]> git.ipfire.org Git - thirdparty/systemd.git/blob - src/core/service.c
projects / thirdparty / systemd.git / blob
? search:
summary | shortlog | log | commit | commitdiff | tree
blame | history | raw | HEAD
Merge pull request #6467 from yuwata/journal-remote-units
[thirdparty/systemd.git] / src / core / service.c
1 /***
2 This file is part of systemd.
3
4 Copyright 2010 Lennart Poettering
5
6 systemd is free software; you can redistribute it and/or modify it
7 under the terms of the GNU Lesser General Public License as published by
8 the Free Software Foundation; either version 2.1 of the License, or
9 (at your option) any later version.
10
11 systemd is distributed in the hope that it will be useful, but
12 WITHOUT ANY WARRANTY; without even the implied warranty of
13 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
14 Lesser General Public License for more details.
15
16 You should have received a copy of the GNU Lesser General Public License
17 along with systemd; If not, see <http://www.gnu.org/licenses/>.
18 ***/
19
20 #include <errno.h>
21 #include <signal.h>
22 #include <unistd.h>
23
24 #include "alloc-util.h"
25 #include "async.h"
26 #include "bus-error.h"
27 #include "bus-kernel.h"
28 #include "bus-util.h"
29 #include "dbus-service.h"
30 #include "def.h"
31 #include "env-util.h"
32 #include "escape.h"
33 #include "exit-status.h"
34 #include "fd-util.h"
35 #include "fileio.h"
36 #include "format-util.h"
37 #include "fs-util.h"
38 #include "load-dropin.h"
39 #include "load-fragment.h"
40 #include "log.h"
41 #include "manager.h"
42 #include "parse-util.h"
43 #include "path-util.h"
44 #include "process-util.h"
45 #include "service.h"
46 #include "signal-util.h"
47 #include "special.h"
48 #include "stdio-util.h"
49 #include "string-table.h"
50 #include "string-util.h"
51 #include "strv.h"
52 #include "unit-name.h"
53 #include "unit.h"
54 #include "utf8.h"
55 #include "util.h"
56
57 static const UnitActiveState state_translation_table[_SERVICE_STATE_MAX] = {
58 [SERVICE_DEAD] = UNIT_INACTIVE,
59 [SERVICE_START_PRE] = UNIT_ACTIVATING,
60 [SERVICE_START] = UNIT_ACTIVATING,
61 [SERVICE_START_POST] = UNIT_ACTIVATING,
62 [SERVICE_RUNNING] = UNIT_ACTIVE,
63 [SERVICE_EXITED] = UNIT_ACTIVE,
64 [SERVICE_RELOAD] = UNIT_RELOADING,
65 [SERVICE_STOP] = UNIT_DEACTIVATING,
66 [SERVICE_STOP_SIGABRT] = UNIT_DEACTIVATING,
67 [SERVICE_STOP_SIGTERM] = UNIT_DEACTIVATING,
68 [SERVICE_STOP_SIGKILL] = UNIT_DEACTIVATING,
69 [SERVICE_STOP_POST] = UNIT_DEACTIVATING,
70 [SERVICE_FINAL_SIGTERM] = UNIT_DEACTIVATING,
71 [SERVICE_FINAL_SIGKILL] = UNIT_DEACTIVATING,
72 [SERVICE_FAILED] = UNIT_FAILED,
73 [SERVICE_AUTO_RESTART] = UNIT_ACTIVATING
74 };
75
76 /* For Type=idle we never want to delay any other jobs, hence we
77 * consider idle jobs active as soon as we start working on them */
78 static const UnitActiveState state_translation_table_idle[_SERVICE_STATE_MAX] = {
79 [SERVICE_DEAD] = UNIT_INACTIVE,
80 [SERVICE_START_PRE] = UNIT_ACTIVE,
81 [SERVICE_START] = UNIT_ACTIVE,
82 [SERVICE_START_POST] = UNIT_ACTIVE,
83 [SERVICE_RUNNING] = UNIT_ACTIVE,
84 [SERVICE_EXITED] = UNIT_ACTIVE,
85 [SERVICE_RELOAD] = UNIT_RELOADING,
86 [SERVICE_STOP] = UNIT_DEACTIVATING,
87 [SERVICE_STOP_SIGABRT] = UNIT_DEACTIVATING,
88 [SERVICE_STOP_SIGTERM] = UNIT_DEACTIVATING,
89 [SERVICE_STOP_SIGKILL] = UNIT_DEACTIVATING,
90 [SERVICE_STOP_POST] = UNIT_DEACTIVATING,
91 [SERVICE_FINAL_SIGTERM] = UNIT_DEACTIVATING,
92 [SERVICE_FINAL_SIGKILL] = UNIT_DEACTIVATING,
93 [SERVICE_FAILED] = UNIT_FAILED,
94 [SERVICE_AUTO_RESTART] = UNIT_ACTIVATING
95 };
96
97 static int service_dispatch_io(sd_event_source *source, int fd, uint32_t events, void *userdata);
98 static int service_dispatch_timer(sd_event_source *source, usec_t usec, void *userdata);
99 static int service_dispatch_watchdog(sd_event_source *source, usec_t usec, void *userdata);
100
101 static void service_enter_signal(Service *s, ServiceState state, ServiceResult f);
102 static void service_enter_reload_by_notify(Service *s);
103
104 static void service_init(Unit *u) {
105 Service *s = SERVICE(u);
106
107 assert(u);
108 assert(u->load_state == UNIT_STUB);
109
110 s->timeout_start_usec = u->manager->default_timeout_start_usec;
111 s->timeout_stop_usec = u->manager->default_timeout_stop_usec;
112 s->restart_usec = u->manager->default_restart_usec;
113 s->runtime_max_usec = USEC_INFINITY;
114 s->type = _SERVICE_TYPE_INVALID;
115 s->socket_fd = -1;
116 s->stdin_fd = s->stdout_fd = s->stderr_fd = -1;
117 s->guess_main_pid = true;
118
119 s->control_command_id = _SERVICE_EXEC_COMMAND_INVALID;
120 }
121
122 static void service_unwatch_control_pid(Service *s) {
123 assert(s);
124
125 if (s->control_pid <= 0)
126 return;
127
128 unit_unwatch_pid(UNIT(s), s->control_pid);
129 s->control_pid = 0;
130 }
131
132 static void service_unwatch_main_pid(Service *s) {
133 assert(s);
134
135 if (s->main_pid <= 0)
136 return;
137
138 unit_unwatch_pid(UNIT(s), s->main_pid);
139 s->main_pid = 0;
140 }
141
142 static void service_unwatch_pid_file(Service *s) {
143 if (!s->pid_file_pathspec)
144 return;
145
146 log_unit_debug(UNIT(s), "Stopping watch for PID file %s", s->pid_file_pathspec->path);
147 path_spec_unwatch(s->pid_file_pathspec);
148 path_spec_done(s->pid_file_pathspec);
149 s->pid_file_pathspec = mfree(s->pid_file_pathspec);
150 }
151
152 static int service_set_main_pid(Service *s, pid_t pid) {
153 pid_t ppid;
154
155 assert(s);
156
157 if (pid <= 1)
158 return -EINVAL;
159
160 if (pid == getpid_cached())
161 return -EINVAL;
162
163 if (s->main_pid == pid && s->main_pid_known)
164 return 0;
165
166 if (s->main_pid != pid) {
167 service_unwatch_main_pid(s);
168 exec_status_start(&s->main_exec_status, pid);
169 }
170
171 s->main_pid = pid;
172 s->main_pid_known = true;
173
174 if (get_process_ppid(pid, &ppid) >= 0 && ppid != getpid_cached()) {
175 log_unit_warning(UNIT(s), "Supervising process "PID_FMT" which is not our child. We'll most likely not notice when it exits.", pid);
176 s->main_pid_alien = true;
177 } else
178 s->main_pid_alien = false;
179
180 return 0;
181 }
182
183 void service_close_socket_fd(Service *s) {
184 assert(s);
185
186 /* Undo the effect of service_set_socket_fd(). */
187
188 s->socket_fd = asynchronous_close(s->socket_fd);
189
190 if (UNIT_ISSET(s->accept_socket)) {
191 socket_connection_unref(SOCKET(UNIT_DEREF(s->accept_socket)));
192 unit_ref_unset(&s->accept_socket);
193 }
194 }
195
196 static void service_stop_watchdog(Service *s) {
197 assert(s);
198
199 s->watchdog_event_source = sd_event_source_unref(s->watchdog_event_source);
200 s->watchdog_timestamp = DUAL_TIMESTAMP_NULL;
201 }
202
203 static usec_t service_get_watchdog_usec(Service *s) {
204 assert(s);
205
206 if (s->watchdog_override_enable)
207 return s->watchdog_override_usec;
208 else
209 return s->watchdog_usec;
210 }
211
212 static void service_start_watchdog(Service *s) {
213 int r;
214 usec_t watchdog_usec;
215
216 assert(s);
217
218 watchdog_usec = service_get_watchdog_usec(s);
219 if (watchdog_usec == 0 || watchdog_usec == USEC_INFINITY)
220 return;
221
222 if (s->watchdog_event_source) {
223 r = sd_event_source_set_time(s->watchdog_event_source, usec_add(s->watchdog_timestamp.monotonic, watchdog_usec));
224 if (r < 0) {
225 log_unit_warning_errno(UNIT(s), r, "Failed to reset watchdog timer: %m");
226 return;
227 }
228
229 r = sd_event_source_set_enabled(s->watchdog_event_source, SD_EVENT_ONESHOT);
230 } else {
231 r = sd_event_add_time(
232 UNIT(s)->manager->event,
233 &s->watchdog_event_source,
234 CLOCK_MONOTONIC,
235 usec_add(s->watchdog_timestamp.monotonic, watchdog_usec), 0,
236 service_dispatch_watchdog, s);
237 if (r < 0) {
238 log_unit_warning_errno(UNIT(s), r, "Failed to add watchdog timer: %m");
239 return;
240 }
241
242 (void) sd_event_source_set_description(s->watchdog_event_source, "service-watchdog");
243
244 /* Let's process everything else which might be a sign
245 * of living before we consider a service died. */
246 r = sd_event_source_set_priority(s->watchdog_event_source, SD_EVENT_PRIORITY_IDLE);
247 }
248
249 if (r < 0)
250 log_unit_warning_errno(UNIT(s), r, "Failed to install watchdog timer: %m");
251 }
252
253 static void service_reset_watchdog(Service *s) {
254 assert(s);
255
256 dual_timestamp_get(&s->watchdog_timestamp);
257 service_start_watchdog(s);
258 }
259
260 static void service_reset_watchdog_timeout(Service *s, usec_t watchdog_override_usec) {
261 assert(s);
262
263 s->watchdog_override_enable = true;
264 s->watchdog_override_usec = watchdog_override_usec;
265 service_reset_watchdog(s);
266
267 log_unit_debug(UNIT(s), "watchdog_usec="USEC_FMT, s->watchdog_usec);
268 log_unit_debug(UNIT(s), "watchdog_override_usec="USEC_FMT, s->watchdog_override_usec);
269 }
270
271 static void service_fd_store_unlink(ServiceFDStore *fs) {
272
273 if (!fs)
274 return;
275
276 if (fs->service) {
277 assert(fs->service->n_fd_store > 0);
278 LIST_REMOVE(fd_store, fs->service->fd_store, fs);
279 fs->service->n_fd_store--;
280 }
281
282 if (fs->event_source) {
283 sd_event_source_set_enabled(fs->event_source, SD_EVENT_OFF);
284 sd_event_source_unref(fs->event_source);
285 }
286
287 free(fs->fdname);
288 safe_close(fs->fd);
289 free(fs);
290 }
291
292 static void service_release_fd_store(Service *s) {
293 assert(s);
294
295 log_unit_debug(UNIT(s), "Releasing all stored fds");
296 while (s->fd_store)
297 service_fd_store_unlink(s->fd_store);
298
299 assert(s->n_fd_store == 0);
300 }
301
302 static void service_release_resources(Unit *u, bool inactive) {
303 Service *s = SERVICE(u);
304
305 assert(s);
306
307 if (!s->fd_store && s->stdin_fd < 0 && s->stdout_fd < 0 && s->stderr_fd < 0)
308 return;
309
310 log_unit_debug(u, "Releasing resources.");
311
312 s->stdin_fd = safe_close(s->stdin_fd);
313 s->stdout_fd = safe_close(s->stdout_fd);
314 s->stderr_fd = safe_close(s->stderr_fd);
315
316 if (inactive)
317 service_release_fd_store(s);
318 }
319
320 static void service_done(Unit *u) {
321 Service *s = SERVICE(u);
322
323 assert(s);
324
325 s->pid_file = mfree(s->pid_file);
326 s->status_text = mfree(s->status_text);
327
328 s->exec_runtime = exec_runtime_unref(s->exec_runtime);
329 exec_command_free_array(s->exec_command, _SERVICE_EXEC_COMMAND_MAX);
330 s->control_command = NULL;
331 s->main_command = NULL;
332
333 dynamic_creds_unref(&s->dynamic_creds);
334
335 exit_status_set_free(&s->restart_prevent_status);
336 exit_status_set_free(&s->restart_force_status);
337 exit_status_set_free(&s->success_status);
338
339 /* This will leak a process, but at least no memory or any of
340 * our resources */
341 service_unwatch_main_pid(s);
342 service_unwatch_control_pid(s);
343 service_unwatch_pid_file(s);
344
345 if (s->bus_name) {
346 unit_unwatch_bus_name(u, s->bus_name);
347 s->bus_name = mfree(s->bus_name);
348 }
349
350 s->bus_name_owner = mfree(s->bus_name_owner);
351
352 service_close_socket_fd(s);
353 s->peer = socket_peer_unref(s->peer);
354
355 unit_ref_unset(&s->accept_socket);
356
357 service_stop_watchdog(s);
358
359 s->timer_event_source = sd_event_source_unref(s->timer_event_source);
360
361 service_release_resources(u, true);
362 }
363
364 static int on_fd_store_io(sd_event_source *e, int fd, uint32_t revents, void *userdata) {
365 ServiceFDStore *fs = userdata;
366
367 assert(e);
368 assert(fs);
369
370 /* If we get either EPOLLHUP or EPOLLERR, it's time to remove this entry from the fd store */
371 log_unit_debug(UNIT(fs->service),
372 "Received %s on stored fd %d (%s), closing.",
373 revents & EPOLLERR ? "EPOLLERR" : "EPOLLHUP",
374 fs->fd, strna(fs->fdname));
375 service_fd_store_unlink(fs);
376 return 0;
377 }
378
379 static int service_add_fd_store(Service *s, int fd, const char *name) {
380 ServiceFDStore *fs;
381 int r;
382
383 /* fd is always consumed if we return >= 0 */
384
385 assert(s);
386 assert(fd >= 0);
387
388 if (s->n_fd_store >= s->n_fd_store_max)
389 return -EXFULL; /* Our store is full.
