1 /* SPDX-License-Identifier: LGPL-2.1-or-later */
9 #include "sd-messages.h"
11 #include "alloc-util.h"
13 #include "bus-error.h"
14 #include "bus-kernel.h"
17 #include "constants.h"
18 #include "dbus-service.h"
19 #include "dbus-unit.h"
20 #include "devnum-util.h"
23 #include "exit-status.h"
26 #include "format-util.h"
28 #include "load-dropin.h"
29 #include "load-fragment.h"
32 #include "missing_audit.h"
33 #include "open-file.h"
34 #include "parse-util.h"
35 #include "path-util.h"
36 #include "process-util.h"
37 #include "random-util.h"
38 #include "selinux-util.h"
39 #include "serialize.h"
41 #include "signal-util.h"
43 #include "stdio-util.h"
44 #include "string-table.h"
45 #include "string-util.h"
47 #include "unit-name.h"
51 #define service_spawn(...) service_spawn_internal(__func__, __VA_ARGS__)
53 static const UnitActiveState state_translation_table
[_SERVICE_STATE_MAX
] = {
54 [SERVICE_DEAD
] = UNIT_INACTIVE
,
55 [SERVICE_CONDITION
] = UNIT_ACTIVATING
,
56 [SERVICE_START_PRE
] = UNIT_ACTIVATING
,
57 [SERVICE_START
] = UNIT_ACTIVATING
,
58 [SERVICE_START_POST
] = UNIT_ACTIVATING
,
59 [SERVICE_RUNNING
] = UNIT_ACTIVE
,
60 [SERVICE_EXITED
] = UNIT_ACTIVE
,
61 [SERVICE_RELOAD
] = UNIT_RELOADING
,
62 [SERVICE_RELOAD_SIGNAL
] = UNIT_RELOADING
,
63 [SERVICE_RELOAD_NOTIFY
] = UNIT_RELOADING
,
64 [SERVICE_STOP
] = UNIT_DEACTIVATING
,
65 [SERVICE_STOP_WATCHDOG
] = UNIT_DEACTIVATING
,
66 [SERVICE_STOP_SIGTERM
] = UNIT_DEACTIVATING
,
67 [SERVICE_STOP_SIGKILL
] = UNIT_DEACTIVATING
,
68 [SERVICE_STOP_POST
] = UNIT_DEACTIVATING
,
69 [SERVICE_FINAL_WATCHDOG
] = UNIT_DEACTIVATING
,
70 [SERVICE_FINAL_SIGTERM
] = UNIT_DEACTIVATING
,
71 [SERVICE_FINAL_SIGKILL
] = UNIT_DEACTIVATING
,
72 [SERVICE_FAILED
] = UNIT_FAILED
,
73 [SERVICE_DEAD_BEFORE_AUTO_RESTART
] = UNIT_INACTIVE
,
74 [SERVICE_FAILED_BEFORE_AUTO_RESTART
] = UNIT_FAILED
,
75 [SERVICE_DEAD_RESOURCES_PINNED
] = UNIT_INACTIVE
,
76 [SERVICE_AUTO_RESTART
] = UNIT_ACTIVATING
,
77 [SERVICE_AUTO_RESTART_QUEUED
] = UNIT_ACTIVATING
,
78 [SERVICE_CLEANING
] = UNIT_MAINTENANCE
,
81 /* For Type=idle we never want to delay any other jobs, hence we
82 * consider idle jobs active as soon as we start working on them */
83 static const UnitActiveState state_translation_table_idle
[_SERVICE_STATE_MAX
] = {
84 [SERVICE_DEAD
] = UNIT_INACTIVE
,
85 [SERVICE_CONDITION
] = UNIT_ACTIVE
,
86 [SERVICE_START_PRE
] = UNIT_ACTIVE
,
87 [SERVICE_START
] = UNIT_ACTIVE
,
88 [SERVICE_START_POST
] = UNIT_ACTIVE
,
89 [SERVICE_RUNNING
] = UNIT_ACTIVE
,
90 [SERVICE_EXITED
] = UNIT_ACTIVE
,
91 [SERVICE_RELOAD
] = UNIT_RELOADING
,
92 [SERVICE_RELOAD_SIGNAL
] = UNIT_RELOADING
,
93 [SERVICE_RELOAD_NOTIFY
] = UNIT_RELOADING
,
94 [SERVICE_STOP
] = UNIT_DEACTIVATING
,
95 [SERVICE_STOP_WATCHDOG
] = UNIT_DEACTIVATING
,
96 [SERVICE_STOP_SIGTERM
] = UNIT_DEACTIVATING
,
97 [SERVICE_STOP_SIGKILL
] = UNIT_DEACTIVATING
,
98 [SERVICE_STOP_POST
] = UNIT_DEACTIVATING
,
99 [SERVICE_FINAL_WATCHDOG
] = UNIT_DEACTIVATING
,
100 [SERVICE_FINAL_SIGTERM
] = UNIT_DEACTIVATING
,
101 [SERVICE_FINAL_SIGKILL
] = UNIT_DEACTIVATING
,
102 [SERVICE_FAILED
] = UNIT_FAILED
,
103 [SERVICE_DEAD_BEFORE_AUTO_RESTART
] = UNIT_INACTIVE
,
104 [SERVICE_FAILED_BEFORE_AUTO_RESTART
] = UNIT_FAILED
,
105 [SERVICE_DEAD_RESOURCES_PINNED
] = UNIT_INACTIVE
,
106 [SERVICE_AUTO_RESTART
] = UNIT_ACTIVATING
,
107 [SERVICE_AUTO_RESTART_QUEUED
] = UNIT_ACTIVATING
,
108 [SERVICE_CLEANING
] = UNIT_MAINTENANCE
,
111 static int service_dispatch_inotify_io(sd_event_source
*source
, int fd
, uint32_t events
, void *userdata
);
112 static int service_dispatch_timer(sd_event_source
*source
, usec_t usec
, void *userdata
);
113 static int service_dispatch_watchdog(sd_event_source
*source
, usec_t usec
, void *userdata
);
114 static int service_dispatch_exec_io(sd_event_source
*source
, int fd
, uint32_t events
, void *userdata
);
116 static void service_enter_signal(Service
*s
, ServiceState state
, ServiceResult f
);
117 static void service_enter_reload_by_notify(Service
*s
);
119 static bool SERVICE_STATE_WITH_MAIN_PROCESS(ServiceState state
) {
121 SERVICE_START
, SERVICE_START_POST
,
123 SERVICE_RELOAD
, SERVICE_RELOAD_SIGNAL
, SERVICE_RELOAD_NOTIFY
,
124 SERVICE_STOP
, SERVICE_STOP_WATCHDOG
, SERVICE_STOP_SIGTERM
, SERVICE_STOP_SIGKILL
, SERVICE_STOP_POST
,
125 SERVICE_FINAL_WATCHDOG
, SERVICE_FINAL_SIGTERM
, SERVICE_FINAL_SIGKILL
);
128 static bool SERVICE_STATE_WITH_CONTROL_PROCESS(ServiceState state
) {
131 SERVICE_START_PRE
, SERVICE_START
, SERVICE_START_POST
,
132 SERVICE_RELOAD
, SERVICE_RELOAD_SIGNAL
, SERVICE_RELOAD_NOTIFY
,
133 SERVICE_STOP
, SERVICE_STOP_WATCHDOG
, SERVICE_STOP_SIGTERM
, SERVICE_STOP_SIGKILL
, SERVICE_STOP_POST
,
134 SERVICE_FINAL_WATCHDOG
, SERVICE_FINAL_SIGTERM
, SERVICE_FINAL_SIGKILL
,
138 static void service_init(Unit
*u
) {
139 Service
*s
= SERVICE(u
);
142 assert(u
->load_state
== UNIT_STUB
);
144 s
->timeout_start_usec
= u
->manager
->defaults
.timeout_start_usec
;
145 s
->timeout_stop_usec
= u
->manager
->defaults
.timeout_stop_usec
;
146 s
->timeout_abort_usec
= u
->manager
->defaults
.timeout_abort_usec
;
147 s
->timeout_abort_set
= u
->manager
->defaults
.timeout_abort_set
;
148 s
->restart_usec
= u
->manager
->defaults
.restart_usec
;
149 s
->restart_max_delay_usec
= USEC_INFINITY
;
150 s
->runtime_max_usec
= USEC_INFINITY
;
151 s
->type
= _SERVICE_TYPE_INVALID
;
152 s
->socket_fd
= -EBADF
;
153 s
->stdin_fd
= s
->stdout_fd
= s
->stderr_fd
= -EBADF
;
154 s
->guess_main_pid
= true;
155 s
->main_pid
= PIDREF_NULL
;
156 s
->control_pid
= PIDREF_NULL
;
157 s
->control_command_id
= _SERVICE_EXEC_COMMAND_INVALID
;
159 s
->exec_context
.keyring_mode
= MANAGER_IS_SYSTEM(u
->manager
) ?
160 EXEC_KEYRING_PRIVATE
: EXEC_KEYRING_INHERIT
;
162 s
->notify_access_override
= _NOTIFY_ACCESS_INVALID
;
164 s
->watchdog_original_usec
= USEC_INFINITY
;
166 s
->oom_policy
= _OOM_POLICY_INVALID
;
167 s
->reload_begin_usec
= USEC_INFINITY
;
168 s
->reload_signal
= SIGHUP
;
170 s
->fd_store_preserve_mode
= EXEC_PRESERVE_RESTART
;
173 static void service_unwatch_control_pid(Service
*s
) {
175 unit_unwatch_pidref_done(UNIT(s
), &s
->control_pid
);
178 static void service_unwatch_main_pid(Service
*s
) {
180 unit_unwatch_pidref_done(UNIT(s
), &s
->main_pid
);
183 static void service_unwatch_pid_file(Service
*s
) {
186 if (!s
->pid_file_pathspec
)
189 log_unit_debug(UNIT(s
), "Stopping watch for PID file %s", s
->pid_file_pathspec
->path
);
190 path_spec_unwatch(s
->pid_file_pathspec
);
191 path_spec_done(s
->pid_file_pathspec
);
192 s
->pid_file_pathspec
= mfree(s
->pid_file_pathspec
);
195 static int service_set_main_pidref(Service
*s
, PidRef pidref_consume
, const dual_timestamp
*start_timestamp
) {
196 _cleanup_(pidref_done
) PidRef pidref
= pidref_consume
;
201 /* Takes ownership of the specified pidref on both success and failure. */
203 if (!pidref_is_set(&pidref
))
209 if (pidref_is_self(&pidref
))
212 if (s
->main_pid_known
&& pidref_equal(&s
->main_pid
, &pidref
))
215 if (!pidref_equal(&s
->main_pid
, &pidref
)) {
216 service_unwatch_main_pid(s
);
217 exec_status_start(&s
->main_exec_status
, pidref
.pid
, start_timestamp
);
220 s
->main_pid
= TAKE_PIDREF(pidref
);
221 s
->main_pid_known
= true;
223 r
= pidref_is_my_child(&s
->main_pid
);
225 log_unit_warning_errno(UNIT(s
), r
, "Can't determine if process "PID_FMT
" is our child, assuming it is not: %m", s
->main_pid
.pid
);
226 else if (r
== 0) // FIXME: Supervise through pidfd here
227 log_unit_warning(UNIT(s
), "Supervising process "PID_FMT
" which is not our child. We'll most likely not notice when it exits.", s
->main_pid
.pid
);
228 s
->main_pid_alien
= r
<= 0;
233 void service_release_socket_fd(Service
*s
) {
236 if (s
->socket_fd
< 0 && !UNIT_ISSET(s
->accept_socket
) && !s
->socket_peer
)
239 log_unit_debug(UNIT(s
), "Closing connection socket.");
241 /* Undo the effect of service_set_socket_fd(). */
243 s
->socket_fd
= asynchronous_close(s
->socket_fd
);
245 if (UNIT_ISSET(s
->accept_socket
)) {
246 socket_connection_unref(SOCKET(UNIT_DEREF(s
->accept_socket
)));
247 unit_ref_unset(&s
->accept_socket
);
250 s
->socket_peer
= socket_peer_unref(s
->socket_peer
);
253 static void service_override_notify_access(Service
*s
, NotifyAccess notify_access_override
) {
256 s
->notify_access_override
= notify_access_override
;
258 log_unit_debug(UNIT(s
), "notify_access=%s", notify_access_to_string(s
->notify_access
));
259 log_unit_debug(UNIT(s
), "notify_access_override=%s", notify_access_to_string(s
->notify_access_override
));
262 static void service_stop_watchdog(Service
*s
) {
265 s
->watchdog_event_source
= sd_event_source_disable_unref(s
->watchdog_event_source
);
266 s
->watchdog_timestamp
= DUAL_TIMESTAMP_NULL
;
269 static void service_start_watchdog(Service
*s
) {
270 usec_t watchdog_usec
;
275 watchdog_usec
= service_get_watchdog_usec(s
);
276 if (!timestamp_is_set(watchdog_usec
)) {
277 service_stop_watchdog(s
);
281 if (s
->watchdog_event_source
) {
282 r
= sd_event_source_set_time(s
->watchdog_event_source
, usec_add(s
->watchdog_timestamp
.monotonic
, watchdog_usec
));
284 log_unit_warning_errno(UNIT(s
), r
, "Failed to reset watchdog timer: %m");
288 r
= sd_event_source_set_enabled(s
->watchdog_event_source
, SD_EVENT_ONESHOT
);
290 r
= sd_event_add_time(
291 UNIT(s
)->manager
->event
,
292 &s
->watchdog_event_source
,
294 usec_add(s
->watchdog_timestamp
.monotonic
, watchdog_usec
), 0,
295 service_dispatch_watchdog
, s
);
297 log_unit_warning_errno(UNIT(s
), r
, "Failed to add watchdog timer: %m");
301 (void) sd_event_source_set_description(s
->watchdog_event_source
, "service-watchdog");
303 /* Let's process everything else which might be a sign
304 * of living before we consider a service died. */
305 r
= sd_event_source_set_priority(s
->watchdog_event_source
, EVENT_PRIORITY_SERVICE_WATCHDOG
);
308 log_unit_warning_errno(UNIT(s
), r
, "Failed to install watchdog timer: %m");
311 usec_t
service_restart_usec_next(Service
*s
) {
312 unsigned n_restarts_next
;
316 /* When the service state is in SERVICE_*_BEFORE_AUTO_RESTART or SERVICE_AUTO_RESTART, we still need
317 * to add 1 to s->n_restarts manually, because s->n_restarts is not updated until a restart job is
318 * enqueued, i.e. state has transitioned to SERVICE_AUTO_RESTART_QUEUED. */
319 n_restarts_next
= s
->n_restarts
+ (s
->state
== SERVICE_AUTO_RESTART_QUEUED
? 0 : 1);
321 if (n_restarts_next
<= 1 ||
322 s
->restart_steps
== 0 ||
323 s
->restart_usec
== 0 ||
324 s
->restart_max_delay_usec
== USEC_INFINITY
||
325 s
->restart_usec
>= s
->restart_max_delay_usec
)
326 return s
->restart_usec
;
328 if (n_restarts_next
> s
->restart_steps
)
329 return s
->restart_max_delay_usec
;
331 /* Enforced in service_verify() and above */
332 assert(s
->restart_max_delay_usec
> s
->restart_usec
);
334 /* r_i / r_0 = (r_n / r_0) ^ (i / n)
336 * r_0 : initial restart usec (s->restart_usec),
337 * r_i : i-th restart usec (value),
338 * r_n : maximum restart usec (s->restart_max_delay_usec),
339 * i : index of the next step (n_restarts_next - 1)
340 * n : num maximum steps (s->restart_steps) */
341 return (usec_t
) (s
->restart_usec
* powl((long double) s
->restart_max_delay_usec
/ s
->restart_usec
,
342 (long double) (n_restarts_next
- 1) / s
->restart_steps
));
345 static void service_extend_event_source_timeout(Service
*s
, sd_event_source
*source
, usec_t extended
) {
351 /* Extends the specified event source timer to at least the specified time, unless it is already later
357 r
= sd_event_source_get_time(source
, ¤t
);
360 (void) sd_event_source_get_description(s
->timer_event_source
, &desc
);
361 log_unit_warning_errno(UNIT(s
), r
, "Failed to retrieve timeout time for event source '%s', ignoring: %m", strna(desc
));
365 if (current
>= extended
) /* Current timeout is already longer, ignore this. */
368 r
= sd_event_source_set_time(source
, extended
);
371 (void) sd_event_source_get_description(s
->timer_event_source
, &desc
);
372 log_unit_warning_errno(UNIT(s
), r
, "Failed to set timeout time for event source '%s', ignoring %m", strna(desc
));
376 static void service_extend_timeout(Service
*s
, usec_t extend_timeout_usec
) {
381 if (!timestamp_is_set(extend_timeout_usec
))
384 extended
= usec_add(now(CLOCK_MONOTONIC
), extend_timeout_usec
);
386 service_extend_event_source_timeout(s
, s
->timer_event_source
, extended
);
387 service_extend_event_source_timeout(s
, s
->watchdog_event_source
, extended
);
390 static void service_reset_watchdog(Service
*s
) {
393 dual_timestamp_now(&s
->watchdog_timestamp
);
394 service_start_watchdog(s
);
397 static void service_override_watchdog_timeout(Service
*s
, usec_t watchdog_override_usec
) {
400 s
->watchdog_override_enable
= true;
401 s
->watchdog_override_usec
= watchdog_override_usec
;
402 service_reset_watchdog(s
);
404 log_unit_debug(UNIT(s
), "watchdog_usec="USEC_FMT
, s
->watchdog_usec
);
405 log_unit_debug(UNIT(s
), "watchdog_override_usec="USEC_FMT
, s
->watchdog_override_usec
);
408 static ServiceFDStore
* service_fd_store_unlink(ServiceFDStore
*fs
) {
413 assert(fs
->service
->n_fd_store
> 0);
414 LIST_REMOVE(fd_store
, fs
->service
->fd_store
, fs
);
415 fs
->service
->n_fd_store
--;
418 sd_event_source_disable_unref(fs
->event_source
);
421 asynchronous_close(fs
->fd
);
425 DEFINE_TRIVIAL_CLEANUP_FUNC(ServiceFDStore
*, service_fd_store_unlink
);
427 static void service_release_fd_store(Service
*s
) {
433 log_unit_debug(UNIT(s
), "Releasing all stored fds");
436 service_fd_store_unlink(s
->fd_store
);
438 assert(s
->n_fd_store
== 0);
441 static void service_release_stdio_fd(Service
*s
) {
444 if (s
->stdin_fd
< 0 && s
->stdout_fd
< 0 && s
->stderr_fd
< 0)
447 log_unit_debug(UNIT(s
), "Releasing stdin/stdout/stderr file descriptors.");
449 s
->stdin_fd
= asynchronous_close(s
->stdin_fd
);
450 s
->stdout_fd
= asynchronous_close(s
->stdout_fd
);
451 s
->stderr_fd
= asynchronous_close(s
->stderr_fd
);
454 static void service_done(Unit
*u
) {
455 Service
*s
= ASSERT_PTR(SERVICE(u
));
457 open_file_free_many(&s
->open_files
);
459 s
->pid_file
= mfree(s
->pid_file
);
460 s
->status_text
= mfree(s
->status_text
);
462 s
->exec_runtime
= exec_runtime_free(s
->exec_runtime
);
464 exec_command_free_array(s
->exec_command
, _SERVICE_EXEC_COMMAND_MAX
);
465 s
->control_command
= NULL
;
466 s
->main_command
= NULL
;
468 exit_status_set_free(&s
->restart_prevent_status
);
469 exit_status_set_free(&s
->restart_force_status
);
470 exit_status_set_free(&s
->success_status
);
472 /* This will leak a process, but at least no memory or any of our resources */
473 service_unwatch_main_pid(s
);
474 service_unwatch_control_pid(s
);
475 service_unwatch_pid_file(s
);
478 unit_unwatch_bus_name(u
, s
->bus_name
);
479 s
->bus_name
= mfree(s
->bus_name
);
482 s
->bus_name_owner
= mfree(s
->bus_name_owner
);
484 s
->usb_function_descriptors
= mfree(s
->usb_function_descriptors
);
485 s
->usb_function_strings
= mfree(s
->usb_function_strings
);
487 service_stop_watchdog(s
);
489 s
->timer_event_source
= sd_event_source_disable_unref(s
->timer_event_source
);
490 s
->exec_fd_event_source
= sd_event_source_disable_unref(s
->exec_fd_event_source
);
492 s
->bus_name_pid_lookup_slot
= sd_bus_slot_unref(s
->bus_name_pid_lookup_slot
);
494 service_release_socket_fd(s
);
495 service_release_stdio_fd(s
);
496 service_release_fd_store(s
);
499 static int on_fd_store_io(sd_event_source
*e
, int fd
, uint32_t revents
, void *userdata
) {
500 ServiceFDStore
*fs
= ASSERT_PTR(userdata
);
504 /* If we get either EPOLLHUP or EPOLLERR, it's time to remove this entry from the fd store */
505 log_unit_debug(UNIT(fs
->service
),
506 "Received %s on stored fd %d (%s), closing.",
507 revents
& EPOLLERR
? "EPOLLERR" : "EPOLLHUP",
508 fs
->fd
, strna(fs
->fdname
));
509 service_fd_store_unlink(fs
);
513 static int service_add_fd_store(Service
*s
, int fd_in
, const char *name
, bool do_poll
) {
514 _cleanup_(service_fd_store_unlinkp
) ServiceFDStore
*fs
= NULL
;
515 _cleanup_(asynchronous_closep
) int fd
= ASSERT_FD(fd_in
);
519 /* fd is always consumed even if the function fails. */
523 if (fstat(fd
, &st
) < 0)
526 log_unit_debug(UNIT(s
), "Trying to stash fd for dev=" DEVNUM_FORMAT_STR
"/inode=%" PRIu64
,
527 DEVNUM_FORMAT_VAL(st
.st_dev
), (uint64_t) st
.st_ino
);
529 if (s
->n_fd_store
>= s
->n_fd_store_max
)
530 /* Our store is full. Use this errno rather than E[NM]FILE to distinguish from the case
531 * where systemd itself hits the file limit. */
532 return log_unit_debug_errno(UNIT(s
), SYNTHETIC_ERRNO(EXFULL
), "Hit fd store limit.");
534 LIST_FOREACH(fd_store
, i
, s
->fd_store
) {
535 r
= same_fd(i
->fd
, fd
);
539 log_unit_debug(UNIT(s
), "Suppressing duplicate fd %i in fd store.", fd
);
540 return 0; /* fd already included */
544 fs
= new(ServiceFDStore
, 1);
548 *fs
= (ServiceFDStore
) {
551 .fdname
= strdup(name
?: "stored"),
558 r
= sd_event_add_io(UNIT(s
)->manager
->event
, &fs
->event_source
, fs
->fd
, 0, on_fd_store_io
, fs
);
559 if (r
< 0 && r
!= -EPERM
) /* EPERM indicates fds that aren't pollable, which is OK */
562 (void) sd_event_source_set_description(fs
->event_source
, "service-fd-store");
565 log_unit_debug(UNIT(s
), "Added fd %i (%s) to fd store.", fs
->fd
, fs
->fdname
);
568 LIST_PREPEND(fd_store
, s
->fd_store
, TAKE_PTR(fs
));
571 return 1; /* fd newly stored */
574 static int service_add_fd_store_set(Service
*s
, FDSet
*fds
, const char *name
, bool do_poll
) {
582 fd
= fdset_steal_first(fds
);
586 r
= service_add_fd_store(s
, fd
, name
, do_poll
);
588 return log_unit_warning_errno(UNIT(s
), r
,
589 "Cannot store more fds than FileDescriptorStoreMax=%u, closing remaining.",
592 return log_unit_error_errno(UNIT(s
), r
, "Failed to add fd to store: %m");
598 static void service_remove_fd_store(Service
*s
, const char *name
) {
602 LIST_FOREACH(fd_store
, fs
, s
->fd_store
) {
603 if (!streq(fs
->fdname
, name
))
606 log_unit_debug(UNIT(s
), "Got explicit request to remove fd %i (%s), closing.", fs
->fd
, name
);
607 service_fd_store_unlink(fs
);
611 static usec_t
service_running_timeout(Service
*s
) {
616 if (s
->runtime_rand_extra_usec
!= 0) {
617 delta
= random_u64_range(s
->runtime_rand_extra_usec
);
618 log_unit_debug(UNIT(s
), "Adding delta of %s sec to timeout", FORMAT_TIMESPAN(delta
, USEC_PER_SEC
));
621 return usec_add(usec_add(UNIT(s
)->active_enter_timestamp
.monotonic
,
622 s
->runtime_max_usec
),
626 static int service_arm_timer(Service
*s
, bool relative
, usec_t usec
) {
629 return unit_arm_timer(UNIT(s
), &s
->timer_event_source
, relative
, usec
, service_dispatch_timer
);
632 static int service_verify(Service
*s
) {
634 assert(UNIT(s
)->load_state
== UNIT_LOADED
);
636 for (ServiceExecCommand c
= 0; c
< _SERVICE_EXEC_COMMAND_MAX
; c
++)
637 LIST_FOREACH(command
, command
, s
->exec_command
[c
]) {
638 if (!path_is_absolute(command
->path
) && !filename_is_valid(command
->path
))
639 return log_unit_error_errno(UNIT(s
), SYNTHETIC_ERRNO(ENOEXEC
),
640 "Service %s= binary path \"%s\" is neither a valid executable name nor an absolute path. Refusing.",
642 service_exec_command_to_string(c
));
643 if (strv_isempty(command
->argv
))
644 return log_unit_error_errno(UNIT(s
), SYNTHETIC_ERRNO(ENOEXEC
),
645 "Service has an empty argv in %s=. Refusing.",
646 service_exec_command_to_string(c
));
649 if (!s
->exec_command
[SERVICE_EXEC_START
] && !s
->exec_command
[SERVICE_EXEC_STOP
] &&
650 UNIT(s
)->success_action
== EMERGENCY_ACTION_NONE
)
651 /* FailureAction= only makes sense if one of the start or stop commands is specified.
