]> git.ipfire.org Git - thirdparty/systemd.git/blob - src/network/networkd-dhcp-server.c
Merge pull request #21359 from yuwata/network-split-route
[thirdparty/systemd.git] / src / network / networkd-dhcp-server.c
1 /* SPDX-License-Identifier: LGPL-2.1-or-later */
2
3 #include <netinet/in.h>
4 #include <linux/if_arp.h>
5 #include <linux/if.h>
6
7 #include "sd-dhcp-server.h"
8
9 #include "fd-util.h"
10 #include "fileio.h"
11 #include "networkd-address.h"
12 #include "networkd-dhcp-server-bus.h"
13 #include "networkd-dhcp-server-static-lease.h"
14 #include "networkd-dhcp-server.h"
15 #include "networkd-link.h"
16 #include "networkd-manager.h"
17 #include "networkd-network.h"
18 #include "networkd-queue.h"
19 #include "networkd-route-util.h"
20 #include "parse-util.h"
21 #include "socket-netlink.h"
22 #include "string-table.h"
23 #include "string-util.h"
24 #include "strv.h"
25
26 static bool link_dhcp4_server_enabled(Link *link) {
27 assert(link);
28
29 if (link->flags & IFF_LOOPBACK)
30 return false;
31
32 if (!link->network)
33 return false;
34
35 if (link->iftype == ARPHRD_CAN)
36 return false;
37
38 return link->network->dhcp_server;
39 }
40
41 void network_adjust_dhcp_server(Network *network) {
42 assert(network);
43
44 if (!network->dhcp_server)
45 return;
46
47 if (network->bond) {
48 log_warning("%s: DHCPServer= is enabled for bond slave. Disabling DHCP server.",
49 network->filename);
50 network->dhcp_server = false;
51 return;
52 }
53
54 if (!in4_addr_is_set(&network->dhcp_server_address)) {
55 Address *address;
56 bool have = false;
57
58 ORDERED_HASHMAP_FOREACH(address, network->addresses_by_section) {
59 if (section_is_invalid(address->section))
60 continue;
61 if (address->family == AF_INET &&
62 !in4_addr_is_localhost(&address->in_addr.in) &&
63 in4_addr_is_null(&address->in_addr_peer.in)) {
64 have = true;
65 break;
66 }
67 }
68 if (!have) {
69 log_warning("%s: DHCPServer= is enabled, but no static address configured. "
70 "Disabling DHCP server.",
71 network->filename);
72 network->dhcp_server = false;
73 return;
74 }
75 }
76 }
77
78 int link_request_dhcp_server_address(Link *link) {
79 _cleanup_(address_freep) Address *address = NULL;
80 Address *existing;
81 int r;
82
83 assert(link);
84 assert(link->network);
85
86 if (!link_dhcp4_server_enabled(link))
87 return 0;
88
89 if (!in4_addr_is_set(&link->network->dhcp_server_address))
90 return 0;
91
92 r = address_new(&address);
93 if (r < 0)
94 return r;
95
96 address->source = NETWORK_CONFIG_SOURCE_STATIC;
97 address->family = AF_INET;
98 address->in_addr.in = link->network->dhcp_server_address;
99 address->prefixlen = link->network->dhcp_server_address_prefixlen;
100 address_set_broadcast(address);
101
102 if (address_get(link, address, &existing) >= 0 &&
103 address_exists(existing) &&
104 existing->source == NETWORK_CONFIG_SOURCE_STATIC)
105 /* The same address seems explicitly configured in [Address] or [Network] section.