390 * Use this errno rather than E[NM]FILE to distinguish from
391 * the case where systemd itself hits the file limit. */
392
393 LIST_FOREACH(fd_store, fs, s->fd_store) {
394 r = same_fd(fs->fd, fd);
395 if (r < 0)
396 return r;
397 if (r > 0) {
398 safe_close(fd);
399 return 0; /* fd already included */
400 }
401 }
402
403 fs = new0(ServiceFDStore, 1);
404 if (!fs)
405 return -ENOMEM;
406
407 fs->fd = fd;
408 fs->service = s;
409 fs->fdname = strdup(name ?: "stored");
410 if (!fs->fdname) {
411 free(fs);
412 return -ENOMEM;
413 }
414
415 r = sd_event_add_io(UNIT(s)->manager->event, &fs->event_source, fd, 0, on_fd_store_io, fs);
416 if (r < 0 && r != -EPERM) { /* EPERM indicates fds that aren't pollable, which is OK */
417 free(fs->fdname);
418 free(fs);
419 return r;
420 } else if (r >= 0)
421 (void) sd_event_source_set_description(fs->event_source, "service-fd-store");
422
423 LIST_PREPEND(fd_store, s->fd_store, fs);
424 s->n_fd_store++;
425
426 return 1; /* fd newly stored */
427 }
428
429 static int service_add_fd_store_set(Service *s, FDSet *fds, const char *name) {
430 int r;
431
432 assert(s);
433
434 while (fdset_size(fds) > 0) {
435 _cleanup_close_ int fd = -1;
436
437 fd = fdset_steal_first(fds);
438 if (fd < 0)
439 break;
440
441 r = service_add_fd_store(s, fd, name);
442 if (r == -EXFULL)
443 return log_unit_warning_errno(UNIT(s), r,
444 "Cannot store more fds than FileDescriptorStoreMax=%u, closing remaining.",
445 s->n_fd_store_max);
446 if (r < 0)
447 return log_unit_error_errno(UNIT(s), r, "Failed to add fd to store: %m");
448 if (r > 0)
449 log_unit_debug(UNIT(s), "Added fd %u (%s) to fd store.", fd, strna(name));
450 fd = -1;
451 }
452
453 return 0;
454 }
455
456 static int service_arm_timer(Service *s, usec_t usec) {
457 int r;
458
459 assert(s);
460
461 if (s->timer_event_source) {
462 r = sd_event_source_set_time(s->timer_event_source, usec);
463 if (r < 0)
464 return r;
465
466 return sd_event_source_set_enabled(s->timer_event_source, SD_EVENT_ONESHOT);
467 }
468
469 if (usec == USEC_INFINITY)
470 return 0;
471
472 r = sd_event_add_time(
473 UNIT(s)->manager->event,
474 &s->timer_event_source,
475 CLOCK_MONOTONIC,
476 usec, 0,
477 service_dispatch_timer, s);
478 if (r < 0)
479 return r;
480
481 (void) sd_event_source_set_description(s->timer_event_source, "service-timer");
482
483 return 0;
484 }
485
486 static int service_verify(Service *s) {
487 assert(s);
488
489 if (UNIT(s)->load_state != UNIT_LOADED)
490 return 0;
491
492 if (!s->exec_command[SERVICE_EXEC_START] && !s->exec_command[SERVICE_EXEC_STOP]) {
493 log_unit_error(UNIT(s), "Service lacks both ExecStart= and ExecStop= setting. Refusing.");
494 return -EINVAL;
495 }
496
497 if (s->type != SERVICE_ONESHOT && !s->exec_command[SERVICE_EXEC_START]) {
498 log_unit_error(UNIT(s), "Service has no ExecStart= setting, which is only allowed for Type=oneshot services. Refusing.");
499 return -EINVAL;
500 }
501
502 if (!s->remain_after_exit && !s->exec_command[SERVICE_EXEC_START]) {
503 log_unit_error(UNIT(s), "Service has no ExecStart= setting, which is only allowed for RemainAfterExit=yes services. Refusing.");
504 return -EINVAL;
505 }
506
507 if (s->type != SERVICE_ONESHOT && s->exec_command[SERVICE_EXEC_START]->command_next) {
508 log_unit_error(UNIT(s), "Service has more than one ExecStart= setting, which is only allowed for Type=oneshot services. Refusing.");
509 return -EINVAL;
510 }
511
512 if (s->type == SERVICE_ONESHOT && s->restart != SERVICE_RESTART_NO) {
513 log_unit_error(UNIT(s), "Service has Restart= setting other than no, which isn't allowed for Type=oneshot services. Refusing.");
514 return -EINVAL;
515 }
516
517 if (s->type == SERVICE_ONESHOT && !exit_status_set_is_empty(&s->restart_force_status)) {
518 log_unit_error(UNIT(s), "Service has RestartForceStatus= set, which isn't allowed for Type=oneshot services. Refusing.");
519 return -EINVAL;
520 }
521
522 if (s->type == SERVICE_DBUS && !s->bus_name) {
523 log_unit_error(UNIT(s), "Service is of type D-Bus but no D-Bus service name has been specified. Refusing.");
524 return -EINVAL;
525 }
526
527 if (s->bus_name && s->type != SERVICE_DBUS)
528 log_unit_warning(UNIT(s), "Service has a D-Bus service name specified, but is not of type dbus. Ignoring.");
529
530 if (s->exec_context.pam_name && !(s->kill_context.kill_mode == KILL_CONTROL_GROUP || s->kill_context.kill_mode == KILL_MIXED)) {
531 log_unit_error(UNIT(s), "Service has PAM enabled. Kill mode must be set to 'control-group' or 'mixed'. Refusing.");
532 return -EINVAL;
533 }
534
535 if (s->usb_function_descriptors && !s->usb_function_strings)
536 log_unit_warning(UNIT(s), "Service has USBFunctionDescriptors= setting, but no USBFunctionStrings=. Ignoring.");
537
538 if (!s->usb_function_descriptors && s->usb_function_strings)
539 log_unit_warning(UNIT(s), "Service has USBFunctionStrings= setting, but no USBFunctionDescriptors=. Ignoring.");
540
541 if (s->runtime_max_usec != USEC_INFINITY && s->type == SERVICE_ONESHOT)
542 log_unit_warning(UNIT(s), "MaxRuntimeSec= has no effect in combination with Type=oneshot. Ignoring.");
543
544 return 0;
545 }
546
547 static int service_add_default_dependencies(Service *s) {
548 int r;
549
550 assert(s);
551
552 if (!UNIT(s)->default_dependencies)
553 return 0;
554
555 /* Add a number of automatic dependencies useful for the
556 * majority of services. */
557
558 if (MANAGER_IS_SYSTEM(UNIT(s)->manager)) {
559 /* First, pull in the really early boot stuff, and
560 * require it, so that we fail if we can't acquire
561 * it. */
562
563 r = unit_add_two_dependencies_by_name(UNIT(s), UNIT_AFTER, UNIT_REQUIRES, SPECIAL_SYSINIT_TARGET, NULL, true);
564 if (r < 0)
565 return r;
566 } else {
567
568 /* In the --user instance there's no sysinit.target,
569 * in that case require basic.target instead. */
570
571 r = unit_add_dependency_by_name(UNIT(s), UNIT_REQUIRES, SPECIAL_BASIC_TARGET, NULL, true);
572 if (r < 0)
573 return r;
574 }
575
576 /* Second, if the rest of the base system is in the same
577 * transaction, order us after it, but do not pull it in or
578 * even require it. */
579 r = unit_add_dependency_by_name(UNIT(s), UNIT_AFTER, SPECIAL_BASIC_TARGET, NULL, true);
580 if (r < 0)
581 return r;
582
583 /* Third, add us in for normal shutdown. */
584 return unit_add_two_dependencies_by_name(UNIT(s), UNIT_BEFORE, UNIT_CONFLICTS, SPECIAL_SHUTDOWN_TARGET, NULL, true);
585 }
586
587 static void service_fix_output(Service *s) {
588 assert(s);
589
590 /* If nothing has been explicitly configured, patch default
591 * output in. If input is socket/tty we avoid this however,
592 * since in that case we want output to default to the same
593 * place as we read input from. */
594
595 if (s->exec_context.std_error == EXEC_OUTPUT_INHERIT &&
596 s->exec_context.std_output == EXEC_OUTPUT_INHERIT &&
597 s->exec_context.std_input == EXEC_INPUT_NULL)
598 s->exec_context.std_error = UNIT(s)->manager->default_std_error;
599
600 if (s->exec_context.std_output == EXEC_OUTPUT_INHERIT &&
601 s->exec_context.std_input == EXEC_INPUT_NULL)
602 s->exec_context.std_output = UNIT(s)->manager->default_std_output;
603 }
604
605 static int service_setup_bus_name(Service *s) {
606 int r;
607
608 assert(s);
609
610 if (!s->bus_name)
611 return 0;
612
613 r = unit_add_dependency_by_name(UNIT(s), UNIT_REQUIRES, SPECIAL_DBUS_SOCKET, NULL, true);
614 if (r < 0)
615 return log_unit_error_errno(UNIT(s), r, "Failed to add dependency on " SPECIAL_DBUS_SOCKET ": %m");
616
617 /* We always want to be ordered against dbus.socket if both are in the transaction. */
618 r = unit_add_dependency_by_name(UNIT(s), UNIT_AFTER, SPECIAL_DBUS_SOCKET, NULL, true);
619 if (r < 0)
620 return log_unit_error_errno(UNIT(s), r, "Failed to add dependency on " SPECIAL_DBUS_SOCKET ": %m");
621
622 r = unit_watch_bus_name(UNIT(s), s->bus_name);
623 if (r == -EEXIST)
624 return log_unit_error_errno(UNIT(s), r, "Two services allocated for the same bus name %s, refusing operation.", s->bus_name);
625 if (r < 0)
626 return log_unit_error_errno(UNIT(s), r, "Cannot watch bus name %s: %m", s->bus_name);
627
628 return 0;
629 }
630
631 static int service_add_extras(Service *s) {
632 int r;
633
634 assert(s);
635
636 if (s->type == _SERVICE_TYPE_INVALID) {
637 /* Figure out a type automatically */
638 if (s->bus_name)
639 s->type = SERVICE_DBUS;
640 else if (s->exec_command[SERVICE_EXEC_START])
641 s->type = SERVICE_SIMPLE;
642 else
643 s->type = SERVICE_ONESHOT;
644 }
645
646 /* Oneshot services have disabled start timeout by default */
647 if (s->type == SERVICE_ONESHOT && !s->start_timeout_defined)
648 s->timeout_start_usec = USEC_INFINITY;
649
650 service_fix_output(s);
651
652 r = unit_patch_contexts(UNIT(s));
653 if (r < 0)
654 return r;
655
656 r = unit_add_exec_dependencies(UNIT(s), &s->exec_context);
657 if (r < 0)
658 return r;
659
660 r = unit_set_default_slice(UNIT(s));
661 if (r < 0)
662 return r;
663
664 if (s->type == SERVICE_NOTIFY && s->notify_access == NOTIFY_NONE)
665 s->notify_access = NOTIFY_MAIN;
666
667 if (s->watchdog_usec > 0 && s->notify_access == NOTIFY_NONE)
668 s->notify_access = NOTIFY_MAIN;
669
670 r = service_add_default_dependencies(s);
671 if (r < 0)
672 return r;
673
674 r = service_setup_bus_name(s);
675 if (r < 0)
676 return r;
677
678 return 0;
679 }
680
681 static int service_load(Unit *u) {
682 Service *s = SERVICE(u);
683 int r;
684
685 assert(s);
686
687 /* Load a .service file */
688 r = unit_load_fragment(u);
689 if (r < 0)
690 return r;
691
692 /* Still nothing found? Then let's give up */
693 if (u->load_state == UNIT_STUB)
694 return -ENOENT;
695
696 /* This is a new unit? Then let's add in some extras */
697 if (u->load_state == UNIT_LOADED) {
698
699 /* We were able to load something, then let's add in
700 * the dropin directories. */
701 r = unit_load_dropin(u);
702 if (r < 0)
703 return r;
704
705 /* This is a new unit? Then let's add in some
706 * extras */
707 r = service_add_extras(s);
708 if (r < 0)
709 return r;
710 }
711
712 return service_verify(s);
713 }
714
715 static void service_dump(Unit *u, FILE *f, const char *prefix) {
716 ServiceExecCommand c;
717 Service *s = SERVICE(u);
718 const char *prefix2;
719
720 assert(s);
721
722 prefix = strempty(prefix);
723 prefix2 = strjoina(prefix, "\t");
724
725 fprintf(f,
726 "%sService State: %s\n"
727 "%sResult: %s\n"
728 "%sReload Result: %s\n"
729 "%sPermissionsStartOnly: %s\n"
730 "%sRootDirectoryStartOnly: %s\n"
731 "%sRemainAfterExit: %s\n"
732 "%sGuessMainPID: %s\n"
733 "%sType: %s\n"
734 "%sRestart: %s\n"
735 "%sNotifyAccess: %s\n"
736 "%sNotifyState: %s\n",
737 prefix, service_state_to_string(s->state),
738 prefix, service_result_to_string(s->result),
739 prefix, service_result_to_string(s->reload_result),
740 prefix, yes_no(s->permissions_start_only),
741 prefix, yes_no(s->root_directory_start_only),
742 prefix, yes_no(s->remain_after_exit),
743 prefix, yes_no(s->guess_main_pid),
744 prefix, service_type_to_string(s->type),
745 prefix, service_restart_to_string(s->restart),
746 prefix, notify_access_to_string(s->notify_access),
747 prefix, notify_state_to_string(s->notify_state));
748
749 if (s->control_pid > 0)
750 fprintf(f,
751 "%sControl PID: "PID_FMT"\n",
752 prefix, s->control_pid);
753
754 if (s->main_pid > 0)
755 fprintf(f,
756 "%sMain PID: "PID_FMT"\n"
757 "%sMain PID Known: %s\n"
758 "%sMain PID Alien: %s\n",
759 prefix, s->main_pid,
760 prefix, yes_no(s->main_pid_known),
761 prefix, yes_no(s->main_pid_alien));
762
763 if (s->pid_file)
764 fprintf(f,
765 "%sPIDFile: %s\n",
766 prefix, s->pid_file);
767
768 if (s->bus_name)
769 fprintf(f,
770 "%sBusName: %s\n"
771 "%sBus Name Good: %s\n",
772 prefix, s->bus_name,
773 prefix, yes_no(s->bus_name_good));
774
775 if (UNIT_ISSET(s->accept_socket))
776 fprintf(f,
777 "%sAccept Socket: %s\n",
778 prefix, UNIT_DEREF(s->accept_socket)->id);
779
780 kill_context_dump(&s->kill_context, f, prefix);
781 exec_context_dump(&s->exec_context, f, prefix);
782
783 for (c = 0; c < _SERVICE_EXEC_COMMAND_MAX; c++) {
784
785 if (!s->exec_command[c])
786 continue;
787
788 fprintf(f, "%s-> %s:\n",
789 prefix, service_exec_command_to_string(c));
790
791 exec_command_dump_list(s->exec_command[c], f, prefix2);
792 }
793
794 if (s->status_text)
795 fprintf(f, "%sStatus Text: %s\n",
796 prefix, s->status_text);
797
798 if (s->n_fd_store_max > 0)
799 fprintf(f,
800 "%sFile Descriptor Store Max: %u\n"
801 "%sFile Descriptor Store Current: %u\n",
802 prefix, s->n_fd_store_max,
803 prefix, s->n_fd_store);
804 }
805
806 static int service_load_pid_file(Service *s, bool may_warn) {
807 _cleanup_free_ char *k = NULL;
808 int r;
809 pid_t pid;
810
811 assert(s);
812
813 if (!s->pid_file)
814 return -ENOENT;
815
816 r = read_one_line_file(s->pid_file, &k);
817 if (r < 0) {
818 if (may_warn)
819 log_unit_info_errno(UNIT(s), r, "PID file %s not readable (yet?) after %s: %m", s->pid_file, service_state_to_string(s->state));
820 return r;
821 }
822
823 r = parse_pid(k, &pid);
824 if (r < 0) {
825 if (may_warn)
826 log_unit_info_errno(UNIT(s), r, "Failed to read PID from file %s: %m", s->pid_file);
827 return r;
828 }
829
830 if (!pid_is_alive(pid)) {
831 if (may_warn)