652 * SuccessAction= will be executed unconditionally if no commands are specified. Hence,
653 * either a command or SuccessAction= are required. */
655 return log_unit_error_errno(UNIT(s
), SYNTHETIC_ERRNO(ENOEXEC
), "Service has no ExecStart=, ExecStop=, or SuccessAction=. Refusing.");
657 if (s
->type
!= SERVICE_ONESHOT
&& !s
->exec_command
[SERVICE_EXEC_START
])
658 return log_unit_error_errno(UNIT(s
), SYNTHETIC_ERRNO(ENOEXEC
), "Service has no ExecStart= setting, which is only allowed for Type=oneshot services. Refusing.");
660 if (!s
->remain_after_exit
&& !s
->exec_command
[SERVICE_EXEC_START
] && UNIT(s
)->success_action
== EMERGENCY_ACTION_NONE
)
661 return log_unit_error_errno(UNIT(s
), SYNTHETIC_ERRNO(ENOEXEC
), "Service has no ExecStart= and no SuccessAction= settings and does not have RemainAfterExit=yes set. Refusing.");
663 if (s
->type
!= SERVICE_ONESHOT
&& s
->exec_command
[SERVICE_EXEC_START
]->command_next
)
664 return log_unit_error_errno(UNIT(s
), SYNTHETIC_ERRNO(ENOEXEC
), "Service has more than one ExecStart= setting, which is only allowed for Type=oneshot services. Refusing.");
666 if (s
->type
== SERVICE_ONESHOT
&& IN_SET(s
->restart
, SERVICE_RESTART_ALWAYS
, SERVICE_RESTART_ON_SUCCESS
))
667 return log_unit_error_errno(UNIT(s
), SYNTHETIC_ERRNO(ENOEXEC
), "Service has Restart= set to either always or on-success, which isn't allowed for Type=oneshot services. Refusing.");
669 if (s
->type
== SERVICE_ONESHOT
&& s
->exit_type
== SERVICE_EXIT_CGROUP
)
670 return log_unit_error_errno(UNIT(s
), SYNTHETIC_ERRNO(ENOEXEC
), "Service has ExitType=cgroup set, which isn't allowed for Type=oneshot services. Refusing.");
672 if (s
->type
== SERVICE_DBUS
&& !s
->bus_name
)
673 return log_unit_error_errno(UNIT(s
), SYNTHETIC_ERRNO(ENOEXEC
), "Service is of type D-Bus but no D-Bus service name has been specified. Refusing.");
675 if (s
->exec_context
.pam_name
&& !IN_SET(s
->kill_context
.kill_mode
, KILL_CONTROL_GROUP
, KILL_MIXED
))
676 return log_unit_error_errno(UNIT(s
), SYNTHETIC_ERRNO(ENOEXEC
), "Service has PAM enabled. Kill mode must be set to 'control-group' or 'mixed'. Refusing.");
678 if (s
->usb_function_descriptors
&& !s
->usb_function_strings
)
679 log_unit_warning(UNIT(s
), "Service has USBFunctionDescriptors= setting, but no USBFunctionStrings=. Ignoring.");
681 if (!s
->usb_function_descriptors
&& s
->usb_function_strings
)
682 log_unit_warning(UNIT(s
), "Service has USBFunctionStrings= setting, but no USBFunctionDescriptors=. Ignoring.");
684 if (s
->runtime_max_usec
!= USEC_INFINITY
&& s
->type
== SERVICE_ONESHOT
)
685 log_unit_warning(UNIT(s
), "RuntimeMaxSec= has no effect in combination with Type=oneshot. Ignoring.");
687 if (s
->runtime_max_usec
== USEC_INFINITY
&& s
->runtime_rand_extra_usec
!= 0)
688 log_unit_warning(UNIT(s
), "Service has RuntimeRandomizedExtraSec= setting, but no RuntimeMaxSec=. Ignoring.");
690 if (s
->exit_type
== SERVICE_EXIT_CGROUP
&& cg_unified() < CGROUP_UNIFIED_SYSTEMD
)
691 log_unit_warning(UNIT(s
), "Service has ExitType=cgroup set, but we are running with legacy cgroups v1, which might not work correctly. Continuing.");
693 if (s
->restart_max_delay_usec
== USEC_INFINITY
&& s
->restart_steps
> 0)
694 log_unit_warning(UNIT(s
), "Service has RestartSteps= but no RestartMaxDelaySec= setting. Ignoring.");
696 if (s
->restart_max_delay_usec
!= USEC_INFINITY
&& s
->restart_steps
== 0)
697 log_unit_warning(UNIT(s
), "Service has RestartMaxDelaySec= but no RestartSteps= setting. Ignoring.");
699 if (s
->restart_max_delay_usec
< s
->restart_usec
) {
700 log_unit_warning(UNIT(s
), "RestartMaxDelaySec= has a value smaller than RestartSec=, resetting RestartSec= to RestartMaxDelaySec=.");
701 s
->restart_usec
= s
->restart_max_delay_usec
;
707 static int service_add_default_dependencies(Service
*s
) {
712 if (!UNIT(s
)->default_dependencies
)
715 /* Add a number of automatic dependencies useful for the
716 * majority of services. */
718 if (MANAGER_IS_SYSTEM(UNIT(s
)->manager
)) {
719 /* First, pull in the really early boot stuff, and
720 * require it, so that we fail if we can't acquire
723 r
= unit_add_two_dependencies_by_name(UNIT(s
), UNIT_AFTER
, UNIT_REQUIRES
, SPECIAL_SYSINIT_TARGET
, true, UNIT_DEPENDENCY_DEFAULT
);
728 /* In the --user instance there's no sysinit.target,
729 * in that case require basic.target instead. */
731 r
= unit_add_dependency_by_name(UNIT(s
), UNIT_REQUIRES
, SPECIAL_BASIC_TARGET
, true, UNIT_DEPENDENCY_DEFAULT
);
736 /* Second, if the rest of the base system is in the same
737 * transaction, order us after it, but do not pull it in or
738 * even require it. */
739 r
= unit_add_dependency_by_name(UNIT(s
), UNIT_AFTER
, SPECIAL_BASIC_TARGET
, true, UNIT_DEPENDENCY_DEFAULT
);
743 /* Third, add us in for normal shutdown. */
744 return unit_add_two_dependencies_by_name(UNIT(s
), UNIT_BEFORE
, UNIT_CONFLICTS
, SPECIAL_SHUTDOWN_TARGET
, true, UNIT_DEPENDENCY_DEFAULT
);
747 static void service_fix_stdio(Service
*s
) {
750 /* Note that EXEC_INPUT_NULL and EXEC_OUTPUT_INHERIT play a special role here: they are both the
751 * default value that is subject to automatic overriding triggered by other settings and an explicit
752 * choice the user can make. We don't distinguish between these cases currently. */
754 if (s
->exec_context
.std_input
== EXEC_INPUT_NULL
&&
755 s
->exec_context
.stdin_data_size
> 0)
756 s
->exec_context
.std_input
= EXEC_INPUT_DATA
;
758 if (IN_SET(s
->exec_context
.std_input
,
760 EXEC_INPUT_TTY_FORCE
,
763 EXEC_INPUT_NAMED_FD
))
766 /* We assume these listed inputs refer to bidirectional streams, and hence duplicating them from
767 * stdin to stdout/stderr makes sense and hence leaving EXEC_OUTPUT_INHERIT in place makes sense,
768 * too. Outputs such as regular files or sealed data memfds otoh don't really make sense to be
769 * duplicated for both input and output at the same time (since they then would cause a feedback
770 * loop), hence override EXEC_OUTPUT_INHERIT with the default stderr/stdout setting. */
772 if (s
->exec_context
.std_error
== EXEC_OUTPUT_INHERIT
&&
773 s
->exec_context
.std_output
== EXEC_OUTPUT_INHERIT
)
774 s
->exec_context
.std_error
= UNIT(s
)->manager
->defaults
.std_error
;
776 if (s
->exec_context
.std_output
== EXEC_OUTPUT_INHERIT
)
777 s
->exec_context
.std_output
= UNIT(s
)->manager
->defaults
.std_output
;
780 static int service_setup_bus_name(Service
*s
) {
785 /* If s->bus_name is not set, then the unit will be refused by service_verify() later. */
789 if (s
->type
== SERVICE_DBUS
) {
790 r
= unit_add_dependency_by_name(UNIT(s
), UNIT_REQUIRES
, SPECIAL_DBUS_SOCKET
, true, UNIT_DEPENDENCY_FILE
);
792 return log_unit_error_errno(UNIT(s
), r
, "Failed to add dependency on " SPECIAL_DBUS_SOCKET
": %m");
794 /* We always want to be ordered against dbus.socket if both are in the transaction. */
795 r
= unit_add_dependency_by_name(UNIT(s
), UNIT_AFTER
, SPECIAL_DBUS_SOCKET
, true, UNIT_DEPENDENCY_FILE
);
797 return log_unit_error_errno(UNIT(s
), r
, "Failed to add dependency on " SPECIAL_DBUS_SOCKET
": %m");
800 r
= unit_watch_bus_name(UNIT(s
), s
->bus_name
);
802 return log_unit_error_errno(UNIT(s
), r
, "Two services allocated for the same bus name %s, refusing operation.", s
->bus_name
);
804 return log_unit_error_errno(UNIT(s
), r
, "Cannot watch bus name %s: %m", s
->bus_name
);
809 static int service_add_extras(Service
*s
) {
814 if (s
->type
== _SERVICE_TYPE_INVALID
) {
815 /* Figure out a type automatically */
817 s
->type
= SERVICE_DBUS
;
818 else if (s
->exec_command
[SERVICE_EXEC_START
])
819 s
->type
= SERVICE_SIMPLE
;
821 s
->type
= SERVICE_ONESHOT
;
824 /* Oneshot services have disabled start timeout by default */
825 if (s
->type
== SERVICE_ONESHOT
&& !s
->start_timeout_defined
)
826 s
->timeout_start_usec
= USEC_INFINITY
;
828 service_fix_stdio(s
);
830 r
= unit_patch_contexts(UNIT(s
));
834 r
= unit_add_exec_dependencies(UNIT(s
), &s
->exec_context
);
838 r
= unit_set_default_slice(UNIT(s
));
842 /* If the service needs the notify socket, let's enable it automatically. */
843 if (s
->notify_access
== NOTIFY_NONE
&&
844 (IN_SET(s
->type
, SERVICE_NOTIFY
, SERVICE_NOTIFY_RELOAD
) || s
->watchdog_usec
> 0 || s
->n_fd_store_max
> 0))
845 s
->notify_access
= NOTIFY_MAIN
;
847 /* If no OOM policy was explicitly set, then default to the configure default OOM policy. Except when
848 * delegation is on, in that case it we assume the payload knows better what to do and can process
849 * things in a more focused way. */
850 if (s
->oom_policy
< 0)
851 s
->oom_policy
= s
->cgroup_context
.delegate
? OOM_CONTINUE
: UNIT(s
)->manager
->defaults
.oom_policy
;
853 /* Let the kernel do the killing if that's requested. */
854 s
->cgroup_context
.memory_oom_group
= s
->oom_policy
== OOM_KILL
;
856 r
= service_add_default_dependencies(s
);
860 r
= service_setup_bus_name(s
);
867 static int service_load(Unit
*u
) {
868 Service
*s
= ASSERT_PTR(SERVICE(u
));
871 r
= unit_load_fragment_and_dropin(u
, true);
875 if (u
->load_state
!= UNIT_LOADED
)
878 /* This is a new unit? Then let's add in some extras */
879 r
= service_add_extras(s
);
883 return service_verify(s
);
886 static void service_dump_fdstore(Service
*s
, FILE *f
, const char *prefix
) {
891 LIST_FOREACH(fd_store
, i
, s
->fd_store
) {
892 _cleanup_free_
char *path
= NULL
;
896 if (fstat(i
->fd
, &st
) < 0) {
897 log_debug_errno(errno
, "Failed to stat fdstore entry: %m");
901 flags
= fcntl(i
->fd
, F_GETFL
);
903 log_debug_errno(errno
, "Failed to get fdstore entry flags: %m");
907 (void) fd_get_path(i
->fd
, &path
);
910 "%s%s '%s' (type=%s; dev=" DEVNUM_FORMAT_STR
"; inode=%" PRIu64
"; rdev=" DEVNUM_FORMAT_STR
"; path=%s; access=%s)\n",
911 prefix
, i
== s
->fd_store
? "File Descriptor Store Entry:" : " ",
913 strna(inode_type_to_string(st
.st_mode
)),
914 DEVNUM_FORMAT_VAL(st
.st_dev
),
915 (uint64_t) st
.st_ino
,
916 DEVNUM_FORMAT_VAL(st
.st_rdev
),
918 strna(accmode_to_string(flags
)));
922 static void service_dump(Unit
*u
, FILE *f
, const char *prefix
) {
923 Service
*s
= ASSERT_PTR(SERVICE(u
));
926 prefix
= strempty(prefix
);
927 prefix2
= strjoina(prefix
, "\t");
930 "%sService State: %s\n"
932 "%sReload Result: %s\n"
933 "%sClean Result: %s\n"
934 "%sPermissionsStartOnly: %s\n"
935 "%sRootDirectoryStartOnly: %s\n"
936 "%sRemainAfterExit: %s\n"
937 "%sGuessMainPID: %s\n"
940 "%sNotifyAccess: %s\n"
941 "%sNotifyState: %s\n"
943 "%sReloadSignal: %s\n",
944 prefix
, service_state_to_string(s
->state
),
945 prefix
, service_result_to_string(s
->result
),
946 prefix
, service_result_to_string(s
->reload_result
),
947 prefix
, service_result_to_string(s
->clean_result
),
948 prefix
, yes_no(s
->permissions_start_only
),
949 prefix
, yes_no(s
->root_directory_start_only
),
950 prefix
, yes_no(s
->remain_after_exit
),
951 prefix
, yes_no(s
->guess_main_pid
),
952 prefix
, service_type_to_string(s
->type
),
953 prefix
, service_restart_to_string(s
->restart
),
954 prefix
, notify_access_to_string(service_get_notify_access(s
)),
955 prefix
, notify_state_to_string(s
->notify_state
),
956 prefix
, oom_policy_to_string(s
->oom_policy
),
957 prefix
, signal_to_string(s
->reload_signal
));
959 if (pidref_is_set(&s
->control_pid
))
961 "%sControl PID: "PID_FMT
"\n",
962 prefix
, s
->control_pid
.pid
);
964 if (pidref_is_set(&s
->main_pid
))
966 "%sMain PID: "PID_FMT
"\n"
967 "%sMain PID Known: %s\n"
968 "%sMain PID Alien: %s\n",
969 prefix
, s
->main_pid
.pid
,
970 prefix
, yes_no(s
->main_pid_known
),
971 prefix
, yes_no(s
->main_pid_alien
));
976 prefix
, s
->pid_file
);
981 "%sBus Name Good: %s\n",
983 prefix
, yes_no(s
->bus_name_good
));
985 if (UNIT_ISSET(s
->accept_socket
))
987 "%sAccept Socket: %s\n",
988 prefix
, UNIT_DEREF(s
->accept_socket
)->id
);
992 "%sRestartSteps: %u\n"
993 "%sRestartMaxDelaySec: %s\n"
994 "%sTimeoutStartSec: %s\n"
995 "%sTimeoutStopSec: %s\n"
996 "%sTimeoutStartFailureMode: %s\n"
997 "%sTimeoutStopFailureMode: %s\n",
998 prefix
, FORMAT_TIMESPAN(s
->restart_usec
, USEC_PER_SEC
),
999 prefix
, s
->restart_steps
,
1000 prefix
, FORMAT_TIMESPAN(s
->restart_max_delay_usec
, USEC_PER_SEC
),
1001 prefix
, FORMAT_TIMESPAN(s
->timeout_start_usec
, USEC_PER_SEC
),
1002 prefix
, FORMAT_TIMESPAN(s
->timeout_stop_usec
, USEC_PER_SEC
),
1003 prefix
, service_timeout_failure_mode_to_string(s
->timeout_start_failure_mode
),
1004 prefix
, service_timeout_failure_mode_to_string(s
->timeout_stop_failure_mode
));
1006 if (s
->timeout_abort_set
)
1008 "%sTimeoutAbortSec: %s\n",
1009 prefix
, FORMAT_TIMESPAN(s
->timeout_abort_usec
, USEC_PER_SEC
));
1012 "%sRuntimeMaxSec: %s\n"
1013 "%sRuntimeRandomizedExtraSec: %s\n"
1014 "%sWatchdogSec: %s\n",
1015 prefix
, FORMAT_TIMESPAN(s
->runtime_max_usec
, USEC_PER_SEC
),
1016 prefix
, FORMAT_TIMESPAN(s
->runtime_rand_extra_usec
, USEC_PER_SEC
),
1017 prefix
, FORMAT_TIMESPAN(s
->watchdog_usec
, USEC_PER_SEC
));
1019 kill_context_dump(&s
->kill_context
, f
, prefix
);
1020 exec_context_dump(&s
->exec_context
, f
, prefix
);
1022 for (ServiceExecCommand c
= 0; c
< _SERVICE_EXEC_COMMAND_MAX
; c
++) {
1023 if (!s
->exec_command
[c
])
1026 fprintf(f
, "%s%s %s:\n",
1027 prefix
, special_glyph(SPECIAL_GLYPH_ARROW_RIGHT
), service_exec_command_to_string(c
));
1029 exec_command_dump_list(s
->exec_command
[c
], f
, prefix2
);
1033 fprintf(f
, "%sStatus Text: %s\n",
1034 prefix
, s
->status_text
);
1036 if (s
->n_fd_store_max
> 0)
1038 "%sFile Descriptor Store Max: %u\n"
1039 "%sFile Descriptor Store Pin: %s\n"
1040 "%sFile Descriptor Store Current: %zu\n",
1041 prefix
, s
->n_fd_store_max
,
1042 prefix
, exec_preserve_mode_to_string(s
->fd_store_preserve_mode
),
1043 prefix
, s
->n_fd_store
);
1045 service_dump_fdstore(s
, f
, prefix
);
1048 LIST_FOREACH(open_files
, of
, s
->open_files
) {
1049 _cleanup_free_
char *ofs
= NULL
;
1052 r
= open_file_to_string(of
, &ofs
);
1055 "Failed to convert OpenFile= setting to string, ignoring: %m");
1059 fprintf(f
, "%sOpen File: %s\n", prefix
, ofs
);
1062 cgroup_context_dump(UNIT(s
), f
, prefix
);
1065 static int service_is_suitable_main_pid(Service
*s
, PidRef
*pid
, int prio
) {
1070 assert(pidref_is_set(pid
));
1072 /* Checks whether the specified PID is suitable as main PID for this service. returns negative if not, 0 if the
1073 * PID is questionnable but should be accepted if the source of configuration is trusted. > 0 if the PID is
1076 if (pidref_is_self(pid
) || pid
->pid
== 1)
1077 return log_unit_full_errno(UNIT(s
), prio
, SYNTHETIC_ERRNO(EPERM
), "New main PID "PID_FMT
" is the manager, refusing.", pid
->pid
);
1079 if (pidref_equal(pid
, &s
->control_pid
))
1080 return log_unit_full_errno(UNIT(s
), prio
, SYNTHETIC_ERRNO(EPERM
), "New main PID "PID_FMT
" is the control process, refusing.", pid
->pid
);
1082 r
= pidref_is_alive(pid
);
1084 return log_unit_full_errno(UNIT(s
), prio
, r
, "Failed to check if main PID "PID_FMT
" exists or is a zombie: %m", pid
->pid
);
1086 return log_unit_full_errno(UNIT(s
), prio
, SYNTHETIC_ERRNO(ESRCH
), "New main PID "PID_FMT
" does not exist or is a zombie.", pid
->pid
);
1088 owner
= manager_get_unit_by_pidref(UNIT(s
)->manager
, pid
);
1089 if (owner
== UNIT(s
)) {
1090 log_unit_debug(UNIT(s
), "New main PID "PID_FMT
" belongs to service, we are happy.", pid
->pid
);
1091 return 1; /* Yay, it's definitely a good PID */
1094 return 0; /* Hmm it's a suspicious PID, let's accept it if configuration source is trusted */
1097 static int service_load_pid_file(Service
*s
, bool may_warn
) {
1098 _cleanup_(pidref_done
) PidRef pidref
= PIDREF_NULL
;
1099 bool questionable_pid_file
= false;
1100 _cleanup_free_
char *k
= NULL
;
1101 _cleanup_close_
int fd
= -EBADF
;
1109 prio
= may_warn
? LOG_INFO
: LOG_DEBUG
;
1111 r
= chase(s
->pid_file
, NULL
, CHASE_SAFE
, NULL
, &fd
);
1112 if (r
== -ENOLINK
) {
1113 log_unit_debug_errno(UNIT(s
), r
,
1114 "Potentially unsafe symlink chain, will now retry with relaxed checks: %s", s
->pid_file
);
1116 questionable_pid_file
= true;
1118 r
= chase(s
->pid_file
, NULL
, 0, NULL
, &fd
);
1121 return log_unit_full_errno(UNIT(s
), prio
, r
,
1122 "Can't open PID file %s (yet?) after %s: %m", s
->pid_file
, service_state_to_string(s
->state
));
1124 /* Let's read the PID file now that we chased it down. But we need to convert the O_PATH fd
1125 * chase() returned us into a proper fd first. */
1126 r
= read_one_line_file(FORMAT_PROC_FD_PATH(fd
), &k
);
1128 return log_unit_error_errno(UNIT(s
), r
,
1129 "Can't convert PID files %s O_PATH file descriptor to proper file descriptor: %m",
1132 r
= pidref_set_pidstr(&pidref
, k
);
1134 return log_unit_full_errno(UNIT(s
), prio
, r
, "Failed to parse PID from file %s: %m", s
->pid_file
);
1136 if (s
->main_pid_known
&& pidref_equal(&pidref
, &s
->main_pid
))
1139 r
= service_is_suitable_main_pid(s
, &pidref
, prio
);
1145 if (questionable_pid_file
)
1146 return log_unit_error_errno(UNIT(s
), SYNTHETIC_ERRNO(EPERM
),
1147 "Refusing to accept PID outside of service control group, acquired through unsafe symlink chain: %s", s
->pid_file
);
1149 /* Hmm, it's not clear if the new main PID is safe. Let's allow this if the PID file is owned by root */
1151 if (fstat(fd
, &st
) < 0)
1152 return log_unit_error_errno(UNIT(s
), errno
, "Failed to fstat() PID file O_PATH fd: %m");
1155 return log_unit_error_errno(UNIT(s
), SYNTHETIC_ERRNO(EPERM
),
1156 "New main PID "PID_FMT
" does not belong to service, and PID file is not owned by root. Refusing.", pidref
.pid
);
1158 log_unit_debug(UNIT(s
), "New main PID "PID_FMT
" does not belong to service, but we'll accept it since PID file is owned by root.", pidref
