]>
git.ipfire.org Git - thirdparty/systemd.git/blob - src/nspawn/nspawn-register.c
1 /* SPDX-License-Identifier: LGPL-2.1+ */
6 #include "bus-unit-util.h"
8 #include "bus-wait-for-jobs.h"
9 #include "nspawn-register.h"
11 #include "stat-util.h"
15 static int append_machine_properties(
26 r
= sd_bus_message_append(m
, "(sv)", "DevicePolicy", "s", "closed");
28 return bus_log_create_error(r
);
30 /* If you make changes here, also make sure to update systemd-nspawn@.service, to keep the device policies in
31 * sync regardless if we are run with or without the --keep-unit switch. */
32 r
= sd_bus_message_append(m
, "(sv)", "DeviceAllow", "a(ss)", 2,
33 /* Allow the container to
34 * access and create the API
35 * device nodes, so that
36 * PrivateDevices= in the
39 "/dev/net/tun", "rwm",
40 /* Allow the container
41 * access to ptys. However,
43 * container to ever create
44 * these device nodes. */
47 return bus_log_create_error(r
);
49 for (j
= 0; j
< n_mounts
; j
++) {
50 CustomMount
*cm
= mounts
+ j
;
52 if (cm
->type
!= CUSTOM_MOUNT_BIND
)
55 r
= is_device_node(cm
->source
);
57 /* The bind source might only appear as the image is put together, hence don't complain */
58 log_debug_errno(r
, "Bind mount source %s not found, ignoring: %m", cm
->source
);
62 return log_error_errno(r
, "Failed to stat %s: %m", cm
->source
);
65 r
= sd_bus_message_append(m
, "(sv)", "DeviceAllow", "a(ss)", 1,
66 cm
->source
, cm
->read_only
? "r" : "rw");
68 return log_error_errno(r
, "Failed to append message arguments: %m");
72 if (kill_signal
!= 0) {
73 r
= sd_bus_message_append(m
, "(sv)", "KillSignal", "i", kill_signal
);
75 return bus_log_create_error(r
);
77 r
= sd_bus_message_append(m
, "(sv)", "KillMode", "s", "mixed");
79 return bus_log_create_error(r
);
85 static int append_controller_property(sd_bus
*bus
, sd_bus_message
*m
) {
92 r
= sd_bus_get_unique_name(bus
, &unique
);
94 return log_error_errno(r
, "Failed to get unique name: %m");
96 r
= sd_bus_message_append(m
, "(sv)", "Controller", "s", unique
);
98 return bus_log_create_error(r
);
103 int register_machine(
105 const char *machine_name
,
107 const char *directory
,
116 const char *service
) {
118 _cleanup_(sd_bus_error_free
) sd_bus_error error
= SD_BUS_ERROR_NULL
;
124 r
= sd_bus_call_method(
126 "org.freedesktop.machine1",
127 "/org/freedesktop/machine1",
128 "org.freedesktop.machine1.Manager",
129 "RegisterMachineWithNetwork",
134 SD_BUS_MESSAGE_APPEND_ID128(uuid
),
139 local_ifindex
> 0 ? 1 : 0, local_ifindex
);
141 _cleanup_(sd_bus_message_unrefp
) sd_bus_message
*m
= NULL
;
143 r
= sd_bus_message_new_method_call(
146 "org.freedesktop.machine1",
147 "/org/freedesktop/machine1",
148 "org.freedesktop.machine1.Manager",
149 "CreateMachineWithNetwork");
151 return bus_log_create_error(r
);
153 r
= sd_bus_message_append(
157 SD_BUS_MESSAGE_APPEND_ID128(uuid
),
162 local_ifindex
> 0 ? 1 : 0, local_ifindex
);
164 return bus_log_create_error(r
);
166 r
= sd_bus_message_open_container(m
, 'a', "(sv)");
168 return bus_log_create_error(r
);
170 if (!isempty(slice
)) {
171 r
= sd_bus_message_append(m
, "(sv)", "Slice", "s", slice
);
173 return bus_log_create_error(r
);
176 r
= append_controller_property(bus
, m
);
180 r
= append_machine_properties(
188 r
= bus_append_unit_property_assignment_many(m
, UNIT_SERVICE
, properties
);
192 r
= sd_bus_message_close_container(m
);
194 return bus_log_create_error(r
);
196 r
= sd_bus_call(bus
, m
, 0, &error
, NULL
);
