]> git.ipfire.org Git - thirdparty/systemd.git/blame - src/run/run.c
projects / thirdparty / systemd.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
fix: UnsetProperty example in systemd.link.xml
[thirdparty/systemd.git] / src / run / run.c
CommitLineData
db9ecf05 1/* SPDX-License-Identifier: LGPL-2.1-or-later */
c2756a68 2
1cf40697 3#include <fcntl.h>
6c12b52e 4#include <getopt.h>
3f6fd1ba 5#include <stdio.h>
8857aa74
DDM		 6#include <stdlib.h>
7#include <sys/resource.h>
4f18ff2e 8#include <unistd.h>
c2756a68
LP		 9
10#include "sd-bus.h"
76d62b63 11#include "sd-daemon.h"
9b15b784 12#include "sd-event.h"
fe5a6c47 13#include "sd-json.h"
3f6fd1ba 14
b5efdb8a 15#include "alloc-util.h"
76d62b63 16#include "argv-util.h"
b7ba8d55 17#include "ask-password-agent.h"
d6b4d1c7 18#include "build.h"
3f6fd1ba 19#include "bus-error.h"
9b71e4ab 20#include "bus-locator.h"
807542be 21#include "bus-map-properties.h"
ab33edb0 22#include "bus-message-util.h"
20b16441 23#include "bus-unit-util.h"
1e35e81b 24#include "bus-util.h"
e45c81b8 25#include "bus-wait-for-jobs.h"
3f6fd1ba 26#include "calendarspec.h"
759b3c08
LP		 27#include "capsule-util.h"
28#include "chase.h"
4de33e7f 29#include "env-util.h"
8857aa74 30#include "errno-util.h"
2c29813d 31#include "escape.h"
c8f59296 32#include "event-util.h"
db12f843 33#include "exec-util.h"
7f3614e5 34#include "exit-status.h"
3ffd4af2 35#include "fd-util.h"
744ca8f6 36#include "fork-journal.h"
6e9deb8f 37#include "format-table.h"
f97b34a6 38#include "format-util.h"
759b3c08 39#include "fs-util.h"
994a42a0 40#include "hostname-util.h"
93a1f792 41#include "log.h"
ef08ad7a 42#include "main-func.h"
575922c9 43#include "osc-context.h"
614b022c 44#include "parse-argument.h"
cf0fbc49 45#include "parse-util.h"
4bcc8c3c 46#include "path-util.h"
8857aa74 47#include "pidref.h"
1b919ca4 48#include "polkit-agent.h"
294bf0c3 49#include "pretty-print.h"
2a453c2e 50#include "process-util.h"
9b15b784 51#include "ptyfwd.h"
8857aa74 52#include "runtime-scope.h"
24882e06 53#include "signal-util.h"
80a8dbb4 54#include "special.h"
706a9535 55#include "string-table.h"
8857aa74 56#include "string-util.h"
3f6fd1ba 57#include "strv.h"
66cb2fde 58#include "terminal-util.h"
8857aa74 59#include "time-util.h"
759b3c08 60#include "uid-classification.h"
89ada3ba 61#include "unit-def.h"
3f6fd1ba 62#include "unit-name.h"
b1d4f8e1 63#include "user-util.h"
c2756a68 64
8c7db2fb 65static bool arg_ask_password = true;
6c12b52e 66static bool arg_scope = false;
6577c7ce 67static bool arg_remain_after_exit = false;
3d161f99 68static bool arg_no_block = false;
2a453c2e 69static bool arg_wait = false;
6c12b52e 70static const char *arg_unit = NULL;
9ce3440a 71static char *arg_description = NULL;
c221420b 72static const char *arg_slice = NULL;
2c7039b3 73static bool arg_slice_inherit = false;
3ae314af 74static bool arg_expand_environment = true;
a6c0353b 75static bool arg_send_sighup = false;
d21ed1ea 76static BusTransport arg_transport = BUS_TRANSPORT_LOCAL;
1ac67edb 77static const char *arg_host = NULL;
4870133b 78static RuntimeScope arg_runtime_scope = RUNTIME_SCOPE_SYSTEM;
c7040b5d
LP		 79static const char *arg_service_type = NULL;
80static const char *arg_exec_user = NULL;
81static const char *arg_exec_group = NULL;
82static int arg_nice = 0;
83static bool arg_nice_set = false;
84static char **arg_environment = NULL;
df31a6c0 85static char **arg_property = NULL;
5dca7739 86static enum {
a5c11722
YW		 87 ARG_STDIO_NONE = 0, /* The default, as it is for normal services, stdin connected to
88 * /dev/null, and stdout+stderr to the journal */
89 ARG_STDIO_PTY = 1 << 0, /* Interactive behaviour, requested by --pty/--pty-late: we allocate a pty
90 * and connect it to the TTY we are invoked from */
91 ARG_STDIO_DIRECT = 1 << 1, /* Directly pass our stdin/stdout/stderr to the activated service, useful
92 * for usage in shell pipelines, requested by --pipe */
93 ARG_STDIO_AUTO = ARG_STDIO_PTY | ARG_STDIO_DIRECT,
94 /* If --pipe and --pty/--pty-late are used together we use --pty/--pty-late
95 * when invoked on a TTY, and --pipe otherwise */
5dca7739 96} arg_stdio = ARG_STDIO_NONE;
b7ba8d55 97static int arg_pty_late = -1; /* tristate */
d59ef3e2
YW		 98static char **arg_path_property = NULL;
99static char **arg_socket_property = NULL;
4c213d6c 100static char **arg_timer_property = NULL;
787be190 101static bool arg_with_timer = false;
095dc596 102static bool arg_quiet = false;
744ca8f6 103static bool arg_verbose = false;
fe9d0be9 104static bool arg_aggressive_gc = false;
2d21165a 105static char *arg_working_directory = NULL;
badd28e1 106static bool arg_shell = false;
706a9535 107static JobMode arg_job_mode = JOB_FAIL;
badd28e1 108static char **arg_cmdline = NULL;
72eb3081 109static char *arg_exec_path = NULL;
1072d947 110static bool arg_ignore_failure = false;
2f0b4d57 111static char *arg_background = NULL;
fe5a6c47 112static sd_json_format_flags_t arg_json_format_flags = SD_JSON_FORMAT_OFF;
115fac3c 113static char *arg_shell_prompt_prefix = NULL;
ef5f7243 114static int arg_lightweight = -1;
f44e7a8c 115static char *arg_area = NULL;
e61d2011 116static bool arg_via_shell = false;
c2756a68 117
9ce3440a 118STATIC_DESTRUCTOR_REGISTER(arg_description, freep);
0565120f
LP		 119STATIC_DESTRUCTOR_REGISTER(arg_environment, strv_freep);
120STATIC_DESTRUCTOR_REGISTER(arg_property, strv_freep);
121STATIC_DESTRUCTOR_REGISTER(arg_path_property, strv_freep);
122STATIC_DESTRUCTOR_REGISTER(arg_socket_property, strv_freep);
123STATIC_DESTRUCTOR_REGISTER(arg_timer_property, strv_freep);
124STATIC_DESTRUCTOR_REGISTER(arg_working_directory, freep);
125STATIC_DESTRUCTOR_REGISTER(arg_cmdline, strv_freep);
72eb3081 126STATIC_DESTRUCTOR_REGISTER(arg_exec_path, freep);
2f0b4d57 127STATIC_DESTRUCTOR_REGISTER(arg_background, freep);
115fac3c 128STATIC_DESTRUCTOR_REGISTER(arg_shell_prompt_prefix, freep);
f44e7a8c 129STATIC_DESTRUCTOR_REGISTER(arg_area, freep);
0565120f 130
37ec0fdd
LP		 131static int help(void) {
132 _cleanup_free_ char *link = NULL;
133 int r;
134
135 r = terminal_urlify_man("systemd-run", "1", &link);
136 if (r < 0)
137 return log_oom();
138
e132be46
LP		 139 printf("%1$s [OPTIONS...] COMMAND [ARGUMENTS...]\n"
140 "\n%5$sRun the specified command in a transient scope or service.%6$s\n\n"
4c213d6c
WC		 141 " -h --help Show this help\n"
142 " --version Show package version\n"
8c7db2fb 143 " --no-ask-password Do not prompt for password\n"
4c213d6c
WC		 144 " --user Run as user unit\n"
145 " -H --host=[USER@]HOST Operate on remote host\n"
146 " -M --machine=CONTAINER Operate on local container\n"
147 " --scope Run this as scope rather than service\n"
7976b9f0 148 " -u --unit=UNIT Run under the specified unit name\n"
ad2c1701 149 " -p --property=NAME=VALUE Set service or scope unit property\n"
4c213d6c
WC		 150 " --description=TEXT Description for unit\n"
151 " --slice=SLICE Run in the specified slice\n"
2118b179 152 " --slice-inherit Inherit the slice from the caller\n"
2ed7a221 153 " --expand-environment=BOOL Control expansion of environment variables\n"
3d161f99 154 " --no-block Do not wait until operation finished\n"
4c213d6c 155 " -r --remain-after-exit Leave service around until explicitly stopped\n"
2a453c2e 156 " --wait Wait until service stopped again\n"
4c213d6c
WC		 157 " --send-sighup Send SIGHUP when terminating\n"
158 " --service-type=TYPE Service type\n"
159 " --uid=USER Run as system user\n"
160 " --gid=GROUP Run as system group\n"
161 " --nice=NICE Nice level\n"
2d21165a
LP		 162 " --working-directory=PATH Set working directory\n"
163 " -d --same-dir Inherit working directory from caller\n"
0337b3d5 164 " -E --setenv=NAME[=VALUE] Set environment variable\n"
5dca7739
LP		 165 " -t --pty Run service on pseudo TTY as STDIN/STDOUT/\n"
166 " STDERR\n"
b7ba8d55
LP		 167 " -T --pty-late Just like --pty, but leave TTY access to\n"
168 " agents until unit is started up\n"
5dca7739 169 " -P --pipe Pass STDIN/STDOUT/STDERR directly to service\n"
fe9d0be9 170 " -q --quiet Suppress information messages during runtime\n"
744ca8f6 171 " -v --verbose Show unit logs while executing operation\n"
fe5a6c47 172 " --json=pretty|short|off Print unit name and invocation id as JSON\n"
badd28e1 173 " -G --collect Unload unit after it ran, even when failed\n"
e132be46 174 " -S --shell Invoke a $SHELL interactively\n"
706a9535
GL		 175 " --job-mode=MODE Specify how to deal with already queued jobs,\n"
176 " when queueing a new job\n"
1072d947 177 " --ignore-failure Ignore the exit status of the invoked process\n"
2f0b4d57 178 " --background=COLOR Set ANSI color for background\n"
e132be46
LP		 179 "\n%3$sPath options:%4$s\n"
180 " --path-property=NAME=VALUE Set path unit property\n"
181 "\n%3$sSocket options:%4$s\n"
182 " --socket-property=NAME=VALUE Set socket unit property\n"
183 "\n%3$sTimer options:%4$s\n"
b57b0625
ZJS		 184 " --on-active=SECONDS Run after SECONDS delay\n"
185 " --on-boot=SECONDS Run SECONDS after machine was booted up\n"
186 " --on-startup=SECONDS Run SECONDS after systemd activation\n"
187 " --on-unit-active=SECONDS Run SECONDS after the last activation\n"
188 " --on-unit-inactive=SECONDS Run SECONDS after the last deactivation\n"
4c213d6c 189 " --on-calendar=SPEC Realtime timer\n"
efebb613
LP		 190 " --on-timezone-change Run when the timezone changes\n"
191 " --on-clock-change Run when the realtime clock jumps\n"
ad2c1701 192 " --timer-property=NAME=VALUE Set timer unit property\n"
e132be46 193 "\nSee the %2$s for details.\n",
bc556335 194 program_invocation_short_name,
e132be46
LP		 195 link,
196 ansi_underline(), ansi_normal(),
197 ansi_highlight(), ansi_normal());
37ec0fdd
LP		 198
199 return 0;
6c12b52e
LP		 200}
201
72eb3081
LP		 202static int help_sudo_mode(void) {
203 _cleanup_free_ char *link = NULL;
204 int r;
205
7aed4343 206 r = terminal_urlify_man("run0", "1", &link);
72eb3081
LP		 207 if (r < 0)
208 return log_oom();
209
edd10ab2
LP		 210 /* NB: Let's not go overboard with short options: we try to keep a modicum of compatibility with
211 * sudo's short switches, hence please do not introduce new short switches unless they have a roughly
212 * equivalent purpose on sudo. Use long options for everything private to run0. */
213
72eb3081
LP		 214 printf("%s [OPTIONS...] COMMAND [ARGUMENTS...]\n"
215 "\n%sElevate privileges interactively.%s\n\n"
216 " -h --help Show this help\n"
217 " -V --version Show package version\n"
218 " --no-ask-password Do not prompt for password\n"
219 " --machine=CONTAINER Operate on local container\n"
220 " --unit=UNIT Run under the specified unit name\n"
221 " --property=NAME=VALUE Set service or scope unit property\n"
222 " --description=TEXT Description for unit\n"
223 " --slice=SLICE Run in the specified slice\n"
224 " --slice-inherit Inherit the slice\n"
225 " -u --user=USER Run as system user\n"
226 " -g --group=GROUP Run as system group\n"
227 " --nice=NICE Nice level\n"
228 " -D --chdir=PATH Set working directory\n"
e61d2011
MY		 229 " --via-shell Invoke command via target user's login shell\n"
230 " -i Shortcut for --via-shell --chdir='~'\n"
72eb3081 231 " --setenv=NAME[=VALUE] Set environment variable\n"
2f0b4d57 232 " --background=COLOR Set ANSI color for background\n"
edd10ab2 233 " --pty Request allocation of a pseudo TTY for stdio\n"
b7ba8d55
LP		 234 " --pty-late Just like --pty, but leave TTY access to agents\n"
235 " until unit is started up\n"
edd10ab2 236 " --pipe Request direct pipe for stdio\n"
115fac3c 237 " --shell-prompt-prefix=PREFIX Set $SHELL_PROMPT_PREFIX\n"
ef5f7243
LP		 238 " --lightweight=BOOLEAN Control whether to register a session with service manager\n"
239 " or without\n"
2950fb1b 240 " --area=AREA Home area to log into\n"
72eb3081
LP		 241 "\nSee the %s for details.\n",
242 program_invocation_short_name,
243 ansi_highlight(),
244 ansi_normal(),
245 link);
246
247 return 0;
248}
249
8496b938
LP		 250static bool privileged_execution(void) {
251 if (arg_runtime_scope != RUNTIME_SCOPE_SYSTEM)
252 return false;
253
254 return !arg_exec_user || STR_IN_SET(arg_exec_user, "root", "0");
255}
256
f2b9f2c8 257static int add_timer_property(const char *name, const char *val) {
18939728 258 char *p;
f2b9f2c8
YW		 259
260 assert(name);
261 assert(val);
262
263 p = strjoin(name, "=", val);
264 if (!p)
265 return log_oom();
266
267 if (strv_consume(&arg_timer_property, p) < 0)
268 return log_oom();
269
f2b9f2c8 270 return 0;
4c213d6c
WC		 271}
272
e61d2011 273static char** make_login_shell_cmdline(const char *shell) {
72eb3081
LP		 274 _cleanup_free_ char *argv0 = NULL;
275
276 assert(shell);
277
278 argv0 = strjoin("-", shell); /* The - is how shells determine if they shall be consider login shells */
279 if (!argv0)
280 return NULL;
281
282 return strv_new(argv0);
283}
284
6c12b52e
LP		 285static int parse_argv(int argc, char *argv[]) {
286
287 enum {
288 ARG_VERSION = 0x100,
289 ARG_USER,
66b1e746 290 ARG_SYSTEM,
6c12b52e 291 ARG_SCOPE,
c221420b 292 ARG_DESCRIPTION,
a6c0353b 293 ARG_SLICE,
2c7039b3 294 ARG_SLICE_INHERIT,
f872ddd1 295 ARG_EXPAND_ENVIRONMENT,
a6c0353b 296 ARG_SEND_SIGHUP,
5cfde70c 297 ARG_SERVICE_TYPE,
c7040b5d
LP		 298 ARG_EXEC_USER,
299 ARG_EXEC_GROUP,
c7040b5d 300 ARG_NICE,
4c213d6c
WC		 301 ARG_ON_ACTIVE,
302 ARG_ON_BOOT,
303 ARG_ON_STARTUP,
304 ARG_ON_UNIT_ACTIVE,
305 ARG_ON_UNIT_INACTIVE,
306 ARG_ON_CALENDAR,
efebb613
LP		 307 ARG_ON_TIMEZONE_CHANGE,
308 ARG_ON_CLOCK_CHANGE,
3d161f99 309 ARG_TIMER_PROPERTY,
d59ef3e2
YW		 310 ARG_PATH_PROPERTY,
311 ARG_SOCKET_PROPERTY,