106 * Configure the DHCP server address only when it is not. */
107 return 0;
108
109 return link_request_static_address(link, TAKE_PTR(address), true);
110 }
111
112 static int link_find_dhcp_server_address(Link *link, Address **ret) {
113 Address *address;
114
115 assert(link);
116 assert(link->network);
117
118 /* If ServerAddress= is specified, then use the address. */
119 if (in4_addr_is_set(&link->network->dhcp_server_address))
120 return link_get_ipv4_address(link, &link->network->dhcp_server_address,
121 link->network->dhcp_server_address_prefixlen, ret);
122
123 /* If not, then select one from static addresses. */
124 SET_FOREACH(address, link->addresses) {
125 if (address->source != NETWORK_CONFIG_SOURCE_STATIC)
126 continue;
127 if (!address_exists(address))
128 continue;
129 if (address->family != AF_INET)
130 continue;
131 if (in4_addr_is_localhost(&address->in_addr.in))
132 continue;
133 if (in4_addr_is_set(&address->in_addr_peer.in))
134 continue;
135
136 *ret = address;
137 return 0;
138 }
139
140 return -ENOENT;
141 }
142
143 static int dhcp_server_find_uplink(Link *link, Link **ret) {
144 assert(link);
145
146 if (link->network->dhcp_server_uplink_name)
147 return link_get_by_name(link->manager, link->network->dhcp_server_uplink_name, ret);
148
149 if (link->network->dhcp_server_uplink_index > 0)
150 return link_get_by_index(link->manager, link->network->dhcp_server_uplink_index, ret);
151
152 if (link->network->dhcp_server_uplink_index == UPLINK_INDEX_AUTO) {
153 /* It is not necessary to propagate error in automatic selection. */
154 if (manager_find_uplink(link->manager, AF_INET, link, ret) < 0)
155 *ret = NULL;
156 return 0;
157 }
158
159 *ret = NULL;
160 return 0;
161 }
162
163 static int link_push_uplink_to_dhcp_server(
164 Link *link,
165 sd_dhcp_lease_server_type_t what,
166 sd_dhcp_server *s) {
167
168 _cleanup_free_ struct in_addr *addresses = NULL;
169 bool use_dhcp_lease_data = true;
170 size_t n_addresses = 0;
171
172 assert(link);
173
174 if (!link->network)
175 return 0;
176 assert(link->network);
177
178 log_link_debug(link, "Copying %s from link", dhcp_lease_server_type_to_string(what));
179
180 switch (what) {
181
182 case SD_DHCP_LEASE_DNS:
183 /* For DNS we have a special case. We the data configured explicitly locally along with the
184 * data from the DHCP lease. */
185
186 for (unsigned i = 0; i < link->network->n_dns; i++) {
187 struct in_addr ia;
188
189 /* Only look for IPv4 addresses */
190 if (link->network->dns[i]->family != AF_INET)
191 continue;
192
193 ia = link->network->dns[i]->address.in;
194
195 /* Never propagate obviously borked data */
196 if (in4_addr_is_null(&ia) || in4_addr_is_localhost(&ia))
197 continue;
198
199 if (!GREEDY_REALLOC(addresses, n_addresses + 1))
200 return log_oom();
201
202 addresses[n_addresses++] = ia;
203 }
204
205 use_dhcp_lease_data = link->network->dhcp_use_dns;
206 break;
207
208 case SD_DHCP_LEASE_NTP: {
209 char **i;
210
211 /* For NTP things are similar, but for NTP hostnames can be configured too, which we cannot
212 * propagate via DHCP. Hence let's only propagate those which are IP addresses. */
213
214 STRV_FOREACH(i, link->network->ntp) {
215 union in_addr_union ia;
216
217 if (in_addr_from_string(AF_INET, *i, &ia) < 0)
218 continue;
219
220 /* Never propagate obviously borked data */
221 if (in4_addr_is_null(&ia.in) || in4_addr_is_localhost(&ia.in))
222 continue;
223
224 if (!GREEDY_REALLOC(addresses, n_addresses + 1))
225 return log_oom();
226
