]> git.ipfire.org Git - thirdparty/systemd.git/blob - src/core/service.c
projects / thirdparty / systemd.git / blob
? search:
summary | shortlog | log | commit | commitdiff | tree
blame | history | raw | HEAD
core: drop "argv" field from ExecParameter structure
[thirdparty/systemd.git] / src / core / service.c
1 /* SPDX-License-Identifier: LGPL-2.1+ */
2
3 #include <errno.h>
4 #include <signal.h>
5 #include <unistd.h>
6
7 #include "sd-messages.h"
8
9 #include "alloc-util.h"
10 #include "async.h"
11 #include "bus-error.h"
12 #include "bus-kernel.h"
13 #include "bus-util.h"
14 #include "dbus-service.h"
15 #include "def.h"
16 #include "env-util.h"
17 #include "escape.h"
18 #include "exit-status.h"
19 #include "fd-util.h"
20 #include "fileio.h"
21 #include "format-util.h"
22 #include "fs-util.h"
23 #include "load-dropin.h"
24 #include "load-fragment.h"
25 #include "log.h"
26 #include "manager.h"
27 #include "parse-util.h"
28 #include "path-util.h"
29 #include "process-util.h"
30 #include "service.h"
31 #include "signal-util.h"
32 #include "special.h"
33 #include "stdio-util.h"
34 #include "string-table.h"
35 #include "string-util.h"
36 #include "strv.h"
37 #include "unit-name.h"
38 #include "unit.h"
39 #include "utf8.h"
40 #include "util.h"
41
42 static const UnitActiveState state_translation_table[_SERVICE_STATE_MAX] = {
43 [SERVICE_DEAD] = UNIT_INACTIVE,
44 [SERVICE_START_PRE] = UNIT_ACTIVATING,
45 [SERVICE_START] = UNIT_ACTIVATING,
46 [SERVICE_START_POST] = UNIT_ACTIVATING,
47 [SERVICE_RUNNING] = UNIT_ACTIVE,
48 [SERVICE_EXITED] = UNIT_ACTIVE,
49 [SERVICE_RELOAD] = UNIT_RELOADING,
50 [SERVICE_STOP] = UNIT_DEACTIVATING,
51 [SERVICE_STOP_SIGABRT] = UNIT_DEACTIVATING,
52 [SERVICE_STOP_SIGTERM] = UNIT_DEACTIVATING,
53 [SERVICE_STOP_SIGKILL] = UNIT_DEACTIVATING,
54 [SERVICE_STOP_POST] = UNIT_DEACTIVATING,
55 [SERVICE_FINAL_SIGTERM] = UNIT_DEACTIVATING,
56 [SERVICE_FINAL_SIGKILL] = UNIT_DEACTIVATING,
57 [SERVICE_FAILED] = UNIT_FAILED,
58 [SERVICE_AUTO_RESTART] = UNIT_ACTIVATING
59 };
60
61 /* For Type=idle we never want to delay any other jobs, hence we
62 * consider idle jobs active as soon as we start working on them */
63 static const UnitActiveState state_translation_table_idle[_SERVICE_STATE_MAX] = {
64 [SERVICE_DEAD] = UNIT_INACTIVE,
65 [SERVICE_START_PRE] = UNIT_ACTIVE,
66 [SERVICE_START] = UNIT_ACTIVE,
67 [SERVICE_START_POST] = UNIT_ACTIVE,
68 [SERVICE_RUNNING] = UNIT_ACTIVE,
69 [SERVICE_EXITED] = UNIT_ACTIVE,
70 [SERVICE_RELOAD] = UNIT_RELOADING,
71 [SERVICE_STOP] = UNIT_DEACTIVATING,
72 [SERVICE_STOP_SIGABRT] = UNIT_DEACTIVATING,
73 [SERVICE_STOP_SIGTERM] = UNIT_DEACTIVATING,
74 [SERVICE_STOP_SIGKILL] = UNIT_DEACTIVATING,
75 [SERVICE_STOP_POST] = UNIT_DEACTIVATING,
76 [SERVICE_FINAL_SIGTERM] = UNIT_DEACTIVATING,
77 [SERVICE_FINAL_SIGKILL] = UNIT_DEACTIVATING,
78 [SERVICE_FAILED] = UNIT_FAILED,
79 [SERVICE_AUTO_RESTART] = UNIT_ACTIVATING
80 };
81
82 static int service_dispatch_io(sd_event_source *source, int fd, uint32_t events, void *userdata);
83 static int service_dispatch_timer(sd_event_source *source, usec_t usec, void *userdata);
84 static int service_dispatch_watchdog(sd_event_source *source, usec_t usec, void *userdata);
85
86 static void service_enter_signal(Service *s, ServiceState state, ServiceResult f);
87 static void service_enter_reload_by_notify(Service *s);
88
89 static void service_init(Unit *u) {
90 Service *s = SERVICE(u);
91
92 assert(u);
93 assert(u->load_state == UNIT_STUB);
94
95 s->timeout_start_usec = u->manager->default_timeout_start_usec;
96 s->timeout_stop_usec = u->manager->default_timeout_stop_usec;
97 s->restart_usec = u->manager->default_restart_usec;
98 s->runtime_max_usec = USEC_INFINITY;
99 s->type = _SERVICE_TYPE_INVALID;
100 s->socket_fd = -1;
101 s->stdin_fd = s->stdout_fd = s->stderr_fd = -1;
102 s->guess_main_pid = true;
103
104 s->control_command_id = _SERVICE_EXEC_COMMAND_INVALID;
105
106 s->exec_context.keyring_mode = MANAGER_IS_SYSTEM(u->manager) ?
107 EXEC_KEYRING_PRIVATE : EXEC_KEYRING_INHERIT;
108 }
109
110 static void service_unwatch_control_pid(Service *s) {
111 assert(s);
112
113 if (s->control_pid <= 0)
114 return;
115
116 unit_unwatch_pid(UNIT(s), s->control_pid);
117 s->control_pid = 0;
118 }
119
120 static void service_unwatch_main_pid(Service *s) {
121 assert(s);
122
123 if (s->main_pid <= 0)
124 return;
125
126 unit_unwatch_pid(UNIT(s), s->main_pid);
127 s->main_pid = 0;
128 }
129
130 static void service_unwatch_pid_file(Service *s) {
131 if (!s->pid_file_pathspec)
132 return;
133
134 log_unit_debug(UNIT(s), "Stopping watch for PID file %s", s->pid_file_pathspec->path);
135 path_spec_unwatch(s->pid_file_pathspec);
136 path_spec_done(s->pid_file_pathspec);
137 s->pid_file_pathspec = mfree(s->pid_file_pathspec);
138 }
139
140 static int service_set_main_pid(Service *s, pid_t pid) {
141 pid_t ppid;
142
143 assert(s);
144
145 if (pid <= 1)
146 return -EINVAL;
147
148 if (pid == getpid_cached())
149 return -EINVAL;
150
151 if (s->main_pid == pid && s->main_pid_known)
152 return 0;
153
154 if (s->main_pid != pid) {
155 service_unwatch_main_pid(s);
156 exec_status_start(&s->main_exec_status, pid);
157 }
158
159 s->main_pid = pid;
160 s->main_pid_known = true;
161
162 if (get_process_ppid(pid, &ppid) >= 0 && ppid != getpid_cached()) {
163 log_unit_warning(UNIT(s), "Supervising process "PID_FMT" which is not our child. We'll most likely not notice when it exits.", pid);
164 s->main_pid_alien = true;
165 } else
166 s->main_pid_alien = false;
167
168 return 0;
169 }
170
171 void service_close_socket_fd(Service *s) {
172 assert(s);
173
174 /* Undo the effect of service_set_socket_fd(). */
175
176 s->socket_fd = asynchronous_close(s->socket_fd);
177
178 if (UNIT_ISSET(s->accept_socket)) {
179 socket_connection_unref(SOCKET(UNIT_DEREF(s->accept_socket)));
180 unit_ref_unset(&s->accept_socket);
181 }
182 }
183
184 static void service_stop_watchdog(Service *s) {
185 assert(s);
186
187 s->watchdog_event_source = sd_event_source_unref(s->watchdog_event_source);
188 s->watchdog_timestamp = DUAL_TIMESTAMP_NULL;
189 }
190
191 static usec_t service_get_watchdog_usec(Service *s) {
192 assert(s);
193
194 if (s->watchdog_override_enable)
195 return s->watchdog_override_usec;
196 else
197 return s->watchdog_usec;
198 }
199
200 static void service_start_watchdog(Service *s) {
201 int r;
202 usec_t watchdog_usec;
203
204 assert(s);
205
206 watchdog_usec = service_get_watchdog_usec(s);
207 if (IN_SET(watchdog_usec, 0, USEC_INFINITY))
208 return;
209
210 if (s->watchdog_event_source) {
211 r = sd_event_source_set_time(s->watchdog_event_source, usec_add(s->watchdog_timestamp.monotonic, watchdog_usec));
212 if (r < 0) {
213 log_unit_warning_errno(UNIT(s), r, "Failed to reset watchdog timer: %m");
214 return;
215 }
216
217 r = sd_event_source_set_enabled(s->watchdog_event_source, SD_EVENT_ONESHOT);
218 } else {
219 r = sd_event_add_time(
220 UNIT(s)->manager->event,
221 &s->watchdog_event_source,
222 CLOCK_MONOTONIC,
223 usec_add(s->watchdog_timestamp.monotonic, watchdog_usec), 0,
224 service_dispatch_watchdog, s);
225 if (r < 0) {
226 log_unit_warning_errno(UNIT(s), r, "Failed to add watchdog timer: %m");
227 return;
228 }
229
230 (void) sd_event_source_set_description(s->watchdog_event_source, "service-watchdog");
231
232 /* Let's process everything else which might be a sign
233 * of living before we consider a service died. */
234 r = sd_event_source_set_priority(s->watchdog_event_source, SD_EVENT_PRIORITY_IDLE);
235 }
236
237 if (r < 0)
238 log_unit_warning_errno(UNIT(s), r, "Failed to install watchdog timer: %m");
239 }
240
241 static void service_extend_timeout(Service *s, usec_t extend_timeout_usec) {
242 assert(s);
243
244 if (s->timer_event_source) {
245 uint64_t current = 0, extended = 0;
246 int r;
247
248 if (IN_SET(extend_timeout_usec, 0, USEC_INFINITY))
249 return;
250
251 extended = usec_add(now(CLOCK_MONOTONIC), extend_timeout_usec);
252
253 r = sd_event_source_get_time(s->timer_event_source, &current);
254 if (r < 0)
255 log_unit_error_errno(UNIT(s), r, "Failed to retrieve timeout timer: %m");
256 else if (extended > current) {
257 r = sd_event_source_set_time(s->timer_event_source, extended);
258 if (r < 0)
259 log_unit_warning_errno(UNIT(s), r, "Failed to set timeout timer: %m");
260 }
261
262 if (s->watchdog_event_source) {
263 /* extend watchdog if necessary. We've asked for an extended timeout so we
264 * shouldn't expect a watchdog timeout in the interval in between */
265 r = sd_event_source_get_time(s->watchdog_event_source, &current);
266 if (r < 0) {
267 log_unit_error_errno(UNIT(s), r, "Failed to retrieve watchdog timer: %m");
268 return;
269 }
270
271 if (extended > current) {
272 r = sd_event_source_set_time(s->watchdog_event_source, extended);
273 if (r < 0)
274 log_unit_warning_errno(UNIT(s), r, "Failed to set watchdog timer: %m");
275 }
276 }
277 }
278 }
279
280 static void service_reset_watchdog(Service *s) {
281 assert(s);
282
283 dual_timestamp_get(&s->watchdog_timestamp);
284 service_start_watchdog(s);
285 }
286
287 static void service_reset_watchdog_timeout(Service *s, usec_t watchdog_override_usec) {
288 assert(s);
289
290 s->watchdog_override_enable = true;
291 s->watchdog_override_usec = watchdog_override_usec;
292 service_reset_watchdog(s);
293
294 log_unit_debug(UNIT(s), "watchdog_usec="USEC_FMT, s->watchdog_usec);
295 log_unit_debug(UNIT(s), "watchdog_override_usec="USEC_FMT, s->watchdog_override_usec);
296 }
297
298 static void service_fd_store_unlink(ServiceFDStore *fs) {
299
300 if (!fs)
301 return;
302
303 if (fs->service) {
304 assert(fs->service->n_fd_store > 0);
305 LIST_REMOVE(fd_store, fs->service->fd_store, fs);
306 fs->service->n_fd_store--;
307 }
308
309 if (fs->event_source) {
310 sd_event_source_set_enabled(fs->event_source, SD_EVENT_OFF);
311 sd_event_source_unref(fs->event_source);
312 }
313
314 free(fs->fdname);
315 safe_close(fs->fd);
316 free(fs);
317 }
318
319 static void service_release_fd_store(Service *s) {
320 assert(s);
321
322 if (s->n_keep_fd_store > 0)
323 return;
324
325 log_unit_debug(UNIT(s), "Releasing all stored fds");
326 while (s->fd_store)
327 service_fd_store_unlink(s->fd_store);
328
329 assert(s->n_fd_store == 0);
330 }
331
332 static void service_release_resources(Unit *u) {
333 Service *s = SERVICE(u);
334
335 assert(s);
336
337 if (!s->fd_store && s->stdin_fd < 0 && s->stdout_fd < 0 && s->stderr_fd < 0)
338 return;
339
340 log_unit_debug(u, "Releasing resources.");
341
342 s->stdin_fd = safe_close(s->stdin_fd);
343 s->stdout_fd = safe_close(s->stdout_fd);
344 s->stderr_fd = safe_close(s->stderr_fd);
345
346 service_release_fd_store(s);
347 }
348
349 static void service_done(Unit *u) {
350 Service *s = SERVICE(u);
351
352 assert(s);
353
354 s->pid_file = mfree(s->pid_file);
355 s->status_text = mfree(s->status_text);
356
357 s->exec_runtime = exec_runtime_unref(s->exec_runtime, false);
358 exec_command_free_array(s->exec_command, _SERVICE_EXEC_COMMAND_MAX);
359 s->control_command = NULL;
360 s->main_command = NULL;
361
362 dynamic_creds_unref(&s->dynamic_creds);
363
364 exit_status_set_free(&s->restart_prevent_status);
365 exit_status_set_free(&s->restart_force_status);
366 exit_status_set_free(&s->success_status);
367
368 /* This will leak a process, but at least no memory or any of
369 * our resources */
370 service_unwatch_main_pid(s);
371 service_unwatch_control_pid(s);
372 service_unwatch_pid_file(s);
373
374 if (s->bus_name) {
375 unit_unwatch_bus_name(u, s->bus_name);
376 s->bus_name = mfree(s->bus_name);
377 }
378
379 s->bus_name_owner = mfree(s->bus_name_owner);
380
381 s->usb_function_descriptors = mfree(s->usb_function_descriptors);
382 s->usb_function_strings = mfree(s->usb_function_strings);
383
384 service_close_socket_fd(s);
385 s->peer = socket_peer_unref(s->peer);
386
387 unit_ref_unset(&s->accept_socket);
388
389 service_stop_watchdog(s);
390
391 s->timer_event_source = sd_event_source_unref(s->timer_event_source);
392
393 service_release_resources(u);
394 }
395
396 static int on_fd_store_io(sd_event_source *e, int fd, uint32_t revents, void *userdata) {
397 ServiceFDStore *fs = userdata;
398
399 assert(e);
400 assert(fs);
401
402 /* If we get either EPOLLHUP or EPOLLERR, it's time to remove this entry from the fd store */
403 log_unit_debug(UNIT(fs->service),
404 "Received %s on stored fd %d (%s), closing.",
405 revents & EPOLLERR ? "EPOLLERR" : "EPOLLHUP",
406 fs->fd, strna(fs->fdname));
407 service_fd_store_unlink(fs);
408 return 0;
409 }
410
411 static int service_add_fd_store(Service *s, int fd, const char *name) {
412 ServiceFDStore *fs;
413 int r;
414
415 /* fd is always consumed if we return >= 0 */
416
417 assert(s);
418 assert(fd >= 0);
419
420 if (s->n_fd_store >= s->n_fd_store_max)
421 return -EXFULL; /* Our store is full.
