]> git.ipfire.org Git - thirdparty/systemd.git/blob - src/network/networkd-link.c
projects / thirdparty / systemd.git / blob
? search:
summary | shortlog | log | commit | commitdiff | tree
blame | history | raw | HEAD
network: manage addresses from pool by Set
[thirdparty/systemd.git] / src / network / networkd-link.c
1 /* SPDX-License-Identifier: LGPL-2.1+ */
2
3 #include <netinet/in.h>
4 #include <linux/if.h>
5 #include <linux/if_arp.h>
6 #include <linux/if_link.h>
7 #include <unistd.h>
8
9 #include "alloc-util.h"
10 #include "bond.h"
11 #include "bridge.h"
12 #include "bus-util.h"
13 #include "dhcp-identifier.h"
14 #include "dhcp-lease-internal.h"
15 #include "env-file.h"
16 #include "ethtool-util.h"
17 #include "fd-util.h"
18 #include "fileio.h"
19 #include "ipvlan.h"
20 #include "missing_network.h"
21 #include "netlink-util.h"
22 #include "network-internal.h"
23 #include "networkd-address-label.h"
24 #include "networkd-can.h"
25 #include "networkd-dhcp-server.h"
26 #include "networkd-dhcp4.h"
27 #include "networkd-dhcp6.h"
28 #include "networkd-fdb.h"
29 #include "networkd-ipv4ll.h"
30 #include "networkd-ipv6-proxy-ndp.h"
31 #include "networkd-link-bus.h"
32 #include "networkd-link.h"
33 #include "networkd-lldp-tx.h"
34 #include "networkd-manager.h"
35 #include "networkd-mdb.h"
36 #include "networkd-ndisc.h"
37 #include "networkd-neighbor.h"
38 #include "networkd-nexthop.h"
39 #include "networkd-sriov.h"
40 #include "networkd-radv.h"
41 #include "networkd-routing-policy-rule.h"
42 #include "networkd-wifi.h"
43 #include "set.h"
44 #include "socket-util.h"
45 #include "stat-util.h"
46 #include "stdio-util.h"
47 #include "string-table.h"
48 #include "strv.h"
49 #include "sysctl-util.h"
50 #include "tc.h"
51 #include "tmpfile-util.h"
52 #include "udev-util.h"
53 #include "util.h"
54 #include "vrf.h"
55
56 uint32_t link_get_vrf_table(Link *link) {
57 return link->network->vrf ? VRF(link->network->vrf)->table : RT_TABLE_MAIN;
58 }
59
60 uint32_t link_get_dhcp_route_table(Link *link) {
61 /* When the interface is part of an VRF use the VRFs routing table, unless
62 * another table is explicitly specified. */
63 if (link->network->dhcp_route_table_set)
64 return link->network->dhcp_route_table;
65 return link_get_vrf_table(link);
66 }
67
68 uint32_t link_get_ipv6_accept_ra_route_table(Link *link) {
69 if (link->network->ipv6_accept_ra_route_table_set)
70 return link->network->ipv6_accept_ra_route_table;
71 return link_get_vrf_table(link);
72 }
73
74 DUID* link_get_duid(Link *link) {
75 if (link->network->duid.type != _DUID_TYPE_INVALID)
76 return &link->network->duid;
77 else
78 return &link->manager->duid;
79 }
80
81 static bool link_dhcp6_enabled(Link *link) {
82 assert(link);
83
84 if (!socket_ipv6_is_supported())
85 return false;
86
87 if (link->flags & IFF_LOOPBACK)
88 return false;
89
90 if (!link->network)
91 return false;
92
93 if (link->network->bond)
94 return false;
95
96 if (link->iftype == ARPHRD_CAN)
97 return false;
98
99 return link->network->dhcp & ADDRESS_FAMILY_IPV6;
100 }
101
102 static bool link_dhcp4_enabled(Link *link) {
103 assert(link);
104
105 if (link->flags & IFF_LOOPBACK)
106 return false;
107
108 if (!link->network)
109 return false;
110
111 if (link->network->bond)
112 return false;
113
114 if (link->iftype == ARPHRD_CAN)
115 return false;
116
117 return link->network->dhcp & ADDRESS_FAMILY_IPV4;
118 }
119
120 static bool link_dhcp4_server_enabled(Link *link) {
121 assert(link);
122
123 if (link->flags & IFF_LOOPBACK)
124 return false;
125
126 if (!link->network)
127 return false;
128
129 if (link->network->bond)
130 return false;
131
132 if (link->iftype == ARPHRD_CAN)
133 return false;
134
135 return link->network->dhcp_server;
136 }
137
138 bool link_ipv4ll_enabled(Link *link, AddressFamily mask) {
139 assert(link);
140 assert((mask & ~(ADDRESS_FAMILY_IPV4 | ADDRESS_FAMILY_FALLBACK_IPV4)) == 0);
141
142 if (link->flags & IFF_LOOPBACK)
143 return false;
144
145 if (!link->network)
146 return false;
147
148 if (link->iftype == ARPHRD_CAN)
149 return false;
150
151 if (STRPTR_IN_SET(link->kind,
152 "vrf", "wireguard", "ipip", "gre", "ip6gre","ip6tnl", "sit", "vti",
153 "vti6", "nlmon", "xfrm", "bareudp"))
154 return false;
155
156 /* L3 or L3S mode do not support ARP. */
157 if (IN_SET(link_get_ipvlan_mode(link), NETDEV_IPVLAN_MODE_L3, NETDEV_IPVLAN_MODE_L3S))
158 return false;
159
160 if (link->network->bond)
161 return false;
162
163 return link->network->link_local & mask;
164 }
165
166 bool link_ipv6ll_enabled(Link *link) {
167 assert(link);
168
169 if (!socket_ipv6_is_supported())
170 return false;
171
172 if (link->flags & IFF_LOOPBACK)
173 return false;
174
175 if (!link->network)
176 return false;
177
178 if (link->iftype == ARPHRD_CAN)
179 return false;
180
181 if (STRPTR_IN_SET(link->kind, "vrf", "wireguard", "ipip", "gre", "sit", "vti", "nlmon"))
182 return false;
183
184 if (link->network->bond)
185 return false;
186
187 return link->network->link_local & ADDRESS_FAMILY_IPV6;
188 }
189
190 static bool link_ipv6_enabled(Link *link) {
191 assert(link);
192
193 if (!socket_ipv6_is_supported())
194 return false;
195
196 if (link->network->bond)
197 return false;
198
199 if (link->iftype == ARPHRD_CAN)
200 return false;
201
202 /* DHCPv6 client will not be started if no IPv6 link-local address is configured. */
203 if (link_ipv6ll_enabled(link))
204 return true;
205
206 if (network_has_static_ipv6_configurations(link->network))
207 return true;
208
209 return false;
210 }
211
212 static bool link_radv_enabled(Link *link) {
213 assert(link);
214
215 if (!link_ipv6ll_enabled(link))
216 return false;
217
218 return link->network->router_prefix_delegation != RADV_PREFIX_DELEGATION_NONE;
219 }
220
221 static bool link_ipv4_forward_enabled(Link *link) {
222 assert(link);
223
224 if (link->flags & IFF_LOOPBACK)
225 return false;
226
227 if (!link->network)
228 return false;
229
230 if (link->network->ip_forward == _ADDRESS_FAMILY_INVALID)
231 return false;
232
233 return link->network->ip_forward & ADDRESS_FAMILY_IPV4;
234 }
235
236 static bool link_ipv6_forward_enabled(Link *link) {
237 assert(link);
238
239 if (!socket_ipv6_is_supported())
240 return false;
241
242 if (link->flags & IFF_LOOPBACK)
243 return false;
244
245 if (!link->network)
246 return false;
247
248 if (link->network->ip_forward == _ADDRESS_FAMILY_INVALID)
249 return false;
250
251 return link->network->ip_forward & ADDRESS_FAMILY_IPV6;
252 }
253
254 static bool link_proxy_arp_enabled(Link *link) {
255 assert(link);
256
257 if (link->flags & IFF_LOOPBACK)
258 return false;
259
260 if (!link->network)
261 return false;
262
263 if (link->network->proxy_arp < 0)
264 return false;
265
266 return true;
267 }
268
269 static bool link_ipv6_accept_ra_enabled(Link *link) {
270 assert(link);
271
272 if (!socket_ipv6_is_supported())
273 return false;
274
275 if (link->flags & IFF_LOOPBACK)
276 return false;
277
278 if (!link->network)
279 return false;
280
281 if (!link_ipv6ll_enabled(link))
282 return false;
283
284 /* If unset use system default (enabled if local forwarding is disabled.
285 * disabled if local forwarding is enabled).
286 * If set, ignore or enforce RA independent of local forwarding state.
287 */
288 if (link->network->ipv6_accept_ra < 0)
289 /* default to accept RA if ip_forward is disabled and ignore RA if ip_forward is enabled */
290 return !link_ipv6_forward_enabled(link);
291 else if (link->network->ipv6_accept_ra > 0)
292 /* accept RA even if ip_forward is enabled */
293 return true;
294 else
295 /* ignore RA */
296 return false;
297 }
298
299 static IPv6PrivacyExtensions link_ipv6_privacy_extensions(Link *link) {
300 assert(link);
301
302 if (!socket_ipv6_is_supported())
303 return _IPV6_PRIVACY_EXTENSIONS_INVALID;
304
305 if (link->flags & IFF_LOOPBACK)
306 return _IPV6_PRIVACY_EXTENSIONS_INVALID;
307
308 if (!link->network)
309 return _IPV6_PRIVACY_EXTENSIONS_INVALID;
310
311 return link->network->ipv6_privacy_extensions;
312 }
313
314 static int link_update_ipv6_sysctl(Link *link) {
315 bool enabled;
316 int r;
317
318 if (link->flags & IFF_LOOPBACK)
319 return 0;
320
321 enabled = link_ipv6_enabled(link);
322 if (enabled) {
323 r = sysctl_write_ip_property_boolean(AF_INET6, link->ifname, "disable_ipv6", false);
324 if (r < 0)
325 return log_link_warning_errno(link, r, "Cannot enable IPv6: %m");
326
327 log_link_info(link, "IPv6 successfully enabled");
328 }
329
330 return 0;
331 }
332
333 static bool link_is_enslaved(Link *link) {
334 if (link->flags & IFF_SLAVE)
335 /* Even if the link is not managed by networkd, honor IFF_SLAVE flag. */
336 return true;
337
338 if (!link->network)
339 return false;
340
341 if (link->master_ifindex > 0 && link->network->bridge)
342 return true;
343
344 /* TODO: add conditions for other netdevs. */
345
346 return false;
347 }
348
349 static void link_update_master_operstate(Link *link, NetDev *netdev) {
350 Link *master;
351
352 if (!netdev)
353 return;
354
355 if (netdev->ifindex <= 0)
356 return;
357
358 if (link_get(link->manager, netdev->ifindex, &master) < 0)
359 return;
360
361 link_update_operstate(master, true);
362 }
363
364 void link_update_operstate(Link *link, bool also_update_master) {
365 LinkOperationalState operstate;
366 LinkCarrierState carrier_state;
367 LinkAddressState address_state;
368 _cleanup_strv_free_ char **p = NULL;
369 uint8_t scope = RT_SCOPE_NOWHERE;
370 bool changed = false;
371 Address *address;
372
373 assert(link);
374
375 if (link->kernel_operstate == IF_OPER_DORMANT)
376 carrier_state = LINK_CARRIER_STATE_DORMANT;
377 else if (link_has_carrier(link)) {
378 if (link_is_enslaved(link))
379 carrier_state = LINK_CARRIER_STATE_ENSLAVED;
380 else
381 carrier_state = LINK_CARRIER_STATE_CARRIER;
382 } else if (link->flags & IFF_UP)
383 carrier_state = LINK_CARRIER_STATE_NO_CARRIER;
384 else
385 carrier_state = LINK_CARRIER_STATE_OFF;
386
387 if (carrier_state >= LINK_CARRIER_STATE_CARRIER) {
388 Link *slave;
389
390 SET_FOREACH(slave, link->slaves) {
391 link_update_operstate(slave, false);
392
393 if (slave->carrier_state < LINK_CARRIER_STATE_CARRIER)
394 carrier_state = LINK_CARRIER_STATE_DEGRADED_CARRIER;
395 }
396 }
397
398 SET_FOREACH(address, link->addresses) {
399 if (!address_is_ready(address))
400 continue;
401
402 if (address->scope < scope)
403 scope = address->scope;
404 }
405
406 /* for operstate we also take foreign addresses into account */
407 SET_FOREACH(address, link->addresses_foreign) {
408 if (!address_is_ready(address))
409 continue;
410
411 if (address->scope < scope)
412 scope = address->scope;
413 }
414
415 if (scope < RT_SCOPE_SITE)
416 /* universally accessible addresses found */
417 address_state = LINK_ADDRESS_STATE_ROUTABLE;
418 else if (scope < RT_SCOPE_HOST)
419 /* only link or site local addresses found */
420 address_state = LINK_ADDRESS_STATE_DEGRADED;
421 else
422 /* no useful addresses found */
423 address_state = LINK_ADDRESS_STATE_OFF;
424
425 /* Mapping of address and carrier state vs operational state
426 * carrier state
427 * | off | no-carrier | dormant | degraded-carrier | carrier | enslaved
428 * ------------------------------------------------------------------------------
429 * off | off | no-carrier | dormant | degraded-carrier | carrier | enslaved
430 * address_state degraded | off | no-carrier | dormant | degraded-carrier | degraded | enslaved
431 * routable | off | no-carrier | dormant | degraded-carrier | routable | routable
432 */
433
434 if (carrier_state < LINK_CARRIER_STATE_CARRIER || address_state == LINK_ADDRESS_STATE_OFF)
435 operstate = (LinkOperationalState) carrier_state;
436 else if (address_state == LINK_ADDRESS_STATE_ROUTABLE)
437 operstate = LINK_OPERSTATE_ROUTABLE;
438 else if (carrier_state == LINK_CARRIER_STATE_CARRIER)
439 operstate = LINK_OPERSTATE_DEGRADED;
440 else
441 operstate = LINK_OPERSTATE_ENSLAVED;
442
443 if (link->carrier_state != carrier_state) {
444 link->carrier_state = carrier_state;
445 changed = true;
446 if (strv_extend(&p, "CarrierState") < 0)
447 log_oom();
448 }
449
450 if (link->address_state != address_state) {
451 link->address_state = address_state;
452 changed = true;
453 if (strv_extend(&p, "AddressState") < 0)
454 log_oom();
455 }
456
457 if (link->operstate != operstate) {
458 link->operstate = operstate;
459 changed = true;
460 if (strv_extend(&p, "OperationalState") < 0)
461 log_oom();
462 }
463
464 if (p)
465 link_send_changed_strv(link, p);
466 if (changed)
467 link_dirty(link);
468
469 if (also_update_master && link->network) {
470 link_update_master_operstate(link, link->network->bond);
471 link_update_master_operstate(link, link->network->bridge);
472 }
473 }
474
475 #define FLAG_STRING(string, flag, old, new) \
476 (((old ^ new) & flag) \
477 ? ((old & flag) ? (" -" string) : (" +" string)) \
478 : "")
479
480 static int link_update_flags(Link *link, sd_netlink_message *m, bool force_update_operstate) {
481 unsigned flags, unknown_flags_added, unknown_flags_removed, unknown_flags;
482 uint8_t operstate;
483 int r;
484
485 assert(link);
486
487 r = sd_rtnl_message_link_get_flags(m, &flags);
488 if (r < 0)
489 return log_link_warning_errno(link, r, "Could not get link flags: %m");
490
491 r = sd_netlink_message_read_u8(m, IFLA_OPERSTATE, &operstate);
492 if (r < 0)
493 /* if we got a message without operstate, take it to mean
494 the state was unchanged */
495 operstate = link->kernel_operstate;
496
497 if (!force_update_operstate && (link->flags == flags) && (link->kernel_operstate == operstate))
498 return 0;
499
500 if (link->flags != flags) {
501 log_link_debug(link, "Flags change:%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s",
502 FLAG_STRING("LOOPBACK", IFF_LOOPBACK, link->flags, flags),
503 FLAG_STRING("MASTER", IFF_MASTER, link->flags, flags),
504 FLAG_STRING("SLAVE", IFF_SLAVE, link->flags, flags),
505 FLAG_STRING("UP", IFF_UP, link->flags, flags),
506 FLAG_STRING("DORMANT", IFF_DORMANT, link->flags, flags),
507 FLAG_STRING("LOWER_UP", IFF_LOWER_UP, link->flags, flags),
508 FLAG_STRING("RUNNING", IFF_RUNNING, link->flags, flags),
509 FLAG_STRING("MULTICAST", IFF_MULTICAST, link->flags, flags),
510 FLAG_STRING("BROADCAST", IFF_BROADCAST, link->flags, flags),
511 FLAG_STRING("POINTOPOINT", IFF_POINTOPOINT, link->flags, flags),
512 FLAG_STRING("PROMISC", IFF_PROMISC, link->flags, flags),
513 FLAG_STRING("ALLMULTI", IFF_ALLMULTI, link->flags, flags),
514 FLAG_STRING("PORTSEL", IFF_PORTSEL, link->flags, flags),
515 FLAG_STRING("AUTOMEDIA", IFF_AUTOMEDIA, link->flags, flags),
516 FLAG_STRING("DYNAMIC", IFF_DYNAMIC, link->flags, flags),
