]>
Commit | Line | Data |
---|---|---|
53e1b683 | 1 | /* SPDX-License-Identifier: LGPL-2.1+ */ |
3c9b8860 | 2 | |
9aa5d8ba | 3 | #include <netinet/in.h> |
3c9b8860 TG |
4 | #include <linux/if.h> |
5 | ||
b5efdb8a | 6 | #include "alloc-util.h" |
958b66ea | 7 | #include "hostname-util.h" |
64b21ece | 8 | #include "parse-util.h" |
3c9b8860 | 9 | #include "network-internal.h" |
23f53b99 TG |
10 | #include "networkd-link.h" |
11 | #include "networkd-manager.h" | |
12 | #include "networkd-network.h" | |
64b21ece MV |
13 | #include "string-util.h" |
14 | #include "sysctl-util.h" | |
3c9b8860 | 15 | |
302a796f | 16 | static int dhcp4_route_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) { |
3c9b8860 TG |
17 | int r; |
18 | ||
19 | assert(link); | |
6cf4a01c | 20 | assert(link->dhcp4_messages > 0); |
3c9b8860 | 21 | |
313cefa1 | 22 | link->dhcp4_messages--; |
3c9b8860 | 23 | |
1c4baffc | 24 | r = sd_netlink_message_get_errno(m); |
3c9b8860 | 25 | if (r < 0 && r != -EEXIST) { |
f6b8196f | 26 | log_link_error_errno(link, r, "Could not set DHCPv4 route: %m"); |
3c9b8860 TG |
27 | link_enter_failed(link); |
28 | } | |
29 | ||
6cf4a01c | 30 | if (link->dhcp4_messages == 0) { |
3c9b8860 | 31 | link->dhcp4_configured = true; |
8012cd39 | 32 | link_check_ready(link); |
3c9b8860 TG |
33 | } |
34 | ||
35 | return 1; | |
36 | } | |
37 | ||
d6eac9bd DW |
38 | static int route_scope_from_address(const Route *route, const struct in_addr *self_addr) { |
39 | assert(route); | |
40 | assert(self_addr); | |
41 | ||
42 | if (in_addr_is_localhost(AF_INET, &route->dst) || | |
43 | (self_addr->s_addr && route->dst.in.s_addr == self_addr->s_addr)) | |
44 | return RT_SCOPE_HOST; | |
45 | else if (in4_addr_is_null(&route->gw.in)) | |
46 | return RT_SCOPE_LINK; | |
47 | else | |
48 | return RT_SCOPE_UNIVERSE; | |
49 | } | |
50 | ||
3c9b8860 | 51 | static int link_set_dhcp_routes(Link *link) { |
f8693fc7 | 52 | _cleanup_free_ sd_dhcp_route **static_routes = NULL; |
8cdc46e7 | 53 | bool classless_route = false, static_route = false; |
f8862395 TH |
54 | const struct in_addr *router; |
55 | struct in_addr address; | |
3c9b8860 | 56 | int r, n, i; |
fc1ba79d | 57 | uint32_t table; |
3c9b8860 TG |
58 | |
59 | assert(link); | |
0c9b15a3 AJ |
60 | |
61 | if (!link->dhcp_lease) /* link went down while we configured the IP addresses? */ | |
62 | return 0; | |
63 | ||
64 | if (!link->network) /* link went down while we configured the IP addresses? */ | |
65 | return 0; | |
964b26fe SS |
66 | |
67 | if (!link->network->dhcp_use_routes) | |
68 | return 0; | |
3c9b8860 | 69 | |
bdb9f580 | 70 | table = link_get_dhcp_route_table(link); |
fc1ba79d | 71 | |
b23aec0d DW |
72 | r = sd_dhcp_lease_get_address(link->dhcp_lease, &address); |
73 | if (r < 0) | |
74 | return log_link_warning_errno(link, r, "DHCP error: could not get address: %m"); | |
75 | ||
5f04a209 | 76 | n = sd_dhcp_lease_get_routes(link->dhcp_lease, &static_routes); |
599c44e6 YW |
77 | if (n == -ENODATA) |
78 | log_link_debug_errno(link, n, "DHCP: No routes received from DHCP server: %m"); | |
79 | else if (n < 0) | |
8dc787d1 | 80 | log_link_debug_errno(link, n, "DHCP error: could not get routes: %m"); |
5f04a209 | 81 | |
8cdc46e7 | 82 | for (i = 0; i < n; i++) { |
3476951c TH |
83 | switch (sd_dhcp_route_get_option(static_routes[i])) { |
84 | case SD_DHCP_OPTION_CLASSLESS_STATIC_ROUTE: | |
8cdc46e7 | 85 | classless_route = true; |
3476951c TH |
86 | break; |
87 | case SD_DHCP_OPTION_STATIC_ROUTE: | |
8cdc46e7 | 88 | static_route = true; |
3476951c TH |
89 | break; |
90 | } | |
8cdc46e7 SS |
91 | } |
92 | ||
5f04a209 | 93 | for (i = 0; i < n; i++) { |
8e766630 | 94 | _cleanup_(route_freep) Route *route = NULL; |
5f04a209 | 95 | |
8cdc46e7 SS |
96 | /* if the DHCP server returns both a Classless Static Routes option and a Static Routes option, |
97 | the DHCP client MUST ignore the Static Routes option. */ | |
3476951c TH |
98 | if (classless_route && |
99 | sd_dhcp_route_get_option(static_routes[i]) != SD_DHCP_OPTION_CLASSLESS_STATIC_ROUTE) | |
8cdc46e7 SS |
100 | continue; |
101 | ||
5f04a209 SS |
102 | r = route_new(&route); |
103 | if (r < 0) | |
104 | return log_link_error_errno(link, r, "Could not allocate route: %m"); | |
105 | ||
106 | route->family = AF_INET; | |
107 | route->protocol = RTPROT_DHCP; | |
108 | assert_se(sd_dhcp_route_get_gateway(static_routes[i], &route->gw.in) >= 0); | |
109 | assert_se(sd_dhcp_route_get_destination(static_routes[i], &route->dst.in) >= 0); | |
110 | assert_se(sd_dhcp_route_get_destination_prefix_length(static_routes[i], &route->dst_prefixlen) >= 0); | |
