]> git.ipfire.org Git - thirdparty/systemd.git/blame - src/network/networkd-link.c
network: ndisc: do not set configured flags when addresses or routes are not assigned yet
[thirdparty/systemd.git] / src / network / networkd-link.c
CommitLineData
53e1b683 1/* SPDX-License-Identifier: LGPL-2.1+ */
f579559b 2
9aa5d8ba 3#include <netinet/in.h>
f579559b 4#include <linux/if.h>
8f815e8b 5#include <linux/if_arp.h>
518cd6b5 6#include <linux/if_link.h>
4cc7a82c 7#include <unistd.h>
f579559b 8
b5efdb8a 9#include "alloc-util.h"
737f1405
YW
10#include "bond.h"
11#include "bridge.h"
1346b1f0 12#include "bus-util.h"
27dfc982 13#include "dhcp-identifier.h"
bd91b83e 14#include "dhcp-lease-internal.h"
686d13b9 15#include "env-file.h"
4bb7cc82 16#include "ethtool-util.h"
3ffd4af2 17#include "fd-util.h"
cf1d700d 18#include "fileio.h"
737f1405 19#include "ipvlan.h"
ef118d00 20#include "missing_network.h"
cf1d700d 21#include "netlink-util.h"
c6f7c917 22#include "network-internal.h"
3ddcbeea 23#include "networkd-can.h"
8fcf1d61 24#include "networkd-dhcp-server.h"
ca5ad760
YW
25#include "networkd-dhcp4.h"
26#include "networkd-dhcp6.h"
27#include "networkd-ipv4ll.h"
a0e5c15d 28#include "networkd-ipv6-proxy-ndp.h"
6a1af3d4
YW
29#include "networkd-link-bus.h"
30#include "networkd-link.h"
8e1ad1ea 31#include "networkd-lldp-tx.h"
23f53b99 32#include "networkd-manager.h"
1e7a0e21 33#include "networkd-ndisc.h"
e4a71bf3 34#include "networkd-neighbor.h"
518cd6b5 35#include "networkd-sriov.h"
7465dd22 36#include "networkd-radv.h"
bce67bbe 37#include "networkd-routing-policy-rule.h"
8d968fdd 38#include "networkd-wifi.h"
cf1d700d
TG
39#include "set.h"
40#include "socket-util.h"
bf331d87 41#include "stat-util.h"
15a5e950 42#include "stdio-util.h"
8b43440b 43#include "string-table.h"
51517f9e 44#include "strv.h"
62e021a9 45#include "sysctl-util.h"
34658df2 46#include "tc.h"
e4de7287 47#include "tmpfile-util.h"
299ad32d 48#include "udev-util.h"
cf1d700d 49#include "util.h"
737f1405 50#include "vrf.h"
fc2f9534 51
bdb9f580
YW
52uint32_t link_get_vrf_table(Link *link) {
53 return link->network->vrf ? VRF(link->network->vrf)->table : RT_TABLE_MAIN;
54}
55
56uint32_t link_get_dhcp_route_table(Link *link) {
57 /* When the interface is part of an VRF use the VRFs routing table, unless
58 * another table is explicitly specified. */
59 if (link->network->dhcp_route_table_set)
60 return link->network->dhcp_route_table;
61 return link_get_vrf_table(link);
62}
63
64uint32_t link_get_ipv6_accept_ra_route_table(Link *link) {
65 if (link->network->ipv6_accept_ra_route_table_set)
66 return link->network->ipv6_accept_ra_route_table;
67 return link_get_vrf_table(link);
68}
69
f24648a6
YW
70DUID* link_get_duid(Link *link) {
71 if (link->network->duid.type != _DUID_TYPE_INVALID)
72 return &link->network->duid;
73 else
74 return &link->manager->duid;
75}
76
b9d74c40
LP
77static bool link_dhcp6_enabled(Link *link) {
78 assert(link);
79
fa709992
LP
80 if (!socket_ipv6_is_supported())
81 return false;
82
78c958f8
TG
83 if (link->flags & IFF_LOOPBACK)
84 return false;
85
86 if (!link->network)
87 return false;
88
f2bfcdb9
YW
89 if (link->network->bond)
90 return false;
91
500b96eb 92 if (link->iftype == ARPHRD_CAN)
af9ba57a
YW
93 return false;
94
e0ee46f2 95 return link->network->dhcp & ADDRESS_FAMILY_IPV6;
78c958f8
TG
96}
97
b9d74c40
LP
98static bool link_dhcp4_enabled(Link *link) {
99 assert(link);
100
78c958f8
TG
101 if (link->flags & IFF_LOOPBACK)
102 return false;
103
104 if (!link->network)
105 return false;
106
f2bfcdb9
YW
107 if (link->network->bond)
108 return false;
109
500b96eb 110 if (link->iftype == ARPHRD_CAN)
af9ba57a
YW
111 return false;
112
e0ee46f2 113 return link->network->dhcp & ADDRESS_FAMILY_IPV4;
78c958f8
TG
114}
115
b9d74c40
LP
116static bool link_dhcp4_server_enabled(Link *link) {
117 assert(link);
118
78c958f8
TG
119 if (link->flags & IFF_LOOPBACK)
120 return false;
121
122 if (!link->network)
123 return false;
124
f2bfcdb9
YW
125 if (link->network->bond)
126 return false;
127
500b96eb 128 if (link->iftype == ARPHRD_CAN)
af9ba57a
YW
129 return false;
130
78c958f8
TG
131 return link->network->dhcp_server;
132}
133
2d792895 134bool link_ipv4ll_enabled(Link *link, AddressFamily mask) {
b9d74c40 135 assert(link);
910feb78 136 assert((mask & ~(ADDRESS_FAMILY_IPV4 | ADDRESS_FAMILY_FALLBACK_IPV4)) == 0);
b9d74c40 137
78c958f8
TG
138 if (link->flags & IFF_LOOPBACK)
139 return false;
140
141 if (!link->network)
142 return false;
143
500b96eb 144 if (link->iftype == ARPHRD_CAN)
c6ac3729
YW
145 return false;
146
98d20a17 147 if (STRPTR_IN_SET(link->kind,
148 "vrf", "wireguard", "ipip", "gre", "ip6gre","ip6tnl", "sit", "vti",
c6ac3729 149 "vti6", "nlmon", "xfrm"))
a8f5bba6
JD
150 return false;
151
f410d463
YW
152 /* L3 or L3S mode do not support ARP. */
153 if (IN_SET(link_get_ipvlan_mode(link), NETDEV_IPVLAN_MODE_L3, NETDEV_IPVLAN_MODE_L3S))
154 return false;
155
f2bfcdb9
YW
156 if (link->network->bond)
157 return false;
158
910feb78 159 return link->network->link_local & mask;
8bc17bb3
SS
160}
161
b9d74c40
LP
162static bool link_ipv6ll_enabled(Link *link) {
163 assert(link);
164
fa709992
LP
165 if (!socket_ipv6_is_supported())
166 return false;
167
d0d6a4cd
TG
168 if (link->flags & IFF_LOOPBACK)
169 return false;
170
171 if (!link->network)
172 return false;
173
500b96eb 174 if (link->iftype == ARPHRD_CAN)
c6ac3729
YW
175 return false;
176
177 if (STRPTR_IN_SET(link->kind, "vrf", "wireguard", "ipip", "gre", "sit", "vti", "nlmon"))
a8f5bba6
JD
178 return false;
179
f2bfcdb9
YW
180 if (link->network->bond)
181 return false;
182
e0ee46f2 183 return link->network->link_local & ADDRESS_FAMILY_IPV6;
78c958f8
TG
184}
185
439689c6
SS
186static bool link_ipv6_enabled(Link *link) {
187 assert(link);
188
189 if (!socket_ipv6_is_supported())
190 return false;
191
b102cdca 192 if (link->network->bond)
2b00a4e0
TY
193 return false;
194
500b96eb 195 if (link->iftype == ARPHRD_CAN)
af9ba57a
YW
196 return false;
197
4cef7fe3 198 /* DHCPv6 client will not be started if no IPv6 link-local address is configured. */
adfeee49
YW
199 if (link_ipv6ll_enabled(link))
200 return true;
201
202 if (network_has_static_ipv6_configurations(link->network))
203 return true;
204
205 return false;
439689c6
SS
206}
207
7465dd22
PF
208static bool link_radv_enabled(Link *link) {
209 assert(link);
210
211 if (!link_ipv6ll_enabled(link))
212 return false;
213
55a7c78b 214 return link->network->router_prefix_delegation != RADV_PREFIX_DELEGATION_NONE;
7465dd22
PF
215}
216
769d324c 217static bool link_ipv4_forward_enabled(Link *link) {
b9d74c40
LP
218 assert(link);
219
5a8bcb67
LP
220 if (link->flags & IFF_LOOPBACK)
221 return false;
222
223 if (!link->network)
224 return false;
225
2d792895 226 if (link->network->ip_forward == _ADDRESS_FAMILY_INVALID)
765afd5c
LP
227 return false;
228
e0ee46f2 229 return link->network->ip_forward & ADDRESS_FAMILY_IPV4;
769d324c
LP
230}
231
232static bool link_ipv6_forward_enabled(Link *link) {
b9d74c40 233 assert(link);
765afd5c
LP
234
235 if (!socket_ipv6_is_supported())
236 return false;
237
769d324c
LP
238 if (link->flags & IFF_LOOPBACK)
239 return false;
240
241 if (!link->network)
242 return false;
243
2d792895 244 if (link->network->ip_forward == _ADDRESS_FAMILY_INVALID)
765afd5c
LP
245 return false;
246
e0ee46f2 247 return link->network->ip_forward & ADDRESS_FAMILY_IPV6;
5a8bcb67
LP
248}
249
23d8b221
SS
250static bool link_proxy_arp_enabled(Link *link) {
251 assert(link);
252
253 if (link->flags & IFF_LOOPBACK)
254 return false;
255
256 if (!link->network)
257 return false;
258
259 if (link->network->proxy_arp < 0)
260 return false;
261
262 return true;
263}
264
b9d74c40
LP
265static bool link_ipv6_accept_ra_enabled(Link *link) {
266 assert(link);
267
fa709992
LP
268 if (!socket_ipv6_is_supported())
269 return false;
270
f5a8c43f
TG
271 if (link->flags & IFF_LOOPBACK)
272 return false;
273
274 if (!link->network)
275 return false;
276
702c979f
SS
277 if (!link_ipv6ll_enabled(link))
278 return false;
279
f5a8c43f
TG
280 /* If unset use system default (enabled if local forwarding is disabled.
281 * disabled if local forwarding is enabled).
282 * If set, ignore or enforce RA independent of local forwarding state.
283 */
284 if (link->network->ipv6_accept_ra < 0)
285 /* default to accept RA if ip_forward is disabled and ignore RA if ip_forward is enabled */
286 return !link_ipv6_forward_enabled(link);
287 else if (link->network->ipv6_accept_ra > 0)
288 /* accept RA even if ip_forward is enabled */
289 return true;
290 else
291 /* ignore RA */
292 return false;
293}
294
1f0d9695 295static IPv6PrivacyExtensions link_ipv6_privacy_extensions(Link *link) {
fa709992 296 assert(link);
d68e2e59
LP
297
298 if (!socket_ipv6_is_supported())
299 return _IPV6_PRIVACY_EXTENSIONS_INVALID;
300
49092e22 301 if (link->flags & IFF_LOOPBACK)
1f0d9695 302 return _IPV6_PRIVACY_EXTENSIONS_INVALID;
49092e22
SS
303
304 if (!link->network)
1f0d9695 305 return _IPV6_PRIVACY_EXTENSIONS_INVALID;
49092e22
SS
306
307 return link->network->ipv6_privacy_extensions;
308}
309
57ad7607 310static int link_update_ipv6_sysctl(Link *link) {
482efedc 311 bool enabled;
439689c6
SS
312 int r;
313
314 if (link->flags & IFF_LOOPBACK)
315 return 0;
316
482efedc
SS
317 enabled = link_ipv6_enabled(link);
318 if (enabled) {
319 r = sysctl_write_ip_property_boolean(AF_INET6, link->ifname, "disable_ipv6", false);
320 if (r < 0)
57ad7607
ZJS
321 return log_link_warning_errno(link, r, "Cannot enable IPv6: %m");
322
323 log_link_info(link, "IPv6 successfully enabled");
482efedc 324 }
439689c6
SS
325
326 return 0;
327}
328
34bf3c00
YW
329static bool link_is_enslaved(Link *link) {
330 if (link->flags & IFF_SLAVE)
331 /* Even if the link is not managed by networkd, honor IFF_SLAVE flag. */
332 return true;
333
34bf3c00
YW
334 if (!link->network)
335 return false;
336
bb262ef0 337 if (link->master_ifindex > 0 && link->network->bridge)
34bf3c00
YW
338 return true;
339
bb262ef0
YW
340 /* TODO: add conditions for other netdevs. */
341
34bf3c00
YW
342 return false;
343}
344
45e11abf
YW
345static void link_update_master_operstate(Link *link, NetDev *netdev) {
346 Link *master;
347
348 if (!netdev)
349 return;
350
7936917e
YW
351 if (netdev->ifindex <= 0)
352 return;
353
45e11abf
YW
354 if (link_get(link->manager, netdev->ifindex, &master) < 0)
355 return;
356
357 link_update_operstate(master, true);
358}
359
360void link_update_operstate(Link *link, bool also_update_master) {
84de38c5 361 LinkOperationalState operstate;
1678fbb3
YW
362 LinkCarrierState carrier_state;
363 LinkAddressState address_state;
35c5a9ca 364 _cleanup_strv_free_ char **p = NULL;
1678fbb3 365 uint8_t scope = RT_SCOPE_NOWHERE;
35c5a9ca 366 bool changed = false;
1678fbb3 367 Address *address;
45e11abf 368 Iterator i;
14153d1b 369
84de38c5
TG
370 assert(link);
371
372 if (link->kernel_operstate == IF_OPER_DORMANT)
1678fbb3 373 carrier_state = LINK_CARRIER_STATE_DORMANT;
84de38c5 374 else if (link_has_carrier(link)) {
1678fbb3
YW
375 if (link_is_enslaved(link))
376 carrier_state = LINK_CARRIER_STATE_ENSLAVED;
84de38c5 377 else
1678fbb3 378 carrier_state = LINK_CARRIER_STATE_CARRIER;
84de38c5 379 } else if (link->flags & IFF_UP)
1678fbb3 380 carrier_state = LINK_CARRIER_STATE_NO_CARRIER;
84de38c5 381 else
1678fbb3 382 carrier_state = LINK_CARRIER_STATE_OFF;
84de38c5 383
1678fbb3 384 if (carrier_state >= LINK_CARRIER_STATE_CARRIER) {
959f65d3
YW
385 Link *slave;
386
5f707e12 387 SET_FOREACH(slave, link->slaves, i) {
959f65d3 388 link_update_operstate(slave, false);
84de38c5 389
1678fbb3
YW
390 if (slave->carrier_state < LINK_CARRIER_STATE_CARRIER)
391 carrier_state = LINK_CARRIER_STATE_DEGRADED_CARRIER;
84de38c5 392 }
959f65d3 393 }
84de38c5 394
1678fbb3
YW
395 SET_FOREACH(address, link->addresses, i) {
396 if (!address_is_ready(address))
397 continue;
84de38c5 398
1678fbb3
YW
399 if (address->scope < scope)
400 scope = address->scope;
401 }
84de38c5 402
1678fbb3
YW
403 /* for operstate we also take foreign addresses into account */
404 SET_FOREACH(address, link->addresses_foreign, i) {
405 if (!address_is_ready(address))
406 continue;
407
408 if (address->scope < scope)
409 scope = address->scope;
410 }
411
412 if (scope < RT_SCOPE_SITE)
413 /* universally accessible addresses found */
414 address_state = LINK_ADDRESS_STATE_ROUTABLE;
415 else if (scope < RT_SCOPE_HOST)
416 /* only link or site local addresses found */
417 address_state = LINK_ADDRESS_STATE_DEGRADED;
84de38c5 418 else
1678fbb3
YW
419 /* no useful addresses found */
420 address_state = LINK_ADDRESS_STATE_OFF;
421
422 /* Mapping of address and carrier state vs operational state
423 * carrier state
424 * | off | no-carrier | dormant | degraded-carrier | carrier | enslaved
425 * ------------------------------------------------------------------------------
426 * off | off | no-carrier | dormant | degraded-carrier | carrier | enslaved
427 * address_state degraded | off | no-carrier | dormant | degraded-carrier | degraded | enslaved
428 * routable | off | no-carrier | dormant | degraded-carrier | routable | routable
429 */
84de38c5 430
1678fbb3
YW
431 if (carrier_state < LINK_CARRIER_STATE_CARRIER || address_state == LINK_ADDRESS_STATE_OFF)
432 operstate = (LinkOperationalState) carrier_state;
433 else if (address_state == LINK_ADDRESS_STATE_ROUTABLE)
434 operstate = LINK_OPERSTATE_ROUTABLE;
435 else if (carrier_state == LINK_CARRIER_STATE_CARRIER)
436 operstate = LINK_OPERSTATE_DEGRADED;
437 else
14153d1b
YW
438 operstate = LINK_OPERSTATE_ENSLAVED;
439
35c5a9ca
YW
440 if (link->carrier_state != carrier_state) {
441 link->carrier_state = carrier_state;
442 changed = true;
443 if (strv_extend(&p, "CarrierState") < 0)
444 log_oom();
445 }
959f65d3 446
35c5a9ca
YW
447 if (link->address_state != address_state) {
448 link->address_state = address_state;
449 changed = true;
450 if (strv_extend(&p, "AddressState") < 0)
451 log_oom();
959f65d3
YW
452 }
453
84de38c5
TG
454 if (link->operstate != operstate) {
455 link->operstate = operstate;
35c5a9ca
YW
456 changed = true;
457 if (strv_extend(&p, "OperationalState") < 0)
458 log_oom();
84de38c5 459 }
959f65d3 460
35c5a9ca
YW
461 if (p)
462 link_send_changed_strv(link, p);
463 if (changed)
464 link_dirty(link);
465
45e11abf
YW
466 if (also_update_master && link->network) {
467 link_update_master_operstate(link, link->network->bond);
468 link_update_master_operstate(link, link->network->bridge);
959f65d3 469 }
84de38c5
TG
470}
471
51d18171
TG
472#define FLAG_STRING(string, flag, old, new) \
473 (((old ^ new) & flag) \
474 ? ((old & flag) ? (" -" string) : (" +" string)) \
475 : "")
476
bb262ef0 477static int link_update_flags(Link *link, sd_netlink_message *m, bool force_update_operstate) {
51d18171
TG
478 unsigned flags, unknown_flags_added, unknown_flags_removed, unknown_flags;
479 uint8_t operstate;
480 int r;
481
482 assert(link);
483
484 r = sd_rtnl_message_link_get_flags(m, &flags);
6a7a4e4d
LP
485 if (r < 0)
486 return log_link_warning_errno(link, r, "Could not get link flags: %m");
51d18171 487
1c4baffc 488 r = sd_netlink_message_read_u8(m, IFLA_OPERSTATE, &operstate);
51d18171
TG
489 if (r < 0)
490 /* if we got a message without operstate, take it to mean
491 the state was unchanged */
492 operstate = link->kernel_operstate;
493
bb262ef0 494 if (!force_update_operstate && (link->flags == flags) && (link->kernel_operstate == operstate))
51d18171
TG
495 return 0;
496
497 if (link->flags != flags) {
6a7a4e4d 498 log_link_debug(link, "Flags change:%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s",
51d18171
TG
499 FLAG_STRING("LOOPBACK", IFF_LOOPBACK, link->flags, flags),
500 FLAG_STRING("MASTER", IFF_MASTER, link->flags, flags),
501 FLAG_STRING("SLAVE", IFF_SLAVE, link->flags, flags),
502 FLAG_STRING("UP", IFF_UP, link->flags, flags),
503 FLAG_STRING("DORMANT", IFF_DORMANT, link->flags, flags),
504 FLAG_STRING("LOWER_UP", IFF_LOWER_UP, link->flags, flags),
505 FLAG_STRING("RUNNING", IFF_RUNNING, link->flags, flags),
506 FLAG_STRING("MULTICAST", IFF_MULTICAST, link->flags, flags),
507 FLAG_STRING("BROADCAST", IFF_BROADCAST, link->flags, flags),
508 FLAG_STRING("POINTOPOINT", IFF_POINTOPOINT, link->flags, flags),
509 FLAG_STRING("PROMISC", IFF_PROMISC, link->flags, flags),
510 FLAG_STRING("ALLMULTI", IFF_ALLMULTI, link->flags, flags),
511 FLAG_STRING("PORTSEL", IFF_PORTSEL, link->flags, flags),
512 FLAG_STRING("AUTOMEDIA", IFF_AUTOMEDIA, link->flags, flags),
513 FLAG_STRING("DYNAMIC", IFF_DYNAMIC, link->flags, flags),
514 FLAG_STRING("NOARP", IFF_NOARP, link->flags, flags),
515 FLAG_STRING("NOTRAILERS", IFF_NOTRAILERS, link->flags, flags),
516 FLAG_STRING("DEBUG", IFF_DEBUG, link->flags, flags),
517 FLAG_STRING("ECHO", IFF_ECHO, link->flags, flags));
518
519 unknown_flags = ~(IFF_LOOPBACK | IFF_MASTER | IFF_SLAVE | IFF_UP |
520 IFF_DORMANT | IFF_LOWER_UP | IFF_RUNNING |
521 IFF_MULTICAST | IFF_BROADCAST | IFF_POINTOPOINT |
522 IFF_PROMISC | IFF_ALLMULTI | IFF_PORTSEL |
523 IFF_AUTOMEDIA | IFF_DYNAMIC | IFF_NOARP |
524 IFF_NOTRAILERS | IFF_DEBUG | IFF_ECHO);
525 unknown_flags_added = ((link->flags ^ flags) & flags & unknown_flags);
526 unknown_flags_removed = ((link->flags ^ flags) & link->flags & unknown_flags);
527
528 /* link flags are currently at most 18 bits, let's align to
529 * printing 20 */
530 if (unknown_flags_added)
79008bdd 531 log_link_debug(link,
6a7a4e4d 532 "Unknown link flags gained: %#.5x (ignoring)",
51d18171
TG
533 unknown_flags_added);
534
535 if (unknown_flags_removed)
79008bdd 536 log_link_debug(link,
6a7a4e4d 537 "Unknown link flags lost: %#.5x (ignoring)",
51d18171
TG
538 unknown_flags_removed);
539 }
540
541 link->flags = flags;
542 link->kernel_operstate = operstate;
543
959f65d3 544 link_update_operstate(link, true);
51d18171
TG
545
546 return 0;
547}
548
1c4baffc 549static int link_new(Manager *manager, sd_netlink_message *message, Link **ret) {
8e766630 550 _cleanup_(link_unrefp) Link *link = NULL;