517 FLAG_STRING("NOARP", IFF_NOARP, link->flags, flags),
518 FLAG_STRING("NOTRAILERS", IFF_NOTRAILERS, link->flags, flags),
519 FLAG_STRING("DEBUG", IFF_DEBUG, link->flags, flags),
520 FLAG_STRING("ECHO", IFF_ECHO, link->flags, flags));
521
522 unknown_flags = ~(IFF_LOOPBACK | IFF_MASTER | IFF_SLAVE | IFF_UP |
523 IFF_DORMANT | IFF_LOWER_UP | IFF_RUNNING |
524 IFF_MULTICAST | IFF_BROADCAST | IFF_POINTOPOINT |
525 IFF_PROMISC | IFF_ALLMULTI | IFF_PORTSEL |
526 IFF_AUTOMEDIA | IFF_DYNAMIC | IFF_NOARP |
527 IFF_NOTRAILERS | IFF_DEBUG | IFF_ECHO);
528 unknown_flags_added = ((link->flags ^ flags) & flags & unknown_flags);
529 unknown_flags_removed = ((link->flags ^ flags) & link->flags & unknown_flags);
530
531 /* link flags are currently at most 18 bits, let's align to
532 * printing 20 */
533 if (unknown_flags_added)
534 log_link_debug(link,
535 "Unknown link flags gained: %#.5x (ignoring)",
536 unknown_flags_added);
537
538 if (unknown_flags_removed)
539 log_link_debug(link,
540 "Unknown link flags lost: %#.5x (ignoring)",
541 unknown_flags_removed);
542 }
543
544 link->flags = flags;
545 link->kernel_operstate = operstate;
546
547 link_update_operstate(link, true);
548
549 return 0;
550 }
551
552 static int link_new(Manager *manager, sd_netlink_message *message, Link **ret) {
553 _cleanup_(link_unrefp) Link *link = NULL;
554 const char *ifname, *kind = NULL;
555 unsigned short iftype;
556 int r, ifindex;
557 uint16_t type;
558
559 assert(manager);
560 assert(message);
561 assert(ret);
562
563 /* check for link kind */
564 r = sd_netlink_message_enter_container(message, IFLA_LINKINFO);
565 if (r == 0) {
566 (void) sd_netlink_message_read_string(message, IFLA_INFO_KIND, &kind);
567 r = sd_netlink_message_exit_container(message);
568 if (r < 0)
569 return r;
570 }
571
572 r = sd_netlink_message_get_type(message, &type);
573 if (r < 0)
574 return r;
575 else if (type != RTM_NEWLINK)
576 return -EINVAL;
577
578 r = sd_rtnl_message_link_get_ifindex(message, &ifindex);
579 if (r < 0)
580 return r;
581 else if (ifindex <= 0)
582 return -EINVAL;
583
584 r = sd_rtnl_message_link_get_type(message, &iftype);
585 if (r < 0)
586 return r;
587
588 r = sd_netlink_message_read_string(message, IFLA_IFNAME, &ifname);
589 if (r < 0)
590 return r;
591
592 link = new(Link, 1);
593 if (!link)
594 return -ENOMEM;
595
596 *link = (Link) {
597 .n_ref = 1,
598 .manager = manager,
599 .state = LINK_STATE_PENDING,
600 .ifindex = ifindex,
601 .iftype = iftype,
602
603 .n_dns = (unsigned) -1,
604 .dns_default_route = -1,
605 .llmnr = _RESOLVE_SUPPORT_INVALID,
606 .mdns = _RESOLVE_SUPPORT_INVALID,
607 .dnssec_mode = _DNSSEC_MODE_INVALID,
608 .dns_over_tls_mode = _DNS_OVER_TLS_MODE_INVALID,
609 };
610
611 link->ifname = strdup(ifname);
612 if (!link->ifname)
613 return -ENOMEM;
614
615 if (kind) {
616 link->kind = strdup(kind);
617 if (!link->kind)
618 return -ENOMEM;
619 }
620
621 r = sd_netlink_message_read_u32(message, IFLA_MASTER, (uint32_t *)&link->master_ifindex);
622 if (r < 0)
623 log_link_debug_errno(link, r, "New device has no master, continuing without");
624
625 r = sd_netlink_message_read_ether_addr(message, IFLA_ADDRESS, &link->mac);
626 if (r < 0)
627 log_link_debug_errno(link, r, "MAC address not found for new device, continuing without");
628
629 r = ethtool_get_permanent_macaddr(&manager->ethtool_fd, link->ifname, &link->permanent_mac);
630 if (r < 0)
631 log_link_debug_errno(link, r, "Permanent MAC address not found for new device, continuing without: %m");
632
633 r = ethtool_get_driver(&manager->ethtool_fd, link->ifname, &link->driver);
634 if (r < 0)
635 log_link_debug_errno(link, r, "Failed to get driver, continuing without: %m");
636
637 r = sd_netlink_message_read_strv(message, IFLA_PROP_LIST, IFLA_ALT_IFNAME, &link->alternative_names);
638 if (r < 0 && r != -ENODATA)
639 return r;
640
641 if (asprintf(&link->state_file, "/run/systemd/netif/links/%d", link->ifindex) < 0)
642 return -ENOMEM;
643
644 if (asprintf(&link->lease_file, "/run/systemd/netif/leases/%d", link->ifindex) < 0)
645 return -ENOMEM;
646
647 if (asprintf(&link->lldp_file, "/run/systemd/netif/lldp/%d", link->ifindex) < 0)
648 return -ENOMEM;
649
650 r = hashmap_ensure_allocated(&manager->links, NULL);
651 if (r < 0)
652 return r;
653
654 r = hashmap_put(manager->links, INT_TO_PTR(link->ifindex), link);
655 if (r < 0)
656 return r;
657
658 r = link_update_flags(link, message, false);
659 if (r < 0)
660 return r;
661
662 *ret = TAKE_PTR(link);
663
664 return 0;
665 }
666
667 void link_ntp_settings_clear(Link *link) {
668 link->ntp = strv_free(link->ntp);
669 }
670
671 void link_dns_settings_clear(Link *link) {
672 if (link->n_dns != (unsigned) -1)
673 for (unsigned i = 0; i < link->n_dns; i++)
674 in_addr_full_free(link->dns[i]);
675 link->dns = mfree(link->dns);
676 link->n_dns = (unsigned) -1;
677
678 link->search_domains = ordered_set_free_free(link->search_domains);
679 link->route_domains = ordered_set_free_free(link->route_domains);
680
681 link->dns_default_route = -1;
682 link->llmnr = _RESOLVE_SUPPORT_INVALID;
683 link->mdns = _RESOLVE_SUPPORT_INVALID;
684 link->dnssec_mode = _DNSSEC_MODE_INVALID;
685 link->dns_over_tls_mode = _DNS_OVER_TLS_MODE_INVALID;
686
687 link->dnssec_negative_trust_anchors = set_free_free(link->dnssec_negative_trust_anchors);
688 }
689
690 static void link_free_engines(Link *link) {
691 if (!link)
692 return;
693
694 link->dhcp_server = sd_dhcp_server_unref(link->dhcp_server);
695 link->dhcp_client = sd_dhcp_client_unref(link->dhcp_client);
696 link->dhcp_lease = sd_dhcp_lease_unref(link->dhcp_lease);
697
698 link->lldp = sd_lldp_unref(link->lldp);
699
700 ndisc_flush(link);
701
702 link->ipv4ll = sd_ipv4ll_unref(link->ipv4ll);
703 link->dhcp6_client = sd_dhcp6_client_unref(link->dhcp6_client);
704 link->dhcp6_lease = sd_dhcp6_lease_unref(link->dhcp6_lease);
705 link->ndisc = sd_ndisc_unref(link->ndisc);
706 link->radv = sd_radv_unref(link->radv);
707 }
708
709 static Link *link_free(Link *link) {
710 assert(link);
711
712 link_ntp_settings_clear(link);
713 link_dns_settings_clear(link);
714
715 link->routes = set_free(link->routes);
716 link->routes_foreign = set_free(link->routes_foreign);
717 link->dhcp_routes = set_free(link->dhcp_routes);
718 link->dhcp_routes_old = set_free(link->dhcp_routes_old);
719 link->dhcp6_routes = set_free(link->dhcp6_routes);
720 link->dhcp6_routes_old = set_free(link->dhcp6_routes_old);
721 link->dhcp6_pd_routes = set_free(link->dhcp6_pd_routes);
722 link->dhcp6_pd_routes_old = set_free(link->dhcp6_pd_routes_old);
723 link->ndisc_routes = set_free(link->ndisc_routes);
724
725 link->nexthops = set_free(link->nexthops);
726 link->nexthops_foreign = set_free(link->nexthops_foreign);
727
728 link->neighbors = set_free(link->neighbors);
729 link->neighbors_foreign = set_free(link->neighbors_foreign);
730
731 link->addresses = set_free(link->addresses);
732 link->addresses_foreign = set_free(link->addresses_foreign);
733 link->pool_addresses = set_free(link->pool_addresses);
734 link->static_addresses = set_free(link->static_addresses);
735 link->dhcp6_addresses = set_free(link->dhcp6_addresses);
736 link->dhcp6_addresses_old = set_free(link->dhcp6_addresses_old);
737 link->dhcp6_pd_addresses = set_free(link->dhcp6_pd_addresses);
738 link->dhcp6_pd_addresses_old = set_free(link->dhcp6_pd_addresses_old);
739 link->ndisc_addresses = set_free(link->ndisc_addresses);
740
741 link_lldp_emit_stop(link);
742 link_free_engines(link);
743 free(link->lease_file);
744 free(link->lldp_file);
745
746 free(link->ifname);
747 strv_free(link->alternative_names);
748 free(link->kind);
749 free(link->ssid);
750 free(link->driver);
751
752 (void) unlink(link->state_file);
753 free(link->state_file);
754
755 sd_device_unref(link->sd_device);
756
757 hashmap_free(link->bound_to_links);
758 hashmap_free(link->bound_by_links);
759
760 set_free_with_destructor(link->slaves, link_unref);
761
762 network_unref(link->network);
763
764 return mfree(link);
765 }
766
767 DEFINE_TRIVIAL_REF_UNREF_FUNC(Link, link, link_free);
768
769 int link_get(Manager *m, int ifindex, Link **ret) {
770 Link *link;
771
772 assert(m);
773 assert(ifindex > 0);
774 assert(ret);
775
776 link = hashmap_get(m->links, INT_TO_PTR(ifindex));
777 if (!link)
778 return -ENODEV;
779
780 *ret = link;
781
782 return 0;
783 }
784
785 void link_set_state(Link *link, LinkState state) {
786 assert(link);
787
788 if (link->state == state)
789 return;
790
791 log_link_debug(link, "State changed: %s -> %s",
792 link_state_to_string(link->state),
793 link_state_to_string(state));
794
795 link->state = state;
796
797 link_send_changed(link, "AdministrativeState", NULL);
798 }
799
800 static void link_enter_unmanaged(Link *link) {
801 assert(link);
802
803 link_set_state(link, LINK_STATE_UNMANAGED);
804
805 link_dirty(link);
806 }
807
808 int link_stop_clients(Link *link, bool may_keep_dhcp) {
809 int r = 0, k;
810
811 assert(link);
812 assert(link->manager);
813 assert(link->manager->event);
814
815 bool keep_dhcp = may_keep_dhcp &&
816 link->network &&
817 (link->manager->restarting ||
818 FLAGS_SET(link->network->keep_configuration, KEEP_CONFIGURATION_DHCP_ON_STOP));
819
820 if (link->dhcp_client && !keep_dhcp) {
821 k = sd_dhcp_client_stop(link->dhcp_client);
822 if (k < 0)
823 r = log_link_warning_errno(link, k, "Could not stop DHCPv4 client: %m");
824 }
825
826 if (link->ipv4ll) {
827 k = sd_ipv4ll_stop(link->ipv4ll);
828 if (k < 0)
829 r = log_link_warning_errno(link, k, "Could not stop IPv4 link-local: %m");
830 }
831
832 k = link_stop_ipv4_dad(link);
833 if (k < 0)
834 r = log_link_warning_errno(link, k, "Could not stop IPv4 ACD client: %m");
835
836 if (link->dhcp6_client) {
837 k = sd_dhcp6_client_stop(link->dhcp6_client);
838 if (k < 0)
839 r = log_link_warning_errno(link, k, "Could not stop DHCPv6 client: %m");
840 }
841
842 if (link_dhcp6_pd_is_enabled(link)) {
843 k = dhcp6_pd_remove(link);
844 if (k < 0)
845 r = log_link_warning_errno(link, k, "Could not remove DHCPv6 PD addresses and routes: %m");
846 }
847
848 if (link->ndisc) {
849 k = sd_ndisc_stop(link->ndisc);
850 if (k < 0)
851 r = log_link_warning_errno(link, k, "Could not stop IPv6 Router Discovery: %m");
852 }
853
854 if (link->radv) {
855 k = sd_radv_stop(link->radv);
856 if (k < 0)
857 r = log_link_warning_errno(link, k, "Could not stop IPv6 Router Advertisement: %m");
858 }
859
860 link_lldp_emit_stop(link);
861 return r;
862 }
863
864 void link_enter_failed(Link *link) {
865 assert(link);
866
867 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
868 return;
869
870 log_link_warning(link, "Failed");
871
872 link_set_state(link, LINK_STATE_FAILED);
873
874 link_stop_clients(link, false);
875
876 link_dirty(link);
877 }
878
879 static int link_join_netdevs_after_configured(Link *link) {
880 NetDev *netdev;
881 int r;
882
883 HASHMAP_FOREACH(netdev, link->network->stacked_netdevs) {
884 if (netdev->ifindex > 0)
885 /* Assume already enslaved. */
886 continue;
887
888 if (netdev_get_create_type(netdev) != NETDEV_CREATE_AFTER_CONFIGURED)
889 continue;
890
891 log_struct(LOG_DEBUG,
892 LOG_LINK_INTERFACE(link),
893 LOG_NETDEV_INTERFACE(netdev),
894 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", netdev->ifname));
895
896 r = netdev_join(netdev, link, NULL);
897 if (r < 0)
898 return log_struct_errno(LOG_WARNING, r,
899 LOG_LINK_INTERFACE(link),
900 LOG_NETDEV_INTERFACE(netdev),
901 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", netdev->ifname));
902 }
903
904 return 0;
905 }
906
907 static void link_enter_configured(Link *link) {
908 assert(link);
909 assert(link->network);
910
911 if (link->state != LINK_STATE_CONFIGURING)
912 return;
913
914 link_set_state(link, LINK_STATE_CONFIGURED);
915
916 (void) link_join_netdevs_after_configured(link);
917
918 link_dirty(link);
919 }
920
921 void link_check_ready(Link *link) {
922 Address *a;
923
924 assert(link);
925
926 if (link->state == LINK_STATE_CONFIGURED)
927 return;
928
929 if (link->state != LINK_STATE_CONFIGURING) {
930 log_link_debug(link, "%s(): link is in %s state.", __func__, link_state_to_string(link->state));
931 return;
932 }
933
934 if (!link->network)
935 return;
936
937 if (!link->addresses_configured) {
938 log_link_debug(link, "%s(): static addresses are not configured.", __func__);
939 return;
940 }
941
942 if (!link->neighbors_configured) {
943 log_link_debug(link, "%s(): static neighbors are not configured.", __func__);
944 return;
945 }
946
947 SET_FOREACH(a, link->addresses)
948 if (!address_is_ready(a)) {
949 _cleanup_free_ char *str = NULL;
950
951 (void) in_addr_to_string(a->family, &a->in_addr, &str);
952 log_link_debug(link, "%s(): an address %s/%d is not ready.", __func__, strnull(str), a->prefixlen);
953 return;
954 }
955
956 if (!link->static_routes_configured) {
957 log_link_debug(link, "%s(): static routes are not configured.", __func__);
958 return;
959 }
960
961 if (!link->static_nexthops_configured) {
962 log_link_debug(link, "%s(): static nexthops are not configured.", __func__);
963 return;
964 }
965
966 if (!link->routing_policy_rules_configured) {
967 log_link_debug(link, "%s(): static routing policy rules are not configured.", __func__);
968 return;
969 }
970
971 if (!link->tc_configured) {
972 log_link_debug(link, "%s(): traffic controls are not configured.", __func__);
973 return;
974 }
975
976 if (!link->sr_iov_configured) {
977 log_link_debug(link, "%s(): SR-IOV is not configured.", __func__);
978 return;
979 }
980
981 if (!link->bridge_mdb_configured) {
982 log_link_debug(link, "%s(): Bridge MDB is not configured.", __func__);
983 return;
984 }
985
986 if (link_has_carrier(link) || !link->network->configure_without_carrier) {
987 bool has_ndisc_address = false;
988 NDiscAddress *n;
989
990 if (link_ipv4ll_enabled(link, ADDRESS_FAMILY_IPV4) && !link->ipv4ll_address_configured) {
991 log_link_debug(link, "%s(): IPv4LL is not configured.", __func__);
992 return;
993 }
994
995 if (link_ipv6ll_enabled(link) &&
996 in_addr_is_null(AF_INET6, (const union in_addr_union*) &link->ipv6ll_address)) {
997 log_link_debug(link, "%s(): IPv6LL is not configured.", __func__);
998 return;
999 }
1000
1001 SET_FOREACH(n, link->ndisc_addresses)
1002 if (!n->marked) {
1003 has_ndisc_address = true;
1004 break;
1005 }
1006
1007 if ((link_dhcp4_enabled(link) || link_dhcp6_enabled(link)) &&
1008 !link->dhcp_address && set_isempty(link->dhcp6_addresses) && !has_ndisc_address &&
1009 !(link_ipv4ll_enabled(link, ADDRESS_FAMILY_FALLBACK_IPV4) && link->ipv4ll_address_configured)) {
