]> git.ipfire.org Git - thirdparty/systemd.git/blob - src/resolve/resolvectl.c
projects / thirdparty / systemd.git / blob
? search:
summary | shortlog | log | commit | commitdiff | tree
blame | history | raw | HEAD
tree-wide: use IOVEC_MAKE() at many places
[thirdparty/systemd.git] / src / resolve / resolvectl.c
1 /* SPDX-License-Identifier: LGPL-2.1+ */
2
3 #include <getopt.h>
4 #include <net/if.h>
5
6 #include "sd-bus.h"
7 #include "sd-netlink.h"
8
9 #include "af-list.h"
10 #include "alloc-util.h"
11 #include "bus-common-errors.h"
12 #include "bus-error.h"
13 #include "bus-util.h"
14 #include "dns-domain.h"
15 #include "escape.h"
16 #include "gcrypt-util.h"
17 #include "in-addr-util.h"
18 #include "main-func.h"
19 #include "netlink-util.h"
20 #include "pager.h"
21 #include "parse-util.h"
22 #include "pretty-print.h"
23 #include "resolvconf-compat.h"
24 #include "resolvectl.h"
25 #include "resolved-def.h"
26 #include "resolved-dns-packet.h"
27 #include "string-table.h"
28 #include "strv.h"
29 #include "terminal-util.h"
30 #include "verbs.h"
31
32 static int arg_family = AF_UNSPEC;
33 static int arg_ifindex = 0;
34 static char *arg_ifname = NULL;
35 static uint16_t arg_type = 0;
36 static uint16_t arg_class = 0;
37 static bool arg_legend = true;
38 static uint64_t arg_flags = 0;
39 static PagerFlags arg_pager_flags = 0;
40 bool arg_ifindex_permissive = false; /* If true, don't generate an error if the specified interface index doesn't exist */
41 static const char *arg_service_family = NULL;
42
43 typedef enum RawType {
44 RAW_NONE,
45 RAW_PAYLOAD,
46 RAW_PACKET,
47 } RawType;
48 static RawType arg_raw = RAW_NONE;
49
50 ExecutionMode arg_mode = MODE_RESOLVE_HOST;
51
52 char **arg_set_dns = NULL;
53 char **arg_set_domain = NULL;
54 static const char *arg_set_llmnr = NULL;
55 static const char *arg_set_mdns = NULL;
56 static const char *arg_set_dns_over_tls = NULL;
57 static const char *arg_set_dnssec = NULL;
58 static char **arg_set_nta = NULL;
59
60 STATIC_DESTRUCTOR_REGISTER(arg_ifname, freep);
61 STATIC_DESTRUCTOR_REGISTER(arg_set_dns, strv_freep);
62 STATIC_DESTRUCTOR_REGISTER(arg_set_domain, strv_freep);
63 STATIC_DESTRUCTOR_REGISTER(arg_set_nta, strv_freep);
64
65 typedef enum StatusMode {
66 STATUS_ALL,
67 STATUS_DNS,
68 STATUS_DOMAIN,
69 STATUS_LLMNR,
70 STATUS_MDNS,
71 STATUS_PRIVATE,
72 STATUS_DNSSEC,
73 STATUS_NTA,
74 } StatusMode;
75
76 static int parse_ifindex_and_warn(const char *s) {
77 int ifi;
78
79 assert(s);
80
81 if (parse_ifindex(s, &ifi) < 0) {
82 ifi = if_nametoindex(s);
83 if (ifi <= 0)
84 return log_error_errno(errno, "Unknown interface '%s': %m", s);
85 }
86
87 return ifi;
88 }
89
90 int ifname_mangle(const char *s, bool allow_loopback) {
91 _cleanup_free_ char *iface = NULL;
92 const char *dot;
93 int r;
94
95 assert(s);
96
97 if (arg_ifname) {
98 assert(arg_ifindex >= 0);
99
100 if (!allow_loopback && arg_ifindex == LOOPBACK_IFINDEX)
101 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
102 "Interface can't be the loopback interface (lo). Sorry.");
103
104 return 1;
105 }
106
107 dot = strchr(s, '.');
108 if (dot) {
109 iface = strndup(s, dot - s);
110 if (!iface)