422 * Use this errno rather than E[NM]FILE to distinguish from
423 * the case where systemd itself hits the file limit. */
424
425 LIST_FOREACH(fd_store, fs, s->fd_store) {
426 r = same_fd(fs->fd, fd);
427 if (r < 0)
428 return r;
429 if (r > 0) {
430 safe_close(fd);
431 return 0; /* fd already included */
432 }
433 }
434
435 fs = new0(ServiceFDStore, 1);
436 if (!fs)
437 return -ENOMEM;
438
439 fs->fd = fd;
440 fs->service = s;
441 fs->fdname = strdup(name ?: "stored");
442 if (!fs->fdname) {
443 free(fs);
444 return -ENOMEM;
445 }
446
447 r = sd_event_add_io(UNIT(s)->manager->event, &fs->event_source, fd, 0, on_fd_store_io, fs);
448 if (r < 0 && r != -EPERM) { /* EPERM indicates fds that aren't pollable, which is OK */
449 free(fs->fdname);
450 free(fs);
451 return r;
452 } else if (r >= 0)
453 (void) sd_event_source_set_description(fs->event_source, "service-fd-store");
454
455 LIST_PREPEND(fd_store, s->fd_store, fs);
456 s->n_fd_store++;
457
458 return 1; /* fd newly stored */
459 }
460
461 static int service_add_fd_store_set(Service *s, FDSet *fds, const char *name) {
462 int r;
463
464 assert(s);
465
466 while (fdset_size(fds) > 0) {
467 _cleanup_close_ int fd = -1;
468
469 fd = fdset_steal_first(fds);
470 if (fd < 0)
471 break;
472
473 r = service_add_fd_store(s, fd, name);
474 if (r == -EXFULL)
475 return log_unit_warning_errno(UNIT(s), r,
476 "Cannot store more fds than FileDescriptorStoreMax=%u, closing remaining.",
477 s->n_fd_store_max);
478 if (r < 0)
479 return log_unit_error_errno(UNIT(s), r, "Failed to add fd to store: %m");
480 if (r > 0)
481 log_unit_debug(UNIT(s), "Added fd %u (%s) to fd store.", fd, strna(name));
482 fd = -1;
483 }
484
485 return 0;
486 }
487
488 static void service_remove_fd_store(Service *s, const char *name) {
489 ServiceFDStore *fs, *n;
490
491 assert(s);
492 assert(name);
493
494 LIST_FOREACH_SAFE(fd_store, fs, n, s->fd_store) {
495 if (!streq(fs->fdname, name))
496 continue;
497
498 log_unit_debug(UNIT(s), "Got explicit request to remove fd %i (%s), closing.", fs->fd, name);
499 service_fd_store_unlink(fs);
500 }
501 }
502
503 static int service_arm_timer(Service *s, usec_t usec) {
504 int r;
505
506 assert(s);
507
508 if (s->timer_event_source) {
509 r = sd_event_source_set_time(s->timer_event_source, usec);
510 if (r < 0)
511 return r;
512
513 return sd_event_source_set_enabled(s->timer_event_source, SD_EVENT_ONESHOT);
514 }
515
516 if (usec == USEC_INFINITY)
517 return 0;
518
519 r = sd_event_add_time(
520 UNIT(s)->manager->event,
521 &s->timer_event_source,
522 CLOCK_MONOTONIC,
523 usec, 0,
524 service_dispatch_timer, s);
525 if (r < 0)
526 return r;
527
528 (void) sd_event_source_set_description(s->timer_event_source, "service-timer");
529
530 return 0;
531 }
532
533 static int service_verify(Service *s) {
534 assert(s);
535
536 if (UNIT(s)->load_state != UNIT_LOADED)
537 return 0;
538
539 if (!s->exec_command[SERVICE_EXEC_START] && !s->exec_command[SERVICE_EXEC_STOP]) {
540 log_unit_error(UNIT(s), "Service lacks both ExecStart= and ExecStop= setting. Refusing.");
541 return -ENOEXEC;
542 }
543
544 if (s->type != SERVICE_ONESHOT && !s->exec_command[SERVICE_EXEC_START]) {
545 log_unit_error(UNIT(s), "Service has no ExecStart= setting, which is only allowed for Type=oneshot services. Refusing.");
546 return -ENOEXEC;
547 }
548
549 if (!s->remain_after_exit && !s->exec_command[SERVICE_EXEC_START]) {
550 log_unit_error(UNIT(s), "Service has no ExecStart= setting, which is only allowed for RemainAfterExit=yes services. Refusing.");
551 return -ENOEXEC;
552 }
553
554 if (s->type != SERVICE_ONESHOT && s->exec_command[SERVICE_EXEC_START]->command_next) {
555 log_unit_error(UNIT(s), "Service has more than one ExecStart= setting, which is only allowed for Type=oneshot services. Refusing.");
556 return -ENOEXEC;
557 }
558
559 if (s->type == SERVICE_ONESHOT && s->restart != SERVICE_RESTART_NO) {
560 log_unit_error(UNIT(s), "Service has Restart= setting other than no, which isn't allowed for Type=oneshot services. Refusing.");
561 return -ENOEXEC;
562 }
563
564 if (s->type == SERVICE_ONESHOT && !exit_status_set_is_empty(&s->restart_force_status)) {
565 log_unit_error(UNIT(s), "Service has RestartForceStatus= set, which isn't allowed for Type=oneshot services. Refusing.");
566 return -ENOEXEC;
567 }
568
569 if (s->type == SERVICE_DBUS && !s->bus_name) {
570 log_unit_error(UNIT(s), "Service is of type D-Bus but no D-Bus service name has been specified. Refusing.");
571 return -ENOEXEC;
572 }
573
574 if (s->bus_name && s->type != SERVICE_DBUS)
575 log_unit_warning(UNIT(s), "Service has a D-Bus service name specified, but is not of type dbus. Ignoring.");
576
577 if (s->exec_context.pam_name && !IN_SET(s->kill_context.kill_mode, KILL_CONTROL_GROUP, KILL_MIXED)) {
578 log_unit_error(UNIT(s), "Service has PAM enabled. Kill mode must be set to 'control-group' or 'mixed'. Refusing.");
579 return -ENOEXEC;
580 }
581
582 if (s->usb_function_descriptors && !s->usb_function_strings)
583 log_unit_warning(UNIT(s), "Service has USBFunctionDescriptors= setting, but no USBFunctionStrings=. Ignoring.");
584
585 if (!s->usb_function_descriptors && s->usb_function_strings)
586 log_unit_warning(UNIT(s), "Service has USBFunctionStrings= setting, but no USBFunctionDescriptors=. Ignoring.");
587
588 if (s->runtime_max_usec != USEC_INFINITY && s->type == SERVICE_ONESHOT)
589 log_unit_warning(UNIT(s), "MaxRuntimeSec= has no effect in combination with Type=oneshot. Ignoring.");
590
591 return 0;
592 }
593
594 static int service_add_default_dependencies(Service *s) {
595 int r;
596
597 assert(s);
598
599 if (!UNIT(s)->default_dependencies)
600 return 0;
601
602 /* Add a number of automatic dependencies useful for the
603 * majority of services. */
604
605 if (MANAGER_IS_SYSTEM(UNIT(s)->manager)) {
606 /* First, pull in the really early boot stuff, and
607 * require it, so that we fail if we can't acquire
608 * it. */
609
610 r = unit_add_two_dependencies_by_name(UNIT(s), UNIT_AFTER, UNIT_REQUIRES, SPECIAL_SYSINIT_TARGET, NULL, true, UNIT_DEPENDENCY_DEFAULT);
611 if (r < 0)
612 return r;
613 } else {
614
615 /* In the --user instance there's no sysinit.target,
616 * in that case require basic.target instead. */
617
618 r = unit_add_dependency_by_name(UNIT(s), UNIT_REQUIRES, SPECIAL_BASIC_TARGET, NULL, true, UNIT_DEPENDENCY_DEFAULT);
619 if (r < 0)
620 return r;
621 }
622
623 /* Second, if the rest of the base system is in the same
624 * transaction, order us after it, but do not pull it in or
625 * even require it. */
626 r = unit_add_dependency_by_name(UNIT(s), UNIT_AFTER, SPECIAL_BASIC_TARGET, NULL, true, UNIT_DEPENDENCY_DEFAULT);
627 if (r < 0)
628 return r;
629
630 /* Third, add us in for normal shutdown. */
631 return unit_add_two_dependencies_by_name(UNIT(s), UNIT_BEFORE, UNIT_CONFLICTS, SPECIAL_SHUTDOWN_TARGET, NULL, true, UNIT_DEPENDENCY_DEFAULT);
632 }
633
634 static void service_fix_output(Service *s) {
635 assert(s);
636
637 /* If nothing has been explicitly configured, patch default output in. If input is socket/tty we avoid this
638 * however, since in that case we want output to default to the same place as we read input from. */
639
640 if (s->exec_context.std_error == EXEC_OUTPUT_INHERIT &&
641 s->exec_context.std_output == EXEC_OUTPUT_INHERIT &&
642 s->exec_context.std_input == EXEC_INPUT_NULL)
643 s->exec_context.std_error = UNIT(s)->manager->default_std_error;
644
645 if (s->exec_context.std_output == EXEC_OUTPUT_INHERIT &&
646 s->exec_context.std_input == EXEC_INPUT_NULL)
647 s->exec_context.std_output = UNIT(s)->manager->default_std_output;
648
649 if (s->exec_context.std_input == EXEC_INPUT_NULL &&
650 s->exec_context.stdin_data_size > 0)
651 s->exec_context.std_input = EXEC_INPUT_DATA;
652 }
653
654 static int service_setup_bus_name(Service *s) {
655 int r;
656
657 assert(s);
658
659 if (!s->bus_name)
660 return 0;
661
662 r = unit_add_dependency_by_name(UNIT(s), UNIT_REQUIRES, SPECIAL_DBUS_SOCKET, NULL, true, UNIT_DEPENDENCY_FILE);
663 if (r < 0)
664 return log_unit_error_errno(UNIT(s), r, "Failed to add dependency on " SPECIAL_DBUS_SOCKET ": %m");
665
666 /* We always want to be ordered against dbus.socket if both are in the transaction. */
667 r = unit_add_dependency_by_name(UNIT(s), UNIT_AFTER, SPECIAL_DBUS_SOCKET, NULL, true, UNIT_DEPENDENCY_FILE);
668 if (r < 0)
669 return log_unit_error_errno(UNIT(s), r, "Failed to add dependency on " SPECIAL_DBUS_SOCKET ": %m");
670
671 r = unit_watch_bus_name(UNIT(s), s->bus_name);
672 if (r == -EEXIST)
673 return log_unit_error_errno(UNIT(s), r, "Two services allocated for the same bus name %s, refusing operation.", s->bus_name);
674 if (r < 0)
675 return log_unit_error_errno(UNIT(s), r, "Cannot watch bus name %s: %m", s->bus_name);
676
677 return 0;
678 }
679
680 static int service_add_extras(Service *s) {
681 int r;
682
683 assert(s);
684
685 if (s->type == _SERVICE_TYPE_INVALID) {
686 /* Figure out a type automatically */
687 if (s->bus_name)
688 s->type = SERVICE_DBUS;
689 else if (s->exec_command[SERVICE_EXEC_START])
690 s->type = SERVICE_SIMPLE;
691 else
692 s->type = SERVICE_ONESHOT;
693 }
694
695 /* Oneshot services have disabled start timeout by default */
696 if (s->type == SERVICE_ONESHOT && !s->start_timeout_defined)
697 s->timeout_start_usec = USEC_INFINITY;
698
699 service_fix_output(s);
700
701 r = unit_patch_contexts(UNIT(s));
702 if (r < 0)
703 return r;
704
705 r = unit_add_exec_dependencies(UNIT(s), &s->exec_context);
706 if (r < 0)
707 return r;
708
709 r = unit_set_default_slice(UNIT(s));
710 if (r < 0)
711 return r;
712
713 /* If the service needs the notify socket, let's enable it automatically. */
714 if (s->notify_access == NOTIFY_NONE &&
715 (s->type == SERVICE_NOTIFY || s->watchdog_usec > 0 || s->n_fd_store_max > 0))
716 s->notify_access = NOTIFY_MAIN;
717
718 r = service_add_default_dependencies(s);
719 if (r < 0)
720 return r;
721
722 r = service_setup_bus_name(s);
723 if (r < 0)
724 return r;
725
726 return 0;
727 }
728
729 static int service_load(Unit *u) {
730 Service *s = SERVICE(u);
731 int r;
732
733 assert(s);
734
735 /* Load a .service file */
736 r = unit_load_fragment(u);
737 if (r < 0)
738 return r;
739
740 /* Still nothing found? Then let's give up */
741 if (u->load_state == UNIT_STUB)
742 return -ENOENT;
743
744 /* This is a new unit? Then let's add in some extras */
745 if (u->load_state == UNIT_LOADED) {
746
747 /* We were able to load something, then let's add in
748 * the dropin directories. */
749 r = unit_load_dropin(u);
750 if (r < 0)
751 return r;
752
753 /* This is a new unit? Then let's add in some
754 * extras */
755 r = service_add_extras(s);
756 if (r < 0)
757 return r;
758 }
759
760 return service_verify(s);
761 }
762
763 static void service_dump(Unit *u, FILE *f, const char *prefix) {
764 char buf_restart[FORMAT_TIMESPAN_MAX], buf_start[FORMAT_TIMESPAN_MAX], buf_stop[FORMAT_TIMESPAN_MAX];
765 char buf_runtime[FORMAT_TIMESPAN_MAX], buf_watchdog[FORMAT_TIMESPAN_MAX];
766 ServiceExecCommand c;
767 Service *s = SERVICE(u);
768 const char *prefix2;
769
770 assert(s);
771
772 prefix = strempty(prefix);
773 prefix2 = strjoina(prefix, "\t");
774
775 fprintf(f,
776 "%sService State: %s\n"
777 "%sResult: %s\n"
778 "%sReload Result: %s\n"
779 "%sPermissionsStartOnly: %s\n"
780 "%sRootDirectoryStartOnly: %s\n"
781 "%sRemainAfterExit: %s\n"
782 "%sGuessMainPID: %s\n"
783 "%sType: %s\n"
784 "%sRestart: %s\n"
785 "%sNotifyAccess: %s\n"
786 "%sNotifyState: %s\n",
787 prefix, service_state_to_string(s->state),
788 prefix, service_result_to_string(s->result),
789 prefix, service_result_to_string(s->reload_result),
790 prefix, yes_no(s->permissions_start_only),
791 prefix, yes_no(s->root_directory_start_only),
792 prefix, yes_no(s->remain_after_exit),
793 prefix, yes_no(s->guess_main_pid),
794 prefix, service_type_to_string(s->type),
795 prefix, service_restart_to_string(s->restart),
796 prefix, notify_access_to_string(s->notify_access),
797 prefix, notify_state_to_string(s->notify_state));
798
799 if (s->control_pid > 0)
800 fprintf(f,
801 "%sControl PID: "PID_FMT"\n",
802 prefix, s->control_pid);
803
804 if (s->main_pid > 0)
805 fprintf(f,
806 "%sMain PID: "PID_FMT"\n"
807 "%sMain PID Known: %s\n"
808 "%sMain PID Alien: %s\n",
809 prefix, s->main_pid,
810 prefix, yes_no(s->main_pid_known),
811 prefix, yes_no(s->main_pid_alien));
812
813 if (s->pid_file)
814 fprintf(f,
815 "%sPIDFile: %s\n",
816 prefix, s->pid_file);
817
818 if (s->bus_name)
819 fprintf(f,
820 "%sBusName: %s\n"
821 "%sBus Name Good: %s\n",
822 prefix, s->bus_name,
823 prefix, yes_no(s->bus_name_good));
824
825 if (UNIT_ISSET(s->accept_socket))
826 fprintf(f,
827 "%sAccept Socket: %s\n",
828 prefix, UNIT_DEREF(s->accept_socket)->id);
829
830 fprintf(f,
831 "%sRestartSec: %s\n"
832 "%sTimeoutStartSec: %s\n"
833 "%sTimeoutStopSec: %s\n"
834 "%sRuntimeMaxSec: %s\n"
835 "%sWatchdogSec: %s\n",
836 prefix, format_timespan(buf_restart, sizeof(buf_restart), s->restart_usec, USEC_PER_SEC),
837 prefix, format_timespan(buf_start, sizeof(buf_start), s->timeout_start_usec, USEC_PER_SEC),
838 prefix, format_timespan(buf_stop, sizeof(buf_stop), s->timeout_stop_usec, USEC_PER_SEC),
839 prefix, format_timespan(buf_runtime, sizeof(buf_runtime), s->runtime_max_usec, USEC_PER_SEC),
840 prefix, format_timespan(buf_watchdog, sizeof(buf_watchdog), s->watchdog_usec, USEC_PER_SEC));
841
842 kill_context_dump(&s->kill_context, f, prefix);
843 exec_context_dump(&s->exec_context, f, prefix);
844
845 for (c = 0; c < _SERVICE_EXEC_COMMAND_MAX; c++) {
846
847 if (!s->exec_command[c])
848 continue;
849
850 fprintf(f, "%s-> %s:\n",
851 prefix, service_exec_command_to_string(c));
852
853 exec_command_dump_list(s->exec_command[c], f, prefix2);
854 }
855
856 if (s->status_text)
857 fprintf(f, "%sStatus Text: %s\n",
858 prefix, s->status_text);
859
860 if (s->n_fd_store_max > 0)
861 fprintf(f,
862 "%sFile Descriptor Store Max: %u\n"
863 "%sFile Descriptor Store Current: %zu\n",
864 prefix, s->n_fd_store_max,
865 prefix, s->n_fd_store);
866
867 cgroup_context_dump(&s->cgroup_context, f, prefix);
868 }
869
870 static int service_is_suitable_main_pid(Service *s, pid_t pid, int prio) {
871 Unit *owner;
872
873 assert(s);
874 assert(pid_is_valid(pid));
875
876 /* Checks whether the specified PID is suitable as main PID for this service. returns negative if not, 0 if the
877 * PID is questionnable but should be accepted if the source of configuration is trusted. > 0 if the PID is
878 * good */
879
880 if (pid == getpid_cached() || pid == 1) {
881 log_unit_full(UNIT(s), prio, 0, "New main PID "PID_FMT" is the manager, refusing.", pid);
882 return -EPERM;
883 }
884
885 if (pid == s->control_pid) {
886 log_unit_full(UNIT(s), prio, 0, "New main PID "PID_FMT" is the control process, refusing.", pid);
887 return -EPERM;
888 }
889
890 if (!pid_is_alive(pid)) {
891 log_unit_full(UNIT(s), prio, 0, "New main PID "PID_FMT" does not exist or is a zombie.", pid);
892 return -ESRCH;
893 }
894
895 owner = manager_get_unit_by_pid(UNIT(s)->manager, pid);
896 if (owner == UNIT(s)) {
897 log_unit_debug(UNIT(s), "New main PID "PID_FMT" belongs to service, we are happy.", pid);
898 return 1; /* Yay, it's definitely a good PID */
899 }
900
901 return 0; /* Hmm it's a suspicious PID, let's accept it if configuration source is trusted */
902 }
903
904 static int service_load_pid_file(Service *s, bool may_warn) {
905 char procfs[STRLEN("/proc/self/fd/") + DECIMAL_STR_MAX(int)];
906 bool questionable_pid_file = false;
907 _cleanup_free_ char *k = NULL;
908 _cleanup_close_ int fd = -1;
909 int r, prio;
910 pid_t pid;
911
912 assert(s);
913
914 if (!s->pid_file)
915 return -ENOENT;
916
917 prio = may_warn ? LOG_INFO : LOG_DEBUG;
918
919 fd = chase_symlinks(s->pid_file, NULL, CHASE_OPEN|CHASE_SAFE, NULL);
920 if (fd == -EPERM) {
921 log_unit_full(UNIT(s), LOG_DEBUG, fd, "Permission denied while opening PID file or potentially unsafe symlink chain, will now retry with relaxed checks: %s", s->pid_file);
922
923 questionable_pid_file = true;