832 log_unit_info(UNIT(s), "PID "PID_FMT" read from file %s does not exist or is a zombie.", pid, s->pid_file);
833 return -ESRCH;
834 }
835
836 if (s->main_pid_known) {
837 if (pid == s->main_pid)
838 return 0;
839
840 log_unit_debug(UNIT(s), "Main PID changing: "PID_FMT" -> "PID_FMT, s->main_pid, pid);
841
842 service_unwatch_main_pid(s);
843 s->main_pid_known = false;
844 } else
845 log_unit_debug(UNIT(s), "Main PID loaded: "PID_FMT, pid);
846
847 r = service_set_main_pid(s, pid);
848 if (r < 0)
849 return r;
850
851 r = unit_watch_pid(UNIT(s), pid);
852 if (r < 0) /* FIXME: we need to do something here */
853 return log_unit_warning_errno(UNIT(s), r, "Failed to watch PID "PID_FMT" for service: %m", pid);
854
855 return 0;
856 }
857
858 static void service_search_main_pid(Service *s) {
859 pid_t pid = 0;
860 int r;
861
862 assert(s);
863
864 /* If we know it anyway, don't ever fallback to unreliable
865 * heuristics */
866 if (s->main_pid_known)
867 return;
868
869 if (!s->guess_main_pid)
870 return;
871
872 assert(s->main_pid <= 0);
873
874 if (unit_search_main_pid(UNIT(s), &pid) < 0)
875 return;
876
877 log_unit_debug(UNIT(s), "Main PID guessed: "PID_FMT, pid);
878 if (service_set_main_pid(s, pid) < 0)
879 return;
880
881 r = unit_watch_pid(UNIT(s), pid);
882 if (r < 0)
883 /* FIXME: we need to do something here */
884 log_unit_warning_errno(UNIT(s), r, "Failed to watch PID "PID_FMT" from: %m", pid);
885 }
886
887 static void service_set_state(Service *s, ServiceState state) {
888 ServiceState old_state;
889 const UnitActiveState *table;
890
891 assert(s);
892
893 table = s->type == SERVICE_IDLE ? state_translation_table_idle : state_translation_table;
894
895 old_state = s->state;
896 s->state = state;
897
898 service_unwatch_pid_file(s);
899
900 if (!IN_SET(state,
901 SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST,
902 SERVICE_RUNNING,
903 SERVICE_RELOAD,
904 SERVICE_STOP, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
905 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL,
906 SERVICE_AUTO_RESTART))
907 s->timer_event_source = sd_event_source_unref(s->timer_event_source);
908
909 if (!IN_SET(state,
910 SERVICE_START, SERVICE_START_POST,
911 SERVICE_RUNNING, SERVICE_RELOAD,
912 SERVICE_STOP, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
913 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL)) {
914 service_unwatch_main_pid(s);
915 s->main_command = NULL;
916 }
917
918 if (!IN_SET(state,
919 SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST,
920 SERVICE_RELOAD,
921 SERVICE_STOP, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
922 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL)) {
923 service_unwatch_control_pid(s);
924 s->control_command = NULL;
925 s->control_command_id = _SERVICE_EXEC_COMMAND_INVALID;
926 }
927
928 if (IN_SET(state, SERVICE_DEAD, SERVICE_FAILED, SERVICE_AUTO_RESTART))
929 unit_unwatch_all_pids(UNIT(s));
930
931 if (!IN_SET(state,
932 SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST,
933 SERVICE_RUNNING, SERVICE_RELOAD,
934 SERVICE_STOP, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
935 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL) &&
936 !(state == SERVICE_DEAD && UNIT(s)->job))
937 service_close_socket_fd(s);
938
939 if (!IN_SET(state, SERVICE_START_POST, SERVICE_RUNNING, SERVICE_RELOAD))
940 service_stop_watchdog(s);
941
942 /* For the inactive states unit_notify() will trim the cgroup,
943 * but for exit we have to do that ourselves... */
944 if (state == SERVICE_EXITED && !MANAGER_IS_RELOADING(UNIT(s)->manager))
945 unit_prune_cgroup(UNIT(s));
946
947 /* For remain_after_exit services, let's see if we can "release" the
948 * hold on the console, since unit_notify() only does that in case of
949 * change of state */
950 if (state == SERVICE_EXITED &&
951 s->remain_after_exit &&
952 UNIT(s)->manager->n_on_console > 0) {
953
954 ExecContext *ec;
955
956 ec = unit_get_exec_context(UNIT(s));
957 if (ec && exec_context_may_touch_console(ec)) {
958 Manager *m = UNIT(s)->manager;
959
960 m->n_on_console--;
961 if (m->n_on_console == 0)
962 /* unset no_console_output flag, since the console is free */
963 m->no_console_output = false;
964 }
965 }
966
967 if (old_state != state)
968 log_unit_debug(UNIT(s), "Changed %s -> %s", service_state_to_string(old_state), service_state_to_string(state));
969
970 unit_notify(UNIT(s), table[old_state], table[state], s->reload_result == SERVICE_SUCCESS);
971 }
972
973 static usec_t service_coldplug_timeout(Service *s) {
974 assert(s);
975
976 switch (s->deserialized_state) {
977
978 case SERVICE_START_PRE:
979 case SERVICE_START:
980 case SERVICE_START_POST:
981 case SERVICE_RELOAD:
982 return usec_add(UNIT(s)->state_change_timestamp.monotonic, s->timeout_start_usec);
983
984 case SERVICE_RUNNING:
985 return usec_add(UNIT(s)->active_enter_timestamp.monotonic, s->runtime_max_usec);
986
987 case SERVICE_STOP:
988 case SERVICE_STOP_SIGABRT:
989 case SERVICE_STOP_SIGTERM:
990 case SERVICE_STOP_SIGKILL:
991 case SERVICE_STOP_POST:
992 case SERVICE_FINAL_SIGTERM:
993 case SERVICE_FINAL_SIGKILL:
994 return usec_add(UNIT(s)->state_change_timestamp.monotonic, s->timeout_stop_usec);
995
996 case SERVICE_AUTO_RESTART:
997 return usec_add(UNIT(s)->inactive_enter_timestamp.monotonic, s->restart_usec);
998
999 default:
1000 return USEC_INFINITY;
1001 }
1002 }
1003
1004 static int service_coldplug(Unit *u) {
1005 Service *s = SERVICE(u);
1006 int r;
1007
1008 assert(s);
1009 assert(s->state == SERVICE_DEAD);
1010
1011 if (s->deserialized_state == s->state)
1012 return 0;
1013
1014 r = service_arm_timer(s, service_coldplug_timeout(s));
1015 if (r < 0)
1016 return r;
1017
1018 if (s->main_pid > 0 &&
1019 pid_is_unwaited(s->main_pid) &&
1020 ((s->deserialized_state == SERVICE_START && IN_SET(s->type, SERVICE_FORKING, SERVICE_DBUS, SERVICE_ONESHOT, SERVICE_NOTIFY)) ||
1021 IN_SET(s->deserialized_state,
1022 SERVICE_START, SERVICE_START_POST,
1023 SERVICE_RUNNING, SERVICE_RELOAD,
1024 SERVICE_STOP, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
1025 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL))) {
1026 r = unit_watch_pid(UNIT(s), s->main_pid);
1027 if (r < 0)
1028 return r;
1029 }
1030
1031 if (s->control_pid > 0 &&
1032 pid_is_unwaited(s->control_pid) &&
1033 IN_SET(s->deserialized_state,
1034 SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST,
1035 SERVICE_RELOAD,
1036 SERVICE_STOP, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
1037 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL)) {
1038 r = unit_watch_pid(UNIT(s), s->control_pid);
1039 if (r < 0)
1040 return r;
1041 }
1042
1043 if (!IN_SET(s->deserialized_state, SERVICE_DEAD, SERVICE_FAILED, SERVICE_AUTO_RESTART))
1044 unit_watch_all_pids(UNIT(s));
1045
1046 if (IN_SET(s->deserialized_state, SERVICE_START_POST, SERVICE_RUNNING, SERVICE_RELOAD))
1047 service_start_watchdog(s);
1048
1049 if (!IN_SET(s->deserialized_state, SERVICE_DEAD, SERVICE_FAILED, SERVICE_AUTO_RESTART))
1050 (void) unit_setup_dynamic_creds(u);
1051
1052 if (UNIT_ISSET(s->accept_socket)) {
1053 Socket* socket = SOCKET(UNIT_DEREF(s->accept_socket));
1054
1055 if (socket->max_connections_per_source > 0) {
1056 SocketPeer *peer;
1057
1058 /* Make a best-effort attempt at bumping the connection count */
1059 if (socket_acquire_peer(socket, s->socket_fd, &peer) > 0) {
1060 socket_peer_unref(s->peer);
1061 s->peer = peer;
1062 }
1063 }
1064 }
1065
1066 service_set_state(s, s->deserialized_state);
1067 return 0;
1068 }
1069
1070 static int service_collect_fds(Service *s,
1071 int **fds,
1072 char ***fd_names,
1073 unsigned *n_storage_fds,
1074 unsigned *n_socket_fds) {
1075
1076 _cleanup_strv_free_ char **rfd_names = NULL;
1077 _cleanup_free_ int *rfds = NULL;
1078 unsigned rn_socket_fds = 0, rn_storage_fds = 0;
1079 int r;
1080
1081 assert(s);
1082 assert(fds);
1083 assert(fd_names);
1084 assert(n_socket_fds);
1085
1086 if (s->socket_fd >= 0) {
1087
1088 /* Pass the per-connection socket */
1089
1090 rfds = new(int, 1);
1091 if (!rfds)
1092 return -ENOMEM;
1093 rfds[0] = s->socket_fd;
1094
1095 rfd_names = strv_new("connection", NULL);
1096 if (!rfd_names)
1097 return -ENOMEM;
1098
1099 rn_socket_fds = 1;
1100 } else {
1101 Iterator i;
1102 Unit *u;
1103
1104 /* Pass all our configured sockets for singleton services */
1105
1106 SET_FOREACH(u, UNIT(s)->dependencies[UNIT_TRIGGERED_BY], i) {
1107 _cleanup_free_ int *cfds = NULL;
1108 Socket *sock;
1109 int cn_fds;
1110
1111 if (u->type != UNIT_SOCKET)
1112 continue;
1113
1114 sock = SOCKET(u);
1115
1116 cn_fds = socket_collect_fds(sock, &cfds);
1117 if (cn_fds < 0)
1118 return cn_fds;
1119
1120 if (cn_fds <= 0)
1121 continue;
1122
1123 if (!rfds) {
1124 rfds = cfds;
1125 rn_socket_fds = cn_fds;
1126
1127 cfds = NULL;
1128 } else {
1129 int *t;
1130
1131 t = realloc(rfds, (rn_socket_fds + cn_fds) * sizeof(int));
1132 if (!t)
1133 return -ENOMEM;
1134
1135 memcpy(t + rn_socket_fds, cfds, cn_fds * sizeof(int));
1136
1137 rfds = t;
1138 rn_socket_fds += cn_fds;
1139 }
1140
1141 r = strv_extend_n(&rfd_names, socket_fdname(sock), cn_fds);
1142 if (r < 0)
1143 return r;
1144 }
1145 }
1146
1147 if (s->n_fd_store > 0) {
1148 ServiceFDStore *fs;
1149 unsigned n_fds;
1150 char **nl;
1151 int *t;
1152
1153 t = realloc(rfds, (rn_socket_fds + s->n_fd_store) * sizeof(int));
1154 if (!t)
1155 return -ENOMEM;
1156
1157 rfds = t;
1158
1159 nl = realloc(rfd_names, (rn_socket_fds + s->n_fd_store + 1) * sizeof(char*));
1160 if (!nl)
1161 return -ENOMEM;
1162
1163 rfd_names = nl;
1164 n_fds = rn_socket_fds;
1165
1166 LIST_FOREACH(fd_store, fs, s->fd_store) {
1167 rfds[n_fds] = fs->fd;
1168 rfd_names[n_fds] = strdup(strempty(fs->fdname));
1169 if (!rfd_names[n_fds])
1170 return -ENOMEM;
1171
1172 rn_storage_fds++;
1173 n_fds++;
1174 }
1175
1176 rfd_names[n_fds] = NULL;
1177 }
1178
1179 *fds = rfds;
1180 *fd_names = rfd_names;
1181 *n_socket_fds = rn_socket_fds;
1182 *n_storage_fds = rn_storage_fds;
1183
1184 rfds = NULL;
1185 rfd_names = NULL;
1186
1187 return 0;
1188 }
1189
1190 static bool service_exec_needs_notify_socket(Service *s, ExecFlags flags) {
1191 assert(s);
1192
1193 /* Notifications are accepted depending on the process and
1194 * the access setting of the service:
1195 * process: \ access: NONE MAIN EXEC ALL
1196 * main no yes yes yes
1197 * control no no yes yes
1198 * other (forked) no no no yes */
1199
1200 if (flags & EXEC_IS_CONTROL)
1201 /* A control process */
1202 return IN_SET(s->notify_access, NOTIFY_EXEC, NOTIFY_ALL);
1203
1204 /* We only spawn main processes and control processes, so any
1205 * process that is not a control process is a main process */
1206 return s->notify_access != NOTIFY_NONE;
1207 }
1208
1209 static int service_spawn(
1210 Service *s,
1211 ExecCommand *c,
1212 usec_t timeout,
1213 ExecFlags flags,
1214 pid_t *_pid) {
1215
1216 _cleanup_strv_free_ char **final_env = NULL, **our_env = NULL, **fd_names = NULL;
1217 _cleanup_free_ int *fds = NULL;
1218 unsigned n_storage_fds = 0, n_socket_fds = 0, n_env = 0;
1219 const char *path;
1220 pid_t pid;
1221
1222 ExecParameters exec_params = {
1223 .flags = flags,
1224 .stdin_fd = -1,
1225 .stdout_fd = -1,
1226 .stderr_fd = -1,
1227 };
1228
1229 int r;
1230
1231 assert(s);
1232 assert(c);
1233 assert(_pid);
1234
1235 if (flags & EXEC_IS_CONTROL) {
1236 /* If this is a control process, mask the permissions/chroot application if this is requested. */
1237 if (s->permissions_start_only)
1238 exec_params.flags &= ~EXEC_APPLY_PERMISSIONS;
1239 if (s->root_directory_start_only)
1240 exec_params.flags &= ~EXEC_APPLY_CHROOT;
1241 }
1242
1243 (void) unit_realize_cgroup(UNIT(s));
1244 if (s->reset_cpu_usage) {
1245 (void) unit_reset_cpu_usage(UNIT(s));
1246 s->reset_cpu_usage = false;
1247 }
1248
1249 r = unit_setup_exec_runtime(UNIT(s));
1250 if (r < 0)
1251 return r;
1252
1253 r = unit_setup_dynamic_creds(UNIT(s));
1254 if (r < 0)
1255 return r;
1256
1257 if ((flags & EXEC_PASS_FDS) ||
1258 s->exec_context.std_input == EXEC_INPUT_SOCKET ||
1259 s->exec_context.std_output == EXEC_OUTPUT_SOCKET ||
1260 s->exec_context.std_error == EXEC_OUTPUT_SOCKET) {
1261
1262 r = service_collect_fds(s, &fds, &fd_names, &n_storage_fds, &n_socket_fds);
1263 if (r < 0)
1264 return r;
1265
1266 log_unit_debug(UNIT(s), "Passing %i fds to service", n_storage_fds + n_socket_fds);
1267 }
1268
1269 r = service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), timeout));
1270 if (r < 0)
1271 return r;
1272
1273 our_env = new0(char*, 9);
1274 if (!our_env)
1275 return -ENOMEM;
1276
1277 if (service_exec_needs_notify_socket(s, flags))
1278 if (asprintf(our_env + n_env++, "NOTIFY_SOCKET=%s", UNIT(s)->manager->notify_socket) < 0)
1279 return -ENOMEM;
1280
1281 if (s->main_pid > 0)
1282 if (asprintf(our_env + n_env++, "MAINPID="PID_FMT, s->main_pid) < 0)
1283 return -ENOMEM;
1284
1285 if (MANAGER_IS_USER(UNIT(s)->manager))
1286 if (asprintf(our_env + n_env++, "MANAGERPID="PID_FMT, getpid_cached()) < 0)
1287 return -ENOMEM;
1288
1289 if (s->socket_fd >= 0) {
1290 union sockaddr_union sa;
1291 socklen_t salen = sizeof(sa);
1292
1293 r = getpeername(s->socket_fd, &sa.sa, &salen);
1294 if (r < 0) {
1295 r = -errno;
1296
1297 /* ENOTCONN is legitimate if the endpoint disappeared on shutdown.
