]> git.ipfire.org Git - thirdparty/systemd.git/blob - src/network/networkd-manager.c
a164d6163e7d4cc42e83cbb11baf77b07a38c072
[thirdparty/systemd.git] / src / network / networkd-manager.c
1 /* SPDX-License-Identifier: LGPL-2.1+ */
2
3 #include <netinet/in.h>
4 #include <sys/socket.h>
5 #include <unistd.h>
6 #include <linux/if.h>
7 #include <linux/fib_rules.h>
8
9 #include "sd-daemon.h"
10 #include "sd-netlink.h"
11
12 #include "alloc-util.h"
13 #include "bus-util.h"
14 #include "conf-parser.h"
15 #include "def.h"
16 #include "device-private.h"
17 #include "device-util.h"
18 #include "dns-domain.h"
19 #include "fd-util.h"
20 #include "fileio.h"
21 #include "local-addresses.h"
22 #include "netlink-util.h"
23 #include "network-internal.h"
24 #include "networkd-dhcp6.h"
25 #include "networkd-link-bus.h"
26 #include "networkd-manager-bus.h"
27 #include "networkd-manager.h"
28 #include "networkd-network-bus.h"
29 #include "networkd-speed-meter.h"
30 #include "ordered-set.h"
31 #include "path-util.h"
32 #include "set.h"
33 #include "strv.h"
34 #include "sysctl-util.h"
35 #include "tmpfile-util.h"
36 #include "udev-util.h"
37 #include "virt.h"
38
39 /* use 8 MB for receive socket kernel queue. */
40 #define RCVBUF_SIZE (8*1024*1024)
41
42 static int setup_default_address_pool(Manager *m) {
43 AddressPool *p;
44 int r;
45
46 assert(m);
47
48 /* Add in the well-known private address ranges. */
49
50 r = address_pool_new_from_string(m, &p, AF_INET6, "fd00::", 8);
51 if (r < 0)
52 return r;
53
54 r = address_pool_new_from_string(m, &p, AF_INET, "10.0.0.0", 8);
55 if (r < 0)
56 return r;
57
58 r = address_pool_new_from_string(m, &p, AF_INET, "172.16.0.0", 12);
59 if (r < 0)
60 return r;
61
62 r = address_pool_new_from_string(m, &p, AF_INET, "192.168.0.0", 16);
63 if (r < 0)
64 return r;
65
66 return 0;
67 }
68
69 static int manager_reset_all(Manager *m) {
70 Link *link;
71 Iterator i;
72 int r;
73
74 assert(m);
75
76 HASHMAP_FOREACH(link, m->links, i) {
77 r = link_carrier_reset(link);
78 if (r < 0)
79 log_link_warning_errno(link, r, "Could not reset carrier: %m");
80 }
81
82 return 0;
83 }
84
85 static int match_prepare_for_sleep(sd_bus_message *message, void *userdata, sd_bus_error *ret_error) {
86 Manager *m = userdata;
87 int b, r;
88
89 assert(message);
90 assert(m);
91
92 r = sd_bus_message_read(message, "b", &b);
93 if (r < 0) {
94 log_debug_errno(r, "Failed to parse PrepareForSleep signal: %m");
95 return 0;
96 }
97
98 if (b)
99 return 0;
100
101 log_debug("Coming back from suspend, resetting all connections...");
102
103 (void) manager_reset_all(m);
104
105 return 0;
106 }
107
108 static int on_connected(sd_bus_message *message, void *userdata, sd_bus_error *ret_error) {
109 Manager *m = userdata;
110
111 assert(message);
112 assert(m);
113
114 /* Did we get a timezone or transient hostname from DHCP while D-Bus wasn't up yet? */
115 if (m->dynamic_hostname)
116 (void) manager_set_hostname(m, m->dynamic_hostname);
117 if (m->dynamic_timezone)
118 (void) manager_set_timezone(m, m->dynamic_timezone);
119 if (m->links_requesting_uuid)
120 (void) manager_request_product_uuid(m, NULL);
121
122 return 0;
123 }
124
125 int manager_connect_bus(Manager *m) {
126 int r;
127
128 assert(m);
129
130 if (m->bus)
131 return 0;
132
133 r = bus_open_system_watch_bind_with_description(&m->bus, "bus-api-network");
134 if (r < 0)
135 return log_error_errno(r, "Failed to connect to bus: %m");
136
137 r = sd_bus_add_object_vtable(m->bus, NULL, "/org/freedesktop/network1", "org.freedesktop.network1.Manager", manager_vtable, m);
138 if (r < 0)
139 return log_error_errno(r, "Failed to add manager object vtable: %m");
140
141 r = sd_bus_add_fallback_vtable(m->bus, NULL, "/org/freedesktop/network1/link", "org.freedesktop.network1.Link", link_vtable, link_object_find, m);
142 if (r < 0)
143 return log_error_errno(r, "Failed to add link object vtable: %m");
144
145 r = sd_bus_add_node_enumerator(m->bus, NULL, "/org/freedesktop/network1/link", link_node_enumerator, m);
146 if (r < 0)
147 return log_error_errno(r, "Failed to add link enumerator: %m");
148
149 r = sd_bus_add_fallback_vtable(m->bus, NULL, "/org/freedesktop/network1/network", "org.freedesktop.network1.Network", network_vtable, network_object_find, m);
150 if (r < 0)
151 return log_error_errno(r, "Failed to add network object vtable: %m");
152
153 r = sd_bus_add_node_enumerator(m->bus, NULL, "/org/freedesktop/network1/network", network_node_enumerator, m);
154 if (r < 0)
155 return log_error_errno(r, "Failed to add network enumerator: %m");
156
157 r = sd_bus_request_name_async(m->bus, NULL, "org.freedesktop.network1", 0, NULL, NULL);
158 if (r < 0)
159 return log_error_errno(r, "Failed to request name: %m");
160
161 r = sd_bus_attach_event(m->bus, m->event, 0);
162 if (r < 0)
163 return log_error_errno(r, "Failed to attach bus to event loop: %m");
164
165 r = sd_bus_match_signal_async(
166 m->bus,
167 NULL,
168 "org.freedesktop.DBus.Local",
169 NULL,
170 "org.freedesktop.DBus.Local",
171 "Connected",
172 on_connected, NULL, m);
173 if (r < 0)
174 return log_error_errno(r, "Failed to request match on Connected signal: %m");
175
176 r = sd_bus_match_signal_async(
177 m->bus,
178 NULL,
179 "org.freedesktop.login1",
180 "/org/freedesktop/login1",
181 "org.freedesktop.login1.Manager",
182 "PrepareForSleep",
183 match_prepare_for_sleep, NULL, m);
184 if (r < 0)
185 log_warning_errno(r, "Failed to request match for PrepareForSleep, ignoring: %m");
186
187 return 0;
188 }
189
190 static int manager_udev_process_link(sd_device_monitor *monitor, sd_device *device, void *userdata) {
191 Manager *m = userdata;
192 DeviceAction action;
193 Link *link = NULL;
194 int r, ifindex;
195
196 assert(m);
197 assert(device);
198
199 r = device_get_action(device, &action);
200 if (r < 0) {
201 log_device_debug_errno(device, r, "Failed to get udev action, ignoring device: %m");
202 return 0;
203 }
204
205 if (!IN_SET(action, DEVICE_ACTION_ADD, DEVICE_ACTION_CHANGE, DEVICE_ACTION_MOVE)) {
206 log_device_debug(device, "Ignoring udev %s event for device.", device_action_to_string(action));
207 return 0;
208 }
209
210 r = sd_device_get_ifindex(device, &ifindex);
211 if (r < 0) {
212 log_device_debug_errno(device, r, "Ignoring udev ADD event for device without ifindex or with invalid ifindex: %m");
213 return 0;
214 }
215
216 r = device_is_renaming(device);
217 if (r < 0) {
218 log_device_error_errno(device, r, "Failed to determine the device is renamed or not, ignoring '%s' uevent: %m",
219 device_action_to_string(action));
220 return 0;
221 }
222 if (r > 0) {
223 log_device_debug(device, "Interface is under renaming, wait for the interface to be renamed: %m");
224 return 0;
225 }
226
227 r = link_get(m, ifindex, &link);
228 if (r < 0) {
229 if (r != -ENODEV)
230 log_debug_errno(r, "Failed to get link from ifindex %i, ignoring: %m", ifindex);
231 return 0;
232 }
233
234 (void) link_initialized(link, device);
235
236 return 0;
237 }
238
239 static int manager_connect_udev(Manager *m) {
240 int r;
241
242 /* udev does not initialize devices inside containers,
243 * so we rely on them being already initialized before
244 * entering the container */
245 if (detect_container() > 0)
246 return 0;
247
248 r = sd_device_monitor_new(&m->device_monitor);
249 if (r < 0)
250 return log_error_errno(r, "Failed to initialize device monitor: %m");
251
252 r = sd_device_monitor_filter_add_match_subsystem_devtype(m->device_monitor, "net", NULL);
253 if (r < 0)
254 return log_error_errno(r, "Could not add device monitor filter: %m");
