bus_resolve_mgr, "ResolveHostname");
190 if (r < 0)
191 return bus_log_create_error(r);
192
193 r = sd_bus_message_append(req, "isit", arg_ifindex, name, arg_family, arg_flags);
194 if (r < 0)
195 return bus_log_create_error(r);
196
197 ts = now(CLOCK_MONOTONIC);
198
199 r = sd_bus_call(bus, req, SD_RESOLVED_QUERY_TIMEOUT_USEC, &error, &reply);
200 if (r < 0)
201 return log_error_errno(r, "%s: resolve call failed: %s", name, bus_error_message(&error, r));
202
203 ts = now(CLOCK_MONOTONIC) - ts;
204
205 r = sd_bus_message_enter_container(reply, 'a', "(iiay)");
206 if (r < 0)
207 return bus_log_parse_error(r);
208
209 while ((r = sd_bus_message_enter_container(reply, 'r', "iiay")) > 0) {
210 _cleanup_free_ char *pretty = NULL;
211 int ifindex, family, k;
212 const void *a;
213 size_t sz;
214
215 assert_cc(sizeof(int) == sizeof(int32_t));
216
217 r = sd_bus_message_read(reply, "ii", &ifindex, &family);
218 if (r < 0)
219 return bus_log_parse_error(r);
220
221 r = sd_bus_message_read_array(reply, 'y', &a, &sz);
222 if (r < 0)
223 return bus_log_parse_error(r);
224
225 r = sd_bus_message_exit_container(reply);
226 if (r < 0)
227 return bus_log_parse_error(r);
228
229 if (!IN_SET(family, AF_INET, AF_INET6)) {
230 log_debug("%s: skipping entry with family %d (%s)", name, family, af_to_name(family) ?: "unknown");
231 continue;
232 }
233
234 if (sz != FAMILY_ADDRESS_SIZE(family)) {
235 log_error("%s: systemd-resolved returned address of invalid size %zu for family %s", name, sz, af_to_name(family) ?: "unknown");
236 return -EINVAL;
237 }
238
239 r = in_addr_ifindex_to_string(family, a, ifindex, &pretty);
240 if (r < 0)
241 return log_error_errno(r, "Failed to print address for %s: %m", name);
242
243 k = printf("%*s%s %s%s%s",
244 (int) strlen(name), c == 0 ? name : "", c == 0 ? ":" : " ",
245 ansi_highlight(), pretty, ansi_normal());
246
247 print_ifindex_comment(k, ifindex);
248 fputc('\n', stdout);
249
250 c++;
251 }
252 if (r < 0)
253 return bus_log_parse_error(r);
254
255 r = sd_bus_message_exit_container(reply);
256 if (r < 0)
257 return bus_log_parse_error(r);
258
259 r = sd_bus_message_read(reply, "st", &canonical, &flags);
260 if (r < 0)
261 return bus_log_parse_error(r);
262
263 if (!streq(name, canonical))
264 printf("%*s%s (%s)\n",
265 (int) strlen(name), c == 0 ? name : "", c == 0 ? ":" : " ",
266 canonical);
267
268 if (c == 0) {
269 log_error("%s: no addresses found", name);
270 return -ESRCH;
271 }
272
273 print_source(flags, ts);
274
275 return 0;
276 }
277
278 static int resolve_address(sd_bus *bus, int family, const union in_addr_union *address, int ifindex) {
279 _cleanup_(sd_bus_message_unrefp) sd_bus_message *req = NULL, *reply = NULL;
280 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
281 _cleanup_free_ char *pretty = NULL;
282 uint64_t flags;
283 unsigned c = 0;
284 usec_t ts;
285 int r;
286
287 assert(bus);
288 assert(IN_SET(family, AF_INET, AF_INET6));
289 assert(address);
290
291 if (ifindex <= 0)
292 ifindex = arg_ifindex;
293
294 r = in_addr_ifindex_to_string(family, address, ifindex, &pretty);
295 if (r < 0)
296 return log_oom();
297
298 log_debug("Resolving %s.", pretty);
299
300 r = bus_message_new_method_call(bus, &req, bus_resolve_mgr, "ResolveAddress");
301 if (r < 0)
302 return bus_log_create_error(r);
303
304 r = sd_bus_message_append(req, "ii", ifindex, family);
305 if (r < 0)
306 return bus_log_create_error(r);
307
308 r = sd_bus_message_append_array(req, 'y', address, FAMILY_ADDRESS_SIZE(family));
309 if (r < 0)
310 return bus_log_create_error(r);
311
312 r = sd_bus_message_append(req, "t", arg_flags);
313 if (r < 0)
314 return bus_log_create_error(r);
315
316 ts = now(CLOCK_MONOTONIC);
317
318 r = sd_bus_call(bus, req, SD_RESOLVED_QUERY_TIMEOUT_USEC, &error, &reply);
319 if (r < 0)
320 return log_error_errno(r, "%s: resolve call failed: %s", pretty, bus_error_message(&error, r));
321
322 ts = now(CLOCK_MONOTONIC) - ts;
323
324 r = sd_bus_message_enter_container(reply, 'a', "(is)");
325 if (r < 0)
326 return bus_log_create_error(r);
327
328 while ((r = sd_bus_message_enter_container(reply, 'r', "is")) > 0) {
329 const char *n;
330 int k;
331
332 assert_cc(sizeof(int) == sizeof(int32_t));
333
334 r = sd_bus_message_read(reply, "is", &ifindex, &n);
335 if (r < 0)
336 return r;
337
338 r = sd_bus_message_exit_container(reply);
339 if (r < 0)
340 return r;
341
342 k = printf("%*s%s %s%s%s",
343 (int) strlen(pretty), c == 0 ? pretty : "",
344 c == 0 ? ":" : " ",
345 ansi_highlight(), n, ansi_normal());
346
347 print_ifindex_comment(k, ifindex);
348 fputc('\n', stdout);
349
350 c++;
351 }
352 if (r < 0)
353 return bus_log_parse_error(r);
354
355 r = sd_bus_message_exit_container(reply);
356 if (r < 0)
357 return bus_log_parse_error(r);
358
359 r = sd_bus_message_read(reply, "t", &flags);
360 if (r < 0)
361 return bus_log_parse_error(r);
362
363 if (c == 0) {
364 log_error("%s: no names found", pretty);
365 return -ESRCH;
366 }
367
368 print_source(flags, ts);
369
370 return 0;
371 }
372
373 static int output_rr_packet(const void *d, size_t l, int ifindex) {
374 _cleanup_(dns_resource_record_unrefp) DnsResourceRecord *rr = NULL;
375 _cleanup_(dns_packet_unrefp) DnsPacket *p = NULL;
376 int r;
377
378 r = dns_packet_new(&p, DNS_PROTOCOL_DNS, 0, DNS_PACKET_SIZE_MAX);
379 if (r < 0)
380 return log_oom();
381
382 p->refuse_compression = true;
383
384 r = dns_packet_append_blob(p, d, l, NULL);
385 if (r < 0)
386 return log_oom();
387
388 r = dns_packet_read_rr(p, &rr, NULL, NULL);
389 if (r < 0)
390 return log_error_errno(r, "Failed to parse RR: %m");
391
392 if (arg_raw == RAW_PAYLOAD) {
393 void *data;
394 ssize_t k;
395
396 k = dns_resource_record_payload(rr, &data);
397 if (k < 0)
398 return log_error_errno(k, "Cannot dump RR: %m");
399 fwrite(data, 1, k, stdout);
400 } else {
401 const char *s;
402 int k;
403
404 s = dns_resource_record_to_string(rr);
405 if (!s)
406 return log_oom();
407
408 k = printf("%s", s);
409 print_ifindex_comment(k, ifindex);
410 fputc('\n', stdout);
411 }
412
413 return 0;
414 }
415
416 static int resolve_record(sd_bus *bus, const char *name, uint16_t class, uint16_t type, bool warn_missing) {
417 _cleanup_(sd_bus_message_unrefp) sd_bus_message *req = NULL, *reply = NULL;
418 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
419 unsigned n = 0;
420 uint64_t flags;
421 int r;
422 usec_t ts;
423 bool needs_authentication = false;
424
425 assert(name);
426
427 log_debug("Resolving %s %s %s (interface %s).", name, dns_class_to_string(class), dns_type_to_string(type), isempty(arg_ifname) ? "*" : arg_ifname);
428
429 r = bus_message_new_method_call(bus, &req, bus_resolve_mgr, "ResolveRecord");
430 if (r < 0)
431 return bus_log_create_error(r);
432
433 r = sd_bus_message_append(req, "isqqt", arg_ifindex, name, class, type, arg_flags);
434 if (r < 0)
435 return bus_log_create_error(r);
436
437 ts = now(CLOCK_MONOTONIC);
438
439 r = sd_bus_call(bus, req, SD_RESOLVED_QUERY_TIMEOUT_USEC, &error, &reply);
440 if (r < 0) {
441 if (warn_missing || r != -ENXIO)
442 log_error("%s: resolve call failed: %s", name, bus_error_message(&error, r));
443 return r;
444 }
445
446 ts = now(CLOCK_MONOTONIC) - ts;
447
448 r = sd_bus_message_enter_container(reply, 'a', "(iqqay)");
449 if (r < 0)
450 return bus_log_parse_error(r);
451
452 while ((r = sd_bus_message_enter_container(reply, 'r', "iqqay")) > 0) {
453 uint16_t c, t;
454 int ifindex;
455 const void *d;
456 size_t l;
457
458 assert_cc(sizeof(int) == sizeof(int32_t));
459
460 r = sd_bus_message_read(reply, "iqq", &ifindex, &c, &t);
461 if (r < 0)
462 return bus_log_parse_error(r);
463
464 r = sd_bus_message_read_array(reply, 'y', &d, &l);
465 if (r < 0)
466 return bus_log_parse_error(r);
467
468 r = sd_bus_message_exit_container(reply);
469 if (r < 0)
470 return bus_log_parse_error(r);
471
472 if (arg_raw == RAW_PACKET) {
473 uint64_t u64 = htole64(l);
474
475 fwrite(&u64, sizeof(u64), 1, stdout);
476 fwrite(d, 1, l, stdout);
477 } else {
478 r = output_rr_packet(d, l, ifindex);
479 if (r < 0)
480 return r;
481 }
482
483 if (dns_type_needs_authentication(t))
484 needs_authentication = true;
485
486 n++;
487 }
488 if (r < 0)
489 return bus_log_parse_error(r);
490
491 r = sd_bus_message_exit_container(reply);
492 if (r < 0)
493 return bus_log_parse_error(r);
494
495 r = sd_bus_message_read(reply, "t", &flags);
496 if (r < 0)
497 return bus_log_parse_error(r);
498
499 if (n == 0) {
500 if (warn_missing)
501 log_error("%s: no records found", name);
502 return -ESRCH;
503 }
504
505 print_source(flags, ts);
506
507 if ((flags & SD_RESOLVED_AUTHENTICATED) == 0 && needs_authentication) {
508 fflush(stdout);
509
510 fprintf(stderr, "\n%s"
511 "WARNING: The resources shown contain cryptographic key data which could not be\n"
512 " authenticated. It is not suitable to authenticate any communication.\n"
513 " This is usually indication that DNSSEC authentication was not enabled\n"
514 " or is not available for the selected protocol or DNS servers.%s\n",
515 ansi_highlight_red(),
516 ansi_normal());
517 }
518
519 return 0;
520 }
521
522 static int resolve_rfc4501(sd_bus *bus, const char *name) {
523 uint16_t type = 0, class = 0;
524 const char *p, *q, *n;
525 int r;
526
527 assert(bus);
528 assert(name);
529 assert(startswith(name, "dns:"));
530
531 /* Parse RFC 4501 dns: URIs */
532
533 p = name + 4;
534
535 if (p[0] == '/') {
536 const char *e;
537
538 if (p[1] != '/')
539 goto invalid;
540
541 e = strchr(p + 2, '/');
542 if (!e)
543 goto invalid;
544
545 if (e != p + 2)
546 log_warning("DNS authority specification not supported; ignoring specified authority.");
547
548 p = e + 1;
549 }
550
551 q = strchr(p, '?');
552 if (q) {
553 n = strndupa(p, q - p);
554 q++;
555
556 for (;;) {
557 const char *f;
558
559 f = startswith_no_case(q, "class=");
560 if (f) {
561 _cleanup_free_ char *t = NULL;
562 const char *e;
563
564 if (class != 0)
565 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
566 "DNS class specified twice.");
567
568 e = strchrnul(f, ';');
569 t = strndup(f, e - f);
570 if (!t)
571 return log_oom();
572
573 r = dns_class_from_string(t);
574 if (r < 0)
575 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
576 "Unknown DNS class %s.", t);
577
578 class = r;
579
580 if (*e == ';') {
581 q = e + 1;
582 continue;
583 }
584
585 break;
586 }
587
588 f = startswith_no_case(q, "type=");
589 if (f) {
590 _cleanup_free_ char *t = NULL;
591 const char *e;
592
593 if (type != 0)
594 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
595 "DNS type specified twice.");
596
597 e = strchrnul(f, ';');
598 t = strndup(f, e - f);
599 if (!t)