111 | route->priority = link->network->dhcp_route_metric; | |
112 | route->table = table; | |
113 | route->scope = route_scope_from_address(route, &address); | |
114 | ||
115 | r = route_configure(route, link, dhcp4_route_handler); | |
116 | if (r < 0) | |
117 | return log_link_warning_errno(link, r, "Could not set host route: %m"); | |
118 | ||
119 | link->dhcp4_messages++; | |
120 | } | |
121 | ||
f8862395 | 122 | r = sd_dhcp_lease_get_router(link->dhcp_lease, &router); |
825ace96 YW |
123 | if (IN_SET(r, 0, -ENODATA)) |
124 | log_link_info(link, "DHCP: No gateway received from DHCP server."); | |
125 | else if (r < 0) | |
444b0170 | 126 | log_link_warning_errno(link, r, "DHCP error: could not get gateway: %m"); |
825ace96 YW |
127 | else if (in4_addr_is_null(&router[0])) |
128 | log_link_info(link, "DHCP: Received gateway is null."); | |
f6b8196f | 129 | |
5f04a209 SS |
130 | /* According to RFC 3442: If the DHCP server returns both a Classless Static Routes option and |
131 | a Router option, the DHCP client MUST ignore the Router option. */ | |
8cdc46e7 SS |
132 | if (classless_route && static_route) |
133 | log_link_warning(link, "Classless static routes received from DHCP server: ignoring static-route option and router option"); | |
134 | ||
f8862395 | 135 | if (r > 0 && !classless_route && !in4_addr_is_null(&router[0])) { |
860e636c | 136 | _cleanup_(route_freep) Route *route = NULL, *route_gw = NULL; |
ed9e361a TG |
137 | |
138 | r = route_new(&route_gw); | |
f6b8196f LP |
139 | if (r < 0) |
140 | return log_link_error_errno(link, r, "Could not allocate route: %m"); | |
3c9b8860 TG |
141 | |
142 | /* The dhcp netmask may mask out the gateway. Add an explicit | |
143 | * route for the gw host so that we can route no matter the | |
144 | * netmask or existing kernel route tables. */ | |
145 | route_gw->family = AF_INET; | |
f8862395 | 146 | route_gw->dst.in = router[0]; |
3c9b8860 | 147 | route_gw->dst_prefixlen = 32; |
2ce40956 | 148 | route_gw->prefsrc.in = address; |
3c9b8860 | 149 | route_gw->scope = RT_SCOPE_LINK; |
ed9e361a | 150 | route_gw->protocol = RTPROT_DHCP; |
86655331 | 151 | route_gw->priority = link->network->dhcp_route_metric; |
fc1ba79d | 152 | route_gw->table = table; |
3c9b8860 | 153 | |
483d099e | 154 | r = route_configure(route_gw, link, dhcp4_route_handler); |
f6b8196f LP |
155 | if (r < 0) |
156 | return log_link_warning_errno(link, r, "Could not set host route: %m"); | |
3c9b8860 | 157 | |
313cefa1 | 158 | link->dhcp4_messages++; |
3c9b8860 | 159 | |
860e636c YW |
160 | r = route_new(&route); |
161 | if (r < 0) | |
162 | return log_link_error_errno(link, r, "Could not allocate route: %m"); | |
163 | ||
3c9b8860 | 164 | route->family = AF_INET; |
f8862395 | 165 | route->gw.in = router[0]; |
2ce40956 | 166 | route->prefsrc.in = address; |
860e636c | 167 | route->protocol = RTPROT_DHCP; |
86655331 | 168 | route->priority = link->network->dhcp_route_metric; |
fc1ba79d | 169 | route->table = table; |
3c9b8860 | 170 | |
483d099e | 171 | r = route_configure(route, link, dhcp4_route_handler); |
3c9b8860 | 172 | if (r < 0) { |
f6b8196f | 173 | log_link_warning_errno(link, r, "Could not set routes: %m"); |
3c9b8860 TG |
174 | link_enter_failed(link); |
175 | return r; | |
176 | } | |
177 | ||
313cefa1 | 178 | link->dhcp4_messages++; |
3c9b8860 TG |
179 | } |
180 | ||
3c9b8860 TG |
181 | return 0; |
182 | } | |
183 | ||
184 | static int dhcp_lease_lost(Link *link) { | |
8e766630 | 185 | _cleanup_(address_freep) Address *address = NULL; |
f8862395 | 186 | const struct in_addr *router; |
3c9b8860 TG |
187 | struct in_addr addr; |
188 | struct in_addr netmask; | |
f414a269 | 189 | unsigned prefixlen = 0; |
3c9b8860 TG |
190 | int r; |
191 | ||
192 | assert(link); | |
193 | assert(link->dhcp_lease); | |
194 | ||
79008bdd | 195 | log_link_warning(link, "DHCP lease lost"); |
3c9b8860 | 196 | |
27cb34f5 | 197 | if (link->network->dhcp_use_routes) { |
f8693fc7 | 198 | _cleanup_free_ sd_dhcp_route **routes = NULL; |
3c9b8860 TG |
199 | int n, i; |
200 | ||
201 | n = sd_dhcp_lease_get_routes(link->dhcp_lease, &routes); | |
202 | if (n >= 0) { | |
203 | for (i = 0; i < n; i++) { | |
8e766630 | 204 | _cleanup_(route_freep) Route *route = NULL; |
3c9b8860 | 205 | |
ed9e361a | 206 | r = route_new(&route); |
3c9b8860 TG |
207 | if (r >= 0) { |
208 | route->family = AF_INET; | |
f8693fc7 BG |
209 | assert_se(sd_dhcp_route_get_gateway(routes[i], &route->gw.in) >= 0); |
210 | assert_se(sd_dhcp_route_get_destination(routes[i], &route->dst.in) >= 0); | |