111 return log_oom();
112
113 log_debug("Ignoring protocol specifier '%s'.", dot + 1);
114 } else {
115 iface = strdup(s);
116 if (!iface)
117 return log_oom();
118 }
119
120 if (parse_ifindex(iface, &r) < 0) {
121 r = if_nametoindex(iface);
122 if (r <= 0) {
123 if (errno == ENODEV && arg_ifindex_permissive) {
124 log_debug("Interface '%s' not found, but -f specified, ignoring.", iface);
125 return 0; /* done */
126 }
127
128 return log_error_errno(errno, "Unknown interface '%s': %m", iface);
129 }
130 }
131
132 if (!allow_loopback && r == LOOPBACK_IFINDEX)
133 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
134 "Interface can't be the loopback interface (lo). Sorry.");
135
136 arg_ifindex = r;
137 arg_ifname = TAKE_PTR(iface);
138
139 return 1;
140 }
141
142 static void print_source(uint64_t flags, usec_t rtt) {
143 char rtt_str[FORMAT_TIMESTAMP_MAX];
144
145 if (!arg_legend)
146 return;
147
148 if (flags == 0)
149 return;
150
151 fputs("\n-- Information acquired via", stdout);
152
153 if (flags != 0)
154 printf(" protocol%s%s%s%s%s",
155 flags & SD_RESOLVED_DNS ? " DNS" :"",
156 flags & SD_RESOLVED_LLMNR_IPV4 ? " LLMNR/IPv4" : "",
157 flags & SD_RESOLVED_LLMNR_IPV6 ? " LLMNR/IPv6" : "",
158 flags & SD_RESOLVED_MDNS_IPV4 ? " mDNS/IPv4" : "",
159 flags & SD_RESOLVED_MDNS_IPV6 ? " mDNS/IPv6" : "");
160
161 assert_se(format_timespan(rtt_str, sizeof(rtt_str), rtt, 100));
162
163 printf(" in %s", rtt_str);
164
165 fputc('.', stdout);
166 fputc('\n', stdout);
167
168 printf("-- Data is authenticated: %s\n", yes_no(flags & SD_RESOLVED_AUTHENTICATED));
169 }
170
171 static int resolve_host(sd_bus *bus, const char *name) {
172 _cleanup_(sd_bus_message_unrefp) sd_bus_message *req = NULL, *reply = NULL;
173 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
174 const char *canonical = NULL;
175 unsigned c = 0;
176 uint64_t flags;
177 usec_t ts;
178 int r;
179
180 assert(name);
181
182 log_debug("Resolving %s (family %s, interface %s).", name, af_to_name(arg_family) ?: "*", isempty(arg_ifname) ? "*" : arg_ifname);
183
184 r = sd_bus_message_new_method_call(
185 bus,
186 &req,
187 "org.freedesktop.resolve1",
188 "/org/freedesktop/resolve1",
189 "org.freedesktop.resolve1.Manager",
190 "ResolveHostname");
191 if (r < 0)
192 return bus_log_create_error(r);
193
194 r = sd_bus_message_append(req, "isit", arg_ifindex, name, arg_family, arg_flags);
195 if (r < 0)
196 return bus_log_create_error(r);
197
198 ts = now(CLOCK_MONOTONIC);
199
200 r = sd_bus_call(bus, req, SD_RESOLVED_QUERY_TIMEOUT_USEC, &error, &reply);
201 if (r < 0)
202 return log_error_errno(r, "%s: resolve call failed: %s", name, bus_error_message(&error, r));
203
204 ts = now(CLOCK_MONOTONIC) - ts;
205
206 r = sd_bus_message_enter_container(reply, 'a', "(iiay)");
207 if (r < 0)
208 return bus_log_parse_error(r);
209
210 while ((r = sd_bus_message_enter_container(reply, 'r', "iiay")) > 0) {
211 _cleanup_free_ char *pretty = NULL;
212 char ifname[IF_NAMESIZE] = "";
213 int ifindex, family;
214 const void *a;
215 size_t sz;
216
217 assert_cc(sizeof(int) == sizeof(int32_t));
218
219 r = sd_bus_message_read(reply, "ii", &ifindex, &family);