255
256 r = sd_device_monitor_attach_event(m->device_monitor, m->event);
257 if (r < 0)
258 return log_error_errno(r, "Failed to attach event to device monitor: %m");
259
260 r = sd_device_monitor_start(m->device_monitor, manager_udev_process_link, m);
261 if (r < 0)
262 return log_error_errno(r, "Failed to start device monitor: %m");
263
264 return 0;
265 }
266
267 int manager_rtnl_process_route(sd_netlink *rtnl, sd_netlink_message *message, void *userdata) {
268 Manager *m = userdata;
269 Link *link = NULL;
270 uint16_t type;
271 uint32_t ifindex, priority = 0;
272 unsigned char protocol, scope, tos, table, rt_type;
273 int family;
274 unsigned char dst_prefixlen, src_prefixlen;
275 union in_addr_union dst = IN_ADDR_NULL, gw = IN_ADDR_NULL, src = IN_ADDR_NULL, prefsrc = IN_ADDR_NULL;
276 Route *route = NULL;
277 int r;
278
279 assert(rtnl);
280 assert(message);
281 assert(m);
282
283 if (sd_netlink_message_is_error(message)) {
284 r = sd_netlink_message_get_errno(message);
285 if (r < 0)
286 log_warning_errno(r, "rtnl: failed to receive route message, ignoring: %m");
287
288 return 0;
289 }
290
291 r = sd_netlink_message_get_type(message, &type);
292 if (r < 0) {
293 log_warning_errno(r, "rtnl: could not get message type, ignoring: %m");
294 return 0;
295 } else if (!IN_SET(type, RTM_NEWROUTE, RTM_DELROUTE)) {
296 log_warning("rtnl: received unexpected message type %u when processing route, ignoring.", type);
297 return 0;
298 }
299
300 r = sd_netlink_message_read_u32(message, RTA_OIF, &ifindex);
301 if (r == -ENODATA) {
302 log_debug("rtnl: received route message without ifindex, ignoring");
303 return 0;
304 } else if (r < 0) {
305 log_warning_errno(r, "rtnl: could not get ifindex from route message, ignoring: %m");
306 return 0;
307 } else if (ifindex <= 0) {
308 log_warning("rtnl: received route message with invalid ifindex %d, ignoring.", ifindex);
309 return 0;
310 }
311
312 r = link_get(m, ifindex, &link);
313 if (r < 0 || !link) {
314 /* when enumerating we might be out of sync, but we will
315 * get the route again, so just ignore it */
316 if (!m->enumerating)
317 log_warning("rtnl: received route message for link (%d) we do not know about, ignoring", ifindex);
318 return 0;
319 }
320
321 r = sd_rtnl_message_route_get_family(message, &family);
322 if (r < 0 || !IN_SET(family, AF_INET, AF_INET6)) {
323 log_link_warning(link, "rtnl: received route message with invalid family, ignoring");
324 return 0;
325 }
326
327 r = sd_rtnl_message_route_get_protocol(message, &protocol);
328 if (r < 0) {
329 log_warning_errno(r, "rtnl: received route message with invalid route protocol: %m");
330 return 0;
331 }
332
333 switch (family) {
334 case AF_INET:
335 r = sd_netlink_message_read_in_addr(message, RTA_DST, &dst.in);
336 if (r < 0 && r != -ENODATA) {
337 log_link_warning_errno(link, r, "rtnl: received route message without valid destination, ignoring: %m");
338 return 0;
339 }
340
341 r = sd_netlink_message_read_in_addr(message, RTA_GATEWAY, &gw.in);
342 if (r < 0 && r != -ENODATA) {
343 log_link_warning_errno(link, r, "rtnl: received route message without valid gateway, ignoring: %m");
344 return 0;
345 }
346
347 r = sd_netlink_message_read_in_addr(message, RTA_SRC, &src.in);
348 if (r < 0 && r != -ENODATA) {
349 log_link_warning_errno(link, r, "rtnl: received route message without valid source, ignoring: %m");
350 return 0;
351 }
352
353 r = sd_netlink_message_read_in_addr(message, RTA_PREFSRC, &prefsrc.in);
354 if (r < 0 && r != -ENODATA) {
355 log_link_warning_errno(link, r, "rtnl: received route message without valid preferred source, ignoring: %m");
356 return 0;
357 }
358
359 break;
360
361 case AF_INET6:
362 r = sd_netlink_message_read_in6_addr(message, RTA_DST, &dst.in6);
363 if (r < 0 && r != -ENODATA) {
364 log_link_warning_errno(link, r, "rtnl: received route message without valid destination, ignoring: %m");
365 return 0;
366 }
367
368 r = sd_netlink_message_read_in6_addr(message, RTA_GATEWAY, &gw.in6);
369 if (r < 0 && r != -ENODATA) {
370 log_link_warning_errno(link, r, "rtnl: received route message without valid gateway, ignoring: %m");
371 return 0;
372 }
373
374 r = sd_netlink_message_read_in6_addr(message, RTA_SRC, &src.in6);
375 if (r < 0 && r != -ENODATA) {
376 log_link_warning_errno(link, r, "rtnl: received route message without valid source, ignoring: %m");
377 return 0;
378 }
379
380 r = sd_netlink_message_read_in6_addr(message, RTA_PREFSRC, &prefsrc.in6);
381 if (r < 0 && r != -ENODATA) {
382 log_link_warning_errno(link, r, "rtnl: received route message without valid preferred source, ignoring: %m");
383 return 0;
384 }
385
386 break;
387
388 default:
389 assert_not_reached("Received route message with unsupported address family");
390 return 0;
391 }
392
393 r = sd_rtnl_message_route_get_dst_prefixlen(message, &dst_prefixlen);
394 if (r < 0) {
395 log_link_warning_errno(link, r, "rtnl: received route message with invalid destination prefixlen, ignoring: %m");
396 return 0;
397 }
398
399 r = sd_rtnl_message_route_get_src_prefixlen(message, &src_prefixlen);
400 if (r < 0) {
401 log_link_warning_errno(link, r, "rtnl: received route message with invalid source prefixlen, ignoring: %m");
402 return 0;
403 }
404
405 r = sd_rtnl_message_route_get_scope(message, &scope);
406 if (r < 0) {
407 log_link_warning_errno(link, r, "rtnl: received route message with invalid scope, ignoring: %m");
408 return 0;
409 }
410
411 r = sd_rtnl_message_route_get_tos(message, &tos);
412 if (r < 0) {
413 log_link_warning_errno(link, r, "rtnl: received route message with invalid tos, ignoring: %m");
414 return 0;
415 }
416
417 r = sd_rtnl_message_route_get_type(message, &rt_type);
418 if (r < 0) {
419 log_link_warning_errno(link, r, "rtnl: received route message with invalid type, ignoring: %m");
420 return 0;
421 }
422
423 r = sd_rtnl_message_route_get_table(message, &table);
424 if (r < 0) {
425 log_link_warning_errno(link, r, "rtnl: received route message with invalid table, ignoring: %m");
426 return 0;
427 }
428
429 r = sd_netlink_message_read_u32(message, RTA_PRIORITY, &priority);
430 if (r < 0 && r != -ENODATA) {
431 log_link_warning_errno(link, r, "rtnl: received route message with invalid priority, ignoring: %m");
432 return 0;
433 }
434
435 (void) route_get(link, family, &dst, dst_prefixlen, &gw, tos, priority, table, &route);
436
437 if (DEBUG_LOGGING) {
438 _cleanup_free_ char *buf_dst = NULL, *buf_dst_prefixlen = NULL,
439 *buf_src = NULL, *buf_gw = NULL, *buf_prefsrc = NULL;
440 char buf_scope[ROUTE_SCOPE_STR_MAX], buf_table[ROUTE_TABLE_STR_MAX],
441 buf_protocol[ROUTE_PROTOCOL_STR_MAX];
442
443 if (!in_addr_is_null(family, &dst)) {
444 (void) in_addr_to_string(family, &dst, &buf_dst);
445 (void) asprintf(&buf_dst_prefixlen, "/%u", dst_prefixlen);
446 }
447 if (!in_addr_is_null(family, &src))
448 (void) in_addr_to_string(family, &src, &buf_src);
449 if (!in_addr_is_null(family, &gw))
450 (void) in_addr_to_string(family, &gw, &buf_gw);
451 if (!in_addr_is_null(family, &prefsrc))
452 (void) in_addr_to_string(family, &prefsrc, &buf_prefsrc);
453
454 log_link_debug(link,
455 "%s route: dst: %s%s, src: %s, gw: %s, prefsrc: %s, scope: %s, table: %s, proto: %s, type: %s",
456 type == RTM_DELROUTE ? "Forgetting" : route ? "Updating remembered" : "Remembering",
457 strna(buf_dst), strempty(buf_dst_prefixlen),
458 strna(buf_src), strna(buf_gw), strna(buf_prefsrc),
459 format_route_scope(scope, buf_scope, sizeof buf_scope),
460 format_route_table(table, buf_table, sizeof buf_table),