1010 log_link_debug(link, "%s(): DHCP4 or DHCP6 is enabled but no dynamic address is assigned yet.", __func__);
1011 return;
1012 }
1013
1014 if (link_dhcp4_enabled(link) || link_dhcp6_enabled(link) || link_dhcp6_pd_is_enabled(link) || link_ipv6_accept_ra_enabled(link)) {
1015 if (!link->dhcp4_configured &&
1016 !(link->dhcp6_address_configured && link->dhcp6_route_configured) &&
1017 !(link->dhcp6_pd_address_configured && link->dhcp6_pd_route_configured) &&
1018 !(link->ndisc_addresses_configured && link->ndisc_routes_configured) &&
1019 !(link_ipv4ll_enabled(link, ADDRESS_FAMILY_FALLBACK_IPV4) && link->ipv4ll_address_configured)) {
1020 /* When DHCP or RA is enabled, at least one protocol must provide an address, or
1021 * an IPv4ll fallback address must be configured. */
1022 log_link_debug(link, "%s(): dynamic addresses or routes are not configured.", __func__);
1023 return;
1024 }
1025
1026 log_link_debug(link, "%s(): dhcp4:%s dhcp6_addresses:%s dhcp_routes:%s dhcp_pd_addresses:%s dhcp_pd_routes:%s ndisc_addresses:%s ndisc_routes:%s",
1027 __func__,
1028 yes_no(link->dhcp4_configured),
1029 yes_no(link->dhcp6_address_configured),
1030 yes_no(link->dhcp6_route_configured),
1031 yes_no(link->dhcp6_pd_address_configured),
1032 yes_no(link->dhcp6_pd_route_configured),
1033 yes_no(link->ndisc_addresses_configured),
1034 yes_no(link->ndisc_routes_configured));
1035 }
1036 }
1037
1038 link_enter_configured(link);
1039
1040 return;
1041 }
1042
1043 static int link_set_static_configs(Link *link) {
1044 int r;
1045
1046 assert(link);
1047 assert(link->network);
1048 assert(link->state != _LINK_STATE_INVALID);
1049
1050 /* Reset all *_configured flags we are configuring. */
1051 link->request_static_addresses = false;
1052 link->addresses_configured = false;
1053 link->addresses_ready = false;
1054 link->neighbors_configured = false;
1055 link->static_routes_configured = false;
1056 link->static_nexthops_configured = false;
1057 link->routing_policy_rules_configured = false;
1058
1059 r = link_set_bridge_fdb(link);
1060 if (r < 0)
1061 return r;
1062
1063 r = link_set_bridge_mdb(link);
1064 if (r < 0)
1065 return r;
1066
1067 r = link_set_neighbors(link);
1068 if (r < 0)
1069 return r;
1070
1071 r = link_set_addresses(link);
1072 if (r < 0)
1073 return r;
1074
1075 r = link_set_address_labels(link);
1076 if (r < 0)
1077 return r;
1078
1079 /* now that we can figure out a default address for the dhcp server, start it */
1080 if (link_dhcp4_server_enabled(link) && (link->flags & IFF_UP)) {
1081 r = dhcp4_server_configure(link);
1082 if (r < 0)
1083 return r;
1084 log_link_debug(link, "Offering DHCPv4 leases");
1085 }
1086
1087 return 0;
1088 }
1089
1090 static int link_set_bridge_vlan(Link *link) {
1091 int r;
1092
1093 r = br_vlan_configure(link, link->network->pvid, link->network->br_vid_bitmap, link->network->br_untagged_bitmap);
1094 if (r < 0)
1095 log_link_error_errno(link, r, "Failed to assign VLANs to bridge port: %m");
1096
1097 return r;
1098 }
1099
1100 static int link_set_proxy_arp(Link *link) {
1101 int r;
1102
1103 if (!link_proxy_arp_enabled(link))
1104 return 0;
1105
1106 r = sysctl_write_ip_property_boolean(AF_INET, link->ifname, "proxy_arp", link->network->proxy_arp > 0);
1107 if (r < 0)
1108 log_link_warning_errno(link, r, "Cannot configure proxy ARP for interface: %m");
1109
1110 return 0;
1111 }
1112
1113 static int link_configure_continue(Link *link);
1114
1115 static int set_mtu_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
1116 int r;
1117
1118 assert(m);
1119 assert(link);
1120 assert(link->ifname);
1121
1122 link->setting_mtu = false;
1123
1124 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1125 return 1;
1126
1127 r = sd_netlink_message_get_errno(m);
1128 if (r < 0)
1129 log_link_message_warning_errno(link, m, r, "Could not set MTU, ignoring");
1130 else
1131 log_link_debug(link, "Setting MTU done.");
1132
1133 if (link->state == LINK_STATE_INITIALIZED) {
1134 r = link_configure_continue(link);
1135 if (r < 0)
1136 link_enter_failed(link);
1137 }
1138
1139 return 1;
1140 }
1141
1142 int link_set_mtu(Link *link, uint32_t mtu) {
1143 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1144 int r;
1145
1146 assert(link);
1147 assert(link->manager);
1148 assert(link->manager->rtnl);
1149
1150 if (mtu == 0 || link->setting_mtu)
1151 return 0;
1152
1153 if (link->mtu == mtu)
1154 return 0;
1155
1156 log_link_debug(link, "Setting MTU: %" PRIu32, mtu);
1157
1158 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1159 if (r < 0)
1160 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1161
1162 /* IPv6 protocol requires a minimum MTU of IPV6_MTU_MIN(1280) bytes
1163 * on the interface. Bump up MTU bytes to IPV6_MTU_MIN. */
1164 if (link_ipv6_enabled(link) && mtu < IPV6_MIN_MTU) {
1165
1166 log_link_warning(link, "Bumping MTU to " STRINGIFY(IPV6_MIN_MTU) ", as "
1167 "IPv6 is requested and requires a minimum MTU of " STRINGIFY(IPV6_MIN_MTU) " bytes");
1168
1169 mtu = IPV6_MIN_MTU;
1170 }
1171
1172 r = sd_netlink_message_append_u32(req, IFLA_MTU, mtu);
1173 if (r < 0)
1174 return log_link_error_errno(link, r, "Could not append MTU: %m");
1175
1176 r = netlink_call_async(link->manager->rtnl, NULL, req, set_mtu_handler,
1177 link_netlink_destroy_callback, link);
1178 if (r < 0)
1179 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1180
1181 link_ref(link);
1182 link->setting_mtu = true;
1183
1184 return 0;
1185 }
1186
1187 static bool link_reduces_vlan_mtu(Link *link) {
1188 /* See netif_reduces_vlan_mtu() in kernel. */
1189 return streq_ptr(link->kind, "macsec");
1190 }
1191
1192 static uint32_t link_get_requested_mtu_by_stacked_netdevs(Link *link) {
1193 uint32_t mtu = 0;
1194 NetDev *dev;
1195
1196 HASHMAP_FOREACH(dev, link->network->stacked_netdevs)
1197 if (dev->kind == NETDEV_KIND_VLAN && dev->mtu > 0)
1198 /* See vlan_dev_change_mtu() in kernel. */
1199 mtu = MAX(mtu, link_reduces_vlan_mtu(link) ? dev->mtu + 4 : dev->mtu);
1200
1201 else if (dev->kind == NETDEV_KIND_MACVLAN && dev->mtu > mtu)
1202 /* See macvlan_change_mtu() in kernel. */
1203 mtu = dev->mtu;
1204
1205 return mtu;
1206 }
1207
1208 static int link_configure_mtu(Link *link) {
1209 uint32_t mtu;
1210
1211 assert(link);
1212 assert(link->network);
1213
1214 if (link->network->mtu > 0)
1215 return link_set_mtu(link, link->network->mtu);
1216
1217 mtu = link_get_requested_mtu_by_stacked_netdevs(link);
1218 if (link->mtu >= mtu)
1219 return 0;
1220
1221 log_link_notice(link, "Bumping MTU bytes from %"PRIu32" to %"PRIu32" because of stacked device. "
1222 "If it is not desired, then please explicitly specify MTUBytes= setting.",
1223 link->mtu, mtu);
1224
1225 return link_set_mtu(link, mtu);
1226 }
1227
1228 static int set_flags_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
1229 int r;
1230
1231 assert(m);
1232 assert(link);
1233 assert(link->ifname);
1234
1235 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1236 return 1;
1237
1238 r = sd_netlink_message_get_errno(m);
1239 if (r < 0)
1240 log_link_message_warning_errno(link, m, r, "Could not set link flags, ignoring");
1241
1242 return 1;
1243 }
1244
1245 static int link_set_flags(Link *link) {
1246 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1247 unsigned ifi_change = 0;
1248 unsigned ifi_flags = 0;
1249 int r;
1250
1251 assert(link);
1252 assert(link->manager);
1253 assert(link->manager->rtnl);
1254
1255 if (link->flags & IFF_LOOPBACK)
1256 return 0;
1257
1258 if (!link->network)
1259 return 0;
1260
1261 if (link->network->arp < 0 && link->network->multicast < 0 && link->network->allmulticast < 0)
1262 return 0;
1263
1264 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1265 if (r < 0)
1266 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1267
1268 if (link->network->arp >= 0) {
1269 ifi_change |= IFF_NOARP;
1270 SET_FLAG(ifi_flags, IFF_NOARP, link->network->arp == 0);
1271 }
1272
1273 if (link->network->multicast >= 0) {
1274 ifi_change |= IFF_MULTICAST;
1275 SET_FLAG(ifi_flags, IFF_MULTICAST, link->network->multicast);
1276 }
1277
1278 if (link->network->allmulticast >= 0) {
1279 ifi_change |= IFF_ALLMULTI;
1280 SET_FLAG(ifi_flags, IFF_ALLMULTI, link->network->allmulticast);
1281 }
1282
1283 r = sd_rtnl_message_link_set_flags(req, ifi_flags, ifi_change);
1284 if (r < 0)
1285 return log_link_error_errno(link, r, "Could not set link flags: %m");
1286
1287 r = netlink_call_async(link->manager->rtnl, NULL, req, set_flags_handler,
1288 link_netlink_destroy_callback, link);
1289 if (r < 0)
1290 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1291
1292 link_ref(link);
1293
1294 return 0;
1295 }
1296
1297 static int link_acquire_ipv6_conf(Link *link) {
1298 int r;
1299
1300 assert(link);
1301
1302 if (link_ipv6_accept_ra_enabled(link)) {
1303 assert(link->ndisc);
1304
1305 log_link_debug(link, "Discovering IPv6 routers");
1306
1307 r = sd_ndisc_start(link->ndisc);
1308 if (r < 0 && r != -EBUSY)
1309 return log_link_warning_errno(link, r, "Could not start IPv6 Router Discovery: %m");
1310 }
1311
1312 if (link_radv_enabled(link)) {
1313 assert(link->radv);
1314 assert(in_addr_is_link_local(AF_INET6, (const union in_addr_union*)&link->ipv6ll_address) > 0);
1315
1316 log_link_debug(link, "Starting IPv6 Router Advertisements");
1317
1318 r = radv_emit_dns(link);
1319 if (r < 0)
1320 return log_link_warning_errno(link, r, "Failed to configure DNS or Domains in IPv6 Router Advertisement: %m");
1321
1322 r = sd_radv_start(link->radv);
1323 if (r < 0 && r != -EBUSY)
1324 return log_link_warning_errno(link, r, "Could not start IPv6 Router Advertisement: %m");
1325 }
1326
1327 if (link_dhcp6_enabled(link) && IN_SET(link->network->dhcp6_without_ra,
1328 DHCP6_CLIENT_START_MODE_INFORMATION_REQUEST,
1329 DHCP6_CLIENT_START_MODE_SOLICIT)) {
1330 assert(link->dhcp6_client);
1331 assert(in_addr_is_link_local(AF_INET6, (const union in_addr_union*)&link->ipv6ll_address) > 0);
1332
1333 r = dhcp6_request_address(link, link->network->dhcp6_without_ra == DHCP6_CLIENT_START_MODE_INFORMATION_REQUEST);
1334 if (r < 0 && r != -EBUSY)
1335 return log_link_warning_errno(link, r, "Could not acquire DHCPv6 lease: %m");
1336 else
1337 log_link_debug(link, "Acquiring DHCPv6 lease");
1338 }
1339
1340 r = dhcp6_request_prefix_delegation(link);
1341 if (r < 0)
1342 return log_link_warning_errno(link, r, "Failed to request DHCPv6 prefix delegation: %m");
1343
1344 return 0;
1345 }
1346
1347 static int link_acquire_ipv4_conf(Link *link) {
1348 int r;
1349
1350 assert(link);
1351 assert(link->manager);
1352 assert(link->manager->event);
1353
1354 if (link_ipv4ll_enabled(link, ADDRESS_FAMILY_IPV4)) {
1355 assert(link->ipv4ll);
1356
1357 log_link_debug(link, "Acquiring IPv4 link-local address");
1358
1359 r = sd_ipv4ll_start(link->ipv4ll);
1360 if (r < 0)
1361 return log_link_warning_errno(link, r, "Could not acquire IPv4 link-local address: %m");
1362 }
1363
1364 if (link_dhcp4_enabled(link)) {
1365 assert(link->dhcp_client);
1366
1367 log_link_debug(link, "Acquiring DHCPv4 lease");
1368
1369 r = sd_dhcp_client_start(link->dhcp_client);
1370 if (r < 0)
1371 return log_link_warning_errno(link, r, "Could not acquire DHCPv4 lease: %m");
1372 }
1373
1374 return 0;
1375 }
1376
1377 static int link_acquire_conf(Link *link) {
1378 int r;
1379
1380 assert(link);
1381
1382 r = link_acquire_ipv4_conf(link);
1383 if (r < 0)
1384 return r;
1385
1386 if (!in_addr_is_null(AF_INET6, (const union in_addr_union*) &link->ipv6ll_address)) {
1387 r = link_acquire_ipv6_conf(link);
1388 if (r < 0)
1389 return r;
1390 }
1391
1392 if (link_lldp_emit_enabled(link)) {
1393 r = link_lldp_emit_start(link);
1394 if (r < 0)
1395 return log_link_warning_errno(link, r, "Failed to start LLDP transmission: %m");
1396 }
1397
1398 return 0;
1399 }
1400
1401 bool link_has_carrier(Link *link) {
1402 /* see Documentation/networking/operstates.txt in the kernel sources */
1403
1404 if (link->kernel_operstate == IF_OPER_UP)
1405 return true;
1406
1407 if (link->kernel_operstate == IF_OPER_UNKNOWN)
1408 /* operstate may not be implemented, so fall back to flags */
1409 if (FLAGS_SET(link->flags, IFF_LOWER_UP | IFF_RUNNING) &&
1410 !FLAGS_SET(link->flags, IFF_DORMANT))
1411 return true;
1412
1413 return false;
1414 }
1415
1416 static int link_address_genmode_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
1417 int r;
1418
1419 assert(link);
1420
1421 link->setting_genmode = false;
1422
1423 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1424 return 1;
1425
1426 r = sd_netlink_message_get_errno(m);
1427 if (r < 0)
1428 log_link_message_warning_errno(link, m, r, "Could not set address genmode for interface, ignoring");
1429 else
1430 log_link_debug(link, "Setting address genmode done.");
1431
1432 if (link->state == LINK_STATE_INITIALIZED) {
1433 r = link_configure_continue(link);
1434 if (r < 0)
1435 link_enter_failed(link);
1436 }
1437
1438 return 1;
1439 }
1440
1441 static int link_configure_addrgen_mode(Link *link) {
1442 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1443 uint8_t ipv6ll_mode;
1444 int r;
1445
1446 assert(link);
1447 assert(link->network);
1448 assert(link->manager);
1449 assert(link->manager->rtnl);
1450
1451 if (!socket_ipv6_is_supported() || link->setting_genmode)
1452 return 0;
1453
1454 log_link_debug(link, "Setting address genmode for link");
1455
1456 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1457 if (r < 0)
1458 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1459
1460 r = sd_netlink_message_open_container(req, IFLA_AF_SPEC);
1461 if (r < 0)
1462 return log_link_error_errno(link, r, "Could not open IFLA_AF_SPEC container: %m");
1463
1464 r = sd_netlink_message_open_container(req, AF_INET6);
1465 if (r < 0)
1466 return log_link_error_errno(link, r, "Could not open AF_INET6 container: %m");
1467
1468 if (!link_ipv6ll_enabled(link))
1469 ipv6ll_mode = IN6_ADDR_GEN_MODE_NONE;
1470 else if (link->network->ipv6ll_address_gen_mode < 0) {
1471 r = sysctl_read_ip_property(AF_INET6, link->ifname, "stable_secret", NULL);
1472 if (r < 0) {
1473 /* The file may not exist. And even if it exists, when stable_secret is unset,
1474 * reading the file fails with EIO. */
1475 log_link_debug_errno(link, r, "Failed to read sysctl property stable_secret: %m");
1476
1477 ipv6ll_mode = IN6_ADDR_GEN_MODE_EUI64;
1478 } else
1479 ipv6ll_mode = IN6_ADDR_GEN_MODE_STABLE_PRIVACY;
1480 } else
1481 ipv6ll_mode = link->network->ipv6ll_address_gen_mode;
1482
1483 r = sd_netlink_message_append_u8(req, IFLA_INET6_ADDR_GEN_MODE, ipv6ll_mode);
1484 if (r < 0)
1485 return log_link_error_errno(link, r, "Could not append IFLA_INET6_ADDR_GEN_MODE: %m");