1298 * This connection is over, but the socket unit lives on. */
1299 if (r != -ENOTCONN || !IN_SET(s->control_command_id, SERVICE_EXEC_STOP, SERVICE_EXEC_STOP_POST))
1300 return r;
1301 }
1302
1303 if (r == 0 && IN_SET(sa.sa.sa_family, AF_INET, AF_INET6, AF_VSOCK)) {
1304 _cleanup_free_ char *addr = NULL;
1305 char *t;
1306 unsigned port;
1307
1308 r = sockaddr_pretty(&sa.sa, salen, true, false, &addr);
1309 if (r < 0)
1310 return r;
1311
1312 t = strappend("REMOTE_ADDR=", addr);
1313 if (!t)
1314 return -ENOMEM;
1315 our_env[n_env++] = t;
1316
1317 r = sockaddr_port(&sa.sa, &port);
1318 if (r < 0)
1319 return r;
1320
1321 if (asprintf(&t, "REMOTE_PORT=%u", port) < 0)
1322 return -ENOMEM;
1323 our_env[n_env++] = t;
1324 }
1325 }
1326
1327 if (flags & EXEC_SETENV_RESULT) {
1328 if (asprintf(our_env + n_env++, "SERVICE_RESULT=%s", service_result_to_string(s->result)) < 0)
1329 return -ENOMEM;
1330
1331 if (s->main_exec_status.pid > 0 &&
1332 dual_timestamp_is_set(&s->main_exec_status.exit_timestamp)) {
1333 if (asprintf(our_env + n_env++, "EXIT_CODE=%s", sigchld_code_to_string(s->main_exec_status.code)) < 0)
1334 return -ENOMEM;
1335
1336 if (s->main_exec_status.code == CLD_EXITED)
1337 r = asprintf(our_env + n_env++, "EXIT_STATUS=%i", s->main_exec_status.status);
1338 else
1339 r = asprintf(our_env + n_env++, "EXIT_STATUS=%s", signal_to_string(s->main_exec_status.status));
1340 if (r < 0)
1341 return -ENOMEM;
1342 }
1343 }
1344
1345 r = manager_set_exec_params(UNIT(s)->manager, &exec_params);
1346 if (r < 0)
1347 return r;
1348
1349 final_env = strv_env_merge(2, exec_params.environment, our_env, NULL);
1350 if (!final_env)
1351 return -ENOMEM;
1352
1353 if ((flags & EXEC_IS_CONTROL) && UNIT(s)->cgroup_path) {
1354 path = strjoina(UNIT(s)->cgroup_path, "/control");
1355 (void) cg_create(SYSTEMD_CGROUP_CONTROLLER, path);
1356 } else
1357 path = UNIT(s)->cgroup_path;
1358
1359 exec_params.flags |= MANAGER_IS_SYSTEM(UNIT(s)->manager) ? EXEC_NEW_KEYRING : 0;
1360 exec_params.argv = c->argv;
1361 exec_params.environment = final_env;
1362 exec_params.fds = fds;
1363 exec_params.fd_names = fd_names;
1364 exec_params.n_storage_fds = n_storage_fds;
1365 exec_params.n_socket_fds = n_socket_fds;
1366 exec_params.cgroup_path = path;
1367 exec_params.cgroup_delegate = s->cgroup_context.delegate;
1368 exec_params.watchdog_usec = s->watchdog_usec;
1369 exec_params.selinux_context_net = s->socket_fd_selinux_context_net;
1370 if (s->type == SERVICE_IDLE)
1371 exec_params.idle_pipe = UNIT(s)->manager->idle_pipe;
1372 exec_params.stdin_fd = s->stdin_fd;
1373 exec_params.stdout_fd = s->stdout_fd;
1374 exec_params.stderr_fd = s->stderr_fd;
1375
1376 r = exec_spawn(UNIT(s),
1377 c,
1378 &s->exec_context,
1379 &exec_params,
1380 s->exec_runtime,
1381 &s->dynamic_creds,
1382 &pid);
1383 if (r < 0)
1384 return r;
1385
1386 r = unit_watch_pid(UNIT(s), pid);
1387 if (r < 0) /* FIXME: we need to do something here */
1388 return r;
1389
1390 *_pid = pid;
1391
1392 return 0;
1393 }
1394
1395 static int main_pid_good(Service *s) {
1396 assert(s);
1397
1398 /* Returns 0 if the pid is dead, 1 if it is good, -1 if we
1399 * don't know */
1400
1401 /* If we know the pid file, then let's just check if it is
1402 * still valid */
1403 if (s->main_pid_known) {
1404
1405 /* If it's an alien child let's check if it is still
1406 * alive ... */
1407 if (s->main_pid_alien && s->main_pid > 0)
1408 return pid_is_alive(s->main_pid);
1409
1410 /* .. otherwise assume we'll get a SIGCHLD for it,
1411 * which we really should wait for to collect exit
1412 * status and code */
1413 return s->main_pid > 0;
1414 }
1415
1416 /* We don't know the pid */
1417 return -EAGAIN;
1418 }
1419
1420 _pure_ static int control_pid_good(Service *s) {
1421 assert(s);
1422
1423 return s->control_pid > 0;
1424 }
1425
1426 static int cgroup_good(Service *s) {
1427 int r;
1428
1429 assert(s);
1430
1431 if (!UNIT(s)->cgroup_path)
1432 return 0;
1433
1434 r = cg_is_empty_recursive(SYSTEMD_CGROUP_CONTROLLER, UNIT(s)->cgroup_path);
1435 if (r < 0)
1436 return r;
1437
1438 return !r;
1439 }
1440
1441 static bool service_shall_restart(Service *s) {
1442 assert(s);
1443
1444 /* Don't restart after manual stops */
1445 if (s->forbid_restart)
1446 return false;
1447
1448 /* Never restart if this is configured as special exception */
1449 if (exit_status_set_test(&s->restart_prevent_status, s->main_exec_status.code, s->main_exec_status.status))
1450 return false;
1451
1452 /* Restart if the exit code/status are configured as restart triggers */
1453 if (exit_status_set_test(&s->restart_force_status, s->main_exec_status.code, s->main_exec_status.status))
1454 return true;
1455
1456 switch (s->restart) {
1457
1458 case SERVICE_RESTART_NO:
1459 return false;
1460
1461 case SERVICE_RESTART_ALWAYS:
1462 return true;
1463
1464 case SERVICE_RESTART_ON_SUCCESS:
1465 return s->result == SERVICE_SUCCESS;
1466
1467 case SERVICE_RESTART_ON_FAILURE:
1468 return s->result != SERVICE_SUCCESS;
1469
1470 case SERVICE_RESTART_ON_ABNORMAL:
1471 return !IN_SET(s->result, SERVICE_SUCCESS, SERVICE_FAILURE_EXIT_CODE);
1472
1473 case SERVICE_RESTART_ON_WATCHDOG:
1474 return s->result == SERVICE_FAILURE_WATCHDOG;
1475
1476 case SERVICE_RESTART_ON_ABORT:
1477 return IN_SET(s->result, SERVICE_FAILURE_SIGNAL, SERVICE_FAILURE_CORE_DUMP);
1478
1479 default:
1480 assert_not_reached("unknown restart setting");
1481 }
1482 }
1483
1484 static bool service_will_restart(Service *s) {
1485 assert(s);
1486
1487 if (s->state == SERVICE_AUTO_RESTART)
1488 return true;
1489 if (!UNIT(s)->job)
1490 return false;
1491 if (UNIT(s)->job->type == JOB_START)
1492 return true;
1493 return false;
1494 }
1495
1496 static void service_enter_dead(Service *s, ServiceResult f, bool allow_restart) {
1497 int r;
1498 assert(s);
1499
1500 if (s->result == SERVICE_SUCCESS)
1501 s->result = f;
1502
1503 service_set_state(s, s->result != SERVICE_SUCCESS ? SERVICE_FAILED : SERVICE_DEAD);
1504
1505 if (s->result != SERVICE_SUCCESS) {
1506 log_unit_warning(UNIT(s), "Failed with result '%s'.", service_result_to_string(s->result));
1507 emergency_action(UNIT(s)->manager, s->emergency_action, UNIT(s)->reboot_arg, "service failed");
1508 }
1509
1510 if (allow_restart && service_shall_restart(s)) {
1511
1512 r = service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), s->restart_usec));
1513 if (r < 0)
1514 goto fail;
1515
1516 service_set_state(s, SERVICE_AUTO_RESTART);
1517 }
1518
1519 /* The next restart might not be a manual stop, hence reset the flag indicating manual stops */
1520 s->forbid_restart = false;
1521
1522 /* We want fresh tmpdirs in case service is started again immediately */
1523 exec_runtime_destroy(s->exec_runtime);
1524 s->exec_runtime = exec_runtime_unref(s->exec_runtime);
1525
1526 if (s->exec_context.runtime_directory_preserve_mode == EXEC_PRESERVE_NO ||
1527 (s->exec_context.runtime_directory_preserve_mode == EXEC_PRESERVE_RESTART && !service_will_restart(s)))
1528 /* Also, remove the runtime directory */
1529 exec_context_destroy_runtime_directory(&s->exec_context, UNIT(s)->manager->prefix[EXEC_DIRECTORY_RUNTIME]);
1530
1531 /* Get rid of the IPC bits of the user */
1532 unit_unref_uid_gid(UNIT(s), true);
1533
1534 /* Release the user, and destroy it if we are the only remaining owner */
1535 dynamic_creds_destroy(&s->dynamic_creds);
1536
1537 /* Try to delete the pid file. At this point it will be
1538 * out-of-date, and some software might be confused by it, so
1539 * let's remove it. */
1540 if (s->pid_file)
1541 (void) unlink(s->pid_file);
1542
1543 return;
1544
1545 fail:
1546 log_unit_warning_errno(UNIT(s), r, "Failed to run install restart timer: %m");
1547 service_enter_dead(s, SERVICE_FAILURE_RESOURCES, false);
1548 }
1549
1550 static void service_enter_stop_post(Service *s, ServiceResult f) {
1551 int r;
1552 assert(s);
1553
1554 if (s->result == SERVICE_SUCCESS)
1555 s->result = f;
1556
1557 service_unwatch_control_pid(s);
1558 unit_watch_all_pids(UNIT(s));
1559
1560 s->control_command = s->exec_command[SERVICE_EXEC_STOP_POST];
1561 if (s->control_command) {
1562 s->control_command_id = SERVICE_EXEC_STOP_POST;
1563
1564 r = service_spawn(s,
1565 s->control_command,
1566 s->timeout_stop_usec,
1567 EXEC_APPLY_PERMISSIONS|EXEC_APPLY_CHROOT|EXEC_APPLY_TTY_STDIN|EXEC_IS_CONTROL|EXEC_SETENV_RESULT,
1568 &s->control_pid);
1569 if (r < 0)
1570 goto fail;
1571
1572 service_set_state(s, SERVICE_STOP_POST);
1573 } else
1574 service_enter_signal(s, SERVICE_FINAL_SIGTERM, SERVICE_SUCCESS);
1575
1576 return;
1577
1578 fail:
1579 log_unit_warning_errno(UNIT(s), r, "Failed to run 'stop-post' task: %m");
1580 service_enter_signal(s, SERVICE_FINAL_SIGTERM, SERVICE_FAILURE_RESOURCES);
1581 }
1582
1583 static int state_to_kill_operation(ServiceState state) {
1584 switch (state) {
1585
1586 case SERVICE_STOP_SIGABRT:
1587 return KILL_ABORT;
1588
1589 case SERVICE_STOP_SIGTERM:
1590 case SERVICE_FINAL_SIGTERM:
1591 return KILL_TERMINATE;
1592
1593 case SERVICE_STOP_SIGKILL:
1594 case SERVICE_FINAL_SIGKILL:
1595 return KILL_KILL;
1596
1597 default:
1598 return _KILL_OPERATION_INVALID;
1599 }
1600 }
1601
1602 static void service_enter_signal(Service *s, ServiceState state, ServiceResult f) {
1603 int r;
1604
1605 assert(s);
1606
1607 if (s->result == SERVICE_SUCCESS)
1608 s->result = f;
1609
1610 unit_watch_all_pids(UNIT(s));
1611
1612 r = unit_kill_context(
1613 UNIT(s),
1614 &s->kill_context,
1615 state_to_kill_operation(state),
1616 s->main_pid,
1617 s->control_pid,
1618 s->main_pid_alien);
1619
1620 if (r < 0)
1621 goto fail;
1622
1623 if (r > 0) {
1624 r = service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), s->timeout_stop_usec));
1625 if (r < 0)
1626 goto fail;
1627
1628 service_set_state(s, state);
1629 } else if (IN_SET(state, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM) && s->kill_context.send_sigkill)
1630 service_enter_signal(s, SERVICE_STOP_SIGKILL, SERVICE_SUCCESS);
1631 else if (IN_SET(state, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL))
1632 service_enter_stop_post(s, SERVICE_SUCCESS);
1633 else if (state == SERVICE_FINAL_SIGTERM && s->kill_context.send_sigkill)
1634 service_enter_signal(s, SERVICE_FINAL_SIGKILL, SERVICE_SUCCESS);
1635 else
1636 service_enter_dead(s, SERVICE_SUCCESS, true);
1637
1638 return;
1639
1640 fail:
1641 log_unit_warning_errno(UNIT(s), r, "Failed to kill processes: %m");
1642
1643 if (IN_SET(state, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL))
1644 service_enter_stop_post(s, SERVICE_FAILURE_RESOURCES);
1645 else
1646 service_enter_dead(s, SERVICE_FAILURE_RESOURCES, true);
1647 }
1648
1649 static void service_enter_stop_by_notify(Service *s) {
1650 assert(s);
1651
1652 unit_watch_all_pids(UNIT(s));
1653
1654 service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), s->timeout_stop_usec));
1655
1656 /* The service told us it's stopping, so it's as if we SIGTERM'd it. */
1657 service_set_state(s, SERVICE_STOP_SIGTERM);
1658 }
1659
1660 static void service_enter_stop(Service *s, ServiceResult f) {
1661 int r;
1662
1663 assert(s);
1664
1665 if (s->result == SERVICE_SUCCESS)
1666 s->result = f;
1667
1668 service_unwatch_control_pid(s);
1669 unit_watch_all_pids(UNIT(s));
1670
1671 s->control_command = s->exec_command[SERVICE_EXEC_STOP];
1672 if (s->control_command) {
1673 s->control_command_id = SERVICE_EXEC_STOP;
1674
1675 r = service_spawn(s,
1676 s->control_command,
1677 s->timeout_stop_usec,
1678 EXEC_APPLY_PERMISSIONS|EXEC_APPLY_CHROOT|EXEC_IS_CONTROL|EXEC_SETENV_RESULT,
1679 &s->control_pid);
1680 if (r < 0)
1681 goto fail;
1682
1683 service_set_state(s, SERVICE_STOP);
1684 } else
1685 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_SUCCESS);
1686
1687 return;
1688
1689 fail:
1690 log_unit_warning_errno(UNIT(s), r, "Failed to run 'stop' task: %m");
1691 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_RESOURCES);
1692 }
1693
1694 static bool service_good(Service *s) {
1695 int main_pid_ok;
1696 assert(s);
1697
1698 if (s->type == SERVICE_DBUS && !s->bus_name_good)
1699 return false;
1700
1701 main_pid_ok = main_pid_good(s);
1702 if (main_pid_ok > 0) /* It's alive */
1703 return true;
1704 if (main_pid_ok == 0) /* It's dead */
1705 return false;
1706
1707 /* OK, we don't know anything about the main PID, maybe
1708 * because there is none. Let's check the control group
1709 * instead. */
1710
1711 return cgroup_good(s) != 0;
1712 }
1713
1714 static void service_enter_running(Service *s, ServiceResult f) {
1715 assert(s);
1716
1717 if (s->result == SERVICE_SUCCESS)
1718 s->result = f;
1719
1720 service_unwatch_control_pid(s);
1721
1722 if (service_good(s)) {
1723
1724 /* If there are any queued up sd_notify()
1725 * notifications, process them now */
1726 if (s->notify_state == NOTIFY_RELOADING)
1727 service_enter_reload_by_notify(s);
1728 else if (s->notify_state == NOTIFY_STOPPING)
1729 service_enter_stop_by_notify(s);
1730 else {
1731 service_set_state(s, SERVICE_RUNNING);
1732 service_arm_timer(s, usec_add(UNIT(s)->active_enter_timestamp.monotonic, s->runtime_max_usec));
1733 }
1734
1735 } else if (f != SERVICE_SUCCESS)
1736 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
1737 else if (s->remain_after_exit)
1738 service_set_state(s, SERVICE_EXITED);
1739 else
1740 service_enter_stop(s, SERVICE_SUCCESS);
1741 }
1742
1743 static void service_enter_start_post(Service *s) {
1744 int r;
1745 assert(s);
1746
1747 service_unwatch_control_pid(s);
1748 service_reset_watchdog(s);
1749
1750 s->control_command = s->exec_command[SERVICE_EXEC_START_POST];
1751 if (s->control_command) {
1752 s->control_command_id = SERVICE_EXEC_START_POST;
1753
1754 r = service_spawn(s,
1755 s->control_command,
1756 s->timeout_start_usec,
1757 EXEC_APPLY_PERMISSIONS|EXEC_APPLY_CHROOT|EXEC_IS_CONTROL,
1758 &s->control_pid);
1759 if (r < 0)
1760 goto fail;
1761
1762 service_set_state(s, SERVICE_START_POST);
1763 } else
1764 service_enter_running(s, SERVICE_SUCCESS);
1765
1766 return;
1767
1768 fail:
1769 log_unit_warning_errno(UNIT(s), r, "Failed to run 'start-post' task: %m");
1770 service_enter_stop(s, SERVICE_FAILURE_RESOURCES);
1771 }
1772
1773 static void service_kill_control_processes(Service *s) {
1774 char *p;
1775
1776 if (!UNIT(s)->cgroup_path)
1777 return;
1778
1779 p = strjoina(UNIT(s)->cgroup_path, "/control");
1780 cg_kill_recursive(SYSTEMD_CGROUP_CONTROLLER, p, SIGKILL, CGROUP_SIGCONT|CGROUP_IGNORE_SELF|CGROUP_REMOVE, NULL, NULL, NULL);
1781 }
1782
1783 static void service_enter_start(Service *s) {
1784 ExecCommand *c;
1785 usec_t timeout;
1786 pid_t pid;
1787 int r;
1788
1789 assert(s);
1790
1791 service_unwatch_control_pid(s);
1792 service_unwatch_main_pid(s);
1793
1794 /* We want to ensure that nobody leaks processes from
1795 * START_PRE here, so let's go on a killing spree, People
1796 * should not spawn long running processes from START_PRE. */
1797 service_kill_control_processes(s);
1798
1799 if (s->type == SERVICE_FORKING) {
1800 s->control_command_id = SERVICE_EXEC_START;
1801 c = s->control_command = s->exec_command[SERVICE_EXEC_START];
1802
1803 s->main_command = NULL;
1804 } else {
1805 s->control_command_id = _SERVICE_EXEC_COMMAND_INVALID;
1806 s->control_command = NULL;
1807
1808 c = s->main_command = s->exec_command[SERVICE_EXEC_START];
1809 }
1810
1811 if (!c) {
1812 if (s->type != SERVICE_ONESHOT) {
1813 /* There's no command line configured for the main command? Hmm, that is strange. This can only
1814 * happen if the configuration changes at runtime. In this case, let's enter a failure
1815 * state. */