461 format_route_protocol(protocol, buf_protocol, sizeof buf_protocol),
462 strna(route_type_to_string(rt_type)));
463 }
464
465 switch (type) {
466 case RTM_NEWROUTE:
467 if (!route) {
468 /* A route appeared that we did not request */
469 r = route_add_foreign(link, family, &dst, dst_prefixlen, &gw, tos, priority, table, &route);
470 if (r < 0) {
471 log_link_warning_errno(link, r, "Failed to remember foreign route, ignoring: %m");
472 return 0;
473 }
474 }
475
476 route_update(route, &src, src_prefixlen, &gw, &prefsrc, scope, protocol, rt_type);
477
478 break;
479
480 case RTM_DELROUTE:
481 route_free(route);
482 break;
483
484 default:
485 assert_not_reached("Received route message with invalid RTNL message type");
486 }
487
488 return 1;
489 }
490
491 static int manager_rtnl_process_neighbor_lladdr(sd_netlink_message *message, union lladdr_union *lladdr, size_t *size, char **str) {
492 int r;
493
494 assert(message);
495 assert(lladdr);
496 assert(size);
497 assert(str);
498
499 *str = NULL;
500
501 r = sd_netlink_message_read(message, NDA_LLADDR, sizeof(lladdr->ip.in6), &lladdr->ip.in6);
502 if (r >= 0) {
503 *size = sizeof(lladdr->ip.in6);
504 if (in_addr_to_string(AF_INET6, &lladdr->ip, str) < 0)
505 log_warning_errno(r, "Could not print lower address: %m");
506 return r;
507 }
508
509 r = sd_netlink_message_read(message, NDA_LLADDR, sizeof(lladdr->mac), &lladdr->mac);
510 if (r >= 0) {
511 *size = sizeof(lladdr->mac);
512 *str = new(char, ETHER_ADDR_TO_STRING_MAX);
513 if (!*str) {
514 log_oom();
515 return r;
516 }
517 ether_addr_to_string(&lladdr->mac, *str);
518 return r;
519 }
520
521 r = sd_netlink_message_read(message, NDA_LLADDR, sizeof(lladdr->ip.in), &lladdr->ip.in);
522 if (r >= 0) {
523 *size = sizeof(lladdr->ip.in);
524 if (in_addr_to_string(AF_INET, &lladdr->ip, str) < 0)
525 log_warning_errno(r, "Could not print lower address: %m");
526 return r;
527 }
528
529 return r;
530 }
531
532 int manager_rtnl_process_neighbor(sd_netlink *rtnl, sd_netlink_message *message, void *userdata) {
533 Manager *m = userdata;
534 Link *link = NULL;
535 Neighbor *neighbor = NULL;
536 int ifindex, family, r;
537 uint16_t type, state;
538 union in_addr_union in_addr = IN_ADDR_NULL;
539 _cleanup_free_ char *addr_str = NULL;
540 union lladdr_union lladdr;
541 size_t lladdr_size = 0;
542 _cleanup_free_ char *lladdr_str = NULL;
543
544 assert(rtnl);
545 assert(message);
546 assert(m);
547
548 if (sd_netlink_message_is_error(message)) {
549 r = sd_netlink_message_get_errno(message);
550 if (r < 0)
551 log_warning_errno(r, "rtnl: failed to receive neighbor message, ignoring: %m");
552
553 return 0;
554 }
555
556 r = sd_netlink_message_get_type(message, &type);
557 if (r < 0) {
558 log_warning_errno(r, "rtnl: could not get message type, ignoring: %m");
559 return 0;
560 } else if (!IN_SET(type, RTM_NEWNEIGH, RTM_DELNEIGH)) {
561 log_warning("rtnl: received unexpected message type %u when processing neighbor, ignoring.", type);
562 return 0;
563 }
564
565 r = sd_rtnl_message_neigh_get_state(message, &state);
566 if (r < 0) {
567 log_link_warning_errno(link, r, "rtnl: received neighbor message with invalid state, ignoring: %m");
568 return 0;
569 } else if (!FLAGS_SET(state, NUD_PERMANENT)) {
570 log_debug("rtnl: received non-static neighbor, ignoring.");
571 return 0;
572 }
573
574 r = sd_rtnl_message_neigh_get_ifindex(message, &ifindex);
575 if (r < 0) {
576 log_warning_errno(r, "rtnl: could not get ifindex from message, ignoring: %m");
577 return 0;
578 } else if (ifindex <= 0) {
579 log_warning("rtnl: received neighbor message with invalid ifindex %d, ignoring.", ifindex);
580 return 0;
581 }
582
583 r = link_get(m, ifindex, &link);
584 if (r < 0 || !link) {
585 /* when enumerating we might be out of sync, but we will get the neighbor again, so just
586 * ignore it */
587 if (!m->enumerating)
588 log_warning("rtnl: received neighbor for link '%d' we don't know about, ignoring.", ifindex);
589 return 0;
590 }
591
592 r = sd_rtnl_message_neigh_get_family(message, &family);
593 if (r < 0 || !IN_SET(family, AF_INET, AF_INET6)) {
594 log_link_warning(link, "rtnl: received neighbor message with invalid family, ignoring.");
595 return 0;
596 }
597
598 switch (family) {
599 case AF_INET:
600 r = sd_netlink_message_read_in_addr(message, NDA_DST, &in_addr.in);
601 if (r < 0) {
602 log_link_warning_errno(link, r, "rtnl: received neighbor message without valid address, ignoring: %m");
603 return 0;
604 }
605
606 break;
607
608 case AF_INET6:
609 r = sd_netlink_message_read_in6_addr(message, NDA_DST, &in_addr.in6);
610 if (r < 0) {
611 log_link_warning_errno(link, r, "rtnl: received neighbor message without valid address, ignoring: %m");
612 return 0;
613 }
614
615 break;
616
617 default:
618 assert_not_reached("Received unsupported address family");
619 }
620
621 if (in_addr_to_string(family, &in_addr, &addr_str) < 0)
622 log_link_warning_errno(link, r, "Could not print address: %m");
623
624 r = manager_rtnl_process_neighbor_lladdr(message, &lladdr, &lladdr_size, &lladdr_str);
625 if (r < 0) {
626 log_link_warning_errno(link, r, "rtnl: received neighbor message with invalid lladdr, ignoring: %m");
627 return 0;
628 }
629
630 (void) neighbor_get(link, family, &in_addr, &lladdr, lladdr_size, &neighbor);
631
632 switch (type) {
633 case RTM_NEWNEIGH:
634 if (neighbor)
635 log_link_debug(link, "Remembering neighbor: %s->%s",
636 strnull(addr_str), strnull(lladdr_str));
637 else {
638 /* A neighbor appeared that we did not request */
639 r = neighbor_add_foreign(link, family, &in_addr, &lladdr, lladdr_size, &neighbor);
640 if (r < 0) {
641 log_link_warning_errno(link, r, "Failed to remember foreign neighbor %s->%s, ignoring: %m",
642 strnull(addr_str), strnull(lladdr_str));
643 return 0;
644 } else
645 log_link_debug(link, "Remembering foreign neighbor: %s->%s",
646 strnull(addr_str), strnull(lladdr_str));
647 }
648
649 break;
650
651 case RTM_DELNEIGH:
652 if (neighbor) {
653 log_link_debug(link, "Forgetting neighbor: %s->%s",
654 strnull(addr_str), strnull(lladdr_str));
655 (void) neighbor_free(neighbor);
656 } else
657 log_link_info(link, "Kernel removed a neighbor we don't remember: %s->%s, ignoring.",
658 strnull(addr_str), strnull(lladdr_str));
659
660 break;
661
662 default:
663 assert_not_reached("Received invalid RTNL message type");
664 }
665
666 return 1;
667 }
668
669 int manager_rtnl_process_address(sd_netlink *rtnl, sd_netlink_message *message, void *userdata) {
670 _cleanup_free_ char *buf = NULL;
671 Manager *m = userdata;
672 Link *link = NULL;
673 uint16_t type;
674 unsigned char flags, prefixlen, scope;
675 union in_addr_union in_addr = IN_ADDR_NULL;
676 struct ifa_cacheinfo cinfo;
677 Address *address = NULL;
678 char valid_buf[FORMAT_TIMESPAN_MAX];
679 const char *valid_str = NULL;
680 int ifindex, family, r;
681
682 assert(rtnl);
683 assert(message);
684 assert(m);
685
686 if (sd_netlink_message_is_error(message)) {
687 r = sd_netlink_message_get_errno(message);
688 if (r < 0)
689 log_warning_errno(r, "rtnl: failed to receive address message, ignoring: %m");
690
691 return 0;
692 }
693
694 r = sd_netlink_message_get_type(message, &type);
695 if (r < 0) {
696 log_warning_errno(r, "rtnl: could not get message type, ignoring: %m");
697 return 0;
698 } else if (!IN_SET(type, RTM_NEWADDR, RTM_DELADDR)) {
699 log_warning("rtnl: received unexpected message type %u when processing address, ignoring.", type);
700 return 0;
701 }
702
703 r = sd_rtnl_message_addr_get_ifindex(message, &ifindex);
704 if (r < 0) {