924
925 fd = chase_symlinks(s->pid_file, NULL, CHASE_OPEN, NULL);
926 }
927 if (fd < 0)
928 return log_unit_full(UNIT(s), prio, fd, "Can't open PID file %s (yet?) after %s: %m", s->pid_file, service_state_to_string(s->state));
929
930 /* Let's read the PID file now that we chased it down. But we need to convert the O_PATH fd chase_symlinks() returned us into a proper fd first. */
931 xsprintf(procfs, "/proc/self/fd/%i", fd);
932 r = read_one_line_file(procfs, &k);
933 if (r < 0)
934 return log_unit_error_errno(UNIT(s), r, "Can't convert PID files %s O_PATH file descriptor to proper file descriptor: %m", s->pid_file);
935
936 r = parse_pid(k, &pid);
937 if (r < 0)
938 return log_unit_full(UNIT(s), prio, r, "Failed to parse PID from file %s: %m", s->pid_file);
939
940 if (s->main_pid_known && pid == s->main_pid)
941 return 0;
942
943 r = service_is_suitable_main_pid(s, pid, prio);
944 if (r < 0)
945 return r;
946 if (r == 0) {
947 struct stat st;
948
949 if (questionable_pid_file) {
950 log_unit_error(UNIT(s), "Refusing to accept PID outside of service control group, acquired through unsafe symlink chain: %s", s->pid_file);
951 return -EPERM;
952 }
953
954 /* Hmm, it's not clear if the new main PID is safe. Let's allow this if the PID file is owned by root */
955
956 if (fstat(fd, &st) < 0)
957 return log_unit_error_errno(UNIT(s), errno, "Failed to fstat() PID file O_PATH fd: %m");
958
959 if (st.st_uid != 0) {
960 log_unit_error(UNIT(s), "New main PID "PID_FMT" does not belong to service, and PID file is not owned by root. Refusing.", pid);
961 return -EPERM;
962 }
963
964 log_unit_debug(UNIT(s), "New main PID "PID_FMT" does not belong to service, but we'll accept it since PID file is owned by root.", pid);
965 }
966
967 if (s->main_pid_known) {
968 log_unit_debug(UNIT(s), "Main PID changing: "PID_FMT" -> "PID_FMT, s->main_pid, pid);
969
970 service_unwatch_main_pid(s);
971 s->main_pid_known = false;
972 } else
973 log_unit_debug(UNIT(s), "Main PID loaded: "PID_FMT, pid);
974
975 r = service_set_main_pid(s, pid);
976 if (r < 0)
977 return r;
978
979 r = unit_watch_pid(UNIT(s), pid);
980 if (r < 0) /* FIXME: we need to do something here */
981 return log_unit_warning_errno(UNIT(s), r, "Failed to watch PID "PID_FMT" for service: %m", pid);
982
983 return 1;
984 }
985
986 static void service_search_main_pid(Service *s) {
987 pid_t pid = 0;
988 int r;
989
990 assert(s);
991
992 /* If we know it anyway, don't ever fallback to unreliable
993 * heuristics */
994 if (s->main_pid_known)
995 return;
996
997 if (!s->guess_main_pid)
998 return;
999
1000 assert(s->main_pid <= 0);
1001
1002 if (unit_search_main_pid(UNIT(s), &pid) < 0)
1003 return;
1004
1005 log_unit_debug(UNIT(s), "Main PID guessed: "PID_FMT, pid);
1006 if (service_set_main_pid(s, pid) < 0)
1007 return;
1008
1009 r = unit_watch_pid(UNIT(s), pid);
1010 if (r < 0)
1011 /* FIXME: we need to do something here */
1012 log_unit_warning_errno(UNIT(s), r, "Failed to watch PID "PID_FMT" from: %m", pid);
1013 }
1014
1015 static void service_set_state(Service *s, ServiceState state) {
1016 ServiceState old_state;
1017 const UnitActiveState *table;
1018
1019 assert(s);
1020
1021 table = s->type == SERVICE_IDLE ? state_translation_table_idle : state_translation_table;
1022
1023 old_state = s->state;
1024 s->state = state;
1025
1026 service_unwatch_pid_file(s);
1027
1028 if (!IN_SET(state,
1029 SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST,
1030 SERVICE_RUNNING,
1031 SERVICE_RELOAD,
1032 SERVICE_STOP, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
1033 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL,
1034 SERVICE_AUTO_RESTART))
1035 s->timer_event_source = sd_event_source_unref(s->timer_event_source);
1036
1037 if (!IN_SET(state,
1038 SERVICE_START, SERVICE_START_POST,
1039 SERVICE_RUNNING, SERVICE_RELOAD,
1040 SERVICE_STOP, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
1041 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL)) {
1042 service_unwatch_main_pid(s);
1043 s->main_command = NULL;
1044 }
1045
1046 if (!IN_SET(state,
1047 SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST,
1048 SERVICE_RELOAD,
1049 SERVICE_STOP, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
1050 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL)) {
1051 service_unwatch_control_pid(s);
1052 s->control_command = NULL;
1053 s->control_command_id = _SERVICE_EXEC_COMMAND_INVALID;
1054 }
1055
1056 if (IN_SET(state, SERVICE_DEAD, SERVICE_FAILED, SERVICE_AUTO_RESTART)) {
1057 unit_unwatch_all_pids(UNIT(s));
1058 unit_dequeue_rewatch_pids(UNIT(s));
1059 }
1060
1061 if (!IN_SET(state,
1062 SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST,
1063 SERVICE_RUNNING, SERVICE_RELOAD,
1064 SERVICE_STOP, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
1065 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL) &&
1066 !(state == SERVICE_DEAD && UNIT(s)->job))
1067 service_close_socket_fd(s);
1068
1069 if (!IN_SET(state, SERVICE_START_POST, SERVICE_RUNNING, SERVICE_RELOAD))
1070 service_stop_watchdog(s);
1071
1072 /* For the inactive states unit_notify() will trim the cgroup,
1073 * but for exit we have to do that ourselves... */
1074 if (state == SERVICE_EXITED && !MANAGER_IS_RELOADING(UNIT(s)->manager))
1075 unit_prune_cgroup(UNIT(s));
1076
1077 if (old_state != state)
1078 log_unit_debug(UNIT(s), "Changed %s -> %s", service_state_to_string(old_state), service_state_to_string(state));
1079
1080 unit_notify(UNIT(s), table[old_state], table[state],
1081 (s->reload_result == SERVICE_SUCCESS ? 0 : UNIT_NOTIFY_RELOAD_FAILURE) |
1082 (s->will_auto_restart ? UNIT_NOTIFY_WILL_AUTO_RESTART : 0));
1083 }
1084
1085 static usec_t service_coldplug_timeout(Service *s) {
1086 assert(s);
1087
1088 switch (s->deserialized_state) {
1089
1090 case SERVICE_START_PRE:
1091 case SERVICE_START:
1092 case SERVICE_START_POST:
1093 case SERVICE_RELOAD:
1094 return usec_add(UNIT(s)->state_change_timestamp.monotonic, s->timeout_start_usec);
1095
1096 case SERVICE_RUNNING:
1097 return usec_add(UNIT(s)->active_enter_timestamp.monotonic, s->runtime_max_usec);
1098
1099 case SERVICE_STOP:
1100 case SERVICE_STOP_SIGABRT:
1101 case SERVICE_STOP_SIGTERM:
1102 case SERVICE_STOP_SIGKILL:
1103 case SERVICE_STOP_POST:
1104 case SERVICE_FINAL_SIGTERM:
1105 case SERVICE_FINAL_SIGKILL:
1106 return usec_add(UNIT(s)->state_change_timestamp.monotonic, s->timeout_stop_usec);
1107
1108 case SERVICE_AUTO_RESTART:
1109 return usec_add(UNIT(s)->inactive_enter_timestamp.monotonic, s->restart_usec);
1110
1111 default:
1112 return USEC_INFINITY;
1113 }
1114 }
1115
1116 static int service_coldplug(Unit *u) {
1117 Service *s = SERVICE(u);
1118 int r;
1119
1120 assert(s);
1121 assert(s->state == SERVICE_DEAD);
1122
1123 if (s->deserialized_state == s->state)
1124 return 0;
1125
1126 r = service_arm_timer(s, service_coldplug_timeout(s));
1127 if (r < 0)
1128 return r;
1129
1130 if (s->main_pid > 0 &&
1131 pid_is_unwaited(s->main_pid) &&
1132 (IN_SET(s->deserialized_state,
1133 SERVICE_START, SERVICE_START_POST,
1134 SERVICE_RUNNING, SERVICE_RELOAD,
1135 SERVICE_STOP, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
1136 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL))) {
1137 r = unit_watch_pid(UNIT(s), s->main_pid);
1138 if (r < 0)
1139 return r;
1140 }
1141
1142 if (s->control_pid > 0 &&
1143 pid_is_unwaited(s->control_pid) &&
1144 IN_SET(s->deserialized_state,
1145 SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST,
1146 SERVICE_RELOAD,
1147 SERVICE_STOP, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
1148 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL)) {
1149 r = unit_watch_pid(UNIT(s), s->control_pid);
1150 if (r < 0)
1151 return r;
1152 }
1153
1154 if (!IN_SET(s->deserialized_state, SERVICE_DEAD, SERVICE_FAILED, SERVICE_AUTO_RESTART)) {
1155 (void) unit_enqueue_rewatch_pids(u);
1156 (void) unit_setup_dynamic_creds(u);
1157 (void) unit_setup_exec_runtime(u);
1158 }
1159
1160 if (IN_SET(s->deserialized_state, SERVICE_START_POST, SERVICE_RUNNING, SERVICE_RELOAD))
1161 service_start_watchdog(s);
1162
1163 if (UNIT_ISSET(s->accept_socket)) {
1164 Socket* socket = SOCKET(UNIT_DEREF(s->accept_socket));
1165
1166 if (socket->max_connections_per_source > 0) {
1167 SocketPeer *peer;
1168
1169 /* Make a best-effort attempt at bumping the connection count */
1170 if (socket_acquire_peer(socket, s->socket_fd, &peer) > 0) {
1171 socket_peer_unref(s->peer);
1172 s->peer = peer;
1173 }
1174 }
1175 }
1176
1177 service_set_state(s, s->deserialized_state);
1178 return 0;
1179 }
1180
1181 static int service_collect_fds(Service *s,
1182 int **fds,
1183 char ***fd_names,
1184 unsigned *n_storage_fds,
1185 unsigned *n_socket_fds) {
1186
1187 _cleanup_strv_free_ char **rfd_names = NULL;
1188 _cleanup_free_ int *rfds = NULL;
1189 unsigned rn_socket_fds = 0, rn_storage_fds = 0;
1190 int r;
1191
1192 assert(s);
1193 assert(fds);
1194 assert(fd_names);
1195 assert(n_socket_fds);
1196
1197 if (s->socket_fd >= 0) {
1198
1199 /* Pass the per-connection socket */
1200
1201 rfds = new(int, 1);
1202 if (!rfds)
1203 return -ENOMEM;
1204 rfds[0] = s->socket_fd;
1205
1206 rfd_names = strv_new("connection", NULL);
1207 if (!rfd_names)
1208 return -ENOMEM;
1209
1210 rn_socket_fds = 1;
1211 } else {
1212 Iterator i;
1213 void *v;
1214 Unit *u;
1215
1216 /* Pass all our configured sockets for singleton services */
1217
1218 HASHMAP_FOREACH_KEY(v, u, UNIT(s)->dependencies[UNIT_TRIGGERED_BY], i) {
1219 _cleanup_free_ int *cfds = NULL;
1220 Socket *sock;
1221 int cn_fds;
1222
1223 if (u->type != UNIT_SOCKET)
1224 continue;
1225
1226 sock = SOCKET(u);
1227
1228 cn_fds = socket_collect_fds(sock, &cfds);
1229 if (cn_fds < 0)
1230 return cn_fds;
1231
1232 if (cn_fds <= 0)
1233 continue;
1234
1235 if (!rfds) {
1236 rfds = TAKE_PTR(cfds);
1237 rn_socket_fds = cn_fds;
1238 } else {
1239 int *t;
1240
1241 t = reallocarray(rfds, rn_socket_fds + cn_fds, sizeof(int));
1242 if (!t)
1243 return -ENOMEM;
1244
1245 memcpy(t + rn_socket_fds, cfds, cn_fds * sizeof(int));
1246
1247 rfds = t;
1248 rn_socket_fds += cn_fds;
1249 }
1250
1251 r = strv_extend_n(&rfd_names, socket_fdname(sock), cn_fds);
1252 if (r < 0)
1253 return r;
1254 }
1255 }
1256
1257 if (s->n_fd_store > 0) {
1258 ServiceFDStore *fs;
1259 unsigned n_fds;
1260 char **nl;
1261 int *t;
1262
1263 t = reallocarray(rfds, rn_socket_fds + s->n_fd_store, sizeof(int));
1264 if (!t)
1265 return -ENOMEM;
1266
1267 rfds = t;
1268
1269 nl = reallocarray(rfd_names, rn_socket_fds + s->n_fd_store + 1, sizeof(char *));
1270 if (!nl)
1271 return -ENOMEM;
1272
1273 rfd_names = nl;
1274 n_fds = rn_socket_fds;
1275
1276 LIST_FOREACH(fd_store, fs, s->fd_store) {
1277 rfds[n_fds] = fs->fd;
1278 rfd_names[n_fds] = strdup(strempty(fs->fdname));
1279 if (!rfd_names[n_fds])
1280 return -ENOMEM;
1281
1282 rn_storage_fds++;
1283 n_fds++;
1284 }
1285
1286 rfd_names[n_fds] = NULL;
1287 }
1288
1289 *fds = TAKE_PTR(rfds);
1290 *fd_names = TAKE_PTR(rfd_names);
1291 *n_socket_fds = rn_socket_fds;
1292 *n_storage_fds = rn_storage_fds;
1293
1294 return 0;
1295 }
1296
1297 static bool service_exec_needs_notify_socket(Service *s, ExecFlags flags) {
1298 assert(s);
1299
1300 /* Notifications are accepted depending on the process and
1301 * the access setting of the service:
1302 * process: \ access: NONE MAIN EXEC ALL
1303 * main no yes yes yes
1304 * control no no yes yes
1305 * other (forked) no no no yes */
1306
1307 if (flags & EXEC_IS_CONTROL)
1308 /* A control process */
1309 return IN_SET(s->notify_access, NOTIFY_EXEC, NOTIFY_ALL);
1310
1311 /* We only spawn main processes and control processes, so any
1312 * process that is not a control process is a main process */
1313 return s->notify_access != NOTIFY_NONE;
1314 }
1315
1316 static int service_spawn(
1317 Service *s,
1318 ExecCommand *c,
1319 usec_t timeout,
1320 ExecFlags flags,
1321 pid_t *_pid) {
1322
1323 ExecParameters exec_params = {
1324 .flags = flags,
1325 .stdin_fd = -1,
1326 .stdout_fd = -1,
1327 .stderr_fd = -1,
1328 };
1329 _cleanup_strv_free_ char **final_env = NULL, **our_env = NULL, **fd_names = NULL;
1330 unsigned n_storage_fds = 0, n_socket_fds = 0, n_env = 0;
1331 _cleanup_free_ int *fds = NULL;
1332 pid_t pid;
1333 int r;
1334
1335 assert(s);
1336 assert(c);
1337 assert(_pid);
1338
1339 r = unit_prepare_exec(UNIT(s));
1340 if (r < 0)
1341 return r;
1342
1343 if (flags & EXEC_IS_CONTROL) {
1344 /* If this is a control process, mask the permissions/chroot application if this is requested. */
1345 if (s->permissions_start_only)
1346 exec_params.flags &= ~EXEC_APPLY_SANDBOXING;
1347 if (s->root_directory_start_only)
1348 exec_params.flags &= ~EXEC_APPLY_CHROOT;
1349 }
1350
1351 if ((flags & EXEC_PASS_FDS) ||
1352 s->exec_context.std_input == EXEC_INPUT_SOCKET ||
1353 s->exec_context.std_output == EXEC_OUTPUT_SOCKET ||
1354 s->exec_context.std_error == EXEC_OUTPUT_SOCKET) {
1355
1356 r = service_collect_fds(s, &fds, &fd_names, &n_storage_fds, &n_socket_fds);
1357 if (r < 0)
1358 return r;
1359
1360 log_unit_debug(UNIT(s), "Passing %i fds to service", n_storage_fds + n_socket_fds);
1361 }
1362
1363 r = service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), timeout));
1364 if (r < 0)
1365 return r;
1366
1367 our_env = new0(char*, 9);
1368 if (!our_env)
1369 return -ENOMEM;
1370
1371 if (service_exec_needs_notify_socket(s, flags))
1372 if (asprintf(our_env + n_env++, "NOTIFY_SOCKET=%s", UNIT(s)->manager->notify_socket) < 0)
1373 return -ENOMEM;
1374
1375 if (s->main_pid > 0)
1376 if (asprintf(our_env + n_env++, "MAINPID="PID_FMT, s->main_pid) < 0)
1377 return -ENOMEM;
1378
1379 if (MANAGER_IS_USER(UNIT(s)->manager))
1380 if (asprintf(our_env + n_env++, "MANAGERPID="PID_FMT, getpid_cached()) < 0)
1381 return -ENOMEM;
1382
1383 if (s->socket_fd >= 0) {
1384 union sockaddr_union sa;
1385 socklen_t salen = sizeof(sa);
1386
1387 /* If this is a per-connection service instance, let's set $REMOTE_ADDR and $REMOTE_PORT to something
1388 * useful. Note that we do this only when we are still connected at this point in time, which we might
1389 * very well not be. Hence we ignore all errors when retrieving peer information (as that might result
1390 * in ENOTCONN), and just use whate we can use. */
1391
1392 if (getpeername(s->socket_fd, &sa.sa, &salen) >= 0 &&
1393 IN_SET(sa.sa.sa_family, AF_INET, AF_INET6, AF_VSOCK)) {
1394
1395 _cleanup_free_ char *addr = NULL;
1396 char *t;
1397 unsigned port;
1398
1399 r = sockaddr_pretty(&sa.sa, salen, true, false, &addr);
1400 if (r < 0)
1401 return r;
1402
1403 t = strappend("REMOTE_ADDR=", addr);
1404 if (!t)
1405 return -ENOMEM;
1406 our_env[n_env++] = t;
1407
1408 r = sockaddr_port(&sa.sa, &port);
1409 if (r < 0)
1410 return r;
1411
1412 if (asprintf(&t, "REMOTE_PORT=%u", port) < 0)
1413 return -ENOMEM;
1414 our_env[n_env++] = t;
1415 }
1416 }
1417
1418 if (flags & EXEC_SETENV_RESULT) {
1419 if (asprintf(our_env + n_env++, "SERVICE_RESULT=%s", service_result_to_string(s->result)) < 0)
1420 return -ENOMEM;
1421
1422 if (s->main_exec_status.pid > 0 &&
1423 dual_timestamp_is_set(&s->main_exec_status.exit_timestamp)) {
1424 if (asprintf(our_env + n_env++, "EXIT_CODE=%s", sigchld_code_to_string(s->main_exec_status.code)) < 0)
1425 return -ENOMEM;
1426
1427 if (s->main_exec_status.code == CLD_EXITED)
1428 r = asprintf(our_env + n_env++, "EXIT_STATUS=%i", s->main_exec_status.status);
1429 else
1430 r = asprintf(our_env + n_env++, "EXIT_STATUS=%s", signal_to_string(s->main_exec_status.status));
1431 if (r < 0)
1432 return -ENOMEM;
1433 }
1434 }
1435
1436 unit_set_exec_params(UNIT(s), &exec_params);
1437
1438 final_env = strv_env_merge(2, exec_params.environment, our_env, NULL);
1439 if (!final_env)
1440 return -ENOMEM;
1441
1442 /* System services should get a new keyring by default. */
1443 SET_FLAG(exec_params.flags, EXEC_NEW_KEYRING, MANAGER_IS_SYSTEM(UNIT(s)->manager));
1444
1445 /* System D-Bus needs nss-systemd disabled, so that we don't deadlock */
1446 SET_FLAG(exec_params.flags, EXEC_NSS_BYPASS_BUS,