227 addresses[n_addresses++] = ia.in;
228 }
229
230 use_dhcp_lease_data = link->network->dhcp_use_ntp;
231 break;
232 }
233
234 case SD_DHCP_LEASE_SIP:
235
236 /* For SIP we don't allow explicit, local configuration, but there's control whether to use the data */
237 use_dhcp_lease_data = link->network->dhcp_use_sip;
238 break;
239
240 case SD_DHCP_LEASE_POP3:
241 case SD_DHCP_LEASE_SMTP:
242 case SD_DHCP_LEASE_LPR:
243 /* For the other server types we currently do not allow local configuration of server data,
244 * since there are typically no local consumers of the data. */
245 break;
246
247 default:
248 assert_not_reached();
249 }
250
251 if (use_dhcp_lease_data && link->dhcp_lease) {
252 const struct in_addr *da;
253
254 int n = sd_dhcp_lease_get_servers(link->dhcp_lease, what, &da);
255 if (n > 0) {
256 if (!GREEDY_REALLOC(addresses, n_addresses + n))
257 return log_oom();
258
259 for (int j = 0; j < n; j++)
260 if (in4_addr_is_non_local(&da[j]))
261 addresses[n_addresses++] = da[j];
262 }
263 }
264
265 if (n_addresses <= 0)
266 return 0;
267
268 return sd_dhcp_server_set_servers(s, what, addresses, n_addresses);
269 }
270
271 static int dhcp4_server_parse_dns_server_string_and_warn(
272 const char *string,
273 struct in_addr **addresses,
274 size_t *n_addresses) {
275
276 for (;;) {
277 _cleanup_free_ char *word = NULL, *server_name = NULL;
278 union in_addr_union address;
279 int family, r, ifindex = 0;
280
281 r = extract_first_word(&string, &word, NULL, 0);
282 if (r < 0)
283 return r;
284 if (r == 0)
285 break;
286
287 r = in_addr_ifindex_name_from_string_auto(word, &family, &address, &ifindex, &server_name);
288 if (r < 0) {
289 log_warning_errno(r, "Failed to parse DNS server address '%s', ignoring: %m", word);
290 continue;
291 }
292
293 /* Only look for IPv4 addresses */
294 if (family != AF_INET)
295 continue;
296
297 /* Never propagate obviously borked data */
298 if (in4_addr_is_null(&address.in) || in4_addr_is_localhost(&address.in))
299 continue;
300
301 if (!GREEDY_REALLOC(*addresses, *n_addresses + 1))
302 return log_oom();
303
304 (*addresses)[(*n_addresses)++] = address.in;
305 }
306
307 return 0;
308 }
309
310 static int dhcp4_server_set_dns_from_resolve_conf(Link *link) {
311 _cleanup_free_ struct in_addr *addresses = NULL;
312 _cleanup_fclose_ FILE *f = NULL;
313 size_t n_addresses = 0;
314 int n = 0, r;
315
316 f = fopen(PRIVATE_UPLINK_RESOLV_CONF, "re");
317 if (!f) {
318 if (errno == ENOENT)
319 return 0;
320
321 return log_warning_errno(errno, "Failed to open " PRIVATE_UPLINK_RESOLV_CONF ": %m");
322 }
323
324 for (;;) {
325 _cleanup_free_ char *line = NULL;
326 const char *a;
327 char *l;
328
329 r = read_line(f, LONG_LINE_MAX, &line);
330 if (r < 0)
331 return log_error_errno(r, "Failed to read " PRIVATE_UPLINK_RESOLV_CONF ": %m");
332 if (r == 0)
333 break;
334
335 n++;
336
337 l = strstrip(line);
338 if (IN_SET(*l, '#', ';', 0))
339 continue;
340
341 a = first_word(l, "nameserver");
342 if (!a)
343 continue;
344
345 r = dhcp4_server_parse_dns_server_string_and_warn(a, &addresses, &n_addresses);
346 if (r < 0)
347 log_warning_errno(r, "Failed to parse DNS server address '%s', ignoring.", a);
348 }
349
350 if (n_addresses <= 0)
351 return 0;
352
353 return sd_dhcp_server_set_dns(link->dhcp_server, addresses, n_addresses);
354 }
355
356 static int dhcp4_server_configure(Link *link) {
357 bool acquired_uplink = false;
358 sd_dhcp_option *p;
359 DHCPStaticLease *static_lease;
360 Link *uplink = NULL;