1486
1487 r = sd_netlink_message_close_container(req);
1488 if (r < 0)
1489 return log_link_error_errno(link, r, "Could not close AF_INET6 container: %m");
1490
1491 r = sd_netlink_message_close_container(req);
1492 if (r < 0)
1493 return log_link_error_errno(link, r, "Could not close IFLA_AF_SPEC container: %m");
1494
1495 r = netlink_call_async(link->manager->rtnl, NULL, req, link_address_genmode_handler,
1496 link_netlink_destroy_callback, link);
1497 if (r < 0)
1498 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1499
1500 link_ref(link);
1501 link->setting_genmode = true;
1502
1503 return 0;
1504 }
1505
1506 static int link_up_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
1507 int r;
1508
1509 assert(link);
1510
1511 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1512 return 1;
1513
1514 r = sd_netlink_message_get_errno(m);
1515 if (r < 0)
1516 /* we warn but don't fail the link, as it may be brought up later */
1517 log_link_message_warning_errno(link, m, r, "Could not bring up interface");
1518
1519 return 1;
1520 }
1521
1522 static int link_up(Link *link) {
1523 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1524 int r;
1525
1526 assert(link);
1527 assert(link->network);
1528 assert(link->manager);
1529 assert(link->manager->rtnl);
1530
1531 log_link_debug(link, "Bringing link up");
1532
1533 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1534 if (r < 0)
1535 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1536
1537 /* set it free if not enslaved with networkd */
1538 if (!link->network->bridge && !link->network->bond && !link->network->vrf) {
1539 r = sd_netlink_message_append_u32(req, IFLA_MASTER, 0);
1540 if (r < 0)
1541 return log_link_error_errno(link, r, "Could not append IFLA_MASTER attribute: %m");
1542 }
1543
1544 r = sd_rtnl_message_link_set_flags(req, IFF_UP, IFF_UP);
1545 if (r < 0)
1546 return log_link_error_errno(link, r, "Could not set link flags: %m");
1547
1548 if (link->network->mac) {
1549 r = sd_netlink_message_append_ether_addr(req, IFLA_ADDRESS, link->network->mac);
1550 if (r < 0)
1551 return log_link_error_errno(link, r, "Could not set MAC address: %m");
1552 }
1553
1554 r = netlink_call_async(link->manager->rtnl, NULL, req, link_up_handler,
1555 link_netlink_destroy_callback, link);
1556 if (r < 0)
1557 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1558
1559 link_ref(link);
1560
1561 return 0;
1562 }
1563
1564 static int link_down_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
1565 int r;
1566
1567 assert(link);
1568
1569 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1570 return 1;
1571
1572 r = sd_netlink_message_get_errno(m);
1573 if (r < 0)
1574 log_link_message_warning_errno(link, m, r, "Could not bring down interface");
1575
1576 return 1;
1577 }
1578
1579 int link_down(Link *link, link_netlink_message_handler_t callback) {
1580 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1581 int r;
1582
1583 assert(link);
1584 assert(link->manager);
1585 assert(link->manager->rtnl);
1586
1587 log_link_debug(link, "Bringing link down");
1588
1589 r = sd_rtnl_message_new_link(link->manager->rtnl, &req,
1590 RTM_SETLINK, link->ifindex);
1591 if (r < 0)
1592 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1593
1594 r = sd_rtnl_message_link_set_flags(req, 0, IFF_UP);
1595 if (r < 0)
1596 return log_link_error_errno(link, r, "Could not set link flags: %m");
1597
1598 r = netlink_call_async(link->manager->rtnl, NULL, req,
1599 callback ?: link_down_handler,
1600 link_netlink_destroy_callback, link);
1601 if (r < 0)
1602 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1603
1604 link_ref(link);
1605
1606 return 0;
1607 }
1608
1609 static int link_group_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
1610 int r;
1611
1612 assert(link);
1613
1614 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1615 return 1;
1616
1617 r = sd_netlink_message_get_errno(m);
1618 if (r < 0)
1619 log_link_message_warning_errno(link, m, r, "Could not set group for the interface");
1620
1621 return 1;
1622 }
1623
1624 static int link_set_group(Link *link) {
1625 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1626 int r;
1627
1628 assert(link);
1629 assert(link->network);
1630 assert(link->manager);
1631 assert(link->manager->rtnl);
1632
1633 if (link->network->group <= 0)
1634 return 0;
1635
1636 log_link_debug(link, "Setting group");
1637
1638 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1639 if (r < 0)
1640 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1641
1642 r = sd_netlink_message_append_u32(req, IFLA_GROUP, link->network->group);
1643 if (r < 0)
1644 return log_link_error_errno(link, r, "Could not set link group: %m");
1645
1646 r = netlink_call_async(link->manager->rtnl, NULL, req, link_group_handler,
1647 link_netlink_destroy_callback, link);
1648 if (r < 0)
1649 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1650
1651 link_ref(link);
1652
1653 return 0;
1654 }
1655
1656 static int link_handle_bound_to_list(Link *link) {
1657 Link *l;
1658 int r;
1659 bool required_up = false;
1660 bool link_is_up = false;
1661
1662 assert(link);
1663
1664 if (hashmap_isempty(link->bound_to_links))
1665 return 0;
1666
1667 if (link->flags & IFF_UP)
1668 link_is_up = true;
1669
1670 HASHMAP_FOREACH (l, link->bound_to_links)
1671 if (link_has_carrier(l)) {
1672 required_up = true;
1673 break;
1674 }
1675
1676 if (!required_up && link_is_up) {
1677 r = link_down(link, NULL);
1678 if (r < 0)
1679 return r;
1680 } else if (required_up && !link_is_up) {
1681 r = link_up(link);
1682 if (r < 0)
1683 return r;
1684 }
1685
1686 return 0;
1687 }
1688
1689 static int link_handle_bound_by_list(Link *link) {
1690 Link *l;
1691 int r;
1692
1693 assert(link);
1694
1695 if (hashmap_isempty(link->bound_by_links))
1696 return 0;
1697
1698 HASHMAP_FOREACH (l, link->bound_by_links) {
1699 r = link_handle_bound_to_list(l);
1700 if (r < 0)
1701 return r;
1702 }
1703
1704 return 0;
1705 }
1706
1707 static int link_put_carrier(Link *link, Link *carrier, Hashmap **h) {
1708 int r;
1709
1710 assert(link);
1711 assert(carrier);
1712
1713 if (link == carrier)
1714 return 0;
1715
1716 if (hashmap_get(*h, INT_TO_PTR(carrier->ifindex)))
1717 return 0;
1718
1719 r = hashmap_ensure_allocated(h, NULL);
1720 if (r < 0)
1721 return r;
1722
1723 r = hashmap_put(*h, INT_TO_PTR(carrier->ifindex), carrier);
1724 if (r < 0)
1725 return r;
1726
1727 return 0;
1728 }
1729
1730 static int link_new_bound_by_list(Link *link) {
1731 Manager *m;
1732 Link *carrier;
1733 int r;
1734 bool list_updated = false;
1735
1736 assert(link);
1737 assert(link->manager);
1738
1739 m = link->manager;
1740
1741 HASHMAP_FOREACH(carrier, m->links) {
1742 if (!carrier->network)
1743 continue;
1744
1745 if (strv_isempty(carrier->network->bind_carrier))
1746 continue;
1747
1748 if (strv_fnmatch(carrier->network->bind_carrier, link->ifname)) {
1749 r = link_put_carrier(link, carrier, &link->bound_by_links);
1750 if (r < 0)
1751 return r;
1752
1753 list_updated = true;
1754 }
1755 }
1756
1757 if (list_updated)
1758 link_dirty(link);
1759
1760 HASHMAP_FOREACH(carrier, link->bound_by_links) {
1761 r = link_put_carrier(carrier, link, &carrier->bound_to_links);
1762 if (r < 0)
1763 return r;
1764
1765 link_dirty(carrier);
1766 }
1767
1768 return 0;
1769 }
1770
1771 static int link_new_bound_to_list(Link *link) {
1772 Manager *m;
1773 Link *carrier;
1774 int r;
1775 bool list_updated = false;
1776
1777 assert(link);
1778 assert(link->manager);
1779
1780 if (!link->network)
1781 return 0;
1782
1783 if (strv_isempty(link->network->bind_carrier))
1784 return 0;
1785
1786 m = link->manager;
1787
1788 HASHMAP_FOREACH (carrier, m->links) {
1789 if (strv_fnmatch(link->network->bind_carrier, carrier->ifname)) {
1790 r = link_put_carrier(link, carrier, &link->bound_to_links);
1791 if (r < 0)
1792 return r;
1793
1794 list_updated = true;
1795 }
1796 }
1797
1798 if (list_updated)
1799 link_dirty(link);
1800
1801 HASHMAP_FOREACH (carrier, link->bound_to_links) {
1802 r = link_put_carrier(carrier, link, &carrier->bound_by_links);
1803 if (r < 0)
1804 return r;
1805
1806 link_dirty(carrier);
1807 }
1808
1809 return 0;
1810 }
1811
1812 static int link_new_carrier_maps(Link *link) {
1813 int r;
1814
1815 r = link_new_bound_by_list(link);
1816 if (r < 0)
1817 return r;
1818
1819 r = link_handle_bound_by_list(link);
1820 if (r < 0)
1821 return r;
1822
1823 r = link_new_bound_to_list(link);
1824 if (r < 0)
1825 return r;
1826
1827 r = link_handle_bound_to_list(link);
1828 if (r < 0)
1829 return r;
1830
1831 return 0;
1832 }
1833
1834 static void link_free_bound_to_list(Link *link) {
1835 Link *bound_to;
1836
1837 HASHMAP_FOREACH (bound_to, link->bound_to_links) {
1838 hashmap_remove(link->bound_to_links, INT_TO_PTR(bound_to->ifindex));
1839
1840 if (hashmap_remove(bound_to->bound_by_links, INT_TO_PTR(link->ifindex)))
1841 link_dirty(bound_to);
1842 }
1843
1844 return;
1845 }
1846
1847 static void link_free_bound_by_list(Link *link) {
1848 Link *bound_by;
1849
1850 HASHMAP_FOREACH (bound_by, link->bound_by_links) {
1851 hashmap_remove(link->bound_by_links, INT_TO_PTR(bound_by->ifindex));
1852
1853 if (hashmap_remove(bound_by->bound_to_links, INT_TO_PTR(link->ifindex))) {
1854 link_dirty(bound_by);
1855 link_handle_bound_to_list(bound_by);
1856 }
1857 }
1858
1859 return;
1860 }
1861
1862 static void link_free_carrier_maps(Link *link) {
1863 bool list_updated = false;
1864
1865 assert(link);
1866
1867 if (!hashmap_isempty(link->bound_to_links)) {
1868 link_free_bound_to_list(link);
1869 list_updated = true;
1870 }
1871
1872 if (!hashmap_isempty(link->bound_by_links)) {
1873 link_free_bound_by_list(link);
1874 list_updated = true;
1875 }
1876
1877 if (list_updated)
1878 link_dirty(link);
1879
1880 return;
1881 }
1882
1883 static int link_append_to_master(Link *link, NetDev *netdev) {
1884 Link *master;
1885 int r;
1886
1887 assert(link);
1888 assert(netdev);
1889
1890 r = link_get(link->manager, netdev->ifindex, &master);
1891 if (r < 0)
1892 return r;
1893
1894 r = set_ensure_put(&master->slaves, NULL, link);
1895 if (r <= 0)
1896 return r;
1897
1898 link_ref(link);
1899 return 0;
1900 }
1901
1902 static void link_drop_from_master(Link *link, NetDev *netdev) {
1903 Link *master;
1904
1905 assert(link);
1906
1907 if (!link->manager || !netdev)
1908 return;
1909
1910 if (link_get(link->manager, netdev->ifindex, &master) < 0)
1911 return;
1912
1913 link_unref(set_remove(master->slaves, link));
1914 }
1915
1916 static void link_detach_from_manager(Link *link) {
1917 if (!link || !link->manager)
1918 return;
1919
1920 link_unref(set_remove(link->manager->links_requesting_uuid, link));
1921 link_clean(link);
1922
1923 /* The following must be called at last. */
1924 assert_se(hashmap_remove(link->manager->links, INT_TO_PTR(link->ifindex)) == link);
1925 link_unref(link);
1926 }
1927
1928 void link_drop(Link *link) {
1929 if (!link || link->state == LINK_STATE_LINGER)
1930 return;
1931
1932 link_set_state(link, LINK_STATE_LINGER);
1933
1934 link_free_carrier_maps(link);
1935
1936 if (link->network) {
1937 link_drop_from_master(link, link->network->bridge);
1938 link_drop_from_master(link, link->network->bond);
1939 }
1940
1941 log_link_debug(link, "Link removed");
1942
1943 (void) unlink(link->state_file);
1944 link_detach_from_manager(link);
1945 }
1946
1947 static int link_joined(Link *link) {
1948 int r;
1949
1950 assert(link);
1951 assert(link->network);
1952
1953 if (!hashmap_isempty(link->bound_to_links)) {
1954 r = link_handle_bound_to_list(link);
1955 if (r < 0)
1956 return r;
1957 } else if (!(link->flags & IFF_UP)) {
1958 r = link_up(link);
1959 if (r < 0) {
1960 link_enter_failed(link);
1961 return r;
1962 }
1963 }
1964
1965 if (link->network->bridge) {
1966 r = link_set_bridge(link);
1967 if (r < 0)
1968 log_link_error_errno(link, r, "Could not set bridge message: %m");
1969
1970 r = link_append_to_master(link, link->network->bridge);
1971 if (r < 0)
1972 log_link_error_errno(link, r, "Failed to add to bridge master's slave list: %m");
1973 }
1974
1975 if (link->network->bond) {
1976 r = link_set_bond(link);
1977 if (r < 0)
1978 log_link_error_errno(link, r, "Could not set bond message: %m");
1979
1980 r = link_append_to_master(link, link->network->bond);
1981 if (r < 0)
1982 log_link_error_errno(link, r, "Failed to add to bond master's slave list: %m");
1983 }
1984
1985 if (link->network->use_br_vlan &&
1986 (link->network->bridge || streq_ptr("bridge", link->kind))) {
1987 r = link_set_bridge_vlan(link);
1988 if (r < 0)
1989 log_link_error_errno(link, r, "Could not set bridge vlan: %m");
1990 }
1991
1992 /* Skip setting up addresses until it gets carrier,
1993 or it would try to set addresses twice,
1994 which is bad for non-idempotent steps. */
1995 if (!link_has_carrier(link) && !link->network->configure_without_carrier)
1996 return 0;
1997
1998 link_set_state(link, LINK_STATE_CONFIGURING);
1999 return link_set_static_configs(link);
2000 }
2001
2002 static int netdev_join_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
2003 int r;
2004
2005 assert(link);
2006 assert(link->network);
2007 assert(link->enslaving > 0);
2008
2009 link->enslaving--;
2010
2011 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
2012 return 1;
2013
2014 r = sd_netlink_message_get_errno(m);
2015 if (r < 0 && r != -EEXIST) {
2016 log_link_message_warning_errno(link, m, r, "Could not join netdev");
2017 link_enter_failed(link);
2018 return 1;
2019 }
2020
2021 log_link_debug(link, "Joined netdev");
2022
2023 if (link->enslaving == 0) {
2024 r = link_joined(link);
2025 if (r < 0)
2026 link_enter_failed(link);
2027 }
2028
2029 return 1;
2030 }
2031
2032 static int link_enter_join_netdev(Link *link) {
2033 NetDev *netdev;
2034 int r;
2035
2036 assert(link);
2037 assert(link->network);
2038 assert(link->state == LINK_STATE_INITIALIZED);
2039
2040 link_set_state(link, LINK_STATE_CONFIGURING);
2041
2042 link_dirty(link);
2043 link->enslaving = 0;
2044
2045 if (link->network->bond) {
2046 if (link->network->bond->state == NETDEV_STATE_READY &&
2047 link->network->bond->ifindex == link->master_ifindex)
2048 return link_joined(link);
2049
2050 log_struct(LOG_DEBUG,
2051 LOG_LINK_INTERFACE(link),
2052 LOG_NETDEV_INTERFACE(link->network->bond),
2053 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", link->network->bond->ifname));
2054
2055 link->enslaving++;
2056
2057 r = netdev_join(link->network->bond, link, netdev_join_handler);
2058 if (r < 0) {
2059 log_struct_errno(LOG_WARNING, r,
2060 LOG_LINK_INTERFACE(link),
