1 /* SPDX-License-Identifier: LGPL-2.1-or-later */
8 #include "sd-messages.h"
10 #include "alloc-util.h"
12 #include "bus-error.h"
13 #include "bus-kernel.h"
15 #include "dbus-service.h"
16 #include "dbus-unit.h"
20 #include "exit-status.h"
23 #include "format-util.h"
25 #include "load-dropin.h"
26 #include "load-fragment.h"
29 #include "parse-util.h"
30 #include "path-util.h"
31 #include "process-util.h"
32 #include "serialize.h"
34 #include "signal-util.h"
36 #include "stdio-util.h"
37 #include "string-table.h"
38 #include "string-util.h"
40 #include "unit-name.h"
45 static const UnitActiveState state_translation_table
[_SERVICE_STATE_MAX
] = {
46 [SERVICE_DEAD
] = UNIT_INACTIVE
,
47 [SERVICE_CONDITION
] = UNIT_ACTIVATING
,
48 [SERVICE_START_PRE
] = UNIT_ACTIVATING
,
49 [SERVICE_START
] = UNIT_ACTIVATING
,
50 [SERVICE_START_POST
] = UNIT_ACTIVATING
,
51 [SERVICE_RUNNING
] = UNIT_ACTIVE
,
52 [SERVICE_EXITED
] = UNIT_ACTIVE
,
53 [SERVICE_RELOAD
] = UNIT_RELOADING
,
54 [SERVICE_STOP
] = UNIT_DEACTIVATING
,
55 [SERVICE_STOP_WATCHDOG
] = UNIT_DEACTIVATING
,
56 [SERVICE_STOP_SIGTERM
] = UNIT_DEACTIVATING
,
57 [SERVICE_STOP_SIGKILL
] = UNIT_DEACTIVATING
,
58 [SERVICE_STOP_POST
] = UNIT_DEACTIVATING
,
59 [SERVICE_FINAL_WATCHDOG
] = UNIT_DEACTIVATING
,
60 [SERVICE_FINAL_SIGTERM
] = UNIT_DEACTIVATING
,
61 [SERVICE_FINAL_SIGKILL
] = UNIT_DEACTIVATING
,
62 [SERVICE_FAILED
] = UNIT_FAILED
,
63 [SERVICE_AUTO_RESTART
] = UNIT_ACTIVATING
,
64 [SERVICE_CLEANING
] = UNIT_MAINTENANCE
,
67 /* For Type=idle we never want to delay any other jobs, hence we
68 * consider idle jobs active as soon as we start working on them */
69 static const UnitActiveState state_translation_table_idle
[_SERVICE_STATE_MAX
] = {
70 [SERVICE_DEAD
] = UNIT_INACTIVE
,
71 [SERVICE_CONDITION
] = UNIT_ACTIVE
,
72 [SERVICE_START_PRE
] = UNIT_ACTIVE
,
73 [SERVICE_START
] = UNIT_ACTIVE
,
74 [SERVICE_START_POST
] = UNIT_ACTIVE
,
75 [SERVICE_RUNNING
] = UNIT_ACTIVE
,
76 [SERVICE_EXITED
] = UNIT_ACTIVE
,
77 [SERVICE_RELOAD
] = UNIT_RELOADING
,
78 [SERVICE_STOP
] = UNIT_DEACTIVATING
,
79 [SERVICE_STOP_WATCHDOG
] = UNIT_DEACTIVATING
,
80 [SERVICE_STOP_SIGTERM
] = UNIT_DEACTIVATING
,
81 [SERVICE_STOP_SIGKILL
] = UNIT_DEACTIVATING
,
82 [SERVICE_STOP_POST
] = UNIT_DEACTIVATING
,
83 [SERVICE_FINAL_WATCHDOG
] = UNIT_DEACTIVATING
,
84 [SERVICE_FINAL_SIGTERM
] = UNIT_DEACTIVATING
,
85 [SERVICE_FINAL_SIGKILL
] = UNIT_DEACTIVATING
,
86 [SERVICE_FAILED
] = UNIT_FAILED
,
87 [SERVICE_AUTO_RESTART
] = UNIT_ACTIVATING
,
88 [SERVICE_CLEANING
] = UNIT_MAINTENANCE
,
91 static int service_dispatch_inotify_io(sd_event_source
*source
, int fd
, uint32_t events
, void *userdata
);
92 static int service_dispatch_timer(sd_event_source
*source
, usec_t usec
, void *userdata
);
93 static int service_dispatch_watchdog(sd_event_source
*source
, usec_t usec
, void *userdata
);
94 static int service_dispatch_exec_io(sd_event_source
*source
, int fd
, uint32_t events
, void *userdata
);
96 static void service_enter_signal(Service
*s
, ServiceState state
, ServiceResult f
);
97 static void service_enter_reload_by_notify(Service
*s
);
99 static void service_init(Unit
*u
) {
100 Service
*s
= SERVICE(u
);
103 assert(u
->load_state
== UNIT_STUB
);
105 s
->timeout_start_usec
= u
->manager
->default_timeout_start_usec
;
106 s
->timeout_stop_usec
= u
->manager
->default_timeout_stop_usec
;
107 s
->timeout_abort_usec
= u
->manager
->default_timeout_abort_usec
;
108 s
->timeout_abort_set
= u
->manager
->default_timeout_abort_set
;
109 s
->restart_usec
= u
->manager
->default_restart_usec
;
110 s
->runtime_max_usec
= USEC_INFINITY
;
111 s
->type
= _SERVICE_TYPE_INVALID
;
113 s
->stdin_fd
= s
->stdout_fd
= s
->stderr_fd
= -1;
114 s
->guess_main_pid
= true;
116 s
->control_command_id
= _SERVICE_EXEC_COMMAND_INVALID
;
118 s
->exec_context
.keyring_mode
= MANAGER_IS_SYSTEM(u
->manager
) ?
119 EXEC_KEYRING_PRIVATE
: EXEC_KEYRING_INHERIT
;
121 s
->watchdog_original_usec
= USEC_INFINITY
;
123 s
->oom_policy
= _OOM_POLICY_INVALID
;
126 static void service_unwatch_control_pid(Service
*s
) {
129 if (s
->control_pid
<= 0)
132 unit_unwatch_pid(UNIT(s
), s
->control_pid
);
136 static void service_unwatch_main_pid(Service
*s
) {
139 if (s
->main_pid
<= 0)
142 unit_unwatch_pid(UNIT(s
), s
->main_pid
);
146 static void service_unwatch_pid_file(Service
*s
) {
147 if (!s
->pid_file_pathspec
)
150 log_unit_debug(UNIT(s
), "Stopping watch for PID file %s", s
->pid_file_pathspec
->path
);
151 path_spec_unwatch(s
->pid_file_pathspec
);
152 path_spec_done(s
->pid_file_pathspec
);
153 s
->pid_file_pathspec
= mfree(s
->pid_file_pathspec
);
156 static int service_set_main_pid(Service
*s
, pid_t pid
) {
162 if (pid
== getpid_cached())
165 if (s
->main_pid
== pid
&& s
->main_pid_known
)
168 if (s
->main_pid
!= pid
) {
169 service_unwatch_main_pid(s
);
170 exec_status_start(&s
->main_exec_status
, pid
);
174 s
->main_pid_known
= true;
175 s
->main_pid_alien
= pid_is_my_child(pid
) == 0;
177 if (s
->main_pid_alien
)
178 log_unit_warning(UNIT(s
), "Supervising process "PID_FMT
" which is not our child. We'll most likely not notice when it exits.", pid
);
183 void service_close_socket_fd(Service
*s
) {
186 /* Undo the effect of service_set_socket_fd(). */
188 s
->socket_fd
= asynchronous_close(s
->socket_fd
);
190 if (UNIT_ISSET(s
->accept_socket
)) {
191 socket_connection_unref(SOCKET(UNIT_DEREF(s
->accept_socket
)));
192 unit_ref_unset(&s
->accept_socket
);
196 static void service_stop_watchdog(Service
*s
) {
199 s
->watchdog_event_source
= sd_event_source_disable_unref(s
->watchdog_event_source
);
200 s
->watchdog_timestamp
= DUAL_TIMESTAMP_NULL
;
203 static void service_start_watchdog(Service
*s
) {
204 usec_t watchdog_usec
;
209 watchdog_usec
= service_get_watchdog_usec(s
);
210 if (IN_SET(watchdog_usec
, 0, USEC_INFINITY
)) {
211 service_stop_watchdog(s
);
215 if (s
->watchdog_event_source
) {
216 r
= sd_event_source_set_time(s
->watchdog_event_source
, usec_add(s
->watchdog_timestamp
.monotonic
, watchdog_usec
));
218 log_unit_warning_errno(UNIT(s
), r
, "Failed to reset watchdog timer: %m");
222 r
= sd_event_source_set_enabled(s
->watchdog_event_source
, SD_EVENT_ONESHOT
);
224 r
= sd_event_add_time(
225 UNIT(s
)->manager
->event
,
226 &s
->watchdog_event_source
,
228 usec_add(s
->watchdog_timestamp
.monotonic
, watchdog_usec
), 0,
229 service_dispatch_watchdog
, s
);
231 log_unit_warning_errno(UNIT(s
), r
, "Failed to add watchdog timer: %m");
235 (void) sd_event_source_set_description(s
->watchdog_event_source
, "service-watchdog");
237 /* Let's process everything else which might be a sign
238 * of living before we consider a service died. */
239 r
= sd_event_source_set_priority(s
->watchdog_event_source
, SD_EVENT_PRIORITY_IDLE
);
242 log_unit_warning_errno(UNIT(s
), r
, "Failed to install watchdog timer: %m");
245 static void service_extend_event_source_timeout(Service
*s
, sd_event_source
*source
, usec_t extended
) {
251 /* Extends the specified event source timer to at least the specified time, unless it is already later
257 r
= sd_event_source_get_time(source
, ¤t
);
260 (void) sd_event_source_get_description(s
->timer_event_source
, &desc
);
261 log_unit_warning_errno(UNIT(s
), r
, "Failed to retrieve timeout time for event source '%s', ignoring: %m", strna(desc
));
265 if (current
>= extended
) /* Current timeout is already longer, ignore this. */
268 r
= sd_event_source_set_time(source
, extended
);
271 (void) sd_event_source_get_description(s
->timer_event_source
, &desc
);
272 log_unit_warning_errno(UNIT(s
), r
, "Failed to set timeout time for even source '%s', ignoring %m", strna(desc
));
276 static void service_extend_timeout(Service
*s
, usec_t extend_timeout_usec
) {
281 if (IN_SET(extend_timeout_usec
, 0, USEC_INFINITY
))
284 extended
= usec_add(now(CLOCK_MONOTONIC
), extend_timeout_usec
);
286 service_extend_event_source_timeout(s
, s
->timer_event_source
, extended
);
287 service_extend_event_source_timeout(s
, s
->watchdog_event_source
, extended
);
290 static void service_reset_watchdog(Service
*s
) {
293 dual_timestamp_get(&s
->watchdog_timestamp
);
294 service_start_watchdog(s
);
297 static void service_override_watchdog_timeout(Service
*s
, usec_t watchdog_override_usec
) {
300 s
->watchdog_override_enable
= true;
301 s
->watchdog_override_usec
= watchdog_override_usec
;
302 service_reset_watchdog(s
);
304 log_unit_debug(UNIT(s
), "watchdog_usec="USEC_FMT
, s
->watchdog_usec
);
305 log_unit_debug(UNIT(s
), "watchdog_override_usec="USEC_FMT
, s
->watchdog_override_usec
);
308 static void service_fd_store_unlink(ServiceFDStore
*fs
) {
314 assert(fs
->service
->n_fd_store
> 0);
315 LIST_REMOVE(fd_store
, fs
->service
->fd_store
, fs
);
316 fs
->service
->n_fd_store
--;
319 sd_event_source_disable_unref(fs
->event_source
);
326 static void service_release_fd_store(Service
*s
) {
329 if (s
->n_keep_fd_store
> 0)
332 log_unit_debug(UNIT(s
), "Releasing all stored fds");
334 service_fd_store_unlink(s
->fd_store
);
336 assert(s
->n_fd_store
== 0);
339 static void service_release_resources(Unit
*u
) {
340 Service
*s
= SERVICE(u
);
344 if (!s
->fd_store
&& s
->stdin_fd
< 0 && s
->stdout_fd
< 0 && s
->stderr_fd
< 0)
347 log_unit_debug(u
, "Releasing resources.");
349 s
->stdin_fd
= safe_close(s
->stdin_fd
);
350 s
->stdout_fd
= safe_close(s
->stdout_fd
);
351 s
->stderr_fd
= safe_close(s
->stderr_fd
);
353 service_release_fd_store(s
);
356 static void service_done(Unit
*u
) {
357 Service
*s
= SERVICE(u
);
361 s
->pid_file
= mfree(s
->pid_file
);
362 s
->status_text
= mfree(s
->status_text
);
364 s
->exec_runtime
= exec_runtime_unref(s
->exec_runtime
, false);
365 exec_command_free_array(s
->exec_command
, _SERVICE_EXEC_COMMAND_MAX
);
366 s
->control_command
= NULL
;
367 s
->main_command
= NULL
;
369 dynamic_creds_unref(&s
->dynamic_creds
);
371 exit_status_set_free(&s
->restart_prevent_status
);
372 exit_status_set_free(&s
->restart_force_status
);
373 exit_status_set_free(&s
->success_status
);
375 /* This will leak a process, but at least no memory or any of
377 service_unwatch_main_pid(s
);
378 service_unwatch_control_pid(s
);
379 service_unwatch_pid_file(s
);
382 unit_unwatch_bus_name(u
, s
->bus_name
);
383 s
->bus_name
= mfree(s
->bus_name
);
386 s
->bus_name_owner
= mfree(s
->bus_name_owner
);
388 s
->usb_function_descriptors
= mfree(s
->usb_function_descriptors
);
389 s
->usb_function_strings
= mfree(s
->usb_function_strings
);
391 service_close_socket_fd(s
);
392 s
->peer
= socket_peer_unref(s
->peer
);
394 unit_ref_unset(&s
->accept_socket
);
396 service_stop_watchdog(s
);
398 s
->timer_event_source
= sd_event_source_disable_unref(s
->timer_event_source
);
399 s
->exec_fd_event_source
= sd_event_source_disable_unref(s
->exec_fd_event_source
);
401 service_release_resources(u
);
404 static int on_fd_store_io(sd_event_source
*e
, int fd
, uint32_t revents
, void *userdata
) {
405 ServiceFDStore
*fs
= userdata
;
410 /* If we get either EPOLLHUP or EPOLLERR, it's time to remove this entry from the fd store */
411 log_unit_debug(UNIT(fs
->service
),
412 "Received %s on stored fd %d (%s), closing.",
413 revents
& EPOLLERR
? "EPOLLERR" : "EPOLLHUP",
414 fs
->fd
, strna(fs
->fdname
));
415 service_fd_store_unlink(fs
);
419 static int service_add_fd_store(Service
*s
, int fd
, const char *name
, bool do_poll
) {
423 /* fd is always consumed if we return >= 0 */
428 if (s
->n_fd_store
>= s
->n_fd_store_max
)
429 return -EXFULL
; /* Our store is full.
430 * Use this errno rather than E[NM]FILE to distinguish from
431 * the case where systemd itself hits the file limit. */
433 LIST_FOREACH(fd_store
, fs
, s
->fd_store
) {
434 r
= same_fd(fs
->fd
, fd
);
439 return 0; /* fd already included */
443 fs
= new(ServiceFDStore
, 1);
447 *fs
= (ServiceFDStore
) {
451 .fdname
= strdup(name
?: "stored"),
460 r
= sd_event_add_io(UNIT(s
)->manager
->event
, &fs
->event_source
, fd
, 0, on_fd_store_io
, fs
);
461 if (r
< 0 && r
!= -EPERM
) { /* EPERM indicates fds that aren't pollable, which is OK */
466 (void) sd_event_source_set_description(fs
->event_source
, "service-fd-store");
469 LIST_PREPEND(fd_store
, s
->fd_store
, fs
);
472 return 1; /* fd newly stored */
475 static int service_add_fd_store_set(Service
*s
, FDSet
*fds
, const char *name
, bool do_poll
) {
480 while (fdset_size(fds
) > 0) {
481 _cleanup_close_
int fd
= -1;
483 fd
= fdset_steal_first(fds
);
487 r
= service_add_fd_store(s
, fd
, name
, do_poll
);
489 return log_unit_warning_errno(UNIT(s
), r
,
490 "Cannot store more fds than FileDescriptorStoreMax=%u, closing remaining.",
493 return log_unit_error_errno(UNIT(s
), r
, "Failed to add fd to store: %m");
495 log_unit_debug(UNIT(s
), "Added fd %u (%s) to fd store.", fd
, strna(name
));
502 static void service_remove_fd_store(Service
*s
, const char *name
) {
503 ServiceFDStore
*fs
, *n
;
508 LIST_FOREACH_SAFE(fd_store
, fs
, n
, s
->fd_store
) {
509 if (!streq(fs
->fdname
, name
))
512 log_unit_debug(UNIT(s
), "Got explicit request to remove fd %i (%s), closing.", fs
->fd
, name
);
513 service_fd_store_unlink(fs
);
517 static int service_arm_timer(Service
*s
, usec_t usec
) {
522 if (s
->timer_event_source
) {
523 r
= sd_event_source_set_time(s
->timer_event_source
, usec
);
527 return sd_event_source_set_enabled(s
->timer_event_source
, SD_EVENT_ONESHOT
);
530 if (usec
== USEC_INFINITY
)
533 r
= sd_event_add_time(
534 UNIT(s
)->manager
->event
,
535 &s
->timer_event_source
,
538 service_dispatch_timer
, s
);
542 (void) sd_event_source_set_description(s
->timer_event_source
, "service-timer");
547 static int service_verify(Service
*s
) {
549 assert(UNIT(s
)->load_state
== UNIT_LOADED
);
551 if (!s
->exec_command
[SERVICE_EXEC_START
] && !s
->exec_command
[SERVICE_EXEC_STOP
] &&
552 UNIT(s
)->success_action
== EMERGENCY_ACTION_NONE
)
553 /* FailureAction= only makes sense if one of the start or stop commands is specified.