361 Address *address;
362 bool bind_to_interface;
363 int r;
364
365 assert(link);
366
367 log_link_debug(link, "Configuring DHCP Server.");
368
369 if (link->dhcp_server)
370 return -EBUSY;
371
372 r = sd_dhcp_server_new(&link->dhcp_server, link->ifindex);
373 if (r < 0)
374 return r;
375
376 r = sd_dhcp_server_attach_event(link->dhcp_server, link->manager->event, 0);
377 if (r < 0)
378 return r;
379
380 r = sd_dhcp_server_set_callback(link->dhcp_server, dhcp_server_callback, link);
381 if (r < 0)
382 return log_link_warning_errno(link, r, "Failed to set callback for DHCPv4 server instance: %m");
383
384 r = link_find_dhcp_server_address(link, &address);
385 if (r < 0)
386 return log_link_error_errno(link, r, "Failed to find suitable address for DHCPv4 server instance: %m");
387
388 /* use the server address' subnet as the pool */
389 r = sd_dhcp_server_configure_pool(link->dhcp_server, &address->in_addr.in, address->prefixlen,
390 link->network->dhcp_server_pool_offset, link->network->dhcp_server_pool_size);
391 if (r < 0)
392 return log_link_error_errno(link, r, "Failed to configure address pool for DHCPv4 server instance: %m");
393
394 /* TODO:
395 r = sd_dhcp_server_set_router(link->dhcp_server, &main_address->in_addr.in);
396 if (r < 0)
397 return r;
398 */
399
400 if (link->network->dhcp_server_max_lease_time_usec > 0) {
401 r = sd_dhcp_server_set_max_lease_time(link->dhcp_server,
402 DIV_ROUND_UP(link->network->dhcp_server_max_lease_time_usec, USEC_PER_SEC));
403 if (r < 0)
404 return log_link_error_errno(link, r, "Failed to set maximum lease time for DHCPv4 server instance: %m");
405 }
406
407 if (link->network->dhcp_server_default_lease_time_usec > 0) {
408 r = sd_dhcp_server_set_default_lease_time(link->dhcp_server,
409 DIV_ROUND_UP(link->network->dhcp_server_default_lease_time_usec, USEC_PER_SEC));
410 if (r < 0)
411 return log_link_error_errno(link, r, "Failed to set default lease time for DHCPv4 server instance: %m");
412 }
413
414 for (sd_dhcp_lease_server_type_t type = 0; type < _SD_DHCP_LEASE_SERVER_TYPE_MAX; type ++) {
415
416 if (!link->network->dhcp_server_emit[type].emit)
417 continue;
418
419 if (link->network->dhcp_server_emit[type].n_addresses > 0)
420 /* Explicitly specified servers to emit */
421 r = sd_dhcp_server_set_servers(
422 link->dhcp_server,
423 type,
424 link->network->dhcp_server_emit[type].addresses,
425 link->network->dhcp_server_emit[type].n_addresses);
426 else {
427 /* Emission is requested, but nothing explicitly configured. Let's find a suitable upling */
428 if (!acquired_uplink) {
429 (void) dhcp_server_find_uplink(link, &uplink);
430 acquired_uplink = true;
431 }
432
433 if (uplink && uplink->network)
434 r = link_push_uplink_to_dhcp_server(uplink, type, link->dhcp_server);
435 else if (type == SD_DHCP_LEASE_DNS)
436 r = dhcp4_server_set_dns_from_resolve_conf(link);
437 else {
438 log_link_debug(link,
439 "Not emitting %s on link, couldn't find suitable uplink.",
440 dhcp_lease_server_type_to_string(type));
441 continue;
442 }
443 }
444
445 if (r < 0)
446 log_link_warning_errno(link, r,
447 "Failed to set %s for DHCP server, ignoring: %m",
448 dhcp_lease_server_type_to_string(type));
449 }
450
451 if (link->network->dhcp_server_emit_router) {
452 r = sd_dhcp_server_set_router(link->dhcp_server, &link->network->dhcp_server_router);
453 if (r < 0)
454 return log_link_error_errno(link, r, "Failed to set router address for DHCP server: %m");
455 }
456