6cad256d 551 const char *ifname, *kind = NULL;
b710e6b6 552 unsigned short iftype;
572b21d9
YW
553 int r, ifindex;
554 uint16_t type;
f579559b 555
0c2f9b84 556 assert(manager);
505f8da7 557 assert(message);
f579559b
TG
558 assert(ret);
559
6cad256d
TJ
560 /* check for link kind */
561 r = sd_netlink_message_enter_container(message, IFLA_LINKINFO);
562 if (r == 0) {
db2f8a2e 563 (void) sd_netlink_message_read_string(message, IFLA_INFO_KIND, &kind);
6cad256d
TJ
564 r = sd_netlink_message_exit_container(message);
565 if (r < 0)
566 return r;
567 }
568
1c4baffc 569 r = sd_netlink_message_get_type(message, &type);
505f8da7
TG
570 if (r < 0)
571 return r;
572 else if (type != RTM_NEWLINK)
573 return -EINVAL;
574
575 r = sd_rtnl_message_link_get_ifindex(message, &ifindex);
576 if (r < 0)
577 return r;
578 else if (ifindex <= 0)
579 return -EINVAL;
580
b710e6b6
LP
581 r = sd_rtnl_message_link_get_type(message, &iftype);
582 if (r < 0)
583 return r;
584
1c4baffc 585 r = sd_netlink_message_read_string(message, IFLA_IFNAME, &ifname);
505f8da7
TG
586 if (r < 0)
587 return r;
588
17f9c355 589 link = new(Link, 1);
f579559b
TG
590 if (!link)
591 return -ENOMEM;
592
17f9c355
YW
593 *link = (Link) {
594 .n_ref = 1,
595 .manager = manager,
596 .state = LINK_STATE_PENDING,
17f9c355
YW
597 .ifindex = ifindex,
598 .iftype = iftype,
15761549
YW
599
600 .n_dns = (unsigned) -1,
601 .dns_default_route = -1,
602 .llmnr = _RESOLVE_SUPPORT_INVALID,
603 .mdns = _RESOLVE_SUPPORT_INVALID,
604 .dnssec_mode = _DNSSEC_MODE_INVALID,
605 .dns_over_tls_mode = _DNS_OVER_TLS_MODE_INVALID,
17f9c355
YW
606 };
607
505f8da7
TG
608 link->ifname = strdup(ifname);
609 if (!link->ifname)
610 return -ENOMEM;
f579559b 611
6cad256d
TJ
612 if (kind) {
613 link->kind = strdup(kind);
614 if (!link->kind)
615 return -ENOMEM;
616 }
617
cbff7170
TJ
618 r = sd_netlink_message_read_u32(message, IFLA_MASTER, (uint32_t *)&link->master_ifindex);
619 if (r < 0)
620 log_link_debug_errno(link, r, "New device has no master, continuing without");
621
1c4baffc 622 r = sd_netlink_message_read_ether_addr(message, IFLA_ADDRESS, &link->mac);
512922f8 623 if (r < 0)
34437b4f 624 log_link_debug_errno(link, r, "MAC address not found for new device, continuing without");
512922f8 625
c643bda5 626 r = ethtool_get_permanent_macaddr(&manager->ethtool_fd, link->ifname, &link->permanent_mac);
4bb7cc82
YW
627 if (r < 0)
628 log_link_debug_errno(link, r, "Permanent MAC address not found for new device, continuing without: %m");
629
c643bda5
YW
630 r = ethtool_get_driver(&manager->ethtool_fd, link->ifname, &link->driver);
631 if (r < 0)
632 log_link_debug_errno(link, r, "Failed to get driver, continuing without: %m");
633
572b21d9
YW
634 r = sd_netlink_message_read_strv(message, IFLA_PROP_LIST, IFLA_ALT_IFNAME, &link->alternative_names);
635 if (r < 0 && r != -ENODATA)
636 return r;
637
34437b4f 638 if (asprintf(&link->state_file, "/run/systemd/netif/links/%d", link->ifindex) < 0)
315db1a8 639 return -ENOMEM;
fe8db0c5 640
34437b4f 641 if (asprintf(&link->lease_file, "/run/systemd/netif/leases/%d", link->ifindex) < 0)
68a8723c
TG
642 return -ENOMEM;
643
34437b4f 644 if (asprintf(&link->lldp_file, "/run/systemd/netif/lldp/%d", link->ifindex) < 0)
49699bac
SS
645 return -ENOMEM;
646
d5099efc 647 r = hashmap_ensure_allocated(&manager->links, NULL);
ae06ab10
TG
648 if (r < 0)
649 return r;
650
651 r = hashmap_put(manager->links, INT_TO_PTR(link->ifindex), link);
f579559b
TG
652 if (r < 0)
653 return r;
654
bb262ef0 655 r = link_update_flags(link, message, false);
51d18171
TG
656 if (r < 0)
657 return r;
658
1cc6c93a 659 *ret = TAKE_PTR(link);
f579559b
TG
660
661 return 0;
662}
663
15761549
YW
664void link_ntp_settings_clear(Link *link) {
665 link->ntp = strv_free(link->ntp);
666}
667
668void link_dns_settings_clear(Link *link) {
e77bd3fd
YW
669 if (link->n_dns != (unsigned) -1)
670 for (unsigned i = 0; i < link->n_dns; i++)
671 in_addr_full_free(link->dns[i]);
15761549
YW
672 link->dns = mfree(link->dns);
673 link->n_dns = (unsigned) -1;
674
675 link->search_domains = ordered_set_free_free(link->search_domains);
676 link->route_domains = ordered_set_free_free(link->route_domains);
677
678 link->dns_default_route = -1;
679 link->llmnr = _RESOLVE_SUPPORT_INVALID;
680 link->mdns = _RESOLVE_SUPPORT_INVALID;
681 link->dnssec_mode = _DNSSEC_MODE_INVALID;
682 link->dns_over_tls_mode = _DNS_OVER_TLS_MODE_INVALID;
683
684 link->dnssec_negative_trust_anchors = set_free_free(link->dnssec_negative_trust_anchors);
685}
686
1a6bb31f
YW
687static void link_free_engines(Link *link) {
688 if (!link)
689 return;
690
691 link->dhcp_server = sd_dhcp_server_unref(link->dhcp_server);
692 link->dhcp_client = sd_dhcp_client_unref(link->dhcp_client);
693 link->dhcp_lease = sd_dhcp_lease_unref(link->dhcp_lease);
694 link->dhcp_routes = set_free(link->dhcp_routes);
695
696 link->lldp = sd_lldp_unref(link->lldp);
697
698 ndisc_flush(link);
699
700 link->ipv4ll = sd_ipv4ll_unref(link->ipv4ll);
701 link->dhcp6_client = sd_dhcp6_client_unref(link->dhcp6_client);
702 link->ndisc = sd_ndisc_unref(link->ndisc);
703 link->radv = sd_radv_unref(link->radv);
704}
705
8301aa0b 706static Link *link_free(Link *link) {
428fd0a7
TG
707 Address *address;
708
8301aa0b 709 assert(link);
f579559b 710
15761549
YW
711 link_ntp_settings_clear(link);
712 link_dns_settings_clear(link);
713
f535e354
YW
714 link->routes = set_free_with_destructor(link->routes, route_free);
715 link->routes_foreign = set_free_with_destructor(link->routes_foreign, route_free);
adda1ed9 716
c16c7808
SS
717 link->nexthops = set_free_with_destructor(link->nexthops, nexthop_free);
718 link->nexthops_foreign = set_free_with_destructor(link->nexthops_foreign, nexthop_free);
719
d1bdafd2
WKI
720 link->neighbors = set_free_with_destructor(link->neighbors, neighbor_free);
721 link->neighbors_foreign = set_free_with_destructor(link->neighbors_foreign, neighbor_free);
722
f535e354
YW
723 link->addresses = set_free_with_destructor(link->addresses, address_free);
724 link->addresses_foreign = set_free_with_destructor(link->addresses_foreign, address_free);
adda1ed9 725
11bf3cce
LP
726 while ((address = link->pool_addresses)) {
727 LIST_REMOVE(addresses, link->pool_addresses, address);
728 address_free(address);
729 }
730
7272b25e 731 link_lldp_emit_stop(link);
1a6bb31f 732 link_free_engines(link);
68a8723c 733 free(link->lease_file);
49699bac
SS
734 free(link->lldp_file);
735
c166a070 736 free(link->ifname);
572b21d9 737 strv_free(link->alternative_names);
ceac4078 738 free(link->kind);
8d968fdd 739 free(link->ssid);
c643bda5 740 free(link->driver);
6cad256d 741
db2f8a2e 742 (void) unlink(link->state_file);
fe8db0c5 743 free(link->state_file);
c166a070 744
51517f9e 745 sd_device_unref(link->sd_device);
b5db00e5 746
0d4ad91d 747 hashmap_free(link->bound_to_links);
0d4ad91d
AR
748 hashmap_free(link->bound_by_links);
749
5f707e12 750 set_free_with_destructor(link->slaves, link_unref);
033295c1 751
c9c908a6
YW
752 network_unref(link->network);
753
8301aa0b 754 return mfree(link);
14b746f7
TG
755}
756
8301aa0b 757DEFINE_TRIVIAL_REF_UNREF_FUNC(Link, link, link_free);
14b746f7 758
11a7f229
TG
759int link_get(Manager *m, int ifindex, Link **ret) {
760 Link *link;
11a7f229
TG
761
762 assert(m);
e856ed00 763 assert(ifindex > 0);
11a7f229
TG
764 assert(ret);
765
ae06ab10 766 link = hashmap_get(m->links, INT_TO_PTR(ifindex));
11a7f229
TG
767 if (!link)
768 return -ENODEV;
769
770 *ret = link;
771
772 return 0;
773}
774
af9ba57a 775void link_set_state(Link *link, LinkState state) {
e331e246
TG
776 assert(link);
777
778 if (link->state == state)
779 return;
780
0beb9542
YW
781 log_link_debug(link, "State changed: %s -> %s",
782 link_state_to_string(link->state),
783 link_state_to_string(state));
784
e331e246
TG
785 link->state = state;
786
787 link_send_changed(link, "AdministrativeState", NULL);
e331e246
TG
788}
789
57bd6899
TG
790static void link_enter_unmanaged(Link *link) {
791 assert(link);
792
e331e246 793 link_set_state(link, LINK_STATE_UNMANAGED);
57bd6899 794
84de38c5 795 link_dirty(link);
57bd6899
TG
796}
797
95355a28 798int link_stop_clients(Link *link, bool may_keep_dhcp) {
111bb8f9 799 int r = 0, k;
051e77ca 800 Address *ad;
111bb8f9
TG
801
802 assert(link);
803 assert(link->manager);
804 assert(link->manager->event);
805
80060352
ZJS
806 bool keep_dhcp = may_keep_dhcp &&
807 link->network &&
808 (link->manager->restarting ||
809 FLAGS_SET(link->network->keep_configuration, KEEP_CONFIGURATION_DHCP_ON_STOP));
810
811 if (link->dhcp_client && !keep_dhcp) {
111bb8f9 812 k = sd_dhcp_client_stop(link->dhcp_client);
6a7a4e4d 813 if (k < 0)
36c7d709 814 r = log_link_warning_errno(link, k, "Could not stop DHCPv4 client: %m");
111bb8f9
TG
815 }
816
ba179154 817 if (link->ipv4ll) {
111bb8f9 818 k = sd_ipv4ll_stop(link->ipv4ll);
6a7a4e4d 819 if (k < 0)
36c7d709 820 r = log_link_warning_errno(link, k, "Could not stop IPv4 link-local: %m");
dd43110f
TG
821 }
822
051e77ca
SS
823 if (link->network)
824 LIST_FOREACH(addresses, ad, link->network->static_addresses)
825 if (ad->acd && sd_ipv4acd_is_running(ad->acd) == 0) {
826 k = sd_ipv4acd_stop(ad->acd);
827 if (k < 0)
828 r = log_link_warning_errno(link, k, "Could not stop IPv4 ACD client: %m");
829 }
830
f5a8c43f
TG
831 if (link->dhcp6_client) {
832 k = sd_dhcp6_client_stop(link->dhcp6_client);
833 if (k < 0)
36c7d709 834 r = log_link_warning_errno(link, k, "Could not stop DHCPv6 client: %m");
f5a8c43f 835 }
4138fb2c 836
1e7a0e21
LP
837 if (link->ndisc) {
838 k = sd_ndisc_stop(link->ndisc);
6a7a4e4d 839 if (k < 0)
36c7d709 840 r = log_link_warning_errno(link, k, "Could not stop IPv6 Router Discovery: %m");
4138fb2c
PF
841 }
842
7465dd22 843 if (link->radv) {
290696e5 844 k = sd_radv_stop(link->radv);
7465dd22
PF
845 if (k < 0)
846 r = log_link_warning_errno(link, k, "Could not stop IPv6 Router Advertisement: %m");
847 }
848
7272b25e 849 link_lldp_emit_stop(link);
111bb8f9
TG
850 return r;
851}
852
b22d8a00 853void link_enter_failed(Link *link) {
ef1ba606 854 assert(link);
f882c247 855
370e9930 856 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
2139694e
TG
857 return;
858
6a7a4e4d 859 log_link_warning(link, "Failed");
449f7554 860
e331e246 861 link_set_state(link, LINK_STATE_FAILED);
fe8db0c5 862
95355a28 863 link_stop_clients(link, false);
111bb8f9 864
84de38c5 865 link_dirty(link);
f882c247
TG
866}
867
7033af49
YW
868static int link_join_netdevs_after_configured(Link *link) {
869 NetDev *netdev;
870 Iterator i;
871 int r;
872
873 HASHMAP_FOREACH(netdev, link->network->stacked_netdevs, i) {
874 if (netdev->ifindex > 0)
875 /* Assume already enslaved. */
876 continue;
877
878 if (netdev_get_create_type(netdev) != NETDEV_CREATE_AFTER_CONFIGURED)
879 continue;
880
881 log_struct(LOG_DEBUG,
882 LOG_LINK_INTERFACE(link),
883 LOG_NETDEV_INTERFACE(netdev),
884 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", netdev->ifname));
885
886 r = netdev_join(netdev, link, NULL);
887 if (r < 0)
888 return log_struct_errno(LOG_WARNING, r,
889 LOG_LINK_INTERFACE(link),
890 LOG_NETDEV_INTERFACE(netdev),
891 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", netdev->ifname));
892 }
893
894 return 0;
895}
896
e3a7b048 897static void link_enter_configured(Link *link) {
dd43110f
TG
898 assert(link);
899 assert(link->network);
e3a7b048 900
289e6774 901 if (link->state != LINK_STATE_CONFIGURING)
e3a7b048 902 return;
dd43110f 903
e331e246 904 link_set_state(link, LINK_STATE_CONFIGURED);
dd43110f 905
7033af49
YW
906 (void) link_join_netdevs_after_configured(link);
907
84de38c5 908 link_dirty(link);
dd43110f
TG
909}
910
47079967 911static int link_request_set_routing_policy_rule(Link *link) {
8a9b3a23
SS
912 RoutingPolicyRule *rule, *rrule = NULL;
913 int r;
914
915 assert(link);
916 assert(link->network);
917
2428613f
YW
918 link->routing_policy_rules_configured = false;
919
8a9b3a23 920 LIST_FOREACH(rules, rule, link->network->rules) {
b80a511b 921 r = routing_policy_rule_get(link->manager, rule, &rrule);
ff14e2eb
YW
922 if (r >= 0) {
923 if (r == 0)
924 (void) routing_policy_rule_make_local(link->manager, rrule);
8a9b3a23
SS
925 continue;
926 }
927
9f08a578 928 r = routing_policy_rule_configure(rule, link, NULL);
4ff296b0
YW
929 if (r < 0)
930 return log_link_warning_errno(link, r, "Could not set routing policy rules: %m");
7ef7e550
YW
931 if (r > 0)
932 link->routing_policy_rule_messages++;
8a9b3a23
SS
933 }
934
935 routing_policy_rule_purge(link->manager, link);
5d976f5f 936 if (link->routing_policy_rule_messages == 0)
7715629e 937 link->routing_policy_rules_configured = true;
5d976f5f 938 else {
7715629e 939 log_link_debug(link, "Setting routing policy rules");
b425c3ae
YW
940 link_set_state(link, LINK_STATE_CONFIGURING);
941 }
8a9b3a23
SS
942
943 return 0;
944}
945
c16c7808
SS
946static int nexthop_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
947 int r;
948
949 assert(link);
950 assert(link->nexthop_messages > 0);
951 assert(IN_SET(link->state, LINK_STATE_CONFIGURING,
952 LINK_STATE_FAILED, LINK_STATE_LINGER));
953
954 link->nexthop_messages--;
955
956 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
957 return 1;
958
959 r = sd_netlink_message_get_errno(m);
960 if (r < 0 && r != -EEXIST) {
5ecb131d 961 log_link_message_warning_errno(link, m, r, "Could not set nexthop");
c16c7808
SS
962 link_enter_failed(link);
963 return 1;
964 }
965
966 if (link->nexthop_messages == 0) {
967 log_link_debug(link, "Nexthop set");
968 link->static_nexthops_configured = true;
969 link_check_ready(link);
970 }
971
972 return 1;
973}
974
eb01a2df 975static int link_request_set_nexthop(Link *link) {
c16c7808
SS
976 NextHop *nh;
977 int r;
978
0c816fcc
YW
979 link->static_nexthops_configured = false;
980
c16c7808
SS
981 LIST_FOREACH(nexthops, nh, link->network->static_nexthops) {
982 r = nexthop_configure(nh, link, nexthop_handler);
983 if (r < 0)
984 return log_link_warning_errno(link, r, "Could not set nexthop: %m");
985 if (r > 0)
986 link->nexthop_messages++;
987 }
988
989 if (link->nexthop_messages == 0) {
990 link->static_nexthops_configured = true;
991 link_check_ready(link);
992 } else {
993 log_link_debug(link, "Setting nexthop");
994 link_set_state(link, LINK_STATE_CONFIGURING);
995 }
996
997 return 1;
998}
999
302a796f 1000static int route_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
f882c247
TG
1001 int r;
1002
1046bf9b 1003 assert(link);
7715629e 1004 assert(link->route_messages > 0);
289e6774
WKI
1005 assert(IN_SET(link->state, LINK_STATE_CONFIGURING,
1006 LINK_STATE_FAILED, LINK_STATE_LINGER));
f882c247 1007
7715629e 1008 link->route_messages--;
f882c247 1009
77a008c0 1010 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
f882c247
TG
1011 return 1;
1012
1c4baffc 1013 r = sd_netlink_message_get_errno(m);
4ff296b0 1014 if (r < 0 && r != -EEXIST) {
5ecb131d 1015 log_link_message_warning_errno(link, m, r, "Could not set route");
4ff296b0
YW
1016 link_enter_failed(link);
1017 return 1;
1018 }
f882c247 1019
7715629e 1020 if (link->route_messages == 0) {
6a7a4e4d 1021 log_link_debug(link, "Routes set");
7715629e 1022 link->static_routes_configured = true;
0c816fcc 1023 link_request_set_nexthop(link);
dd3efc09 1024 }
f882c247
TG
1025
1026 return 1;
1027}
1028
b5799eeb 1029int link_request_set_routes(Link *link) {
bf61b05a
LP
1030 enum {
1031 PHASE_NON_GATEWAY, /* First phase: Routes without a gateway */
1032 PHASE_GATEWAY, /* Second phase: Routes with a gateway */
1033 _PHASE_MAX
1034 } phase;
a6cc569e 1035 Route *rt;
f882c247
TG
1036 int r;
1037
1038 assert(link);
1039 assert(link->network);
c42ff3a1
WKI
1040 assert(link->addresses_configured);
1041 assert(link->address_messages == 0);
289e6774 1042 assert(link->state != _LINK_STATE_INVALID);
f882c247 1043
2428613f 1044 link->static_routes_configured = false;
27c34f73 1045
4e2ef9d9
YW
1046 if (!link_has_carrier(link) && !link->network->configure_without_carrier)
1047 /* During configuring addresses, the link lost its carrier. As networkd is dropping
1048 * the addresses now, let's not configure the routes either. */
1049 return 0;
1050
47079967 1051 r = link_request_set_routing_policy_rule(link);
f3ef324d
YW
1052 if (r < 0)
1053 return r;
f882c247 1054
bf61b05a
LP
1055 /* First add the routes that enable us to talk to gateways, then add in the others that need a gateway. */
1056 for (phase = 0; phase < _PHASE_MAX; phase++)
1057 LIST_FOREACH(routes, rt, link->network->static_routes) {
1985c54f
YW
1058 if (rt->gateway_from_dhcp)
1059 continue;
0d34228f 1060
6ff5cc6b 1061 if ((in_addr_is_null(rt->family, &rt->gw) && ordered_set_isempty(rt->multipath_routes)) != (phase == PHASE_NON_GATEWAY))
bf61b05a 1062 continue;
a6cc569e 1063
0d34228f 1064 r = route_configure(rt, link, route_handler);
4ff296b0
YW
1065 if (r < 0)
1066 return log_link_warning_errno(link, r, "Could not set routes: %m");
c4423317
YW
1067 if (r > 0)
1068 link->route_messages++;
0d34228f 1069 }
f5be5601 1070
7715629e
ST
1071 if (link->route_messages == 0) {
1072 link->static_routes_configured = true;
0c816fcc 1073 link_request_set_nexthop(link);
b425c3ae 1074 } else {
6a7a4e4d 1075 log_link_debug(link, "Setting routes");
b425c3ae
YW
1076 link_set_state(link, LINK_STATE_CONFIGURING);
1077 }
f882c247
TG
1078
1079 return 0;
1080}
1081
6accfd31
DA
1082void link_check_ready(Link *link) {
1083 Address *a;
1084 Iterator i;
4ff296b0 1085 int r;
6accfd31
DA
1086
1087 assert(link);
1088
39373cb9
YW
1089 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER)) {
1090 log_link_debug(link, "%s(): link is in failed or linger state.", __func__);
6accfd31 1091 return;
39373cb9 1092 }
6accfd31
DA
1093
1094 if (!link->network)
1095 return;
1096
39373cb9
YW
1097 if (!link->addresses_configured) {
1098 log_link_debug(link, "%s(): static addresses are not configured.", __func__);
6accfd31 1099 return;
39373cb9 1100 }
6accfd31 1101
39373cb9
YW
1102 if (!link->neighbors_configured) {
1103 log_link_debug(link, "%s(): static neighbors are not configured.", __func__);