211 | assert_se(sd_dhcp_route_get_destination_prefix_length(routes[i], &route->dst_prefixlen) >= 0); | |
3c9b8860 | 212 | |
4645ad47 | 213 | route_remove(route, link, NULL); |
3c9b8860 TG |
214 | } |
215 | } | |
216 | } | |
3c9b8860 | 217 | |
f8862395 TH |
218 | r = sd_dhcp_lease_get_router(link->dhcp_lease, &router); |
219 | if (r > 0 && !in4_addr_is_null(&router[0])) { | |
8e766630 LP |
220 | _cleanup_(route_freep) Route *route_gw = NULL; |
221 | _cleanup_(route_freep) Route *route = NULL; | |
3c9b8860 | 222 | |
ed9e361a | 223 | r = route_new(&route_gw); |
3c9b8860 TG |
224 | if (r >= 0) { |
225 | route_gw->family = AF_INET; | |
f8862395 | 226 | route_gw->dst.in = router[0]; |
3c9b8860 TG |
227 | route_gw->dst_prefixlen = 32; |
228 | route_gw->scope = RT_SCOPE_LINK; | |
229 | ||
4645ad47 | 230 | route_remove(route_gw, link, NULL); |
3c9b8860 TG |
231 | } |
232 | ||
ed9e361a | 233 | r = route_new(&route); |
3c9b8860 TG |
234 | if (r >= 0) { |
235 | route->family = AF_INET; | |
f8862395 | 236 | route->gw.in = router[0]; |
3c9b8860 | 237 | |
4645ad47 | 238 | route_remove(route, link, NULL); |
3c9b8860 TG |
239 | } |
240 | } | |
b5799eeb | 241 | } |
3c9b8860 | 242 | |
b5799eeb SS |
243 | r = address_new(&address); |
244 | if (r >= 0) { | |
f414a269 TG |
245 | r = sd_dhcp_lease_get_address(link->dhcp_lease, &addr); |
246 | if (r >= 0) { | |
247 | r = sd_dhcp_lease_get_netmask(link->dhcp_lease, &netmask); | |
248 | if (r >= 0) | |
5a941f5f | 249 | prefixlen = in4_addr_netmask_to_prefixlen(&netmask); |
3c9b8860 | 250 | |
f414a269 TG |
251 | address->family = AF_INET; |
252 | address->in_addr.in = addr; | |
253 | address->prefixlen = prefixlen; | |
3c9b8860 | 254 | |
63ae0569 | 255 | address_remove(address, link, NULL); |
f414a269 | 256 | } |
3c9b8860 TG |
257 | } |
258 | ||
27cb34f5 | 259 | if (link->network->dhcp_use_mtu) { |
3c9b8860 TG |
260 | uint16_t mtu; |
261 | ||
262 | r = sd_dhcp_lease_get_mtu(link->dhcp_lease, &mtu); | |
263 | if (r >= 0 && link->original_mtu != mtu) { | |
40288ece | 264 | r = link_set_mtu(link, link->original_mtu, true); |
3c9b8860 | 265 | if (r < 0) { |
79008bdd | 266 | log_link_warning(link, |
3c9b8860 TG |
267 | "DHCP error: could not reset MTU"); |
268 | link_enter_failed(link); | |
269 | return r; | |
270 | } | |
271 | } | |
272 | } | |
273 | ||
27cb34f5 | 274 | if (link->network->dhcp_use_hostname) { |
3c9b8860 TG |
275 | const char *hostname = NULL; |
276 | ||
27cb34f5 LP |
277 | if (link->network->dhcp_hostname) |
278 | hostname = link->network->dhcp_hostname; | |
dce391e7 LP |
279 | else |
280 | (void) sd_dhcp_lease_get_hostname(link->dhcp_lease, &hostname); | |
a7d0ef44 | 281 | |
dce391e7 LP |
282 | if (hostname) { |
283 | /* If a hostname was set due to the lease, then unset it now. */ | |
59eb33e0 | 284 | r = manager_set_hostname(link->manager, NULL); |
3c9b8860 | 285 | if (r < 0) |
dce391e7 | 286 | log_link_warning_errno(link, r, "Failed to reset transient hostname: %m"); |
3c9b8860 TG |
287 | } |
288 | } | |
289 | ||
290 | link->dhcp_lease = sd_dhcp_lease_unref(link->dhcp_lease); | |
6a3e5f6a | 291 | link_dirty(link); |
3c9b8860 TG |
292 | link->dhcp4_configured = false; |
293 | ||
294 | return 0; | |
295 | } | |
296 | ||
302a796f | 297 | static int dhcp4_address_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) { |
3c9b8860 TG |
298 | int r; |
299 | ||
300 | assert(link); | |
301 | ||
1c4baffc | 302 | r = sd_netlink_message_get_errno(m); |
3c9b8860 | 303 | if (r < 0 && r != -EEXIST) { |
f6b8196f | 304 | log_link_error_errno(link, r, "Could not set DHCPv4 address: %m"); |
3c9b8860 | 305 | link_enter_failed(link); |
45af44d4 | 306 | } else if (r >= 0) |
200a0868 | 307 | manager_rtnl_process_address(rtnl, m, link->manager); |
3c9b8860 TG |
308 | |
309 | link_set_dhcp_routes(link); | |
310 | ||
b5799eeb SS |
311 | /* Add back static routes since kernel removes while DHCPv4 address is removed from when lease expires */ |
312 | link_request_set_routes(link); | |
313 | ||
223932c7 AH |
314 | if (link->dhcp4_messages == 0) { |
315 | link->dhcp4_configured = true; | |
316 | link_check_ready(link); | |
317 | } | |
318 | ||
3c9b8860 TG |
319 | return 1; |
320 | } | |
321 | ||
322 | static int dhcp4_update_address(Link *link, | |
323 | struct in_addr *address, | |
324 | struct in_addr *netmask, | |
325 | uint32_t lifetime) { | |
8e766630 | 326 | _cleanup_(address_freep) Address *addr = NULL; |
3c9b8860 TG |
327 | unsigned prefixlen; |
328 | int r; | |
329 | ||
330 | assert(address); | |
331 | assert(netmask); | |
332 | assert(lifetime); | |
333 | ||
5a941f5f | 334 | prefixlen = in4_addr_netmask_to_prefixlen(netmask); |