457 r = sd_dhcp_server_set_relay_target(link->dhcp_server, &link->network->dhcp_server_relay_target);
458 if (r < 0)
459 return log_link_error_errno(link, r, "Failed to set relay target for DHCP server: %m");
460
461 bind_to_interface = sd_dhcp_server_is_in_relay_mode(link->dhcp_server) ? false : link->network->dhcp_server_bind_to_interface;
462 r = sd_dhcp_server_set_bind_to_interface(link->dhcp_server, bind_to_interface);
463 if (r < 0)
464 return log_link_error_errno(link, r, "Failed to set interface binding for DHCP server: %m");
465
466 r = sd_dhcp_server_set_relay_agent_information(link->dhcp_server, link->network->dhcp_server_relay_agent_circuit_id, link->network->dhcp_server_relay_agent_remote_id);
467 if (r < 0)
468 return log_link_error_errno(link, r, "Failed to set agent circuit/remote id for DHCP server: %m");
469
470 if (link->network->dhcp_server_emit_timezone) {
471 _cleanup_free_ char *buffer = NULL;
472 const char *tz = NULL;
473
474 if (link->network->dhcp_server_timezone)
475 tz = link->network->dhcp_server_timezone;
476 else {
477 r = get_timezone(&buffer);
478 if (r < 0)
479 log_link_warning_errno(link, r, "Failed to determine timezone, not sending timezone: %m");
480 else
481 tz = buffer;
482 }
483
484 if (tz) {
485 r = sd_dhcp_server_set_timezone(link->dhcp_server, tz);
486 if (r < 0)
487 return log_link_error_errno(link, r, "Failed to set timezone for DHCP server: %m");
488 }
489 }
490
491 ORDERED_HASHMAP_FOREACH(p, link->network->dhcp_server_send_options) {
492 r = sd_dhcp_server_add_option(link->dhcp_server, p);
493 if (r == -EEXIST)
494 continue;
495 if (r < 0)
496 return log_link_error_errno(link, r, "Failed to set DHCPv4 option: %m");
497 }
498
499 ORDERED_HASHMAP_FOREACH(p, link->network->dhcp_server_send_vendor_options) {
500 r = sd_dhcp_server_add_vendor_option(link->dhcp_server, p);
501 if (r == -EEXIST)
502 continue;
503 if (r < 0)
504 return log_link_error_errno(link, r, "Failed to set DHCPv4 option: %m");
505 }
506
507 HASHMAP_FOREACH(static_lease, link->network->dhcp_static_leases_by_section) {
508 r = sd_dhcp_server_set_static_lease(link->dhcp_server, &static_lease->address, static_lease->client_id, static_lease->client_id_size);
509 if (r < 0)
510 return log_link_error_errno(link, r, "Failed to set DHCPv4 static lease for DHCP server: %m");
511 }
512
513 r = sd_dhcp_server_start(link->dhcp_server);
514 if (r < 0)
515 return log_link_error_errno(link, r, "Could not start DHCPv4 server instance: %m");
516
517 log_link_debug(link, "Offering DHCPv4 leases");
518
519 return 1;
520 }
521
522 int link_request_dhcp_server(Link *link) {
523 assert(link);
524
525 if (!link_dhcp4_server_enabled(link))
526 return 0;
527
528 if (link->dhcp_server)
529 return 0;
530
531 log_link_debug(link, "Requesting DHCP server.");
532 return link_queue_request(link, REQUEST_TYPE_DHCP_SERVER, NULL, false, NULL, NULL, NULL);
533 }
534
535 static bool dhcp_server_is_ready_to_configure(Link *link) {
536 Link *uplink = NULL;
537 Address *a;
538
539 assert(link);
540
541 if (!link->network)
542 return false;
543
544 if (!IN_SET(link->state, LINK_STATE_CONFIGURING, LINK_STATE_CONFIGURED))
545 return false;
546
547 if (link->set_flags_messages > 0)
548 return false;
549
550 if (!link_has_carrier(link))
551 return false;
552
553 if (!link->static_addresses_configured)
554 return false;
555
556 if (link_find_dhcp_server_address(link, &a) < 0)
557 return false;
558
559 if (!address_is_ready(a))
560 return false;
561
562 if (dhcp_server_find_uplink(link, &uplink) < 0)
563 return false;