554 * SuccessAction= will be executed unconditionally if no commands are specified. Hence,
555 * either a command or SuccessAction= are required. */
557 return log_unit_error_errno(UNIT(s
), SYNTHETIC_ERRNO(ENOEXEC
), "Service has no ExecStart=, ExecStop=, or SuccessAction=. Refusing.");
559 if (s
->type
!= SERVICE_ONESHOT
&& !s
->exec_command
[SERVICE_EXEC_START
])
560 return log_unit_error_errno(UNIT(s
), SYNTHETIC_ERRNO(ENOEXEC
), "Service has no ExecStart= setting, which is only allowed for Type=oneshot services. Refusing.");
562 if (!s
->remain_after_exit
&& !s
->exec_command
[SERVICE_EXEC_START
] && UNIT(s
)->success_action
== EMERGENCY_ACTION_NONE
)
563 return log_unit_error_errno(UNIT(s
), SYNTHETIC_ERRNO(ENOEXEC
), "Service has no ExecStart= and no SuccessAction= settings and does not have RemainAfterExit=yes set. Refusing.");
565 if (s
->type
!= SERVICE_ONESHOT
&& s
->exec_command
[SERVICE_EXEC_START
]->command_next
)
566 return log_unit_error_errno(UNIT(s
), SYNTHETIC_ERRNO(ENOEXEC
), "Service has more than one ExecStart= setting, which is only allowed for Type=oneshot services. Refusing.");
568 if (s
->type
== SERVICE_ONESHOT
&&
569 !IN_SET(s
->restart
, SERVICE_RESTART_NO
, SERVICE_RESTART_ON_FAILURE
, SERVICE_RESTART_ON_ABNORMAL
, SERVICE_RESTART_ON_WATCHDOG
, SERVICE_RESTART_ON_ABORT
))
570 return log_unit_error_errno(UNIT(s
), SYNTHETIC_ERRNO(ENOEXEC
), "Service has Restart= set to either always or on-success, which isn't allowed for Type=oneshot services. Refusing.");
572 if (s
->type
== SERVICE_ONESHOT
&& !exit_status_set_is_empty(&s
->restart_force_status
))
573 return log_unit_error_errno(UNIT(s
), SYNTHETIC_ERRNO(ENOEXEC
), "Service has RestartForceStatus= set, which isn't allowed for Type=oneshot services. Refusing.");
575 if (s
->type
== SERVICE_DBUS
&& !s
->bus_name
)
576 return log_unit_error_errno(UNIT(s
), SYNTHETIC_ERRNO(ENOEXEC
), "Service is of type D-Bus but no D-Bus service name has been specified. Refusing.");
578 if (s
->exec_context
.pam_name
&& !IN_SET(s
->kill_context
.kill_mode
, KILL_CONTROL_GROUP
, KILL_MIXED
))
579 return log_unit_error_errno(UNIT(s
), SYNTHETIC_ERRNO(ENOEXEC
), "Service has PAM enabled. Kill mode must be set to 'control-group' or 'mixed'. Refusing.");
581 if (s
->usb_function_descriptors
&& !s
->usb_function_strings
)
582 log_unit_warning(UNIT(s
), "Service has USBFunctionDescriptors= setting, but no USBFunctionStrings=. Ignoring.");
584 if (!s
->usb_function_descriptors
&& s
->usb_function_strings
)
585 log_unit_warning(UNIT(s
), "Service has USBFunctionStrings= setting, but no USBFunctionDescriptors=. Ignoring.");
587 if (s
->runtime_max_usec
!= USEC_INFINITY
&& s
->type
== SERVICE_ONESHOT
)
588 log_unit_warning(UNIT(s
), "RuntimeMaxSec= has no effect in combination with Type=oneshot. Ignoring.");
593 static int service_add_default_dependencies(Service
*s
) {
598 if (!UNIT(s
)->default_dependencies
)
601 /* Add a number of automatic dependencies useful for the
602 * majority of services. */
604 if (MANAGER_IS_SYSTEM(UNIT(s
)->manager
)) {
605 /* First, pull in the really early boot stuff, and
606 * require it, so that we fail if we can't acquire
609 r
= unit_add_two_dependencies_by_name(UNIT(s
), UNIT_AFTER
, UNIT_REQUIRES
, SPECIAL_SYSINIT_TARGET
, true, UNIT_DEPENDENCY_DEFAULT
);
614 /* In the --user instance there's no sysinit.target,
615 * in that case require basic.target instead. */
617 r
= unit_add_dependency_by_name(UNIT(s
), UNIT_REQUIRES
, SPECIAL_BASIC_TARGET
, true, UNIT_DEPENDENCY_DEFAULT
);
622 /* Second, if the rest of the base system is in the same
623 * transaction, order us after it, but do not pull it in or
624 * even require it. */
625 r
= unit_add_dependency_by_name(UNIT(s
), UNIT_AFTER
, SPECIAL_BASIC_TARGET
, true, UNIT_DEPENDENCY_DEFAULT
);
629 /* Third, add us in for normal shutdown. */
630 return unit_add_two_dependencies_by_name(UNIT(s
), UNIT_BEFORE
, UNIT_CONFLICTS
, SPECIAL_SHUTDOWN_TARGET
, true, UNIT_DEPENDENCY_DEFAULT
);
633 static void service_fix_stdio(Service
*s
) {
636 /* Note that EXEC_INPUT_NULL and EXEC_OUTPUT_INHERIT play a special role here: they are both the
637 * default value that is subject to automatic overriding triggered by other settings and an explicit
638 * choice the user can make. We don't distinguish between these cases currently. */
640 if (s
->exec_context
.std_input
== EXEC_INPUT_NULL
&&
641 s
->exec_context
.stdin_data_size
> 0)
642 s
->exec_context
.std_input
= EXEC_INPUT_DATA
;
644 if (IN_SET(s
->exec_context
.std_input
,
646 EXEC_INPUT_TTY_FORCE
,
649 EXEC_INPUT_NAMED_FD
))
652 /* We assume these listed inputs refer to bidirectional streams, and hence duplicating them from
653 * stdin to stdout/stderr makes sense and hence leaving EXEC_OUTPUT_INHERIT in place makes sense,
654 * too. Outputs such as regular files or sealed data memfds otoh don't really make sense to be
655 * duplicated for both input and output at the same time (since they then would cause a feedback
656 * loop), hence override EXEC_OUTPUT_INHERIT with the default stderr/stdout setting. */
658 if (s
->exec_context
.std_error
== EXEC_OUTPUT_INHERIT
&&
659 s
->exec_context
.std_output
== EXEC_OUTPUT_INHERIT
)
660 s
->exec_context
.std_error
= UNIT(s
)->manager
->default_std_error
;
662 if (s
->exec_context
.std_output
== EXEC_OUTPUT_INHERIT
)
663 s
->exec_context
.std_output
= UNIT(s
)->manager
->default_std_output
;
666 static int service_setup_bus_name(Service
*s
) {
671 /* If s->bus_name is not set, then the unit will be refused by service_verify() later. */
672 if (s
->type
!= SERVICE_DBUS
|| !s
->bus_name
)
675 r
= unit_add_dependency_by_name(UNIT(s
), UNIT_REQUIRES
, SPECIAL_DBUS_SOCKET
, true, UNIT_DEPENDENCY_FILE
);
677 return log_unit_error_errno(UNIT(s
), r
, "Failed to add dependency on " SPECIAL_DBUS_SOCKET
": %m");
679 /* We always want to be ordered against dbus.socket if both are in the transaction. */
680 r
= unit_add_dependency_by_name(UNIT(s
), UNIT_AFTER
, SPECIAL_DBUS_SOCKET
, true, UNIT_DEPENDENCY_FILE
);
682 return log_unit_error_errno(UNIT(s
), r
, "Failed to add dependency on " SPECIAL_DBUS_SOCKET
": %m");
684 r
= unit_watch_bus_name(UNIT(s
), s
->bus_name
);
686 return log_unit_error_errno(UNIT(s
), r
, "Two services allocated for the same bus name %s, refusing operation.", s
->bus_name
);
688 return log_unit_error_errno(UNIT(s
), r
, "Cannot watch bus name %s: %m", s
->bus_name
);
693 static int service_add_extras(Service
*s
) {
698 if (s
->type
== _SERVICE_TYPE_INVALID
) {
699 /* Figure out a type automatically */
701 s
->type
= SERVICE_DBUS
;
702 else if (s
->exec_command
[SERVICE_EXEC_START
])
703 s
->type
= SERVICE_SIMPLE
;
705 s
->type
= SERVICE_ONESHOT
;
708 /* Oneshot services have disabled start timeout by default */
709 if (s
->type
== SERVICE_ONESHOT
&& !s
->start_timeout_defined
)
710 s
->timeout_start_usec
= USEC_INFINITY
;
712 service_fix_stdio(s
);
714 r
= unit_patch_contexts(UNIT(s
));
718 r
= unit_add_exec_dependencies(UNIT(s
), &s
->exec_context
);
722 r
= unit_set_default_slice(UNIT(s
));
726 /* If the service needs the notify socket, let's enable it automatically. */
727 if (s
->notify_access
== NOTIFY_NONE
&&
728 (s
->type
== SERVICE_NOTIFY
|| s
->watchdog_usec
> 0 || s
->n_fd_store_max
> 0))
729 s
->notify_access
= NOTIFY_MAIN
;
731 /* If no OOM policy was explicitly set, then default to the configure default OOM policy. Except when
732 * delegation is on, in that case it we assume the payload knows better what to do and can process
733 * things in a more focused way. */
734 if (s
->oom_policy
< 0)
735 s
->oom_policy
= s
->cgroup_context
.delegate
? OOM_CONTINUE
: UNIT(s
)->manager
->default_oom_policy
;
737 /* Let the kernel do the killing if that's requested. */
738 s
->cgroup_context
.memory_oom_group
= s
->oom_policy
== OOM_KILL
;
740 r
= service_add_default_dependencies(s
);
744 r
= service_setup_bus_name(s
);
751 static int service_load(Unit
*u
) {
752 Service
*s
= SERVICE(u
);
755 r
= unit_load_fragment_and_dropin(u
, true);
759 if (u
->load_state
!= UNIT_LOADED
)
762 /* This is a new unit? Then let's add in some extras */
763 r
= service_add_extras(s
);
767 return service_verify(s
);
770 static void service_dump(Unit
*u
, FILE *f
, const char *prefix
) {
771 ServiceExecCommand c
;
772 Service
*s
= SERVICE(u
);
777 prefix
= strempty(prefix
);
778 prefix2
= strjoina(prefix
, "\t");
781 "%sService State: %s\n"
783 "%sReload Result: %s\n"
784 "%sClean Result: %s\n"
785 "%sPermissionsStartOnly: %s\n"
786 "%sRootDirectoryStartOnly: %s\n"
787 "%sRemainAfterExit: %s\n"
788 "%sGuessMainPID: %s\n"
791 "%sNotifyAccess: %s\n"
792 "%sNotifyState: %s\n"
794 prefix
, service_state_to_string(s
->state
),
795 prefix
, service_result_to_string(s
->result
),
796 prefix
, service_result_to_string(s
->reload_result
),
797 prefix
, service_result_to_string(s
->clean_result
),
798 prefix
, yes_no(s
->permissions_start_only
),
799 prefix
, yes_no(s
->root_directory_start_only
),
800 prefix
, yes_no(s
->remain_after_exit
),
801 prefix
, yes_no(s
->guess_main_pid
),
802 prefix
, service_type_to_string(s
->type
),
803 prefix
, service_restart_to_string(s
->restart
),
804 prefix
, notify_access_to_string(s
->notify_access
),
805 prefix
, notify_state_to_string(s
->notify_state
),
806 prefix
, oom_policy_to_string(s
->oom_policy
));
808 if (s
->control_pid
> 0)
810 "%sControl PID: "PID_FMT
"\n",
811 prefix
, s
->control_pid
);
815 "%sMain PID: "PID_FMT
"\n"
816 "%sMain PID Known: %s\n"
817 "%sMain PID Alien: %s\n",
819 prefix
, yes_no(s
->main_pid_known
),
820 prefix
, yes_no(s
->main_pid_alien
));
825 prefix
, s
->pid_file
);
830 "%sBus Name Good: %s\n",
832 prefix
, yes_no(s
->bus_name_good
));
834 if (UNIT_ISSET(s
->accept_socket
))
836 "%sAccept Socket: %s\n",
837 prefix
, UNIT_DEREF(s
->accept_socket
)->id
);
841 "%sTimeoutStartSec: %s\n"
842 "%sTimeoutStopSec: %s\n"
843 "%sTimeoutStartFailureMode: %s\n"
844 "%sTimeoutStopFailureMode: %s\n",
845 prefix
, FORMAT_TIMESPAN(s
->restart_usec
, USEC_PER_SEC
),
846 prefix
, FORMAT_TIMESPAN(s
->timeout_start_usec
, USEC_PER_SEC
),
847 prefix
, FORMAT_TIMESPAN(s
->timeout_stop_usec
, USEC_PER_SEC
),
848 prefix
, service_timeout_failure_mode_to_string(s
->timeout_start_failure_mode
),
849 prefix
, service_timeout_failure_mode_to_string(s
->timeout_stop_failure_mode
));
851 if (s
->timeout_abort_set
)
853 "%sTimeoutAbortSec: %s\n",
854 prefix
, FORMAT_TIMESPAN(s
->timeout_abort_usec
, USEC_PER_SEC
));
857 "%sRuntimeMaxSec: %s\n"
858 "%sWatchdogSec: %s\n",
859 prefix
, FORMAT_TIMESPAN(s
->runtime_max_usec
, USEC_PER_SEC
),
860 prefix
, FORMAT_TIMESPAN(s
->watchdog_usec
, USEC_PER_SEC
));
862 kill_context_dump(&s
->kill_context
, f
, prefix
);
863 exec_context_dump(&s
->exec_context
, f
, prefix
);
865 for (c
= 0; c
< _SERVICE_EXEC_COMMAND_MAX
; c
++) {
867 if (!s
->exec_command
[c
])
870 fprintf(f
, "%s-> %s:\n",
871 prefix
, service_exec_command_to_string(c
));
873 exec_command_dump_list(s
->exec_command
[c
], f
, prefix2
);
877 fprintf(f
, "%sStatus Text: %s\n",
878 prefix
, s
->status_text
);
880 if (s
->n_fd_store_max
> 0)
882 "%sFile Descriptor Store Max: %u\n"
883 "%sFile Descriptor Store Current: %zu\n",
884 prefix
, s
->n_fd_store_max
,
885 prefix
, s
->n_fd_store
);
887 cgroup_context_dump(UNIT(s
), f
, prefix
);
890 static int service_is_suitable_main_pid(Service
*s
, pid_t pid
, int prio
) {
894 assert(pid_is_valid(pid
));
896 /* Checks whether the specified PID is suitable as main PID for this service. returns negative if not, 0 if the
897 * PID is questionnable but should be accepted if the source of configuration is trusted. > 0 if the PID is
900 if (pid
== getpid_cached() || pid
== 1)
901 return log_unit_full_errno(UNIT(s
), prio
, SYNTHETIC_ERRNO(EPERM
), "New main PID "PID_FMT
" is the manager, refusing.", pid
);
903 if (pid
== s
->control_pid
)
904 return log_unit_full_errno(UNIT(s
), prio
, SYNTHETIC_ERRNO(EPERM
), "New main PID "PID_FMT
" is the control process, refusing.", pid
);
906 if (!pid_is_alive(pid
))
907 return log_unit_full_errno(UNIT(s
), prio
, SYNTHETIC_ERRNO(ESRCH
), "New main PID "PID_FMT
" does not exist or is a zombie.", pid
);
909 owner
= manager_get_unit_by_pid(UNIT(s
)->manager
, pid
);
910 if (owner
== UNIT(s
)) {
911 log_unit_debug(UNIT(s
), "New main PID "PID_FMT
" belongs to service, we are happy.", pid
);
912 return 1; /* Yay, it's definitely a good PID */
915 return 0; /* Hmm it's a suspicious PID, let's accept it if configuration source is trusted */
918 static int service_load_pid_file(Service
*s
, bool may_warn
) {
919 char procfs
[STRLEN("/proc/self/fd/") + DECIMAL_STR_MAX(int)];
920 bool questionable_pid_file
= false;
921 _cleanup_free_
char *k
= NULL
;
922 _cleanup_close_
int fd
= -1;
931 prio
= may_warn
? LOG_INFO
: LOG_DEBUG
;
933 r
= chase_symlinks(s
->pid_file
, NULL
, CHASE_SAFE
, NULL
, &fd
);
935 log_unit_debug_errno(UNIT(s
), r
,
936 "Potentially unsafe symlink chain, will now retry with relaxed checks: %s", s
->pid_file
);
938 questionable_pid_file
= true;
940 r
= chase_symlinks(s
->pid_file
, NULL
, 0, NULL
, &fd
);
943 return log_unit_full_errno(UNIT(s
), prio
, fd
,
944 "Can't open PID file %s (yet?) after %s: %m", s
->pid_file
, service_state_to_string(s
->state
));
946 /* Let's read the PID file now that we chased it down. But we need to convert the O_PATH fd
947 * chase_symlinks() returned us into a proper fd first. */
948 xsprintf(procfs
, "/proc/self/fd/%i", fd
);
949 r
= read_one_line_file(procfs
, &k
);
951 return log_unit_error_errno(UNIT(s
), r
,
952 "Can't convert PID files %s O_PATH file descriptor to proper file descriptor: %m",
955 r
= parse_pid(k
, &pid
);
957 return log_unit_full_errno(UNIT(s
), prio
, r
, "Failed to parse PID from file %s: %m", s
->pid_file
);
959 if (s
->main_pid_known
&& pid
== s
->main_pid
)
962 r
= service_is_suitable_main_pid(s
, pid
, prio
);
968 if (questionable_pid_file
)
969 return log_unit_error_errno(UNIT(s
), SYNTHETIC_ERRNO(EPERM
),
970 "Refusing to accept PID outside of service control group, acquired through unsafe symlink chain: %s", s
->pid_file
);
972 /* Hmm, it's not clear if the new main PID is safe. Let's allow this if the PID file is owned by root */
974 if (fstat(fd
, &st
) < 0)
975 return log_unit_error_errno(UNIT(s
), errno
, "Failed to fstat() PID file O_PATH fd: %m");
978 return log_unit_error_errno(UNIT(s
), SYNTHETIC_ERRNO(EPERM
),
979 "New main PID "PID_FMT
" does not belong to service, and PID file is not owned by root. Refusing.", pid
);
981 log_unit_debug(UNIT(s
), "New main PID "PID_FMT
" does not belong to service, but we'll accept it since PID file is owned by root.", pid
);
984 if (s
->main_pid_known
) {
985 log_unit_debug(UNIT(s
), "Main PID changing: "PID_FMT
" -> "PID_FMT
, s
->main_pid
, pid
);
987 service_unwatch_main_pid(s
);
988 s
->main_pid_known
= false;
990 log_unit_debug(UNIT(s
), "Main PID loaded: "PID_FMT
, pid
);
992 r
= service_set_main_pid(s
, pid
);
996 r
= unit_watch_pid(UNIT(s
), pid
, false);
997 if (r
< 0) /* FIXME: we need to do something here */
998 return log_unit_warning_errno(UNIT(s
), r
, "Failed to watch PID "PID_FMT
" for service: %m", pid
);
1003 static void service_search_main_pid(Service
*s
) {
1009 /* If we know it anyway, don't ever fall back to unreliable
1011 if (s
->main_pid_known
)
1014 if (!s
->guess_main_pid
)
1017 assert(s
->main_pid
<= 0);
1019 if (unit_search_main_pid(UNIT(s
), &pid
) < 0)
1022 log_unit_debug(UNIT(s
), "Main PID guessed: "PID_FMT
, pid
);
1023 if (service_set_main_pid(s
, pid
) < 0)
1026 r
= unit_watch_pid(UNIT(s
), pid
, false);
1028 /* FIXME: we need to do something here */
1029 log_unit_warning_errno(UNIT(s
), r
, "Failed to watch PID "PID_FMT
" from: %m", pid
);
1032 static void service_set_state(Service
*s
, ServiceState state
) {
1033 ServiceState old_state
;
1034 const UnitActiveState