6accfd31 1104 return;
39373cb9 1105 }
6accfd31 1106
6aa5773b 1107 SET_FOREACH(a, link->addresses, i)
39373cb9
YW
1108 if (!address_is_ready(a)) {
1109 _cleanup_free_ char *str = NULL;
1110
1111 (void) in_addr_to_string(a->family, &a->in_addr, &str);
1112 log_link_debug(link, "%s(): an address %s/%d is not ready.", __func__, strnull(str), a->prefixlen);
6aa5773b 1113 return;
39373cb9 1114 }
6aa5773b
DA
1115
1116 if (!link->addresses_ready) {
1117 link->addresses_ready = true;
4ff296b0
YW
1118 r = link_request_set_routes(link);
1119 if (r < 0)
1120 link_enter_failed(link);
39373cb9 1121 log_link_debug(link, "%s(): static addresses are configured. Configuring static routes.", __func__);
710ce9e5 1122 return;
6aa5773b
DA
1123 }
1124
39373cb9
YW
1125 if (!link->static_routes_configured) {
1126 log_link_debug(link, "%s(): static routes are not configured.", __func__);
6accfd31 1127 return;
39373cb9 1128 }
6accfd31 1129
39373cb9
YW
1130 if (!link->static_nexthops_configured) {
1131 log_link_debug(link, "%s(): static nexthops are not configured.", __func__);
c16c7808 1132 return;
39373cb9 1133 }
c16c7808 1134
39373cb9
YW
1135 if (!link->routing_policy_rules_configured) {
1136 log_link_debug(link, "%s(): static routing policy rules are not configured.", __func__);
6accfd31 1137 return;
39373cb9 1138 }
6accfd31 1139
39373cb9
YW
1140 if (!link->tc_configured) {
1141 log_link_debug(link, "%s(): traffic controls are not configured.", __func__);
4ecdcb07 1142 return;
39373cb9 1143 }
4ecdcb07 1144
39373cb9
YW
1145 if (!link->sr_iov_configured) {
1146 log_link_debug(link, "%s(): SR-IOV is not configured.", __func__);
518cd6b5 1147 return;
39373cb9 1148 }
518cd6b5 1149
463797c1 1150 if (link_has_carrier(link) || !link->network->configure_without_carrier) {
6accfd31 1151
39373cb9
YW
1152 if (link_ipv4ll_enabled(link, ADDRESS_FAMILY_IPV4) && !link->ipv4ll_address) {
1153 log_link_debug(link, "%s(): IPv4LL is not configured.", __func__);
463797c1 1154 return;
39373cb9 1155 }
6accfd31 1156
463797c1 1157 if (link_ipv6ll_enabled(link) &&
39373cb9
YW
1158 in_addr_is_null(AF_INET6, (const union in_addr_union*) &link->ipv6ll_address)) {
1159 log_link_debug(link, "%s(): IPv6LL is not configured.", __func__);
463797c1 1160 return;
39373cb9 1161 }
6accfd31 1162
659ad3a0
YW
1163 if ((link_dhcp4_enabled(link) || link_dhcp6_enabled(link)) && set_isempty(link->addresses)) {
1164 log_link_debug(link, "%s(): DHCP4 or DHCP6 is enabled but no address is assigned yet.", __func__);
1165 return;
1166 }
1167
39373cb9
YW
1168 if (link_dhcp4_enabled(link) || link_dhcp6_enabled(link) || dhcp6_get_prefix_delegation(link) || link_ipv6_accept_ra_enabled(link)) {
1169 if (!link->dhcp4_configured &&
1170 !(link->dhcp6_address_configured && link->dhcp6_route_configured) &&
1171 !(link->dhcp6_pd_address_configured && link->dhcp6_pd_route_configured) &&
d98c546d 1172 !(link->ndisc_addresses_configured && link->ndisc_routes_configured) &&
39373cb9
YW
1173 !(link_ipv4ll_enabled(link, ADDRESS_FAMILY_FALLBACK_IPV4) && link->ipv4ll_address)) {
1174 /* When DHCP or RA is enabled, at least one protocol must provide an address, or
1175 * an IPv4ll fallback address must be configured. */
1176 log_link_debug(link, "%s(): dynamic addresses or routes are not configured.", __func__);
1177 return;
1178 }
1179
d98c546d 1180 log_link_debug(link, "%s(): dhcp4:%s dhcp6_addresses:%s dhcp_routes:%s dhcp_pd_addresses:%s dhcp_pd_routes:%s ndisc_addresses:%s ndisc_routes:%s",
39373cb9
YW
1181 __func__,
1182 yes_no(link->dhcp4_configured),
1183 yes_no(link->dhcp6_address_configured),
1184 yes_no(link->dhcp6_route_configured),
1185 yes_no(link->dhcp6_pd_address_configured),
1186 yes_no(link->dhcp6_pd_route_configured),
d98c546d
YW
1187 yes_no(link->ndisc_addresses_configured),
1188 yes_no(link->ndisc_routes_configured));
39373cb9 1189 }
463797c1 1190 }
6accfd31 1191
6accfd31
DA
1192 if (link->state != LINK_STATE_CONFIGURED)
1193 link_enter_configured(link);
1194
1195 return;
1196}
1197
e4a71bf3
WKI
1198static int link_request_set_neighbors(Link *link) {
1199 Neighbor *neighbor;
1200 int r;
1201
1202 assert(link);
1203 assert(link->network);
1204 assert(link->state != _LINK_STATE_INVALID);
1205
2428613f 1206 link->neighbors_configured = false;
e4a71bf3
WKI
1207
1208 LIST_FOREACH(neighbors, neighbor, link->network->neighbors) {
1209 r = neighbor_configure(neighbor, link, NULL);
4ff296b0
YW
1210 if (r < 0)
1211 return log_link_warning_errno(link, r, "Could not set neighbor: %m");
e4a71bf3
WKI
1212 }
1213
1214 if (link->neighbor_messages == 0) {
1215 link->neighbors_configured = true;
1216 link_check_ready(link);
b425c3ae 1217 } else {
e4a71bf3 1218 log_link_debug(link, "Setting neighbors");
b425c3ae
YW
1219 link_set_state(link, LINK_STATE_CONFIGURING);
1220 }
e4a71bf3
WKI
1221
1222 return 0;
1223}
1224
3650173f 1225static int address_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
f882c247
TG
1226 int r;
1227
4958aee4 1228 assert(rtnl);
f5be5601
TG
1229 assert(m);
1230 assert(link);
1231 assert(link->ifname);
7715629e 1232 assert(link->address_messages > 0);
289e6774 1233 assert(IN_SET(link->state, LINK_STATE_CONFIGURING,
370e9930 1234 LINK_STATE_FAILED, LINK_STATE_LINGER));
f882c247 1235
7715629e 1236 link->address_messages--;
f882c247 1237
5da8149f 1238 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
f882c247
TG
1239 return 1;
1240
1c4baffc 1241 r = sd_netlink_message_get_errno(m);
4ff296b0 1242 if (r < 0 && r != -EEXIST) {
5ecb131d 1243 log_link_message_warning_errno(link, m, r, "Could not set address");
4ff296b0
YW
1244 link_enter_failed(link);
1245 return 1;
1246 } else if (r >= 0)
1247 (void) manager_rtnl_process_address(rtnl, m, link->manager);
f882c247 1248
7715629e 1249 if (link->address_messages == 0) {
6a7a4e4d 1250 log_link_debug(link, "Addresses set");
c42ff3a1 1251 link->addresses_configured = true;
6aa5773b 1252 link_check_ready(link);
dd3efc09 1253 }
f882c247
TG
1254
1255 return 1;
1256}
1257
f6bb7ac5
TJ
1258static int link_set_bridge_fdb(Link *link) {
1259 FdbEntry *fdb_entry;
197e2809 1260 int r;
f6bb7ac5
TJ
1261
1262 LIST_FOREACH(static_fdb_entries, fdb_entry, link->network->static_fdb_entries) {
1263 r = fdb_entry_configure(link, fdb_entry);
197e2809 1264 if (r < 0)
f6bb7ac5 1265 return log_link_error_errno(link, r, "Failed to add MAC entry to static MAC table: %m");
f6bb7ac5
TJ
1266 }
1267
197e2809 1268 return 0;
f6bb7ac5
TJ
1269}
1270
289e6774 1271static int link_request_set_addresses(Link *link) {
95b74ef6 1272 AddressLabel *label;
a6cc569e 1273 Address *ad;
bd6379ec 1274 Prefix *p;
f882c247
TG
1275 int r;
1276
1277 assert(link);
1278 assert(link->network);
f5be5601 1279 assert(link->state != _LINK_STATE_INVALID);
f882c247 1280
2428613f
YW
1281 /* Reset all *_configured flags we are configuring. */
1282 link->addresses_configured = false;
6aa5773b 1283 link->addresses_ready = false;
2428613f
YW
1284 link->neighbors_configured = false;
1285 link->static_routes_configured = false;
c16c7808 1286 link->static_nexthops_configured = false;
2428613f
YW
1287 link->routing_policy_rules_configured = false;
1288
f6bb7ac5
TJ
1289 r = link_set_bridge_fdb(link);
1290 if (r < 0)
1291 return r;
1292
f3ef324d
YW
1293 r = link_request_set_neighbors(link);
1294 if (r < 0)
1295 return r;
e4a71bf3 1296
3d3d4255 1297 LIST_FOREACH(addresses, ad, link->network->static_addresses) {
a47a6dae
YW
1298 bool update;
1299
6f5d73ab
YW
1300 if (ad->family == AF_INET6 && !in_addr_is_null(ad->family, &ad->in_addr_peer))
1301 update = address_get(link, ad->family, &ad->in_addr_peer, ad->prefixlen, NULL) > 0;
1302 else
1303 update = address_get(link, ad->family, &ad->in_addr, ad->prefixlen, NULL) > 0;
a47a6dae
YW
1304
1305 r = address_configure(ad, link, address_handler, update);
4ff296b0
YW
1306 if (r < 0)
1307 return log_link_warning_errno(link, r, "Could not set addresses: %m");
54a1a535
YW
1308 if (r > 0)
1309 link->address_messages++;
95b74ef6
SS
1310 }
1311
bd6379ec
SS
1312 if (IN_SET(link->network->router_prefix_delegation,
1313 RADV_PREFIX_DELEGATION_STATIC,
1314 RADV_PREFIX_DELEGATION_BOTH))
1315 LIST_FOREACH(prefixes, p, link->network->static_prefixes) {
1316 _cleanup_(address_freep) Address *address = NULL;
1317
1318 if (!p->assign)
1319 continue;
1320
1321 r = address_new(&address);
1322 if (r < 0)
1323 return log_link_error_errno(link, r, "Could not allocate address: %m");
1324
1325 r = sd_radv_prefix_get_prefix(p->radv_prefix, &address->in_addr.in6, &address->prefixlen);
1326 if (r < 0)
1327 return r;
1328
1329 r = generate_ipv6_eui_64_address(link, &address->in_addr.in6);
1330 if (r < 0)
1331 return r;
1332
1333 address->family = AF_INET6;
1334 r = address_configure(address, link, address_handler, true);
1335 if (r < 0)
1336 return log_link_warning_errno(link, r, "Could not set addresses: %m");
1337 if (r > 0)
1338 link->address_messages++;
1339 }
1340
95b74ef6 1341 LIST_FOREACH(labels, label, link->network->address_labels) {
cccf9517 1342 r = address_label_configure(label, link, NULL, false);
4ff296b0
YW
1343 if (r < 0)
1344 return log_link_warning_errno(link, r, "Could not set address label: %m");
f5be5601 1345
7715629e 1346 link->address_label_messages++;
f882c247
TG
1347 }
1348
d4cdbea5
TG
1349 /* now that we can figure out a default address for the dhcp server,
1350 start it */
708c425d 1351 if (link_dhcp4_server_enabled(link) && (link->flags & IFF_UP)) {
8fcf1d61 1352 r = dhcp4_server_configure(link);
4ff296b0 1353 if (r < 0)
d4cdbea5 1354 return r;
6a7a4e4d 1355 log_link_debug(link, "Offering DHCPv4 leases");
d4cdbea5
TG
1356 }
1357
c42ff3a1
WKI
1358 if (link->address_messages == 0) {
1359 link->addresses_configured = true;
6aa5773b 1360 link_check_ready(link);
b425c3ae 1361 } else {
6a7a4e4d 1362 log_link_debug(link, "Setting addresses");
b425c3ae
YW
1363 link_set_state(link, LINK_STATE_CONFIGURING);
1364 }
431ca2ce 1365
f882c247
TG
1366 return 0;
1367}
1368
13b498f9 1369static int link_set_bridge_vlan(Link *link) {
86e2be7b 1370 int r;
13b498f9
TJ
1371
1372 r = br_vlan_configure(link, link->network->pvid, link->network->br_vid_bitmap, link->network->br_untagged_bitmap);
1373 if (r < 0)
1374 log_link_error_errno(link, r, "Failed to assign VLANs to bridge port: %m");
1375
1376 return r;
1377}
1378
a60a720c 1379static int link_set_proxy_arp(Link *link) {
23d8b221
SS
1380 int r;
1381
1382 if (!link_proxy_arp_enabled(link))
1383 return 0;
1384
62e021a9 1385 r = sysctl_write_ip_property_boolean(AF_INET, link->ifname, "proxy_arp", link->network->proxy_arp > 0);
23d8b221
SS
1386 if (r < 0)
1387 log_link_warning_errno(link, r, "Cannot configure proxy ARP for interface: %m");
1388
1389 return 0;
1390}
1391
3a390124 1392static int link_configure_continue(Link *link);
55dc8c4a 1393
302a796f 1394static int set_mtu_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
4f882b2a
TG
1395 int r;
1396
1397 assert(m);
1398 assert(link);
1399 assert(link->ifname);
1400
55dc8c4a
YW
1401 link->setting_mtu = false;
1402
5da8149f 1403 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
4f882b2a
TG
1404 return 1;
1405
1c4baffc 1406 r = sd_netlink_message_get_errno(m);
4ff296b0 1407 if (r < 0)
5ecb131d 1408 log_link_message_warning_errno(link, m, r, "Could not set MTU, ignoring");
4ff296b0
YW
1409 else
1410 log_link_debug(link, "Setting MTU done.");
55dc8c4a 1411
4ff296b0 1412 if (link->state == LINK_STATE_INITIALIZED) {
3a390124 1413 r = link_configure_continue(link);
4ff296b0
YW
1414 if (r < 0)
1415 link_enter_failed(link);
1416 }
4f882b2a
TG
1417
1418 return 1;
1419}
1420
933c70a0 1421int link_set_mtu(Link *link, uint32_t mtu) {
4afd3348 1422 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
4f882b2a
TG
1423 int r;
1424
1425 assert(link);
1426 assert(link->manager);
1427 assert(link->manager->rtnl);
1428
40288ece
YW
1429 if (mtu == 0 || link->setting_mtu)
1430 return 0;
1431
933c70a0 1432 if (link->mtu == mtu)
ee493106
YW
1433 return 0;
1434
6a7a4e4d 1435 log_link_debug(link, "Setting MTU: %" PRIu32, mtu);
4f882b2a 1436
6a7a4e4d
LP
1437 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1438 if (r < 0)
1439 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
4f882b2a 1440
44b598a1 1441 /* IPv6 protocol requires a minimum MTU of IPV6_MTU_MIN(1280) bytes
72c2500b
YW
1442 * on the interface. Bump up MTU bytes to IPV6_MTU_MIN. */
1443 if (link_ipv6_enabled(link) && mtu < IPV6_MIN_MTU) {
44b598a1
SS
1444
1445 log_link_warning(link, "Bumping MTU to " STRINGIFY(IPV6_MIN_MTU) ", as "
d236718c 1446 "IPv6 is requested and requires a minimum MTU of " STRINGIFY(IPV6_MIN_MTU) " bytes");
44b598a1 1447
72c2500b 1448 mtu = IPV6_MIN_MTU;
44b598a1
SS
1449 }
1450
1c4baffc 1451 r = sd_netlink_message_append_u32(req, IFLA_MTU, mtu);
6a7a4e4d
LP
1452 if (r < 0)
1453 return log_link_error_errno(link, r, "Could not append MTU: %m");
4f882b2a 1454
302a796f
YW
1455 r = netlink_call_async(link->manager->rtnl, NULL, req, set_mtu_handler,
1456 link_netlink_destroy_callback, link);
6a7a4e4d
LP
1457 if (r < 0)
1458 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
4f882b2a 1459
ae941762 1460 link_ref(link);
1046bf9b 1461 link->setting_mtu = true;
b226d99b 1462
4f882b2a
TG
1463 return 0;
1464}
1465
f6fcc1c2
YW
1466static bool link_reduces_vlan_mtu(Link *link) {
1467 /* See netif_reduces_vlan_mtu() in kernel. */
1468 return streq_ptr(link->kind, "macsec");
1469}
1470
1471static uint32_t link_get_requested_mtu_by_stacked_netdevs(Link *link) {
1472 uint32_t mtu = 0;
1473 NetDev *dev;
1474 Iterator i;
1475
1476 HASHMAP_FOREACH(dev, link->network->stacked_netdevs, i)
1477 if (dev->kind == NETDEV_KIND_VLAN && dev->mtu > 0)
1478 /* See vlan_dev_change_mtu() in kernel. */
1479 mtu = MAX(mtu, link_reduces_vlan_mtu(link) ? dev->mtu + 4 : dev->mtu);
1480
1481 else if (dev->kind == NETDEV_KIND_MACVLAN && dev->mtu > mtu)
1482 /* See macvlan_change_mtu() in kernel. */
1483 mtu = dev->mtu;
1484
1485 return mtu;
1486}
1487
1488static int link_configure_mtu(Link *link) {
1489 uint32_t mtu;
1490
1491 assert(link);
1492 assert(link->network);
1493
1494 if (link->network->mtu > 0)
1495 return link_set_mtu(link, link->network->mtu);
1496
1497 mtu = link_get_requested_mtu_by_stacked_netdevs(link);
1498 if (link->mtu >= mtu)
1499 return 0;
1500
1501 log_link_notice(link, "Bumping MTU bytes from %"PRIu32" to %"PRIu32" because of stacked device. "
1502 "If it is not desired, then please explicitly specify MTUBytes= setting.",
1503 link->mtu, mtu);
1504
1505 return link_set_mtu(link, mtu);
1506}
1507
302a796f 1508static int set_flags_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
99d2baa2
SS
1509 int r;
1510
1511 assert(m);
1512 assert(link);
1513 assert(link->ifname);
1514
1515 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1516 return 1;
1517
1518 r = sd_netlink_message_get_errno(m);
1519 if (r < 0)
5ecb131d 1520 log_link_message_warning_errno(link, m, r, "Could not set link flags, ignoring");
99d2baa2
SS
1521
1522 return 1;
1523}
1524
1525static int link_set_flags(Link *link) {
1526 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1527 unsigned ifi_change = 0;
1528 unsigned ifi_flags = 0;
1529 int r;
1530
1531 assert(link);
1532 assert(link->manager);
1533 assert(link->manager->rtnl);
1534
1535 if (link->flags & IFF_LOOPBACK)
1536 return 0;
1537
1538 if (!link->network)
1539 return 0;
1540
866e6b7a 1541 if (link->network->arp < 0 && link->network->multicast < 0 && link->network->allmulticast < 0)
99d2baa2
SS
1542 return 0;
1543
1544 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1545 if (r < 0)
1546 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1547
1548 if (link->network->arp >= 0) {
1549 ifi_change |= IFF_NOARP;
e6ebebbe
SS
1550 SET_FLAG(ifi_flags, IFF_NOARP, link->network->arp == 0);
1551 }
1552
1553 if (link->network->multicast >= 0) {
1554 ifi_change |= IFF_MULTICAST;
1555 SET_FLAG(ifi_flags, IFF_MULTICAST, link->network->multicast);
99d2baa2
SS
1556 }
1557
866e6b7a
SS
1558 if (link->network->allmulticast >= 0) {
1559 ifi_change |= IFF_ALLMULTI;
1560 SET_FLAG(ifi_flags, IFF_ALLMULTI, link->network->allmulticast);
1561 }
1562
99d2baa2
SS
1563 r = sd_rtnl_message_link_set_flags(req, ifi_flags, ifi_change);
1564 if (r < 0)
1565 return log_link_error_errno(link, r, "Could not set link flags: %m");
1566
302a796f
YW
1567 r = netlink_call_async(link->manager->rtnl, NULL, req, set_flags_handler,
1568 link_netlink_destroy_callback, link);
99d2baa2
SS
1569 if (r < 0)
1570 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1571
1572 link_ref(link);
1573
1574 return 0;
1575}
1576
e7ab854c
TG
1577static int link_acquire_ipv6_conf(Link *link) {
1578 int r;
1579
1580 assert(link);
1581
e7ab854c 1582 if (link_ipv6_accept_ra_enabled(link)) {
1e7a0e21 1583 assert(link->ndisc);
e7ab854c
TG
1584
1585 log_link_debug(link, "Discovering IPv6 routers");
1586
1e7a0e21 1587 r = sd_ndisc_start(link->ndisc);
63348d13 1588 if (r < 0 && r != -EBUSY)
e7ab854c
TG
1589 return log_link_warning_errno(link, r, "Could not start IPv6 Router Discovery: %m");
1590 }
1591
7465dd22
PF
1592 if (link_radv_enabled(link)) {
1593 assert(link->radv);
1594 assert(in_addr_is_link_local(AF_INET6, (const union in_addr_union*)&link->ipv6ll_address) > 0);
1595
1596 log_link_debug(link, "Starting IPv6 Router Advertisements");
1597
fd3ef936
YW
1598 r = radv_emit_dns(link);
1599 if (r < 0)
1600 return log_link_warning_errno(link, r, "Failed to configure DNS or Domains in IPv6 Router Advertisement: %m");
1601
7465dd22
PF
1602 r = sd_radv_start(link->radv);
1603 if (r < 0 && r != -EBUSY)
1604 return log_link_warning_errno(link, r, "Could not start IPv6 Router Advertisement: %m");
1605 }
1606
838d39af
SS
1607 if (link_dhcp6_enabled(link) && IN_SET(link->network->dhcp6_without_ra,
1608 DHCP6_CLIENT_START_MODE_INFORMATION_REQUEST,
1609 DHCP6_CLIENT_START_MODE_SOLICIT)) {
cd305af1
SS
1610 assert(link->dhcp6_client);
1611 assert(in_addr_is_link_local(AF_INET6, (const union in_addr_union*)&link->ipv6ll_address) > 0);
1612