3d161f99 312 ARG_NO_BLOCK,
5cfde70c 313 ARG_NO_ASK_PASSWORD,
2a453c2e 314 ARG_WAIT,
2d21165a 315 ARG_WORKING_DIRECTORY,
badd28e1 316 ARG_SHELL,
706a9535 317 ARG_JOB_MODE,
1072d947 318 ARG_IGNORE_FAILURE,
2f0b4d57 319 ARG_BACKGROUND,
fe5a6c47 320 ARG_JSON,
6c12b52e
LP		 321 };
322
323 static const struct option options[] = {
f872ddd1
ZJS		 324 { "help", no_argument, NULL, 'h' },
325 { "version", no_argument, NULL, ARG_VERSION },
326 { "user", no_argument, NULL, ARG_USER },
327 { "system", no_argument, NULL, ARG_SYSTEM },
759b3c08 328 { "capsule", required_argument, NULL, 'C' },
f872ddd1
ZJS		 329 { "scope", no_argument, NULL, ARG_SCOPE },
330 { "unit", required_argument, NULL, 'u' },
331 { "description", required_argument, NULL, ARG_DESCRIPTION },
332 { "slice", required_argument, NULL, ARG_SLICE },
333 { "slice-inherit", no_argument, NULL, ARG_SLICE_INHERIT },
334 { "remain-after-exit", no_argument, NULL, 'r' },
335 { "expand-environment", required_argument, NULL, ARG_EXPAND_ENVIRONMENT },
336 { "send-sighup", no_argument, NULL, ARG_SEND_SIGHUP },
337 { "host", required_argument, NULL, 'H' },
338 { "machine", required_argument, NULL, 'M' },
339 { "service-type", required_argument, NULL, ARG_SERVICE_TYPE },
340 { "wait", no_argument, NULL, ARG_WAIT },
341 { "uid", required_argument, NULL, ARG_EXEC_USER },
342 { "gid", required_argument, NULL, ARG_EXEC_GROUP },
343 { "nice", required_argument, NULL, ARG_NICE },
344 { "setenv", required_argument, NULL, 'E' },
345 { "property", required_argument, NULL, 'p' },
346 { "tty", no_argument, NULL, 't' }, /* deprecated alias */
347 { "pty", no_argument, NULL, 't' },
b7ba8d55 348 { "pty-late", no_argument, NULL, 'T' },
f872ddd1
ZJS		 349 { "pipe", no_argument, NULL, 'P' },
350 { "quiet", no_argument, NULL, 'q' },
744ca8f6 351 { "verbose", no_argument, NULL, 'v' },
f872ddd1
ZJS		 352 { "on-active", required_argument, NULL, ARG_ON_ACTIVE },
353 { "on-boot", required_argument, NULL, ARG_ON_BOOT },
354 { "on-startup", required_argument, NULL, ARG_ON_STARTUP },
355 { "on-unit-active", required_argument, NULL, ARG_ON_UNIT_ACTIVE },
356 { "on-unit-inactive", required_argument, NULL, ARG_ON_UNIT_INACTIVE },
357 { "on-calendar", required_argument, NULL, ARG_ON_CALENDAR },
358 { "on-timezone-change", no_argument, NULL, ARG_ON_TIMEZONE_CHANGE },
359 { "on-clock-change", no_argument, NULL, ARG_ON_CLOCK_CHANGE },
360 { "timer-property", required_argument, NULL, ARG_TIMER_PROPERTY },
361 { "path-property", required_argument, NULL, ARG_PATH_PROPERTY },
362 { "socket-property", required_argument, NULL, ARG_SOCKET_PROPERTY },
363 { "no-block", no_argument, NULL, ARG_NO_BLOCK },
364 { "no-ask-password", no_argument, NULL, ARG_NO_ASK_PASSWORD },
365 { "collect", no_argument, NULL, 'G' },
366 { "working-directory", required_argument, NULL, ARG_WORKING_DIRECTORY },
367 { "same-dir", no_argument, NULL, 'd' },
368 { "shell", no_argument, NULL, 'S' },
706a9535 369 { "job-mode", required_argument, NULL, ARG_JOB_MODE },
1072d947 370 { "ignore-failure", no_argument, NULL, ARG_IGNORE_FAILURE },
87da1af7 371 { "background", required_argument, NULL, ARG_BACKGROUND },
fe5a6c47 372 { "json", required_argument, NULL, ARG_JSON },
eb9da376 373 {},
6c12b52e
LP		 374 };
375
d59ef3e2 376 bool with_trigger = false;
c7040b5d 377 int r, c;
6c12b52e
LP		 378
379 assert(argc >= 0);
380 assert(argv);
381
ef9c12b1
YW		 382 /* Resetting to 0 forces the invocation of an internal initialization routine of getopt_long()
383 * that checks for GNU extensions in optstring ('-' or '+' at the beginning). */
384 optind = 0;
744ca8f6 385 while ((c = getopt_long(argc, argv, "+hrC:H:M:E:p:tTPqvGdSu:", options, NULL)) >= 0)
6c12b52e
LP		 386
387 switch (c) {
388
389 case 'h':
37ec0fdd 390 return help();
6c12b52e 391
ad2c1701
LP		 392 case ARG_VERSION:
393 return version();
394
8c7db2fb
EV		 395 case ARG_NO_ASK_PASSWORD:
396 arg_ask_password = false;
397 break;
398
6c12b52e 399 case ARG_USER:
4870133b 400 arg_runtime_scope = RUNTIME_SCOPE_USER;
6c12b52e
LP		 401 break;
402
66b1e746 403 case ARG_SYSTEM:
4870133b 404 arg_runtime_scope = RUNTIME_SCOPE_SYSTEM;
66b1e746
LP		 405 break;
406
759b3c08
LP		 407 case 'C':
408 r = capsule_name_is_valid(optarg);
409 if (r < 0)
410 return log_error_errno(r, "Unable to validate capsule name '%s': %m", optarg);
411 if (r == 0)
412 return log_error_errno(SYNTHETIC_ERRNO(EINVAL), "Invalid capsule name: %s", optarg);
413
414 arg_host = optarg;
415 arg_transport = BUS_TRANSPORT_CAPSULE;
416 arg_runtime_scope = RUNTIME_SCOPE_USER;
417 break;
418
6c12b52e
LP		 419 case ARG_SCOPE:
420 arg_scope = true;
421 break;
422
7976b9f0 423 case 'u':
6c12b52e
LP		 424 arg_unit = optarg;
425 break;
426
9f2e86af 427 case ARG_DESCRIPTION:
2f0b4d57 428 r = free_and_strdup_warn(&arg_description, optarg);
9ce3440a
ZJS		 429 if (r < 0)
430 return r;
9f2e86af
LP		 431 break;
432
c221420b
LP		 433 case ARG_SLICE:
434 arg_slice = optarg;
435 break;
436
2c7039b3
MAL		 437 case ARG_SLICE_INHERIT:
438 arg_slice_inherit = true;
439 break;
440
3ae314af
MY		 441 case ARG_EXPAND_ENVIRONMENT:
442 r = parse_boolean_argument("--expand-environment=", optarg, &arg_expand_environment);
f872ddd1
ZJS		 443 if (r < 0)
444 return r;
445 break;
446
a6c0353b
LP		 447 case ARG_SEND_SIGHUP:
448 arg_send_sighup = true;
449 break;
450
6577c7ce
LP		 451 case 'r':
452 arg_remain_after_exit = true;
453 break;
454
d21ed1ea
LP		 455 case 'H':
456 arg_transport = BUS_TRANSPORT_REMOTE;
457 arg_host = optarg;
458 break;
459
460 case 'M':
a59cc386
MY		 461 r = parse_machine_argument(optarg, &arg_host, &arg_transport);
462 if (r < 0)
463 return r;
d21ed1ea
LP		 464 break;
465
c7040b5d
LP		 466 case ARG_SERVICE_TYPE:
467 arg_service_type = optarg;
468 break;
469
470 case ARG_EXEC_USER:
471 arg_exec_user = optarg;
472 break;
473
474 case ARG_EXEC_GROUP:
475 arg_exec_group = optarg;
476 break;
477
478 case ARG_NICE:
41bf0590
LP		 479 r = parse_nice(optarg, &arg_nice);
480 if (r < 0)
481 return log_error_errno(r, "Failed to parse nice value: %s", optarg);
c7040b5d
LP		 482
483 arg_nice_set = true;
484 break;
485
b5911366 486 case 'E':
0337b3d5
ZJS		 487 r = strv_env_replace_strdup_passthrough(&arg_environment, optarg);
488 if (r < 0)
489 return log_error_errno(r, "Cannot assign environment variable %s: %m", optarg);
c7040b5d
LP		 490
491 break;
492
df31a6c0 493 case 'p':
df31a6c0
LP		 494 if (strv_extend(&arg_property, optarg) < 0)
495 return log_oom();
496
497 break;
498
b7ba8d55 499 case 'T': /* --pty-late */
5dca7739 500 case 't': /* --pty */
a5c11722 501 arg_stdio |= ARG_STDIO_PTY;
b7ba8d55 502 arg_pty_late = c == 'T';
5dca7739
LP		 503 break;
504
505 case 'P': /* --pipe */
a5c11722 506 arg_stdio |= ARG_STDIO_DIRECT;
9b15b784
LP		 507 break;
508
095dc596
LP		 509 case 'q':
510 arg_quiet = true;
511 break;
512
744ca8f6
LP		 513 case 'v':
514 arg_verbose = true;
515 break;
516
4c213d6c 517 case ARG_ON_ACTIVE:
f2b9f2c8
YW		 518 r = add_timer_property("OnActiveSec", optarg);
519 if (r < 0)
4c213d6c 520 return r;
4c213d6c 521
787be190 522 arg_with_timer = true;
4c213d6c
WC		 523 break;
524
525 case ARG_ON_BOOT:
f2b9f2c8
YW		 526 r = add_timer_property("OnBootSec", optarg);
527 if (r < 0)
4c213d6c 528 return r;
4c213d6c 529
787be190 530 arg_with_timer = true;
4c213d6c
WC		 531 break;
532
533 case ARG_ON_STARTUP:
f2b9f2c8
YW		 534 r = add_timer_property("OnStartupSec", optarg);
535 if (r < 0)
4c213d6c 536 return r;
4c213d6c 537
787be190 538 arg_with_timer = true;
4c213d6c
WC		 539 break;
540
541 case ARG_ON_UNIT_ACTIVE:
f2b9f2c8
YW		 542 r = add_timer_property("OnUnitActiveSec", optarg);
543 if (r < 0)
4c213d6c 544 return r;
4c213d6c 545
787be190 546 arg_with_timer = true;
4c213d6c
WC		 547 break;
548
549 case ARG_ON_UNIT_INACTIVE:
f2b9f2c8
YW		 550 r = add_timer_property("OnUnitInactiveSec", optarg);
551 if (r < 0)
4c213d6c 552 return r;
4c213d6c 553
787be190 554 arg_with_timer = true;
4c213d6c
WC		 555 break;
556
10434dbd
FS		 557 case ARG_ON_CALENDAR: {
558 _cleanup_(calendar_spec_freep) CalendarSpec *cs = NULL;
10434dbd 559
10434dbd
FS		 560 r = calendar_spec_from_string(optarg, &cs);
561 if (r < 0)
04220fda
LP		 562 return log_error_errno(r, "Failed to parse calendar event specification: %m");
563
7842c5f2 564 /* Let's make sure the given calendar event is not in the past */
04220fda
LP		 565 r = calendar_spec_next_usec(cs, now(CLOCK_REALTIME), NULL);
566 if (r == -ENOENT)
e608bf6f
ZJS		 567 /* The calendar event is in the past — let's warn about this, but install it
568 * anyway as is. The service manager will trigger the service right away.
569 * Moreover, the server side might have a different clock or timezone than we
570 * do, hence it should decide when or whether to run something. */
04220fda
LP		 571 log_warning("Specified calendar expression is in the past, proceeding anyway.");
572 else if (r < 0)
573 return log_error_errno(r, "Failed to calculate next time calendar expression elapses: %m");
10434dbd 574
f2b9f2c8
YW		 575 r = add_timer_property("OnCalendar", optarg);
576 if (r < 0)
efebb613
LP		 577 return r;
578
579 arg_with_timer = true;
580 break;
10434dbd 581 }
efebb613
LP		 582
583 case ARG_ON_TIMEZONE_CHANGE:
584 r = add_timer_property("OnTimezoneChange", "yes");
585 if (r < 0)
586 return r;
587
588 arg_with_timer = true;
589 break;
590
591 case ARG_ON_CLOCK_CHANGE:
592 r = add_timer_property("OnClockChange", "yes");
593 if (r < 0)
4c213d6c 594 return r;
024a8ec1 595
787be190 596 arg_with_timer = true;
4c213d6c
WC		 597 break;
598
599 case ARG_TIMER_PROPERTY:
600
601 if (strv_extend(&arg_timer_property, optarg) < 0)
602 return log_oom();
603
787be190 604 arg_with_timer = arg_with_timer ||
49fe5c09
LP		 605 STARTSWITH_SET(optarg,
606 "OnActiveSec=",
607 "OnBootSec=",
608 "OnStartupSec=",
609 "OnUnitActiveSec=",
610 "OnUnitInactiveSec=",
611 "OnCalendar=");
4c213d6c
WC		 612 break;
613
d59ef3e2
YW		 614 case ARG_PATH_PROPERTY:
615
616 if (strv_extend(&arg_path_property, optarg) < 0)
617 return log_oom();
618
619 break;
620
621 case ARG_SOCKET_PROPERTY:
622
623 if (strv_extend(&arg_socket_property, optarg) < 0)
624 return log_oom();
625
626 break;
627
3d161f99
LP		 628 case ARG_NO_BLOCK:
629 arg_no_block = true;
630 break;
631
2a453c2e
LP		 632 case ARG_WAIT:
633 arg_wait = true;
634 break;
635
2d21165a 636 case ARG_WORKING_DIRECTORY:
614b022c 637 r = parse_path_argument(optarg, true, &arg_working_directory);
2d21165a
LP		 638 if (r < 0)
639 return r;
640
641 break;
642
643 case 'd': {
644 _cleanup_free_ char *p = NULL;
645
646 r = safe_getcwd(&p);
647 if (r < 0)
648 return log_error_errno(r, "Failed to get current working directory: %m");
649
650 if (empty_or_root(p))
651 arg_working_directory = mfree(arg_working_directory);
652 else
653 free_and_replace(arg_working_directory, p);
654 break;
655 }
656
fe9d0be9
LP		 657 case 'G':
658 arg_aggressive_gc = true;
659 break;
660
badd28e1
LP		 661 case 'S':
662 arg_shell = true;
663 break;
664
706a9535
GL		 665 case ARG_JOB_MODE:
666 if (streq(optarg, "help"))
667 return DUMP_STRING_TABLE(job_mode, JobMode, _JOB_MODE_MAX);
668
669 r = job_mode_from_string(optarg);
670 if (r < 0)
671 return log_error_errno(r, "Invalid job mode: %s", optarg);
672
673 arg_job_mode = r;
674 break;
675
1072d947
LP		 676 case ARG_IGNORE_FAILURE:
677 arg_ignore_failure = true;
678 break;
679
2f0b4d57
LP		 680 case ARG_BACKGROUND:
681 r = free_and_strdup_warn(&arg_background, optarg);
682 if (r < 0)
683 return r;
684 break;
685
fe5a6c47
LN		 686 case ARG_JSON:
687 r = parse_json_argument(optarg, &arg_json_format_flags);
688 if (r <= 0)
689 return r;
690 break;
691
6c12b52e
LP		 692 case '?':
693 return -EINVAL;
694
695 default:
04499a70 696 assert_not_reached();
6c12b52e 697 }
6c12b52e 698
966f3a24 699 /* If we are talking to the per-user instance PolicyKit isn't going to help */
4870133b 700 if (arg_runtime_scope == RUNTIME_SCOPE_USER)
966f3a24
LP		 701 arg_ask_password = false;
702
787be190 703 with_trigger = !!arg_path_property || !!arg_socket_property || arg_with_timer;
d59ef3e2
YW		 704
705 /* currently, only single trigger (path, socket, timer) unit can be created simultaneously */
787be190 706 if ((int) !!arg_path_property + (int) !!arg_socket_property + (int) arg_with_timer > 1)
baaa35ad
ZJS		 707 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
708 "Only single trigger (path, socket, timer) unit can be created.");
5dca7739 709
badd28e1
LP		 710 if (arg_shell) {
711 /* If --shell is imply --pty --pipe --same-dir --service-type=exec --wait --collect, unless otherwise
712 * specified. */
713
714 if (!arg_scope) {
715 if (arg_stdio == ARG_STDIO_NONE)
716 arg_stdio = ARG_STDIO_AUTO;
717
718 if (!arg_working_directory) {
719 r = safe_getcwd(&arg_working_directory);
720 if (r < 0)
721 return log_error_errno(r, "Failed to get current working directory: %m");
722 }
723
4b5baf75
LP		 724 if (!arg_service_type)
725 arg_service_type = "exec";
badd28e1
LP		 726
727 arg_wait = true;
728 }
729
730 arg_aggressive_gc = true;
731 }
732
d46b79bb 733 if (arg_stdio == ARG_STDIO_AUTO)
b7ba8d55
LP		 734 /* If we both --pty/--pty-late and --pipe are specified we'll automatically pick --pty/--pty-late if we
735 * are connected fully to a TTY and pick direct fd passing otherwise. This way, we
736 * automatically adapt to usage in a shell pipeline, but we are neatly interactive with
737 * tty-level isolation otherwise. */
988053ea 738 arg_stdio = isatty_safe(STDIN_FILENO) && isatty_safe(STDOUT_FILENO) && isatty_safe(STDERR_FILENO) ?