*table
;
1038 if (s
->state
!= state
)
1039 bus_unit_send_pending_change_signal(UNIT(s
), false);
1041 table
= s
->type
== SERVICE_IDLE
? state_translation_table_idle
: state_translation_table
;
1043 old_state
= s
->state
;
1046 service_unwatch_pid_file(s
);
1049 SERVICE_CONDITION
, SERVICE_START_PRE
, SERVICE_START
, SERVICE_START_POST
,
1052 SERVICE_STOP
, SERVICE_STOP_WATCHDOG
, SERVICE_STOP_SIGTERM
, SERVICE_STOP_SIGKILL
, SERVICE_STOP_POST
,
1053 SERVICE_FINAL_WATCHDOG
, SERVICE_FINAL_SIGTERM
, SERVICE_FINAL_SIGKILL
,
1054 SERVICE_AUTO_RESTART
,
1056 s
->timer_event_source
= sd_event_source_disable_unref(s
->timer_event_source
);
1059 SERVICE_START
, SERVICE_START_POST
,
1060 SERVICE_RUNNING
, SERVICE_RELOAD
,
1061 SERVICE_STOP
, SERVICE_STOP_WATCHDOG
, SERVICE_STOP_SIGTERM
, SERVICE_STOP_SIGKILL
, SERVICE_STOP_POST
,
1062 SERVICE_FINAL_WATCHDOG
, SERVICE_FINAL_SIGTERM
, SERVICE_FINAL_SIGKILL
)) {
1063 service_unwatch_main_pid(s
);
1064 s
->main_command
= NULL
;
1068 SERVICE_CONDITION
, SERVICE_START_PRE
, SERVICE_START
, SERVICE_START_POST
,
1070 SERVICE_STOP
, SERVICE_STOP_WATCHDOG
, SERVICE_STOP_SIGTERM
, SERVICE_STOP_SIGKILL
, SERVICE_STOP_POST
,
1071 SERVICE_FINAL_WATCHDOG
, SERVICE_FINAL_SIGTERM
, SERVICE_FINAL_SIGKILL
,
1072 SERVICE_CLEANING
)) {
1073 service_unwatch_control_pid(s
);
1074 s
->control_command
= NULL
;
1075 s
->control_command_id
= _SERVICE_EXEC_COMMAND_INVALID
;
1078 if (IN_SET(state
, SERVICE_DEAD
, SERVICE_FAILED
, SERVICE_AUTO_RESTART
)) {
1079 unit_unwatch_all_pids(UNIT(s
));
1080 unit_dequeue_rewatch_pids(UNIT(s
));
1084 SERVICE_CONDITION
, SERVICE_START_PRE
, SERVICE_START
, SERVICE_START_POST
,
1085 SERVICE_RUNNING
, SERVICE_RELOAD
,
1086 SERVICE_STOP
, SERVICE_STOP_WATCHDOG
, SERVICE_STOP_SIGTERM
, SERVICE_STOP_SIGKILL
, SERVICE_STOP_POST
,
1087 SERVICE_FINAL_WATCHDOG
, SERVICE_FINAL_SIGTERM
, SERVICE_FINAL_SIGKILL
) &&
1088 !(state
== SERVICE_DEAD
&& UNIT(s
)->job
))
1089 service_close_socket_fd(s
);
1091 if (state
!= SERVICE_START
)
1092 s
->exec_fd_event_source
= sd_event_source_disable_unref(s
->exec_fd_event_source
);
1094 if (!IN_SET(state
, SERVICE_START_POST
, SERVICE_RUNNING
, SERVICE_RELOAD
))
1095 service_stop_watchdog(s
);
1097 /* For the inactive states unit_notify() will trim the cgroup,
1098 * but for exit we have to do that ourselves... */
1099 if (state
== SERVICE_EXITED
&& !MANAGER_IS_RELOADING(UNIT(s
)->manager
))
1100 unit_prune_cgroup(UNIT(s
));
1102 if (old_state
!= state
)
1103 log_unit_debug(UNIT(s
), "Changed %s -> %s", service_state_to_string(old_state
), service_state_to_string(state
));
1105 unit_notify(UNIT(s
), table
[old_state
], table
[state
],
1106 (s
->reload_result
== SERVICE_SUCCESS
? 0 : UNIT_NOTIFY_RELOAD_FAILURE
) |
1107 (s
->will_auto_restart
? UNIT_NOTIFY_WILL_AUTO_RESTART
: 0));
1110 static usec_t
service_coldplug_timeout(Service
*s
) {
1113 switch (s
->deserialized_state
) {
1115 case SERVICE_CONDITION
:
1116 case SERVICE_START_PRE
:
1118 case SERVICE_START_POST
:
1119 case SERVICE_RELOAD
:
1120 return usec_add(UNIT(s
)->state_change_timestamp
.monotonic
, s
->timeout_start_usec
);
1122 case SERVICE_RUNNING
:
1123 return usec_add(UNIT(s
)->active_enter_timestamp
.monotonic
, s
->runtime_max_usec
);
1126 case SERVICE_STOP_SIGTERM
:
1127 case SERVICE_STOP_SIGKILL
:
1128 case SERVICE_STOP_POST
:
1129 case SERVICE_FINAL_SIGTERM
:
1130 case SERVICE_FINAL_SIGKILL
:
1131 return usec_add(UNIT(s
)->state_change_timestamp
.monotonic
, s
->timeout_stop_usec
);
1133 case SERVICE_STOP_WATCHDOG
:
1134 case SERVICE_FINAL_WATCHDOG
:
1135 return usec_add(UNIT(s
)->state_change_timestamp
.monotonic
, service_timeout_abort_usec(s
));
1137 case SERVICE_AUTO_RESTART
:
1138 return usec_add(UNIT(s
)->inactive_enter_timestamp
.monotonic
, s
->restart_usec
);
1140 case SERVICE_CLEANING
:
1141 return usec_add(UNIT(s
)->state_change_timestamp
.monotonic
, s
->exec_context
.timeout_clean_usec
);
1144 return USEC_INFINITY
;
1148 static int service_coldplug(Unit
*u
) {
1149 Service
*s
= SERVICE(u
);
1153 assert(s
->state
== SERVICE_DEAD
);
1155 if (s
->deserialized_state
== s
->state
)
1158 r
= service_arm_timer(s
, service_coldplug_timeout(s
));
1162 if (s
->main_pid
> 0 &&
1163 pid_is_unwaited(s
->main_pid
) &&
1164 (IN_SET(s
->deserialized_state
,
1165 SERVICE_START
, SERVICE_START_POST
,
1166 SERVICE_RUNNING
, SERVICE_RELOAD
,
1167 SERVICE_STOP
, SERVICE_STOP_WATCHDOG
, SERVICE_STOP_SIGTERM
, SERVICE_STOP_SIGKILL
, SERVICE_STOP_POST
,
1168 SERVICE_FINAL_WATCHDOG
, SERVICE_FINAL_SIGTERM
, SERVICE_FINAL_SIGKILL
))) {
1169 r
= unit_watch_pid(UNIT(s
), s
->main_pid
, false);
1174 if (s
->control_pid
> 0 &&
1175 pid_is_unwaited(s
->control_pid
) &&
1176 IN_SET(s
->deserialized_state
,
1177 SERVICE_CONDITION
, SERVICE_START_PRE
, SERVICE_START
, SERVICE_START_POST
,
1179 SERVICE_STOP
, SERVICE_STOP_WATCHDOG
, SERVICE_STOP_SIGTERM
, SERVICE_STOP_SIGKILL
, SERVICE_STOP_POST
,
1180 SERVICE_FINAL_WATCHDOG
, SERVICE_FINAL_SIGTERM
, SERVICE_FINAL_SIGKILL
,
1181 SERVICE_CLEANING
)) {
1182 r
= unit_watch_pid(UNIT(s
), s
->control_pid
, false);
1187 if (!IN_SET(s
->deserialized_state
, SERVICE_DEAD
, SERVICE_FAILED
, SERVICE_AUTO_RESTART
, SERVICE_CLEANING
)) {
1188 (void) unit_enqueue_rewatch_pids(u
);
1189 (void) unit_setup_dynamic_creds(u
);
1190 (void) unit_setup_exec_runtime(u
);
1193 if (IN_SET(s
->deserialized_state
, SERVICE_START_POST
, SERVICE_RUNNING
, SERVICE_RELOAD
))
1194 service_start_watchdog(s
);
1196 if (UNIT_ISSET(s
->accept_socket
)) {
1197 Socket
* socket
= SOCKET(UNIT_DEREF(s
->accept_socket
));
1199 if (socket
->max_connections_per_source
> 0) {
1202 /* Make a best-effort attempt at bumping the connection count */
1203 if (socket_acquire_peer(socket
, s
->socket_fd
, &peer
) > 0) {
1204 socket_peer_unref(s
->peer
);
1210 service_set_state(s
, s
->deserialized_state
);
1214 static int service_collect_fds(
1218 size_t *n_socket_fds
,
1219 size_t *n_storage_fds
) {
1221 _cleanup_strv_free_
char **rfd_names
= NULL
;
1222 _cleanup_free_
int *rfds
= NULL
;
1223 size_t rn_socket_fds
= 0, rn_storage_fds
= 0;
1229 assert(n_socket_fds
);
1230 assert(n_storage_fds
);
1232 if (s
->socket_fd
>= 0) {
1234 /* Pass the per-connection socket */
1239 rfds
[0] = s
->socket_fd
;
1241 rfd_names
= strv_new("connection");
1249 /* Pass all our configured sockets for singleton services */
1251 UNIT_FOREACH_DEPENDENCY(u
, UNIT(s
), UNIT_ATOM_TRIGGERED_BY
) {
1252 _cleanup_free_
int *cfds
= NULL
;
1256 if (u
->type
!= UNIT_SOCKET
)
1261 cn_fds
= socket_collect_fds(sock
, &cfds
);
1269 rfds
= TAKE_PTR(cfds
);
1270 rn_socket_fds
= cn_fds
;
1274 t
= reallocarray(rfds
, rn_socket_fds
+ cn_fds
, sizeof(int));
1278 memcpy(t
+ rn_socket_fds
, cfds
, cn_fds
* sizeof(int));
1281 rn_socket_fds
+= cn_fds
;
1284 r
= strv_extend_n(&rfd_names
, socket_fdname(sock
), cn_fds
);
1290 if (s
->n_fd_store
> 0) {
1296 t
= reallocarray(rfds
, rn_socket_fds
+ s
->n_fd_store
, sizeof(int));
1302 nl
= reallocarray(rfd_names
, rn_socket_fds
+ s
->n_fd_store
+ 1, sizeof(char *));
1307 n_fds
= rn_socket_fds
;
1309 LIST_FOREACH(fd_store
, fs
, s
->fd_store
) {
1310 rfds
[n_fds
] = fs
->fd
;
1311 rfd_names
[n_fds
] = strdup(strempty(fs
->fdname
));
1312 if (!rfd_names
[n_fds
])
1319 rfd_names
[n_fds
] = NULL
;
1322 *fds
= TAKE_PTR(rfds
);
1323 *fd_names
= TAKE_PTR(rfd_names
);
1324 *n_socket_fds
= rn_socket_fds
;
1325 *n_storage_fds
= rn_storage_fds
;
1330 static int service_allocate_exec_fd_event_source(
1333 sd_event_source
**ret_event_source
) {
1335 _cleanup_(sd_event_source_unrefp
) sd_event_source
*source
= NULL
;
1340 assert(ret_event_source
);
1342 r
= sd_event_add_io(UNIT(s
)->manager
->event
, &source
, fd
, 0, service_dispatch_exec_io
, s
);
1344 return log_unit_error_errno(UNIT(s
), r
, "Failed to allocate exec_fd event source: %m");
1346 /* This is a bit lower priority than SIGCHLD, as that carries a lot more interesting failure information */
1348 r
= sd_event_source_set_priority(source
, SD_EVENT_PRIORITY_NORMAL
-3);
1350 return log_unit_error_errno(UNIT(s
), r
, "Failed to adjust priority of exec_fd event source: %m");
1352 (void) sd_event_source_set_description(source
, "service exec_fd");
1354 r
= sd_event_source_set_io_fd_own(source
, true);
1356 return log_unit_error_errno(UNIT(s
), r
, "Failed to pass ownership of fd to event source: %m");
1358 *ret_event_source
= TAKE_PTR(source
);
1362 static int service_allocate_exec_fd(
1364 sd_event_source
**ret_event_source
,
1367 _cleanup_close_pair_
int p
[] = { -1, -1 };
1371 assert(ret_event_source
);
1372 assert(ret_exec_fd
);
1374 if (pipe2(p
, O_CLOEXEC
|O_NONBLOCK
) < 0)
1375 return log_unit_error_errno(UNIT(s
), errno
, "Failed to allocate exec_fd pipe: %m");
1377 r
= service_allocate_exec_fd_event_source(s
, p
[0], ret_event_source
);
1382 *ret_exec_fd
= TAKE_FD(p
[1]);
1387 static bool service_exec_needs_notify_socket(Service
*s
, ExecFlags flags
) {
1390 /* Notifications are accepted depending on the process and
1391 * the access setting of the service:
1392 * process: \ access: NONE MAIN EXEC ALL
1393 * main no yes yes yes
1394 * control no no yes yes
1395 * other (forked) no no no yes */
1397 if (flags
& EXEC_IS_CONTROL
)
1398 /* A control process */
1399 return IN_SET(s
->notify_access
, NOTIFY_EXEC
, NOTIFY_ALL
);
1401 /* We only spawn main processes and control processes, so any
1402 * process that is not a control process is a main process */
1403 return s
->notify_access
!= NOTIFY_NONE
;
1406 static int service_spawn(
1413 _cleanup_(exec_params_clear
) ExecParameters exec_params
= {
1420 _cleanup_(sd_event_source_unrefp
) sd_event_source
*exec_fd_source
= NULL
;
1421 _cleanup_strv_free_
char **final_env
= NULL
, **our_env
= NULL
;
1430 r
= unit_prepare_exec(UNIT(s
)); /* This realizes the cgroup, among other things */
1434 assert(!s
->exec_fd_event_source
);
1436 if (flags
& EXEC_IS_CONTROL
) {
1437 /* If this is a control process, mask the permissions/chroot application if this is requested. */
1438 if (s
->permissions_start_only
)
1439 exec_params
.flags
&= ~EXEC_APPLY_SANDBOXING
;
1440 if (s
->root_directory_start_only
)
1441 exec_params
.flags
&= ~EXEC_APPLY_CHROOT
;
1444 if ((flags
& EXEC_PASS_FDS
) ||
1445 s
->exec_context
.std_input
== EXEC_INPUT_SOCKET
||
1446 s
->exec_context
.std_output
== EXEC_OUTPUT_SOCKET
||
1447 s
->exec_context
.std_error
== EXEC_OUTPUT_SOCKET
) {
1449 r
= service_collect_fds(s
,
1451 &exec_params
.fd_names
,
1452 &exec_params
.n_socket_fds
,
1453 &exec_params
.n_storage_fds
);
1457 log_unit_debug(UNIT(s
), "Passing %zu fds to service", exec_params
.n_socket_fds
+ exec_params
.n_storage_fds
);
1460 if (!FLAGS_SET(flags
, EXEC_IS_CONTROL
) && s
->type
== SERVICE_EXEC
) {
1461 r
= service_allocate_exec_fd(s
, &exec_fd_source
, &exec_params
.exec_fd
);
1466 r
= service_arm_timer(s
, usec_add(now(CLOCK_MONOTONIC
), timeout
));
1470 our_env
= new0(char*, 10);
1474 if (service_exec_needs_notify_socket(s
, flags
)) {
1475 if (asprintf(our_env
+ n_env
++, "NOTIFY_SOCKET=%s", UNIT(s
)->manager
->notify_socket
) < 0)
1478 exec_params
.notify_socket
= UNIT(s
)->manager
->notify_socket
;
1481 if (s
->main_pid
> 0)
1482 if (asprintf(our_env
+ n_env
++, "MAINPID="PID_FMT
, s
->main_pid
) < 0)
1485 if (MANAGER_IS_USER(UNIT(s
)->manager
))
1486 if (asprintf(our_env
+ n_env
++, "MANAGERPID="PID_FMT
, getpid_cached()) < 0)
1490 if (asprintf(our_env
+ n_env
++, "PIDFILE=%s", s
->pid_file
) < 0)
1493 if (s
->socket_fd
>= 0) {
1494 union sockaddr_union sa
;
1495 socklen_t salen
= sizeof(sa
);
1497 /* If this is a per-connection service instance, let's set $REMOTE_ADDR and $REMOTE_PORT to something
1498 * useful. Note that we do this only when we are still connected at this point in time, which we might
1499 * very well not be. Hence we ignore all errors when retrieving peer information (as that might result
1500 * in ENOTCONN), and just use whate we can use. */
1502 if (getpeername(s
->socket_fd
, &sa
.sa
, &salen
) >= 0 &&
1503 IN_SET(sa
.sa
.sa_family
, AF_INET
, AF_INET6
, AF_VSOCK
)) {
1504 _cleanup_free_
char *addr
= NULL
;
1508 r
= sockaddr_pretty(&sa
.sa
, salen
, true, false, &addr
);
1512 t
= strjoin("REMOTE_ADDR=", addr
);
1515 our_env
[n_env
++] = t
;
1517 r
= sockaddr_port(&sa
.sa
, &port
);
1521 if (asprintf(&t
, "REMOTE_PORT=%u", port
) < 0)
1523 our_env
[n_env
++] = t
;
1527 if (flags
& EXEC_SETENV_RESULT
) {
1528 if (asprintf(our_env
+ n_env
++, "SERVICE_RESULT=%s", service_result_to_string(s
->result
)) < 0)
1531 if (s
->main_exec_status
.pid
> 0 &&
1532 dual_timestamp_is_set(&s
->main_exec_status
.exit_timestamp
)) {
1533 if (asprintf(our_env
+ n_env
++, "EXIT_CODE=%s", sigchld_code_to_string(s
->main_exec_status
.code
)) < 0)
1536 if (s
->main_exec_status
.code
== CLD_EXITED
)
1537 r
= asprintf(our_env
+ n_env
++, "EXIT_STATUS=%i", s
->main_exec_status
.status
);
1539 r
= asprintf(our_env
+ n_env
++, "EXIT_STATUS=%s", signal_to_string(s
->main_exec_status
.status
));
1545 r
= unit_set_exec_params(UNIT(s
), &exec_params
);
1549 final_env
= strv_env_merge(2, exec_params
.environment
, our_env
, NULL
);
1553 /* System D-Bus needs nss-systemd disabled, so that we don't deadlock */
1554 SET_FLAG(exec_params
.flags
, EXEC_NSS_BYPASS_BUS
,
1555 MANAGER_IS_SYSTEM(UNIT(s
)->manager
) && unit_has_name(UNIT(s
), SPECIAL_DBUS_SERVICE
));
1557 strv_free_and_replace(exec_params
.environment
, final_env
);
1558 exec_params
.watchdog_usec
= service_get_watchdog_usec(s
);
1559 exec_params
.selinux_context_net
= s
->socket_fd_selinux_context_net
;
1560 if (s
->type
== SERVICE_IDLE
)
1561 exec_params
.idle_pipe
= UNIT(s
)->manager
->idle_pipe
;
1562 exec_params
.stdin_fd
= s
->stdin_fd
;
1563 exec_params
.stdout_fd
= s
->stdout_fd
;
1564 exec_params
.stderr_fd
= s
->stderr_fd
;
1566 r
= exec_spawn(UNIT(s
),
1576 s
->exec_fd_event_source
= TAKE_PTR(exec_fd_source
);
1577 s
->exec_fd_hot
= false;
1579 r
= unit_watch_pid(UNIT(s
), pid
, true);
1588 static int main_pid_good(Service
*s
) {
1591 /* Returns 0 if the pid is dead, > 0 if it is good, < 0 if we don't know */
1593 /* If we know the pid file, then let's just check if it is
1595 if (s
->main_pid_known
) {
1597 /* If it's an alien child let's check if it is still
1599 if (s
->main_pid_alien
&& s
->main_pid
> 0)
1600 return pid_is_alive(s
->main_pid
);
1602 /* .. otherwise assume we'll get a SIGCHLD for it,
1603 * which we really should wait for to collect exit
1604 * status and code */
1605 return s
->main_pid
> 0;
1608 /* We don't know the pid */
1612 static int control_pid_good(Service
*s
) {
1615 /* Returns 0 if the control PID is dead, > 0 if it is good. We never actually return < 0 here, but in order to
1616 * make this function as similar as possible to main_pid_good() and cgroup_good(), we pretend that < 0 also
1617 * means: we can't figure it out. */
1619 return s
->control_pid
> 0;
1622 static int cgroup_good(Service
*s
) {
1627 /* Returns 0 if the cgroup is empty or doesn't exist, > 0 if it is exists and is populated, < 0 if we can't
1630 if (!UNIT(s
)->cgroup_path
)
1633 r
= cg_is_empty_recursive(SYSTEMD_CGROUP_CONTROLLER
, UNIT(s
)->cgroup_path
);
1640 static bool service_shall_restart(Service
*s
, const char **reason
) {
1643 /* Don't restart after manual stops */
1644 if (s
->forbid_restart
) {
1645 *reason
= "manual stop";
1649 /* Never restart if this is configured as special exception */
1650 if (exit_status_set_test(&s
->restart_prevent_status
, s
->main_exec_status
.code
, s
->main_exec_status
.status
)) {
1651 *reason
= "prevented by exit status";
1655 /* Restart if the exit code/status are configured as restart triggers */
1656 if (exit_status_set_test(&s
->restart_force_status
, s
->main_exec_status
.code
, s
->main_exec_status
.status
)) {
1657 *reason
= "forced by exit status";
1661 *reason
= "restart setting";
1662 switch (s
->restart
) {