.pid
);
1161 if (s
->main_pid_known
) {
1162 log_unit_debug(UNIT(s
), "Main PID changing: "PID_FMT
" -> "PID_FMT
, s
->main_pid
.pid
, pidref
.pid
);
1164 service_unwatch_main_pid(s
);
1165 s
->main_pid_known
= false;
1167 log_unit_debug(UNIT(s
), "Main PID loaded: "PID_FMT
, pidref
.pid
);
1169 r
= service_set_main_pidref(s
, TAKE_PIDREF(pidref
), /* start_timestamp = */ NULL
);
1173 r
= unit_watch_pidref(UNIT(s
), &s
->main_pid
, /* exclusive= */ false);
1174 if (r
< 0) /* FIXME: we need to do something here */
1175 return log_unit_warning_errno(UNIT(s
), r
, "Failed to watch PID "PID_FMT
" for service: %m", s
->main_pid
.pid
);
1180 static void service_search_main_pid(Service
*s
) {
1181 _cleanup_(pidref_done
) PidRef pid
= PIDREF_NULL
;
1186 /* If we know it anyway, don't ever fall back to unreliable heuristics */
1187 if (s
->main_pid_known
)
1190 if (!s
->guess_main_pid
)
1193 assert(!pidref_is_set(&s
->main_pid
));
1195 if (unit_search_main_pid(UNIT(s
), &pid
) < 0)
1198 log_unit_debug(UNIT(s
), "Main PID guessed: "PID_FMT
, pid
.pid
);
1199 if (service_set_main_pidref(s
, TAKE_PIDREF(pid
), /* start_timestamp = */ NULL
) < 0)
1202 r
= unit_watch_pidref(UNIT(s
), &s
->main_pid
, /* exclusive= */ false);
1204 /* FIXME: we need to do something here */
1205 log_unit_warning_errno(UNIT(s
), r
, "Failed to watch PID "PID_FMT
" from: %m", s
->main_pid
.pid
);
1208 static void service_set_state(Service
*s
, ServiceState state
) {
1209 ServiceState old_state
;
1210 const UnitActiveState
*table
;
1214 if (s
->state
!= state
)
1215 bus_unit_send_pending_change_signal(UNIT(s
), false);
1217 table
= s
->type
== SERVICE_IDLE
? state_translation_table_idle
: state_translation_table
;
1219 old_state
= s
->state
;
1222 service_unwatch_pid_file(s
);
1225 SERVICE_CONDITION
, SERVICE_START_PRE
, SERVICE_START
, SERVICE_START_POST
,
1227 SERVICE_RELOAD
, SERVICE_RELOAD_SIGNAL
, SERVICE_RELOAD_NOTIFY
,
1228 SERVICE_STOP
, SERVICE_STOP_WATCHDOG
, SERVICE_STOP_SIGTERM
, SERVICE_STOP_SIGKILL
, SERVICE_STOP_POST
,
1229 SERVICE_FINAL_WATCHDOG
, SERVICE_FINAL_SIGTERM
, SERVICE_FINAL_SIGKILL
,
1230 SERVICE_AUTO_RESTART
,
1232 s
->timer_event_source
= sd_event_source_disable_unref(s
->timer_event_source
);
1234 if (!SERVICE_STATE_WITH_MAIN_PROCESS(state
)) {
1235 service_unwatch_main_pid(s
);
1236 s
->main_command
= NULL
;
1239 if (!SERVICE_STATE_WITH_CONTROL_PROCESS(state
)) {
1240 service_unwatch_control_pid(s
);
1241 s
->control_command
= NULL
;
1242 s
->control_command_id
= _SERVICE_EXEC_COMMAND_INVALID
;
1246 SERVICE_DEAD
, SERVICE_FAILED
,
1247 SERVICE_DEAD_BEFORE_AUTO_RESTART
, SERVICE_FAILED_BEFORE_AUTO_RESTART
, SERVICE_AUTO_RESTART
, SERVICE_AUTO_RESTART_QUEUED
,
1248 SERVICE_DEAD_RESOURCES_PINNED
)) {
1249 unit_unwatch_all_pids(UNIT(s
));
1250 unit_dequeue_rewatch_pids(UNIT(s
));
1253 if (state
!= SERVICE_START
)
1254 s
->exec_fd_event_source
= sd_event_source_disable_unref(s
->exec_fd_event_source
);
1256 if (!IN_SET(state
, SERVICE_START_POST
, SERVICE_RUNNING
, SERVICE_RELOAD
, SERVICE_RELOAD_SIGNAL
, SERVICE_RELOAD_NOTIFY
))
1257 service_stop_watchdog(s
);
1259 /* For the inactive states unit_notify() will trim the cgroup,
1260 * but for exit we have to do that ourselves... */
1261 if (state
== SERVICE_EXITED
&& !MANAGER_IS_RELOADING(UNIT(s
)->manager
))
1262 unit_prune_cgroup(UNIT(s
));
1264 if (old_state
!= state
)
1265 log_unit_debug(UNIT(s
), "Changed %s -> %s", service_state_to_string(old_state
), service_state_to_string(state
));
1267 unit_notify(UNIT(s
), table
[old_state
], table
[state
], s
->reload_result
== SERVICE_SUCCESS
);
1270 static usec_t
service_coldplug_timeout(Service
*s
) {
1273 switch (s
->deserialized_state
) {
1275 case SERVICE_CONDITION
:
1276 case SERVICE_START_PRE
:
1278 case SERVICE_START_POST
:
1279 case SERVICE_RELOAD
:
1280 case SERVICE_RELOAD_SIGNAL
:
1281 case SERVICE_RELOAD_NOTIFY
:
1282 return usec_add(UNIT(s
)->state_change_timestamp
.monotonic
, s
->timeout_start_usec
);
1284 case SERVICE_RUNNING
:
1285 return service_running_timeout(s
);
1288 case SERVICE_STOP_SIGTERM
:
1289 case SERVICE_STOP_SIGKILL
:
1290 case SERVICE_STOP_POST
:
1291 case SERVICE_FINAL_SIGTERM
:
1292 case SERVICE_FINAL_SIGKILL
:
1293 return usec_add(UNIT(s
)->state_change_timestamp
.monotonic
, s
->timeout_stop_usec
);
1295 case SERVICE_STOP_WATCHDOG
:
1296 case SERVICE_FINAL_WATCHDOG
:
1297 return usec_add(UNIT(s
)->state_change_timestamp
.monotonic
, service_timeout_abort_usec(s
));
1299 case SERVICE_AUTO_RESTART
:
1300 return usec_add(UNIT(s
)->inactive_enter_timestamp
.monotonic
, service_restart_usec_next(s
));
1302 case SERVICE_CLEANING
:
1303 return usec_add(UNIT(s
)->state_change_timestamp
.monotonic
, s
->exec_context
.timeout_clean_usec
);
1306 return USEC_INFINITY
;
1310 static int service_coldplug(Unit
*u
) {
1311 Service
*s
= SERVICE(u
);
1315 assert(s
->state
== SERVICE_DEAD
);
1317 if (s
->deserialized_state
== s
->state
)
1320 r
= service_arm_timer(s
, /* relative= */ false, service_coldplug_timeout(s
));
1324 if (pidref_is_set(&s
->main_pid
) &&
1325 pidref_is_unwaited(&s
->main_pid
) > 0 &&
1326 SERVICE_STATE_WITH_MAIN_PROCESS(s
->deserialized_state
)) {
1327 r
= unit_watch_pidref(UNIT(s
), &s
->main_pid
, /* exclusive= */ false);
1332 if (pidref_is_set(&s
->control_pid
) &&
1333 pidref_is_unwaited(&s
->control_pid
) > 0 &&
1334 SERVICE_STATE_WITH_CONTROL_PROCESS(s
->deserialized_state
)) {
1335 r
= unit_watch_pidref(UNIT(s
), &s
->control_pid
, /* exclusive= */ false);
1340 if (!IN_SET(s
->deserialized_state
,
1341 SERVICE_DEAD
, SERVICE_FAILED
,
1342 SERVICE_DEAD_BEFORE_AUTO_RESTART
, SERVICE_FAILED_BEFORE_AUTO_RESTART
, SERVICE_AUTO_RESTART
, SERVICE_AUTO_RESTART_QUEUED
,
1344 SERVICE_DEAD_RESOURCES_PINNED
)) {
1345 (void) unit_enqueue_rewatch_pids(u
);
1346 (void) unit_setup_exec_runtime(u
);
1347 (void) unit_setup_cgroup_runtime(u
);
1350 if (IN_SET(s
->deserialized_state
, SERVICE_START_POST
, SERVICE_RUNNING
, SERVICE_RELOAD
, SERVICE_RELOAD_SIGNAL
, SERVICE_RELOAD_NOTIFY
))
1351 service_start_watchdog(s
);
1353 if (UNIT_ISSET(s
->accept_socket
)) {
1354 Socket
* socket
= SOCKET(UNIT_DEREF(s
->accept_socket
));
1356 if (socket
->max_connections_per_source
> 0) {
1359 /* Make a best-effort attempt at bumping the connection count */
1360 if (socket_acquire_peer(socket
, s
->socket_fd
, &peer
) > 0) {
1361 socket_peer_unref(s
->socket_peer
);
1362 s
->socket_peer
= peer
;
1367 service_set_state(s
, s
->deserialized_state
);
1371 static int service_collect_fds(
1375 size_t *n_socket_fds
,
1376 size_t *n_storage_fds
) {
1378 _cleanup_strv_free_
char **rfd_names
= NULL
;
1379 _cleanup_free_
int *rfds
= NULL
;
1380 size_t rn_socket_fds
= 0, rn_storage_fds
= 0;
1386 assert(n_socket_fds
);
1387 assert(n_storage_fds
);
1389 if (s
->socket_fd
>= 0) {
1391 /* Pass the per-connection socket */
1393 rfds
= newdup(int, &s
->socket_fd
, 1);
1397 rfd_names
= strv_new("connection");
1405 /* Pass all our configured sockets for singleton services */
1407 UNIT_FOREACH_DEPENDENCY(u
, UNIT(s
), UNIT_ATOM_TRIGGERED_BY
) {
1408 _cleanup_free_
int *cfds
= NULL
;
1416 cn_fds
= socket_collect_fds(sock
, &cfds
);
1424 rfds
= TAKE_PTR(cfds
);
1425 rn_socket_fds
= cn_fds
;
1426 } else if (!GREEDY_REALLOC_APPEND(rfds
, rn_socket_fds
, cfds
, cn_fds
))
1429 r
= strv_extend_n(&rfd_names
, socket_fdname(sock
), cn_fds
);
1435 if (s
->n_fd_store
> 0) {
1440 t
= reallocarray(rfds
, rn_socket_fds
+ s
->n_fd_store
, sizeof(int));
1446 nl
= reallocarray(rfd_names
, rn_socket_fds
+ s
->n_fd_store
+ 1, sizeof(char *));
1451 n_fds
= rn_socket_fds
;
1453 LIST_FOREACH(fd_store
, fs
, s
->fd_store
) {
1454 rfds
[n_fds
] = fs
->fd
;
1455 rfd_names
[n_fds
] = strdup(strempty(fs
->fdname
));
1456 if (!rfd_names
[n_fds
])
1463 rfd_names
[n_fds
] = NULL
;
1466 *fds
= TAKE_PTR(rfds
);
1467 *fd_names
= TAKE_PTR(rfd_names
);
1468 *n_socket_fds
= rn_socket_fds
;
1469 *n_storage_fds
= rn_storage_fds
;
1474 static int service_allocate_exec_fd_event_source(
1477 sd_event_source
**ret_event_source
) {
1479 _cleanup_(sd_event_source_unrefp
) sd_event_source
*source
= NULL
;
1484 assert(ret_event_source
);
1486 r
= sd_event_add_io(UNIT(s
)->manager
->event
, &source
, fd
, 0, service_dispatch_exec_io
, s
);
1488 return log_unit_error_errno(UNIT(s
), r
, "Failed to allocate exec_fd event source: %m");
1490 /* This is a bit higher priority than SIGCHLD, to make sure we don't confuse the case "failed to
1491 * start" from the case "succeeded to start, but failed immediately after". */
1493 r
= sd_event_source_set_priority(source
, EVENT_PRIORITY_EXEC_FD
);
1495 return log_unit_error_errno(UNIT(s
), r
, "Failed to adjust priority of exec_fd event source: %m");
1497 (void) sd_event_source_set_description(source
, "service exec_fd");
1499 r
= sd_event_source_set_io_fd_own(source
, true);
1501 return log_unit_error_errno(UNIT(s
), r
, "Failed to pass ownership of fd to event source: %m");
1503 *ret_event_source
= TAKE_PTR(source
);
1507 static int service_allocate_exec_fd(
1509 sd_event_source
**ret_event_source
,
1512 _cleanup_close_pair_
int p
[] = EBADF_PAIR
;
1516 assert(ret_event_source
);
1517 assert(ret_exec_fd
);
1519 if (pipe2(p
, O_CLOEXEC
|O_NONBLOCK
) < 0)
1520 return log_unit_error_errno(UNIT(s
), errno
, "Failed to allocate exec_fd pipe: %m");
1522 r
= service_allocate_exec_fd_event_source(s
, p
[0], ret_event_source
);
1527 *ret_exec_fd
= TAKE_FD(p
[1]);
1532 static bool service_exec_needs_notify_socket(Service
*s
, ExecFlags flags
) {
1535 /* Notifications are accepted depending on the process and
1536 * the access setting of the service:
1537 * process: \ access: NONE MAIN EXEC ALL
1538 * main no yes yes yes
1539 * control no no yes yes
1540 * other (forked) no no no yes */
1542 if (flags
& EXEC_IS_CONTROL
)
1543 /* A control process */
1544 return IN_SET(service_get_notify_access(s
), NOTIFY_EXEC
, NOTIFY_ALL
);
1546 /* We only spawn main processes and control processes, so any
1547 * process that is not a control process is a main process */
1548 return service_get_notify_access(s
) != NOTIFY_NONE
;
1551 static Service
*service_get_triggering_service(Service
*s
) {
1552 Unit
*candidate
= NULL
, *other
;
1556 /* Return the service which triggered service 's', this means dependency
1557 * types which include the UNIT_ATOM_ON_{FAILURE,SUCCESS}_OF atoms.
1559 * N.B. if there are multiple services which could trigger 's' via OnFailure=
1560 * or OnSuccess= then we return NULL. This is since we don't know from which
1561 * one to propagate the exit status. */
1563 UNIT_FOREACH_DEPENDENCY(other
, UNIT(s
), UNIT_ATOM_ON_FAILURE_OF
) {
1569 UNIT_FOREACH_DEPENDENCY(other
, UNIT(s
), UNIT_ATOM_ON_SUCCESS_OF
) {
1575 return SERVICE(candidate
);
1578 log_unit_warning(UNIT(s
), "multiple trigger source candidates for exit status propagation (%s, %s), skipping.",
1579 candidate
->id
, other
->id
);
1583 static ExecFlags
service_exec_flags(ServiceExecCommand command_id
, ExecFlags cred_flag
) {
1584 /* All service main/control processes honor sandboxing and namespacing options (except those
1585 explicitly excluded in service_spawn()) */
1586 ExecFlags flags
= EXEC_APPLY_SANDBOXING
|EXEC_APPLY_CHROOT
;
1588 assert(command_id
>= 0);
1589 assert(command_id
< _SERVICE_EXEC_COMMAND_MAX
);
1590 assert((cred_flag
& ~(EXEC_SETUP_CREDENTIALS_FRESH
|EXEC_SETUP_CREDENTIALS
)) == 0);
1591 assert((cred_flag
!= 0) == (command_id
== SERVICE_EXEC_START
));
1593 /* Control processes spawned before main process also get tty access */
1594 if (IN_SET(command_id
, SERVICE_EXEC_CONDITION
, SERVICE_EXEC_START_PRE
, SERVICE_EXEC_START
))
1595 flags
|= EXEC_APPLY_TTY_STDIN
;
1597 /* All start phases get access to credentials. ExecStartPre= gets a new credential store upon
1598 * every invocation, so that updating credential files through it works. When the first main process
1599 * starts, passed creds become stable. Also see 'cred_flag'. */
1600 if (command_id
== SERVICE_EXEC_START_PRE
)
1601 flags
|= EXEC_SETUP_CREDENTIALS_FRESH
;
1602 if (command_id
== SERVICE_EXEC_START_POST
)
1603 flags
|= EXEC_SETUP_CREDENTIALS
;
1605 if (IN_SET(command_id
, SERVICE_EXEC_START_PRE
, SERVICE_EXEC_START
))
1606 flags
|= EXEC_SETENV_MONITOR_RESULT
;
1608 if (command_id
== SERVICE_EXEC_START
)
1609 return flags
|cred_flag
|EXEC_PASS_FDS
|EXEC_SET_WATCHDOG
;
1611 flags
|= EXEC_IS_CONTROL
;
1613 /* Put control processes spawned later than main process under .control sub-cgroup if appropriate */
1614 if (!IN_SET(command_id
, SERVICE_EXEC_CONDITION
, SERVICE_EXEC_START_PRE
))
1615 flags
|= EXEC_CONTROL_CGROUP
;
1617 if (IN_SET(command_id
, SERVICE_EXEC_STOP
, SERVICE_EXEC_STOP_POST
))
1618 flags
|= EXEC_SETENV_RESULT
;
1623 static int service_spawn_internal(
1631 _cleanup_(exec_params_shallow_clear
) ExecParameters exec_params
= EXEC_PARAMETERS_INIT(flags
);
1632 _cleanup_(sd_event_source_unrefp
) sd_event_source
*exec_fd_source
= NULL
;
1633 _cleanup_strv_free_
char **final_env
= NULL
, **our_env
= NULL
;
1634 _cleanup_(pidref_done
) PidRef pidref
= PIDREF_NULL
;
1643 log_unit_debug(UNIT(s
), "Will spawn child (%s): %s", caller
, c
->path
);
1645 r
= unit_prepare_exec(UNIT(s
)); /* This realizes the cgroup, among other things */
1649 assert(!s
->exec_fd_event_source
);
1651 if (FLAGS_SET(exec_params
.flags
, EXEC_IS_CONTROL
)) {
1652 /* If this is a control process, mask the permissions/chroot application if this is requested. */
1653 if (s
->permissions_start_only
)
1654 exec_params
.flags
&= ~EXEC_APPLY_SANDBOXING
;
1655 if (s
->root_directory_start_only
)
1656 exec_params
.flags
&= ~EXEC_APPLY_CHROOT
;
1659 if (FLAGS_SET(exec_params
.flags
, EXEC_PASS_FDS
) ||
1660 s
->exec_context
.std_input
== EXEC_INPUT_SOCKET
||
1661 s
->exec_context
.std_output
== EXEC_OUTPUT_SOCKET
||
1662 s
->exec_context
.std_error
== EXEC_OUTPUT_SOCKET
) {
1664 r
= service_collect_fds(s
,
1666 &exec_params
.fd_names
,
1667 &exec_params
.n_socket_fds
,
1668 &exec_params
.n_storage_fds
);
1672 exec_params
.open_files
= s
->open_files
;
1674 exec_params
.flags
|= EXEC_PASS_FDS
;
1676 log_unit_debug(UNIT(s
), "Passing %zu fds to service", exec_params
.n_socket_fds
+ exec_params
.n_storage_fds
);
1679 if (!FLAGS_SET(exec_params
.flags
, EXEC_IS_CONTROL
) && s
->type
== SERVICE_EXEC
) {
1680 r
= service_allocate_exec_fd(s
, &exec_fd_source
, &exec_params
.exec_fd
);
1685 r
= service_arm_timer(s
, /* relative= */ true, timeout
);
1689 our_env
= new0(char*, 13);
1693 if (service_exec_needs_notify_socket(s
, exec_params
.flags
)) {
1694 if (asprintf(our_env
+ n_env
++, "NOTIFY_SOCKET=%s", UNIT(s
)->manager
->notify_socket
) < 0)
1697 exec_params
.notify_socket
= UNIT(s
)->manager
->notify_socket
;
1699 if (s
->n_fd_store_max
> 0)
1700 if (asprintf(our_env
+ n_env
++, "FDSTORE=%u", s
->n_fd_store_max
) < 0)
1704 if (pidref_is_set(&s
->main_pid
))
1705 if (asprintf(our_env
+ n_env
++, "MAINPID="PID_FMT
, s
->main_pid
.pid
) < 0)
1708 if (MANAGER_IS_USER(UNIT(s
)->manager
))
1709 if (asprintf(our_env
+ n_env
++, "MANAGERPID="PID_FMT
, getpid_cached()) < 0)
1713 if (asprintf(our_env
+ n_env
++, "PIDFILE=%s", s
->pid_file
) < 0)
1716 if (s
->socket_fd
>= 0) {
1717 union sockaddr_union sa
;
1718 socklen_t salen
= sizeof(sa
);
1720 /* If this is a per-connection service instance, let's set $REMOTE_ADDR and $REMOTE_PORT to something
1721 * useful. Note that we do this only when we are still connected at this point in time, which we might
1722 * very well not be. Hence we ignore all errors when retrieving peer information (as that might result
1723 * in ENOTCONN), and just use whate we can use. */
1725 if (getpeername(s
->socket_fd
, &sa
.sa
, &salen
) >= 0 &&
1726 IN_SET(sa
.sa
.sa_family
, AF_INET
, AF_INET6
, AF_VSOCK
)) {
1727 _cleanup_free_
char *addr
= NULL
;
1731 r
= sockaddr_pretty(&sa
.sa
, salen
, true, false, &addr
);
1735 t
= strjoin("REMOTE_ADDR=", addr
);
1738 our_env
[n_env
++] = t
;
1740 r
= sockaddr_port(&sa
.sa
, &port
);
1744 if (asprintf(&t
, "REMOTE_PORT=%u", port
) < 0)
1746 our_env
[n_env
++] = t
;
1750 Service
*env_source
= NULL
;
1751 const char *monitor_prefix
;
1752 if (FLAGS_SET(exec_params
.flags
, EXEC_SETENV_RESULT
)) {
1754 monitor_prefix
= "";
1755 } else if (FLAGS_SET(exec_params
.flags
, EXEC_SETENV_MONITOR_RESULT
)) {
1756 env_source
= service_get_triggering_service(s
);
1757 monitor_prefix
= "MONITOR_";
1761 if (asprintf(our_env
+ n_env
++, "%sSERVICE_RESULT=%s", monitor_prefix
, service_result_to_string(env_source
->result
)) < 0)
1764 if (env_source
->main_exec_status
.pid
> 0 &&
1765 dual_timestamp_is_set(&env_source
->main_exec_status
.exit_timestamp
)) {
1766 if (asprintf(our_env
+ n_env
++, "%sEXIT_CODE=%s", monitor_prefix
, sigchld_code_to_string(env_source
->main_exec_status
.code
)) < 0)
1769 if (env_source
->main_exec_status
.code
== CLD_EXITED
)
1770 r
= asprintf(our_env
+ n_env
++, "%sEXIT_STATUS=%i", monitor_prefix
, env_source
->main_exec_status
.status
);
1772 r
= asprintf(our_env
+ n_env
++, "%sEXIT_STATUS=%s", monitor_prefix
, signal_to_string(env_source
->main_exec_status
.status
));
1777 if (env_source
!= s
) {
1778 if (!sd_id128_is_null(UNIT(env_source
)->invocation_id
))
1779 if (asprintf(our_env
+ n_env
++, "%sINVOCATION_ID=" SD_ID128_FORMAT_STR
,
1780 monitor_prefix
, SD_ID128_FORMAT_VAL(UNIT(env_source
)->invocation_id
)) < 0)
1783 if (asprintf(our_env
+ n_env
++, "%sUNIT=%s", monitor_prefix
, UNIT(env_source
)->id
) < 0)
1788 if (UNIT(s
)->activation_details
) {
1789 r
= activation_details_append_env(UNIT(s
)->activation_details
, &our_env
);