5dca7739
LP		 739 ARG_STDIO_PTY :
740 ARG_STDIO_DIRECT;
5dca7739 741
b7ba8d55
LP		 742 if (arg_pty_late < 0)
743 arg_pty_late = false; /* For systemd-run this defaults to false, for compat reasons */
744
badd28e1
LP		 745 if (argc > optind) {
746 char **l;
747
748 if (arg_shell)
749 return log_error_errno(SYNTHETIC_ERRNO(EINVAL), "If --shell is used, no command line is expected.");
750
751 l = strv_copy(argv + optind);
752 if (!l)
753 return log_oom();
754
755 strv_free_and_replace(arg_cmdline, l);
756
757 } else if (arg_shell) {
758 _cleanup_free_ char *s = NULL;
759 char **l;
760
761 r = get_shell(&s);
762 if (r < 0)
763 return log_error_errno(r, "Failed to determine shell: %m");
764
765 l = strv_new(s);
766 if (!l)
767 return log_oom();
768
769 strv_free_and_replace(arg_cmdline, l);
770
771 } else if (!arg_unit || !with_trigger)
772 return log_error_errno(SYNTHETIC_ERRNO(EINVAL), "Command line to execute required.");
6c12b52e 773
4870133b 774 if (arg_runtime_scope == RUNTIME_SCOPE_USER && arg_transport == BUS_TRANSPORT_REMOTE)
baaa35ad 775 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
cbdc2949 776 "Execution in user context is not supported on remote systems.");
d21ed1ea 777
cbdc2949 778 if (arg_scope && arg_transport == BUS_TRANSPORT_REMOTE)
baaa35ad 779 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
cbdc2949 780 "Scope execution is not supported on remote systems.");
d21ed1ea 781
baaa35ad
ZJS		 782 if (arg_scope && (arg_remain_after_exit || arg_service_type))
783 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
784 "--remain-after-exit and --service-type= are not supported in --scope mode.");
c7040b5d 785
b7ba8d55
LP		 786 if (arg_stdio != ARG_STDIO_NONE) {
787 if (with_trigger || arg_scope)
788 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
99a7386a 789 "--pty/--pty-late/--pipe is not compatible in trigger (path/socket/timer units) or --scope mode.");
9b15b784 790
b7ba8d55
LP		 791 if (arg_transport == BUS_TRANSPORT_REMOTE)
792 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
793 "--pty/--pty-late/--pipe is only supported when connecting to the local system or containers.");
024a8ec1 794
b7ba8d55
LP		 795 if (arg_no_block)
796 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
797 "--pty/--pty-late/--pipe is not compatible with --no-block.");
798 }
578c03bc 799
2fb10b3c
MY		 800 if (arg_stdio == ARG_STDIO_PTY && arg_pty_late && streq_ptr(arg_service_type, "oneshot"))
801 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
802 "--pty-late is not compatible with --service-type=oneshot.");
803
baaa35ad
ZJS		 804 if (arg_scope && with_trigger)
805 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
806 "Path, socket or timer options are not supported in --scope mode.");
4c213d6c 807
787be190 808 if (arg_timer_property && !arg_with_timer)
baaa35ad
ZJS		 809 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
810 "--timer-property= has no effect without any other timer options.");
4c213d6c 811
2a453c2e 812 if (arg_wait) {
baaa35ad
ZJS		 813 if (arg_no_block)
814 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
815 "--wait may not be combined with --no-block.");
2a453c2e 816
baaa35ad
ZJS		 817 if (with_trigger)
818 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
819 "--wait may not be combined with path, socket or timer operations.");
2a453c2e 820
baaa35ad
ZJS		 821 if (arg_scope)
822 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
823 "--wait may not be combined with --scope.");
2a453c2e
LP		 824 }
825
6c12b52e
LP		 826 return 1;
827}
828
72eb3081
LP		 829static int parse_argv_sudo_mode(int argc, char *argv[]) {
830
831 enum {
832 ARG_NO_ASK_PASSWORD = 0x100,
833 ARG_HOST,
834 ARG_MACHINE,
835 ARG_UNIT,
836 ARG_PROPERTY,
837 ARG_DESCRIPTION,
838 ARG_SLICE,
839 ARG_SLICE_INHERIT,
840 ARG_NICE,
841 ARG_SETENV,
2f0b4d57 842 ARG_BACKGROUND,
edd10ab2 843 ARG_PTY,
b7ba8d55 844 ARG_PTY_LATE,
edd10ab2 845 ARG_PIPE,
115fac3c 846 ARG_SHELL_PROMPT_PREFIX,
ef5f7243 847 ARG_LIGHTWEIGHT,
2950fb1b 848 ARG_AREA,
e61d2011 849 ARG_VIA_SHELL,
72eb3081
LP		 850 };
851
7aed4343 852 /* If invoked as "run0" binary, let's expose a more sudo-like interface. We add various extensions
72eb3081
LP		 853 * though (but limit the extension to long options). */
854
855 static const struct option options[] = {
115fac3c
LP		 856 { "help", no_argument, NULL, 'h' },
857 { "version", no_argument, NULL, 'V' },
858 { "no-ask-password", no_argument, NULL, ARG_NO_ASK_PASSWORD },
859 { "machine", required_argument, NULL, ARG_MACHINE },
860 { "unit", required_argument, NULL, ARG_UNIT },
861 { "property", required_argument, NULL, ARG_PROPERTY },
862 { "description", required_argument, NULL, ARG_DESCRIPTION },
863 { "slice", required_argument, NULL, ARG_SLICE },
864 { "slice-inherit", no_argument, NULL, ARG_SLICE_INHERIT },
865 { "user", required_argument, NULL, 'u' },
866 { "group", required_argument, NULL, 'g' },
867 { "nice", required_argument, NULL, ARG_NICE },
868 { "chdir", required_argument, NULL, 'D' },
e61d2011
MY		 869 { "via-shell", no_argument, NULL, ARG_VIA_SHELL },
870 { "login", no_argument, NULL, 'i' }, /* compat with sudo, --via-shell + --chdir='~' */
115fac3c
LP		 871 { "setenv", required_argument, NULL, ARG_SETENV },
872 { "background", required_argument, NULL, ARG_BACKGROUND },
873 { "pty", no_argument, NULL, ARG_PTY },
b7ba8d55 874 { "pty-late", no_argument, NULL, ARG_PTY_LATE },
115fac3c
LP		 875 { "pipe", no_argument, NULL, ARG_PIPE },
876 { "shell-prompt-prefix", required_argument, NULL, ARG_SHELL_PROMPT_PREFIX },
ef5f7243 877 { "lightweight", required_argument, NULL, ARG_LIGHTWEIGHT },
2950fb1b 878 { "area", required_argument, NULL, ARG_AREA },
72eb3081
LP		 879 {},
880 };
881
882 int r, c;
883
884 assert(argc >= 0);
885 assert(argv);
886
887 /* Resetting to 0 forces the invocation of an internal initialization routine of getopt_long()
888 * that checks for GNU extensions in optstring ('-' or '+' at the beginning). */
889 optind = 0;
2950fb1b 890 while ((c = getopt_long(argc, argv, "+hVu:g:D:i", options, NULL)) >= 0)
72eb3081
LP		 891
892 switch (c) {
893
894 case 'h':
895 return help_sudo_mode();
896
897 case 'V':
898 return version();
899
900 case ARG_NO_ASK_PASSWORD:
901 arg_ask_password = false;
902 break;
903
904 case ARG_MACHINE:
a59cc386
MY		 905 r = parse_machine_argument(optarg, &arg_host, &arg_transport);
906 if (r < 0)
907 return r;
72eb3081
LP		 908 break;
909
910 case ARG_UNIT:
911 arg_unit = optarg;
912 break;
913
914 case ARG_PROPERTY:
915 if (strv_extend(&arg_property, optarg) < 0)
916 return log_oom();
917
918 break;
919
920 case ARG_DESCRIPTION:
921 r = free_and_strdup_warn(&arg_description, optarg);
922 if (r < 0)
923 return r;
924 break;
925
926 case ARG_SLICE:
927 arg_slice = optarg;
928 break;
929
930 case ARG_SLICE_INHERIT:
931 arg_slice_inherit = true;
932 break;
933
934 case 'u':
935 arg_exec_user = optarg;
936 break;
937
938 case 'g':
939 arg_exec_group = optarg;
940 break;
941
942 case ARG_NICE:
943 r = parse_nice(optarg, &arg_nice);
944 if (r < 0)
945 return log_error_errno(r, "Failed to parse nice value: %s", optarg);
946
947 arg_nice_set = true;
948 break;
949
950 case 'D':
fa02d58d
MY		 951 if (streq(optarg, "~"))
952 r = free_and_strdup_warn(&arg_working_directory, optarg);
953 else
954 /* Root will be manually suppressed later. */
955 r = parse_path_argument(optarg, /* suppress_root= */ false, &arg_working_directory);
72eb3081
LP		 956 if (r < 0)
957 return r;
958
959 break;
960
961 case ARG_SETENV:
962 r = strv_env_replace_strdup_passthrough(&arg_environment, optarg);
963 if (r < 0)
964 return log_error_errno(r, "Cannot assign environment variable %s: %m", optarg);
965
966 break;
967
2f0b4d57
LP		 968 case ARG_BACKGROUND:
969 r = free_and_strdup_warn(&arg_background, optarg);
970 if (r < 0)
971 return r;
972
973 break;
974
edd10ab2 975 case ARG_PTY:
b7ba8d55 976 case ARG_PTY_LATE:
a5c11722 977 arg_stdio |= ARG_STDIO_PTY;
b7ba8d55 978 arg_pty_late = c == ARG_PTY_LATE;
edd10ab2
LP		 979 break;
980
981 case ARG_PIPE:
a5c11722 982 arg_stdio |= ARG_STDIO_DIRECT;
edd10ab2
LP		 983 break;
984
115fac3c
LP		 985 case ARG_SHELL_PROMPT_PREFIX:
986 r = free_and_strdup_warn(&arg_shell_prompt_prefix, optarg);
987 if (r < 0)
988 return r;
989 break;
990
ef5f7243
LP		 991 case ARG_LIGHTWEIGHT:
992 r = parse_tristate_argument("--lightweight=", optarg, &arg_lightweight);
993 if (r < 0)
994 return r;
995 break;
996
2950fb1b 997 case ARG_AREA:
f44e7a8c
LP		 998 /* We allow an empty --area= specification to allow logging into the primary home directory */
999 if (!isempty(optarg) && !filename_is_valid(optarg))
1000 return log_error_errno(SYNTHETIC_ERRNO(EINVAL), "Invalid area name, refusing: %s", optarg);
1001
1002 r = free_and_strdup_warn(&arg_area, optarg);
1003 if (r < 0)
1004 return r;
1005
1006 break;
1007
e61d2011
MY		 1008 case 'i':
1009 r = free_and_strdup_warn(&arg_working_directory, "~");
1010 if (r < 0)
1011 return r;
1012
1013 _fallthrough_;
1014 case ARG_VIA_SHELL:
1015 arg_via_shell = true;
1016 break;
1017
72eb3081
LP		 1018 case '?':
1019 return -EINVAL;
1020
1021 default:
1022 assert_not_reached();
1023 }
1024
f44e7a8c
LP		 1025 if (!arg_exec_user && arg_area) {
1026 /* If the user specifies --area= but not --user= then consider this an area switch request,
1027 * and default to logging into our own account */
1028 arg_exec_user = getusername_malloc();
1029 if (!arg_exec_user)
1030 return log_oom();
1031 }
1032
72eb3081
LP		 1033 if (!arg_working_directory) {
1034 if (arg_exec_user) {
1035 /* When switching to a specific user, also switch to its home directory. */
1036 arg_working_directory = strdup("~");
1037 if (!arg_working_directory)
1038 return log_oom();
1039 } else {
1040 /* When switching to root without this being specified, then stay in the current directory */
1041 r = safe_getcwd(&arg_working_directory);
1042 if (r < 0)
1043 return log_error_errno(r, "Failed to get current working directory: %m");
1044 }
0054a2ac
JL		 1045 } else {
1046 /* Root was not suppressed earlier, to allow the above check to work properly. */
1047 if (empty_or_root(arg_working_directory))
1048 arg_working_directory = mfree(arg_working_directory);
72eb3081
LP		 1049 }
1050
1051 arg_service_type = "exec";
1052 arg_quiet = true;
1053 arg_wait = true;
1054 arg_aggressive_gc = true;
1055
edd10ab2
LP		 1056 if (IN_SET(arg_stdio, ARG_STDIO_NONE, ARG_STDIO_AUTO))
1057 arg_stdio = isatty_safe(STDIN_FILENO) && isatty_safe(STDOUT_FILENO) && isatty_safe(STDERR_FILENO) ? ARG_STDIO_PTY : ARG_STDIO_DIRECT;
ef5f7243 1058 log_debug("Using %s stdio mode.", arg_stdio == ARG_STDIO_PTY ? "pty" : "direct");
b7ba8d55
LP		 1059 if (arg_pty_late < 0)
1060 arg_pty_late = arg_ask_password; /* for run0 this defaults to on, except if --no-ask-pasword is used */
ef5f7243 1061
72eb3081
LP		 1062 arg_expand_environment = false;
1063 arg_send_sighup = true;
1064
1065 _cleanup_strv_free_ char **l = NULL;
e61d2011 1066 if (argc > optind) {
72eb3081 1067 l = strv_copy(argv + optind);
e61d2011
MY		 1068 if (!l)
1069 return log_oom();
1070 } else if (!arg_via_shell) {
72eb3081
LP		 1071 const char *e;
1072
1073 e = strv_env_get(arg_environment, "SHELL");
ba7fb8cf 1074 if (e) {
72eb3081 1075 arg_exec_path = strdup(e);
ba7fb8cf
MY		 1076 if (!arg_exec_path)
1077 return log_oom();
1078 } else {
72eb3081
LP		 1079 if (arg_transport == BUS_TRANSPORT_LOCAL) {
1080 r = get_shell(&arg_exec_path);
1081 if (r < 0)
1082 return log_error_errno(r, "Failed to determine shell: %m");
ba7fb8cf 1083 } else {
72eb3081 1084 arg_exec_path = strdup("/bin/sh");
ba7fb8cf
MY		 1085 if (!arg_exec_path)
1086 return log_oom();
1087 }
1088
1089 r = strv_env_assign(&arg_environment, "SHELL", arg_exec_path);
1090 if (r < 0)
1091 return log_error_errno(r, "Failed to set $SHELL environment variable: %m");
72eb3081 1092 }
72eb3081
LP		 1093
1094 l = make_login_shell_cmdline(arg_exec_path);
e61d2011
MY		 1095 if (!l)
1096 return log_oom();
1097 }
1098
1099 if (arg_via_shell) {
1100 arg_exec_path = strdup(_PATH_BSHELL);
1101 if (!arg_exec_path)
1102 return log_oom();
1103
1104 r = strv_prepend(&l, "-sh");
1105 if (r < 0)
1106 return log_oom();
72eb3081 1107 }
72eb3081
LP		 1108
1109 strv_free_and_replace(arg_cmdline, l);
1110
1111 if (!arg_slice) {
80a8dbb4 1112 arg_slice = strdup(SPECIAL_USER_SLICE);
72eb3081
LP		 1113 if (!arg_slice)
1114 return log_oom();
1115 }
1116
1117 _cleanup_free_ char *un = NULL;
