]> git.ipfire.org Git - thirdparty/systemd.git/blob - src/network/networkd-link.c
projects / thirdparty / systemd.git / blob
? search:
summary | shortlog | log | commit | commitdiff | tree
blame | history | raw | HEAD
Merge pull request #10658 from yuwata/udevd-worker-performance
[thirdparty/systemd.git] / src / network / networkd-link.c
1 /* SPDX-License-Identifier: LGPL-2.1+ */
2
3 #include <netinet/ether.h>
4 #include <linux/if.h>
5 #include <linux/can/netlink.h>
6 #include <unistd.h>
7 #include <stdio_ext.h>
8
9 #include "alloc-util.h"
10 #include "bus-util.h"
11 #include "dhcp-identifier.h"
12 #include "dhcp-lease-internal.h"
13 #include "fd-util.h"
14 #include "fileio.h"
15 #include "netlink-util.h"
16 #include "network-internal.h"
17 #include "networkd-ipv6-proxy-ndp.h"
18 #include "networkd-lldp-tx.h"
19 #include "networkd-manager.h"
20 #include "networkd-ndisc.h"
21 #include "networkd-radv.h"
22 #include "networkd-routing-policy-rule.h"
23 #include "set.h"
24 #include "socket-util.h"
25 #include "stdio-util.h"
26 #include "string-table.h"
27 #include "strv.h"
28 #include "util.h"
29 #include "virt.h"
30
31 DUID* link_get_duid(Link *link) {
32 if (link->network->duid.type != _DUID_TYPE_INVALID)
33 return &link->network->duid;
34 else
35 return &link->manager->duid;
36 }
37
38 static bool link_dhcp6_enabled(Link *link) {
39 assert(link);
40
41 if (!socket_ipv6_is_supported())
42 return false;
43
44 if (link->flags & IFF_LOOPBACK)
45 return false;
46
47 if (!link->network)
48 return false;
49
50 return link->network->dhcp & ADDRESS_FAMILY_IPV6;
51 }
52
53 static bool link_dhcp4_enabled(Link *link) {
54 assert(link);
55
56 if (link->flags & IFF_LOOPBACK)
57 return false;
58
59 if (!link->network)
60 return false;
61
62 return link->network->dhcp & ADDRESS_FAMILY_IPV4;
63 }
64
65 static bool link_dhcp4_server_enabled(Link *link) {
66 assert(link);
67
68 if (link->flags & IFF_LOOPBACK)
69 return false;
70
71 if (!link->network)
72 return false;
73
74 return link->network->dhcp_server;
75 }
76
77 static bool link_ipv4ll_enabled(Link *link) {
78 assert(link);
79
80 if (link->flags & IFF_LOOPBACK)
81 return false;
82
83 if (!link->network)
84 return false;
85
86 if (streq_ptr(link->kind, "wireguard"))
87 return false;
88
89 return link->network->link_local & ADDRESS_FAMILY_IPV4;
90 }
91
92 static bool link_ipv6ll_enabled(Link *link) {
93 assert(link);
94
95 if (!socket_ipv6_is_supported())
96 return false;
97
98 if (link->flags & IFF_LOOPBACK)
99 return false;
100
101 if (!link->network)
102 return false;
103
104 if (streq_ptr(link->kind, "wireguard"))
105 return false;
106
107 return link->network->link_local & ADDRESS_FAMILY_IPV6;
108 }
109
110 static bool link_ipv6_enabled(Link *link) {
111 assert(link);
112
113 if (!socket_ipv6_is_supported())
114 return false;
115
116 if (link->network->bridge)
117 return false;
118
119 /* DHCPv6 client will not be started if no IPv6 link-local address is configured. */
120 return link_ipv6ll_enabled(link) || network_has_static_ipv6_addresses(link->network);
121 }
122
123 static bool link_radv_enabled(Link *link) {
124 assert(link);
125
126 if (!link_ipv6ll_enabled(link))
127 return false;
128
129 return link->network->router_prefix_delegation != RADV_PREFIX_DELEGATION_NONE;
130 }
131
132 static bool link_lldp_rx_enabled(Link *link) {
133 assert(link);
134
135 if (link->flags & IFF_LOOPBACK)
136 return false;
137
138 if (link->iftype != ARPHRD_ETHER)
139 return false;
140
141 if (!link->network)
142 return false;
143
144 /* LLDP should be handled on bridge slaves as those have a direct
145 * connection to their peers not on the bridge master. Linux doesn't
146 * even (by default) forward lldp packets to the bridge master.*/
147 if (streq_ptr("bridge", link->kind))
148 return false;
149
150 return link->network->lldp_mode != LLDP_MODE_NO;
151 }
152
153 static bool link_lldp_emit_enabled(Link *link) {
154 assert(link);
155
156 if (link->flags & IFF_LOOPBACK)
157 return false;
158
159 if (link->iftype != ARPHRD_ETHER)
160 return false;
161
162 if (!link->network)
163 return false;
164
165 return link->network->lldp_emit != LLDP_EMIT_NO;
166 }
167
168 static bool link_ipv4_forward_enabled(Link *link) {
169 assert(link);
170
171 if (link->flags & IFF_LOOPBACK)
172 return false;
173
174 if (!link->network)
175 return false;
176
177 if (link->network->ip_forward == _ADDRESS_FAMILY_BOOLEAN_INVALID)
178 return false;
179
180 return link->network->ip_forward & ADDRESS_FAMILY_IPV4;
181 }
182
183 static bool link_ipv6_forward_enabled(Link *link) {
184 assert(link);
185
186 if (!socket_ipv6_is_supported())
187 return false;
188
189 if (link->flags & IFF_LOOPBACK)
190 return false;
191
192 if (!link->network)
193 return false;
194
195 if (link->network->ip_forward == _ADDRESS_FAMILY_BOOLEAN_INVALID)
196 return false;
197
198 return link->network->ip_forward & ADDRESS_FAMILY_IPV6;
199 }
200
201 static bool link_proxy_arp_enabled(Link *link) {
202 assert(link);
203
204 if (link->flags & IFF_LOOPBACK)
205 return false;
206
207 if (!link->network)
208 return false;
209
210 if (link->network->proxy_arp < 0)
211 return false;
212
213 return true;
214 }
215
216 static bool link_ipv6_accept_ra_enabled(Link *link) {
217 assert(link);
218
219 if (!socket_ipv6_is_supported())
220 return false;
221
222 if (link->flags & IFF_LOOPBACK)
223 return false;
224
225 if (!link->network)
226 return false;
227
228 if (!link_ipv6ll_enabled(link))
229 return false;
230
231 /* If unset use system default (enabled if local forwarding is disabled.
232 * disabled if local forwarding is enabled).
233 * If set, ignore or enforce RA independent of local forwarding state.
234 */
235 if (link->network->ipv6_accept_ra < 0)
236 /* default to accept RA if ip_forward is disabled and ignore RA if ip_forward is enabled */
237 return !link_ipv6_forward_enabled(link);
238 else if (link->network->ipv6_accept_ra > 0)
239 /* accept RA even if ip_forward is enabled */
240 return true;
241 else
242 /* ignore RA */
243 return false;
244 }
245
246 static IPv6PrivacyExtensions link_ipv6_privacy_extensions(Link *link) {
247 assert(link);
248
249 if (!socket_ipv6_is_supported())
250 return _IPV6_PRIVACY_EXTENSIONS_INVALID;
251
252 if (link->flags & IFF_LOOPBACK)
253 return _IPV6_PRIVACY_EXTENSIONS_INVALID;
254
255 if (!link->network)
256 return _IPV6_PRIVACY_EXTENSIONS_INVALID;
257
258 return link->network->ipv6_privacy_extensions;
259 }
260
261 static int link_enable_ipv6(Link *link) {
262 const char *p = NULL;
263 bool disabled;
264 int r;
265
266 if (link->flags & IFF_LOOPBACK)
267 return 0;
268
269 disabled = !link_ipv6_enabled(link);
270
271 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/disable_ipv6");
272
273 r = write_string_file(p, one_zero(disabled), WRITE_STRING_FILE_VERIFY_ON_FAILURE | WRITE_STRING_FILE_DISABLE_BUFFER);
274 if (r < 0)
275 log_link_warning_errno(link, r, "Cannot %s IPv6 for interface %s: %m",
276 enable_disable(!disabled), link->ifname);
277 else
278 log_link_info(link, "IPv6 successfully %sd", enable_disable(!disabled));
279
280 return 0;
281 }
282
283 void link_update_operstate(Link *link) {
284 LinkOperationalState operstate;
285 assert(link);
286
287 if (link->kernel_operstate == IF_OPER_DORMANT)
288 operstate = LINK_OPERSTATE_DORMANT;
289 else if (link_has_carrier(link)) {
290 Address *address;
291 uint8_t scope = RT_SCOPE_NOWHERE;
292 Iterator i;
293
294 /* if we have carrier, check what addresses we have */
295 SET_FOREACH(address, link->addresses, i) {
296 if (!address_is_ready(address))
297 continue;
298
299 if (address->scope < scope)
300 scope = address->scope;
301 }
302
303 /* for operstate we also take foreign addresses into account */
304 SET_FOREACH(address, link->addresses_foreign, i) {
305 if (!address_is_ready(address))
306 continue;
307
308 if (address->scope < scope)
309 scope = address->scope;
310 }
311
312 if (scope < RT_SCOPE_SITE)
313 /* universally accessible addresses found */
314 operstate = LINK_OPERSTATE_ROUTABLE;
315 else if (scope < RT_SCOPE_HOST)
316 /* only link or site local addresses found */
317 operstate = LINK_OPERSTATE_DEGRADED;
318 else
319 /* no useful addresses found */
320 operstate = LINK_OPERSTATE_CARRIER;
321 } else if (link->flags & IFF_UP)
322 operstate = LINK_OPERSTATE_NO_CARRIER;
323 else
324 operstate = LINK_OPERSTATE_OFF;
325
326 if (link->operstate != operstate) {
327 link->operstate = operstate;
328 link_send_changed(link, "OperationalState", NULL);
329 link_dirty(link);
330 }
331 }
332
333 #define FLAG_STRING(string, flag, old, new) \
334 (((old ^ new) & flag) \
335 ? ((old & flag) ? (" -" string) : (" +" string)) \
336 : "")
337
338 static int link_update_flags(Link *link, sd_netlink_message *m) {
339 unsigned flags, unknown_flags_added, unknown_flags_removed, unknown_flags;
340 uint8_t operstate;
341 int r;
342
343 assert(link);
344
345 r = sd_rtnl_message_link_get_flags(m, &flags);
346 if (r < 0)
347 return log_link_warning_errno(link, r, "Could not get link flags: %m");
348
349 r = sd_netlink_message_read_u8(m, IFLA_OPERSTATE, &operstate);
350 if (r < 0)
351 /* if we got a message without operstate, take it to mean
352 the state was unchanged */
353 operstate = link->kernel_operstate;
354
355 if ((link->flags == flags) && (link->kernel_operstate == operstate))
356 return 0;
357
358 if (link->flags != flags) {
359 log_link_debug(link, "Flags change:%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s",
360 FLAG_STRING("LOOPBACK", IFF_LOOPBACK, link->flags, flags),
361 FLAG_STRING("MASTER", IFF_MASTER, link->flags, flags),
362 FLAG_STRING("SLAVE", IFF_SLAVE, link->flags, flags),
363 FLAG_STRING("UP", IFF_UP, link->flags, flags),
364 FLAG_STRING("DORMANT", IFF_DORMANT, link->flags, flags),
365 FLAG_STRING("LOWER_UP", IFF_LOWER_UP, link->flags, flags),
366 FLAG_STRING("RUNNING", IFF_RUNNING, link->flags, flags),
367 FLAG_STRING("MULTICAST", IFF_MULTICAST, link->flags, flags),
368 FLAG_STRING("BROADCAST", IFF_BROADCAST, link->flags, flags),
369 FLAG_STRING("POINTOPOINT", IFF_POINTOPOINT, link->flags, flags),
370 FLAG_STRING("PROMISC", IFF_PROMISC, link->flags, flags),
371 FLAG_STRING("ALLMULTI", IFF_ALLMULTI, link->flags, flags),
372 FLAG_STRING("PORTSEL", IFF_PORTSEL, link->flags, flags),
373 FLAG_STRING("AUTOMEDIA", IFF_AUTOMEDIA, link->flags, flags),
374 FLAG_STRING("DYNAMIC", IFF_DYNAMIC, link->flags, flags),
375 FLAG_STRING("NOARP", IFF_NOARP, link->flags, flags),
376 FLAG_STRING("NOTRAILERS", IFF_NOTRAILERS, link->flags, flags),
377 FLAG_STRING("DEBUG", IFF_DEBUG, link->flags, flags),
378 FLAG_STRING("ECHO", IFF_ECHO, link->flags, flags));
379
380 unknown_flags = ~(IFF_LOOPBACK | IFF_MASTER | IFF_SLAVE | IFF_UP |
381 IFF_DORMANT | IFF_LOWER_UP | IFF_RUNNING |
382 IFF_MULTICAST | IFF_BROADCAST | IFF_POINTOPOINT |
383 IFF_PROMISC | IFF_ALLMULTI | IFF_PORTSEL |
384 IFF_AUTOMEDIA | IFF_DYNAMIC | IFF_NOARP |
385 IFF_NOTRAILERS | IFF_DEBUG | IFF_ECHO);
386 unknown_flags_added = ((link->flags ^ flags) & flags & unknown_flags);
387 unknown_flags_removed = ((link->flags ^ flags) & link->flags & unknown_flags);
388
389 /* link flags are currently at most 18 bits, let's align to
390 * printing 20 */
391 if (unknown_flags_added)
392 log_link_debug(link,
393 "Unknown link flags gained: %#.5x (ignoring)",
394 unknown_flags_added);
395
396 if (unknown_flags_removed)
397 log_link_debug(link,
398 "Unknown link flags lost: %#.5x (ignoring)",
399 unknown_flags_removed);
400 }
401
402 link->flags = flags;
403 link->kernel_operstate = operstate;
404
405 link_update_operstate(link);
406
407 return 0;
408 }
409
410 DEFINE_TRIVIAL_CLEANUP_FUNC(Link*, link_unref);
411
412 static int link_new(Manager *manager, sd_netlink_message *message, Link **ret) {
413 _cleanup_(link_unrefp) Link *link = NULL;
414 uint16_t type;
415 const char *ifname, *kind = NULL;
416 int r, ifindex;
417 unsigned short iftype;
418
419 assert(manager);
420 assert(message);
421 assert(ret);
422
423 /* check for link kind */
424 r = sd_netlink_message_enter_container(message, IFLA_LINKINFO);
425 if (r == 0) {
426 (void) sd_netlink_message_read_string(message, IFLA_INFO_KIND, &kind);
427 r = sd_netlink_message_exit_container(message);
428 if (r < 0)
429 return r;
430 }
431
432 r = sd_netlink_message_get_type(message, &type);
433 if (r < 0)
434 return r;
435 else if (type != RTM_NEWLINK)
436 return -EINVAL;
437
438 r = sd_rtnl_message_link_get_ifindex(message, &ifindex);
439 if (r < 0)
440 return r;
441 else if (ifindex <= 0)
442 return -EINVAL;
443
444 r = sd_rtnl_message_link_get_type(message, &iftype);
445 if (r < 0)
446 return r;
447
448 r = sd_netlink_message_read_string(message, IFLA_IFNAME, &ifname);
449 if (r < 0)
450 return r;
451
452 link = new0(Link, 1);
453 if (!link)
454 return -ENOMEM;
455
456 link->n_ref = 1;
457 link->manager = manager;
458 link->state = LINK_STATE_PENDING;
459 link->rtnl_extended_attrs = true;
460 link->ifindex = ifindex;
461 link->iftype = iftype;
462 link->ifname = strdup(ifname);
463 if (!link->ifname)
464 return -ENOMEM;
465
466 if (kind) {
467 link->kind = strdup(kind);
468 if (!link->kind)
469 return -ENOMEM;
470 }
471
472 r = sd_netlink_message_read_u32(message, IFLA_MASTER, (uint32_t *)&link->master_ifindex);
473 if (r < 0)
474 log_link_debug_errno(link, r, "New device has no master, continuing without");
475
476 r = sd_netlink_message_read_ether_addr(message, IFLA_ADDRESS, &link->mac);
477 if (r < 0)
478 log_link_debug_errno(link, r, "MAC address not found for new device, continuing without");
479
480 if (asprintf(&link->state_file, "/run/systemd/netif/links/%d", link->ifindex) < 0)
481 return -ENOMEM;
482
483 if (asprintf(&link->lease_file, "/run/systemd/netif/leases/%d", link->ifindex) < 0)
484 return -ENOMEM;
485