1792 /* The number of env vars added here can vary, rather than keeping the allocation block in
1793 * sync manually, these functions simply use the strv methods to append to it, so we need
1794 * to update n_env when we are done in case of future usage. */
1798 r
= unit_set_exec_params(UNIT(s
), &exec_params
);
1802 final_env
= strv_env_merge(exec_params
.environment
, our_env
);
1806 /* System D-Bus needs nss-systemd disabled, so that we don't deadlock */
1807 SET_FLAG(exec_params
.flags
, EXEC_NSS_DYNAMIC_BYPASS
,
1808 MANAGER_IS_SYSTEM(UNIT(s
)->manager
) && unit_has_name(UNIT(s
), SPECIAL_DBUS_SERVICE
));
1810 strv_free_and_replace(exec_params
.environment
, final_env
);
1811 exec_params
.watchdog_usec
= service_get_watchdog_usec(s
);
1812 exec_params
.selinux_context_net
= s
->socket_fd_selinux_context_net
;
1813 if (s
->type
== SERVICE_IDLE
)
1814 exec_params
.idle_pipe
= UNIT(s
)->manager
->idle_pipe
;
1815 exec_params
.stdin_fd
= s
->stdin_fd
;
1816 exec_params
.stdout_fd
= s
->stdout_fd
;
1817 exec_params
.stderr_fd
= s
->stderr_fd
;
1819 r
= exec_spawn(UNIT(s
),
1829 s
->exec_fd_event_source
= TAKE_PTR(exec_fd_source
);
1830 s
->exec_fd_hot
= false;
1832 r
= unit_watch_pidref(UNIT(s
), &pidref
, /* exclusive= */ true);
1836 *ret_pid
= TAKE_PIDREF(pidref
);
1840 static int main_pid_good(Service
*s
) {
1843 /* Returns 0 if the pid is dead, > 0 if it is good, < 0 if we don't know */
1845 /* If we know the pid file, then let's just check if it is still valid */
1846 if (s
->main_pid_known
) {
1848 /* If it's an alien child let's check if it is still alive ... */
1849 if (s
->main_pid_alien
&& pidref_is_set(&s
->main_pid
))
1850 return pidref_is_alive(&s
->main_pid
);
1852 /* .. otherwise assume we'll get a SIGCHLD for it, which we really should wait for to collect
1853 * exit status and code */
1854 return pidref_is_set(&s
->main_pid
);
1857 /* We don't know the pid */
1861 static int control_pid_good(Service
*s
) {
1864 /* Returns 0 if the control PID is dead, > 0 if it is good. We never actually return < 0 here, but in order to
1865 * make this function as similar as possible to main_pid_good() and cgroup_good(), we pretend that < 0 also
1866 * means: we can't figure it out. */
1868 return pidref_is_set(&s
->control_pid
);
1871 static int cgroup_good(Service
*s
) {
1876 /* Returns 0 if the cgroup is empty or doesn't exist, > 0 if it is exists and is populated, < 0 if we can't
1879 if (!s
->cgroup_runtime
|| !s
->cgroup_runtime
->cgroup_path
)
1882 r
= cg_is_empty_recursive(SYSTEMD_CGROUP_CONTROLLER
, s
->cgroup_runtime
->cgroup_path
);
1889 static bool service_shall_restart(Service
*s
, const char **reason
) {
1893 /* Don't restart after manual stops */
1894 if (s
->forbid_restart
) {
1895 *reason
= "manual stop";
1899 /* Never restart if this is configured as special exception */
1900 if (exit_status_set_test(&s
->restart_prevent_status
, s
->main_exec_status
.code
, s
->main_exec_status
.status
)) {
1901 *reason
= "prevented by exit status";
1905 /* Restart if the exit code/status are configured as restart triggers */
1906 if (exit_status_set_test(&s
->restart_force_status
, s
->main_exec_status
.code
, s
->main_exec_status
.status
)) {
1907 /* Don't allow Type=oneshot services to restart on success. Note that Restart=always/on-success
1908 * is already rejected in service_verify. */
1909 if (s
->type
== SERVICE_ONESHOT
&& s
->result
== SERVICE_SUCCESS
) {
1910 *reason
= "service type and exit status";
1914 *reason
= "forced by exit status";
1918 *reason
= "restart setting";
1919 switch (s
->restart
) {
1921 case SERVICE_RESTART_NO
:
1924 case SERVICE_RESTART_ALWAYS
:
1925 return s
->result
!= SERVICE_SKIP_CONDITION
;
1927 case SERVICE_RESTART_ON_SUCCESS
:
1928 return s
->result
== SERVICE_SUCCESS
;
1930 case SERVICE_RESTART_ON_FAILURE
:
1931 return !IN_SET(s
->result
, SERVICE_SUCCESS
, SERVICE_SKIP_CONDITION
);
1933 case SERVICE_RESTART_ON_ABNORMAL
:
1934 return !IN_SET(s
->result
, SERVICE_SUCCESS
, SERVICE_FAILURE_EXIT_CODE
, SERVICE_SKIP_CONDITION
);
1936 case SERVICE_RESTART_ON_WATCHDOG
:
1937 return s
->result
== SERVICE_FAILURE_WATCHDOG
;
1939 case SERVICE_RESTART_ON_ABORT
:
1940 return IN_SET(s
->result
, SERVICE_FAILURE_SIGNAL
, SERVICE_FAILURE_CORE_DUMP
);
1943 assert_not_reached();
1947 static bool service_will_restart(Unit
*u
) {
1948 Service
*s
= SERVICE(u
);
1952 if (IN_SET(s
->state
, SERVICE_DEAD_BEFORE_AUTO_RESTART
, SERVICE_FAILED_BEFORE_AUTO_RESTART
, SERVICE_AUTO_RESTART
, SERVICE_AUTO_RESTART_QUEUED
))
1955 return unit_will_restart_default(u
);
1958 static ServiceState
service_determine_dead_state(Service
*s
) {
1961 return s
->fd_store
&& s
->fd_store_preserve_mode
== EXEC_PRESERVE_YES
? SERVICE_DEAD_RESOURCES_PINNED
: SERVICE_DEAD
;
1964 static void service_enter_dead(Service
*s
, ServiceResult f
, bool allow_restart
) {
1965 ServiceState end_state
, restart_state
;
1970 /* If there's a stop job queued before we enter the DEAD state, we shouldn't act on Restart=, in order to not
1971 * undo what has already been enqueued. */
1972 if (unit_stop_pending(UNIT(s
)))
1973 allow_restart
= false;
1975 if (s
->result
== SERVICE_SUCCESS
)
1978 if (s
->result
== SERVICE_SUCCESS
) {
1979 unit_log_success(UNIT(s
));
1980 end_state
= service_determine_dead_state(s
);
1981 restart_state
= SERVICE_DEAD_BEFORE_AUTO_RESTART
;
1982 } else if (s
->result
== SERVICE_SKIP_CONDITION
) {
1983 unit_log_skip(UNIT(s
), service_result_to_string(s
->result
));
1984 end_state
= service_determine_dead_state(s
);
1985 restart_state
= _SERVICE_STATE_INVALID
; /* Never restart if skipped due to condition failure */
1987 unit_log_failure(UNIT(s
), service_result_to_string(s
->result
));
1988 end_state
= SERVICE_FAILED
;
1989 restart_state
= SERVICE_FAILED_BEFORE_AUTO_RESTART
;
1991 unit_warn_leftover_processes(UNIT(s
), unit_log_leftover_process_stop
);
1994 log_unit_debug(UNIT(s
), "Service restart not allowed.");
1998 allow_restart
= service_shall_restart(s
, &reason
);
1999 log_unit_debug(UNIT(s
), "Service will %srestart (%s)",
2000 allow_restart
? "" : "not ",
2004 if (allow_restart
) {
2005 usec_t restart_usec_next
;
2007 assert(restart_state
>= 0 && restart_state
< _SERVICE_STATE_MAX
);
2009 /* We make two state changes here: one that maps to the high-level UNIT_INACTIVE/UNIT_FAILED
2010 * state (i.e. a state indicating deactivation), and then one that maps to the
2011 * high-level UNIT_STARTING state (i.e. a state indicating activation). We do this so that
2012 * external software can watch the state changes and see all service failures, even if they
2013 * are only transitionary and followed by an automatic restart. We have fine-grained
2014 * low-level states for this though so that software can distinguish the permanent UNIT_INACTIVE
2015 * state from this transitionary UNIT_INACTIVE state by looking at the low-level states. */
2016 if (s
->restart_mode
!= SERVICE_RESTART_MODE_DIRECT
)
2017 service_set_state(s
, restart_state
);
2019 restart_usec_next
= service_restart_usec_next(s
);
2021 r
= service_arm_timer(s
, /* relative= */ true, restart_usec_next
);
2023 log_unit_warning_errno(UNIT(s
), r
, "Failed to install restart timer: %m");
2024 return service_enter_dead(s
, SERVICE_FAILURE_RESOURCES
, /* allow_restart= */ false);
2027 log_unit_debug(UNIT(s
), "Next restart interval calculated as: %s", FORMAT_TIMESPAN(restart_usec_next
, 0));
2029 service_set_state(s
, SERVICE_AUTO_RESTART
);
2031 service_set_state(s
, end_state
);
2033 /* If we shan't restart, then flush out the restart counter. But don't do that immediately, so that the
2034 * user can still introspect the counter. Do so on the next start. */
2035 s
->flush_n_restarts
= true;
2038 /* The new state is in effect, let's decrease the fd store ref counter again. Let's also re-add us to the GC
2039 * queue, so that the fd store is possibly gc'ed again */
2040 unit_add_to_gc_queue(UNIT(s
));
2042 /* The next restart might not be a manual stop, hence reset the flag indicating manual stops */
2043 s
->forbid_restart
= false;
2045 /* Reset NotifyAccess override */
2046 s
->notify_access_override
= _NOTIFY_ACCESS_INVALID
;
2048 /* We want fresh tmpdirs and ephemeral snapshots in case the service is started again immediately. */
2049 s
->exec_runtime
= exec_runtime_destroy(s
->exec_runtime
);
2051 /* Also, remove the runtime directory */
2052 unit_destroy_runtime_data(UNIT(s
), &s
->exec_context
);
2054 /* Also get rid of the fd store, if that's configured. */
2055 if (s
->fd_store_preserve_mode
== EXEC_PRESERVE_NO
)
2056 service_release_fd_store(s
);
2058 /* Get rid of the IPC bits of the user */
2059 unit_unref_uid_gid(UNIT(s
), true);
2061 /* Try to delete the pid file. At this point it will be
2062 * out-of-date, and some software might be confused by it, so
2063 * let's remove it. */
2065 (void) unlink(s
->pid_file
);
2067 /* Reset TTY ownership if necessary */
2068 exec_context_revert_tty(&s
->exec_context
);
2071 static void service_enter_stop_post(Service
*s
, ServiceResult f
) {
2075 if (s
->result
== SERVICE_SUCCESS
)
2078 service_unwatch_control_pid(s
);
2079 (void) unit_enqueue_rewatch_pids(UNIT(s
));
2081 s
->control_command
= s
->exec_command
[SERVICE_EXEC_STOP_POST
];
2082 if (s
->control_command
) {
2083 s
->control_command_id
= SERVICE_EXEC_STOP_POST
;
2084 pidref_done(&s
->control_pid
);
2086 r
= service_spawn(s
,
2088 service_exec_flags(s
->control_command_id
, /* cred_flag = */ 0),
2089 s
->timeout_stop_usec
,
2092 log_unit_warning_errno(UNIT(s
), r
, "Failed to spawn 'stop-post' task: %m");
2093 service_enter_signal(s
, SERVICE_FINAL_SIGTERM
, SERVICE_FAILURE_RESOURCES
);
2097 service_set_state(s
, SERVICE_STOP_POST
);
2099 service_enter_signal(s
, SERVICE_FINAL_SIGTERM
, SERVICE_SUCCESS
);
2102 static int state_to_kill_operation(Service
*s
, ServiceState state
) {
2105 case SERVICE_STOP_WATCHDOG
:
2106 case SERVICE_FINAL_WATCHDOG
:
2107 return KILL_WATCHDOG
;
2109 case SERVICE_STOP_SIGTERM
:
2110 if (unit_has_job_type(UNIT(s
), JOB_RESTART
))
2111 return KILL_RESTART
;
2114 case SERVICE_FINAL_SIGTERM
:
2115 return KILL_TERMINATE
;
2117 case SERVICE_STOP_SIGKILL
:
2118 case SERVICE_FINAL_SIGKILL
:
2122 return _KILL_OPERATION_INVALID
;
2126 static void service_enter_signal(Service
*s
, ServiceState state
, ServiceResult f
) {
2127 int kill_operation
, r
;
2131 if (s
->result
== SERVICE_SUCCESS
)
2134 /* Before sending any signal, make sure we track all members of this cgroup */
2135 (void) unit_watch_all_pids(UNIT(s
));
2137 /* Also, enqueue a job that we recheck all our PIDs a bit later, given that it's likely some processes have
2139 (void) unit_enqueue_rewatch_pids(UNIT(s
));
2141 kill_operation
= state_to_kill_operation(s
, state
);
2142 r
= unit_kill_context(UNIT(s
), kill_operation
);
2144 log_unit_warning_errno(UNIT(s
), r
, "Failed to kill processes: %m");
2149 r
= service_arm_timer(s
, /* relative= */ true,
2150 kill_operation
== KILL_WATCHDOG
? service_timeout_abort_usec(s
) : s
->timeout_stop_usec
);
2152 log_unit_warning_errno(UNIT(s
), r
, "Failed to install timer: %m");
2156 service_set_state(s
, state
);
2157 } else if (IN_SET(state
, SERVICE_STOP_WATCHDOG
, SERVICE_STOP_SIGTERM
) && s
->kill_context
.send_sigkill
)
2158 service_enter_signal(s
, SERVICE_STOP_SIGKILL
, SERVICE_SUCCESS
);
2159 else if (IN_SET(state
, SERVICE_STOP_WATCHDOG
, SERVICE_STOP_SIGTERM
, SERVICE_STOP_SIGKILL
))
2160 service_enter_stop_post(s
, SERVICE_SUCCESS
);
2161 else if (IN_SET(state
, SERVICE_FINAL_WATCHDOG
, SERVICE_FINAL_SIGTERM
) && s
->kill_context
.send_sigkill
)
2162 service_enter_signal(s
, SERVICE_FINAL_SIGKILL
, SERVICE_SUCCESS
);
2164 service_enter_dead(s
, SERVICE_SUCCESS
, /* allow_restart= */ true);
2169 if (IN_SET(state
, SERVICE_STOP_WATCHDOG
, SERVICE_STOP_SIGTERM
, SERVICE_STOP_SIGKILL
))
2170 service_enter_stop_post(s
, SERVICE_FAILURE_RESOURCES
);
2172 service_enter_dead(s
, SERVICE_FAILURE_RESOURCES
, /* allow_restart= */ true);
2175 static void service_enter_stop_by_notify(Service
*s
) {
2180 (void) unit_enqueue_rewatch_pids(UNIT(s
));
2182 r
= service_arm_timer(s
, /* relative= */ true, s
->timeout_stop_usec
);
2184 log_unit_warning_errno(UNIT(s
), r
, "Failed to install timer: %m");
2185 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, SERVICE_FAILURE_RESOURCES
);
2189 /* The service told us it's stopping, so it's as if we SIGTERM'd it. */
2190 service_set_state(s
, SERVICE_STOP_SIGTERM
);
2193 static void service_enter_stop(Service
*s
, ServiceResult f
) {
2198 if (s
->result
== SERVICE_SUCCESS
)
2201 service_unwatch_control_pid(s
);
2202 (void) unit_enqueue_rewatch_pids(UNIT(s
));
2204 s
->control_command
= s
->exec_command
[SERVICE_EXEC_STOP
];
2205 if (s
->control_command
) {
2206 s
->control_command_id
= SERVICE_EXEC_STOP
;
2207 pidref_done(&s
->control_pid
);
2209 r
= service_spawn(s
,
2211 service_exec_flags(s
->control_command_id
, /* cred_flag = */ 0),
2212 s
->timeout_stop_usec
,
2215 log_unit_warning_errno(UNIT(s
), r
, "Failed to spawn 'stop' task: %m");
2216 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, SERVICE_FAILURE_RESOURCES
);
2220 service_set_state(s
, SERVICE_STOP
);
2222 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, SERVICE_SUCCESS
);
2225 static bool service_good(Service
*s
) {
2230 if (s
->type
== SERVICE_DBUS
&& !s
->bus_name_good
)
2233 main_pid_ok
= main_pid_good(s
);
2234 if (main_pid_ok
> 0) /* It's alive */
2236 if (main_pid_ok
== 0 && s
->exit_type
== SERVICE_EXIT_MAIN
) /* It's dead */
2239 /* OK, we don't know anything about the main PID, maybe
2240 * because there is none. Let's check the control group
2243 return cgroup_good(s
) != 0;
2246 static void service_enter_running(Service
*s
, ServiceResult f
) {
2251 if (s
->result
== SERVICE_SUCCESS
)
2254 service_unwatch_control_pid(s
);
2256 if (s
->result
!= SERVICE_SUCCESS
)
2257 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, f
);
2258 else if (service_good(s
)) {
2260 /* If there are any queued up sd_notify() notifications, process them now */
2261 if (s
->notify_state
== NOTIFY_RELOADING
)
2262 service_enter_reload_by_notify(s
);
2263 else if (s
->notify_state
== NOTIFY_STOPPING
)
2264 service_enter_stop_by_notify(s
);
2266 service_set_state(s
, SERVICE_RUNNING
);
2268 r
= service_arm_timer(s
, /* relative= */ false, service_running_timeout(s
));
2270 log_unit_warning_errno(UNIT(s
), r
, "Failed to install timer: %m");
2271 service_enter_running(s
, SERVICE_FAILURE_RESOURCES
);
2276 } else if (s
->remain_after_exit
)
2277 service_set_state(s
, SERVICE_EXITED
);
2279 service_enter_stop(s
, SERVICE_SUCCESS
);
2282 static void service_enter_start_post(Service
*s
) {
2287 service_unwatch_control_pid(s
);
2288 service_reset_watchdog(s
);
2290 s
->control_command
= s
->exec_command
[SERVICE_EXEC_START_POST
];
2291 if (s
->control_command
) {
2292 s
->control_command_id
= SERVICE_EXEC_START_POST
;
2293 pidref_done(&s
->control_pid
);
2295 r
= service_spawn(s
,
2297 service_exec_flags(s
->control_command_id
, /* cred_flag = */ 0),
2298 s
->timeout_start_usec
,
2301 log_unit_warning_errno(UNIT(s
), r
, "Failed to spawn 'start-post' task: %m");
2302 service_enter_stop(s
, SERVICE_FAILURE_RESOURCES
);
2306 service_set_state(s
, SERVICE_START_POST
);
2308 service_enter_running(s
, SERVICE_SUCCESS
);
2311 static void service_kill_control_process(Service
*s
) {
2316 if (!pidref_is_set(&s
->control_pid
))
2319 r
= pidref_kill_and_sigcont(&s
->control_pid
, SIGKILL
);
2321 _cleanup_free_
char *comm
= NULL
;
2323 (void) pidref_get_comm(&s
->control_pid
, &comm
);
2325 log_unit_debug_errno(UNIT(s
), r
, "Failed to kill control process " PID_FMT
" (%s), ignoring: %m",
2326 s
->control_pid
.pid
, strna(comm
));
2330 static int service_adverse_to_leftover_processes(Service
*s
) {
2333 /* KillMode=mixed and control group are used to indicate that all process should be killed off.
2334 * SendSIGKILL= is used for services that require a clean shutdown. These are typically database
2335 * service where a SigKilled process would result in a lengthy recovery and who's shutdown or startup
2336 * time is quite variable (so Timeout settings aren't of use).
2338 * Here we take these two factors and refuse to start a service if there are existing processes
2339 * within a control group. Databases, while generally having some protection against multiple
2340 * instances running, lets not stress the rigor of these. Also ExecStartPre= parts of the service
2341 * aren't as rigoriously written to protect aganst against multiple use. */
2343 if (unit_warn_leftover_processes(UNIT(s
), unit_log_leftover_process_start
) > 0 &&
2344 IN_SET(s
->kill_context
.kill_mode
, KILL_MIXED
, KILL_CONTROL_GROUP
) &&
2345 !s
->kill_context
.send_sigkill
)
2346 return log_unit_error_errno(UNIT(s
), SYNTHETIC_ERRNO(EBUSY
),
2347 "Will not start SendSIGKILL=no service of type KillMode=control-group or mixed while processes exist");
2352 static void service_enter_start(Service
*s
) {
2353 _cleanup_(pidref_done
) PidRef pidref
= PIDREF_NULL
;
2360 service_unwatch_control_pid(s
);
2361 service_unwatch_main_pid(s
);
2363 r
= service_adverse_to_leftover_processes(s
);
2367 if (s
->type
== SERVICE_FORKING
) {
2368 s
->control_command_id
= SERVICE_EXEC_START
;
2369 c
= s
->control_command
= s
->exec_command
[SERVICE_EXEC_START
];
2371 s
->main_command
= NULL
;
2373 s
->control_command_id
= _SERVICE_EXEC_COMMAND_INVALID
;
2374 s
->control_command
= NULL
;
2376 c
= s
->main_command
= s
->exec_command
[SERVICE_EXEC_START
];
2380 if (s
->type
!= SERVICE_ONESHOT
) {
2381 /* There's no command line configured for the main command? Hmm, that is strange.