2061 LOG_NETDEV_INTERFACE(link->network->bond),
2062 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", link->network->bond->ifname));
2063 link_enter_failed(link);
2064 return r;
2065 }
2066 }
2067
2068 if (link->network->bridge) {
2069 log_struct(LOG_DEBUG,
2070 LOG_LINK_INTERFACE(link),
2071 LOG_NETDEV_INTERFACE(link->network->bridge),
2072 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", link->network->bridge->ifname));
2073
2074 link->enslaving++;
2075
2076 r = netdev_join(link->network->bridge, link, netdev_join_handler);
2077 if (r < 0) {
2078 log_struct_errno(LOG_WARNING, r,
2079 LOG_LINK_INTERFACE(link),
2080 LOG_NETDEV_INTERFACE(link->network->bridge),
2081 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", link->network->bridge->ifname));
2082 link_enter_failed(link);
2083 return r;
2084 }
2085 }
2086
2087 if (link->network->vrf) {
2088 log_struct(LOG_DEBUG,
2089 LOG_LINK_INTERFACE(link),
2090 LOG_NETDEV_INTERFACE(link->network->vrf),
2091 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", link->network->vrf->ifname));
2092
2093 link->enslaving++;
2094
2095 r = netdev_join(link->network->vrf, link, netdev_join_handler);
2096 if (r < 0) {
2097 log_struct_errno(LOG_WARNING, r,
2098 LOG_LINK_INTERFACE(link),
2099 LOG_NETDEV_INTERFACE(link->network->vrf),
2100 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", link->network->vrf->ifname));
2101 link_enter_failed(link);
2102 return r;
2103 }
2104 }
2105
2106 HASHMAP_FOREACH(netdev, link->network->stacked_netdevs) {
2107
2108 if (netdev->ifindex > 0)
2109 /* Assume already enslaved. */
2110 continue;
2111
2112 if (netdev_get_create_type(netdev) != NETDEV_CREATE_STACKED)
2113 continue;
2114
2115 log_struct(LOG_DEBUG,
2116 LOG_LINK_INTERFACE(link),
2117 LOG_NETDEV_INTERFACE(netdev),
2118 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", netdev->ifname));
2119
2120 link->enslaving++;
2121
2122 r = netdev_join(netdev, link, netdev_join_handler);
2123 if (r < 0) {
2124 log_struct_errno(LOG_WARNING, r,
2125 LOG_LINK_INTERFACE(link),
2126 LOG_NETDEV_INTERFACE(netdev),
2127 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", netdev->ifname));
2128 link_enter_failed(link);
2129 return r;
2130 }
2131 }
2132
2133 if (link->enslaving == 0)
2134 return link_joined(link);
2135
2136 return 0;
2137 }
2138
2139 static int link_set_ipv4_forward(Link *link) {
2140 int r;
2141
2142 if (!link_ipv4_forward_enabled(link))
2143 return 0;
2144
2145 /* We propagate the forwarding flag from one interface to the
2146 * global setting one way. This means: as long as at least one
2147 * interface was configured at any time that had IP forwarding
2148 * enabled the setting will stay on for good. We do this
2149 * primarily to keep IPv4 and IPv6 packet forwarding behaviour
2150 * somewhat in sync (see below). */
2151
2152 r = sysctl_write_ip_property(AF_INET, NULL, "ip_forward", "1");
2153 if (r < 0)
2154 log_link_warning_errno(link, r, "Cannot turn on IPv4 packet forwarding, ignoring: %m");
2155
2156 return 0;
2157 }
2158
2159 static int link_set_ipv6_forward(Link *link) {
2160 int r;
2161
2162 if (!link_ipv6_forward_enabled(link))
2163 return 0;
2164
2165 /* On Linux, the IPv6 stack does not know a per-interface
2166 * packet forwarding setting: either packet forwarding is on
2167 * for all, or off for all. We hence don't bother with a
2168 * per-interface setting, but simply propagate the interface
2169 * flag, if it is set, to the global flag, one-way. Note that
2170 * while IPv4 would allow a per-interface flag, we expose the
2171 * same behaviour there and also propagate the setting from
2172 * one to all, to keep things simple (see above). */
2173
2174 r = sysctl_write_ip_property(AF_INET6, "all", "forwarding", "1");
2175 if (r < 0)
2176 log_link_warning_errno(link, r, "Cannot configure IPv6 packet forwarding, ignoring: %m");
2177
2178 return 0;
2179 }
2180
2181 static int link_set_ipv6_privacy_extensions(Link *link) {
2182 IPv6PrivacyExtensions s;
2183 int r;
2184
2185 s = link_ipv6_privacy_extensions(link);
2186 if (s < 0)
2187 return 0;
2188
2189 r = sysctl_write_ip_property_int(AF_INET6, link->ifname, "use_tempaddr", (int) link->network->ipv6_privacy_extensions);
2190 if (r < 0)
2191 log_link_warning_errno(link, r, "Cannot configure IPv6 privacy extension for interface: %m");
2192
2193 return 0;
2194 }
2195
2196 static int link_set_ipv6_accept_ra(Link *link) {
2197 int r;
2198
2199 /* Make this a NOP if IPv6 is not available */
2200 if (!socket_ipv6_is_supported())
2201 return 0;
2202
2203 if (link->flags & IFF_LOOPBACK)
2204 return 0;
2205
2206 if (!link->network)
2207 return 0;
2208
2209 r = sysctl_write_ip_property(AF_INET6, link->ifname, "accept_ra", "0");
2210 if (r < 0)
2211 log_link_warning_errno(link, r, "Cannot disable kernel IPv6 accept_ra for interface: %m");
2212
2213 return 0;
2214 }
2215
2216 static int link_set_ipv6_dad_transmits(Link *link) {
2217 int r;
2218
2219 /* Make this a NOP if IPv6 is not available */
2220 if (!socket_ipv6_is_supported())
2221 return 0;
2222
2223 if (link->flags & IFF_LOOPBACK)
2224 return 0;
2225
2226 if (!link->network)
2227 return 0;
2228
2229 if (link->network->ipv6_dad_transmits < 0)
2230 return 0;
2231
2232 r = sysctl_write_ip_property_int(AF_INET6, link->ifname, "dad_transmits", link->network->ipv6_dad_transmits);
2233 if (r < 0)
2234 log_link_warning_errno(link, r, "Cannot set IPv6 dad transmits for interface: %m");
2235
2236 return 0;
2237 }
2238
2239 static int link_set_ipv6_hop_limit(Link *link) {
2240 int r;
2241
2242 /* Make this a NOP if IPv6 is not available */
2243 if (!socket_ipv6_is_supported())
2244 return 0;
2245
2246 if (link->flags & IFF_LOOPBACK)
2247 return 0;
2248
2249 if (!link->network)
2250 return 0;
2251
2252 if (link->network->ipv6_hop_limit < 0)
2253 return 0;
2254
2255 r = sysctl_write_ip_property_int(AF_INET6, link->ifname, "hop_limit", link->network->ipv6_hop_limit);
2256 if (r < 0)
2257 log_link_warning_errno(link, r, "Cannot set IPv6 hop limit for interface: %m");
2258
2259 return 0;
2260 }
2261
2262 static int link_set_ipv6_mtu(Link *link) {
2263 int r;
2264
2265 /* Make this a NOP if IPv6 is not available */
2266 if (!socket_ipv6_is_supported())
2267 return 0;
2268
2269 if (link->flags & IFF_LOOPBACK)
2270 return 0;
2271
2272 if (link->network->ipv6_mtu == 0)
2273 return 0;
2274
2275 /* IPv6 protocol requires a minimum MTU of IPV6_MTU_MIN(1280) bytes
2276 * on the interface. Bump up IPv6 MTU bytes to IPV6_MTU_MIN. */
2277 if (link->network->ipv6_mtu < IPV6_MIN_MTU) {
2278 log_link_notice(link, "Bumping IPv6 MTU to "STRINGIFY(IPV6_MIN_MTU)" byte minimum required");
2279 link->network->ipv6_mtu = IPV6_MIN_MTU;
2280 }
2281
2282 r = sysctl_write_ip_property_uint32(AF_INET6, link->ifname, "mtu", link->network->ipv6_mtu);
2283 if (r < 0) {
2284 if (link->mtu < link->network->ipv6_mtu)
2285 log_link_warning(link, "Cannot set IPv6 MTU %"PRIu32" higher than device MTU %"PRIu32,
2286 link->network->ipv6_mtu, link->mtu);
2287 else
2288 log_link_warning_errno(link, r, "Cannot set IPv6 MTU for interface: %m");
2289 }
2290
2291 link->ipv6_mtu_set = true;
2292
2293 return 0;
2294 }
2295
2296 static int link_set_ipv4_accept_local(Link *link) {
2297 int r;
2298
2299 if (link->flags & IFF_LOOPBACK)
2300 return 0;
2301
2302 if (link->network->ipv4_accept_local < 0)
2303 return 0;
2304
2305 r = sysctl_write_ip_property_boolean(AF_INET, link->ifname, "accept_local", link->network->ipv4_accept_local);
2306 if (r < 0)
2307 log_link_warning_errno(link, r, "Cannot set IPv4 accept_local flag for interface: %m");
2308
2309 return 0;
2310 }
2311
2312 static int link_enumerate_ipv6_tentative_addresses(Link *link) {
2313 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL, *reply = NULL;
2314 sd_netlink_message *addr;
2315 int r;
2316
2317 assert(link);
2318 assert(link->manager);
2319 assert(link->manager->rtnl);
2320
2321 r = sd_rtnl_message_new_addr(link->manager->rtnl, &req, RTM_GETADDR, 0, AF_INET6);
2322 if (r < 0)
2323 return r;
2324
2325 r = sd_netlink_call(link->manager->rtnl, req, 0, &reply);
2326 if (r < 0)
2327 return r;
2328
2329 for (addr = reply; addr; addr = sd_netlink_message_next(addr)) {
2330 unsigned char flags;
2331 int ifindex;
2332
2333 r = sd_rtnl_message_addr_get_ifindex(addr, &ifindex);
2334 if (r < 0) {
2335 log_link_warning_errno(link, r, "rtnl: invalid ifindex, ignoring: %m");
2336 continue;
2337 } else if (link->ifindex != ifindex)
2338 continue;
2339
2340 r = sd_rtnl_message_addr_get_flags(addr, &flags);
2341 if (r < 0) {
2342 log_link_warning_errno(link, r, "rtnl: received address message with invalid flags, ignoring: %m");
2343 continue;
2344 } else if (!(flags & IFA_F_TENTATIVE))
2345 continue;
2346
2347 log_link_debug(link, "Found tentative ipv6 link-local address");
2348 (void) manager_rtnl_process_address(link->manager->rtnl, addr, link->manager);
2349 }
2350
2351 return 0;
2352 }
2353
2354 static int link_drop_foreign_config(Link *link) {
2355 int r;
2356
2357 /* The kernel doesn't notify us about tentative addresses;
2358 * so if ipv6ll is disabled, we need to enumerate them now so we can drop them below */
2359 if (!link_ipv6ll_enabled(link)) {
2360 r = link_enumerate_ipv6_tentative_addresses(link);
2361 if (r < 0)
2362 return r;
2363 }
2364
2365 r = link_drop_foreign_addresses(link);
2366 if (r < 0)
2367 return r;
2368
2369 r = link_drop_foreign_neighbors(link);
2370 if (r < 0)
2371 return r;
2372
2373 return link_drop_foreign_routes(link);
2374 }
2375
2376 static int link_drop_config(Link *link) {
2377 int r;
2378
2379 r = link_drop_addresses(link);
2380 if (r < 0)
2381 return r;
2382
2383 r = link_drop_neighbors(link);
2384 if (r < 0)
2385 return r;
2386
2387 r = link_drop_routes(link);
2388 if (r < 0)
2389 return r;
2390
2391 ndisc_flush(link);
2392
2393 return 0;
2394 }
2395
2396 static int link_configure_traffic_control(Link *link) {
2397 TrafficControl *tc;
2398 int r;
2399
2400 link->tc_configured = false;
2401 link->tc_messages = 0;
2402
2403 ORDERED_HASHMAP_FOREACH(tc, link->network->tc_by_section) {
2404 r = traffic_control_configure(link, tc);
2405 if (r < 0)
2406 return r;
2407 }
2408
2409 if (link->tc_messages == 0)
2410 link->tc_configured = true;
2411 else
2412 log_link_debug(link, "Configuring traffic control");
2413
2414 return 0;
2415 }
2416
2417 static int link_configure_sr_iov(Link *link) {
2418 SRIOV *sr_iov;
2419 int r;
2420
2421 link->sr_iov_configured = false;
2422 link->sr_iov_messages = 0;
2423
2424 ORDERED_HASHMAP_FOREACH(sr_iov, link->network->sr_iov_by_section) {
2425 r = sr_iov_configure(link, sr_iov);
2426 if (r < 0)
2427 return r;
2428 }
2429
2430 if (link->sr_iov_messages == 0)
2431 link->sr_iov_configured = true;
2432 else
2433 log_link_debug(link, "Configuring SR-IOV");
2434
2435 return 0;
2436 }
2437
2438 static int link_configure(Link *link) {
2439 int r;
2440
2441 assert(link);
2442 assert(link->network);
2443 assert(link->state == LINK_STATE_INITIALIZED);
2444
2445 r = link_configure_traffic_control(link);
2446 if (r < 0)
2447 return r;
2448
2449 r = link_configure_sr_iov(link);
2450 if (r < 0)
2451 return r;
2452
2453 if (link->iftype == ARPHRD_CAN)
2454 return link_configure_can(link);
2455
2456 /* If IPv6 configured that is static IPv6 address and IPv6LL autoconfiguration is enabled
2457 * for this interface, then enable IPv6 */
2458 (void) link_update_ipv6_sysctl(link);
2459
2460 r = link_set_proxy_arp(link);
2461 if (r < 0)
2462 return r;
2463
2464 r = link_set_ipv6_proxy_ndp_addresses(link);
2465 if (r < 0)
2466 return r;
2467
2468 r = link_set_ipv4_forward(link);
2469 if (r < 0)
2470 return r;
2471
2472 r = link_set_ipv6_forward(link);
2473 if (r < 0)
2474 return r;
2475
2476 r = link_set_ipv6_privacy_extensions(link);
2477 if (r < 0)
2478 return r;
2479
2480 r = link_set_ipv6_accept_ra(link);
2481 if (r < 0)
2482 return r;
2483
2484 r = link_set_ipv6_dad_transmits(link);
2485 if (r < 0)
2486 return r;
2487
2488 r = link_set_ipv6_hop_limit(link);
2489 if (r < 0)
2490 return r;
2491
2492 r = link_set_ipv4_accept_local(link);
2493 if (r < 0)
2494 return r;
2495
2496 r = link_set_flags(link);
2497 if (r < 0)
2498 return r;
2499
2500 r = link_set_group(link);
2501 if (r < 0)
2502 return r;
2503
2504 if (link_ipv4ll_enabled(link, ADDRESS_FAMILY_IPV4 | ADDRESS_FAMILY_FALLBACK_IPV4)) {
2505 r = ipv4ll_configure(link);
2506 if (r < 0)
2507 return r;
2508 }
2509
2510 if (link_dhcp4_enabled(link)) {
2511 r = dhcp4_set_promote_secondaries(link);
2512 if (r < 0)
2513 return r;
2514
2515 r = dhcp4_configure(link);
2516 if (r < 0)
2517 return r;
2518 }
2519
2520 if (link_dhcp4_server_enabled(link)) {
2521 r = sd_dhcp_server_new(&link->dhcp_server, link->ifindex);
2522 if (r < 0)
2523 return r;
2524
2525 r = sd_dhcp_server_attach_event(link->dhcp_server, NULL, 0);
2526 if (r < 0)
2527 return r;
2528 }
2529
2530 if (link_dhcp6_enabled(link) ||
2531 link_ipv6_accept_ra_enabled(link)) {
2532 r = dhcp6_configure(link);
2533 if (r < 0)
2534 return r;
2535 }
2536
2537 if (link_ipv6_accept_ra_enabled(link)) {
2538 r = ndisc_configure(link);
2539 if (r < 0)
2540 return r;
2541 }
2542
2543 if (link_radv_enabled(link)) {
2544 r = radv_configure(link);
2545 if (r < 0)
2546 return r;
2547 }
2548
2549 if (link_lldp_rx_enabled(link)) {
2550 r = link_lldp_rx_configure(link);
2551 if (r < 0)
2552 return r;
2553 }
2554
2555 r = link_configure_mtu(link);
2556 if (r < 0)
2557 return r;
2558
2559 r = link_configure_addrgen_mode(link);
2560 if (r < 0)
2561 return r;
2562
2563 r = link_configure_ipv4_dad(link);
2564 if (r < 0)
2565 return r;
2566
2567 return link_configure_continue(link);
2568 }
2569
2570 /* The configuration continues in this separate function, instead of
2571 * including this in the above link_configure() function, for two
2572 * reasons:
2573 * 1) some devices reset the link when the mtu is set, which caused
2574 * an infinite loop here in networkd; see:
2575 * https://github.com/systemd/systemd/issues/6593
2576 * https://github.com/systemd/systemd/issues/9831
2577 * 2) if ipv6ll is disabled, then bringing the interface up must be
2578 * delayed until after we get confirmation from the kernel that
2579 * the addr_gen_mode parameter has been set (via netlink), see:
2580 * https://github.com/systemd/systemd/issues/13882
2581 */
2582 static int link_configure_continue(Link *link) {
2583 int r;
2584
2585 assert(link);
2586 assert(link->network);
2587 assert(link->state == LINK_STATE_INITIALIZED);
2588
2589 if (link->setting_mtu || link->setting_genmode)
2590 return 0;
2591
2592 /* Drop foreign config, but ignore loopback or critical devices.