486 if (asprintf(&link->lldp_file, "/run/systemd/netif/lldp/%d", link->ifindex) < 0)
487 return -ENOMEM;
488
489 r = hashmap_ensure_allocated(&manager->links, NULL);
490 if (r < 0)
491 return r;
492
493 r = hashmap_put(manager->links, INT_TO_PTR(link->ifindex), link);
494 if (r < 0)
495 return r;
496
497 r = link_update_flags(link, message);
498 if (r < 0)
499 return r;
500
501 *ret = TAKE_PTR(link);
502
503 return 0;
504 }
505
506 static void link_detach_from_manager(Link *link) {
507 if (!link || !link->manager)
508 return;
509
510 hashmap_remove(link->manager->links, INT_TO_PTR(link->ifindex));
511 set_remove(link->manager->links_requesting_uuid, link);
512 link_clean(link);
513
514 link->manager = NULL;
515 }
516
517 static Link *link_free(Link *link) {
518 Address *address;
519 Link *carrier;
520 Route *route;
521 Iterator i;
522
523 assert(link);
524
525 while ((route = set_first(link->routes)))
526 route_free(route);
527
528 while ((route = set_first(link->routes_foreign)))
529 route_free(route);
530
531 link->routes = set_free(link->routes);
532 link->routes_foreign = set_free(link->routes_foreign);
533
534 while ((address = set_first(link->addresses)))
535 address_free(address);
536
537 while ((address = set_first(link->addresses_foreign)))
538 address_free(address);
539
540 link->addresses = set_free(link->addresses);
541 link->addresses_foreign = set_free(link->addresses_foreign);
542
543 while ((address = link->pool_addresses)) {
544 LIST_REMOVE(addresses, link->pool_addresses, address);
545 address_free(address);
546 }
547
548 sd_dhcp_server_unref(link->dhcp_server);
549 sd_dhcp_client_unref(link->dhcp_client);
550 sd_dhcp_lease_unref(link->dhcp_lease);
551
552 link_lldp_emit_stop(link);
553
554 free(link->lease_file);
555
556 sd_lldp_unref(link->lldp);
557 free(link->lldp_file);
558
559 ndisc_flush(link);
560
561 sd_ipv4ll_unref(link->ipv4ll);
562 sd_dhcp6_client_unref(link->dhcp6_client);
563 sd_ndisc_unref(link->ndisc);
564 sd_radv_unref(link->radv);
565
566 link_detach_from_manager(link);
567
568 free(link->ifname);
569
570 free(link->kind);
571
572 (void) unlink(link->state_file);
573 free(link->state_file);
574
575 sd_device_unref(link->sd_device);
576
577 HASHMAP_FOREACH (carrier, link->bound_to_links, i)
578 hashmap_remove(link->bound_to_links, INT_TO_PTR(carrier->ifindex));
579 hashmap_free(link->bound_to_links);
580
581 HASHMAP_FOREACH (carrier, link->bound_by_links, i)
582 hashmap_remove(link->bound_by_links, INT_TO_PTR(carrier->ifindex));
583 hashmap_free(link->bound_by_links);
584
585 return mfree(link);
586 }
587
588 DEFINE_TRIVIAL_REF_UNREF_FUNC(Link, link, link_free);
589
590 void link_netlink_destroy_callback(void *userdata) {
591 Link *link = userdata;
592
593 assert(userdata);
594
595 link_unref(link);
596 }
597
598 int link_get(Manager *m, int ifindex, Link **ret) {
599 Link *link;
600
601 assert(m);
602 assert(ifindex);
603 assert(ret);
604
605 link = hashmap_get(m->links, INT_TO_PTR(ifindex));
606 if (!link)
607 return -ENODEV;
608
609 *ret = link;
610
611 return 0;
612 }
613
614 static void link_set_state(Link *link, LinkState state) {
615 assert(link);
616
617 if (link->state == state)
618 return;
619
620 link->state = state;
621
622 link_send_changed(link, "AdministrativeState", NULL);
623 }
624
625 static void link_enter_unmanaged(Link *link) {
626 assert(link);
627
628 log_link_debug(link, "Unmanaged");
629
630 link_set_state(link, LINK_STATE_UNMANAGED);
631
632 link_dirty(link);
633 }
634
635 static int link_stop_clients(Link *link) {
636 int r = 0, k;
637
638 assert(link);
639 assert(link->manager);
640 assert(link->manager->event);
641
642 if (link->dhcp_client) {
643 k = sd_dhcp_client_stop(link->dhcp_client);
644 if (k < 0)
645 r = log_link_warning_errno(link, k, "Could not stop DHCPv4 client: %m");
646 }
647
648 if (link->ipv4ll) {
649 k = sd_ipv4ll_stop(link->ipv4ll);
650 if (k < 0)
651 r = log_link_warning_errno(link, k, "Could not stop IPv4 link-local: %m");
652 }
653
654 if (link->dhcp6_client) {
655 k = sd_dhcp6_client_stop(link->dhcp6_client);
656 if (k < 0)
657 r = log_link_warning_errno(link, k, "Could not stop DHCPv6 client: %m");
658 }
659
660 if (link->ndisc) {
661 k = sd_ndisc_stop(link->ndisc);
662 if (k < 0)
663 r = log_link_warning_errno(link, k, "Could not stop IPv6 Router Discovery: %m");
664 }
665
666 if (link->radv) {
667 k = sd_radv_stop(link->radv);
668 if (k < 0)
669 r = log_link_warning_errno(link, k, "Could not stop IPv6 Router Advertisement: %m");
670 }
671
672 link_lldp_emit_stop(link);
673 return r;
674 }
675
676 void link_enter_failed(Link *link) {
677 assert(link);
678
679 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
680 return;
681
682 log_link_warning(link, "Failed");
683
684 link_set_state(link, LINK_STATE_FAILED);
685
686 link_stop_clients(link);
687
688 link_dirty(link);
689 }
690
691 static Address* link_find_dhcp_server_address(Link *link) {
692 Address *address;
693
694 assert(link);
695 assert(link->network);
696
697 /* The first statically configured address if there is any */
698 LIST_FOREACH(addresses, address, link->network->static_addresses) {
699
700 if (address->family != AF_INET)
701 continue;
702
703 if (in_addr_is_null(address->family, &address->in_addr))
704 continue;
705
706 return address;
707 }
708
709 /* If that didn't work, find a suitable address we got from the pool */
710 LIST_FOREACH(addresses, address, link->pool_addresses) {
711 if (address->family != AF_INET)
712 continue;
713
714 return address;
715 }
716
717 return NULL;
718 }
719
720 static void link_enter_configured(Link *link) {
721 assert(link);
722 assert(link->network);
723
724 if (link->state != LINK_STATE_SETTING_ROUTES)
725 return;
726
727 log_link_info(link, "Configured");
728
729 link_set_state(link, LINK_STATE_CONFIGURED);
730
731 link_dirty(link);
732 }
733
734 void link_check_ready(Link *link) {
735 Address *a;
736 Iterator i;
737
738 assert(link);
739
740 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
741 return;
742
743 if (!link->network)
744 return;
745
746 if (!link->static_routes_configured)
747 return;
748
749 if (!link->routing_policy_rules_configured)
750 return;
751
752 if (link_ipv4ll_enabled(link))
753 if (!link->ipv4ll_address ||
754 !link->ipv4ll_route)
755 return;
756
757 if (!link->network->bridge) {
758
759 if (link_ipv6ll_enabled(link))
760 if (in_addr_is_null(AF_INET6, (const union in_addr_union*) &link->ipv6ll_address) > 0)
761 return;
762
763 if ((link_dhcp4_enabled(link) && !link_dhcp6_enabled(link) &&
764 !link->dhcp4_configured) ||
765 (link_dhcp6_enabled(link) && !link_dhcp4_enabled(link) &&
766 !link->dhcp6_configured) ||
767 (link_dhcp4_enabled(link) && link_dhcp6_enabled(link) &&
768 !link->dhcp4_configured && !link->dhcp6_configured))
769 return;
770
771 if (link_ipv6_accept_ra_enabled(link) && !link->ndisc_configured)
772 return;
773 }
774
775 SET_FOREACH(a, link->addresses, i)
776 if (!address_is_ready(a))
777 return;
778
779 if (link->state != LINK_STATE_CONFIGURED)
780 link_enter_configured(link);
781
782 return;
783 }
784
785 static int link_set_routing_policy_rule(Link *link) {
786 RoutingPolicyRule *rule, *rrule = NULL;
787 int r;
788
789 assert(link);
790 assert(link->network);
791
792 LIST_FOREACH(rules, rule, link->network->rules) {
793 r = routing_policy_rule_get(link->manager, rule->family, &rule->from, rule->from_prefixlen, &rule->to,
794 rule->to_prefixlen, rule->tos, rule->fwmark, rule->table, rule->iif, rule->oif, &rrule);
795 if (r == 0) {
796 (void) routing_policy_rule_make_local(link->manager, rrule);
797 continue;
798 }
799
800 r = routing_policy_rule_configure(rule, link, link_routing_policy_rule_handler, false);
801 if (r < 0) {
802 log_link_warning_errno(link, r, "Could not set routing policy rules: %m");
803 link_enter_failed(link);
804 return r;
805 }
806
807 link->routing_policy_rule_messages++;
808 }
809
810 routing_policy_rule_purge(link->manager, link);
811 if (link->routing_policy_rule_messages == 0) {
812 link->routing_policy_rules_configured = true;
813 link_check_ready(link);
814 } else
815 log_link_debug(link, "Setting routing policy rules");
816
817 return 0;
818 }
819
820 static int route_handler(sd_netlink *rtnl, sd_netlink_message *m, void *userdata) {
821 Link *link = userdata;
822 int r;
823
824 assert(link);
825 assert(link->route_messages > 0);
826 assert(IN_SET(link->state, LINK_STATE_SETTING_ADDRESSES,
827 LINK_STATE_SETTING_ROUTES, LINK_STATE_FAILED,
828 LINK_STATE_LINGER));
829
830 link->route_messages--;
831
832 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
833 return 1;
834
835 r = sd_netlink_message_get_errno(m);
836 if (r < 0 && r != -EEXIST)
837 log_link_warning_errno(link, r, "Could not set route: %m");
838
839 if (link->route_messages == 0) {
840 log_link_debug(link, "Routes set");
841 link->static_routes_configured = true;
842 link_check_ready(link);
843 }
844
845 return 1;
846 }
847
848 static int link_enter_set_routes(Link *link) {
849 Route *rt;
850 int r;
851
852 assert(link);
853 assert(link->network);
854 assert(link->state == LINK_STATE_SETTING_ADDRESSES);
855
856 (void) link_set_routing_policy_rule(link);
857
858 link_set_state(link, LINK_STATE_SETTING_ROUTES);
859
860 LIST_FOREACH(routes, rt, link->network->static_routes) {
861 r = route_configure(rt, link, route_handler);
862 if (r < 0) {
863 log_link_warning_errno(link, r, "Could not set routes: %m");
864 link_enter_failed(link);
865 return r;
866 }
867
868 link->route_messages++;
869 }
870
871 if (link->route_messages == 0) {
872 link->static_routes_configured = true;
873 link_check_ready(link);
874 } else
875 log_link_debug(link, "Setting routes");
876
877 return 0;
878 }
879
880 int link_route_remove_handler(sd_netlink *rtnl, sd_netlink_message *m, void *userdata) {
881 Link *link = userdata;
882 int r;
883
884 assert(m);
885 assert(link);
886 assert(link->ifname);
887
888 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
889 return 1;
890
891 r = sd_netlink_message_get_errno(m);
892 if (r < 0 && r != -ESRCH)
893 log_link_warning_errno(link, r, "Could not drop route: %m");
894
895 return 1;
896 }
897
898 static int address_handler(sd_netlink *rtnl, sd_netlink_message *m, void *userdata) {
899 Link *link = userdata;
900 int r;
901
902 assert(rtnl);
903 assert(m);
904 assert(link);
905 assert(link->ifname);
906 assert(link->address_messages > 0);
907 assert(IN_SET(link->state, LINK_STATE_SETTING_ADDRESSES,
908 LINK_STATE_FAILED, LINK_STATE_LINGER));
909
910 link->address_messages--;
911
912 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
913 return 1;
914
915 r = sd_netlink_message_get_errno(m);
916 if (r < 0 && r != -EEXIST)
917 log_link_warning_errno(link, r, "could not set address: %m");
918 else if (r >= 0)
919 manager_rtnl_process_address(rtnl, m, link->manager);
920
921 if (link->address_messages == 0) {
922 log_link_debug(link, "Addresses set");
923 link_enter_set_routes(link);
924 }
925
926 return 1;
927 }
928
929 static int address_label_handler(sd_netlink *rtnl, sd_netlink_message *m, void *userdata) {
930 Link *link = userdata;
931 int r;
932
933 assert(rtnl);
934 assert(m);
935 assert(link);
936 assert(link->ifname);
937 assert(link->address_label_messages > 0);
938
939 link->address_label_messages--;
940
941 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
942 return 1;
943
944 r = sd_netlink_message_get_errno(m);
945 if (r < 0 && r != -EEXIST)
946 log_link_warning_errno(link, r, "could not set address label: %m");
947 else if (r >= 0)
948 manager_rtnl_process_address(rtnl, m, link->manager);
949
950 if (link->address_label_messages == 0)
951 log_link_debug(link, "Addresses label set");
952
953 return 1;
954 }
955
956 static int link_push_uplink_dns_to_dhcp_server(Link *link, sd_dhcp_server *s) {
957 _cleanup_free_ struct in_addr *addresses = NULL;
958 size_t n_addresses = 0, n_allocated = 0;
959 unsigned i;
960
961 log_debug("Copying DNS server information from %s", link->ifname);
962
963 if (!link->network)
964 return 0;
965
966 for (i = 0; i < link->network->n_dns; i++) {
967 struct in_addr ia;
968
969 /* Only look for IPv4 addresses */
970 if (link->network->dns[i].family != AF_INET)
971 continue;
972
973 ia = link->network->dns[i].address.in;
974
975 /* Never propagate obviously borked data */
976 if (in4_addr_is_null(&ia) || in4_addr_is_localhost(&ia))
977 continue;
978
979 if (!GREEDY_REALLOC(addresses, n_allocated, n_addresses + 1))
980 return log_oom();
981
982 addresses[n_addresses++] = ia;
983 }
984
985 if (link->network->dhcp_use_dns && link->dhcp_lease) {
986 const struct in_addr *da = NULL;
987 int n;
988
989 n = sd_dhcp_lease_get_dns(link->dhcp_lease, &da);
990 if (n > 0) {
991
992 if (!GREEDY_REALLOC(addresses, n_allocated, n_addresses + n))
993 return log_oom();
994
995 memcpy(addresses + n_addresses, da, n * sizeof(struct in_addr));
996 n_addresses += n;
997 }
998 }
999
1000 if (n_addresses <= 0)
1001 return 0;
1002
1003 return sd_dhcp_server_set_dns(s, addresses, n_addresses);
1004 }
1005
1006 static int link_push_uplink_ntp_to_dhcp_server(Link *link, sd_dhcp_server *s) {
1007 _cleanup_free_ struct in_addr *addresses = NULL;
1008 size_t n_addresses = 0, n_allocated = 0;
1009 char **a;
1010
1011 if (!link->network)
1012 return 0;
1013
1014 log_debug("Copying NTP server information from %s", link->ifname);
1015
1016 STRV_FOREACH(a, link->network->ntp) {
1017 struct in_addr ia;
1018
1019 /* Only look for IPv4 addresses */
1020 if (inet_pton(AF_INET, *a, &ia) <= 0)
1021 continue;
1022
1023 /* Never propagate obviously borked data */
1024 if (in4_addr_is_null(&ia) || in4_addr_is_localhost(&ia))
1025 continue;
1026
1027 if (!GREEDY_REALLOC(addresses, n_allocated, n_addresses + 1))
1028 return log_oom();
1029
1030 addresses[n_addresses++] = ia;
1031 }
1032