3c9b8860 | 335 | |
f0213e37 | 336 | r = address_new(&addr); |
3c9b8860 TG |
337 | if (r < 0) |
338 | return r; | |
339 | ||
340 | addr->family = AF_INET; | |
341 | addr->in_addr.in.s_addr = address->s_addr; | |
342 | addr->cinfo.ifa_prefered = lifetime; | |
343 | addr->cinfo.ifa_valid = lifetime; | |
344 | addr->prefixlen = prefixlen; | |
345 | addr->broadcast.s_addr = address->s_addr | ~netmask->s_addr; | |
346 | ||
66669078 TG |
347 | /* allow reusing an existing address and simply update its lifetime |
348 | * in case it already exists */ | |
483d099e | 349 | r = address_configure(addr, link, dhcp4_address_handler, true); |
3c9b8860 TG |
350 | if (r < 0) |
351 | return r; | |
352 | ||
353 | return 0; | |
354 | } | |
355 | ||
356 | static int dhcp_lease_renew(sd_dhcp_client *client, Link *link) { | |
357 | sd_dhcp_lease *lease; | |
358 | struct in_addr address; | |
359 | struct in_addr netmask; | |
360 | uint32_t lifetime = CACHE_INFO_INFINITY_LIFE_TIME; | |
361 | int r; | |
362 | ||
363 | assert(link); | |
364 | assert(client); | |
365 | assert(link->network); | |
366 | ||
367 | r = sd_dhcp_client_get_lease(client, &lease); | |
f6b8196f LP |
368 | if (r < 0) |
369 | return log_link_warning_errno(link, r, "DHCP error: no lease: %m"); | |
3c9b8860 TG |
370 | |
371 | sd_dhcp_lease_unref(link->dhcp_lease); | |
372 | link->dhcp4_configured = false; | |
e6b18ffa | 373 | link->dhcp_lease = sd_dhcp_lease_ref(lease); |
6a3e5f6a | 374 | link_dirty(link); |
3c9b8860 TG |
375 | |
376 | r = sd_dhcp_lease_get_address(lease, &address); | |
f6b8196f LP |
377 | if (r < 0) |
378 | return log_link_warning_errno(link, r, "DHCP error: no address: %m"); | |
3c9b8860 TG |
379 | |
380 | r = sd_dhcp_lease_get_netmask(lease, &netmask); | |
f6b8196f LP |
381 | if (r < 0) |
382 | return log_link_warning_errno(link, r, "DHCP error: no netmask: %m"); | |
3c9b8860 TG |
383 | |
384 | if (!link->network->dhcp_critical) { | |
f6b8196f LP |
385 | r = sd_dhcp_lease_get_lifetime(link->dhcp_lease, &lifetime); |
386 | if (r < 0) | |
387 | return log_link_warning_errno(link, r, "DHCP error: no lifetime: %m"); | |
3c9b8860 TG |
388 | } |
389 | ||
390 | r = dhcp4_update_address(link, &address, &netmask, lifetime); | |
391 | if (r < 0) { | |
f6b8196f | 392 | log_link_warning_errno(link, r, "Could not update IP address: %m"); |
3c9b8860 TG |
393 | link_enter_failed(link); |
394 | return r; | |
395 | } | |
396 | ||
397 | return 0; | |
398 | } | |
399 | ||
400 | static int dhcp_lease_acquired(sd_dhcp_client *client, Link *link) { | |
f8862395 | 401 | const struct in_addr *router; |
3c9b8860 TG |
402 | sd_dhcp_lease *lease; |
403 | struct in_addr address; | |
404 | struct in_addr netmask; | |
3c9b8860 TG |
405 | unsigned prefixlen; |
406 | uint32_t lifetime = CACHE_INFO_INFINITY_LIFE_TIME; | |
407 | int r; | |
408 | ||
409 | assert(client); | |
410 | assert(link); | |
411 | ||
412 | r = sd_dhcp_client_get_lease(client, &lease); | |
f2341e0a | 413 | if (r < 0) |
f6b8196f | 414 | return log_link_error_errno(link, r, "DHCP error: No lease: %m"); |
3c9b8860 TG |
415 | |
416 | r = sd_dhcp_lease_get_address(lease, &address); | |
f2341e0a | 417 | if (r < 0) |
f6b8196f | 418 | return log_link_error_errno(link, r, "DHCP error: No address: %m"); |
3c9b8860 TG |
419 | |
420 | r = sd_dhcp_lease_get_netmask(lease, &netmask); | |
f2341e0a | 421 | if (r < 0) |
f6b8196f | 422 | return log_link_error_errno(link, r, "DHCP error: No netmask: %m"); |
3c9b8860 | 423 | |
5a941f5f | 424 | prefixlen = in4_addr_netmask_to_prefixlen(&netmask); |
3c9b8860 | 425 | |
f8862395 | 426 | r = sd_dhcp_lease_get_router(lease, &router); |
397d15fd | 427 | if (r < 0 && r != -ENODATA) |
f6b8196f | 428 | return log_link_error_errno(link, r, "DHCP error: Could not get gateway: %m"); |
3c9b8860 | 429 | |
f8862395 | 430 | if (r > 0 && !in4_addr_is_null(&router[0])) |
f2341e0a LP |
431 | log_struct(LOG_INFO, |
432 | LOG_LINK_INTERFACE(link), | |
433 | LOG_LINK_MESSAGE(link, "DHCPv4 address %u.%u.%u.%u/%u via %u.%u.%u.%u", | |
434 | ADDRESS_FMT_VAL(address), | |
435 | prefixlen, | |
f8862395 | 436 | ADDRESS_FMT_VAL(router[0])), |
f2341e0a LP |
437 | "ADDRESS=%u.%u.%u.%u", ADDRESS_FMT_VAL(address), |
438 | "PREFIXLEN=%u", prefixlen, | |
f8862395 | 439 | "GATEWAY=%u.%u.%u.%u", ADDRESS_FMT_VAL(router[0])); |
3c9b8860 | 440 | else |
f2341e0a LP |
441 | log_struct(LOG_INFO, |
442 | LOG_LINK_INTERFACE(link), | |
443 | LOG_LINK_MESSAGE(link, "DHCPv4 address %u.%u.%u.%u/%u", | |
444 | ADDRESS_FMT_VAL(address), | |
445 | prefixlen), | |
446 | "ADDRESS=%u.%u.%u.%u", ADDRESS_FMT_VAL(address), | |