2593 * We do not want to remove loopback address or addresses used for root NFS. */
2594 if (!(link->flags & IFF_LOOPBACK) &&
2595 link->network->keep_configuration != KEEP_CONFIGURATION_YES) {
2596 r = link_drop_foreign_config(link);
2597 if (r < 0)
2598 return r;
2599 }
2600
2601 /* The kernel resets ipv6 mtu after changing device mtu;
2602 * we must set this here, after we've set device mtu */
2603 r = link_set_ipv6_mtu(link);
2604 if (r < 0)
2605 return r;
2606
2607 if (link_has_carrier(link) || link->network->configure_without_carrier) {
2608 r = link_acquire_conf(link);
2609 if (r < 0)
2610 return r;
2611 }
2612
2613 return link_enter_join_netdev(link);
2614 }
2615
2616 static int duid_set_uuid(DUID *duid, sd_id128_t uuid) {
2617 assert(duid);
2618
2619 if (duid->raw_data_len > 0)
2620 return 0;
2621
2622 if (duid->type != DUID_TYPE_UUID)
2623 return -EINVAL;
2624
2625 memcpy(&duid->raw_data, &uuid, sizeof(sd_id128_t));
2626 duid->raw_data_len = sizeof(sd_id128_t);
2627
2628 return 1;
2629 }
2630
2631 int get_product_uuid_handler(sd_bus_message *m, void *userdata, sd_bus_error *ret_error) {
2632 Manager *manager = userdata;
2633 const sd_bus_error *e;
2634 const void *a;
2635 size_t sz;
2636 DUID *duid;
2637 Link *link;
2638 int r;
2639
2640 assert(m);
2641 assert(manager);
2642
2643 e = sd_bus_message_get_error(m);
2644 if (e) {
2645 log_error_errno(sd_bus_error_get_errno(e),
2646 "Could not get product UUID. Falling back to use machine-app-specific ID as DUID-UUID: %s",
2647 e->message);
2648 goto configure;
2649 }
2650
2651 r = sd_bus_message_read_array(m, 'y', &a, &sz);
2652 if (r < 0)
2653 goto configure;
2654
2655 if (sz != sizeof(sd_id128_t)) {
2656 log_error("Invalid product UUID. Falling back to use machine-app-specific ID as DUID-UUID.");
2657 goto configure;
2658 }
2659
2660 memcpy(&manager->product_uuid, a, sz);
2661 while ((duid = set_steal_first(manager->duids_requesting_uuid)))
2662 (void) duid_set_uuid(duid, manager->product_uuid);
2663
2664 manager->duids_requesting_uuid = set_free(manager->duids_requesting_uuid);
2665
2666 configure:
2667 while ((link = set_steal_first(manager->links_requesting_uuid))) {
2668 link_unref(link);
2669
2670 r = link_configure(link);
2671 if (r < 0)
2672 link_enter_failed(link);
2673 }
2674
2675 manager->links_requesting_uuid = set_free(manager->links_requesting_uuid);
2676
2677 /* To avoid calling GetProductUUID() bus method so frequently, set the flag below
2678 * even if the method fails. */
2679 manager->has_product_uuid = true;
2680
2681 return 1;
2682 }
2683
2684 static bool link_requires_uuid(Link *link) {
2685 const DUID *duid;
2686
2687 assert(link);
2688 assert(link->manager);
2689 assert(link->network);
2690
2691 duid = link_get_duid(link);
2692 if (duid->type != DUID_TYPE_UUID || duid->raw_data_len != 0)
2693 return false;
2694
2695 if (link_dhcp4_enabled(link) && IN_SET(link->network->dhcp_client_identifier, DHCP_CLIENT_ID_DUID, DHCP_CLIENT_ID_DUID_ONLY))
2696 return true;
2697
2698 if (link_dhcp6_enabled(link) || link_ipv6_accept_ra_enabled(link))
2699 return true;
2700
2701 return false;
2702 }
2703
2704 static int link_configure_duid(Link *link) {
2705 Manager *m;
2706 DUID *duid;
2707 int r;
2708
2709 assert(link);
2710 assert(link->manager);
2711 assert(link->network);
2712
2713 m = link->manager;
2714 duid = link_get_duid(link);
2715
2716 if (!link_requires_uuid(link))
2717 return 1;
2718
2719 if (m->has_product_uuid) {
2720 (void) duid_set_uuid(duid, m->product_uuid);
2721 return 1;
2722 }
2723
2724 if (!m->links_requesting_uuid) {
2725 r = manager_request_product_uuid(m, link);
2726 if (r < 0) {
2727 if (r == -ENOMEM)
2728 return r;
2729
2730 log_link_warning_errno(link, r,
2731 "Failed to get product UUID. Falling back to use machine-app-specific ID as DUID-UUID: %m");
2732 return 1;
2733 }
2734 } else {
2735 r = set_put(m->links_requesting_uuid, link);
2736 if (r < 0)
2737 return log_oom();
2738 if (r > 0)
2739 link_ref(link);
2740
2741 r = set_put(m->duids_requesting_uuid, duid);
2742 if (r < 0)
2743 return log_oom();
2744 }
2745
2746 return 0;
2747 }
2748
2749 static int link_reconfigure_internal(Link *link, sd_netlink_message *m, bool force) {
2750 Network *network;
2751 int r;
2752
2753 if (m) {
2754 _cleanup_strv_free_ char **s = NULL;
2755
2756 r = sd_netlink_message_get_errno(m);
2757 if (r < 0)
2758 return r;
2759
2760 r = sd_netlink_message_read_strv(m, IFLA_PROP_LIST, IFLA_ALT_IFNAME, &s);
2761 if (r < 0 && r != -ENODATA)
2762 return r;
2763
2764 strv_free_and_replace(link->alternative_names, s);
2765 }
2766
2767 r = network_get(link->manager, link->iftype, link->sd_device,
2768 link->ifname, link->alternative_names, link->driver,
2769 &link->mac, &link->permanent_mac,
2770 link->wlan_iftype, link->ssid, &link->bssid, &network);
2771 if (r == -ENOENT) {
2772 link_enter_unmanaged(link);
2773 return 0;
2774 } else if (r == 0 && network->unmanaged) {
2775 link_enter_unmanaged(link);
2776 return 0;
2777 } else if (r < 0)
2778 return r;
2779
2780 if (link->network == network && !force)
2781 return 0;
2782
2783 log_link_info(link, "Re-configuring with %s", network->filename);
2784
2785 /* Dropping old .network file */
2786 r = link_stop_clients(link, false);
2787 if (r < 0)
2788 return r;
2789
2790 if (link_dhcp4_server_enabled(link))
2791 (void) sd_dhcp_server_stop(link->dhcp_server);
2792
2793 r = link_drop_config(link);
2794 if (r < 0)
2795 return r;
2796
2797 if (!IN_SET(link->state, LINK_STATE_UNMANAGED, LINK_STATE_PENDING, LINK_STATE_INITIALIZED)) {
2798 log_link_debug(link, "State is %s, dropping config", link_state_to_string(link->state));
2799 r = link_drop_foreign_config(link);
2800 if (r < 0)
2801 return r;
2802 }
2803
2804 link_free_carrier_maps(link);
2805 link_free_engines(link);
2806 link->network = network_unref(link->network);
2807
2808 /* Then, apply new .network file */
2809 r = network_apply(network, link);
2810 if (r < 0)
2811 return r;
2812
2813 r = link_new_carrier_maps(link);
2814 if (r < 0)
2815 return r;
2816
2817 link_set_state(link, LINK_STATE_INITIALIZED);
2818 link_dirty(link);
2819
2820 /* link_configure_duid() returns 0 if it requests product UUID. In that case,
2821 * link_configure() is called later asynchronously. */
2822 r = link_configure_duid(link);
2823 if (r <= 0)
2824 return r;
2825
2826 r = link_configure(link);
2827 if (r < 0)
2828 return r;
2829
2830 return 0;
2831 }
2832
2833 static int link_reconfigure_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
2834 int r;
2835
2836 r = link_reconfigure_internal(link, m, false);
2837 if (r < 0)
2838 link_enter_failed(link);
2839
2840 return 1;
2841 }
2842
2843 static int link_force_reconfigure_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
2844 int r;
2845
2846 r = link_reconfigure_internal(link, m, true);
2847 if (r < 0)
2848 link_enter_failed(link);
2849
2850 return 1;
2851 }
2852
2853 int link_reconfigure(Link *link, bool force) {
2854 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
2855 int r;
2856
2857 if (IN_SET(link->state, LINK_STATE_PENDING, LINK_STATE_LINGER))
2858 return 0;
2859
2860 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_GETLINK,
2861 link->ifindex);
2862 if (r < 0)
2863 return r;
2864
2865 r = netlink_call_async(link->manager->rtnl, NULL, req,
2866 force ? link_force_reconfigure_handler : link_reconfigure_handler,
2867 link_netlink_destroy_callback, link);
2868 if (r < 0)
2869 return r;
2870
2871 link_ref(link);
2872
2873 return 0;
2874 }
2875
2876 static int link_initialized_and_synced(Link *link) {
2877 Network *network;
2878 int r;
2879
2880 assert(link);
2881 assert(link->ifname);
2882 assert(link->manager);
2883
2884 /* We may get called either from the asynchronous netlink callback,
2885 * or directly for link_add() if running in a container. See link_add(). */
2886 if (!IN_SET(link->state, LINK_STATE_PENDING, LINK_STATE_INITIALIZED))
2887 return 0;
2888
2889 log_link_debug(link, "Link state is up-to-date");
2890 link_set_state(link, LINK_STATE_INITIALIZED);
2891
2892 r = link_new_bound_by_list(link);
2893 if (r < 0)
2894 return r;
2895
2896 r = link_handle_bound_by_list(link);
2897 if (r < 0)
2898 return r;
2899
2900 if (!link->network) {
2901 r = wifi_get_info(link);
2902 if (r < 0)
2903 return r;
2904
2905 r = network_get(link->manager, link->iftype, link->sd_device,
2906 link->ifname, link->alternative_names, link->driver,
2907 &link->mac, &link->permanent_mac,
2908 link->wlan_iftype, link->ssid, &link->bssid, &network);
2909 if (r == -ENOENT) {
2910 link_enter_unmanaged(link);
2911 return 0;
2912 } else if (r == 0 && network->unmanaged) {
2913 link_enter_unmanaged(link);
2914 return 0;
2915 } else if (r < 0)
2916 return r;
2917
2918 if (link->flags & IFF_LOOPBACK) {
2919 if (network->link_local != ADDRESS_FAMILY_NO)
2920 log_link_debug(link, "Ignoring link-local autoconfiguration for loopback link");
2921
2922 if (network->dhcp != ADDRESS_FAMILY_NO)
2923 log_link_debug(link, "Ignoring DHCP clients for loopback link");
2924
2925 if (network->dhcp_server)
2926 log_link_debug(link, "Ignoring DHCP server for loopback link");
2927 }
2928
2929 r = network_apply(network, link);
2930 if (r < 0)
2931 return r;
2932 }
2933
2934 r = link_new_bound_to_list(link);
2935 if (r < 0)
2936 return r;
2937
2938 /* link_configure_duid() returns 0 if it requests product UUID. In that case,
2939 * link_configure() is called later asynchronously. */
2940 r = link_configure_duid(link);
2941 if (r <= 0)
2942 return r;
2943
2944 r = link_configure(link);
2945 if (r < 0)
2946 return r;
2947
2948 return 0;
2949 }
2950
2951 static int link_initialized_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
2952 _cleanup_strv_free_ char **s = NULL;
2953 int r;
2954
2955 r = sd_netlink_message_get_errno(m);
2956 if (r < 0) {
2957 log_link_warning_errno(link, r, "Failed to wait for the interface to be initialized: %m");
2958 link_enter_failed(link);
2959 return 0;
2960 }
2961
2962 r = sd_netlink_message_read_strv(m, IFLA_PROP_LIST, IFLA_ALT_IFNAME, &s);
2963 if (r < 0 && r != -ENODATA) {
2964 link_enter_failed(link);
2965 return 0;
2966 }
2967
2968 strv_free_and_replace(link->alternative_names, s);
2969
2970 r = link_initialized_and_synced(link);
2971 if (r < 0)
2972 link_enter_failed(link);
2973 return 1;
2974 }
2975
2976 int link_initialized(Link *link, sd_device *device) {
2977 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
2978 int r;
2979
2980 assert(link);
2981 assert(link->manager);
2982 assert(link->manager->rtnl);
2983 assert(device);
2984
2985 if (link->state != LINK_STATE_PENDING)
2986 return 0;
2987
2988 if (link->sd_device)
2989 return 0;
2990
2991 log_link_debug(link, "udev initialized link");
2992 link_set_state(link, LINK_STATE_INITIALIZED);
2993
2994 link->sd_device = sd_device_ref(device);
2995
2996 /* udev has initialized the link, but we don't know if we have yet
2997 * processed the NEWLINK messages with the latest state. Do a GETLINK,
2998 * when it returns we know that the pending NEWLINKs have already been
2999 * processed and that we are up-to-date */
3000
3001 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_GETLINK,
3002 link->ifindex);
3003 if (r < 0)
3004 return r;
3005
3006 r = netlink_call_async(link->manager->rtnl, NULL, req, link_initialized_handler,
3007 link_netlink_destroy_callback, link);
3008 if (r < 0)
3009 return r;
3010
3011 link_ref(link);
3012
3013 return 0;
3014 }
3015
3016 static int link_load(Link *link) {
3017 _cleanup_free_ char *network_file = NULL,
3018 *addresses = NULL,
3019 *routes = NULL,
3020 *dhcp4_address = NULL,
3021 *ipv4ll_address = NULL;
3022 union in_addr_union address;
3023 int r;
3024
3025 assert(link);
3026
3027 r = parse_env_file(NULL, link->state_file,
3028 "NETWORK_FILE", &network_file,
3029 "ADDRESSES", &addresses,
3030 "ROUTES", &routes,
3031 "DHCP4_ADDRESS", &dhcp4_address,
3032 "IPV4LL_ADDRESS", &ipv4ll_address);
3033 if (r < 0 && r != -ENOENT)
3034 return log_link_error_errno(link, r, "Failed to read %s: %m", link->state_file);
3035
3036 if (network_file) {
3037 Network *network;
3038 char *suffix;
3039
3040 /* drop suffix */
3041 suffix = strrchr(network_file, '.');
3042 if (!suffix) {
3043 log_link_debug(link, "Failed to get network name from %s", network_file);
3044 goto network_file_fail;
3045 }
3046 *suffix = '\0';
3047
3048 r = network_get_by_name(link->manager, basename(network_file), &network);
3049 if (r < 0) {
3050 log_link_debug_errno(link, r, "Failed to get network %s: %m", basename(network_file));
3051 goto network_file_fail;
3052 }
3053
3054 r = network_apply(network, link);
3055 if (r < 0)
3056 return log_link_error_errno(link, r, "Failed to apply network %s: %m", basename(network_file));
3057 }
3058
3059 network_file_fail:
3060
3061 r = link_deserialize_addresses(link, addresses);
3062 if (r < 0)
3063 log_link_warning_errno(link, r, "Failed to load addresses from %s, ignoring: %m", link->state_file);
3064
3065 r = link_deserialize_routes(link, routes);
3066 if (r < 0)
3067 log_link_warning_errno(link, r, "Failed to load routes from %s, ignoring: %m", link->state_file);
3068
3069 if (dhcp4_address) {
3070 r = in_addr_from_string(AF_INET, dhcp4_address, &address);
3071 if (r < 0) {