1447 MANAGER_IS_SYSTEM(UNIT(s)->manager) && unit_has_name(UNIT(s), SPECIAL_DBUS_SERVICE));
1448
1449 exec_params.environment = final_env;
1450 exec_params.fds = fds;
1451 exec_params.fd_names = fd_names;
1452 exec_params.n_storage_fds = n_storage_fds;
1453 exec_params.n_socket_fds = n_socket_fds;
1454 exec_params.watchdog_usec = s->watchdog_usec;
1455 exec_params.selinux_context_net = s->socket_fd_selinux_context_net;
1456 if (s->type == SERVICE_IDLE)
1457 exec_params.idle_pipe = UNIT(s)->manager->idle_pipe;
1458 exec_params.stdin_fd = s->stdin_fd;
1459 exec_params.stdout_fd = s->stdout_fd;
1460 exec_params.stderr_fd = s->stderr_fd;
1461
1462 r = exec_spawn(UNIT(s),
1463 c,
1464 &s->exec_context,
1465 &exec_params,
1466 s->exec_runtime,
1467 &s->dynamic_creds,
1468 &pid);
1469 if (r < 0)
1470 return r;
1471
1472 r = unit_watch_pid(UNIT(s), pid);
1473 if (r < 0) /* FIXME: we need to do something here */
1474 return r;
1475
1476 *_pid = pid;
1477
1478 return 0;
1479 }
1480
1481 static int main_pid_good(Service *s) {
1482 assert(s);
1483
1484 /* Returns 0 if the pid is dead, > 0 if it is good, < 0 if we don't know */
1485
1486 /* If we know the pid file, then let's just check if it is
1487 * still valid */
1488 if (s->main_pid_known) {
1489
1490 /* If it's an alien child let's check if it is still
1491 * alive ... */
1492 if (s->main_pid_alien && s->main_pid > 0)
1493 return pid_is_alive(s->main_pid);
1494
1495 /* .. otherwise assume we'll get a SIGCHLD for it,
1496 * which we really should wait for to collect exit
1497 * status and code */
1498 return s->main_pid > 0;
1499 }
1500
1501 /* We don't know the pid */
1502 return -EAGAIN;
1503 }
1504
1505 static int control_pid_good(Service *s) {
1506 assert(s);
1507
1508 /* Returns 0 if the control PID is dead, > 0 if it is good. We never actually return < 0 here, but in order to
1509 * make this function as similar as possible to main_pid_good() and cgroup_good(), we pretend that < 0 also
1510 * means: we can't figure it out. */
1511
1512 return s->control_pid > 0;
1513 }
1514
1515 static int cgroup_good(Service *s) {
1516 int r;
1517
1518 assert(s);
1519
1520 /* Returns 0 if the cgroup is empty or doesn't exist, > 0 if it is exists and is populated, < 0 if we can't
1521 * figure it out */
1522
1523 if (!UNIT(s)->cgroup_path)
1524 return 0;
1525
1526 r = cg_is_empty_recursive(SYSTEMD_CGROUP_CONTROLLER, UNIT(s)->cgroup_path);
1527 if (r < 0)
1528 return r;
1529
1530 return r == 0;
1531 }
1532
1533 static bool service_shall_restart(Service *s) {
1534 assert(s);
1535
1536 /* Don't restart after manual stops */
1537 if (s->forbid_restart)
1538 return false;
1539
1540 /* Never restart if this is configured as special exception */
1541 if (exit_status_set_test(&s->restart_prevent_status, s->main_exec_status.code, s->main_exec_status.status))
1542 return false;
1543
1544 /* Restart if the exit code/status are configured as restart triggers */
1545 if (exit_status_set_test(&s->restart_force_status, s->main_exec_status.code, s->main_exec_status.status))
1546 return true;
1547
1548 switch (s->restart) {
1549
1550 case SERVICE_RESTART_NO:
1551 return false;
1552
1553 case SERVICE_RESTART_ALWAYS:
1554 return true;
1555
1556 case SERVICE_RESTART_ON_SUCCESS:
1557 return s->result == SERVICE_SUCCESS;
1558
1559 case SERVICE_RESTART_ON_FAILURE:
1560 return s->result != SERVICE_SUCCESS;
1561
1562 case SERVICE_RESTART_ON_ABNORMAL:
1563 return !IN_SET(s->result, SERVICE_SUCCESS, SERVICE_FAILURE_EXIT_CODE);
1564
1565 case SERVICE_RESTART_ON_WATCHDOG:
1566 return s->result == SERVICE_FAILURE_WATCHDOG;
1567
1568 case SERVICE_RESTART_ON_ABORT:
1569 return IN_SET(s->result, SERVICE_FAILURE_SIGNAL, SERVICE_FAILURE_CORE_DUMP);
1570
1571 default:
1572 assert_not_reached("unknown restart setting");
1573 }
1574 }
1575
1576 static bool service_will_restart(Unit *u) {
1577 Service *s = SERVICE(u);
1578
1579 assert(s);
1580
1581 if (s->will_auto_restart)
1582 return true;
1583 if (s->state == SERVICE_AUTO_RESTART)
1584 return true;
1585 if (!UNIT(s)->job)
1586 return false;
1587 if (UNIT(s)->job->type == JOB_START)
1588 return true;
1589
1590 return false;
1591 }
1592
1593 static void service_enter_dead(Service *s, ServiceResult f, bool allow_restart) {
1594 int r;
1595
1596 assert(s);
1597
1598 /* If there's a stop job queued before we enter the DEAD state, we shouldn't act on Restart=, in order to not
1599 * undo what has already been enqueued. */
1600 if (unit_stop_pending(UNIT(s)))
1601 allow_restart = false;
1602
1603 if (s->result == SERVICE_SUCCESS)
1604 s->result = f;
1605
1606 if (s->result != SERVICE_SUCCESS)
1607 log_unit_warning(UNIT(s), "Failed with result '%s'.", service_result_to_string(s->result));
1608
1609 if (allow_restart && service_shall_restart(s))
1610 s->will_auto_restart = true;
1611
1612 /* Make sure service_release_resources() doesn't destroy our FD store, while we are changing through
1613 * SERVICE_FAILED/SERVICE_DEAD before entering into SERVICE_AUTO_RESTART. */
1614 s->n_keep_fd_store ++;
1615
1616 service_set_state(s, s->result != SERVICE_SUCCESS ? SERVICE_FAILED : SERVICE_DEAD);
1617
1618 if (s->will_auto_restart) {
1619 s->will_auto_restart = false;
1620
1621 r = service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), s->restart_usec));
1622 if (r < 0) {
1623 s->n_keep_fd_store--;
1624 goto fail;
1625 }
1626
1627 service_set_state(s, SERVICE_AUTO_RESTART);
1628 } else
1629 /* If we shan't restart, then flush out the restart counter. But don't do that immediately, so that the
1630 * user can still introspect the counter. Do so on the next start. */
1631 s->flush_n_restarts = true;
1632
1633 /* The new state is in effect, let's decrease the fd store ref counter again. Let's also readd us to the GC
1634 * queue, so that the fd store is possibly gc'ed again */
1635 s->n_keep_fd_store--;
1636 unit_add_to_gc_queue(UNIT(s));
1637
1638 /* The next restart might not be a manual stop, hence reset the flag indicating manual stops */
1639 s->forbid_restart = false;
1640
1641 /* We want fresh tmpdirs in case service is started again immediately */
1642 s->exec_runtime = exec_runtime_unref(s->exec_runtime, true);
1643
1644 if (s->exec_context.runtime_directory_preserve_mode == EXEC_PRESERVE_NO ||
1645 (s->exec_context.runtime_directory_preserve_mode == EXEC_PRESERVE_RESTART && !service_will_restart(UNIT(s))))
1646 /* Also, remove the runtime directory */
1647 exec_context_destroy_runtime_directory(&s->exec_context, UNIT(s)->manager->prefix[EXEC_DIRECTORY_RUNTIME]);
1648
1649 /* Get rid of the IPC bits of the user */
1650 unit_unref_uid_gid(UNIT(s), true);
1651
1652 /* Release the user, and destroy it if we are the only remaining owner */
1653 dynamic_creds_destroy(&s->dynamic_creds);
1654
1655 /* Try to delete the pid file. At this point it will be
1656 * out-of-date, and some software might be confused by it, so
1657 * let's remove it. */
1658 if (s->pid_file)
1659 (void) unlink(s->pid_file);
1660
1661 return;
1662
1663 fail:
1664 log_unit_warning_errno(UNIT(s), r, "Failed to run install restart timer: %m");
1665 service_enter_dead(s, SERVICE_FAILURE_RESOURCES, false);
1666 }
1667
1668 static void service_enter_stop_post(Service *s, ServiceResult f) {
1669 int r;
1670 assert(s);
1671
1672 if (s->result == SERVICE_SUCCESS)
1673 s->result = f;
1674
1675 service_unwatch_control_pid(s);
1676
1677 (void) unit_enqueue_rewatch_pids(UNIT(s));
1678
1679 s->control_command = s->exec_command[SERVICE_EXEC_STOP_POST];
1680 if (s->control_command) {
1681 s->control_command_id = SERVICE_EXEC_STOP_POST;
1682
1683 r = service_spawn(s,
1684 s->control_command,
1685 s->timeout_stop_usec,
1686 EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_APPLY_TTY_STDIN|EXEC_IS_CONTROL|EXEC_SETENV_RESULT,
1687 &s->control_pid);
1688 if (r < 0)
1689 goto fail;
1690
1691 service_set_state(s, SERVICE_STOP_POST);
1692 } else
1693 service_enter_signal(s, SERVICE_FINAL_SIGTERM, SERVICE_SUCCESS);
1694
1695 return;
1696
1697 fail:
1698 log_unit_warning_errno(UNIT(s), r, "Failed to run 'stop-post' task: %m");
1699 service_enter_signal(s, SERVICE_FINAL_SIGTERM, SERVICE_FAILURE_RESOURCES);
1700 }
1701
1702 static int state_to_kill_operation(ServiceState state) {
1703 switch (state) {
1704
1705 case SERVICE_STOP_SIGABRT:
1706 return KILL_ABORT;
1707
1708 case SERVICE_STOP_SIGTERM:
1709 case SERVICE_FINAL_SIGTERM:
1710 return KILL_TERMINATE;
1711
1712 case SERVICE_STOP_SIGKILL:
1713 case SERVICE_FINAL_SIGKILL:
1714 return KILL_KILL;
1715
1716 default:
1717 return _KILL_OPERATION_INVALID;
1718 }
1719 }
1720
1721 static void service_enter_signal(Service *s, ServiceState state, ServiceResult f) {
1722 int r;
1723
1724 assert(s);
1725
1726 if (s->result == SERVICE_SUCCESS)
1727 s->result = f;
1728
1729 /* Before sending any signal, make sure we track all members of this cgroup */
1730 (void) unit_watch_all_pids(UNIT(s));
1731
1732 /* Also, enqueue a job that we recheck all our PIDs a bit later, given that it's likely some processes have
1733 * died now */
1734 (void) unit_enqueue_rewatch_pids(UNIT(s));
1735
1736 r = unit_kill_context(
1737 UNIT(s),
1738 &s->kill_context,
1739 state_to_kill_operation(state),
1740 s->main_pid,
1741 s->control_pid,
1742 s->main_pid_alien);
1743 if (r < 0)
1744 goto fail;
1745
1746 if (r > 0) {
1747 r = service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), s->timeout_stop_usec));
1748 if (r < 0)
1749 goto fail;
1750
1751 service_set_state(s, state);
1752 } else if (IN_SET(state, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM) && s->kill_context.send_sigkill)
1753 service_enter_signal(s, SERVICE_STOP_SIGKILL, SERVICE_SUCCESS);
1754 else if (IN_SET(state, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL))
1755 service_enter_stop_post(s, SERVICE_SUCCESS);
1756 else if (state == SERVICE_FINAL_SIGTERM && s->kill_context.send_sigkill)
1757 service_enter_signal(s, SERVICE_FINAL_SIGKILL, SERVICE_SUCCESS);
1758 else
1759 service_enter_dead(s, SERVICE_SUCCESS, true);
1760
1761 return;
1762
1763 fail:
1764 log_unit_warning_errno(UNIT(s), r, "Failed to kill processes: %m");
1765
1766 if (IN_SET(state, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL))
1767 service_enter_stop_post(s, SERVICE_FAILURE_RESOURCES);
1768 else
1769 service_enter_dead(s, SERVICE_FAILURE_RESOURCES, true);
1770 }
1771
1772 static void service_enter_stop_by_notify(Service *s) {
1773 assert(s);
1774
1775 (void) unit_enqueue_rewatch_pids(UNIT(s));
1776
1777 service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), s->timeout_stop_usec));
1778
1779 /* The service told us it's stopping, so it's as if we SIGTERM'd it. */
1780 service_set_state(s, SERVICE_STOP_SIGTERM);
1781 }
1782
1783 static void service_enter_stop(Service *s, ServiceResult f) {
1784 int r;
1785
1786 assert(s);
1787
1788 if (s->result == SERVICE_SUCCESS)
1789 s->result = f;
1790
1791 service_unwatch_control_pid(s);
1792 (void) unit_enqueue_rewatch_pids(UNIT(s));
1793
1794 s->control_command = s->exec_command[SERVICE_EXEC_STOP];
1795 if (s->control_command) {
1796 s->control_command_id = SERVICE_EXEC_STOP;
1797
1798 r = service_spawn(s,
1799 s->control_command,
1800 s->timeout_stop_usec,
1801 EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_IS_CONTROL|EXEC_SETENV_RESULT,
1802 &s->control_pid);
1803 if (r < 0)
1804 goto fail;
1805
1806 service_set_state(s, SERVICE_STOP);
1807 } else
1808 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_SUCCESS);
1809
1810 return;
1811
1812 fail:
1813 log_unit_warning_errno(UNIT(s), r, "Failed to run 'stop' task: %m");
1814 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_RESOURCES);
1815 }
1816
1817 static bool service_good(Service *s) {
1818 int main_pid_ok;
1819 assert(s);
1820
1821 if (s->type == SERVICE_DBUS && !s->bus_name_good)
1822 return false;
1823
1824 main_pid_ok = main_pid_good(s);
1825 if (main_pid_ok > 0) /* It's alive */
1826 return true;
1827 if (main_pid_ok == 0) /* It's dead */
1828 return false;
1829
1830 /* OK, we don't know anything about the main PID, maybe
1831 * because there is none. Let's check the control group
1832 * instead. */
1833
1834 return cgroup_good(s) != 0;
1835 }
1836
1837 static void service_enter_running(Service *s, ServiceResult f) {
1838 assert(s);
1839
1840 if (s->result == SERVICE_SUCCESS)
1841 s->result = f;
1842
1843 service_unwatch_control_pid(s);
1844
1845 if (s->result != SERVICE_SUCCESS)
1846 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
1847 else if (service_good(s)) {
1848
1849 /* If there are any queued up sd_notify() notifications, process them now */
1850 if (s->notify_state == NOTIFY_RELOADING)
1851 service_enter_reload_by_notify(s);
1852 else if (s->notify_state == NOTIFY_STOPPING)
1853 service_enter_stop_by_notify(s);
1854 else {
1855 service_set_state(s, SERVICE_RUNNING);
1856 service_arm_timer(s, usec_add(UNIT(s)->active_enter_timestamp.monotonic, s->runtime_max_usec));
1857 }
1858
1859 } else if (s->remain_after_exit)
1860 service_set_state(s, SERVICE_EXITED);
1861 else
1862 service_enter_stop(s, SERVICE_SUCCESS);
1863 }
1864
1865 static void service_enter_start_post(Service *s) {
1866 int r;
1867 assert(s);
1868
1869 service_unwatch_control_pid(s);
1870 service_reset_watchdog(s);
1871
1872 s->control_command = s->exec_command[SERVICE_EXEC_START_POST];
1873 if (s->control_command) {
1874 s->control_command_id = SERVICE_EXEC_START_POST;
1875
1876 r = service_spawn(s,
1877 s->control_command,
1878 s->timeout_start_usec,
1879 EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_IS_CONTROL,
1880 &s->control_pid);
1881 if (r < 0)
1882 goto fail;
1883
1884 service_set_state(s, SERVICE_START_POST);
1885 } else
1886 service_enter_running(s, SERVICE_SUCCESS);
1887
1888 return;
1889
1890 fail:
1891 log_unit_warning_errno(UNIT(s), r, "Failed to run 'start-post' task: %m");
1892 service_enter_stop(s, SERVICE_FAILURE_RESOURCES);
1893 }
1894
1895 static void service_kill_control_process(Service *s) {
1896 int r;
1897
1898 assert(s);
1899
1900 if (s->control_pid <= 0)
1901 return;
1902
1903 r = kill_and_sigcont(s->control_pid, SIGKILL);
1904 if (r < 0) {
1905 _cleanup_free_ char *comm = NULL;
1906
1907 (void) get_process_comm(s->control_pid, &comm);
1908
1909 log_unit_debug_errno(UNIT(s), r, "Failed to kill control process " PID_FMT " (%s), ignoring: %m",
1910 s->control_pid, strna(comm));
1911 }
1912 }
1913
1914 static void service_enter_start(Service *s) {
1915 ExecCommand *c;
1916 usec_t timeout;
1917 pid_t pid;
1918 int r;
1919
1920 assert(s);
1921
1922 service_unwatch_control_pid(s);
1923 service_unwatch_main_pid(s);
1924
1925 unit_warn_leftover_processes(UNIT(s));
1926
1927 if (s->type == SERVICE_FORKING) {
1928 s->control_command_id = SERVICE_EXEC_START;
1929 c = s->control_command = s->exec_command[SERVICE_EXEC_START];
1930
1931 s->main_command = NULL;
1932 } else {
1933 s->control_command_id = _SERVICE_EXEC_COMMAND_INVALID;
1934 s->control_command = NULL;
1935
1936 c = s->main_command = s->exec_command[SERVICE_EXEC_START];
1937 }
1938
1939 if (!c) {
1940 if (s->type != SERVICE_ONESHOT) {
1941 /* There's no command line configured for the main command? Hmm, that is strange. This can only
1942 * happen if the configuration changes at runtime. In this case, let's enter a failure
1943 * state. */
1944 log_unit_error(UNIT(s), "There's no 'start' task anymore we could start.");
1945 r = -ENXIO;
1946 goto fail;
1947 }
1948
1949 service_enter_start_post(s);
1950 return;
1951 }
1952
1953 if (IN_SET(s->type, SERVICE_SIMPLE, SERVICE_IDLE))
1954 /* For simple + idle this is the main process. We don't apply any timeout here, but
1955 * service_enter_running() will later apply the .runtime_max_usec timeout. */
1956 timeout = USEC_INFINITY;
1957 else
1958 timeout = s->timeout_start_usec;
1959
1960 r = service_spawn(s,
1961 c,
1962 timeout,
1963 EXEC_PASS_FDS|EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_APPLY_TTY_STDIN|EXEC_SET_WATCHDOG,
1964 &pid);
1965 if (r < 0)
1966 goto fail;
1967
1968 if (IN_SET(s->type, SERVICE_SIMPLE, SERVICE_IDLE)) {