2382 * This can only happen if the configuration changes at runtime. In this case,
2383 * let's enter a failure state. */
2384 r
= log_unit_error_errno(UNIT(s
), SYNTHETIC_ERRNO(ENXIO
), "There's no 'start' task anymore we could start.");
2388 /* We force a fake state transition here. Otherwise, the unit would go directly from
2389 * SERVICE_DEAD to SERVICE_DEAD without SERVICE_ACTIVATING or SERVICE_ACTIVE
2390 * in between. This way we can later trigger actions that depend on the state
2391 * transition, including SuccessAction=. */
2392 service_set_state(s
, SERVICE_START
);
2394 service_enter_start_post(s
);
2398 if (IN_SET(s
->type
, SERVICE_SIMPLE
, SERVICE_IDLE
))
2399 /* For simple + idle this is the main process. We don't apply any timeout here, but
2400 * service_enter_running() will later apply the .runtime_max_usec timeout. */
2401 timeout
= USEC_INFINITY
;
2403 timeout
= s
->timeout_start_usec
;
2405 r
= service_spawn(s
,
2407 service_exec_flags(SERVICE_EXEC_START
, EXEC_SETUP_CREDENTIALS_FRESH
),
2411 log_unit_warning_errno(UNIT(s
), r
, "Failed to spawn 'start' task: %m");
2415 assert(pidref
.pid
== c
->exec_status
.pid
);
2419 case SERVICE_SIMPLE
:
2421 /* For simple services we immediately start the START_POST binaries. */
2422 (void) service_set_main_pidref(s
, TAKE_PIDREF(pidref
), &c
->exec_status
.start_timestamp
);
2423 return service_enter_start_post(s
);
2425 case SERVICE_FORKING
:
2426 /* For forking services we wait until the start process exited. */
2427 pidref_done(&s
->control_pid
);
2428 s
->control_pid
= TAKE_PIDREF(pidref
);
2429 return service_set_state(s
, SERVICE_START
);
2431 case SERVICE_ONESHOT
: /* For oneshot services we wait until the start process exited, too, but it is our main process. */
2434 case SERVICE_NOTIFY
:
2435 case SERVICE_NOTIFY_RELOAD
:
2436 /* For D-Bus services we know the main pid right away, but wait for the bus name to appear
2437 * on the bus. 'notify' and 'exec' services wait for readiness notification and EOF
2438 * on exec_fd, respectively. */
2439 (void) service_set_main_pidref(s
, TAKE_PIDREF(pidref
), &c
->exec_status
.start_timestamp
);
2440 return service_set_state(s
, SERVICE_START
);
2443 assert_not_reached();
2447 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, SERVICE_FAILURE_RESOURCES
);
2450 static void service_enter_start_pre(Service
*s
) {
2455 service_unwatch_control_pid(s
);
2457 s
->control_command
= s
->exec_command
[SERVICE_EXEC_START_PRE
];
2458 if (s
->control_command
) {
2460 r
= service_adverse_to_leftover_processes(s
);
2464 s
->control_command_id
= SERVICE_EXEC_START_PRE
;
2466 r
= service_spawn(s
,
2468 service_exec_flags(s
->control_command_id
, /* cred_flag = */ 0),
2469 s
->timeout_start_usec
,
2472 log_unit_warning_errno(UNIT(s
), r
, "Failed to spawn 'start-pre' task: %m");
2476 service_set_state(s
, SERVICE_START_PRE
);
2478 service_enter_start(s
);
2483 service_enter_dead(s
, SERVICE_FAILURE_RESOURCES
, /* allow_restart= */ true);
2486 static void service_enter_condition(Service
*s
) {
2491 service_unwatch_control_pid(s
);
2493 s
->control_command
= s
->exec_command
[SERVICE_EXEC_CONDITION
];
2494 if (s
->control_command
) {
2496 r
= service_adverse_to_leftover_processes(s
);
2500 s
->control_command_id
= SERVICE_EXEC_CONDITION
;
2501 pidref_done(&s
->control_pid
);
2503 r
= service_spawn(s
,
2505 service_exec_flags(s
->control_command_id
, /* cred_flag = */ 0),
2506 s
->timeout_start_usec
,
2509 log_unit_warning_errno(UNIT(s
), r
, "Failed to spawn 'exec-condition' task: %m");
2513 service_set_state(s
, SERVICE_CONDITION
);
2515 service_enter_start_pre(s
);
2520 service_enter_dead(s
, SERVICE_FAILURE_RESOURCES
, /* allow_restart= */ true);
2523 static void service_enter_restart(Service
*s
) {
2524 _cleanup_(sd_bus_error_free
) sd_bus_error error
= SD_BUS_ERROR_NULL
;
2529 if (unit_has_job_type(UNIT(s
), JOB_STOP
)) {
2530 /* Don't restart things if we are going down anyway */
2531 log_unit_info(UNIT(s
), "Stop job pending for unit, skipping automatic restart.");
2535 /* Any units that are bound to this service must also be restarted. We use JOB_START for ourselves
2536 * but then set JOB_RESTART_DEPENDENCIES which will enqueue JOB_RESTART for those dependency jobs. */
2537 r
= manager_add_job(UNIT(s
)->manager
, JOB_START
, UNIT(s
), JOB_RESTART_DEPENDENCIES
, NULL
, &error
, NULL
);
2539 log_unit_warning(UNIT(s
), "Failed to schedule restart job: %s", bus_error_message(&error
, r
));
2540 service_enter_dead(s
, SERVICE_FAILURE_RESOURCES
, /* allow_restart= */ false);
2544 /* Count the jobs we enqueue for restarting. This counter is maintained as long as the unit isn't
2545 * fully stopped, i.e. as long as it remains up or remains in auto-start states. The user can reset
2546 * the counter explicitly however via the usual "systemctl reset-failure" logic. */
2548 s
->flush_n_restarts
= false;
2550 log_unit_struct(UNIT(s
), LOG_INFO
,
2551 "MESSAGE_ID=" SD_MESSAGE_UNIT_RESTART_SCHEDULED_STR
,
2552 LOG_UNIT_INVOCATION_ID(UNIT(s
)),
2553 LOG_UNIT_MESSAGE(UNIT(s
),
2554 "Scheduled restart job, restart counter is at %u.", s
->n_restarts
),
2555 "N_RESTARTS=%u", s
->n_restarts
);
2557 service_set_state(s
, SERVICE_AUTO_RESTART_QUEUED
);
2559 /* Notify clients about changed restart counter */
2560 unit_add_to_dbus_queue(UNIT(s
));
2563 static void service_enter_reload_by_notify(Service
*s
) {
2564 _cleanup_(sd_bus_error_free
) sd_bus_error error
= SD_BUS_ERROR_NULL
;
2569 r
= service_arm_timer(s
, /* relative= */ true, s
->timeout_start_usec
);
2571 log_unit_warning_errno(UNIT(s
), r
, "Failed to install timer: %m");
2572 s
->reload_result
= SERVICE_FAILURE_RESOURCES
;
2573 service_enter_running(s
, SERVICE_SUCCESS
);
2577 service_set_state(s
, SERVICE_RELOAD_NOTIFY
);
2579 /* service_enter_reload_by_notify is never called during a reload, thus no loops are possible. */
2580 r
= manager_propagate_reload(UNIT(s
)->manager
, UNIT(s
), JOB_FAIL
, &error
);
2582 log_unit_warning(UNIT(s
), "Failed to schedule propagation of reload, ignoring: %s", bus_error_message(&error
, r
));
2585 static void service_enter_reload(Service
*s
) {
2586 bool killed
= false;
2591 service_unwatch_control_pid(s
);
2592 s
->reload_result
= SERVICE_SUCCESS
;
2594 usec_t ts
= now(CLOCK_MONOTONIC
);
2596 if (s
->type
== SERVICE_NOTIFY_RELOAD
&& pidref_is_set(&s
->main_pid
)) {
2597 r
= pidref_kill_and_sigcont(&s
->main_pid
, s
->reload_signal
);
2599 log_unit_warning_errno(UNIT(s
), r
, "Failed to send reload signal: %m");
2606 s
->control_command
= s
->exec_command
[SERVICE_EXEC_RELOAD
];
2607 if (s
->control_command
) {
2608 s
->control_command_id
= SERVICE_EXEC_RELOAD
;
2609 pidref_done(&s
->control_pid
);
2611 r
= service_spawn(s
,
2613 service_exec_flags(s
->control_command_id
, /* cred_flag = */ 0),
2614 s
->timeout_start_usec
,
2617 log_unit_warning_errno(UNIT(s
), r
, "Failed to spawn 'reload' task: %m");
2621 service_set_state(s
, SERVICE_RELOAD
);
2622 } else if (killed
) {
2623 r
= service_arm_timer(s
, /* relative= */ true, s
->timeout_start_usec
);
2625 log_unit_warning_errno(UNIT(s
), r
, "Failed to install timer: %m");
2629 service_set_state(s
, SERVICE_RELOAD_SIGNAL
);
2631 service_enter_running(s
, SERVICE_SUCCESS
);
2635 /* Store the timestamp when we started reloading: when reloading via SIGHUP we won't leave the reload
2636 * state until we received both RELOADING=1 and READY=1 with MONOTONIC_USEC= set to a value above
2637 * this. Thus we know for sure the reload cycle was executed *after* we requested it, and is not one
2638 * that was already in progress before. */
2639 s
->reload_begin_usec
= ts
;
2643 s
->reload_result
= SERVICE_FAILURE_RESOURCES
;
2644 service_enter_running(s
, SERVICE_SUCCESS
);
2647 static void service_run_next_control(Service
*s
) {
2652 assert(s
->control_command
);
2653 assert(s
->control_command
->command_next
);
2655 assert(s
->control_command_id
!= SERVICE_EXEC_START
);
2657 s
->control_command
= s
->control_command
->command_next
;
2658 service_unwatch_control_pid(s
);
2660 if (IN_SET(s
->state
, SERVICE_CONDITION
, SERVICE_START_PRE
, SERVICE_START
, SERVICE_START_POST
, SERVICE_RUNNING
, SERVICE_RELOAD
))
2661 timeout
= s
->timeout_start_usec
;
2663 timeout
= s
->timeout_stop_usec
;
2665 pidref_done(&s
->control_pid
);
2667 r
= service_spawn(s
,
2669 service_exec_flags(s
->control_command_id
, /* cred_flag = */ 0),
2673 log_unit_warning_errno(UNIT(s
), r
, "Failed to spawn next control task: %m");
2675 if (IN_SET(s
->state
, SERVICE_CONDITION
, SERVICE_START_PRE
, SERVICE_START_POST
, SERVICE_STOP
))
2676 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, SERVICE_FAILURE_RESOURCES
);
2677 else if (s
->state
== SERVICE_STOP_POST
)
2678 service_enter_dead(s
, SERVICE_FAILURE_RESOURCES
, /* allow_restart= */ true);
2679 else if (s
->state
== SERVICE_RELOAD
) {
2680 s
->reload_result
= SERVICE_FAILURE_RESOURCES
;
2681 service_enter_running(s
, SERVICE_SUCCESS
);
2683 service_enter_stop(s
, SERVICE_FAILURE_RESOURCES
);
2687 static void service_run_next_main(Service
*s
) {
2688 _cleanup_(pidref_done
) PidRef pidref
= PIDREF_NULL
;
2692 assert(s
->main_command
);
2693 assert(s
->main_command
->command_next
);
2694 assert(s
->type
== SERVICE_ONESHOT
);
2696 s
->main_command
= s
->main_command
->command_next
;
2697 service_unwatch_main_pid(s
);
2699 r
= service_spawn(s
,
2701 service_exec_flags(SERVICE_EXEC_START
, EXEC_SETUP_CREDENTIALS
),
2702 s
->timeout_start_usec
,
2705 log_unit_warning_errno(UNIT(s
), r
, "Failed to spawn next main task: %m");
2706 service_enter_stop(s
, SERVICE_FAILURE_RESOURCES
);
2710 (void) service_set_main_pidref(s
, TAKE_PIDREF(pidref
), &s
->main_command
->exec_status
.start_timestamp
);
2713 static int service_start(Unit
*u
) {
2714 Service
*s
= SERVICE(u
);
2719 /* We cannot fulfill this request right now, try again later
2721 if (IN_SET(s
->state
,
2722 SERVICE_STOP
, SERVICE_STOP_WATCHDOG
, SERVICE_STOP_SIGTERM
, SERVICE_STOP_SIGKILL
, SERVICE_STOP_POST
,
2723 SERVICE_FINAL_WATCHDOG
, SERVICE_FINAL_SIGTERM
, SERVICE_FINAL_SIGKILL
, SERVICE_CLEANING
))
2726 /* Already on it! */
2727 if (IN_SET(s
->state
, SERVICE_CONDITION
, SERVICE_START_PRE
, SERVICE_START
, SERVICE_START_POST
))
2730 /* A service that will be restarted must be stopped first to trigger BindsTo and/or OnFailure
2731 * dependencies. If a user does not want to wait for the holdoff time to elapse, the service should
2732 * be manually restarted, not started. We simply return EAGAIN here, so that any start jobs stay
2733 * queued, and assume that the auto restart timer will eventually trigger the restart. */
2734 if (IN_SET(s
->state
, SERVICE_AUTO_RESTART
, SERVICE_DEAD_BEFORE_AUTO_RESTART
, SERVICE_FAILED_BEFORE_AUTO_RESTART
))
2737 assert(IN_SET(s
->state
, SERVICE_DEAD
, SERVICE_FAILED
, SERVICE_DEAD_RESOURCES_PINNED
, SERVICE_AUTO_RESTART_QUEUED
));
2739 r
= unit_acquire_invocation_id(u
);
2743 s
->result
= SERVICE_SUCCESS
;
2744 s
->reload_result
= SERVICE_SUCCESS
;
2745 s
->main_pid_known
= false;
2746 s
->main_pid_alien
= false;
2747 s
->forbid_restart
= false;
2749 s
->status_text
= mfree(s
->status_text
);
2750 s
->status_errno
= 0;
2752 s
->notify_access_override
= _NOTIFY_ACCESS_INVALID
;
2753 s
->notify_state
= NOTIFY_UNKNOWN
;
2755 s
->watchdog_original_usec
= s
->watchdog_usec
;
2756 s
->watchdog_override_enable
= false;
2757 s
->watchdog_override_usec
= USEC_INFINITY
;
2759 exec_command_reset_status_list_array(s
->exec_command
, _SERVICE_EXEC_COMMAND_MAX
);
2760 exec_status_reset(&s
->main_exec_status
);
2762 /* This is not an automatic restart? Flush the restart counter then */
2763 if (s
->flush_n_restarts
) {
2765 s
->flush_n_restarts
= false;
2768 CGroupRuntime
*crt
= unit_get_cgroup_runtime(u
);
2770 crt
->reset_accounting
= true;
2772 service_enter_condition(s
);
2776 static int service_stop(Unit
*u
) {
2777 Service
*s
= ASSERT_PTR(SERVICE(u
));
2779 /* Don't create restart jobs from manual stops. */
2780 s
->forbid_restart
= true;
2785 case SERVICE_STOP_SIGTERM
:
2786 case SERVICE_STOP_SIGKILL
:
2787 case SERVICE_STOP_POST
:
2788 case SERVICE_FINAL_WATCHDOG
:
2789 case SERVICE_FINAL_SIGTERM
:
2790 case SERVICE_FINAL_SIGKILL
:
2794 case SERVICE_AUTO_RESTART
:
2795 case SERVICE_AUTO_RESTART_QUEUED
:
2796 /* Give up on the auto restart */
2797 service_set_state(s
, service_determine_dead_state(s
));
2800 case SERVICE_CONDITION
:
2801 case SERVICE_START_PRE
:
2803 case SERVICE_START_POST
:
2804 case SERVICE_RELOAD
:
2805 case SERVICE_RELOAD_SIGNAL
:
2806 case SERVICE_RELOAD_NOTIFY
:
2807 case SERVICE_STOP_WATCHDOG
:
2808 /* If there's already something running we go directly into kill mode. */
2809 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, SERVICE_SUCCESS
);
2812 case SERVICE_CLEANING
:
2813 /* If we are currently cleaning, then abort it, brutally. */
2814 service_enter_signal(s
, SERVICE_FINAL_SIGKILL
, SERVICE_SUCCESS
);
2817 case SERVICE_RUNNING
:
2818 case SERVICE_EXITED
:
2819 service_enter_stop(s
, SERVICE_SUCCESS
);
2822 case SERVICE_DEAD_BEFORE_AUTO_RESTART
:
2823 case SERVICE_FAILED_BEFORE_AUTO_RESTART
:
2825 case SERVICE_FAILED
:
2826 case SERVICE_DEAD_RESOURCES_PINNED
:
2828 /* Unknown state, or unit_stop() should already have handled these */
2829 assert_not_reached();
2833 static int service_reload(Unit
*u
) {
2834 Service
*s
= ASSERT_PTR(SERVICE(u
));
2836 assert(IN_SET(s
->state
, SERVICE_RUNNING
, SERVICE_EXITED
));
2838 service_enter_reload(s
);
2842 static bool service_can_reload(Unit
*u
) {
2843 Service
*s
= ASSERT_PTR(SERVICE(u
));
2845 return s
->exec_command
[SERVICE_EXEC_RELOAD
] ||
2846 s
->type
== SERVICE_NOTIFY_RELOAD
;
2849 static unsigned service_exec_command_index(Unit
*u
, ServiceExecCommand id
, const ExecCommand
*current
) {
2850 Service
*s
= SERVICE(u
);
2855 assert(id
< _SERVICE_EXEC_COMMAND_MAX
);
2857 const ExecCommand
*first
= s
->exec_command
[id
];
2859 /* Figure out where we are in the list by walking back to the beginning */
2860 for (const ExecCommand
*c
= current
; c
!= first
; c
= c
->command_prev
)
2866 static int service_serialize_exec_command(Unit
*u
, FILE *f
, const ExecCommand
*command
) {
2867 Service
*s
= ASSERT_PTR(SERVICE(u
));
2868 _cleanup_free_
char *args
= NULL
, *p
= NULL
;
2869 const char *type
, *key
;
2870 ServiceExecCommand id
;
2879 if (command
== s
->control_command
) {
2881 id
= s
->control_command_id
;
2884 id
= SERVICE_EXEC_START
;
2887 idx
= service_exec_command_index(u
, id
, command
);
2889 STRV_FOREACH(arg
, command
->argv
) {
2890 _cleanup_free_
char *e
= NULL
;
2898 if (!GREEDY_REALLOC(args
, length
+ 2 + n
+ 2))
2902 args
[length
++] = ' ';
2904 args
[length
++] = '"';
2905 memcpy(args
+ length
, e
, n
);
2907 args
[length
++] = '"';
2910 if (!GREEDY_REALLOC(args
, length
+ 1))
2915 p
= cescape(command
->path
);
2919 key
= strjoina(type
, "-command");
2921 /* We use '+1234' instead of '1234' to mark the last command in a sequence.
2922 * This is used in service_deserialize_exec_command(). */
2923 (void) serialize_item_format(
2926 service_exec_command_to_string(id
),
2927 command
->command_next
? "" : "+",
2934 static int service_serialize(Unit
*u
, FILE *f
, FDSet
*fds
) {
2935 Service
*s
= ASSERT_PTR(SERVICE(u
));
2941 (void) serialize_item(f
, "state", service_state_to_string(s
->state
));
2942 (void) serialize_item(f
, "result", service_result_to_string(s
->result
));
2943 (void) serialize_item(f
, "reload-result", service_result_to_string(s
->reload_result
));
2945 (void) serialize_pidref(f
, fds
, "control-pid", &s
->control_pid
);
2946 if (s
->main_pid_known
)
2947 (void) serialize_pidref(f
, fds
, "main-pid", &s
->main_pid
);
2949 (void) serialize_bool(f
, "main-pid-known", s
->main_pid_known
);
2950 (void) serialize_bool(f
, "bus-name-good", s
->bus_name_good
);
2951 (void) serialize_bool(f
, "bus-name-owner", s
->bus_name_owner
);
2953 (void) serialize_item_format(f
, "n-restarts", "%u", s
->n_restarts
);
2954 (void) serialize_bool(f
, "flush-n-restarts", s
->flush_n_restarts
);
2956 r
= serialize_item_escaped(f
, "status-text", s
->status_text
);
2960 service_serialize_exec_command(u
, f
, s
->control_command
);
2961 service_serialize_exec_command(u
, f
, s
->main_command
);
2963 r
= serialize_fd(f
, fds
, "stdin-fd", s
->stdin_fd
);
2966 r
= serialize_fd(f
, fds
, "stdout-fd", s
->stdout_fd
);
2969 r
= serialize_fd(f
, fds
, "stderr-fd", s
->stderr_fd
);
2973 if (s
->exec_fd_event_source
) {
2974 r
= serialize_fd(f
, fds
, "exec-fd", sd_event_source_get_io_fd(s
->exec_fd_event_source
));
2978 (void) serialize_bool(f
, "exec-fd-hot", s
->exec_fd_hot
);
2981 if (UNIT_ISSET(s
->accept_socket
)) {
2982 r
= serialize_item(f
, "accept-socket", UNIT_DEREF(s
->accept_socket
)->id
);
2987 r
= serialize_fd(f
, fds
, "socket-fd", s
->socket_fd
);
2991 LIST_FOREACH(fd_store
, fs
, s
->fd_store
) {
2992 _cleanup_free_
char *c
= NULL
;
2995 copy
= fdset_put_dup(fds
, fs
->fd
);
2997 return log_error_errno(copy
, "Failed to copy file descriptor for serialization: %m");
2999 c
= cescape(fs
->fdname
);
3003 (void) serialize_item_format(f
, "fd-store-fd", "%i \"%s\" %s", copy
, c
, one_zero(fs
->do_poll
));
3006 if (s
->main_exec_status
.pid
> 0) {
3007 (void) serialize_item_format(f
, "main-exec-status-pid", PID_FMT
, s
->main_exec_status
.pid
);
3008 (void) serialize_dual_timestamp(f
, "main-exec-status-start", &s
->main_exec_status
.start_timestamp
);
3009 (void) serialize_dual_timestamp(f
, "main-exec-status-exit", &s
->main_exec_status
.exit_timestamp
);
3010 (void) serialize_dual_timestamp(f
, "main-exec-status-handoff", &s
->main_exec_status
.handoff_timestamp
);
3012 if (dual_timestamp_is_set(&s
->main_exec_status
.exit_timestamp
)) {
3013 (void) serialize_item_format(f
, "main-exec-status-code", "%i", s
->main_exec_status
.code
);
3014 (void) serialize_item_format(f
, "main-exec-status-status", "%i", s
->main_exec_status
.status
);
3018 if (s
->notify_access_override
>= 0)
3019 (void) serialize_item(f
, "notify-access-override", notify_access_to_string(s
->notify_access_override
));
3021 (void) serialize_dual_timestamp(f
, "watchdog-timestamp", &s
->watchdog_timestamp
);
3022 (void) serialize_bool(f
, "forbid-restart", s
->forbid_restart
);
3024 if (s
->watchdog_override_enable
)
3025 (void) serialize_item_format(f
, "watchdog-override-usec", USEC_FMT
, s
->watchdog_override_usec
);
3027 if (s
->watchdog_original_usec
!= USEC_INFINITY
)
3028 (void) serialize_item_format(f
, "watchdog-original-usec", USEC_FMT
, s
->watchdog_original_usec
);
3030 if (s
->reload_begin_usec
!= USEC_INFINITY
)
3031 (void) serialize_item_format(f
, "reload-begin-usec", USEC_FMT
, s
->reload_begin_usec
);
3036 int service_deserialize_exec_command(
3039 const char *value
) {
3041 Service
*s
= ASSERT_PTR(SERVICE(u
));
3042 ExecCommand
*command
= NULL
;
3043 ServiceExecCommand id
= _SERVICE_EXEC_COMMAND_INVALID
;
3044 _cleanup_free_
char *path
= NULL
;
3045 _cleanup_strv_free_
char **argv
= NULL
;
3046 unsigned idx
= 0, i
;
3047 bool control
, found
= false, last
= false;
3050 enum ExecCommandState
{
3051 STATE_EXEC_COMMAND_TYPE
,
3052 STATE_EXEC_COMMAND_INDEX
,
3053 STATE_EXEC_COMMAND_PATH
,
3054 STATE_EXEC_COMMAND_ARGS
,
3055 _STATE_EXEC_COMMAND_MAX
,
3056 _STATE_EXEC_COMMAND_INVALID
= -EINVAL
,
3062 control
= streq(key
, "control-command");
3064 state
= STATE_EXEC_COMMAND_TYPE
;
3067 _cleanup_free_
char *arg
= NULL
;
3069 r
= extract_first_word(&value
, &arg
, NULL
, EXTRACT_CUNESCAPE
| EXTRACT_UNQUOTE
);
3076 case STATE_EXEC_COMMAND_TYPE
:
3077 id
= service_exec_command_from_string(arg
);
3081 state
= STATE_EXEC_COMMAND_INDEX
;
3083 case STATE_EXEC_COMMAND_INDEX
:
3084 /* PID 1234 is serialized as either '1234' or '+1234'. The second form is used to
3085 * mark the last command in a sequence. We warn if the deserialized command doesn't
3086 * match what we have loaded from the unit, but we don't need to warn if that is the
3089 r
= safe_atou(arg
, &idx
);
3092 last
= arg
[0] == '+';
3094 state
= STATE_EXEC_COMMAND_PATH
;
3096 case STATE_EXEC_COMMAND_PATH
:
3097 path
= TAKE_PTR(arg
);
3098 state
= STATE_EXEC_COMMAND_ARGS
;
3100 case STATE_EXEC_COMMAND_ARGS
:
3101 r
= strv_extend(&argv
, arg
);
3106 assert_not_reached();
3110 if (state
!= STATE_EXEC_COMMAND_ARGS
)
3112 if (strv_isempty(argv
))
3113 return -EINVAL
; /* At least argv[0] must be always present. */
3115 /* Let's check whether exec command on given offset matches data that we just deserialized */
3116 for (command
= s
->exec_command
[id
], i
= 0; command
; command
= command
->command_next
, i
++) {
3120 found
= strv_equal(argv
, command
->argv
) && streq(command
->path
, path
);
3125 /* Command at the index we serialized is different, let's look for command that exactly
3126 * matches but is on different index. If there is no such command we will not resume execution. */
3127 for (command
= s
->exec_command
[id
]; command
; command
= command
->command_next
)
3128 if (strv_equal(command
->argv
, argv
) && streq(command
->path
, path
))
3132 if (command
&& control
) {
3133 s
->control_command
= command
;
3134 s
->control_command_id
= id
;
3136 s
->main_command
= command
;
3138 log_unit_debug(u
, "Current command vanished from the unit file.");
3140 log_unit_warning(u
, "Current command vanished from the unit file, execution of the command list won't be resumed.");
3145 static int service_deserialize_item(Unit
*u
, const char *key
, const char *value
, FDSet
*fds
) {
3146 Service
*s
= ASSERT_PTR(SERVICE(u
));
3153 if (streq(key
, "state")) {
3156 state
= service_state_from_string(value
);
3158 log_unit_debug(u
, "Failed to parse state value: %s", value
);
3160 s
->deserialized_state
= state
;
3161 } else if (streq(key
, "result")) {
3164 f
= service_result_from_string(value
);
3166 log_unit_debug(u
, "Failed to parse result value: %s", value
);
3167 else if (f
!= SERVICE_SUCCESS
)
3170 } else if (streq(key
, "reload-result")) {
3173 f
= service_result_from_string(value
);
3175 log_unit_debug(u
, "Failed to parse reload result value: %s", value
);
3176 else if (f
!= SERVICE_SUCCESS
)
3177 s
->reload_result
= f
;
3179 } else if (streq(key
, "control-pid")) {
3181 if (!pidref_is_set(&s
->control_pid
))
3182 (void) deserialize_pidref(fds
, value
, &s
->control_pid
);
3184 } else if (streq(key
, "main-pid")) {
3187 if (!pidref_is_set(&s
->main_pid
) && deserialize_pidref(fds
, value
, &pidref
) >= 0)