a1230ff9 | 447 | "PREFIXLEN=%u", prefixlen); |
3c9b8860 | 448 | |
e6b18ffa | 449 | link->dhcp_lease = sd_dhcp_lease_ref(lease); |
6a3e5f6a | 450 | link_dirty(link); |
3c9b8860 | 451 | |
27cb34f5 | 452 | if (link->network->dhcp_use_mtu) { |
3c9b8860 TG |
453 | uint16_t mtu; |
454 | ||
455 | r = sd_dhcp_lease_get_mtu(lease, &mtu); | |
456 | if (r >= 0) { | |
40288ece | 457 | r = link_set_mtu(link, mtu, true); |
3c9b8860 | 458 | if (r < 0) |
f2341e0a | 459 | log_link_error_errno(link, r, "Failed to set MTU to %" PRIu16 ": %m", mtu); |
3c9b8860 TG |
460 | } |
461 | } | |
462 | ||
27cb34f5 | 463 | if (link->network->dhcp_use_hostname) { |
2de2abad LB |
464 | const char *dhcpname = NULL; |
465 | _cleanup_free_ char *hostname = NULL; | |
3c9b8860 | 466 | |
27cb34f5 | 467 | if (link->network->dhcp_hostname) |
2de2abad | 468 | dhcpname = link->network->dhcp_hostname; |
dce391e7 | 469 | else |
2de2abad LB |
470 | (void) sd_dhcp_lease_get_hostname(lease, &dhcpname); |
471 | ||
472 | if (dhcpname) { | |
473 | r = shorten_overlong(dhcpname, &hostname); | |
474 | if (r < 0) | |
475 | log_link_warning_errno(link, r, "Unable to shorten overlong DHCP hostname '%s', ignoring: %m", dhcpname); | |
476 | if (r == 1) | |
5238e957 | 477 | log_link_notice(link, "Overlong DHCP hostname received, shortened from '%s' to '%s'", dhcpname, hostname); |
2de2abad | 478 | } |
a7d0ef44 | 479 | |
dce391e7 | 480 | if (hostname) { |
59eb33e0 | 481 | r = manager_set_hostname(link->manager, hostname); |
3c9b8860 | 482 | if (r < 0) |
f2341e0a | 483 | log_link_error_errno(link, r, "Failed to set transient hostname to '%s': %m", hostname); |
3c9b8860 TG |
484 | } |
485 | } | |
486 | ||
27cb34f5 | 487 | if (link->network->dhcp_use_timezone) { |
21b80ad1 LP |
488 | const char *tz = NULL; |
489 | ||
490 | (void) sd_dhcp_lease_get_timezone(link->dhcp_lease, &tz); | |
491 | ||
492 | if (tz) { | |
59eb33e0 | 493 | r = manager_set_timezone(link->manager, tz); |
21b80ad1 LP |
494 | if (r < 0) |
495 | log_link_error_errno(link, r, "Failed to set timezone to '%s': %m", tz); | |
496 | } | |
497 | } | |
498 | ||
3c9b8860 | 499 | if (!link->network->dhcp_critical) { |
f2341e0a | 500 | r = sd_dhcp_lease_get_lifetime(link->dhcp_lease, &lifetime); |
fc95c359 YW |
501 | if (r < 0) |
502 | return log_link_warning_errno(link, r, "DHCP error: no lifetime: %m"); | |
3c9b8860 TG |
503 | } |
504 | ||
505 | r = dhcp4_update_address(link, &address, &netmask, lifetime); | |
506 | if (r < 0) { | |
f2341e0a | 507 | log_link_warning_errno(link, r, "Could not update IP address: %m"); |
3c9b8860 TG |
508 | link_enter_failed(link); |
509 | return r; | |
510 | } | |
511 | ||
512 | return 0; | |
513 | } | |
8bc17bb3 | 514 | |
727b5734 SS |
515 | static int dhcp_server_is_black_listed(Link *link, sd_dhcp_client *client) { |
516 | sd_dhcp_lease *lease; | |
517 | struct in_addr addr; | |
518 | int r; | |
519 | ||
520 | assert(link); | |
521 | assert(link->network); | |
522 | assert(client); | |
523 | ||
524 | r = sd_dhcp_client_get_lease(client, &lease); | |
525 | if (r < 0) | |
526 | return log_link_error_errno(link, r, "Failed to get DHCP lease: %m"); | |
527 | ||
528 | r = sd_dhcp_lease_get_server_identifier(lease, &addr); | |
529 | if (r < 0) | |
530 | return log_link_debug_errno(link, r, "Failed to get DHCP server ip address: %m"); | |
531 | ||
532 | if (set_contains(link->network->dhcp_black_listed_ip, UINT32_TO_PTR(addr.s_addr))) { | |
533 | log_struct(LOG_DEBUG, | |
534 | LOG_LINK_INTERFACE(link), | |
535 | LOG_LINK_MESSAGE(link, "DHCPv4 ip '%u.%u.%u.%u' found in black listed ip addresses, ignoring offer", | |
536 | ADDRESS_FMT_VAL(addr))); | |
537 | return true; | |
538 | } | |
539 | ||
540 | return false; | |
541 | } | |
542 | ||
543 | static int dhcp4_handler(sd_dhcp_client *client, int event, void *userdata) { | |
3c9b8860 | 544 | Link *link = userdata; |
86e2be7b | 545 | int r; |
3c9b8860 TG |
546 | |
547 | assert(link); | |
548 | assert(link->network); | |
549 | assert(link->manager); | |
550 | ||
551 | if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER)) | |
727b5734 | 552 | return 0; |
3c9b8860 TG |
553 | |
554 | switch (event) { | |
03748142 | 555 | case SD_DHCP_CLIENT_EVENT_STOP: |
8bc17bb3 SS |
556 | |
557 | if (link_ipv4ll_fallback_enabled(link)) { | |
558 | assert(link->ipv4ll); | |
559 | ||
560 | log_link_debug(link, "DHCP client is stopped. Acquiring IPv4 link-local address"); | |
561 | ||
562 | r = sd_ipv4ll_start(link->ipv4ll); | |
727b5734 SS |
563 | if (r < 0) |
564 | return log_link_warning_errno(link, r, "Could not acquire IPv4 link-local address: %m"); | |
8bc17bb3 SS |