1118 un = getusername_malloc();
1119 if (!un)
1120 return log_oom();
1121
1122 /* Set a bunch of environment variables in a roughly sudo-compatible way */
1123 r = strv_env_assign(&arg_environment, "SUDO_USER", un);
1124 if (r < 0)
1125 return log_error_errno(r, "Failed to set $SUDO_USER environment variable: %m");
1126
1127 r = strv_env_assignf(&arg_environment, "SUDO_UID", UID_FMT, getuid());
1128 if (r < 0)
1129 return log_error_errno(r, "Failed to set $SUDO_UID environment variable: %m");
1130
1131 r = strv_env_assignf(&arg_environment, "SUDO_GID", GID_FMT, getgid());
1132 if (r < 0)
1133 return log_error_errno(r, "Failed to set $SUDO_GID environment variable: %m");
1134
1135 if (strv_extendf(&arg_property, "LogExtraFields=ELEVATED_UID=" UID_FMT, getuid()) < 0)
1136 return log_oom();
1137
1138 if (strv_extendf(&arg_property, "LogExtraFields=ELEVATED_GID=" GID_FMT, getgid()) < 0)
1139 return log_oom();
1140
1141 if (strv_extendf(&arg_property, "LogExtraFields=ELEVATED_USER=%s", un) < 0)
1142 return log_oom();
1143
7aed4343 1144 if (strv_extend(&arg_property, "PAMName=systemd-run0") < 0)
72eb3081
LP		 1145 return log_oom();
1146
61ce6e67
MY		 1147 /* The service manager ignores SIGPIPE for all spawned processes by default. Let's explicitly override
1148 * that here, since we're primarily invoked in interactive environments where this does matter. */
1149 if (strv_extend(&arg_property, "IgnoreSIGPIPE=no") < 0)
1150 return log_oom();
1151
d4ffb37b 1152 if (!arg_background && arg_stdio == ARG_STDIO_PTY && shall_tint_background()) {
3ef072ee 1153 double hue;
2f0b4d57 1154
8496b938 1155 if (privileged_execution())
3ef072ee
LP		 1156 hue = 0; /* red */
1157 else
1158 hue = 60 /* yellow */;
1159
1160 r = terminal_tint_color(hue, &arg_background);
2f0b4d57
LP		 1161 if (r < 0)
1162 log_debug_errno(r, "Unable to get terminal background color, not tinting background: %m");
2f0b4d57
LP		 1163 }
1164
115fac3c
LP		 1165 if (!arg_shell_prompt_prefix) {
1166 const char *e = secure_getenv("SYSTEMD_RUN_SHELL_PROMPT_PREFIX");
1167 if (e) {
1168 arg_shell_prompt_prefix = strdup(e);
1169 if (!arg_shell_prompt_prefix)
1170 return log_oom();
1171 } else if (emoji_enabled()) {
1ae9b0cf 1172 arg_shell_prompt_prefix = strjoin(glyph(privileged_execution() ? GLYPH_SUPERHERO : GLYPH_IDCARD), " ");
115fac3c
LP		 1173 if (!arg_shell_prompt_prefix)
1174 return log_oom();
1175 }
1176 }
1177
1178 if (!isempty(arg_shell_prompt_prefix)) {
1179 r = strv_env_assign(&arg_environment, "SHELL_PROMPT_PREFIX", arg_shell_prompt_prefix);
1180 if (r < 0)
1181 return log_error_errno(r, "Failed to set $SHELL_PROMPT_PREFIX environment variable: %m");
1182 }
1183
f44e7a8c
LP		 1184 if (!strv_env_get(arg_environment, "XDG_SESSION_CLASS")) {
1185
1186 /* If logging into an area, imply lightweight mode */
1187 if (arg_lightweight < 0 && !isempty(arg_area))
1188 arg_lightweight = true;
1189
1190 /* When using run0 to acquire privileges temporarily, let's not pull in session manager by
1191 * default. Note that pam_logind/systemd-logind doesn't distinguish between run0-style privilege
1192 * escalation on a TTY and first class (getty-style) TTY logins (and thus gives root a per-session
1193 * manager for interactive TTY sessions), hence let's override the logic explicitly here. We only do
1194 * this for root though, under the assumption that if a regular user temporarily transitions into
1195 * another regular user it's a better default that the full user environment is uniformly
1196 * available. */
1197 if (arg_lightweight < 0 && privileged_execution())
1198 arg_lightweight = true;
1199
1200 if (arg_lightweight >= 0) {
1201 const char *class =
1202 arg_lightweight ? (arg_stdio == ARG_STDIO_PTY ? (privileged_execution() ? "user-early-light" : "user-light") : "background-light") :
1203 (arg_stdio == ARG_STDIO_PTY ? (privileged_execution() ? "user-early" : "user") : "background");
ef5f7243 1204
f44e7a8c 1205 log_debug("Setting XDG_SESSION_CLASS to '%s'.", class);
ef5f7243 1206
f44e7a8c
LP		 1207 r = strv_env_assign(&arg_environment, "XDG_SESSION_CLASS", class);
1208 if (r < 0)
1209 return log_error_errno(r, "Failed to set $XDG_SESSION_CLASS environment variable: %m");
1210 }
1211 }
ef5f7243 1212
f44e7a8c
LP		 1213 if (arg_area) {
1214 r = strv_env_assign(&arg_environment, "XDG_AREA", arg_area);
ef5f7243 1215 if (r < 0)
f44e7a8c 1216 return log_error_errno(r, "Failed to set $XDG_AREA environment variable: %m");
ef5f7243
LP		 1217 }
1218
72eb3081
LP		 1219 return 1;
1220}
1221
89ada3ba 1222static int transient_unit_set_properties(sd_bus_message *m, UnitType t, char **properties) {
c2756a68
LP		 1223 int r;
1224
49a510eb
LP		 1225 assert(m);
1226
9b15b784
LP		 1227 r = sd_bus_message_append(m, "(sv)", "Description", "s", arg_description);
1228 if (r < 0)
f53bddf3 1229 return bus_log_create_error(r);
9b15b784 1230
fe9d0be9
LP		 1231 if (arg_aggressive_gc) {
1232 r = sd_bus_message_append(m, "(sv)", "CollectMode", "s", "inactive-or-failed");
1233 if (r < 0)
f53bddf3 1234 return bus_log_create_error(r);
fe9d0be9
LP		 1235 }
1236
49a510eb
LP		 1237 r = sd_bus_is_bus_client(sd_bus_message_get_bus(m));
1238 if (r < 0)
1239 return log_error_errno(r, "Can't determine if bus connection is direct or to broker: %m");
1240 if (r > 0) {
1241 /* Pin the object as least as long as we are around. Note that AddRef (currently) only works
1242 * if we talk via the bus though. */
1243 r = sd_bus_message_append(m, "(sv)", "AddRef", "b", 1);
1244 if (r < 0)
1245 return bus_log_create_error(r);
1246 }
1247
b1358f03 1248 return bus_append_unit_property_assignment_many(m, t, properties);
9b15b784
LP		 1249}
1250
1251static int transient_cgroup_set_properties(sd_bus_message *m) {
2c7039b3
MAL		 1252 _cleanup_free_ char *name = NULL;
1253 _cleanup_free_ char *slice = NULL;
9b15b784 1254 int r;
3ae314af 1255
9b15b784 1256 assert(m);
c2756a68 1257
2c7039b3
MAL		 1258 if (arg_slice_inherit) {
1259 char *end;
c221420b 1260
4870133b
LP		 1261 switch (arg_runtime_scope) {
1262
1263 case RUNTIME_SCOPE_USER:
2c7039b3 1264 r = cg_pid_get_user_slice(0, &name);
4870133b
LP		 1265 break;
1266
1267 case RUNTIME_SCOPE_SYSTEM:
2c7039b3 1268 r = cg_pid_get_slice(0, &name);
4870133b
LP		 1269 break;
1270
1271 default:
1272 assert_not_reached();
1273 }
1274
7410616c 1275 if (r < 0)
2c7039b3 1276 return log_error_errno(r, "Failed to get PID slice: %m");
c221420b 1277
2c7039b3
MAL		 1278 end = endswith(name, ".slice");
1279 if (!end)
1280 return -ENXIO;
1281 *end = 0;
c221420b
LP		 1282 }
1283
eda397c9
YW		 1284 if (!isempty(arg_slice) && !strextend_with_separator(&name, "-", arg_slice))
1285 return log_oom();
2c7039b3
MAL		 1286
1287 if (!name)
1288 return 0;
1289
1290 r = unit_name_mangle_with_suffix(name, "as slice",
1291 arg_quiet ? 0 : UNIT_NAME_MANGLE_WARN,
1292 ".slice", &slice);
1293 if (r < 0)
1294 return log_error_errno(r, "Failed to mangle name '%s': %m", arg_slice);
1295
1296 r = sd_bus_message_append(m, "(sv)", "Slice", "s", slice);
1297 if (r < 0)
1298 return bus_log_create_error(r);
1299
9b15b784
LP		 1300 return 0;
1301}
1302
1303static int transient_kill_set_properties(sd_bus_message *m) {
f53bddf3
LP		 1304 int r;
1305
9b15b784
LP		 1306 assert(m);
1307
f53bddf3
LP		 1308 if (arg_send_sighup) {
1309 r = sd_bus_message_append(m, "(sv)", "SendSIGHUP", "b", arg_send_sighup);
1310 if (r < 0)
1311 return bus_log_create_error(r);
1312 }
1313
1314 return 0;
6c12b52e
LP		 1315}
1316
ddef3ec8 1317static int transient_service_set_properties(sd_bus_message *m, const char *pty_path, int pty_fd) {
20a78028 1318 int r, send_term; /* tri-state */
6c12b52e 1319
e61d2011
MY		 1320 /* Use ExecStartEx if new exec flags are required. */
1321 bool use_ex_prop = !arg_expand_environment || arg_via_shell;
f872ddd1 1322
8159d91a 1323 assert(m);
9843ad6d 1324 assert((!!pty_path) == (pty_fd >= 0));
8159d91a 1325
89ada3ba 1326 r = transient_unit_set_properties(m, UNIT_SERVICE, arg_property);
9b15b784
LP		 1327 if (r < 0)
1328 return r;
1329
1330 r = transient_kill_set_properties(m);
1331 if (r < 0)
1332 return r;
1333
1334 r = transient_cgroup_set_properties(m);
86b8d289
LP		 1335 if (r < 0)
1336 return r;
1337
df31a6c0
LP		 1338 if (arg_remain_after_exit) {
1339 r = sd_bus_message_append(m, "(sv)", "RemainAfterExit", "b", arg_remain_after_exit);
1340 if (r < 0)
f53bddf3 1341 return bus_log_create_error(r);
df31a6c0 1342 }
6577c7ce 1343
c7040b5d
LP		 1344 if (arg_service_type) {
1345 r = sd_bus_message_append(m, "(sv)", "Type", "s", arg_service_type);
1346 if (r < 0)
f53bddf3 1347 return bus_log_create_error(r);
c7040b5d
LP		 1348 }
1349
1350 if (arg_exec_user) {
1351 r = sd_bus_message_append(m, "(sv)", "User", "s", arg_exec_user);
1352 if (r < 0)
f53bddf3 1353 return bus_log_create_error(r);
c7040b5d
LP		 1354 }
1355
1356 if (arg_exec_group) {
1357 r = sd_bus_message_append(m, "(sv)", "Group", "s", arg_exec_group);
1358 if (r < 0)
f53bddf3 1359 return bus_log_create_error(r);
c7040b5d
LP		 1360 }
1361
1362 if (arg_nice_set) {
1363 r = sd_bus_message_append(m, "(sv)", "Nice", "i", arg_nice);
1364 if (r < 0)
f53bddf3 1365 return bus_log_create_error(r);
c7040b5d
LP		 1366 }
1367
2d21165a
LP		 1368 if (arg_working_directory) {
1369 r = sd_bus_message_append(m, "(sv)", "WorkingDirectory", "s", arg_working_directory);
1370 if (r < 0)
1371 return bus_log_create_error(r);
1372 }
1373
9b15b784 1374 if (pty_path) {
9843ad6d
MY		 1375 r = sd_bus_message_append(m, "(sv)(sv)(sv)(sv)",
1376 "TTYPath", "s", pty_path,
1377 "StandardInputFileDescriptor", "h", pty_fd,
1378 "StandardOutputFileDescriptor", "h", pty_fd,
1379 "StandardErrorFileDescriptor", "h", pty_fd);
9b15b784 1380 if (r < 0)
f53bddf3 1381 return bus_log_create_error(r);
9b15b784 1382
5dca7739
LP		 1383 send_term = true;
1384
1385 } else if (arg_stdio == ARG_STDIO_DIRECT) {
1386 r = sd_bus_message_append(m,
1387 "(sv)(sv)(sv)",
1388 "StandardInputFileDescriptor", "h", STDIN_FILENO,
1389 "StandardOutputFileDescriptor", "h", STDOUT_FILENO,
1390 "StandardErrorFileDescriptor", "h", STDERR_FILENO);
1391 if (r < 0)
f53bddf3 1392 return bus_log_create_error(r);
5dca7739 1393
4d6eb644 1394 send_term = -1;
20a78028
MY		 1395 } else
1396 send_term = false;
5dca7739 1397
4d6eb644 1398 if (send_term != 0) {
afdca6c6 1399 const char *e, *colorterm = NULL, *no_color = NULL;
5dca7739 1400
afdca6c6 1401 /* Propagate $TERM + $COLORTERM + $NO_COLOR if we are actually connected to a TTY */
4d6eb644 1402 if (isatty_safe(STDIN_FILENO) || isatty_safe(STDOUT_FILENO) || isatty_safe(STDERR_FILENO)) {
afdca6c6 1403 e = strv_find_prefix(environ, "TERM=");
20a78028 1404 send_term = !!e;
afdca6c6
LP		 1405
1406 if (send_term) {
1407 /* If we send $TERM along, then also propagate $COLORTERM + $NO_COLOR right with it */
1408 colorterm = strv_find_prefix(environ, "COLORTERM=");
1409 no_color = strv_find_prefix(environ, "NO_COLOR=");
1410 }
4d6eb644
LP		 1411 } else
1412 /* If we are not connected to any TTY ourselves, then send TERM=dumb, but only if we
1413 * really need to (because we actually allocated a TTY for the service) */
afdca6c6 1414 e = "TERM=dumb";
4d6eb644
LP		 1415
1416 if (send_term > 0) {
afdca6c6
LP		 1417 r = sd_bus_message_append(
1418 m,
1419 "(sv)",
1420 "Environment", "as", 1, e);
9b15b784 1421 if (r < 0)
f53bddf3 1422 return bus_log_create_error(r);
afdca6c6
LP		 1423
1424 if (colorterm) {
1425 r = sd_bus_message_append(
1426 m,
1427 "(sv)",
1428 "Environment", "as", 1, colorterm);
1429 if (r < 0)
1430 return bus_log_create_error(r);
1431 }
1432
1433 if (no_color) {
1434 r = sd_bus_message_append(
1435 m,
1436 "(sv)",
1437 "Environment", "as", 1, no_color);
1438 if (r < 0)
1439 return bus_log_create_error(r);
1440 }
9b15b784
LP		 1441 }
1442 }
1443
c7040b5d
LP		 1444 if (!strv_isempty(arg_environment)) {
1445 r = sd_bus_message_open_container(m, 'r', "sv");
1446 if (r < 0)
f53bddf3 1447 return bus_log_create_error(r);
c7040b5d
LP		 1448
1449 r = sd_bus_message_append(m, "s", "Environment");
1450 if (r < 0)
f53bddf3 1451 return bus_log_create_error(r);
c7040b5d
LP		 1452
1453 r = sd_bus_message_open_container(m, 'v', "as");
1454 if (r < 0)
f53bddf3 1455 return bus_log_create_error(r);
c7040b5d
LP		 1456
1457 r = sd_bus_message_append_strv(m, arg_environment);
1458 if (r < 0)
f53bddf3 1459 return bus_log_create_error(r);
c7040b5d
LP		 1460
1461 r = sd_bus_message_close_container(m);
1462 if (r < 0)
f53bddf3 1463 return bus_log_create_error(r);
c7040b5d
LP		 1464
1465 r = sd_bus_message_close_container(m);