1816 log_unit_error(UNIT(s), "There's no 'start' task anymore we could start: %m");
1817 r = -ENXIO;
1818 goto fail;
1819 }
1820
1821 service_enter_start_post(s);
1822 return;
1823 }
1824
1825 if (IN_SET(s->type, SERVICE_SIMPLE, SERVICE_IDLE))
1826 /* For simple + idle this is the main process. We don't apply any timeout here, but
1827 * service_enter_running() will later apply the .runtime_max_usec timeout. */
1828 timeout = USEC_INFINITY;
1829 else
1830 timeout = s->timeout_start_usec;
1831
1832 r = service_spawn(s,
1833 c,
1834 timeout,
1835 EXEC_PASS_FDS|EXEC_APPLY_PERMISSIONS|EXEC_APPLY_CHROOT|EXEC_APPLY_TTY_STDIN|EXEC_SET_WATCHDOG,
1836 &pid);
1837 if (r < 0)
1838 goto fail;
1839
1840 if (IN_SET(s->type, SERVICE_SIMPLE, SERVICE_IDLE)) {
1841 /* For simple services we immediately start
1842 * the START_POST binaries. */
1843
1844 service_set_main_pid(s, pid);
1845 service_enter_start_post(s);
1846
1847 } else if (s->type == SERVICE_FORKING) {
1848
1849 /* For forking services we wait until the start
1850 * process exited. */
1851
1852 s->control_pid = pid;
1853 service_set_state(s, SERVICE_START);
1854
1855 } else if (IN_SET(s->type, SERVICE_ONESHOT, SERVICE_DBUS, SERVICE_NOTIFY)) {
1856
1857 /* For oneshot services we wait until the start
1858 * process exited, too, but it is our main process. */
1859
1860 /* For D-Bus services we know the main pid right away,
1861 * but wait for the bus name to appear on the
1862 * bus. Notify services are similar. */
1863
1864 service_set_main_pid(s, pid);
1865 service_set_state(s, SERVICE_START);
1866 } else
1867 assert_not_reached("Unknown service type");
1868
1869 return;
1870
1871 fail:
1872 log_unit_warning_errno(UNIT(s), r, "Failed to run 'start' task: %m");
1873 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_RESOURCES);
1874 }
1875
1876 static void service_enter_start_pre(Service *s) {
1877 int r;
1878
1879 assert(s);
1880
1881 service_unwatch_control_pid(s);
1882
1883 s->control_command = s->exec_command[SERVICE_EXEC_START_PRE];
1884 if (s->control_command) {
1885 /* Before we start anything, let's clear up what might
1886 * be left from previous runs. */
1887 service_kill_control_processes(s);
1888
1889 s->control_command_id = SERVICE_EXEC_START_PRE;
1890
1891 r = service_spawn(s,
1892 s->control_command,
1893 s->timeout_start_usec,
1894 EXEC_APPLY_PERMISSIONS|EXEC_APPLY_CHROOT|EXEC_IS_CONTROL|EXEC_APPLY_TTY_STDIN,
1895 &s->control_pid);
1896 if (r < 0)
1897 goto fail;
1898
1899 service_set_state(s, SERVICE_START_PRE);
1900 } else
1901 service_enter_start(s);
1902
1903 return;
1904
1905 fail:
1906 log_unit_warning_errno(UNIT(s), r, "Failed to run 'start-pre' task: %m");
1907 service_enter_dead(s, SERVICE_FAILURE_RESOURCES, true);
1908 }
1909
1910 static void service_enter_restart(Service *s) {
1911 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1912 int r;
1913
1914 assert(s);
1915
1916 if (UNIT(s)->job && UNIT(s)->job->type == JOB_STOP) {
1917 /* Don't restart things if we are going down anyway */
1918 log_unit_info(UNIT(s), "Stop job pending for unit, delaying automatic restart.");
1919
1920 r = service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), s->restart_usec));
1921 if (r < 0)
1922 goto fail;
1923
1924 return;
1925 }
1926
1927 /* Any units that are bound to this service must also be
1928 * restarted. We use JOB_RESTART (instead of the more obvious
1929 * JOB_START) here so that those dependency jobs will be added
1930 * as well. */
1931 r = manager_add_job(UNIT(s)->manager, JOB_RESTART, UNIT(s), JOB_FAIL, &error, NULL);
1932 if (r < 0)
1933 goto fail;
1934
1935 /* Note that we stay in the SERVICE_AUTO_RESTART state here,
1936 * it will be canceled as part of the service_stop() call that
1937 * is executed as part of JOB_RESTART. */
1938
1939 log_unit_debug(UNIT(s), "Scheduled restart job.");
1940 return;
1941
1942 fail:
1943 log_unit_warning(UNIT(s), "Failed to schedule restart job: %s", bus_error_message(&error, -r));
1944 service_enter_dead(s, SERVICE_FAILURE_RESOURCES, false);
1945 }
1946
1947 static void service_enter_reload_by_notify(Service *s) {
1948 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1949 int r;
1950
1951 assert(s);
1952
1953 service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), s->timeout_start_usec));
1954 service_set_state(s, SERVICE_RELOAD);
1955
1956 /* service_enter_reload_by_notify is never called during a reload, thus no loops are possible. */
1957 r = manager_propagate_reload(UNIT(s)->manager, UNIT(s), JOB_FAIL, &error);
1958 if (r < 0)
1959 log_unit_warning(UNIT(s), "Failed to schedule propagation of reload: %s", bus_error_message(&error, -r));
1960 }
1961
1962 static void service_enter_reload(Service *s) {
1963 int r;
1964
1965 assert(s);
1966
1967 service_unwatch_control_pid(s);
1968 s->reload_result = SERVICE_SUCCESS;
1969
1970 s->control_command = s->exec_command[SERVICE_EXEC_RELOAD];
1971 if (s->control_command) {
1972 s->control_command_id = SERVICE_EXEC_RELOAD;
1973
1974 r = service_spawn(s,
1975 s->control_command,
1976 s->timeout_start_usec,
1977 EXEC_APPLY_PERMISSIONS|EXEC_APPLY_CHROOT|EXEC_IS_CONTROL,
1978 &s->control_pid);
1979 if (r < 0)
1980 goto fail;
1981
1982 service_set_state(s, SERVICE_RELOAD);
1983 } else
1984 service_enter_running(s, SERVICE_SUCCESS);
1985
1986 return;
1987
1988 fail:
1989 log_unit_warning_errno(UNIT(s), r, "Failed to run 'reload' task: %m");
1990 s->reload_result = SERVICE_FAILURE_RESOURCES;
1991 service_enter_running(s, SERVICE_SUCCESS);
1992 }
1993
1994 static void service_run_next_control(Service *s) {
1995 usec_t timeout;
1996 int r;
1997
1998 assert(s);
1999 assert(s->control_command);
2000 assert(s->control_command->command_next);
2001
2002 assert(s->control_command_id != SERVICE_EXEC_START);
2003
2004 s->control_command = s->control_command->command_next;
2005 service_unwatch_control_pid(s);
2006
2007 if (IN_SET(s->state, SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST, SERVICE_RUNNING, SERVICE_RELOAD))
2008 timeout = s->timeout_start_usec;
2009 else
2010 timeout = s->timeout_stop_usec;
2011
2012 r = service_spawn(s,
2013 s->control_command,
2014 timeout,
2015 EXEC_APPLY_PERMISSIONS|EXEC_APPLY_CHROOT|EXEC_IS_CONTROL|
2016 (IN_SET(s->control_command_id, SERVICE_EXEC_START_PRE, SERVICE_EXEC_STOP_POST) ? EXEC_APPLY_TTY_STDIN : 0)|
2017 (IN_SET(s->control_command_id, SERVICE_EXEC_STOP, SERVICE_EXEC_STOP_POST) ? EXEC_SETENV_RESULT : 0),
2018 &s->control_pid);
2019 if (r < 0)
2020 goto fail;
2021
2022 return;
2023
2024 fail:
2025 log_unit_warning_errno(UNIT(s), r, "Failed to run next control task: %m");
2026
2027 if (IN_SET(s->state, SERVICE_START_PRE, SERVICE_STOP))
2028 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_RESOURCES);
2029 else if (s->state == SERVICE_STOP_POST)
2030 service_enter_dead(s, SERVICE_FAILURE_RESOURCES, true);
2031 else if (s->state == SERVICE_RELOAD) {
2032 s->reload_result = SERVICE_FAILURE_RESOURCES;
2033 service_enter_running(s, SERVICE_SUCCESS);
2034 } else
2035 service_enter_stop(s, SERVICE_FAILURE_RESOURCES);
2036 }
2037
2038 static void service_run_next_main(Service *s) {
2039 pid_t pid;
2040 int r;
2041
2042 assert(s);
2043 assert(s->main_command);
2044 assert(s->main_command->command_next);
2045 assert(s->type == SERVICE_ONESHOT);
2046
2047 s->main_command = s->main_command->command_next;
2048 service_unwatch_main_pid(s);
2049
2050 r = service_spawn(s,
2051 s->main_command,
2052 s->timeout_start_usec,
2053 EXEC_PASS_FDS|EXEC_APPLY_PERMISSIONS|EXEC_APPLY_CHROOT|EXEC_APPLY_TTY_STDIN|EXEC_SET_WATCHDOG,
2054 &pid);
2055 if (r < 0)
2056 goto fail;
2057
2058 service_set_main_pid(s, pid);
2059
2060 return;
2061
2062 fail:
2063 log_unit_warning_errno(UNIT(s), r, "Failed to run next main task: %m");
2064 service_enter_stop(s, SERVICE_FAILURE_RESOURCES);
2065 }
2066
2067 static int service_start(Unit *u) {
2068 Service *s = SERVICE(u);
2069 int r;
2070
2071 assert(s);
2072
2073 /* We cannot fulfill this request right now, try again later
2074 * please! */
2075 if (IN_SET(s->state,
2076 SERVICE_STOP, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
2077 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL))
2078 return -EAGAIN;
2079
2080 /* Already on it! */
2081 if (IN_SET(s->state, SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST))
2082 return 0;
2083
2084 /* A service that will be restarted must be stopped first to
2085 * trigger BindsTo and/or OnFailure dependencies. If a user
2086 * does not want to wait for the holdoff time to elapse, the
2087 * service should be manually restarted, not started. We
2088 * simply return EAGAIN here, so that any start jobs stay
2089 * queued, and assume that the auto restart timer will
2090 * eventually trigger the restart. */
2091 if (s->state == SERVICE_AUTO_RESTART)
2092 return -EAGAIN;
2093
2094 assert(IN_SET(s->state, SERVICE_DEAD, SERVICE_FAILED));
2095
2096 /* Make sure we don't enter a busy loop of some kind. */
2097 r = unit_start_limit_test(u);
2098 if (r < 0) {
2099 service_enter_dead(s, SERVICE_FAILURE_START_LIMIT_HIT, false);
2100 return r;
2101 }
2102
2103 r = unit_acquire_invocation_id(u);
2104 if (r < 0)
2105 return r;
2106
2107 s->result = SERVICE_SUCCESS;
2108 s->reload_result = SERVICE_SUCCESS;
2109 s->main_pid_known = false;
2110 s->main_pid_alien = false;
2111 s->forbid_restart = false;
2112 s->reset_cpu_usage = true;
2113
2114 s->status_text = mfree(s->status_text);
2115 s->status_errno = 0;
2116
2117 s->notify_state = NOTIFY_UNKNOWN;
2118
2119 s->watchdog_override_enable = false;
2120 s->watchdog_override_usec = 0;
2121
2122 service_enter_start_pre(s);
2123 return 1;
2124 }
2125
2126 static int service_stop(Unit *u) {
2127 Service *s = SERVICE(u);
2128
2129 assert(s);
2130
2131 /* Don't create restart jobs from manual stops. */
2132 s->forbid_restart = true;
2133
2134 /* Already on it */
2135 if (IN_SET(s->state,
2136 SERVICE_STOP, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
2137 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL))
2138 return 0;
2139
2140 /* A restart will be scheduled or is in progress. */
2141 if (s->state == SERVICE_AUTO_RESTART) {
2142 service_set_state(s, SERVICE_DEAD);
2143 return 0;
2144 }
2145
2146 /* If there's already something running we go directly into
2147 * kill mode. */
2148 if (IN_SET(s->state, SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST, SERVICE_RELOAD)) {
2149 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_SUCCESS);
2150 return 0;
2151 }
2152
2153 assert(IN_SET(s->state, SERVICE_RUNNING, SERVICE_EXITED));
2154
2155 service_enter_stop(s, SERVICE_SUCCESS);
2156 return 1;
2157 }
2158
2159 static int service_reload(Unit *u) {
2160 Service *s = SERVICE(u);
2161
2162 assert(s);
2163
2164 assert(s->state == SERVICE_RUNNING || s->state == SERVICE_EXITED);
2165
2166 service_enter_reload(s);
2167 return 1;
2168 }
2169
2170 _pure_ static bool service_can_reload(Unit *u) {
2171 Service *s = SERVICE(u);
2172
2173 assert(s);
2174
2175 return !!s->exec_command[SERVICE_EXEC_RELOAD];
2176 }
2177
2178 static unsigned service_exec_command_index(Unit *u, ServiceExecCommand id, ExecCommand *current) {
2179 Service *s = SERVICE(u);
2180 unsigned idx = 0;
2181 ExecCommand *first, *c;
2182
2183 assert(s);
2184
2185 first = s->exec_command[id];
2186
2187 /* Figure out where we are in the list by walking back to the beginning */
2188 for (c = current; c != first; c = c->command_prev)
2189 idx++;
2190
2191 return idx;
2192 }
2193
2194 static int service_serialize_exec_command(Unit *u, FILE *f, ExecCommand *command) {
2195 Service *s = SERVICE(u);
2196 ServiceExecCommand id;
2197 unsigned idx;
2198 const char *type;
2199 char **arg;
2200 _cleanup_free_ char *args = NULL, *p = NULL;
2201 size_t allocated = 0, length = 0;
2202
2203 assert(s);
2204 assert(f);
2205
2206 if (!command)
2207 return 0;
2208
2209 if (command == s->control_command) {
2210 type = "control";
2211 id = s->control_command_id;
2212 } else {
2213 type = "main";
2214 id = SERVICE_EXEC_START;
2215 }
2216
2217 idx = service_exec_command_index(u, id, command);
2218
2219 STRV_FOREACH(arg, command->argv) {
2220 size_t n;
2221 _cleanup_free_ char *e = NULL;
2222
2223 e = xescape(*arg, WHITESPACE);
2224 if (!e)
2225 return -ENOMEM;
2226
2227 n = strlen(e);
2228 if (!GREEDY_REALLOC(args, allocated, length + 1 + n + 1))
2229 return -ENOMEM;
2230
2231 if (length > 0)
2232 args[length++] = ' ';
2233
2234 memcpy(args + length, e, n);
2235 length += n;
2236 }
2237
2238 if (!GREEDY_REALLOC(args, allocated, length + 1))
2239 return -ENOMEM;
2240 args[length++] = 0;
2241
2242 p = xescape(command->path, WHITESPACE);
2243 if (!p)
2244 return -ENOMEM;
2245
2246 fprintf(f, "%s-command=%s %u %s %s\n", type, service_exec_command_to_string(id), idx, p, args);
2247
2248 return 0;
2249 }
2250
2251 static int service_serialize(Unit *u, FILE *f, FDSet *fds) {
2252 Service *s = SERVICE(u);
2253 ServiceFDStore *fs;
2254 int r;
2255
2256 assert(u);
2257 assert(f);
2258 assert(fds);
2259
2260 unit_serialize_item(u, f, "state", service_state_to_string(s->state));
2261 unit_serialize_item(u, f, "result", service_result_to_string(s->result));
2262 unit_serialize_item(u, f, "reload-result", service_result_to_string(s->reload_result));
2263
2264 if (s->control_pid > 0)
2265 unit_serialize_item_format(u, f, "control-pid", PID_FMT, s->control_pid);
2266
2267 if (s->main_pid_known && s->main_pid > 0)
2268 unit_serialize_item_format(u, f, "main-pid", PID_FMT, s->main_pid);
2269
2270 unit_serialize_item(u, f, "main-pid-known", yes_no(s->main_pid_known));
2271 unit_serialize_item(u, f, "bus-name-good", yes_no(s->bus_name_good));
2272 unit_serialize_item(u, f, "bus-name-owner", s->bus_name_owner);
2273
2274 r = unit_serialize_item_escaped(u, f, "status-text", s->status_text);
2275 if (r < 0)
2276 return r;
2277
2278 service_serialize_exec_command(u, f, s->control_command);
2279 service_serialize_exec_command(u, f, s->main_command);
2280
2281 r = unit_serialize_item_fd(u, f, fds, "stdin-fd", s->stdin_fd);
2282 if (r < 0)
2283 return r;
2284 r = unit_serialize_item_fd(u, f, fds, "stdout-fd", s->stdout_fd);
2285 if (r < 0)
2286 return r;
2287 r = unit_serialize_item_fd(u, f, fds, "stderr-fd", s->stderr_fd);
2288 if (r < 0)
2289 return r;
2290
2291 if (UNIT_ISSET(s->accept_socket)) {
2292 r = unit_serialize_item(u, f, "accept-socket", UNIT_DEREF(s->accept_socket)->id);
2293 if (r < 0)
2294 return r;
2295 }
2296
2297 r = unit_serialize_item_fd(u, f, fds, "socket-fd", s->socket_fd);
2298 if (r < 0)
2299 return r;
2300
2301 LIST_FOREACH(fd_store, fs, s->fd_store) {
2302 _cleanup_free_ char *c = NULL;
2303 int copy;
2304
2305 copy = fdset_put_dup(fds, fs->fd);
2306 if (copy < 0)
2307 return copy;
2308
2309 c = cescape(fs->fdname);
2310
2311 unit_serialize_item_format(u, f, "fd-store-fd", "%i %s", copy, strempty(c));
2312 }
2313
2314 if (s->main_exec_status.pid > 0) {
2315 unit_serialize_item_format(u, f, "main-exec-status-pid", PID_FMT, s->main_exec_status.pid);
2316 dual_timestamp_serialize(f, "main-exec-status-start", &s->main_exec_status.start_timestamp);
2317 dual_timestamp_serialize(f, "main-exec-status-exit", &s->main_exec_status.exit_timestamp);
2318
2319 if (dual_timestamp_is_set(&s->main_exec_status.exit_timestamp)) {
2320 unit_serialize_item_format(u, f, "main-exec-status-code", "%i", s->main_exec_status.code);
2321 unit_serialize_item_format(u, f, "main-exec-status-status", "%i", s->main_exec_status.status);
2322 }
2323 }
2324
2325 dual_timestamp_serialize(f, "watchdog-timestamp", &s->watchdog_timestamp);
2326