1033 if (link->network->dhcp_use_ntp && link->dhcp_lease) {
1034 const struct in_addr *da = NULL;
1035 int n;
1036
1037 n = sd_dhcp_lease_get_ntp(link->dhcp_lease, &da);
1038 if (n > 0) {
1039
1040 if (!GREEDY_REALLOC(addresses, n_allocated, n_addresses + n))
1041 return log_oom();
1042
1043 memcpy(addresses + n_addresses, da, n * sizeof(struct in_addr));
1044 n_addresses += n;
1045 }
1046 }
1047
1048 if (n_addresses <= 0)
1049 return 0;
1050
1051 return sd_dhcp_server_set_ntp(s, addresses, n_addresses);
1052 }
1053
1054 static int link_set_bridge_fdb(Link *link) {
1055 FdbEntry *fdb_entry;
1056 int r;
1057
1058 LIST_FOREACH(static_fdb_entries, fdb_entry, link->network->static_fdb_entries) {
1059 r = fdb_entry_configure(link, fdb_entry);
1060 if (r < 0)
1061 return log_link_error_errno(link, r, "Failed to add MAC entry to static MAC table: %m");
1062 }
1063
1064 return 0;
1065 }
1066
1067 static int link_enter_set_addresses(Link *link) {
1068 AddressLabel *label;
1069 Address *ad;
1070 int r;
1071
1072 assert(link);
1073 assert(link->network);
1074 assert(link->state != _LINK_STATE_INVALID);
1075
1076 r = link_set_bridge_fdb(link);
1077 if (r < 0)
1078 return r;
1079
1080 link_set_state(link, LINK_STATE_SETTING_ADDRESSES);
1081
1082 LIST_FOREACH(addresses, ad, link->network->static_addresses) {
1083 r = address_configure(ad, link, address_handler, false);
1084 if (r < 0) {
1085 log_link_warning_errno(link, r, "Could not set addresses: %m");
1086 link_enter_failed(link);
1087 return r;
1088 }
1089
1090 link->address_messages++;
1091 }
1092
1093 LIST_FOREACH(labels, label, link->network->address_labels) {
1094 r = address_label_configure(label, link, address_label_handler, false);
1095 if (r < 0) {
1096 log_link_warning_errno(link, r, "Could not set address label: %m");
1097 link_enter_failed(link);
1098 return r;
1099 }
1100
1101 link->address_label_messages++;
1102 }
1103
1104 /* now that we can figure out a default address for the dhcp server,
1105 start it */
1106 if (link_dhcp4_server_enabled(link) && (link->flags & IFF_UP)) {
1107 Address *address;
1108 Link *uplink = NULL;
1109 bool acquired_uplink = false;
1110
1111 address = link_find_dhcp_server_address(link);
1112 if (!address) {
1113 log_link_warning(link, "Failed to find suitable address for DHCPv4 server instance.");
1114 link_enter_failed(link);
1115 return 0;
1116 }
1117
1118 /* use the server address' subnet as the pool */
1119 r = sd_dhcp_server_configure_pool(link->dhcp_server, &address->in_addr.in, address->prefixlen,
1120 link->network->dhcp_server_pool_offset, link->network->dhcp_server_pool_size);
1121 if (r < 0)
1122 return r;
1123
1124 /* TODO:
1125 r = sd_dhcp_server_set_router(link->dhcp_server,
1126 &main_address->in_addr.in);
1127 if (r < 0)
1128 return r;
1129 */
1130
1131 if (link->network->dhcp_server_max_lease_time_usec > 0) {
1132 r = sd_dhcp_server_set_max_lease_time(
1133 link->dhcp_server,
1134 DIV_ROUND_UP(link->network->dhcp_server_max_lease_time_usec, USEC_PER_SEC));
1135 if (r < 0)
1136 return r;
1137 }
1138
1139 if (link->network->dhcp_server_default_lease_time_usec > 0) {
1140 r = sd_dhcp_server_set_default_lease_time(
1141 link->dhcp_server,
1142 DIV_ROUND_UP(link->network->dhcp_server_default_lease_time_usec, USEC_PER_SEC));
1143 if (r < 0)
1144 return r;
1145 }
1146
1147 if (link->network->dhcp_server_emit_dns) {
1148
1149 if (link->network->n_dhcp_server_dns > 0)
1150 r = sd_dhcp_server_set_dns(link->dhcp_server, link->network->dhcp_server_dns, link->network->n_dhcp_server_dns);
1151 else {
1152 uplink = manager_find_uplink(link->manager, link);
1153 acquired_uplink = true;
1154
1155 if (!uplink) {
1156 log_link_debug(link, "Not emitting DNS server information on link, couldn't find suitable uplink.");
1157 r = 0;
1158 } else
1159 r = link_push_uplink_dns_to_dhcp_server(uplink, link->dhcp_server);
1160 }
1161 if (r < 0)
1162 log_link_warning_errno(link, r, "Failed to set DNS server for DHCP server, ignoring: %m");
1163 }
1164
1165 if (link->network->dhcp_server_emit_ntp) {
1166
1167 if (link->network->n_dhcp_server_ntp > 0)
1168 r = sd_dhcp_server_set_ntp(link->dhcp_server, link->network->dhcp_server_ntp, link->network->n_dhcp_server_ntp);
1169 else {
1170 if (!acquired_uplink)
1171 uplink = manager_find_uplink(link->manager, link);
1172
1173 if (!uplink) {
1174 log_link_debug(link, "Not emitting NTP server information on link, couldn't find suitable uplink.");
1175 r = 0;
1176 } else
1177 r = link_push_uplink_ntp_to_dhcp_server(uplink, link->dhcp_server);
1178
1179 }
1180 if (r < 0)
1181 log_link_warning_errno(link, r, "Failed to set NTP server for DHCP server, ignoring: %m");
1182 }
1183
1184 r = sd_dhcp_server_set_emit_router(link->dhcp_server, link->network->dhcp_server_emit_router);
1185 if (r < 0)
1186 return log_link_warning_errno(link, r, "Failed to set router emission for DHCP server: %m");
1187
1188 if (link->network->dhcp_server_emit_timezone) {
1189 _cleanup_free_ char *buffer = NULL;
1190 const char *tz = NULL;
1191
1192 if (link->network->dhcp_server_timezone)
1193 tz = link->network->dhcp_server_timezone;
1194 else {
1195 r = get_timezone(&buffer);
1196 if (r < 0)
1197 log_warning_errno(r, "Failed to determine timezone: %m");
1198 else
1199 tz = buffer;
1200 }
1201
1202 if (tz) {
1203 r = sd_dhcp_server_set_timezone(link->dhcp_server, tz);
1204 if (r < 0)
1205 return r;
1206 }
1207 }
1208
1209 r = sd_dhcp_server_start(link->dhcp_server);
1210 if (r < 0) {
1211 log_link_warning_errno(link, r, "Could not start DHCPv4 server instance: %m");
1212
1213 link_enter_failed(link);
1214
1215 return 0;
1216 }
1217
1218 log_link_debug(link, "Offering DHCPv4 leases");
1219 }
1220
1221 if (link->address_messages == 0)
1222 link_enter_set_routes(link);
1223 else
1224 log_link_debug(link, "Setting addresses");
1225
1226 return 0;
1227 }
1228
1229 int link_address_remove_handler(sd_netlink *rtnl, sd_netlink_message *m, void *userdata) {
1230 Link *link = userdata;
1231 int r;
1232
1233 assert(m);
1234 assert(link);
1235 assert(link->ifname);
1236
1237 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1238 return 1;
1239
1240 r = sd_netlink_message_get_errno(m);
1241 if (r < 0 && r != -EADDRNOTAVAIL)
1242 log_link_warning_errno(link, r, "Could not drop address: %m");
1243
1244 return 1;
1245 }
1246
1247 static int link_set_bridge_vlan(Link *link) {
1248 int r = 0;
1249
1250 r = br_vlan_configure(link, link->network->pvid, link->network->br_vid_bitmap, link->network->br_untagged_bitmap);
1251 if (r < 0)
1252 log_link_error_errno(link, r, "Failed to assign VLANs to bridge port: %m");
1253
1254 return r;
1255 }
1256
1257 static int link_set_proxy_arp(Link *link) {
1258 const char *p = NULL;
1259 int r;
1260
1261 if (!link_proxy_arp_enabled(link))
1262 return 0;
1263
1264 p = strjoina("/proc/sys/net/ipv4/conf/", link->ifname, "/proxy_arp");
1265
1266 r = write_string_file(p, one_zero(link->network->proxy_arp), WRITE_STRING_FILE_VERIFY_ON_FAILURE | WRITE_STRING_FILE_DISABLE_BUFFER);
1267 if (r < 0)
1268 log_link_warning_errno(link, r, "Cannot configure proxy ARP for interface: %m");
1269
1270 return 0;
1271 }
1272
1273 static int link_set_handler(sd_netlink *rtnl, sd_netlink_message *m, void *userdata) {
1274 Link *link = userdata;
1275 int r;
1276
1277 assert(link);
1278
1279 log_link_debug(link, "Set link");
1280
1281 r = sd_netlink_message_get_errno(m);
1282 if (r < 0 && r != -EEXIST) {
1283 log_link_error_errno(link, r, "Could not join netdev: %m");
1284 link_enter_failed(link);
1285 }
1286
1287 return 1;
1288 }
1289
1290 static int link_configure_after_setting_mtu(Link *link);
1291
1292 static int set_mtu_handler(sd_netlink *rtnl, sd_netlink_message *m, void *userdata) {
1293 Link *link = userdata;
1294 int r;
1295
1296 assert(m);
1297 assert(link);
1298 assert(link->ifname);
1299
1300 link->setting_mtu = false;
1301
1302 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1303 return 1;
1304
1305 r = sd_netlink_message_get_errno(m);
1306 if (r < 0) {
1307 log_link_warning_errno(link, r, "Could not set MTU: %m");
1308 return 1;
1309 }
1310
1311 log_link_debug(link, "Setting MTU done.");
1312
1313 if (link->state == LINK_STATE_PENDING)
1314 (void) link_configure_after_setting_mtu(link);
1315
1316 return 1;
1317 }
1318
1319 int link_set_mtu(Link *link, uint32_t mtu) {
1320 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1321 int r;
1322
1323 assert(link);
1324 assert(link->manager);
1325 assert(link->manager->rtnl);
1326
1327 if (link->mtu == mtu || link->setting_mtu)
1328 return 0;
1329
1330 log_link_debug(link, "Setting MTU: %" PRIu32, mtu);
1331
1332 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1333 if (r < 0)
1334 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1335
1336 /* If IPv6 not configured (no static IPv6 address and IPv6LL autoconfiguration is disabled)
1337 * for this interface, or if it is a bridge slave, then disable IPv6 else enable it. */
1338 (void) link_enable_ipv6(link);
1339
1340 /* IPv6 protocol requires a minimum MTU of IPV6_MTU_MIN(1280) bytes
1341 * on the interface. Bump up MTU bytes to IPV6_MTU_MIN. */
1342 if (link_ipv6_enabled(link) && mtu < IPV6_MIN_MTU) {
1343
1344 log_link_warning(link, "Bumping MTU to " STRINGIFY(IPV6_MIN_MTU) ", as "
1345 "IPv6 is requested and requires a minimum MTU of " STRINGIFY(IPV6_MIN_MTU) " bytes: %m");
1346
1347 mtu = IPV6_MIN_MTU;
1348 }
1349
1350 r = sd_netlink_message_append_u32(req, IFLA_MTU, mtu);
1351 if (r < 0)
1352 return log_link_error_errno(link, r, "Could not append MTU: %m");
1353
1354 r = sd_netlink_call_async(link->manager->rtnl, NULL, req, set_mtu_handler,
1355 link_netlink_destroy_callback, link, 0, __func__);
1356 if (r < 0)
1357 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1358
1359 link_ref(link);
1360 link->setting_mtu = true;
1361
1362 return 0;
1363 }
1364
1365 static int set_flags_handler(sd_netlink *rtnl, sd_netlink_message *m, void *userdata) {
1366 Link *link = userdata;
1367 int r;
1368
1369 assert(m);
1370 assert(link);
1371 assert(link->ifname);
1372
1373 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1374 return 1;
1375
1376 r = sd_netlink_message_get_errno(m);
1377 if (r < 0)
1378 log_link_warning_errno(link, r, "Could not set link flags: %m");
1379
1380 return 1;
1381 }
1382
1383 static int link_set_flags(Link *link) {
1384 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1385 unsigned ifi_change = 0;
1386 unsigned ifi_flags = 0;
1387 int r;
1388
1389 assert(link);
1390 assert(link->manager);
1391 assert(link->manager->rtnl);
1392
1393 if (link->flags & IFF_LOOPBACK)
1394 return 0;
1395
1396 if (!link->network)
1397 return 0;
1398
1399 if (link->network->arp < 0 && link->network->multicast < 0 && link->network->allmulticast < 0)
1400 return 0;
1401
1402 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1403 if (r < 0)
1404 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1405
1406 if (link->network->arp >= 0) {
1407 ifi_change |= IFF_NOARP;
1408 SET_FLAG(ifi_flags, IFF_NOARP, link->network->arp == 0);
1409 }
1410
1411 if (link->network->multicast >= 0) {
1412 ifi_change |= IFF_MULTICAST;
1413 SET_FLAG(ifi_flags, IFF_MULTICAST, link->network->multicast);
1414 }
1415
1416 if (link->network->allmulticast >= 0) {
1417 ifi_change |= IFF_ALLMULTI;
1418 SET_FLAG(ifi_flags, IFF_ALLMULTI, link->network->allmulticast);
1419 }
1420
1421 r = sd_rtnl_message_link_set_flags(req, ifi_flags, ifi_change);
1422 if (r < 0)
1423 return log_link_error_errno(link, r, "Could not set link flags: %m");
1424
1425 r = sd_netlink_call_async(link->manager->rtnl, NULL, req, set_flags_handler,
1426 link_netlink_destroy_callback, link, 0, __func__);
1427 if (r < 0)
1428 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1429
1430 link_ref(link);
1431
1432 return 0;
1433 }
1434
1435 static int link_set_bridge(Link *link) {
1436 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1437 int r;
1438
1439 assert(link);
1440 assert(link->network);
1441
1442 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1443 if (r < 0)
1444 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1445
1446 r = sd_rtnl_message_link_set_family(req, PF_BRIDGE);
1447 if (r < 0)
1448 return log_link_error_errno(link, r, "Could not set message family: %m");
1449
1450 r = sd_netlink_message_open_container(req, IFLA_PROTINFO);
1451 if (r < 0)
1452 return log_link_error_errno(link, r, "Could not append IFLA_PROTINFO attribute: %m");
1453
1454 if (link->network->use_bpdu >= 0) {
1455 r = sd_netlink_message_append_u8(req, IFLA_BRPORT_GUARD, link->network->use_bpdu);
1456 if (r < 0)
1457 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_GUARD attribute: %m");
1458 }
1459
1460 if (link->network->hairpin >= 0) {
1461 r = sd_netlink_message_append_u8(req, IFLA_BRPORT_MODE, link->network->hairpin);
1462 if (r < 0)
1463 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_MODE attribute: %m");
1464 }
1465
1466 if (link->network->fast_leave >= 0) {
1467 r = sd_netlink_message_append_u8(req, IFLA_BRPORT_FAST_LEAVE, link->network->fast_leave);
1468 if (r < 0)
1469 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_FAST_LEAVE attribute: %m");
1470 }
1471
1472 if (link->network->allow_port_to_be_root >= 0) {
1473 r = sd_netlink_message_append_u8(req, IFLA_BRPORT_PROTECT, link->network->allow_port_to_be_root);
1474 if (r < 0)
1475 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_PROTECT attribute: %m");
1476
1477 }
1478
1479 if (link->network->unicast_flood >= 0) {
1480 r = sd_netlink_message_append_u8(req, IFLA_BRPORT_UNICAST_FLOOD, link->network->unicast_flood);
1481 if (r < 0)
1482 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_UNICAST_FLOOD attribute: %m");
1483
1484 }
1485
1486 if (link->network->cost != 0) {
1487 r = sd_netlink_message_append_u32(req, IFLA_BRPORT_COST, link->network->cost);