1466 if (r < 0)
f53bddf3 1467 return bus_log_create_error(r);
4c213d6c
WC		 1468 }
1469
1470 /* Exec container */
badd28e1 1471 if (!strv_isempty(arg_cmdline)) {
4c213d6c
WC		 1472 r = sd_bus_message_open_container(m, 'r', "sv");
1473 if (r < 0)
f53bddf3 1474 return bus_log_create_error(r);
4c213d6c 1475
f872ddd1
ZJS		 1476 r = sd_bus_message_append(m, "s",
1477 use_ex_prop ? "ExecStartEx" : "ExecStart");
4c213d6c 1478 if (r < 0)
f53bddf3 1479 return bus_log_create_error(r);
4c213d6c 1480
f872ddd1
ZJS		 1481 r = sd_bus_message_open_container(m, 'v',
1482 use_ex_prop ? "a(sasas)" : "a(sasb)");
4c213d6c 1483 if (r < 0)
f53bddf3 1484 return bus_log_create_error(r);
4c213d6c 1485
f872ddd1
ZJS		 1486 r = sd_bus_message_open_container(m, 'a',
1487 use_ex_prop ? "(sasas)" : "(sasb)");
4c213d6c 1488 if (r < 0)
f53bddf3 1489 return bus_log_create_error(r);
4c213d6c 1490
f872ddd1
ZJS		 1491 r = sd_bus_message_open_container(m, 'r',
1492 use_ex_prop ? "sasas" : "sasb");
4c213d6c 1493 if (r < 0)
f53bddf3 1494 return bus_log_create_error(r);
4c213d6c 1495
72eb3081 1496 r = sd_bus_message_append(m, "s", arg_exec_path ?: arg_cmdline[0]);
4c213d6c 1497 if (r < 0)
f53bddf3 1498 return bus_log_create_error(r);
4c213d6c 1499
badd28e1 1500 r = sd_bus_message_append_strv(m, arg_cmdline);
4c213d6c 1501 if (r < 0)
f53bddf3 1502 return bus_log_create_error(r);
4c213d6c 1503
db12f843
MY		 1504 if (use_ex_prop) {
1505 _cleanup_strv_free_ char **opts = NULL;
1506
1507 r = exec_command_flags_to_strv(
e61d2011
MY		 1508 (arg_expand_environment ? 0 : EXEC_COMMAND_NO_ENV_EXPAND)|
1509 (arg_ignore_failure ? EXEC_COMMAND_IGNORE_FAILURE : 0)|
1510 (arg_via_shell ? EXEC_COMMAND_VIA_SHELL : 0),
db12f843
MY		 1511 &opts);
1512 if (r < 0)
1513 return log_error_errno(r, "Failed to format execute flags: %m");
1514
1515 r = sd_bus_message_append_strv(m, opts);
1516 } else
1072d947 1517 r = sd_bus_message_append(m, "b", arg_ignore_failure);
4c213d6c 1518 if (r < 0)
f53bddf3 1519 return bus_log_create_error(r);
4c213d6c
WC		 1520
1521 r = sd_bus_message_close_container(m);
1522 if (r < 0)
f53bddf3 1523 return bus_log_create_error(r);
4c213d6c
WC		 1524
1525 r = sd_bus_message_close_container(m);
1526 if (r < 0)
f53bddf3 1527 return bus_log_create_error(r);
4c213d6c
WC		 1528
1529 r = sd_bus_message_close_container(m);
1530 if (r < 0)
f53bddf3 1531 return bus_log_create_error(r);
4c213d6c
WC		 1532
1533 r = sd_bus_message_close_container(m);
1534 if (r < 0)
f53bddf3 1535 return bus_log_create_error(r);
4c213d6c
WC		 1536 }
1537
1538 return 0;
1539}
1540
f2c96f0f 1541static int transient_scope_set_properties(sd_bus_message *m, bool allow_pidfd) {
9b15b784
LP		 1542 int r;
1543
1544 assert(m);
1545
89ada3ba 1546 r = transient_unit_set_properties(m, UNIT_SCOPE, arg_property);
9b15b784
LP		 1547 if (r < 0)
1548 return r;
1549
1550 r = transient_kill_set_properties(m);
1551 if (r < 0)
1552 return r;
1553
37e605f9
LP		 1554 r = transient_cgroup_set_properties(m);
1555 if (r < 0)
1556 return r;
1557
66b574b0 1558 _cleanup_(pidref_done) PidRef pidref = PIDREF_NULL;
7eda208f 1559
66b574b0
DDM		 1560 r = pidref_set_self(&pidref);
1561 if (r < 0)
1562 return r;
f2c96f0f 1563
66b574b0 1564 r = bus_append_scope_pidref(m, &pidref, allow_pidfd);
9b15b784 1565 if (r < 0)
f53bddf3 1566 return bus_log_create_error(r);
9b15b784
LP		 1567
1568 return 0;
1569}
1570
4c213d6c
WC		 1571static int transient_timer_set_properties(sd_bus_message *m) {
1572 int r;
1573
1574 assert(m);
1575
89ada3ba 1576 r = transient_unit_set_properties(m, UNIT_TIMER, arg_timer_property);
4c213d6c
WC		 1577 if (r < 0)
1578 return r;
1579
6348d701
LP		 1580 /* Automatically clean up our transient timers */
1581 r = sd_bus_message_append(m, "(sv)", "RemainAfterElapse", "b", false);
1582 if (r < 0)
f53bddf3 1583 return bus_log_create_error(r);
6348d701 1584
4c213d6c
WC		 1585 return 0;
1586}
1587
0310b2a6 1588static int make_unit_name(UnitType t, char **ret) {
9c8d1e1a
LP		 1589 int r;
1590
9c8d1e1a
LP		 1591 assert(t >= 0);
1592 assert(t < _UNIT_TYPE_MAX);
9dd174dc 1593 assert(ret);
9c8d1e1a 1594
0310b2a6
LP		 1595 /* Preferably use our PID + pidfd ID as identifier, if available. It's a boot time unique identifier
1596 * managed by the kernel. Unfortunately only new kernels support this, hence we keep some fallback
1597 * logic in place. */
9c8d1e1a 1598
0310b2a6
LP		 1599 _cleanup_(pidref_done) PidRef self = PIDREF_NULL;
1600 r = pidref_set_self(&self);
1601 if (r < 0)
1602 return log_error_errno(r, "Failed to get reference to my own process: %m");
1603
1604 r = pidref_acquire_pidfd_id(&self);
1605 if (r < 0) {
1606 log_debug_errno(r, "Failed to acquire pidfd ID of myself, defaulting to randomized unit name: %m");
9c8d1e1a 1607
0310b2a6
LP		 1608 /* We couldn't get the pidfd id. In that case, just pick a random uuid as name */
1609 sd_id128_t rnd;
9c8d1e1a
LP		 1610 r = sd_id128_randomize(&rnd);
1611 if (r < 0)
1612 return log_error_errno(r, "Failed to generate random run unit name: %m");
1613
0310b2a6
LP		 1614 r = asprintf(ret, "run-r" SD_ID128_FORMAT_STR ".%s", SD_ID128_FORMAT_VAL(rnd), unit_type_to_string(t));
1615 } else
1616 r = asprintf(ret, "run-p" PID_FMT "-i%" PRIu64 ".%s", self.pid, self.fd_id, unit_type_to_string(t));
1617 if (r < 0)
1618 return log_oom();
9c8d1e1a 1619
9c8d1e1a
LP		 1620 return 0;
1621}
1622
c8f59296
LP		 1623static int connect_bus(sd_bus **ret) {
1624 _cleanup_(sd_bus_flush_close_unrefp) sd_bus *bus = NULL;
1625 int r;
1626
1627 assert(ret);
1628
1629 /* If --wait is used connect via the bus, unconditionally, as ref/unref is not supported via the
1630 * limited direct connection */
1631 if (arg_wait ||
1632 arg_stdio != ARG_STDIO_NONE ||
1633 (arg_runtime_scope == RUNTIME_SCOPE_USER && !IN_SET(arg_transport, BUS_TRANSPORT_LOCAL, BUS_TRANSPORT_CAPSULE)))
1634 r = bus_connect_transport(arg_transport, arg_host, arg_runtime_scope, &bus);
1635 else
1636 r = bus_connect_transport_systemd(arg_transport, arg_host, arg_runtime_scope, &bus);
1637 if (r < 0)
1638 return bus_log_connect_error(r, arg_transport, arg_runtime_scope);
1639
1640 (void) sd_bus_set_allow_interactive_authorization(bus, arg_ask_password);
1641
1642 *ret = TAKE_PTR(bus);
1643 return 0;
1644}
1645
2a453c2e 1646typedef struct RunContext {
2a453c2e
LP		 1647 sd_event *event;
1648 PTYForward *forward;
b7ba8d55 1649 char *unit;
c8f59296 1650 char *bus_path;
b7ba8d55
LP		 1651 char *start_job;
1652 int pty_fd;
c8f59296
LP		 1653
1654 /* Bus objects */
1655 sd_bus *bus;
1656 sd_bus_slot *match_properties_changed;
1657 sd_bus_slot *match_disconnected;
1658 sd_event_source *retry_timer;
2a453c2e 1659
2b5f7089 1660 /* Current state of the unit */
2a453c2e 1661 char *active_state;
1ac2fc49 1662 char *job;
2b5f7089
LP		 1663
1664 /* The exit data of the unit */
2a453c2e
LP		 1665 uint64_t inactive_exit_usec;
1666 uint64_t inactive_enter_usec;
1667 char *result;
1668 uint64_t cpu_usage_nsec;
324ec6b5 1669 uint64_t memory_peak;
aac3384e 1670 uint64_t memory_swap_peak;
655aab20
LP		 1671 uint64_t ip_ingress_bytes;
1672 uint64_t ip_egress_bytes;
826f7cb1
LP		 1673 uint64_t io_read_bytes;
1674 uint64_t io_write_bytes;
2a453c2e
LP		 1675 uint32_t exit_code;
1676 uint32_t exit_status;
1677} RunContext;
1678
c8f59296
LP		 1679static int run_context_update(RunContext *c);
1680static int run_context_attach_bus(RunContext *c, sd_bus *bus);
1681static void run_context_detach_bus(RunContext *c);
1682static int run_context_reconnect(RunContext *c);
1ac2fc49 1683static int run_context_setup_ptyfwd(RunContext *c);
c8f59296
LP		 1684
1685static void run_context_done(RunContext *c) {
2a453c2e
LP		 1686 assert(c);
1687
c8f59296
LP		 1688 run_context_detach_bus(c);
1689
1690 c->retry_timer = sd_event_source_disable_unref(c->retry_timer);
2a453c2e 1691 c->forward = pty_forward_free(c->forward);
2a453c2e
LP		 1692 c->event = sd_event_unref(c->event);
1693
1694 free(c->active_state);
1ac2fc49 1695 free(c->job);
2a453c2e 1696 free(c->result);
b7ba8d55 1697 free(c->unit);
c8f59296 1698 free(c->bus_path);
b7ba8d55
LP		 1699 free(c->start_job);
1700
1701 safe_close(c->pty_fd);
c8f59296
LP		 1702}
1703
1704static int on_retry_timer(sd_event_source *s, uint64_t usec, void *userdata) {
1705 RunContext *c = ASSERT_PTR(userdata);
1706
1707 c->retry_timer = sd_event_source_disable_unref(c->retry_timer);
1708
1709 return run_context_reconnect(c);
1710}
1711
1712static int run_context_reconnect(RunContext *c) {
2b983b43
MY		 1713 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1714 _cleanup_(sd_bus_unrefp) sd_bus *bus = NULL;
c8f59296
LP		 1715 int r;
1716
1717 assert(c);
1718
1719 run_context_detach_bus(c);
1720
c8f59296 1721 r = connect_bus(&bus);
2b983b43
MY		 1722 if (r < 0)
1723 goto retry_timer;
1724
1725 r = sd_bus_call_method(bus,
1726 "org.freedesktop.systemd1",
1727 c->bus_path,
1728 "org.freedesktop.systemd1.Unit",
1729 "Ref",
1730 &error,
31a1e15c 1731 /* ret_reply = */ NULL, NULL);
c8f59296 1732 if (r < 0) {
2b983b43 1733 /* Hmm, the service manager probably hasn't finished reexecution just yet? Try again later. */
ac004f4c 1734 if (bus_error_is_connection(&error) || bus_error_is_unknown_service(&error))
2b983b43
MY		 1735 goto retry_timer;
1736
1737 if (sd_bus_error_has_name(&error, SD_BUS_ERROR_UNKNOWN_OBJECT))
1738 log_warning_errno(r, "Unit deactivated during reconnection to the bus, exiting.");
1739 else
1740 log_error_errno(r, "Failed to re-add reference to unit: %s", bus_error_message(&error, r));
c8f59296 1741
2b983b43
MY		 1742 (void) sd_event_exit(c->event, EXIT_FAILURE);
1743 return r;
c8f59296
LP		 1744 }
1745
1746 r = run_context_attach_bus(c, bus);
1747 if (r < 0) {
1748 (void) sd_event_exit(c->event, EXIT_FAILURE);
1749 return r;
1750 }
1751
1752 log_info("Reconnected to bus.");
1753
1754 return run_context_update(c);
2b983b43
MY		 1755
1756retry_timer:
1757 log_warning_errno(r, "Failed to reconnect, retrying in 2s: %m");
1758
1759 r = event_reset_time_relative(
1760 c->event,
1761 &c->retry_timer,
1762 CLOCK_MONOTONIC,
1763 2 * USEC_PER_SEC, /* accuracy= */ 0,
1764 on_retry_timer, c,
1765 SD_EVENT_PRIORITY_NORMAL,
1766 "retry-timeout",
1767 /* force_reset= */ false);
1768 if (r < 0) {
1769 (void) sd_event_exit(c->event, EXIT_FAILURE);
1770 return log_error_errno(r, "Failed to install retry timer: %m");
1771 }
1772
1773 return 0;
2a453c2e
LP		 1774}
1775
1ac2fc49
YW		 1776static int run_context_check_started(RunContext *c) {
1777 int r;
1778
1779 assert(c);
1780
1781 if (!c->start_job)
1782 return 0; /* Already started? */
1783
1784 if (streq_ptr(c->start_job, c->job))
1785 return 0; /* The start job is still active. */
1786
1787 /* The start job is finished. */
1788 c->start_job = mfree(c->start_job);
1789
1790 /* Setup ptyfwd now if --pty-late is specified. */
1791 r = run_context_setup_ptyfwd(c);
1792 if (r < 0) {
647ff4b6 1793 (void) sd_event_exit(c->event, EXIT_FAILURE);
1ac2fc49
YW		 1794 return r;
1795 }
1796
1797 if (STRPTR_IN_SET(c->active_state, "inactive", "failed"))
1798 return 0; /* Already finished or failed? */
1799
1800 /* Notify our caller that the service is now running, just in case. */
1801 (void) sd_notifyf(/* unset_environment= */ false,
1802 "READY=1\n"
1803 "RUN_UNIT=%s",
1804 c->unit);
1805 return 0;
1806}
1807
2a453c2e 1808static void run_context_check_done(RunContext *c) {
2a453c2e
LP		 1809 assert(c);
1810
b7ba8d55
LP		 1811 bool done = STRPTR_IN_SET(c->active_state, "inactive", "failed") &&
1812 !c->start_job && /* our start job */
1ac2fc49 1813 !c->job; /* any other job */
7647378b
YW		 1814
1815 if (done && c->forward) /* If the service is gone, it's time to drain the output */
1816 done = pty_forward_drain(c->forward);
1817
1818 if (done)
c8f59296 1819 (void) sd_event_exit(c->event, EXIT_SUCCESS);
2a453c2e
LP		 1820}
1821
2b5f7089 1822static int map_job(sd_bus *bus, const char *member, sd_bus_message *m, sd_bus_error *error, void *userdata) {
1ac2fc49 1823 char **p = ASSERT_PTR(userdata);
2b5f7089
LP		 1824 const char *job;
1825 uint32_t id;
1826 int r;
1827
1ac2fc49
YW		 1828 assert(m);
1829
2b5f7089
LP		 1830 r = sd_bus_message_read(m, "(uo)", &id, &job);
1831 if (r < 0)
1832 return r;
1833
1ac2fc49 1834 return free_and_strdup(p, id == 0 ? NULL : job);
2b5f7089
LP		 1835}
1836
c8f59296 1837static int run_context_update(RunContext *c) {
2a453c2e
LP		 1838
1839 static const struct bus_properties_map map[] = {
2b5f7089
LP		 1840 { "ActiveState", "s", NULL, offsetof(RunContext, active_state) },