565 | } |
566 | ||
1501b429 SS |
567 | if (link->network->dhcp_send_release) |
568 | (void) sd_dhcp_client_send_release(client); | |
569 | ||
8bc17bb3 SS |
570 | _fallthrough_; |
571 | case SD_DHCP_CLIENT_EVENT_EXPIRED: | |
03748142 | 572 | case SD_DHCP_CLIENT_EVENT_IP_CHANGE: |
8bc17bb3 | 573 | |
3c9b8860 | 574 | if (link->network->dhcp_critical) { |
f6b8196f | 575 | log_link_error(link, "DHCPv4 connection considered system critical, ignoring request to reconfigure it."); |
727b5734 | 576 | return 0; |
3c9b8860 TG |
577 | } |
578 | ||
579 | if (link->dhcp_lease) { | |
580 | r = dhcp_lease_lost(link); | |
581 | if (r < 0) { | |
582 | link_enter_failed(link); | |
727b5734 | 583 | return r; |
3c9b8860 TG |
584 | } |
585 | } | |
586 | ||
03748142 | 587 | if (event == SD_DHCP_CLIENT_EVENT_IP_CHANGE) { |
3c9b8860 TG |
588 | r = dhcp_lease_acquired(client, link); |
589 | if (r < 0) { | |
590 | link_enter_failed(link); | |
727b5734 | 591 | return r; |
3c9b8860 TG |
592 | } |
593 | } | |
594 | ||
595 | break; | |
03748142 | 596 | case SD_DHCP_CLIENT_EVENT_RENEW: |
3c9b8860 TG |
597 | r = dhcp_lease_renew(client, link); |
598 | if (r < 0) { | |
599 | link_enter_failed(link); | |
727b5734 | 600 | return r; |
3c9b8860 TG |
601 | } |
602 | break; | |
03748142 | 603 | case SD_DHCP_CLIENT_EVENT_IP_ACQUIRE: |
3c9b8860 TG |
604 | r = dhcp_lease_acquired(client, link); |
605 | if (r < 0) { | |
606 | link_enter_failed(link); | |
727b5734 | 607 | return r; |
3c9b8860 TG |
608 | } |
609 | break; | |
727b5734 SS |
610 | case SD_DHCP_CLIENT_EVENT_SELECTING: |
611 | r = dhcp_server_is_black_listed(link, client); | |
612 | if (r < 0) | |
613 | return r; | |
614 | if (r != 0) | |
615 | return -ENOMSG; | |
616 | break; | |
3c9b8860 TG |
617 | default: |
618 | if (event < 0) | |
f6b8196f | 619 | log_link_warning_errno(link, event, "DHCP error: Client failed: %m"); |
3c9b8860 | 620 | else |
f6b8196f | 621 | log_link_warning(link, "DHCP unknown event: %i", event); |
3c9b8860 TG |
622 | break; |
623 | } | |
624 | ||
727b5734 | 625 | return 0; |
3c9b8860 TG |
626 | } |
627 | ||
7192bb81 LP |
628 | static int dhcp4_set_hostname(Link *link) { |
629 | _cleanup_free_ char *hostname = NULL; | |
630 | const char *hn; | |
631 | int r; | |
632 | ||
633 | assert(link); | |
634 | ||
635 | if (!link->network->dhcp_send_hostname) | |
636 | hn = NULL; | |
637 | else if (link->network->dhcp_hostname) | |
638 | hn = link->network->dhcp_hostname; | |
639 | else { | |
640 | r = gethostname_strict(&hostname); | |
641 | if (r < 0 && r != -ENXIO) /* ENXIO: no hostname set or hostname is "localhost" */ | |
642 | return r; | |
643 | ||
644 | hn = hostname; | |
645 | } | |
646 | ||
a8494759 YW |
647 | r = sd_dhcp_client_set_hostname(link->dhcp_client, hn); |
648 | if (r == -EINVAL && hostname) | |
649 | /* Ignore error when the machine's hostname is not suitable to send in DHCP packet. */ | |
650 | log_link_warning_errno(link, r, "DHCP4 CLIENT: Failed to set hostname from kernel hostname, ignoring: %m"); | |
651 | else if (r < 0) | |
652 | return log_link_error_errno(link, r, "DHCP4 CLIENT: Failed to set hostname: %m"); | |
653 | ||
654 | return 0; | |
7192bb81 LP |
655 | } |
656 | ||
64b21ece | 657 | static bool promote_secondaries_enabled(const char *ifname) { |
3f550c31 HV |
658 | _cleanup_free_ char *promote_secondaries_sysctl = NULL; |
659 | char *promote_secondaries_path; | |
64b21ece MV |
660 | int r; |
661 | ||
662 | promote_secondaries_path = strjoina("net/ipv4/conf/", ifname, "/promote_secondaries"); | |
663 | r = sysctl_read(promote_secondaries_path, &promote_secondaries_sysctl); | |
664 | if (r < 0) { | |
665 | log_debug_errno(r, "Cannot read sysctl %s", promote_secondaries_path); | |
666 | return false; | |
667 | } | |
668 | ||
669 | truncate_nl(promote_secondaries_sysctl); | |
670 | r = parse_boolean(promote_secondaries_sysctl); | |
671 | if (r < 0) | |
672 | log_warning_errno(r, "Cannot parse sysctl %s with content %s as boolean", promote_secondaries_path, promote_secondaries_sysctl); | |
673 | return r > 0; | |
674 | } | |
675 | ||
676 | /* dhcp4_set_promote_secondaries will ensure this interface has | |
677 | * the "promote_secondaries" option in the kernel set. If this sysctl | |
678 | * is not set DHCP will work only as long as the IP address does not | |
679 | * changes between leases. The kernel will remove all secondary IP | |
680 | * addresses of an interface otherwise. The way systemd-network works | |
681 | * is that the new IP of a lease is added as a secondary IP and when | |
682 | * the primary one expires it relies on the kernel to promote the | |