2327 unit_serialize_item(u, f, "forbid-restart", yes_no(s->forbid_restart));
2328
2329 if (s->watchdog_override_enable)
2330 unit_serialize_item_format(u, f, "watchdog-override-usec", USEC_FMT, s->watchdog_override_usec);
2331
2332 return 0;
2333 }
2334
2335 static int service_deserialize_exec_command(Unit *u, const char *key, const char *value) {
2336 Service *s = SERVICE(u);
2337 int r;
2338 unsigned idx = 0, i;
2339 bool control, found = false;
2340 ServiceExecCommand id = _SERVICE_EXEC_COMMAND_INVALID;
2341 ExecCommand *command = NULL;
2342 _cleanup_free_ char *path = NULL;
2343 _cleanup_strv_free_ char **argv = NULL;
2344
2345 enum ExecCommandState {
2346 STATE_EXEC_COMMAND_TYPE,
2347 STATE_EXEC_COMMAND_INDEX,
2348 STATE_EXEC_COMMAND_PATH,
2349 STATE_EXEC_COMMAND_ARGS,
2350 _STATE_EXEC_COMMAND_MAX,
2351 _STATE_EXEC_COMMAND_INVALID = -1,
2352 } state;
2353
2354 assert(s);
2355 assert(key);
2356 assert(value);
2357
2358 control = streq(key, "control-command");
2359
2360 state = STATE_EXEC_COMMAND_TYPE;
2361
2362 for (;;) {
2363 _cleanup_free_ char *arg = NULL;
2364
2365 r = extract_first_word(&value, &arg, NULL, EXTRACT_CUNESCAPE);
2366 if (r == 0)
2367 break;
2368 else if (r < 0)
2369 return r;
2370
2371 switch (state) {
2372 case STATE_EXEC_COMMAND_TYPE:
2373 id = service_exec_command_from_string(arg);
2374 if (id < 0)
2375 return -EINVAL;
2376
2377 state = STATE_EXEC_COMMAND_INDEX;
2378 break;
2379 case STATE_EXEC_COMMAND_INDEX:
2380 r = safe_atou(arg, &idx);
2381 if (r < 0)
2382 return -EINVAL;
2383
2384 state = STATE_EXEC_COMMAND_PATH;
2385 break;
2386 case STATE_EXEC_COMMAND_PATH:
2387 path = arg;
2388 arg = NULL;
2389 state = STATE_EXEC_COMMAND_ARGS;
2390
2391 if (!path_is_absolute(path))
2392 return -EINVAL;
2393 break;
2394 case STATE_EXEC_COMMAND_ARGS:
2395 r = strv_extend(&argv, arg);
2396 if (r < 0)
2397 return -ENOMEM;
2398 break;
2399 default:
2400 assert_not_reached("Unknown error at deserialization of exec command");
2401 break;
2402 }
2403 }
2404
2405 if (state != STATE_EXEC_COMMAND_ARGS)
2406 return -EINVAL;
2407
2408 /* Let's check whether exec command on given offset matches data that we just deserialized */
2409 for (command = s->exec_command[id], i = 0; command; command = command->command_next, i++) {
2410 if (i != idx)
2411 continue;
2412
2413 found = strv_equal(argv, command->argv) && streq(command->path, path);
2414 break;
2415 }
2416
2417 if (!found) {
2418 /* Command at the index we serialized is different, let's look for command that exactly
2419 * matches but is on different index. If there is no such command we will not resume execution. */
2420 for (command = s->exec_command[id]; command; command = command->command_next)
2421 if (strv_equal(command->argv, argv) && streq(command->path, path))
2422 break;
2423 }
2424
2425 if (command && control)
2426 s->control_command = command;
2427 else if (command)
2428 s->main_command = command;
2429 else
2430 log_unit_warning(u, "Current command vanished from the unit file, execution of the command list won't be resumed.");
2431
2432 return 0;
2433 }
2434
2435 static int service_deserialize_item(Unit *u, const char *key, const char *value, FDSet *fds) {
2436 Service *s = SERVICE(u);
2437 int r;
2438
2439 assert(u);
2440 assert(key);
2441 assert(value);
2442 assert(fds);
2443
2444 if (streq(key, "state")) {
2445 ServiceState state;
2446
2447 state = service_state_from_string(value);
2448 if (state < 0)
2449 log_unit_debug(u, "Failed to parse state value: %s", value);
2450 else
2451 s->deserialized_state = state;
2452 } else if (streq(key, "result")) {
2453 ServiceResult f;
2454
2455 f = service_result_from_string(value);
2456 if (f < 0)
2457 log_unit_debug(u, "Failed to parse result value: %s", value);
2458 else if (f != SERVICE_SUCCESS)
2459 s->result = f;
2460
2461 } else if (streq(key, "reload-result")) {
2462 ServiceResult f;
2463
2464 f = service_result_from_string(value);
2465 if (f < 0)
2466 log_unit_debug(u, "Failed to parse reload result value: %s", value);
2467 else if (f != SERVICE_SUCCESS)
2468 s->reload_result = f;
2469
2470 } else if (streq(key, "control-pid")) {
2471 pid_t pid;
2472
2473 if (parse_pid(value, &pid) < 0)
2474 log_unit_debug(u, "Failed to parse control-pid value: %s", value);
2475 else
2476 s->control_pid = pid;
2477 } else if (streq(key, "main-pid")) {
2478 pid_t pid;
2479
2480 if (parse_pid(value, &pid) < 0)
2481 log_unit_debug(u, "Failed to parse main-pid value: %s", value);
2482 else {
2483 service_set_main_pid(s, pid);
2484 unit_watch_pid(UNIT(s), pid);
2485 }
2486 } else if (streq(key, "main-pid-known")) {
2487 int b;
2488
2489 b = parse_boolean(value);
2490 if (b < 0)
2491 log_unit_debug(u, "Failed to parse main-pid-known value: %s", value);
2492 else
2493 s->main_pid_known = b;
2494 } else if (streq(key, "bus-name-good")) {
2495 int b;
2496
2497 b = parse_boolean(value);
2498 if (b < 0)
2499 log_unit_debug(u, "Failed to parse bus-name-good value: %s", value);
2500 else
2501 s->bus_name_good = b;
2502 } else if (streq(key, "bus-name-owner")) {
2503 r = free_and_strdup(&s->bus_name_owner, value);
2504 if (r < 0)
2505 log_unit_error_errno(u, r, "Unable to deserialize current bus owner %s: %m", value);
2506 } else if (streq(key, "status-text")) {
2507 char *t;
2508
2509 r = cunescape(value, 0, &t);
2510 if (r < 0)
2511 log_unit_debug_errno(u, r, "Failed to unescape status text: %s", value);
2512 else {
2513 free(s->status_text);
2514 s->status_text = t;
2515 }
2516
2517 } else if (streq(key, "accept-socket")) {
2518 Unit *socket;
2519
2520 r = manager_load_unit(u->manager, value, NULL, NULL, &socket);
2521 if (r < 0)
2522 log_unit_debug_errno(u, r, "Failed to load accept-socket unit: %s", value);
2523 else {
2524 unit_ref_set(&s->accept_socket, socket);
2525 SOCKET(socket)->n_connections++;
2526 }
2527
2528 } else if (streq(key, "socket-fd")) {
2529 int fd;
2530
2531 if (safe_atoi(value, &fd) < 0 || fd < 0 || !fdset_contains(fds, fd))
2532 log_unit_debug(u, "Failed to parse socket-fd value: %s", value);
2533 else {
2534 asynchronous_close(s->socket_fd);
2535 s->socket_fd = fdset_remove(fds, fd);
2536 }
2537 } else if (streq(key, "fd-store-fd")) {
2538 const char *fdv;
2539 size_t pf;
2540 int fd;
2541
2542 pf = strcspn(value, WHITESPACE);
2543 fdv = strndupa(value, pf);
2544
2545 if (safe_atoi(fdv, &fd) < 0 || fd < 0 || !fdset_contains(fds, fd))
2546 log_unit_debug(u, "Failed to parse fd-store-fd value: %s", value);
2547 else {
2548 _cleanup_free_ char *t = NULL;
2549 const char *fdn;
2550
2551 fdn = value + pf;
2552 fdn += strspn(fdn, WHITESPACE);
2553 (void) cunescape(fdn, 0, &t);
2554
2555 r = service_add_fd_store(s, fd, t);
2556 if (r < 0)
2557 log_unit_error_errno(u, r, "Failed to add fd to store: %m");
2558 else
2559 fdset_remove(fds, fd);
2560 }
2561
2562 } else if (streq(key, "main-exec-status-pid")) {
2563 pid_t pid;
2564
2565 if (parse_pid(value, &pid) < 0)
2566 log_unit_debug(u, "Failed to parse main-exec-status-pid value: %s", value);
2567 else
2568 s->main_exec_status.pid = pid;
2569 } else if (streq(key, "main-exec-status-code")) {
2570 int i;
2571
2572 if (safe_atoi(value, &i) < 0)
2573 log_unit_debug(u, "Failed to parse main-exec-status-code value: %s", value);
2574 else
2575 s->main_exec_status.code = i;
2576 } else if (streq(key, "main-exec-status-status")) {
2577 int i;
2578
2579 if (safe_atoi(value, &i) < 0)
2580 log_unit_debug(u, "Failed to parse main-exec-status-status value: %s", value);
2581 else
2582 s->main_exec_status.status = i;
2583 } else if (streq(key, "main-exec-status-start"))
2584 dual_timestamp_deserialize(value, &s->main_exec_status.start_timestamp);
2585 else if (streq(key, "main-exec-status-exit"))
2586 dual_timestamp_deserialize(value, &s->main_exec_status.exit_timestamp);
2587 else if (streq(key, "watchdog-timestamp"))
2588 dual_timestamp_deserialize(value, &s->watchdog_timestamp);
2589 else if (streq(key, "forbid-restart")) {
2590 int b;
2591
2592 b = parse_boolean(value);
2593 if (b < 0)
2594 log_unit_debug(u, "Failed to parse forbid-restart value: %s", value);
2595 else
2596 s->forbid_restart = b;
2597 } else if (streq(key, "stdin-fd")) {
2598 int fd;
2599
2600 if (safe_atoi(value, &fd) < 0 || fd < 0 || !fdset_contains(fds, fd))
2601 log_unit_debug(u, "Failed to parse stdin-fd value: %s", value);
2602 else {
2603 asynchronous_close(s->stdin_fd);
2604 s->stdin_fd = fdset_remove(fds, fd);
2605 s->exec_context.stdio_as_fds = true;
2606 }
2607 } else if (streq(key, "stdout-fd")) {
2608 int fd;
2609
2610 if (safe_atoi(value, &fd) < 0 || fd < 0 || !fdset_contains(fds, fd))
2611 log_unit_debug(u, "Failed to parse stdout-fd value: %s", value);
2612 else {
2613 asynchronous_close(s->stdout_fd);
2614 s->stdout_fd = fdset_remove(fds, fd);
2615 s->exec_context.stdio_as_fds = true;
2616 }
2617 } else if (streq(key, "stderr-fd")) {
2618 int fd;
2619
2620 if (safe_atoi(value, &fd) < 0 || fd < 0 || !fdset_contains(fds, fd))
2621 log_unit_debug(u, "Failed to parse stderr-fd value: %s", value);
2622 else {
2623 asynchronous_close(s->stderr_fd);
2624 s->stderr_fd = fdset_remove(fds, fd);
2625 s->exec_context.stdio_as_fds = true;
2626 }
2627 } else if (streq(key, "watchdog-override-usec")) {
2628 usec_t watchdog_override_usec;
2629 if (timestamp_deserialize(value, &watchdog_override_usec) < 0)
2630 log_unit_debug(u, "Failed to parse watchdog_override_usec value: %s", value);
2631 else {
2632 s->watchdog_override_enable = true;
2633 s->watchdog_override_usec = watchdog_override_usec;
2634 }
2635 } else if (STR_IN_SET(key, "main-command", "control-command")) {
2636 r = service_deserialize_exec_command(u, key, value);
2637 if (r < 0)
2638 log_unit_debug_errno(u, r, "Failed to parse serialized command \"%s\": %m", value);
2639 } else
2640 log_unit_debug(u, "Unknown serialization key: %s", key);
2641
2642 return 0;
2643 }
2644
2645 _pure_ static UnitActiveState service_active_state(Unit *u) {
2646 const UnitActiveState *table;
2647
2648 assert(u);
2649
2650 table = SERVICE(u)->type == SERVICE_IDLE ? state_translation_table_idle : state_translation_table;
2651
2652 return table[SERVICE(u)->state];
2653 }
2654
2655 static const char *service_sub_state_to_string(Unit *u) {
2656 assert(u);
2657
2658 return service_state_to_string(SERVICE(u)->state);
2659 }
2660
2661 static bool service_check_gc(Unit *u) {
2662 Service *s = SERVICE(u);
2663
2664 assert(s);
2665
2666 /* Never clean up services that still have a process around,
2667 * even if the service is formally dead. */
2668 if (cgroup_good(s) > 0 ||
2669 main_pid_good(s) > 0 ||
2670 control_pid_good(s) > 0)
2671 return true;
2672
2673 return false;
2674 }
2675
2676 static int service_retry_pid_file(Service *s) {
2677 int r;
2678
2679 assert(s->pid_file);
2680 assert(s->state == SERVICE_START || s->state == SERVICE_START_POST);
2681
2682 r = service_load_pid_file(s, false);
2683 if (r < 0)
2684 return r;
2685
2686 service_unwatch_pid_file(s);
2687
2688 service_enter_running(s, SERVICE_SUCCESS);
2689 return 0;
2690 }
2691
2692 static int service_watch_pid_file(Service *s) {
2693 int r;
2694
2695 log_unit_debug(UNIT(s), "Setting watch for PID file %s", s->pid_file_pathspec->path);
2696
2697 r = path_spec_watch(s->pid_file_pathspec, service_dispatch_io);
2698 if (r < 0)
2699 goto fail;
2700
2701 /* the pidfile might have appeared just before we set the watch */
2702 log_unit_debug(UNIT(s), "Trying to read PID file %s in case it changed", s->pid_file_pathspec->path);
2703 service_retry_pid_file(s);
2704
2705 return 0;
2706 fail:
2707 log_unit_error_errno(UNIT(s), r, "Failed to set a watch for PID file %s: %m", s->pid_file_pathspec->path);
2708 service_unwatch_pid_file(s);
2709 return r;
2710 }
2711
2712 static int service_demand_pid_file(Service *s) {
2713 PathSpec *ps;
2714
2715 assert(s->pid_file);
2716 assert(!s->pid_file_pathspec);
2717
2718 ps = new0(PathSpec, 1);
2719 if (!ps)
2720 return -ENOMEM;
2721
2722 ps->unit = UNIT(s);
2723 ps->path = strdup(s->pid_file);
2724 if (!ps->path) {
2725 free(ps);
2726 return -ENOMEM;
2727 }
2728
2729 path_kill_slashes(ps->path);
2730
2731 /* PATH_CHANGED would not be enough. There are daemons (sendmail) that
2732 * keep their PID file open all the time. */
2733 ps->type = PATH_MODIFIED;
2734 ps->inotify_fd = -1;
2735
2736 s->pid_file_pathspec = ps;
2737
2738 return service_watch_pid_file(s);
2739 }
2740
2741 static int service_dispatch_io(sd_event_source *source, int fd, uint32_t events, void *userdata) {
2742 PathSpec *p = userdata;
2743 Service *s;
2744
2745 assert(p);
2746
2747 s = SERVICE(p->unit);
2748
2749 assert(s);
2750 assert(fd >= 0);
2751 assert(s->state == SERVICE_START || s->state == SERVICE_START_POST);
2752 assert(s->pid_file_pathspec);
2753 assert(path_spec_owns_inotify_fd(s->pid_file_pathspec, fd));
2754
2755 log_unit_debug(UNIT(s), "inotify event");
2756
2757 if (path_spec_fd_event(p, events) < 0)
2758 goto fail;
2759
2760 if (service_retry_pid_file(s) == 0)
2761 return 0;
2762
2763 if (service_watch_pid_file(s) < 0)
2764 goto fail;
2765
2766 return 0;
2767
2768 fail:
2769 service_unwatch_pid_file(s);
2770 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_RESOURCES);
2771 return 0;
2772 }
2773
2774 static void service_notify_cgroup_empty_event(Unit *u) {
2775 Service *s = SERVICE(u);
2776
2777 assert(u);
2778
2779 log_unit_debug(u, "cgroup is empty");
2780
2781 switch (s->state) {
2782
2783 /* Waiting for SIGCHLD is usually more interesting,
2784 * because it includes return codes/signals. Which is
2785 * why we ignore the cgroup events for most cases,
2786 * except when we don't know pid which to expect the
2787 * SIGCHLD for. */
2788
2789 case SERVICE_START:
2790 if (s->type == SERVICE_NOTIFY) {
2791 /* No chance of getting a ready notification anymore */
2792 service_enter_stop_post(s, SERVICE_FAILURE_PROTOCOL);
2793 break;
2794 }
2795
2796 /* Fall through */
2797
2798 case SERVICE_START_POST:
2799 if (s->pid_file_pathspec) {
2800 /* Give up hoping for the daemon to write its PID file */
2801 log_unit_warning(u, "Daemon never wrote its PID file. Failing.");
2802
2803 service_unwatch_pid_file(s);
2804 if (s->state == SERVICE_START)
2805 service_enter_stop_post(s, SERVICE_FAILURE_PROTOCOL);
2806 else
2807 service_enter_stop(s, SERVICE_FAILURE_PROTOCOL);
2808 }
2809 break;
2810
2811 case SERVICE_RUNNING:
2812 /* service_enter_running() will figure out what to do */
2813 service_enter_running(s, SERVICE_SUCCESS);
2814 break;
2815
2816 case SERVICE_STOP_SIGABRT:
2817 case SERVICE_STOP_SIGTERM:
2818 case SERVICE_STOP_SIGKILL:
2819
2820 if (main_pid_good(s) <= 0 && !control_pid_good(s))
2821 service_enter_stop_post(s, SERVICE_SUCCESS);
2822
2823 break;
2824
2825 case SERVICE_STOP_POST:
2826 case SERVICE_FINAL_SIGTERM:
2827 case SERVICE_FINAL_SIGKILL:
2828 if (main_pid_good(s) <= 0 && !control_pid_good(s))
2829 service_enter_dead(s, SERVICE_SUCCESS, true);
2830
2831 break;
2832
2833 default:
2834 ;
2835 }
2836 }
2837
2838 static void service_sigchld_event(Unit *u, pid_t pid, int code, int status) {
2839 Service *s = SERVICE(u);
2840 ServiceResult f;
2841
2842 assert(s);
2843 assert(pid >= 0);
2844
2845 if (is_clean_exit(code, status, s->type == SERVICE_ONESHOT ? EXIT_CLEAN_COMMAND : EXIT_CLEAN_DAEMON, &s->success_status))
2846 f = SERVICE_SUCCESS;
2847 else if (code == CLD_EXITED)
2848 f = SERVICE_FAILURE_EXIT_CODE;
2849 else if (code == CLD_KILLED)
2850 f = SERVICE_FAILURE_SIGNAL;
2851 else if (code == CLD_DUMPED)
2852 f = SERVICE_FAILURE_CORE_DUMP;
2853 else
2854 assert_not_reached("Unknown code");
2855
2856 if (s->main_pid == pid) {
2857 /* Forking services may occasionally move to a new PID.