1488 if (r < 0)
1489 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_COST attribute: %m");
1490 }
1491 if (link->network->priority != LINK_BRIDGE_PORT_PRIORITY_INVALID) {
1492 r = sd_netlink_message_append_u16(req, IFLA_BRPORT_PRIORITY, link->network->priority);
1493 if (r < 0)
1494 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_PRIORITY attribute: %m");
1495 }
1496
1497 r = sd_netlink_message_close_container(req);
1498 if (r < 0)
1499 return log_link_error_errno(link, r, "Could not append IFLA_LINKINFO attribute: %m");
1500
1501 r = sd_netlink_call_async(link->manager->rtnl, NULL, req, link_set_handler,
1502 link_netlink_destroy_callback, link, 0, __func__);
1503 if (r < 0)
1504 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1505
1506 link_ref(link);
1507
1508 return r;
1509 }
1510
1511 static int link_bond_set(Link *link) {
1512 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1513 int r;
1514
1515 assert(link);
1516 assert(link->network);
1517
1518 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_NEWLINK, link->network->bond->ifindex);
1519 if (r < 0)
1520 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1521
1522 r = sd_netlink_message_set_flags(req, NLM_F_REQUEST | NLM_F_ACK);
1523 if (r < 0)
1524 return log_link_error_errno(link, r, "Could not set netlink flags: %m");
1525
1526 r = sd_netlink_message_open_container(req, IFLA_LINKINFO);
1527 if (r < 0)
1528 return log_link_error_errno(link, r, "Could not append IFLA_PROTINFO attribute: %m");
1529
1530 r = sd_netlink_message_open_container_union(req, IFLA_INFO_DATA, "bond");
1531 if (r < 0)
1532 return log_link_error_errno(link, r, "Could not append IFLA_INFO_DATA attribute: %m");
1533
1534 if (link->network->active_slave) {
1535 r = sd_netlink_message_append_u32(req, IFLA_BOND_ACTIVE_SLAVE, link->ifindex);
1536 if (r < 0)
1537 return log_link_error_errno(link, r, "Could not append IFLA_BOND_ACTIVE_SLAVE attribute: %m");
1538 }
1539
1540 if (link->network->primary_slave) {
1541 r = sd_netlink_message_append_u32(req, IFLA_BOND_PRIMARY, link->ifindex);
1542 if (r < 0)
1543 return log_link_error_errno(link, r, "Could not append IFLA_BOND_PRIMARY attribute: %m");
1544 }
1545
1546 r = sd_netlink_message_close_container(req);
1547 if (r < 0)
1548 return log_link_error_errno(link, r, "Could not append IFLA_LINKINFO attribute: %m");
1549
1550 r = sd_netlink_message_close_container(req);
1551 if (r < 0)
1552 return log_link_error_errno(link, r, "Could not append IFLA_INFO_DATA attribute: %m");
1553
1554 r = sd_netlink_call_async(link->manager->rtnl, NULL, req, set_flags_handler,
1555 link_netlink_destroy_callback, link, 0, __func__);
1556 if (r < 0)
1557 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1558
1559 link_ref(link);
1560
1561 return r;
1562 }
1563
1564 static int link_lldp_save(Link *link) {
1565 _cleanup_free_ char *temp_path = NULL;
1566 _cleanup_fclose_ FILE *f = NULL;
1567 sd_lldp_neighbor **l = NULL;
1568 int n = 0, r, i;
1569
1570 assert(link);
1571 assert(link->lldp_file);
1572
1573 if (!link->lldp) {
1574 (void) unlink(link->lldp_file);
1575 return 0;
1576 }
1577
1578 r = sd_lldp_get_neighbors(link->lldp, &l);
1579 if (r < 0)
1580 goto finish;
1581 if (r == 0) {
1582 (void) unlink(link->lldp_file);
1583 goto finish;
1584 }
1585
1586 n = r;
1587
1588 r = fopen_temporary(link->lldp_file, &f, &temp_path);
1589 if (r < 0)
1590 goto finish;
1591
1592 fchmod(fileno(f), 0644);
1593
1594 for (i = 0; i < n; i++) {
1595 const void *p;
1596 le64_t u;
1597 size_t sz;
1598
1599 r = sd_lldp_neighbor_get_raw(l[i], &p, &sz);
1600 if (r < 0)
1601 goto finish;
1602
1603 u = htole64(sz);
1604 (void) fwrite(&u, 1, sizeof(u), f);
1605 (void) fwrite(p, 1, sz, f);
1606 }
1607
1608 r = fflush_and_check(f);
1609 if (r < 0)
1610 goto finish;
1611
1612 if (rename(temp_path, link->lldp_file) < 0) {
1613 r = -errno;
1614 goto finish;
1615 }
1616
1617 finish:
1618 if (r < 0) {
1619 (void) unlink(link->lldp_file);
1620 if (temp_path)
1621 (void) unlink(temp_path);
1622
1623 log_link_error_errno(link, r, "Failed to save LLDP data to %s: %m", link->lldp_file);
1624 }
1625
1626 if (l) {
1627 for (i = 0; i < n; i++)
1628 sd_lldp_neighbor_unref(l[i]);
1629 free(l);
1630 }
1631
1632 return r;
1633 }
1634
1635 static void lldp_handler(sd_lldp *lldp, sd_lldp_event event, sd_lldp_neighbor *n, void *userdata) {
1636 Link *link = userdata;
1637 int r;
1638
1639 assert(link);
1640
1641 (void) link_lldp_save(link);
1642
1643 if (link_lldp_emit_enabled(link) && event == SD_LLDP_EVENT_ADDED) {
1644 /* If we received information about a new neighbor, restart the LLDP "fast" logic */
1645
1646 log_link_debug(link, "Received LLDP datagram from previously unknown neighbor, restarting 'fast' LLDP transmission.");
1647
1648 r = link_lldp_emit_start(link);
1649 if (r < 0)
1650 log_link_warning_errno(link, r, "Failed to restart LLDP transmission: %m");
1651 }
1652 }
1653
1654 static int link_acquire_ipv6_conf(Link *link) {
1655 int r;
1656
1657 assert(link);
1658
1659 if (link_ipv6_accept_ra_enabled(link)) {
1660 assert(link->ndisc);
1661
1662 log_link_debug(link, "Discovering IPv6 routers");
1663
1664 r = sd_ndisc_start(link->ndisc);
1665 if (r < 0 && r != -EBUSY)
1666 return log_link_warning_errno(link, r, "Could not start IPv6 Router Discovery: %m");
1667 }
1668
1669 if (link_radv_enabled(link)) {
1670 assert(link->radv);
1671 assert(in_addr_is_link_local(AF_INET6, (const union in_addr_union*)&link->ipv6ll_address) > 0);
1672
1673 log_link_debug(link, "Starting IPv6 Router Advertisements");
1674
1675 r = sd_radv_start(link->radv);
1676 if (r < 0 && r != -EBUSY)
1677 return log_link_warning_errno(link, r, "Could not start IPv6 Router Advertisement: %m");
1678 }
1679
1680 (void) dhcp6_request_prefix_delegation(link);
1681
1682 return 0;
1683 }
1684
1685 static int link_acquire_ipv4_conf(Link *link) {
1686 int r;
1687
1688 assert(link);
1689 assert(link->network);
1690 assert(link->manager);
1691 assert(link->manager->event);
1692
1693 if (link_ipv4ll_enabled(link)) {
1694 assert(link->ipv4ll);
1695
1696 log_link_debug(link, "Acquiring IPv4 link-local address");
1697
1698 r = sd_ipv4ll_start(link->ipv4ll);
1699 if (r < 0)
1700 return log_link_warning_errno(link, r, "Could not acquire IPv4 link-local address: %m");
1701 }
1702
1703 if (link_dhcp4_enabled(link)) {
1704 assert(link->dhcp_client);
1705
1706 log_link_debug(link, "Acquiring DHCPv4 lease");
1707
1708 r = sd_dhcp_client_start(link->dhcp_client);
1709 if (r < 0)
1710 return log_link_warning_errno(link, r, "Could not acquire DHCPv4 lease: %m");
1711 }
1712
1713 return 0;
1714 }
1715
1716 static int link_acquire_conf(Link *link) {
1717 int r;
1718
1719 assert(link);
1720
1721 r = link_acquire_ipv4_conf(link);
1722 if (r < 0)
1723 return r;
1724
1725 if (in_addr_is_null(AF_INET6, (const union in_addr_union*) &link->ipv6ll_address) == 0) {
1726 r = link_acquire_ipv6_conf(link);
1727 if (r < 0)
1728 return r;
1729 }
1730
1731 if (link_lldp_emit_enabled(link)) {
1732 r = link_lldp_emit_start(link);
1733 if (r < 0)
1734 return log_link_warning_errno(link, r, "Failed to start LLDP transmission: %m");
1735 }
1736
1737 return 0;
1738 }
1739
1740 bool link_has_carrier(Link *link) {
1741 /* see Documentation/networking/operstates.txt in the kernel sources */
1742
1743 if (link->kernel_operstate == IF_OPER_UP)
1744 return true;
1745
1746 if (link->kernel_operstate == IF_OPER_UNKNOWN)
1747 /* operstate may not be implemented, so fall back to flags */
1748 if ((link->flags & IFF_LOWER_UP) && !(link->flags & IFF_DORMANT))
1749 return true;
1750
1751 return false;
1752 }
1753
1754 static int link_up_handler(sd_netlink *rtnl, sd_netlink_message *m, void *userdata) {
1755 Link *link = userdata;
1756 int r;
1757
1758 assert(link);
1759
1760 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1761 return 1;
1762
1763 r = sd_netlink_message_get_errno(m);
1764 if (r < 0)
1765 /* we warn but don't fail the link, as it may be brought up later */
1766 log_link_warning_errno(link, r, "Could not bring up interface: %m");
1767
1768 return 1;
1769 }
1770
1771 int link_up(Link *link) {
1772 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1773 uint8_t ipv6ll_mode;
1774 int r;
1775
1776 assert(link);
1777 assert(link->network);
1778 assert(link->manager);
1779 assert(link->manager->rtnl);
1780
1781 log_link_debug(link, "Bringing link up");
1782
1783 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1784 if (r < 0)
1785 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1786
1787 /* set it free if not enslaved with networkd */
1788 if (!link->network->bridge && !link->network->bond && !link->network->vrf) {
1789 r = sd_netlink_message_append_u32(req, IFLA_MASTER, 0);
1790 if (r < 0)
1791 return log_link_error_errno(link, r, "Could not append IFLA_MASTER attribute: %m");
1792 }
1793
1794 r = sd_rtnl_message_link_set_flags(req, IFF_UP, IFF_UP);
1795 if (r < 0)
1796 return log_link_error_errno(link, r, "Could not set link flags: %m");
1797
1798 if (link->network->mac) {
1799 r = sd_netlink_message_append_ether_addr(req, IFLA_ADDRESS, link->network->mac);
1800 if (r < 0)
1801 return log_link_error_errno(link, r, "Could not set MAC address: %m");
1802 }
1803
1804 r = sd_netlink_message_open_container(req, IFLA_AF_SPEC);
1805 if (r < 0)
1806 return log_link_error_errno(link, r, "Could not open IFLA_AF_SPEC container: %m");
1807
1808 if (link_ipv6_enabled(link)) {
1809 /* if the kernel lacks ipv6 support setting IFF_UP fails if any ipv6 options are passed */
1810 r = sd_netlink_message_open_container(req, AF_INET6);
1811 if (r < 0)
1812 return log_link_error_errno(link, r, "Could not open AF_INET6 container: %m");
1813
1814 if (!link_ipv6ll_enabled(link))
1815 ipv6ll_mode = IN6_ADDR_GEN_MODE_NONE;
1816 else {
1817 const char *p = NULL;
1818 _cleanup_free_ char *stable_secret = NULL;
1819
1820 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/stable_secret");
1821 r = read_one_line_file(p, &stable_secret);
1822
1823 if (r < 0)
1824 ipv6ll_mode = IN6_ADDR_GEN_MODE_EUI64;
1825 else
1826 ipv6ll_mode = IN6_ADDR_GEN_MODE_STABLE_PRIVACY;
1827 }
1828 r = sd_netlink_message_append_u8(req, IFLA_INET6_ADDR_GEN_MODE, ipv6ll_mode);
1829 if (r < 0)
1830 return log_link_error_errno(link, r, "Could not append IFLA_INET6_ADDR_GEN_MODE: %m");
1831
1832 if (!in_addr_is_null(AF_INET6, &link->network->ipv6_token)) {
1833 r = sd_netlink_message_append_in6_addr(req, IFLA_INET6_TOKEN, &link->network->ipv6_token.in6);
1834 if (r < 0)
1835 return log_link_error_errno(link, r, "Could not append IFLA_INET6_TOKEN: %m");
1836 }
1837
1838 r = sd_netlink_message_close_container(req);
1839 if (r < 0)
1840 return log_link_error_errno(link, r, "Could not close AF_INET6 container: %m");
1841 }
1842
1843 r = sd_netlink_message_close_container(req);
1844 if (r < 0)
1845 return log_link_error_errno(link, r, "Could not close IFLA_AF_SPEC container: %m");
1846
1847 r = sd_netlink_call_async(link->manager->rtnl, NULL, req, link_up_handler,
1848 link_netlink_destroy_callback, link, 0, __func__);
1849 if (r < 0)
1850 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1851
1852 link_ref(link);
1853
1854 return 0;
1855 }
1856
1857 static int link_up_can(Link *link) {
1858 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1859 int r;
1860
1861 assert(link);
1862
1863 log_link_debug(link, "Bringing CAN link up");
1864
1865 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1866 if (r < 0)
1867 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1868
1869 r = sd_rtnl_message_link_set_flags(req, IFF_UP, IFF_UP);
1870 if (r < 0)
1871 return log_link_error_errno(link, r, "Could not set link flags: %m");
1872
1873 r = sd_netlink_call_async(link->manager->rtnl, NULL, req, link_up_handler,
1874 link_netlink_destroy_callback, link, 0, __func__);
1875 if (r < 0)
1876 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1877
1878 link_ref(link);
1879
1880 return 0;
1881 }
1882
1883 static int link_set_can(Link *link) {
1884 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *m = NULL;
1885 int r;
1886
1887 assert(link);
1888 assert(link->network);
1889 assert(link->manager);
1890 assert(link->manager->rtnl);
1891
1892 log_link_debug(link, "link_set_can");
1893
1894 r = sd_rtnl_message_new_link(link->manager->rtnl, &m, RTM_NEWLINK, link->ifindex);
1895 if (r < 0)
1896 return log_link_error_errno(link, r, "Failed to allocate netlink message: %m");
1897
1898 r = sd_netlink_message_set_flags(m, NLM_F_REQUEST | NLM_F_ACK);
1899 if (r < 0)
1900 return log_link_error_errno(link, r, "Could not set netlink flags: %m");
1901
1902 r = sd_netlink_message_open_container(m, IFLA_LINKINFO);
1903 if (r < 0)
1904 return log_link_error_errno(link, r, "Failed to open netlink container: %m");
1905
1906 r = sd_netlink_message_open_container_union(m, IFLA_INFO_DATA, link->kind);
1907 if (r < 0)
1908 return log_link_error_errno(link, r, "Could not append IFLA_INFO_DATA attribute: %m");
1909
1910 if (link->network->can_bitrate > 0 || link->network->can_sample_point > 0) {
1911 struct can_bittiming bt = {
1912 .bitrate = link->network->can_bitrate,
1913 .sample_point = link->network->can_sample_point,
1914 };
1915
1916 if (link->network->can_bitrate > UINT32_MAX) {
1917 log_link_error(link, "bitrate (%zu) too big.", link->network->can_bitrate);
1918 return -ERANGE;
1919 }
1920
1921 log_link_debug(link, "Setting bitrate = %d bit/s", bt.bitrate);
1922 if (link->network->can_sample_point > 0)
1923 log_link_debug(link, "Setting sample point = %d.%d%%", bt.sample_point / 10, bt.sample_point % 10);
1924 else
1925 log_link_debug(link, "Using default sample point");
1926
1927 r = sd_netlink_message_append_data(m, IFLA_CAN_BITTIMING, &bt, sizeof(bt));
1928 if (r < 0)