1841 { "InactiveExitTimestampMonotonic", "t", NULL, offsetof(RunContext, inactive_exit_usec) },
1842 { "InactiveEnterTimestampMonotonic", "t", NULL, offsetof(RunContext, inactive_enter_usec) },
1843 { "Result", "s", NULL, offsetof(RunContext, result) },
1844 { "ExecMainCode", "i", NULL, offsetof(RunContext, exit_code) },
1845 { "ExecMainStatus", "i", NULL, offsetof(RunContext, exit_status) },
1846 { "CPUUsageNSec", "t", NULL, offsetof(RunContext, cpu_usage_nsec) },
324ec6b5 1847 { "MemoryPeak", "t", NULL, offsetof(RunContext, memory_peak) },
aac3384e 1848 { "MemorySwapPeak", "t", NULL, offsetof(RunContext, memory_swap_peak) },
2b5f7089
LP		 1849 { "IPIngressBytes", "t", NULL, offsetof(RunContext, ip_ingress_bytes) },
1850 { "IPEgressBytes", "t", NULL, offsetof(RunContext, ip_egress_bytes) },
1851 { "IOReadBytes", "t", NULL, offsetof(RunContext, io_read_bytes) },
1852 { "IOWriteBytes", "t", NULL, offsetof(RunContext, io_write_bytes) },
1ac2fc49 1853 { "Job", "(uo)", map_job, offsetof(RunContext, job) },
2a453c2e
LP		 1854 {}
1855 };
1856
f9e0eefc 1857 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2a453c2e
LP		 1858 int r;
1859
c8f59296
LP		 1860 assert(c);
1861 assert(c->bus);
1862
1863 r = bus_map_all_properties(
1864 c->bus,
1865 "org.freedesktop.systemd1",
1866 c->bus_path,
1867 map,
1868 BUS_MAP_STRDUP,
1869 &error,
1870 NULL,
1871 c);
2a453c2e 1872 if (r < 0) {
c8f59296
LP		 1873 /* If this is a connection error, then try to reconnect. This might be because the service
1874 * manager is being restarted. Handle this gracefully. */
ac004f4c 1875 if (bus_error_is_connection(&error) || bus_error_is_unknown_service(&error)) {
2b983b43 1876 log_info_errno(r, "Bus call failed due to connection problems. Trying to reconnect...");
c8f59296
LP		 1877 /* Not propagating error, because we handled it already, by reconnecting. */
1878 return run_context_reconnect(c);
1879 }
1880
1881 (void) sd_event_exit(c->event, EXIT_FAILURE);
f9e0eefc 1882 return log_error_errno(r, "Failed to query unit state: %s", bus_error_message(&error, r));
2a453c2e
LP		 1883 }
1884
1ac2fc49
YW		 1885 r = run_context_check_started(c);
1886 if (r < 0)
1887 return r;
1888
2a453c2e
LP		 1889 run_context_check_done(c);
1890 return 0;
1891}
1892
5b1bad8d 1893static int on_properties_changed(sd_bus_message *m, void *userdata, sd_bus_error *error) {
c8f59296
LP		 1894 return run_context_update(ASSERT_PTR(userdata));
1895}
5b1bad8d 1896
c8f59296
LP		 1897static int on_disconnected(sd_bus_message *m, void *userdata, sd_bus_error *error) {
1898 /* If our connection gets terminated, then try to reconnect. This might be because the service
1899 * manager is being restarted. Handle this gracefully. */
1900 log_info("Got disconnected from bus connection. Trying to reconnect...");
1901 return run_context_reconnect(ASSERT_PTR(userdata));
1902}
1903
1904static int run_context_attach_bus(RunContext *c, sd_bus *bus) {
1905 int r;
1906
1907 assert(c);
1908 assert(bus);
1909
1910 assert(!c->bus);
1911 assert(!c->match_properties_changed);
1912 assert(!c->match_disconnected);
1913
1914 c->bus = sd_bus_ref(bus);
1915
1916 r = sd_bus_match_signal_async(
1917 c->bus,
1918 &c->match_properties_changed,
1919 "org.freedesktop.systemd1",
1920 c->bus_path,
1921 "org.freedesktop.DBus.Properties",
1922 "PropertiesChanged",
1923 on_properties_changed, NULL, c);
1924 if (r < 0)
1925 return log_error_errno(r, "Failed to request PropertiesChanged signal match: %m");
1926
1927 r = sd_bus_match_signal_async(
1928 bus,
1929 &c->match_disconnected,
1930 "org.freedesktop.DBus.Local",
1931 /* path= */ NULL,
1932 "org.freedesktop.DBus.Local",
1933 "Disconnected",
1934 on_disconnected, NULL, c);
1935 if (r < 0)
1936 return log_error_errno(r, "Failed to request Disconnected signal match: %m");
1937
1938 r = sd_bus_attach_event(c->bus, c->event, SD_EVENT_PRIORITY_NORMAL);
1939 if (r < 0)
1940 return log_error_errno(r, "Failed to attach bus to event loop: %m");
1941
1942 return 0;
1943}
1944
1945static void run_context_detach_bus(RunContext *c) {
1946 assert(c);
5b1bad8d 1947
c8f59296
LP		 1948 if (c->bus) {
1949 (void) sd_bus_detach_event(c->bus);
1950 c->bus = sd_bus_unref(c->bus);
1951 }
1952
1953 c->match_properties_changed = sd_bus_slot_unref(c->match_properties_changed);
1954 c->match_disconnected = sd_bus_slot_unref(c->match_disconnected);
5b1bad8d
LP		 1955}
1956
2a453c2e 1957static int pty_forward_handler(PTYForward *f, int rcode, void *userdata) {
ade0789f 1958 RunContext *c = ASSERT_PTR(userdata);
2a453c2e
LP		 1959
1960 assert(f);
1961
2b4a691c 1962 if (rcode == -ECANCELED) {
ade0789f 1963 log_debug_errno(rcode, "PTY forwarder disconnected.");
2b4a691c
MY		 1964 if (!arg_wait)
1965 return sd_event_exit(c->event, EXIT_SUCCESS);
1966
1967 /* If --wait is specified, we'll only exit the pty forwarding, but will continue to wait
1968 * for the service to end. If the user hits ^C we'll exit too. */
1969 } else if (rcode < 0) {
c8f59296 1970 (void) sd_event_exit(c->event, EXIT_FAILURE);
2a453c2e
LP		 1971 return log_error_errno(rcode, "Error on PTY forwarding logic: %m");
1972 }
1973
1974 run_context_check_done(c);
1975 return 0;
1976}
1977
b58026bd
ZJS		 1978static int make_transient_service_unit(
1979 sd_bus *bus,
1980 sd_bus_message **message,
1981 const char *service,
ddef3ec8
ZJS		 1982 const char *pty_path,
1983 int pty_fd) {
b58026bd
ZJS		 1984
1985 _cleanup_(sd_bus_message_unrefp) sd_bus_message *m = NULL;
1986 int r;
1987
1988 assert(bus);
1989 assert(message);
1990 assert(service);
1991
1992 r = bus_message_new_method_call(bus, &m, bus_systemd_mgr, "StartTransientUnit");
1993 if (r < 0)
1994 return bus_log_create_error(r);
1995
b58026bd 1996 /* Name and mode */
706a9535 1997 r = sd_bus_message_append(m, "ss", service, job_mode_to_string(arg_job_mode));
b58026bd
ZJS		 1998 if (r < 0)
1999 return bus_log_create_error(r);
2000
2001 /* Properties */
2002 r = sd_bus_message_open_container(m, 'a', "(sv)");
2003 if (r < 0)
2004 return bus_log_create_error(r);
2005
ddef3ec8 2006 r = transient_service_set_properties(m, pty_path, pty_fd);
b58026bd
ZJS		 2007 if (r < 0)
2008 return r;
2009
2010 r = sd_bus_message_close_container(m);
2011 if (r < 0)
2012 return bus_log_create_error(r);
2013
2014 /* Auxiliary units */
2015 r = sd_bus_message_append(m, "a(sa(sv))", 0);
2016 if (r < 0)
2017 return bus_log_create_error(r);
2018
2019 *message = TAKE_PTR(m);
2020 return 0;
2021}
2022
f872ddd1 2023static int bus_call_with_hint(
4c213d6c 2024 sd_bus *bus,
f872ddd1
ZJS		 2025 sd_bus_message *message,
2026 const char *name,
2027 sd_bus_message **reply) {
2028
2029 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2030 int r;
4c213d6c 2031
f872ddd1
ZJS		 2032 r = sd_bus_call(bus, message, 0, &error, reply);
2033 if (r < 0) {
2034 log_error_errno(r, "Failed to start transient %s unit: %s", name, bus_error_message(&error, r));
2035
3ae314af 2036 if (!arg_expand_environment &&
f872ddd1
ZJS		 2037 sd_bus_error_has_names(&error,
2038 SD_BUS_ERROR_UNKNOWN_PROPERTY,
2039 SD_BUS_ERROR_PROPERTY_READ_ONLY))
2040 log_notice_errno(r, "Hint: --expand-environment=no is not supported by old systemd");
2041 }
2042
2043 return r;
2044}
2045
7693661a
LP		 2046static int acquire_invocation_id(sd_bus *bus, const char *unit, sd_id128_t *ret) {
2047 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2048 _cleanup_(sd_bus_message_unrefp) sd_bus_message *reply = NULL;
2049 _cleanup_free_ char *object = NULL;
7693661a
LP		 2050 int r;
2051
2052 assert(bus);
2053 assert(ret);
2054
2055 if (unit) {
2056 object = unit_dbus_path_from_name(unit);
2057 if (!object)
2058 return log_oom();
2059 }
2060
2061 r = sd_bus_get_property(bus,
2062 "org.freedesktop.systemd1",
2063 object ?: "/org/freedesktop/systemd1/unit/self",
2064 "org.freedesktop.systemd1.Unit",
2065 "InvocationID",
2066 &error,
2067 &reply,
2068 "ay");
eb09b4b5
YW		 2069 if (r < 0) {
2070 /* Let's ignore connection errors. This might be caused by that the service manager is being
2071 * restarted. Handle this gracefully. */
2072 if (bus_error_is_connection(&error) || bus_error_is_unknown_service(&error)) {
2073 log_debug_errno(r, "Invocation ID request failed due to bus connection problems, ignoring: %s",
2074 bus_error_message(&error, r));
2075 *ret = SD_ID128_NULL;
2076 return 0;
2077 }
2078
7693661a 2079 return log_error_errno(r, "Failed to request invocation ID for unit: %s", bus_error_message(&error, r));
eb09b4b5 2080 }
7693661a 2081
8157cc0e 2082 r = bus_message_read_id128(reply, ret);
7693661a
LP		 2083 if (r < 0)
2084 return bus_log_parse_error(r);
2085
90db1582 2086 return r; /* Return true when we get a non-null invocation ID. */
7693661a
LP		 2087}
2088
24a386e2 2089static int fchown_to_capsule(int fd, const char *capsule) {
759b3c08
LP		 2090 _cleanup_free_ char *p = NULL;
2091 int r;
2092
24a386e2 2093 assert(fd >= 0);
759b3c08
LP		 2094 assert(capsule);
2095
2096 p = path_join("/run/capsules/", capsule);
2097 if (!p)
2098 return -ENOMEM;
2099
2100 struct stat st;
2101 r = chase_and_stat(p, /* root= */ NULL, CHASE_SAFE|CHASE_PROHIBIT_SYMLINKS, /* ret_path= */ NULL, &st);
2102 if (r < 0)
2103 return r;
2104
2105 if (uid_is_system(st.st_uid) || gid_is_system(st.st_gid)) /* paranoid safety check */
2106 return -EPERM;
2107
24a386e2 2108 return fchmod_and_chown(fd, 0600, st.st_uid, st.st_gid);
759b3c08
LP		 2109}
2110
fe5a6c47
LN		 2111static int print_unit_invocation(const char *unit, sd_id128_t invocation_id) {
2112 _cleanup_(sd_json_variant_unrefp) sd_json_variant *v = NULL;
2113 int r;
2114
2115 assert(unit);
2116
23441a3d 2117 if (!sd_json_format_enabled(arg_json_format_flags)) {
fe5a6c47
LN		 2118 if (sd_id128_is_null(invocation_id))
2119 log_info("Running as unit: %s", unit);
2120 else
2121 log_info("Running as unit: %s; invocation ID: " SD_ID128_FORMAT_STR, unit, SD_ID128_FORMAT_VAL(invocation_id));
2122 return 0;
2123 }
2124
2125 r = sd_json_variant_set_field_string(&v, "unit", unit);
2126 if (r < 0)
2127 return r;
2128
2129 if (!sd_id128_is_null(invocation_id)) {
00ca5d3a 2130 r = sd_json_variant_set_field_id128(&v, "invocation_id", invocation_id);
fe5a6c47
LN		 2131 if (r < 0)
2132 return r;
2133 }
2134
2135 return sd_json_variant_dump(v, arg_json_format_flags, stdout, NULL);
2136}
2137
b7ba8d55
LP		 2138static int run_context_setup_ptyfwd(RunContext *c) {
2139 int r;
db320d97 2140
db320d97
LP		 2141 assert(c);
2142
b7ba8d55
LP		 2143 if (c->pty_fd < 0 || c->forward)
2144 return 0;
2145
2146 /* Stop agents now that we are online, to avoid TTY conflicts */
2147 polkit_agent_close();
2148 ask_password_agent_close();
2149
2150 if (!arg_quiet)
2151 log_info("Press ^] three times within 1s to disconnect TTY.");
2152
2153 r = pty_forward_new(c->event, c->pty_fd, PTY_FORWARD_IGNORE_INITIAL_VHANGUP, &c->forward);
2154 if (r < 0)
2155 return log_error_errno(r, "Failed to create PTY forwarder: %m");
2156
2157 pty_forward_set_hangup_handler(c->forward, pty_forward_handler, c);
2158
2159 /* Make sure to process any TTY events before we process bus events */
2160 (void) pty_forward_set_priority(c->forward, SD_EVENT_PRIORITY_IMPORTANT);
2161
2162 if (!isempty(arg_background))
2163 (void) pty_forward_set_background_color(c->forward, arg_background);
2164
23f9ff47
YW		 2165 (void) pty_forward_set_window_title(c->forward,
2166 privileged_execution() ? GLYPH_RED_CIRCLE : GLYPH_YELLOW_CIRCLE,
2167 arg_host, arg_cmdline);
b7ba8d55 2168 return 0;
db320d97
LP		 2169}
2170
6e9deb8f
LP		 2171static int run_context_show_result(RunContext *c) {
2172 int r;
2173
d548e1d8
LP		 2174 assert(c);
2175
6e9deb8f
LP		 2176 _cleanup_(table_unrefp) Table *t = table_new_vertical();
2177 if (!t)
2178 return log_oom();
d548e1d8 2179
6e9deb8f
LP		 2180 if (!isempty(c->result)) {
2181 r = table_add_many(
2182 t,
2183 TABLE_FIELD, "Finished with result",
2184 TABLE_STRING, c->result,
2185 TABLE_SET_COLOR, streq(c->result, "success") ? ansi_highlight_green() : ansi_highlight_red());
2186 if (r < 0)
2187 return table_log_add_error(r);
2188 }
2189
2190 if (c->exit_code > 0) {
2191 r = table_add_cell(
2192 t,
2193 /* ret_cell= */ NULL,
2194 TABLE_FIELD,
2195 "Main processes terminated with");
2196 if (r < 0)
2197 return table_log_add_error(r);
2198
2199 r = table_add_cell_stringf(
2200 t,
2201 /* ret_cell= */ NULL,
2202 "code=%s, status=%u/%s",
2203 sigchld_code_to_string(c->exit_code),
2204 c->exit_status,
2205 strna(c->exit_code == CLD_EXITED ?