220 if (r < 0)
221 return bus_log_parse_error(r);
222
223 r = sd_bus_message_read_array(reply, 'y', &a, &sz);
224 if (r < 0)
225 return bus_log_parse_error(r);
226
227 r = sd_bus_message_exit_container(reply);
228 if (r < 0)
229 return bus_log_parse_error(r);
230
231 if (!IN_SET(family, AF_INET, AF_INET6)) {
232 log_debug("%s: skipping entry with family %d (%s)", name, family, af_to_name(family) ?: "unknown");
233 continue;
234 }
235
236 if (sz != FAMILY_ADDRESS_SIZE(family)) {
237 log_error("%s: systemd-resolved returned address of invalid size %zu for family %s", name, sz, af_to_name(family) ?: "unknown");
238 return -EINVAL;
239 }
240
241 if (ifindex > 0 && !if_indextoname(ifindex, ifname))
242 log_warning_errno(errno, "Failed to resolve interface name for index %i: %m", ifindex);
243
244 r = in_addr_ifindex_to_string(family, a, ifindex, &pretty);
245 if (r < 0)
246 return log_error_errno(r, "Failed to print address for %s: %m", name);
247
248 printf("%*s%s %s%s%s\n",
249 (int) strlen(name), c == 0 ? name : "", c == 0 ? ":" : " ",
250 pretty,
251 isempty(ifname) ? "" : "%", ifname);
252
253 c++;
254 }
255 if (r < 0)
256 return bus_log_parse_error(r);
257
258 r = sd_bus_message_exit_container(reply);
259 if (r < 0)
260 return bus_log_parse_error(r);
261
262 r = sd_bus_message_read(reply, "st", &canonical, &flags);
263 if (r < 0)
264 return bus_log_parse_error(r);
265
266 if (!streq(name, canonical))
267 printf("%*s%s (%s)\n",
268 (int) strlen(name), c == 0 ? name : "", c == 0 ? ":" : " ",
269 canonical);
270
271 if (c == 0) {
272 log_error("%s: no addresses found", name);
273 return -ESRCH;
274 }
275
276 print_source(flags, ts);
277
278 return 0;
279 }
280
281 static int resolve_address(sd_bus *bus, int family, const union in_addr_union *address, int ifindex) {
282 _cleanup_(sd_bus_message_unrefp) sd_bus_message *req = NULL, *reply = NULL;
283 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
284 _cleanup_free_ char *pretty = NULL;
285 char ifname[IF_NAMESIZE] = "";
286 uint64_t flags;
287 unsigned c = 0;
288 usec_t ts;
289 int r;
290
291 assert(bus);
292 assert(IN_SET(family, AF_INET, AF_INET6));
293 assert(address);
294
295 if (ifindex <= 0)
296 ifindex = arg_ifindex;
297
298 r = in_addr_ifindex_to_string(family, address, ifindex, &pretty);
299 if (r < 0)
300 return log_oom();
301
302 if (ifindex > 0 && !if_indextoname(ifindex, ifname))
303 return log_error_errno(errno, "Failed to resolve interface name for index %i: %m", ifindex);
304
305 log_debug("Resolving %s%s%s.", pretty, isempty(ifname) ? "" : "%", ifname);
306
307 r = sd_bus_message_new_method_call(
308 bus,
309 &req,
310 "org.freedesktop.resolve1",
311 "/org/freedesktop/resolve1",
312 "org.freedesktop.resolve1.Manager",
313 "ResolveAddress");
314 if (r < 0)
315 return bus_log_create_error(r);
316
317 r = sd_bus_message_append(req, "ii", ifindex, family);
318 if (r < 0)
319 return bus_log_create_error(r);
320
321 r = sd_bus_message_append_array(req, 'y', address, FAMILY_ADDRESS_SIZE(family));
322 if (r < 0)
323 return bus_log_create_error(r);
324
325 r = sd_bus_message_append(req, "t", arg_flags);
326 if (r < 0)