1664 case SERVICE_RESTART_NO
:
1667 case SERVICE_RESTART_ALWAYS
:
1670 case SERVICE_RESTART_ON_SUCCESS
:
1671 return s
->result
== SERVICE_SUCCESS
;
1673 case SERVICE_RESTART_ON_FAILURE
:
1674 return !IN_SET(s
->result
, SERVICE_SUCCESS
, SERVICE_SKIP_CONDITION
);
1676 case SERVICE_RESTART_ON_ABNORMAL
:
1677 return !IN_SET(s
->result
, SERVICE_SUCCESS
, SERVICE_FAILURE_EXIT_CODE
, SERVICE_SKIP_CONDITION
);
1679 case SERVICE_RESTART_ON_WATCHDOG
:
1680 return s
->result
== SERVICE_FAILURE_WATCHDOG
;
1682 case SERVICE_RESTART_ON_ABORT
:
1683 return IN_SET(s
->result
, SERVICE_FAILURE_SIGNAL
, SERVICE_FAILURE_CORE_DUMP
);
1686 assert_not_reached("unknown restart setting");
1690 static bool service_will_restart(Unit
*u
) {
1691 Service
*s
= SERVICE(u
);
1695 if (s
->will_auto_restart
)
1697 if (s
->state
== SERVICE_AUTO_RESTART
)
1700 return unit_will_restart_default(u
);
1703 static void service_enter_dead(Service
*s
, ServiceResult f
, bool allow_restart
) {
1704 ServiceState end_state
;
1709 /* If there's a stop job queued before we enter the DEAD state, we shouldn't act on Restart=, in order to not
1710 * undo what has already been enqueued. */
1711 if (unit_stop_pending(UNIT(s
)))
1712 allow_restart
= false;
1714 if (s
->result
== SERVICE_SUCCESS
)
1717 if (s
->result
== SERVICE_SUCCESS
) {
1718 unit_log_success(UNIT(s
));
1719 end_state
= SERVICE_DEAD
;
1720 } else if (s
->result
== SERVICE_SKIP_CONDITION
) {
1721 unit_log_skip(UNIT(s
), service_result_to_string(s
->result
));
1722 end_state
= SERVICE_DEAD
;
1724 unit_log_failure(UNIT(s
), service_result_to_string(s
->result
));
1725 end_state
= SERVICE_FAILED
;
1727 unit_warn_leftover_processes(UNIT(s
), unit_log_leftover_process_stop
);
1730 log_unit_debug(UNIT(s
), "Service restart not allowed.");
1735 shall_restart
= service_shall_restart(s
, &reason
);
1736 log_unit_debug(UNIT(s
), "Service will %srestart (%s)",
1737 shall_restart
? "" : "not ",
1740 s
->will_auto_restart
= true;
1743 /* Make sure service_release_resources() doesn't destroy our FD store, while we are changing through
1744 * SERVICE_FAILED/SERVICE_DEAD before entering into SERVICE_AUTO_RESTART. */
1745 s
->n_keep_fd_store
++;
1747 service_set_state(s
, end_state
);
1749 if (s
->will_auto_restart
) {
1750 s
->will_auto_restart
= false;
1752 r
= service_arm_timer(s
, usec_add(now(CLOCK_MONOTONIC
), s
->restart_usec
));
1754 s
->n_keep_fd_store
--;
1758 service_set_state(s
, SERVICE_AUTO_RESTART
);
1760 /* If we shan't restart, then flush out the restart counter. But don't do that immediately, so that the
1761 * user can still introspect the counter. Do so on the next start. */
1762 s
->flush_n_restarts
= true;
1764 /* The new state is in effect, let's decrease the fd store ref counter again. Let's also re-add us to the GC
1765 * queue, so that the fd store is possibly gc'ed again */
1766 s
->n_keep_fd_store
--;
1767 unit_add_to_gc_queue(UNIT(s
));
1769 /* The next restart might not be a manual stop, hence reset the flag indicating manual stops */
1770 s
->forbid_restart
= false;
1772 /* We want fresh tmpdirs in case service is started again immediately */
1773 s
->exec_runtime
= exec_runtime_unref(s
->exec_runtime
, true);
1775 /* Also, remove the runtime directory */
1776 unit_destroy_runtime_data(UNIT(s
), &s
->exec_context
);
1778 /* Get rid of the IPC bits of the user */
1779 unit_unref_uid_gid(UNIT(s
), true);
1781 /* Release the user, and destroy it if we are the only remaining owner */
1782 dynamic_creds_destroy(&s
->dynamic_creds
);
1784 /* Try to delete the pid file. At this point it will be
1785 * out-of-date, and some software might be confused by it, so
1786 * let's remove it. */
1788 (void) unlink(s
->pid_file
);
1790 /* Reset TTY ownership if necessary */
1791 exec_context_revert_tty(&s
->exec_context
);
1796 log_unit_warning_errno(UNIT(s
), r
, "Failed to run install restart timer: %m");
1797 service_enter_dead(s
, SERVICE_FAILURE_RESOURCES
, false);
1800 static void service_enter_stop_post(Service
*s
, ServiceResult f
) {
1804 if (s
->result
== SERVICE_SUCCESS
)
1807 service_unwatch_control_pid(s
);
1808 (void) unit_enqueue_rewatch_pids(UNIT(s
));
1810 s
->control_command
= s
->exec_command
[SERVICE_EXEC_STOP_POST
];
1811 if (s
->control_command
) {
1812 s
->control_command_id
= SERVICE_EXEC_STOP_POST
;
1814 r
= service_spawn(s
,
1816 s
->timeout_stop_usec
,
1817 EXEC_APPLY_SANDBOXING
|EXEC_APPLY_CHROOT
|EXEC_APPLY_TTY_STDIN
|EXEC_IS_CONTROL
|EXEC_SETENV_RESULT
|EXEC_CONTROL_CGROUP
,
1822 service_set_state(s
, SERVICE_STOP_POST
);
1824 service_enter_signal(s
, SERVICE_FINAL_SIGTERM
, SERVICE_SUCCESS
);
1829 log_unit_warning_errno(UNIT(s
), r
, "Failed to run 'stop-post' task: %m");
1830 service_enter_signal(s
, SERVICE_FINAL_SIGTERM
, SERVICE_FAILURE_RESOURCES
);
1833 static int state_to_kill_operation(Service
*s
, ServiceState state
) {
1836 case SERVICE_STOP_WATCHDOG
:
1837 case SERVICE_FINAL_WATCHDOG
:
1838 return KILL_WATCHDOG
;
1840 case SERVICE_STOP_SIGTERM
:
1841 if (unit_has_job_type(UNIT(s
), JOB_RESTART
))
1842 return KILL_RESTART
;
1845 case SERVICE_FINAL_SIGTERM
:
1846 return KILL_TERMINATE
;
1848 case SERVICE_STOP_SIGKILL
:
1849 case SERVICE_FINAL_SIGKILL
:
1853 return _KILL_OPERATION_INVALID
;
1857 static void service_enter_signal(Service
*s
, ServiceState state
, ServiceResult f
) {
1858 int kill_operation
, r
;
1862 if (s
->result
== SERVICE_SUCCESS
)
1865 /* Before sending any signal, make sure we track all members of this cgroup */
1866 (void) unit_watch_all_pids(UNIT(s
));
1868 /* Also, enqueue a job that we recheck all our PIDs a bit later, given that it's likely some processes have
1870 (void) unit_enqueue_rewatch_pids(UNIT(s
));
1872 kill_operation
= state_to_kill_operation(s
, state
);
1873 r
= unit_kill_context(
1884 r
= service_arm_timer(s
, usec_add(now(CLOCK_MONOTONIC
),
1885 kill_operation
== KILL_WATCHDOG
? service_timeout_abort_usec(s
) : s
->timeout_stop_usec
));
1889 service_set_state(s
, state
);
1890 } else if (IN_SET(state
, SERVICE_STOP_WATCHDOG
, SERVICE_STOP_SIGTERM
) && s
->kill_context
.send_sigkill
)
1891 service_enter_signal(s
, SERVICE_STOP_SIGKILL
, SERVICE_SUCCESS
);
1892 else if (IN_SET(state
, SERVICE_STOP_WATCHDOG
, SERVICE_STOP_SIGTERM
, SERVICE_STOP_SIGKILL
))
1893 service_enter_stop_post(s
, SERVICE_SUCCESS
);
1894 else if (IN_SET(state
, SERVICE_FINAL_WATCHDOG
, SERVICE_FINAL_SIGTERM
) && s
->kill_context
.send_sigkill
)
1895 service_enter_signal(s
, SERVICE_FINAL_SIGKILL
, SERVICE_SUCCESS
);
1897 service_enter_dead(s
, SERVICE_SUCCESS
, true);
1902 log_unit_warning_errno(UNIT(s
), r
, "Failed to kill processes: %m");
1904 if (IN_SET(state
, SERVICE_STOP_WATCHDOG
, SERVICE_STOP_SIGTERM
, SERVICE_STOP_SIGKILL
))
1905 service_enter_stop_post(s
, SERVICE_FAILURE_RESOURCES
);
1907 service_enter_dead(s
, SERVICE_FAILURE_RESOURCES
, true);
1910 static void service_enter_stop_by_notify(Service
*s
) {
1913 (void) unit_enqueue_rewatch_pids(UNIT(s
));
1915 service_arm_timer(s
, usec_add(now(CLOCK_MONOTONIC
), s
->timeout_stop_usec
));
1917 /* The service told us it's stopping, so it's as if we SIGTERM'd it. */
1918 service_set_state(s
, SERVICE_STOP_SIGTERM
);
1921 static void service_enter_stop(Service
*s
, ServiceResult f
) {
1926 if (s
->result
== SERVICE_SUCCESS
)
1929 service_unwatch_control_pid(s
);
1930 (void) unit_enqueue_rewatch_pids(UNIT(s
));
1932 s
->control_command
= s
->exec_command
[SERVICE_EXEC_STOP
];
1933 if (s
->control_command
) {
1934 s
->control_command_id
= SERVICE_EXEC_STOP
;
1936 r
= service_spawn(s
,
1938 s
->timeout_stop_usec
,
1939 EXEC_APPLY_SANDBOXING
|EXEC_APPLY_CHROOT
|EXEC_IS_CONTROL
|EXEC_SETENV_RESULT
|EXEC_CONTROL_CGROUP
,
1944 service_set_state(s
, SERVICE_STOP
);
1946 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, SERVICE_SUCCESS
);
1951 log_unit_warning_errno(UNIT(s
), r
, "Failed to run 'stop' task: %m");
1952 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, SERVICE_FAILURE_RESOURCES
);
1955 static bool service_good(Service
*s
) {
1959 if (s
->type
== SERVICE_DBUS
&& !s
->bus_name_good
)
1962 main_pid_ok
= main_pid_good(s
);
1963 if (main_pid_ok
> 0) /* It's alive */
1965 if (main_pid_ok
== 0) /* It's dead */
1968 /* OK, we don't know anything about the main PID, maybe
1969 * because there is none. Let's check the control group
1972 return cgroup_good(s
) != 0;
1975 static void service_enter_running(Service
*s
, ServiceResult f
) {
1978 if (s
->result
== SERVICE_SUCCESS
)
1981 service_unwatch_control_pid(s
);
1983 if (s
->result
!= SERVICE_SUCCESS
)
1984 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, f
);
1985 else if (service_good(s
)) {
1987 /* If there are any queued up sd_notify() notifications, process them now */
1988 if (s
->notify_state
== NOTIFY_RELOADING
)
1989 service_enter_reload_by_notify(s
);
1990 else if (s
->notify_state
== NOTIFY_STOPPING
)
1991 service_enter_stop_by_notify(s
);
1993 service_set_state(s
, SERVICE_RUNNING
);
1994 service_arm_timer(s
, usec_add(UNIT(s
)->active_enter_timestamp
.monotonic
, s
->runtime_max_usec
));
1997 } else if (s
->remain_after_exit
)
1998 service_set_state(s
, SERVICE_EXITED
);
2000 service_enter_stop(s
, SERVICE_SUCCESS
);
2003 static void service_enter_start_post(Service
*s
) {
2007 service_unwatch_control_pid(s
);
2008 service_reset_watchdog(s
);
2010 s
->control_command
= s
->exec_command
[SERVICE_EXEC_START_POST
];
2011 if (s
->control_command
) {
2012 s
->control_command_id
= SERVICE_EXEC_START_POST
;
2014 r
= service_spawn(s
,
2016 s
->timeout_start_usec
,
2017 EXEC_APPLY_SANDBOXING
|EXEC_APPLY_CHROOT
|EXEC_IS_CONTROL
|EXEC_CONTROL_CGROUP
,
2022 service_set_state(s
, SERVICE_START_POST
);
2024 service_enter_running(s
, SERVICE_SUCCESS
);
2029 log_unit_warning_errno(UNIT(s
), r
, "Failed to run 'start-post' task: %m");
2030 service_enter_stop(s
, SERVICE_FAILURE_RESOURCES
);
2033 static void service_kill_control_process(Service
*s
) {
2038 if (s
->control_pid
<= 0)
2041 r
= kill_and_sigcont(s
->control_pid
, SIGKILL
);
2043 _cleanup_free_
char *comm
= NULL
;
2045 (void) get_process_comm(s
->control_pid
, &comm
);
2047 log_unit_debug_errno(UNIT(s
), r
, "Failed to kill control process " PID_FMT
" (%s), ignoring: %m",
2048 s
->control_pid
, strna(comm
));
2052 static int service_adverse_to_leftover_processes(Service
*s
) {
2055 /* KillMode=mixed and control group are used to indicate that all process should be killed off.
2056 * SendSIGKILL= is used for services that require a clean shutdown. These are typically database
2057 * service where a SigKilled process would result in a lengthy recovery and who's shutdown or startup
2058 * time is quite variable (so Timeout settings aren't of use).
2060 * Here we take these two factors and refuse to start a service if there are existing processes
2061 * within a control group. Databases, while generally having some protection against multiple
2062 * instances running, lets not stress the rigor of these. Also ExecStartPre= parts of the service
2063 * aren't as rigoriously written to protect aganst against multiple use. */
2065 if (unit_warn_leftover_processes(UNIT(s
), unit_log_leftover_process_start
) > 0 &&
2066 IN_SET(s
->kill_context
.kill_mode
, KILL_MIXED
, KILL_CONTROL_GROUP
) &&
2067 !s
->kill_context
.send_sigkill
)
2068 return log_unit_error_errno(UNIT(s
), SYNTHETIC_ERRNO(EBUSY
),
2069 "Will not start SendSIGKILL=no service of type KillMode=control-group or mixed while processes exist");
2074 static void service_enter_start(Service
*s
) {
2082 service_unwatch_control_pid(s
);
2083 service_unwatch_main_pid(s
);
2085 r
= service_adverse_to_leftover_processes(s
);
2089 if (s
->type
== SERVICE_FORKING
) {
2090 s
->control_command_id
= SERVICE_EXEC_START
;
2091 c
= s
->control_command
= s
->exec_command
[SERVICE_EXEC_START
];
2093 s
->main_command
= NULL
;
2095 s
->control_command_id
= _SERVICE_EXEC_COMMAND_INVALID
;
2096 s
->control_command
= NULL
;
2098 c
= s
->main_command
= s
->exec_command
[SERVICE_EXEC_START
];
2102 if (s
->type
!= SERVICE_ONESHOT
) {
2103 /* There's no command line configured for the main command? Hmm, that is strange.
2104 * This can only happen if the configuration changes at runtime. In this case,
2105 * let's enter a failure state. */
2106 r
= log_unit_error_errno(UNIT(s
), SYNTHETIC_ERRNO(ENXIO
), "There's no 'start' task anymore we could start.");
2110 /* We force a fake state transition here. Otherwise, the unit would go directly from
2111 * SERVICE_DEAD to SERVICE_DEAD without SERVICE_ACTIVATING or SERVICE_ACTIVE
2112 * in between. This way we can later trigger actions that depend on the state
2113 * transition, including SuccessAction=. */
2114 service_set_state(s
, SERVICE_START
);
2116 service_enter_start_post(s
);
2120 if (IN_SET(s
->type
, SERVICE_SIMPLE
, SERVICE_IDLE
))
2121 /* For simple + idle this is the main process. We don't apply any timeout here, but
2122 * service_enter_running() will later apply the .runtime_max_usec timeout. */
2123 timeout
= USEC_INFINITY
;
2125 timeout
= s
->timeout_start_usec
;
2127 r
= service_spawn(s
,
2130 EXEC_PASS_FDS
|EXEC_APPLY_SANDBOXING
|EXEC_APPLY_CHROOT
|EXEC_APPLY_TTY_STDIN
|EXEC_SET_WATCHDOG
|EXEC_WRITE_CREDENTIALS
,
2135 if (IN_SET(s
->type
, SERVICE_SIMPLE
, SERVICE_IDLE
)) {
2136 /* For simple services we immediately start
2137 * the START_POST binaries. */
2139 service_set_main_pid(s
, pid
);
2140 service_enter_start_post(s
);
2142 } else if (s
->type
== SERVICE_FORKING
) {
2144 /* For forking services we wait until the start
2145 * process exited. */
2147 s
->control_pid
= pid
;
2148 service_set_state(s
, SERVICE_START
);
2150 } else if (IN_SET(s
->type
, SERVICE_ONESHOT
, SERVICE_DBUS
, SERVICE_NOTIFY
, SERVICE_EXEC
)) {
2152 /* For oneshot services we wait until the start process exited, too, but it is our main process. */
2154 /* For D-Bus services we know the main pid right away, but wait for the bus name to appear on the
2155 * bus. 'notify' and 'exec' services are similar. */
2157 service_set_main_pid(s
, pid
);
2158 service_set_state(s
, SERVICE_START
);
2160 assert_not_reached("Unknown service type");
2165 log_unit_warning_errno(UNIT(s
), r
, "Failed to run 'start' task: %m");
2166 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, SERVICE_FAILURE_RESOURCES
);
2169 static void service_enter_start_pre(Service
*s
) {
2174 service_unwatch_control_pid(s
);
2176 s
->control_command
= s
->exec_command
[SERVICE_EXEC_START_PRE
];
2177 if (s
->control_command
) {
2179 r
= service_adverse_to_leftover_processes(s
);
2183 s
->control_command_id
= SERVICE_EXEC_START_PRE
;
2185 r
= service_spawn(s
,
2187 s
->timeout_start_usec
,
2188 EXEC_APPLY_SANDBOXING
|EXEC_APPLY_CHROOT
|EXEC_IS_CONTROL
|EXEC_APPLY_TTY_STDIN
,
2193 service_set_state(s
, SERVICE_START_PRE
);
2195 service_enter_start(s
);
2200 log_unit_warning_errno(UNIT(s
), r
, "Failed to run 'start-pre' task: %m");
2201 service_enter_dead(s
, SERVICE_FAILURE_RESOURCES
, true);
2204 static void service_enter_condition(Service
*s
) {
2209 service_unwatch_control_pid(s
);
2211 s
->control_command
= s
->exec_command
[SERVICE_EXEC_CONDITION
];
2212 if (s
->control_command
) {
2214 r
= service_adverse_to_leftover_processes(s
);
2218 s
->control_command_id
= SERVICE_EXEC_CONDITION
;
2220 r
= service_spawn(s
,
2222 s
->timeout_start_usec
,
2223 EXEC_APPLY_SANDBOXING
|EXEC_APPLY_CHROOT
|EXEC_IS_CONTROL
|EXEC_APPLY_TTY_STDIN
,
2229 service_set_state(s
, SERVICE_CONDITION
);
2231 service_enter_start_pre(s
);
2236 log_unit_warning_errno(UNIT(s
), r
, "Failed to run 'exec-condition' task: %m");
2237 service_enter_dead(s
, SERVICE_FAILURE_RESOURCES
, true);
2240 static void service_enter_restart(Service
*s
) {
2241 _cleanup_(sd_bus_error_free
) sd_bus_error error
= SD_BUS_ERROR_NULL
;
2246 if (unit_has_job_type(UNIT(s
), JOB_STOP
)) {