1929 return log_link_error_errno(link, r, "Could not append IFLA_CAN_BITTIMING attribute: %m");
1930 }
1931
1932 if (link->network->can_restart_us > 0) {
1933 char time_string[FORMAT_TIMESPAN_MAX];
1934 uint64_t restart_ms;
1935
1936 if (link->network->can_restart_us == USEC_INFINITY)
1937 restart_ms = 0;
1938 else
1939 restart_ms = DIV_ROUND_UP(link->network->can_restart_us, USEC_PER_MSEC);
1940
1941 format_timespan(time_string, FORMAT_TIMESPAN_MAX, restart_ms * 1000, MSEC_PER_SEC);
1942
1943 if (restart_ms > UINT32_MAX) {
1944 log_link_error(link, "restart timeout (%s) too big.", time_string);
1945 return -ERANGE;
1946 }
1947
1948 log_link_debug(link, "Setting restart = %s", time_string);
1949
1950 r = sd_netlink_message_append_u32(m, IFLA_CAN_RESTART_MS, restart_ms);
1951 if (r < 0)
1952 return log_link_error_errno(link, r, "Could not append IFLA_CAN_RESTART_MS attribute: %m");
1953 }
1954
1955 r = sd_netlink_message_close_container(m);
1956 if (r < 0)
1957 return log_link_error_errno(link, r, "Failed to close netlink container: %m");
1958
1959 r = sd_netlink_message_close_container(m);
1960 if (r < 0)
1961 return log_link_error_errno(link, r, "Failed to close netlink container: %m");
1962
1963 r = sd_netlink_call_async(link->manager->rtnl, NULL, m, link_set_handler,
1964 link_netlink_destroy_callback, link, 0, __func__);
1965 if (r < 0)
1966 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1967
1968 link_ref(link);
1969
1970 if (!(link->flags & IFF_UP)) {
1971 r = link_up_can(link);
1972 if (r < 0) {
1973 link_enter_failed(link);
1974 return r;
1975 }
1976 }
1977
1978 log_link_debug(link, "link_set_can done");
1979
1980 return r;
1981 }
1982
1983 static int link_down_handler(sd_netlink *rtnl, sd_netlink_message *m, void *userdata) {
1984 Link *link = userdata;
1985 int r;
1986
1987 assert(link);
1988
1989 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1990 return 1;
1991
1992 r = sd_netlink_message_get_errno(m);
1993 if (r < 0)
1994 log_link_warning_errno(link, r, "Could not bring down interface: %m");
1995
1996 if (streq_ptr(link->kind, "can"))
1997 link_set_can(link);
1998
1999 return 1;
2000 }
2001
2002 int link_down(Link *link) {
2003 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
2004 int r;
2005
2006 assert(link);
2007 assert(link->manager);
2008 assert(link->manager->rtnl);
2009
2010 log_link_debug(link, "Bringing link down");
2011
2012 r = sd_rtnl_message_new_link(link->manager->rtnl, &req,
2013 RTM_SETLINK, link->ifindex);
2014 if (r < 0)
2015 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
2016
2017 r = sd_rtnl_message_link_set_flags(req, 0, IFF_UP);
2018 if (r < 0)
2019 return log_link_error_errno(link, r, "Could not set link flags: %m");
2020
2021 r = sd_netlink_call_async(link->manager->rtnl, NULL, req, link_down_handler,
2022 link_netlink_destroy_callback, link, 0, __func__);
2023 if (r < 0)
2024 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
2025
2026 link_ref(link);
2027
2028 return 0;
2029 }
2030
2031 static int link_handle_bound_to_list(Link *link) {
2032 Link *l;
2033 Iterator i;
2034 int r;
2035 bool required_up = false;
2036 bool link_is_up = false;
2037
2038 assert(link);
2039
2040 if (hashmap_isempty(link->bound_to_links))
2041 return 0;
2042
2043 if (link->flags & IFF_UP)
2044 link_is_up = true;
2045
2046 HASHMAP_FOREACH (l, link->bound_to_links, i)
2047 if (link_has_carrier(l)) {
2048 required_up = true;
2049 break;
2050 }
2051
2052 if (!required_up && link_is_up) {
2053 r = link_down(link);
2054 if (r < 0)
2055 return r;
2056 } else if (required_up && !link_is_up) {
2057 r = link_up(link);
2058 if (r < 0)
2059 return r;
2060 }
2061
2062 return 0;
2063 }
2064
2065 static int link_handle_bound_by_list(Link *link) {
2066 Iterator i;
2067 Link *l;
2068 int r;
2069
2070 assert(link);
2071
2072 if (hashmap_isempty(link->bound_by_links))
2073 return 0;
2074
2075 HASHMAP_FOREACH (l, link->bound_by_links, i) {
2076 r = link_handle_bound_to_list(l);
2077 if (r < 0)
2078 return r;
2079 }
2080
2081 return 0;
2082 }
2083
2084 static int link_put_carrier(Link *link, Link *carrier, Hashmap **h) {
2085 int r;
2086
2087 assert(link);
2088 assert(carrier);
2089
2090 if (link == carrier)
2091 return 0;
2092
2093 if (hashmap_get(*h, INT_TO_PTR(carrier->ifindex)))
2094 return 0;
2095
2096 r = hashmap_ensure_allocated(h, NULL);
2097 if (r < 0)
2098 return r;
2099
2100 r = hashmap_put(*h, INT_TO_PTR(carrier->ifindex), carrier);
2101 if (r < 0)
2102 return r;
2103
2104 return 0;
2105 }
2106
2107 static int link_new_bound_by_list(Link *link) {
2108 Manager *m;
2109 Link *carrier;
2110 Iterator i;
2111 int r;
2112 bool list_updated = false;
2113
2114 assert(link);
2115 assert(link->manager);
2116
2117 m = link->manager;
2118
2119 HASHMAP_FOREACH(carrier, m->links, i) {
2120 if (!carrier->network)
2121 continue;
2122
2123 if (strv_isempty(carrier->network->bind_carrier))
2124 continue;
2125
2126 if (strv_fnmatch(carrier->network->bind_carrier, link->ifname, 0)) {
2127 r = link_put_carrier(link, carrier, &link->bound_by_links);
2128 if (r < 0)
2129 return r;
2130
2131 list_updated = true;
2132 }
2133 }
2134
2135 if (list_updated)
2136 link_dirty(link);
2137
2138 HASHMAP_FOREACH(carrier, link->bound_by_links, i) {
2139 r = link_put_carrier(carrier, link, &carrier->bound_to_links);
2140 if (r < 0)
2141 return r;
2142
2143 link_dirty(carrier);
2144 }
2145
2146 return 0;
2147 }
2148
2149 static int link_new_bound_to_list(Link *link) {
2150 Manager *m;
2151 Link *carrier;
2152 Iterator i;
2153 int r;
2154 bool list_updated = false;
2155
2156 assert(link);
2157 assert(link->manager);
2158
2159 if (!link->network)
2160 return 0;
2161
2162 if (strv_isempty(link->network->bind_carrier))
2163 return 0;
2164
2165 m = link->manager;
2166
2167 HASHMAP_FOREACH (carrier, m->links, i) {
2168 if (strv_fnmatch(link->network->bind_carrier, carrier->ifname, 0)) {
2169 r = link_put_carrier(link, carrier, &link->bound_to_links);
2170 if (r < 0)
2171 return r;
2172
2173 list_updated = true;
2174 }
2175 }
2176
2177 if (list_updated)
2178 link_dirty(link);
2179
2180 HASHMAP_FOREACH (carrier, link->bound_to_links, i) {
2181 r = link_put_carrier(carrier, link, &carrier->bound_by_links);
2182 if (r < 0)
2183 return r;
2184
2185 link_dirty(carrier);
2186 }
2187
2188 return 0;
2189 }
2190
2191 static int link_new_carrier_maps(Link *link) {
2192 int r;
2193
2194 r = link_new_bound_by_list(link);
2195 if (r < 0)
2196 return r;
2197
2198 r = link_handle_bound_by_list(link);
2199 if (r < 0)
2200 return r;
2201
2202 r = link_new_bound_to_list(link);
2203 if (r < 0)
2204 return r;
2205
2206 r = link_handle_bound_to_list(link);
2207 if (r < 0)
2208 return r;
2209
2210 return 0;
2211 }
2212
2213 static void link_free_bound_to_list(Link *link) {
2214 Link *bound_to;
2215 Iterator i;
2216
2217 HASHMAP_FOREACH (bound_to, link->bound_to_links, i) {
2218 hashmap_remove(link->bound_to_links, INT_TO_PTR(bound_to->ifindex));
2219
2220 if (hashmap_remove(bound_to->bound_by_links, INT_TO_PTR(link->ifindex)))
2221 link_dirty(bound_to);
2222 }
2223
2224 return;
2225 }
2226
2227 static void link_free_bound_by_list(Link *link) {
2228 Link *bound_by;
2229 Iterator i;
2230
2231 HASHMAP_FOREACH (bound_by, link->bound_by_links, i) {
2232 hashmap_remove(link->bound_by_links, INT_TO_PTR(bound_by->ifindex));
2233
2234 if (hashmap_remove(bound_by->bound_to_links, INT_TO_PTR(link->ifindex))) {
2235 link_dirty(bound_by);
2236 link_handle_bound_to_list(bound_by);
2237 }
2238 }
2239
2240 return;
2241 }
2242
2243 static void link_free_carrier_maps(Link *link) {
2244 bool list_updated = false;
2245
2246 assert(link);
2247
2248 if (!hashmap_isempty(link->bound_to_links)) {
2249 link_free_bound_to_list(link);
2250 list_updated = true;
2251 }
2252
2253 if (!hashmap_isempty(link->bound_by_links)) {
2254 link_free_bound_by_list(link);
2255 list_updated = true;
2256 }
2257
2258 if (list_updated)
2259 link_dirty(link);
2260
2261 return;
2262 }
2263
2264 void link_drop(Link *link) {
2265 if (!link || link->state == LINK_STATE_LINGER)
2266 return;
2267
2268 link_set_state(link, LINK_STATE_LINGER);
2269
2270 link_free_carrier_maps(link);
2271
2272 log_link_debug(link, "Link removed");
2273
2274 (void) unlink(link->state_file);
2275
2276 link_detach_from_manager(link);
2277
2278 link_unref(link);
2279
2280 return;
2281 }
2282
2283 static int link_joined(Link *link) {
2284 int r;
2285
2286 assert(link);
2287 assert(link->network);
2288
2289 if (!hashmap_isempty(link->bound_to_links)) {
2290 r = link_handle_bound_to_list(link);
2291 if (r < 0)
2292 return r;
2293 } else if (!(link->flags & IFF_UP)) {
2294 r = link_up(link);
2295 if (r < 0) {
2296 link_enter_failed(link);
2297 return r;
2298 }
2299 }
2300
2301 if (link->network->bridge) {
2302 r = link_set_bridge(link);
2303 if (r < 0)
2304 log_link_error_errno(link, r, "Could not set bridge message: %m");
2305 }
2306
2307 if (link->network->bond) {
2308 r = link_bond_set(link);
2309 if (r < 0)
2310 log_link_error_errno(link, r, "Could not set bond message: %m");
2311 }
2312
2313 if (link->network->use_br_vlan &&
2314 (link->network->bridge || streq_ptr("bridge", link->kind))) {
2315 r = link_set_bridge_vlan(link);
2316 if (r < 0)
2317 log_link_error_errno(link, r, "Could not set bridge vlan: %m");
2318 }
2319
2320 /* Skip setting up addresses until it gets carrier,
2321 or it would try to set addresses twice,
2322 which is bad for non-idempotent steps. */
2323 if (!link_has_carrier(link) && !link->network->configure_without_carrier)
2324 return 0;
2325
2326 return link_enter_set_addresses(link);
2327 }
2328
2329 static int netdev_join_handler(sd_netlink *rtnl, sd_netlink_message *m, void *userdata) {
2330 Link *link = userdata;
2331 int r;
2332
2333 assert(link);
2334 assert(link->network);
2335
2336 link->enslaving--;
2337
2338 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
2339 return 1;
2340
2341 r = sd_netlink_message_get_errno(m);
2342 if (r < 0 && r != -EEXIST) {
2343 log_link_error_errno(link, r, "Could not join netdev: %m");
2344 link_enter_failed(link);
2345 return 1;
2346 } else
2347 log_link_debug(link, "Joined netdev");
2348
2349 if (link->enslaving <= 0)
2350 link_joined(link);
2351
2352 return 1;
2353 }
2354
2355 static int link_enter_join_netdev(Link *link) {
2356 NetDev *netdev;
2357 Iterator i;
2358 int r;
2359
2360 assert(link);
2361 assert(link->network);
2362 assert(link->state == LINK_STATE_PENDING);
2363
2364 link_set_state(link, LINK_STATE_ENSLAVING);
2365
2366 link_dirty(link);
2367
2368 if (!link->network->bridge &&
2369 !link->network->bond &&
2370 !link->network->vrf &&
2371 hashmap_isempty(link->network->stacked_netdevs))
2372 return link_joined(link);
2373
2374 if (link->network->bond) {
2375 if (link->network->bond->state == NETDEV_STATE_READY &&
2376 link->network->bond->ifindex == link->master_ifindex)
2377 return link_joined(link);
2378
2379 log_struct(LOG_DEBUG,
2380 LOG_LINK_INTERFACE(link),
2381 LOG_NETDEV_INTERFACE(link->network->bond),
2382 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", link->network->bond->ifname));
2383
2384 r = netdev_join(link->network->bond, link, netdev_join_handler);
2385 if (r < 0) {
2386 log_struct_errno(LOG_WARNING, r,
2387 LOG_LINK_INTERFACE(link),
2388 LOG_NETDEV_INTERFACE(link->network->bond),
2389 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", link->network->bond->ifname));
2390 link_enter_failed(link);
2391 return r;
2392 }
2393
2394 link->enslaving++;
2395 }
2396
2397 if (link->network->bridge) {
2398 log_struct(LOG_DEBUG,
2399 LOG_LINK_INTERFACE(link),
2400 LOG_NETDEV_INTERFACE(link->network->bridge),
2401 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", link->network->bridge->ifname));
2402
2403 r = netdev_join(link->network->bridge, link, netdev_join_handler);
2404 if (r < 0) {
2405 log_struct_errno(LOG_WARNING, r,
2406 LOG_LINK_INTERFACE(link),
2407 LOG_NETDEV_INTERFACE(link->network->bridge),
2408 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", link->network->bridge->ifname));
2409 link_enter_failed(link);
2410 return r;
2411 }
2412
2413 link->enslaving++;
2414 }
2415
2416 if (link->network->vrf) {
2417 log_struct(LOG_DEBUG,
2418 LOG_LINK_INTERFACE(link),
2419 LOG_NETDEV_INTERFACE(link->network->vrf),
2420 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", link->network->vrf->ifname));
2421
2422 r = netdev_join(link->network->vrf, link, netdev_join_handler);
2423 if (r < 0) {
2424 log_struct_errno(LOG_WARNING, r,
2425 LOG_LINK_INTERFACE(link),
2426 LOG_NETDEV_INTERFACE(link->network->vrf),
2427 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", link->network->vrf->ifname));
2428 link_enter_failed(link);
2429 return r;
2430 }
2431
2432 link->enslaving++;
2433 }
2434
2435 HASHMAP_FOREACH(netdev, link->network->stacked_netdevs, i) {
2436
2437 if (netdev->ifindex > 0) {
2438 link_joined(link);
2439 continue;
2440 }
2441
2442 log_struct(LOG_DEBUG,
2443 LOG_LINK_INTERFACE(link),
2444 LOG_NETDEV_INTERFACE(netdev),
2445 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", netdev->ifname));
2446
2447 r = netdev_join(netdev, link, netdev_join_handler);
2448 if (r < 0) {
2449 log_struct_errno(LOG_WARNING, r,
2450 LOG_LINK_INTERFACE(link),
2451 LOG_NETDEV_INTERFACE(netdev),
2452 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", netdev->ifname));
2453 link_enter_failed(link);
2454 return r;
2455 }
2456
2457 link->enslaving++;
2458 }
2459
2460 return 0;
2461 }
2462
2463 static int link_set_ipv4_forward(Link *link) {
2464 int r;
2465
2466 if (!link_ipv4_forward_enabled(link))
2467 return 0;
2468
2469 /* We propagate the forwarding flag from one interface to the
2470 * global setting one way. This means: as long as at least one
2471 * interface was configured at any time that had IP forwarding