2206 exit_status_to_string(c->exit_status, EXIT_STATUS_FULL) :
2207 signal_to_string(c->exit_status)));
2208 if (r < 0)
2209 return table_log_add_error(r);
2210 }
d548e1d8
LP		 2211
2212 if (timestamp_is_set(c->inactive_enter_usec) &&
2213 timestamp_is_set(c->inactive_exit_usec) &&
6e9deb8f
LP		 2214 c->inactive_enter_usec > c->inactive_exit_usec) {
2215 r = table_add_many(
2216 t,
2217 TABLE_FIELD, "Service runtime",
2218 TABLE_TIMESPAN_MSEC, c->inactive_enter_usec - c->inactive_exit_usec);
2219 if (r < 0)
2220 return table_log_add_error(r);
2221 }
d548e1d8 2222
6e9deb8f
LP		 2223 if (c->cpu_usage_nsec != NSEC_INFINITY) {
2224 r = table_add_many(
2225 t,
2226 TABLE_FIELD, "CPU time consumed",
2227 TABLE_TIMESPAN_MSEC, DIV_ROUND_UP(c->cpu_usage_nsec, NSEC_PER_USEC));
2228 if (r < 0)
2229 return table_log_add_error(r);
2230 }
d548e1d8
LP		 2231
2232 if (c->memory_peak != UINT64_MAX) {
2233 const char *swap;
2234
2235 if (c->memory_swap_peak != UINT64_MAX)
2236 swap = strjoina(" (swap: ", FORMAT_BYTES(c->memory_swap_peak), ")");
2237 else
2238 swap = "";
2239
6e9deb8f
LP		 2240 r = table_add_cell(
2241 t,
2242 /* ret_cell= */ NULL,
2243 TABLE_FIELD, "Memory peak");
2244 if (r < 0)
2245 return table_log_add_error(r);
2246
2247 r = table_add_cell_stringf(
2248 t,
2249 /* ret_cell= */ NULL,
2250 "%s%s",
2251 FORMAT_BYTES(c->memory_peak), swap);
2252 if (r < 0)
2253 return table_log_add_error(r);
d548e1d8
LP		 2254 }
2255
2256 const char *ip_ingress = NULL, *ip_egress = NULL;
2257 if (!IN_SET(c->ip_ingress_bytes, 0, UINT64_MAX))
6e9deb8f 2258 ip_ingress = strjoina("received ", FORMAT_BYTES(c->ip_ingress_bytes));
d548e1d8 2259 if (!IN_SET(c->ip_egress_bytes, 0, UINT64_MAX))
6e9deb8f 2260 ip_egress = strjoina("sent ", FORMAT_BYTES(c->ip_egress_bytes));
d548e1d8 2261
6e9deb8f
LP		 2262 if (ip_ingress || ip_egress) {
2263 r = table_add_cell(
2264 t,
2265 /* ret_cell= */ NULL,
2266 TABLE_FIELD, "IP Traffic");
2267 if (r < 0)
2268 return table_log_add_error(r);
2269
2270 r = table_add_cell_stringf(
2271 t,
2272 /* ret_cell= */ NULL,
2273 "%s%s%s", strempty(ip_ingress), ip_ingress && ip_egress ? ", " : "", strempty(ip_egress));
2274 if (r < 0)
2275 return table_log_add_error(r);
2276 }
d548e1d8
LP		 2277
2278 const char *io_read = NULL, *io_write = NULL;
2279 if (!IN_SET(c->io_read_bytes, 0, UINT64_MAX))
6e9deb8f 2280 io_read = strjoina("read ", FORMAT_BYTES(c->io_read_bytes));
d548e1d8 2281 if (!IN_SET(c->io_write_bytes, 0, UINT64_MAX))
6e9deb8f
LP		 2282 io_write = strjoina("written ", FORMAT_BYTES(c->io_write_bytes));
2283
2284 if (io_read || io_write) {
2285 r = table_add_cell(
2286 t,
2287 /* ret_cell= */ NULL,
2288 TABLE_FIELD, "IO Bytes");
2289 if (r < 0)
2290 return table_log_add_error(r);
2291
2292 r = table_add_cell_stringf(
2293 t,
2294 /* ret_cell= */ NULL,
2295 "%s%s%s", strempty(io_read), io_read && io_write ? ", " : "", strempty(io_write));
2296 if (r < 0)
2297 return table_log_add_error(r);
2298 }
d548e1d8 2299
6e9deb8f
LP		 2300 r = table_print(t, stderr);
2301 if (r < 0)
2302 return table_log_print_error(r);
2303
2304 return 0;
d548e1d8
LP		 2305}
2306
ac9a75d0 2307static int start_transient_service(sd_bus *bus) {
4afd3348
LP		 2308 _cleanup_(sd_bus_message_unrefp) sd_bus_message *m = NULL, *reply = NULL;
2309 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
3d161f99 2310 _cleanup_(bus_wait_for_jobs_freep) BusWaitForJobs *w = NULL;
b7ba8d55
LP		 2311 _cleanup_free_ char *pty_path = NULL;
2312 _cleanup_close_ int peer_fd = -EBADF;
4c213d6c
WC		 2313 int r;
2314
2315 assert(bus);
4c213d6c 2316
cc3e48b3 2317 (void) polkit_agent_open_if_enabled(arg_transport, arg_ask_password);
b7ba8d55
LP		 2318 (void) ask_password_agent_open_if_enabled(arg_transport, arg_ask_password);
2319
2320 _cleanup_(run_context_done) RunContext c = {
2321 .pty_fd = -EBADF,
2322 .cpu_usage_nsec = NSEC_INFINITY,
2323 .memory_peak = UINT64_MAX,
2324 .memory_swap_peak = UINT64_MAX,
2325 .ip_ingress_bytes = UINT64_MAX,
2326 .ip_egress_bytes = UINT64_MAX,
2327 .io_read_bytes = UINT64_MAX,
2328 .io_write_bytes = UINT64_MAX,
2329 .inactive_exit_usec = USEC_INFINITY,
2330 .inactive_enter_usec = USEC_INFINITY,
2331 };
cc3e48b3 2332
5dca7739 2333 if (arg_stdio == ARG_STDIO_PTY) {
9b15b784 2334
759b3c08 2335 if (IN_SET(arg_transport, BUS_TRANSPORT_LOCAL, BUS_TRANSPORT_CAPSULE)) {
b7ba8d55
LP		 2336 c.pty_fd = openpt_allocate(O_RDWR|O_NOCTTY|O_CLOEXEC|O_NONBLOCK, &pty_path);
2337 if (c.pty_fd < 0)
2338 return log_error_errno(c.pty_fd, "Failed to acquire pseudo tty: %m");
ee451d76 2339
b7ba8d55 2340 peer_fd = pty_open_peer(c.pty_fd, O_RDWR|O_NOCTTY|O_CLOEXEC);
24a386e2
LP		 2341 if (peer_fd < 0)
2342 return log_error_errno(peer_fd, "Failed to open pty peer: %m");
ee451d76 2343
759b3c08
LP		 2344 if (arg_transport == BUS_TRANSPORT_CAPSULE) {
2345 /* If we are in capsule mode, we must give the capsule UID/GID access to the PTY we just allocated first. */
2346
24a386e2 2347 r = fchown_to_capsule(peer_fd, arg_host);
759b3c08
LP		 2348 if (r < 0)
2349 return log_error_errno(r, "Failed to chown tty to capsule UID/GID: %m");
2350 }
2351
de33fc62 2352 } else if (arg_transport == BUS_TRANSPORT_MACHINE) {
4afd3348 2353 _cleanup_(sd_bus_unrefp) sd_bus *system_bus = NULL;
20fc5811 2354 _cleanup_(sd_bus_message_unrefp) sd_bus_message *pty_reply = NULL;
ee451d76
LP		 2355 const char *s;
2356
024a8ec1 2357 r = sd_bus_default_system(&system_bus);
ee451d76 2358 if (r < 0)
024a8ec1 2359 return log_error_errno(r, "Failed to connect to system bus: %m");
ee451d76 2360
cc3e48b3
YW		 2361 (void) sd_bus_set_allow_interactive_authorization(system_bus, arg_ask_password);
2362
994a42a0
LP		 2363 /* Chop off a username prefix. We allow this for sd-bus machine connections, hence
2364 * support that here too. */
2365 _cleanup_free_ char *h = NULL;
2366 r = split_user_at_host(arg_host, /* ret_user= */ NULL, &h);
2367 if (r < 0)
2368 return log_error_errno(r, "Failed to split host specification '%s': %m", arg_host);
2369
2370 r = bus_call_method(
2371 system_bus,
2372 bus_machine_mgr,
2373 "OpenMachinePTY",
2374 &error,
2375 &pty_reply,
2376 "s", h ?: ".host");
4ae25393 2377 if (r < 0)
2a03b9ed 2378 return log_error_errno(r, "Failed to get machine PTY: %s", bus_error_message(&error, r));
ee451d76 2379
b7ba8d55 2380 r = sd_bus_message_read(pty_reply, "hs", &c.pty_fd, &s);
ee451d76
LP		 2381 if (r < 0)
2382 return bus_log_parse_error(r);
2383
b7ba8d55
LP		 2384 c.pty_fd = fcntl(c.pty_fd, F_DUPFD_CLOEXEC, 3);
2385 if (c.pty_fd < 0)
ee451d76
LP		 2386 return log_error_errno(errno, "Failed to duplicate master fd: %m");
2387
2388 pty_path = strdup(s);
2389 if (!pty_path)
2390 return log_oom();
ddef3ec8 2391
b7ba8d55 2392 peer_fd = pty_open_peer(c.pty_fd, O_RDWR|O_NOCTTY|O_CLOEXEC);
1d522f1a 2393 if (peer_fd < 0)
e956a837 2394 return log_error_errno(peer_fd, "Failed to open PTY peer: %m");
ee451d76 2395 } else
04499a70 2396 assert_not_reached();
9b15b784
LP		 2397 }
2398
4c213d6c 2399 if (arg_unit) {
b7ba8d55
LP		 2400 r = unit_name_mangle_with_suffix(
2401 arg_unit,
2402 "as unit",
2403 arg_quiet ? 0 : UNIT_NAME_MANGLE_WARN,
2404 ".service",
2405 &c.unit);
7410616c
LP		 2406 if (r < 0)
2407 return log_error_errno(r, "Failed to mangle unit name: %m");
9c8d1e1a 2408 } else {
b7ba8d55 2409 r = make_unit_name(UNIT_SERVICE, &c.unit);
9c8d1e1a
LP		 2410 if (r < 0)
2411 return r;
2412 }
4c213d6c 2413
db320d97
LP		 2414 /* Optionally, wait for the start job to complete. If we are supposed to read the service's stdin
2415 * lets skip this however, because we should start that already when the start job is running, and
2416 * there's little point in waiting for the start job to complete in that case anyway, as we'll wait
2417 * for EOF anyway, which is going to be much later. */
1ac2fc49
YW		 2418 if (!arg_no_block && arg_stdio == ARG_STDIO_NONE) {
2419 r = bus_wait_for_jobs_new(bus, &w);
2420 if (r < 0)
2421 return log_error_errno(r, "Could not watch jobs: %m");
db320d97
LP		 2422 }
2423
b7ba8d55 2424 r = make_transient_service_unit(bus, &m, c.unit, pty_path, peer_fd);
c2756a68 2425 if (r < 0)
f53bddf3 2426 return r;
24a386e2 2427 peer_fd = safe_close(peer_fd);
c2756a68 2428
744ca8f6
LP		 2429 _cleanup_(journal_terminate) PidRef journal_pid = PIDREF_NULL;
2430 if (arg_verbose)
b86b1ca2 2431 (void) journal_fork(arg_runtime_scope, STRV_MAKE(c.unit), &journal_pid);
744ca8f6 2432
f872ddd1 2433 r = bus_call_with_hint(bus, m, "service", &reply);
024a8ec1 2434 if (r < 0)
f872ddd1 2435 return r;
c2756a68 2436
db320d97
LP		 2437 const char *object;
2438 r = sd_bus_message_read(reply, "o", &object);
2439 if (r < 0)
2440 return bus_log_parse_error(r);
3d161f99 2441
db320d97 2442 if (w) {
b7ba8d55
LP		 2443 r = bus_wait_for_jobs_one(
2444 w,
2445 object,
2446 arg_quiet ? 0 : BUS_WAIT_JOBS_LOG_ERROR,
2447 arg_runtime_scope == RUNTIME_SCOPE_USER ? STRV_MAKE_CONST("--user") : NULL);
3d161f99
LP		 2448 if (r < 0)
2449 return r;
1ac2fc49 2450 } else if (!arg_no_block) {
b7ba8d55
LP		 2451 c.start_job = strdup(object);
2452 if (!c.start_job)
db320d97 2453 return log_oom();
3d161f99
LP		 2454 }
2455
7693661a 2456 if (!arg_quiet) {
35c952bf 2457 sd_id128_t invocation_id;
7693661a 2458
b7ba8d55 2459 r = acquire_invocation_id(bus, c.unit, &invocation_id);
7693661a
LP		 2460 if (r < 0)
2461 return r;
fe5a6c47 2462
b7ba8d55 2463 r = print_unit_invocation(c.unit, invocation_id);
fe5a6c47
LN		 2464 if (r < 0)
2465 return r;
7693661a 2466 }
2a453c2e 2467
5dca7739 2468 if (arg_wait || arg_stdio != ARG_STDIO_NONE) {
b7ba8d55
LP		 2469 c.bus_path = unit_dbus_path_from_name(c.unit);
2470 if (!c.bus_path)
2471 return log_oom();
2a453c2e
LP		 2472
2473 r = sd_event_default(&c.event);
4c213d6c 2474 if (r < 0)
9b15b784 2475 return log_error_errno(r, "Failed to get event loop: %m");
4c213d6c 2476
575922c9 2477 _cleanup_(osc_context_closep) sd_id128_t osc_context_id = SD_ID128_NULL;
b7ba8d55 2478 if (c.pty_fd >= 0) {
02fc6c55 2479 if (arg_exec_user && !terminal_is_dumb()) {
575922c9
LP		 2480 r = osc_context_open_chpriv(arg_exec_user, /* ret_seq= */ NULL, &osc_context_id);
2481 if (r < 0)
02fc6c55 2482 return log_error_errno(r, "Failed to set OSC context: %m");
575922c9
LP		 2483 }
2484
25374070 2485 (void) sd_event_set_signal_exit(c.event, true);
2a453c2e 2486
b7ba8d55
LP		 2487 assert(arg_pty_late >= 0);
2488 if (!arg_pty_late) { /* If late PTY mode is off, start pty forwarder immediately */
2489 r = run_context_setup_ptyfwd(&c);
2490 if (r < 0)
2491 return r;
2492 }
2a453c2e 2493 }
4c213d6c 2494
c8f59296 2495 r = run_context_attach_bus(&c, bus);
95f1d6bf 2496 if (r < 0)
c8f59296 2497 return r;
5b1bad8d 2498
c8f59296 2499 r = run_context_update(&c);
95f1d6bf
LP		 2500 if (r < 0)
2501 return r;
2a453c2e
LP		 2502
2503 r = sd_event_loop(c.event);
4c213d6c 2504 if (r < 0)
9b15b784 2505 return log_error_errno(r, "Failed to run event loop: %m");
4c213d6c 2506
744ca8f6
LP		 2507 /* Close the journal watch logic before we output the exit summary */
2508 journal_terminate(&journal_pid);
2509
d548e1d8
LP		 2510 if (arg_wait && !arg_quiet)
2511 run_context_show_result(&c);
2a453c2e 2512
7f3614e5
ZJS		 2513 /* Try to propagate the service's return value. But if the service defines
2514 * e.g. SuccessExitStatus, honour this, and return 0 to mean "success". */
2515 if (streq_ptr(c.result, "success"))
ac9a75d0
ZJS		 2516 return EXIT_SUCCESS;
2517 if (streq_ptr(c.result, "exit-code") && c.exit_status > 0)
2518 return c.exit_status;
2519 if (streq_ptr(c.result, "signal"))
2520 return EXIT_EXCEPTION;
2521 return EXIT_FAILURE;
2a453c2e 2522 }
7040b626 2523
ac9a75d0 2524 return EXIT_SUCCESS;
6c12b52e
LP		 2525}
2526
00f8eea8 2527static int start_transient_scope(sd_bus *bus) {
f2c96f0f 2528 _cleanup_(sd_bus_message_unrefp) sd_bus_message *reply = NULL;
de158ed2 2529 _cleanup_(bus_wait_for_jobs_freep) BusWaitForJobs *w = NULL;
f331434d 2530 _cleanup_strv_free_ char **env = NULL, **user_env = NULL;
4c213d6c 2531 _cleanup_free_ char *scope = NULL;
de158ed2 2532 const char *object = NULL;
35c952bf 2533 sd_id128_t invocation_id;
f2c96f0f 2534 bool allow_pidfd = true;
6c12b52e
LP		 2535 int r;
2536
8159d91a 2537 assert(bus);
badd28e1 2538 assert(!strv_isempty(arg_cmdline));
8159d91a 2539
de158ed2
LP		 2540 r = bus_wait_for_jobs_new(bus, &w);
2541 if (r < 0)
f3f8bd6a 2542 return log_error_errno(r, "Could not watch jobs: %m");
de158ed2 2543
7de80bfe 2544 if (arg_unit) {
df7c4eb6
ZJS		 2545 r = unit_name_mangle_with_suffix(arg_unit, "as unit",
2546 arg_quiet ? 0 : UNIT_NAME_MANGLE_WARN,
2547 ".scope", &scope);
7410616c
LP		 2548 if (r < 0)
2549 return log_error_errno(r, "Failed to mangle scope name: %m");
9c8d1e1a 2550 } else {
0310b2a6 2551 r = make_unit_name(UNIT_SCOPE, &scope);
9c8d1e1a
LP		 2552 if (r < 0)
2553 return r;
2554 }
6c12b52e 2555
f3cf6167 2556 (void) polkit_agent_open_if_enabled(arg_transport, arg_ask_password);
b7ba8d55 2557 (void) ask_password_agent_open_if_enabled(arg_transport, arg_ask_password);
c2756a68 2558
f2c96f0f
LP		 2559 for (;;) {
2560 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2561 _cleanup_(sd_bus_message_unrefp) sd_bus_message *m = NULL;
8c7db2fb 2562
f2c96f0f
LP		 2563 r = bus_message_new_method_call(bus, &m, bus_systemd_mgr, "StartTransientUnit");
2564 if (r < 0)
2565 return bus_log_create_error(r);
4c213d6c 2566
f2c96f0f 2567 /* Name and Mode */
706a9535 2568 r = sd_bus_message_append(m, "ss", scope, job_mode_to_string(arg_job_mode));
f2c96f0f
LP		 2569 if (r < 0)
2570 return bus_log_create_error(r);
4c213d6c 2571
f2c96f0f
LP		 2572 /* Properties */
2573 r = sd_bus_message_open_container(m, 'a', "(sv)");
2574 if (r < 0)
2575 return bus_log_create_error(r);
4c213d6c 2576
f2c96f0f
LP		 2577 r = transient_scope_set_properties(m, allow_pidfd);
2578 if (r < 0)
2579 return r;
6c12b52e 2580
f2c96f0f
LP		 2581 r = sd_bus_message_close_container(m);
2582 if (r < 0)
2583 return bus_log_create_error(r);
8c7db2fb 2584