2247 /* Don't restart things if we are going down anyway */
2248 log_unit_info(UNIT(s
), "Stop job pending for unit, delaying automatic restart.");
2250 r
= service_arm_timer(s
, usec_add(now(CLOCK_MONOTONIC
), s
->restart_usec
));
2257 /* Any units that are bound to this service must also be
2258 * restarted. We use JOB_RESTART (instead of the more obvious
2259 * JOB_START) here so that those dependency jobs will be added
2261 r
= manager_add_job(UNIT(s
)->manager
, JOB_RESTART
, UNIT(s
), JOB_REPLACE
, NULL
, &error
, NULL
);
2265 /* Count the jobs we enqueue for restarting. This counter is maintained as long as the unit isn't fully
2266 * stopped, i.e. as long as it remains up or remains in auto-start states. The user can reset the counter
2267 * explicitly however via the usual "systemctl reset-failure" logic. */
2269 s
->flush_n_restarts
= false;
2271 log_unit_struct(UNIT(s
), LOG_INFO
,
2272 "MESSAGE_ID=" SD_MESSAGE_UNIT_RESTART_SCHEDULED_STR
,
2273 LOG_UNIT_INVOCATION_ID(UNIT(s
)),
2274 LOG_UNIT_MESSAGE(UNIT(s
), "Scheduled restart job, restart counter is at %u.", s
->n_restarts
),
2275 "N_RESTARTS=%u", s
->n_restarts
);
2277 /* Notify clients about changed restart counter */
2278 unit_add_to_dbus_queue(UNIT(s
));
2280 /* Note that we stay in the SERVICE_AUTO_RESTART state here,
2281 * it will be canceled as part of the service_stop() call that
2282 * is executed as part of JOB_RESTART. */
2287 log_unit_warning(UNIT(s
), "Failed to schedule restart job: %s", bus_error_message(&error
, r
));
2288 service_enter_dead(s
, SERVICE_FAILURE_RESOURCES
, false);
2291 static void service_enter_reload_by_notify(Service
*s
) {
2292 _cleanup_(sd_bus_error_free
) sd_bus_error error
= SD_BUS_ERROR_NULL
;
2297 service_arm_timer(s
, usec_add(now(CLOCK_MONOTONIC
), s
->timeout_start_usec
));
2298 service_set_state(s
, SERVICE_RELOAD
);
2300 /* service_enter_reload_by_notify is never called during a reload, thus no loops are possible. */
2301 r
= manager_propagate_reload(UNIT(s
)->manager
, UNIT(s
), JOB_FAIL
, &error
);
2303 log_unit_warning(UNIT(s
), "Failed to schedule propagation of reload: %s", bus_error_message(&error
, r
));
2306 static void service_enter_reload(Service
*s
) {
2311 service_unwatch_control_pid(s
);
2312 s
->reload_result
= SERVICE_SUCCESS
;
2314 s
->control_command
= s
->exec_command
[SERVICE_EXEC_RELOAD
];
2315 if (s
->control_command
) {
2316 s
->control_command_id
= SERVICE_EXEC_RELOAD
;
2318 r
= service_spawn(s
,
2320 s
->timeout_start_usec
,
2321 EXEC_APPLY_SANDBOXING
|EXEC_APPLY_CHROOT
|EXEC_IS_CONTROL
|EXEC_CONTROL_CGROUP
,
2326 service_set_state(s
, SERVICE_RELOAD
);
2328 service_enter_running(s
, SERVICE_SUCCESS
);
2333 log_unit_warning_errno(UNIT(s
), r
, "Failed to run 'reload' task: %m");
2334 s
->reload_result
= SERVICE_FAILURE_RESOURCES
;
2335 service_enter_running(s
, SERVICE_SUCCESS
);
2338 static void service_run_next_control(Service
*s
) {
2343 assert(s
->control_command
);
2344 assert(s
->control_command
->command_next
);
2346 assert(s
->control_command_id
!= SERVICE_EXEC_START
);
2348 s
->control_command
= s
->control_command
->command_next
;
2349 service_unwatch_control_pid(s
);
2351 if (IN_SET(s
->state
, SERVICE_CONDITION
, SERVICE_START_PRE
, SERVICE_START
, SERVICE_START_POST
, SERVICE_RUNNING
, SERVICE_RELOAD
))
2352 timeout
= s
->timeout_start_usec
;
2354 timeout
= s
->timeout_stop_usec
;
2356 r
= service_spawn(s
,
2359 EXEC_APPLY_SANDBOXING
|EXEC_APPLY_CHROOT
|EXEC_IS_CONTROL
|
2360 (IN_SET(s
->control_command_id
, SERVICE_EXEC_CONDITION
, SERVICE_EXEC_START_PRE
, SERVICE_EXEC_STOP_POST
) ? EXEC_APPLY_TTY_STDIN
: 0)|
2361 (IN_SET(s
->control_command_id
, SERVICE_EXEC_STOP
, SERVICE_EXEC_STOP_POST
) ? EXEC_SETENV_RESULT
: 0)|
2362 (IN_SET(s
->control_command_id
, SERVICE_EXEC_START_POST
, SERVICE_EXEC_RELOAD
, SERVICE_EXEC_STOP
, SERVICE_EXEC_STOP_POST
) ? EXEC_CONTROL_CGROUP
: 0),
2370 log_unit_warning_errno(UNIT(s
), r
, "Failed to run next control task: %m");
2372 if (IN_SET(s
->state
, SERVICE_CONDITION
, SERVICE_START_PRE
, SERVICE_START_POST
, SERVICE_STOP
))
2373 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, SERVICE_FAILURE_RESOURCES
);
2374 else if (s
->state
== SERVICE_STOP_POST
)
2375 service_enter_dead(s
, SERVICE_FAILURE_RESOURCES
, true);
2376 else if (s
->state
== SERVICE_RELOAD
) {
2377 s
->reload_result
= SERVICE_FAILURE_RESOURCES
;
2378 service_enter_running(s
, SERVICE_SUCCESS
);
2380 service_enter_stop(s
, SERVICE_FAILURE_RESOURCES
);
2383 static void service_run_next_main(Service
*s
) {
2388 assert(s
->main_command
);
2389 assert(s
->main_command
->command_next
);
2390 assert(s
->type
== SERVICE_ONESHOT
);
2392 s
->main_command
= s
->main_command
->command_next
;
2393 service_unwatch_main_pid(s
);
2395 r
= service_spawn(s
,
2397 s
->timeout_start_usec
,
2398 EXEC_PASS_FDS
|EXEC_APPLY_SANDBOXING
|EXEC_APPLY_CHROOT
|EXEC_APPLY_TTY_STDIN
|EXEC_SET_WATCHDOG
,
2403 service_set_main_pid(s
, pid
);
2408 log_unit_warning_errno(UNIT(s
), r
, "Failed to run next main task: %m");
2409 service_enter_stop(s
, SERVICE_FAILURE_RESOURCES
);
2412 static int service_start(Unit
*u
) {
2413 Service
*s
= SERVICE(u
);
2418 /* We cannot fulfill this request right now, try again later
2420 if (IN_SET(s
->state
,
2421 SERVICE_STOP
, SERVICE_STOP_WATCHDOG
, SERVICE_STOP_SIGTERM
, SERVICE_STOP_SIGKILL
, SERVICE_STOP_POST
,
2422 SERVICE_FINAL_WATCHDOG
, SERVICE_FINAL_SIGTERM
, SERVICE_FINAL_SIGKILL
, SERVICE_CLEANING
))
2425 /* Already on it! */
2426 if (IN_SET(s
->state
, SERVICE_CONDITION
, SERVICE_START_PRE
, SERVICE_START
, SERVICE_START_POST
))
2429 /* A service that will be restarted must be stopped first to
2430 * trigger BindsTo and/or OnFailure dependencies. If a user
2431 * does not want to wait for the holdoff time to elapse, the
2432 * service should be manually restarted, not started. We
2433 * simply return EAGAIN here, so that any start jobs stay
2434 * queued, and assume that the auto restart timer will
2435 * eventually trigger the restart. */
2436 if (s
->state
== SERVICE_AUTO_RESTART
)
2439 assert(IN_SET(s
->state
, SERVICE_DEAD
, SERVICE_FAILED
));
2441 /* Make sure we don't enter a busy loop of some kind. */
2442 r
= unit_test_start_limit(u
);
2444 service_enter_dead(s
, SERVICE_FAILURE_START_LIMIT_HIT
, false);
2448 r
= unit_acquire_invocation_id(u
);
2452 s
->result
= SERVICE_SUCCESS
;
2453 s
->reload_result
= SERVICE_SUCCESS
;
2454 s
->main_pid_known
= false;
2455 s
->main_pid_alien
= false;
2456 s
->forbid_restart
= false;
2458 s
->status_text
= mfree(s
->status_text
);
2459 s
->status_errno
= 0;
2461 s
->notify_state
= NOTIFY_UNKNOWN
;
2463 s
->watchdog_original_usec
= s
->watchdog_usec
;
2464 s
->watchdog_override_enable
= false;
2465 s
->watchdog_override_usec
= USEC_INFINITY
;
2467 exec_command_reset_status_list_array(s
->exec_command
, _SERVICE_EXEC_COMMAND_MAX
);
2468 exec_status_reset(&s
->main_exec_status
);
2470 /* This is not an automatic restart? Flush the restart counter then */
2471 if (s
->flush_n_restarts
) {
2473 s
->flush_n_restarts
= false;
2476 u
->reset_accounting
= true;
2478 service_enter_condition(s
);
2482 static int service_stop(Unit
*u
) {
2483 Service
*s
= SERVICE(u
);
2487 /* Don't create restart jobs from manual stops. */
2488 s
->forbid_restart
= true;
2491 if (IN_SET(s
->state
,
2492 SERVICE_STOP
, SERVICE_STOP_SIGTERM
, SERVICE_STOP_SIGKILL
, SERVICE_STOP_POST
,
2493 SERVICE_FINAL_WATCHDOG
, SERVICE_FINAL_SIGTERM
, SERVICE_FINAL_SIGKILL
))
2496 /* A restart will be scheduled or is in progress. */
2497 if (s
->state
== SERVICE_AUTO_RESTART
) {
2498 service_set_state(s
, SERVICE_DEAD
);
2502 /* If there's already something running we go directly into
2504 if (IN_SET(s
->state
, SERVICE_CONDITION
, SERVICE_START_PRE
, SERVICE_START
, SERVICE_START_POST
, SERVICE_RELOAD
, SERVICE_STOP_WATCHDOG
)) {
2505 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, SERVICE_SUCCESS
);
2509 /* If we are currently cleaning, then abort it, brutally. */
2510 if (s
->state
== SERVICE_CLEANING
) {
2511 service_enter_signal(s
, SERVICE_FINAL_SIGKILL
, SERVICE_SUCCESS
);
2515 assert(IN_SET(s
->state
, SERVICE_RUNNING
, SERVICE_EXITED
));
2517 service_enter_stop(s
, SERVICE_SUCCESS
);
2521 static int service_reload(Unit
*u
) {
2522 Service
*s
= SERVICE(u
);
2526 assert(IN_SET(s
->state
, SERVICE_RUNNING
, SERVICE_EXITED
));
2528 service_enter_reload(s
);
2532 _pure_
static bool service_can_reload(Unit
*u
) {
2533 Service
*s
= SERVICE(u
);
2537 return !!s
->exec_command
[SERVICE_EXEC_RELOAD
];
2540 static unsigned service_exec_command_index(Unit
*u
, ServiceExecCommand id
, ExecCommand
*current
) {
2541 Service
*s
= SERVICE(u
);
2543 ExecCommand
*first
, *c
;
2547 assert(id
< _SERVICE_EXEC_COMMAND_MAX
);
2549 first
= s
->exec_command
[id
];
2551 /* Figure out where we are in the list by walking back to the beginning */
2552 for (c
= current
; c
!= first
; c
= c
->command_prev
)
2558 static int service_serialize_exec_command(Unit
*u
, FILE *f
, ExecCommand
*command
) {
2559 _cleanup_free_
char *args
= NULL
, *p
= NULL
;
2560 Service
*s
= SERVICE(u
);
2561 const char *type
, *key
;
2562 ServiceExecCommand id
;
2573 if (command
== s
->control_command
) {
2575 id
= s
->control_command_id
;
2578 id
= SERVICE_EXEC_START
;
2581 idx
= service_exec_command_index(u
, id
, command
);
2583 STRV_FOREACH(arg
, command
->argv
) {
2584 _cleanup_free_
char *e
= NULL
;
2592 if (!GREEDY_REALLOC(args
, length
+ 2 + n
+ 2))
2596 args
[length
++] = ' ';
2598 args
[length
++] = '"';
2599 memcpy(args
+ length
, e
, n
);
2601 args
[length
++] = '"';
2604 if (!GREEDY_REALLOC(args
, length
+ 1))
2609 p
= cescape(command
->path
);
2613 key
= strjoina(type
, "-command");
2614 (void) serialize_item_format(f
, key
, "%s %u %s %s", service_exec_command_to_string(id
), idx
, p
, args
);
2619 static int service_serialize(Unit
*u
, FILE *f
, FDSet
*fds
) {
2620 Service
*s
= SERVICE(u
);
2628 (void) serialize_item(f
, "state", service_state_to_string(s
->state
));
2629 (void) serialize_item(f
, "result", service_result_to_string(s
->result
));
2630 (void) serialize_item(f
, "reload-result", service_result_to_string(s
->reload_result
));
2632 if (s
->control_pid
> 0)
2633 (void) serialize_item_format(f
, "control-pid", PID_FMT
, s
->control_pid
);
2635 if (s
->main_pid_known
&& s
->main_pid
> 0)
2636 (void) serialize_item_format(f
, "main-pid", PID_FMT
, s
->main_pid
);
2638 (void) serialize_bool(f
, "main-pid-known", s
->main_pid_known
);
2639 (void) serialize_bool(f
, "bus-name-good", s
->bus_name_good
);
2640 (void) serialize_bool(f
, "bus-name-owner", s
->bus_name_owner
);
2642 (void) serialize_item_format(f
, "n-restarts", "%u", s
->n_restarts
);
2643 (void) serialize_bool(f
, "flush-n-restarts", s
->flush_n_restarts
);
2645 r
= serialize_item_escaped(f
, "status-text", s
->status_text
);
2649 service_serialize_exec_command(u
, f
, s
->control_command
);
2650 service_serialize_exec_command(u
, f
, s
->main_command
);
2652 r
= serialize_fd(f
, fds
, "stdin-fd", s
->stdin_fd
);
2655 r
= serialize_fd(f
, fds
, "stdout-fd", s
->stdout_fd
);
2658 r
= serialize_fd(f
, fds
, "stderr-fd", s
->stderr_fd
);
2662 if (s
->exec_fd_event_source
) {
2663 r
= serialize_fd(f
, fds
, "exec-fd", sd_event_source_get_io_fd(s
->exec_fd_event_source
));
2667 (void) serialize_bool(f
, "exec-fd-hot", s
->exec_fd_hot
);
2670 if (UNIT_ISSET(s
->accept_socket
)) {
2671 r
= serialize_item(f
, "accept-socket", UNIT_DEREF(s
->accept_socket
)->id
);
2676 r
= serialize_fd(f
, fds
, "socket-fd", s
->socket_fd
);
2680 LIST_FOREACH(fd_store
, fs
, s
->fd_store
) {
2681 _cleanup_free_
char *c
= NULL
;
2684 copy
= fdset_put_dup(fds
, fs
->fd
);
2686 return log_error_errno(copy
, "Failed to copy file descriptor for serialization: %m");
2688 c
= cescape(fs
->fdname
);
2692 (void) serialize_item_format(f
, "fd-store-fd", "%i \"%s\" %i", copy
, c
, fs
->do_poll
);
2695 if (s
->main_exec_status
.pid
> 0) {
2696 (void) serialize_item_format(f
, "main-exec-status-pid", PID_FMT
, s
->main_exec_status
.pid
);
2697 (void) serialize_dual_timestamp(f
, "main-exec-status-start", &s
->main_exec_status
.start_timestamp
);
2698 (void) serialize_dual_timestamp(f
, "main-exec-status-exit", &s
->main_exec_status
.exit_timestamp
);
2700 if (dual_timestamp_is_set(&s
->main_exec_status
.exit_timestamp
)) {
2701 (void) serialize_item_format(f
, "main-exec-status-code", "%i", s
->main_exec_status
.code
);
2702 (void) serialize_item_format(f
, "main-exec-status-status", "%i", s
->main_exec_status
.status
);
2706 (void) serialize_dual_timestamp(f
, "watchdog-timestamp", &s
->watchdog_timestamp
);
2707 (void) serialize_bool(f
, "forbid-restart", s
->forbid_restart
);
2709 if (s
->watchdog_override_enable
)
2710 (void) serialize_item_format(f
, "watchdog-override-usec", USEC_FMT
, s
->watchdog_override_usec
);
2712 if (s
->watchdog_original_usec
!= USEC_INFINITY
)
2713 (void) serialize_item_format(f
, "watchdog-original-usec", USEC_FMT
, s
->watchdog_original_usec
);
2718 int service_deserialize_exec_command(
2721 const char *value
) {
2723 Service
*s
= SERVICE(u
);
2725 unsigned idx
= 0, i
;
2726 bool control
, found
= false;
2727 ServiceExecCommand id
= _SERVICE_EXEC_COMMAND_INVALID
;
2728 ExecCommand
*command
= NULL
;
2729 _cleanup_free_
char *path
= NULL
;
2730 _cleanup_strv_free_
char **argv
= NULL
;
2732 enum ExecCommandState
{
2733 STATE_EXEC_COMMAND_TYPE
,
2734 STATE_EXEC_COMMAND_INDEX
,
2735 STATE_EXEC_COMMAND_PATH
,
2736 STATE_EXEC_COMMAND_ARGS
,
2737 _STATE_EXEC_COMMAND_MAX
,
2738 _STATE_EXEC_COMMAND_INVALID
= -EINVAL
,
2745 control
= streq(key
, "control-command");
2747 state
= STATE_EXEC_COMMAND_TYPE
;
2750 _cleanup_free_
char *arg
= NULL
;
2752 r
= extract_first_word(&value
, &arg
, NULL
, EXTRACT_CUNESCAPE
| EXTRACT_UNQUOTE
);
2759 case STATE_EXEC_COMMAND_TYPE
:
2760 id
= service_exec_command_from_string(arg
);
2764 state
= STATE_EXEC_COMMAND_INDEX
;
2766 case STATE_EXEC_COMMAND_INDEX
:
2767 r
= safe_atou(arg
, &idx
);
2771 state
= STATE_EXEC_COMMAND_PATH
;
2773 case STATE_EXEC_COMMAND_PATH
:
2774 path
= TAKE_PTR(arg
);
2775 state
= STATE_EXEC_COMMAND_ARGS
;
2777 case STATE_EXEC_COMMAND_ARGS
:
2778 r
= strv_extend(&argv
, arg
);
2783 assert_not_reached("Logic error in exec command deserialization");
2787 if (state
!= STATE_EXEC_COMMAND_ARGS
)
2789 if (strv_isempty(argv
))
2790 return -EINVAL
; /* At least argv[0] must be always present. */
2792 /* Let's check whether exec command on given offset matches data that we just deserialized */
2793 for (command
= s
->exec_command
[id
], i
= 0; command
; command
= command
->command_next
, i
++) {
2797 found
= strv_equal(argv
, command
->argv
) && streq(command
->path
, path
);
2802 /* Command at the index we serialized is different, let's look for command that exactly
2803 * matches but is on different index. If there is no such command we will not resume execution. */
2804 for (command
= s
->exec_command
[id
]; command
; command
= command
->command_next
)
2805 if (strv_equal(command
->argv
, argv
) && streq(command
->path
, path
))
2809 if (command
&& control
) {
2810 s
->control_command
= command
;
2811 s
->control_command_id
= id
;
2813 s
->main_command
= command
;
2815 log_unit_warning(u
, "Current command vanished from the unit file, execution of the command list won't be resumed.");
2820 static int service_deserialize_item(Unit
*u
, const char *key
, const char *value
, FDSet
*fds
) {
2821 Service
*s
= SERVICE(u
);
2829 if (streq(key
, "state")) {
2832 state
= service_state_from_string(value
);
2834 log_unit_debug(u
, "Failed to parse state value: %s", value
);
2836 s
->deserialized_state
= state
;
2837 } else if (streq(key
, "result")) {
2840 f
= service_result_from_string(value
);
2842 log_unit_debug(u
, "Failed to parse result value: %s", value
);
2843 else if (f
!= SERVICE_SUCCESS
)
2846 } else if (streq(key