1969 /* For simple services we immediately start
1970 * the START_POST binaries. */
1971
1972 service_set_main_pid(s, pid);
1973 service_enter_start_post(s);
1974
1975 } else if (s->type == SERVICE_FORKING) {
1976
1977 /* For forking services we wait until the start
1978 * process exited. */
1979
1980 s->control_pid = pid;
1981 service_set_state(s, SERVICE_START);
1982
1983 } else if (IN_SET(s->type, SERVICE_ONESHOT, SERVICE_DBUS, SERVICE_NOTIFY)) {
1984
1985 /* For oneshot services we wait until the start
1986 * process exited, too, but it is our main process. */
1987
1988 /* For D-Bus services we know the main pid right away,
1989 * but wait for the bus name to appear on the
1990 * bus. Notify services are similar. */
1991
1992 service_set_main_pid(s, pid);
1993 service_set_state(s, SERVICE_START);
1994 } else
1995 assert_not_reached("Unknown service type");
1996
1997 return;
1998
1999 fail:
2000 log_unit_warning_errno(UNIT(s), r, "Failed to run 'start' task: %m");
2001 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_RESOURCES);
2002 }
2003
2004 static void service_enter_start_pre(Service *s) {
2005 int r;
2006
2007 assert(s);
2008
2009 service_unwatch_control_pid(s);
2010
2011 s->control_command = s->exec_command[SERVICE_EXEC_START_PRE];
2012 if (s->control_command) {
2013
2014 unit_warn_leftover_processes(UNIT(s));
2015
2016 s->control_command_id = SERVICE_EXEC_START_PRE;
2017
2018 r = service_spawn(s,
2019 s->control_command,
2020 s->timeout_start_usec,
2021 EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_IS_CONTROL|EXEC_APPLY_TTY_STDIN,
2022 &s->control_pid);
2023 if (r < 0)
2024 goto fail;
2025
2026 service_set_state(s, SERVICE_START_PRE);
2027 } else
2028 service_enter_start(s);
2029
2030 return;
2031
2032 fail:
2033 log_unit_warning_errno(UNIT(s), r, "Failed to run 'start-pre' task: %m");
2034 service_enter_dead(s, SERVICE_FAILURE_RESOURCES, true);
2035 }
2036
2037 static void service_enter_restart(Service *s) {
2038 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2039 int r;
2040
2041 assert(s);
2042
2043 if (UNIT(s)->job && UNIT(s)->job->type == JOB_STOP) {
2044 /* Don't restart things if we are going down anyway */
2045 log_unit_info(UNIT(s), "Stop job pending for unit, delaying automatic restart.");
2046
2047 r = service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), s->restart_usec));
2048 if (r < 0)
2049 goto fail;
2050
2051 return;
2052 }
2053
2054 /* Any units that are bound to this service must also be
2055 * restarted. We use JOB_RESTART (instead of the more obvious
2056 * JOB_START) here so that those dependency jobs will be added
2057 * as well. */
2058 r = manager_add_job(UNIT(s)->manager, JOB_RESTART, UNIT(s), JOB_FAIL, &error, NULL);
2059 if (r < 0)
2060 goto fail;
2061
2062 /* Count the jobs we enqueue for restarting. This counter is maintained as long as the unit isn't fully
2063 * stopped, i.e. as long as it remains up or remains in auto-start states. The use can reset the counter
2064 * explicitly however via the usual "systemctl reset-failure" logic. */
2065 s->n_restarts ++;
2066 s->flush_n_restarts = false;
2067
2068 log_struct(LOG_INFO,
2069 "MESSAGE_ID=" SD_MESSAGE_UNIT_RESTART_SCHEDULED_STR,
2070 LOG_UNIT_ID(UNIT(s)),
2071 LOG_UNIT_INVOCATION_ID(UNIT(s)),
2072 LOG_UNIT_MESSAGE(UNIT(s), "Scheduled restart job, restart counter is at %u.", s->n_restarts),
2073 "N_RESTARTS=%u", s->n_restarts);
2074
2075 /* Notify clients about changed restart counter */
2076 unit_add_to_dbus_queue(UNIT(s));
2077
2078 /* Note that we stay in the SERVICE_AUTO_RESTART state here,
2079 * it will be canceled as part of the service_stop() call that
2080 * is executed as part of JOB_RESTART. */
2081
2082 return;
2083
2084 fail:
2085 log_unit_warning(UNIT(s), "Failed to schedule restart job: %s", bus_error_message(&error, -r));
2086 service_enter_dead(s, SERVICE_FAILURE_RESOURCES, false);
2087 }
2088
2089 static void service_enter_reload_by_notify(Service *s) {
2090 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2091 int r;
2092
2093 assert(s);
2094
2095 service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), s->timeout_start_usec));
2096 service_set_state(s, SERVICE_RELOAD);
2097
2098 /* service_enter_reload_by_notify is never called during a reload, thus no loops are possible. */
2099 r = manager_propagate_reload(UNIT(s)->manager, UNIT(s), JOB_FAIL, &error);
2100 if (r < 0)
2101 log_unit_warning(UNIT(s), "Failed to schedule propagation of reload: %s", bus_error_message(&error, -r));
2102 }
2103
2104 static void service_enter_reload(Service *s) {
2105 int r;
2106
2107 assert(s);
2108
2109 service_unwatch_control_pid(s);
2110 s->reload_result = SERVICE_SUCCESS;
2111
2112 s->control_command = s->exec_command[SERVICE_EXEC_RELOAD];
2113 if (s->control_command) {
2114 s->control_command_id = SERVICE_EXEC_RELOAD;
2115
2116 r = service_spawn(s,
2117 s->control_command,
2118 s->timeout_start_usec,
2119 EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_IS_CONTROL,
2120 &s->control_pid);
2121 if (r < 0)
2122 goto fail;
2123
2124 service_set_state(s, SERVICE_RELOAD);
2125 } else
2126 service_enter_running(s, SERVICE_SUCCESS);
2127
2128 return;
2129
2130 fail:
2131 log_unit_warning_errno(UNIT(s), r, "Failed to run 'reload' task: %m");
2132 s->reload_result = SERVICE_FAILURE_RESOURCES;
2133 service_enter_running(s, SERVICE_SUCCESS);
2134 }
2135
2136 static void service_run_next_control(Service *s) {
2137 usec_t timeout;
2138 int r;
2139
2140 assert(s);
2141 assert(s->control_command);
2142 assert(s->control_command->command_next);
2143
2144 assert(s->control_command_id != SERVICE_EXEC_START);
2145
2146 s->control_command = s->control_command->command_next;
2147 service_unwatch_control_pid(s);
2148
2149 if (IN_SET(s->state, SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST, SERVICE_RUNNING, SERVICE_RELOAD))
2150 timeout = s->timeout_start_usec;
2151 else
2152 timeout = s->timeout_stop_usec;
2153
2154 r = service_spawn(s,
2155 s->control_command,
2156 timeout,
2157 EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_IS_CONTROL|
2158 (IN_SET(s->control_command_id, SERVICE_EXEC_START_PRE, SERVICE_EXEC_STOP_POST) ? EXEC_APPLY_TTY_STDIN : 0)|
2159 (IN_SET(s->control_command_id, SERVICE_EXEC_STOP, SERVICE_EXEC_STOP_POST) ? EXEC_SETENV_RESULT : 0),
2160 &s->control_pid);
2161 if (r < 0)
2162 goto fail;
2163
2164 return;
2165
2166 fail:
2167 log_unit_warning_errno(UNIT(s), r, "Failed to run next control task: %m");
2168
2169 if (IN_SET(s->state, SERVICE_START_PRE, SERVICE_START_POST, SERVICE_STOP))
2170 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_RESOURCES);
2171 else if (s->state == SERVICE_STOP_POST)
2172 service_enter_dead(s, SERVICE_FAILURE_RESOURCES, true);
2173 else if (s->state == SERVICE_RELOAD) {
2174 s->reload_result = SERVICE_FAILURE_RESOURCES;
2175 service_enter_running(s, SERVICE_SUCCESS);
2176 } else
2177 service_enter_stop(s, SERVICE_FAILURE_RESOURCES);
2178 }
2179
2180 static void service_run_next_main(Service *s) {
2181 pid_t pid;
2182 int r;
2183
2184 assert(s);
2185 assert(s->main_command);
2186 assert(s->main_command->command_next);
2187 assert(s->type == SERVICE_ONESHOT);
2188
2189 s->main_command = s->main_command->command_next;
2190 service_unwatch_main_pid(s);
2191
2192 r = service_spawn(s,
2193 s->main_command,
2194 s->timeout_start_usec,
2195 EXEC_PASS_FDS|EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_APPLY_TTY_STDIN|EXEC_SET_WATCHDOG,
2196 &pid);
2197 if (r < 0)
2198 goto fail;
2199
2200 service_set_main_pid(s, pid);
2201
2202 return;
2203
2204 fail:
2205 log_unit_warning_errno(UNIT(s), r, "Failed to run next main task: %m");
2206 service_enter_stop(s, SERVICE_FAILURE_RESOURCES);
2207 }
2208
2209 static int service_start(Unit *u) {
2210 Service *s = SERVICE(u);
2211 int r;
2212
2213 assert(s);
2214
2215 /* We cannot fulfill this request right now, try again later
2216 * please! */
2217 if (IN_SET(s->state,
2218 SERVICE_STOP, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
2219 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL))
2220 return -EAGAIN;
2221
2222 /* Already on it! */
2223 if (IN_SET(s->state, SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST))
2224 return 0;
2225
2226 /* A service that will be restarted must be stopped first to
2227 * trigger BindsTo and/or OnFailure dependencies. If a user
2228 * does not want to wait for the holdoff time to elapse, the
2229 * service should be manually restarted, not started. We
2230 * simply return EAGAIN here, so that any start jobs stay
2231 * queued, and assume that the auto restart timer will
2232 * eventually trigger the restart. */
2233 if (s->state == SERVICE_AUTO_RESTART)
2234 return -EAGAIN;
2235
2236 assert(IN_SET(s->state, SERVICE_DEAD, SERVICE_FAILED));
2237
2238 /* Make sure we don't enter a busy loop of some kind. */
2239 r = unit_start_limit_test(u);
2240 if (r < 0) {
2241 service_enter_dead(s, SERVICE_FAILURE_START_LIMIT_HIT, false);
2242 return r;
2243 }
2244
2245 r = unit_acquire_invocation_id(u);
2246 if (r < 0)
2247 return r;
2248
2249 s->result = SERVICE_SUCCESS;
2250 s->reload_result = SERVICE_SUCCESS;
2251 s->main_pid_known = false;
2252 s->main_pid_alien = false;
2253 s->forbid_restart = false;
2254
2255 u->reset_accounting = true;
2256
2257 s->status_text = mfree(s->status_text);
2258 s->status_errno = 0;
2259
2260 s->notify_state = NOTIFY_UNKNOWN;
2261
2262 s->watchdog_override_enable = false;
2263 s->watchdog_override_usec = 0;
2264
2265 /* This is not an automatic restart? Flush the restart counter then */
2266 if (s->flush_n_restarts) {
2267 s->n_restarts = 0;
2268 s->flush_n_restarts = false;
2269 }
2270
2271 service_enter_start_pre(s);
2272 return 1;
2273 }
2274
2275 static int service_stop(Unit *u) {
2276 Service *s = SERVICE(u);
2277
2278 assert(s);
2279
2280 /* Don't create restart jobs from manual stops. */
2281 s->forbid_restart = true;
2282
2283 /* Already on it */
2284 if (IN_SET(s->state,
2285 SERVICE_STOP, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
2286 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL))
2287 return 0;
2288
2289 /* A restart will be scheduled or is in progress. */
2290 if (s->state == SERVICE_AUTO_RESTART) {
2291 service_set_state(s, SERVICE_DEAD);
2292 return 0;
2293 }
2294
2295 /* If there's already something running we go directly into
2296 * kill mode. */
2297 if (IN_SET(s->state, SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST, SERVICE_RELOAD)) {
2298 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_SUCCESS);
2299 return 0;
2300 }
2301
2302 assert(IN_SET(s->state, SERVICE_RUNNING, SERVICE_EXITED));
2303
2304 service_enter_stop(s, SERVICE_SUCCESS);
2305 return 1;
2306 }
2307
2308 static int service_reload(Unit *u) {
2309 Service *s = SERVICE(u);
2310
2311 assert(s);
2312
2313 assert(IN_SET(s->state, SERVICE_RUNNING, SERVICE_EXITED));
2314
2315 service_enter_reload(s);
2316 return 1;
2317 }
2318
2319 _pure_ static bool service_can_reload(Unit *u) {
2320 Service *s = SERVICE(u);
2321
2322 assert(s);
2323
2324 return !!s->exec_command[SERVICE_EXEC_RELOAD];
2325 }
2326
2327 static unsigned service_exec_command_index(Unit *u, ServiceExecCommand id, ExecCommand *current) {
2328 Service *s = SERVICE(u);
2329 unsigned idx = 0;
2330 ExecCommand *first, *c;
2331
2332 assert(s);
2333
2334 first = s->exec_command[id];
2335
2336 /* Figure out where we are in the list by walking back to the beginning */
2337 for (c = current; c != first; c = c->command_prev)
2338 idx++;
2339
2340 return idx;
2341 }
2342
2343 static int service_serialize_exec_command(Unit *u, FILE *f, ExecCommand *command) {
2344 Service *s = SERVICE(u);
2345 ServiceExecCommand id;
2346 unsigned idx;
2347 const char *type;
2348 char **arg;
2349 _cleanup_free_ char *args = NULL, *p = NULL;
2350 size_t allocated = 0, length = 0;
2351
2352 assert(s);
2353 assert(f);
2354
2355 if (!command)
2356 return 0;
2357
2358 if (command == s->control_command) {
2359 type = "control";
2360 id = s->control_command_id;
2361 } else {
2362 type = "main";
2363 id = SERVICE_EXEC_START;
2364 }
2365
2366 idx = service_exec_command_index(u, id, command);
2367
2368 STRV_FOREACH(arg, command->argv) {
2369 size_t n;
2370 _cleanup_free_ char *e = NULL;
2371
2372 e = xescape(*arg, WHITESPACE);
2373 if (!e)
2374 return -ENOMEM;
2375
2376 n = strlen(e);
2377 if (!GREEDY_REALLOC(args, allocated, length + 1 + n + 1))
2378 return -ENOMEM;
2379
2380 if (length > 0)
2381 args[length++] = ' ';
2382
2383 memcpy(args + length, e, n);
2384 length += n;
2385 }
2386
2387 if (!GREEDY_REALLOC(args, allocated, length + 1))
2388 return -ENOMEM;
2389 args[length++] = 0;
2390
2391 p = xescape(command->path, WHITESPACE);
2392 if (!p)
2393 return -ENOMEM;
2394
2395 fprintf(f, "%s-command=%s %u %s %s\n", type, service_exec_command_to_string(id), idx, p, args);
2396
2397 return 0;
2398 }
2399
2400 static int service_serialize(Unit *u, FILE *f, FDSet *fds) {
2401 Service *s = SERVICE(u);
2402 ServiceFDStore *fs;
2403 int r;
2404
2405 assert(u);
2406 assert(f);
2407 assert(fds);
2408
2409 unit_serialize_item(u, f, "state", service_state_to_string(s->state));
2410 unit_serialize_item(u, f, "result", service_result_to_string(s->result));
2411 unit_serialize_item(u, f, "reload-result", service_result_to_string(s->reload_result));
2412
2413 if (s->control_pid > 0)
2414 unit_serialize_item_format(u, f, "control-pid", PID_FMT, s->control_pid);
2415
2416 if (s->main_pid_known && s->main_pid > 0)
2417 unit_serialize_item_format(u, f, "main-pid", PID_FMT, s->main_pid);
2418
2419 unit_serialize_item(u, f, "main-pid-known", yes_no(s->main_pid_known));
2420 unit_serialize_item(u, f, "bus-name-good", yes_no(s->bus_name_good));
2421 unit_serialize_item(u, f, "bus-name-owner", s->bus_name_owner);
2422
2423 unit_serialize_item_format(u, f, "n-restarts", "%u", s->n_restarts);
2424 unit_serialize_item(u, f, "flush-n-restarts", yes_no(s->flush_n_restarts));
2425
2426 r = unit_serialize_item_escaped(u, f, "status-text", s->status_text);
2427 if (r < 0)
2428 return r;
2429
2430 service_serialize_exec_command(u, f, s->control_command);
2431 service_serialize_exec_command(u, f, s->main_command);
2432
2433 r = unit_serialize_item_fd(u, f, fds, "stdin-fd", s->stdin_fd);
2434 if (r < 0)
2435 return r;
2436 r = unit_serialize_item_fd(u, f, fds, "stdout-fd", s->stdout_fd);
2437 if (r < 0)
2438 return r;
2439 r = unit_serialize_item_fd(u, f, fds, "stderr-fd", s->stderr_fd);
2440 if (r < 0)
2441 return r;
2442
2443 if (UNIT_ISSET(s->accept_socket)) {
2444 r = unit_serialize_item(u, f, "accept-socket", UNIT_DEREF(s->accept_socket)->id);
2445 if (r < 0)
2446 return r;
2447 }
2448
2449 r = unit_serialize_item_fd(u, f, fds, "socket-fd", s->socket_fd);
2450 if (r < 0)
2451 return r;
2452
2453 LIST_FOREACH(fd_store, fs, s->fd_store) {
2454 _cleanup_free_ char *c = NULL;
2455 int copy;
2456
2457 copy = fdset_put_dup(fds, fs->fd);
2458 if (copy < 0)
2459 return copy;
2460
2461 c = cescape(fs->fdname);
2462
2463 unit_serialize_item_format(u, f, "fd-store-fd", "%i %s", copy, strempty(c));
2464 }
2465
2466 if (s->main_exec_status.pid > 0) {
2467 unit_serialize_item_format(u, f, "main-exec-status-pid", PID_FMT, s->main_exec_status.pid);
2468 dual_timestamp_serialize(f, "main-exec-status-start", &s->main_exec_status.start_timestamp);
2469 dual_timestamp_serialize(f, "main-exec-status-exit", &s->main_exec_status.exit_timestamp);
2470
2471 if (dual_timestamp_is_set(&s->main_exec_status.exit_timestamp)) {
2472 unit_serialize_item_format(u, f, "main-exec-status-code", "%i", s->main_exec_status.code);
2473 unit_serialize_item_format(u, f, "main-exec-status-status", "%i", s->main_exec_status.status);
2474 }
2475 }
2476
2477 dual_timestamp_serialize(f, "watchdog-timestamp", &s->watchdog_timestamp);
2478
2479 unit_serialize_item(u, f, "forbid-restart", yes_no(s->forbid_restart));
2480
2481 if (s->watchdog_override_enable)
2482 unit_serialize_item_format(u, f, "watchdog-override-usec", USEC_FMT, s->watchdog_override_usec);
2483
2484 return 0;
2485 }
2486