327 return bus_log_create_error(r);
328
329 ts = now(CLOCK_MONOTONIC);
330
331 r = sd_bus_call(bus, req, SD_RESOLVED_QUERY_TIMEOUT_USEC, &error, &reply);
332 if (r < 0)
333 return log_error_errno(r, "%s: resolve call failed: %s", pretty, bus_error_message(&error, r));
334
335 ts = now(CLOCK_MONOTONIC) - ts;
336
337 r = sd_bus_message_enter_container(reply, 'a', "(is)");
338 if (r < 0)
339 return bus_log_create_error(r);
340
341 while ((r = sd_bus_message_enter_container(reply, 'r', "is")) > 0) {
342 const char *n;
343
344 assert_cc(sizeof(int) == sizeof(int32_t));
345
346 r = sd_bus_message_read(reply, "is", &ifindex, &n);
347 if (r < 0)
348 return r;
349
350 r = sd_bus_message_exit_container(reply);
351 if (r < 0)
352 return r;
353
354 ifname[0] = 0;
355 if (ifindex > 0 && !if_indextoname(ifindex, ifname))
356 log_warning_errno(errno, "Failed to resolve interface name for index %i: %m", ifindex);
357
358 printf("%*s%*s%*s%s %s\n",
359 (int) strlen(pretty), c == 0 ? pretty : "",
360 isempty(ifname) ? 0 : 1, c > 0 || isempty(ifname) ? "" : "%",
361 (int) strlen(ifname), c == 0 ? ifname : "",
362 c == 0 ? ":" : " ",
363 n);
364
365 c++;
366 }
367 if (r < 0)
368 return bus_log_parse_error(r);
369
370 r = sd_bus_message_exit_container(reply);
371 if (r < 0)
372 return bus_log_parse_error(r);
373
374 r = sd_bus_message_read(reply, "t", &flags);
375 if (r < 0)
376 return bus_log_parse_error(r);
377
378 if (c == 0) {
379 log_error("%s: no names found", pretty);
380 return -ESRCH;
381 }
382
383 print_source(flags, ts);
384
385 return 0;
386 }
387
388 static int output_rr_packet(const void *d, size_t l, int ifindex) {
389 _cleanup_(dns_resource_record_unrefp) DnsResourceRecord *rr = NULL;
390 _cleanup_(dns_packet_unrefp) DnsPacket *p = NULL;
391 int r;
392 char ifname[IF_NAMESIZE] = "";
393
394 r = dns_packet_new(&p, DNS_PROTOCOL_DNS, 0, DNS_PACKET_SIZE_MAX);
395 if (r < 0)
396 return log_oom();
397
398 p->refuse_compression = true;
399
400 r = dns_packet_append_blob(p, d, l, NULL);
401 if (r < 0)
402 return log_oom();
403
404 r = dns_packet_read_rr(p, &rr, NULL, NULL);
405 if (r < 0)
406 return log_error_errno(r, "Failed to parse RR: %m");
407
408 if (arg_raw == RAW_PAYLOAD) {
409 void *data;
410 ssize_t k;
411
412 k = dns_resource_record_payload(rr, &data);
413 if (k < 0)
414 return log_error_errno(k, "Cannot dump RR: %m");
415 fwrite(data, 1, k, stdout);
416 } else {
417 const char *s;
418
419 s = dns_resource_record_to_string(rr);
420 if (!s)
421 return log_oom();
422
423 if (ifindex > 0 && !if_indextoname(ifindex, ifname))
424 log_warning_errno(errno, "Failed to resolve interface name for index %i: %m", ifindex);
425
426 printf("%s%s%s\n", s, isempty(ifname) ? "" : " # interface ", ifname);
427 }
428
429 return 0;
430 }
431
432 static int resolve_record(sd_bus *bus, const char *name, uint16_t class, uint16_t type, bool warn_missing) {
433 _cleanup_(sd_bus_message_unrefp) sd_bus_message *req = NULL, *reply = NULL;
434 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
435 unsigned n = 0;
436 uint64_t flags;
437 int r;
438 usec_t ts;
439 bool needs_authentication = false;
440
441 assert(name);
442