600 return log_oom();
601
602 r = dns_type_from_string(t);
603 if (r < 0)
604 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
605 "Unknown DNS type %s.", t);
606
607 type = r;
608
609 if (*e == ';') {
610 q = e + 1;
611 continue;
612 }
613
614 break;
615 }
616
617 goto invalid;
618 }
619 } else
620 n = p;
621
622 if (class == 0)
623 class = arg_class ?: DNS_CLASS_IN;
624 if (type == 0)
625 type = arg_type ?: DNS_TYPE_A;
626
627 return resolve_record(bus, n, class, type, true);
628
629 invalid:
630 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
631 "Invalid DNS URI: %s", name);
632 }
633
634 static int verb_query(int argc, char **argv, void *userdata) {
635 sd_bus *bus = userdata;
636 char **p;
637 int q, r = 0;
638
639 if (arg_type != 0)
640 STRV_FOREACH(p, argv + 1) {
641 q = resolve_record(bus, *p, arg_class, arg_type, true);
642 if (q < 0)
643 r = q;
644 }
645
646 else
647 STRV_FOREACH(p, argv + 1) {
648 if (startswith(*p, "dns:"))
649 q = resolve_rfc4501(bus, *p);
650 else {
651 int family, ifindex;
652 union in_addr_union a;
653
654 q = in_addr_ifindex_from_string_auto(*p, &family, &a, &ifindex);
655 if (q >= 0)
656 q = resolve_address(bus, family, &a, ifindex);
657 else
658 q = resolve_host(bus, *p);
659 }
660 if (q < 0)
661 r = q;
662 }
663
664 return r;
665 }
666
667 static int resolve_service(sd_bus *bus, const char *name, const char *type, const char *domain) {
668 const char *canonical_name, *canonical_type, *canonical_domain;
669 _cleanup_(sd_bus_message_unrefp) sd_bus_message *req = NULL, *reply = NULL;
670 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
671 size_t indent, sz;
672 uint64_t flags;
673 const char *p;
674 unsigned c;
675 usec_t ts;
676 int r;
677
678 assert(bus);
679 assert(domain);
680
681 name = empty_to_null(name);
682 type = empty_to_null(type);
683
684 if (name)
685 log_debug("Resolving service \"%s\" of type %s in %s (family %s, interface %s).", name, type, domain, af_to_name(arg_family) ?: "*", isempty(arg_ifname) ? "*" : arg_ifname);
686 else if (type)
687 log_debug("Resolving service type %s of %s (family %s, interface %s).", type, domain, af_to_name(arg_family) ?: "*", isempty(arg_ifname) ? "*" : arg_ifname);
688 else
689 log_debug("Resolving service type %s (family %s, interface %s).", domain, af_to_name(arg_family) ?: "*", isempty(arg_ifname) ? "*" : arg_ifname);
690
691 r = bus_message_new_method_call(bus, &req, bus_resolve_mgr, "ResolveService");
692 if (r < 0)
693 return bus_log_create_error(r);
694
695 r = sd_bus_message_append(req, "isssit", arg_ifindex, name, type, domain, arg_family, arg_flags);
696 if (r < 0)
697 return bus_log_create_error(r);
698
699 ts = now(CLOCK_MONOTONIC);
700
701 r = sd_bus_call(bus, req, SD_RESOLVED_QUERY_TIMEOUT_USEC, &error, &reply);
702 if (r < 0)
703 return log_error_errno(r, "Resolve call failed: %s", bus_error_message(&error, r));
704
705 ts = now(CLOCK_MONOTONIC) - ts;
706
707 r = sd_bus_message_enter_container(reply, 'a', "(qqqsa(iiay)s)");
708 if (r < 0)
709 return bus_log_parse_error(r);
710
711 indent =
712 (name ? strlen(name) + 1 : 0) +
713 (type ? strlen(type) + 1 : 0) +
714 strlen(domain) + 2;
715
716 c = 0;
717 while ((r = sd_bus_message_enter_container(reply, 'r', "qqqsa(iiay)s")) > 0) {
718 uint16_t priority, weight, port;
719 const char *hostname, *canonical;
720
721 r = sd_bus_message_read(reply, "qqqs", &priority, &weight, &port, &hostname);
722 if (r < 0)
723 return bus_log_parse_error(r);
724
725 if (name)
726 printf("%*s%s", (int) strlen(name), c == 0 ? name : "", c == 0 ? "/" : " ");
727 if (type)
728 printf("%*s%s", (int) strlen(type), c == 0 ? type : "", c == 0 ? "/" : " ");
729
730 printf("%*s%s %s:%u [priority=%u, weight=%u]\n",
731 (int) strlen(domain), c == 0 ? domain : "",
732 c == 0 ? ":" : " ",
733 hostname, port,
734 priority, weight);
735
736 r = sd_bus_message_enter_container(reply, 'a', "(iiay)");
737 if (r < 0)
738 return bus_log_parse_error(r);
739
740 while ((r = sd_bus_message_enter_container(reply, 'r', "iiay")) > 0) {
741 _cleanup_free_ char *pretty = NULL;
742 int ifindex, family, k;
743 const void *a;
744
745 assert_cc(sizeof(int) == sizeof(int32_t));
746
747 r = sd_bus_message_read(reply, "ii", &ifindex, &family);
748 if (r < 0)
749 return bus_log_parse_error(r);
750
751 r = sd_bus_message_read_array(reply, 'y', &a, &sz);
752 if (r < 0)
753 return bus_log_parse_error(r);
754
755 r = sd_bus_message_exit_container(reply);
756 if (r < 0)
757 return bus_log_parse_error(r);
758
759 if (!IN_SET(family, AF_INET, AF_INET6)) {
760 log_debug("%s: skipping entry with family %d (%s)", name, family, af_to_name(family) ?: "unknown");
761 continue;
762 }
763
764 if (sz != FAMILY_ADDRESS_SIZE(family)) {
765 log_error("%s: systemd-resolved returned address of invalid size %zu for family %s", name, sz, af_to_name(family) ?: "unknown");
766 return -EINVAL;
767 }
768
769 r = in_addr_ifindex_to_string(family, a, ifindex, &pretty);
770 if (r < 0)
771 return log_error_errno(r, "Failed to print address for %s: %m", name);
772
773 k = printf("%*s%s", (int) indent, "", pretty);
774 print_ifindex_comment(k, ifindex);
775 fputc('\n', stdout);
776 }
777 if (r < 0)
778 return bus_log_parse_error(r);
779
780 r = sd_bus_message_exit_container(reply);
781 if (r < 0)
782 return bus_log_parse_error(r);
783
784 r = sd_bus_message_read(reply, "s", &canonical);
785 if (r < 0)
786 return bus_log_parse_error(r);
787
788 if (!streq(hostname, canonical))
789 printf("%*s(%s)\n", (int) indent, "", canonical);
790
791 r = sd_bus_message_exit_container(reply);
792 if (r < 0)
793 return bus_log_parse_error(r);
794
795 c++;
796 }
797 if (r < 0)
798 return bus_log_parse_error(r);
799
800 r = sd_bus_message_exit_container(reply);
801 if (r < 0)
802 return bus_log_parse_error(r);
803
804 r = sd_bus_message_enter_container(reply, 'a', "ay");
805 if (r < 0)
806 return bus_log_parse_error(r);
807
808 while ((r = sd_bus_message_read_array(reply, 'y', (const void**) &p, &sz)) > 0) {
809 _cleanup_free_ char *escaped = NULL;
810
811 escaped = cescape_length(p, sz);
812 if (!escaped)
813 return log_oom();
814
815 printf("%*s%s\n", (int) indent, "", escaped);
816 }
817 if (r < 0)
818 return bus_log_parse_error(r);
819
820 r = sd_bus_message_exit_container(reply);
821 if (r < 0)
822 return bus_log_parse_error(r);
823
824 r = sd_bus_message_read(reply, "ssst", &canonical_name, &canonical_type, &canonical_domain, &flags);
825 if (r < 0)
826 return bus_log_parse_error(r);
827
828 canonical_name = empty_to_null(canonical_name);
829 canonical_type = empty_to_null(canonical_type);
830
831 if (!streq_ptr(name, canonical_name) ||
832 !streq_ptr(type, canonical_type) ||
833 !streq_ptr(domain, canonical_domain)) {
834
835 printf("%*s(", (int) indent, "");
836
837 if (canonical_name)
838 printf("%s/", canonical_name);
839 if (canonical_type)
840 printf("%s/", canonical_type);
841
842 printf("%s)\n", canonical_domain);
843 }
844
845 print_source(flags, ts);
846
847 return 0;
848 }
849
850 static int verb_service(int argc, char **argv, void *userdata) {
851 sd_bus *bus = userdata;
852
853 if (argc == 2)
854 return resolve_service(bus, NULL, NULL, argv[1]);
855 else if (argc == 3)
856 return resolve_service(bus, NULL, argv[1], argv[2]);
857 else
858 return resolve_service(bus, argv[1], argv[2], argv[3]);
859 }
860
861 static int resolve_openpgp(sd_bus *bus, const char *address) {
862 const char *domain, *full;
863 int r;
864 _cleanup_free_ char *hashed = NULL;
865
866 assert(bus);
867 assert(address);
868
869 domain = strrchr(address, '@');
870 if (!domain)
871 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
872 "Address does not contain '@': \"%s\"", address);
873 if (domain == address || domain[1] == '\0')
874 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
875 "Address starts or ends with '@': \"%s\"", address);
876 domain++;
877
878 r = string_hashsum_sha256(address, domain - 1 - address, &hashed);
879 if (r < 0)
880 return log_error_errno(r, "Hashing failed: %m");
881
882 strshorten(hashed, 56);
883
884 full = strjoina(hashed, "._openpgpkey.", domain);
885 log_debug("Looking up \"%s\".", full);
886
887 r = resolve_record(bus, full,
888 arg_class ?: DNS_CLASS_IN,
889 arg_type ?: DNS_TYPE_OPENPGPKEY, false);
890
891 if (IN_SET(r, -ENXIO, -ESRCH)) { /* NXDOMAIN or NODATA? */
892 hashed = mfree(hashed);
893 r = string_hashsum_sha224(address, domain - 1 - address, &hashed);
894 if (r < 0)
895 return log_error_errno(r, "Hashing failed: %m");
896
897 full = strjoina(hashed, "._openpgpkey.", domain);
898 log_debug("Looking up \"%s\".", full);
899
900 return resolve_record(bus, full,
901 arg_class ?: DNS_CLASS_IN,
902 arg_type ?: DNS_TYPE_OPENPGPKEY, true);
903 }
904
905 return r;
906 }
907
908 static int verb_openpgp(int argc, char **argv, void *userdata) {
909 sd_bus *bus = userdata;
910 char **p;
911 int q, r = 0;
912
913 STRV_FOREACH(p, argv + 1) {
914 q = resolve_openpgp(bus, *p);
915 if (q < 0)
916 r = q;
917 }
918
919 return r;
920 }
921
922 static int resolve_tlsa(sd_bus *bus, const char *family, const char *address) {
923 const char *port;
924 uint16_t port_num = 443;
925 _cleanup_free_ char *full = NULL;
926 int r;
927
928 assert(bus);
929 assert(address);
930
931 port = strrchr(address, ':');
932 if (port) {
933 r = parse_ip_port(port + 1, &port_num);
934 if (r < 0)
935 return log_error_errno(r, "Invalid port \"%s\".", port + 1);
936
937 address = strndupa(address, port - address);
938 }
939
940 r = asprintf(&full, "_%u._%s.%s",
941 port_num,
942 family,
943 address);
944 if (r < 0)
945 return log_oom();
946
947 log_debug("Looking up \"%s\".", full);
948
949 return resolve_record(bus, full,
950 arg_class ?: DNS_CLASS_IN,
951 arg_type ?: DNS_TYPE_TLSA, true);
952 }
953
954 static bool service_family_is_valid(const char *s) {
955 return STR_IN_SET(s, "tcp", "udp", "sctp");
956 }
957
958 static int verb_tlsa(int argc, char **argv, void *userdata) {
959 sd_bus *bus = userdata;
960 char **p, **args = argv + 1;
961 const char *family = "tcp";
962 int q, r = 0;
963
964 if (service_family_is_valid(argv[1])) {
965 family = argv[1];
966 args++;
967 }
968
969 STRV_FOREACH(p, args) {
970 q = resolve_tlsa(bus, family, *p);
971 if (q < 0)
972 r = q;
973 }
974
975 return r;
976 }
977
978 static int show_statistics(int argc, char **argv, void *userdata) {
979 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
980 _cleanup_(sd_bus_message_unrefp) sd_bus_message *reply = NULL;
981 _cleanup_(table_unrefp) Table *table = NULL;
982 sd_bus *bus = userdata;
983 uint64_t n_current_transactions, n_total_transactions,
984 cache_size, n_cache_hit, n_cache_miss,