2472 * enabled the setting will stay on for good. We do this
2473 * primarily to keep IPv4 and IPv6 packet forwarding behaviour
2474 * somewhat in sync (see below). */
2475
2476 r = write_string_file("/proc/sys/net/ipv4/ip_forward", "1", WRITE_STRING_FILE_VERIFY_ON_FAILURE | WRITE_STRING_FILE_DISABLE_BUFFER);
2477 if (r < 0)
2478 log_link_warning_errno(link, r, "Cannot turn on IPv4 packet forwarding, ignoring: %m");
2479
2480 return 0;
2481 }
2482
2483 static int link_set_ipv6_forward(Link *link) {
2484 int r;
2485
2486 if (!link_ipv6_forward_enabled(link))
2487 return 0;
2488
2489 /* On Linux, the IPv6 stack does not know a per-interface
2490 * packet forwarding setting: either packet forwarding is on
2491 * for all, or off for all. We hence don't bother with a
2492 * per-interface setting, but simply propagate the interface
2493 * flag, if it is set, to the global flag, one-way. Note that
2494 * while IPv4 would allow a per-interface flag, we expose the
2495 * same behaviour there and also propagate the setting from
2496 * one to all, to keep things simple (see above). */
2497
2498 r = write_string_file("/proc/sys/net/ipv6/conf/all/forwarding", "1", WRITE_STRING_FILE_VERIFY_ON_FAILURE | WRITE_STRING_FILE_DISABLE_BUFFER);
2499 if (r < 0)
2500 log_link_warning_errno(link, r, "Cannot configure IPv6 packet forwarding, ignoring: %m");
2501
2502 return 0;
2503 }
2504
2505 static int link_set_ipv6_privacy_extensions(Link *link) {
2506 char buf[DECIMAL_STR_MAX(unsigned) + 1];
2507 IPv6PrivacyExtensions s;
2508 const char *p = NULL;
2509 int r;
2510
2511 s = link_ipv6_privacy_extensions(link);
2512 if (s < 0)
2513 return 0;
2514
2515 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/use_tempaddr");
2516 xsprintf(buf, "%u", (unsigned) link->network->ipv6_privacy_extensions);
2517
2518 r = write_string_file(p, buf, WRITE_STRING_FILE_VERIFY_ON_FAILURE | WRITE_STRING_FILE_DISABLE_BUFFER);
2519 if (r < 0)
2520 log_link_warning_errno(link, r, "Cannot configure IPv6 privacy extension for interface: %m");
2521
2522 return 0;
2523 }
2524
2525 static int link_set_ipv6_accept_ra(Link *link) {
2526 const char *p = NULL;
2527 int r;
2528
2529 /* Make this a NOP if IPv6 is not available */
2530 if (!socket_ipv6_is_supported())
2531 return 0;
2532
2533 if (link->flags & IFF_LOOPBACK)
2534 return 0;
2535
2536 if (!link->network)
2537 return 0;
2538
2539 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/accept_ra");
2540
2541 /* We handle router advertisements ourselves, tell the kernel to GTFO */
2542 r = write_string_file(p, "0", WRITE_STRING_FILE_VERIFY_ON_FAILURE | WRITE_STRING_FILE_DISABLE_BUFFER);
2543 if (r < 0)
2544 log_link_warning_errno(link, r, "Cannot disable kernel IPv6 accept_ra for interface: %m");
2545
2546 return 0;
2547 }
2548
2549 static int link_set_ipv6_dad_transmits(Link *link) {
2550 char buf[DECIMAL_STR_MAX(int) + 1];
2551 const char *p = NULL;
2552 int r;
2553
2554 /* Make this a NOP if IPv6 is not available */
2555 if (!socket_ipv6_is_supported())
2556 return 0;
2557
2558 if (link->flags & IFF_LOOPBACK)
2559 return 0;
2560
2561 if (!link->network)
2562 return 0;
2563
2564 if (link->network->ipv6_dad_transmits < 0)
2565 return 0;
2566
2567 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/dad_transmits");
2568 xsprintf(buf, "%i", link->network->ipv6_dad_transmits);
2569
2570 r = write_string_file(p, buf, WRITE_STRING_FILE_VERIFY_ON_FAILURE | WRITE_STRING_FILE_DISABLE_BUFFER);
2571 if (r < 0)
2572 log_link_warning_errno(link, r, "Cannot set IPv6 dad transmits for interface: %m");
2573
2574 return 0;
2575 }
2576
2577 static int link_set_ipv6_hop_limit(Link *link) {
2578 char buf[DECIMAL_STR_MAX(int) + 1];
2579 const char *p = NULL;
2580 int r;
2581
2582 /* Make this a NOP if IPv6 is not available */
2583 if (!socket_ipv6_is_supported())
2584 return 0;
2585
2586 if (link->flags & IFF_LOOPBACK)
2587 return 0;
2588
2589 if (!link->network)
2590 return 0;
2591
2592 if (link->network->ipv6_hop_limit < 0)
2593 return 0;
2594
2595 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/hop_limit");
2596 xsprintf(buf, "%i", link->network->ipv6_hop_limit);
2597
2598 r = write_string_file(p, buf, WRITE_STRING_FILE_VERIFY_ON_FAILURE | WRITE_STRING_FILE_DISABLE_BUFFER);
2599 if (r < 0)
2600 log_link_warning_errno(link, r, "Cannot set IPv6 hop limit for interface: %m");
2601
2602 return 0;
2603 }
2604
2605 static int link_set_ipv6_mtu(Link *link) {
2606 char buf[DECIMAL_STR_MAX(unsigned) + 1];
2607 const char *p = NULL;
2608 int r;
2609
2610 /* Make this a NOP if IPv6 is not available */
2611 if (!socket_ipv6_is_supported())
2612 return 0;
2613
2614 if (link->flags & IFF_LOOPBACK)
2615 return 0;
2616
2617 if (link->network->ipv6_mtu == 0)
2618 return 0;
2619
2620 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/mtu");
2621
2622 xsprintf(buf, "%" PRIu32, link->network->ipv6_mtu);
2623
2624 r = write_string_file(p, buf, WRITE_STRING_FILE_DISABLE_BUFFER);
2625 if (r < 0)
2626 log_link_warning_errno(link, r, "Cannot set IPv6 MTU for interface: %m");
2627
2628 return 0;
2629 }
2630
2631 static bool link_is_static_address_configured(Link *link, Address *address) {
2632 Address *net_address;
2633
2634 assert(link);
2635 assert(address);
2636
2637 if (!link->network)
2638 return false;
2639
2640 LIST_FOREACH(addresses, net_address, link->network->static_addresses)
2641 if (address_equal(net_address, address))
2642 return true;
2643
2644 return false;
2645 }
2646
2647 static bool link_is_static_route_configured(Link *link, Route *route) {
2648 Route *net_route;
2649
2650 assert(link);
2651 assert(route);
2652
2653 if (!link->network)
2654 return false;
2655
2656 LIST_FOREACH(routes, net_route, link->network->static_routes)
2657 if (route_equal(net_route, route))
2658 return true;
2659
2660 return false;
2661 }
2662
2663 static int link_drop_foreign_config(Link *link) {
2664 Address *address;
2665 Route *route;
2666 Iterator i;
2667 int r;
2668
2669 SET_FOREACH(address, link->addresses_foreign, i) {
2670 /* we consider IPv6LL addresses to be managed by the kernel */
2671 if (address->family == AF_INET6 && in_addr_is_link_local(AF_INET6, &address->in_addr) == 1)
2672 continue;
2673
2674 if (link_is_static_address_configured(link, address)) {
2675 r = address_add(link, address->family, &address->in_addr, address->prefixlen, NULL);
2676 if (r < 0)
2677 return log_link_error_errno(link, r, "Failed to add address: %m");
2678 } else {
2679 r = address_remove(address, link, link_address_remove_handler);
2680 if (r < 0)
2681 return r;
2682 }
2683 }
2684
2685 SET_FOREACH(route, link->routes_foreign, i) {
2686 /* do not touch routes managed by the kernel */
2687 if (route->protocol == RTPROT_KERNEL)
2688 continue;
2689
2690 if (link_is_static_route_configured(link, route)) {
2691 r = route_add(link, route->family, &route->dst, route->dst_prefixlen, route->tos, route->priority, route->table, NULL);
2692 if (r < 0)
2693 return r;
2694 } else {
2695 r = route_remove(route, link, link_route_remove_handler);
2696 if (r < 0)
2697 return r;
2698 }
2699 }
2700
2701 return 0;
2702 }
2703
2704 static int link_drop_config(Link *link) {
2705 Address *address, *pool_address;
2706 Route *route;
2707 Iterator i;
2708 int r;
2709
2710 SET_FOREACH(address, link->addresses, i) {
2711 /* we consider IPv6LL addresses to be managed by the kernel */
2712 if (address->family == AF_INET6 && in_addr_is_link_local(AF_INET6, &address->in_addr) == 1)
2713 continue;
2714
2715 r = address_remove(address, link, link_address_remove_handler);
2716 if (r < 0)
2717 return r;
2718
2719 /* If this address came from an address pool, clean up the pool */
2720 LIST_FOREACH(addresses, pool_address, link->pool_addresses) {
2721 if (address_equal(address, pool_address)) {
2722 LIST_REMOVE(addresses, link->pool_addresses, pool_address);
2723 address_free(pool_address);
2724 break;
2725 }
2726 }
2727 }
2728
2729 SET_FOREACH(route, link->routes, i) {
2730 /* do not touch routes managed by the kernel */
2731 if (route->protocol == RTPROT_KERNEL)
2732 continue;
2733
2734 r = route_remove(route, link, link_route_remove_handler);
2735 if (r < 0)
2736 return r;
2737 }
2738
2739 ndisc_flush(link);
2740
2741 return 0;
2742 }
2743
2744 static int link_update_lldp(Link *link) {
2745 int r;
2746
2747 assert(link);
2748
2749 if (!link->lldp)
2750 return 0;
2751
2752 if (link->flags & IFF_UP) {
2753 r = sd_lldp_start(link->lldp);
2754 if (r > 0)
2755 log_link_debug(link, "Started LLDP.");
2756 } else {
2757 r = sd_lldp_stop(link->lldp);
2758 if (r > 0)
2759 log_link_debug(link, "Stopped LLDP.");
2760 }
2761
2762 return r;
2763 }
2764
2765 static int link_configure_can(Link *link) {
2766 int r;
2767
2768 if (streq_ptr(link->kind, "can")) {
2769 /* The CAN interface must be down to configure bitrate, etc... */
2770 if ((link->flags & IFF_UP)) {
2771 r = link_down(link);
2772 if (r < 0) {
2773 link_enter_failed(link);
2774 return r;
2775 }
2776
2777 return 0;
2778 }
2779
2780 return link_set_can(link);
2781 }
2782
2783 if (!(link->flags & IFF_UP)) {
2784 r = link_up_can(link);
2785 if (r < 0) {
2786 link_enter_failed(link);
2787 return r;
2788 }
2789 }
2790
2791 return 0;
2792 }
2793
2794 static int link_configure(Link *link) {
2795 int r;
2796
2797 assert(link);
2798 assert(link->network);
2799 assert(link->state == LINK_STATE_PENDING);
2800
2801 if (STRPTR_IN_SET(link->kind, "can", "vcan"))
2802 return link_configure_can(link);
2803
2804 /* Drop foreign config, but ignore loopback or critical devices.
2805 * We do not want to remove loopback address or addresses used for root NFS. */
2806 if (!(link->flags & IFF_LOOPBACK) && !(link->network->dhcp_critical)) {
2807 r = link_drop_foreign_config(link);
2808 if (r < 0)
2809 return r;
2810 }
2811
2812 r = link_set_proxy_arp(link);
2813 if (r < 0)
2814 return r;
2815
2816 r = ipv6_proxy_ndp_addresses_configure(link);
2817 if (r < 0)
2818 return r;
2819
2820 r = link_set_ipv4_forward(link);
2821 if (r < 0)
2822 return r;
2823
2824 r = link_set_ipv6_forward(link);
2825 if (r < 0)
2826 return r;
2827
2828 r = link_set_ipv6_privacy_extensions(link);
2829 if (r < 0)
2830 return r;
2831
2832 r = link_set_ipv6_accept_ra(link);
2833 if (r < 0)
2834 return r;
2835
2836 r = link_set_ipv6_dad_transmits(link);
2837 if (r < 0)
2838 return r;
2839
2840 r = link_set_ipv6_hop_limit(link);
2841 if (r < 0)
2842 return r;
2843
2844 r = link_set_flags(link);
2845 if (r < 0)
2846 return r;
2847
2848 r = link_set_ipv6_mtu(link);
2849 if (r < 0)
2850 return r;
2851
2852 if (link_ipv4ll_enabled(link)) {
2853 r = ipv4ll_configure(link);
2854 if (r < 0)
2855 return r;
2856 }
2857
2858 if (link_dhcp4_enabled(link)) {
2859 r = dhcp4_set_promote_secondaries(link);
2860 if (r < 0)
2861 return r;
2862
2863 r = dhcp4_configure(link);
2864 if (r < 0)
2865 return r;
2866 }
2867
2868 if (link_dhcp4_server_enabled(link)) {
2869 r = sd_dhcp_server_new(&link->dhcp_server, link->ifindex);
2870 if (r < 0)
2871 return r;
2872
2873 r = sd_dhcp_server_attach_event(link->dhcp_server, NULL, 0);
2874 if (r < 0)
2875 return r;
2876 }
2877
2878 if (link_dhcp6_enabled(link) ||
2879 link_ipv6_accept_ra_enabled(link)) {
2880 r = dhcp6_configure(link);
2881 if (r < 0)
2882 return r;
2883 }
2884
2885 if (link_ipv6_accept_ra_enabled(link)) {
2886 r = ndisc_configure(link);
2887 if (r < 0)
2888 return r;
2889 }
2890
2891 if (link_radv_enabled(link)) {
2892 r = radv_configure(link);
2893 if (r < 0)
2894 return r;
2895 }
2896
2897 if (link_lldp_rx_enabled(link)) {
2898 r = sd_lldp_new(&link->lldp);
2899 if (r < 0)
2900 return r;
2901
2902 r = sd_lldp_set_ifindex(link->lldp, link->ifindex);
2903 if (r < 0)
2904 return r;
2905
2906 r = sd_lldp_match_capabilities(link->lldp,
2907 link->network->lldp_mode == LLDP_MODE_ROUTERS_ONLY ?
2908 SD_LLDP_SYSTEM_CAPABILITIES_ALL_ROUTERS :
2909 SD_LLDP_SYSTEM_CAPABILITIES_ALL);
2910 if (r < 0)
2911 return r;
2912
2913 r = sd_lldp_set_filter_address(link->lldp, &link->mac);
2914 if (r < 0)
2915 return r;
2916
2917 r = sd_lldp_attach_event(link->lldp, NULL, 0);
2918 if (r < 0)
2919 return r;
2920
2921 r = sd_lldp_set_callback(link->lldp, lldp_handler, link);
2922 if (r < 0)
2923 return r;
2924
2925 r = link_update_lldp(link);
2926 if (r < 0)
2927 return r;
2928 }
2929
2930 if (link->network->mtu > 0) {
2931 r = link_set_mtu(link, link->network->mtu);
2932 if (r < 0)
2933 return r;
2934 }
2935
2936 return link_configure_after_setting_mtu(link);
2937 }
2938
2939 static int link_configure_after_setting_mtu(Link *link) {
2940 int r;
2941
2942 assert(link);
2943 assert(link->network);
2944 assert(link->state == LINK_STATE_PENDING);
2945
2946 if (link->setting_mtu)
2947 return 0;
2948
2949 if (link_has_carrier(link) || link->network->configure_without_carrier) {
2950 r = link_acquire_conf(link);
2951 if (r < 0)
2952 return r;
2953 }
2954
2955 return link_enter_join_netdev(link);
2956 }
2957
2958 static int duid_set_uuid(DUID *duid, sd_id128_t uuid) {
2959 assert(duid);
2960
2961 if (duid->raw_data_len > 0)
2962 return 0;
2963
2964 if (duid->type != DUID_TYPE_UUID)
2965 return -EINVAL;
2966
2967 memcpy(&duid->raw_data, &uuid, sizeof(sd_id128_t));
2968 duid->raw_data_len = sizeof(sd_id128_t);
2969
2970 return 1;
2971 }
2972
2973 int get_product_uuid_handler(sd_bus_message *m, void *userdata, sd_bus_error *ret_error) {
2974 Manager *manager = userdata;
2975 const sd_bus_error *e;
2976 const void *a;
2977 size_t sz;
2978 DUID *duid;
2979 Link *link;
2980 int r;
2981
2982 assert(m);
2983 assert(manager);
2984
2985 e = sd_bus_message_get_error(m);
2986 if (e) {
2987 log_error_errno(sd_bus_error_get_errno(e),
2988 "Could not get product UUID. Falling back to use machine-app-specific ID as DUID-UUID: %s",
2989 e->message);
2990 goto configure;
2991 }
2992
2993 r = sd_bus_message_read_array(m, 'y', &a, &sz);