3072 log_link_debug_errno(link, r, "Failed to parse DHCPv4 address %s: %m", dhcp4_address);
3073 goto dhcp4_address_fail;
3074 }
3075
3076 r = sd_dhcp_client_new(&link->dhcp_client, link->network ? link->network->dhcp_anonymize : 0);
3077 if (r < 0)
3078 return log_link_error_errno(link, r, "Failed to create DHCPv4 client: %m");
3079
3080 r = sd_dhcp_client_attach_event(link->dhcp_client, NULL, 0);
3081 if (r < 0)
3082 return log_link_error_errno(link, r, "Failed to attach DHCPv4 event: %m");
3083
3084 r = sd_dhcp_client_set_request_address(link->dhcp_client, &address.in);
3085 if (r < 0)
3086 return log_link_error_errno(link, r, "Failed to set initial DHCPv4 address %s: %m", dhcp4_address);
3087 }
3088
3089 dhcp4_address_fail:
3090
3091 if (ipv4ll_address) {
3092 r = in_addr_from_string(AF_INET, ipv4ll_address, &address);
3093 if (r < 0) {
3094 log_link_debug_errno(link, r, "Failed to parse IPv4LL address %s: %m", ipv4ll_address);
3095 goto ipv4ll_address_fail;
3096 }
3097
3098 r = sd_ipv4ll_new(&link->ipv4ll);
3099 if (r < 0)
3100 return log_link_error_errno(link, r, "Failed to create IPv4LL client: %m");
3101
3102 r = sd_ipv4ll_attach_event(link->ipv4ll, NULL, 0);
3103 if (r < 0)
3104 return log_link_error_errno(link, r, "Failed to attach IPv4LL event: %m");
3105
3106 r = sd_ipv4ll_set_address(link->ipv4ll, &address.in);
3107 if (r < 0)
3108 return log_link_error_errno(link, r, "Failed to set initial IPv4LL address %s: %m", ipv4ll_address);
3109 }
3110
3111 ipv4ll_address_fail:
3112
3113 return 0;
3114 }
3115
3116 int link_add(Manager *m, sd_netlink_message *message, Link **ret) {
3117 _cleanup_(sd_device_unrefp) sd_device *device = NULL;
3118 char ifindex_str[2 + DECIMAL_STR_MAX(int)];
3119 Link *link;
3120 int r;
3121
3122 assert(m);
3123 assert(m->rtnl);
3124 assert(message);
3125 assert(ret);
3126
3127 r = link_new(m, message, ret);
3128 if (r < 0)
3129 return r;
3130
3131 link = *ret;
3132
3133 log_link_debug(link, "Link %d added", link->ifindex);
3134
3135 r = link_load(link);
3136 if (r < 0)
3137 return r;
3138
3139 if (path_is_read_only_fs("/sys") <= 0) {
3140 /* udev should be around */
3141 sprintf(ifindex_str, "n%d", link->ifindex);
3142 r = sd_device_new_from_device_id(&device, ifindex_str);
3143 if (r < 0) {
3144 log_link_warning_errno(link, r, "Could not find device, waiting for device initialization: %m");
3145 return 0;
3146 }
3147
3148 r = sd_device_get_is_initialized(device);
3149 if (r < 0) {
3150 log_link_warning_errno(link, r, "Could not determine whether the device is initialized: %m");
3151 goto failed;
3152 }
3153 if (r == 0) {
3154 /* not yet ready */
3155 log_link_debug(link, "link pending udev initialization...");
3156 return 0;
3157 }
3158
3159 r = device_is_renaming(device);
3160 if (r < 0) {
3161 log_link_warning_errno(link, r, "Failed to determine the device is being renamed: %m");
3162 goto failed;
3163 }
3164 if (r > 0) {
3165 log_link_debug(link, "Interface is being renamed, pending initialization.");
3166 return 0;
3167 }
3168
3169 r = link_initialized(link, device);
3170 if (r < 0)
3171 goto failed;
3172 } else {
3173 r = link_initialized_and_synced(link);
3174 if (r < 0)
3175 goto failed;
3176 }
3177
3178 return 0;
3179 failed:
3180 link_enter_failed(link);
3181 return r;
3182 }
3183
3184 int link_ipv6ll_gained(Link *link, const struct in6_addr *address) {
3185 int r;
3186
3187 assert(link);
3188
3189 log_link_info(link, "Gained IPv6LL");
3190
3191 link->ipv6ll_address = *address;
3192 link_check_ready(link);
3193
3194 if (IN_SET(link->state, LINK_STATE_CONFIGURING, LINK_STATE_CONFIGURED)) {
3195 r = link_acquire_ipv6_conf(link);
3196 if (r < 0) {
3197 link_enter_failed(link);
3198 return r;
3199 }
3200 }
3201
3202 return 0;
3203 }
3204
3205 static int link_carrier_gained(Link *link) {
3206 int r;
3207
3208 assert(link);
3209
3210 r = wifi_get_info(link);
3211 if (r < 0)
3212 return r;
3213 if (r > 0) {
3214 r = link_reconfigure_internal(link, NULL, false);
3215 if (r < 0) {
3216 link_enter_failed(link);
3217 return r;
3218 }
3219 }
3220
3221 if (IN_SET(link->state, LINK_STATE_CONFIGURING, LINK_STATE_CONFIGURED)) {
3222 r = link_acquire_conf(link);
3223 if (r < 0) {
3224 link_enter_failed(link);
3225 return r;
3226 }
3227
3228 link_set_state(link, LINK_STATE_CONFIGURING);
3229 r = link_set_static_configs(link);
3230 if (r < 0)
3231 return r;
3232 }
3233
3234 r = link_handle_bound_by_list(link);
3235 if (r < 0)
3236 return r;
3237
3238 if (!link->bridge_mdb_configured) {
3239 r = link_set_bridge_mdb(link);
3240 if (r < 0)
3241 return r;
3242 }
3243
3244 if (streq_ptr(link->kind, "bridge")) {
3245 Link *slave;
3246
3247 SET_FOREACH(slave, link->slaves) {
3248 if (slave->bridge_mdb_configured)
3249 continue;
3250
3251 r = link_set_bridge_mdb(slave);
3252 if (r < 0)
3253 link_enter_failed(slave);
3254 }
3255 }
3256
3257 return 0;
3258 }
3259
3260 static int link_carrier_lost(Link *link) {
3261 int r;
3262
3263 assert(link);
3264
3265 if (link->network && link->network->ignore_carrier_loss)
3266 return 0;
3267
3268 /* Some devices reset itself while setting the MTU. This causes the DHCP client fall into a loop.
3269 * setting_mtu keep track whether the device got reset because of setting MTU and does not drop the
3270 * configuration and stop the clients as well. */
3271 if (link->setting_mtu)
3272 return 0;
3273
3274 r = link_stop_clients(link, false);
3275 if (r < 0) {
3276 link_enter_failed(link);
3277 return r;
3278 }
3279
3280 if (link_dhcp4_server_enabled(link))
3281 (void) sd_dhcp_server_stop(link->dhcp_server);
3282
3283 r = link_drop_config(link);
3284 if (r < 0)
3285 return r;
3286
3287 if (!IN_SET(link->state, LINK_STATE_UNMANAGED, LINK_STATE_PENDING, LINK_STATE_INITIALIZED)) {
3288 log_link_debug(link, "State is %s, dropping config", link_state_to_string(link->state));
3289 r = link_drop_foreign_config(link);
3290 if (r < 0)
3291 return r;
3292 }
3293
3294 r = link_handle_bound_by_list(link);
3295 if (r < 0)
3296 return r;
3297
3298 return 0;
3299 }
3300
3301 int link_carrier_reset(Link *link) {
3302 int r;
3303
3304 assert(link);
3305
3306 if (link_has_carrier(link)) {
3307 r = link_carrier_lost(link);
3308 if (r < 0)
3309 return r;
3310
3311 r = link_carrier_gained(link);
3312 if (r < 0)
3313 return r;
3314
3315 log_link_info(link, "Reset carrier");
3316 }
3317
3318 return 0;
3319 }
3320
3321 /* This is called every time an interface admin state changes to up;
3322 * specifically, when IFF_UP flag changes from unset to set */
3323 static int link_admin_state_up(Link *link) {
3324 int r;
3325
3326 /* We set the ipv6 mtu after the device mtu, but the kernel resets
3327 * ipv6 mtu on NETDEV_UP, so we need to reset it. The check for
3328 * ipv6_mtu_set prevents this from trying to set it too early before
3329 * the link->network has been setup; we only need to reset it
3330 * here if we've already set it during normal initialization. */
3331 if (link->ipv6_mtu_set) {
3332 r = link_set_ipv6_mtu(link);
3333 if (r < 0)
3334 return r;
3335 }
3336
3337 return 0;
3338 }
3339
3340 int link_update(Link *link, sd_netlink_message *m) {
3341 _cleanup_strv_free_ char **s = NULL;
3342 struct ether_addr mac;
3343 const char *ifname;
3344 uint32_t mtu;
3345 bool had_carrier, carrier_gained, carrier_lost, link_was_admin_up;
3346 int old_master, r;
3347
3348 assert(link);
3349 assert(link->ifname);
3350 assert(m);
3351
3352 if (link->state == LINK_STATE_LINGER) {
3353 log_link_info(link, "Link re-added");
3354 link_set_state(link, LINK_STATE_CONFIGURING);
3355
3356 r = link_new_carrier_maps(link);
3357 if (r < 0)
3358 return r;
3359 }
3360
3361 r = sd_netlink_message_read_string(m, IFLA_IFNAME, &ifname);
3362 if (r >= 0 && !streq(ifname, link->ifname)) {
3363 Manager *manager = link->manager;
3364
3365 log_link_info(link, "Interface name change detected, %s has been renamed to %s.", link->ifname, ifname);
3366
3367 link_drop(link);
3368 r = link_add(manager, m, &link);
3369 if (r < 0)
3370 return r;
3371 }
3372
3373 r = sd_netlink_message_read_strv(m, IFLA_PROP_LIST, IFLA_ALT_IFNAME, &s);
3374 if (r >= 0)
3375 strv_free_and_replace(link->alternative_names, s);
3376
3377 r = sd_netlink_message_read_u32(m, IFLA_MTU, &mtu);
3378 if (r >= 0 && mtu > 0) {
3379 link->mtu = mtu;
3380 if (link->original_mtu == 0) {
3381 link->original_mtu = mtu;
3382 log_link_debug(link, "Saved original MTU: %" PRIu32, link->original_mtu);
3383 }
3384
3385 if (link->dhcp_client) {
3386 r = sd_dhcp_client_set_mtu(link->dhcp_client,
3387 link->mtu);
3388 if (r < 0)
3389 return log_link_warning_errno(link, r, "Could not update MTU in DHCP client: %m");
3390 }
3391
3392 if (link->radv) {
3393 r = sd_radv_set_mtu(link->radv, link->mtu);
3394 if (r < 0)
3395 return log_link_warning_errno(link, r, "Could not set MTU for Router Advertisement: %m");
3396 }
3397 }
3398
3399 /* The kernel may broadcast NEWLINK messages without the MAC address
3400 set, simply ignore them. */
3401 r = sd_netlink_message_read_ether_addr(m, IFLA_ADDRESS, &mac);
3402 if (r >= 0 && memcmp(link->mac.ether_addr_octet, mac.ether_addr_octet, ETH_ALEN) != 0) {
3403
3404 memcpy(link->mac.ether_addr_octet, mac.ether_addr_octet, ETH_ALEN);
3405
3406 log_link_debug(link, "Gained new MAC address: "
3407 "%02hhx:%02hhx:%02hhx:%02hhx:%02hhx:%02hhx",
3408 mac.ether_addr_octet[0],
3409 mac.ether_addr_octet[1],
3410 mac.ether_addr_octet[2],
3411 mac.ether_addr_octet[3],
3412 mac.ether_addr_octet[4],
3413 mac.ether_addr_octet[5]);
3414
3415 if (link->ipv4ll) {
3416 bool restart = sd_ipv4ll_is_running(link->ipv4ll) > 0;
3417
3418 if (restart) {
3419 r = sd_ipv4ll_stop(link->ipv4ll);
3420 if (r < 0)
3421 return log_link_warning_errno(link, r, "Could not stop IPv4LL client: %m");
3422 }
3423
3424 r = sd_ipv4ll_set_mac(link->ipv4ll, &link->mac);
3425 if (r < 0)
3426 return log_link_warning_errno(link, r, "Could not update MAC address in IPv4LL client: %m");
3427
3428 if (restart) {
3429 r = sd_ipv4ll_start(link->ipv4ll);
3430 if (r < 0)
3431 return log_link_warning_errno(link, r, "Could not restart IPv4LL client: %m");
3432 }
3433 }
3434
3435 if (link->dhcp_client) {
3436 r = sd_dhcp_client_set_mac(link->dhcp_client,
3437 (const uint8_t *) &link->mac,
3438 sizeof (link->mac),
3439 ARPHRD_ETHER);
3440 if (r < 0)
3441 return log_link_warning_errno(link, r, "Could not update MAC address in DHCP client: %m");
3442
3443 r = dhcp4_set_client_identifier(link);
3444 if (r < 0)
3445 return log_link_warning_errno(link, r, "Could not set DHCP client identifier: %m");
3446 }
3447
3448 if (link->dhcp6_client) {
3449 const DUID* duid = link_get_duid(link);
3450 bool restart = sd_dhcp6_client_is_running(link->dhcp6_client) > 0;
3451
3452 if (restart) {
3453 r = sd_dhcp6_client_stop(link->dhcp6_client);
3454 if (r < 0)
3455 return log_link_warning_errno(link, r, "Could not stop DHCPv6 client: %m");
3456 }
3457
3458 r = sd_dhcp6_client_set_mac(link->dhcp6_client,
3459 (const uint8_t *) &link->mac,
3460 sizeof (link->mac),
3461 ARPHRD_ETHER);
3462 if (r < 0)
3463 return log_link_warning_errno(link, r, "Could not update MAC address in DHCPv6 client: %m");
3464
3465 if (link->network->iaid_set) {
3466 r = sd_dhcp6_client_set_iaid(link->dhcp6_client, link->network->iaid);
3467 if (r < 0)
3468 return log_link_warning_errno(link, r, "Could not update DHCPv6 IAID: %m");
3469 }
3470
3471 r = sd_dhcp6_client_set_duid(link->dhcp6_client,
3472 duid->type,
3473 duid->raw_data_len > 0 ? duid->raw_data : NULL,
3474 duid->raw_data_len);
3475 if (r < 0)
3476 return log_link_warning_errno(link, r, "Could not update DHCPv6 DUID: %m");
3477
3478 if (restart) {
3479 r = sd_dhcp6_client_start(link->dhcp6_client);
3480 if (r < 0)
3481 return log_link_warning_errno(link, r, "Could not restart DHCPv6 client: %m");
3482 }
3483 }
3484
3485 if (link->radv) {
3486 bool restart = sd_radv_is_running(link->radv);
3487
3488 if (restart) {
3489 r = sd_radv_stop(link->radv);
3490 if (r < 0)
3491 return log_link_warning_errno(link, r, "Could not stop Router Advertisement: %m");
3492 }
3493
3494 r = sd_radv_set_mac(link->radv, &link->mac);
3495 if (r < 0)
3496 return log_link_warning_errno(link, r, "Could not update MAC for Router Advertisement: %m");
3497
3498 if (restart) {
3499 r = sd_radv_start(link->radv);
3500 if (r < 0)
3501 return log_link_warning_errno(link, r, "Could not restart Router Advertisement: %m");
3502 }
3503 }
3504
3505 if (link->ndisc) {
3506 r = sd_ndisc_set_mac(link->ndisc, &link->mac);
3507 if (r < 0)
3508 return log_link_warning_errno(link, r, "Could not update MAC for NDisc: %m");
3509 }
3510 }
3511
3512 old_master = link->master_ifindex;
3513 (void) sd_netlink_message_read_u32(m, IFLA_MASTER, (uint32_t *) &link->master_ifindex);
3514
3515 link_was_admin_up = link->flags & IFF_UP;
3516 had_carrier = link_has_carrier(link);
3517
3518 r = link_update_flags(link, m, old_master != link->master_ifindex);
3519 if (r < 0)
3520 return r;
3521
3522 if (!link_was_admin_up && (link->flags & IFF_UP)) {
3523 log_link_info(link, "Link UP");
3524
3525 r = link_admin_state_up(link);
3526 if (r < 0)
3527 return r;
3528 } else if (link_was_admin_up && !(link->flags & IFF_UP))
3529 log_link_info(link, "Link DOWN");
3530
3531 r = link_update_lldp(link);
3532 if (r < 0)
3533 return r;
3534