985 n_dnssec_secure, n_dnssec_insecure, n_dnssec_bogus, n_dnssec_indeterminate;
986 int r, dnssec_supported;
987
988 assert(bus);
989
990 r = bus_get_property_trivial(bus, bus_resolve_mgr, "DNSSECSupported", &error, 'b', &dnssec_supported);
991 if (r < 0)
992 return log_error_errno(r, "Failed to get DNSSEC supported state: %s", bus_error_message(&error, r));
993
994 printf("DNSSEC supported by current servers: %s%s%s\n\n",
995 ansi_highlight(),
996 yes_no(dnssec_supported),
997 ansi_normal());
998
999 r = bus_get_property(bus, bus_resolve_mgr, "TransactionStatistics", &error, &reply, "(tt)");
1000 if (r < 0)
1001 return log_error_errno(r, "Failed to get transaction statistics: %s", bus_error_message(&error, r));
1002
1003 r = sd_bus_message_read(reply, "(tt)",
1004 &n_current_transactions,
1005 &n_total_transactions);
1006 if (r < 0)
1007 return bus_log_parse_error(r);
1008
1009 reply = sd_bus_message_unref(reply);
1010
1011 r = bus_get_property(bus, bus_resolve_mgr, "CacheStatistics", &error, &reply, "(ttt)");
1012 if (r < 0)
1013 return log_error_errno(r, "Failed to get cache statistics: %s", bus_error_message(&error, r));
1014
1015 r = sd_bus_message_read(reply, "(ttt)",
1016 &cache_size,
1017 &n_cache_hit,
1018 &n_cache_miss);
1019 if (r < 0)
1020 return bus_log_parse_error(r);
1021
1022 reply = sd_bus_message_unref(reply);
1023
1024 r = bus_get_property(bus, bus_resolve_mgr, "DNSSECStatistics", &error, &reply, "(tttt)");
1025 if (r < 0)
1026 return log_error_errno(r, "Failed to get DNSSEC statistics: %s", bus_error_message(&error, r));
1027
1028 r = sd_bus_message_read(reply, "(tttt)",
1029 &n_dnssec_secure,
1030 &n_dnssec_insecure,
1031 &n_dnssec_bogus,
1032 &n_dnssec_indeterminate);
1033 if (r < 0)
1034 return bus_log_parse_error(r);
1035
1036 table = table_new("key", "value");
1037 if (!table)
1038 return log_oom();
1039
1040 table_set_header(table, false);
1041
1042 r = table_add_many(table,
1043 TABLE_STRING, "Transactions",
1044 TABLE_SET_COLOR, ansi_highlight(),
1045 TABLE_EMPTY,
1046 TABLE_STRING, "Current Transactions:",
1047 TABLE_SET_ALIGN_PERCENT, 100,
1048 TABLE_UINT64, n_current_transactions,
1049 TABLE_STRING, "Total Transactions:",
1050 TABLE_UINT64, n_total_transactions,
1051 TABLE_EMPTY, TABLE_EMPTY,
1052 TABLE_STRING, "Cache",
1053 TABLE_SET_COLOR, ansi_highlight(),
1054 TABLE_SET_ALIGN_PERCENT, 0,
1055 TABLE_EMPTY,
1056 TABLE_STRING, "Current Cache Size:",
1057 TABLE_SET_ALIGN_PERCENT, 100,
1058 TABLE_UINT64, cache_size,
1059 TABLE_STRING, "Cache Hits:",
1060 TABLE_UINT64, n_cache_hit,
1061 TABLE_STRING, "Cache Misses:",
1062 TABLE_UINT64, n_cache_miss,
1063 TABLE_EMPTY, TABLE_EMPTY,
1064 TABLE_STRING, "DNSSEC Verdicts",
1065 TABLE_SET_COLOR, ansi_highlight(),
1066 TABLE_SET_ALIGN_PERCENT, 0,
1067 TABLE_EMPTY,
1068 TABLE_STRING, "Secure:",
1069 TABLE_SET_ALIGN_PERCENT, 100,
1070 TABLE_UINT64, n_dnssec_secure,
1071 TABLE_STRING, "Insecure:",
1072 TABLE_UINT64, n_dnssec_insecure,
1073 TABLE_STRING, "Bogus:",
1074 TABLE_UINT64, n_dnssec_bogus,
1075 TABLE_STRING, "Indeterminate:",
1076 TABLE_UINT64, n_dnssec_indeterminate);
1077 if (r < 0)
1078 table_log_add_error(r);
1079
1080 r = table_print(table, NULL);
1081 if (r < 0)
1082 return log_error_errno(r, "Failed to print table: %m");
1083
1084 return 0;
1085 }
1086
1087 static int reset_statistics(int argc, char **argv, void *userdata) {
1088 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1089 sd_bus *bus = userdata;
1090 int r;
1091
1092 r = bus_call_method(bus, bus_resolve_mgr, "ResetStatistics", &error, NULL, NULL);
1093 if (r < 0)
1094 return log_error_errno(r, "Failed to reset statistics: %s", bus_error_message(&error, r));
1095
1096 return 0;
1097 }
1098
1099 static int flush_caches(int argc, char **argv, void *userdata) {
1100 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1101 sd_bus *bus = userdata;
1102 int r;
1103
1104 r = bus_call_method(bus, bus_resolve_mgr, "FlushCaches", &error, NULL, NULL);
1105 if (r < 0)
1106 return log_error_errno(r, "Failed to flush caches: %s", bus_error_message(&error, r));
1107
1108 return 0;
1109 }
1110
1111 static int reset_server_features(int argc, char **argv, void *userdata) {
1112 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1113 sd_bus *bus = userdata;
1114 int r;
1115
1116 r = bus_call_method(bus, bus_resolve_mgr, "ResetServerFeatures", &error, NULL, NULL);
1117 if (r < 0)
1118 return log_error_errno(r, "Failed to reset server features: %s", bus_error_message(&error, r));
1119
1120 return 0;
1121 }
1122
1123 static int read_dns_server_one(sd_bus_message *m, bool with_ifindex, char **ret) {
1124 _cleanup_free_ char *pretty = NULL;
1125 int ifindex, family, r;
1126 const void *a;
1127 size_t sz;
1128
1129 assert(m);
1130 assert(ret);
1131
1132 r = sd_bus_message_enter_container(m, 'r', with_ifindex ? "iiay" : "iay");
1133 if (r <= 0)
1134 return r;
1135
1136 if (with_ifindex) {
1137 r = sd_bus_message_read(m, "i", &ifindex);
1138 if (r < 0)
1139 return r;
1140 }
1141
1142 r = sd_bus_message_read(m, "i", &family);
1143 if (r < 0)
1144 return r;
1145
1146 r = sd_bus_message_read_array(m, 'y', &a, &sz);
1147 if (r < 0)
1148 return r;
1149
1150 r = sd_bus_message_exit_container(m);
1151 if (r < 0)
1152 return r;
1153
1154 if (with_ifindex && ifindex != 0) {
1155 /* only show the global ones here */
1156 *ret = NULL;
1157 return 1;
1158 }
1159
1160 if (!IN_SET(family, AF_INET, AF_INET6)) {
1161 log_debug("Unexpected family, ignoring: %i", family);
1162
1163 *ret = NULL;
1164 return 1;
1165 }
1166
1167 if (sz != FAMILY_ADDRESS_SIZE(family)) {
1168 log_debug("Address size mismatch, ignoring.");
1169
1170 *ret = NULL;
1171 return 1;
1172 }
1173
1174 r = in_addr_to_string(family, a, &pretty);
1175 if (r < 0)
1176 return r;
1177
1178 *ret = TAKE_PTR(pretty);
1179
1180 return 1;
1181 }
1182
1183 static int map_link_dns_servers(sd_bus *bus, const char *member, sd_bus_message *m, sd_bus_error *error, void *userdata) {
1184 char ***l = userdata;
1185 int r;
1186
1187 assert(bus);
1188 assert(member);
1189 assert(m);
1190 assert(l);
1191
1192 r = sd_bus_message_enter_container(m, 'a', "(iay)");
1193 if (r < 0)
1194 return r;
1195
1196 for (;;) {
1197 _cleanup_free_ char *pretty = NULL;
1198
1199 r = read_dns_server_one(m, false, &pretty);
1200 if (r < 0)
1201 return r;
1202 if (r == 0)
1203 break;
1204
1205 if (isempty(pretty))
1206 continue;
1207
1208 r = strv_consume(l, TAKE_PTR(pretty));
1209 if (r < 0)
1210 return r;
1211 }
1212
1213 r = sd_bus_message_exit_container(m);
1214 if (r < 0)
1215 return r;
1216
1217 return 0;
1218 }
1219
1220 static int map_link_current_dns_server(sd_bus *bus, const char *member, sd_bus_message *m, sd_bus_error *error, void *userdata) {
1221 assert(m);
1222 assert(userdata);
1223
1224 return read_dns_server_one(m, false, userdata);
1225 }
1226
1227 static int read_domain_one(sd_bus_message *m, bool with_ifindex, char **ret) {
1228 _cleanup_free_ char *str = NULL;
1229 int ifindex, route_only, r;
1230 const char *domain;
1231
1232 assert(m);
1233 assert(ret);
1234
1235 if (with_ifindex)
1236 r = sd_bus_message_read(m, "(isb)", &ifindex, &domain, &route_only);
1237 else
1238 r = sd_bus_message_read(m, "(sb)", &domain, &route_only);
1239 if (r <= 0)
1240 return r;
1241
1242 if (with_ifindex && ifindex != 0) {
1243 /* only show the global ones here */
1244 *ret = NULL;
1245 return 1;
1246 }
1247
1248 if (route_only)
1249 str = strjoin("~", domain);
1250 else
1251 str = strdup(domain);
1252 if (!str)
1253 return -ENOMEM;
1254
1255 *ret = TAKE_PTR(str);
1256
1257 return 1;
1258 }
1259
1260 static int map_link_domains(sd_bus *bus, const char *member, sd_bus_message *m, sd_bus_error *error, void *userdata) {
1261 char ***l = userdata;
1262 int r;
1263
1264 assert(bus);
1265 assert(member);
1266 assert(m);
1267 assert(l);
1268
1269 r = sd_bus_message_enter_container(m, 'a', "(sb)");
1270 if (r < 0)
1271 return r;
1272
1273 for (;;) {
1274 _cleanup_free_ char *pretty = NULL;
1275
1276 r = read_domain_one(m, false, &pretty);
1277 if (r < 0)
1278 return r;
1279 if (r == 0)
1280 break;
1281
1282 if (isempty(pretty))
1283 continue;
1284
1285 r = strv_consume(l, TAKE_PTR(pretty));
1286 if (r < 0)
1287 return r;
1288 }
1289
1290 r = sd_bus_message_exit_container(m);
1291 if (r < 0)
1292 return r;
1293
1294 return 0;
1295 }
1296
1297 static int status_print_strv_ifindex(int ifindex, const char *ifname, char **p) {
1298 char **i;
1299
1300 printf("%sLink %i (%s)%s:",
1301 ansi_highlight(), ifindex, ifname, ansi_normal());
1302
1303 STRV_FOREACH(i, p)
1304 printf(" %s", *i);
1305
1306 printf("\n");
1307
1308 return 0;
1309 }
1310
1311 struct link_info {
1312 uint64_t scopes_mask;
1313 const char *llmnr;
1314 const char *mdns;
1315 const char *dns_over_tls;
1316 const char *dnssec;
1317 char *current_dns;
1318 char **dns;
1319 char **domains;
1320 char **ntas;
1321 bool dnssec_supported;
1322 bool default_route;
1323 };
1324
1325 static void link_info_clear(struct link_info *p) {
1326 free(p->current_dns);
1327 strv_free(p->dns);
1328 strv_free(p->domains);
1329 strv_free(p->ntas);
1330 }
1331
1332 static int dump_list(Table *table, const char *prefix, char * const *l) {
1333 int r;
1334
1335 if (strv_isempty(l))
1336 return 0;
1337
1338 r = table_add_many(table,
1339 TABLE_STRING, prefix,
1340 TABLE_STRV, l);
1341 if (r < 0)
1342 return table_log_add_error(r);
1343
1344 return 0;
1345 }
1346
1347 static int status_ifindex(sd_bus *bus, int ifindex, const char *name, StatusMode mode, bool *empty_line) {
1348 static const struct bus_properties_map property_map[] = {
1349 { "ScopesMask", "t", NULL, offsetof(struct link_info, scopes_mask) },
1350 { "DNS", "a(iay)", map_link_dns_servers, offsetof(struct link_info, dns) },
1351 { "CurrentDNSServer", "(iay)", map_link_current_dns_server, offsetof(struct link_info, current_dns) },
1352 { "Domains", "a(sb)", map_link_domains, offsetof(struct link_info, domains) },
1353 { "DefaultRoute", "b", NULL, offsetof(struct link_info, default_route) },
1354 { "LLMNR", "s", NULL, offsetof(struct link_info, llmnr) },
1355 { "MulticastDNS", "s", NULL, offsetof(struct link_info, mdns) },
1356 { "DNSOverTLS", "s", NULL, offsetof(struct link_info, dns_over_tls) },
1357 { "DNSSEC", "s", NULL, offsetof(struct link_info, dnssec) },
1358 { "DNSSECNegativeTrustAnchors", "as", NULL, offsetof(struct link_info, ntas) },
1359 { "DNSSECSupported", "b", NULL, offsetof(struct link_info, dnssec_supported) },
1360 {}
1361 };
1362 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1363 _cleanup_(sd_bus_message_unrefp) sd_bus_message *m = NULL;
1364 _cleanup_(link_info_clear) struct link_info link_info = {};