2994 if (r < 0)
2995 goto configure;
2996
2997 if (sz != sizeof(sd_id128_t)) {
2998 log_error("Invalid product UUID. Falling back to use machine-app-specific ID as DUID-UUID.");
2999 goto configure;
3000 }
3001
3002 memcpy(&manager->product_uuid, a, sz);
3003 while ((duid = set_steal_first(manager->duids_requesting_uuid)))
3004 (void) duid_set_uuid(duid, manager->product_uuid);
3005
3006 manager->duids_requesting_uuid = set_free(manager->duids_requesting_uuid);
3007
3008 configure:
3009 while ((link = set_steal_first(manager->links_requesting_uuid))) {
3010 r = link_configure(link);
3011 if (r < 0)
3012 log_link_error_errno(link, r, "Failed to configure link: %m");
3013 }
3014
3015 manager->links_requesting_uuid = set_free(manager->links_requesting_uuid);
3016
3017 /* To avoid calling GetProductUUID() bus method so frequently, set the flag below
3018 * even if the method fails. */
3019 manager->has_product_uuid = true;
3020
3021 return 1;
3022 }
3023
3024 static bool link_requires_uuid(Link *link) {
3025 const DUID *duid;
3026
3027 assert(link);
3028 assert(link->manager);
3029 assert(link->network);
3030
3031 duid = link_get_duid(link);
3032 if (duid->type != DUID_TYPE_UUID || duid->raw_data_len != 0)
3033 return false;
3034
3035 if (link_dhcp4_enabled(link) && IN_SET(link->network->dhcp_client_identifier, DHCP_CLIENT_ID_DUID, DHCP_CLIENT_ID_DUID_ONLY))
3036 return true;
3037
3038 if (link_dhcp6_enabled(link) || link_ipv6_accept_ra_enabled(link))
3039 return true;
3040
3041 return false;
3042 }
3043
3044 static int link_configure_duid(Link *link) {
3045 Manager *m;
3046 DUID *duid;
3047 int r;
3048
3049 assert(link);
3050 assert(link->manager);
3051 assert(link->network);
3052
3053 m = link->manager;
3054 duid = link_get_duid(link);
3055
3056 if (!link_requires_uuid(link))
3057 return 1;
3058
3059 if (m->has_product_uuid) {
3060 (void) duid_set_uuid(duid, m->product_uuid);
3061 return 1;
3062 }
3063
3064 if (!m->links_requesting_uuid) {
3065 r = manager_request_product_uuid(m, link);
3066 if (r < 0) {
3067 if (r == -ENOMEM)
3068 return r;
3069
3070 log_link_warning_errno(link, r,
3071 "Failed to get product UUID. Falling back to use machine-app-specific ID as DUID-UUID: %m");
3072 return 1;
3073 }
3074 } else {
3075 r = set_put(m->links_requesting_uuid, link);
3076 if (r < 0)
3077 return log_oom();
3078
3079 r = set_put(m->duids_requesting_uuid, duid);
3080 if (r < 0)
3081 return log_oom();
3082 }
3083
3084 return 0;
3085 }
3086
3087 static int link_initialized_and_synced(Link *link) {
3088 Network *network;
3089 int r;
3090
3091 assert(link);
3092 assert(link->ifname);
3093 assert(link->manager);
3094
3095 if (link->state != LINK_STATE_PENDING)
3096 return 1;
3097
3098 log_link_debug(link, "Link state is up-to-date");
3099
3100 r = link_new_bound_by_list(link);
3101 if (r < 0)
3102 return r;
3103
3104 r = link_handle_bound_by_list(link);
3105 if (r < 0)
3106 return r;
3107
3108 if (!link->network) {
3109 r = network_get(link->manager, link->sd_device, link->ifname,
3110 &link->mac, &network);
3111 if (r == -ENOENT) {
3112 link_enter_unmanaged(link);
3113 return 1;
3114 } else if (r == 0 && network->unmanaged) {
3115 link_enter_unmanaged(link);
3116 return 0;
3117 } else if (r < 0)
3118 return r;
3119
3120 if (link->flags & IFF_LOOPBACK) {
3121 if (network->link_local != ADDRESS_FAMILY_NO)
3122 log_link_debug(link, "Ignoring link-local autoconfiguration for loopback link");
3123
3124 if (network->dhcp != ADDRESS_FAMILY_NO)
3125 log_link_debug(link, "Ignoring DHCP clients for loopback link");
3126
3127 if (network->dhcp_server)
3128 log_link_debug(link, "Ignoring DHCP server for loopback link");
3129 }
3130
3131 r = network_apply(network, link);
3132 if (r < 0)
3133 return r;
3134 }
3135
3136 r = link_new_bound_to_list(link);
3137 if (r < 0)
3138 return r;
3139
3140 /* link_configure_duid() returns 0 if it requests product UUID. In that case,
3141 * link_configure() is called later asynchronously. */
3142 r = link_configure_duid(link);
3143 if (r <= 0)
3144 return r;
3145
3146 r = link_configure(link);
3147 if (r < 0)
3148 return r;
3149
3150 return 1;
3151 }
3152
3153 static int link_initialized_handler(sd_netlink *rtnl, sd_netlink_message *m, void *userdata) {
3154 (void) link_initialized_and_synced(userdata);
3155 return 1;
3156 }
3157
3158 int link_initialized(Link *link, sd_device *device) {
3159 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
3160 int r;
3161
3162 assert(link);
3163 assert(link->manager);
3164 assert(link->manager->rtnl);
3165 assert(device);
3166
3167 if (link->state != LINK_STATE_PENDING)
3168 return 0;
3169
3170 if (link->sd_device)
3171 return 0;
3172
3173 log_link_debug(link, "udev initialized link");
3174
3175 link->sd_device = sd_device_ref(device);
3176
3177 /* udev has initialized the link, but we don't know if we have yet
3178 * processed the NEWLINK messages with the latest state. Do a GETLINK,
3179 * when it returns we know that the pending NEWLINKs have already been
3180 * processed and that we are up-to-date */
3181
3182 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_GETLINK,
3183 link->ifindex);
3184 if (r < 0)
3185 return r;
3186
3187 r = sd_netlink_call_async(link->manager->rtnl, NULL, req, link_initialized_handler,
3188 link_netlink_destroy_callback, link, 0, __func__);
3189 if (r < 0)
3190 return r;
3191
3192 link_ref(link);
3193
3194 return 0;
3195 }
3196
3197 static int link_load(Link *link) {
3198 _cleanup_free_ char *network_file = NULL,
3199 *addresses = NULL,
3200 *routes = NULL,
3201 *dhcp4_address = NULL,
3202 *ipv4ll_address = NULL;
3203 union in_addr_union address;
3204 union in_addr_union route_dst;
3205 const char *p;
3206 int r;
3207
3208 assert(link);
3209
3210 r = parse_env_file(NULL, link->state_file, NEWLINE,
3211 "NETWORK_FILE", &network_file,
3212 "ADDRESSES", &addresses,
3213 "ROUTES", &routes,
3214 "DHCP4_ADDRESS", &dhcp4_address,
3215 "IPV4LL_ADDRESS", &ipv4ll_address,
3216 NULL);
3217 if (r < 0 && r != -ENOENT)
3218 return log_link_error_errno(link, r, "Failed to read %s: %m", link->state_file);
3219
3220 if (network_file) {
3221 Network *network;
3222 char *suffix;
3223
3224 /* drop suffix */
3225 suffix = strrchr(network_file, '.');
3226 if (!suffix) {
3227 log_link_debug(link, "Failed to get network name from %s", network_file);
3228 goto network_file_fail;
3229 }
3230 *suffix = '\0';
3231
3232 r = network_get_by_name(link->manager, basename(network_file), &network);
3233 if (r < 0) {
3234 log_link_debug_errno(link, r, "Failed to get network %s: %m", basename(network_file));
3235 goto network_file_fail;
3236 }
3237
3238 r = network_apply(network, link);
3239 if (r < 0)
3240 return log_link_error_errno(link, r, "Failed to apply network %s: %m", basename(network_file));
3241 }
3242
3243 network_file_fail:
3244
3245 if (addresses) {
3246 p = addresses;
3247
3248 for (;;) {
3249 _cleanup_free_ char *address_str = NULL;
3250 char *prefixlen_str;
3251 int family;
3252 unsigned char prefixlen;
3253
3254 r = extract_first_word(&p, &address_str, NULL, 0);
3255 if (r < 0) {
3256 log_link_debug_errno(link, r, "Failed to extract next address string: %m");
3257 continue;
3258 }
3259 if (r == 0)
3260 break;
3261
3262 prefixlen_str = strchr(address_str, '/');
3263 if (!prefixlen_str) {
3264 log_link_debug(link, "Failed to parse address and prefix length %s", address_str);
3265 continue;
3266 }
3267
3268 *prefixlen_str++ = '\0';
3269
3270 r = sscanf(prefixlen_str, "%hhu", &prefixlen);
3271 if (r != 1) {
3272 log_link_error(link, "Failed to parse prefixlen %s", prefixlen_str);
3273 continue;
3274 }
3275
3276 r = in_addr_from_string_auto(address_str, &family, &address);
3277 if (r < 0) {
3278 log_link_debug_errno(link, r, "Failed to parse address %s: %m", address_str);
3279 continue;
3280 }
3281
3282 r = address_add(link, family, &address, prefixlen, NULL);
3283 if (r < 0)
3284 return log_link_error_errno(link, r, "Failed to add address: %m");
3285 }
3286 }
3287
3288 if (routes) {
3289 p = routes;
3290
3291 for (;;) {
3292 Route *route;
3293 _cleanup_free_ char *route_str = NULL;
3294 _cleanup_(sd_event_source_unrefp) sd_event_source *expire = NULL;
3295 usec_t lifetime;
3296 char *prefixlen_str;
3297 int family;
3298 unsigned char prefixlen, tos, table;
3299 uint32_t priority;
3300
3301 r = extract_first_word(&p, &route_str, NULL, 0);
3302 if (r < 0) {
3303 log_link_debug_errno(link, r, "Failed to extract next route string: %m");
3304 continue;
3305 }
3306 if (r == 0)
3307 break;
3308
3309 prefixlen_str = strchr(route_str, '/');
3310 if (!prefixlen_str) {
3311 log_link_debug(link, "Failed to parse route %s", route_str);
3312 continue;
3313 }
3314
3315 *prefixlen_str++ = '\0';
3316
3317 r = sscanf(prefixlen_str, "%hhu/%hhu/%"SCNu32"/%hhu/"USEC_FMT, &prefixlen, &tos, &priority, &table, &lifetime);
3318 if (r != 5) {
3319 log_link_debug(link,
3320 "Failed to parse destination prefix length, tos, priority, table or expiration %s",
3321 prefixlen_str);
3322 continue;
3323 }
3324
3325 r = in_addr_from_string_auto(route_str, &family, &route_dst);
3326 if (r < 0) {
3327 log_link_debug_errno(link, r, "Failed to parse route destination %s: %m", route_str);
3328 continue;
3329 }
3330
3331 r = route_add(link, family, &route_dst, prefixlen, tos, priority, table, &route);
3332 if (r < 0)
3333 return log_link_error_errno(link, r, "Failed to add route: %m");
3334
3335 if (lifetime != USEC_INFINITY && !kernel_route_expiration_supported()) {
3336 r = sd_event_add_time(link->manager->event, &expire, clock_boottime_or_monotonic(), lifetime,
3337 0, route_expire_handler, route);
3338 if (r < 0)
3339 log_link_warning_errno(link, r, "Could not arm route expiration handler: %m");
3340 }
3341
3342 route->lifetime = lifetime;
3343 sd_event_source_unref(route->expire);
3344 route->expire = TAKE_PTR(expire);
3345 }
3346 }
3347
3348 if (dhcp4_address) {
3349 r = in_addr_from_string(AF_INET, dhcp4_address, &address);
3350 if (r < 0) {
3351 log_link_debug_errno(link, r, "Failed to parse DHCPv4 address %s: %m", dhcp4_address);
3352 goto dhcp4_address_fail;
3353 }
3354
3355 r = sd_dhcp_client_new(&link->dhcp_client, link->network ? link->network->dhcp_anonymize : 0);
3356 if (r < 0)
3357 return log_link_error_errno(link, r, "Failed to create DHCPv4 client: %m");
3358
3359 r = sd_dhcp_client_set_request_address(link->dhcp_client, &address.in);
3360 if (r < 0)
3361 return log_link_error_errno(link, r, "Failed to set initial DHCPv4 address %s: %m", dhcp4_address);
3362 }
3363
3364 dhcp4_address_fail:
3365
3366 if (ipv4ll_address) {
3367 r = in_addr_from_string(AF_INET, ipv4ll_address, &address);
3368 if (r < 0) {
3369 log_link_debug_errno(link, r, "Failed to parse IPv4LL address %s: %m", ipv4ll_address);
3370 goto ipv4ll_address_fail;
3371 }
3372
3373 r = sd_ipv4ll_new(&link->ipv4ll);
3374 if (r < 0)
3375 return log_link_error_errno(link, r, "Failed to create IPv4LL client: %m");
3376
3377 r = sd_ipv4ll_set_address(link->ipv4ll, &address.in);
3378 if (r < 0)
3379 return log_link_error_errno(link, r, "Failed to set initial IPv4LL address %s: %m", ipv4ll_address);
3380 }
3381
3382 ipv4ll_address_fail:
3383
3384 return 0;
3385 }
3386
3387 int link_add(Manager *m, sd_netlink_message *message, Link **ret) {
3388 _cleanup_(sd_device_unrefp) sd_device *device = NULL;
3389 char ifindex_str[2 + DECIMAL_STR_MAX(int)];
3390 Link *link;
3391 int r;
3392
3393 assert(m);
3394 assert(m->rtnl);
3395 assert(message);
3396 assert(ret);
3397
3398 r = link_new(m, message, ret);
3399 if (r < 0)
3400 return r;
3401
3402 link = *ret;
3403
3404 log_link_debug(link, "Link %d added", link->ifindex);
3405
3406 r = link_load(link);
3407 if (r < 0)
3408 return r;
3409
3410 if (detect_container() <= 0) {
3411 /* not in a container, udev will be around */
3412 sprintf(ifindex_str, "n%d", link->ifindex);
3413 r = sd_device_new_from_device_id(&device, ifindex_str);
3414 if (r < 0) {
3415 log_link_warning_errno(link, r, "Could not find device: %m");
3416 goto failed;
3417 }
3418
3419 r = sd_device_get_is_initialized(device);
3420 if (r < 0) {
3421 log_link_warning_errno(link, r, "Could not determine whether the device is initialized or not: %m");
3422 goto failed;
3423 }
3424 if (r == 0) {
3425 /* not yet ready */
3426 log_link_debug(link, "link pending udev initialization...");
3427 return 0;
3428 }
3429
3430 r = link_initialized(link, device);
3431 if (r < 0)
3432 goto failed;
3433 } else {
3434 r = link_initialized_and_synced(link);
3435 if (r < 0)
3436 goto failed;
3437 }
3438
3439 return 0;
3440 failed:
3441 link_enter_failed(link);
3442 return r;
3443 }
3444
3445 int link_ipv6ll_gained(Link *link, const struct in6_addr *address) {
3446 int r;
3447
3448 assert(link);
3449
3450 log_link_info(link, "Gained IPv6LL");
3451
3452 link->ipv6ll_address = *address;
3453 link_check_ready(link);
3454
3455 if (!IN_SET(link->state, LINK_STATE_PENDING, LINK_STATE_UNMANAGED, LINK_STATE_FAILED)) {
3456 r = link_acquire_ipv6_conf(link);
3457 if (r < 0) {
3458 link_enter_failed(link);
3459 return r;
3460 }
3461 }
3462
3463 return 0;
3464 }
3465
3466 static int link_carrier_gained(Link *link) {
3467 int r;
3468
3469 assert(link);
3470
3471 if (!IN_SET(link->state, LINK_STATE_PENDING, LINK_STATE_UNMANAGED, LINK_STATE_FAILED)) {
3472 r = link_acquire_conf(link);
3473 if (r < 0) {
3474 link_enter_failed(link);
3475 return r;
3476 }
3477
3478 r = link_enter_set_addresses(link);
3479 if (r < 0)
3480 return r;
3481 }
3482
3483 r = link_handle_bound_by_list(link);
3484 if (r < 0)
3485 return r;
3486
3487 return 0;
3488 }
3489
3490 static int link_carrier_lost(Link *link) {
3491 int r;
3492
3493 assert(link);
3494
3495 /* Some devices reset itself while setting the MTU. This causes the DHCP client fall into a loop.