2487 static int service_deserialize_exec_command(Unit *u, const char *key, const char *value) {
2488 Service *s = SERVICE(u);
2489 int r;
2490 unsigned idx = 0, i;
2491 bool control, found = false;
2492 ServiceExecCommand id = _SERVICE_EXEC_COMMAND_INVALID;
2493 ExecCommand *command = NULL;
2494 _cleanup_free_ char *path = NULL;
2495 _cleanup_strv_free_ char **argv = NULL;
2496
2497 enum ExecCommandState {
2498 STATE_EXEC_COMMAND_TYPE,
2499 STATE_EXEC_COMMAND_INDEX,
2500 STATE_EXEC_COMMAND_PATH,
2501 STATE_EXEC_COMMAND_ARGS,
2502 _STATE_EXEC_COMMAND_MAX,
2503 _STATE_EXEC_COMMAND_INVALID = -1,
2504 } state;
2505
2506 assert(s);
2507 assert(key);
2508 assert(value);
2509
2510 control = streq(key, "control-command");
2511
2512 state = STATE_EXEC_COMMAND_TYPE;
2513
2514 for (;;) {
2515 _cleanup_free_ char *arg = NULL;
2516
2517 r = extract_first_word(&value, &arg, NULL, EXTRACT_CUNESCAPE);
2518 if (r == 0)
2519 break;
2520 else if (r < 0)
2521 return r;
2522
2523 switch (state) {
2524 case STATE_EXEC_COMMAND_TYPE:
2525 id = service_exec_command_from_string(arg);
2526 if (id < 0)
2527 return -EINVAL;
2528
2529 state = STATE_EXEC_COMMAND_INDEX;
2530 break;
2531 case STATE_EXEC_COMMAND_INDEX:
2532 r = safe_atou(arg, &idx);
2533 if (r < 0)
2534 return -EINVAL;
2535
2536 state = STATE_EXEC_COMMAND_PATH;
2537 break;
2538 case STATE_EXEC_COMMAND_PATH:
2539 path = TAKE_PTR(arg);
2540 state = STATE_EXEC_COMMAND_ARGS;
2541
2542 if (!path_is_absolute(path))
2543 return -EINVAL;
2544 break;
2545 case STATE_EXEC_COMMAND_ARGS:
2546 r = strv_extend(&argv, arg);
2547 if (r < 0)
2548 return -ENOMEM;
2549 break;
2550 default:
2551 assert_not_reached("Unknown error at deserialization of exec command");
2552 break;
2553 }
2554 }
2555
2556 if (state != STATE_EXEC_COMMAND_ARGS)
2557 return -EINVAL;
2558
2559 /* Let's check whether exec command on given offset matches data that we just deserialized */
2560 for (command = s->exec_command[id], i = 0; command; command = command->command_next, i++) {
2561 if (i != idx)
2562 continue;
2563
2564 found = strv_equal(argv, command->argv) && streq(command->path, path);
2565 break;
2566 }
2567
2568 if (!found) {
2569 /* Command at the index we serialized is different, let's look for command that exactly
2570 * matches but is on different index. If there is no such command we will not resume execution. */
2571 for (command = s->exec_command[id]; command; command = command->command_next)
2572 if (strv_equal(command->argv, argv) && streq(command->path, path))
2573 break;
2574 }
2575
2576 if (command && control)
2577 s->control_command = command;
2578 else if (command)
2579 s->main_command = command;
2580 else
2581 log_unit_warning(u, "Current command vanished from the unit file, execution of the command list won't be resumed.");
2582
2583 return 0;
2584 }
2585
2586 static int service_deserialize_item(Unit *u, const char *key, const char *value, FDSet *fds) {
2587 Service *s = SERVICE(u);
2588 int r;
2589
2590 assert(u);
2591 assert(key);
2592 assert(value);
2593 assert(fds);
2594
2595 if (streq(key, "state")) {
2596 ServiceState state;
2597
2598 state = service_state_from_string(value);
2599 if (state < 0)
2600 log_unit_debug(u, "Failed to parse state value: %s", value);
2601 else
2602 s->deserialized_state = state;
2603 } else if (streq(key, "result")) {
2604 ServiceResult f;
2605
2606 f = service_result_from_string(value);
2607 if (f < 0)
2608 log_unit_debug(u, "Failed to parse result value: %s", value);
2609 else if (f != SERVICE_SUCCESS)
2610 s->result = f;
2611
2612 } else if (streq(key, "reload-result")) {
2613 ServiceResult f;
2614
2615 f = service_result_from_string(value);
2616 if (f < 0)
2617 log_unit_debug(u, "Failed to parse reload result value: %s", value);
2618 else if (f != SERVICE_SUCCESS)
2619 s->reload_result = f;
2620
2621 } else if (streq(key, "control-pid")) {
2622 pid_t pid;
2623
2624 if (parse_pid(value, &pid) < 0)
2625 log_unit_debug(u, "Failed to parse control-pid value: %s", value);
2626 else
2627 s->control_pid = pid;
2628 } else if (streq(key, "main-pid")) {
2629 pid_t pid;
2630
2631 if (parse_pid(value, &pid) < 0)
2632 log_unit_debug(u, "Failed to parse main-pid value: %s", value);
2633 else
2634 (void) service_set_main_pid(s, pid);
2635 } else if (streq(key, "main-pid-known")) {
2636 int b;
2637
2638 b = parse_boolean(value);
2639 if (b < 0)
2640 log_unit_debug(u, "Failed to parse main-pid-known value: %s", value);
2641 else
2642 s->main_pid_known = b;
2643 } else if (streq(key, "bus-name-good")) {
2644 int b;
2645
2646 b = parse_boolean(value);
2647 if (b < 0)
2648 log_unit_debug(u, "Failed to parse bus-name-good value: %s", value);
2649 else
2650 s->bus_name_good = b;
2651 } else if (streq(key, "bus-name-owner")) {
2652 r = free_and_strdup(&s->bus_name_owner, value);
2653 if (r < 0)
2654 log_unit_error_errno(u, r, "Unable to deserialize current bus owner %s: %m", value);
2655 } else if (streq(key, "status-text")) {
2656 char *t;
2657
2658 r = cunescape(value, 0, &t);
2659 if (r < 0)
2660 log_unit_debug_errno(u, r, "Failed to unescape status text: %s", value);
2661 else {
2662 free(s->status_text);
2663 s->status_text = t;
2664 }
2665
2666 } else if (streq(key, "accept-socket")) {
2667 Unit *socket;
2668
2669 r = manager_load_unit(u->manager, value, NULL, NULL, &socket);
2670 if (r < 0)
2671 log_unit_debug_errno(u, r, "Failed to load accept-socket unit: %s", value);
2672 else {
2673 unit_ref_set(&s->accept_socket, u, socket);
2674 SOCKET(socket)->n_connections++;
2675 }
2676
2677 } else if (streq(key, "socket-fd")) {
2678 int fd;
2679
2680 if (safe_atoi(value, &fd) < 0 || fd < 0 || !fdset_contains(fds, fd))
2681 log_unit_debug(u, "Failed to parse socket-fd value: %s", value);
2682 else {
2683 asynchronous_close(s->socket_fd);
2684 s->socket_fd = fdset_remove(fds, fd);
2685 }
2686 } else if (streq(key, "fd-store-fd")) {
2687 const char *fdv;
2688 size_t pf;
2689 int fd;
2690
2691 pf = strcspn(value, WHITESPACE);
2692 fdv = strndupa(value, pf);
2693
2694 if (safe_atoi(fdv, &fd) < 0 || fd < 0 || !fdset_contains(fds, fd))
2695 log_unit_debug(u, "Failed to parse fd-store-fd value: %s", value);
2696 else {
2697 _cleanup_free_ char *t = NULL;
2698 const char *fdn;
2699
2700 fdn = value + pf;
2701 fdn += strspn(fdn, WHITESPACE);
2702 (void) cunescape(fdn, 0, &t);
2703
2704 r = service_add_fd_store(s, fd, t);
2705 if (r < 0)
2706 log_unit_error_errno(u, r, "Failed to add fd to store: %m");
2707 else
2708 fdset_remove(fds, fd);
2709 }
2710
2711 } else if (streq(key, "main-exec-status-pid")) {
2712 pid_t pid;
2713
2714 if (parse_pid(value, &pid) < 0)
2715 log_unit_debug(u, "Failed to parse main-exec-status-pid value: %s", value);
2716 else
2717 s->main_exec_status.pid = pid;
2718 } else if (streq(key, "main-exec-status-code")) {
2719 int i;
2720
2721 if (safe_atoi(value, &i) < 0)
2722 log_unit_debug(u, "Failed to parse main-exec-status-code value: %s", value);
2723 else
2724 s->main_exec_status.code = i;
2725 } else if (streq(key, "main-exec-status-status")) {
2726 int i;
2727
2728 if (safe_atoi(value, &i) < 0)
2729 log_unit_debug(u, "Failed to parse main-exec-status-status value: %s", value);
2730 else
2731 s->main_exec_status.status = i;
2732 } else if (streq(key, "main-exec-status-start"))
2733 dual_timestamp_deserialize(value, &s->main_exec_status.start_timestamp);
2734 else if (streq(key, "main-exec-status-exit"))
2735 dual_timestamp_deserialize(value, &s->main_exec_status.exit_timestamp);
2736 else if (streq(key, "watchdog-timestamp"))
2737 dual_timestamp_deserialize(value, &s->watchdog_timestamp);
2738 else if (streq(key, "forbid-restart")) {
2739 int b;
2740
2741 b = parse_boolean(value);
2742 if (b < 0)
2743 log_unit_debug(u, "Failed to parse forbid-restart value: %s", value);
2744 else
2745 s->forbid_restart = b;
2746 } else if (streq(key, "stdin-fd")) {
2747 int fd;
2748
2749 if (safe_atoi(value, &fd) < 0 || fd < 0 || !fdset_contains(fds, fd))
2750 log_unit_debug(u, "Failed to parse stdin-fd value: %s", value);
2751 else {
2752 asynchronous_close(s->stdin_fd);
2753 s->stdin_fd = fdset_remove(fds, fd);
2754 s->exec_context.stdio_as_fds = true;
2755 }
2756 } else if (streq(key, "stdout-fd")) {
2757 int fd;
2758
2759 if (safe_atoi(value, &fd) < 0 || fd < 0 || !fdset_contains(fds, fd))
2760 log_unit_debug(u, "Failed to parse stdout-fd value: %s", value);
2761 else {
2762 asynchronous_close(s->stdout_fd);
2763 s->stdout_fd = fdset_remove(fds, fd);
2764 s->exec_context.stdio_as_fds = true;
2765 }
2766 } else if (streq(key, "stderr-fd")) {
2767 int fd;
2768
2769 if (safe_atoi(value, &fd) < 0 || fd < 0 || !fdset_contains(fds, fd))
2770 log_unit_debug(u, "Failed to parse stderr-fd value: %s", value);
2771 else {
2772 asynchronous_close(s->stderr_fd);
2773 s->stderr_fd = fdset_remove(fds, fd);
2774 s->exec_context.stdio_as_fds = true;
2775 }
2776 } else if (streq(key, "watchdog-override-usec")) {
2777 usec_t watchdog_override_usec;
2778 if (timestamp_deserialize(value, &watchdog_override_usec) < 0)
2779 log_unit_debug(u, "Failed to parse watchdog_override_usec value: %s", value);
2780 else {
2781 s->watchdog_override_enable = true;
2782 s->watchdog_override_usec = watchdog_override_usec;
2783 }
2784 } else if (STR_IN_SET(key, "main-command", "control-command")) {
2785 r = service_deserialize_exec_command(u, key, value);
2786 if (r < 0)
2787 log_unit_debug_errno(u, r, "Failed to parse serialized command \"%s\": %m", value);
2788
2789 } else if (streq(key, "n-restarts")) {
2790 r = safe_atou(value, &s->n_restarts);
2791 if (r < 0)
2792 log_unit_debug_errno(u, r, "Failed to parse serialized restart counter '%s': %m", value);
2793
2794 } else if (streq(key, "flush-n-restarts")) {
2795 r = parse_boolean(value);
2796 if (r < 0)
2797 log_unit_debug_errno(u, r, "Failed to parse serialized flush restart counter setting '%s': %m", value);
2798 else
2799 s->flush_n_restarts = r;
2800 } else
2801 log_unit_debug(u, "Unknown serialization key: %s", key);
2802
2803 return 0;
2804 }
2805
2806 _pure_ static UnitActiveState service_active_state(Unit *u) {
2807 const UnitActiveState *table;
2808
2809 assert(u);
2810
2811 table = SERVICE(u)->type == SERVICE_IDLE ? state_translation_table_idle : state_translation_table;
2812
2813 return table[SERVICE(u)->state];
2814 }
2815
2816 static const char *service_sub_state_to_string(Unit *u) {
2817 assert(u);
2818
2819 return service_state_to_string(SERVICE(u)->state);
2820 }
2821
2822 static bool service_may_gc(Unit *u) {
2823 Service *s = SERVICE(u);
2824
2825 assert(s);
2826
2827 /* Never clean up services that still have a process around, even if the service is formally dead. Note that
2828 * unit_may_gc() already checked our cgroup for us, we just check our two additional PIDs, too, in case they
2829 * have moved outside of the cgroup. */
2830
2831 if (main_pid_good(s) > 0 ||
2832 control_pid_good(s) > 0)
2833 return false;
2834
2835 return true;
2836 }
2837
2838 static int service_retry_pid_file(Service *s) {
2839 int r;
2840
2841 assert(s->pid_file);
2842 assert(IN_SET(s->state, SERVICE_START, SERVICE_START_POST));
2843
2844 r = service_load_pid_file(s, false);
2845 if (r < 0)
2846 return r;
2847
2848 service_unwatch_pid_file(s);
2849
2850 service_enter_running(s, SERVICE_SUCCESS);
2851 return 0;
2852 }
2853
2854 static int service_watch_pid_file(Service *s) {
2855 int r;
2856
2857 log_unit_debug(UNIT(s), "Setting watch for PID file %s", s->pid_file_pathspec->path);
2858
2859 r = path_spec_watch(s->pid_file_pathspec, service_dispatch_io);
2860 if (r < 0)
2861 goto fail;
2862
2863 /* the pidfile might have appeared just before we set the watch */
2864 log_unit_debug(UNIT(s), "Trying to read PID file %s in case it changed", s->pid_file_pathspec->path);
2865 service_retry_pid_file(s);
2866
2867 return 0;
2868 fail:
2869 log_unit_error_errno(UNIT(s), r, "Failed to set a watch for PID file %s: %m", s->pid_file_pathspec->path);
2870 service_unwatch_pid_file(s);
2871 return r;
2872 }
2873
2874 static int service_demand_pid_file(Service *s) {
2875 PathSpec *ps;
2876
2877 assert(s->pid_file);
2878 assert(!s->pid_file_pathspec);
2879
2880 ps = new0(PathSpec, 1);
2881 if (!ps)
2882 return -ENOMEM;
2883
2884 ps->unit = UNIT(s);
2885 ps->path = strdup(s->pid_file);
2886 if (!ps->path) {
2887 free(ps);
2888 return -ENOMEM;
2889 }
2890
2891 path_simplify(ps->path, false);
2892
2893 /* PATH_CHANGED would not be enough. There are daemons (sendmail) that
2894 * keep their PID file open all the time. */
2895 ps->type = PATH_MODIFIED;
2896 ps->inotify_fd = -1;
2897
2898 s->pid_file_pathspec = ps;
2899
2900 return service_watch_pid_file(s);
2901 }
2902
2903 static int service_dispatch_io(sd_event_source *source, int fd, uint32_t events, void *userdata) {
2904 PathSpec *p = userdata;
2905 Service *s;
2906
2907 assert(p);
2908
2909 s = SERVICE(p->unit);
2910
2911 assert(s);
2912 assert(fd >= 0);
2913 assert(IN_SET(s->state, SERVICE_START, SERVICE_START_POST));
2914 assert(s->pid_file_pathspec);
2915 assert(path_spec_owns_inotify_fd(s->pid_file_pathspec, fd));
2916
2917 log_unit_debug(UNIT(s), "inotify event");
2918
2919 if (path_spec_fd_event(p, events) < 0)
2920 goto fail;
2921
2922 if (service_retry_pid_file(s) == 0)
2923 return 0;
2924
2925 if (service_watch_pid_file(s) < 0)
2926 goto fail;
2927
2928 return 0;
2929
2930 fail:
2931 service_unwatch_pid_file(s);
2932 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_RESOURCES);
2933 return 0;
2934 }
2935
2936 static void service_notify_cgroup_empty_event(Unit *u) {
2937 Service *s = SERVICE(u);
2938
2939 assert(u);
2940
2941 log_unit_debug(u, "cgroup is empty");
2942
2943 switch (s->state) {
2944
2945 /* Waiting for SIGCHLD is usually more interesting,
2946 * because it includes return codes/signals. Which is
2947 * why we ignore the cgroup events for most cases,
2948 * except when we don't know pid which to expect the
2949 * SIGCHLD for. */
2950
2951 case SERVICE_START:
2952 if (s->type == SERVICE_NOTIFY &&
2953 main_pid_good(s) == 0 &&
2954 control_pid_good(s) == 0) {
2955 /* No chance of getting a ready notification anymore */
2956 service_enter_stop_post(s, SERVICE_FAILURE_PROTOCOL);
2957 break;
2958 }
2959
2960 _fallthrough_;
2961 case SERVICE_START_POST:
2962 if (s->pid_file_pathspec &&
2963 main_pid_good(s) == 0 &&
2964 control_pid_good(s) == 0) {
2965
2966 /* Give up hoping for the daemon to write its PID file */
2967 log_unit_warning(u, "Daemon never wrote its PID file. Failing.");
2968
2969 service_unwatch_pid_file(s);
2970 if (s->state == SERVICE_START)
2971 service_enter_stop_post(s, SERVICE_FAILURE_PROTOCOL);
2972 else
2973 service_enter_stop(s, SERVICE_FAILURE_PROTOCOL);
2974 }
2975 break;
2976
2977 case SERVICE_RUNNING:
2978 /* service_enter_running() will figure out what to do */
2979 service_enter_running(s, SERVICE_SUCCESS);
2980 break;
2981
2982 case SERVICE_STOP_SIGABRT:
2983 case SERVICE_STOP_SIGTERM:
2984 case SERVICE_STOP_SIGKILL:
2985
2986 if (main_pid_good(s) <= 0 && control_pid_good(s) <= 0)
2987 service_enter_stop_post(s, SERVICE_SUCCESS);
2988
2989 break;
2990
2991 case SERVICE_STOP_POST:
2992 case SERVICE_FINAL_SIGTERM:
2993 case SERVICE_FINAL_SIGKILL:
2994 if (main_pid_good(s) <= 0 && control_pid_good(s) <= 0)
2995 service_enter_dead(s, SERVICE_SUCCESS, true);
2996
2997 break;
2998
2999 default:
3000 ;
3001 }
3002 }
3003
3004 static void service_sigchld_event(Unit *u, pid_t pid, int code, int status) {
3005 bool notify_dbus = true;
3006 Service *s = SERVICE(u);
3007 ServiceResult f;
3008
3009 assert(s);
3010 assert(pid >= 0);
3011
3012 if (is_clean_exit(code, status, s->type == SERVICE_ONESHOT ? EXIT_CLEAN_COMMAND : EXIT_CLEAN_DAEMON, &s->success_status))
3013 f = SERVICE_SUCCESS;
3014 else if (code == CLD_EXITED)
3015 f = SERVICE_FAILURE_EXIT_CODE;
3016 else if (code == CLD_KILLED)
3017 f = SERVICE_FAILURE_SIGNAL;
3018 else if (code == CLD_DUMPED)
3019 f = SERVICE_FAILURE_CORE_DUMP;
3020 else
3021 assert_not_reached("Unknown code");
3022
3023 if (s->main_pid == pid) {
3024 /* Forking services may occasionally move to a new PID.