1365 _cleanup_(table_unrefp) Table *table = NULL;
1366 _cleanup_free_ char *p = NULL;
1367 char ifi[DECIMAL_STR_MAX(int)], ifname[IF_NAMESIZE + 1] = "";
1368 int r;
1369
1370 assert(bus);
1371 assert(ifindex > 0);
1372
1373 if (!name) {
1374 if (!format_ifname(ifindex, ifname))
1375 return log_error_errno(errno, "Failed to resolve interface name for %i: %m", ifindex);
1376
1377 name = ifname;
1378 }
1379
1380 xsprintf(ifi, "%i", ifindex);
1381 r = sd_bus_path_encode("/org/freedesktop/resolve1/link", ifi, &p);
1382 if (r < 0)
1383 return log_oom();
1384
1385 r = bus_map_all_properties(bus,
1386 "org.freedesktop.resolve1",
1387 p,
1388 property_map,
1389 BUS_MAP_BOOLEAN_AS_BOOL,
1390 &error,
1391 &m,
1392 &link_info);
1393 if (r < 0)
1394 return log_error_errno(r, "Failed to get link data for %i: %s", ifindex, bus_error_message(&error, r));
1395
1396 (void) pager_open(arg_pager_flags);
1397
1398 if (mode == STATUS_DNS)
1399 return status_print_strv_ifindex(ifindex, name, link_info.dns);
1400
1401 if (mode == STATUS_DOMAIN)
1402 return status_print_strv_ifindex(ifindex, name, link_info.domains);
1403
1404 if (mode == STATUS_NTA)
1405 return status_print_strv_ifindex(ifindex, name, link_info.ntas);
1406
1407 if (mode == STATUS_DEFAULT_ROUTE) {
1408 printf("%sLink %i (%s)%s: %s\n",
1409 ansi_highlight(), ifindex, name, ansi_normal(),
1410 yes_no(link_info.default_route));
1411
1412 return 0;
1413 }
1414
1415 if (mode == STATUS_LLMNR) {
1416 printf("%sLink %i (%s)%s: %s\n",
1417 ansi_highlight(), ifindex, name, ansi_normal(),
1418 strna(link_info.llmnr));
1419
1420 return 0;
1421 }
1422
1423 if (mode == STATUS_MDNS) {
1424 printf("%sLink %i (%s)%s: %s\n",
1425 ansi_highlight(), ifindex, name, ansi_normal(),
1426 strna(link_info.mdns));
1427
1428 return 0;
1429 }
1430
1431 if (mode == STATUS_PRIVATE) {
1432 printf("%sLink %i (%s)%s: %s\n",
1433 ansi_highlight(), ifindex, name, ansi_normal(),
1434 strna(link_info.dns_over_tls));
1435
1436 return 0;
1437 }
1438
1439 if (mode == STATUS_DNSSEC) {
1440 printf("%sLink %i (%s)%s: %s\n",
1441 ansi_highlight(), ifindex, name, ansi_normal(),
1442 strna(link_info.dnssec));
1443
1444 return 0;
1445 }
1446
1447 if (empty_line && *empty_line)
1448 fputc('\n', stdout);
1449
1450 printf("%sLink %i (%s)%s\n",
1451 ansi_highlight(), ifindex, name, ansi_normal());
1452
1453 table = table_new("key", "value");
1454 if (!table)
1455 return log_oom();
1456
1457 table_set_header(table, false);
1458
1459 r = table_add_many(table,
1460 TABLE_STRING, "Current Scopes:",
1461 TABLE_SET_ALIGN_PERCENT, 100);
1462 if (r < 0)
1463 return table_log_add_error(r);
1464
1465 if (link_info.scopes_mask == 0)
1466 r = table_add_cell(table, NULL, TABLE_STRING, "none");
1467 else {
1468 _cleanup_free_ char *buf = NULL;
1469 size_t len;
1470
1471 if (asprintf(&buf, "%s%s%s%s%s",
1472 link_info.scopes_mask & SD_RESOLVED_DNS ? "DNS " : "",
1473 link_info.scopes_mask & SD_RESOLVED_LLMNR_IPV4 ? "LLMNR/IPv4 " : "",
1474 link_info.scopes_mask & SD_RESOLVED_LLMNR_IPV6 ? "LLMNR/IPv6 " : "",
1475 link_info.scopes_mask & SD_RESOLVED_MDNS_IPV4 ? "mDNS/IPv4 " : "",
1476 link_info.scopes_mask & SD_RESOLVED_MDNS_IPV6 ? "mDNS/IPv6 " : "") < 0)
1477 return log_oom();
1478
1479 len = strlen(buf);
1480 assert(len > 0);
1481 buf[len - 1] = '\0';
1482
1483 r = table_add_cell(table, NULL, TABLE_STRING, buf);
1484 }
1485 if (r < 0)
1486 return table_log_add_error(r);
1487
1488 r = table_add_many(table,
1489 TABLE_STRING, "DefaultRoute setting:",
1490 TABLE_BOOLEAN, link_info.default_route,
1491 TABLE_STRING, "LLMNR setting:",
1492 TABLE_STRING, strna(link_info.llmnr),
1493 TABLE_STRING, "MulticastDNS setting:",
1494 TABLE_STRING, strna(link_info.mdns),
1495 TABLE_STRING, "DNSOverTLS setting:",
1496 TABLE_STRING, strna(link_info.dns_over_tls),
1497 TABLE_STRING, "DNSSEC setting:",
1498 TABLE_STRING, strna(link_info.dnssec),
1499 TABLE_STRING, "DNSSEC supported:",
1500 TABLE_BOOLEAN, link_info.dnssec_supported);
1501 if (r < 0)
1502 return table_log_add_error(r);
1503
1504 if (link_info.current_dns) {
1505 r = table_add_many(table,
1506 TABLE_STRING, "Current DNS Server:",
1507 TABLE_STRING, link_info.current_dns);
1508 if (r < 0)
1509 return table_log_add_error(r);
1510 }
1511
1512 r = dump_list(table, "DNS Servers:", link_info.dns);
1513 if (r < 0)
1514 return r;
1515
1516 r = dump_list(table, "DNS Domain:", link_info.domains);
1517 if (r < 0)
1518 return r;
1519
1520 r = table_print(table, NULL);
1521 if (r < 0)
1522 return log_error_errno(r, "Failed to print table: %m");
1523
1524 if (empty_line)
1525 *empty_line = true;
1526
1527 return 0;
1528 }
1529
1530 static int map_global_dns_servers(sd_bus *bus, const char *member, sd_bus_message *m, sd_bus_error *error, void *userdata) {
1531 char ***l = userdata;
1532 int r;
1533
1534 assert(bus);
1535 assert(member);
1536 assert(m);
1537 assert(l);
1538
1539 r = sd_bus_message_enter_container(m, 'a', "(iiay)");
1540 if (r < 0)
1541 return r;
1542
1543 for (;;) {
1544 _cleanup_free_ char *pretty = NULL;
1545
1546 r = read_dns_server_one(m, true, &pretty);
1547 if (r < 0)
1548 return r;
1549 if (r == 0)
1550 break;
1551
1552 if (isempty(pretty))
1553 continue;
1554
1555 r = strv_consume(l, TAKE_PTR(pretty));
1556 if (r < 0)
1557 return r;
1558 }
1559
1560 r = sd_bus_message_exit_container(m);
1561 if (r < 0)
1562 return r;
1563
1564 return 0;
1565 }
1566
1567 static int map_global_current_dns_server(sd_bus *bus, const char *member, sd_bus_message *m, sd_bus_error *error, void *userdata) {
1568 assert(m);
1569 assert(userdata);
1570
1571 return read_dns_server_one(m, true, userdata);
1572 }
1573
1574 static int map_global_domains(sd_bus *bus, const char *member, sd_bus_message *m, sd_bus_error *error, void *userdata) {
1575 char ***l = userdata;
1576 int r;
1577
1578 assert(bus);
1579 assert(member);
1580 assert(m);
1581 assert(l);
1582
1583 r = sd_bus_message_enter_container(m, 'a', "(isb)");
1584 if (r < 0)
1585 return r;
1586
1587 for (;;) {
1588 _cleanup_free_ char *pretty = NULL;
1589
1590 r = read_domain_one(m, true, &pretty);
1591 if (r < 0)
1592 return r;
1593 if (r == 0)
1594 break;
1595
1596 if (isempty(pretty))
1597 continue;
1598
1599 r = strv_consume(l, TAKE_PTR(pretty));
1600 if (r < 0)
1601 return r;
1602 }
1603
1604 r = sd_bus_message_exit_container(m);
1605 if (r < 0)
1606 return r;
1607
1608 return 0;
1609 }
1610
1611 static int status_print_strv_global(char **p) {
1612 char **i;
1613
1614 printf("%sGlobal%s:", ansi_highlight(), ansi_normal());
1615
1616 STRV_FOREACH(i, p)
1617 printf(" %s", *i);
1618
1619 printf("\n");
1620
1621 return 0;
1622 }
1623
1624 struct global_info {
1625 char *current_dns;
1626 char **dns;
1627 char **fallback_dns;
1628 char **domains;
1629 char **ntas;
1630 const char *llmnr;
1631 const char *mdns;
1632 const char *dns_over_tls;
1633 const char *dnssec;
1634 bool dnssec_supported;
1635 };
1636
1637 static void global_info_clear(struct global_info *p) {
1638 free(p->current_dns);
1639 strv_free(p->dns);
1640 strv_free(p->fallback_dns);
1641 strv_free(p->domains);
1642 strv_free(p->ntas);
1643 }
1644
1645 static int status_global(sd_bus *bus, StatusMode mode, bool *empty_line) {
1646 static const struct bus_properties_map property_map[] = {
1647 { "DNS", "a(iiay)", map_global_dns_servers, offsetof(struct global_info, dns) },
1648 { "FallbackDNS", "a(iiay)", map_global_dns_servers, offsetof(struct global_info, fallback_dns) },
1649 { "CurrentDNSServer", "(iiay)", map_global_current_dns_server, offsetof(struct global_info, current_dns) },
1650 { "Domains", "a(isb)", map_global_domains, offsetof(struct global_info, domains) },
1651 { "DNSSECNegativeTrustAnchors", "as", NULL, offsetof(struct global_info, ntas) },
1652 { "LLMNR", "s", NULL, offsetof(struct global_info, llmnr) },
1653 { "MulticastDNS", "s", NULL, offsetof(struct global_info, mdns) },
1654 { "DNSOverTLS", "s", NULL, offsetof(struct global_info, dns_over_tls) },
1655 { "DNSSEC", "s", NULL, offsetof(struct global_info, dnssec) },
1656 { "DNSSECSupported", "b", NULL, offsetof(struct global_info, dnssec_supported) },
1657 {}
1658 };
1659 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1660 _cleanup_(sd_bus_message_unrefp) sd_bus_message *m = NULL;
1661 _cleanup_(global_info_clear) struct global_info global_info = {};
1662 _cleanup_(table_unrefp) Table *table = NULL;
1663 int r;
1664
1665 assert(bus);
1666 assert(empty_line);
1667
1668 r = bus_map_all_properties(bus,
1669 "org.freedesktop.resolve1",
1670 "/org/freedesktop/resolve1",
1671 property_map,
1672 BUS_MAP_BOOLEAN_AS_BOOL,
1673 &error,
1674 &m,
1675 &global_info);
1676 if (r < 0)
1677 return log_error_errno(r, "Failed to get global data: %s", bus_error_message(&error, r));
1678
1679 (void) pager_open(arg_pager_flags);
1680
1681 if (mode == STATUS_DNS)
1682 return status_print_strv_global(global_info.dns);
1683
1684 if (mode == STATUS_DOMAIN)
1685 return status_print_strv_global(global_info.domains);
1686
1687 if (mode == STATUS_NTA)
1688 return status_print_strv_global(global_info.ntas);
1689
1690 if (mode == STATUS_LLMNR) {
1691 printf("%sGlobal%s: %s\n", ansi_highlight(), ansi_normal(),
1692 strna(global_info.llmnr));
1693
1694 return 0;
1695 }
1696
1697 if (mode == STATUS_MDNS) {
1698 printf("%sGlobal%s: %s\n", ansi_highlight(), ansi_normal(),
1699 strna(global_info.mdns));
1700
1701 return 0;
1702 }
1703
1704 if (mode == STATUS_PRIVATE) {
1705 printf("%sGlobal%s: %s\n", ansi_highlight(), ansi_normal(),
1706 strna(global_info.dns_over_tls));
1707
1708 return 0;
1709 }
1710
1711 if (mode == STATUS_DNSSEC) {
1712 printf("%sGlobal%s: %s\n", ansi_highlight(), ansi_normal(),
1713 strna(global_info.dnssec));
1714
1715 return 0;
1716 }
1717
1718 printf("%sGlobal%s\n", ansi_highlight(), ansi_normal());
1719
1720 table = table_new("key", "value");
1721 if (!table)
1722 return log_oom();
1723
1724 table_set_header(table, false);
1725
1726 r = table_add_many(table,
1727 TABLE_STRING, "LLMNR setting:",
1728 TABLE_SET_ALIGN_PERCENT, 100,
1729 TABLE_STRING, strna(global_info.llmnr),
1730 TABLE_STRING, "MulticastDNS setting:",
1731 TABLE_STRING, strna(global_info.mdns),
1732 TABLE_STRING, "DNSOverTLS setting:",
1733 TABLE_STRING, strna(global_info.dns_over_tls),
1734 TABLE_STRING, "DNSSEC setting:",
1735 TABLE_STRING, strna(global_info.dnssec),
1736 TABLE_STRING, "DNSSEC supported:",
1737 TABLE_BOOLEAN, global_info.dnssec_supported);
1738 if (r < 0)
1739 return table_log_add_error(r);
1740
1741 if (global_info.current_dns) {
1742 r = table_add_many(table,
1743 TABLE_STRING, "Current DNS Server:",