838d39af 1613 r = dhcp6_request_address(link, link->network->dhcp6_without_ra == DHCP6_CLIENT_START_MODE_INFORMATION_REQUEST);
cd305af1
SS
1614 if (r < 0 && r != -EBUSY)
1615 return log_link_warning_errno(link, r, "Could not acquire DHCPv6 lease: %m");
1616 else
1617 log_link_debug(link, "Acquiring DHCPv6 lease");
1618 }
1619
10752343
PF
1620 (void) dhcp6_request_prefix_delegation(link);
1621
e7ab854c
TG
1622 return 0;
1623}
1624
6fc25497 1625static int link_acquire_ipv4_conf(Link *link) {
ff254138
TG
1626 int r;
1627
1628 assert(link);
ff254138
TG
1629 assert(link->manager);
1630 assert(link->manager->event);
1631
910feb78 1632 if (link_ipv4ll_enabled(link, ADDRESS_FAMILY_IPV4)) {
eb34d4af 1633 assert(link->ipv4ll);
ff254138 1634
6a7a4e4d 1635 log_link_debug(link, "Acquiring IPv4 link-local address");
5c1d3fc9
UTL
1636
1637 r = sd_ipv4ll_start(link->ipv4ll);
6a7a4e4d
LP
1638 if (r < 0)
1639 return log_link_warning_errno(link, r, "Could not acquire IPv4 link-local address: %m");
5c1d3fc9
UTL
1640 }
1641
78c958f8 1642 if (link_dhcp4_enabled(link)) {
eb34d4af 1643 assert(link->dhcp_client);
ff254138 1644
6a7a4e4d 1645 log_link_debug(link, "Acquiring DHCPv4 lease");
ab47d620 1646
5c1d3fc9 1647 r = sd_dhcp_client_start(link->dhcp_client);
6a7a4e4d
LP
1648 if (r < 0)
1649 return log_link_warning_errno(link, r, "Could not acquire DHCPv4 lease: %m");
5c1d3fc9 1650 }
ff254138 1651
6fc25497
SS
1652 return 0;
1653}
1654
1655static int link_acquire_conf(Link *link) {
1656 int r;
1657
1658 assert(link);
1659
1660 r = link_acquire_ipv4_conf(link);
1661 if (r < 0)
1662 return r;
1663
3f7cc080 1664 if (!in_addr_is_null(AF_INET6, (const union in_addr_union*) &link->ipv6ll_address)) {
6fc25497
SS
1665 r = link_acquire_ipv6_conf(link);
1666 if (r < 0)
1667 return r;
1668 }
1669
7272b25e
LP
1670 if (link_lldp_emit_enabled(link)) {
1671 r = link_lldp_emit_start(link);
8e1ad1ea
LP
1672 if (r < 0)
1673 return log_link_warning_errno(link, r, "Failed to start LLDP transmission: %m");
1674 }
1675
ff254138
TG
1676 return 0;
1677}
1678
a61bb41c 1679bool link_has_carrier(Link *link) {
deb2e523
TG
1680 /* see Documentation/networking/operstates.txt in the kernel sources */
1681
a61bb41c 1682 if (link->kernel_operstate == IF_OPER_UP)
deb2e523
TG
1683 return true;
1684
a61bb41c 1685 if (link->kernel_operstate == IF_OPER_UNKNOWN)
deb2e523 1686 /* operstate may not be implemented, so fall back to flags */
b26ea308
YW
1687 if (FLAGS_SET(link->flags, IFF_LOWER_UP | IFF_RUNNING) &&
1688 !FLAGS_SET(link->flags, IFF_DORMANT))
deb2e523
TG
1689 return true;
1690
1691 return false;
1692}
1693
0e2fdb83
SS
1694static int link_address_genmode_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
1695 int r;
1696
1697 assert(link);
1698
9524014e
DS
1699 link->setting_genmode = false;
1700
0e2fdb83
SS
1701 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1702 return 1;
1703
1704 r = sd_netlink_message_get_errno(m);
1705 if (r < 0)
5ecb131d 1706 log_link_message_warning_errno(link, m, r, "Could not set address genmode for interface, ignoring");
9524014e
DS
1707 else
1708 log_link_debug(link, "Setting address genmode done.");
1709
1710 if (link->state == LINK_STATE_INITIALIZED) {
1711 r = link_configure_continue(link);
1712 if (r < 0)
1713 link_enter_failed(link);
1714 }
0e2fdb83
SS
1715
1716 return 1;
1717}
1718
1719static int link_configure_addrgen_mode(Link *link) {
1720 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1721 uint8_t ipv6ll_mode;
1722 int r;
1723
1724 assert(link);
1725 assert(link->network);
1726 assert(link->manager);
1727 assert(link->manager->rtnl);
1728
9524014e 1729 if (!socket_ipv6_is_supported() || link->setting_genmode)
9f6e82e6
YW
1730 return 0;
1731
0e2fdb83
SS
1732 log_link_debug(link, "Setting address genmode for link");
1733
1734 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1735 if (r < 0)
1736 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1737
1738 r = sd_netlink_message_open_container(req, IFLA_AF_SPEC);
1739 if (r < 0)
1740 return log_link_error_errno(link, r, "Could not open IFLA_AF_SPEC container: %m");
1741
1742 r = sd_netlink_message_open_container(req, AF_INET6);
1743 if (r < 0)
1744 return log_link_error_errno(link, r, "Could not open AF_INET6 container: %m");
1745
1746 if (!link_ipv6ll_enabled(link))
1747 ipv6ll_mode = IN6_ADDR_GEN_MODE_NONE;
6f6296b9 1748 else if (link->network->ipv6ll_address_gen_mode < 0) {
a6f1848a
SS
1749 r = sysctl_read_ip_property(AF_INET6, link->ifname, "stable_secret", NULL);
1750 if (r < 0) {
1751 /* The file may not exist. And even if it exists, when stable_secret is unset,
1752 * reading the file fails with EIO. */
1753 log_link_debug_errno(link, r, "Failed to read sysctl property stable_secret: %m");
1754
1755 ipv6ll_mode = IN6_ADDR_GEN_MODE_EUI64;
1756 } else
1757 ipv6ll_mode = IN6_ADDR_GEN_MODE_STABLE_PRIVACY;
1758 } else
6f6296b9 1759 ipv6ll_mode = link->network->ipv6ll_address_gen_mode;
0e2fdb83
SS
1760
1761 r = sd_netlink_message_append_u8(req, IFLA_INET6_ADDR_GEN_MODE, ipv6ll_mode);
1762 if (r < 0)
1763 return log_link_error_errno(link, r, "Could not append IFLA_INET6_ADDR_GEN_MODE: %m");
1764
1765 r = sd_netlink_message_close_container(req);
1766 if (r < 0)
1767 return log_link_error_errno(link, r, "Could not close AF_INET6 container: %m");
1768
1769 r = sd_netlink_message_close_container(req);
1770 if (r < 0)
1771 return log_link_error_errno(link, r, "Could not close IFLA_AF_SPEC container: %m");
1772
1773 r = netlink_call_async(link->manager->rtnl, NULL, req, link_address_genmode_handler,
1774 link_netlink_destroy_callback, link);
1775 if (r < 0)
1776 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1777
1778 link_ref(link);
9524014e 1779 link->setting_genmode = true;
0e2fdb83
SS
1780
1781 return 0;
1782}
1783
302a796f 1784static int link_up_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
dd3efc09
TG
1785 int r;
1786
1746cf2a
TG
1787 assert(link);
1788
5da8149f 1789 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1746cf2a
TG
1790 return 1;
1791
1c4baffc 1792 r = sd_netlink_message_get_errno(m);
6a7a4e4d 1793 if (r < 0)
26d6b214 1794 /* we warn but don't fail the link, as it may be brought up later */
5ecb131d 1795 log_link_message_warning_errno(link, m, r, "Could not bring up interface");
45ad2c13 1796
f882c247
TG
1797 return 1;
1798}
1799
1cc84f3b 1800static int link_up(Link *link) {
4afd3348 1801 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
f579559b
TG
1802 int r;
1803
f882c247 1804 assert(link);
c106cc36 1805 assert(link->network);
f882c247
TG
1806 assert(link->manager);
1807 assert(link->manager->rtnl);
1808
6a7a4e4d 1809 log_link_debug(link, "Bringing link up");
449f7554 1810
6a7a4e4d
LP
1811 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1812 if (r < 0)
1813 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
f579559b 1814
2b2d8603 1815 /* set it free if not enslaved with networkd */
6cb955c6 1816 if (!link->network->bridge && !link->network->bond && !link->network->vrf) {
2b2d8603
TY
1817 r = sd_netlink_message_append_u32(req, IFLA_MASTER, 0);
1818 if (r < 0)
1819 return log_link_error_errno(link, r, "Could not append IFLA_MASTER attribute: %m");
1820 }
1821
5d4795f3 1822 r = sd_rtnl_message_link_set_flags(req, IFF_UP, IFF_UP);
6a7a4e4d
LP
1823 if (r < 0)
1824 return log_link_error_errno(link, r, "Could not set link flags: %m");
fc25d7f8 1825
c106cc36 1826 if (link->network->mac) {
1c4baffc 1827 r = sd_netlink_message_append_ether_addr(req, IFLA_ADDRESS, link->network->mac);
6a7a4e4d
LP
1828 if (r < 0)
1829 return log_link_error_errno(link, r, "Could not set MAC address: %m");
c106cc36
TG
1830 }
1831
302a796f
YW
1832 r = netlink_call_async(link->manager->rtnl, NULL, req, link_up_handler,
1833 link_netlink_destroy_callback, link);
6a7a4e4d
LP
1834 if (r < 0)
1835 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
f579559b 1836
b226d99b
TG
1837 link_ref(link);
1838
f882c247
TG
1839 return 0;
1840}
1841
302a796f 1842static int link_down_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
0d4ad91d
AR
1843 int r;
1844
1845 assert(link);
1846
1847 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1848 return 1;
1849
1c4baffc 1850 r = sd_netlink_message_get_errno(m);
0d4ad91d 1851 if (r < 0)
5ecb131d 1852 log_link_message_warning_errno(link, m, r, "Could not bring down interface");
0d4ad91d
AR
1853
1854 return 1;
1855}
1856
8e54db83 1857int link_down(Link *link, link_netlink_message_handler_t callback) {
4afd3348 1858 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
0d4ad91d
AR
1859 int r;
1860
1861 assert(link);
1862 assert(link->manager);
1863 assert(link->manager->rtnl);
1864
6a7a4e4d 1865 log_link_debug(link, "Bringing link down");
0d4ad91d
AR
1866
1867 r = sd_rtnl_message_new_link(link->manager->rtnl, &req,
1868 RTM_SETLINK, link->ifindex);
6a7a4e4d
LP
1869 if (r < 0)
1870 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
0d4ad91d
AR
1871
1872 r = sd_rtnl_message_link_set_flags(req, 0, IFF_UP);
6a7a4e4d
LP
1873 if (r < 0)
1874 return log_link_error_errno(link, r, "Could not set link flags: %m");
0d4ad91d 1875
8e54db83
YW
1876 r = netlink_call_async(link->manager->rtnl, NULL, req,
1877 callback ?: link_down_handler,
302a796f 1878 link_netlink_destroy_callback, link);
6a7a4e4d
LP
1879 if (r < 0)
1880 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
0d4ad91d
AR
1881
1882 link_ref(link);
1883
1884 return 0;
1885}
1886
89fe6535
SS
1887static int link_group_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
1888 int r;
1889
1890 assert(link);
1891
1892 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1893 return 1;
1894
1895 r = sd_netlink_message_get_errno(m);
1896 if (r < 0)
1897 log_link_message_warning_errno(link, m, r, "Could not set group for the interface");
1898
1899 return 1;
1900}
1901
1902static int link_set_group(Link *link) {
1903 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1904 int r;
1905
1906 assert(link);
1907 assert(link->network);
1908 assert(link->manager);
1909 assert(link->manager->rtnl);
1910
1911 if (link->network->group <= 0)
1912 return 0;
1913
1914 log_link_debug(link, "Setting group");
1915
1916 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1917 if (r < 0)
1918 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1919
1920 r = sd_netlink_message_append_u32(req, IFLA_GROUP, link->network->group);
1921 if (r < 0)
1922 return log_link_error_errno(link, r, "Could not set link group: %m");
1923
1924 r = netlink_call_async(link->manager->rtnl, NULL, req, link_group_handler,
1925 link_netlink_destroy_callback, link);
1926 if (r < 0)
1927 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1928
1929 link_ref(link);
1930
1931 return 0;
1932}
1933
0d4ad91d
AR
1934static int link_handle_bound_to_list(Link *link) {
1935 Link *l;
1936 Iterator i;
1937 int r;
1938 bool required_up = false;
1939 bool link_is_up = false;
1940
1941 assert(link);
1942
1943 if (hashmap_isempty(link->bound_to_links))
1944 return 0;
1945
1946 if (link->flags & IFF_UP)
1947 link_is_up = true;
1948
1949 HASHMAP_FOREACH (l, link->bound_to_links, i)
1950 if (link_has_carrier(l)) {
1951 required_up = true;
1952 break;
1953 }
1954
1955 if (!required_up && link_is_up) {
8e54db83 1956 r = link_down(link, NULL);
0d4ad91d
AR
1957 if (r < 0)
1958 return r;
1959 } else if (required_up && !link_is_up) {
1960 r = link_up(link);
1961 if (r < 0)
1962 return r;
1963 }
1964
1965 return 0;
1966}
1967
1968static int link_handle_bound_by_list(Link *link) {
1969 Iterator i;
1970 Link *l;
1971 int r;
1972
1973 assert(link);
1974
1975 if (hashmap_isempty(link->bound_by_links))
1976 return 0;
1977
1978 HASHMAP_FOREACH (l, link->bound_by_links, i) {
1979 r = link_handle_bound_to_list(l);
1980 if (r < 0)
1981 return r;
1982 }
1983
1984 return 0;
1985}
1986
1987static int link_put_carrier(Link *link, Link *carrier, Hashmap **h) {
1988 int r;
1989
1990 assert(link);
1991 assert(carrier);
1992
1993 if (link == carrier)
1994 return 0;
1995
1996 if (hashmap_get(*h, INT_TO_PTR(carrier->ifindex)))
1997 return 0;
1998
1999 r = hashmap_ensure_allocated(h, NULL);
2000 if (r < 0)
2001 return r;
2002
2003 r = hashmap_put(*h, INT_TO_PTR(carrier->ifindex), carrier);
2004 if (r < 0)
2005 return r;
2006
2007 return 0;
2008}
2009
2010static int link_new_bound_by_list(Link *link) {
2011 Manager *m;
2012 Link *carrier;
2013 Iterator i;
2014 int r;
2015 bool list_updated = false;
2016
2017 assert(link);
2018 assert(link->manager);
2019
2020 m = link->manager;
2021
b295beea 2022 HASHMAP_FOREACH(carrier, m->links, i) {
0d4ad91d
AR
2023 if (!carrier->network)
2024 continue;
2025
2026 if (strv_isempty(carrier->network->bind_carrier))
2027 continue;
2028
191a3f16 2029 if (strv_fnmatch(carrier->network->bind_carrier, link->ifname)) {
0d4ad91d
AR
2030 r = link_put_carrier(link, carrier, &link->bound_by_links);
2031 if (r < 0)
2032 return r;
2033
2034 list_updated = true;
2035 }
2036 }
2037
2038 if (list_updated)
84de38c5 2039 link_dirty(link);
0d4ad91d 2040
b295beea 2041 HASHMAP_FOREACH(carrier, link->bound_by_links, i) {
0d4ad91d
AR
2042 r = link_put_carrier(carrier, link, &carrier->bound_to_links);
2043 if (r < 0)
2044 return r;
2045
84de38c5 2046 link_dirty(carrier);
0d4ad91d
AR
2047 }
2048
2049 return 0;
2050}
2051
2052static int link_new_bound_to_list(Link *link) {
2053 Manager *m;
2054 Link *carrier;
2055 Iterator i;
2056 int r;
2057 bool list_updated = false;
2058
2059 assert(link);
2060 assert(link->manager);
2061
2062 if (!link->network)
2063 return 0;
2064
2065 if (strv_isempty(link->network->bind_carrier))
2066 return 0;
2067
2068 m = link->manager;
2069
2070 HASHMAP_FOREACH (carrier, m->links, i) {
191a3f16 2071 if (strv_fnmatch(link->network->bind_carrier, carrier->ifname)) {
0d4ad91d
AR
2072 r = link_put_carrier(link, carrier, &link->bound_to_links);
2073 if (r < 0)
2074 return r;
2075
2076 list_updated = true;
2077 }
2078 }
2079
2080 if (list_updated)
84de38c5 2081 link_dirty(link);
0d4ad91d
AR
2082
2083 HASHMAP_FOREACH (carrier, link->bound_to_links, i) {
2084 r = link_put_carrier(carrier, link, &carrier->bound_by_links);
2085 if (r < 0)
2086 return r;
2087
84de38c5 2088 link_dirty(carrier);
0d4ad91d
AR
2089 }
2090
2091 return 0;
2092}
2093
2094static int link_new_carrier_maps(Link *link) {
2095 int r;
2096
2097 r = link_new_bound_by_list(link);
2098 if (r < 0)
2099 return r;
2100
2101 r = link_handle_bound_by_list(link);
2102 if (r < 0)
2103 return r;
2104
2105 r = link_new_bound_to_list(link);
2106 if (r < 0)
2107 return r;
2108
2109 r = link_handle_bound_to_list(link);
2110 if (r < 0)
2111 return r;
2112
2113 return 0;
2114}
2115
2116static void link_free_bound_to_list(Link *link) {
2117 Link *bound_to;
2118 Iterator i;
2119
2120 HASHMAP_FOREACH (bound_to, link->bound_to_links, i) {
2121 hashmap_remove(link->bound_to_links, INT_TO_PTR(bound_to->ifindex));
2122
2123 if (hashmap_remove(bound_to->bound_by_links, INT_TO_PTR(link->ifindex)))
84de38c5 2124 link_dirty(bound_to);
0d4ad91d
AR
2125 }
2126
2127 return;
2128}
2129
2130static void link_free_bound_by_list(Link *link) {
2131 Link *bound_by;
2132 Iterator i;
2133
2134 HASHMAP_FOREACH (bound_by, link->bound_by_links, i) {
2135 hashmap_remove(link->bound_by_links, INT_TO_PTR(bound_by->ifindex));
2136
2137 if (hashmap_remove(bound_by->bound_to_links, INT_TO_PTR(link->ifindex))) {
84de38c5 2138 link_dirty(bound_by);
0d4ad91d
AR
2139 link_handle_bound_to_list(bound_by);
2140 }
2141 }
2142
2143 return;
2144}
2145
2146static void link_free_carrier_maps(Link *link) {
2147 bool list_updated = false;
2148
2149 assert(link);
2150
2151 if (!hashmap_isempty(link->bound_to_links)) {
2152 link_free_bound_to_list(link);
2153 list_updated = true;
2154 }
2155
2156 if (!hashmap_isempty(link->bound_by_links)) {
2157 link_free_bound_by_list(link);
2158 list_updated = true;
2159 }
2160
2161 if (list_updated)
84de38c5 2162 link_dirty(link);
0d4ad91d
AR
2163
2164 return;
2165}
2166
5f707e12
YW
2167static int link_append_to_master(Link *link, NetDev *netdev) {
2168 Link *master;
2169 int r;
2170
2171 assert(link);
2172 assert(netdev);
2173
2174 r = link_get(link->manager, netdev->ifindex, &master);
2175 if (r < 0)
2176 return r;
2177
de7fef4b 2178 r = set_ensure_put(&master->slaves, NULL, link);
38288f0b 2179 if (r <= 0)
5f707e12
YW
2180 return r;
2181
2182 link_ref(link);
2183 return 0;
2184}
2185
2186static void link_drop_from_master(Link *link, NetDev *netdev) {
2187 Link *master;
2188
2189 assert(link);
2190
2191 if (!link->manager || !netdev)
2192 return;
2193
2194 if (link_get(link->manager, netdev->ifindex, &master) < 0)
2195 return;
2196
2197 link_unref(set_remove(master->slaves, link));
2198}
2199
2200static void link_detach_from_manager(Link *link) {
2201 if (!link || !link->manager)
2202 return;
2203
2204 link_unref(set_remove(link->manager->links_requesting_uuid, link));
2205 link_clean(link);
2206
2207 /* The following must be called at last. */
2208 assert_se(hashmap_remove(link->manager->links, INT_TO_PTR(link->ifindex)) == link);
2209 link_unref(link);
2210}
2211
0d4ad91d
AR
2212void link_drop(Link *link) {
2213 if (!link || link->state == LINK_STATE_LINGER)
2214 return;
2215
2216 link_set_state(link, LINK_STATE_LINGER);
2217
2218 link_free_carrier_maps(link);
2219
5f707e12
YW
2220 if (link->network) {
2221 link_drop_from_master(link, link->network->bridge);
2222 link_drop_from_master(link, link->network->bond);
2223 }
2224
6a7a4e4d 2225 log_link_debug(link, "Link removed");
0d4ad91d 2226
db2f8a2e 2227 (void) unlink(link->state_file);
c4397d94 2228 link_detach_from_manager(link);
0d4ad91d
AR
2229}
2230
3f265037 2231static int link_joined(Link *link) {
f882c247
TG
2232 int r;
2233
ef1ba606 2234 assert(link);
f5be5601 2235 assert(link->network);
dd3efc09 2236
0d4ad91d
AR
2237 if (!hashmap_isempty(link->bound_to_links)) {
2238 r = link_handle_bound_to_list(link);
2239 if (r < 0)
2240 return r;
2241 } else if (!(link->flags & IFF_UP)) {
505f8da7
TG
2242 r = link_up(link);