3535 carrier_gained = !had_carrier && link_has_carrier(link);
3536 carrier_lost = had_carrier && !link_has_carrier(link);
3537
3538 if (carrier_gained) {
3539 log_link_info(link, "Gained carrier");
3540
3541 r = link_carrier_gained(link);
3542 if (r < 0)
3543 return r;
3544 } else if (carrier_lost) {
3545 log_link_info(link, "Lost carrier");
3546
3547 r = link_carrier_lost(link);
3548 if (r < 0)
3549 return r;
3550 }
3551
3552 return 0;
3553 }
3554
3555 static void print_link_hashmap(FILE *f, const char *prefix, Hashmap* h) {
3556 bool space = false;
3557 Link *link;
3558
3559 assert(f);
3560 assert(prefix);
3561
3562 if (hashmap_isempty(h))
3563 return;
3564
3565 fputs(prefix, f);
3566 HASHMAP_FOREACH(link, h) {
3567 if (space)
3568 fputc(' ', f);
3569
3570 fprintf(f, "%i", link->ifindex);
3571 space = true;
3572 }
3573
3574 fputc('\n', f);
3575 }
3576
3577 static void link_save_dns(Link *link, FILE *f, struct in_addr_full **dns, unsigned n_dns, bool *space) {
3578 for (unsigned j = 0; j < n_dns; j++) {
3579 const char *str;
3580
3581 if (dns[j]->ifindex != 0 && dns[j]->ifindex != link->ifindex)
3582 continue;
3583
3584 str = in_addr_full_to_string(dns[j]);
3585 if (!str)
3586 continue;
3587
3588 if (*space)
3589 fputc(' ', f);
3590 fputs(str, f);
3591 *space = true;
3592 }
3593 }
3594
3595 static void serialize_addresses(
3596 FILE *f,
3597 const char *lvalue,
3598 bool *space,
3599 char **addresses,
3600 sd_dhcp_lease *lease,
3601 bool conditional,
3602 sd_dhcp_lease_server_type what,
3603 sd_dhcp6_lease *lease6,
3604 bool conditional6,
3605 int (*lease6_get_addr)(sd_dhcp6_lease*, const struct in6_addr**),
3606 int (*lease6_get_fqdn)(sd_dhcp6_lease*, char ***)) {
3607 int r;
3608
3609 bool _space = false;
3610 if (!space)
3611 space = &_space;
3612
3613 if (lvalue)
3614 fprintf(f, "%s=", lvalue);
3615 fputstrv(f, addresses, NULL, space);
3616
3617 if (lease && conditional) {
3618 const struct in_addr *lease_addresses;
3619
3620 r = sd_dhcp_lease_get_servers(lease, what, &lease_addresses);
3621 if (r > 0)
3622 serialize_in_addrs(f, lease_addresses, r, space, in4_addr_is_non_local);
3623 }
3624
3625 if (lease6 && conditional6 && lease6_get_addr) {
3626 const struct in6_addr *in6_addrs;
3627
3628 r = lease6_get_addr(lease6, &in6_addrs);
3629 if (r > 0)
3630 serialize_in6_addrs(f, in6_addrs, r, space);
3631 }
3632
3633 if (lease6 && conditional6 && lease6_get_fqdn) {
3634 char **in6_hosts;
3635
3636 r = lease6_get_fqdn(lease6, &in6_hosts);
3637 if (r > 0)
3638 fputstrv(f, in6_hosts, NULL, space);
3639 }
3640
3641 if (lvalue)
3642 fputc('\n', f);
3643 }
3644
3645 int link_save(Link *link) {
3646 const char *admin_state, *oper_state, *carrier_state, *address_state;
3647 _cleanup_free_ char *temp_path = NULL;
3648 _cleanup_fclose_ FILE *f = NULL;
3649 int r;
3650
3651 assert(link);
3652 assert(link->state_file);
3653 assert(link->lease_file);
3654 assert(link->manager);
3655
3656 if (link->state == LINK_STATE_LINGER) {
3657 (void) unlink(link->state_file);
3658 return 0;
3659 }
3660
3661 link_lldp_save(link);
3662
3663 admin_state = link_state_to_string(link->state);
3664 assert(admin_state);
3665
3666 oper_state = link_operstate_to_string(link->operstate);
3667 assert(oper_state);
3668
3669 carrier_state = link_carrier_state_to_string(link->carrier_state);
3670 assert(carrier_state);
3671
3672 address_state = link_address_state_to_string(link->address_state);
3673 assert(address_state);
3674
3675 r = fopen_temporary(link->state_file, &f, &temp_path);
3676 if (r < 0)
3677 goto fail;
3678
3679 (void) fchmod(fileno(f), 0644);
3680
3681 fprintf(f,
3682 "# This is private data. Do not parse.\n"
3683 "ADMIN_STATE=%s\n"
3684 "OPER_STATE=%s\n"
3685 "CARRIER_STATE=%s\n"
3686 "ADDRESS_STATE=%s\n",
3687 admin_state, oper_state, carrier_state, address_state);
3688
3689 if (link->network) {
3690 char **dhcp6_domains = NULL, **dhcp_domains = NULL;
3691 const char *dhcp_domainname = NULL, *p;
3692 bool space;
3693
3694 fprintf(f, "REQUIRED_FOR_ONLINE=%s\n",
3695 yes_no(link->network->required_for_online));
3696
3697 LinkOperationalStateRange st = link->network->required_operstate_for_online;
3698 fprintf(f, "REQUIRED_OPER_STATE_FOR_ONLINE=%s%s%s\n",
3699 strempty(link_operstate_to_string(st.min)),
3700 st.max != LINK_OPERSTATE_RANGE_DEFAULT.max ? ":" : "",
3701 st.max != LINK_OPERSTATE_RANGE_DEFAULT.max ? strempty(link_operstate_to_string(st.max)) : "");
3702
3703 fprintf(f, "NETWORK_FILE=%s\n", link->network->filename);
3704
3705 /************************************************************/
3706
3707 fputs("DNS=", f);
3708 space = false;
3709 if (link->n_dns != (unsigned) -1)
3710 link_save_dns(link, f, link->dns, link->n_dns, &space);
3711 else
3712 link_save_dns(link, f, link->network->dns, link->network->n_dns, &space);
3713
3714 serialize_addresses(f, NULL, &space,
3715 NULL,
3716 link->dhcp_lease,
3717 link->network->dhcp_use_dns,
3718 SD_DHCP_LEASE_DNS,
3719 link->dhcp6_lease,
3720 link->network->dhcp6_use_dns,
3721 sd_dhcp6_lease_get_dns,
3722 NULL);
3723
3724 /* Make sure to flush out old entries before we use the NDisc data */
3725 ndisc_vacuum(link);
3726
3727 if (link->network->ipv6_accept_ra_use_dns && link->ndisc_rdnss) {
3728 NDiscRDNSS *dd;
3729
3730 SET_FOREACH(dd, link->ndisc_rdnss)
3731 serialize_in6_addrs(f, &dd->address, 1, &space);
3732 }
3733
3734 fputc('\n', f);
3735
3736 /************************************************************/
3737
3738 serialize_addresses(f, "NTP", NULL,
3739 link->ntp ?: link->network->ntp,
3740 link->dhcp_lease,
3741 link->network->dhcp_use_ntp,
3742 SD_DHCP_LEASE_NTP,
3743 link->dhcp6_lease,
3744 link->network->dhcp6_use_ntp,
3745 sd_dhcp6_lease_get_ntp_addrs,
3746 sd_dhcp6_lease_get_ntp_fqdn);
3747
3748 serialize_addresses(f, "SIP", NULL,
3749 NULL,
3750 link->dhcp_lease,
3751 link->network->dhcp_use_sip,
3752 SD_DHCP_LEASE_SIP,
3753 NULL, false, NULL, NULL);
3754
3755 /************************************************************/
3756
3757 if (link->network->dhcp_use_domains != DHCP_USE_DOMAINS_NO) {
3758 if (link->dhcp_lease) {
3759 (void) sd_dhcp_lease_get_domainname(link->dhcp_lease, &dhcp_domainname);
3760 (void) sd_dhcp_lease_get_search_domains(link->dhcp_lease, &dhcp_domains);
3761 }
3762 if (link->dhcp6_lease)
3763 (void) sd_dhcp6_lease_get_domains(link->dhcp6_lease, &dhcp6_domains);
3764 }
3765
3766 fputs("DOMAINS=", f);
3767 space = false;
3768 ORDERED_SET_FOREACH(p, link->search_domains ?: link->network->search_domains)
3769 fputs_with_space(f, p, NULL, &space);
3770
3771 if (link->network->dhcp_use_domains == DHCP_USE_DOMAINS_YES) {
3772 if (dhcp_domainname)
3773 fputs_with_space(f, dhcp_domainname, NULL, &space);
3774 if (dhcp_domains)
3775 fputstrv(f, dhcp_domains, NULL, &space);
3776 if (dhcp6_domains)
3777 fputstrv(f, dhcp6_domains, NULL, &space);
3778 }
3779
3780 if (link->network->ipv6_accept_ra_use_domains == DHCP_USE_DOMAINS_YES) {
3781 NDiscDNSSL *dd;
3782
3783 SET_FOREACH(dd, link->ndisc_dnssl)
3784 fputs_with_space(f, NDISC_DNSSL_DOMAIN(dd), NULL, &space);
3785 }
3786
3787 fputc('\n', f);
3788
3789 /************************************************************/
3790
3791 fputs("ROUTE_DOMAINS=", f);
3792 space = false;
3793 ORDERED_SET_FOREACH(p, link->route_domains ?: link->network->route_domains)
3794 fputs_with_space(f, p, NULL, &space);
3795
3796 if (link->network->dhcp_use_domains == DHCP_USE_DOMAINS_ROUTE) {
3797 if (dhcp_domainname)
3798 fputs_with_space(f, dhcp_domainname, NULL, &space);
3799 if (dhcp_domains)
3800 fputstrv(f, dhcp_domains, NULL, &space);
3801 if (dhcp6_domains)
3802 fputstrv(f, dhcp6_domains, NULL, &space);
3803 }
3804
3805 if (link->network->ipv6_accept_ra_use_domains == DHCP_USE_DOMAINS_ROUTE) {
3806 NDiscDNSSL *dd;
3807
3808 SET_FOREACH(dd, link->ndisc_dnssl)
3809 fputs_with_space(f, NDISC_DNSSL_DOMAIN(dd), NULL, &space);
3810 }
3811
3812 fputc('\n', f);
3813
3814 /************************************************************/
3815
3816 fprintf(f, "LLMNR=%s\n",
3817 resolve_support_to_string(link->llmnr >= 0 ? link->llmnr : link->network->llmnr));
3818
3819 /************************************************************/
3820
3821 fprintf(f, "MDNS=%s\n",
3822 resolve_support_to_string(link->mdns >= 0 ? link->mdns : link->network->mdns));
3823
3824 /************************************************************/
3825
3826 int dns_default_route =
3827 link->dns_default_route >= 0 ? link->dns_default_route :
3828 link->network->dns_default_route;
3829 if (dns_default_route >= 0)
3830 fprintf(f, "DNS_DEFAULT_ROUTE=%s\n", yes_no(dns_default_route));
3831
3832 /************************************************************/
3833
3834 DnsOverTlsMode dns_over_tls_mode =
3835 link->dns_over_tls_mode != _DNS_OVER_TLS_MODE_INVALID ? link->dns_over_tls_mode :
3836 link->network->dns_over_tls_mode;
3837 if (dns_over_tls_mode != _DNS_OVER_TLS_MODE_INVALID)
3838 fprintf(f, "DNS_OVER_TLS=%s\n", dns_over_tls_mode_to_string(dns_over_tls_mode));
3839
3840 /************************************************************/
3841
3842 DnssecMode dnssec_mode =
3843 link->dnssec_mode != _DNSSEC_MODE_INVALID ? link->dnssec_mode :
3844 link->network->dnssec_mode;
3845 if (dnssec_mode != _DNSSEC_MODE_INVALID)
3846 fprintf(f, "DNSSEC=%s\n", dnssec_mode_to_string(dnssec_mode));
3847
3848 /************************************************************/
3849
3850 Set *nta_anchors = link->dnssec_negative_trust_anchors;
3851 if (set_isempty(nta_anchors))
3852 nta_anchors = link->network->dnssec_negative_trust_anchors;
3853
3854 if (!set_isempty(nta_anchors)) {
3855 const char *n;
3856
3857 fputs("DNSSEC_NTA=", f);
3858 space = false;
3859 SET_FOREACH(n, nta_anchors)
3860 fputs_with_space(f, n, NULL, &space);
3861 fputc('\n', f);
3862 }
3863
3864 /************************************************************/
3865
3866 r = link_serialize_addresses(link, f);
3867 if (r < 0)
3868 goto fail;
3869
3870 /************************************************************/
3871
3872 r = link_serialize_routes(link, f);
3873 if (r < 0)
3874 goto fail;
3875 }
3876
3877 print_link_hashmap(f, "CARRIER_BOUND_TO=", link->bound_to_links);
3878 print_link_hashmap(f, "CARRIER_BOUND_BY=", link->bound_by_links);
3879
3880 if (link->dhcp_lease) {
3881 r = dhcp_lease_save(link->dhcp_lease, link->lease_file);
3882 if (r < 0)
3883 goto fail;
3884
3885 fprintf(f,
3886 "DHCP_LEASE=%s\n",
3887 link->lease_file);
3888 } else
3889 (void) unlink(link->lease_file);
3890
3891 if (link->ipv4ll) {
3892 struct in_addr address;
3893
3894 r = sd_ipv4ll_get_address(link->ipv4ll, &address);
3895 if (r >= 0) {
3896 fputs("IPV4LL_ADDRESS=", f);
3897 serialize_in_addrs(f, &address, 1, false, NULL);
3898 fputc('\n', f);
3899 }
3900 }
3901
3902 if (link->dhcp6_client) {
3903 _cleanup_free_ char *duid = NULL;
3904 uint32_t iaid;
3905
3906 r = sd_dhcp6_client_get_iaid(link->dhcp6_client, &iaid);
3907 if (r >= 0)
3908 fprintf(f, "DHCP6_CLIENT_IAID=0x%x\n", iaid);
3909
3910 r = sd_dhcp6_client_duid_as_string(link->dhcp6_client, &duid);
3911 if (r >= 0)
3912 fprintf(f, "DHCP6_CLIENT_DUID=%s\n", duid);
3913 }
3914
3915 r = fflush_and_check(f);
3916 if (r < 0)
3917 goto fail;
3918
3919 if (rename(temp_path, link->state_file) < 0) {
3920 r = -errno;
3921 goto fail;
3922 }
3923
3924 return 0;
3925
3926 fail:
3927 (void) unlink(link->state_file);
3928 if (temp_path)
3929 (void) unlink(temp_path);
3930
3931 return log_link_error_errno(link, r, "Failed to save link data to %s: %m", link->state_file);
3932 }
3933
3934 /* The serialized state in /run is no longer up-to-date. */
3935 void link_dirty(Link *link) {
3936 int r;
3937
3938 assert(link);
3939
3940 /* mark manager dirty as link is dirty */
3941 manager_dirty(link->manager);
3942
3943 r = set_ensure_put(&link->manager->dirty_links, NULL, link);
3944 if (r <= 0)
3945 /* Ignore allocation errors and don't take another ref if the link was already dirty */
3946 return;
3947 link_ref(link);
3948 }
3949
3950 /* The serialized state in /run is up-to-date */
3951 void link_clean(Link *link) {
3952 assert(link);
3953 assert(link->manager);
3954
3955 link_unref(set_remove(link->manager->dirty_links, link));
3956 }
3957
3958 int link_save_and_clean(Link *link) {
3959 int r;
3960
3961 r = link_save(link);
3962 if (r < 0)
3963 return r;
3964
3965 link_clean(link);
3966 return 0;
3967 }
3968
3969 static const char* const link_state_table[_LINK_STATE_MAX] = {
3970 [LINK_STATE_PENDING] = "pending",
3971 [LINK_STATE_INITIALIZED] = "initialized",
3972 [LINK_STATE_CONFIGURING] = "configuring",
3973 [LINK_STATE_CONFIGURED] = "configured",
3974 [LINK_STATE_UNMANAGED] = "unmanaged",
3975 [LINK_STATE_FAILED] = "failed",
3976 [LINK_STATE_LINGER] = "linger",
3977 };
3978
3979 DEFINE_STRING_TABLE_LOOKUP(link_state, LinkState);
3980
3981 int log_link_message_full_errno(Link *link, sd_netlink_message *m, int level, int err, const char *msg) {
3982 const char *err_msg = NULL;
3983
3984 (void) sd_netlink_message_read_string(m, NLMSGERR_ATTR_MSG, &err_msg);
3985 return log_link_full_errno(link, level, err,
3986 "%s: %s%s%s%m",
3987 msg,
3988 strempty(err_msg),
3989 err_msg && !endswith(err_msg, ".") ? "." : "",
3990 err_msg ? " " : "");
3991 }
Unnamed repository; edit this file 'description' to name the repository.