443 log_debug("Resolving %s %s %s (interface %s).", name, dns_class_to_string(class), dns_type_to_string(type), isempty(arg_ifname) ? "*" : arg_ifname);
444
445 r = sd_bus_message_new_method_call(
446 bus,
447 &req,
448 "org.freedesktop.resolve1",
449 "/org/freedesktop/resolve1",
450 "org.freedesktop.resolve1.Manager",
451 "ResolveRecord");
452 if (r < 0)
453 return bus_log_create_error(r);
454
455 r = sd_bus_message_append(req, "isqqt", arg_ifindex, name, class, type, arg_flags);
456 if (r < 0)
457 return bus_log_create_error(r);
458
459 ts = now(CLOCK_MONOTONIC);
460
461 r = sd_bus_call(bus, req, SD_RESOLVED_QUERY_TIMEOUT_USEC, &error, &reply);
462 if (r < 0) {
463 if (warn_missing || r != -ENXIO)
464 log_error("%s: resolve call failed: %s", name, bus_error_message(&error, r));
465 return r;
466 }
467
468 ts = now(CLOCK_MONOTONIC) - ts;
469
470 r = sd_bus_message_enter_container(reply, 'a', "(iqqay)");
471 if (r < 0)
472 return bus_log_parse_error(r);
473
474 while ((r = sd_bus_message_enter_container(reply, 'r', "iqqay")) > 0) {
475 uint16_t c, t;
476 int ifindex;
477 const void *d;
478 size_t l;
479
480 assert_cc(sizeof(int) == sizeof(int32_t));
481
482 r = sd_bus_message_read(reply, "iqq", &ifindex, &c, &t);
483 if (r < 0)
484 return bus_log_parse_error(r);
485
486 r = sd_bus_message_read_array(reply, 'y', &d, &l);
487 if (r < 0)
488 return bus_log_parse_error(r);
489
490 r = sd_bus_message_exit_container(reply);
491 if (r < 0)
492 return bus_log_parse_error(r);
493
494 if (arg_raw == RAW_PACKET) {
495 uint64_t u64 = htole64(l);
496
497 fwrite(&u64, sizeof(u64), 1, stdout);
498 fwrite(d, 1, l, stdout);
499 } else {
500 r = output_rr_packet(d, l, ifindex);
501 if (r < 0)
502 return r;
503 }
504
505 if (dns_type_needs_authentication(t))
506 needs_authentication = true;
507
508 n++;
509 }
510 if (r < 0)
511 return bus_log_parse_error(r);
512
513 r = sd_bus_message_exit_container(reply);
514 if (r < 0)
515 return bus_log_parse_error(r);
516
517 r = sd_bus_message_read(reply, "t", &flags);
518 if (r < 0)
519 return bus_log_parse_error(r);
520
521 if (n == 0) {
522 if (warn_missing)
523 log_error("%s: no records found", name);
524 return -ESRCH;
525 }
526
527 print_source(flags, ts);
528
529 if ((flags & SD_RESOLVED_AUTHENTICATED) == 0 && needs_authentication) {
530 fflush(stdout);
531
532 fprintf(stderr, "\n%s"
533 "WARNING: The resources shown contain cryptographic key data which could not be\n"
534 " authenticated. It is not suitable to authenticate any communication.\n"
535 " This is usually indication that DNSSEC authentication was not enabled\n"
536 " or is not available for the selected protocol or DNS servers.%s\n",
537 ansi_highlight_red(),
538 ansi_normal());
539 }
540
541 return 0;
542 }
543
544 static int resolve_rfc4501(sd_bus *bus, const char *name) {
545 uint16_t type = 0, class = 0;
546 const char *p, *q, *n;
547 int r;
548
549 assert(bus);
550 assert(name);
551 assert(startswith(name, "dns:"));
552
553 /* Parse RFC 4501 dns: URIs */
554
555 p = name + 4;
556
557 if (p[0] == '/') {
558 const char *e;
559
560 if (p[1] != '/')
561 goto invalid;
562
563 e = strchr(p + 2, '/');