705 log_warning_errno(r, "rtnl: could not get ifindex from message, ignoring: %m");
706 return 0;
707 } else if (ifindex <= 0) {
708 log_warning("rtnl: received address message with invalid ifindex %d, ignoring.", ifindex);
709 return 0;
710 }
711
712 r = link_get(m, ifindex, &link);
713 if (r < 0 || !link) {
714 /* when enumerating we might be out of sync, but we will get the address again, so just
715 * ignore it */
716 if (!m->enumerating)
717 log_warning("rtnl: received address for link '%d' we don't know about, ignoring.", ifindex);
718 return 0;
719 }
720
721 r = sd_rtnl_message_addr_get_family(message, &family);
722 if (r < 0 || !IN_SET(family, AF_INET, AF_INET6)) {
723 log_link_warning(link, "rtnl: received address message with invalid family, ignoring.");
724 return 0;
725 }
726
727 r = sd_rtnl_message_addr_get_prefixlen(message, &prefixlen);
728 if (r < 0) {
729 log_link_warning_errno(link, r, "rtnl: received address message with invalid prefixlen, ignoring: %m");
730 return 0;
731 }
732
733 r = sd_rtnl_message_addr_get_scope(message, &scope);
734 if (r < 0) {
735 log_link_warning_errno(link, r, "rtnl: received address message with invalid scope, ignoring: %m");
736 return 0;
737 }
738
739 r = sd_rtnl_message_addr_get_flags(message, &flags);
740 if (r < 0) {
741 log_link_warning_errno(link, r, "rtnl: received address message with invalid flags, ignoring: %m");
742 return 0;
743 }
744
745 switch (family) {
746 case AF_INET:
747 r = sd_netlink_message_read_in_addr(message, IFA_LOCAL, &in_addr.in);
748 if (r < 0) {
749 log_link_warning_errno(link, r, "rtnl: received address message without valid address, ignoring: %m");
750 return 0;
751 }
752
753 break;
754
755 case AF_INET6:
756 r = sd_netlink_message_read_in6_addr(message, IFA_ADDRESS, &in_addr.in6);
757 if (r < 0) {
758 log_link_warning_errno(link, r, "rtnl: received address message without valid address, ignoring: %m");
759 return 0;
760 }
761
762 break;
763
764 default:
765 assert_not_reached("Received unsupported address family");
766 }
767
768 r = in_addr_to_string(family, &in_addr, &buf);
769 if (r < 0)
770 log_link_warning_errno(link, r, "Could not print address: %m");
771
772 r = sd_netlink_message_read_cache_info(message, IFA_CACHEINFO, &cinfo);
773 if (r < 0 && r != -ENODATA) {
774 log_link_warning_errno(link, r, "rtnl: cannot get IFA_CACHEINFO attribute, ignoring: %m");
775 return 0;
776 } else if (r >= 0 && cinfo.ifa_valid != CACHE_INFO_INFINITY_LIFE_TIME)
777 valid_str = format_timespan(valid_buf, FORMAT_TIMESPAN_MAX,
778 cinfo.ifa_valid * USEC_PER_SEC,
779 USEC_PER_SEC);
780
781 (void) address_get(link, family, &in_addr, prefixlen, &address);
782
783 switch (type) {
784 case RTM_NEWADDR:
785 if (address)
786 log_link_debug(link, "Remembering updated address: %s/%u (valid %s%s)",
787 strnull(buf), prefixlen,
788 valid_str ? "for " : "forever", strempty(valid_str));
789 else {
790 /* An address appeared that we did not request */
791 r = address_add_foreign(link, family, &in_addr, prefixlen, &address);
792 if (r < 0) {
793 log_link_warning_errno(link, r, "Failed to remember foreign address %s/%u, ignoring: %m",
794 strnull(buf), prefixlen);
795 return 0;
796 } else
797 log_link_debug(link, "Remembering foreign address: %s/%u (valid %s%s)",
798 strnull(buf), prefixlen,
799 valid_str ? "for " : "forever", strempty(valid_str));
800 }
801
802 /* address_update() logs internally, so we don't need to. */
803 (void) address_update(address, flags, scope, &cinfo);
804
805 break;
806
807 case RTM_DELADDR:
808 if (address) {
809 log_link_debug(link, "Forgetting address: %s/%u (valid %s%s)",
810 strnull(buf), prefixlen,
811 valid_str ? "for " : "forever", strempty(valid_str));
812 (void) address_drop(address);
813 } else
814 log_link_info(link, "Kernel removed an address we don't remember: %s/%u (valid %s%s), ignoring.",
815 strnull(buf), prefixlen,
816 valid_str ? "for " : "forever", strempty(valid_str));
817
818 break;
819
820 default:
821 assert_not_reached("Received invalid RTNL message type");
822 }
823
824 return 1;
825 }
826
827 static int manager_rtnl_process_link(sd_netlink *rtnl, sd_netlink_message *message, void *userdata) {
828 Manager *m = userdata;
829 Link *link = NULL;
830 NetDev *netdev = NULL;
831 uint16_t type;
832 const char *name;
833 int r, ifindex;
834
835 assert(rtnl);
836 assert(message);
837 assert(m);
838
839 if (sd_netlink_message_is_error(message)) {
840 r = sd_netlink_message_get_errno(message);
841 if (r < 0)
842 log_warning_errno(r, "rtnl: Could not receive link message, ignoring: %m");
843
844 return 0;
845 }
846
847 r = sd_netlink_message_get_type(message, &type);
848 if (r < 0) {
849 log_warning_errno(r, "rtnl: Could not get message type, ignoring: %m");
850 return 0;
851 } else if (!IN_SET(type, RTM_NEWLINK, RTM_DELLINK)) {
852 log_warning("rtnl: Received unexpected message type %u when processing link, ignoring.", type);
853 return 0;
854 }
855
856 r = sd_rtnl_message_link_get_ifindex(message, &ifindex);
857 if (r < 0) {
858 log_warning_errno(r, "rtnl: Could not get ifindex from link message, ignoring: %m");
859 return 0;
860 } else if (ifindex <= 0) {
861 log_warning("rtnl: received link message with invalid ifindex %d, ignoring.", ifindex);
862 return 0;
863 }
864
865 r = sd_netlink_message_read_string(message, IFLA_IFNAME, &name);
866 if (r < 0) {
867 log_warning_errno(r, "rtnl: Received link message without ifname, ignoring: %m");
868 return 0;
869 }
870
871 (void) link_get(m, ifindex, &link);
872 (void) netdev_get(m, name, &netdev);
873
874 switch (type) {
875 case RTM_NEWLINK:
876 if (!link) {
877 /* link is new, so add it */
878 r = link_add(m, message, &link);
879 if (r < 0) {
880 log_warning_errno(r, "Could not process new link message, ignoring: %m");
881 return 0;
882 }
883 }
884
885 if (netdev) {
886 /* netdev exists, so make sure the ifindex matches */
887 r = netdev_set_ifindex(netdev, message);
888 if (r < 0) {
889 log_warning_errno(r, "Could not process new link message for netdev, ignoring: %m");
890 return 0;
891 }
892 }
893
894 r = link_update(link, message);
895 if (r < 0) {
896 log_warning_errno(r, "Could not process link message, ignoring: %m");
897 return 0;
898 }
899
900 break;
901
902 case RTM_DELLINK:
903 link_drop(link);
904 netdev_drop(netdev);
905
906 break;
907
908 default:
909 assert_not_reached("Received link message with invalid RTNL message type.");
910 }
911
912 return 1;
913 }
914
915 int manager_rtnl_process_rule(sd_netlink *rtnl, sd_netlink_message *message, void *userdata) {
916 _cleanup_(routing_policy_rule_freep) RoutingPolicyRule *tmp = NULL;
917 _cleanup_free_ char *from = NULL, *to = NULL;
918 RoutingPolicyRule *rule = NULL;
919 const char *iif = NULL, *oif = NULL;
920 Manager *m = userdata;
921 unsigned flags;
922 uint16_t type;
923 int r;
924
925 assert(rtnl);
926 assert(message);
927 assert(m);
928
929 if (sd_netlink_message_is_error(message)) {
930 r = sd_netlink_message_get_errno(message);
931 if (r < 0)
932 log_warning_errno(r, "rtnl: failed to receive rule message, ignoring: %m");
933
934 return 0;
935 }
936
937 r = sd_netlink_message_get_type(message, &type);
938 if (r < 0) {
939 log_warning_errno(r, "rtnl: could not get message type, ignoring: %m");
940 return 0;
941 } else if (!IN_SET(type, RTM_NEWRULE, RTM_DELRULE)) {
942 log_warning("rtnl: received unexpected message type %u when processing rule, ignoring.", type);
943 return 0;
944 }
945
946 r = routing_policy_rule_new(&tmp);
947 if (r < 0) {
948 log_oom();
949 return 0;
950 }
951
952 r = sd_rtnl_message_get_family(message, &tmp->family);
953 if (r < 0) {