683 | * secondary IP. See also https://github.com/systemd/systemd/issues/7163 | |
684 | */ | |
685 | int dhcp4_set_promote_secondaries(Link *link) { | |
686 | int r; | |
687 | ||
688 | assert(link); | |
689 | assert(link->network); | |
690 | assert(link->network->dhcp & ADDRESS_FAMILY_IPV4); | |
691 | ||
692 | /* check if the kernel has promote_secondaries enabled for our | |
693 | * interface. If it is not globally enabled or enabled for the | |
694 | * specific interface we must either enable it. | |
695 | */ | |
8e1a7253 | 696 | if (!(promote_secondaries_enabled("all") || promote_secondaries_enabled(link->ifname))) { |
64b21ece MV |
697 | char *promote_secondaries_path = NULL; |
698 | ||
699 | log_link_debug(link, "promote_secondaries is unset, setting it"); | |
700 | promote_secondaries_path = strjoina("net/ipv4/conf/", link->ifname, "/promote_secondaries"); | |
701 | r = sysctl_write(promote_secondaries_path, "1"); | |
702 | if (r < 0) | |
703 | log_link_warning_errno(link, r, "cannot set sysctl %s to 1", promote_secondaries_path); | |
704 | return r > 0; | |
705 | } | |
706 | ||
707 | return 0; | |
708 | } | |
709 | ||
fff1f40c YW |
710 | int dhcp4_set_client_identifier(Link *link) { |
711 | int r; | |
712 | ||
713 | assert(link); | |
714 | assert(link->network); | |
715 | assert(link->dhcp_client); | |
716 | ||
717 | switch (link->network->dhcp_client_identifier) { | |
718 | case DHCP_CLIENT_ID_DUID: { | |
0cf7c3fd | 719 | /* If configured, apply user specified DUID and IAID */ |
fff1f40c YW |
720 | const DUID *duid = link_get_duid(link); |
721 | ||
0cf7c3fd YW |
722 | if (duid->type == DUID_TYPE_LLT && duid->raw_data_len == 0) |
723 | r = sd_dhcp_client_set_iaid_duid_llt(link->dhcp_client, | |
8217ed5e | 724 | link->network->iaid_set, |
0cf7c3fd YW |
725 | link->network->iaid, |
726 | duid->llt_time); | |
727 | else | |
728 | r = sd_dhcp_client_set_iaid_duid(link->dhcp_client, | |
8217ed5e | 729 | link->network->iaid_set, |
0cf7c3fd YW |
730 | link->network->iaid, |
731 | duid->type, | |
732 | duid->raw_data_len > 0 ? duid->raw_data : NULL, | |
733 | duid->raw_data_len); | |
fff1f40c | 734 | if (r < 0) |
0cf7c3fd | 735 | return log_link_error_errno(link, r, "DHCP4 CLIENT: Failed to set IAID+DUID: %m"); |
fff1f40c YW |
736 | break; |
737 | } | |
738 | case DHCP_CLIENT_ID_DUID_ONLY: { | |
739 | /* If configured, apply user specified DUID */ | |
740 | const DUID *duid = link_get_duid(link); | |
741 | ||
0cf7c3fd YW |
742 | if (duid->type == DUID_TYPE_LLT && duid->raw_data_len == 0) |
743 | r = sd_dhcp_client_set_duid_llt(link->dhcp_client, | |
89b3fa66 | 744 | duid->llt_time); |
0cf7c3fd YW |
745 | else |
746 | r = sd_dhcp_client_set_duid(link->dhcp_client, | |
747 | duid->type, | |
748 | duid->raw_data_len > 0 ? duid->raw_data : NULL, | |
749 | duid->raw_data_len); | |
fff1f40c YW |
750 | if (r < 0) |
751 | return log_link_error_errno(link, r, "DHCP4 CLIENT: Failed to set DUID: %m"); | |
752 | break; | |
753 | } | |
754 | case DHCP_CLIENT_ID_MAC: | |
755 | r = sd_dhcp_client_set_client_id(link->dhcp_client, | |
756 | ARPHRD_ETHER, | |
757 | (const uint8_t *) &link->mac, | |
758 | sizeof(link->mac)); | |
759 | if (r < 0) | |
760 | return log_link_error_errno(link, r, "DHCP4 CLIENT: Failed to set client ID: %m"); | |
761 | break; | |
762 | default: | |
763 | assert_not_reached("Unknown client identifier type."); | |
764 | } | |
765 | ||
766 | return 0; | |
767 | } | |
768 | ||
3c9b8860 TG |
769 | int dhcp4_configure(Link *link) { |
770 | int r; | |
771 | ||
772 | assert(link); | |
773 | assert(link->network); | |
e0ee46f2 | 774 | assert(link->network->dhcp & ADDRESS_FAMILY_IPV4); |
3c9b8860 | 775 | |
0bc70f1d | 776 | if (!link->dhcp_client) { |
db3d2358 | 777 | r = sd_dhcp_client_new(&link->dhcp_client, link->network->dhcp_anonymize); |
1f6860d9 YW |
778 | if (r == -ENOMEM) |
779 | return log_oom(); | |
0bc70f1d | 780 | if (r < 0) |
1f6860d9 | 781 | return log_link_error_errno(link, r, "DHCP4 CLIENT: Failed to create DHCP4 client: %m"); |
0bc70f1d | 782 | } |
3c9b8860 TG |
783 | |
784 | r = sd_dhcp_client_attach_event(link->dhcp_client, NULL, 0); | |
785 | if (r < 0) | |
1f6860d9 | 786 | return log_link_error_errno(link, r, "DHCP4 CLIENT: Failed to attach event: %m"); |
3c9b8860 | 787 | |
76253e73 DW |
788 | r = sd_dhcp_client_set_mac(link->dhcp_client, |
789 | (const uint8_t *) &link->mac, | |
790 | sizeof (link->mac), ARPHRD_ETHER); | |
3c9b8860 | 791 | if (r < 0) |
1f6860d9 | 792 | return log_link_error_errno(link, r, "DHCP4 CLIENT: Failed to set MAC address: %m"); |
3c9b8860 | 793 | |