564 if (!e)
565 goto invalid;
566
567 if (e != p + 2)
568 log_warning("DNS authority specification not supported; ignoring specified authority.");
569
570 p = e + 1;
571 }
572
573 q = strchr(p, '?');
574 if (q) {
575 n = strndupa(p, q - p);
576 q++;
577
578 for (;;) {
579 const char *f;
580
581 f = startswith_no_case(q, "class=");
582 if (f) {
583 _cleanup_free_ char *t = NULL;
584 const char *e;
585
586 if (class != 0)
587 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
588 "DNS class specified twice.");
589
590 e = strchrnul(f, ';');
591 t = strndup(f, e - f);
592 if (!t)
593 return log_oom();
594
595 r = dns_class_from_string(t);
596 if (r < 0)
597 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
598 "Unknown DNS class %s.", t);
599
600 class = r;
601
602 if (*e == ';') {
603 q = e + 1;
604 continue;
605 }
606
607 break;
608 }
609
610 f = startswith_no_case(q, "type=");
611 if (f) {
612 _cleanup_free_ char *t = NULL;
613 const char *e;
614
615 if (type != 0)
616 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
617 "DNS type specified twice.");
618
619 e = strchrnul(f, ';');
620 t = strndup(f, e - f);
621 if (!t)
622 return log_oom();
623
624 r = dns_type_from_string(t);
625 if (r < 0)
626 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
627 "Unknown DNS type %s.", t);
628
629 type = r;
630
631 if (*e == ';') {
632 q = e + 1;
633 continue;
634 }
635
636 break;
637 }
638
639 goto invalid;
640 }
641 } else
642 n = p;
643
644 if (class == 0)
645 class = arg_class ?: DNS_CLASS_IN;
646 if (type == 0)
647 type = arg_type ?: DNS_TYPE_A;
648
649 return resolve_record(bus, n, class, type, true);
650
651 invalid:
652 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
653 "Invalid DNS URI: %s", name);
654 }
655
656 static int verb_query(int argc, char **argv, void *userdata) {
657 sd_bus *bus = userdata;
658 char **p;
659 int q, r = 0;
660
661 if (arg_type != 0)
662 STRV_FOREACH(p, argv + 1) {
663 q = resolve_record(bus, *p, arg_class, arg_type, true);
664 if (q < 0)
665 r = q;
666 }
667
668 else
669 STRV_FOREACH(p, argv + 1) {
670 if (startswith(*p, "dns:"))
671 q = resolve_rfc4501(bus, *p);
672 else {
673 int family, ifindex;
674 union in_addr_union a;
675
676 q = in_addr_ifindex_from_string_auto(*p, &family, &a, &ifindex);
677 if (q >= 0)
678 q = resolve_address(bus, family, &a, ifindex);
679 else
680 q = resolve_host(bus, *p);
681 }
682 if (q < 0)
683 r = q;
684 }
685
686 return r;
687 }
688
689 static int resolve_service(sd_bus *bus, const char *name, const char *type, const char *domain) {
690 const char *canonical_name, *canonical_type, *canonical_domain;
691 _cleanup_(sd_bus_message_unrefp) sd_bus_message *req = NULL, *reply = NULL;
692 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
693 size_t indent, sz;
694 uint64_t flags;
695 const char *p;
696 unsigned c;
697 usec_t ts;
698 int r;
699
700 assert(bus);
701 assert(domain);
702
703 name = empty_to_null(name);
704 type = empty_to_null(type);
705
706 if (name)
707 log_debug("Resolving service \"%s\" of type %s in %s (family %s, interface %s).", name, type, domain, af_to_name(arg_family) ?: "*", isempty(arg_ifname) ? "*" : arg_ifname);