954 log_warning_errno(r, "rtnl: could not get rule family, ignoring: %m");
955 return 0;
956 } else if (!IN_SET(tmp->family, AF_INET, AF_INET6)) {
957 log_debug("rtnl: received rule message with invalid family %d, ignoring.", tmp->family);
958 return 0;
959 }
960
961 switch (tmp->family) {
962 case AF_INET:
963 r = sd_netlink_message_read_in_addr(message, FRA_SRC, &tmp->from.in);
964 if (r < 0 && r != -ENODATA) {
965 log_warning_errno(r, "rtnl: could not get FRA_SRC attribute, ignoring: %m");
966 return 0;
967 } else if (r >= 0) {
968 r = sd_rtnl_message_routing_policy_rule_get_rtm_src_prefixlen(message, &tmp->from_prefixlen);
969 if (r < 0) {
970 log_warning_errno(r, "rtnl: received rule message without valid source prefix length, ignoring: %m");
971 return 0;
972 }
973 }
974
975 r = sd_netlink_message_read_in_addr(message, FRA_DST, &tmp->to.in);
976 if (r < 0 && r != -ENODATA) {
977 log_warning_errno(r, "rtnl: could not get FRA_DST attribute, ignoring: %m");
978 return 0;
979 } else if (r >= 0) {
980 r = sd_rtnl_message_routing_policy_rule_get_rtm_dst_prefixlen(message, &tmp->to_prefixlen);
981 if (r < 0) {
982 log_warning_errno(r, "rtnl: received rule message without valid destination prefix length, ignoring: %m");
983 return 0;
984 }
985 }
986
987 break;
988
989 case AF_INET6:
990 r = sd_netlink_message_read_in6_addr(message, FRA_SRC, &tmp->from.in6);
991 if (r < 0 && r != -ENODATA) {
992 log_warning_errno(r, "rtnl: could not get FRA_SRC attribute, ignoring: %m");
993 return 0;
994 } else if (r >= 0) {
995 r = sd_rtnl_message_routing_policy_rule_get_rtm_src_prefixlen(message, &tmp->from_prefixlen);
996 if (r < 0) {
997 log_warning_errno(r, "rtnl: received rule message without valid source prefix length, ignoring: %m");
998 return 0;
999 }
1000 }
1001
1002 r = sd_netlink_message_read_in6_addr(message, FRA_DST, &tmp->to.in6);
1003 if (r < 0 && r != -ENODATA) {
1004 log_warning_errno(r, "rtnl: could not get FRA_DST attribute, ignoring: %m");
1005 return 0;
1006 } else if (r >= 0) {
1007 r = sd_rtnl_message_routing_policy_rule_get_rtm_dst_prefixlen(message, &tmp->to_prefixlen);
1008 if (r < 0) {
1009 log_warning_errno(r, "rtnl: received rule message without valid destination prefix length, ignoring: %m");
1010 return 0;
1011 }
1012 }
1013
1014 break;
1015
1016 default:
1017 assert_not_reached("Received rule message with unsupported address family");
1018 }
1019
1020 if (tmp->from_prefixlen == 0 && tmp->to_prefixlen == 0)
1021 return 0;
1022
1023 r = sd_rtnl_message_routing_policy_rule_get_flags(message, &flags);
1024 if (r < 0) {
1025 log_warning_errno(r, "rtnl: received rule message without valid flag, ignoring: %m");
1026 return 0;
1027 }
1028 tmp->invert_rule = flags & FIB_RULE_INVERT;
1029
1030 r = sd_netlink_message_read_u32(message, FRA_FWMARK, &tmp->fwmark);
1031 if (r < 0 && r != -ENODATA) {
1032 log_warning_errno(r, "rtnl: could not get FRA_FWMARK attribute, ignoring: %m");
1033 return 0;
1034 }
1035
1036 r = sd_netlink_message_read_u32(message, FRA_FWMASK, &tmp->fwmask);
1037 if (r < 0 && r != -ENODATA) {
1038 log_warning_errno(r, "rtnl: could not get FRA_FWMASK attribute, ignoring: %m");
1039 return 0;
1040 }
1041
1042 r = sd_netlink_message_read_u32(message, FRA_PRIORITY, &tmp->priority);
1043 if (r < 0 && r != -ENODATA) {
1044 log_warning_errno(r, "rtnl: could not get FRA_PRIORITY attribute, ignoring: %m");
1045 return 0;
1046 }
1047
1048 r = sd_netlink_message_read_u32(message, FRA_TABLE, &tmp->table);
1049 if (r < 0 && r != -ENODATA) {
1050 log_warning_errno(r, "rtnl: could not get FRA_TABLE attribute, ignoring: %m");
1051 return 0;
1052 }
1053
1054 r = sd_rtnl_message_routing_policy_rule_get_tos(message, &tmp->tos);
1055 if (r < 0 && r != -ENODATA) {
1056 log_warning_errno(r, "rtnl: could not get ip rule TOS, ignoring: %m");
1057 return 0;
1058 }
1059
1060 r = sd_netlink_message_read_string(message, FRA_IIFNAME, &iif);
1061 if (r < 0 && r != -ENODATA) {
1062 log_warning_errno(r, "rtnl: could not get FRA_IIFNAME attribute, ignoring: %m");
1063 return 0;
1064 }
1065 r = free_and_strdup(&tmp->iif, iif);
1066 if (r < 0)
1067 return log_oom();
1068
1069 r = sd_netlink_message_read_string(message, FRA_OIFNAME, &oif);
1070 if (r < 0 && r != -ENODATA) {
1071 log_warning_errno(r, "rtnl: could not get FRA_OIFNAME attribute, ignoring: %m");
1072 return 0;
1073 }
1074 r = free_and_strdup(&tmp->oif, oif);
1075 if (r < 0)
1076 return log_oom();
1077
1078 r = sd_netlink_message_read_u8(message, FRA_IP_PROTO, &tmp->protocol);
1079 if (r < 0 && r != -ENODATA) {
1080 log_warning_errno(r, "rtnl: could not get FRA_IP_PROTO attribute, ignoring: %m");
1081 return 0;
1082 }
1083
1084 r = sd_netlink_message_read(message, FRA_SPORT_RANGE, sizeof(tmp->sport), &tmp->sport);
1085 if (r < 0 && r != -ENODATA) {
1086 log_warning_errno(r, "rtnl: could not get FRA_SPORT_RANGE attribute, ignoring: %m");
1087 return 0;
1088 }
1089
1090 r = sd_netlink_message_read(message, FRA_DPORT_RANGE, sizeof(tmp->dport), &tmp->dport);
1091 if (r < 0 && r != -ENODATA) {
1092 log_warning_errno(r, "rtnl: could not get FRA_DPORT_RANGE attribute, ignoring: %m");
1093 return 0;
1094 }
1095
1096 (void) routing_policy_rule_get(m, tmp, &rule);
1097
1098 if (DEBUG_LOGGING) {
1099 (void) in_addr_to_string(tmp->family, &tmp->from, &from);
1100 (void) in_addr_to_string(tmp->family, &tmp->to, &to);
1101 }
1102
1103 switch (type) {
1104 case RTM_NEWRULE:
1105 if (!rule) {
1106 log_debug("Remembering foreign routing policy rule: %s/%u -> %s/%u, iif: %s, oif: %s, table: %u",
1107 from, tmp->from_prefixlen, to, tmp->to_prefixlen, strna(tmp->iif), strna(tmp->oif), tmp->table);
1108 r = routing_policy_rule_add_foreign(m, tmp, &rule);
1109 if (r < 0) {
1110 log_warning_errno(r, "Could not remember foreign rule, ignoring: %m");
1111 return 0;
1112 }
1113 }
1114 break;
1115 case RTM_DELRULE:
1116 log_debug("Forgetting routing policy rule: %s/%u -> %s/%u, iif: %s, oif: %s, table: %u",
1117 from, tmp->from_prefixlen, to, tmp->to_prefixlen, strna(tmp->iif), strna(tmp->oif), tmp->table);
1118 routing_policy_rule_free(rule);
1119
1120 break;
1121
1122 default:
1123 assert_not_reached("Received invalid RTNL message type");
1124 }
1125
1126 return 1;
1127 }
1128
1129 static int systemd_netlink_fd(void) {
1130 int n, fd, rtnl_fd = -EINVAL;
1131
1132 n = sd_listen_fds(true);
1133 if (n <= 0)
1134 return -EINVAL;
1135
1136 for (fd = SD_LISTEN_FDS_START; fd < SD_LISTEN_FDS_START + n; fd ++) {
1137 if (sd_is_socket(fd, AF_NETLINK, SOCK_RAW, -1) > 0) {
1138 if (rtnl_fd >= 0)
1139 return -EINVAL;
1140
1141 rtnl_fd = fd;
1142 }
1143 }
1144
1145 return rtnl_fd;
1146 }
1147
1148 static int manager_connect_genl(Manager *m) {
1149 int r;
1150
1151 assert(m);
1152
1153 r = sd_genl_socket_open(&m->genl);
1154 if (r < 0)
1155 return r;
1156
1157 r = sd_netlink_inc_rcvbuf(m->genl, RCVBUF_SIZE);
1158 if (r < 0)
1159 return r;
1160
1161 r = sd_netlink_attach_event(m->genl, m->event, 0);
1162 if (r < 0)
1163 return r;
1164
1165 return 0;
1166 }
1167
1168 static int manager_connect_rtnl(Manager *m) {
1169 int fd, r;
1170
1171 assert(m);
1172
1173 fd = systemd_netlink_fd();
1174 if (fd < 0)
1175 r = sd_netlink_open(&m->rtnl);
1176 else
1177 r = sd_netlink_open_fd(&m->rtnl, fd);
1178 if (r < 0)
1179 return r;
1180
1181 r = sd_netlink_inc_rcvbuf(m->rtnl, RCVBUF_SIZE);
1182 if (r < 0)
1183 return r;
1184
1185 r = sd_netlink_attach_event(m->rtnl, m->event, 0);
1186 if (r < 0)
1187 return r;
1188
1189 r = sd_netlink_add_match(m->rtnl, NULL, RTM_NEWLINK, &manager_rtnl_process_link, NULL, m, "network-rtnl_process_link");