1744 TABLE_STRING, global_info.current_dns);
1745 if (r < 0)
1746 return table_log_add_error(r);
1747 }
1748
1749 r = dump_list(table, "DNS Servers:", global_info.dns);
1750 if (r < 0)
1751 return r;
1752
1753 r = dump_list(table, "Fallback DNS Servers:", global_info.fallback_dns);
1754 if (r < 0)
1755 return r;
1756
1757 r = dump_list(table, "DNS Domain:", global_info.domains);
1758 if (r < 0)
1759 return r;
1760
1761 r = table_print(table, NULL);
1762 if (r < 0)
1763 return log_error_errno(r, "Failed to print table: %m");
1764
1765 *empty_line = true;
1766
1767 return 0;
1768 }
1769
1770 static int status_all(sd_bus *bus, StatusMode mode) {
1771 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL, *reply = NULL;
1772 _cleanup_(sd_netlink_unrefp) sd_netlink *rtnl = NULL;
1773 bool empty_line = false;
1774 int r;
1775
1776 assert(bus);
1777
1778 r = status_global(bus, mode, &empty_line);
1779 if (r < 0)
1780 return r;
1781
1782 r = sd_netlink_open(&rtnl);
1783 if (r < 0)
1784 return log_error_errno(r, "Failed to connect to netlink: %m");
1785
1786 r = sd_rtnl_message_new_link(rtnl, &req, RTM_GETLINK, 0);
1787 if (r < 0)
1788 return rtnl_log_create_error(r);
1789
1790 r = sd_netlink_message_request_dump(req, true);
1791 if (r < 0)
1792 return rtnl_log_create_error(r);
1793
1794 r = sd_netlink_call(rtnl, req, 0, &reply);
1795 if (r < 0)
1796 return log_error_errno(r, "Failed to enumerate links: %m");
1797
1798 _cleanup_free_ InterfaceInfo *infos = NULL;
1799 size_t n_allocated = 0, n_infos = 0;
1800
1801 for (sd_netlink_message *i = reply; i; i = sd_netlink_message_next(i)) {
1802 const char *name;
1803 int ifindex;
1804 uint16_t type;
1805
1806 r = sd_netlink_message_get_type(i, &type);
1807 if (r < 0)
1808 return rtnl_log_parse_error(r);
1809
1810 if (type != RTM_NEWLINK)
1811 continue;
1812
1813 r = sd_rtnl_message_link_get_ifindex(i, &ifindex);
1814 if (r < 0)
1815 return rtnl_log_parse_error(r);
1816
1817 if (ifindex == LOOPBACK_IFINDEX)
1818 continue;
1819
1820 r = sd_netlink_message_read_string(i, IFLA_IFNAME, &name);
1821 if (r < 0)
1822 return rtnl_log_parse_error(r);
1823
1824 if (!GREEDY_REALLOC(infos, n_allocated, n_infos + 1))
1825 return log_oom();
1826
1827 infos[n_infos++] = (InterfaceInfo) { ifindex, name };
1828 }
1829
1830 typesafe_qsort(infos, n_infos, interface_info_compare);
1831
1832 r = 0;
1833 for (size_t i = 0; i < n_infos; i++) {
1834 int q = status_ifindex(bus, infos[i].index, infos[i].name, mode, &empty_line);
1835 if (q < 0 && r >= 0)
1836 r = q;
1837 }
1838
1839 return r;
1840 }
1841
1842 static int verb_status(int argc, char **argv, void *userdata) {
1843 sd_bus *bus = userdata;
1844 _cleanup_(sd_netlink_unrefp) sd_netlink *rtnl = NULL;
1845 int r = 0;
1846
1847 if (argc > 1) {
1848 char **ifname;
1849 bool empty_line = false;
1850
1851 STRV_FOREACH(ifname, argv + 1) {
1852 int ifindex, q;
1853
1854 ifindex = resolve_interface(&rtnl, *ifname);
1855 if (ifindex < 0) {
1856 log_warning_errno(ifindex, "Failed to resolve interface \"%s\", ignoring: %m", *ifname);
1857 continue;
1858 }
1859
1860 q = status_ifindex(bus, ifindex, NULL, STATUS_ALL, &empty_line);
1861 if (q < 0)
1862 r = q;
1863 }
1864 } else
1865 r = status_all(bus, STATUS_ALL);
1866
1867 return r;
1868 }
1869
1870 static int call_dns(sd_bus *bus, char **dns, const BusLocator *locator, sd_bus_error *error) {
1871 _cleanup_(sd_bus_message_unrefp) sd_bus_message *req = NULL;
1872 char **p;
1873 int r;
1874
1875 r = bus_message_new_method_call(bus, &req, locator, "SetLinkDNS");
1876 if (r < 0)
1877 return bus_log_create_error(r);
1878
1879 r = sd_bus_message_append(req, "i", arg_ifindex);
1880 if (r < 0)
1881 return bus_log_create_error(r);
1882
1883 r = sd_bus_message_open_container(req, 'a', "(iay)");
1884 if (r < 0)
1885 return bus_log_create_error(r);
1886
1887 /* If only argument is the empty string, then call SetLinkDNS() with an
1888 * empty list, which will clear the list of domains for an interface. */
1889 if (!strv_equal(dns, STRV_MAKE("")))
1890 STRV_FOREACH(p, dns) {
1891 struct in_addr_data data;
1892
1893 r = in_addr_from_string_auto(*p, &data.family, &data.address);
1894 if (r < 0)
1895 return log_error_errno(r, "Failed to parse DNS server address: %s", *p);
1896
1897 r = sd_bus_message_open_container(req, 'r', "iay");
1898 if (r < 0)
1899 return bus_log_create_error(r);
1900
1901 r = sd_bus_message_append(req, "i", data.family);
1902 if (r < 0)
1903 return bus_log_create_error(r);
1904
1905 r = sd_bus_message_append_array(req, 'y', &data.address, FAMILY_ADDRESS_SIZE(data.family));
1906 if (r < 0)
1907 return bus_log_create_error(r);
1908
1909 r = sd_bus_message_close_container(req);
1910 if (r < 0)
1911 return bus_log_create_error(r);
1912 }
1913
1914 r = sd_bus_message_close_container(req);
1915 if (r < 0)
1916 return bus_log_create_error(r);
1917
1918 return sd_bus_call(bus, req, 0, error, NULL);
1919 }
1920
1921 static int verb_dns(int argc, char **argv, void *userdata) {
1922 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1923 sd_bus *bus = userdata;
1924 int r;
1925
1926 assert(bus);
1927
1928 if (argc >= 2) {
1929 r = ifname_mangle(argv[1]);
1930 if (r < 0)
1931 return r;
1932 }
1933
1934 if (arg_ifindex <= 0)
1935 return status_all(bus, STATUS_DNS);
1936
1937 if (argc < 3)
1938 return status_ifindex(bus, arg_ifindex, NULL, STATUS_DNS, NULL);
1939
1940 r = call_dns(bus, argv + 2, bus_resolve_mgr, &error);
1941 if (r < 0 && sd_bus_error_has_name(&error, BUS_ERROR_LINK_BUSY)) {
1942 sd_bus_error_free(&error);
1943
1944 r = call_dns(bus, argv + 2, bus_network_mgr, &error);
1945 }
1946 if (r < 0) {
1947 if (arg_ifindex_permissive &&
1948 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
1949 return 0;
1950
1951 return log_error_errno(r, "Failed to set DNS configuration: %s", bus_error_message(&error, r));
1952 }
1953
1954 return 0;
1955 }
1956
1957 static int call_domain(sd_bus *bus, char **domain, const BusLocator *locator, sd_bus_error *error) {
1958 _cleanup_(sd_bus_message_unrefp) sd_bus_message *req = NULL;
1959 char **p;
1960 int r;
1961
1962 r = bus_message_new_method_call(bus, &req, locator, "SetLinkDomains");
1963 if (r < 0)
1964 return bus_log_create_error(r);
1965
1966 r = sd_bus_message_append(req, "i", arg_ifindex);
1967 if (r < 0)
1968 return bus_log_create_error(r);
1969
1970 r = sd_bus_message_open_container(req, 'a', "(sb)");
1971 if (r < 0)
1972 return bus_log_create_error(r);
1973
1974 /* If only argument is the empty string, then call SetLinkDomains() with an
1975 * empty list, which will clear the list of domains for an interface. */
1976 if (!strv_equal(domain, STRV_MAKE("")))
1977 STRV_FOREACH(p, domain) {
1978 const char *n;
1979
1980 n = **p == '~' ? *p + 1 : *p;
1981
1982 r = dns_name_is_valid(n);
1983 if (r < 0)
1984 return log_error_errno(r, "Failed to validate specified domain %s: %m", n);
1985 if (r == 0) {
1986 log_error("Domain not valid: %s", n);
1987 return -EINVAL;
1988 }
1989
1990 r = sd_bus_message_append(req, "(sb)", n, **p == '~');
1991 if (r < 0)
1992 return bus_log_create_error(r);
1993 }
1994
1995 r = sd_bus_message_close_container(req);
1996 if (r < 0)
1997 return bus_log_create_error(r);
1998
1999 return sd_bus_call(bus, req, 0, error, NULL);
2000 }
2001
2002 static int verb_domain(int argc, char **argv, void *userdata) {
2003 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2004 sd_bus *bus = userdata;
2005 int r;
2006
2007 assert(bus);
2008
2009 if (argc >= 2) {
2010 r = ifname_mangle(argv[1]);
2011 if (r < 0)
2012 return r;
2013 }
2014
2015 if (arg_ifindex <= 0)
2016 return status_all(bus, STATUS_DOMAIN);
2017
2018 if (argc < 3)
2019 return status_ifindex(bus, arg_ifindex, NULL, STATUS_DOMAIN, NULL);
2020
2021 r = call_domain(bus, argv + 2, bus_resolve_mgr, &error);
2022 if (r < 0 && sd_bus_error_has_name(&error, BUS_ERROR_LINK_BUSY)) {
2023 sd_bus_error_free(&error);
2024
2025 r = call_domain(bus, argv + 2, bus_network_mgr, &error);
2026 }
2027 if (r < 0) {
2028 if (arg_ifindex_permissive &&
2029 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
2030 return 0;
2031
2032 return log_error_errno(r, "Failed to set domain configuration: %s", bus_error_message(&error, r));
2033 }
2034
2035 return 0;
2036 }
2037
2038 static int verb_default_route(int argc, char **argv, void *userdata) {
2039 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2040 sd_bus *bus = userdata;
2041 int r, b;
2042
2043 assert(bus);
2044
2045 if (argc >= 2) {
2046 r = ifname_mangle(argv[1]);
2047 if (r < 0)
2048 return r;
2049 }
2050
2051 if (arg_ifindex <= 0)
2052 return status_all(bus, STATUS_DEFAULT_ROUTE);
2053
2054 if (argc < 3)
2055 return status_ifindex(bus, arg_ifindex, NULL, STATUS_DEFAULT_ROUTE, NULL);
2056
2057 b = parse_boolean(argv[2]);
2058 if (b < 0)
2059 return log_error_errno(b, "Failed to parse boolean argument: %s", argv[2]);
2060
2061 r = bus_call_method(bus, bus_resolve_mgr, "SetLinkDefaultRoute", &error, NULL, "ib", arg_ifindex, b);
2062 if (r < 0 && sd_bus_error_has_name(&error, BUS_ERROR_LINK_BUSY)) {
2063 sd_bus_error_free(&error);
2064
2065 r = bus_call_method(bus, bus_network_mgr, "SetLinkDefaultRoute", &error, NULL, "ib", arg_ifindex, b);
2066 }
2067 if (r < 0) {
2068 if (arg_ifindex_permissive &&
2069 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
2070 return 0;
2071
2072 return log_error_errno(r, "Failed to set default route configuration: %s", bus_error_message(&error, r));
2073 }
2074
2075 return 0;
2076 }
2077
2078 static int verb_llmnr(int argc, char **argv, void *userdata) {
2079 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2080 sd_bus *bus = userdata;
2081 int r;
2082
2083 assert(bus);
2084
2085 if (argc >= 2) {
2086 r = ifname_mangle(argv[1]);
2087 if (r < 0)
2088 return r;
2089 }
2090
2091 if (arg_ifindex <= 0)
2092 return status_all(bus, STATUS_LLMNR);
2093
2094 if (argc < 3)
2095 return status_ifindex(bus, arg_ifindex, NULL, STATUS_LLMNR, NULL);
2096
2097 r = bus_call_method(bus, bus_resolve_mgr, "SetLinkLLMNR", &error, NULL, "is", arg_ifindex, argv[2]);
2098 if (r < 0 && sd_bus_error_has_name(&error, BUS_ERROR_LINK_BUSY)) {
2099 sd_bus_error_free(&error);
2100
2101 r = bus_call_method(bus, bus_network_mgr, "SetLinkLLMNR", &error, NULL, "is", arg_ifindex, argv[2]);
2102 }
2103 if (r < 0) {
2104 if (arg_ifindex_permissive &&
2105 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
2106 return 0;
2107
2108 return log_error_errno(r, "Failed to set LLMNR configuration: %s", bus_error_message(&error, r));
2109 }
2110
2111 return 0;
2112 }
2113
2114 static int verb_mdns(int argc, char **argv, void *userdata) {