708 else if (type)
709 log_debug("Resolving service type %s of %s (family %s, interface %s).", type, domain, af_to_name(arg_family) ?: "*", isempty(arg_ifname) ? "*" : arg_ifname);
710 else
711 log_debug("Resolving service type %s (family %s, interface %s).", domain, af_to_name(arg_family) ?: "*", isempty(arg_ifname) ? "*" : arg_ifname);
712
713 r = sd_bus_message_new_method_call(
714 bus,
715 &req,
716 "org.freedesktop.resolve1",
717 "/org/freedesktop/resolve1",
718 "org.freedesktop.resolve1.Manager",
719 "ResolveService");
720 if (r < 0)
721 return bus_log_create_error(r);
722
723 r = sd_bus_message_append(req, "isssit", arg_ifindex, name, type, domain, arg_family, arg_flags);
724 if (r < 0)
725 return bus_log_create_error(r);
726
727 ts = now(CLOCK_MONOTONIC);
728
729 r = sd_bus_call(bus, req, SD_RESOLVED_QUERY_TIMEOUT_USEC, &error, &reply);
730 if (r < 0)
731 return log_error_errno(r, "Resolve call failed: %s", bus_error_message(&error, r));
732
733 ts = now(CLOCK_MONOTONIC) - ts;
734
735 r = sd_bus_message_enter_container(reply, 'a', "(qqqsa(iiay)s)");
736 if (r < 0)
737 return bus_log_parse_error(r);
738
739 indent =
740 (name ? strlen(name) + 1 : 0) +
741 (type ? strlen(type) + 1 : 0) +
742 strlen(domain) + 2;
743
744 c = 0;
745 while ((r = sd_bus_message_enter_container(reply, 'r', "qqqsa(iiay)s")) > 0) {
746 uint16_t priority, weight, port;
747 const char *hostname, *canonical;
748
749 r = sd_bus_message_read(reply, "qqqs", &priority, &weight, &port, &hostname);
750 if (r < 0)
751 return bus_log_parse_error(r);
752
753 if (name)
754 printf("%*s%s", (int) strlen(name), c == 0 ? name : "", c == 0 ? "/" : " ");
755 if (type)
756 printf("%*s%s", (int) strlen(type), c == 0 ? type : "", c == 0 ? "/" : " ");
757
758 printf("%*s%s %s:%u [priority=%u, weight=%u]\n",
759 (int) strlen(domain), c == 0 ? domain : "",
760 c == 0 ? ":" : " ",
761 hostname, port,
762 priority, weight);
763
764 r = sd_bus_message_enter_container(reply, 'a', "(iiay)");
765 if (r < 0)
766 return bus_log_parse_error(r);
767
768 while ((r = sd_bus_message_enter_container(reply, 'r', "iiay")) > 0) {
769 _cleanup_free_ char *pretty = NULL;
770 char ifname[IF_NAMESIZE] = "";
771 int ifindex, family;
772 const void *a;
773
774 assert_cc(sizeof(int) == sizeof(int32_t));
775
776 r = sd_bus_message_read(reply, "ii", &ifindex, &family);
777 if (r < 0)
778 return bus_log_parse_error(r);
779
780 r = sd_bus_message_read_array(reply, 'y', &a, &sz);
781 if (r < 0)
782 return bus_log_parse_error(r);
783
784 r = sd_bus_message_exit_container(reply);
785 if (r < 0)
786 return bus_log_parse_error(r);
787
788 if (!IN_SET(family, AF_INET, AF_INET6)) {
789 log_debug("%s: skipping entry with family %d (%s)", name, family, af_to_name(family) ?: "unknown");
790 continue;
791 }
792
793 if (sz != FAMILY_ADDRESS_SIZE(family)) {
794 log_error("%s: systemd-resolved returned address of invalid size %zu for family %s", name, sz, af_to_name(family) ?: "unknown");
795 return -EINVAL;
796 }
797
798 if (ifindex > 0 && !if_indextoname(ifindex, ifname))
799 log_warning_errno(errno, "Failed to resolve interface name for index %i: %m", ifindex);