2858 * As long as they update the PID file before exiting the old
2859 * PID, they're fine. */
2860 if (service_load_pid_file(s, false) == 0)
2861 return;
2862
2863 s->main_pid = 0;
2864 exec_status_exit(&s->main_exec_status, &s->exec_context, pid, code, status);
2865
2866 if (s->main_command) {
2867 /* If this is not a forking service than the
2868 * main process got started and hence we copy
2869 * the exit status so that it is recorded both
2870 * as main and as control process exit
2871 * status */
2872
2873 s->main_command->exec_status = s->main_exec_status;
2874
2875 if (s->main_command->ignore)
2876 f = SERVICE_SUCCESS;
2877 } else if (s->exec_command[SERVICE_EXEC_START]) {
2878
2879 /* If this is a forked process, then we should
2880 * ignore the return value if this was
2881 * configured for the starter process */
2882
2883 if (s->exec_command[SERVICE_EXEC_START]->ignore)
2884 f = SERVICE_SUCCESS;
2885 }
2886
2887 /* When this is a successful exit, let's log about the exit code on DEBUG level. If this is a failure
2888 * and the process exited on its own via exit(), then let's make this a NOTICE, under the assumption
2889 * that the service already logged the reason at a higher log level on its own. However, if the service
2890 * died due to a signal, then it most likely didn't say anything about any reason, hence let's raise
2891 * our log level to WARNING then. */
2892
2893 log_struct(f == SERVICE_SUCCESS ? LOG_DEBUG :
2894 (code == CLD_EXITED ? LOG_NOTICE : LOG_WARNING),
2895 LOG_UNIT_MESSAGE(u, "Main process exited, code=%s, status=%i/%s",
2896 sigchld_code_to_string(code), status,
2897 strna(code == CLD_EXITED
2898 ? exit_status_to_string(status, EXIT_STATUS_FULL)
2899 : signal_to_string(status))),
2900 "EXIT_CODE=%s", sigchld_code_to_string(code),
2901 "EXIT_STATUS=%i", status,
2902 LOG_UNIT_ID(u),
2903 NULL);
2904
2905 if (s->result == SERVICE_SUCCESS)
2906 s->result = f;
2907
2908 if (s->main_command &&
2909 s->main_command->command_next &&
2910 f == SERVICE_SUCCESS) {
2911
2912 /* There is another command to *
2913 * execute, so let's do that. */
2914
2915 log_unit_debug(u, "Running next main command for state %s.", service_state_to_string(s->state));
2916 service_run_next_main(s);
2917
2918 } else {
2919
2920 /* The service exited, so the service is officially
2921 * gone. */
2922 s->main_command = NULL;
2923
2924 switch (s->state) {
2925
2926 case SERVICE_START_POST:
2927 case SERVICE_RELOAD:
2928 case SERVICE_STOP:
2929 /* Need to wait until the operation is
2930 * done */
2931 break;
2932
2933 case SERVICE_START:
2934 if (s->type == SERVICE_ONESHOT) {
2935 /* This was our main goal, so let's go on */
2936 if (f == SERVICE_SUCCESS)
2937 service_enter_start_post(s);
2938 else
2939 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
2940 break;
2941 } else if (s->type == SERVICE_NOTIFY) {
2942 /* Only enter running through a notification, so that the
2943 * SERVICE_START state signifies that no ready notification
2944 * has been received */
2945 if (f != SERVICE_SUCCESS)
2946 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
2947 else if (!s->remain_after_exit)
2948 /* The service has never been active */
2949 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_PROTOCOL);
2950 break;
2951 }
2952
2953 /* Fall through */
2954
2955 case SERVICE_RUNNING:
2956 service_enter_running(s, f);
2957 break;
2958
2959 case SERVICE_STOP_SIGABRT:
2960 case SERVICE_STOP_SIGTERM:
2961 case SERVICE_STOP_SIGKILL:
2962
2963 if (!control_pid_good(s))
2964 service_enter_stop_post(s, f);
2965
2966 /* If there is still a control process, wait for that first */
2967 break;
2968
2969 case SERVICE_STOP_POST:
2970 case SERVICE_FINAL_SIGTERM:
2971 case SERVICE_FINAL_SIGKILL:
2972
2973 if (!control_pid_good(s))
2974 service_enter_dead(s, f, true);
2975 break;
2976
2977 default:
2978 assert_not_reached("Uh, main process died at wrong time.");
2979 }
2980 }
2981
2982 } else if (s->control_pid == pid) {
2983 s->control_pid = 0;
2984
2985 if (s->control_command) {
2986 exec_status_exit(&s->control_command->exec_status, &s->exec_context, pid, code, status);
2987
2988 if (s->control_command->ignore)
2989 f = SERVICE_SUCCESS;
2990 }
2991
2992 log_unit_full(u, f == SERVICE_SUCCESS ? LOG_DEBUG : LOG_NOTICE, 0,
2993 "Control process exited, code=%s status=%i",
2994 sigchld_code_to_string(code), status);
2995
2996 if (s->result == SERVICE_SUCCESS)
2997 s->result = f;
2998
2999 /* Immediately get rid of the cgroup, so that the
3000 * kernel doesn't delay the cgroup empty messages for
3001 * the service cgroup any longer than necessary */
3002 service_kill_control_processes(s);
3003
3004 if (s->control_command &&
3005 s->control_command->command_next &&
3006 f == SERVICE_SUCCESS) {
3007
3008 /* There is another command to *
3009 * execute, so let's do that. */
3010
3011 log_unit_debug(u, "Running next control command for state %s.", service_state_to_string(s->state));
3012 service_run_next_control(s);
3013
3014 } else {
3015 /* No further commands for this step, so let's
3016 * figure out what to do next */
3017
3018 s->control_command = NULL;
3019 s->control_command_id = _SERVICE_EXEC_COMMAND_INVALID;
3020
3021 log_unit_debug(u, "Got final SIGCHLD for state %s.", service_state_to_string(s->state));
3022
3023 switch (s->state) {
3024
3025 case SERVICE_START_PRE:
3026 if (f == SERVICE_SUCCESS)
3027 service_enter_start(s);
3028 else
3029 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3030 break;
3031
3032 case SERVICE_START:
3033 if (s->type != SERVICE_FORKING)
3034 /* Maybe spurious event due to a reload that changed the type? */
3035 break;
3036
3037 if (f != SERVICE_SUCCESS) {
3038 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3039 break;
3040 }
3041
3042 if (s->pid_file) {
3043 bool has_start_post;
3044 int r;
3045
3046 /* Let's try to load the pid file here if we can.
3047 * The PID file might actually be created by a START_POST
3048 * script. In that case don't worry if the loading fails. */
3049
3050 has_start_post = !!s->exec_command[SERVICE_EXEC_START_POST];
3051 r = service_load_pid_file(s, !has_start_post);
3052 if (!has_start_post && r < 0) {
3053 r = service_demand_pid_file(s);
3054 if (r < 0 || !cgroup_good(s))
3055 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_PROTOCOL);
3056 break;
3057 }
3058 } else
3059 service_search_main_pid(s);
3060
3061 service_enter_start_post(s);
3062 break;
3063
3064 case SERVICE_START_POST:
3065 if (f != SERVICE_SUCCESS) {
3066 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3067 break;
3068 }
3069
3070 if (s->pid_file) {
3071 int r;
3072
3073 r = service_load_pid_file(s, true);
3074 if (r < 0) {
3075 r = service_demand_pid_file(s);
3076 if (r < 0 || !cgroup_good(s))
3077 service_enter_stop(s, SERVICE_FAILURE_PROTOCOL);
3078 break;
3079 }
3080 } else
3081 service_search_main_pid(s);
3082
3083 service_enter_running(s, SERVICE_SUCCESS);
3084 break;
3085
3086 case SERVICE_RELOAD:
3087 if (f == SERVICE_SUCCESS)
3088 if (service_load_pid_file(s, true) < 0)
3089 service_search_main_pid(s);
3090
3091 s->reload_result = f;
3092 service_enter_running(s, SERVICE_SUCCESS);
3093 break;
3094
3095 case SERVICE_STOP:
3096 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3097 break;
3098
3099 case SERVICE_STOP_SIGABRT:
3100 case SERVICE_STOP_SIGTERM:
3101 case SERVICE_STOP_SIGKILL:
3102 if (main_pid_good(s) <= 0)
3103 service_enter_stop_post(s, f);
3104
3105 /* If there is still a service
3106 * process around, wait until
3107 * that one quit, too */
3108 break;
3109
3110 case SERVICE_STOP_POST:
3111 case SERVICE_FINAL_SIGTERM:
3112 case SERVICE_FINAL_SIGKILL:
3113 if (main_pid_good(s) <= 0)
3114 service_enter_dead(s, f, true);
3115 break;
3116
3117 default:
3118 assert_not_reached("Uh, control process died at wrong time.");
3119 }
3120 }
3121 }
3122
3123 /* Notify clients about changed exit status */
3124 unit_add_to_dbus_queue(u);
3125
3126 /* We got one SIGCHLD for the service, let's watch all
3127 * processes that are now running of the service, and watch
3128 * that. Among the PIDs we then watch will be children
3129 * reassigned to us, which hopefully allows us to identify
3130 * when all children are gone */
3131 unit_tidy_watch_pids(u, s->main_pid, s->control_pid);
3132 unit_watch_all_pids(u);
3133
3134 /* If the PID set is empty now, then let's finish this off
3135 (On unified we use proper notifications) */
3136 if (cg_unified_controller(SYSTEMD_CGROUP_CONTROLLER) == 0 && set_isempty(u->pids))
3137 service_notify_cgroup_empty_event(u);
3138 }
3139
3140 static int service_dispatch_timer(sd_event_source *source, usec_t usec, void *userdata) {
3141 Service *s = SERVICE(userdata);
3142
3143 assert(s);
3144 assert(source == s->timer_event_source);
3145
3146 switch (s->state) {
3147
3148 case SERVICE_START_PRE:
3149 case SERVICE_START:
3150 log_unit_warning(UNIT(s), "%s operation timed out. Terminating.", s->state == SERVICE_START ? "Start" : "Start-pre");
3151 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_TIMEOUT);
3152 break;
3153
3154 case SERVICE_START_POST:
3155 log_unit_warning(UNIT(s), "Start-post operation timed out. Stopping.");
3156 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_TIMEOUT);
3157 break;
3158
3159 case SERVICE_RUNNING:
3160 log_unit_warning(UNIT(s), "Service reached runtime time limit. Stopping.");
3161 service_enter_stop(s, SERVICE_FAILURE_TIMEOUT);
3162 break;
3163
3164 case SERVICE_RELOAD:
3165 log_unit_warning(UNIT(s), "Reload operation timed out. Killing reload process.");
3166 service_kill_control_processes(s);
3167 s->reload_result = SERVICE_FAILURE_TIMEOUT;
3168 service_enter_running(s, SERVICE_SUCCESS);
3169 break;
3170
3171 case SERVICE_STOP:
3172 log_unit_warning(UNIT(s), "Stopping timed out. Terminating.");
3173 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_TIMEOUT);
3174 break;
3175
3176 case SERVICE_STOP_SIGABRT:
3177 log_unit_warning(UNIT(s), "State 'stop-sigabrt' timed out. Terminating.");
3178 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_TIMEOUT);
3179 break;
3180
3181 case SERVICE_STOP_SIGTERM:
3182 if (s->kill_context.send_sigkill) {
3183 log_unit_warning(UNIT(s), "State 'stop-sigterm' timed out. Killing.");
3184 service_enter_signal(s, SERVICE_STOP_SIGKILL, SERVICE_FAILURE_TIMEOUT);
3185 } else {
3186 log_unit_warning(UNIT(s), "State 'stop-sigterm' timed out. Skipping SIGKILL.");
3187 service_enter_stop_post(s, SERVICE_FAILURE_TIMEOUT);
3188 }
3189
3190 break;
3191
3192 case SERVICE_STOP_SIGKILL:
3193 /* Uh, we sent a SIGKILL and it is still not gone?
3194 * Must be something we cannot kill, so let's just be
3195 * weirded out and continue */
3196
3197 log_unit_warning(UNIT(s), "Processes still around after SIGKILL. Ignoring.");
3198 service_enter_stop_post(s, SERVICE_FAILURE_TIMEOUT);
3199 break;
3200
3201 case SERVICE_STOP_POST:
3202 log_unit_warning(UNIT(s), "State 'stop-post' timed out. Terminating.");
3203 service_enter_signal(s, SERVICE_FINAL_SIGTERM, SERVICE_FAILURE_TIMEOUT);
3204 break;
3205
3206 case SERVICE_FINAL_SIGTERM:
3207 if (s->kill_context.send_sigkill) {
3208 log_unit_warning(UNIT(s), "State 'stop-final-sigterm' timed out. Killing.");
3209 service_enter_signal(s, SERVICE_FINAL_SIGKILL, SERVICE_FAILURE_TIMEOUT);
3210 } else {
3211 log_unit_warning(UNIT(s), "State 'stop-final-sigterm' timed out. Skipping SIGKILL. Entering failed mode.");
3212 service_enter_dead(s, SERVICE_FAILURE_TIMEOUT, false);
3213 }
3214
3215 break;
3216
3217 case SERVICE_FINAL_SIGKILL:
3218 log_unit_warning(UNIT(s), "Processes still around after final SIGKILL. Entering failed mode.");
3219 service_enter_dead(s, SERVICE_FAILURE_TIMEOUT, true);
3220 break;
3221
3222 case SERVICE_AUTO_RESTART:
3223 log_unit_info(UNIT(s),
3224 s->restart_usec > 0 ?