564
565 if (uplink && !uplink->network)
566 return false;
567
568 return true;
569 }
570
571 int request_process_dhcp_server(Request *req) {
572 assert(req);
573 assert(req->link);
574 assert(req->type == REQUEST_TYPE_DHCP_SERVER);
575
576 if (!dhcp_server_is_ready_to_configure(req->link))
577 return 0;
578
579 return dhcp4_server_configure(req->link);
580 }
581
582 int config_parse_dhcp_server_relay_agent_suboption(
583 const char *unit,
584 const char *filename,
585 unsigned line,
586 const char *section,
587 unsigned section_line,
588 const char *lvalue,
589 int ltype,
590 const char *rvalue,
591 void *data,
592 void *userdata) {
593
594 char **suboption_value = data;
595 char* p;
596
597 assert(filename);
598 assert(lvalue);
599 assert(rvalue);
600
601 if (isempty(rvalue)) {
602 *suboption_value = mfree(*suboption_value);
603 return 0;
604 }
605
606 p = startswith(rvalue, "string:");
607 if (!p) {
608 log_syntax(unit, LOG_WARNING, filename, line, 0,
609 "Failed to parse %s=%s'. Invalid format, ignoring.", lvalue, rvalue);
610 return 0;
611 }
612 return free_and_strdup(suboption_value, empty_to_null(p));
613 }
614
615 int config_parse_dhcp_server_emit(
616 const char *unit,
617 const char *filename,
618 unsigned line,
619 const char *section,
620 unsigned section_line,
621 const char *lvalue,
622 int ltype,
623 const char *rvalue,
624 void *data,
625 void *userdata) {
626
627 NetworkDHCPServerEmitAddress *emit = data;
628
629 assert(emit);
630 assert(rvalue);
631
632 for (const char *p = rvalue;;) {
633 _cleanup_free_ char *w = NULL;
634 union in_addr_union a;
635 int r;
636
637 r = extract_first_word(&p, &w, NULL, 0);
638 if (r == -ENOMEM)
639 return log_oom();
640 if (r < 0) {
641 log_syntax(unit, LOG_WARNING, filename, line, r,
642 "Failed to extract word, ignoring: %s", rvalue);
643 return 0;
644 }
645 if (r == 0)
646 return 0;
647
648 r = in_addr_from_string(AF_INET, w, &a);
649 if (r < 0) {
650 log_syntax(unit, LOG_WARNING, filename, line, r,
651 "Failed to parse %s= address '%s', ignoring: %m", lvalue, w);
652 continue;
653 }
654
655 struct in_addr *m = reallocarray(emit->addresses, emit->n_addresses + 1, sizeof(struct in_addr));
656 if (!m)
657 return log_oom();
658
659 emit->addresses = m;
660 emit->addresses[emit->n_addresses++] = a.in;
661 }
662 }
663
664 int config_parse_dhcp_server_address(
665 const char *unit,
666 const char *filename,
667 unsigned line,
668 const char *section,
669 unsigned section_line,
670 const char *lvalue,
671 int ltype,
672 const char *rvalue,
673 void *data,
674 void *userdata) {
675
676 Network *network = userdata;
677 union in_addr_union a;
678 unsigned char prefixlen;
679 int r;
680
681 assert(filename);
682 assert(lvalue);
683 assert(rvalue);
684
685 if (isempty(rvalue)) {
686 network->dhcp_server_address = (struct in_addr) {};
687 network->dhcp_server_address_prefixlen = 0;
688 return 0;
689 }
690
691 r = in_addr_prefix_from_string(rvalue, AF_INET, &a, &prefixlen);
692 if (r < 0) {
693 log_syntax(unit, LOG_WARNING, filename, line, r,
694 "Failed to parse %s=, ignoring assignment: %s", lvalue, rvalue);
695 return 0;
696 }
697 if (in4_addr_is_null(&a.in) || in4_addr_is_localhost(&a.in)) {
698 log_syntax(unit, LOG_WARNING, filename, line, 0,
699 "DHCP server address cannot be the ANY address or a localhost address, "
700 "ignoring assignment: %s", rvalue);
701 return 0;
702 }
703
704 network->dhcp_server_address = a.in;
705 network->dhcp_server_address_prefixlen = prefixlen;
706 return 0;
707 }