3188 (void) service_set_main_pidref(s
, pidref
, /* start_timestamp = */ NULL
);
3190 } else if (streq(key
, "main-pid-known")) {
3193 b
= parse_boolean(value
);
3195 log_unit_debug(u
, "Failed to parse main-pid-known value: %s", value
);
3197 s
->main_pid_known
= b
;
3198 } else if (streq(key
, "bus-name-good")) {
3201 b
= parse_boolean(value
);
3203 log_unit_debug(u
, "Failed to parse bus-name-good value: %s", value
);
3205 s
->bus_name_good
= b
;
3206 } else if (streq(key
, "bus-name-owner")) {
3207 r
= free_and_strdup(&s
->bus_name_owner
, value
);
3209 log_unit_error_errno(u
, r
, "Unable to deserialize current bus owner %s: %m", value
);
3210 } else if (streq(key
, "status-text")) {
3214 l
= cunescape(value
, 0, &t
);
3216 log_unit_debug_errno(u
, l
, "Failed to unescape status text '%s': %m", value
);
3218 free_and_replace(s
->status_text
, t
);
3220 } else if (streq(key
, "accept-socket")) {
3223 if (u
->type
!= UNIT_SOCKET
) {
3224 log_unit_debug(u
, "Failed to deserialize accept-socket: unit is not a socket");
3228 r
= manager_load_unit(u
->manager
, value
, NULL
, NULL
, &socket
);
3230 log_unit_debug_errno(u
, r
, "Failed to load accept-socket unit '%s': %m", value
);
3232 unit_ref_set(&s
->accept_socket
, u
, socket
);
3233 SOCKET(socket
)->n_connections
++;
3236 } else if (streq(key
, "socket-fd")) {
3237 asynchronous_close(s
->socket_fd
);
3238 s
->socket_fd
= deserialize_fd(fds
, value
);
3240 } else if (streq(key
, "fd-store-fd")) {
3241 _cleanup_free_
char *fdv
= NULL
, *fdn
= NULL
, *fdp
= NULL
;
3242 _cleanup_close_
int fd
= -EBADF
;
3245 r
= extract_many_words(&value
, " ", EXTRACT_CUNESCAPE
|EXTRACT_UNQUOTE
, &fdv
, &fdn
, &fdp
);
3246 if (r
< 2 || r
> 3) {
3247 log_unit_debug(u
, "Failed to deserialize fd-store-fd, ignoring: %s", value
);
3251 fd
= deserialize_fd(fds
, fdv
);
3255 do_poll
= r
== 3 ? parse_boolean(fdp
) : true;
3257 log_unit_debug_errno(u
, do_poll
,
3258 "Failed to deserialize fd-store-fd do_poll, ignoring: %s", fdp
);
3262 r
= service_add_fd_store(s
, fd
, fdn
, do_poll
);
3264 log_unit_debug_errno(u
, r
,
3265 "Failed to store deserialized fd '%s', ignoring: %m", fdn
);
3270 } else if (streq(key
, "main-exec-status-pid")) {
3273 if (parse_pid(value
, &pid
) < 0)
3274 log_unit_debug(u
, "Failed to parse main-exec-status-pid value: %s", value
);
3276 s
->main_exec_status
.pid
= pid
;
3277 } else if (streq(key
, "main-exec-status-code")) {
3280 if (safe_atoi(value
, &i
) < 0)
3281 log_unit_debug(u
, "Failed to parse main-exec-status-code value: %s", value
);
3283 s
->main_exec_status
.code
= i
;
3284 } else if (streq(key
, "main-exec-status-status")) {
3287 if (safe_atoi(value
, &i
) < 0)
3288 log_unit_debug(u
, "Failed to parse main-exec-status-status value: %s", value
);
3290 s
->main_exec_status
.status
= i
;
3291 } else if (streq(key
, "main-exec-status-start"))
3292 deserialize_dual_timestamp(value
, &s
->main_exec_status
.start_timestamp
);
3293 else if (streq(key
, "main-exec-status-exit"))
3294 deserialize_dual_timestamp(value
, &s
->main_exec_status
.exit_timestamp
);
3295 else if (streq(key
, "main-exec-status-handoff"))
3296 deserialize_dual_timestamp(value
, &s
->main_exec_status
.handoff_timestamp
);
3297 else if (streq(key
, "notify-access-override")) {
3298 NotifyAccess notify_access
;
3300 notify_access
= notify_access_from_string(value
);
3301 if (notify_access
< 0)
3302 log_unit_debug(u
, "Failed to parse notify-access-override value: %s", value
);
3304 s
->notify_access_override
= notify_access
;
3305 } else if (streq(key
, "watchdog-timestamp"))
3306 deserialize_dual_timestamp(value
, &s
->watchdog_timestamp
);
3307 else if (streq(key
, "forbid-restart")) {
3310 b
= parse_boolean(value
);
3312 log_unit_debug(u
, "Failed to parse forbid-restart value: %s", value
);
3314 s
->forbid_restart
= b
;
3315 } else if (streq(key
, "stdin-fd")) {
3317 asynchronous_close(s
->stdin_fd
);
3318 s
->stdin_fd
= deserialize_fd(fds
, value
);
3319 if (s
->stdin_fd
>= 0)
3320 s
->exec_context
.stdio_as_fds
= true;
3322 } else if (streq(key
, "stdout-fd")) {
3324 asynchronous_close(s
->stdout_fd
);
3325 s
->stdout_fd
= deserialize_fd(fds
, value
);
3326 if (s
->stdout_fd
>= 0)
3327 s
->exec_context
.stdio_as_fds
= true;
3329 } else if (streq(key
, "stderr-fd")) {
3331 asynchronous_close(s
->stderr_fd
);
3332 s
->stderr_fd
= deserialize_fd(fds
, value
);
3333 if (s
->stderr_fd
>= 0)
3334 s
->exec_context
.stdio_as_fds
= true;
3336 } else if (streq(key
, "exec-fd")) {
3337 _cleanup_close_
int fd
= -EBADF
;
3339 fd
= deserialize_fd(fds
, value
);
3341 s
->exec_fd_event_source
= sd_event_source_disable_unref(s
->exec_fd_event_source
);
3343 if (service_allocate_exec_fd_event_source(s
, fd
, &s
->exec_fd_event_source
) >= 0)
3347 } else if (streq(key
, "watchdog-override-usec")) {
3348 if (deserialize_usec(value
, &s
->watchdog_override_usec
) < 0)
3349 log_unit_debug(u
, "Failed to parse watchdog_override_usec value: %s", value
);
3351 s
->watchdog_override_enable
= true;
3353 } else if (streq(key
, "watchdog-original-usec")) {
3354 if (deserialize_usec(value
, &s
->watchdog_original_usec
) < 0)
3355 log_unit_debug(u
, "Failed to parse watchdog_original_usec value: %s", value
);
3357 } else if (STR_IN_SET(key
, "main-command", "control-command")) {
3358 r
= service_deserialize_exec_command(u
, key
, value
);
3360 log_unit_debug_errno(u
, r
, "Failed to parse serialized command \"%s\": %m", value
);
3362 } else if (streq(key
, "n-restarts")) {
3363 r
= safe_atou(value
, &s
->n_restarts
);
3365 log_unit_debug_errno(u
, r
, "Failed to parse serialized restart counter '%s': %m", value
);
3367 } else if (streq(key
, "flush-n-restarts")) {
3368 r
= parse_boolean(value
);
3370 log_unit_debug_errno(u
, r
, "Failed to parse serialized flush restart counter setting '%s': %m", value
);
3372 s
->flush_n_restarts
= r
;
3373 } else if (streq(key
, "reload-begin-usec")) {
3374 r
= deserialize_usec(value
, &s
->reload_begin_usec
);
3376 log_unit_debug_errno(u
, r
, "Failed to parse serialized reload begin timestamp '%s', ignoring: %m", value
);
3378 log_unit_debug(u
, "Unknown serialization key: %s", key
);
3383 static UnitActiveState
service_active_state(Unit
*u
) {
3384 Service
*s
= ASSERT_PTR(SERVICE(u
));
3385 const UnitActiveState
*table
;
3387 table
= s
->type
== SERVICE_IDLE
? state_translation_table_idle
: state_translation_table
;
3389 return table
[s
->state
];
3392 static const char *service_sub_state_to_string(Unit
*u
) {
3395 return service_state_to_string(SERVICE(u
)->state
);
3398 static bool service_may_gc(Unit
*u
) {
3399 Service
*s
= ASSERT_PTR(SERVICE(u
));
3401 /* Never clean up services that still have a process around, even if the service is formally dead. Note that
3402 * unit_may_gc() already checked our cgroup for us, we just check our two additional PIDs, too, in case they
3403 * have moved outside of the cgroup. */
3405 if (main_pid_good(s
) > 0 ||
3406 control_pid_good(s
) > 0)
3409 /* Only allow collection of actually dead services, i.e. not those that are in the transitionary
3410 * SERVICE_DEAD_BEFORE_AUTO_RESTART/SERVICE_FAILED_BEFORE_AUTO_RESTART states. */
3411 if (!IN_SET(s
->state
, SERVICE_DEAD
, SERVICE_FAILED
, SERVICE_DEAD_RESOURCES_PINNED
))
3417 static int service_retry_pid_file(Service
*s
) {
3421 assert(s
->pid_file
);
3422 assert(IN_SET(s
->state
, SERVICE_START
, SERVICE_START_POST
));
3424 r
= service_load_pid_file(s
, false);
3428 service_unwatch_pid_file(s
);
3430 service_enter_running(s
, SERVICE_SUCCESS
);
3434 static int service_watch_pid_file(Service
*s
) {
3439 log_unit_debug(UNIT(s
), "Setting watch for PID file %s", s
->pid_file_pathspec
->path
);
3441 r
= path_spec_watch(s
->pid_file_pathspec
, service_dispatch_inotify_io
);
3443 log_unit_error_errno(UNIT(s
), r
, "Failed to set a watch for PID file %s: %m", s
->pid_file_pathspec
->path
);
3444 service_unwatch_pid_file(s
);
3448 /* the pidfile might have appeared just before we set the watch */
3449 log_unit_debug(UNIT(s
), "Trying to read PID file %s in case it changed", s
->pid_file_pathspec
->path
);
3450 service_retry_pid_file(s
);
3455 static int service_demand_pid_file(Service
*s
) {
3456 _cleanup_free_ PathSpec
*ps
= NULL
;
3459 assert(s
->pid_file
);
3460 assert(!s
->pid_file_pathspec
);
3462 ps
= new(PathSpec
, 1);
3468 .path
= strdup(s
->pid_file
),
3469 /* PATH_CHANGED would not be enough. There are daemons (sendmail) that keep their PID file
3470 * open all the time. */
3471 .type
= PATH_MODIFIED
,
3472 .inotify_fd
= -EBADF
,
3478 path_simplify(ps
->path
);
3480 s
->pid_file_pathspec
= TAKE_PTR(ps
);
3482 return service_watch_pid_file(s
);
3485 static int service_dispatch_inotify_io(sd_event_source
*source
, int fd
, uint32_t events
, void *userdata
) {
3486 PathSpec
*p
= ASSERT_PTR(userdata
);
3487 Service
*s
= ASSERT_PTR(SERVICE(p
->unit
));
3490 assert(IN_SET(s
->state
, SERVICE_START
, SERVICE_START_POST
));
3491 assert(s
->pid_file_pathspec
);
3492 assert(path_spec_owns_inotify_fd(s
->pid_file_pathspec
, fd
));
3494 log_unit_debug(UNIT(s
), "inotify event");
3496 if (path_spec_fd_event(p
, events
) < 0)
3499 if (service_retry_pid_file(s
) == 0)
3502 if (service_watch_pid_file(s
) < 0)
3508 service_unwatch_pid_file(s
);
3509 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, SERVICE_FAILURE_RESOURCES
);
3513 static int service_dispatch_exec_io(sd_event_source
*source
, int fd
, uint32_t events
, void *userdata
) {
3514 Service
*s
= ASSERT_PTR(SERVICE(userdata
));
3516 log_unit_debug(UNIT(s
), "got exec-fd event");
3518 /* If Type=exec is set, we'll consider a service started successfully the instant we invoked execve()
3519 * successfully for it. We implement this through a pipe() towards the child, which the kernel
3520 * automatically closes for us due to O_CLOEXEC on execve() in the child, which then triggers EOF on
3521 * the pipe in the parent. We need to be careful however, as there are other reasons that we might
3522 * cause the child's side of the pipe to be closed (for example, a simple exit()). To deal with that
3523 * we'll ignore EOFs on the pipe unless the child signalled us first that it is about to call the
3524 * execve(). It does so by sending us a simple non-zero byte via the pipe. We also provide the child
3525 * with a way to inform us in case execve() failed: if it sends a zero byte we'll ignore POLLHUP on
3532 n
= read(fd
, &x
, sizeof(x
));
3534 if (errno
== EAGAIN
) /* O_NONBLOCK in effect → everything queued has now been processed. */
3537 return log_unit_error_errno(UNIT(s
), errno
, "Failed to read from exec_fd: %m");
3539 if (n
== 0) { /* EOF → the event we are waiting for in case of Type=exec */
3540 s
->exec_fd_event_source
= sd_event_source_disable_unref(s
->exec_fd_event_source
);
3542 if (s
->exec_fd_hot
) { /* Did the child tell us to expect EOF now? */
3543 log_unit_debug(UNIT(s
), "Got EOF on exec-fd");
3545 s
->exec_fd_hot
= false;
3547 /* Nice! This is what we have been waiting for. Transition to next state. */
3548 if (s
->type
== SERVICE_EXEC
&& s
->state
== SERVICE_START
)
3549 service_enter_start_post(s
);
3551 log_unit_debug(UNIT(s
), "Got EOF on exec-fd while it was disabled, ignoring.");
3556 /* A byte was read → this turns on/off the exec fd logic */
3557 assert(n
== sizeof(x
));
3563 static void service_notify_cgroup_empty_event(Unit
*u
) {
3564 Service
*s
= ASSERT_PTR(SERVICE(u
));
3566 log_unit_debug(u
, "Control group is empty.");
3570 /* Waiting for SIGCHLD is usually more interesting, because it includes return
3571 * codes/signals. Which is why we ignore the cgroup events for most cases, except when we
3572 * don't know pid which to expect the SIGCHLD for. */
3575 if (IN_SET(s
->type
, SERVICE_NOTIFY
, SERVICE_NOTIFY_RELOAD
) &&
3576 main_pid_good(s
) == 0 &&
3577 control_pid_good(s
) == 0) {
3578 /* No chance of getting a ready notification anymore */
3579 service_enter_stop_post(s
, SERVICE_FAILURE_PROTOCOL
);
3583 if (s
->exit_type
== SERVICE_EXIT_CGROUP
&& main_pid_good(s
) <= 0) {
3584 service_enter_stop_post(s
, SERVICE_SUCCESS
);
3589 case SERVICE_START_POST
:
3590 if (s
->pid_file_pathspec
&&
3591 main_pid_good(s
) == 0 &&
3592 control_pid_good(s
) == 0) {
3594 /* Give up hoping for the daemon to write its PID file */
3595 log_unit_warning(u
, "Daemon never wrote its PID file. Failing.");
3597 service_unwatch_pid_file(s
);
3598 if (s
->state
== SERVICE_START
)
3599 service_enter_stop_post(s
, SERVICE_FAILURE_PROTOCOL
);
3601 service_enter_stop(s
, SERVICE_FAILURE_PROTOCOL
);
3605 case SERVICE_RUNNING
:
3606 /* service_enter_running() will figure out what to do */
3607 service_enter_running(s
, SERVICE_SUCCESS
);
3610 case SERVICE_STOP_WATCHDOG
:
3611 case SERVICE_STOP_SIGTERM
:
3612 case SERVICE_STOP_SIGKILL
:
3614 if (main_pid_good(s
) <= 0 && control_pid_good(s
) <= 0)
3615 service_enter_stop_post(s
, SERVICE_SUCCESS
);
3619 case SERVICE_STOP_POST
:
3620 case SERVICE_FINAL_WATCHDOG
:
3621 case SERVICE_FINAL_SIGTERM
:
3622 case SERVICE_FINAL_SIGKILL
:
3623 if (main_pid_good(s
) <= 0 && control_pid_good(s
) <= 0)
3624 service_enter_dead(s
, SERVICE_SUCCESS
, true);
3628 /* If the cgroup empty notification comes when the unit is not active, we must have failed to clean
3629 * up the cgroup earlier and should do it now. */
3630 case SERVICE_AUTO_RESTART
:
3631 case SERVICE_AUTO_RESTART_QUEUED
:
3632 unit_prune_cgroup(u
);
3640 static void service_notify_cgroup_oom_event(Unit
*u
, bool managed_oom
) {
3641 Service
*s
= ASSERT_PTR(SERVICE(u
));
3644 log_unit_debug(u
, "Process(es) of control group were killed by systemd-oomd.");
3646 log_unit_debug(u
, "Process of control group was killed by the OOM killer.");
3648 if (s
->oom_policy
== OOM_CONTINUE
)
3653 case SERVICE_CONDITION
:
3654 case SERVICE_START_PRE
:
3656 case SERVICE_START_POST
:
3658 if (s
->oom_policy
== OOM_STOP
)
3659 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, SERVICE_FAILURE_OOM_KILL
);
3660 else if (s
->oom_policy
== OOM_KILL
)
3661 service_enter_signal(s
, SERVICE_STOP_SIGKILL
, SERVICE_FAILURE_OOM_KILL
);
3665 case SERVICE_EXITED
:
3666 case SERVICE_RUNNING
:
3667 if (s
->oom_policy
== OOM_STOP
)
3668 service_enter_stop(s
, SERVICE_FAILURE_OOM_KILL
);
3669 else if (s
->oom_policy
== OOM_KILL
)
3670 service_enter_signal(s
, SERVICE_STOP_SIGKILL
, SERVICE_FAILURE_OOM_KILL
);
3674 case SERVICE_STOP_WATCHDOG
:
3675 case SERVICE_STOP_SIGTERM
:
3676 service_enter_signal(s
, SERVICE_STOP_SIGKILL
, SERVICE_FAILURE_OOM_KILL
);
3679 case SERVICE_STOP_SIGKILL
:
3680 case SERVICE_FINAL_SIGKILL
:
3681 if (s
->result
== SERVICE_SUCCESS
)
3682 s
->result
= SERVICE_FAILURE_OOM_KILL
;
3685 case SERVICE_STOP_POST
:
3686 case SERVICE_FINAL_SIGTERM
:
3687 service_enter_signal(s
, SERVICE_FINAL_SIGKILL
, SERVICE_FAILURE_OOM_KILL
);
3695 static void service_sigchld_event(Unit
*u
, pid_t pid
, int code
, int status
) {
3696 Service
*s
= ASSERT_PTR(SERVICE(u
));
3697 bool notify_dbus
= true;
3699 ExitClean clean_mode
;
3704 /* Oneshot services and non-SERVICE_EXEC_START commands should not be
3705 * considered daemons as they are typically not long running. */
3706 if (s
->type
== SERVICE_ONESHOT
|| (s
->control_pid
.pid
== pid
&& s
->control_command_id
!= SERVICE_EXEC_START
))
3707 clean_mode
= EXIT_CLEAN_COMMAND
;
3709 clean_mode
= EXIT_CLEAN_DAEMON
;
3711 if (is_clean_exit(code
, status
, clean_mode
, &s
->success_status
))
3712 f
= SERVICE_SUCCESS
;
3713 else if (code
== CLD_EXITED
)
3714 f
= SERVICE_FAILURE_EXIT_CODE
;
3715 else if (code
== CLD_KILLED
)
3716 f
= SERVICE_FAILURE_SIGNAL
;
3717 else if (code
== CLD_DUMPED
)
3718 f
= SERVICE_FAILURE_CORE_DUMP
;
3720 assert_not_reached();
3722 if (s
->main_pid
.pid
== pid
) {
3723 /* Clean up the exec_fd event source. We want to do this here, not later in
3724 * service_set_state(), because service_enter_stop_post() calls service_spawn().
3725 * The source owns its end of the pipe, so this will close that too. */
3726 s
->exec_fd_event_source
= sd_event_source_disable_unref(s
->exec_fd_event_source
);
3728 /* Forking services may occasionally move to a new PID.
3729 * As long as they update the PID file before exiting the old
3730 * PID, they're fine. */
3731 if (service_load_pid_file(s
, false) > 0)
3734 pidref_done(&s
->main_pid
);
3735 exec_status_exit(&s
->main_exec_status
, &s
->exec_context
, pid
, code
, status
);
3737 if (s
->main_command
) {
3738 /* If this is not a forking service than the
3739 * main process got started and hence we copy
3740 * the exit status so that it is recorded both
3741 * as main and as control process exit
3744 s
->main_command
->exec_status
= s
->main_exec_status
;
3746 if (s
->main_command
->flags
& EXEC_COMMAND_IGNORE_FAILURE
)
3747 f
= SERVICE_SUCCESS
;
3748 } else if (s
->exec_command
[SERVICE_EXEC_START
]) {
3750 /* If this is a forked process, then we should
3751 * ignore the return value if this was
3752 * configured for the starter process */
3754 if (s
->exec_command
[SERVICE_EXEC_START
]->flags
& EXEC_COMMAND_IGNORE_FAILURE
)
3755 f
= SERVICE_SUCCESS
;
3758 unit_log_process_exit(
3761 service_exec_command_to_string(SERVICE_EXEC_START
),
3762 f
== SERVICE_SUCCESS
,
3765 if (s
->result
== SERVICE_SUCCESS
)
3768 if (s
->main_command
&&
3769 s
->main_command
->command_next
&&
3770 s
->type
== SERVICE_ONESHOT
&&
3771 f
== SERVICE_SUCCESS
) {
3773 /* There is another command to execute, so let's do that. */
3775 log_unit_debug(u
, "Running next main command for state %s.", service_state_to_string(s
->state
));
3776 service_run_next_main(s
);
3779 s
->main_command
= NULL
;
3781 /* Services with ExitType=cgroup do not act on main PID exiting, unless the cgroup is
3783 if (s
->exit_type
== SERVICE_EXIT_MAIN
|| cgroup_good(s
) <= 0) {
3784 /* The service exited, so the service is officially gone. */
3787 case SERVICE_START_POST
:
3788 case SERVICE_RELOAD
:
3789 case SERVICE_RELOAD_SIGNAL
:
3790 case SERVICE_RELOAD_NOTIFY
:
3791 /* If neither main nor control processes are running then the current
3792 * state can never exit cleanly, hence immediately terminate the
3794 if (control_pid_good(s
) <= 0)
3795 service_enter_stop(s
, f
);
3797 /* Otherwise need to wait until the operation is done. */
3801 /* Need to wait until the operation is done. */
3805 if (s
->type
== SERVICE_ONESHOT
) {
3806 /* This was our main goal, so let's go on */
3807 if (f
== SERVICE_SUCCESS
)
3808 service_enter_start_post(s
);
3810 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, f
);
3812 } else if (IN_SET(s
->type
, SERVICE_NOTIFY
, SERVICE_NOTIFY_RELOAD
)) {
3813 /* Only enter running through a notification, so that the
3814 * SERVICE_START state signifies that no ready notification
3815 * has been received */
3816 if (f
!= SERVICE_SUCCESS
)
3817 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, f
);
3818 else if (!s
->remain_after_exit
|| service_get_notify_access(s
) == NOTIFY_MAIN
)
3819 /* The service has never been and will never be active */
3820 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, SERVICE_FAILURE_PROTOCOL
);
3825 case SERVICE_RUNNING
:
3826 service_enter_running(s
, f
);
3829 case SERVICE_STOP_WATCHDOG
:
3830 case SERVICE_STOP_SIGTERM
:
3831 case SERVICE_STOP_SIGKILL
:
3833 if (control_pid_good(s
) <= 0)
3834 service_enter_stop_post(s
, f
);
3836 /* If there is still a control process, wait for that first */
3839 case SERVICE_STOP_POST
:
3841 if (control_pid_good(s
) <= 0)
3842 service_enter_signal(s
, SERVICE_FINAL_SIGTERM
, f
);
3846 case SERVICE_FINAL_WATCHDOG
:
3847 case SERVICE_FINAL_SIGTERM
:
3848 case SERVICE_FINAL_SIGKILL
:
3850 if (control_pid_good(s
) <= 0)
3851 service_enter_dead(s
, f
, true);
3855 assert_not_reached();
3857 } else if (s
->exit_type
== SERVICE_EXIT_CGROUP
&& s
->state
== SERVICE_START
&&
3858 !IN_SET(s
->type
, SERVICE_NOTIFY
, SERVICE_NOTIFY_RELOAD
, SERVICE_DBUS
))
3859 /* If a main process exits very quickly, this function might be executed
3860 * before service_dispatch_exec_io(). Since this function disabled IO events
3861 * to monitor the main process above, we need to update the state here too.
3862 * Let's consider the process is successfully launched and exited, but
3863 * only when we're not expecting a readiness notification or dbus name. */
3864 service_enter_start_post(s
);
3867 } else if (s
->control_pid
.pid
== pid
) {
3871 pidref_done(&s
->control_pid
);
3873 if (s
->control_command
) {
3874 exec_status_exit(&s
->control_command
->exec_status
, &s
->exec_context
, pid
, code
, status
);
3876 if (s
->control_command
->flags
& EXEC_COMMAND_IGNORE_FAILURE
)
3877 f
= SERVICE_SUCCESS
;
3880 /* ExecCondition= calls that exit with (0, 254] should invoke skip-like behavior instead of failing */
3881 if (s
->state
== SERVICE_CONDITION
) {
3882 if (f
== SERVICE_FAILURE_EXIT_CODE
&& status
< 255) {
3883 UNIT(s
)->condition_result
= false;
3884 f
= SERVICE_SKIP_CONDITION
;
3886 } else if (f
== SERVICE_SUCCESS
) {
3887 UNIT(s
)->condition_result
= true;
3892 kind
= "Condition check process";
3894 kind
= "Control process";
3895 success
= f
== SERVICE_SUCCESS
;
3898 unit_log_process_exit(
3901 service_exec_command_to_string(s
->control_command_id
),
3905 if (s
->state
!= SERVICE_RELOAD
&& s
->result
== SERVICE_SUCCESS
)
3908 if (s
->control_command
&&
3909 s
->control_command
->command_next
&&
3910 f
== SERVICE_SUCCESS
) {
3912 /* There is another command to execute, so let's do that. */
3914 log_unit_debug(u
, "Running next control command for state %s.", service_state_to_string(s
->state
));
3915 service_run_next_control(s
);
3918 /* No further commands for this step, so let's figure out what to do next */
3920 s
->control_command
= NULL
;
3921 s
->control_command_id
= _SERVICE_EXEC_COMMAND_INVALID
;
3923 log_unit_debug(u
, "Got final SIGCHLD for state %s.", service_state_to_string(s
->state
));
3927 case SERVICE_CONDITION
:
3928 if (f
== SERVICE_SUCCESS
)
3929 service_enter_start_pre(s
);
3931 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, f
);
3934 case SERVICE_START_PRE
:
3935 if (f
== SERVICE_SUCCESS
)
3936 service_enter_start(s
);
3938 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, f
);
3942 if (s
->type
!= SERVICE_FORKING
)
3943 /* Maybe spurious event due to a reload that changed the type? */
3946 if (f
!= SERVICE_SUCCESS
) {
3947 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, f
);
3952 bool has_start_post
;
3954 /* Let's try to load the pid file here if we can.