2243 if (r < 0) {
2244 link_enter_failed(link);
2245 return r;
2246 }
ef1ba606 2247 }
f882c247 2248
9ed794a3 2249 if (link->network->bridge) {
e1853b00 2250 r = link_set_bridge(link);
6a7a4e4d
LP
2251 if (r < 0)
2252 log_link_error_errno(link, r, "Could not set bridge message: %m");
45e11abf
YW
2253
2254 r = link_append_to_master(link, link->network->bridge);
2255 if (r < 0)
2256 log_link_error_errno(link, r, "Failed to add to bridge master's slave list: %m");
e1853b00
SS
2257 }
2258
eb64b435 2259 if (link->network->bond) {
7fcee284 2260 r = link_set_bond(link);
eb64b435
SS
2261 if (r < 0)
2262 log_link_error_errno(link, r, "Could not set bond message: %m");
959f65d3 2263
45e11abf 2264 r = link_append_to_master(link, link->network->bond);
959f65d3
YW
2265 if (r < 0)
2266 log_link_error_errno(link, r, "Failed to add to bond master's slave list: %m");
eb64b435
SS
2267 }
2268
ffff9abe
TJ
2269 if (link->network->use_br_vlan &&
2270 (link->network->bridge || streq_ptr("bridge", link->kind))) {
13b498f9
TJ
2271 r = link_set_bridge_vlan(link);
2272 if (r < 0)
2273 log_link_error_errno(link, r, "Could not set bridge vlan: %m");
2274 }
2275
c1835a42
RM
2276 /* Skip setting up addresses until it gets carrier,
2277 or it would try to set addresses twice,
2278 which is bad for non-idempotent steps. */
dad2d78e 2279 if (!link_has_carrier(link) && !link->network->configure_without_carrier)
c1835a42
RM
2280 return 0;
2281
b425c3ae 2282 link_set_state(link, LINK_STATE_CONFIGURING);
289e6774 2283 return link_request_set_addresses(link);
02b59d57
TG
2284}
2285
302a796f 2286static int netdev_join_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
02b59d57
TG
2287 int r;
2288
1746cf2a 2289 assert(link);
ef1ba606 2290 assert(link->network);
34bf3c00 2291 assert(link->enslaving > 0);
02b59d57 2292
313cefa1 2293 link->enslaving--;
52433f6b 2294
5da8149f 2295 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
02b59d57
TG
2296 return 1;
2297
1c4baffc 2298 r = sd_netlink_message_get_errno(m);
856f962c 2299 if (r < 0 && r != -EEXIST) {
5ecb131d 2300 log_link_message_warning_errno(link, m, r, "Could not join netdev");
ef1ba606
TG
2301 link_enter_failed(link);
2302 return 1;
4ff296b0
YW
2303 }
2304
2305 log_link_debug(link, "Joined netdev");
02b59d57 2306
34bf3c00 2307 if (link->enslaving == 0) {
4ff296b0
YW
2308 r = link_joined(link);
2309 if (r < 0)
2310 link_enter_failed(link);
34bf3c00 2311 }
02b59d57
TG
2312
2313 return 1;
2314}
2315
3f265037 2316static int link_enter_join_netdev(Link *link) {
6a0a2f86 2317 NetDev *netdev;
672682a6 2318 Iterator i;
02b59d57
TG
2319 int r;
2320
2321 assert(link);
2322 assert(link->network);
bd08ce56 2323 assert(link->state == LINK_STATE_INITIALIZED);
02b59d57 2324
289e6774 2325 link_set_state(link, LINK_STATE_CONFIGURING);
02b59d57 2326
84de38c5 2327 link_dirty(link);
34bf3c00 2328 link->enslaving = 0;
02b59d57 2329
d9c67ea1 2330 if (link->network->bond) {
cbff7170
TJ
2331 if (link->network->bond->state == NETDEV_STATE_READY &&
2332 link->network->bond->ifindex == link->master_ifindex)
2333 return link_joined(link);
2334
f2341e0a
LP
2335 log_struct(LOG_DEBUG,
2336 LOG_LINK_INTERFACE(link),
2337 LOG_NETDEV_INTERFACE(link->network->bond),
a1230ff9 2338 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", link->network->bond->ifname));
f2341e0a 2339
34bf3c00
YW
2340 link->enslaving++;
2341
f2341e0a 2342 r = netdev_join(link->network->bond, link, netdev_join_handler);
52433f6b 2343 if (r < 0) {
f2341e0a
LP
2344 log_struct_errno(LOG_WARNING, r,
2345 LOG_LINK_INTERFACE(link),
2346 LOG_NETDEV_INTERFACE(link->network->bond),
a1230ff9 2347 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", link->network->bond->ifname));
52433f6b
TG
2348 link_enter_failed(link);
2349 return r;
2350 }
0ad6148e
MO
2351 }
2352
d9c67ea1 2353 if (link->network->bridge) {
f2341e0a
LP
2354 log_struct(LOG_DEBUG,
2355 LOG_LINK_INTERFACE(link),
2356 LOG_NETDEV_INTERFACE(link->network->bridge),
a1230ff9 2357 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", link->network->bridge->ifname));
f2341e0a 2358
34bf3c00
YW
2359 link->enslaving++;
2360
f2341e0a 2361 r = netdev_join(link->network->bridge, link, netdev_join_handler);
0ad6148e 2362 if (r < 0) {
f2341e0a
LP
2363 log_struct_errno(LOG_WARNING, r,
2364 LOG_LINK_INTERFACE(link),
2365 LOG_NETDEV_INTERFACE(link->network->bridge),
a1230ff9 2366 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", link->network->bridge->ifname));
0ad6148e
MO
2367 link_enter_failed(link);
2368 return r;
2369 }
52433f6b
TG
2370 }
2371
6cb955c6
AR
2372 if (link->network->vrf) {
2373 log_struct(LOG_DEBUG,
2374 LOG_LINK_INTERFACE(link),
2375 LOG_NETDEV_INTERFACE(link->network->vrf),
a1230ff9
ZJS
2376 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", link->network->vrf->ifname));
2377
34bf3c00
YW
2378 link->enslaving++;
2379
6cb955c6
AR
2380 r = netdev_join(link->network->vrf, link, netdev_join_handler);
2381 if (r < 0) {
2382 log_struct_errno(LOG_WARNING, r,
2383 LOG_LINK_INTERFACE(link),
2384 LOG_NETDEV_INTERFACE(link->network->vrf),
a1230ff9 2385 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", link->network->vrf->ifname));
6cb955c6
AR
2386 link_enter_failed(link);
2387 return r;
2388 }
6cb955c6
AR
2389 }
2390
6a0a2f86 2391 HASHMAP_FOREACH(netdev, link->network->stacked_netdevs, i) {
7951dea2 2392
2b6db913
YW
2393 if (netdev->ifindex > 0)
2394 /* Assume already enslaved. */
a63e5daa 2395 continue;
a63e5daa 2396
7033af49
YW
2397 if (netdev_get_create_type(netdev) != NETDEV_CREATE_STACKED)
2398 continue;
2399
f2341e0a
LP
2400 log_struct(LOG_DEBUG,
2401 LOG_LINK_INTERFACE(link),
2402 LOG_NETDEV_INTERFACE(netdev),
a1230ff9 2403 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", netdev->ifname));
f2341e0a 2404
34bf3c00
YW
2405 link->enslaving++;
2406
f2341e0a 2407 r = netdev_join(netdev, link, netdev_join_handler);
7951dea2 2408 if (r < 0) {
f2341e0a
LP
2409 log_struct_errno(LOG_WARNING, r,
2410 LOG_LINK_INTERFACE(link),
2411 LOG_NETDEV_INTERFACE(netdev),
a1230ff9 2412 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", netdev->ifname));
326cb406
SS
2413 link_enter_failed(link);
2414 return r;
2415 }
326cb406
SS
2416 }
2417
34bf3c00
YW
2418 if (link->enslaving == 0)
2419 return link_joined(link);
2420
ef1ba606
TG
2421 return 0;
2422}
2423
769d324c 2424static int link_set_ipv4_forward(Link *link) {
5a8bcb67
LP
2425 int r;
2426
765afd5c 2427 if (!link_ipv4_forward_enabled(link))
15dee3f0
LP
2428 return 0;
2429
765afd5c
LP
2430 /* We propagate the forwarding flag from one interface to the
2431 * global setting one way. This means: as long as at least one
2432 * interface was configured at any time that had IP forwarding
2433 * enabled the setting will stay on for good. We do this
2434 * primarily to keep IPv4 and IPv6 packet forwarding behaviour
2435 * somewhat in sync (see below). */
15dee3f0 2436
62e021a9 2437 r = sysctl_write_ip_property(AF_INET, NULL, "ip_forward", "1");
eb3da901 2438 if (r < 0)
765afd5c 2439 log_link_warning_errno(link, r, "Cannot turn on IPv4 packet forwarding, ignoring: %m");
43c6d5ab 2440
769d324c
LP
2441 return 0;
2442}
2443
2444static int link_set_ipv6_forward(Link *link) {
769d324c
LP
2445 int r;
2446
765afd5c 2447 if (!link_ipv6_forward_enabled(link))
8add5f79
NO
2448 return 0;
2449
61233823 2450 /* On Linux, the IPv6 stack does not know a per-interface
765afd5c
LP
2451 * packet forwarding setting: either packet forwarding is on
2452 * for all, or off for all. We hence don't bother with a
2453 * per-interface setting, but simply propagate the interface
2454 * flag, if it is set, to the global flag, one-way. Note that
2455 * while IPv4 would allow a per-interface flag, we expose the
2456 * same behaviour there and also propagate the setting from
2457 * one to all, to keep things simple (see above). */
15dee3f0 2458
62e021a9 2459 r = sysctl_write_ip_property(AF_INET6, "all", "forwarding", "1");
eb3da901 2460 if (r < 0)
765afd5c 2461 log_link_warning_errno(link, r, "Cannot configure IPv6 packet forwarding, ignoring: %m");
5a8bcb67
LP
2462
2463 return 0;
2464}
2465
49092e22 2466static int link_set_ipv6_privacy_extensions(Link *link) {
1f0d9695 2467 IPv6PrivacyExtensions s;
49092e22
SS
2468 int r;
2469
1f0d9695 2470 s = link_ipv6_privacy_extensions(link);
66a6bd68 2471 if (s < 0)
49092e22
SS
2472 return 0;
2473
62e021a9 2474 r = sysctl_write_ip_property_int(AF_INET6, link->ifname, "use_tempaddr", (int) link->network->ipv6_privacy_extensions);
eb3da901 2475 if (r < 0)
49092e22
SS
2476 log_link_warning_errno(link, r, "Cannot configure IPv6 privacy extension for interface: %m");
2477
2478 return 0;
2479}
2480
4f2e437a 2481static int link_set_ipv6_accept_ra(Link *link) {
4f2e437a
SS
2482 int r;
2483
2484 /* Make this a NOP if IPv6 is not available */
2485 if (!socket_ipv6_is_supported())
2486 return 0;
2487
2488 if (link->flags & IFF_LOOPBACK)
2489 return 0;
2490
d68e2e59
LP
2491 if (!link->network)
2492 return 0;
2493
62e021a9 2494 r = sysctl_write_ip_property(AF_INET6, link->ifname, "accept_ra", "0");
eb3da901 2495 if (r < 0)
fe307276 2496 log_link_warning_errno(link, r, "Cannot disable kernel IPv6 accept_ra for interface: %m");
4f2e437a
SS
2497
2498 return 0;
2499}
2500
8749cbcd 2501static int link_set_ipv6_dad_transmits(Link *link) {
8749cbcd
SS
2502 int r;
2503
2504 /* Make this a NOP if IPv6 is not available */
2505 if (!socket_ipv6_is_supported())
2506 return 0;
2507
2508 if (link->flags & IFF_LOOPBACK)
2509 return 0;
2510
d68e2e59
LP
2511 if (!link->network)
2512 return 0;
2513
8749cbcd
SS
2514 if (link->network->ipv6_dad_transmits < 0)
2515 return 0;
2516
62e021a9 2517 r = sysctl_write_ip_property_int(AF_INET6, link->ifname, "dad_transmits", link->network->ipv6_dad_transmits);
eb3da901 2518 if (r < 0)
8749cbcd 2519 log_link_warning_errno(link, r, "Cannot set IPv6 dad transmits for interface: %m");
8749cbcd
SS
2520
2521 return 0;
2522}
2523
b69c3180 2524static int link_set_ipv6_hop_limit(Link *link) {
b69c3180
SS
2525 int r;
2526
2527 /* Make this a NOP if IPv6 is not available */
2528 if (!socket_ipv6_is_supported())
2529 return 0;
2530
2531 if (link->flags & IFF_LOOPBACK)
2532 return 0;
2533
d68e2e59
LP
2534 if (!link->network)
2535 return 0;
2536
b69c3180
SS
2537 if (link->network->ipv6_hop_limit < 0)
2538 return 0;
2539
62e021a9 2540 r = sysctl_write_ip_property_int(AF_INET6, link->ifname, "hop_limit", link->network->ipv6_hop_limit);
eb3da901 2541 if (r < 0)
b69c3180 2542 log_link_warning_errno(link, r, "Cannot set IPv6 hop limit for interface: %m");
b69c3180
SS
2543
2544 return 0;
2545}
2546
11102cba 2547static int link_set_ipv6_mtu(Link *link) {
11102cba
SS
2548 int r;
2549
2550 /* Make this a NOP if IPv6 is not available */
2551 if (!socket_ipv6_is_supported())
2552 return 0;
2553
2554 if (link->flags & IFF_LOOPBACK)
2555 return 0;
2556
2557 if (link->network->ipv6_mtu == 0)
2558 return 0;
2559
d236718c
DS
2560 /* IPv6 protocol requires a minimum MTU of IPV6_MTU_MIN(1280) bytes
2561 * on the interface. Bump up IPv6 MTU bytes to IPV6_MTU_MIN. */
2562 if (link->network->ipv6_mtu < IPV6_MIN_MTU) {
2563 log_link_notice(link, "Bumping IPv6 MTU to "STRINGIFY(IPV6_MIN_MTU)" byte minimum required");
2564 link->network->ipv6_mtu = IPV6_MIN_MTU;
2565 }
2566
62e021a9 2567 r = sysctl_write_ip_property_uint32(AF_INET6, link->ifname, "mtu", link->network->ipv6_mtu);
d236718c
DS
2568 if (r < 0) {
2569 if (link->mtu < link->network->ipv6_mtu)
2570 log_link_warning(link, "Cannot set IPv6 MTU %"PRIu32" higher than device MTU %"PRIu32,
2571 link->network->ipv6_mtu, link->mtu);
2572 else
2573 log_link_warning_errno(link, r, "Cannot set IPv6 MTU for interface: %m");
2574 }
2575
2576 link->ipv6_mtu_set = true;
11102cba
SS
2577
2578 return 0;
2579}
2580
94d76d07
YW
2581static int link_set_ipv4_accept_local(Link *link) {
2582 int r;
2583
2584 if (link->flags & IFF_LOOPBACK)
2585 return 0;
2586
2587 if (link->network->ipv4_accept_local < 0)
2588 return 0;
2589
2590 r = sysctl_write_ip_property_boolean(AF_INET, link->ifname, "accept_local", link->network->ipv4_accept_local);
2591 if (r < 0)
2592 log_link_warning_errno(link, r, "Cannot set IPv4 accept_local flag for interface: %m");
2593
2594 return 0;
2595}
2596
30226d27
TJ
2597static bool link_is_static_address_configured(Link *link, Address *address) {
2598 Address *net_address;
2599
2600 assert(link);
2601 assert(address);
2602
2603 if (!link->network)
2604 return false;
2605
2606 LIST_FOREACH(addresses, net_address, link->network->static_addresses)
2607 if (address_equal(net_address, address))
2608 return true;
6f5d73ab
YW
2609 else if (address->family == AF_INET6 && net_address->family == AF_INET6 &&
2610 in_addr_equal(AF_INET6, &address->in_addr, &net_address->in_addr_peer) > 0)
2611 return true;
30226d27
TJ
2612
2613 return false;
2614}
2615
d1bdafd2
WKI
2616static bool link_is_neighbor_configured(Link *link, Neighbor *neighbor) {
2617 Neighbor *net_neighbor;
2618
2619 assert(link);
2620 assert(neighbor);
2621
2622 if (!link->network)
2623 return false;
2624
2625 LIST_FOREACH(neighbors, net_neighbor, link->network->neighbors)
2626 if (neighbor_equal(net_neighbor, neighbor))
2627 return true;
2628
2629 return false;
2630}
2631
7ecf0c3e
TJ
2632static bool link_is_static_route_configured(Link *link, Route *route) {
2633 Route *net_route;
2634
2635 assert(link);
2636 assert(route);
2637
2638 if (!link->network)
2639 return false;
2640
2641 LIST_FOREACH(routes, net_route, link->network->static_routes)
2642 if (route_equal(net_route, route))
2643 return true;
2644
2645 return false;
2646}
2647
db51778f
YW
2648static bool link_address_is_dynamic(Link *link, Address *address) {
2649 Route *route;
2650 Iterator i;
2651
2652 assert(link);
2653 assert(address);
2654
2655 if (address->cinfo.ifa_prefered != CACHE_INFO_INFINITY_LIFE_TIME)
2656 return true;
2657
2658 /* Even when the address is leased from a DHCP server, networkd assign the address
2659 * without lifetime when KeepConfiguration=dhcp. So, let's check that we have
2660 * corresponding routes with RTPROT_DHCP. */
2661 SET_FOREACH(route, link->routes_foreign, i) {
2662 if (route->protocol != RTPROT_DHCP)
2663 continue;
2664
2665 if (address->family != route->family)
2666 continue;
2667
2668 if (in_addr_equal(address->family, &address->in_addr, &route->prefsrc))
2669 return true;
2670 }
2671
2672 return false;
2673}
2674
0917a271
DS
2675static int link_enumerate_ipv6_tentative_addresses(Link *link) {
2676 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL, *reply = NULL;
2677 sd_netlink_message *addr;
2678 int r;
2679
2680 assert(link);
2681 assert(link->manager);
2682 assert(link->manager->rtnl);
2683
2684 r = sd_rtnl_message_new_addr(link->manager->rtnl, &req, RTM_GETADDR, 0, AF_INET6);
2685 if (r < 0)
2686 return r;
2687
2688 r = sd_netlink_call(link->manager->rtnl, req, 0, &reply);
2689 if (r < 0)
2690 return r;
2691
2692 for (addr = reply; addr; addr = sd_netlink_message_next(addr)) {
2693 unsigned char flags;
2694 int ifindex;
2695
2696 r = sd_rtnl_message_addr_get_ifindex(addr, &ifindex);
2697 if (r < 0) {
2698 log_link_warning_errno(link, r, "rtnl: invalid ifindex, ignoring: %m");
2699 continue;
2700 } else if (link->ifindex != ifindex)
2701 continue;
2702
2703 r = sd_rtnl_message_addr_get_flags(addr, &flags);
2704 if (r < 0) {
2705 log_link_warning_errno(link, r, "rtnl: received address message with invalid flags, ignoring: %m");
2706 continue;
2707 } else if (!(flags & IFA_F_TENTATIVE))
2708 continue;
2709
2710 log_link_debug(link, "Found tentative ipv6 link-local address");
2711 (void) manager_rtnl_process_address(link->manager->rtnl, addr, link->manager);
2712 }
2713
2714 return 0;
2715}
2716
5e5b137a
TG
2717static int link_drop_foreign_config(Link *link) {
2718 Address *address;
d1bdafd2 2719 Neighbor *neighbor;
5e5b137a
TG
2720 Route *route;
2721 Iterator i;
2722 int r;
2723
0917a271
DS
2724 /* The kernel doesn't notify us about tentative addresses;
2725 * so if ipv6ll is disabled, we need to enumerate them now so we can drop them below */
2726 if (!link_ipv6ll_enabled(link)) {
2727 r = link_enumerate_ipv6_tentative_addresses(link);
2728 if (r < 0)
2729 return r;
2730 }
2731
5e5b137a 2732 SET_FOREACH(address, link->addresses_foreign, i) {
fe307276 2733 /* we consider IPv6LL addresses to be managed by the kernel */
5539fc0f 2734 if (address->family == AF_INET6 && in_addr_is_link_local(AF_INET6, &address->in_addr) == 1 && link_ipv6ll_enabled(link))
5e5b137a
TG
2735 continue;
2736
db51778f 2737 if (link_address_is_dynamic(link, address)) {
b1b0b42e 2738 if (link->network && FLAGS_SET(link->network->keep_configuration, KEEP_CONFIGURATION_DHCP))
db51778f 2739 continue;
b1b0b42e 2740 } else if (link->network && FLAGS_SET(link->network->keep_configuration, KEEP_CONFIGURATION_STATIC))
db51778f
YW
2741 continue;
2742
30226d27
TJ
2743 if (link_is_static_address_configured(link, address)) {
2744 r = address_add(link, address->family, &address->in_addr, address->prefixlen, NULL);
2745 if (r < 0)
2746 return log_link_error_errno(link, r, "Failed to add address: %m");
2747 } else {
63ae0569 2748 r = address_remove(address, link, NULL);
30226d27
TJ
2749 if (r < 0)
2750 return r;
2751 }
5e5b137a
TG
2752 }
2753
d1bdafd2
WKI
2754 SET_FOREACH(neighbor, link->neighbors_foreign, i) {
2755 if (link_is_neighbor_configured(link, neighbor)) {
2756 r = neighbor_add(link, neighbor->family, &neighbor->in_addr, &neighbor->lladdr, neighbor->lladdr_size, NULL);
2757 if (r < 0)
2758 return r;
2759 } else {
2760 r = neighbor_remove(neighbor, link, NULL);
2761 if (r < 0)
2762 return r;
2763 }
2764 }
2765
5e5b137a 2766 SET_FOREACH(route, link->routes_foreign, i) {
fe307276 2767 /* do not touch routes managed by the kernel */
5e5b137a
TG
2768 if (route->protocol == RTPROT_KERNEL)
2769 continue;
2770
bd7d6cec
YW
2771 /* do not touch multicast route added by kernel */
2772 /* FIXME: Why the kernel adds this route with protocol RTPROT_BOOT??? We need to investigate that.