3225 "Service hold-off time over, scheduling restart." :
3226 "Service has no hold-off time, scheduling restart.");
3227 service_enter_restart(s);
3228 break;
3229
3230 default:
3231 assert_not_reached("Timeout at wrong time.");
3232 }
3233
3234 return 0;
3235 }
3236
3237 static int service_dispatch_watchdog(sd_event_source *source, usec_t usec, void *userdata) {
3238 Service *s = SERVICE(userdata);
3239 char t[FORMAT_TIMESPAN_MAX];
3240 usec_t watchdog_usec;
3241
3242 assert(s);
3243 assert(source == s->watchdog_event_source);
3244
3245 watchdog_usec = service_get_watchdog_usec(s);
3246
3247 log_unit_error(UNIT(s), "Watchdog timeout (limit %s)!",
3248 format_timespan(t, sizeof(t), watchdog_usec, 1));
3249
3250 service_enter_signal(s, SERVICE_STOP_SIGABRT, SERVICE_FAILURE_WATCHDOG);
3251
3252 return 0;
3253 }
3254
3255 static void service_notify_message(Unit *u, pid_t pid, char **tags, FDSet *fds) {
3256 Service *s = SERVICE(u);
3257 _cleanup_free_ char *cc = NULL;
3258 bool notify_dbus = false;
3259 const char *e;
3260
3261 assert(u);
3262
3263 cc = strv_join(tags, ", ");
3264
3265 if (s->notify_access == NOTIFY_NONE) {
3266 log_unit_warning(u, "Got notification message from PID "PID_FMT", but reception is disabled.", pid);
3267 return;
3268 } else if (s->notify_access == NOTIFY_MAIN && pid != s->main_pid) {
3269 if (s->main_pid != 0)
3270 log_unit_warning(u, "Got notification message from PID "PID_FMT", but reception only permitted for main PID "PID_FMT, pid, s->main_pid);
3271 else
3272 log_unit_warning(u, "Got notification message from PID "PID_FMT", but reception only permitted for main PID which is currently not known", pid);
3273 return;
3274 } else if (s->notify_access == NOTIFY_EXEC && pid != s->main_pid && pid != s->control_pid) {
3275 if (s->main_pid != 0 && s->control_pid != 0)
3276 log_unit_warning(u, "Got notification message from PID "PID_FMT", but reception only permitted for main PID "PID_FMT" and control PID "PID_FMT,
3277 pid, s->main_pid, s->control_pid);
3278 else if (s->main_pid != 0)
3279 log_unit_warning(u, "Got notification message from PID "PID_FMT", but reception only permitted for main PID "PID_FMT, pid, s->main_pid);
3280 else if (s->control_pid != 0)
3281 log_unit_warning(u, "Got notification message from PID "PID_FMT", but reception only permitted for control PID "PID_FMT, pid, s->control_pid);
3282 else
3283 log_unit_warning(u, "Got notification message from PID "PID_FMT", but reception only permitted for main PID and control PID which are currently not known", pid);
3284 return;
3285 } else
3286 log_unit_debug(u, "Got notification message from PID "PID_FMT" (%s)", pid, isempty(cc) ? "n/a" : cc);
3287
3288 /* Interpret MAINPID= */
3289 e = strv_find_startswith(tags, "MAINPID=");
3290 if (e && IN_SET(s->state, SERVICE_START, SERVICE_START_POST, SERVICE_RUNNING, SERVICE_RELOAD)) {
3291 if (parse_pid(e, &pid) < 0)
3292 log_unit_warning(u, "Failed to parse MAINPID= field in notification message: %s", e);
3293 else if (pid == s->control_pid)
3294 log_unit_warning(u, "A control process cannot also be the main process");
3295 else if (pid == getpid_cached() || pid == 1)
3296 log_unit_warning(u, "Service manager can't be main process, ignoring sd_notify() MAINPID= field");
3297 else {
3298 service_set_main_pid(s, pid);
3299 unit_watch_pid(UNIT(s), pid);
3300 notify_dbus = true;
3301 }
3302 }
3303
3304 /* Interpret RELOADING= */
3305 if (strv_find(tags, "RELOADING=1")) {
3306
3307 s->notify_state = NOTIFY_RELOADING;
3308
3309 if (s->state == SERVICE_RUNNING)
3310 service_enter_reload_by_notify(s);
3311
3312 notify_dbus = true;
3313 }
3314
3315 /* Interpret READY= */
3316 if (strv_find(tags, "READY=1")) {
3317
3318 s->notify_state = NOTIFY_READY;
3319
3320 /* Type=notify services inform us about completed
3321 * initialization with READY=1 */
3322 if (s->type == SERVICE_NOTIFY && s->state == SERVICE_START)
3323 service_enter_start_post(s);
3324
3325 /* Sending READY=1 while we are reloading informs us
3326 * that the reloading is complete */
3327 if (s->state == SERVICE_RELOAD && s->control_pid == 0)
3328 service_enter_running(s, SERVICE_SUCCESS);
3329
3330 notify_dbus = true;
3331 }
3332
3333 /* Interpret STOPPING= */
3334 if (strv_find(tags, "STOPPING=1")) {
3335
3336 s->notify_state = NOTIFY_STOPPING;
3337
3338 if (s->state == SERVICE_RUNNING)
3339 service_enter_stop_by_notify(s);
3340
3341 notify_dbus = true;
3342 }
3343
3344 /* Interpret STATUS= */
3345 e = strv_find_startswith(tags, "STATUS=");
3346 if (e) {
3347 _cleanup_free_ char *t = NULL;
3348
3349 if (!isempty(e)) {
3350 if (!utf8_is_valid(e))
3351 log_unit_warning(u, "Status message in notification message is not UTF-8 clean.");
3352 else {
3353 t = strdup(e);
3354 if (!t)
3355 log_oom();
3356 }
3357 }
3358
3359 if (!streq_ptr(s->status_text, t)) {
3360
3361 free_and_replace(s->status_text, t);
3362
3363 notify_dbus = true;
3364 }
3365 }
3366
3367 /* Interpret ERRNO= */
3368 e = strv_find_startswith(tags, "ERRNO=");
3369 if (e) {
3370 int status_errno;
3371
3372 if (safe_atoi(e, &status_errno) < 0 || status_errno < 0)
3373 log_unit_warning(u, "Failed to parse ERRNO= field in notification message: %s", e);
3374 else {
3375 if (s->status_errno != status_errno) {
3376 s->status_errno = status_errno;
3377 notify_dbus = true;
3378 }
3379 }
3380 }
3381
3382 /* Interpret WATCHDOG= */
3383 if (strv_find(tags, "WATCHDOG=1"))
3384 service_reset_watchdog(s);
3385
3386 if (strv_find(tags, "FDSTORE=1")) {
3387 const char *name;
3388
3389 name = strv_find_startswith(tags, "FDNAME=");
3390 if (name && !fdname_is_valid(name)) {
3391 log_unit_warning(u, "Passed FDNAME= name is invalid, ignoring.");
3392 name = NULL;
3393 }
3394
3395 service_add_fd_store_set(s, fds, name);
3396 }
3397
3398 e = strv_find_startswith(tags, "WATCHDOG_USEC=");
3399 if (e) {
3400 usec_t watchdog_override_usec;
3401 if (safe_atou64(e, &watchdog_override_usec) < 0)
3402 log_unit_warning(u, "Failed to parse WATCHDOG_USEC=%s", e);
3403 else
3404 service_reset_watchdog_timeout(s, watchdog_override_usec);
3405 }
3406
3407 /* Notify clients about changed status or main pid */
3408 if (notify_dbus)
3409 unit_add_to_dbus_queue(u);
3410 }
3411
3412 static int service_get_timeout(Unit *u, usec_t *timeout) {
3413 Service *s = SERVICE(u);
3414 uint64_t t;
3415 int r;
3416
3417 if (!s->timer_event_source)
3418 return 0;
3419
3420 r = sd_event_source_get_time(s->timer_event_source, &t);
3421 if (r < 0)
3422 return r;
3423 if (t == USEC_INFINITY)
3424 return 0;
3425
3426 *timeout = t;
3427 return 1;
3428 }
3429
3430 static void service_bus_name_owner_change(
3431 Unit *u,
3432 const char *name,
3433 const char *old_owner,
3434 const char *new_owner) {
3435
3436 Service *s = SERVICE(u);
3437 int r;
3438
3439 assert(s);
3440 assert(name);
3441
3442 assert(streq(s->bus_name, name));
3443 assert(old_owner || new_owner);
3444
3445 if (old_owner && new_owner)
3446 log_unit_debug(u, "D-Bus name %s changed owner from %s to %s", name, old_owner, new_owner);
3447 else if (old_owner)
3448 log_unit_debug(u, "D-Bus name %s no longer registered by %s", name, old_owner);
3449 else
3450 log_unit_debug(u, "D-Bus name %s now registered by %s", name, new_owner);
3451
3452 s->bus_name_good = !!new_owner;
3453
3454 /* Track the current owner, so we can reconstruct changes after a daemon reload */
3455 r = free_and_strdup(&s->bus_name_owner, new_owner);
3456 if (r < 0) {
3457 log_unit_error_errno(u, r, "Unable to set new bus name owner %s: %m", new_owner);
3458 return;
3459 }
3460
3461 if (s->type == SERVICE_DBUS) {
3462
3463 /* service_enter_running() will figure out what to
3464 * do */
3465 if (s->state == SERVICE_RUNNING)
3466 service_enter_running(s, SERVICE_SUCCESS);
3467 else if (s->state == SERVICE_START && new_owner)
3468 service_enter_start_post(s);
3469
3470 } else if (new_owner &&
3471 s->main_pid <= 0 &&
3472 (s->state == SERVICE_START ||
3473 s->state == SERVICE_START_POST ||
3474 s->state == SERVICE_RUNNING ||
3475 s->state == SERVICE_RELOAD)) {
3476
3477 _cleanup_(sd_bus_creds_unrefp) sd_bus_creds *creds = NULL;
3478 pid_t pid;
3479
3480 /* Try to acquire PID from bus service */
3481
3482 r = sd_bus_get_name_creds(u->manager->api_bus, name, SD_BUS_CREDS_PID, &creds);
3483 if (r >= 0)
3484 r = sd_bus_creds_get_pid(creds, &pid);
3485 if (r >= 0) {
3486 log_unit_debug(u, "D-Bus name %s is now owned by process " PID_FMT, name, pid);
3487
3488 service_set_main_pid(s, pid);
3489 unit_watch_pid(UNIT(s), pid);
3490 }
3491 }
3492 }
3493
3494 int service_set_socket_fd(Service *s, int fd, Socket *sock, bool selinux_context_net) {
3495 _cleanup_free_ char *peer = NULL;
3496 int r;
3497
3498 assert(s);
3499 assert(fd >= 0);
3500
3501 /* This is called by the socket code when instantiating a new service for a stream socket and the socket needs
3502 * to be configured. We take ownership of the passed fd on success. */
3503
3504 if (UNIT(s)->load_state != UNIT_LOADED)
3505 return -EINVAL;
3506
3507 if (s->socket_fd >= 0)
3508 return -EBUSY;
3509
3510 if (s->state != SERVICE_DEAD)
3511 return -EAGAIN;
3512
3513 if (getpeername_pretty(fd, true, &peer) >= 0) {
3514
3515 if (UNIT(s)->description) {
3516 _cleanup_free_ char *a;
3517
3518 a = strjoin(UNIT(s)->description, " (", peer, ")");
3519 if (!a)
3520 return -ENOMEM;
3521
3522 r = unit_set_description(UNIT(s), a);
3523 } else
3524 r = unit_set_description(UNIT(s), peer);
3525
3526 if (r < 0)
3527 return r;
3528 }
3529
3530 r = unit_add_two_dependencies(UNIT(sock), UNIT_BEFORE, UNIT_TRIGGERS, UNIT(s), false);
3531 if (r < 0)
3532 return r;
3533
3534 s->socket_fd = fd;
3535 s->socket_fd_selinux_context_net = selinux_context_net;
3536
3537 unit_ref_set(&s->accept_socket, UNIT(sock));
3538 return 0;
3539 }
3540
3541 static void service_reset_failed(Unit *u) {
3542 Service *s = SERVICE(u);
3543
3544 assert(s);
3545
3546 if (s->state == SERVICE_FAILED)
3547 service_set_state(s, SERVICE_DEAD);
3548
3549 s->result = SERVICE_SUCCESS;
3550 s->reload_result = SERVICE_SUCCESS;
3551 }
3552
3553 static int service_kill(Unit *u, KillWho who, int signo, sd_bus_error *error) {
3554 Service *s = SERVICE(u);
3555
3556 return unit_kill_common(u, who, signo, s->main_pid, s->control_pid, error);
3557 }
3558
3559 static int service_main_pid(Unit *u) {
3560 Service *s = SERVICE(u);
3561
3562 assert(s);
3563
3564 return s->main_pid;
3565 }
3566
3567 static int service_control_pid(Unit *u) {
3568 Service *s = SERVICE(u);
3569
3570 assert(s);
3571
3572 return s->control_pid;
3573 }
3574
3575 static const char* const service_restart_table[_SERVICE_RESTART_MAX] = {
3576 [SERVICE_RESTART_NO] = "no",
3577 [SERVICE_RESTART_ON_SUCCESS] = "on-success",
3578 [SERVICE_RESTART_ON_FAILURE] = "on-failure",
3579 [SERVICE_RESTART_ON_ABNORMAL] = "on-abnormal",
3580 [SERVICE_RESTART_ON_WATCHDOG] = "on-watchdog",
3581 [SERVICE_RESTART_ON_ABORT] = "on-abort",
3582 [SERVICE_RESTART_ALWAYS] = "always",
3583 };
3584
3585 DEFINE_STRING_TABLE_LOOKUP(service_restart, ServiceRestart);
3586
3587 static const char* const service_type_table[_SERVICE_TYPE_MAX] = {
3588 [SERVICE_SIMPLE] = "simple",
3589 [SERVICE_FORKING] = "forking",
3590 [SERVICE_ONESHOT] = "oneshot",
3591 [SERVICE_DBUS] = "dbus",
3592 [SERVICE_NOTIFY] = "notify",
3593 [SERVICE_IDLE] = "idle"
3594 };
3595
3596 DEFINE_STRING_TABLE_LOOKUP(service_type, ServiceType);
3597
3598 static const char* const service_exec_command_table[_SERVICE_EXEC_COMMAND_MAX] = {
3599 [SERVICE_EXEC_START_PRE] = "ExecStartPre",
3600 [SERVICE_EXEC_START] = "ExecStart",
3601 [SERVICE_EXEC_START_POST] = "ExecStartPost",
3602 [SERVICE_EXEC_RELOAD] = "ExecReload",
3603 [SERVICE_EXEC_STOP] = "ExecStop",
3604 [SERVICE_EXEC_STOP_POST] = "ExecStopPost",
3605 };
3606
3607 DEFINE_STRING_TABLE_LOOKUP(service_exec_command, ServiceExecCommand);
3608
3609 static const char* const notify_state_table[_NOTIFY_STATE_MAX] = {
3610 [NOTIFY_UNKNOWN] = "unknown",
3611 [NOTIFY_READY] = "ready",
3612 [NOTIFY_RELOADING] = "reloading",
3613 [NOTIFY_STOPPING] = "stopping",
3614 };
3615
3616 DEFINE_STRING_TABLE_LOOKUP(notify_state, NotifyState);
3617
3618 static const char* const service_result_table[_SERVICE_RESULT_MAX] = {
3619 [SERVICE_SUCCESS] = "success",
3620 [SERVICE_FAILURE_RESOURCES] = "resources",
3621 [SERVICE_FAILURE_PROTOCOL] = "protocol",
3622 [SERVICE_FAILURE_TIMEOUT] = "timeout",
3623 [SERVICE_FAILURE_EXIT_CODE] = "exit-code",
3624 [SERVICE_FAILURE_SIGNAL] = "signal",
3625 [SERVICE_FAILURE_CORE_DUMP] = "core-dump",
3626 [SERVICE_FAILURE_WATCHDOG] = "watchdog",
3627 [SERVICE_FAILURE_START_LIMIT_HIT] = "start-limit-hit",
3628 };
3629
3630 DEFINE_STRING_TABLE_LOOKUP(service_result, ServiceResult);
3631
3632 const UnitVTable service_vtable = {
3633 .object_size = sizeof(Service),
3634 .exec_context_offset = offsetof(Service, exec_context),
3635 .cgroup_context_offset = offsetof(Service, cgroup_context),
3636 .kill_context_offset = offsetof(Service, kill_context),
3637 .exec_runtime_offset = offsetof(Service, exec_runtime),
3638 .dynamic_creds_offset = offsetof(Service, dynamic_creds),
3639
3640 .sections =
3641 "Unit\0"
3642 "Service\0"
3643 "Install\0",
3644 .private_section = "Service",
3645
3646 .init = service_init,
3647 .done = service_done,
3648 .load = service_load,
3649 .release_resources = service_release_resources,
3650
3651 .coldplug = service_coldplug,
3652
3653 .dump = service_dump,
3654
3655 .start = service_start,
3656 .stop = service_stop,
3657 .reload = service_reload,
3658
3659 .can_reload = service_can_reload,
3660
3661 .kill = service_kill,
3662
3663 .serialize = service_serialize,
3664 .deserialize_item = service_deserialize_item,
3665
3666 .active_state = service_active_state,
3667 .sub_state_to_string = service_sub_state_to_string,
3668
3669 .check_gc = service_check_gc,
3670
3671 .sigchld_event = service_sigchld_event,
3672
3673 .reset_failed = service_reset_failed,
3674
3675 .notify_cgroup_empty = service_notify_cgroup_empty_event,
3676 .notify_message = service_notify_message,
3677
3678 .main_pid = service_main_pid,
3679 .control_pid = service_control_pid,
3680
3681 .bus_name_owner_change = service_bus_name_owner_change,
3682
3683 .bus_vtable = bus_service_vtable,
3684 .bus_set_property = bus_service_set_property,
3685 .bus_commit_properties = bus_service_commit_properties,
3686
3687 .get_timeout = service_get_timeout,
3688 .can_transient = true,
3689
3690 .status_message_formats = {
3691 .starting_stopping = {
3692 [0] = "Starting %s...",
3693 [1] = "Stopping %s...",
3694 },
3695 .finished_start_job = {
3696 [JOB_DONE] = "Started %s.",
3697 [JOB_FAILED] = "Failed to start %s.",
3698 },
3699 .finished_stop_job = {
3700 [JOB_DONE] = "Stopped %s.",
3701 [JOB_FAILED] = "Stopped (with error) %s.",
3702 },
3703 },
3704 };
Unnamed repository; edit this file 'description' to name the repository.