, "reload-result")) {
2849 f
= service_result_from_string(value
);
2851 log_unit_debug(u
, "Failed to parse reload result value: %s", value
);
2852 else if (f
!= SERVICE_SUCCESS
)
2853 s
->reload_result
= f
;
2855 } else if (streq(key
, "control-pid")) {
2858 if (parse_pid(value
, &pid
) < 0)
2859 log_unit_debug(u
, "Failed to parse control-pid value: %s", value
);
2861 s
->control_pid
= pid
;
2862 } else if (streq(key
, "main-pid")) {
2865 if (parse_pid(value
, &pid
) < 0)
2866 log_unit_debug(u
, "Failed to parse main-pid value: %s", value
);
2868 (void) service_set_main_pid(s
, pid
);
2869 } else if (streq(key
, "main-pid-known")) {
2872 b
= parse_boolean(value
);
2874 log_unit_debug(u
, "Failed to parse main-pid-known value: %s", value
);
2876 s
->main_pid_known
= b
;
2877 } else if (streq(key
, "bus-name-good")) {
2880 b
= parse_boolean(value
);
2882 log_unit_debug(u
, "Failed to parse bus-name-good value: %s", value
);
2884 s
->bus_name_good
= b
;
2885 } else if (streq(key
, "bus-name-owner")) {
2886 r
= free_and_strdup(&s
->bus_name_owner
, value
);
2888 log_unit_error_errno(u
, r
, "Unable to deserialize current bus owner %s: %m", value
);
2889 } else if (streq(key
, "status-text")) {
2892 r
= cunescape(value
, 0, &t
);
2894 log_unit_debug_errno(u
, r
, "Failed to unescape status text '%s': %m", value
);
2896 free_and_replace(s
->status_text
, t
);
2898 } else if (streq(key
, "accept-socket")) {
2901 r
= manager_load_unit(u
->manager
, value
, NULL
, NULL
, &socket
);
2903 log_unit_debug_errno(u
, r
, "Failed to load accept-socket unit '%s': %m", value
);
2905 unit_ref_set(&s
->accept_socket
, u
, socket
);
2906 SOCKET(socket
)->n_connections
++;
2909 } else if (streq(key
, "socket-fd")) {
2912 if (safe_atoi(value
, &fd
) < 0 || fd
< 0 || !fdset_contains(fds
, fd
))
2913 log_unit_debug(u
, "Failed to parse socket-fd value: %s", value
);
2915 asynchronous_close(s
->socket_fd
);
2916 s
->socket_fd
= fdset_remove(fds
, fd
);
2918 } else if (streq(key
, "fd-store-fd")) {
2919 _cleanup_free_
char *fdv
= NULL
, *fdn
= NULL
, *fdp
= NULL
;
2923 r
= extract_first_word(&value
, &fdv
, NULL
, 0);
2924 if (r
<= 0 || safe_atoi(fdv
, &fd
) < 0 || fd
< 0 || !fdset_contains(fds
, fd
)) {
2925 log_unit_debug(u
, "Failed to parse fd-store-fd value: %s", value
);
2929 r
= extract_first_word(&value
, &fdn
, NULL
, EXTRACT_CUNESCAPE
| EXTRACT_UNQUOTE
);
2931 log_unit_debug(u
, "Failed to parse fd-store-fd value: %s", value
);
2935 r
= extract_first_word(&value
, &fdp
, NULL
, 0);
2937 /* If the value is not present, we assume the default */
2939 } else if (r
< 0 || safe_atoi(fdp
, &do_poll
) < 0) {
2940 log_unit_debug_errno(u
, r
, "Failed to parse fd-store-fd value \"%s\": %m", value
);
2944 r
= service_add_fd_store(s
, fd
, fdn
, do_poll
);
2946 log_unit_error_errno(u
, r
, "Failed to add fd to store: %m");
2948 fdset_remove(fds
, fd
);
2949 } else if (streq(key
, "main-exec-status-pid")) {
2952 if (parse_pid(value
, &pid
) < 0)
2953 log_unit_debug(u
, "Failed to parse main-exec-status-pid value: %s", value
);
2955 s
->main_exec_status
.pid
= pid
;
2956 } else if (streq(key
, "main-exec-status-code")) {
2959 if (safe_atoi(value
, &i
) < 0)
2960 log_unit_debug(u
, "Failed to parse main-exec-status-code value: %s", value
);
2962 s
->main_exec_status
.code
= i
;
2963 } else if (streq(key
, "main-exec-status-status")) {
2966 if (safe_atoi(value
, &i
) < 0)
2967 log_unit_debug(u
, "Failed to parse main-exec-status-status value: %s", value
);
2969 s
->main_exec_status
.status
= i
;
2970 } else if (streq(key
, "main-exec-status-start"))
2971 deserialize_dual_timestamp(value
, &s
->main_exec_status
.start_timestamp
);
2972 else if (streq(key
, "main-exec-status-exit"))
2973 deserialize_dual_timestamp(value
, &s
->main_exec_status
.exit_timestamp
);
2974 else if (streq(key
, "watchdog-timestamp"))
2975 deserialize_dual_timestamp(value
, &s
->watchdog_timestamp
);
2976 else if (streq(key
, "forbid-restart")) {
2979 b
= parse_boolean(value
);
2981 log_unit_debug(u
, "Failed to parse forbid-restart value: %s", value
);
2983 s
->forbid_restart
= b
;
2984 } else if (streq(key
, "stdin-fd")) {
2987 if (safe_atoi(value
, &fd
) < 0 || fd
< 0 || !fdset_contains(fds
, fd
))
2988 log_unit_debug(u
, "Failed to parse stdin-fd value: %s", value
);
2990 asynchronous_close(s
->stdin_fd
);
2991 s
->stdin_fd
= fdset_remove(fds
, fd
);
2992 s
->exec_context
.stdio_as_fds
= true;
2994 } else if (streq(key
, "stdout-fd")) {
2997 if (safe_atoi(value
, &fd
) < 0 || fd
< 0 || !fdset_contains(fds
, fd
))
2998 log_unit_debug(u
, "Failed to parse stdout-fd value: %s", value
);
3000 asynchronous_close(s
->stdout_fd
);
3001 s
->stdout_fd
= fdset_remove(fds
, fd
);
3002 s
->exec_context
.stdio_as_fds
= true;
3004 } else if (streq(key
, "stderr-fd")) {
3007 if (safe_atoi(value
, &fd
) < 0 || fd
< 0 || !fdset_contains(fds
, fd
))
3008 log_unit_debug(u
, "Failed to parse stderr-fd value: %s", value
);
3010 asynchronous_close(s
->stderr_fd
);
3011 s
->stderr_fd
= fdset_remove(fds
, fd
);
3012 s
->exec_context
.stdio_as_fds
= true;
3014 } else if (streq(key
, "exec-fd")) {
3017 if (safe_atoi(value
, &fd
) < 0 || fd
< 0 || !fdset_contains(fds
, fd
))
3018 log_unit_debug(u
, "Failed to parse exec-fd value: %s", value
);
3020 s
->exec_fd_event_source
= sd_event_source_disable_unref(s
->exec_fd_event_source
);
3022 fd
= fdset_remove(fds
, fd
);
3023 if (service_allocate_exec_fd_event_source(s
, fd
, &s
->exec_fd_event_source
) < 0)
3026 } else if (streq(key
, "watchdog-override-usec")) {
3027 if (deserialize_usec(value
, &s
->watchdog_override_usec
) < 0)
3028 log_unit_debug(u
, "Failed to parse watchdog_override_usec value: %s", value
);
3030 s
->watchdog_override_enable
= true;
3032 } else if (streq(key
, "watchdog-original-usec")) {
3033 if (deserialize_usec(value
, &s
->watchdog_original_usec
) < 0)
3034 log_unit_debug(u
, "Failed to parse watchdog_original_usec value: %s", value
);
3036 } else if (STR_IN_SET(key
, "main-command", "control-command")) {
3037 r
= service_deserialize_exec_command(u
, key
, value
);
3039 log_unit_debug_errno(u
, r
, "Failed to parse serialized command \"%s\": %m", value
);
3041 } else if (streq(key
, "n-restarts")) {
3042 r
= safe_atou(value
, &s
->n_restarts
);
3044 log_unit_debug_errno(u
, r
, "Failed to parse serialized restart counter '%s': %m", value
);
3046 } else if (streq(key
, "flush-n-restarts")) {
3047 r
= parse_boolean(value
);
3049 log_unit_debug_errno(u
, r
, "Failed to parse serialized flush restart counter setting '%s': %m", value
);
3051 s
->flush_n_restarts
= r
;
3053 log_unit_debug(u
, "Unknown serialization key: %s", key
);
3058 _pure_
static UnitActiveState
service_active_state(Unit
*u
) {
3059 const UnitActiveState
*table
;
3063 table
= SERVICE(u
)->type
== SERVICE_IDLE
? state_translation_table_idle
: state_translation_table
;
3065 return table
[SERVICE(u
)->state
];
3068 static const char *service_sub_state_to_string(Unit
*u
) {
3071 return service_state_to_string(SERVICE(u
)->state
);
3074 static bool service_may_gc(Unit
*u
) {
3075 Service
*s
= SERVICE(u
);
3079 /* Never clean up services that still have a process around, even if the service is formally dead. Note that
3080 * unit_may_gc() already checked our cgroup for us, we just check our two additional PIDs, too, in case they
3081 * have moved outside of the cgroup. */
3083 if (main_pid_good(s
) > 0 ||
3084 control_pid_good(s
) > 0)
3090 static int service_retry_pid_file(Service
*s
) {
3093 assert(s
->pid_file
);
3094 assert(IN_SET(s
->state
, SERVICE_START
, SERVICE_START_POST
));
3096 r
= service_load_pid_file(s
, false);
3100 service_unwatch_pid_file(s
);
3102 service_enter_running(s
, SERVICE_SUCCESS
);
3106 static int service_watch_pid_file(Service
*s
) {
3109 log_unit_debug(UNIT(s
), "Setting watch for PID file %s", s
->pid_file_pathspec
->path
);
3111 r
= path_spec_watch(s
->pid_file_pathspec
, service_dispatch_inotify_io
);
3115 /* the pidfile might have appeared just before we set the watch */
3116 log_unit_debug(UNIT(s
), "Trying to read PID file %s in case it changed", s
->pid_file_pathspec
->path
);
3117 service_retry_pid_file(s
);
3121 log_unit_error_errno(UNIT(s
), r
, "Failed to set a watch for PID file %s: %m", s
->pid_file_pathspec
->path
);
3122 service_unwatch_pid_file(s
);
3126 static int service_demand_pid_file(Service
*s
) {
3129 assert(s
->pid_file
);
3130 assert(!s
->pid_file_pathspec
);
3132 ps
= new0(PathSpec
, 1);
3137 ps
->path
= strdup(s
->pid_file
);
3143 path_simplify(ps
->path
);
3145 /* PATH_CHANGED would not be enough. There are daemons (sendmail) that
3146 * keep their PID file open all the time. */
3147 ps
->type
= PATH_MODIFIED
;
3148 ps
->inotify_fd
= -1;
3150 s
->pid_file_pathspec
= ps
;
3152 return service_watch_pid_file(s
);
3155 static int service_dispatch_inotify_io(sd_event_source
*source
, int fd
, uint32_t events
, void *userdata
) {
3156 PathSpec
*p
= userdata
;
3161 s
= SERVICE(p
->unit
);
3165 assert(IN_SET(s
->state
, SERVICE_START
, SERVICE_START_POST
));
3166 assert(s
->pid_file_pathspec
);
3167 assert(path_spec_owns_inotify_fd(s
->pid_file_pathspec
, fd
));
3169 log_unit_debug(UNIT(s
), "inotify event");
3171 if (path_spec_fd_event(p
, events
) < 0)
3174 if (service_retry_pid_file(s
) == 0)
3177 if (service_watch_pid_file(s
) < 0)
3183 service_unwatch_pid_file(s
);
3184 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, SERVICE_FAILURE_RESOURCES
);
3188 static int service_dispatch_exec_io(sd_event_source
*source
, int fd
, uint32_t events
, void *userdata
) {
3189 Service
*s
= SERVICE(userdata
);
3193 log_unit_debug(UNIT(s
), "got exec-fd event");
3195 /* If Type=exec is set, we'll consider a service started successfully the instant we invoked execve()
3196 * successfully for it. We implement this through a pipe() towards the child, which the kernel automatically
3197 * closes for us due to O_CLOEXEC on execve() in the child, which then triggers EOF on the pipe in the
3198 * parent. We need to be careful however, as there are other reasons that we might cause the child's side of
3199 * the pipe to be closed (for example, a simple exit()). To deal with that we'll ignore EOFs on the pipe unless
3200 * the child signalled us first that it is about to call the execve(). It does so by sending us a simple
3201 * non-zero byte via the pipe. We also provide the child with a way to inform us in case execve() failed: if it
3202 * sends a zero byte we'll ignore POLLHUP on the fd again. */
3208 n
= read(fd
, &x
, sizeof(x
));
3210 if (errno
== EAGAIN
) /* O_NONBLOCK in effect → everything queued has now been processed. */
3213 return log_unit_error_errno(UNIT(s
), errno
, "Failed to read from exec_fd: %m");
3215 if (n
== 0) { /* EOF → the event we are waiting for */
3217 s
->exec_fd_event_source
= sd_event_source_disable_unref(s
->exec_fd_event_source
);
3219 if (s
->exec_fd_hot
) { /* Did the child tell us to expect EOF now? */
3220 log_unit_debug(UNIT(s
), "Got EOF on exec-fd");
3222 s
->exec_fd_hot
= false;
3224 /* Nice! This is what we have been waiting for. Transition to next state. */
3225 if (s
->type
== SERVICE_EXEC
&& s
->state
== SERVICE_START
)
3226 service_enter_start_post(s
);
3228 log_unit_debug(UNIT(s
), "Got EOF on exec-fd while it was disabled, ignoring.");
3233 /* A byte was read → this turns on/off the exec fd logic */
3234 assert(n
== sizeof(x
));
3241 static void service_notify_cgroup_empty_event(Unit
*u
) {
3242 Service
*s
= SERVICE(u
);
3246 log_unit_debug(u
, "Control group is empty.");
3250 /* Waiting for SIGCHLD is usually more interesting,
3251 * because it includes return codes/signals. Which is
3252 * why we ignore the cgroup events for most cases,
3253 * except when we don't know pid which to expect the
3257 if (s
->type
== SERVICE_NOTIFY
&&
3258 main_pid_good(s
) == 0 &&
3259 control_pid_good(s
) == 0) {
3260 /* No chance of getting a ready notification anymore */
3261 service_enter_stop_post(s
, SERVICE_FAILURE_PROTOCOL
);
3266 case SERVICE_START_POST
:
3267 if (s
->pid_file_pathspec
&&
3268 main_pid_good(s
) == 0 &&
3269 control_pid_good(s
) == 0) {
3271 /* Give up hoping for the daemon to write its PID file */
3272 log_unit_warning(u
, "Daemon never wrote its PID file. Failing.");
3274 service_unwatch_pid_file(s
);
3275 if (s
->state
== SERVICE_START
)
3276 service_enter_stop_post(s
, SERVICE_FAILURE_PROTOCOL
);
3278 service_enter_stop(s
, SERVICE_FAILURE_PROTOCOL
);
3282 case SERVICE_RUNNING
:
3283 /* service_enter_running() will figure out what to do */
3284 service_enter_running(s
, SERVICE_SUCCESS
);
3287 case SERVICE_STOP_WATCHDOG
:
3288 case SERVICE_STOP_SIGTERM
:
3289 case SERVICE_STOP_SIGKILL
:
3291 if (main_pid_good(s
) <= 0 && control_pid_good(s
) <= 0)
3292 service_enter_stop_post(s
, SERVICE_SUCCESS
);
3296 case SERVICE_STOP_POST
:
3297 case SERVICE_FINAL_WATCHDOG
:
3298 case SERVICE_FINAL_SIGTERM
:
3299 case SERVICE_FINAL_SIGKILL
:
3300 if (main_pid_good(s
) <= 0 && control_pid_good(s
) <= 0)
3301 service_enter_dead(s
, SERVICE_SUCCESS
, true);
3305 /* If the cgroup empty notification comes when the unit is not active, we must have failed to clean
3306 * up the cgroup earlier and should do it now. */
3308 case SERVICE_FAILED
:
3309 unit_prune_cgroup(u
);
3317 static void service_notify_cgroup_oom_event(Unit
*u
) {
3318 Service
*s
= SERVICE(u
);
3320 log_unit_debug(u
, "Process of control group was killed by the OOM killer.");
3322 if (s
->oom_policy
== OOM_CONTINUE
)
3327 case SERVICE_CONDITION
:
3328 case SERVICE_START_PRE
:
3330 case SERVICE_START_POST
:
3332 if (s
->oom_policy
== OOM_STOP
)
3333 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, SERVICE_FAILURE_OOM_KILL
);
3334 else if (s
->oom_policy
== OOM_KILL
)
3335 service_enter_signal(s
, SERVICE_STOP_SIGKILL
, SERVICE_FAILURE_OOM_KILL
);
3339 case SERVICE_EXITED
:
3340 case SERVICE_RUNNING
:
3341 if (s
->oom_policy
== OOM_STOP
)
3342 service_enter_stop(s
, SERVICE_FAILURE_OOM_KILL
);
3343 else if (s
->oom_policy
== OOM_KILL
)
3344 service_enter_signal(s
, SERVICE_STOP_SIGKILL
, SERVICE_FAILURE_OOM_KILL
);
3348 case SERVICE_STOP_WATCHDOG
:
3349 case SERVICE_STOP_SIGTERM
:
3350 service_enter_signal(s
, SERVICE_STOP_SIGKILL
, SERVICE_FAILURE_OOM_KILL
);
3353 case SERVICE_STOP_SIGKILL
:
3354 case SERVICE_FINAL_SIGKILL
:
3355 if (s
->result
== SERVICE_SUCCESS
)
3356 s
->result
= SERVICE_FAILURE_OOM_KILL
;
3359 case SERVICE_STOP_POST
:
3360 case SERVICE_FINAL_SIGTERM
:
3361 service_enter_signal(s
, SERVICE_FINAL_SIGKILL
, SERVICE_FAILURE_OOM_KILL
);
3369 static void service_sigchld_event(Unit
*u
, pid_t pid
, int code
, int status
) {
3370 bool notify_dbus
= true;
3371 Service
*s
= SERVICE(u
);
3373 ExitClean clean_mode
;
3378 /* Oneshot services and non-SERVICE_EXEC_START commands should not be
3379 * considered daemons as they are typically not long running. */
3380 if (s
->type
== SERVICE_ONESHOT
|| (s
->control_pid
== pid
&& s
->control_command_id
!= SERVICE_EXEC_START
))
3381 clean_mode
= EXIT_CLEAN_COMMAND
;
3383 clean_mode
= EXIT_CLEAN_DAEMON
;
3385 if (is_clean_exit(code
, status
, clean_mode
, &s
->success_status
))
3386 f
= SERVICE_SUCCESS
;
3387 else if (code
== CLD_EXITED
)
3388 f
= SERVICE_FAILURE_EXIT_CODE
;
3389 else if (code
== CLD_KILLED
)
3390 f
= SERVICE_FAILURE_SIGNAL
;
3391 else if (code
== CLD_DUMPED
)
3392 f
= SERVICE_FAILURE_CORE_DUMP
;
3394 assert_not_reached("Unknown code");
3396 if (s
->main_pid
== pid
) {
3397 /* Clean up the exec_fd event source. We want to do this here, not later in
3398 * service_set_state(), because service_enter_stop_post() calls service_spawn().
3399 * The source owns its end of the pipe, so this will close that too. */
3400 s
->exec_fd_event_source
= sd_event_source_disable_unref(s
->exec_fd_event_source
);
3402 /* Forking services may occasionally move to a new PID.