2773 * https://tools.ietf.org/html/rfc4862#section-5.4 may explain why. */
2774 if (route->protocol == RTPROT_BOOT &&
2775 route->family == AF_INET6 &&
2776 route->dst_prefixlen == 8 &&
2777 in_addr_equal(AF_INET6, &route->dst, &(union in_addr_union) { .in6 = {{{ 0xff,0,0,0, 0,0,0,0, 0,0,0,0, 0,0,0,0 }}} }))
2778 continue;
2779
b1b0b42e 2780 if (route->protocol == RTPROT_STATIC && link->network &&
db51778f
YW
2781 FLAGS_SET(link->network->keep_configuration, KEEP_CONFIGURATION_STATIC))
2782 continue;
2783
b1b0b42e 2784 if (route->protocol == RTPROT_DHCP && link->network &&
db51778f
YW
2785 FLAGS_SET(link->network->keep_configuration, KEEP_CONFIGURATION_DHCP))
2786 continue;
2787
7ecf0c3e 2788 if (link_is_static_route_configured(link, route)) {
f1368755 2789 r = route_add(link, route, NULL);
7ecf0c3e
TJ
2790 if (r < 0)
2791 return r;
2792 } else {
4645ad47 2793 r = route_remove(route, link, NULL);
7ecf0c3e
TJ
2794 if (r < 0)
2795 return r;
2796 }
5e5b137a
TG
2797 }
2798
2799 return 0;
2800}
2801
3104883d 2802static int link_drop_config(Link *link) {
410a7f15 2803 Address *address, *pool_address;
d1bdafd2 2804 Neighbor *neighbor;
3104883d
SS
2805 Route *route;
2806 Iterator i;
2807 int r;
2808
2809 SET_FOREACH(address, link->addresses, i) {
2810 /* we consider IPv6LL addresses to be managed by the kernel */
5539fc0f 2811 if (address->family == AF_INET6 && in_addr_is_link_local(AF_INET6, &address->in_addr) == 1 && link_ipv6ll_enabled(link))
3104883d
SS
2812 continue;
2813
63ae0569 2814 r = address_remove(address, link, NULL);
3104883d
SS
2815 if (r < 0)
2816 return r;
410a7f15
RM
2817
2818 /* If this address came from an address pool, clean up the pool */
2819 LIST_FOREACH(addresses, pool_address, link->pool_addresses) {
2820 if (address_equal(address, pool_address)) {
2821 LIST_REMOVE(addresses, link->pool_addresses, pool_address);
2822 address_free(pool_address);
2823 break;
2824 }
2825 }
3104883d
SS
2826 }
2827
d1bdafd2
WKI
2828 SET_FOREACH(neighbor, link->neighbors, i) {
2829 r = neighbor_remove(neighbor, link, NULL);
2830 if (r < 0)
2831 return r;
2832 }
2833
3104883d
SS
2834 SET_FOREACH(route, link->routes, i) {
2835 /* do not touch routes managed by the kernel */
2836 if (route->protocol == RTPROT_KERNEL)
2837 continue;
2838
4645ad47 2839 r = route_remove(route, link, NULL);
3104883d
SS
2840 if (r < 0)
2841 return r;
2842 }
2843
c69305ff
LP
2844 ndisc_flush(link);
2845
3104883d
SS
2846 return 0;
2847}
2848
051e77ca
SS
2849static int link_configure_ipv4_dad(Link *link) {
2850 Address *address;
2851 int r;
2852
2853 assert(link);
2854 assert(link->network);
2855
2856 LIST_FOREACH(addresses, address, link->network->static_addresses)
2857 if (address->family == AF_INET &&
2858 FLAGS_SET(address->duplicate_address_detection, ADDRESS_FAMILY_IPV4)) {
2859 r = configure_ipv4_duplicate_address_detection(link, address);
2860 if (r < 0)
2861 return log_link_error_errno(link, r, "Failed to configure IPv4ACD: %m");
2862 }
2863
2864 return 0;
2865}
2866
34658df2
YW
2867static int link_configure_traffic_control(Link *link) {
2868 TrafficControl *tc;
0f5bd7fe 2869 Iterator i;
02b59d57
TG
2870 int r;
2871
34658df2
YW
2872 link->tc_configured = false;
2873 link->tc_messages = 0;
4ecdcb07 2874
34658df2
YW
2875 ORDERED_HASHMAP_FOREACH(tc, link->network->tc_by_section, i) {
2876 r = traffic_control_configure(link, tc);
4ecdcb07
YW
2877 if (r < 0)
2878 return r;
2879 }
2880
34658df2
YW
2881 if (link->tc_messages == 0)
2882 link->tc_configured = true;
4ecdcb07 2883 else
34658df2 2884 log_link_debug(link, "Configuring traffic control");
4ecdcb07
YW
2885
2886 return 0;
2887}
2888
518cd6b5
SS
2889static int link_configure_sr_iov(Link *link) {
2890 SRIOV *sr_iov;
2891 Iterator i;
2892 int r;
2893
2894 link->sr_iov_configured = false;
2895 link->sr_iov_messages = 0;
2896
2897 ORDERED_HASHMAP_FOREACH(sr_iov, link->network->sr_iov_by_section, i) {
2898 r = sr_iov_configure(link, sr_iov);
2899 if (r < 0)
2900 return r;
2901 }
2902
2903 if (link->sr_iov_messages == 0)
2904 link->sr_iov_configured = true;
2905 else
2906 log_link_debug(link, "Configuring SR-IOV");
2907
2908 return 0;
2909}
2910
4ecdcb07
YW
2911static int link_configure(Link *link) {
2912 int r;
2913
ef1ba606 2914 assert(link);
b22d8a00 2915 assert(link->network);
bd08ce56 2916 assert(link->state == LINK_STATE_INITIALIZED);
a748b692 2917
34658df2 2918 r = link_configure_traffic_control(link);
4ecdcb07
YW
2919 if (r < 0)
2920 return r;
2921
518cd6b5
SS
2922 r = link_configure_sr_iov(link);
2923 if (r < 0)
2924 return r;
2925
500b96eb 2926 if (link->iftype == ARPHRD_CAN)
93ea7750 2927 return link_configure_can(link);
92c918b0 2928
482efedc
SS
2929 /* If IPv6 configured that is static IPv6 address and IPv6LL autoconfiguration is enabled
2930 * for this interface, then enable IPv6 */
57ad7607 2931 (void) link_update_ipv6_sysctl(link);
482efedc 2932
23d8b221
SS
2933 r = link_set_proxy_arp(link);
2934 if (r < 0)
2935 return r;
2936
a0e5c15d
FK
2937 r = ipv6_proxy_ndp_addresses_configure(link);
2938 if (r < 0)
2939 return r;
2940
769d324c
LP
2941 r = link_set_ipv4_forward(link);
2942 if (r < 0)
2943 return r;
2944
2945 r = link_set_ipv6_forward(link);
5a8bcb67
LP
2946 if (r < 0)
2947 return r;
2948
49092e22
SS
2949 r = link_set_ipv6_privacy_extensions(link);
2950 if (r < 0)
2951 return r;
2952
4f2e437a
SS
2953 r = link_set_ipv6_accept_ra(link);
2954 if (r < 0)
2955 return r;
2956
8749cbcd
SS
2957 r = link_set_ipv6_dad_transmits(link);
2958 if (r < 0)
2959 return r;
b69c3180
SS
2960
2961 r = link_set_ipv6_hop_limit(link);
2962 if (r < 0)
2963 return r;
8749cbcd 2964
94d76d07
YW
2965 r = link_set_ipv4_accept_local(link);
2966 if (r < 0)
2967 return r;
2968
99d2baa2
SS
2969 r = link_set_flags(link);
2970 if (r < 0)
2971 return r;
2972
89fe6535
SS
2973 r = link_set_group(link);
2974 if (r < 0)
2975 return r;
2976
910feb78 2977 if (link_ipv4ll_enabled(link, ADDRESS_FAMILY_IPV4 | ADDRESS_FAMILY_FALLBACK_IPV4)) {
b22d8a00 2978 r = ipv4ll_configure(link);
eb34d4af
TG
2979 if (r < 0)
2980 return r;
2981 }
2982
78c958f8 2983 if (link_dhcp4_enabled(link)) {
64b21ece
MV
2984 r = dhcp4_set_promote_secondaries(link);
2985 if (r < 0)
2986 return r;
2987
3c9b8860 2988 r = dhcp4_configure(link);
eb34d4af
TG
2989 if (r < 0)
2990 return r;
eb34d4af
TG
2991 }
2992
78c958f8 2993 if (link_dhcp4_server_enabled(link)) {
dd43110f
TG
2994 r = sd_dhcp_server_new(&link->dhcp_server, link->ifindex);
2995 if (r < 0)
2996 return r;
2997
2998 r = sd_dhcp_server_attach_event(link->dhcp_server, NULL, 0);
2999 if (r < 0)
3000 return r;
dd43110f
TG
3001 }
3002
62379e88
TG
3003 if (link_dhcp6_enabled(link) ||
3004 link_ipv6_accept_ra_enabled(link)) {
f5a8c43f
TG
3005 r = dhcp6_configure(link);
3006 if (r < 0)
3007 return r;
3008 }
3009
3010 if (link_ipv6_accept_ra_enabled(link)) {
de1e9928 3011 r = ndisc_configure(link);
4138fb2c
PF
3012 if (r < 0)
3013 return r;
3014 }
3015
7465dd22
PF
3016 if (link_radv_enabled(link)) {
3017 r = radv_configure(link);
3018 if (r < 0)
3019 return r;
3020 }
3021
8e1ad1ea 3022 if (link_lldp_rx_enabled(link)) {
7f853950 3023 r = link_lldp_rx_configure(link);
273eec24
LP
3024 if (r < 0)
3025 return r;
ce43e484
SS
3026 }
3027
f6fcc1c2 3028 r = link_configure_mtu(link);
40288ece
YW
3029 if (r < 0)
3030 return r;
44b598a1 3031
9f6e82e6
YW
3032 r = link_configure_addrgen_mode(link);
3033 if (r < 0)
3034 return r;
0e2fdb83 3035
051e77ca
SS
3036 r = link_configure_ipv4_dad(link);
3037 if (r < 0)
3038 return r;
3039
3a390124
DS
3040 return link_configure_continue(link);
3041}
3042
3043/* The configuration continues in this separate function, instead of
3044 * including this in the above link_configure() function, for two
3045 * reasons:
3046 * 1) some devices reset the link when the mtu is set, which caused
3047 * an infinite loop here in networkd; see:
3048 * https://github.com/systemd/systemd/issues/6593
3049 * https://github.com/systemd/systemd/issues/9831
3050 * 2) if ipv6ll is disabled, then bringing the interface up must be
3051 * delayed until after we get confirmation from the kernel that
3052 * the addr_gen_mode parameter has been set (via netlink), see:
3053 * https://github.com/systemd/systemd/issues/13882
3054 */
3055static int link_configure_continue(Link *link) {
55dc8c4a
YW
3056 int r;
3057
3058 assert(link);
3059 assert(link->network);
bd08ce56 3060 assert(link->state == LINK_STATE_INITIALIZED);
55dc8c4a 3061
9524014e 3062 if (link->setting_mtu || link->setting_genmode)
55dc8c4a
YW
3063 return 0;
3064
4c649652
DS
3065 /* Drop foreign config, but ignore loopback or critical devices.
3066 * We do not want to remove loopback address or addresses used for root NFS. */
3067 if (!(link->flags & IFF_LOOPBACK) &&
3068 link->network->keep_configuration != KEEP_CONFIGURATION_YES) {
3069 r = link_drop_foreign_config(link);
3070 if (r < 0)
3071 return r;
3072 }
3073
d236718c
DS
3074 /* The kernel resets ipv6 mtu after changing device mtu;
3075 * we must set this here, after we've set device mtu */
3076 r = link_set_ipv6_mtu(link);
3077 if (r < 0)
3078 return r;
3079
dad2d78e 3080 if (link_has_carrier(link) || link->network->configure_without_carrier) {
1e9be60b
TG
3081 r = link_acquire_conf(link);
3082 if (r < 0)
3083 return r;
cc544d5f 3084 }
1e9be60b 3085
3f265037 3086 return link_enter_join_netdev(link);
505f8da7
TG
3087}
3088
27dfc982
YW
3089static int duid_set_uuid(DUID *duid, sd_id128_t uuid) {
3090 assert(duid);
3091
3092 if (duid->raw_data_len > 0)
3093 return 0;
3094
3095 if (duid->type != DUID_TYPE_UUID)
3096 return -EINVAL;
3097
3098 memcpy(&duid->raw_data, &uuid, sizeof(sd_id128_t));
3099 duid->raw_data_len = sizeof(sd_id128_t);
3100
3101 return 1;
3102}
3103
3104int get_product_uuid_handler(sd_bus_message *m, void *userdata, sd_bus_error *ret_error) {
3105 Manager *manager = userdata;
3106 const sd_bus_error *e;
3107 const void *a;
3108 size_t sz;
3109 DUID *duid;
3110 Link *link;
3111 int r;
3112
3113 assert(m);
3114 assert(manager);
3115
3116 e = sd_bus_message_get_error(m);
3117 if (e) {
3118 log_error_errno(sd_bus_error_get_errno(e),
ab4dd984 3119 "Could not get product UUID. Falling back to use machine-app-specific ID as DUID-UUID: %s",
27dfc982
YW
3120 e->message);
3121 goto configure;
3122 }
3123
3124 r = sd_bus_message_read_array(m, 'y', &a, &sz);
3125 if (r < 0)
3126 goto configure;
3127
3128 if (sz != sizeof(sd_id128_t)) {
ab4dd984 3129 log_error("Invalid product UUID. Falling back to use machine-app-specific ID as DUID-UUID.");
27dfc982
YW
3130 goto configure;
3131 }
3132
3133 memcpy(&manager->product_uuid, a, sz);
3134 while ((duid = set_steal_first(manager->duids_requesting_uuid)))
3135 (void) duid_set_uuid(duid, manager->product_uuid);
3136
3137 manager->duids_requesting_uuid = set_free(manager->duids_requesting_uuid);
3138
3139configure:
3140 while ((link = set_steal_first(manager->links_requesting_uuid))) {
3dc2e7af
YW
3141 link_unref(link);
3142
27dfc982
YW
3143 r = link_configure(link);
3144 if (r < 0)
4ff296b0 3145 link_enter_failed(link);
27dfc982
YW
3146 }
3147
3148 manager->links_requesting_uuid = set_free(manager->links_requesting_uuid);
3149
3150 /* To avoid calling GetProductUUID() bus method so frequently, set the flag below
3151 * even if the method fails. */
3152 manager->has_product_uuid = true;
3153
3154 return 1;
3155}
3156
3157static bool link_requires_uuid(Link *link) {
3158 const DUID *duid;
3159
3160 assert(link);
3161 assert(link->manager);
3162 assert(link->network);
3163
3164 duid = link_get_duid(link);
3165 if (duid->type != DUID_TYPE_UUID || duid->raw_data_len != 0)
3166 return false;
3167
3168 if (link_dhcp4_enabled(link) && IN_SET(link->network->dhcp_client_identifier, DHCP_CLIENT_ID_DUID, DHCP_CLIENT_ID_DUID_ONLY))
3169 return true;
3170
3171 if (link_dhcp6_enabled(link) || link_ipv6_accept_ra_enabled(link))
3172 return true;
3173
3174 return false;
3175}
3176
3177static int link_configure_duid(Link *link) {
3178 Manager *m;
3179 DUID *duid;
3180 int r;
3181
3182 assert(link);
3183 assert(link->manager);
3184 assert(link->network);
3185
3186 m = link->manager;
3187 duid = link_get_duid(link);
3188
3189 if (!link_requires_uuid(link))
3190 return 1;
3191
3192 if (m->has_product_uuid) {
3193 (void) duid_set_uuid(duid, m->product_uuid);
3194 return 1;
3195 }
3196
3197 if (!m->links_requesting_uuid) {
3198 r = manager_request_product_uuid(m, link);
3199 if (r < 0) {
3200 if (r == -ENOMEM)
3201 return r;
3202
ab4dd984
ZJS
3203 log_link_warning_errno(link, r,
3204 "Failed to get product UUID. Falling back to use machine-app-specific ID as DUID-UUID: %m");
27dfc982
YW
3205 return 1;
3206 }
3207 } else {
3208 r = set_put(m->links_requesting_uuid, link);
3209 if (r < 0)
3210 return log_oom();
39dbd0c7
ZJS
3211 if (r > 0)
3212 link_ref(link);
27dfc982
YW
3213
3214 r = set_put(m->duids_requesting_uuid, duid);
3215 if (r < 0)
3216 return log_oom();
3217 }
3218
3219 return 0;
3220}
3221
572b21d9 3222static int link_reconfigure_internal(Link *link, sd_netlink_message *m, bool force) {
ad932b15
YW
3223 Network *network;
3224 int r;
3225
572b21d9
YW
3226 if (m) {
3227 _cleanup_strv_free_ char **s = NULL;
3228
3229 r = sd_netlink_message_get_errno(m);
3230 if (r < 0)
3231 return r;
3232
3233 r = sd_netlink_message_read_strv(m, IFLA_PROP_LIST, IFLA_ALT_IFNAME, &s);
3234 if (r < 0 && r != -ENODATA)
3235 return r;
3236
3237 strv_free_and_replace(link->alternative_names, s);
3238 }
3239
c643bda5
YW
3240 r = network_get(link->manager, link->iftype, link->sd_device,
3241 link->ifname, link->alternative_names, link->driver,
3242 &link->mac, &link->permanent_mac,
3243 link->wlan_iftype, link->ssid, &link->bssid, &network);
ad932b15
YW
3244 if (r == -ENOENT) {
3245 link_enter_unmanaged(link);
3246 return 0;
3247 } else if (r == 0 && network->unmanaged) {
3248 link_enter_unmanaged(link);
3249 return 0;
3250 } else if (r < 0)
3251 return r;
3252
99b8517c 3253 if (link->network == network && !force)
ad932b15
YW
3254 return 0;
3255
3256 log_link_info(link, "Re-configuring with %s", network->filename);
3257
3258 /* Dropping old .network file */
3259 r = link_stop_clients(link, false);
572b21d9 3260 if (r < 0)
ad932b15 3261 return r;
ad932b15
YW
3262
3263 if (link_dhcp4_server_enabled(link))
3264 (void) sd_dhcp_server_stop(link->dhcp_server);
3265
3266 r = link_drop_config(link);
3267 if (r < 0)
3268 return r;
3269
2c7b826d 3270 if (!IN_SET(link->state, LINK_STATE_UNMANAGED, LINK_STATE_PENDING, LINK_STATE_INITIALIZED)) {
ad932b15
YW
3271 log_link_debug(link, "State is %s, dropping config", link_state_to_string(link->state));
3272 r = link_drop_foreign_config(link);
3273 if (r < 0)
3274 return r;
3275 }
3276
3277 link_free_carrier_maps(link);
3278 link_free_engines(link);
3279 link->network = network_unref(link->network);
3280
3281 /* Then, apply new .network file */
3282 r = network_apply(network, link);
3283 if (r < 0)
3284 return r;
3285
3286 r = link_new_carrier_maps(link);
3287 if (r < 0)
3288 return r;
3289
3290 link_set_state(link, LINK_STATE_INITIALIZED);
8ae7b8a1 3291 link_dirty(link);
ad932b15
YW
3292
3293 /* link_configure_duid() returns 0 if it requests product UUID. In that case,
3294 * link_configure() is called later asynchronously. */
3295 r = link_configure_duid(link);
3296 if (r <= 0)
3297 return r;
3298
3299 r = link_configure(link);
3300 if (r < 0)
3301 return r;
3302
3303 return 0;
3304}
3305
572b21d9
YW
3306static int link_reconfigure_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
3307 int r;
3308
3309 r = link_reconfigure_internal(link, m, false);
3310 if (r < 0)
3311 link_enter_failed(link);
3312
3313 return 1;
3314}
3315
3316static int link_force_reconfigure_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
3317 int r;
3318
3319 r = link_reconfigure_internal(link, m, true);
3320 if (r < 0)
3321 link_enter_failed(link);
3322
3323 return 1;
3324}
3325
3326int link_reconfigure(Link *link, bool force) {
3327 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
3328 int r;
3329
2c0d7ed3
YW
3330 if (IN_SET(link->state, LINK_STATE_PENDING, LINK_STATE_LINGER))
3331 return 0;
3332
572b21d9
YW
3333 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_GETLINK,
3334 link->ifindex);
3335 if (r < 0)
3336 return r;
3337
3338 r = netlink_call_async(link->manager->rtnl, NULL, req,
3339 force ? link_force_reconfigure_handler : link_reconfigure_handler,
3340 link_netlink_destroy_callback, link);
3341 if (r < 0)
3342 return r;
3343
3344 link_ref(link);
3345
3346 return 0;
3347}
3348
e6bf7774 3349static int link_initialized_and_synced(Link *link) {
505f8da7 3350 Network *network;
505f8da7
TG
3351 int r;
3352
3353 assert(link);
3354 assert(link->ifname);
3355 assert(link->manager);
3356
bd08ce56
YW
3357 /* We may get called either from the asynchronous netlink callback,
3358 * or directly for link_add() if running in a container. See link_add(). */
3359 if (!IN_SET(link->state, LINK_STATE_PENDING, LINK_STATE_INITIALIZED))
4232cf04 3360 return 0;
505f8da7 3361
6a7a4e4d 3362 log_link_debug(link, "Link state is up-to-date");
bd08ce56 3363 link_set_state(link, LINK_STATE_INITIALIZED);
505f8da7 3364
0d4ad91d
AR
3365 r = link_new_bound_by_list(link);
3366 if (r < 0)
3367 return r;
3368
3369 r = link_handle_bound_by_list(link);
3370 if (r < 0)
3371 return r;
3372
c4a03a56 3373 if (!link->network) {
0894cfe4 3374 r = wifi_get_info(link);
8d968fdd
YW
3375 if (r < 0)
3376 return r;
3377
c643bda5
YW
3378 r = network_get(link->manager, link->iftype, link->sd_device,
3379 link->ifname, link->alternative_names, link->driver,
3380 &link->mac, &link->permanent_mac,
3381 link->wlan_iftype, link->ssid, &link->bssid, &network);
c4a03a56
TG
3382 if (r == -ENOENT) {
3383 link_enter_unmanaged(link);
4232cf04 3384 return 0;
a09dc546
DM
3385 } else if (r == 0 && network->unmanaged) {
3386 link_enter_unmanaged(link);
3387 return 0;
c4a03a56
TG
3388 } else if (r < 0)
3389 return r;
505f8da7 3390
c4a03a56
TG
3391 if (link->flags & IFF_LOOPBACK) {
3392 if (network->link_local != ADDRESS_FAMILY_NO)
3393 log_link_debug(link, "Ignoring link-local autoconfiguration for loopback link");
78c958f8 3394
c4a03a56
TG
3395 if (network->dhcp != ADDRESS_FAMILY_NO)
3396 log_link_debug(link, "Ignoring DHCP clients for loopback link");
78c958f8 3397
c4a03a56
TG
3398 if (network->dhcp_server)
3399 log_link_debug(link, "Ignoring DHCP server for loopback link");
3400 }
bd2efe92 3401
7d342c03 3402 r = network_apply(network, link);
c4a03a56
TG
3403 if (r < 0)
3404 return r;
3405 }
505f8da7 3406
0d4ad91d
AR
3407 r = link_new_bound_to_list(link);
3408 if (r < 0)
3409 return r;
3410
27dfc982
YW
3411 /* link_configure_duid() returns 0 if it requests product UUID. In that case,
3412 * link_configure() is called later asynchronously. */
3413 r = link_configure_duid(link);
3414 if (r <= 0)
3415 return r;
3416
a748b692
TG
3417 r = link_configure(link);
3418 if (r < 0)
3419 return r;
3420
4232cf04 3421 return 0;
505f8da7
TG
3422}
3423
302a796f 3424static int link_initialized_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
572b21d9 3425 _cleanup_strv_free_ char **s = NULL;