f2c96f0f
LP		 2585 /* Auxiliary units */
2586 r = sd_bus_message_append(m, "a(sa(sv))", 0);
2587 if (r < 0)
2588 return bus_log_create_error(r);
2589
2590 r = sd_bus_call(bus, m, 0, &error, &reply);
2591 if (r < 0) {
2592 if (sd_bus_error_has_names(&error, SD_BUS_ERROR_UNKNOWN_PROPERTY, SD_BUS_ERROR_PROPERTY_READ_ONLY) && allow_pidfd) {
2593 log_debug("Retrying with classic PIDs.");
2594 allow_pidfd = false;
2595 continue;
2596 }
2597
2598 return log_error_errno(r, "Failed to start transient scope unit: %s", bus_error_message(&error, r));
2599 }
2600
2601 break;
2602 }
c2756a68 2603
00f8eea8
LP		 2604 r = sd_bus_message_read(reply, "o", &object);
2605 if (r < 0)
2606 return bus_log_parse_error(r);
2607
e22ad53d
MC		 2608 r = bus_wait_for_jobs_one(w, object, arg_quiet ? 0 : BUS_WAIT_JOBS_LOG_ERROR,
2609 arg_runtime_scope == RUNTIME_SCOPE_USER ? STRV_MAKE_CONST("--user") : NULL);
00f8eea8
LP		 2610 if (r < 0)
2611 return r;
2612
7693661a 2613 r = acquire_invocation_id(bus, NULL, &invocation_id);
00f8eea8
LP		 2614 if (r < 0)
2615 return r;
7693661a
LP		 2616 if (r == 0)
2617 log_debug("No invocation ID set.");
2618 else {
2619 if (strv_extendf(&user_env, "INVOCATION_ID=" SD_ID128_FORMAT_STR, SD_ID128_FORMAT_VAL(invocation_id)) < 0)
2620 return log_oom();
2621 }
00f8eea8 2622
a2425e8a
DDM		 2623 /* Stop agents before we pass control away and before we drop privileges, to avoid TTY conflicts and
2624 * before we become unable to stop agents. */
2625 polkit_agent_close();
2626 ask_password_agent_close();
2627
4de33e7f 2628 if (arg_nice_set) {
4a62c710
MS		 2629 if (setpriority(PRIO_PROCESS, 0, arg_nice) < 0)
2630 return log_error_errno(errno, "Failed to set nice level: %m");
4de33e7f
LP		 2631 }
2632
2633 if (arg_exec_group) {
2634 gid_t gid;
2635
fafff8f1 2636 r = get_group_creds(&arg_exec_group, &gid, 0);
f647962d
MS		 2637 if (r < 0)
2638 return log_error_errno(r, "Failed to resolve group %s: %m", arg_exec_group);
4de33e7f 2639
4a62c710
MS		 2640 if (setresgid(gid, gid, gid) < 0)
2641 return log_error_errno(errno, "Failed to change GID to " GID_FMT ": %m", gid);
4de33e7f
LP		 2642 }
2643
2644 if (arg_exec_user) {
2645 const char *home, *shell;
2646 uid_t uid;
2647 gid_t gid;
2648
eea9d3eb
MY		 2649 r = get_user_creds(&arg_exec_user, &uid, &gid, &home, &shell,
2650 USER_CREDS_CLEAN|USER_CREDS_SUPPRESS_PLACEHOLDER|USER_CREDS_PREFER_NSS);
f647962d
MS		 2651 if (r < 0)
2652 return log_error_errno(r, "Failed to resolve user %s: %m", arg_exec_user);
4de33e7f 2653
be39ccf3
LP		 2654 if (home) {
2655 r = strv_extendf(&user_env, "HOME=%s", home);
2656 if (r < 0)
2657 return log_oom();
2658 }
4de33e7f 2659
be39ccf3
LP		 2660 if (shell) {
2661 r = strv_extendf(&user_env, "SHELL=%s", shell);
2662 if (r < 0)
2663 return log_oom();
2664 }
4de33e7f
LP		 2665
2666 r = strv_extendf(&user_env, "USER=%s", arg_exec_user);
2667 if (r < 0)
2668 return log_oom();
2669
2670 r = strv_extendf(&user_env, "LOGNAME=%s", arg_exec_user);
2671 if (r < 0)
2672 return log_oom();
2673
2674 if (!arg_exec_group) {
4a62c710
MS		 2675 if (setresgid(gid, gid, gid) < 0)
2676 return log_error_errno(errno, "Failed to change GID to " GID_FMT ": %m", gid);
4de33e7f
LP		 2677 }
2678
4a62c710
MS		 2679 if (setresuid(uid, uid, uid) < 0)
2680 return log_error_errno(errno, "Failed to change UID to " UID_FMT ": %m", uid);
4de33e7f
LP		 2681 }
2682
fecc4477
LP		 2683 if (arg_working_directory && chdir(arg_working_directory) < 0)
2684 return log_error_errno(errno, "Failed to change directory to '%s': %m", arg_working_directory);
2685
4ab3d29f 2686 env = strv_env_merge(environ, user_env, arg_environment);
4de33e7f
LP		 2687 if (!env)
2688 return log_oom();
2689
7693661a 2690 if (!arg_quiet) {
fe5a6c47
LN		 2691 r = print_unit_invocation(scope, invocation_id);
2692 if (r < 0)
2693 return r;
7693661a 2694 }
7040b626 2695
3ae314af 2696 if (arg_expand_environment) {
f331434d
LP		 2697 _cleanup_strv_free_ char **expanded_cmdline = NULL, **unset_variables = NULL, **bad_variables = NULL;
2698
2699 r = replace_env_argv(arg_cmdline, env, &expanded_cmdline, &unset_variables, &bad_variables);
2700 if (r < 0)
2701 return log_error_errno(r, "Failed to expand environment variables: %m");
2702
2703 free_and_replace(arg_cmdline, expanded_cmdline);
2704
2705 if (!strv_isempty(unset_variables)) {
2706 _cleanup_free_ char *ju = strv_join(unset_variables, ", ");
2707 log_warning("Referenced but unset environment variable evaluates to an empty string: %s", strna(ju));
2708 }
2709
2710 if (!strv_isempty(bad_variables)) {
2711 _cleanup_free_ char *jb = strv_join(bad_variables, ", ");
2712 log_warning("Invalid environment variable name evaluates to an empty string: %s", strna(jb));
2713 }
2ed7a221
ZJS		 2714 }
2715
badd28e1 2716 execvpe(arg_cmdline[0], arg_cmdline, env);
9b15b784
LP		 2717
2718 return log_error_errno(errno, "Failed to execute: %m");
2719}
2720
b58026bd 2721static int make_transient_trigger_unit(
9b15b784 2722 sd_bus *bus,
b58026bd
ZJS		 2723 sd_bus_message **message,
2724 const char *suffix,
2725 const char *trigger,
2726 const char *service) {
9b15b784 2727
b58026bd 2728 _cleanup_(sd_bus_message_unrefp) sd_bus_message *m = NULL;
9b15b784
LP		 2729 int r;
2730
2731 assert(bus);
b58026bd
ZJS		 2732 assert(message);
2733 assert(suffix);
2734 assert(trigger);
2735 assert(service);
9b15b784 2736
7ad61613 2737 r = bus_message_new_method_call(bus, &m, bus_systemd_mgr, "StartTransientUnit");
9b15b784
LP		 2738 if (r < 0)
2739 return bus_log_create_error(r);
2740
2741 /* Name and Mode */
706a9535 2742 r = sd_bus_message_append(m, "ss", trigger, job_mode_to_string(arg_job_mode));
9b15b784
LP		 2743 if (r < 0)
2744 return bus_log_create_error(r);
2745
2746 /* Properties */
2747 r = sd_bus_message_open_container(m, 'a', "(sv)");
2748 if (r < 0)
2749 return bus_log_create_error(r);
2750
d59ef3e2
YW		 2751 if (streq(suffix, ".path"))
2752 r = transient_unit_set_properties(m, UNIT_PATH, arg_path_property);
2753 else if (streq(suffix, ".socket"))
2754 r = transient_unit_set_properties(m, UNIT_SOCKET, arg_socket_property);
2755 else if (streq(suffix, ".timer"))
2756 r = transient_timer_set_properties(m);
2757 else
04499a70 2758 assert_not_reached();
9b15b784 2759 if (r < 0)
f53bddf3 2760 return r;
9b15b784
LP		 2761
2762 r = sd_bus_message_close_container(m);
2763 if (r < 0)
2764 return bus_log_create_error(r);
2765
2766 r = sd_bus_message_open_container(m, 'a', "(sa(sv))");
2767 if (r < 0)
2768 return bus_log_create_error(r);
2769
badd28e1 2770 if (!strv_isempty(arg_cmdline)) {
9b15b784
LP		 2771 r = sd_bus_message_open_container(m, 'r', "sa(sv)");
2772 if (r < 0)
2773 return bus_log_create_error(r);
2774
2775 r = sd_bus_message_append(m, "s", service);
2776 if (r < 0)
2777 return bus_log_create_error(r);
2778
2779 r = sd_bus_message_open_container(m, 'a', "(sv)");
2780 if (r < 0)
2781 return bus_log_create_error(r);
2782
ddef3ec8 2783 r = transient_service_set_properties(m, /* pty_path = */ NULL, /* pty_fd = */ -EBADF);
9b15b784 2784 if (r < 0)
f53bddf3 2785 return r;
9b15b784
LP		 2786
2787 r = sd_bus_message_close_container(m);
2788 if (r < 0)
2789 return bus_log_create_error(r);
2790
2791 r = sd_bus_message_close_container(m);
2792 if (r < 0)
2793 return bus_log_create_error(r);
2794 }
2795
2796 r = sd_bus_message_close_container(m);
2797 if (r < 0)
2798 return bus_log_create_error(r);
2799
b58026bd
ZJS		 2800 *message = TAKE_PTR(m);
2801 return 0;
2802}
2803
2804static int start_transient_trigger(sd_bus *bus, const char *suffix) {
b58026bd
ZJS		 2805 _cleanup_(sd_bus_message_unrefp) sd_bus_message *m = NULL, *reply = NULL;
2806 _cleanup_(bus_wait_for_jobs_freep) BusWaitForJobs *w = NULL;
2807 _cleanup_free_ char *trigger = NULL, *service = NULL;
2808 const char *object = NULL;
2809 int r;
2810
2811 assert(bus);
2812 assert(suffix);
2813
2814 r = bus_wait_for_jobs_new(bus, &w);
2815 if (r < 0)
f3f8bd6a 2816 return log_error_errno(r, "Could not watch jobs: %m");
b58026bd
ZJS		 2817
2818 if (arg_unit) {
2819 switch (unit_name_to_type(arg_unit)) {
2820
2821 case UNIT_SERVICE:
2822 service = strdup(arg_unit);
2823 if (!service)
2824 return log_oom();
2825
2826 r = unit_name_change_suffix(service, suffix, &trigger);
2827 if (r < 0)
2828 return log_error_errno(r, "Failed to change unit suffix: %m");
2829 break;
2830
2831 case UNIT_TIMER:
2832 trigger = strdup(arg_unit);
2833 if (!trigger)
2834 return log_oom();
2835
2836 r = unit_name_change_suffix(trigger, ".service", &service);
2837 if (r < 0)
2838 return log_error_errno(r, "Failed to change unit suffix: %m");
2839 break;
2840
2841 default:
2842 r = unit_name_mangle_with_suffix(arg_unit, "as unit",
2843 arg_quiet ? 0 : UNIT_NAME_MANGLE_WARN,
2844 ".service", &service);
2845 if (r < 0)
2846 return log_error_errno(r, "Failed to mangle unit name: %m");
2847
2848 r = unit_name_mangle_with_suffix(arg_unit, "as trigger",
2849 arg_quiet ? 0 : UNIT_NAME_MANGLE_WARN,
2850 suffix, &trigger);
2851 if (r < 0)
2852 return log_error_errno(r, "Failed to mangle unit name: %m");
2853
2854 break;
2855 }
2856 } else {
0310b2a6 2857 r = make_unit_name(UNIT_SERVICE, &service);
b58026bd
ZJS		 2858 if (r < 0)
2859 return r;
2860
2861 r = unit_name_change_suffix(service, suffix, &trigger);
2862 if (r < 0)
2863 return log_error_errno(r, "Failed to change unit suffix: %m");
2864 }
2865
2866 r = make_transient_trigger_unit(bus, &m, suffix, trigger, service);
2867 if (r < 0)
2868 return r;
2869
f3cf6167 2870 (void) polkit_agent_open_if_enabled(arg_transport, arg_ask_password);
b7ba8d55 2871 (void) ask_password_agent_open_if_enabled(arg_transport, arg_ask_password);
8c7db2fb 2872
f872ddd1 2873 r = bus_call_with_hint(bus, m, suffix + 1, &reply);
4ae25393 2874 if (r < 0)
f872ddd1 2875 return r;
9b15b784 2876
de158ed2
LP		 2877 r = sd_bus_message_read(reply, "o", &object);
2878 if (r < 0)
2879 return bus_log_parse_error(r);
2880
e22ad53d
MC		 2881 r = bus_wait_for_jobs_one(w, object, arg_quiet ? 0 : BUS_WAIT_JOBS_LOG_ERROR,
2882 arg_runtime_scope == RUNTIME_SCOPE_USER ? STRV_MAKE_CONST("--user") : NULL);
de158ed2
LP		 2883 if (r < 0)
2884 return r;
2885
3dea75de 2886 if (!arg_quiet) {
d59ef3e2 2887 log_info("Running %s as unit: %s", suffix + 1, trigger);
badd28e1 2888 if (!strv_isempty(arg_cmdline))
3dea75de
NO		 2889 log_info("Will run service as unit: %s", service);
2890 }
9b15b784 2891
ac9a75d0 2892 return EXIT_SUCCESS;
c2756a68
LP		 2893}
2894
69e08309 2895static bool shall_make_executable_absolute(void) {
72eb3081
LP		 2896 if (arg_exec_path)
2897 return false;
69e08309
LB		 2898 if (strv_isempty(arg_cmdline))
2899 return false;
2900 if (arg_transport != BUS_TRANSPORT_LOCAL)
2901 return false;
2902
2903 FOREACH_STRING(f, "RootDirectory=", "RootImage=", "ExecSearchPath=", "MountImages=", "ExtensionImages=")
2904 if (strv_find_startswith(arg_property, f))
2905 return false;
2906
2907 return true;
2908}
2909
ef08ad7a 2910static int run(int argc, char* argv[]) {
4afd3348 2911 _cleanup_(sd_bus_flush_close_unrefp) sd_bus *bus = NULL;
ac9a75d0 2912 int r;
c2756a68 2913
aa976d87 2914 log_setup();
c2756a68 2915
7aed4343 2916 if (invoked_as(argv, "run0"))
72eb3081
LP		 2917 r = parse_argv_sudo_mode(argc, argv);
2918 else
2919 r = parse_argv(argc, argv);
6c12b52e 2920 if (r <= 0)
0565120f 2921 return r;
c2756a68 2922
69e08309 2923 if (shall_make_executable_absolute()) {
8038b99d
ZJS		 2924 /* Patch in an absolute path to fail early for user convenience, but only when we can do it
2925 * (i.e. we will be running from the same file system). This also uses the user's $PATH,
2926 * while we use a fixed search path in the manager. */
85eca92e 2927
8038b99d 2928 _cleanup_free_ char *command = NULL;
f7bc0c32 2929 r = find_executable(arg_cmdline[0], &command);
9810899e
LP		 2930 if (ERRNO_IS_NEG_PRIVILEGE(r))
2931 log_debug_errno(r, "Failed to find executable '%s' due to permission problems, leaving path as is: %m", arg_cmdline[0]);
2932 else if (r < 0)
0565120f 2933 return log_error_errno(r, "Failed to find executable %s: %m", arg_cmdline[0]);
9810899e
LP		 2934 else
2935 free_and_replace(arg_cmdline[0], command);
c9d954b2 2936 }
c9d954b2 2937
9f2e86af 2938 if (!arg_description) {
d9f68f48 2939 _cleanup_free_ char *t = NULL;
9f2e86af 2940
9ce3440a
ZJS		 2941 if (strv_isempty(arg_cmdline))
2942 t = strdup(arg_unit);
e61d2011
MY		 2943 else if (arg_via_shell) {
2944 if (arg_cmdline[1])
2945 t = quote_command_line(arg_cmdline + 1, SHELL_ESCAPE_EMPTY);
2946 else
2947 t = strjoin("LOGIN", arg_exec_user ? ": " : NULL, arg_exec_user);
2948 } else if (startswith(arg_cmdline[0], "-")) {
ff4b6a19
LP		 2949 /* Drop the login shell marker from the command line when generating the description,
2950 * in order to minimize user confusion. */
2951 _cleanup_strv_free_ char **l = strv_copy(arg_cmdline);
2952 if (!l)
2953 return log_oom();
2954
2955 r = free_and_strdup_warn(l + 0, l[0] + 1);
2956 if (r < 0)
2957 return r;
2958
2959 t = quote_command_line(l, SHELL_ESCAPE_EMPTY);
2960 } else
9ce3440a
ZJS		 2961 t = quote_command_line(arg_cmdline, SHELL_ESCAPE_EMPTY);
2962 if (!t)
2963 return log_oom();
4c213d6c 2964
d9f68f48
LP		 2965 arg_description = strjoin("[", program_invocation_short_name, "] ", t);
2966 if (!arg_description)
2967 return log_oom();
9f2e86af
LP		 2968 }
2969
c8f59296 2970 r = connect_bus(&bus);
0565120f 2971 if (r < 0)
c8f59296 2972 return r;
1b8a7467 2973
6c12b52e 2974 if (arg_scope)
ac9a75d0
ZJS		 2975 return start_transient_scope(bus);
2976 if (arg_path_property)
2977 return start_transient_trigger(bus, ".path");
2978 if (arg_socket_property)
2979 return start_transient_trigger(bus, ".socket");
2980 if (arg_with_timer)
2981 return start_transient_trigger(bus, ".timer");
2982 return start_transient_service(bus);
c2756a68 2983}
ef08ad7a
LP		 2984
2985DEFINE_MAIN_FUNCTION_WITH_POSITIVE_FAILURE(run);
Unnamed repository; edit this file 'description' to name the repository.