3496 * setting_mtu keep track whether the device got reset because of setting MTU and does not drop the
3497 * configuration and stop the clients as well. */
3498 if (link->setting_mtu)
3499 return 0;
3500
3501 r = link_stop_clients(link);
3502 if (r < 0) {
3503 link_enter_failed(link);
3504 return r;
3505 }
3506
3507 if (link_dhcp4_server_enabled(link))
3508 (void) sd_dhcp_server_stop(link->dhcp_server);
3509
3510 r = link_drop_config(link);
3511 if (r < 0)
3512 return r;
3513
3514 if (!IN_SET(link->state, LINK_STATE_UNMANAGED, LINK_STATE_PENDING)) {
3515 log_link_debug(link, "State is %s, dropping config", link_state_to_string(link->state));
3516 r = link_drop_foreign_config(link);
3517 if (r < 0)
3518 return r;
3519 }
3520
3521 r = link_handle_bound_by_list(link);
3522 if (r < 0)
3523 return r;
3524
3525 return 0;
3526 }
3527
3528 int link_carrier_reset(Link *link) {
3529 int r;
3530
3531 assert(link);
3532
3533 if (link_has_carrier(link)) {
3534 r = link_carrier_lost(link);
3535 if (r < 0)
3536 return r;
3537
3538 r = link_carrier_gained(link);
3539 if (r < 0)
3540 return r;
3541
3542 log_link_info(link, "Reset carrier");
3543 }
3544
3545 return 0;
3546 }
3547
3548 int link_update(Link *link, sd_netlink_message *m) {
3549 struct ether_addr mac;
3550 const char *ifname;
3551 uint32_t mtu;
3552 bool had_carrier, carrier_gained, carrier_lost;
3553 int r;
3554
3555 assert(link);
3556 assert(link->ifname);
3557 assert(m);
3558
3559 if (link->state == LINK_STATE_LINGER) {
3560 log_link_info(link, "Link readded");
3561 link_set_state(link, LINK_STATE_ENSLAVING);
3562
3563 r = link_new_carrier_maps(link);
3564 if (r < 0)
3565 return r;
3566 }
3567
3568 r = sd_netlink_message_read_string(m, IFLA_IFNAME, &ifname);
3569 if (r >= 0 && !streq(ifname, link->ifname)) {
3570 log_link_info(link, "Interface name change detected, %s has been renamed to %s.", link->ifname, ifname);
3571
3572 if (link->state == LINK_STATE_PENDING) {
3573 r = free_and_strdup(&link->ifname, ifname);
3574 if (r < 0)
3575 return r;
3576 } else {
3577 Manager *manager = link->manager;
3578
3579 link_drop(link);
3580 r = link_add(manager, m, &link);
3581 if (r < 0)
3582 return r;
3583 }
3584 }
3585
3586 r = sd_netlink_message_read_u32(m, IFLA_MTU, &mtu);
3587 if (r >= 0 && mtu > 0) {
3588 link->mtu = mtu;
3589 if (link->original_mtu == 0) {
3590 link->original_mtu = mtu;
3591 log_link_debug(link, "Saved original MTU: %" PRIu32, link->original_mtu);
3592 }
3593
3594 if (link->dhcp_client) {
3595 r = sd_dhcp_client_set_mtu(link->dhcp_client,
3596 link->mtu);
3597 if (r < 0)
3598 return log_link_warning_errno(link, r, "Could not update MTU in DHCP client: %m");
3599 }
3600
3601 if (link->radv) {
3602 r = sd_radv_set_mtu(link->radv, link->mtu);
3603 if (r < 0)
3604 return log_link_warning_errno(link, r, "Could not set MTU for Router Advertisement: %m");
3605 }
3606 }
3607
3608 /* The kernel may broadcast NEWLINK messages without the MAC address
3609 set, simply ignore them. */
3610 r = sd_netlink_message_read_ether_addr(m, IFLA_ADDRESS, &mac);
3611 if (r >= 0) {
3612 if (memcmp(link->mac.ether_addr_octet, mac.ether_addr_octet,
3613 ETH_ALEN)) {
3614
3615 memcpy(link->mac.ether_addr_octet, mac.ether_addr_octet,
3616 ETH_ALEN);
3617
3618 log_link_debug(link, "MAC address: "
3619 "%02hhx:%02hhx:%02hhx:%02hhx:%02hhx:%02hhx",
3620 mac.ether_addr_octet[0],
3621 mac.ether_addr_octet[1],
3622 mac.ether_addr_octet[2],
3623 mac.ether_addr_octet[3],
3624 mac.ether_addr_octet[4],
3625 mac.ether_addr_octet[5]);
3626
3627 if (link->ipv4ll) {
3628 r = sd_ipv4ll_set_mac(link->ipv4ll, &link->mac);
3629 if (r < 0)
3630 return log_link_warning_errno(link, r, "Could not update MAC address in IPv4LL client: %m");
3631 }
3632
3633 if (link->dhcp_client) {
3634 r = sd_dhcp_client_set_mac(link->dhcp_client,
3635 (const uint8_t *) &link->mac,
3636 sizeof (link->mac),
3637 ARPHRD_ETHER);
3638 if (r < 0)
3639 return log_link_warning_errno(link, r, "Could not update MAC address in DHCP client: %m");
3640
3641 r = dhcp4_set_client_identifier(link);
3642 if (r < 0)
3643 return r;
3644 }
3645
3646 if (link->dhcp6_client) {
3647 const DUID* duid = link_get_duid(link);
3648
3649 r = sd_dhcp6_client_set_mac(link->dhcp6_client,
3650 (const uint8_t *) &link->mac,
3651 sizeof (link->mac),
3652 ARPHRD_ETHER);
3653 if (r < 0)
3654 return log_link_warning_errno(link, r, "Could not update MAC address in DHCPv6 client: %m");
3655
3656 r = sd_dhcp6_client_set_iaid(link->dhcp6_client,
3657 link->network->iaid);
3658 if (r < 0)
3659 return log_link_warning_errno(link, r, "Could not update DHCPv6 IAID: %m");
3660
3661 r = sd_dhcp6_client_set_duid(link->dhcp6_client,
3662 duid->type,
3663 duid->raw_data_len > 0 ? duid->raw_data : NULL,
3664 duid->raw_data_len);
3665 if (r < 0)
3666 return log_link_warning_errno(link, r, "Could not update DHCPv6 DUID: %m");
3667 }
3668
3669 if (link->radv) {
3670 r = sd_radv_set_mac(link->radv, &link->mac);
3671 if (r < 0)
3672 return log_link_warning_errno(link, r, "Could not update MAC for Router Advertisement: %m");
3673 }
3674
3675 if (link->ndisc) {
3676 r = sd_ndisc_set_mac(link->ndisc, &link->mac);
3677 if (r < 0)
3678 return log_link_warning_errno(link, r, "Could not update MAC for ndisc: %m");
3679 }
3680 }
3681 }
3682
3683 had_carrier = link_has_carrier(link);
3684
3685 r = link_update_flags(link, m);
3686 if (r < 0)
3687 return r;
3688
3689 r = link_update_lldp(link);
3690 if (r < 0)
3691 return r;
3692
3693 carrier_gained = !had_carrier && link_has_carrier(link);
3694 carrier_lost = had_carrier && !link_has_carrier(link);
3695
3696 if (carrier_gained) {
3697 log_link_info(link, "Gained carrier");
3698
3699 r = link_carrier_gained(link);
3700 if (r < 0)
3701 return r;
3702 } else if (carrier_lost) {
3703 log_link_info(link, "Lost carrier");
3704
3705 r = link_carrier_lost(link);
3706 if (r < 0)
3707 return r;
3708 }
3709
3710 return 0;
3711 }
3712
3713 static void print_link_hashmap(FILE *f, const char *prefix, Hashmap* h) {
3714 bool space = false;
3715 Iterator i;
3716 Link *link;
3717
3718 assert(f);
3719 assert(prefix);
3720
3721 if (hashmap_isempty(h))
3722 return;
3723
3724 fputs(prefix, f);
3725 HASHMAP_FOREACH(link, h, i) {
3726 if (space)
3727 fputc(' ', f);
3728
3729 fprintf(f, "%i", link->ifindex);
3730 space = true;
3731 }
3732
3733 fputc('\n', f);
3734 }
3735
3736 int link_save(Link *link) {
3737 _cleanup_free_ char *temp_path = NULL;
3738 _cleanup_fclose_ FILE *f = NULL;
3739 const char *admin_state, *oper_state;
3740 Address *a;
3741 Route *route;
3742 Iterator i;
3743 int r;
3744
3745 assert(link);
3746 assert(link->state_file);
3747 assert(link->lease_file);
3748 assert(link->manager);
3749
3750 if (link->state == LINK_STATE_LINGER) {
3751 unlink(link->state_file);
3752 return 0;
3753 }
3754
3755 link_lldp_save(link);
3756
3757 admin_state = link_state_to_string(link->state);
3758 assert(admin_state);
3759
3760 oper_state = link_operstate_to_string(link->operstate);
3761 assert(oper_state);
3762
3763 r = fopen_temporary(link->state_file, &f, &temp_path);
3764 if (r < 0)
3765 goto fail;
3766
3767 (void) __fsetlocking(f, FSETLOCKING_BYCALLER);
3768 (void) fchmod(fileno(f), 0644);
3769
3770 fprintf(f,
3771 "# This is private data. Do not parse.\n"
3772 "ADMIN_STATE=%s\n"
3773 "OPER_STATE=%s\n",
3774 admin_state, oper_state);
3775
3776 if (link->network) {
3777 bool space;
3778 sd_dhcp6_lease *dhcp6_lease = NULL;
3779 const char *dhcp_domainname = NULL;
3780 char **dhcp6_domains = NULL;
3781 char **dhcp_domains = NULL;
3782 unsigned j;
3783
3784 fprintf(f, "REQUIRED_FOR_ONLINE=%s\n",
3785 yes_no(link->network->required_for_online));
3786
3787 if (link->dhcp6_client) {
3788 r = sd_dhcp6_client_get_lease(link->dhcp6_client, &dhcp6_lease);
3789 if (r < 0 && r != -ENOMSG)
3790 log_link_debug(link, "No DHCPv6 lease");
3791 }
3792
3793 fprintf(f, "NETWORK_FILE=%s\n", link->network->filename);
3794
3795 fputs("DNS=", f);
3796 space = false;
3797
3798 for (j = 0; j < link->network->n_dns; j++) {
3799 _cleanup_free_ char *b = NULL;
3800
3801 r = in_addr_to_string(link->network->dns[j].family,
3802 &link->network->dns[j].address, &b);
3803 if (r < 0) {
3804 log_debug_errno(r, "Failed to format address, ignoring: %m");
3805 continue;
3806 }
3807
3808 if (space)
3809 fputc(' ', f);
3810 fputs(b, f);
3811 space = true;
3812 }
3813
3814 if (link->network->dhcp_use_dns &&
3815 link->dhcp_lease) {
3816 const struct in_addr *addresses;
3817
3818 r = sd_dhcp_lease_get_dns(link->dhcp_lease, &addresses);
3819 if (r > 0) {
3820 if (space)
3821 fputc(' ', f);
3822 serialize_in_addrs(f, addresses, r);
3823 space = true;
3824 }
3825 }
3826
3827 if (link->network->dhcp_use_dns && dhcp6_lease) {
3828 struct in6_addr *in6_addrs;
3829
3830 r = sd_dhcp6_lease_get_dns(dhcp6_lease, &in6_addrs);
3831 if (r > 0) {
3832 if (space)
3833 fputc(' ', f);
3834 serialize_in6_addrs(f, in6_addrs, r);
3835 space = true;
3836 }
3837 }
3838
3839 /* Make sure to flush out old entries before we use the NDISC data */
3840 ndisc_vacuum(link);
3841
3842 if (link->network->ipv6_accept_ra_use_dns && link->ndisc_rdnss) {
3843 NDiscRDNSS *dd;
3844
3845 SET_FOREACH(dd, link->ndisc_rdnss, i) {
3846 if (space)
3847 fputc(' ', f);
3848
3849 serialize_in6_addrs(f, &dd->address, 1);
3850 space = true;
3851 }
3852 }
3853
3854 fputc('\n', f);
3855
3856 fputs("NTP=", f);
3857 space = false;
3858 fputstrv(f, link->network->ntp, NULL, &space);
3859
3860 if (link->network->dhcp_use_ntp &&
3861 link->dhcp_lease) {
3862 const struct in_addr *addresses;
3863
3864 r = sd_dhcp_lease_get_ntp(link->dhcp_lease, &addresses);
3865 if (r > 0) {
3866 if (space)
3867 fputc(' ', f);
3868 serialize_in_addrs(f, addresses, r);
3869 space = true;
3870 }
3871 }
3872
3873 if (link->network->dhcp_use_ntp && dhcp6_lease) {
3874 struct in6_addr *in6_addrs;
3875 char **hosts;
3876
3877 r = sd_dhcp6_lease_get_ntp_addrs(dhcp6_lease,
3878 &in6_addrs);
3879 if (r > 0) {
3880 if (space)
3881 fputc(' ', f);
3882 serialize_in6_addrs(f, in6_addrs, r);
3883 space = true;
3884 }
3885
3886 r = sd_dhcp6_lease_get_ntp_fqdn(dhcp6_lease, &hosts);
3887 if (r > 0)
3888 fputstrv(f, hosts, NULL, &space);
3889 }
3890
3891 fputc('\n', f);
3892
3893 if (link->network->dhcp_use_domains != DHCP_USE_DOMAINS_NO) {
3894 if (link->dhcp_lease) {
3895 (void) sd_dhcp_lease_get_domainname(link->dhcp_lease, &dhcp_domainname);
3896 (void) sd_dhcp_lease_get_search_domains(link->dhcp_lease, &dhcp_domains);
3897 }
3898 if (dhcp6_lease)
3899 (void) sd_dhcp6_lease_get_domains(dhcp6_lease, &dhcp6_domains);
3900 }
3901
3902 fputs("DOMAINS=", f);
3903 space = false;
3904 fputstrv(f, link->network->search_domains, NULL, &space);
3905
3906 if (link->network->dhcp_use_domains == DHCP_USE_DOMAINS_YES) {
3907 NDiscDNSSL *dd;
3908
3909 if (dhcp_domainname)
3910 fputs_with_space(f, dhcp_domainname, NULL, &space);
3911 if (dhcp_domains)
3912 fputstrv(f, dhcp_domains, NULL, &space);
3913 if (dhcp6_domains)
3914 fputstrv(f, dhcp6_domains, NULL, &space);
3915
3916 SET_FOREACH(dd, link->ndisc_dnssl, i)
3917 fputs_with_space(f, NDISC_DNSSL_DOMAIN(dd), NULL, &space);
3918 }
3919
3920 fputc('\n', f);
3921
3922 fputs("ROUTE_DOMAINS=", f);
3923 space = false;
3924 fputstrv(f, link->network->route_domains, NULL, &space);
3925
3926 if (link->network->dhcp_use_domains == DHCP_USE_DOMAINS_ROUTE) {
3927 NDiscDNSSL *dd;
3928
3929 if (dhcp_domainname)
3930 fputs_with_space(f, dhcp_domainname, NULL, &space);
3931 if (dhcp_domains)
3932 fputstrv(f, dhcp_domains, NULL, &space);
3933 if (dhcp6_domains)
3934 fputstrv(f, dhcp6_domains, NULL, &space);
3935
3936 SET_FOREACH(dd, link->ndisc_dnssl, i)
3937 fputs_with_space(f, NDISC_DNSSL_DOMAIN(dd), NULL, &space);
3938 }
3939
3940 fputc('\n', f);
3941
3942 fprintf(f, "LLMNR=%s\n",
3943 resolve_support_to_string(link->network->llmnr));
3944 fprintf(f, "MDNS=%s\n",
3945 resolve_support_to_string(link->network->mdns));
3946
3947 if (link->network->dns_over_tls_mode != _DNS_OVER_TLS_MODE_INVALID)
3948 fprintf(f, "DNS_OVER_TLS=%s\n",
3949 dns_over_tls_mode_to_string(link->network->dns_over_tls_mode));
3950
3951 if (link->network->dnssec_mode != _DNSSEC_MODE_INVALID)
3952 fprintf(f, "DNSSEC=%s\n",
3953 dnssec_mode_to_string(link->network->dnssec_mode));
3954
3955 if (!set_isempty(link->network->dnssec_negative_trust_anchors)) {
3956 const char *n;
3957
3958 fputs("DNSSEC_NTA=", f);
3959 space = false;
3960 SET_FOREACH(n, link->network->dnssec_negative_trust_anchors, i)
3961 fputs_with_space(f, n, NULL, &space);
3962 fputc('\n', f);
3963 }
3964
3965 fputs("ADDRESSES=", f);
3966 space = false;
3967 SET_FOREACH(a, link->addresses, i) {
3968 _cleanup_free_ char *address_str = NULL;
3969
3970 r = in_addr_to_string(a->family, &a->in_addr, &address_str);
3971 if (r < 0)
3972 goto fail;
3973
3974 fprintf(f, "%s%s/%u", space ? " " : "", address_str, a->prefixlen);
3975 space = true;
3976 }
3977 fputc('\n', f);
3978
3979 fputs("ROUTES=", f);
3980 space = false;
3981 SET_FOREACH(route, link->routes, i) {
3982 _cleanup_free_ char *route_str = NULL;
3983
3984 r = in_addr_to_string(route->family, &route->dst, &route_str);
3985 if (r < 0)
3986 goto fail;
3987
3988 fprintf(f, "%s%s/%hhu/%hhu/%"PRIu32"/%"PRIu32"/"USEC_FMT,
3989 space ? " " : "", route_str,
3990 route->dst_prefixlen, route->tos, route->priority, route->table, route->lifetime);
3991 space = true;
3992 }
3993
3994 fputc('\n', f);
3995 }
3996
3997 print_link_hashmap(f, "CARRIER_BOUND_TO=", link->bound_to_links);
3998 print_link_hashmap(f, "CARRIER_BOUND_BY=", link->bound_by_links);
3999
4000 if (link->dhcp_lease) {
4001 struct in_addr address;
4002 const char *tz = NULL;
4003
4004 assert(link->network);
4005
4006 r = sd_dhcp_lease_get_timezone(link->dhcp_lease, &tz);
4007 if (r >= 0)
4008 fprintf(f, "TIMEZONE=%s\n", tz);
4009
4010 r = sd_dhcp_lease_get_address(link->dhcp_lease, &address);
4011 if (r >= 0) {
4012 fputs("DHCP4_ADDRESS=", f);
4013 serialize_in_addrs(f, &address, 1);
4014 fputc('\n', f);
4015 }
4016
4017 r = dhcp_lease_save(link->dhcp_lease, link->lease_file);
4018 if (r < 0)
4019 goto fail;
4020
4021 fprintf(f,
4022 "DHCP_LEASE=%s\n",
4023 link->lease_file);
4024 } else
4025 unlink(link->lease_file);
4026
4027 if (link->ipv4ll) {
4028 struct in_addr address;
4029
4030 r = sd_ipv4ll_get_address(link->ipv4ll, &address);
4031 if (r >= 0) {
4032 fputs("IPV4LL_ADDRESS=", f);
4033 serialize_in_addrs(f, &address, 1);
4034 fputc('\n', f);
4035 }
4036 }
4037
4038 r = fflush_and_check(f);
4039 if (r < 0)
4040 goto fail;
4041
4042 if (rename(temp_path, link->state_file) < 0) {
4043 r = -errno;
4044 goto fail;
4045 }
4046
4047 return 0;
4048
4049 fail:
4050 (void) unlink(link->state_file);
4051 if (temp_path)
4052 (void) unlink(temp_path);
4053
4054 return log_link_error_errno(link, r, "Failed to save link data to %s: %m", link->state_file);
4055 }
4056
4057 /* The serialized state in /run is no longer up-to-date. */
4058 void link_dirty(Link *link) {
4059 int r;
4060
4061 assert(link);
4062
4063 /* mark manager dirty as link is dirty */
4064 manager_dirty(link->manager);
4065
4066 r = set_ensure_allocated(&link->manager->dirty_links, NULL);
4067 if (r < 0)
4068 /* allocation errors are ignored */
4069 return;
4070
4071 r = set_put(link->manager->dirty_links, link);
4072 if (r <= 0)
4073 /* don't take another ref if the link was already dirty */
4074 return;
4075
4076 link_ref(link);
4077 }
4078
4079 /* The serialized state in /run is up-to-date */
4080 void link_clean(Link *link) {
4081 assert(link);
4082 assert(link->manager);
4083
4084 link_unref(set_remove(link->manager->dirty_links, link));
4085 }
4086
4087 static const char* const link_state_table[_LINK_STATE_MAX] = {
4088 [LINK_STATE_PENDING] = "pending",
4089 [LINK_STATE_ENSLAVING] = "configuring",
4090 [LINK_STATE_SETTING_ADDRESSES] = "configuring",
4091 [LINK_STATE_SETTING_ROUTES] = "configuring",
4092 [LINK_STATE_CONFIGURED] = "configured",
4093 [LINK_STATE_UNMANAGED] = "unmanaged",
4094 [LINK_STATE_FAILED] = "failed",
4095 [LINK_STATE_LINGER] = "linger",
4096 };
4097
4098 DEFINE_STRING_TABLE_LOOKUP(link_state, LinkState);
4099
4100 static const char* const link_operstate_table[_LINK_OPERSTATE_MAX] = {
4101 [LINK_OPERSTATE_OFF] = "off",
4102 [LINK_OPERSTATE_NO_CARRIER] = "no-carrier",
4103 [LINK_OPERSTATE_DORMANT] = "dormant",
4104 [LINK_OPERSTATE_CARRIER] = "carrier",
4105 [LINK_OPERSTATE_DEGRADED] = "degraded",
4106 [LINK_OPERSTATE_ROUTABLE] = "routable",
4107 };
4108
4109 DEFINE_STRING_TABLE_LOOKUP(link_operstate, LinkOperationalState);
Unnamed repository; edit this file 'description' to name the repository.