1190 if (r < 0)
1191 return r;
1192
1193 r = sd_netlink_add_match(m->rtnl, NULL, RTM_DELLINK, &manager_rtnl_process_link, NULL, m, "network-rtnl_process_link");
1194 if (r < 0)
1195 return r;
1196
1197 r = sd_netlink_add_match(m->rtnl, NULL, RTM_NEWADDR, &manager_rtnl_process_address, NULL, m, "network-rtnl_process_address");
1198 if (r < 0)
1199 return r;
1200
1201 r = sd_netlink_add_match(m->rtnl, NULL, RTM_DELADDR, &manager_rtnl_process_address, NULL, m, "network-rtnl_process_address");
1202 if (r < 0)
1203 return r;
1204
1205 r = sd_netlink_add_match(m->rtnl, NULL, RTM_NEWNEIGH, &manager_rtnl_process_neighbor, NULL, m, "network-rtnl_process_neighbor");
1206 if (r < 0)
1207 return r;
1208
1209 r = sd_netlink_add_match(m->rtnl, NULL, RTM_DELNEIGH, &manager_rtnl_process_neighbor, NULL, m, "network-rtnl_process_neighbor");
1210 if (r < 0)
1211 return r;
1212
1213 r = sd_netlink_add_match(m->rtnl, NULL, RTM_NEWROUTE, &manager_rtnl_process_route, NULL, m, "network-rtnl_process_route");
1214 if (r < 0)
1215 return r;
1216
1217 r = sd_netlink_add_match(m->rtnl, NULL, RTM_DELROUTE, &manager_rtnl_process_route, NULL, m, "network-rtnl_process_route");
1218 if (r < 0)
1219 return r;
1220
1221 r = sd_netlink_add_match(m->rtnl, NULL, RTM_NEWRULE, &manager_rtnl_process_rule, NULL, m, "network-rtnl_process_rule");
1222 if (r < 0)
1223 return r;
1224
1225 r = sd_netlink_add_match(m->rtnl, NULL, RTM_DELRULE, &manager_rtnl_process_rule, NULL, m, "network-rtnl_process_rule");
1226 if (r < 0)
1227 return r;
1228
1229 return 0;
1230 }
1231
1232 static int ordered_set_put_in_addr_data(OrderedSet *s, const struct in_addr_data *address) {
1233 char *p;
1234 int r;
1235
1236 assert(s);
1237 assert(address);
1238
1239 r = in_addr_to_string(address->family, &address->address, &p);
1240 if (r < 0)
1241 return r;
1242
1243 r = ordered_set_consume(s, p);
1244 if (r == -EEXIST)
1245 return 0;
1246
1247 return r;
1248 }
1249
1250 static int ordered_set_put_in_addr_datav(OrderedSet *s, const struct in_addr_data *addresses, unsigned n) {
1251 int r, c = 0;
1252 unsigned i;
1253
1254 assert(s);
1255 assert(addresses || n == 0);
1256
1257 for (i = 0; i < n; i++) {
1258 r = ordered_set_put_in_addr_data(s, addresses+i);
1259 if (r < 0)
1260 return r;
1261
1262 c += r;
1263 }
1264
1265 return c;
1266 }
1267
1268 static int ordered_set_put_in4_addr(OrderedSet *s, const struct in_addr *address) {
1269 char *p;
1270 int r;
1271
1272 assert(s);
1273 assert(address);
1274
1275 r = in_addr_to_string(AF_INET, (const union in_addr_union*) address, &p);
1276 if (r < 0)
1277 return r;
1278
1279 r = ordered_set_consume(s, p);
1280 if (r == -EEXIST)
1281 return 0;
1282
1283 return r;
1284 }
1285
1286 static int ordered_set_put_in4_addrv(OrderedSet *s,
1287 const struct in_addr *addresses,
1288 size_t n,
1289 bool (*predicate)(const struct in_addr *addr)) {
1290 int r, c = 0;
1291 size_t i;
1292
1293 assert(s);
1294 assert(n == 0 || addresses);
1295
1296 for (i = 0; i < n; i++) {
1297 if (predicate && !predicate(&addresses[i]))
1298 continue;
1299 r = ordered_set_put_in4_addr(s, addresses+i);
1300 if (r < 0)
1301 return r;
1302
1303 c += r;
1304 }
1305
1306 return c;
1307 }
1308
1309 static int manager_save(Manager *m) {
1310 _cleanup_ordered_set_free_free_ OrderedSet *dns = NULL, *ntp = NULL, *search_domains = NULL, *route_domains = NULL;
1311 Link *link;
1312 Iterator i;
1313 _cleanup_free_ char *temp_path = NULL;
1314 _cleanup_strv_free_ char **p = NULL;
1315 _cleanup_fclose_ FILE *f = NULL;
1316 LinkOperationalState operstate = LINK_OPERSTATE_OFF;
1317 LinkCarrierState carrier_state = LINK_CARRIER_STATE_OFF;
1318 LinkAddressState address_state = LINK_ADDRESS_STATE_OFF;
1319 const char *operstate_str, *carrier_state_str, *address_state_str;
1320 int r;
1321
1322 assert(m);
1323 assert(m->state_file);
1324
1325 /* We add all NTP and DNS server to a set, to filter out duplicates */
1326 dns = ordered_set_new(&string_hash_ops);
1327 if (!dns)
1328 return -ENOMEM;
1329
1330 ntp = ordered_set_new(&string_hash_ops);
1331 if (!ntp)
1332 return -ENOMEM;
1333
1334 search_domains = ordered_set_new(&dns_name_hash_ops);
1335 if (!search_domains)
1336 return -ENOMEM;
1337
1338 route_domains = ordered_set_new(&dns_name_hash_ops);
1339 if (!route_domains)
1340 return -ENOMEM;
1341
1342 HASHMAP_FOREACH(link, m->links, i) {
1343 if (link->flags & IFF_LOOPBACK)
1344 continue;
1345
1346 if (link->operstate > operstate)
1347 operstate = link->operstate;
1348
1349 if (link->carrier_state > carrier_state)
1350 carrier_state = link->carrier_state;
1351
1352 if (link->address_state > address_state)
1353 address_state = link->address_state;
1354
1355 if (!link->network)
1356 continue;
1357
1358 /* First add the static configured entries */
1359 r = ordered_set_put_in_addr_datav(dns, link->network->dns, link->network->n_dns);
1360 if (r < 0)
1361 return r;
1362
1363 r = ordered_set_put_strdupv(ntp, link->ntp ?: link->network->ntp);
1364 if (r < 0)
1365 return r;
1366
1367 r = ordered_set_put_string_set(search_domains, link->search_domains ?: link->network->search_domains);
1368 if (r < 0)
1369 return r;
1370
1371 r = ordered_set_put_string_set(route_domains, link->route_domains ?: link->network->route_domains);
1372 if (r < 0)
1373 return r;
1374
1375 if (!link->dhcp_lease)
1376 continue;
1377
1378 /* Secondly, add the entries acquired via DHCP */
1379 if (link->network->dhcp_use_dns) {
1380 const struct in_addr *addresses;
1381
1382 r = sd_dhcp_lease_get_dns(link->dhcp_lease, &addresses);
1383 if (r > 0) {
1384 r = ordered_set_put_in4_addrv(dns, addresses, r, in4_addr_is_non_local);
1385 if (r < 0)
1386 return r;
1387 } else if (r < 0 && r != -ENODATA)
1388 return r;
1389 }
1390
1391 if (link->network->dhcp_use_ntp) {
1392 const struct in_addr *addresses;
1393
1394 r = sd_dhcp_lease_get_ntp(link->dhcp_lease, &addresses);
1395 if (r > 0) {
1396 r = ordered_set_put_in4_addrv(ntp, addresses, r, in4_addr_is_non_local);
1397 if (r < 0)
1398 return r;
1399 } else if (r < 0 && r != -ENODATA)
1400 return r;
1401 }
1402
1403 if (link->network->dhcp_use_domains != DHCP_USE_DOMAINS_NO) {
1404 const char *domainname;
1405 char **domains = NULL;
1406
1407 OrderedSet *target_domains = (link->network->dhcp_use_domains == DHCP_USE_DOMAINS_YES) ? search_domains : route_domains;
1408 r = sd_dhcp_lease_get_domainname(link->dhcp_lease, &domainname);
1409 if (r >= 0) {
1410 r = ordered_set_put_strdup(target_domains, domainname);
1411 if (r < 0)
1412 return r;
1413 } else if (r != -ENODATA)
1414 return r;
1415
1416 r = sd_dhcp_lease_get_search_domains(link->dhcp_lease, &domains);
1417 if (r >= 0) {
1418 r = ordered_set_put_strdupv(target_domains, domains);
1419 if (r < 0)
1420 return r;
1421 } else if (r != -ENODATA)
1422 return r;
1423 }
1424 }
1425
1426 if (carrier_state >= LINK_CARRIER_STATE_ENSLAVED)
1427 carrier_state = LINK_CARRIER_STATE_CARRIER;
1428
1429 operstate_str = link_operstate_to_string(operstate);
1430 assert(operstate_str);
1431
1432 carrier_state_str = link_carrier_state_to_string(carrier_state);
1433 assert(carrier_state_str);
1434
1435 address_state_str = link_address_state_to_string(address_state);
1436 assert(address_state_str);
1437
1438 r = fopen_temporary(m->state_file, &f, &temp_path);
1439 if (r < 0)
1440 return r;
1441
1442 (void) fchmod(fileno(f), 0644);
1443
1444 fprintf(f,
1445 "# This is private data. Do not parse.\n"
1446 "OPER_STATE=%s\n"
1447 "CARRIER_STATE=%s\n"
1448 "ADDRESS_STATE=%s\n",
1449 operstate_str, carrier_state_str, address_state_str);