3955 * The PID file might actually be created by a START_POST
3956 * script. In that case don't worry if the loading fails. */
3958 has_start_post
= s
->exec_command
[SERVICE_EXEC_START_POST
];
3959 r
= service_load_pid_file(s
, !has_start_post
);
3960 if (!has_start_post
&& r
< 0) {
3961 r
= service_demand_pid_file(s
);
3962 if (r
< 0 || cgroup_good(s
) == 0)
3963 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, SERVICE_FAILURE_PROTOCOL
);
3967 service_search_main_pid(s
);
3969 service_enter_start_post(s
);
3972 case SERVICE_START_POST
:
3973 if (f
!= SERVICE_SUCCESS
) {
3974 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, f
);
3979 r
= service_load_pid_file(s
, true);
3981 r
= service_demand_pid_file(s
);
3982 if (r
< 0 || cgroup_good(s
) == 0)
3983 service_enter_stop(s
, SERVICE_FAILURE_PROTOCOL
);
3987 service_search_main_pid(s
);
3989 service_enter_running(s
, SERVICE_SUCCESS
);
3992 case SERVICE_RELOAD
:
3993 case SERVICE_RELOAD_SIGNAL
:
3994 case SERVICE_RELOAD_NOTIFY
:
3995 if (f
== SERVICE_SUCCESS
)
3996 if (service_load_pid_file(s
, true) < 0)
3997 service_search_main_pid(s
);
3999 s
->reload_result
= f
;
4001 /* If the last notification we received from the service process indicates
4002 * we are still reloading, then don't leave reloading state just yet, just
4003 * transition into SERVICE_RELOAD_NOTIFY, to wait for the READY=1 coming,
4005 if (s
->notify_state
== NOTIFY_RELOADING
)
4006 service_set_state(s
, SERVICE_RELOAD_NOTIFY
);
4008 service_enter_running(s
, SERVICE_SUCCESS
);
4012 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, f
);
4015 case SERVICE_STOP_WATCHDOG
:
4016 case SERVICE_STOP_SIGTERM
:
4017 case SERVICE_STOP_SIGKILL
:
4018 if (main_pid_good(s
) <= 0)
4019 service_enter_stop_post(s
, f
);
4021 /* If there is still a service process around, wait until
4022 * that one quit, too */
4025 case SERVICE_STOP_POST
:
4026 if (main_pid_good(s
) <= 0)
4027 service_enter_signal(s
, SERVICE_FINAL_SIGTERM
, f
);
4030 case SERVICE_FINAL_WATCHDOG
:
4031 case SERVICE_FINAL_SIGTERM
:
4032 case SERVICE_FINAL_SIGKILL
:
4033 if (main_pid_good(s
) <= 0)
4034 service_enter_dead(s
, f
, true);
4037 case SERVICE_CLEANING
:
4039 if (s
->clean_result
== SERVICE_SUCCESS
)
4040 s
->clean_result
= f
;
4042 service_enter_dead(s
, SERVICE_SUCCESS
, false);
4046 assert_not_reached();
4049 } else /* Neither control nor main PID? If so, don't notify about anything */
4050 notify_dbus
= false;
4052 /* Notify clients about changed exit status */
4054 unit_add_to_dbus_queue(u
);
4056 /* We watch the main/control process otherwise we can't retrieve the unit they
4057 * belong to with cgroupv1. But if they are not our direct child, we won't get a
4058 * SIGCHLD for them. Therefore we need to look for others to watch so we can
4059 * detect when the cgroup becomes empty. Note that the control process is always
4060 * our child so it's pointless to watch all other processes. */
4061 if (!control_pid_good(s
))
4062 if (!s
->main_pid_known
|| s
->main_pid_alien
)
4063 (void) unit_enqueue_rewatch_pids(u
);
4066 static int service_dispatch_timer(sd_event_source
*source
, usec_t usec
, void *userdata
) {
4067 Service
*s
= ASSERT_PTR(SERVICE(userdata
));
4069 assert(source
== s
->timer_event_source
);
4073 case SERVICE_CONDITION
:
4074 case SERVICE_START_PRE
:
4076 case SERVICE_START_POST
:
4077 switch (s
->timeout_start_failure_mode
) {
4079 case SERVICE_TIMEOUT_TERMINATE
:
4080 log_unit_warning(UNIT(s
), "%s operation timed out. Terminating.", service_state_to_string(s
->state
));
4081 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, SERVICE_FAILURE_TIMEOUT
);
4084 case SERVICE_TIMEOUT_ABORT
:
4085 log_unit_warning(UNIT(s
), "%s operation timed out. Aborting.", service_state_to_string(s
->state
));
4086 service_enter_signal(s
, SERVICE_STOP_WATCHDOG
, SERVICE_FAILURE_TIMEOUT
);
4089 case SERVICE_TIMEOUT_KILL
:
4090 if (s
->kill_context
.send_sigkill
) {
4091 log_unit_warning(UNIT(s
), "%s operation timed out. Killing.", service_state_to_string(s
->state
));
4092 service_enter_signal(s
, SERVICE_STOP_SIGKILL
, SERVICE_FAILURE_TIMEOUT
);
4094 log_unit_warning(UNIT(s
), "%s operation timed out. Skipping SIGKILL.", service_state_to_string(s
->state
));
4095 service_enter_stop_post(s
, SERVICE_FAILURE_TIMEOUT
);
4100 assert_not_reached();
4104 case SERVICE_RUNNING
:
4105 log_unit_warning(UNIT(s
), "Service reached runtime time limit. Stopping.");
4106 service_enter_stop(s
, SERVICE_FAILURE_TIMEOUT
);
4109 case SERVICE_RELOAD
:
4110 case SERVICE_RELOAD_SIGNAL
:
4111 case SERVICE_RELOAD_NOTIFY
:
4112 log_unit_warning(UNIT(s
), "Reload operation timed out. Killing reload process.");
4113 service_kill_control_process(s
);
4114 s
->reload_result
= SERVICE_FAILURE_TIMEOUT
;
4115 service_enter_running(s
, SERVICE_SUCCESS
);
4119 switch (s
->timeout_stop_failure_mode
) {
4121 case SERVICE_TIMEOUT_TERMINATE
:
4122 log_unit_warning(UNIT(s
), "Stopping timed out. Terminating.");
4123 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, SERVICE_FAILURE_TIMEOUT
);
4126 case SERVICE_TIMEOUT_ABORT
:
4127 log_unit_warning(UNIT(s
), "Stopping timed out. Aborting.");
4128 service_enter_signal(s
, SERVICE_STOP_WATCHDOG
, SERVICE_FAILURE_TIMEOUT
);
4131 case SERVICE_TIMEOUT_KILL
:
4132 if (s
->kill_context
.send_sigkill
) {
4133 log_unit_warning(UNIT(s
), "Stopping timed out. Killing.");
4134 service_enter_signal(s
, SERVICE_STOP_SIGKILL
, SERVICE_FAILURE_TIMEOUT
);
4136 log_unit_warning(UNIT(s
), "Stopping timed out. Skipping SIGKILL.");
4137 service_enter_stop_post(s
, SERVICE_FAILURE_TIMEOUT
);
4142 assert_not_reached();
4146 case SERVICE_STOP_WATCHDOG
:
4147 if (s
->kill_context
.send_sigkill
) {
4148 log_unit_warning(UNIT(s
), "State 'stop-watchdog' timed out. Killing.");
4149 service_enter_signal(s
, SERVICE_STOP_SIGKILL
, SERVICE_FAILURE_TIMEOUT
);
4151 log_unit_warning(UNIT(s
), "State 'stop-watchdog' timed out. Skipping SIGKILL.");
4152 service_enter_stop_post(s
, SERVICE_FAILURE_TIMEOUT
);
4156 case SERVICE_STOP_SIGTERM
:
4157 if (s
->timeout_stop_failure_mode
== SERVICE_TIMEOUT_ABORT
) {
4158 log_unit_warning(UNIT(s
), "State 'stop-sigterm' timed out. Aborting.");
4159 service_enter_signal(s
, SERVICE_STOP_WATCHDOG
, SERVICE_FAILURE_TIMEOUT
);
4160 } else if (s
->kill_context
.send_sigkill
) {
4161 log_unit_warning(UNIT(s
), "State 'stop-sigterm' timed out. Killing.");
4162 service_enter_signal(s
, SERVICE_STOP_SIGKILL
, SERVICE_FAILURE_TIMEOUT
);
4164 log_unit_warning(UNIT(s
), "State 'stop-sigterm' timed out. Skipping SIGKILL.");
4165 service_enter_stop_post(s
, SERVICE_FAILURE_TIMEOUT
);
4170 case SERVICE_STOP_SIGKILL
:
4171 /* Uh, we sent a SIGKILL and it is still not gone?
4172 * Must be something we cannot kill, so let's just be
4173 * weirded out and continue */
4175 log_unit_warning(UNIT(s
), "Processes still around after SIGKILL. Ignoring.");
4176 service_enter_stop_post(s
, SERVICE_FAILURE_TIMEOUT
);
4179 case SERVICE_STOP_POST
:
4180 switch (s
->timeout_stop_failure_mode
) {
4182 case SERVICE_TIMEOUT_TERMINATE
:
4183 log_unit_warning(UNIT(s
), "State 'stop-post' timed out. Terminating.");
4184 service_enter_signal(s
, SERVICE_FINAL_SIGTERM
, SERVICE_FAILURE_TIMEOUT
);
4187 case SERVICE_TIMEOUT_ABORT
:
4188 log_unit_warning(UNIT(s
), "State 'stop-post' timed out. Aborting.");
4189 service_enter_signal(s
, SERVICE_FINAL_WATCHDOG
, SERVICE_FAILURE_TIMEOUT
);
4192 case SERVICE_TIMEOUT_KILL
:
4193 if (s
->kill_context
.send_sigkill
) {
4194 log_unit_warning(UNIT(s
), "State 'stop-post' timed out. Killing.");
4195 service_enter_signal(s
, SERVICE_FINAL_SIGKILL
, SERVICE_FAILURE_TIMEOUT
);
4197 log_unit_warning(UNIT(s
), "State 'stop-post' timed out. Skipping SIGKILL. Entering failed mode.");
4198 service_enter_dead(s
, SERVICE_FAILURE_TIMEOUT
, false);
4203 assert_not_reached();
4207 case SERVICE_FINAL_WATCHDOG
:
4208 if (s
->kill_context
.send_sigkill
) {
4209 log_unit_warning(UNIT(s
), "State 'final-watchdog' timed out. Killing.");
4210 service_enter_signal(s
, SERVICE_FINAL_SIGKILL
, SERVICE_FAILURE_TIMEOUT
);
4212 log_unit_warning(UNIT(s
), "State 'final-watchdog' timed out. Skipping SIGKILL. Entering failed mode.");
4213 service_enter_dead(s
, SERVICE_FAILURE_TIMEOUT
, false);
4217 case SERVICE_FINAL_SIGTERM
:
4218 if (s
->timeout_stop_failure_mode
== SERVICE_TIMEOUT_ABORT
) {
4219 log_unit_warning(UNIT(s
), "State 'final-sigterm' timed out. Aborting.");
4220 service_enter_signal(s
, SERVICE_FINAL_WATCHDOG
, SERVICE_FAILURE_TIMEOUT
);
4221 } else if (s
->kill_context
.send_sigkill
) {
4222 log_unit_warning(UNIT(s
), "State 'final-sigterm' timed out. Killing.");
4223 service_enter_signal(s
, SERVICE_FINAL_SIGKILL
, SERVICE_FAILURE_TIMEOUT
);
4225 log_unit_warning(UNIT(s
), "State 'final-sigterm' timed out. Skipping SIGKILL. Entering failed mode.");
4226 service_enter_dead(s
, SERVICE_FAILURE_TIMEOUT
, false);
4231 case SERVICE_FINAL_SIGKILL
:
4232 log_unit_warning(UNIT(s
), "Processes still around after final SIGKILL. Entering failed mode.");
4233 service_enter_dead(s
, SERVICE_FAILURE_TIMEOUT
, true);
4236 case SERVICE_AUTO_RESTART
:
4237 if (s
->restart_usec
> 0)
4238 log_unit_debug(UNIT(s
),
4239 "Service restart interval %s expired, scheduling restart.",
4240 FORMAT_TIMESPAN(service_restart_usec_next(s
), USEC_PER_SEC
));
4242 log_unit_debug(UNIT(s
),
4243 "Service has no hold-off time (RestartSec=0), scheduling restart.");
4245 service_enter_restart(s
);
4248 case SERVICE_CLEANING
:
4249 log_unit_warning(UNIT(s
), "Cleaning timed out. killing.");
4251 if (s
->clean_result
== SERVICE_SUCCESS
)
4252 s
->clean_result
= SERVICE_FAILURE_TIMEOUT
;
4254 service_enter_signal(s
, SERVICE_FINAL_SIGKILL
, 0);
4258 assert_not_reached();
4264 static int service_dispatch_watchdog(sd_event_source
*source
, usec_t usec
, void *userdata
) {
4265 Service
*s
= ASSERT_PTR(SERVICE(userdata
));
4266 usec_t watchdog_usec
;
4268 assert(source
== s
->watchdog_event_source
);
4270 watchdog_usec
= service_get_watchdog_usec(s
);
4272 if (UNIT(s
)->manager
->service_watchdogs
) {
4273 log_unit_error(UNIT(s
), "Watchdog timeout (limit %s)!",
4274 FORMAT_TIMESPAN(watchdog_usec
, 1));
4276 service_enter_signal(s
, SERVICE_STOP_WATCHDOG
, SERVICE_FAILURE_WATCHDOG
);
4278 log_unit_warning(UNIT(s
), "Watchdog disabled! Ignoring watchdog timeout (limit %s)!",
4279 FORMAT_TIMESPAN(watchdog_usec
, 1));
4284 static void service_force_watchdog(Service
*s
) {
4287 if (!UNIT(s
)->manager
->service_watchdogs
)
4290 log_unit_error(UNIT(s
), "Watchdog request (last status: %s)!",
4291 s
->status_text
?: "<unset>");
4293 service_enter_signal(s
, SERVICE_STOP_WATCHDOG
, SERVICE_FAILURE_WATCHDOG
);
4296 static bool service_notify_message_authorized(Service
*s
, pid_t pid
) {
4298 assert(pid_is_valid(pid
));
4300 NotifyAccess notify_access
= service_get_notify_access(s
);
4302 if (notify_access
== NOTIFY_NONE
) {
4303 /* Warn level only if no notifications are expected */
4304 log_unit_warning(UNIT(s
), "Got notification message from PID "PID_FMT
", but reception is disabled", pid
);
4308 if (notify_access
== NOTIFY_MAIN
&& pid
!= s
->main_pid
.pid
) {
4309 if (pidref_is_set(&s
->main_pid
))
4310 log_unit_debug(UNIT(s
), "Got notification message from PID "PID_FMT
", but reception only permitted for main PID "PID_FMT
, pid
, s
->main_pid
.pid
);
4312 log_unit_debug(UNIT(s
), "Got notification message from PID "PID_FMT
", but reception only permitted for main PID which is currently not known", pid
);
4317 if (notify_access
== NOTIFY_EXEC
&& pid
!= s
->main_pid
.pid
&& pid
!= s
->control_pid
.pid
) {
4318 if (pidref_is_set(&s
->main_pid
) && pidref_is_set(&s
->control_pid
))
4319 log_unit_debug(UNIT(s
), "Got notification message from PID "PID_FMT
", but reception only permitted for main PID "PID_FMT
" and control PID "PID_FMT
,
4320 pid
, s
->main_pid
.pid
, s
->control_pid
.pid
);
4321 else if (pidref_is_set(&s
->main_pid
))
4322 log_unit_debug(UNIT(s
), "Got notification message from PID "PID_FMT
", but reception only permitted for main PID "PID_FMT
, pid
, s
->main_pid
.pid
);
4323 else if (pidref_is_set(&s
->control_pid
))
4324 log_unit_debug(UNIT(s
), "Got notification message from PID "PID_FMT
", but reception only permitted for control PID "PID_FMT
, pid
, s
->control_pid
.pid
);
4326 log_unit_debug(UNIT(s
), "Got notification message from PID "PID_FMT
", but reception only permitted for main PID and control PID which are currently not known", pid
);
4334 static void service_notify_message(
4336 const struct ucred
*ucred
,
4340 Service
*s
= ASSERT_PTR(SERVICE(u
));
4345 if (!service_notify_message_authorized(s
, ucred
->pid
))
4348 if (DEBUG_LOGGING
) {
4349 _cleanup_free_
char *cc
= strv_join(tags
, ", ");
4350 log_unit_debug(u
, "Got notification message from PID "PID_FMT
" (%s)", ucred
->pid
, empty_to_na(cc
));
4353 usec_t monotonic_usec
= USEC_INFINITY
;
4354 bool notify_dbus
= false;
4357 /* Interpret MAINPID= */
4358 e
= strv_find_startswith(tags
, "MAINPID=");
4359 if (e
&& IN_SET(s
->state
, SERVICE_START
, SERVICE_START_POST
, SERVICE_RUNNING
,
4360 SERVICE_RELOAD
, SERVICE_RELOAD_SIGNAL
, SERVICE_RELOAD_NOTIFY
,
4361 SERVICE_STOP
, SERVICE_STOP_SIGTERM
)) {
4363 _cleanup_(pidref_done
) PidRef new_main_pid
= PIDREF_NULL
;
4365 r
= pidref_set_pidstr(&new_main_pid
, e
);
4367 log_unit_warning_errno(u
, r
, "Failed to parse MAINPID=%s field in notification message, ignoring: %m", e
);
4368 else if (!s
->main_pid_known
|| !pidref_equal(&new_main_pid
, &s
->main_pid
)) {
4370 r
= service_is_suitable_main_pid(s
, &new_main_pid
, LOG_WARNING
);
4372 /* The new main PID is a bit suspicious, which is OK if the sender is privileged. */
4374 if (ucred
->uid
== 0) {
4375 log_unit_debug(u
, "New main PID "PID_FMT
" does not belong to service, but we'll accept it as the request to change it came from a privileged process.", new_main_pid
.pid
);
4378 log_unit_warning(u
, "New main PID "PID_FMT
" does not belong to service, refusing.", new_main_pid
.pid
);
4381 (void) service_set_main_pidref(s
, TAKE_PIDREF(new_main_pid
), /* start_timestamp = */ NULL
);
4383 r
= unit_watch_pidref(UNIT(s
), &s
->main_pid
, /* exclusive= */ false);
4385 log_unit_warning_errno(UNIT(s
), r
, "Failed to watch new main PID "PID_FMT
" for service: %m", s
->main_pid
.pid
);
4392 /* Parse MONOTONIC_USEC= */
4393 e
= strv_find_startswith(tags
, "MONOTONIC_USEC=");
4395 r
= safe_atou64(e
, &monotonic_usec
);
4397 log_unit_warning_errno(u
, r
, "Failed to parse MONOTONIC_USEC= field in notification message, ignoring: %s", e
);
4400 /* Interpret READY=/STOPPING=/RELOADING=. STOPPING= wins over the others, and READY= over RELOADING= */
4401 if (strv_contains(tags
, "STOPPING=1")) {
4402 s
->notify_state
= NOTIFY_STOPPING
;
4404 if (IN_SET(s
->state
, SERVICE_RUNNING
, SERVICE_RELOAD_SIGNAL
, SERVICE_RELOAD_NOTIFY
))
4405 service_enter_stop_by_notify(s
);
4409 } else if (strv_contains(tags
, "READY=1")) {
4411 s
->notify_state
= NOTIFY_READY
;
4413 /* Type=notify services inform us about completed initialization with READY=1 */
4414 if (IN_SET(s
->type
, SERVICE_NOTIFY
, SERVICE_NOTIFY_RELOAD
) &&
4415 s
->state
== SERVICE_START
)
4416 service_enter_start_post(s
);
4418 /* Sending READY=1 while we are reloading informs us that the reloading is complete. */
4419 if (s
->state
== SERVICE_RELOAD_NOTIFY
)
4420 service_enter_running(s
, SERVICE_SUCCESS
);
4422 /* Combined RELOADING=1 and READY=1? Then this is indication that the service started and
4423 * immediately finished reloading. */
4424 if (s
->state
== SERVICE_RELOAD_SIGNAL
&&
4425 strv_contains(tags
, "RELOADING=1") &&
4426 monotonic_usec
!= USEC_INFINITY
&&
4427 monotonic_usec
>= s
->reload_begin_usec
) {
4428 _cleanup_(sd_bus_error_free
) sd_bus_error error
= SD_BUS_ERROR_NULL
;
4430 /* Propagate a reload explicitly */
4431 r
= manager_propagate_reload(UNIT(s
)->manager
, UNIT(s
), JOB_FAIL
, &error
);
4433 log_unit_warning(UNIT(s
), "Failed to schedule propagation of reload, ignoring: %s", bus_error_message(&error
, r
));
4435 service_enter_running(s
, SERVICE_SUCCESS
);
4440 } else if (strv_contains(tags
, "RELOADING=1")) {
4442 s
->notify_state
= NOTIFY_RELOADING
;
4444 /* Sending RELOADING=1 after we send SIGHUP to request a reload will transition
4445 * things to "reload-notify" state, where we'll wait for READY=1 to let us know the
4446 * reload is done. Note that we insist on a timestamp being sent along here, so that
4447 * we know for sure this is a reload cycle initiated *after* we sent the signal */
4448 if (s
->state
== SERVICE_RELOAD_SIGNAL
&&
4449 monotonic_usec
!= USEC_INFINITY
&&
4450 monotonic_usec
>= s
->reload_begin_usec
)
4451 /* Note, we don't call service_enter_reload_by_notify() here, because we
4452 * don't need reload propagation nor do we want to restart the time-out. */
4453 service_set_state(s
, SERVICE_RELOAD_NOTIFY
);
4455 if (s
->state
== SERVICE_RUNNING
)
4456 service_enter_reload_by_notify(s
);
4461 /* Interpret STATUS= */
4462 e
= strv_find_startswith(tags
, "STATUS=");
4464 _cleanup_free_
char *t
= NULL
;
4467 /* Note that this size limit check is mostly paranoia: since the datagram size we are willing
4468 * to process is already limited to NOTIFY_BUFFER_MAX, this limit here should never be hit. */
4469 if (strlen(e
) > STATUS_TEXT_MAX
)
4470 log_unit_warning(u
, "Status message overly long (%zu > %u), ignoring.", strlen(e
), STATUS_TEXT_MAX
);
4471 else if (!utf8_is_valid(e
))
4472 log_unit_warning(u
, "Status message in notification message is not UTF-8 clean, ignoring.");
4480 if (!streq_ptr(s
->status_text
, t
)) {
4481 free_and_replace(s
->status_text
, t
);
4486 /* Interpret NOTIFYACCESS= */
4487 e
= strv_find_startswith(tags
, "NOTIFYACCESS=");
4489 NotifyAccess notify_access
;
4491 notify_access
= notify_access_from_string(e
);
4492 if (notify_access
< 0)
4493 log_unit_warning_errno(u
, notify_access
,
4494 "Failed to parse NOTIFYACCESS= field value '%s' in notification message, ignoring: %m", e
);
4496 /* We don't need to check whether the new access mode is more strict than what is
4497 * already in use, since only the privileged process is allowed to change it
4498 * in the first place. */
4499 if (service_get_notify_access(s
) != notify_access
) {
4500 service_override_notify_access(s
, notify_access
);
4505 /* Interpret ERRNO= */
4506 e
= strv_find_startswith(tags
, "ERRNO=");
4510 status_errno
= parse_errno(e
);
4511 if (status_errno
< 0)
4512 log_unit_warning_errno(u
, status_errno
,
4513 "Failed to parse ERRNO= field value '%s' in notification message: %m", e
);
4514 else if (s
->status_errno
!= status_errno
) {
4515 s
->status_errno
= status_errno
;
4520 /* Interpret EXTEND_TIMEOUT= */
4521 e
= strv_find_startswith(tags
, "EXTEND_TIMEOUT_USEC=");
4523 usec_t extend_timeout_usec
;
4524 if (safe_atou64(e
, &extend_timeout_usec
) < 0)
4525 log_unit_warning(u
, "Failed to parse EXTEND_TIMEOUT_USEC=%s", e
);
4527 service_extend_timeout(s
, extend_timeout_usec
);
4530 /* Interpret WATCHDOG= */
4531 e
= strv_find_startswith(tags
, "WATCHDOG=");
4534 service_reset_watchdog(s
);
4535 else if (streq(e
, "trigger"))