2f8e7633 | 794 | r = sd_dhcp_client_set_ifindex(link->dhcp_client, link->ifindex); |
3c9b8860 | 795 | if (r < 0) |
1f6860d9 | 796 | return log_link_error_errno(link, r, "DHCP4 CLIENT: Failed to set ifindex: %m"); |
3c9b8860 TG |
797 | |
798 | r = sd_dhcp_client_set_callback(link->dhcp_client, dhcp4_handler, link); | |
799 | if (r < 0) | |
1f6860d9 | 800 | return log_link_error_errno(link, r, "DHCP4 CLIENT: Failed to set callback: %m"); |
3c9b8860 TG |
801 | |
802 | r = sd_dhcp_client_set_request_broadcast(link->dhcp_client, | |
803 | link->network->dhcp_broadcast); | |
804 | if (r < 0) | |
1f6860d9 | 805 | return log_link_error_errno(link, r, "DHCP4 CLIENT: Failed to set request flag for broadcast: %m"); |
3c9b8860 TG |
806 | |
807 | if (link->mtu) { | |
808 | r = sd_dhcp_client_set_mtu(link->dhcp_client, link->mtu); | |
809 | if (r < 0) | |
1f6860d9 | 810 | return log_link_error_errno(link, r, "DHCP4 CLIENT: Failed to set MTU: %m"); |
3c9b8860 TG |
811 | } |
812 | ||
27cb34f5 | 813 | if (link->network->dhcp_use_mtu) { |
39745a5a | 814 | r = sd_dhcp_client_set_request_option(link->dhcp_client, |
22805d92 | 815 | SD_DHCP_OPTION_INTERFACE_MTU); |
39745a5a | 816 | if (r < 0) |
1f6860d9 | 817 | return log_link_error_errno(link, r, "DHCP4 CLIENT: Failed to set request flag for MTU: %m"); |
3c9b8860 TG |
818 | } |
819 | ||
5e77a146 | 820 | /* NOTE: even if this variable is called "use", it also "sends" PRL |
821 | * options, maybe there should be a different configuration variable | |
822 | * to send or not route options?. */ | |
28522b0d | 823 | /* NOTE: when using Anonymize=yes, routes PRL options are sent |
824 | * by default, so they don't need to be added here. */ | |
5e77a146 | 825 | if (link->network->dhcp_use_routes && !link->network->dhcp_anonymize) { |
3c9b8860 | 826 | r = sd_dhcp_client_set_request_option(link->dhcp_client, |
22805d92 | 827 | SD_DHCP_OPTION_STATIC_ROUTE); |
3c9b8860 | 828 | if (r < 0) |
1f6860d9 YW |
829 | return log_link_error_errno(link, r, "DHCP4 CLIENT: Failed to set request flag for static route: %m"); |
830 | ||
3c9b8860 | 831 | r = sd_dhcp_client_set_request_option(link->dhcp_client, |
22805d92 | 832 | SD_DHCP_OPTION_CLASSLESS_STATIC_ROUTE); |
7d6884b6 | 833 | if (r < 0) |
1f6860d9 | 834 | return log_link_error_errno(link, r, "DHCP4 CLIENT: Failed to set request flag for classless static route: %m"); |
3c9b8860 TG |
835 | } |
836 | ||
ead36ce6 | 837 | if (link->network->dhcp_use_ntp) { |
838 | r = sd_dhcp_client_set_request_option(link->dhcp_client, SD_DHCP_OPTION_NTP_SERVER); | |
839 | if (r < 0) | |
1f6860d9 | 840 | return log_link_error_errno(link, r, "DHCP4 CLIENT: Failed to set request flag for NTP server: %m"); |
ead36ce6 | 841 | } |
4b7b5abb | 842 | |
89573b37 | 843 | if (link->network->dhcp_use_timezone) { |
844 | r = sd_dhcp_client_set_request_option(link->dhcp_client, SD_DHCP_OPTION_NEW_TZDB_TIMEZONE); | |
845 | if (r < 0) | |
1f6860d9 | 846 | return log_link_error_errno(link, r, "DHCP4 CLIENT: Failed to set request flag for timezone: %m"); |
89573b37 | 847 | } |
8eb9058d | 848 | |
7192bb81 LP |
849 | r = dhcp4_set_hostname(link); |
850 | if (r < 0) | |
a8494759 | 851 | return r; |
3c9b8860 TG |
852 | |
853 | if (link->network->dhcp_vendor_class_identifier) { | |
854 | r = sd_dhcp_client_set_vendor_class_identifier(link->dhcp_client, | |
855 | link->network->dhcp_vendor_class_identifier); | |
856 | if (r < 0) | |
1f6860d9 | 857 | return log_link_error_errno(link, r, "DHCP4 CLIENT: Failed to set vendor class identifier: %m"); |
3c9b8860 TG |
858 | } |
859 | ||
af1c0de0 SS |
860 | if (link->network->dhcp_user_class) { |
861 | r = sd_dhcp_client_set_user_class(link->dhcp_client, (const char **) link->network->dhcp_user_class); | |
862 | if (r < 0) | |
1f6860d9 | 863 | return log_link_error_errno(link, r, "DHCP4 CLIENT: Failed to set user class: %m"); |
af1c0de0 SS |
864 | } |
865 | ||
9faed222 SS |
866 | if (link->network->dhcp_client_port) { |
867 | r = sd_dhcp_client_set_client_port(link->dhcp_client, link->network->dhcp_client_port); | |
868 | if (r < 0) | |
1f6860d9 | 869 | return log_link_error_errno(link, r, "DHCP4 CLIENT: Failed to set listen port: %m"); |
9faed222 SS |
870 | } |
871 | ||
715cedfb SS |
872 | if (link->network->dhcp_max_attempts > 0) { |
873 | r = sd_dhcp_client_set_max_attempts(link->dhcp_client, link->network->dhcp_max_attempts); | |
874 | if (r < 0) | |
875 | return log_link_error_errno(link, r, "DHCP4 CLIENT: Failed to set max attempts: %m"); | |
876 | } | |
877 | ||
fff1f40c | 878 | return dhcp4_set_client_identifier(link); |
3c9b8860 | 879 | } |