2115 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2116 sd_bus *bus = userdata;
2117 int r;
2118
2119 assert(bus);
2120
2121 if (argc >= 2) {
2122 r = ifname_mangle(argv[1]);
2123 if (r < 0)
2124 return r;
2125 }
2126
2127 if (arg_ifindex <= 0)
2128 return status_all(bus, STATUS_MDNS);
2129
2130 if (argc < 3)
2131 return status_ifindex(bus, arg_ifindex, NULL, STATUS_MDNS, NULL);
2132
2133 r = bus_call_method(bus, bus_resolve_mgr, "SetLinkMulticastDNS", &error, NULL, "is", arg_ifindex, argv[2]);
2134 if (r < 0 && sd_bus_error_has_name(&error, BUS_ERROR_LINK_BUSY)) {
2135 sd_bus_error_free(&error);
2136
2137 r = bus_call_method(
2138 bus,
2139 bus_network_mgr,
2140 "SetLinkMulticastDNS",
2141 &error,
2142 NULL,
2143 "is", arg_ifindex, argv[2]);
2144 }
2145 if (r < 0) {
2146 if (arg_ifindex_permissive &&
2147 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
2148 return 0;
2149
2150 return log_error_errno(r, "Failed to set MulticastDNS configuration: %s", bus_error_message(&error, r));
2151 }
2152
2153 return 0;
2154 }
2155
2156 static int verb_dns_over_tls(int argc, char **argv, void *userdata) {
2157 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2158 sd_bus *bus = userdata;
2159 int r;
2160
2161 assert(bus);
2162
2163 if (argc >= 2) {
2164 r = ifname_mangle(argv[1]);
2165 if (r < 0)
2166 return r;
2167 }
2168
2169 if (arg_ifindex <= 0)
2170 return status_all(bus, STATUS_PRIVATE);
2171
2172 if (argc < 3)
2173 return status_ifindex(bus, arg_ifindex, NULL, STATUS_PRIVATE, NULL);
2174
2175 r = bus_call_method(bus, bus_resolve_mgr, "SetLinkDNSOverTLS", &error, NULL, "is", arg_ifindex, argv[2]);
2176 if (r < 0 && sd_bus_error_has_name(&error, BUS_ERROR_LINK_BUSY)) {
2177 sd_bus_error_free(&error);
2178
2179 r = bus_call_method(
2180 bus,
2181 bus_network_mgr,
2182 "SetLinkDNSOverTLS",
2183 &error,
2184 NULL,
2185 "is", arg_ifindex, argv[2]);
2186 }
2187 if (r < 0) {
2188 if (arg_ifindex_permissive &&
2189 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
2190 return 0;
2191
2192 return log_error_errno(r, "Failed to set DNSOverTLS configuration: %s", bus_error_message(&error, r));
2193 }
2194
2195 return 0;
2196 }
2197
2198 static int verb_dnssec(int argc, char **argv, void *userdata) {
2199 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2200 sd_bus *bus = userdata;
2201 int r;
2202
2203 assert(bus);
2204
2205 if (argc >= 2) {
2206 r = ifname_mangle(argv[1]);
2207 if (r < 0)
2208 return r;
2209 }
2210
2211 if (arg_ifindex <= 0)
2212 return status_all(bus, STATUS_DNSSEC);
2213
2214 if (argc < 3)
2215 return status_ifindex(bus, arg_ifindex, NULL, STATUS_DNSSEC, NULL);
2216
2217 r = bus_call_method(bus, bus_resolve_mgr, "SetLinkDNSSEC", &error, NULL, "is", arg_ifindex, argv[2]);
2218 if (r < 0 && sd_bus_error_has_name(&error, BUS_ERROR_LINK_BUSY)) {
2219 sd_bus_error_free(&error);
2220
2221 r = bus_call_method(bus, bus_network_mgr, "SetLinkDNSSEC", &error, NULL, "is", arg_ifindex, argv[2]);
2222 }
2223 if (r < 0) {
2224 if (arg_ifindex_permissive &&
2225 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
2226 return 0;
2227
2228 return log_error_errno(r, "Failed to set DNSSEC configuration: %s", bus_error_message(&error, r));
2229 }
2230
2231 return 0;
2232 }
2233
2234 static int call_nta(sd_bus *bus, char **nta, const BusLocator *locator, sd_bus_error *error) {
2235 _cleanup_(sd_bus_message_unrefp) sd_bus_message *req = NULL;
2236 int r;
2237
2238 r = bus_message_new_method_call(bus, &req, locator, "SetLinkDNSSECNegativeTrustAnchors");
2239 if (r < 0)
2240 return bus_log_create_error(r);
2241
2242 r = sd_bus_message_append(req, "i", arg_ifindex);
2243 if (r < 0)
2244 return bus_log_create_error(r);
2245
2246 r = sd_bus_message_append_strv(req, nta);
2247 if (r < 0)
2248 return bus_log_create_error(r);
2249
2250 return sd_bus_call(bus, req, 0, error, NULL);
2251 }
2252
2253 static int verb_nta(int argc, char **argv, void *userdata) {
2254 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2255 sd_bus *bus = userdata;
2256 char **p;
2257 int r;
2258 bool clear;
2259
2260 assert(bus);
2261
2262 if (argc >= 2) {
2263 r = ifname_mangle(argv[1]);
2264 if (r < 0)
2265 return r;
2266 }
2267
2268 if (arg_ifindex <= 0)
2269 return status_all(bus, STATUS_NTA);
2270
2271 if (argc < 3)
2272 return status_ifindex(bus, arg_ifindex, NULL, STATUS_NTA, NULL);
2273
2274 /* If only argument is the empty string, then call SetLinkDNSSECNegativeTrustAnchors()
2275 * with an empty list, which will clear the list of domains for an interface. */
2276 clear = strv_equal(argv + 2, STRV_MAKE(""));
2277
2278 if (!clear)
2279 STRV_FOREACH(p, argv + 2) {
2280 r = dns_name_is_valid(*p);
2281 if (r < 0)
2282 return log_error_errno(r, "Failed to validate specified domain %s: %m", *p);
2283 if (r == 0) {
2284 log_error("Domain not valid: %s", *p);
2285 return -EINVAL;
2286 }
2287 }
2288
2289 r = call_nta(bus, clear ? NULL : argv + 2, bus_resolve_mgr, &error);
2290 if (r < 0 && sd_bus_error_has_name(&error, BUS_ERROR_LINK_BUSY)) {
2291 sd_bus_error_free(&error);
2292
2293 r = call_nta(bus, clear ? NULL : argv + 2, bus_network_mgr, &error);
2294 }
2295 if (r < 0) {
2296 if (arg_ifindex_permissive &&
2297 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
2298 return 0;
2299
2300 return log_error_errno(r, "Failed to set DNSSEC NTA configuration: %s", bus_error_message(&error, r));
2301 }
2302
2303 return 0;
2304 }
2305
2306 static int verb_revert_link(int argc, char **argv, void *userdata) {
2307 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2308 sd_bus *bus = userdata;
2309 int r;
2310
2311 assert(bus);
2312
2313 if (argc >= 2) {
2314 r = ifname_mangle(argv[1]);
2315 if (r < 0)
2316 return r;
2317 }
2318
2319 if (arg_ifindex <= 0)
2320 return log_error_errno(SYNTHETIC_ERRNO(EINVAL), "Interface argument required.");
2321
2322 r = bus_call_method(bus, bus_resolve_mgr, "RevertLink", &error, NULL, "i", arg_ifindex);
2323 if (r < 0 && sd_bus_error_has_name(&error, BUS_ERROR_LINK_BUSY)) {
2324 sd_bus_error_free(&error);
2325
2326 r = bus_call_method(bus, bus_network_mgr, "RevertLinkDNS", &error, NULL, "i", arg_ifindex);
2327 }
2328 if (r < 0) {
2329 if (arg_ifindex_permissive &&
2330 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
2331 return 0;
2332
2333 return log_error_errno(r, "Failed to revert interface configuration: %s", bus_error_message(&error, r));
2334 }
2335
2336 return 0;
2337 }
2338
2339 static int verb_log_level(int argc, char *argv[], void *userdata) {
2340 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2341 sd_bus *bus = userdata;
2342 int r;
2343
2344 assert(bus);
2345
2346 if (argc == 1) {
2347 _cleanup_free_ char *level = NULL;
2348
2349 r = sd_bus_get_property_string(
2350 bus,
2351 "org.freedesktop.resolve1",
2352 "/org/freedesktop/LogControl1",
2353 "org.freedesktop.LogControl1",
2354 "LogLevel",
2355 &error,
2356 &level);
2357 if (r < 0)
2358 return log_error_errno(r, "Failed to get log level: %s", bus_error_message(&error, r));
2359
2360 puts(level);
2361
2362 } else {
2363 assert(argc == 2);
2364
2365 r = sd_bus_set_property(
2366 bus,
2367 "org.freedesktop.resolve1",
2368 "/org/freedesktop/LogControl1",
2369 "org.freedesktop.LogControl1",
2370 "LogLevel",
2371 &error,
2372 "s",
2373 argv[1]);
2374 if (r < 0)
2375 return log_error_errno(r, "Failed to set log level: %s", bus_error_message(&error, r));
2376 }
2377
2378 return 0;
2379 }
2380
2381 static void help_protocol_types(void) {
2382 if (arg_legend)
2383 puts("Known protocol types:");
2384 puts("dns\nllmnr\nllmnr-ipv4\nllmnr-ipv6\nmdns\nmdns-ipv4\nmdns-ipv6");
2385 }
2386
2387 static void help_dns_types(void) {
2388 if (arg_legend)
2389 puts("Known DNS RR types:");
2390
2391 DUMP_STRING_TABLE(dns_type, int, _DNS_TYPE_MAX);
2392 }
2393
2394 static void help_dns_classes(void) {
2395 if (arg_legend)
2396 puts("Known DNS RR classes:");
2397
2398 DUMP_STRING_TABLE(dns_class, int, _DNS_CLASS_MAX);
2399 }
2400
2401 static int compat_help(void) {
2402 _cleanup_free_ char *link = NULL;
2403 int r;
2404
2405 r = terminal_urlify_man("resolvectl", "1", &link);
2406 if (r < 0)
2407 return log_oom();
2408
2409 printf("%1$s [OPTIONS...] HOSTNAME|ADDRESS...\n"
2410 "%1$s [OPTIONS...] --service [[NAME] TYPE] DOMAIN\n"
2411 "%1$s [OPTIONS...] --openpgp EMAIL@DOMAIN...\n"
2412 "%1$s [OPTIONS...] --statistics\n"
2413 "%1$s [OPTIONS...] --reset-statistics\n"
2414 "\n"
2415 "%2$sResolve domain names, IPv4 and IPv6 addresses, DNS records, and services.%3$s\n\n"
2416 " -h --help Show this help\n"
2417 " --version Show package version\n"
2418 " --no-pager Do not pipe output into a pager\n"
2419 " -4 Resolve IPv4 addresses\n"
2420 " -6 Resolve IPv6 addresses\n"
2421 " -i --interface=INTERFACE Look on interface\n"
2422 " -p --protocol=PROTO|help Look via protocol\n"
2423 " -t --type=TYPE|help Query RR with DNS type\n"
2424 " -c --class=CLASS|help Query RR with DNS class\n"
2425 " --service Resolve service (SRV)\n"
2426 " --service-address=BOOL Resolve address for services (default: yes)\n"
2427 " --service-txt=BOOL Resolve TXT records for services (default: yes)\n"
2428 " --openpgp Query OpenPGP public key\n"
2429 " --tlsa Query TLS public key\n"
2430 " --cname=BOOL Follow CNAME redirects (default: yes)\n"
2431 " --search=BOOL Use search domains for single-label names\n"
2432 " (default: yes)\n"
2433 " --raw[=payload|packet] Dump the answer as binary data\n"
2434 " --legend=BOOL Print headers and additional info (default: yes)\n"
2435 " --statistics Show resolver statistics\n"
2436 " --reset-statistics Reset resolver statistics\n"
2437 " --status Show link and server status\n"
2438 " --flush-caches Flush all local DNS caches\n"
2439 " --reset-server-features\n"
2440 " Forget learnt DNS server feature levels\n"
2441 " --set-dns=SERVER Set per-interface DNS server address\n"
2442 " --set-domain=DOMAIN Set per-interface search domain\n"
2443 " --set-llmnr=MODE Set per-interface LLMNR mode\n"
2444 " --set-mdns=MODE Set per-interface MulticastDNS mode\n"
2445 " --set-dnsovertls=MODE Set per-interface DNS-over-TLS mode\n"
2446 " --set-dnssec=MODE Set per-interface DNSSEC mode\n"
2447 " --set-nta=DOMAIN Set per-interface DNSSEC NTA\n"
2448 " --revert Revert per-interface configuration\n"
2449 "\nSee the %4$s for details.\n"
2450 , program_invocation_short_name
2451 , ansi_highlight()
2452 , ansi_normal()
2453 , link
2454 );
2455
2456 return 0;
2457 }
2458
2459 static int native_help(void) {
2460 _cleanup_free_ char *link = NULL;
2461 int r;
2462
2463 r = terminal_urlify_man("resolvectl", "1", &link);
2464 if (r < 0)
2465 return log_oom();
2466
2467 printf("%s [OPTIONS...] COMMAND ...\n"
2468 "\n"