4536 service_force_watchdog(s
);
4538 log_unit_warning(u
, "Passed WATCHDOG= field is invalid, ignoring.");
4541 e
= strv_find_startswith(tags
, "WATCHDOG_USEC=");
4543 usec_t watchdog_override_usec
;
4544 if (safe_atou64(e
, &watchdog_override_usec
) < 0)
4545 log_unit_warning(u
, "Failed to parse WATCHDOG_USEC=%s", e
);
4547 service_override_watchdog_timeout(s
, watchdog_override_usec
);
4550 /* Process FD store messages. Either FDSTOREREMOVE=1 for removal, or FDSTORE=1 for addition. In both cases,
4551 * process FDNAME= for picking the file descriptor name to use. Note that FDNAME= is required when removing
4552 * fds, but optional when pushing in new fds, for compatibility reasons. */
4553 if (strv_contains(tags
, "FDSTOREREMOVE=1")) {
4556 name
= strv_find_startswith(tags
, "FDNAME=");
4557 if (!name
|| !fdname_is_valid(name
))
4558 log_unit_warning(u
, "FDSTOREREMOVE=1 requested, but no valid file descriptor name passed, ignoring.");
4560 service_remove_fd_store(s
, name
);
4562 } else if (strv_contains(tags
, "FDSTORE=1")) {
4565 name
= strv_find_startswith(tags
, "FDNAME=");
4566 if (name
&& !fdname_is_valid(name
)) {
4567 log_unit_warning(u
, "Passed FDNAME= name is invalid, ignoring.");
4571 (void) service_add_fd_store_set(s
, fds
, name
, !strv_contains(tags
, "FDPOLL=0"));
4574 /* Notify clients about changed status or main pid */
4576 unit_add_to_dbus_queue(u
);
4579 static void service_handoff_timestamp(
4581 const struct ucred
*ucred
,
4582 const dual_timestamp
*ts
) {
4584 Service
*s
= ASSERT_PTR(SERVICE(u
));
4589 if (s
->main_pid
.pid
== ucred
->pid
) {
4590 if (s
->main_command
)
4591 exec_status_handoff(&s
->main_command
->exec_status
, ucred
, ts
);
4593 exec_status_handoff(&s
->main_exec_status
, ucred
, ts
);
4594 } else if (s
->control_pid
.pid
== ucred
->pid
&& s
->control_command
)
4595 exec_status_handoff(&s
->control_command
->exec_status
, ucred
, ts
);
4599 unit_add_to_dbus_queue(u
);
4602 static int service_get_timeout(Unit
*u
, usec_t
*timeout
) {
4603 Service
*s
= ASSERT_PTR(SERVICE(u
));
4609 if (!s
->timer_event_source
)
4612 r
= sd_event_source_get_time(s
->timer_event_source
, &t
);
4615 if (t
== USEC_INFINITY
)
4622 static usec_t
service_get_timeout_start_usec(Unit
*u
) {
4623 Service
*s
= ASSERT_PTR(SERVICE(u
));
4624 return s
->timeout_start_usec
;
4627 static bool pick_up_pid_from_bus_name(Service
*s
) {
4630 /* If the service is running but we have no main PID yet, get it from the owner of the D-Bus name */
4632 return !pidref_is_set(&s
->main_pid
) &&
4638 SERVICE_RELOAD_SIGNAL
,
4639 SERVICE_RELOAD_NOTIFY
);
4642 static int bus_name_pid_lookup_callback(sd_bus_message
*reply
, void *userdata
, sd_bus_error
*ret_error
) {
4643 Service
*s
= ASSERT_PTR(SERVICE(userdata
));
4644 _cleanup_(pidref_done
) PidRef pidref
= PIDREF_NULL
;
4645 const sd_bus_error
*e
;
4651 s
->bus_name_pid_lookup_slot
= sd_bus_slot_unref(s
->bus_name_pid_lookup_slot
);
4653 if (!s
->bus_name
|| !pick_up_pid_from_bus_name(s
))
4656 e
= sd_bus_message_get_error(reply
);
4658 r
= sd_bus_error_get_errno(e
);
4659 log_warning_errno(r
, "GetConnectionUnixProcessID() failed: %s", bus_error_message(e
, r
));
4663 r
= sd_bus_message_read(reply
, "u", &pid
);
4665 bus_log_parse_error(r
);
4669 r
= pidref_set_pid(&pidref
, pid
);
4671 log_debug_errno(r
, "GetConnectionUnixProcessID() returned invalid PID: %m");
4675 log_unit_debug(UNIT(s
), "D-Bus name %s is now owned by process " PID_FMT
, s
->bus_name
, pidref
.pid
);
4677 (void) service_set_main_pidref(s
, TAKE_PIDREF(pidref
), /* start_timestamp = */ NULL
);
4678 (void) unit_watch_pidref(UNIT(s
), &s
->main_pid
, /* exclusive= */ false);
4682 static void service_bus_name_owner_change(Unit
*u
, const char *new_owner
) {
4683 Service
*s
= ASSERT_PTR(SERVICE(u
));
4687 log_unit_debug(u
, "D-Bus name %s now owned by %s", s
->bus_name
, new_owner
);
4689 log_unit_debug(u
, "D-Bus name %s now not owned by anyone.", s
->bus_name
);
4691 s
->bus_name_good
= new_owner
;
4693 /* Track the current owner, so we can reconstruct changes after a daemon reload */
4694 r
= free_and_strdup(&s
->bus_name_owner
, new_owner
);
4696 log_unit_error_errno(u
, r
, "Unable to set new bus name owner %s: %m", new_owner
);
4700 if (s
->type
== SERVICE_DBUS
) {
4702 /* service_enter_running() will figure out what to
4704 if (s
->state
== SERVICE_RUNNING
)
4705 service_enter_running(s
, SERVICE_SUCCESS
);
4706 else if (s
->state
== SERVICE_START
&& new_owner
)
4707 service_enter_start_post(s
);
4709 } else if (new_owner
&& pick_up_pid_from_bus_name(s
)) {
4711 /* Try to acquire PID from bus service */
4713 s
->bus_name_pid_lookup_slot
= sd_bus_slot_unref(s
->bus_name_pid_lookup_slot
);
4715 r
= sd_bus_call_method_async(
4716 u
->manager
->api_bus
,
4717 &s
->bus_name_pid_lookup_slot
,
4718 "org.freedesktop.DBus",
4719 "/org/freedesktop/DBus",
4720 "org.freedesktop.DBus",
4721 "GetConnectionUnixProcessID",
4722 bus_name_pid_lookup_callback
,
4727 log_debug_errno(r
, "Failed to request owner PID of service name, ignoring: %m");
4731 int service_set_socket_fd(
4735 SocketPeer
*peer
, /* reference to object is donated to us on success */
4736 bool selinux_context_net
) {
4738 _cleanup_free_
char *peer_text
= NULL
;
4745 /* This is called by the socket code when instantiating a new service for a stream socket and the socket needs
4746 * to be configured. We take ownership of the passed fd on success. */
4748 if (UNIT(s
)->load_state
!= UNIT_LOADED
)
4751 if (s
->socket_fd
>= 0)
4754 assert(!s
->socket_peer
);
4756 if (!IN_SET(s
->state
, SERVICE_DEAD
, SERVICE_DEAD_RESOURCES_PINNED
))
4759 if (getpeername_pretty(fd
, true, &peer_text
) >= 0) {
4761 if (UNIT(s
)->description
) {
4762 _cleanup_free_
char *a
= NULL
;
4764 a
= strjoin(UNIT(s
)->description
, " (", peer_text
, ")");
4768 r
= unit_set_description(UNIT(s
), a
);
4770 r
= unit_set_description(UNIT(s
), peer_text
);
4775 r
= unit_add_two_dependencies(UNIT(s
), UNIT_AFTER
, UNIT_TRIGGERED_BY
, UNIT(sock
), false, UNIT_DEPENDENCY_IMPLICIT
);
4777 return log_unit_debug_errno(UNIT(s
), r
,
4778 "Failed to add After=/TriggeredBy= dependencies on socket unit: %m");
4781 s
->socket_peer
= peer
;
4782 s
->socket_fd_selinux_context_net
= selinux_context_net
;
4784 unit_ref_set(&s
->accept_socket
, UNIT(s
), UNIT(sock
));
4788 static void service_reset_failed(Unit
*u
) {
4789 Service
*s
= ASSERT_PTR(SERVICE(u
));
4791 if (s
->state
== SERVICE_FAILED
)
4792 service_set_state(s
, service_determine_dead_state(s
));
4794 s
->result
= SERVICE_SUCCESS
;
4795 s
->reload_result
= SERVICE_SUCCESS
;
4796 s
->clean_result
= SERVICE_SUCCESS
;
4798 s
->flush_n_restarts
= false;
4801 static PidRef
* service_main_pid(Unit
*u
, bool *ret_is_alien
) {
4802 Service
*s
= ASSERT_PTR(SERVICE(u
));
4805 *ret_is_alien
= s
->main_pid_alien
;
4807 return &s
->main_pid
;
4810 static PidRef
* service_control_pid(Unit
*u
) {
4811 return &ASSERT_PTR(SERVICE(u
))->control_pid
;
4814 static bool service_needs_console(Unit
*u
) {
4815 Service
*s
= ASSERT_PTR(SERVICE(u
));
4817 /* We provide our own implementation of this here, instead of relying of the generic implementation
4818 * unit_needs_console() provides, since we want to return false if we are in SERVICE_EXITED state. */
4820 if (!exec_context_may_touch_console(&s
->exec_context
))
4823 return IN_SET(s
->state
,
4830 SERVICE_RELOAD_SIGNAL
,
4831 SERVICE_RELOAD_NOTIFY
,
4833 SERVICE_STOP_WATCHDOG
,
4834 SERVICE_STOP_SIGTERM
,
4835 SERVICE_STOP_SIGKILL
,
4837 SERVICE_FINAL_WATCHDOG
,
4838 SERVICE_FINAL_SIGTERM
,
4839 SERVICE_FINAL_SIGKILL
);
4842 static int service_exit_status(Unit
*u
) {
4843 Service
*s
= ASSERT_PTR(SERVICE(u
));
4845 if (s
->main_exec_status
.pid
<= 0 ||
4846 !dual_timestamp_is_set(&s
->main_exec_status
.exit_timestamp
))
4849 if (s
->main_exec_status
.code
!= CLD_EXITED
)
4852 return s
->main_exec_status
.status
;
4855 static const char* service_status_text(Unit
*u
) {
4856 Service
*s
= ASSERT_PTR(SERVICE(u
));
4858 return s
->status_text
;
4861 static int service_clean(Unit
*u
, ExecCleanMask mask
) {
4862 Service
*s
= ASSERT_PTR(SERVICE(u
));
4863 _cleanup_strv_free_
char **l
= NULL
;
4864 bool may_clean_fdstore
= false;
4869 if (!IN_SET(s
->state
, SERVICE_DEAD
, SERVICE_DEAD_RESOURCES_PINNED
))
4872 /* Determine if there's anything we could potentially clean */
4873 r
= exec_context_get_clean_directories(&s
->exec_context
, u
->manager
->prefix
, mask
, &l
);
4877 if (mask
& EXEC_CLEAN_FDSTORE
)
4878 may_clean_fdstore
= s
->n_fd_store
> 0 || s
->n_fd_store_max
> 0;
4880 if (strv_isempty(l
) && !may_clean_fdstore
)
4881 return -EUNATCH
; /* Nothing to potentially clean */
4883 /* Let's clean the stuff we can clean quickly */
4884 if (may_clean_fdstore
)
4885 service_release_fd_store(s
);
4887 /* If we are done, leave quickly */
4888 if (strv_isempty(l
)) {
4889 if (s
->state
== SERVICE_DEAD_RESOURCES_PINNED
&& !s
->fd_store
)
4890 service_set_state(s
, SERVICE_DEAD
);
4894 /* We need to clean disk stuff. This is slow, hence do it out of process, and change state */
4895 service_unwatch_control_pid(s
);
4896 s
->clean_result
= SERVICE_SUCCESS
;
4897 s
->control_command
= NULL
;
4898 s
->control_command_id
= _SERVICE_EXEC_COMMAND_INVALID
;
4900 r
= service_arm_timer(s
, /* relative= */ true, s
->exec_context
.timeout_clean_usec
);
4902 log_unit_warning_errno(u
, r
, "Failed to install timer: %m");
4906 r
= unit_fork_and_watch_rm_rf(u
, l
, &s
->control_pid
);
4908 log_unit_warning_errno(u
, r
, "Failed to spawn cleaning task: %m");
4912 service_set_state(s
, SERVICE_CLEANING
);
4916 s
->clean_result
= SERVICE_FAILURE_RESOURCES
;
4917 s
->timer_event_source
= sd_event_source_disable_unref(s
->timer_event_source
);
4921 static int service_can_clean(Unit
*u
, ExecCleanMask
*ret
) {
4922 Service
*s
= ASSERT_PTR(SERVICE(u
));
4923 ExecCleanMask mask
= 0;
4928 r
= exec_context_get_clean_mask(&s
->exec_context
, &mask
);
4932 if (s
->n_fd_store_max
> 0)
4933 mask
|= EXEC_CLEAN_FDSTORE
;
4939 static const char* service_finished_job(Unit
*u
, JobType t
, JobResult result
) {
4940 Service
*s
= ASSERT_PTR(SERVICE(u
));
4942 if (t
== JOB_START
&&
4943 result
== JOB_DONE
&&
4944 s
->type
== SERVICE_ONESHOT
)
4945 return "Finished %s.";
4947 /* Fall back to generic */
4951 static int service_can_start(Unit
*u
) {
4952 Service
*s
= ASSERT_PTR(SERVICE(u
));
4955 /* Make sure we don't enter a busy loop of some kind. */
4956 r
= unit_test_start_limit(u
);
4958 service_enter_dead(s
, SERVICE_FAILURE_START_LIMIT_HIT
, false);
4965 static void service_release_resources(Unit
*u
) {
4966 Service
*s
= ASSERT_PTR(SERVICE(u
));
4968 /* Invoked by the unit state engine, whenever it realizes that unit is dead and there's no job
4969 * anymore for it, and it hence is a good idea to release resources */
4971 /* Don't release resources if this is a transitionary failed/dead state
4972 * (i.e. SERVICE_DEAD_BEFORE_AUTO_RESTART/SERVICE_FAILED_BEFORE_AUTO_RESTART), insist on a permanent
4974 if (!IN_SET(s
->state
, SERVICE_DEAD
, SERVICE_FAILED
, SERVICE_DEAD_RESOURCES_PINNED
))
4977 log_unit_debug(u
, "Releasing resources...");
4979 service_release_socket_fd(s
);
4980 service_release_stdio_fd(s
);
4982 if (s
->fd_store_preserve_mode
!= EXEC_PRESERVE_YES
)
4983 service_release_fd_store(s
);
4985 if (s
->state
== SERVICE_DEAD_RESOURCES_PINNED
&& !s
->fd_store
)
4986 service_set_state(s
, SERVICE_DEAD
);
4989 int service_determine_exec_selinux_label(Service
*s
, char **ret
) {
4995 if (!mac_selinux_use())
4998 /* Returns the SELinux label used for execution of the main service binary */
5000 if (s
->exec_context
.selinux_context
)
5001 /* Prefer the explicitly configured label if there is one */
5002 return strdup_to(ret
, s
->exec_context
.selinux_context
);
5004 if (s
->exec_context
.root_image
||
5005 s
->exec_context
.n_extension_images
> 0 ||
5006 !strv_isempty(s
->exec_context
.extension_directories
)) /* We cannot chase paths through images */
5007 return log_unit_debug_errno(UNIT(s
), SYNTHETIC_ERRNO(ENODATA
), "Service with RootImage=, ExtensionImages= or ExtensionDirectories= set, cannot determine socket SELinux label before activation, ignoring.");
5009 ExecCommand
*c
= s
->exec_command
[SERVICE_EXEC_START
];
5013 _cleanup_free_
char *path
= NULL
;
5014 r
= chase(c
->path
, s
->exec_context
.root_directory
, CHASE_PREFIX_ROOT
, &path
, NULL
);
5016 log_unit_debug_errno(UNIT(s
), r
, "Failed to resolve service binary '%s', ignoring.", c
->path
);
5020 r
= mac_selinux_get_create_label_from_exe(path
, ret
);
5021 if (ERRNO_IS_NEG_NOT_SUPPORTED(r
)) {
5022 log_unit_debug_errno(UNIT(s
), r
, "Reading SELinux label off binary '%s' is not supported, ignoring.", path
);
5025 if (ERRNO_IS_NEG_PRIVILEGE(r
)) {
5026 log_unit_debug_errno(UNIT(s
), r
, "Can't read SELinux label off binary '%s', due to privileges, ignoring.", path
);
5030 return log_unit_debug_errno(UNIT(s
), r
, "Failed to read SELinux label off binary '%s': %m", path
);
5035 static const char* const service_restart_table
[_SERVICE_RESTART_MAX
] = {
5036 [SERVICE_RESTART_NO
] = "no",
5037 [SERVICE_RESTART_ON_SUCCESS
] = "on-success",
5038 [SERVICE_RESTART_ON_FAILURE
] = "on-failure",
5039 [SERVICE_RESTART_ON_ABNORMAL
] = "on-abnormal",
5040 [SERVICE_RESTART_ON_WATCHDOG
] = "on-watchdog",
5041 [SERVICE_RESTART_ON_ABORT
] = "on-abort",
5042 [SERVICE_RESTART_ALWAYS
] = "always",
5045 DEFINE_STRING_TABLE_LOOKUP(service_restart
, ServiceRestart
);
5047 static const char* const service_restart_mode_table
[_SERVICE_RESTART_MODE_MAX
] = {
5048 [SERVICE_RESTART_MODE_NORMAL
] = "normal",
5049 [SERVICE_RESTART_MODE_DIRECT
] = "direct",
5052 DEFINE_STRING_TABLE_LOOKUP(service_restart_mode
, ServiceRestartMode
);
5054 static const char* const service_type_table
[_SERVICE_TYPE_MAX
] = {
5055 [SERVICE_SIMPLE
] = "simple",
5056 [SERVICE_FORKING
] = "forking",
5057 [SERVICE_ONESHOT
] = "oneshot",
5058 [SERVICE_DBUS
] = "dbus",
5059 [SERVICE_NOTIFY
] = "notify",
5060 [SERVICE_NOTIFY_RELOAD
] = "notify-reload",
5061 [SERVICE_IDLE
] = "idle",
5062 [SERVICE_EXEC
] = "exec",
5065 DEFINE_STRING_TABLE_LOOKUP(service_type
, ServiceType
);
5067 static const char* const service_exit_type_table
[_SERVICE_EXIT_TYPE_MAX
] = {
5068 [SERVICE_EXIT_MAIN
] = "main",
5069 [SERVICE_EXIT_CGROUP
] = "cgroup",
5072 DEFINE_STRING_TABLE_LOOKUP(service_exit_type
, ServiceExitType
);
5074 static const char* const service_exec_command_table
[_SERVICE_EXEC_COMMAND_MAX
] = {
5075 [SERVICE_EXEC_CONDITION
] = "ExecCondition",
5076 [SERVICE_EXEC_START_PRE
] = "ExecStartPre",
5077 [SERVICE_EXEC_START
] = "ExecStart",
5078 [SERVICE_EXEC_START_POST
] = "ExecStartPost",
5079 [SERVICE_EXEC_RELOAD
] = "ExecReload",
5080 [SERVICE_EXEC_STOP
] = "ExecStop",
5081 [SERVICE_EXEC_STOP_POST
] = "ExecStopPost",
5084 DEFINE_STRING_TABLE_LOOKUP(service_exec_command
, ServiceExecCommand
);
5086 static const char* const service_exec_ex_command_table
[_SERVICE_EXEC_COMMAND_MAX
] = {
5087 [SERVICE_EXEC_CONDITION
] = "ExecConditionEx",
5088 [SERVICE_EXEC_START_PRE
] = "ExecStartPreEx",
5089 [SERVICE_EXEC_START
] = "ExecStartEx",
5090 [SERVICE_EXEC_START_POST
] = "ExecStartPostEx",
5091 [SERVICE_EXEC_RELOAD
] = "ExecReloadEx",
5092 [SERVICE_EXEC_STOP
] = "ExecStopEx",
5093 [SERVICE_EXEC_STOP_POST
] = "ExecStopPostEx",
5096 DEFINE_STRING_TABLE_LOOKUP(service_exec_ex_command
, ServiceExecCommand
);
5098 static const char* const notify_state_table
[_NOTIFY_STATE_MAX
] = {
5099 [NOTIFY_UNKNOWN
] = "unknown",
5100 [NOTIFY_READY
] = "ready",
5101 [NOTIFY_RELOADING
] = "reloading",
5102 [NOTIFY_STOPPING
] = "stopping",
5105 DEFINE_STRING_TABLE_LOOKUP(notify_state
, NotifyState
);
5107 static const char* const service_result_table
[_SERVICE_RESULT_MAX
] = {
5108 [SERVICE_SUCCESS
] = "success",
5109 [SERVICE_FAILURE_RESOURCES
] = "resources",
5110 [SERVICE_FAILURE_PROTOCOL
] = "protocol",
5111 [SERVICE_FAILURE_TIMEOUT
] = "timeout",
5112 [SERVICE_FAILURE_EXIT_CODE
] = "exit-code",
5113 [SERVICE_FAILURE_SIGNAL
] = "signal",
5114 [SERVICE_FAILURE_CORE_DUMP
] = "core-dump",
5115 [SERVICE_FAILURE_WATCHDOG
] = "watchdog",
5116 [SERVICE_FAILURE_START_LIMIT_HIT
] = "start-limit-hit",
5117 [SERVICE_FAILURE_OOM_KILL
] = "oom-kill",
5118 [SERVICE_SKIP_CONDITION
] = "exec-condition",
5121 DEFINE_STRING_TABLE_LOOKUP(service_result
, ServiceResult
);
5123 static const char* const service_timeout_failure_mode_table
[_SERVICE_TIMEOUT_FAILURE_MODE_MAX
] = {
5124 [SERVICE_TIMEOUT_TERMINATE
] = "terminate",
5125 [SERVICE_TIMEOUT_ABORT
] = "abort",
5126 [SERVICE_TIMEOUT_KILL
] = "kill",
5129 DEFINE_STRING_TABLE_LOOKUP(service_timeout_failure_mode
, ServiceTimeoutFailureMode
);
5131 const UnitVTable service_vtable
= {
5132 .object_size
= sizeof(Service
),
5133 .exec_context_offset
= offsetof(Service
, exec_context
),
5134 .cgroup_context_offset
= offsetof(Service
, cgroup_context
),
5135 .kill_context_offset
= offsetof(Service
, kill_context
),
5136 .exec_runtime_offset
= offsetof(Service
, exec_runtime
),
5137 .cgroup_runtime_offset
= offsetof(Service
, cgroup_runtime
),
5143 .private_section
= "Service",
5145 .can_transient
= true,
5146 .can_delegate
= true,
5148 .can_set_managed_oom
= true,
5150 .init
= service_init
,
5151 .done
= service_done
,
5152 .load
= service_load
,
5153 .release_resources
= service_release_resources
,
5155 .coldplug
= service_coldplug
,
5157 .dump
= service_dump
,
5159 .start
= service_start
,
5160 .stop
= service_stop
,
5161 .reload
= service_reload
,
5163 .can_reload
= service_can_reload
,
5165 .clean
= service_clean
,
5166 .can_clean
= service_can_clean
,
5168 .freezer_action
= unit_cgroup_freezer_action
,
5170 .serialize
= service_serialize
,
5171 .deserialize_item
= service_deserialize_item
,
5173 .active_state
= service_active_state
,
5174 .sub_state_to_string
= service_sub_state_to_string
,
5176 .will_restart
= service_will_restart
,
5178 .may_gc
= service_may_gc
,
5180 .sigchld_event
= service_sigchld_event
,
5182 .reset_failed
= service_reset_failed
,
5184 .notify_cgroup_empty
= service_notify_cgroup_empty_event
,
5185 .notify_cgroup_oom
= service_notify_cgroup_oom_event
,
5186 .notify_message
= service_notify_message
,
5187 .notify_handoff_timestamp
= service_handoff_timestamp
,
5189 .main_pid
= service_main_pid
,
5190 .control_pid
= service_control_pid
,
5192 .bus_name_owner_change
= service_bus_name_owner_change
,
5194 .bus_set_property
= bus_service_set_property
,
5195 .bus_commit_properties
= bus_service_commit_properties
,
5197 .get_timeout
= service_get_timeout
,
5198 .get_timeout_start_usec
= service_get_timeout_start_usec
,
5199 .needs_console
= service_needs_console
,
5200 .exit_status
= service_exit_status
,
5201 .status_text
= service_status_text
,
5203 .status_message_formats
= {
5204 .finished_start_job
= {
5205 [JOB_FAILED
] = "Failed to start %s.",
5207 .finished_stop_job
= {
5208 [JOB_DONE
] = "Stopped %s.",
5209 [JOB_FAILED
] = "Stopped (with error) %s.",
5211 .finished_job
= service_finished_job
,
5214 .can_start
= service_can_start
,
5216 .notify_plymouth
= true,
5218 .audit_start_message_type
= AUDIT_SERVICE_START
,
5219 .audit_stop_message_type
= AUDIT_SERVICE_STOP
,