3025 * As long as they update the PID file before exiting the old
3026 * PID, they're fine. */
3027 if (service_load_pid_file(s, false) > 0)
3028 return;
3029
3030 s->main_pid = 0;
3031 exec_status_exit(&s->main_exec_status, &s->exec_context, pid, code, status);
3032
3033 if (s->main_command) {
3034 /* If this is not a forking service than the
3035 * main process got started and hence we copy
3036 * the exit status so that it is recorded both
3037 * as main and as control process exit
3038 * status */
3039
3040 s->main_command->exec_status = s->main_exec_status;
3041
3042 if (s->main_command->flags & EXEC_COMMAND_IGNORE_FAILURE)
3043 f = SERVICE_SUCCESS;
3044 } else if (s->exec_command[SERVICE_EXEC_START]) {
3045
3046 /* If this is a forked process, then we should
3047 * ignore the return value if this was
3048 * configured for the starter process */
3049
3050 if (s->exec_command[SERVICE_EXEC_START]->flags & EXEC_COMMAND_IGNORE_FAILURE)
3051 f = SERVICE_SUCCESS;
3052 }
3053
3054 /* When this is a successful exit, let's log about the exit code on DEBUG level. If this is a failure
3055 * and the process exited on its own via exit(), then let's make this a NOTICE, under the assumption
3056 * that the service already logged the reason at a higher log level on its own. However, if the service
3057 * died due to a signal, then it most likely didn't say anything about any reason, hence let's raise
3058 * our log level to WARNING then. */
3059
3060 log_struct(f == SERVICE_SUCCESS ? LOG_DEBUG :
3061 (code == CLD_EXITED ? LOG_NOTICE : LOG_WARNING),
3062 LOG_UNIT_MESSAGE(u, "Main process exited, code=%s, status=%i/%s",
3063 sigchld_code_to_string(code), status,
3064 strna(code == CLD_EXITED
3065 ? exit_status_to_string(status, EXIT_STATUS_FULL)
3066 : signal_to_string(status))),
3067 "EXIT_CODE=%s", sigchld_code_to_string(code),
3068 "EXIT_STATUS=%i", status,
3069 LOG_UNIT_ID(u),
3070 LOG_UNIT_INVOCATION_ID(u));
3071
3072 if (s->result == SERVICE_SUCCESS)
3073 s->result = f;
3074
3075 if (s->main_command &&
3076 s->main_command->command_next &&
3077 s->type == SERVICE_ONESHOT &&
3078 f == SERVICE_SUCCESS) {
3079
3080 /* There is another command to *
3081 * execute, so let's do that. */
3082
3083 log_unit_debug(u, "Running next main command for state %s.", service_state_to_string(s->state));
3084 service_run_next_main(s);
3085
3086 } else {
3087
3088 /* The service exited, so the service is officially
3089 * gone. */
3090 s->main_command = NULL;
3091
3092 switch (s->state) {
3093
3094 case SERVICE_START_POST:
3095 case SERVICE_RELOAD:
3096 case SERVICE_STOP:
3097 /* Need to wait until the operation is
3098 * done */
3099 break;
3100
3101 case SERVICE_START:
3102 if (s->type == SERVICE_ONESHOT) {
3103 /* This was our main goal, so let's go on */
3104 if (f == SERVICE_SUCCESS)
3105 service_enter_start_post(s);
3106 else
3107 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3108 break;
3109 } else if (s->type == SERVICE_NOTIFY) {
3110 /* Only enter running through a notification, so that the
3111 * SERVICE_START state signifies that no ready notification
3112 * has been received */
3113 if (f != SERVICE_SUCCESS)
3114 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3115 else if (!s->remain_after_exit || s->notify_access == NOTIFY_MAIN)
3116 /* The service has never been and will never be active */
3117 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_PROTOCOL);
3118 break;
3119 }
3120
3121 _fallthrough_;
3122 case SERVICE_RUNNING:
3123 service_enter_running(s, f);
3124 break;
3125
3126 case SERVICE_STOP_SIGABRT:
3127 case SERVICE_STOP_SIGTERM:
3128 case SERVICE_STOP_SIGKILL:
3129
3130 if (control_pid_good(s) <= 0)
3131 service_enter_stop_post(s, f);
3132
3133 /* If there is still a control process, wait for that first */
3134 break;
3135
3136 case SERVICE_STOP_POST:
3137 case SERVICE_FINAL_SIGTERM:
3138 case SERVICE_FINAL_SIGKILL:
3139
3140 if (control_pid_good(s) <= 0)
3141 service_enter_dead(s, f, true);
3142 break;
3143
3144 default:
3145 assert_not_reached("Uh, main process died at wrong time.");
3146 }
3147 }
3148
3149 } else if (s->control_pid == pid) {
3150 s->control_pid = 0;
3151
3152 if (s->control_command) {
3153 exec_status_exit(&s->control_command->exec_status, &s->exec_context, pid, code, status);
3154
3155 if (s->control_command->flags & EXEC_COMMAND_IGNORE_FAILURE)
3156 f = SERVICE_SUCCESS;
3157 }
3158
3159 log_unit_full(u, f == SERVICE_SUCCESS ? LOG_DEBUG : LOG_NOTICE, 0,
3160 "Control process exited, code=%s status=%i",
3161 sigchld_code_to_string(code), status);
3162
3163 if (s->result == SERVICE_SUCCESS)
3164 s->result = f;
3165
3166 if (s->control_command &&
3167 s->control_command->command_next &&
3168 f == SERVICE_SUCCESS) {
3169
3170 /* There is another command to *
3171 * execute, so let's do that. */
3172
3173 log_unit_debug(u, "Running next control command for state %s.", service_state_to_string(s->state));
3174 service_run_next_control(s);
3175
3176 } else {
3177 /* No further commands for this step, so let's
3178 * figure out what to do next */
3179
3180 s->control_command = NULL;
3181 s->control_command_id = _SERVICE_EXEC_COMMAND_INVALID;
3182
3183 log_unit_debug(u, "Got final SIGCHLD for state %s.", service_state_to_string(s->state));
3184
3185 switch (s->state) {
3186
3187 case SERVICE_START_PRE:
3188 if (f == SERVICE_SUCCESS)
3189 service_enter_start(s);
3190 else
3191 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3192 break;
3193
3194 case SERVICE_START:
3195 if (s->type != SERVICE_FORKING)
3196 /* Maybe spurious event due to a reload that changed the type? */
3197 break;
3198
3199 if (f != SERVICE_SUCCESS) {
3200 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3201 break;
3202 }
3203
3204 if (s->pid_file) {
3205 bool has_start_post;
3206 int r;
3207
3208 /* Let's try to load the pid file here if we can.
3209 * The PID file might actually be created by a START_POST
3210 * script. In that case don't worry if the loading fails. */
3211
3212 has_start_post = s->exec_command[SERVICE_EXEC_START_POST];
3213 r = service_load_pid_file(s, !has_start_post);
3214 if (!has_start_post && r < 0) {
3215 r = service_demand_pid_file(s);
3216 if (r < 0 || cgroup_good(s) == 0)
3217 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_PROTOCOL);
3218 break;
3219 }
3220 } else
3221 service_search_main_pid(s);
3222
3223 service_enter_start_post(s);
3224 break;
3225
3226 case SERVICE_START_POST:
3227 if (f != SERVICE_SUCCESS) {
3228 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3229 break;
3230 }
3231
3232 if (s->pid_file) {
3233 int r;
3234
3235 r = service_load_pid_file(s, true);
3236 if (r < 0) {
3237 r = service_demand_pid_file(s);
3238 if (r < 0 || cgroup_good(s) == 0)
3239 service_enter_stop(s, SERVICE_FAILURE_PROTOCOL);
3240 break;
3241 }
3242 } else
3243 service_search_main_pid(s);
3244
3245 service_enter_running(s, SERVICE_SUCCESS);
3246 break;
3247
3248 case SERVICE_RELOAD:
3249 if (f == SERVICE_SUCCESS)
3250 if (service_load_pid_file(s, true) < 0)
3251 service_search_main_pid(s);
3252
3253 s->reload_result = f;
3254 service_enter_running(s, SERVICE_SUCCESS);
3255 break;
3256
3257 case SERVICE_STOP:
3258 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3259 break;
3260
3261 case SERVICE_STOP_SIGABRT:
3262 case SERVICE_STOP_SIGTERM:
3263 case SERVICE_STOP_SIGKILL:
3264 if (main_pid_good(s) <= 0)
3265 service_enter_stop_post(s, f);
3266
3267 /* If there is still a service
3268 * process around, wait until
3269 * that one quit, too */
3270 break;
3271
3272 case SERVICE_STOP_POST:
3273 case SERVICE_FINAL_SIGTERM:
3274 case SERVICE_FINAL_SIGKILL:
3275 if (main_pid_good(s) <= 0)
3276 service_enter_dead(s, f, true);
3277 break;
3278
3279 default:
3280 assert_not_reached("Uh, control process died at wrong time.");
3281 }
3282 }
3283 } else /* Neither control nor main PID? If so, don't notify about anything */
3284 notify_dbus = false;
3285
3286 /* Notify clients about changed exit status */
3287 if (notify_dbus)
3288 unit_add_to_dbus_queue(u);
3289
3290 /* If we get a SIGCHLD event for one of the processes we were interested in, then we look for others to watch,
3291 * under the assumption that we'll sooner or later get a SIGCHLD for them, as the original process we watched
3292 * was probably the parent of them, and they are hence now our children. */
3293 (void) unit_enqueue_rewatch_pids(u);
3294 }
3295
3296 static int service_dispatch_timer(sd_event_source *source, usec_t usec, void *userdata) {
3297 Service *s = SERVICE(userdata);
3298
3299 assert(s);
3300 assert(source == s->timer_event_source);
3301
3302 switch (s->state) {
3303
3304 case SERVICE_START_PRE:
3305 case SERVICE_START:
3306 log_unit_warning(UNIT(s), "%s operation timed out. Terminating.", s->state == SERVICE_START ? "Start" : "Start-pre");
3307 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_TIMEOUT);
3308 break;
3309
3310 case SERVICE_START_POST:
3311 log_unit_warning(UNIT(s), "Start-post operation timed out. Stopping.");
3312 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_TIMEOUT);
3313 break;
3314
3315 case SERVICE_RUNNING:
3316 log_unit_warning(UNIT(s), "Service reached runtime time limit. Stopping.");
3317 service_enter_stop(s, SERVICE_FAILURE_TIMEOUT);
3318 break;
3319
3320 case SERVICE_RELOAD:
3321 log_unit_warning(UNIT(s), "Reload operation timed out. Killing reload process.");
3322 service_kill_control_process(s);
3323 s->reload_result = SERVICE_FAILURE_TIMEOUT;
3324 service_enter_running(s, SERVICE_SUCCESS);
3325 break;
3326
3327 case SERVICE_STOP:
3328 log_unit_warning(UNIT(s), "Stopping timed out. Terminating.");
3329 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_TIMEOUT);
3330 break;
3331
3332 case SERVICE_STOP_SIGABRT:
3333 log_unit_warning(UNIT(s), "State 'stop-sigabrt' timed out. Terminating.");
3334 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_TIMEOUT);
3335 break;
3336
3337 case SERVICE_STOP_SIGTERM:
3338 if (s->kill_context.send_sigkill) {
3339 log_unit_warning(UNIT(s), "State 'stop-sigterm' timed out. Killing.");
3340 service_enter_signal(s, SERVICE_STOP_SIGKILL, SERVICE_FAILURE_TIMEOUT);
3341 } else {
3342 log_unit_warning(UNIT(s), "State 'stop-sigterm' timed out. Skipping SIGKILL.");
3343 service_enter_stop_post(s, SERVICE_FAILURE_TIMEOUT);
3344 }
3345
3346 break;
3347
3348 case SERVICE_STOP_SIGKILL:
3349 /* Uh, we sent a SIGKILL and it is still not gone?