2469 "%sSend control commands to the network name resolution manager, or%s\n"
2470 "%sresolve domain names, IPv4 and IPv6 addresses, DNS records, and services.%s\n"
2471 "\nCommands:\n"
2472 " query HOSTNAME|ADDRESS... Resolve domain names, IPv4 and IPv6 addresses\n"
2473 " service [[NAME] TYPE] DOMAIN Resolve service (SRV)\n"
2474 " openpgp EMAIL@DOMAIN... Query OpenPGP public key\n"
2475 " tlsa DOMAIN[:PORT]... Query TLS public key\n"
2476 " status [LINK...] Show link and server status\n"
2477 " statistics Show resolver statistics\n"
2478 " reset-statistics Reset resolver statistics\n"
2479 " flush-caches Flush all local DNS caches\n"
2480 " reset-server-features Forget learnt DNS server feature levels\n"
2481 " dns [LINK [SERVER...]] Get/set per-interface DNS server address\n"
2482 " domain [LINK [DOMAIN...]] Get/set per-interface search domain\n"
2483 " default-route [LINK [BOOL]] Get/set per-interface default route flag\n"
2484 " llmnr [LINK [MODE]] Get/set per-interface LLMNR mode\n"
2485 " mdns [LINK [MODE]] Get/set per-interface MulticastDNS mode\n"
2486 " dnsovertls [LINK [MODE]] Get/set per-interface DNS-over-TLS mode\n"
2487 " dnssec [LINK [MODE]] Get/set per-interface DNSSEC mode\n"
2488 " nta [LINK [DOMAIN...]] Get/set per-interface DNSSEC NTA\n"
2489 " revert LINK Revert per-interface configuration\n"
2490 "\nOptions:\n"
2491 " -h --help Show this help\n"
2492 " --version Show package version\n"
2493 " --no-pager Do not pipe output into a pager\n"
2494 " -4 Resolve IPv4 addresses\n"
2495 " -6 Resolve IPv6 addresses\n"
2496 " -i --interface=INTERFACE Look on interface\n"
2497 " -p --protocol=PROTO|help Look via protocol\n"
2498 " -t --type=TYPE|help Query RR with DNS type\n"
2499 " -c --class=CLASS|help Query RR with DNS class\n"
2500 " --service-address=BOOL Resolve address for services (default: yes)\n"
2501 " --service-txt=BOOL Resolve TXT records for services (default: yes)\n"
2502 " --cname=BOOL Follow CNAME redirects (default: yes)\n"
2503 " --search=BOOL Use search domains for single-label names\n"
2504 " (default: yes)\n"
2505 " --raw[=payload|packet] Dump the answer as binary data\n"
2506 " --legend=BOOL Print headers and additional info (default: yes)\n"
2507 "\nSee the %s for details.\n"
2508 , program_invocation_short_name
2509 , ansi_highlight()
2510 , ansi_normal()
2511 , ansi_highlight()
2512 , ansi_normal()
2513 , link
2514 );
2515
2516 return 0;
2517 }
2518
2519 static int verb_help(int argc, char **argv, void *userdata) {
2520 return native_help();
2521 }
2522
2523 static int compat_parse_argv(int argc, char *argv[]) {
2524 enum {
2525 ARG_VERSION = 0x100,
2526 ARG_LEGEND,
2527 ARG_SERVICE,
2528 ARG_CNAME,
2529 ARG_SERVICE_ADDRESS,
2530 ARG_SERVICE_TXT,
2531 ARG_OPENPGP,
2532 ARG_TLSA,
2533 ARG_RAW,
2534 ARG_SEARCH,
2535 ARG_STATISTICS,
2536 ARG_RESET_STATISTICS,
2537 ARG_STATUS,
2538 ARG_FLUSH_CACHES,
2539 ARG_RESET_SERVER_FEATURES,
2540 ARG_NO_PAGER,
2541 ARG_SET_DNS,
2542 ARG_SET_DOMAIN,
2543 ARG_SET_LLMNR,
2544 ARG_SET_MDNS,
2545 ARG_SET_PRIVATE,
2546 ARG_SET_DNSSEC,
2547 ARG_SET_NTA,
2548 ARG_REVERT_LINK,
2549 };
2550
2551 static const struct option options[] = {
2552 { "help", no_argument, NULL, 'h' },
2553 { "version", no_argument, NULL, ARG_VERSION },
2554 { "type", required_argument, NULL, 't' },
2555 { "class", required_argument, NULL, 'c' },
2556 { "legend", required_argument, NULL, ARG_LEGEND },
2557 { "interface", required_argument, NULL, 'i' },
2558 { "protocol", required_argument, NULL, 'p' },
2559 { "cname", required_argument, NULL, ARG_CNAME },
2560 { "service", no_argument, NULL, ARG_SERVICE },
2561 { "service-address", required_argument, NULL, ARG_SERVICE_ADDRESS },
2562 { "service-txt", required_argument, NULL, ARG_SERVICE_TXT },
2563 { "openpgp", no_argument, NULL, ARG_OPENPGP },
2564 { "tlsa", optional_argument, NULL, ARG_TLSA },
2565 { "raw", optional_argument, NULL, ARG_RAW },
2566 { "search", required_argument, NULL, ARG_SEARCH },
2567 { "statistics", no_argument, NULL, ARG_STATISTICS, },
2568 { "reset-statistics", no_argument, NULL, ARG_RESET_STATISTICS },
2569 { "status", no_argument, NULL, ARG_STATUS },
2570 { "flush-caches", no_argument, NULL, ARG_FLUSH_CACHES },
2571 { "reset-server-features", no_argument, NULL, ARG_RESET_SERVER_FEATURES },
2572 { "no-pager", no_argument, NULL, ARG_NO_PAGER },
2573 { "set-dns", required_argument, NULL, ARG_SET_DNS },
2574 { "set-domain", required_argument, NULL, ARG_SET_DOMAIN },
2575 { "set-llmnr", required_argument, NULL, ARG_SET_LLMNR },
2576 { "set-mdns", required_argument, NULL, ARG_SET_MDNS },
2577 { "set-dnsovertls", required_argument, NULL, ARG_SET_PRIVATE },
2578 { "set-dnssec", required_argument, NULL, ARG_SET_DNSSEC },
2579 { "set-nta", required_argument, NULL, ARG_SET_NTA },
2580 { "revert", no_argument, NULL, ARG_REVERT_LINK },
2581 {}
2582 };
2583
2584 int c, r;
2585
2586 assert(argc >= 0);
2587 assert(argv);
2588
2589 while ((c = getopt_long(argc, argv, "h46i:t:c:p:", options, NULL)) >= 0)
2590 switch(c) {
2591
2592 case 'h':
2593 return compat_help();
2594
2595 case ARG_VERSION:
2596 return version();
2597
2598 case '4':
2599 arg_family = AF_INET;
2600 break;
2601
2602 case '6':
2603 arg_family = AF_INET6;
2604 break;
2605
2606 case 'i':
2607 r = ifname_mangle(optarg);
2608 if (r < 0)
2609 return r;
2610 break;
2611
2612 case 't':
2613 if (streq(optarg, "help")) {
2614 help_dns_types();
2615 return 0;
2616 }
2617
2618 r = dns_type_from_string(optarg);
2619 if (r < 0) {
2620 log_error("Failed to parse RR record type %s", optarg);
2621 return r;
2622 }
2623 arg_type = (uint16_t) r;
2624 assert((int) arg_type == r);
2625
2626 arg_mode = MODE_RESOLVE_RECORD;
2627 break;
2628
2629 case 'c':
2630 if (streq(optarg, "help")) {
2631 help_dns_classes();
2632 return 0;
2633 }
2634
2635 r = dns_class_from_string(optarg);
2636 if (r < 0) {
2637 log_error("Failed to parse RR record class %s", optarg);
2638 return r;
2639 }
2640 arg_class = (uint16_t) r;
2641 assert((int) arg_class == r);
2642
2643 break;
2644
2645 case ARG_LEGEND:
2646 r = parse_boolean(optarg);
2647 if (r < 0)
2648 return log_error_errno(r, "Failed to parse --legend= argument");
2649
2650 arg_legend = r;
2651 break;
2652
2653 case 'p':
2654 if (streq(optarg, "help")) {
2655 help_protocol_types();
2656 return 0;
2657 } else if (streq(optarg, "dns"))
2658 arg_flags |= SD_RESOLVED_DNS;
2659 else if (streq(optarg, "llmnr"))
2660 arg_flags |= SD_RESOLVED_LLMNR;
2661 else if (streq(optarg, "llmnr-ipv4"))
2662 arg_flags |= SD_RESOLVED_LLMNR_IPV4;
2663 else if (streq(optarg, "llmnr-ipv6"))
2664 arg_flags |= SD_RESOLVED_LLMNR_IPV6;
2665 else if (streq(optarg, "mdns"))
2666 arg_flags |= SD_RESOLVED_MDNS;
2667 else if (streq(optarg, "mdns-ipv4"))
2668 arg_flags |= SD_RESOLVED_MDNS_IPV4;
2669 else if (streq(optarg, "mdns-ipv6"))
2670 arg_flags |= SD_RESOLVED_MDNS_IPV6;
2671 else
2672 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
2673 "Unknown protocol specifier: %s", optarg);
2674
2675 break;
2676
2677 case ARG_SERVICE:
2678 arg_mode = MODE_RESOLVE_SERVICE;
2679 break;
2680
2681 case ARG_OPENPGP:
2682 arg_mode = MODE_RESOLVE_OPENPGP;
2683 break;
2684
2685 case ARG_TLSA:
2686 arg_mode = MODE_RESOLVE_TLSA;
2687 if (!optarg || service_family_is_valid(optarg))
2688 arg_service_family = optarg;
2689 else
2690 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
2691 "Unknown service family \"%s\".", optarg);
2692 break;
2693
2694 case ARG_RAW:
2695 if (on_tty())
2696 return log_error_errno(SYNTHETIC_ERRNO(ENOTTY),
2697 "Refusing to write binary data to tty.");
2698
2699 if (optarg == NULL || streq(optarg, "payload"))
2700 arg_raw = RAW_PAYLOAD;
2701 else if (streq(optarg, "packet"))
2702 arg_raw = RAW_PACKET;
2703 else
2704 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
2705 "Unknown --raw specifier \"%s\".",
2706 optarg);
2707
2708 arg_legend = false;
2709 break;
2710
2711 case ARG_CNAME:
2712 r = parse_boolean(optarg);
2713 if (r < 0)
2714 return log_error_errno(r, "Failed to parse --cname= argument.");
2715 SET_FLAG(arg_flags, SD_RESOLVED_NO_CNAME, r == 0);
2716 break;
2717
2718 case ARG_SERVICE_ADDRESS:
2719 r = parse_boolean(optarg);
2720 if (r < 0)
2721 return log_error_errno(r, "Failed to parse --service-address= argument.");
2722 SET_FLAG(arg_flags, SD_RESOLVED_NO_ADDRESS, r == 0);
2723 break;
2724
2725 case ARG_SERVICE_TXT:
2726 r = parse_boolean(optarg);
2727 if (r < 0)
2728 return log_error_errno(r, "Failed to parse --service-txt= argument.");
2729 SET_FLAG(arg_flags, SD_RESOLVED_NO_TXT, r == 0);
2730 break;
2731
2732 case ARG_SEARCH:
2733 r = parse_boolean(optarg);
2734 if (r < 0)
2735 return log_error_errno(r, "Failed to parse --search argument.");
2736 SET_FLAG(arg_flags, SD_RESOLVED_NO_SEARCH, r == 0);
2737 break;
2738
2739 case ARG_STATISTICS:
2740 arg_mode = MODE_STATISTICS;
2741 break;
2742
2743 case ARG_RESET_STATISTICS:
2744 arg_mode = MODE_RESET_STATISTICS;
2745 break;
2746
2747 case ARG_FLUSH_CACHES:
2748 arg_mode = MODE_FLUSH_CACHES;
2749 break;
2750
2751 case ARG_RESET_SERVER_FEATURES:
2752 arg_mode = MODE_RESET_SERVER_FEATURES;
2753 break;
2754
2755 case ARG_STATUS:
2756 arg_mode = MODE_STATUS;
2757 break;
2758
2759 case ARG_NO_PAGER:
2760 arg_pager_flags |= PAGER_DISABLE;
2761 break;
2762
2763 case ARG_SET_DNS:
2764 r = strv_extend(&arg_set_dns, optarg);
2765 if (r < 0)
2766 return log_oom();
2767
2768 arg_mode = MODE_SET_LINK;
2769 break;
2770
2771 case ARG_SET_DOMAIN:
2772 r = strv_extend(&arg_set_domain, optarg);
2773 if (r < 0)
2774 return log_oom();
2775
2776 arg_mode = MODE_SET_LINK;
2777 break;
2778
2779 case ARG_SET_LLMNR:
2780 arg_set_llmnr = optarg;
2781 arg_mode = MODE_SET_LINK;
2782 break;
2783
2784 case ARG_SET_MDNS:
2785 arg_set_mdns = optarg;
2786 arg_mode = MODE_SET_LINK;
2787 break;
2788
2789 case ARG_SET_PRIVATE:
2790 arg_set_dns_over_tls = optarg;
2791 arg_mode = MODE_SET_LINK;
2792 break;
2793
2794 case ARG_SET_DNSSEC:
2795 arg_set_dnssec = optarg;
2796 arg_mode = MODE_SET_LINK;
2797 break;
2798
2799 case ARG_SET_NTA:
2800 r = strv_extend(&arg_set_nta, optarg);
2801 if (r < 0)
2802 return log_oom();
2803
2804 arg_mode = MODE_SET_LINK;
2805 break;
2806
2807 case ARG_REVERT_LINK:
2808 arg_mode = MODE_REVERT_LINK;
2809 break;
2810
2811 case '?':
2812 return -EINVAL;
2813
2814 default:
2815 assert_not_reached("Unhandled option");
2816 }
2817
2818 if (arg_type == 0 && arg_class != 0)
2819 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
2820 "--class= may only be used in conjunction with --type=.");
2821
2822 if (arg_type != 0 && arg_mode == MODE_RESOLVE_SERVICE)
2823 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