200 return log_error_errno(r
, "Failed to register machine: %s", bus_error_message(&error
, r
));
205 int terminate_machine(
207 const char *machine_name
) {
209 _cleanup_(sd_bus_error_free
) sd_bus_error error
= SD_BUS_ERROR_NULL
;
214 r
= sd_bus_call_method(
216 "org.freedesktop.machine1",
217 "/org/freedesktop/machine1",
218 "org.freedesktop.machine1.Manager",
225 log_debug("Failed to terminate machine: %s", bus_error_message(&error
, r
));
232 const char *machine_name
,
240 _cleanup_(sd_bus_message_unrefp
) sd_bus_message
*m
= NULL
, *reply
= NULL
;
241 _cleanup_(sd_bus_error_free
) sd_bus_error error
= SD_BUS_ERROR_NULL
;
242 _cleanup_(bus_wait_for_jobs_freep
) BusWaitForJobs
*w
= NULL
;
243 _cleanup_free_
char *scope
= NULL
;
244 const char *description
, *object
;
249 r
= bus_wait_for_jobs_new(bus
, &w
);
251 return log_error_errno(r
, "Could not watch job: %m");
253 r
= unit_name_mangle_with_suffix(machine_name
, 0, ".scope", &scope
);
255 return log_error_errno(r
, "Failed to mangle scope name: %m");
257 r
= sd_bus_message_new_method_call(
260 "org.freedesktop.systemd1",
261 "/org/freedesktop/systemd1",
262 "org.freedesktop.systemd1.Manager",
263 "StartTransientUnit");
265 return bus_log_create_error(r
);
267 r
= sd_bus_message_append(m
, "ss", scope
, "fail");
269 return bus_log_create_error(r
);
272 r
= sd_bus_message_open_container(m
, 'a', "(sv)");
274 return bus_log_create_error(r
);
276 description
= strjoina("Container ", machine_name
);
278 r
= sd_bus_message_append(m
, "(sv)(sv)(sv)(sv)(sv)(sv)",
279 "PIDs", "au", 1, pid
,
280 "Description", "s", description
,
282 "CollectMode", "s", "inactive-or-failed",
284 "Slice", "s", isempty(slice
) ? SPECIAL_MACHINE_SLICE
: slice
);
286 return bus_log_create_error(r
);
288 r
= append_controller_property(bus
, m
);
292 r
= append_machine_properties(
300 r
= bus_append_unit_property_assignment_many(m
, UNIT_SCOPE
, properties
);
304 r
= sd_bus_message_close_container(m
);
306 return bus_log_create_error(r
);
308 /* No auxiliary units */
309 r
= sd_bus_message_append(
314 return bus_log_create_error(r
);
316 r
= sd_bus_call(bus
, m
, 0, &error
, &reply
);
318 return log_error_errno(r
, "Failed to allocate scope: %s", bus_error_message(&error
, r
));
320 r
= sd_bus_message_read(reply
, "o", &object
);
322 return bus_log_parse_error(r
);
324 r
= bus_wait_for_jobs_one(w
, object
, false);
333 const char *machine_name
) {
335 _cleanup_(sd_bus_error_free
) sd_bus_error error
= SD_BUS_ERROR_NULL
;
336 _cleanup_free_
char *scope
= NULL
;
339 r
= unit_name_mangle_with_suffix(machine_name
, 0, ".scope", &scope
);
341 return log_error_errno(r
, "Failed to mangle scope name: %m");
343 r
= sd_bus_call_method(
345 "org.freedesktop.systemd1",
346 "/org/freedesktop/systemd1",
347 "org.freedesktop.systemd1.Manager",
354 log_debug_errno(r
, "Failed to abandon scope '%s', ignoring: %s", scope
, bus_error_message(&error
, r
));
355 sd_bus_error_free(&error
);
358 r
= sd_bus_call_method(
360 "org.freedesktop.systemd1",
361 "/org/freedesktop/systemd1",
362 "org.freedesktop.systemd1.Manager",
371 log_debug_errno(r
, "Failed to SIGKILL scope '%s', ignoring: %s", scope
, bus_error_message(&error
, r
));
372 sd_bus_error_free(&error
);
375 r
= sd_bus_call_method(
377 "org.freedesktop.systemd1",
378 "/org/freedesktop/systemd1",
379 "org.freedesktop.systemd1.Manager",
386 log_debug_errno(r
, "Failed to drop reference to scope '%s', ignoring: %s", scope
, bus_error_message(&error
, r
));