3350 * Must be something we cannot kill, so let's just be
3351 * weirded out and continue */
3352
3353 log_unit_warning(UNIT(s), "Processes still around after SIGKILL. Ignoring.");
3354 service_enter_stop_post(s, SERVICE_FAILURE_TIMEOUT);
3355 break;
3356
3357 case SERVICE_STOP_POST:
3358 log_unit_warning(UNIT(s), "State 'stop-post' timed out. Terminating.");
3359 service_enter_signal(s, SERVICE_FINAL_SIGTERM, SERVICE_FAILURE_TIMEOUT);
3360 break;
3361
3362 case SERVICE_FINAL_SIGTERM:
3363 if (s->kill_context.send_sigkill) {
3364 log_unit_warning(UNIT(s), "State 'stop-final-sigterm' timed out. Killing.");
3365 service_enter_signal(s, SERVICE_FINAL_SIGKILL, SERVICE_FAILURE_TIMEOUT);
3366 } else {
3367 log_unit_warning(UNIT(s), "State 'stop-final-sigterm' timed out. Skipping SIGKILL. Entering failed mode.");
3368 service_enter_dead(s, SERVICE_FAILURE_TIMEOUT, false);
3369 }
3370
3371 break;
3372
3373 case SERVICE_FINAL_SIGKILL:
3374 log_unit_warning(UNIT(s), "Processes still around after final SIGKILL. Entering failed mode.");
3375 service_enter_dead(s, SERVICE_FAILURE_TIMEOUT, true);
3376 break;
3377
3378 case SERVICE_AUTO_RESTART:
3379 if (s->restart_usec > 0) {
3380 char buf_restart[FORMAT_TIMESPAN_MAX];
3381 log_unit_info(UNIT(s),
3382 "Service RestartSec=%s expired, scheduling restart.",
3383 format_timespan(buf_restart, sizeof buf_restart, s->restart_usec, USEC_PER_SEC));
3384 } else
3385 log_unit_info(UNIT(s),
3386 "Service has no hold-off time (RestartSec=0), scheduling restart.");
3387
3388 service_enter_restart(s);
3389 break;
3390
3391 default:
3392 assert_not_reached("Timeout at wrong time.");
3393 }
3394
3395 return 0;
3396 }
3397
3398 static int service_dispatch_watchdog(sd_event_source *source, usec_t usec, void *userdata) {
3399 Service *s = SERVICE(userdata);
3400 char t[FORMAT_TIMESPAN_MAX];
3401 usec_t watchdog_usec;
3402
3403 assert(s);
3404 assert(source == s->watchdog_event_source);
3405
3406 watchdog_usec = service_get_watchdog_usec(s);
3407
3408 if (UNIT(s)->manager->service_watchdogs) {
3409 log_unit_error(UNIT(s), "Watchdog timeout (limit %s)!",
3410 format_timespan(t, sizeof(t), watchdog_usec, 1));
3411
3412 service_enter_signal(s, SERVICE_STOP_SIGABRT, SERVICE_FAILURE_WATCHDOG);
3413 } else
3414 log_unit_warning(UNIT(s), "Watchdog disabled! Ignoring watchdog timeout (limit %s)!",
3415 format_timespan(t, sizeof(t), watchdog_usec, 1));
3416
3417 return 0;
3418 }
3419
3420 static bool service_notify_message_authorized(Service *s, pid_t pid, char **tags, FDSet *fds) {
3421 assert(s);
3422
3423 if (s->notify_access == NOTIFY_NONE) {
3424 log_unit_warning(UNIT(s), "Got notification message from PID "PID_FMT", but reception is disabled.", pid);
3425 return false;
3426 }
3427
3428 if (s->notify_access == NOTIFY_MAIN && pid != s->main_pid) {
3429 if (s->main_pid != 0)
3430 log_unit_warning(UNIT(s), "Got notification message from PID "PID_FMT", but reception only permitted for main PID "PID_FMT, pid, s->main_pid);
3431 else
3432 log_unit_warning(UNIT(s), "Got notification message from PID "PID_FMT", but reception only permitted for main PID which is currently not known", pid);
3433
3434 return false;
3435 }
3436
3437 if (s->notify_access == NOTIFY_EXEC && pid != s->main_pid && pid != s->control_pid) {
3438 if (s->main_pid != 0 && s->control_pid != 0)
3439 log_unit_warning(UNIT(s), "Got notification message from PID "PID_FMT", but reception only permitted for main PID "PID_FMT" and control PID "PID_FMT,
3440 pid, s->main_pid, s->control_pid);
3441 else if (s->main_pid != 0)
3442 log_unit_warning(UNIT(s), "Got notification message from PID "PID_FMT", but reception only permitted for main PID "PID_FMT, pid, s->main_pid);
3443 else if (s->control_pid != 0)
3444 log_unit_warning(UNIT(s), "Got notification message from PID "PID_FMT", but reception only permitted for control PID "PID_FMT, pid, s->control_pid);
3445 else
3446 log_unit_warning(UNIT(s), "Got notification message from PID "PID_FMT", but reception only permitted for main PID and control PID which are currently not known", pid);
3447
3448 return false;
3449 }
3450
3451 return true;
3452 }
3453
3454 static void service_notify_message(
3455 Unit *u,
3456 const struct ucred *ucred,
3457 char **tags,
3458 FDSet *fds) {
3459
3460 Service *s = SERVICE(u);
3461 bool notify_dbus = false;
3462 const char *e;
3463 char **i;
3464 int r;
3465
3466 assert(u);
3467 assert(ucred);
3468
3469 if (!service_notify_message_authorized(SERVICE(u), ucred->pid, tags, fds))
3470 return;
3471
3472 if (DEBUG_LOGGING) {
3473 _cleanup_free_ char *cc = NULL;
3474
3475 cc = strv_join(tags, ", ");
3476 log_unit_debug(u, "Got notification message from PID "PID_FMT" (%s)", ucred->pid, isempty(cc) ? "n/a" : cc);
3477 }
3478
3479 /* Interpret MAINPID= */
3480 e = strv_find_startswith(tags, "MAINPID=");
3481 if (e && IN_SET(s->state, SERVICE_START, SERVICE_START_POST, SERVICE_RUNNING, SERVICE_RELOAD)) {
3482 pid_t new_main_pid;
3483
3484 if (parse_pid(e, &new_main_pid) < 0)
3485 log_unit_warning(u, "Failed to parse MAINPID= field in notification message, ignoring: %s", e);
3486 else if (!s->main_pid_known || new_main_pid != s->main_pid) {
3487
3488 r = service_is_suitable_main_pid(s, new_main_pid, LOG_WARNING);
3489 if (r == 0) {
3490 /* The new main PID is a bit suspicous, which is OK if the sender is privileged. */
3491
3492 if (ucred->uid == 0) {
3493 log_unit_debug(u, "New main PID "PID_FMT" does not belong to service, but we'll accept it as the request to change it came from a privileged process.", new_main_pid);
3494 r = 1;
3495 } else
3496 log_unit_debug(u, "New main PID "PID_FMT" does not belong to service, refusing.", new_main_pid);
3497 }
3498 if (r > 0) {
3499 service_set_main_pid(s, new_main_pid);
3500 unit_watch_pid(UNIT(s), new_main_pid);
3501 notify_dbus = true;
3502 }
3503 }
3504 }
3505
3506 /* Interpret READY=/STOPPING=/RELOADING=. Last one wins. */
3507 STRV_FOREACH_BACKWARDS(i, tags) {
3508
3509 if (streq(*i, "READY=1")) {
3510 s->notify_state = NOTIFY_READY;
3511
3512 /* Type=notify services inform us about completed
3513 * initialization with READY=1 */
3514 if (s->type == SERVICE_NOTIFY && s->state == SERVICE_START)
3515 service_enter_start_post(s);
3516
3517 /* Sending READY=1 while we are reloading informs us
3518 * that the reloading is complete */
3519 if (s->state == SERVICE_RELOAD && s->control_pid == 0)
3520 service_enter_running(s, SERVICE_SUCCESS);
3521
3522 notify_dbus = true;
3523 break;
3524
3525 } else if (streq(*i, "RELOADING=1")) {
3526 s->notify_state = NOTIFY_RELOADING;
3527
3528 if (s->state == SERVICE_RUNNING)
3529 service_enter_reload_by_notify(s);
3530
3531 notify_dbus = true;
3532 break;
3533
3534 } else if (streq(*i, "STOPPING=1")) {
3535 s->notify_state = NOTIFY_STOPPING;
3536
3537 if (s->state == SERVICE_RUNNING)
3538 service_enter_stop_by_notify(s);
3539
3540 notify_dbus = true;
3541 break;
3542 }
3543 }
3544
3545 /* Interpret STATUS= */
3546 e = strv_find_startswith(tags, "STATUS=");
3547 if (e) {
3548 _cleanup_free_ char *t = NULL;
3549
3550 if (!isempty(e)) {
3551 if (!utf8_is_valid(e))
3552 log_unit_warning(u, "Status message in notification message is not UTF-8 clean.");
3553 else {
3554 t = strdup(e);
3555 if (!t)
3556 log_oom();
3557 }
3558 }
3559
3560 if (!streq_ptr(s->status_text, t)) {
3561 free_and_replace(s->status_text, t);
3562 notify_dbus = true;
3563 }
3564 }
3565
3566 /* Interpret ERRNO= */
3567 e = strv_find_startswith(tags, "ERRNO=");
3568 if (e) {
3569 int status_errno;
3570
3571 status_errno = parse_errno(e);
3572 if (status_errno < 0)
3573 log_unit_warning_errno(u, status_errno,
3574 "Failed to parse ERRNO= field in notification message: %s", e);
3575 else if (s->status_errno != status_errno) {
3576 s->status_errno = status_errno;
3577 notify_dbus = true;
3578 }
3579 }
3580
3581 /* Interpret EXTEND_TIMEOUT= */
3582 e = strv_find_startswith(tags, "EXTEND_TIMEOUT_USEC=");
3583 if (e) {
3584 usec_t extend_timeout_usec;
3585 if (safe_atou64(e, &extend_timeout_usec) < 0)
3586 log_unit_warning(u, "Failed to parse EXTEND_TIMEOUT_USEC=%s", e);
3587 else
3588 service_extend_timeout(s, extend_timeout_usec);
3589 }
3590
3591 /* Interpret WATCHDOG= */
3592 if (strv_find(tags, "WATCHDOG=1"))
3593 service_reset_watchdog(s);
3594
3595 e = strv_find_startswith(tags, "WATCHDOG_USEC=");
3596 if (e) {
3597 usec_t watchdog_override_usec;
3598 if (safe_atou64(e, &watchdog_override_usec) < 0)
3599 log_unit_warning(u, "Failed to parse WATCHDOG_USEC=%s", e);
3600 else
3601 service_reset_watchdog_timeout(s, watchdog_override_usec);
3602 }
3603
3604 /* Process FD store messages. Either FDSTOREREMOVE=1 for removal, or FDSTORE=1 for addition. In both cases,
3605 * process FDNAME= for picking the file descriptor name to use. Note that FDNAME= is required when removing
3606 * fds, but optional when pushing in new fds, for compatibility reasons. */
3607 if (strv_find(tags, "FDSTOREREMOVE=1")) {
3608 const char *name;
3609
3610 name = strv_find_startswith(tags, "FDNAME=");
3611 if (!name || !fdname_is_valid(name))
3612 log_unit_warning(u, "FDSTOREREMOVE=1 requested, but no valid file descriptor name passed, ignoring.");
3613 else
3614 service_remove_fd_store(s, name);
3615
3616 } else if (strv_find(tags, "FDSTORE=1")) {
3617 const char *name;
3618
3619 name = strv_find_startswith(tags, "FDNAME=");
3620 if (name && !fdname_is_valid(name)) {
3621 log_unit_warning(u, "Passed FDNAME= name is invalid, ignoring.");
3622 name = NULL;
3623 }
3624
3625 (void) service_add_fd_store_set(s, fds, name);
3626 }
3627
3628 /* Notify clients about changed status or main pid */
3629 if (notify_dbus)
3630 unit_add_to_dbus_queue(u);
3631 }
3632
3633 static int service_get_timeout(Unit *u, usec_t *timeout) {
3634 Service *s = SERVICE(u);
3635 uint64_t t;
3636 int r;
3637
3638 if (!s->timer_event_source)
3639 return 0;
3640
3641 r = sd_event_source_get_time(s->timer_event_source, &t);
3642 if (r < 0)
3643 return r;
3644 if (t == USEC_INFINITY)
3645 return 0;
3646
3647 *timeout = t;
3648 return 1;
3649 }
3650
3651 static void service_bus_name_owner_change(
3652 Unit *u,
3653 const char *name,
3654 const char *old_owner,
3655 const char *new_owner) {
3656
3657 Service *s = SERVICE(u);
3658 int r;
3659
3660 assert(s);
3661 assert(name);
3662
3663 assert(streq(s->bus_name, name));
3664 assert(old_owner || new_owner);
3665
3666 if (old_owner && new_owner)
3667 log_unit_debug(u, "D-Bus name %s changed owner from %s to %s", name, old_owner, new_owner);
3668 else if (old_owner)
3669 log_unit_debug(u, "D-Bus name %s no longer registered by %s", name, old_owner);
3670 else
3671 log_unit_debug(u, "D-Bus name %s now registered by %s", name, new_owner);
3672
3673 s->bus_name_good = !!new_owner;
3674
3675 /* Track the current owner, so we can reconstruct changes after a daemon reload */
3676 r = free_and_strdup(&s->bus_name_owner, new_owner);
3677 if (r < 0) {
3678 log_unit_error_errno(u, r, "Unable to set new bus name owner %s: %m", new_owner);
3679 return;
3680 }
3681
3682 if (s->type == SERVICE_DBUS) {
3683
3684 /* service_enter_running() will figure out what to
3685 * do */
3686 if (s->state == SERVICE_RUNNING)
3687 service_enter_running(s, SERVICE_SUCCESS);
3688 else if (s->state == SERVICE_START && new_owner)
3689 service_enter_start_post(s);
3690
3691 } else if (new_owner &&
3692 s->main_pid <= 0 &&
3693 IN_SET(s->state,
3694 SERVICE_START,
3695 SERVICE_START_POST,
3696 SERVICE_RUNNING,
3697 SERVICE_RELOAD)) {
3698
3699 _cleanup_(sd_bus_creds_unrefp) sd_bus_creds *creds = NULL;
3700 pid_t pid;
3701
3702 /* Try to acquire PID from bus service */
3703
3704 r = sd_bus_get_name_creds(u->manager->api_bus, name, SD_BUS_CREDS_PID, &creds);
3705 if (r >= 0)
3706 r = sd_bus_creds_get_pid(creds, &pid);
3707 if (r >= 0) {
3708 log_unit_debug(u, "D-Bus name %s is now owned by process " PID_FMT, name, pid);
3709
3710 service_set_main_pid(s, pid);
3711 unit_watch_pid(UNIT(s), pid);
3712 }
3713 }
3714 }
3715
3716 int service_set_socket_fd(Service *s, int fd, Socket *sock, bool selinux_context_net) {
3717 _cleanup_free_ char *peer = NULL;
3718 int r;
3719
3720 assert(s);
3721 assert(fd >= 0);
3722
3723 /* This is called by the socket code when instantiating a new service for a stream socket and the socket needs
3724 * to be configured. We take ownership of the passed fd on success. */
3725
3726 if (UNIT(s)->load_state != UNIT_LOADED)
3727 return -EINVAL;
3728
3729 if (s->socket_fd >= 0)
3730 return -EBUSY;
3731
3732 if (s->state != SERVICE_DEAD)
3733 return -EAGAIN;
3734
3735 if (getpeername_pretty(fd, true, &peer) >= 0) {
3736
3737 if (UNIT(s)->description) {
3738 _cleanup_free_ char *a;
3739
3740 a = strjoin(UNIT(s)->description, " (", peer, ")");
3741 if (!a)
3742 return -ENOMEM;
3743
3744 r = unit_set_description(UNIT(s), a);
3745 } else
3746 r = unit_set_description(UNIT(s), peer);
3747
3748 if (r < 0)
3749 return r;
3750 }
3751
3752 r = unit_add_two_dependencies(UNIT(sock), UNIT_BEFORE, UNIT_TRIGGERS, UNIT(s), false, UNIT_DEPENDENCY_IMPLICIT);
3753 if (r < 0)
3754 return r;
3755
3756 s->socket_fd = fd;
3757 s->socket_fd_selinux_context_net = selinux_context_net;
3758
3759 unit_ref_set(&s->accept_socket, UNIT(s), UNIT(sock));
3760 return 0;
3761 }
3762
3763 static void service_reset_failed(Unit *u) {
3764 Service *s = SERVICE(u);
3765
3766 assert(s);
3767
3768 if (s->state == SERVICE_FAILED)
3769 service_set_state(s, SERVICE_DEAD);
3770
3771 s->result = SERVICE_SUCCESS;
3772 s->reload_result = SERVICE_SUCCESS;
3773 s->n_restarts = 0;
3774 s->flush_n_restarts = false;
3775 }
3776
3777 static int service_kill(Unit *u, KillWho who, int signo, sd_bus_error *error) {
3778 Service *s = SERVICE(u);
3779
3780 assert(s);
3781
3782 return unit_kill_common(u, who, signo, s->main_pid, s->control_pid, error);
3783 }
3784
3785 static int service_main_pid(Unit *u) {
3786 Service *s = SERVICE(u);
3787
3788 assert(s);
3789
3790 return s->main_pid;
3791 }
3792
3793 static int service_control_pid(Unit *u) {
3794 Service *s = SERVICE(u);
3795
3796 assert(s);
3797
3798 return s->control_pid;
3799 }
3800
3801 static bool service_needs_console(Unit *u) {
3802 Service *s = SERVICE(u);
3803
3804 assert(s);
3805
3806 /* We provide our own implementation of this here, instead of relying of the generic implementation
3807 * unit_needs_console() provides, since we want to return false if we are in SERVICE_EXITED state. */
3808
3809 if (!exec_context_may_touch_console(&s->exec_context))
3810 return false;
3811
3812 return IN_SET(s->state,
3813 SERVICE_START_PRE,
3814 SERVICE_START,
3815 SERVICE_START_POST,
3816 SERVICE_RUNNING,
3817 SERVICE_RELOAD,
3818 SERVICE_STOP,
3819 SERVICE_STOP_SIGABRT,
3820 SERVICE_STOP_SIGTERM,
3821 SERVICE_STOP_SIGKILL,
3822 SERVICE_STOP_POST,
3823 SERVICE_FINAL_SIGTERM,
3824 SERVICE_FINAL_SIGKILL);
3825 }
3826
3827 static const char* const service_restart_table[_SERVICE_RESTART_MAX] = {
3828 [SERVICE_RESTART_NO] = "no",
3829 [SERVICE_RESTART_ON_SUCCESS] = "on-success",
3830 [SERVICE_RESTART_ON_FAILURE] = "on-failure",
3831 [SERVICE_RESTART_ON_ABNORMAL] = "on-abnormal",
3832 [SERVICE_RESTART_ON_WATCHDOG] = "on-watchdog",
3833 [SERVICE_RESTART_ON_ABORT] = "on-abort",
3834 [SERVICE_RESTART_ALWAYS] = "always",
3835 };
3836
3837 DEFINE_STRING_TABLE_LOOKUP(service_restart, ServiceRestart);
3838
3839 static const char* const service_type_table[_SERVICE_TYPE_MAX] = {
3840 [SERVICE_SIMPLE] = "simple",
3841 [SERVICE_FORKING] = "forking",
3842 [SERVICE_ONESHOT] = "oneshot",
3843 [SERVICE_DBUS] = "dbus",
3844 [SERVICE_NOTIFY] = "notify",
3845 [SERVICE_IDLE] = "idle"
3846 };
3847
3848 DEFINE_STRING_TABLE_LOOKUP(service_type, ServiceType);
3849
3850 static const char* const service_exec_command_table[_SERVICE_EXEC_COMMAND_MAX] = {
3851 [SERVICE_EXEC_START_PRE] = "ExecStartPre",
3852 [SERVICE_EXEC_START] = "ExecStart",
3853 [SERVICE_EXEC_START_POST] = "ExecStartPost",
3854 [SERVICE_EXEC_RELOAD] = "ExecReload",
3855 [SERVICE_EXEC_STOP] = "ExecStop",
3856 [SERVICE_EXEC_STOP_POST] = "ExecStopPost",
3857 };
3858
3859 DEFINE_STRING_TABLE_LOOKUP(service_exec_command, ServiceExecCommand);
3860
3861 static const char* const notify_state_table[_NOTIFY_STATE_MAX] = {
3862 [NOTIFY_UNKNOWN] = "unknown",
3863 [NOTIFY_READY] = "ready",
3864 [NOTIFY_RELOADING] = "reloading",
3865 [NOTIFY_STOPPING] = "stopping",
3866 };
3867
3868 DEFINE_STRING_TABLE_LOOKUP(notify_state, NotifyState);
3869
3870 static const char* const service_result_table[_SERVICE_RESULT_MAX] = {
3871 [SERVICE_SUCCESS] = "success",
3872 [SERVICE_FAILURE_RESOURCES] = "resources",
3873 [SERVICE_FAILURE_PROTOCOL] = "protocol",
3874 [SERVICE_FAILURE_TIMEOUT] = "timeout",
3875 [SERVICE_FAILURE_EXIT_CODE] = "exit-code",
3876 [SERVICE_FAILURE_SIGNAL] = "signal",
3877 [SERVICE_FAILURE_CORE_DUMP] = "core-dump",
3878 [SERVICE_FAILURE_WATCHDOG] = "watchdog",
3879 [SERVICE_FAILURE_START_LIMIT_HIT] = "start-limit-hit",
3880 };
3881
3882 DEFINE_STRING_TABLE_LOOKUP(service_result, ServiceResult);
3883
3884 const UnitVTable service_vtable = {
3885 .object_size = sizeof(Service),
3886 .exec_context_offset = offsetof(Service, exec_context),
3887 .cgroup_context_offset = offsetof(Service, cgroup_context),
3888 .kill_context_offset = offsetof(Service, kill_context),
3889 .exec_runtime_offset = offsetof(Service, exec_runtime),
3890 .dynamic_creds_offset = offsetof(Service, dynamic_creds),
3891
3892 .sections =
3893 "Unit\0"
3894 "Service\0"
3895 "Install\0",
3896 .private_section = "Service",
3897
3898 .can_transient = true,
3899 .can_delegate = true,
3900
3901 .init = service_init,
3902 .done = service_done,
3903 .load = service_load,
3904 .release_resources = service_release_resources,
3905
3906 .coldplug = service_coldplug,
3907
3908 .dump = service_dump,
3909
3910 .start = service_start,
3911 .stop = service_stop,
3912 .reload = service_reload,
3913
3914 .can_reload = service_can_reload,
3915
3916 .kill = service_kill,
3917
3918 .serialize = service_serialize,
3919 .deserialize_item = service_deserialize_item,
3920
3921 .active_state = service_active_state,
3922 .sub_state_to_string = service_sub_state_to_string,
3923
3924 .will_restart = service_will_restart,
3925
3926 .may_gc = service_may_gc,
3927
3928 .sigchld_event = service_sigchld_event,
3929
3930 .reset_failed = service_reset_failed,
3931
3932 .notify_cgroup_empty = service_notify_cgroup_empty_event,
3933 .notify_message = service_notify_message,
3934
3935 .main_pid = service_main_pid,
3936 .control_pid = service_control_pid,
3937
3938 .bus_name_owner_change = service_bus_name_owner_change,
3939
3940 .bus_vtable = bus_service_vtable,
3941 .bus_set_property = bus_service_set_property,
3942 .bus_commit_properties = bus_service_commit_properties,
3943
3944 .get_timeout = service_get_timeout,
3945 .needs_console = service_needs_console,
3946
3947 .status_message_formats = {
3948 .starting_stopping = {
3949 [0] = "Starting %s...",
3950 [1] = "Stopping %s...",
3951 },
3952 .finished_start_job = {
3953 [JOB_DONE] = "Started %s.",
3954 [JOB_FAILED] = "Failed to start %s.",
3955 },
3956 .finished_stop_job = {
3957 [JOB_DONE] = "Stopped %s.",
3958 [JOB_FAILED] = "Stopped (with error) %s.",
3959 },
3960 },
3961 };
Unnamed repository; edit this file 'description' to name the repository.