4ff296b0
YW
3426 int r;
3427
572b21d9
YW
3428 r = sd_netlink_message_get_errno(m);
3429 if (r < 0) {
40681e5c 3430 log_link_warning_errno(link, r, "Failed to wait for the interface to be initialized: %m");
572b21d9
YW
3431 link_enter_failed(link);
3432 return 0;
3433 }
3434
3435 r = sd_netlink_message_read_strv(m, IFLA_PROP_LIST, IFLA_ALT_IFNAME, &s);
3436 if (r < 0 && r != -ENODATA) {
3437 link_enter_failed(link);
3438 return 0;
3439 }
3440
3441 strv_free_and_replace(link->alternative_names, s);
3442
4ff296b0
YW
3443 r = link_initialized_and_synced(link);
3444 if (r < 0)
3445 link_enter_failed(link);
e6bf7774
YW
3446 return 1;
3447}
3448
51517f9e 3449int link_initialized(Link *link, sd_device *device) {
4afd3348 3450 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
4f561e8e
TG
3451 int r;
3452
3453 assert(link);
3454 assert(link->manager);
3455 assert(link->manager->rtnl);
3456 assert(device);
3457
8434fd5c 3458 if (link->state != LINK_STATE_PENDING)
4f561e8e
TG
3459 return 0;
3460
51517f9e 3461 if (link->sd_device)
679b3605
TG
3462 return 0;
3463
79008bdd 3464 log_link_debug(link, "udev initialized link");
bd08ce56 3465 link_set_state(link, LINK_STATE_INITIALIZED);
4f561e8e 3466
51517f9e 3467 link->sd_device = sd_device_ref(device);
4f561e8e 3468
3c9b8860
TG
3469 /* udev has initialized the link, but we don't know if we have yet
3470 * processed the NEWLINK messages with the latest state. Do a GETLINK,
3471 * when it returns we know that the pending NEWLINKs have already been
3472 * processed and that we are up-to-date */
4f561e8e 3473
3c9b8860
TG
3474 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_GETLINK,
3475 link->ifindex);
4f561e8e
TG
3476 if (r < 0)
3477 return r;
3478
302a796f
YW
3479 r = netlink_call_async(link->manager->rtnl, NULL, req, link_initialized_handler,
3480 link_netlink_destroy_callback, link);
4f561e8e
TG
3481 if (r < 0)
3482 return r;
3483
5da8149f
TG
3484 link_ref(link);
3485
4f561e8e
TG
3486 return 0;
3487}
3488
c4a03a56 3489static int link_load(Link *link) {
0bc70f1d
TG
3490 _cleanup_free_ char *network_file = NULL,
3491 *addresses = NULL,
f703cc2c 3492 *routes = NULL,
0bc70f1d
TG
3493 *dhcp4_address = NULL,
3494 *ipv4ll_address = NULL;
3495 union in_addr_union address;
c4a03a56
TG
3496 int r;
3497
3498 assert(link);
3499
aa8fbc74 3500 r = parse_env_file(NULL, link->state_file,
c4a03a56
TG
3501 "NETWORK_FILE", &network_file,
3502 "ADDRESSES", &addresses,
f703cc2c 3503 "ROUTES", &routes,
0bc70f1d 3504 "DHCP4_ADDRESS", &dhcp4_address,
13df9c39 3505 "IPV4LL_ADDRESS", &ipv4ll_address);
c4a03a56
TG
3506 if (r < 0 && r != -ENOENT)
3507 return log_link_error_errno(link, r, "Failed to read %s: %m", link->state_file);
3508
3509 if (network_file) {
3510 Network *network;
3511 char *suffix;
3512
3513 /* drop suffix */
3514 suffix = strrchr(network_file, '.');
3515 if (!suffix) {
3516 log_link_debug(link, "Failed to get network name from %s", network_file);
3517 goto network_file_fail;
3518 }
3519 *suffix = '\0';
3520
3521 r = network_get_by_name(link->manager, basename(network_file), &network);
3522 if (r < 0) {
3523 log_link_debug_errno(link, r, "Failed to get network %s: %m", basename(network_file));
3524 goto network_file_fail;
3525 }
3526
7d342c03 3527 r = network_apply(network, link);
c4a03a56
TG
3528 if (r < 0)
3529 return log_link_error_errno(link, r, "Failed to apply network %s: %m", basename(network_file));
3530 }
3531
3532network_file_fail:
3533
1f68f772
ZJS
3534 for (const char *p = addresses; p; ) {
3535 _cleanup_free_ char *address_str = NULL;
3536 char *prefixlen_str;
3537 int family;
3538 unsigned char prefixlen;
c4a03a56 3539
1f68f772
ZJS
3540 r = extract_first_word(&p, &address_str, NULL, 0);
3541 if (r < 0)
3542 log_link_warning_errno(link, r, "failed to parse ADDRESSES: %m");
3543 if (r <= 0)
3544 break;
c4a03a56 3545
1f68f772
ZJS
3546 prefixlen_str = strchr(address_str, '/');
3547 if (!prefixlen_str) {
3548 log_link_debug(link, "Failed to parse address and prefix length %s", address_str);
3549 continue;
3550 }
3551 *prefixlen_str++ = '\0';
c4a03a56 3552
1f68f772
ZJS
3553 r = sscanf(prefixlen_str, "%hhu", &prefixlen);
3554 if (r != 1) {
3555 log_link_error(link, "Failed to parse prefixlen %s", prefixlen_str);
3556 continue;
3557 }
c4a03a56 3558
1f68f772
ZJS
3559 r = in_addr_from_string_auto(address_str, &family, &address);
3560 if (r < 0) {
3561 log_link_debug_errno(link, r, "Failed to parse address %s: %m", address_str);
3562 continue;
c4a03a56 3563 }
c4a03a56 3564
1f68f772
ZJS
3565 r = address_add(link, family, &address, prefixlen, NULL);
3566 if (r < 0)
3567 return log_link_error_errno(link, r, "Failed to add address: %m");
3568 }
74544b4e 3569
1f68f772
ZJS
3570 for (const char *p = routes; p; ) {
3571 _cleanup_(sd_event_source_unrefp) sd_event_source *expire = NULL;
3572 _cleanup_(route_freep) Route *tmp = NULL;
3573 _cleanup_free_ char *route_str = NULL;
3574 char *prefixlen_str;
3575 Route *route;
f703cc2c 3576
1f68f772
ZJS
3577 r = extract_first_word(&p, &route_str, NULL, 0);
3578 if (r < 0)
3579 log_link_debug_errno(link, r, "failed to parse ROUTES: %m");
3580 if (r <= 0)
3581 break;
c598ac76 3582
1f68f772
ZJS
3583 prefixlen_str = strchr(route_str, '/');
3584 if (!prefixlen_str) {
3585 log_link_debug(link, "Failed to parse route %s", route_str);
3586 continue;
3587 }
3588 *prefixlen_str++ = '\0';
f703cc2c 3589
1f68f772
ZJS
3590 r = route_new(&tmp);
3591 if (r < 0)
3592 return log_oom();
f703cc2c 3593
1f68f772
ZJS
3594 r = sscanf(prefixlen_str,
3595 "%hhu/%hhu/%"SCNu32"/%"PRIu32"/"USEC_FMT,
3596 &tmp->dst_prefixlen,
3597 &tmp->tos,
3598 &tmp->priority,
3599 &tmp->table,
3600 &tmp->lifetime);
3601 if (r != 5) {
3602 log_link_debug(link,
3603 "Failed to parse destination prefix length, tos, priority, table or expiration %s",
3604 prefixlen_str);
3605 continue;
3606 }
f1368755 3607
1f68f772
ZJS
3608 r = in_addr_from_string_auto(route_str, &tmp->family, &tmp->dst);
3609 if (r < 0) {
3610 log_link_debug_errno(link, r, "Failed to parse route destination %s: %m", route_str);
3611 continue;
3612 }
f703cc2c 3613
1f68f772
ZJS
3614 r = route_add(link, tmp, &route);
3615 if (r < 0)
3616 return log_link_error_errno(link, r, "Failed to add route: %m");
f703cc2c 3617
1f68f772
ZJS
3618 if (route->lifetime != USEC_INFINITY && !kernel_route_expiration_supported()) {
3619 r = sd_event_add_time(link->manager->event, &expire,
3620 clock_boottime_or_monotonic(),
3621 route->lifetime, 0, route_expire_handler, route);
f703cc2c 3622 if (r < 0)
1f68f772 3623 log_link_warning_errno(link, r, "Could not arm route expiration handler: %m");
f703cc2c 3624 }
1f68f772
ZJS
3625
3626 sd_event_source_unref(route->expire);
3627 route->expire = TAKE_PTR(expire);
f703cc2c
TG
3628 }
3629
0bc70f1d
TG
3630 if (dhcp4_address) {
3631 r = in_addr_from_string(AF_INET, dhcp4_address, &address);
3632 if (r < 0) {
b68d26b8 3633 log_link_debug_errno(link, r, "Failed to parse DHCPv4 address %s: %m", dhcp4_address);
0bc70f1d
TG
3634 goto dhcp4_address_fail;
3635 }
3636
b1c626f6 3637 r = sd_dhcp_client_new(&link->dhcp_client, link->network ? link->network->dhcp_anonymize : 0);
0bc70f1d 3638 if (r < 0)
b68d26b8 3639 return log_link_error_errno(link, r, "Failed to create DHCPv4 client: %m");
0bc70f1d 3640
1b43e246
DS
3641 r = sd_dhcp_client_attach_event(link->dhcp_client, NULL, 0);
3642 if (r < 0)
3643 return log_link_error_errno(link, r, "Failed to attach DHCPv4 event: %m");
3644
0bc70f1d
TG
3645 r = sd_dhcp_client_set_request_address(link->dhcp_client, &address.in);
3646 if (r < 0)
b68d26b8 3647 return log_link_error_errno(link, r, "Failed to set initial DHCPv4 address %s: %m", dhcp4_address);
0bc70f1d
TG
3648 }
3649
3650dhcp4_address_fail:
3651
3652 if (ipv4ll_address) {
3653 r = in_addr_from_string(AF_INET, ipv4ll_address, &address);
3654 if (r < 0) {
b68d26b8 3655 log_link_debug_errno(link, r, "Failed to parse IPv4LL address %s: %m", ipv4ll_address);
0bc70f1d
TG
3656 goto ipv4ll_address_fail;
3657 }
3658
3659 r = sd_ipv4ll_new(&link->ipv4ll);
3660 if (r < 0)
b68d26b8 3661 return log_link_error_errno(link, r, "Failed to create IPv4LL client: %m");
0bc70f1d 3662
1b43e246
DS
3663 r = sd_ipv4ll_attach_event(link->ipv4ll, NULL, 0);
3664 if (r < 0)
3665 return log_link_error_errno(link, r, "Failed to attach IPv4LL event: %m");
3666
0bc70f1d
TG
3667 r = sd_ipv4ll_set_address(link->ipv4ll, &address.in);
3668 if (r < 0)
b68d26b8 3669 return log_link_error_errno(link, r, "Failed to set initial IPv4LL address %s: %m", ipv4ll_address);
0bc70f1d
TG
3670 }
3671
3672ipv4ll_address_fail:
3673
c4a03a56
TG
3674 return 0;
3675}
3676
1c4baffc 3677int link_add(Manager *m, sd_netlink_message *message, Link **ret) {
51517f9e 3678 _cleanup_(sd_device_unrefp) sd_device *device = NULL;
505f8da7 3679 char ifindex_str[2 + DECIMAL_STR_MAX(int)];
51517f9e 3680 Link *link;
5a937ea2 3681 int r;
505f8da7
TG
3682
3683 assert(m);
fbbeb65a 3684 assert(m->rtnl);
505f8da7
TG
3685 assert(message);
3686 assert(ret);
3687
3688 r = link_new(m, message, ret);
3689 if (r < 0)
3690 return r;
3691
3692 link = *ret;
3693
6a7a4e4d 3694 log_link_debug(link, "Link %d added", link->ifindex);
505f8da7 3695
c4a03a56
TG
3696 r = link_load(link);
3697 if (r < 0)
3698 return r;
3699
bf331d87
YW
3700 if (path_is_read_only_fs("/sys") <= 0) {
3701 /* udev should be around */
ae06ab10 3702 sprintf(ifindex_str, "n%d", link->ifindex);
51517f9e
YW
3703 r = sd_device_new_from_device_id(&device, ifindex_str);
3704 if (r < 0) {
4d59e14f
YW
3705 log_link_warning_errno(link, r, "Could not find device, waiting for device initialization: %m");
3706 return 0;
5c416fc4 3707 }
505f8da7 3708
5a937ea2 3709 r = sd_device_get_is_initialized(device);
51517f9e 3710 if (r < 0) {
bf331d87 3711 log_link_warning_errno(link, r, "Could not determine whether the device is initialized: %m");
51517f9e
YW
3712 goto failed;
3713 }
5a937ea2 3714 if (r == 0) {
505f8da7 3715 /* not yet ready */
79008bdd 3716 log_link_debug(link, "link pending udev initialization...");
505f8da7 3717 return 0;
3c4cb064 3718 }
505f8da7 3719
299ad32d
YW
3720 r = device_is_renaming(device);
3721 if (r < 0) {
bf331d87 3722 log_link_warning_errno(link, r, "Failed to determine the device is being renamed: %m");
299ad32d
YW
3723 goto failed;
3724 }
3725 if (r > 0) {
bf331d87 3726 log_link_debug(link, "Interface is being renamed, pending initialization.");
299ad32d
YW
3727 return 0;
3728 }
3729
4f561e8e
TG
3730 r = link_initialized(link, device);
3731 if (r < 0)
5c416fc4 3732 goto failed;
4f561e8e 3733 } else {
e6bf7774 3734 r = link_initialized_and_synced(link);
4f561e8e 3735 if (r < 0)
5c416fc4 3736 goto failed;
4f561e8e 3737 }
505f8da7 3738
a748b692 3739 return 0;
5c416fc4
TG
3740failed:
3741 link_enter_failed(link);
3742 return r;
a748b692
TG
3743}
3744
c601ebf7 3745int link_ipv6ll_gained(Link *link, const struct in6_addr *address) {
e7ab854c
TG
3746 int r;
3747
3748 assert(link);
3749
3750 log_link_info(link, "Gained IPv6LL");
3751
c601ebf7 3752 link->ipv6ll_address = *address;
e7ab854c
TG
3753 link_check_ready(link);
3754
b9ea3d2e 3755 if (IN_SET(link->state, LINK_STATE_CONFIGURING, LINK_STATE_CONFIGURED)) {
e7ab854c
TG
3756 r = link_acquire_ipv6_conf(link);
3757 if (r < 0) {
3758 link_enter_failed(link);
3759 return r;
3760 }
3761 }
3762
3763 return 0;
3764}
3765
9c0a72f9
TG
3766static int link_carrier_gained(Link *link) {
3767 int r;
3768
3769 assert(link);
3770
0894cfe4 3771 r = wifi_get_info(link);
8d968fdd
YW
3772 if (r < 0)
3773 return r;
3774 if (r > 0) {
572b21d9
YW
3775 r = link_reconfigure_internal(link, NULL, false);
3776 if (r < 0) {
3777 link_enter_failed(link);
8d968fdd 3778 return r;
572b21d9 3779 }
8d968fdd
YW
3780 }
3781
b9ea3d2e 3782 if (IN_SET(link->state, LINK_STATE_CONFIGURING, LINK_STATE_CONFIGURED)) {
9c0a72f9
TG
3783 r = link_acquire_conf(link);
3784 if (r < 0) {
3785 link_enter_failed(link);
3786 return r;
3787 }
6fc25497 3788
b425c3ae 3789 link_set_state(link, LINK_STATE_CONFIGURING);
289e6774 3790 r = link_request_set_addresses(link);
6fc25497
SS
3791 if (r < 0)
3792 return r;
9c0a72f9
TG
3793 }
3794
0d4ad91d
AR
3795 r = link_handle_bound_by_list(link);
3796 if (r < 0)
3797 return r;
3798
9c0a72f9
TG
3799 return 0;
3800}
3801
3802static int link_carrier_lost(Link *link) {
3803 int r;
3804
3805 assert(link);
3806
25e992ba 3807 if (link->network && link->network->ignore_carrier_loss)
93b4dab5
SS
3808 return 0;
3809
fbdb6605 3810 /* Some devices reset itself while setting the MTU. This causes the DHCP client fall into a loop.
55dc8c4a
YW
3811 * setting_mtu keep track whether the device got reset because of setting MTU and does not drop the
3812 * configuration and stop the clients as well. */
97e7fb39
SS
3813 if (link->setting_mtu)
3814 return 0;
3815
95355a28 3816 r = link_stop_clients(link, false);
9c0a72f9
TG
3817 if (r < 0) {
3818 link_enter_failed(link);
3819 return r;
3820 }
3821
28464ae0
SS
3822 if (link_dhcp4_server_enabled(link))
3823 (void) sd_dhcp_server_stop(link->dhcp_server);
45a9eac9 3824
3104883d
SS
3825 r = link_drop_config(link);
3826 if (r < 0)
3827 return r;
3828
2c7b826d 3829 if (!IN_SET(link->state, LINK_STATE_UNMANAGED, LINK_STATE_PENDING, LINK_STATE_INITIALIZED)) {
f258e948 3830 log_link_debug(link, "State is %s, dropping config", link_state_to_string(link->state));
c436d553
MM
3831 r = link_drop_foreign_config(link);
3832 if (r < 0)
3833 return r;
3834 }
3104883d 3835
0d4ad91d
AR
3836 r = link_handle_bound_by_list(link);
3837 if (r < 0)
3838 return r;
3839
9c0a72f9
TG
3840 return 0;
3841}
3842
3843int link_carrier_reset(Link *link) {
3844 int r;
3845
3846 assert(link);
3847
3848 if (link_has_carrier(link)) {
3849 r = link_carrier_lost(link);
3850 if (r < 0)
3851 return r;
3852
3853 r = link_carrier_gained(link);
3854 if (r < 0)
3855 return r;
3856
6a7a4e4d 3857 log_link_info(link, "Reset carrier");
9c0a72f9
TG
3858 }
3859
3860 return 0;
3861}
3862
d236718c
DS
3863/* This is called every time an interface admin state changes to up;
3864 * specifically, when IFF_UP flag changes from unset to set */
3865static int link_admin_state_up(Link *link) {
3866 int r;
3867
3868 /* We set the ipv6 mtu after the device mtu, but the kernel resets
3869 * ipv6 mtu on NETDEV_UP, so we need to reset it. The check for
3870 * ipv6_mtu_set prevents this from trying to set it too early before
3871 * the link->network has been setup; we only need to reset it
3872 * here if we've already set it during normal initialization. */
3873 if (link->ipv6_mtu_set) {
3874 r = link_set_ipv6_mtu(link);
3875 if (r < 0)
3876 return r;
3877 }
3878
3879 return 0;
3880}
3881
1c4baffc 3882int link_update(Link *link, sd_netlink_message *m) {
572b21d9 3883 _cleanup_strv_free_ char **s = NULL;
c49b33ac 3884 struct ether_addr mac;
ca4e095a 3885 const char *ifname;
afe7fd56 3886 uint32_t mtu;
d236718c 3887 bool had_carrier, carrier_gained, carrier_lost, link_was_admin_up;
bb262ef0 3888 int old_master, r;
22936833 3889
dd3efc09 3890 assert(link);
b8941f74 3891 assert(link->ifname);
22936833
TG
3892 assert(m);
3893
7619683b 3894 if (link->state == LINK_STATE_LINGER) {
5238e957 3895 log_link_info(link, "Link re-added");
289e6774 3896 link_set_state(link, LINK_STATE_CONFIGURING);
0d4ad91d
AR
3897
3898 r = link_new_carrier_maps(link);
3899 if (r < 0)
3900 return r;
7619683b
TG
3901 }
3902
1c4baffc 3903 r = sd_netlink_message_read_string(m, IFLA_IFNAME, &ifname);
b8941f74 3904 if (r >= 0 && !streq(ifname, link->ifname)) {
30de2b89 3905 Manager *manager = link->manager;
b8941f74 3906
30de2b89 3907 log_link_info(link, "Interface name change detected, %s has been renamed to %s.", link->ifname, ifname);
0d4ad91d 3908
30de2b89
YW
3909 link_drop(link);
3910 r = link_add(manager, m, &link);
3911 if (r < 0)
3912 return r;
b8941f74
TG
3913 }
3914
572b21d9
YW
3915 r = sd_netlink_message_read_strv(m, IFLA_PROP_LIST, IFLA_ALT_IFNAME, &s);
3916 if (r >= 0)
3917 strv_free_and_replace(link->alternative_names, s);
3918
1c4baffc 3919 r = sd_netlink_message_read_u32(m, IFLA_MTU, &mtu);
afe7fd56
TG
3920 if (r >= 0 && mtu > 0) {
3921 link->mtu = mtu;
4e964aa0 3922 if (link->original_mtu == 0) {
afe7fd56 3923 link->original_mtu = mtu;
6a7a4e4d 3924 log_link_debug(link, "Saved original MTU: %" PRIu32, link->original_mtu);
afe7fd56
TG
3925 }
3926
3927 if (link->dhcp_client) {
3c9b8860
TG
3928 r = sd_dhcp_client_set_mtu(link->dhcp_client,
3929 link->mtu);
fc95c359
YW
3930 if (r < 0)
3931 return log_link_warning_errno(link, r, "Could not update MTU in DHCP client: %m");
afe7fd56 3932 }
7465dd22
PF
3933
3934 if (link->radv) {
3935 r = sd_radv_set_mtu(link->radv, link->mtu);
3936 if (r < 0)
3937 return log_link_warning_errno(link, r, "Could not set MTU for Router Advertisement: %m");
3938 }
9842de0d 3939 }
69629de9 3940
e9189a1f
TG
3941 /* The kernel may broadcast NEWLINK messages without the MAC address
3942 set, simply ignore them. */
1c4baffc 3943 r = sd_netlink_message_read_ether_addr(m, IFLA_ADDRESS, &mac);
807667f7
YW
3944 if (r >= 0 && memcmp(link->mac.ether_addr_octet, mac.ether_addr_octet, ETH_ALEN) != 0) {
3945
3946 memcpy(link->mac.ether_addr_octet, mac.ether_addr_octet, ETH_ALEN);
3947
3948 log_link_debug(link, "Gained new MAC address: "
3949 "%02hhx:%02hhx:%02hhx:%02hhx:%02hhx:%02hhx",
3950 mac.ether_addr_octet[0],
3951 mac.ether_addr_octet[1],
3952 mac.ether_addr_octet[2],
3953 mac.ether_addr_octet[3],
3954 mac.ether_addr_octet[4],
3955 mac.ether_addr_octet[5]);
3956
3957 if (link->ipv4ll) {
3958 bool restart = sd_ipv4ll_is_running(link->ipv4ll) > 0;
3959
3960 if (restart) {
3961 r = sd_ipv4ll_stop(link->ipv4ll);
6a7a4e4d 3962 if (r < 0)
807667f7 3963 return log_link_warning_errno(link, r, "Could not stop IPv4LL client: %m");
c49b33ac 3964 }
c49b33ac 3965
807667f7
YW
3966 r = sd_ipv4ll_set_mac(link->ipv4ll, &link->mac);
3967 if (r < 0)
3968 return log_link_warning_errno(link, r, "Could not update MAC address in IPv4LL client: %m");
3969
3970 if (restart) {
3971 r = sd_ipv4ll_start(link->ipv4ll);
6a7a4e4d 3972 if (r < 0)
807667f7
YW
3973 return log_link_warning_errno(link, r, "Could not restart IPv4LL client: %m");
3974 }
3975 }
3976
3977 if (link->dhcp_client) {
3978 r = sd_dhcp_client_set_mac(link->dhcp_client,
3979 (const uint8_t *) &link->mac,
3980 sizeof (link->mac),
3981 ARPHRD_ETHER);
3982 if (r < 0)
3983 return log_link_warning_errno(link, r, "Could not update MAC address in DHCP client: %m");
3984
3985 r = dhcp4_set_client_identifier(link);
3986 if (r < 0)
3987 return log_link_warning_errno(link, r, "Could not set DHCP client identifier: %m");
3988 }
413708d1 3989
807667f7
YW
3990 if (link->dhcp6_client) {
3991 const DUID* duid = link_get_duid(link);
3992 bool restart = sd_dhcp6_client_is_running(link->dhcp6_client) > 0;
3993
3994 if (restart) {
3995 r = sd_dhcp6_client_stop(link->dhcp6_client);
fff1f40c 3996 if (r < 0)
807667f7 3997 return log_link_warning_errno(link, r, "Could not stop DHCPv6 client: %m");
c49b33ac 3998 }
4138fb2c 3999
807667f7
YW
4000 r = sd_dhcp6_client_set_mac(link->dhcp6_client,
4001 (const uint8_t *) &link->mac,
4002 sizeof (link->mac),