1450
1451 ordered_set_print(f, "DNS=", dns);
1452 ordered_set_print(f, "NTP=", ntp);
1453 ordered_set_print(f, "DOMAINS=", search_domains);
1454 ordered_set_print(f, "ROUTE_DOMAINS=", route_domains);
1455
1456 r = routing_policy_serialize_rules(m->rules, f);
1457 if (r < 0)
1458 goto fail;
1459
1460 r = fflush_and_check(f);
1461 if (r < 0)
1462 goto fail;
1463
1464 if (rename(temp_path, m->state_file) < 0) {
1465 r = -errno;
1466 goto fail;
1467 }
1468
1469 if (m->operational_state != operstate) {
1470 m->operational_state = operstate;
1471 if (strv_extend(&p, "OperationalState") < 0)
1472 log_oom();
1473 }
1474
1475 if (m->carrier_state != carrier_state) {
1476 m->carrier_state = carrier_state;
1477 if (strv_extend(&p, "CarrierState") < 0)
1478 log_oom();
1479 }
1480
1481 if (m->address_state != address_state) {
1482 m->address_state = address_state;
1483 if (strv_extend(&p, "AddressState") < 0)
1484 log_oom();
1485 }
1486
1487 if (p) {
1488 r = manager_send_changed_strv(m, p);
1489 if (r < 0)
1490 log_error_errno(r, "Could not emit changed properties: %m");
1491 }
1492
1493 m->dirty = false;
1494
1495 return 0;
1496
1497 fail:
1498 (void) unlink(m->state_file);
1499 (void) unlink(temp_path);
1500
1501 return log_error_errno(r, "Failed to save network state to %s: %m", m->state_file);
1502 }
1503
1504 static int manager_dirty_handler(sd_event_source *s, void *userdata) {
1505 Manager *m = userdata;
1506 Link *link;
1507 Iterator i;
1508
1509 assert(m);
1510
1511 if (m->dirty)
1512 manager_save(m);
1513
1514 SET_FOREACH(link, m->dirty_links, i)
1515 if (link_save(link) >= 0)
1516 link_clean(link);
1517
1518 return 1;
1519 }
1520
1521 int manager_new(Manager **ret) {
1522 _cleanup_(manager_freep) Manager *m = NULL;
1523 int r;
1524
1525 m = new(Manager, 1);
1526 if (!m)
1527 return -ENOMEM;
1528
1529 *m = (Manager) {
1530 .speed_meter_interval_usec = SPEED_METER_DEFAULT_TIME_INTERVAL,
1531 };
1532
1533 m->state_file = strdup("/run/systemd/netif/state");
1534 if (!m->state_file)
1535 return -ENOMEM;
1536
1537 r = sd_event_default(&m->event);
1538 if (r < 0)
1539 return r;
1540
1541 (void) sd_event_set_watchdog(m->event, true);
1542 (void) sd_event_add_signal(m->event, NULL, SIGTERM, NULL, NULL);
1543 (void) sd_event_add_signal(m->event, NULL, SIGINT, NULL, NULL);
1544
1545 r = sd_event_add_post(m->event, NULL, manager_dirty_handler, m);
1546 if (r < 0)
1547 return r;
1548
1549 r = manager_connect_rtnl(m);
1550 if (r < 0)
1551 return r;
1552
1553 r = manager_connect_genl(m);
1554 if (r < 0)
1555 return r;
1556
1557 r = manager_connect_udev(m);
1558 if (r < 0)
1559 return r;
1560
1561 r = sd_resolve_default(&m->resolve);
1562 if (r < 0)
1563 return r;
1564
1565 r = sd_resolve_attach_event(m->resolve, m->event, 0);
1566 if (r < 0)
1567 return r;
1568
1569 r = setup_default_address_pool(m);
1570 if (r < 0)
1571 return r;
1572
1573 m->duid.type = DUID_TYPE_EN;
1574
1575 (void) routing_policy_load_rules(m->state_file, &m->rules_saved);
1576
1577 *ret = TAKE_PTR(m);
1578
1579 return 0;
1580 }
1581
1582 void manager_free(Manager *m) {
1583 struct in6_addr *a;
1584 AddressPool *pool;
1585 Link *link;
1586
1587 if (!m)
1588 return;
1589
1590 free(m->state_file);
1591
1592 while ((a = hashmap_first_key(m->dhcp6_prefixes)))
1593 (void) dhcp6_prefix_remove(m, a);
1594 m->dhcp6_prefixes = hashmap_free(m->dhcp6_prefixes);
1595
1596 while ((link = hashmap_steal_first(m->links))) {
1597 if (link->dhcp6_client)
1598 (void) dhcp6_lease_pd_prefix_lost(link->dhcp6_client, link);
1599
1600 (void) link_stop_clients(link, true);
1601
1602 link_unref(link);
1603 }
1604
1605 m->dirty_links = set_free_with_destructor(m->dirty_links, link_unref);
1606 m->links_requesting_uuid = set_free_with_destructor(m->links_requesting_uuid, link_unref);
1607 m->links = hashmap_free_with_destructor(m->links, link_unref);
1608
1609 m->duids_requesting_uuid = set_free(m->duids_requesting_uuid);
1610 m->networks = ordered_hashmap_free_with_destructor(m->networks, network_unref);
1611
1612 m->netdevs = hashmap_free_with_destructor(m->netdevs, netdev_unref);
1613
1614 while ((pool = m->address_pools))
1615 address_pool_free(pool);
1616
1617 /* routing_policy_rule_free() access m->rules and m->rules_foreign.
1618 * So, it is necessary to set NULL after the sets are freed. */
1619 m->rules = set_free_with_destructor(m->rules, routing_policy_rule_free);
1620 m->rules_foreign = set_free_with_destructor(m->rules_foreign, routing_policy_rule_free);
1621 set_free_with_destructor(m->rules_saved, routing_policy_rule_free);
1622
1623 sd_netlink_unref(m->rtnl);
1624 sd_netlink_unref(m->genl);
1625 sd_resolve_unref(m->resolve);
1626
1627 sd_event_source_unref(m->speed_meter_event_source);
1628 sd_event_unref(m->event);
1629
1630 sd_device_monitor_unref(m->device_monitor);
1631
1632 bus_verify_polkit_async_registry_free(m->polkit_registry);
1633 sd_bus_flush_close_unref(m->bus);
1634
1635 free(m->dynamic_timezone);
1636 free(m->dynamic_hostname);
1637
1638 free(m);
1639 }
1640
1641 int manager_start(Manager *m) {
1642 Link *link;
1643 Iterator i;
1644 int r;
1645
1646 assert(m);
1647
1648 r = manager_start_speed_meter(m);
1649 if (r < 0)
1650 return log_error_errno(r, "Failed to initialize speed meter: %m");
1651
1652 /* The dirty handler will deal with future serialization, but the first one
1653 must be done explicitly. */
1654
1655 manager_save(m);
1656
1657 HASHMAP_FOREACH(link, m->links, i)
1658 link_save(link);
1659
1660 return 0;
1661 }
1662
1663 int manager_load_config(Manager *m) {
1664 int r;
1665
1666 /* update timestamp */
1667 paths_check_timestamp(NETWORK_DIRS, &m->network_dirs_ts_usec, true);
1668
1669 r = netdev_load(m);
1670 if (r < 0)
1671 return r;
1672
1673 r = network_load(m);
1674 if (r < 0)
1675 return r;
1676
1677 return 0;
1678 }
1679
1680 bool manager_should_reload(Manager *m) {
1681 return paths_check_timestamp(NETWORK_DIRS, &m->network_dirs_ts_usec, false);
1682 }
1683
1684 int manager_rtnl_enumerate_links(Manager *m) {
1685 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL, *reply = NULL;
1686 sd_netlink_message *link;
1687 int r;
1688
1689 assert(m);
1690 assert(m->rtnl);
1691
1692 r = sd_rtnl_message_new_link(m->rtnl, &req, RTM_GETLINK, 0);
1693 if (r < 0)
1694 return r;
1695
1696 r = sd_netlink_message_request_dump(req, true);
1697 if (r < 0)
1698 return r;
1699
1700 r = sd_netlink_call(m->rtnl, req, 0, &reply);
1701 if (r < 0)
1702 return r;
1703
1704 for (link = reply; link; link = sd_netlink_message_next(link)) {
1705 int k;
1706
1707 m->enumerating = true;
1708
1709 k = manager_rtnl_process_link(m->rtnl, link, m);
1710 if (k < 0)
1711 r = k;
1712
1713 m->enumerating = false;
1714 }
1715
1716 return r;
1717 }
1718
1719 int manager_rtnl_enumerate_addresses(Manager *m) {
1720 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL, *reply = NULL;
1721 sd_netlink_message *addr;
1722 int r;
1723
1724 assert(m);
1725 assert(m->rtnl);
1726
1727 r = sd_rtnl_message_new_addr(m->rtnl, &req, RTM_GETADDR, 0, 0);
1728 if (r < 0)
1729 return r;
1730
1731 r = sd_netlink_message_request_dump(req, true);
1732 if (r < 0)
1733 return r;
1734
1735 r = sd_netlink_call(m->rtnl, req, 0, &reply);
1736 if (r < 0)
1737 return r;
1738
1739 for (addr = reply; addr; addr = sd_netlink_message_next(addr)) {
1740 int k;
1741
1742 m->enumerating = true;
1743
1744 k = manager_rtnl_process_address(m->rtnl, addr, m);
1745 if (k < 0)
1746 r = k;
1747
1748 m->enumerating = false;
1749 }
1750
1751 return r;
1752 }
1753
1754 int manager_rtnl_enumerate_neighbors(Manager *m) {