3403 * As long as they update the PID file before exiting the old
3404 * PID, they're fine. */
3405 if (service_load_pid_file(s
, false) > 0)
3409 exec_status_exit(&s
->main_exec_status
, &s
->exec_context
, pid
, code
, status
);
3411 if (s
->main_command
) {
3412 /* If this is not a forking service than the
3413 * main process got started and hence we copy
3414 * the exit status so that it is recorded both
3415 * as main and as control process exit
3418 s
->main_command
->exec_status
= s
->main_exec_status
;
3420 if (s
->main_command
->flags
& EXEC_COMMAND_IGNORE_FAILURE
)
3421 f
= SERVICE_SUCCESS
;
3422 } else if (s
->exec_command
[SERVICE_EXEC_START
]) {
3424 /* If this is a forked process, then we should
3425 * ignore the return value if this was
3426 * configured for the starter process */
3428 if (s
->exec_command
[SERVICE_EXEC_START
]->flags
& EXEC_COMMAND_IGNORE_FAILURE
)
3429 f
= SERVICE_SUCCESS
;
3432 unit_log_process_exit(
3435 service_exec_command_to_string(SERVICE_EXEC_START
),
3436 f
== SERVICE_SUCCESS
,
3439 if (s
->result
== SERVICE_SUCCESS
)
3442 if (s
->main_command
&&
3443 s
->main_command
->command_next
&&
3444 s
->type
== SERVICE_ONESHOT
&&
3445 f
== SERVICE_SUCCESS
) {
3447 /* There is another command to execute, so let's do that. */
3449 log_unit_debug(u
, "Running next main command for state %s.", service_state_to_string(s
->state
));
3450 service_run_next_main(s
);
3454 /* The service exited, so the service is officially gone. */
3455 s
->main_command
= NULL
;
3459 case SERVICE_START_POST
:
3460 case SERVICE_RELOAD
:
3461 /* If neither main nor control processes are running then
3462 * the current state can never exit cleanly, hence immediately
3463 * terminate the service. */
3464 if (control_pid_good(s
) <= 0)
3465 service_enter_stop(s
, f
);
3467 /* Otherwise need to wait until the operation is done. */
3471 /* Need to wait until the operation is done. */
3475 if (s
->type
== SERVICE_ONESHOT
) {
3476 /* This was our main goal, so let's go on */
3477 if (f
== SERVICE_SUCCESS
)
3478 service_enter_start_post(s
);
3480 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, f
);
3482 } else if (s
->type
== SERVICE_NOTIFY
) {
3483 /* Only enter running through a notification, so that the
3484 * SERVICE_START state signifies that no ready notification
3485 * has been received */
3486 if (f
!= SERVICE_SUCCESS
)
3487 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, f
);
3488 else if (!s
->remain_after_exit
|| s
->notify_access
== NOTIFY_MAIN
)
3489 /* The service has never been and will never be active */
3490 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, SERVICE_FAILURE_PROTOCOL
);
3495 case SERVICE_RUNNING
:
3496 service_enter_running(s
, f
);
3499 case SERVICE_STOP_WATCHDOG
:
3500 case SERVICE_STOP_SIGTERM
:
3501 case SERVICE_STOP_SIGKILL
:
3503 if (control_pid_good(s
) <= 0)
3504 service_enter_stop_post(s
, f
);
3506 /* If there is still a control process, wait for that first */
3509 case SERVICE_STOP_POST
:
3511 if (control_pid_good(s
) <= 0)
3512 service_enter_signal(s
, SERVICE_FINAL_SIGTERM
, f
);
3516 case SERVICE_FINAL_WATCHDOG
:
3517 case SERVICE_FINAL_SIGTERM
:
3518 case SERVICE_FINAL_SIGKILL
:
3520 if (control_pid_good(s
) <= 0)
3521 service_enter_dead(s
, f
, true);
3525 assert_not_reached("Uh, main process died at wrong time.");
3529 } else if (s
->control_pid
== pid
) {
3535 if (s
->control_command
) {
3536 exec_status_exit(&s
->control_command
->exec_status
, &s
->exec_context
, pid
, code
, status
);
3538 if (s
->control_command
->flags
& EXEC_COMMAND_IGNORE_FAILURE
)
3539 f
= SERVICE_SUCCESS
;
3542 /* ExecCondition= calls that exit with (0, 254] should invoke skip-like behavior instead of failing */
3543 if (s
->state
== SERVICE_CONDITION
) {
3544 if (f
== SERVICE_FAILURE_EXIT_CODE
&& status
< 255) {
3545 UNIT(s
)->condition_result
= false;
3546 f
= SERVICE_SKIP_CONDITION
;
3548 } else if (f
== SERVICE_SUCCESS
) {
3549 UNIT(s
)->condition_result
= true;
3554 kind
= "Condition check process";
3556 kind
= "Control process";
3557 success
= f
== SERVICE_SUCCESS
;
3560 unit_log_process_exit(
3563 service_exec_command_to_string(s
->control_command_id
),
3567 if (s
->state
!= SERVICE_RELOAD
&& s
->result
== SERVICE_SUCCESS
)
3570 if (s
->control_command
&&
3571 s
->control_command
->command_next
&&
3572 f
== SERVICE_SUCCESS
) {
3574 /* There is another command to *
3575 * execute, so let's do that. */
3577 log_unit_debug(u
, "Running next control command for state %s.", service_state_to_string(s
->state
));
3578 service_run_next_control(s
);
3581 /* No further commands for this step, so let's
3582 * figure out what to do next */
3584 s
->control_command
= NULL
;
3585 s
->control_command_id
= _SERVICE_EXEC_COMMAND_INVALID
;
3587 log_unit_debug(u
, "Got final SIGCHLD for state %s.", service_state_to_string(s
->state
));
3591 case SERVICE_CONDITION
:
3592 if (f
== SERVICE_SUCCESS
)
3593 service_enter_start_pre(s
);
3595 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, f
);
3598 case SERVICE_START_PRE
:
3599 if (f
== SERVICE_SUCCESS
)
3600 service_enter_start(s
);
3602 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, f
);
3606 if (s
->type
!= SERVICE_FORKING
)
3607 /* Maybe spurious event due to a reload that changed the type? */
3610 if (f
!= SERVICE_SUCCESS
) {
3611 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, f
);
3616 bool has_start_post
;
3619 /* Let's try to load the pid file here if we can.
3620 * The PID file might actually be created by a START_POST
3621 * script. In that case don't worry if the loading fails. */
3623 has_start_post
= s
->exec_command
[SERVICE_EXEC_START_POST
];
3624 r
= service_load_pid_file(s
, !has_start_post
);
3625 if (!has_start_post
&& r
< 0) {
3626 r
= service_demand_pid_file(s
);
3627 if (r
< 0 || cgroup_good(s
) == 0)
3628 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, SERVICE_FAILURE_PROTOCOL
);
3632 service_search_main_pid(s
);
3634 service_enter_start_post(s
);
3637 case SERVICE_START_POST
:
3638 if (f
!= SERVICE_SUCCESS
) {
3639 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, f
);
3646 r
= service_load_pid_file(s
, true);
3648 r
= service_demand_pid_file(s
);
3649 if (r
< 0 || cgroup_good(s
) == 0)
3650 service_enter_stop(s
, SERVICE_FAILURE_PROTOCOL
);
3654 service_search_main_pid(s
);
3656 service_enter_running(s
, SERVICE_SUCCESS
);
3659 case SERVICE_RELOAD
:
3660 if (f
== SERVICE_SUCCESS
)
3661 if (service_load_pid_file(s
, true) < 0)
3662 service_search_main_pid(s
);
3664 s
->reload_result
= f
;
3665 service_enter_running(s
, SERVICE_SUCCESS
);
3669 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, f
);
3672 case SERVICE_STOP_WATCHDOG
:
3673 case SERVICE_STOP_SIGTERM
:
3674 case SERVICE_STOP_SIGKILL
:
3675 if (main_pid_good(s
) <= 0)
3676 service_enter_stop_post(s
, f
);
3678 /* If there is still a service process around, wait until
3679 * that one quit, too */
3682 case SERVICE_STOP_POST
:
3683 if (main_pid_good(s
) <= 0)
3684 service_enter_signal(s
, SERVICE_FINAL_SIGTERM
, f
);
3687 case SERVICE_FINAL_WATCHDOG
:
3688 case SERVICE_FINAL_SIGTERM
:
3689 case SERVICE_FINAL_SIGKILL
:
3690 if (main_pid_good(s
) <= 0)
3691 service_enter_dead(s
, f
, true);
3694 case SERVICE_CLEANING
:
3696 if (s
->clean_result
== SERVICE_SUCCESS
)
3697 s
->clean_result
= f
;
3699 service_enter_dead(s
, SERVICE_SUCCESS
, false);
3703 assert_not_reached("Uh, control process died at wrong time.");
3706 } else /* Neither control nor main PID? If so, don't notify about anything */
3707 notify_dbus
= false;
3709 /* Notify clients about changed exit status */
3711 unit_add_to_dbus_queue(u
);
3713 /* We watch the main/control process otherwise we can't retrieve the unit they
3714 * belong to with cgroupv1. But if they are not our direct child, we won't get a
3715 * SIGCHLD for them. Therefore we need to look for others to watch so we can
3716 * detect when the cgroup becomes empty. Note that the control process is always
3717 * our child so it's pointless to watch all other processes. */
3718 if (!control_pid_good(s
))
3719 if (!s
->main_pid_known
|| s
->main_pid_alien
)
3720 (void) unit_enqueue_rewatch_pids(u
);
3723 static int service_dispatch_timer(sd_event_source
*source
, usec_t usec
, void *userdata
) {
3724 Service
*s
= SERVICE(userdata
);
3727 assert(source
== s
->timer_event_source
);
3731 case SERVICE_CONDITION
:
3732 case SERVICE_START_PRE
:
3734 case SERVICE_START_POST
:
3735 switch (s
->timeout_start_failure_mode
) {
3737 case SERVICE_TIMEOUT_TERMINATE
:
3738 log_unit_warning(UNIT(s
), "%s operation timed out. Terminating.", service_state_to_string(s
->state
));
3739 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, SERVICE_FAILURE_TIMEOUT
);
3742 case SERVICE_TIMEOUT_ABORT
:
3743 log_unit_warning(UNIT(s
), "%s operation timed out. Aborting.", service_state_to_string(s
->state
));
3744 service_enter_signal(s
, SERVICE_STOP_WATCHDOG
, SERVICE_FAILURE_TIMEOUT
);
3747 case SERVICE_TIMEOUT_KILL
:
3748 if (s
->kill_context
.send_sigkill
) {
3749 log_unit_warning(UNIT(s
), "%s operation timed out. Killing.", service_state_to_string(s
->state
));
3750 service_enter_signal(s
, SERVICE_STOP_SIGKILL
, SERVICE_FAILURE_TIMEOUT
);
3752 log_unit_warning(UNIT(s
), "%s operation timed out. Skipping SIGKILL.", service_state_to_string(s
->state
));
3753 service_enter_stop_post(s
, SERVICE_FAILURE_TIMEOUT
);
3758 assert_not_reached("unknown timeout mode");
3762 case SERVICE_RUNNING
:
3763 log_unit_warning(UNIT(s
), "Service reached runtime time limit. Stopping.");
3764 service_enter_stop(s
, SERVICE_FAILURE_TIMEOUT
);
3767 case SERVICE_RELOAD
:
3768 log_unit_warning(UNIT(s
), "Reload operation timed out. Killing reload process.");
3769 service_kill_control_process(s
);
3770 s
->reload_result
= SERVICE_FAILURE_TIMEOUT
;
3771 service_enter_running(s
, SERVICE_SUCCESS
);
3775 switch (s
->timeout_stop_failure_mode
) {
3777 case SERVICE_TIMEOUT_TERMINATE
:
3778 log_unit_warning(UNIT(s
), "Stopping timed out. Terminating.");
3779 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, SERVICE_FAILURE_TIMEOUT
);
3782 case SERVICE_TIMEOUT_ABORT
:
3783 log_unit_warning(UNIT(s
), "Stopping timed out. Aborting.");
3784 service_enter_signal(s
, SERVICE_STOP_WATCHDOG
, SERVICE_FAILURE_TIMEOUT
);
3787 case SERVICE_TIMEOUT_KILL
:
3788 if (s
->kill_context
.send_sigkill
) {
3789 log_unit_warning(UNIT(s
), "Stopping timed out. Killing.");
3790 service_enter_signal(s
, SERVICE_STOP_SIGKILL
, SERVICE_FAILURE_TIMEOUT
);
3792 log_unit_warning(UNIT(s
), "Stopping timed out. Skipping SIGKILL.");
3793 service_enter_stop_post(s
, SERVICE_FAILURE_TIMEOUT
);
3798 assert_not_reached("unknown timeout mode");
3802 case SERVICE_STOP_WATCHDOG
:
3803 if (s
->kill_context
.send_sigkill
) {
3804 log_unit_warning(UNIT(s
), "State 'stop-watchdog' timed out. Killing.");
3805 service_enter_signal(s
, SERVICE_STOP_SIGKILL
, SERVICE_FAILURE_TIMEOUT
);
3807 log_unit_warning(UNIT(s
), "State 'stop-watchdog' timed out. Skipping SIGKILL.");
3808 service_enter_stop_post(s
, SERVICE_FAILURE_TIMEOUT
);
3812 case SERVICE_STOP_SIGTERM
:
3813 if (s
->timeout_stop_failure_mode
== SERVICE_TIMEOUT_ABORT
) {
3814 log_unit_warning(UNIT(s
), "State 'stop-sigterm' timed out. Aborting.");
3815 service_enter_signal(s
, SERVICE_STOP_WATCHDOG
, SERVICE_FAILURE_TIMEOUT
);
3816 } else if (s
->kill_context
.send_sigkill
) {
3817 log_unit_warning(UNIT(s
), "State 'stop-sigterm' timed out. Killing.");
3818 service_enter_signal(s
, SERVICE_STOP_SIGKILL
, SERVICE_FAILURE_TIMEOUT
);
3820 log_unit_warning(UNIT(s
), "State 'stop-sigterm' timed out. Skipping SIGKILL.");
3821 service_enter_stop_post(s
, SERVICE_FAILURE_TIMEOUT
);
3826 case SERVICE_STOP_SIGKILL
:
3827 /* Uh, we sent a SIGKILL and it is still not gone?
3828 * Must be something we cannot kill, so let's just be
3829 * weirded out and continue */
3831 log_unit_warning(UNIT(s
), "Processes still around after SIGKILL. Ignoring.");
3832 service_enter_stop_post(s
, SERVICE_FAILURE_TIMEOUT
);
3835 case SERVICE_STOP_POST
:
3836 switch (s
->timeout_stop_failure_mode
) {
3838 case SERVICE_TIMEOUT_TERMINATE
:
3839 log_unit_warning(UNIT(s
), "State 'stop-post' timed out. Terminating.");
3840 service_enter_signal(s
, SERVICE_FINAL_SIGTERM
, SERVICE_FAILURE_TIMEOUT
);
3843 case SERVICE_TIMEOUT_ABORT
:
3844 log_unit_warning(UNIT(s
), "State 'stop-post' timed out. Aborting.");
3845 service_enter_signal(s
, SERVICE_FINAL_WATCHDOG
, SERVICE_FAILURE_TIMEOUT
);
3848 case SERVICE_TIMEOUT_KILL
:
3849 if (s
->kill_context
.send_sigkill
) {
3850 log_unit_warning(UNIT(s
), "State 'stop-post' timed out. Killing.");
3851 service_enter_signal(s
, SERVICE_FINAL_SIGKILL
, SERVICE_FAILURE_TIMEOUT
);
3853 log_unit_warning(UNIT(s
), "State 'stop-post' timed out. Skipping SIGKILL. Entering failed mode.");
3854 service_enter_dead(s
, SERVICE_FAILURE_TIMEOUT
, false);
3859 assert_not_reached("unknown timeout mode");
3863 case SERVICE_FINAL_WATCHDOG
:
3864 if (s
->kill_context
.send_sigkill
) {
3865 log_unit_warning(UNIT(s
), "State 'final-watchdog' timed out. Killing.");
3866 service_enter_signal(s
, SERVICE_FINAL_SIGKILL
, SERVICE_FAILURE_TIMEOUT
);
3868 log_unit_warning(UNIT(s
), "State 'final-watchdog' timed out. Skipping SIGKILL. Entering failed mode.");
3869 service_enter_dead(s
, SERVICE_FAILURE_TIMEOUT
, false);
3873 case SERVICE_FINAL_SIGTERM
:
3874 if (s
->timeout_stop_failure_mode
== SERVICE_TIMEOUT_ABORT
) {
3875 log_unit_warning(UNIT(s
), "State 'final-sigterm' timed out. Aborting.");
3876 service_enter_signal(s
, SERVICE_FINAL_WATCHDOG
, SERVICE_FAILURE_TIMEOUT
);
3877 } else if (s
->kill_context
.send_sigkill
) {
3878 log_unit_warning(UNIT(s
), "State 'final-sigterm' timed out. Killing.");
3879 service_enter_signal(s
, SERVICE_FINAL_SIGKILL
, SERVICE_FAILURE_TIMEOUT
);
3881 log_unit_warning(UNIT(s
), "State 'final-sigterm' timed out. Skipping SIGKILL. Entering failed mode.");
3882 service_enter_dead(s
, SERVICE_FAILURE_TIMEOUT
, false);
3887 case SERVICE_FINAL_SIGKILL
:
3888 log_unit_warning(UNIT(s
), "Processes still around after final SIGKILL. Entering failed mode.");
3889 service_enter_dead(s
, SERVICE_FAILURE_TIMEOUT
, true);
3892 case SERVICE_AUTO_RESTART
:
3893 if (s
->restart_usec
> 0)
3894 log_unit_debug(UNIT(s
),
3895 "Service RestartSec=%s expired, scheduling restart.",
3896 FORMAT_TIMESPAN(s
->restart_usec
, USEC_PER_SEC
));
3898 log_unit_debug(UNIT(s
),
3899 "Service has no hold-off time (RestartSec=0), scheduling restart.");
3901 service_enter_restart(s
);
3904 case SERVICE_CLEANING
:
3905 log_unit_warning(UNIT(s
), "Cleaning timed out. killing.");
3907 if (s
->clean_result
== SERVICE_SUCCESS
)
3908 s
->clean_result
= SERVICE_FAILURE_TIMEOUT
;
3910 service_enter_signal(s
, SERVICE_FINAL_SIGKILL
, 0);
3914 assert_not_reached("Timeout at wrong time.");
3920 static int service_dispatch_watchdog(sd_event_source
*source
, usec_t usec
, void *userdata
) {
3921 Service
*s
= SERVICE(userdata
);
3922 usec_t watchdog_usec
;
3925 assert(source
== s
->watchdog_event_source
);
3927 watchdog_usec
= service_get_watchdog_usec(s
);
3929 if (UNIT(s
)->manager
->service_watchdogs
) {
3930 log_unit_error(UNIT(s
), "Watchdog timeout (limit %s)!",
3931 FORMAT_TIMESPAN(watchdog_usec
, 1));
3933 service_enter_signal(s
, SERVICE_STOP_WATCHDOG
, SERVICE_FAILURE_WATCHDOG
);
3935 log_unit_warning(UNIT(s
), "Watchdog disabled! Ignoring watchdog timeout (limit %s)!",
3936 FORMAT_TIMESPAN(watchdog_usec
, 1));
3941 static bool service_notify_message_authorized(Service
*s
, pid_t pid
, FDSet
*fds
) {
3944 if (s
->notify_access
== NOTIFY_NONE
) {
3945 log_unit_warning(UNIT(s
), "Got notification message from PID "PID_FMT
", but reception is disabled.", pid
);
3949 if (s
->notify_access
== NOTIFY_MAIN
&& pid
!= s
->main_pid
) {
3950 if (s
->main_pid
!= 0)
3951 log_unit_warning(UNIT(s
), "Got notification message from PID "PID_FMT
", but reception only permitted for main PID "PID_FMT
, pid
, s
->main_pid
);
3953 log_unit_warning(UNIT(s
), "Got notification message from PID "PID_FMT
", but reception only permitted for main PID which is currently not known", pid
);
3958 if (s
->notify_access
== NOTIFY_EXEC
&& pid
!= s
->main_pid
&& pid
!= s
->control_pid
) {
3959 if (s
->main_pid
!= 0 && s
->control_pid
!= 0)
3960 log_unit_warning(UNIT(s
), "Got notification message from PID "PID_FMT
", but reception only permitted for main PID "PID_FMT
" and control PID "PID_FMT
,
3961 pid
, s
->main_pid
, s
->control_pid
);
3962 else if (s
->main_pid
!= 0)
3963 log_unit_warning(UNIT(s
), "Got notification message from PID "PID_FMT
", but reception only permitted for main PID "PID_FMT
, pid
, s
->main_pid
);
3964 else if (s
->control_pid
!= 0)