2824 "--service and --type= may not be combined.");
2825
2826 if (arg_type != 0 && arg_class == 0)
2827 arg_class = DNS_CLASS_IN;
2828
2829 if (arg_class != 0 && arg_type == 0)
2830 arg_type = DNS_TYPE_A;
2831
2832 if (IN_SET(arg_mode, MODE_SET_LINK, MODE_REVERT_LINK)) {
2833
2834 if (arg_ifindex <= 0)
2835 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
2836 "--set-dns=, --set-domain=, --set-llmnr=, --set-mdns=, --set-dnsovertls=, --set-dnssec=, --set-nta= and --revert require --interface=.");
2837 }
2838
2839 return 1 /* work to do */;
2840 }
2841
2842 static int native_parse_argv(int argc, char *argv[]) {
2843 enum {
2844 ARG_VERSION = 0x100,
2845 ARG_LEGEND,
2846 ARG_CNAME,
2847 ARG_SERVICE_ADDRESS,
2848 ARG_SERVICE_TXT,
2849 ARG_RAW,
2850 ARG_SEARCH,
2851 ARG_NO_PAGER,
2852 };
2853
2854 static const struct option options[] = {
2855 { "help", no_argument, NULL, 'h' },
2856 { "version", no_argument, NULL, ARG_VERSION },
2857 { "type", required_argument, NULL, 't' },
2858 { "class", required_argument, NULL, 'c' },
2859 { "legend", required_argument, NULL, ARG_LEGEND },
2860 { "interface", required_argument, NULL, 'i' },
2861 { "protocol", required_argument, NULL, 'p' },
2862 { "cname", required_argument, NULL, ARG_CNAME },
2863 { "service-address", required_argument, NULL, ARG_SERVICE_ADDRESS },
2864 { "service-txt", required_argument, NULL, ARG_SERVICE_TXT },
2865 { "raw", optional_argument, NULL, ARG_RAW },
2866 { "search", required_argument, NULL, ARG_SEARCH },
2867 { "no-pager", no_argument, NULL, ARG_NO_PAGER },
2868 {}
2869 };
2870
2871 int c, r;
2872
2873 assert(argc >= 0);
2874 assert(argv);
2875
2876 while ((c = getopt_long(argc, argv, "h46i:t:c:p:", options, NULL)) >= 0)
2877 switch(c) {
2878
2879 case 'h':
2880 return native_help();
2881
2882 case ARG_VERSION:
2883 return version();
2884
2885 case '4':
2886 arg_family = AF_INET;
2887 break;
2888
2889 case '6':
2890 arg_family = AF_INET6;
2891 break;
2892
2893 case 'i':
2894 r = ifname_mangle(optarg);
2895 if (r < 0)
2896 return r;
2897 break;
2898
2899 case 't':
2900 if (streq(optarg, "help")) {
2901 help_dns_types();
2902 return 0;
2903 }
2904
2905 r = dns_type_from_string(optarg);
2906 if (r < 0) {
2907 log_error("Failed to parse RR record type %s", optarg);
2908 return r;
2909 }
2910 arg_type = (uint16_t) r;
2911 assert((int) arg_type == r);
2912
2913 break;
2914
2915 case 'c':
2916 if (streq(optarg, "help")) {
2917 help_dns_classes();
2918 return 0;
2919 }
2920
2921 r = dns_class_from_string(optarg);
2922 if (r < 0) {
2923 log_error("Failed to parse RR record class %s", optarg);
2924 return r;
2925 }
2926 arg_class = (uint16_t) r;
2927 assert((int) arg_class == r);
2928
2929 break;
2930
2931 case ARG_LEGEND:
2932 r = parse_boolean(optarg);
2933 if (r < 0)
2934 return log_error_errno(r, "Failed to parse --legend= argument");
2935
2936 arg_legend = r;
2937 break;
2938
2939 case 'p':
2940 if (streq(optarg, "help")) {
2941 help_protocol_types();
2942 return 0;
2943 } else if (streq(optarg, "dns"))
2944 arg_flags |= SD_RESOLVED_DNS;
2945 else if (streq(optarg, "llmnr"))
2946 arg_flags |= SD_RESOLVED_LLMNR;
2947 else if (streq(optarg, "llmnr-ipv4"))
2948 arg_flags |= SD_RESOLVED_LLMNR_IPV4;
2949 else if (streq(optarg, "llmnr-ipv6"))
2950 arg_flags |= SD_RESOLVED_LLMNR_IPV6;
2951 else if (streq(optarg, "mdns"))
2952 arg_flags |= SD_RESOLVED_MDNS;
2953 else if (streq(optarg, "mdns-ipv4"))
2954 arg_flags |= SD_RESOLVED_MDNS_IPV4;
2955 else if (streq(optarg, "mdns-ipv6"))
2956 arg_flags |= SD_RESOLVED_MDNS_IPV6;
2957 else
2958 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
2959 "Unknown protocol specifier: %s",
2960 optarg);
2961
2962 break;
2963
2964 case ARG_RAW:
2965 if (on_tty())
2966 return log_error_errno(SYNTHETIC_ERRNO(ENOTTY),
2967 "Refusing to write binary data to tty.");
2968
2969 if (optarg == NULL || streq(optarg, "payload"))
2970 arg_raw = RAW_PAYLOAD;
2971 else if (streq(optarg, "packet"))
2972 arg_raw = RAW_PACKET;
2973 else
2974 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
2975 "Unknown --raw specifier \"%s\".",
2976 optarg);
2977
2978 arg_legend = false;
2979 break;
2980
2981 case ARG_CNAME:
2982 r = parse_boolean(optarg);
2983 if (r < 0)
2984 return log_error_errno(r, "Failed to parse --cname= argument.");
2985 SET_FLAG(arg_flags, SD_RESOLVED_NO_CNAME, r == 0);
2986 break;
2987
2988 case ARG_SERVICE_ADDRESS:
2989 r = parse_boolean(optarg);
2990 if (r < 0)
2991 return log_error_errno(r, "Failed to parse --service-address= argument.");
2992 SET_FLAG(arg_flags, SD_RESOLVED_NO_ADDRESS, r == 0);
2993 break;
2994
2995 case ARG_SERVICE_TXT:
2996 r = parse_boolean(optarg);
2997 if (r < 0)
2998 return log_error_errno(r, "Failed to parse --service-txt= argument.");
2999 SET_FLAG(arg_flags, SD_RESOLVED_NO_TXT, r == 0);
3000 break;
3001
3002 case ARG_SEARCH:
3003 r = parse_boolean(optarg);
3004 if (r < 0)
3005 return log_error_errno(r, "Failed to parse --search argument.");
3006 SET_FLAG(arg_flags, SD_RESOLVED_NO_SEARCH, r == 0);
3007 break;
3008
3009 case ARG_NO_PAGER:
3010 arg_pager_flags |= PAGER_DISABLE;
3011 break;
3012
3013 case '?':
3014 return -EINVAL;
3015
3016 default:
3017 assert_not_reached("Unhandled option");
3018 }
3019
3020 if (arg_type == 0 && arg_class != 0)
3021 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
3022 "--class= may only be used in conjunction with --type=.");
3023
3024 if (arg_type != 0 && arg_class == 0)
3025 arg_class = DNS_CLASS_IN;
3026
3027 if (arg_class != 0 && arg_type == 0)
3028 arg_type = DNS_TYPE_A;
3029
3030 return 1 /* work to do */;
3031 }
3032
3033 static int native_main(int argc, char *argv[], sd_bus *bus) {
3034
3035 static const Verb verbs[] = {
3036 { "help", VERB_ANY, VERB_ANY, 0, verb_help },
3037 { "status", VERB_ANY, VERB_ANY, VERB_DEFAULT, verb_status },
3038 { "query", 2, VERB_ANY, 0, verb_query },
3039 { "service", 2, 4, 0, verb_service },
3040 { "openpgp", 2, VERB_ANY, 0, verb_openpgp },
3041 { "tlsa", 2, VERB_ANY, 0, verb_tlsa },
3042 { "statistics", VERB_ANY, 1, 0, show_statistics },
3043 { "reset-statistics", VERB_ANY, 1, 0, reset_statistics },
3044 { "flush-caches", VERB_ANY, 1, 0, flush_caches },
3045 { "reset-server-features", VERB_ANY, 1, 0, reset_server_features },
3046 { "dns", VERB_ANY, VERB_ANY, 0, verb_dns },
3047 { "domain", VERB_ANY, VERB_ANY, 0, verb_domain },
3048 { "default-route", VERB_ANY, 3, 0, verb_default_route },
3049 { "llmnr", VERB_ANY, 3, 0, verb_llmnr },
3050 { "mdns", VERB_ANY, 3, 0, verb_mdns },
3051 { "dnsovertls", VERB_ANY, 3, 0, verb_dns_over_tls },
3052 { "dnssec", VERB_ANY, 3, 0, verb_dnssec },
3053 { "nta", VERB_ANY, VERB_ANY, 0, verb_nta },
3054 { "revert", VERB_ANY, 2, 0, verb_revert_link },
3055 { "log-level", VERB_ANY, 2, 0, verb_log_level },
3056 {}
3057 };
3058
3059 return dispatch_verb(argc, argv, verbs, bus);
3060 }
3061
3062 static int translate(const char *verb, const char *single_arg, size_t num_args, char **args, sd_bus *bus) {
3063 char **fake, **p;
3064 size_t num;
3065
3066 assert(verb);
3067 assert(num_args == 0 || args);
3068
3069 num = !!single_arg + num_args + 1;
3070
3071 p = fake = newa0(char *, num + 1);
3072 *p++ = (char *) verb;
3073 if (single_arg)
3074 *p++ = (char *) single_arg;
3075 for (size_t i = 0; i < num_args; i++)
3076 *p++ = args[i];
3077
3078 optind = 0;
3079 return native_main((int) num, fake, bus);
3080 }
3081
3082 static int compat_main(int argc, char *argv[], sd_bus *bus) {
3083 int r = 0;
3084
3085 switch (arg_mode) {
3086 case MODE_RESOLVE_HOST:
3087 case MODE_RESOLVE_RECORD:
3088 return translate("query", NULL, argc - optind, argv + optind, bus);
3089
3090 case MODE_RESOLVE_SERVICE:
3091 return translate("service", NULL, argc - optind, argv + optind, bus);
3092
3093 case MODE_RESOLVE_OPENPGP:
3094 return translate("openpgp", NULL, argc - optind, argv + optind, bus);
3095
3096 case MODE_RESOLVE_TLSA:
3097 return translate("tlsa", arg_service_family, argc - optind, argv + optind, bus);
3098
3099 case MODE_STATISTICS:
3100 return translate("statistics", NULL, 0, NULL, bus);
3101
3102 case MODE_RESET_STATISTICS:
3103 return translate("reset-statistics", NULL, 0, NULL, bus);
3104
3105 case MODE_FLUSH_CACHES:
3106 return translate("flush-caches", NULL, 0, NULL, bus);
3107
3108 case MODE_RESET_SERVER_FEATURES:
3109 return translate("reset-server-features", NULL, 0, NULL, bus);
3110
3111 case MODE_STATUS:
3112 return translate("status", NULL, argc - optind, argv + optind, bus);
3113
3114 case MODE_SET_LINK:
3115 assert(arg_ifname);
3116
3117 if (arg_set_dns) {
3118 r = translate("dns", arg_ifname, strv_length(arg_set_dns), arg_set_dns, bus);
3119 if (r < 0)
3120 return r;
3121 }
3122
3123 if (arg_set_domain) {
3124 r = translate("domain", arg_ifname, strv_length(arg_set_domain), arg_set_domain, bus);
3125 if (r < 0)
3126 return r;
3127 }
3128
3129 if (arg_set_nta) {
3130 r = translate("nta", arg_ifname, strv_length(arg_set_nta), arg_set_nta, bus);
3131 if (r < 0)
3132 return r;
3133 }
3134
3135 if (arg_set_llmnr) {
3136 r = translate("llmnr", arg_ifname, 1, (char **) &arg_set_llmnr, bus);
3137 if (r < 0)
3138 return r;
3139 }
3140
3141 if (arg_set_mdns) {
3142 r = translate("mdns", arg_ifname, 1, (char **) &arg_set_mdns, bus);
3143 if (r < 0)
3144 return r;
3145 }
3146
3147 if (arg_set_dns_over_tls) {
3148 r = translate("dnsovertls", arg_ifname, 1, (char **) &arg_set_dns_over_tls, bus);
3149 if (r < 0)
3150 return r;
3151 }
3152
3153 if (arg_set_dnssec) {
3154 r = translate("dnssec", arg_ifname, 1, (char **) &arg_set_dnssec, bus);
3155 if (r < 0)
3156 return r;
3157 }
3158
3159 return r;
3160
3161 case MODE_REVERT_LINK:
3162 assert(arg_ifname);
3163
3164 return translate("revert", arg_ifname, 0, NULL, bus);
3165
3166 case _MODE_INVALID:
3167 assert_not_reached("invalid mode");
3168 }
3169
3170 return 0;
3171 }
3172
3173 static int run(int argc, char **argv) {
3174 _cleanup_(sd_bus_flush_close_unrefp) sd_bus *bus = NULL;
3175 int r;
3176
3177 setlocale(LC_ALL, "");
3178 log_setup_cli();
3179
3180 if (streq(program_invocation_short_name, "resolvconf"))
3181 r = resolvconf_parse_argv(argc, argv);
3182 else if (streq(program_invocation_short_name, "systemd-resolve"))
3183 r = compat_parse_argv(argc, argv);
3184 else
3185 r = native_parse_argv(argc, argv);
3186 if (r <= 0)
3187 return r;
3188
3189 r = sd_bus_open_system(&bus);
3190 if (r < 0)
3191 return log_error_errno(r, "sd_bus_open_system: %m");
3192
3193 if (STR_IN_SET(program_invocation_short_name, "systemd-resolve", "resolvconf"))
3194 return compat_main(argc, argv, bus);
3195
3196 return native_main(argc, argv, bus);
3197 }
3198
3199 DEFINE_MAIN_FUNCTION(run);