4003 ARPHRD_ETHER);
4004 if (r < 0)
4005 return log_link_warning_errno(link, r, "Could not update MAC address in DHCPv6 client: %m");
8341a5c3 4006
807667f7
YW
4007 if (link->network->iaid_set) {
4008 r = sd_dhcp6_client_set_iaid(link->dhcp6_client, link->network->iaid);
6a7a4e4d 4009 if (r < 0)
807667f7
YW
4010 return log_link_warning_errno(link, r, "Could not update DHCPv6 IAID: %m");
4011 }
4012
4013 r = sd_dhcp6_client_set_duid(link->dhcp6_client,
4014 duid->type,
4015 duid->raw_data_len > 0 ? duid->raw_data : NULL,
4016 duid->raw_data_len);
4017 if (r < 0)
4018 return log_link_warning_errno(link, r, "Could not update DHCPv6 DUID: %m");
4019
4020 if (restart) {
4021 r = sd_dhcp6_client_start(link->dhcp6_client);
413708d1 4022 if (r < 0)
807667f7 4023 return log_link_warning_errno(link, r, "Could not restart DHCPv6 client: %m");
4138fb2c 4024 }
807667f7 4025 }
7465dd22 4026
807667f7
YW
4027 if (link->radv) {
4028 bool restart = sd_radv_is_running(link->radv);
4029
4030 if (restart) {
4031 r = sd_radv_stop(link->radv);
7465dd22 4032 if (r < 0)
807667f7 4033 return log_link_warning_errno(link, r, "Could not stop Router Advertisement: %m");
7465dd22 4034 }
420d2058 4035
807667f7
YW
4036 r = sd_radv_set_mac(link->radv, &link->mac);
4037 if (r < 0)
4038 return log_link_warning_errno(link, r, "Could not update MAC for Router Advertisement: %m");
4039
4040 if (restart) {
4041 r = sd_radv_start(link->radv);
420d2058 4042 if (r < 0)
807667f7 4043 return log_link_warning_errno(link, r, "Could not restart Router Advertisement: %m");
420d2058 4044 }
c49b33ac 4045 }
807667f7
YW
4046
4047 if (link->ndisc) {
4048 r = sd_ndisc_set_mac(link->ndisc, &link->mac);
4049 if (r < 0)
4050 return log_link_warning_errno(link, r, "Could not update MAC for NDisc: %m");
4051 }
4f882b2a
TG
4052 }
4053
bb262ef0
YW
4054 old_master = link->master_ifindex;
4055 (void) sd_netlink_message_read_u32(m, IFLA_MASTER, (uint32_t *) &link->master_ifindex);
4056
d236718c 4057 link_was_admin_up = link->flags & IFF_UP;
a61bb41c
TG
4058 had_carrier = link_has_carrier(link);
4059
bb262ef0 4060 r = link_update_flags(link, m, old_master != link->master_ifindex);
a61bb41c
TG
4061 if (r < 0)
4062 return r;
4063
d236718c
DS
4064 if (!link_was_admin_up && (link->flags & IFF_UP)) {
4065 log_link_info(link, "Link UP");
4066
4067 r = link_admin_state_up(link);
4068 if (r < 0)
4069 return r;
4070 } else if (link_was_admin_up && !(link->flags & IFF_UP))
4071 log_link_info(link, "Link DOWN");
4072
273eec24
LP
4073 r = link_update_lldp(link);
4074 if (r < 0)
4075 return r;
4076
a61bb41c
TG
4077 carrier_gained = !had_carrier && link_has_carrier(link);
4078 carrier_lost = had_carrier && !link_has_carrier(link);
4079
4080 if (carrier_gained) {
6a7a4e4d 4081 log_link_info(link, "Gained carrier");
a61bb41c 4082
9c0a72f9
TG
4083 r = link_carrier_gained(link);
4084 if (r < 0)
4085 return r;
a61bb41c 4086 } else if (carrier_lost) {
6a7a4e4d 4087 log_link_info(link, "Lost carrier");
a61bb41c 4088
9c0a72f9
TG
4089 r = link_carrier_lost(link);
4090 if (r < 0)
a61bb41c 4091 return r;
a61bb41c
TG
4092 }
4093
4094 return 0;
dd3efc09 4095}
fe8db0c5 4096
b295beea
LP
4097static void print_link_hashmap(FILE *f, const char *prefix, Hashmap* h) {
4098 bool space = false;
4099 Iterator i;
4100 Link *link;
4101
4102 assert(f);
4103 assert(prefix);
4104
4105 if (hashmap_isempty(h))
4106 return;
4107
0d536673 4108 fputs(prefix, f);
b295beea
LP
4109 HASHMAP_FOREACH(link, h, i) {
4110 if (space)
0d536673 4111 fputc(' ', f);
b295beea
LP
4112
4113 fprintf(f, "%i", link->ifindex);
4114 space = true;
4115 }
4116
0d536673 4117 fputc('\n', f);
b295beea
LP
4118}
4119
64581765 4120static void link_save_dns(Link *link, FILE *f, struct in_addr_full **dns, unsigned n_dns, bool *space) {
dddc8d1e 4121 for (unsigned j = 0; j < n_dns; j++) {
e77bd3fd 4122 const char *str;
15761549 4123
64581765
YW
4124 if (dns[j]->ifindex != 0 && dns[j]->ifindex != link->ifindex)
4125 continue;
4126
e77bd3fd
YW
4127 str = in_addr_full_to_string(dns[j]);
4128 if (!str)
15761549 4129 continue;
15761549
YW
4130
4131 if (*space)
4132 fputc(' ', f);
e77bd3fd 4133 fputs(str, f);
15761549
YW
4134 *space = true;
4135 }
4136}
4137
d5e172d2
ZJS
4138static void serialize_addresses(
4139 FILE *f,
4140 const char *lvalue,
4141 bool *space,
4142 char **addresses,
4143 sd_dhcp_lease *lease,
4144 bool conditional,
ddb82ec2 4145 sd_dhcp_lease_server_type what,
d5e172d2
ZJS
4146 sd_dhcp6_lease *lease6,
4147 bool conditional6,
4148 int (*lease6_get_addr)(sd_dhcp6_lease*, const struct in6_addr**),
4149 int (*lease6_get_fqdn)(sd_dhcp6_lease*, char ***)) {
4150 int r;
4151
4152 bool _space = false;
4153 if (!space)
4154 space = &_space;
4155
4156 if (lvalue)
4157 fprintf(f, "%s=", lvalue);
4158 fputstrv(f, addresses, NULL, space);
4159
4160 if (lease && conditional) {
4161 const struct in_addr *lease_addresses;
4162
4163 r = sd_dhcp_lease_get_servers(lease, what, &lease_addresses);
4164 if (r > 0)
d8bff5cc 4165 serialize_in_addrs(f, lease_addresses, r, space, in4_addr_is_non_local);
d5e172d2
ZJS
4166 }
4167
4168 if (lease6 && conditional6 && lease6_get_addr) {
4169 const struct in6_addr *in6_addrs;
4170
4171 r = lease6_get_addr(lease6, &in6_addrs);
d8bff5cc
ZJS
4172 if (r > 0)
4173 serialize_in6_addrs(f, in6_addrs, r, space);
d5e172d2
ZJS
4174 }
4175
4176 if (lease6 && conditional6 && lease6_get_fqdn) {
4177 char **in6_hosts;
4178
4179 r = lease6_get_fqdn(lease6, &in6_hosts);
4180 if (r > 0)
4181 fputstrv(f, in6_hosts, NULL, space);
4182 }
4183
4184 if (lvalue)
4185 fputc('\n', f);
4186}
4187
fe8db0c5 4188int link_save(Link *link) {
d361b373 4189 const char *admin_state, *oper_state, *carrier_state, *address_state;
68a8723c 4190 _cleanup_free_ char *temp_path = NULL;
fe8db0c5 4191 _cleanup_fclose_ FILE *f = NULL;
c1eb9872 4192 Route *route;
18d8a2cf 4193 Address *a;
e7780c8d 4194 Iterator i;
fe8db0c5
TG
4195 int r;
4196
4197 assert(link);
4198 assert(link->state_file);
68a8723c 4199 assert(link->lease_file);
bbf7c048
TG
4200 assert(link->manager);
4201
370e9930 4202 if (link->state == LINK_STATE_LINGER) {
6990fb6b 4203 (void) unlink(link->state_file);
370e9930
TG
4204 return 0;
4205 }
4206
34437b4f
LP
4207 link_lldp_save(link);
4208
deb2e523
TG
4209 admin_state = link_state_to_string(link->state);
4210 assert(admin_state);
4211
e375dcde
TG
4212 oper_state = link_operstate_to_string(link->operstate);
4213 assert(oper_state);
deb2e523 4214
ac999bf0
YW
4215 carrier_state = link_carrier_state_to_string(link->carrier_state);
4216 assert(carrier_state);
4217
4218 address_state = link_address_state_to_string(link->address_state);
4219 assert(address_state);
4220
fe8db0c5
TG
4221 r = fopen_temporary(link->state_file, &f, &temp_path);
4222 if (r < 0)
6a7a4e4d 4223 goto fail;
fe8db0c5 4224
5512a963 4225 (void) fchmod(fileno(f), 0644);
fe8db0c5
TG
4226
4227 fprintf(f,
4228 "# This is private data. Do not parse.\n"
deb2e523 4229 "ADMIN_STATE=%s\n"
ac999bf0
YW
4230 "OPER_STATE=%s\n"
4231 "CARRIER_STATE=%s\n"
4232 "ADDRESS_STATE=%s\n",
4233 admin_state, oper_state, carrier_state, address_state);
fe8db0c5 4234
bcb7a07e 4235 if (link->network) {
fe0e16db
YW
4236 char **dhcp6_domains = NULL, **dhcp_domains = NULL;
4237 const char *dhcp_domainname = NULL, *p;
07bdc70d 4238 sd_dhcp6_lease *dhcp6_lease = NULL;
fe0e16db 4239 bool space;
07bdc70d 4240
c1a38904
MTL
4241 fprintf(f, "REQUIRED_FOR_ONLINE=%s\n",
4242 yes_no(link->network->required_for_online));
4243
d5e172d2
ZJS
4244 LinkOperationalStateRange st = link->network->required_operstate_for_online;
4245 fprintf(f, "REQUIRED_OPER_STATE_FOR_ONLINE=%s%s%s\n",
4246 strempty(link_operstate_to_string(st.min)),
4247 st.max != LINK_OPERSTATE_RANGE_DEFAULT.max ? ":" : "",
4248 st.max != LINK_OPERSTATE_RANGE_DEFAULT.max ? strempty(link_operstate_to_string(st.max)) : "");
4ac77d63 4249
07bdc70d 4250 if (link->dhcp6_client) {
4058d339
TG
4251 r = sd_dhcp6_client_get_lease(link->dhcp6_client, &dhcp6_lease);
4252 if (r < 0 && r != -ENOMSG)
2206aa5c 4253 log_link_debug_errno(link, r, "Failed to get DHCPv6 lease: %m");
07bdc70d 4254 }
b0e39c82 4255
adc5b2e2
TG
4256 fprintf(f, "NETWORK_FILE=%s\n", link->network->filename);
4257
d5e172d2
ZJS
4258 /************************************************************/
4259
0d536673 4260 fputs("DNS=", f);
ea352b40 4261 space = false;
15761549 4262 if (link->n_dns != (unsigned) -1)
64581765 4263 link_save_dns(link, f, link->dns, link->n_dns, &space);
15761549 4264 else
64581765 4265 link_save_dns(link, f, link->network->dns, link->network->n_dns, &space);
d5314fff 4266
d5e172d2
ZJS
4267 serialize_addresses(f, NULL, &space,
4268 NULL,
4269 link->dhcp_lease,
4270 link->network->dhcp_use_dns,
ddb82ec2 4271 SD_DHCP_LEASE_DNS,
d5e172d2
ZJS
4272 dhcp6_lease,
4273 link->network->dhcp6_use_dns,
4274 sd_dhcp6_lease_get_dns,
4275 NULL);
1e7a0e21 4276
a8c10331 4277 /* Make sure to flush out old entries before we use the NDisc data */
1e7a0e21
LP
4278 ndisc_vacuum(link);
4279
b296797f 4280 if (link->network->ipv6_accept_ra_use_dns && link->ndisc_rdnss) {
1e7a0e21
LP
4281 NDiscRDNSS *dd;
4282
d8bff5cc
ZJS
4283 SET_FOREACH(dd, link->ndisc_rdnss, i)
4284 serialize_in6_addrs(f, &dd->address, 1, &space);
299d578f
SS
4285 }
4286
4287 fputc('\n', f);
4288
d5e172d2
ZJS
4289 /************************************************************/
4290
4291 serialize_addresses(f, "NTP", NULL,
4292 link->ntp ?: link->network->ntp,
4293 link->dhcp_lease,
4294 link->network->dhcp_use_ntp,
ddb82ec2 4295 SD_DHCP_LEASE_NTP,
d5e172d2
ZJS
4296 dhcp6_lease,
4297 link->network->dhcp6_use_ntp,
4298 sd_dhcp6_lease_get_ntp_addrs,
4299 sd_dhcp6_lease_get_ntp_fqdn);
4300
4301 serialize_addresses(f, "SIP", NULL,
2a71d57f 4302 NULL,
d5e172d2
ZJS
4303 link->dhcp_lease,
4304 link->network->dhcp_use_sip,
ddb82ec2 4305 SD_DHCP_LEASE_SIP,
2a71d57f 4306 NULL, false, NULL, NULL);
d5e172d2
ZJS
4307
4308 /************************************************************/
bd8f6538 4309
b2a81c0b 4310 if (link->network->dhcp_use_domains != DHCP_USE_DOMAINS_NO) {
b85bc551 4311 if (link->dhcp_lease) {
b2a81c0b 4312 (void) sd_dhcp_lease_get_domainname(link->dhcp_lease, &dhcp_domainname);
b85bc551
DW
4313 (void) sd_dhcp_lease_get_search_domains(link->dhcp_lease, &dhcp_domains);
4314 }
b2a81c0b
LP
4315 if (dhcp6_lease)
4316 (void) sd_dhcp6_lease_get_domains(dhcp6_lease, &dhcp6_domains);
07bdc70d
PF
4317 }
4318
fe0e16db
YW
4319 fputs("DOMAINS=", f);
4320 space = false;
15761549 4321 ORDERED_SET_FOREACH(p, link->search_domains ?: link->network->search_domains, i)
fe0e16db 4322 fputs_with_space(f, p, NULL, &space);
07bdc70d 4323
1e7a0e21 4324 if (link->network->dhcp_use_domains == DHCP_USE_DOMAINS_YES) {
1e7a0e21
LP
4325 if (dhcp_domainname)
4326 fputs_with_space(f, dhcp_domainname, NULL, &space);
b85bc551
DW
4327 if (dhcp_domains)
4328 fputstrv(f, dhcp_domains, NULL, &space);
1e7a0e21
LP
4329 if (dhcp6_domains)
4330 fputstrv(f, dhcp6_domains, NULL, &space);
a0cd6da5
YW
4331 }
4332
4333 if (link->network->ipv6_accept_ra_use_domains == DHCP_USE_DOMAINS_YES) {
4334 NDiscDNSSL *dd;
1e7a0e21
LP
4335
4336 SET_FOREACH(dd, link->ndisc_dnssl, i)
4337 fputs_with_space(f, NDISC_DNSSL_DOMAIN(dd), NULL, &space);
4338 }
b2a81c0b 4339
0d536673 4340 fputc('\n', f);
6192b846 4341
d5e172d2
ZJS
4342 /************************************************************/
4343
fe0e16db
YW
4344 fputs("ROUTE_DOMAINS=", f);
4345 space = false;
15761549 4346 ORDERED_SET_FOREACH(p, link->route_domains ?: link->network->route_domains, i)
fe0e16db 4347 fputs_with_space(f, p, NULL, &space);
b2a81c0b 4348
1e7a0e21 4349 if (link->network->dhcp_use_domains == DHCP_USE_DOMAINS_ROUTE) {
1e7a0e21
LP
4350 if (dhcp_domainname)
4351 fputs_with_space(f, dhcp_domainname, NULL, &space);
b85bc551
DW
4352 if (dhcp_domains)
4353 fputstrv(f, dhcp_domains, NULL, &space);
1e7a0e21
LP
4354 if (dhcp6_domains)
4355 fputstrv(f, dhcp6_domains, NULL, &space);
a0cd6da5
YW
4356 }
4357
4358 if (link->network->ipv6_accept_ra_use_domains == DHCP_USE_DOMAINS_ROUTE) {
4359 NDiscDNSSL *dd;
1e7a0e21
LP
4360
4361 SET_FOREACH(dd, link->ndisc_dnssl, i)
4362 fputs_with_space(f, NDISC_DNSSL_DOMAIN(dd), NULL, &space);
4363 }
b2a81c0b 4364
0d536673 4365 fputc('\n', f);
67272d15 4366
d5e172d2
ZJS
4367 /************************************************************/
4368
3c9b8860 4369 fprintf(f, "LLMNR=%s\n",
15761549 4370 resolve_support_to_string(link->llmnr >= 0 ? link->llmnr : link->network->llmnr));
d5e172d2
ZJS
4371
4372 /************************************************************/
4373
aaa297d4 4374 fprintf(f, "MDNS=%s\n",
15761549 4375 resolve_support_to_string(link->mdns >= 0 ? link->mdns : link->network->mdns));
15761549 4376
d5e172d2
ZJS
4377 /************************************************************/
4378
4379 int dns_default_route =
4380 link->dns_default_route >= 0 ? link->dns_default_route :
4381 link->network->dns_default_route;
4382 if (dns_default_route >= 0)
4383 fprintf(f, "DNS_DEFAULT_ROUTE=%s\n", yes_no(dns_default_route));
4384
4385 /************************************************************/
4386
4387 DnsOverTlsMode dns_over_tls_mode =
4388 link->dns_over_tls_mode != _DNS_OVER_TLS_MODE_INVALID ? link->dns_over_tls_mode :
4389 link->network->dns_over_tls_mode;
4390 if (dns_over_tls_mode != _DNS_OVER_TLS_MODE_INVALID)
4391 fprintf(f, "DNS_OVER_TLS=%s\n", dns_over_tls_mode_to_string(dns_over_tls_mode));
4392
4393 /************************************************************/
4394
4395 DnssecMode dnssec_mode =
4396 link->dnssec_mode != _DNSSEC_MODE_INVALID ? link->dnssec_mode :
4397 link->network->dnssec_mode;
4398 if (dnssec_mode != _DNSSEC_MODE_INVALID)
4399 fprintf(f, "DNSSEC=%s\n", dnssec_mode_to_string(dnssec_mode));
4400
4401 /************************************************************/
4402
4403 Set *nta_anchors = link->dnssec_negative_trust_anchors;
4404 if (set_isempty(nta_anchors))
4405 nta_anchors = link->network->dnssec_negative_trust_anchors;
4406
4407 if (!set_isempty(nta_anchors)) {
8a516214
LP
4408 const char *n;
4409
0d536673 4410 fputs("DNSSEC_NTA=", f);
8a516214 4411 space = false;
d5e172d2 4412 SET_FOREACH(n, nta_anchors, i)
d390f8ef 4413 fputs_with_space(f, n, NULL, &space);
0d536673 4414 fputc('\n', f);
8a516214
LP
4415 }
4416
d5e172d2
ZJS
4417 /************************************************************/
4418
0d536673 4419 fputs("ADDRESSES=", f);
e7780c8d
TG
4420 space = false;
4421 SET_FOREACH(a, link->addresses, i) {
4422 _cleanup_free_ char *address_str = NULL;
4423
4424 r = in_addr_to_string(a->family, &a->in_addr, &address_str);
4425 if (r < 0)
4426 goto fail;
4427
e7780c8d
TG
4428 fprintf(f, "%s%s/%u", space ? " " : "", address_str, a->prefixlen);
4429 space = true;
4430 }
0d536673 4431 fputc('\n', f);
c1eb9872 4432
d5e172d2
ZJS
4433 /************************************************************/
4434
0d536673 4435 fputs("ROUTES=", f);
c1eb9872
TG
4436 space = false;
4437 SET_FOREACH(route, link->routes, i) {
4438 _cleanup_free_ char *route_str = NULL;
4439
4440 r = in_addr_to_string(route->family, &route->dst, &route_str);
4441 if (r < 0)
4442 goto fail;
4443
ecc3f340
ZJS
4444 fprintf(f, "%s%s/%hhu/%hhu/%"PRIu32"/%"PRIu32"/"USEC_FMT,
4445 space ? " " : "", route_str,
f833694d 4446 route->dst_prefixlen, route->tos, route->priority, route->table, route->lifetime);
c1eb9872
TG
4447 space = true;
4448 }
4449
0d536673 4450 fputc('\n', f);
bcb7a07e 4451 }
7374f9d8 4452
b295beea
LP
4453 print_link_hashmap(f, "CARRIER_BOUND_TO=", link->bound_to_links);
4454 print_link_hashmap(f, "CARRIER_BOUND_BY=", link->bound_by_links);
0d4ad91d 4455
8eb9058d 4456 if (link->dhcp_lease) {
bd91b83e 4457 r = dhcp_lease_save(link->dhcp_lease, link->lease_file);
fe8db0c5 4458 if (r < 0)
c2d6bd61 4459 goto fail;
fe8db0c5 4460
7374f9d8 4461 fprintf(f,
b0e39c82
TG
4462 "DHCP_LEASE=%s\n",
4463 link->lease_file);
deb2e523 4464 } else
6990fb6b 4465 (void) unlink(link->lease_file);
fe8db0c5 4466
0bc70f1d
TG
4467 if (link->ipv4ll) {
4468 struct in_addr address;
4469
4470 r = sd_ipv4ll_get_address(link->ipv4ll, &address);
4471 if (r >= 0) {
0d536673 4472 fputs("IPV4LL_ADDRESS=", f);
072320ea 4473 serialize_in_addrs(f, &address, 1, false, NULL);
0d536673 4474 fputc('\n', f);
0bc70f1d
TG
4475 }
4476 }
4477
7e738e7b
SS
4478 if (link->dhcp6_client) {
4479 _cleanup_free_ char *duid = NULL;
4480 uint32_t iaid;
4481
4482 r = sd_dhcp6_client_get_iaid(link->dhcp6_client, &iaid);
4483 if (r >= 0)
4484 fprintf(f, "DHCP6_CLIENT_IAID=0x%x\n", iaid);
4485
4486 r = sd_dhcp6_client_duid_as_string(link->dhcp6_client, &duid);
4487 if (r >= 0)
4488 fprintf(f, "DHCP6_CLIENT_DUID=%s\n", duid);
4489 }
18d8a2cf 4490
c2d6bd61
LP
4491 r = fflush_and_check(f);
4492 if (r < 0)
4493 goto fail;
fe8db0c5 4494
c2d6bd61 4495 if (rename(temp_path, link->state_file) < 0) {
fe8db0c5 4496 r = -errno;
c2d6bd61 4497 goto fail;
fe8db0c5
TG
4498 }
4499
c2d6bd61 4500 return 0;
dacd6cee 4501
c2d6bd61 4502fail:
6a7a4e4d 4503 (void) unlink(link->state_file);
6a7a4e4d
LP
4504 if (temp_path)
4505 (void) unlink(temp_path);
4506
dacd6cee 4507 return log_link_error_errno(link, r, "Failed to save link data to %s: %m", link->state_file);
fe8db0c5
TG
4508}
4509
84de38c5
TG
4510/* The serialized state in /run is no longer up-to-date. */
4511void link_dirty(Link *link) {
4512 int r;
4513
4514 assert(link);
4515
0c241a37
SS
4516 /* mark manager dirty as link is dirty */
4517 manager_dirty(link->manager);
4518
de7fef4b 4519 r = set_ensure_put(&link->manager->dirty_links, NULL, link);
0c241a37 4520 if (r <= 0)
de7fef4b 4521 /* Ignore allocation errors and don't take another ref if the link was already dirty */
84de38c5 4522 return;
84de38c5
TG
4523 link_ref(link);
4524}
4525
4526/* The serialized state in /run is up-to-date */
4527void link_clean(Link *link) {
4528 assert(link);
4529 assert(link->manager);
4530
1046bf9b 4531 link_unref(set_remove(link->manager->dirty_links, link));
84de38c5
TG
4532}
4533
c2a65950
YW
4534int link_save_and_clean(Link *link) {
4535 int r;
4536
4537 r = link_save(link);
4538 if (r < 0)
4539 return r;
4540
4541 link_clean(link);
4542 return 0;
4543}
4544
fe8db0c5 4545static const char* const link_state_table[_LINK_STATE_MAX] = {
8434fd5c 4546 [LINK_STATE_PENDING] = "pending",
bd08ce56 4547 [LINK_STATE_INITIALIZED] = "initialized",
289e6774 4548 [LINK_STATE_CONFIGURING] = "configuring",
fe8db0c5 4549 [LINK_STATE_CONFIGURED] = "configured",
57bd6899 4550 [LINK_STATE_UNMANAGED] = "unmanaged",
fe8db0c5 4551 [LINK_STATE_FAILED] = "failed",
370e9930 4552 [LINK_STATE_LINGER] = "linger",
fe8db0c5
TG
4553};
4554
4555DEFINE_STRING_TABLE_LOOKUP(link_state, LinkState);
5ecb131d
YW
4556
4557int log_link_message_full_errno(Link *link, sd_netlink_message *m, int level, int err, const char *msg) {
4558 const char *err_msg = NULL;
4559
4560 (void) sd_netlink_message_read_string(m, NLMSGERR_ATTR_MSG, &err_msg);
ab119e63
YW
4561 return log_link_full(link, level, err,
4562 "%s: %s%s%s%m",
4563 msg,
4564 strempty(err_msg),
4565 err_msg && !endswith(err_msg, ".") ? "." : "",
4566 err_msg ? " " : "");
5ecb131d 4567}