3965 log_unit_warning(UNIT(s
), "Got notification message from PID "PID_FMT
", but reception only permitted for control PID "PID_FMT
, pid
, s
->control_pid
);
3967 log_unit_warning(UNIT(s
), "Got notification message from PID "PID_FMT
", but reception only permitted for main PID and control PID which are currently not known", pid
);
3975 static void service_force_watchdog(Service
*s
) {
3976 if (!UNIT(s
)->manager
->service_watchdogs
)
3979 log_unit_error(UNIT(s
), "Watchdog request (last status: %s)!",
3980 s
->status_text
? s
->status_text
: "<unset>");
3982 service_enter_signal(s
, SERVICE_STOP_WATCHDOG
, SERVICE_FAILURE_WATCHDOG
);
3985 static void service_notify_message(
3987 const struct ucred
*ucred
,
3991 Service
*s
= SERVICE(u
);
3992 bool notify_dbus
= false;
4000 if (!service_notify_message_authorized(SERVICE(u
), ucred
->pid
, fds
))
4003 if (DEBUG_LOGGING
) {
4004 _cleanup_free_
char *cc
= NULL
;
4006 cc
= strv_join(tags
, ", ");
4007 log_unit_debug(u
, "Got notification message from PID "PID_FMT
" (%s)", ucred
->pid
, isempty(cc
) ? "n/a" : cc
);
4010 /* Interpret MAINPID= */
4011 e
= strv_find_startswith(tags
, "MAINPID=");
4012 if (e
&& IN_SET(s
->state
, SERVICE_START
, SERVICE_START_POST
, SERVICE_RUNNING
, SERVICE_RELOAD
)) {
4015 if (parse_pid(e
, &new_main_pid
) < 0)
4016 log_unit_warning(u
, "Failed to parse MAINPID= field in notification message, ignoring: %s", e
);
4017 else if (!s
->main_pid_known
|| new_main_pid
!= s
->main_pid
) {
4019 r
= service_is_suitable_main_pid(s
, new_main_pid
, LOG_WARNING
);
4021 /* The new main PID is a bit suspicious, which is OK if the sender is privileged. */
4023 if (ucred
->uid
== 0) {
4024 log_unit_debug(u
, "New main PID "PID_FMT
" does not belong to service, but we'll accept it as the request to change it came from a privileged process.", new_main_pid
);
4027 log_unit_debug(u
, "New main PID "PID_FMT
" does not belong to service, refusing.", new_main_pid
);
4030 service_set_main_pid(s
, new_main_pid
);
4032 r
= unit_watch_pid(UNIT(s
), new_main_pid
, false);
4034 log_unit_warning_errno(UNIT(s
), r
, "Failed to watch new main PID "PID_FMT
" for service: %m", new_main_pid
);
4041 /* Interpret READY=/STOPPING=/RELOADING=. Last one wins. */
4042 STRV_FOREACH_BACKWARDS(i
, tags
) {
4044 if (streq(*i
, "READY=1")) {
4045 s
->notify_state
= NOTIFY_READY
;
4047 /* Type=notify services inform us about completed
4048 * initialization with READY=1 */
4049 if (s
->type
== SERVICE_NOTIFY
&& s
->state
== SERVICE_START
)
4050 service_enter_start_post(s
);
4052 /* Sending READY=1 while we are reloading informs us
4053 * that the reloading is complete */
4054 if (s
->state
== SERVICE_RELOAD
&& s
->control_pid
== 0)
4055 service_enter_running(s
, SERVICE_SUCCESS
);
4060 } else if (streq(*i
, "RELOADING=1")) {
4061 s
->notify_state
= NOTIFY_RELOADING
;
4063 if (s
->state
== SERVICE_RUNNING
)
4064 service_enter_reload_by_notify(s
);
4069 } else if (streq(*i
, "STOPPING=1")) {
4070 s
->notify_state
= NOTIFY_STOPPING
;
4072 if (s
->state
== SERVICE_RUNNING
)
4073 service_enter_stop_by_notify(s
);
4080 /* Interpret STATUS= */
4081 e
= strv_find_startswith(tags
, "STATUS=");
4083 _cleanup_free_
char *t
= NULL
;
4086 /* Note that this size limit check is mostly paranoia: since the datagram size we are willing
4087 * to process is already limited to NOTIFY_BUFFER_MAX, this limit here should never be hit. */
4088 if (strlen(e
) > STATUS_TEXT_MAX
)
4089 log_unit_warning(u
, "Status message overly long (%zu > %u), ignoring.", strlen(e
), STATUS_TEXT_MAX
);
4090 else if (!utf8_is_valid(e
))
4091 log_unit_warning(u
, "Status message in notification message is not UTF-8 clean, ignoring.");
4099 if (!streq_ptr(s
->status_text
, t
)) {
4100 free_and_replace(s
->status_text
, t
);
4105 /* Interpret ERRNO= */
4106 e
= strv_find_startswith(tags
, "ERRNO=");
4110 status_errno
= parse_errno(e
);
4111 if (status_errno
< 0)
4112 log_unit_warning_errno(u
, status_errno
,
4113 "Failed to parse ERRNO= field value '%s' in notification message: %m", e
);
4114 else if (s
->status_errno
!= status_errno
) {
4115 s
->status_errno
= status_errno
;
4120 /* Interpret EXTEND_TIMEOUT= */
4121 e
= strv_find_startswith(tags
, "EXTEND_TIMEOUT_USEC=");
4123 usec_t extend_timeout_usec
;
4124 if (safe_atou64(e
, &extend_timeout_usec
) < 0)
4125 log_unit_warning(u
, "Failed to parse EXTEND_TIMEOUT_USEC=%s", e
);
4127 service_extend_timeout(s
, extend_timeout_usec
);
4130 /* Interpret WATCHDOG= */
4131 e
= strv_find_startswith(tags
, "WATCHDOG=");
4134 service_reset_watchdog(s
);
4135 else if (streq(e
, "trigger"))
4136 service_force_watchdog(s
);
4138 log_unit_warning(u
, "Passed WATCHDOG= field is invalid, ignoring.");
4141 e
= strv_find_startswith(tags
, "WATCHDOG_USEC=");
4143 usec_t watchdog_override_usec
;
4144 if (safe_atou64(e
, &watchdog_override_usec
) < 0)
4145 log_unit_warning(u
, "Failed to parse WATCHDOG_USEC=%s", e
);
4147 service_override_watchdog_timeout(s
, watchdog_override_usec
);
4150 /* Process FD store messages. Either FDSTOREREMOVE=1 for removal, or FDSTORE=1 for addition. In both cases,
4151 * process FDNAME= for picking the file descriptor name to use. Note that FDNAME= is required when removing
4152 * fds, but optional when pushing in new fds, for compatibility reasons. */
4153 if (strv_find(tags
, "FDSTOREREMOVE=1")) {
4156 name
= strv_find_startswith(tags
, "FDNAME=");
4157 if (!name
|| !fdname_is_valid(name
))
4158 log_unit_warning(u
, "FDSTOREREMOVE=1 requested, but no valid file descriptor name passed, ignoring.");
4160 service_remove_fd_store(s
, name
);
4162 } else if (strv_find(tags
, "FDSTORE=1")) {
4165 name
= strv_find_startswith(tags
, "FDNAME=");
4166 if (name
&& !fdname_is_valid(name
)) {
4167 log_unit_warning(u
, "Passed FDNAME= name is invalid, ignoring.");
4171 (void) service_add_fd_store_set(s
, fds
, name
, !strv_contains(tags
, "FDPOLL=0"));
4174 /* Notify clients about changed status or main pid */
4176 unit_add_to_dbus_queue(u
);
4179 static int service_get_timeout(Unit
*u
, usec_t
*timeout
) {
4180 Service
*s
= SERVICE(u
);
4184 if (!s
->timer_event_source
)
4187 r
= sd_event_source_get_time(s
->timer_event_source
, &t
);
4190 if (t
== USEC_INFINITY
)
4197 static void service_bus_name_owner_change(Unit
*u
, const char *new_owner
) {
4199 Service
*s
= SERVICE(u
);
4205 log_unit_debug(u
, "D-Bus name %s now owned by %s", s
->bus_name
, new_owner
);
4207 log_unit_debug(u
, "D-Bus name %s now not owned by anyone.", s
->bus_name
);
4209 s
->bus_name_good
= new_owner
;
4211 /* Track the current owner, so we can reconstruct changes after a daemon reload */
4212 r
= free_and_strdup(&s
->bus_name_owner
, new_owner
);
4214 log_unit_error_errno(u
, r
, "Unable to set new bus name owner %s: %m", new_owner
);
4218 if (s
->type
== SERVICE_DBUS
) {
4220 /* service_enter_running() will figure out what to
4222 if (s
->state
== SERVICE_RUNNING
)
4223 service_enter_running(s
, SERVICE_SUCCESS
);
4224 else if (s
->state
== SERVICE_START
&& new_owner
)
4225 service_enter_start_post(s
);
4227 } else if (new_owner
&&
4235 _cleanup_(sd_bus_creds_unrefp
) sd_bus_creds
*creds
= NULL
;
4238 /* Try to acquire PID from bus service */
4240 r
= sd_bus_get_name_creds(u
->manager
->api_bus
, s
->bus_name
, SD_BUS_CREDS_PID
, &creds
);
4242 r
= sd_bus_creds_get_pid(creds
, &pid
);
4244 log_unit_debug(u
, "D-Bus name %s is now owned by process " PID_FMT
, s
->bus_name
, pid
);
4246 service_set_main_pid(s
, pid
);
4247 unit_watch_pid(UNIT(s
), pid
, false);
4252 int service_set_socket_fd(Service
*s
, int fd
, Socket
*sock
, bool selinux_context_net
) {
4253 _cleanup_free_
char *peer
= NULL
;
4259 /* This is called by the socket code when instantiating a new service for a stream socket and the socket needs
4260 * to be configured. We take ownership of the passed fd on success. */
4262 if (UNIT(s
)->load_state
!= UNIT_LOADED
)
4265 if (s
->socket_fd
>= 0)
4268 if (s
->state
!= SERVICE_DEAD
)
4271 if (getpeername_pretty(fd
, true, &peer
) >= 0) {
4273 if (UNIT(s
)->description
) {
4274 _cleanup_free_
char *a
= NULL
;
4276 a
= strjoin(UNIT(s
)->description
, " (", peer
, ")");
4280 r
= unit_set_description(UNIT(s
), a
);
4282 r
= unit_set_description(UNIT(s
), peer
);
4288 r
= unit_add_two_dependencies(UNIT(sock
), UNIT_BEFORE
, UNIT_TRIGGERS
, UNIT(s
), false, UNIT_DEPENDENCY_IMPLICIT
);
4293 s
->socket_fd_selinux_context_net
= selinux_context_net
;
4295 unit_ref_set(&s
->accept_socket
, UNIT(s
), UNIT(sock
));
4299 static void service_reset_failed(Unit
*u
) {
4300 Service
*s
= SERVICE(u
);
4304 if (s
->state
== SERVICE_FAILED
)
4305 service_set_state(s
, SERVICE_DEAD
);
4307 s
->result
= SERVICE_SUCCESS
;
4308 s
->reload_result
= SERVICE_SUCCESS
;
4309 s
->clean_result
= SERVICE_SUCCESS
;
4311 s
->flush_n_restarts
= false;
4314 static int service_kill(Unit
*u
, KillWho who
, int signo
, sd_bus_error
*error
) {
4315 Service
*s
= SERVICE(u
);
4319 return unit_kill_common(u
, who
, signo
, s
->main_pid
, s
->control_pid
, error
);
4322 static int service_main_pid(Unit
*u
) {
4323 Service
*s
= SERVICE(u
);
4330 static int service_control_pid(Unit
*u
) {
4331 Service
*s
= SERVICE(u
);
4335 return s
->control_pid
;
4338 static bool service_needs_console(Unit
*u
) {
4339 Service
*s
= SERVICE(u
);
4343 /* We provide our own implementation of this here, instead of relying of the generic implementation
4344 * unit_needs_console() provides, since we want to return false if we are in SERVICE_EXITED state. */
4346 if (!exec_context_may_touch_console(&s
->exec_context
))
4349 return IN_SET(s
->state
,
4357 SERVICE_STOP_WATCHDOG
,
4358 SERVICE_STOP_SIGTERM
,
4359 SERVICE_STOP_SIGKILL
,
4361 SERVICE_FINAL_WATCHDOG
,
4362 SERVICE_FINAL_SIGTERM
,
4363 SERVICE_FINAL_SIGKILL
);
4366 static int service_exit_status(Unit
*u
) {
4367 Service
*s
= SERVICE(u
);
4371 if (s
->main_exec_status
.pid
<= 0 ||
4372 !dual_timestamp_is_set(&s
->main_exec_status
.exit_timestamp
))
4375 if (s
->main_exec_status
.code
!= CLD_EXITED
)
4378 return s
->main_exec_status
.status
;
4381 static int service_clean(Unit
*u
, ExecCleanMask mask
) {
4382 _cleanup_strv_free_
char **l
= NULL
;
4383 Service
*s
= SERVICE(u
);
4389 if (s
->state
!= SERVICE_DEAD
)
4392 r
= exec_context_get_clean_directories(&s
->exec_context
, u
->manager
->prefix
, mask
, &l
);
4396 if (strv_isempty(l
))
4399 service_unwatch_control_pid(s
);
4400 s
->clean_result
= SERVICE_SUCCESS
;
4401 s
->control_command
= NULL
;
4402 s
->control_command_id
= _SERVICE_EXEC_COMMAND_INVALID
;
4404 r
= service_arm_timer(s
, usec_add(now(CLOCK_MONOTONIC
), s
->exec_context
.timeout_clean_usec
));
4408 r
= unit_fork_and_watch_rm_rf(u
, l
, &s
->control_pid
);
4412 service_set_state(s
, SERVICE_CLEANING
);
4417 log_unit_warning_errno(u
, r
, "Failed to initiate cleaning: %m");
4418 s
->clean_result
= SERVICE_FAILURE_RESOURCES
;
4419 s
->timer_event_source
= sd_event_source_disable_unref(s
->timer_event_source
);
4423 static int service_can_clean(Unit
*u
, ExecCleanMask
*ret
) {
4424 Service
*s
= SERVICE(u
);
4428 return exec_context_get_clean_mask(&s
->exec_context
, ret
);
4431 static const char *service_finished_job(Unit
*u
, JobType t
, JobResult result
) {
4432 if (t
== JOB_START
&&
4433 result
== JOB_DONE
&&
4434 SERVICE(u
)->type
== SERVICE_ONESHOT
)
4435 return "Finished %s.";
4437 /* Fall back to generic */
4441 static const char* const service_restart_table
[_SERVICE_RESTART_MAX
] = {
4442 [SERVICE_RESTART_NO
] = "no",
4443 [SERVICE_RESTART_ON_SUCCESS
] = "on-success",
4444 [SERVICE_RESTART_ON_FAILURE
] = "on-failure",
4445 [SERVICE_RESTART_ON_ABNORMAL
] = "on-abnormal",
4446 [SERVICE_RESTART_ON_WATCHDOG
] = "on-watchdog",
4447 [SERVICE_RESTART_ON_ABORT
] = "on-abort",
4448 [SERVICE_RESTART_ALWAYS
] = "always",
4451 DEFINE_STRING_TABLE_LOOKUP(service_restart
, ServiceRestart
);
4453 static const char* const service_type_table
[_SERVICE_TYPE_MAX
] = {
4454 [SERVICE_SIMPLE
] = "simple",
4455 [SERVICE_FORKING
] = "forking",
4456 [SERVICE_ONESHOT
] = "oneshot",
4457 [SERVICE_DBUS
] = "dbus",
4458 [SERVICE_NOTIFY
] = "notify",
4459 [SERVICE_IDLE
] = "idle",
4460 [SERVICE_EXEC
] = "exec",
4463 DEFINE_STRING_TABLE_LOOKUP(service_type
, ServiceType
);
4465 static const char* const service_exec_command_table
[_SERVICE_EXEC_COMMAND_MAX
] = {
4466 [SERVICE_EXEC_CONDITION
] = "ExecCondition",
4467 [SERVICE_EXEC_START_PRE
] = "ExecStartPre",
4468 [SERVICE_EXEC_START
] = "ExecStart",
4469 [SERVICE_EXEC_START_POST
] = "ExecStartPost",
4470 [SERVICE_EXEC_RELOAD
] = "ExecReload",
4471 [SERVICE_EXEC_STOP
] = "ExecStop",
4472 [SERVICE_EXEC_STOP_POST
] = "ExecStopPost",
4475 DEFINE_STRING_TABLE_LOOKUP(service_exec_command
, ServiceExecCommand
);
4477 static const char* const service_exec_ex_command_table
[_SERVICE_EXEC_COMMAND_MAX
] = {
4478 [SERVICE_EXEC_CONDITION
] = "ExecConditionEx",
4479 [SERVICE_EXEC_START_PRE
] = "ExecStartPreEx",
4480 [SERVICE_EXEC_START
] = "ExecStartEx",
4481 [SERVICE_EXEC_START_POST
] = "ExecStartPostEx",
4482 [SERVICE_EXEC_RELOAD
] = "ExecReloadEx",
4483 [SERVICE_EXEC_STOP
] = "ExecStopEx",
4484 [SERVICE_EXEC_STOP_POST
] = "ExecStopPostEx",
4487 DEFINE_STRING_TABLE_LOOKUP(service_exec_ex_command
, ServiceExecCommand
);
4489 static const char* const notify_state_table
[_NOTIFY_STATE_MAX
] = {
4490 [NOTIFY_UNKNOWN
] = "unknown",
4491 [NOTIFY_READY
] = "ready",
4492 [NOTIFY_RELOADING
] = "reloading",
4493 [NOTIFY_STOPPING
] = "stopping",
4496 DEFINE_STRING_TABLE_LOOKUP(notify_state
, NotifyState
);
4498 static const char* const service_result_table
[_SERVICE_RESULT_MAX
] = {
4499 [SERVICE_SUCCESS
] = "success",
4500 [SERVICE_FAILURE_RESOURCES
] = "resources",
4501 [SERVICE_FAILURE_PROTOCOL
] = "protocol",
4502 [SERVICE_FAILURE_TIMEOUT
] = "timeout",
4503 [SERVICE_FAILURE_EXIT_CODE
] = "exit-code",
4504 [SERVICE_FAILURE_SIGNAL
] = "signal",
4505 [SERVICE_FAILURE_CORE_DUMP
] = "core-dump",
4506 [SERVICE_FAILURE_WATCHDOG
] = "watchdog",
4507 [SERVICE_FAILURE_START_LIMIT_HIT
] = "start-limit-hit",
4508 [SERVICE_FAILURE_OOM_KILL
] = "oom-kill",
4509 [SERVICE_SKIP_CONDITION
] = "exec-condition",
4512 DEFINE_STRING_TABLE_LOOKUP(service_result
, ServiceResult
);
4514 static const char* const service_timeout_failure_mode_table
[_SERVICE_TIMEOUT_FAILURE_MODE_MAX
] = {
4515 [SERVICE_TIMEOUT_TERMINATE
] = "terminate",
4516 [SERVICE_TIMEOUT_ABORT
] = "abort",
4517 [SERVICE_TIMEOUT_KILL
] = "kill",
4520 DEFINE_STRING_TABLE_LOOKUP(service_timeout_failure_mode
, ServiceTimeoutFailureMode
);
4522 const UnitVTable service_vtable
= {
4523 .object_size
= sizeof(Service
),
4524 .exec_context_offset
= offsetof(Service
, exec_context
),
4525 .cgroup_context_offset
= offsetof(Service
, cgroup_context
),
4526 .kill_context_offset
= offsetof(Service
, kill_context
),
4527 .exec_runtime_offset
= offsetof(Service
, exec_runtime
),
4528 .dynamic_creds_offset
= offsetof(Service
, dynamic_creds
),
4534 .private_section
= "Service",
4536 .can_transient
= true,
4537 .can_delegate
= true,
4539 .can_set_managed_oom
= true,
4541 .init
= service_init
,
4542 .done
= service_done
,
4543 .load
= service_load
,
4544 .release_resources
= service_release_resources
,
4546 .coldplug
= service_coldplug
,
4548 .dump
= service_dump
,
4550 .start
= service_start
,
4551 .stop
= service_stop
,
4552 .reload
= service_reload
,
4554 .can_reload
= service_can_reload
,
4556 .kill
= service_kill
,
4557 .clean
= service_clean
,
4558 .can_clean
= service_can_clean
,
4560 .freeze
= unit_freeze_vtable_common
,
4561 .thaw
= unit_thaw_vtable_common
,
4563 .serialize
= service_serialize
,
4564 .deserialize_item
= service_deserialize_item
,
4566 .active_state
= service_active_state
,
4567 .sub_state_to_string
= service_sub_state_to_string
,
4569 .will_restart
= service_will_restart
,
4571 .may_gc
= service_may_gc
,
4573 .sigchld_event
= service_sigchld_event
,
4575 .reset_failed
= service_reset_failed
,
4577 .notify_cgroup_empty
= service_notify_cgroup_empty_event
,
4578 .notify_cgroup_oom
= service_notify_cgroup_oom_event
,
4579 .notify_message
= service_notify_message
,
4581 .main_pid
= service_main_pid
,
4582 .control_pid
= service_control_pid
,
4584 .bus_name_owner_change
= service_bus_name_owner_change
,
4586 .bus_set_property
= bus_service_set_property
,
4587 .bus_commit_properties
= bus_service_commit_properties
,
4589 .get_timeout
= service_get_timeout
,
4590 .needs_console
= service_needs_console
,
4591 .exit_status
= service_exit_status
,
4593 .status_message_formats
= {
4594 .finished_start_job
= {
4595 [JOB_FAILED
] = "Failed to start %s.",
4597 .finished_stop_job
= {
4598 [JOB_DONE
] = "Stopped %s.",
4599 [JOB_FAILED
] = "Stopped (with error) %s.",
4601 .finished_job
= service_finished_job
,