1755 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL, *reply = NULL;
1756 sd_netlink_message *neigh;
1757 int r;
1758
1759 assert(m);
1760 assert(m->rtnl);
1761
1762 r = sd_rtnl_message_new_neigh(m->rtnl, &req, RTM_GETNEIGH, 0, AF_UNSPEC);
1763 if (r < 0)
1764 return r;
1765
1766 r = sd_netlink_message_request_dump(req, true);
1767 if (r < 0)
1768 return r;
1769
1770 r = sd_netlink_call(m->rtnl, req, 0, &reply);
1771 if (r < 0)
1772 return r;
1773
1774 for (neigh = reply; neigh; neigh = sd_netlink_message_next(neigh)) {
1775 int k;
1776
1777 m->enumerating = true;
1778
1779 k = manager_rtnl_process_neighbor(m->rtnl, neigh, m);
1780 if (k < 0)
1781 r = k;
1782
1783 m->enumerating = false;
1784 }
1785
1786 return r;
1787 }
1788
1789 int manager_rtnl_enumerate_routes(Manager *m) {
1790 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL, *reply = NULL;
1791 sd_netlink_message *route;
1792 int r;
1793
1794 assert(m);
1795 assert(m->rtnl);
1796
1797 r = sd_rtnl_message_new_route(m->rtnl, &req, RTM_GETROUTE, 0, 0);
1798 if (r < 0)
1799 return r;
1800
1801 r = sd_netlink_message_request_dump(req, true);
1802 if (r < 0)
1803 return r;
1804
1805 r = sd_netlink_call(m->rtnl, req, 0, &reply);
1806 if (r < 0)
1807 return r;
1808
1809 for (route = reply; route; route = sd_netlink_message_next(route)) {
1810 int k;
1811
1812 m->enumerating = true;
1813
1814 k = manager_rtnl_process_route(m->rtnl, route, m);
1815 if (k < 0)
1816 r = k;
1817
1818 m->enumerating = false;
1819 }
1820
1821 return r;
1822 }
1823
1824 int manager_rtnl_enumerate_rules(Manager *m) {
1825 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL, *reply = NULL;
1826 sd_netlink_message *rule;
1827 int r;
1828
1829 assert(m);
1830 assert(m->rtnl);
1831
1832 r = sd_rtnl_message_new_routing_policy_rule(m->rtnl, &req, RTM_GETRULE, 0);
1833 if (r < 0)
1834 return r;
1835
1836 r = sd_netlink_message_request_dump(req, true);
1837 if (r < 0)
1838 return r;
1839
1840 r = sd_netlink_call(m->rtnl, req, 0, &reply);
1841 if (r < 0) {
1842 if (r == -EOPNOTSUPP) {
1843 log_debug("FIB Rules are not supported by the kernel. Ignoring.");
1844 return 0;
1845 }
1846
1847 return r;
1848 }
1849
1850 for (rule = reply; rule; rule = sd_netlink_message_next(rule)) {
1851 int k;
1852
1853 m->enumerating = true;
1854
1855 k = manager_rtnl_process_rule(m->rtnl, rule, m);
1856 if (k < 0)
1857 r = k;
1858
1859 m->enumerating = false;
1860 }
1861
1862 return r;
1863 }
1864
1865 int manager_address_pool_acquire(Manager *m, int family, unsigned prefixlen, union in_addr_union *found) {
1866 AddressPool *p;
1867 int r;
1868
1869 assert(m);
1870 assert(prefixlen > 0);
1871 assert(found);
1872
1873 LIST_FOREACH(address_pools, p, m->address_pools) {
1874 if (p->family != family)
1875 continue;
1876
1877 r = address_pool_acquire(p, prefixlen, found);
1878 if (r != 0)
1879 return r;
1880 }
1881
1882 return 0;
1883 }
1884
1885 Link* manager_find_uplink(Manager *m, Link *exclude) {
1886 _cleanup_free_ struct local_address *gateways = NULL;
1887 int n, i;
1888
1889 assert(m);
1890
1891 /* Looks for a suitable "uplink", via black magic: an
1892 * interface that is up and where the default route with the
1893 * highest priority points to. */
1894
1895 n = local_gateways(m->rtnl, 0, AF_UNSPEC, &gateways);
1896 if (n < 0) {
1897 log_warning_errno(n, "Failed to determine list of default gateways: %m");
1898 return NULL;
1899 }
1900
1901 for (i = 0; i < n; i++) {
1902 Link *link;
1903
1904 link = hashmap_get(m->links, INT_TO_PTR(gateways[i].ifindex));
1905 if (!link) {
1906 log_debug("Weird, found a gateway for a link we don't know. Ignoring.");
1907 continue;
1908 }
1909
1910 if (link == exclude)
1911 continue;
1912
1913 if (link->operstate < LINK_OPERSTATE_ROUTABLE)
1914 continue;
1915
1916 return link;
1917 }
1918
1919 return NULL;
1920 }
1921
1922 void manager_dirty(Manager *manager) {
1923 assert(manager);
1924
1925 /* the serialized state in /run is no longer up-to-date */
1926 manager->dirty = true;
1927 }
1928
1929 static int set_hostname_handler(sd_bus_message *m, void *userdata, sd_bus_error *ret_error) {
1930 Manager *manager = userdata;
1931 const sd_bus_error *e;
1932
1933 assert(m);
1934 assert(manager);
1935
1936 e = sd_bus_message_get_error(m);
1937 if (e)
1938 log_warning_errno(sd_bus_error_get_errno(e), "Could not set hostname: %s", e->message);
1939
1940 return 1;
1941 }
1942
1943 int manager_set_hostname(Manager *m, const char *hostname) {
1944 int r;
1945
1946 log_debug("Setting transient hostname: '%s'", strna(hostname));
1947
1948 if (free_and_strdup(&m->dynamic_hostname, hostname) < 0)
1949 return log_oom();
1950
1951 if (!m->bus || sd_bus_is_ready(m->bus) <= 0) {
1952 log_debug("Not connected to system bus, setting hostname later.");
1953 return 0;
1954 }
1955
1956 r = sd_bus_call_method_async(
1957 m->bus,
1958 NULL,
1959 "org.freedesktop.hostname1",
1960 "/org/freedesktop/hostname1",
1961 "org.freedesktop.hostname1",
1962 "SetHostname",
1963 set_hostname_handler,
1964 m,
1965 "sb",
1966 hostname,
1967 false);
1968
1969 if (r < 0)
1970 return log_error_errno(r, "Could not set transient hostname: %m");
1971
1972 return 0;
1973 }
1974
1975 static int set_timezone_handler(sd_bus_message *m, void *userdata, sd_bus_error *ret_error) {
1976 Manager *manager = userdata;
1977 const sd_bus_error *e;
1978
1979 assert(m);
1980 assert(manager);
1981
1982 e = sd_bus_message_get_error(m);
1983 if (e)
1984 log_warning_errno(sd_bus_error_get_errno(e), "Could not set timezone: %s", e->message);
1985
1986 return 1;
1987 }
1988
1989 int manager_set_timezone(Manager *m, const char *tz) {
1990 int r;
1991
1992 assert(m);
1993 assert(tz);
1994
1995 log_debug("Setting system timezone: '%s'", tz);
1996 if (free_and_strdup(&m->dynamic_timezone, tz) < 0)
1997 return log_oom();
1998
1999 if (!m->bus || sd_bus_is_ready(m->bus) <= 0) {
2000 log_debug("Not connected to system bus, setting timezone later.");
2001 return 0;
2002 }
2003
2004 r = sd_bus_call_method_async(
2005 m->bus,
2006 NULL,
2007 "org.freedesktop.timedate1",
2008 "/org/freedesktop/timedate1",
2009 "org.freedesktop.timedate1",
2010 "SetTimezone",
2011 set_timezone_handler,
2012 m,
2013 "sb",
2014 tz,
2015 false);
2016 if (r < 0)
2017 return log_error_errno(r, "Could not set timezone: %m");
2018
2019 return 0;
2020 }
2021
2022 int manager_request_product_uuid(Manager *m, Link *link) {
2023 int r;
2024
2025 assert(m);
2026
2027 if (m->has_product_uuid)
2028 return 0;
2029
2030 log_debug("Requesting product UUID");
2031
2032 if (link) {
2033 DUID *duid;
2034
2035 assert_se(duid = link_get_duid(link));
2036
2037 r = set_ensure_allocated(&m->links_requesting_uuid, NULL);
2038 if (r < 0)
2039 return log_oom();
2040
2041 r = set_ensure_allocated(&m->duids_requesting_uuid, NULL);
2042 if (r < 0)
2043 return log_oom();
2044
2045 r = set_put(m->links_requesting_uuid, link);
2046 if (r < 0)
2047 return log_oom();
2048
2049 r = set_put(m->duids_requesting_uuid, duid);
2050 if (r < 0)
2051 return log_oom();
2052
2053 link_ref(link);
2054 }
2055
2056 if (!m->bus || sd_bus_is_ready(m->bus) <= 0) {
2057 log_debug("Not connected to system bus, requesting product UUID later.");
2058 return 0;
2059 }
2060
2061 r = sd_bus_call_method_async(
2062 m->bus,
2063 NULL,
2064 "org.freedesktop.hostname1",
2065 "/org/freedesktop/hostname1",
2066 "org.freedesktop.hostname1",
2067 "GetProductUUID",
2068 get_product_uuid_handler,
2069 m,
2070 "b",
2071 false);
2072 if (r < 0)
2073 return log_warning_errno(r, "Failed to get product UUID: %m");
2074
2075 return 0;
2076 }