800
801 r = in_addr_to_string(family, a, &pretty);
802 if (r < 0)
803 return log_error_errno(r, "Failed to print address for %s: %m", name);
804
805 printf("%*s%s%s%s\n", (int) indent, "", pretty, isempty(ifname) ? "" : "%s", ifname);
806 }
807 if (r < 0)
808 return bus_log_parse_error(r);
809
810 r = sd_bus_message_exit_container(reply);
811 if (r < 0)
812 return bus_log_parse_error(r);
813
814 r = sd_bus_message_read(reply, "s", &canonical);
815 if (r < 0)
816 return bus_log_parse_error(r);
817
818 if (!streq(hostname, canonical))
819 printf("%*s(%s)\n", (int) indent, "", canonical);
820
821 r = sd_bus_message_exit_container(reply);
822 if (r < 0)
823 return bus_log_parse_error(r);
824
825 c++;
826 }
827 if (r < 0)
828 return bus_log_parse_error(r);
829
830 r = sd_bus_message_exit_container(reply);
831 if (r < 0)
832 return bus_log_parse_error(r);
833
834 r = sd_bus_message_enter_container(reply, 'a', "ay");
835 if (r < 0)
836 return bus_log_parse_error(r);
837
838 while ((r = sd_bus_message_read_array(reply, 'y', (const void**) &p, &sz)) > 0) {
839 _cleanup_free_ char *escaped = NULL;
840
841 escaped = cescape_length(p, sz);
842 if (!escaped)
843 return log_oom();
844
845 printf("%*s%s\n", (int) indent, "", escaped);
846 }
847 if (r < 0)
848 return bus_log_parse_error(r);
849
850 r = sd_bus_message_exit_container(reply);
851 if (r < 0)
852 return bus_log_parse_error(r);
853
854 r = sd_bus_message_read(reply, "ssst", &canonical_name, &canonical_type, &canonical_domain, &flags);
855 if (r < 0)
856 return bus_log_parse_error(r);
857
858 canonical_name = empty_to_null(canonical_name);
859 canonical_type = empty_to_null(canonical_type);
860
861 if (!streq_ptr(name, canonical_name) ||
862 !streq_ptr(type, canonical_type) ||
863 !streq_ptr(domain, canonical_domain)) {
864
865 printf("%*s(", (int) indent, "");
866
867 if (canonical_name)
868 printf("%s/", canonical_name);
869 if (canonical_type)
870 printf("%s/", canonical_type);
871
872 printf("%s)\n", canonical_domain);
873 }
874
875 print_source(flags, ts);
876
877 return 0;
878 }
879
880 static int verb_service(int argc, char **argv, void *userdata) {
881 sd_bus *bus = userdata;
882
883 if (argc == 2)
884 return resolve_service(bus, NULL, NULL, argv[1]);
885 else if (argc == 3)
886 return resolve_service(bus, NULL, argv[1], argv[2]);
887 else
888 return resolve_service(bus, argv[1], argv[2], argv[3]);
889 }
890
891 static int resolve_openpgp(sd_bus *bus, const char *address) {
892 const char *domain, *full;
893 int r;
894 _cleanup_free_ char *hashed = NULL;
895
896 assert(bus);
897 assert(address);
898
899 domain = strrchr(address, '@');
900 if (!domain)
901 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
902 "Address does not contain '@': \"%s\"", address);
903 if (domain == address || domain[1] == '\0')
904 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
905 "Address starts or ends with '@': \"%s\"", address);
906 domain++;
907
908 r = string_hashsum_sha256(address, domain - 1 - address, &hashed);
909 if (r < 0)
910 return log_error_errno(r, "Hashing failed: %m");
911
912 strshorten(hashed, 56);
913
914 full = strjoina(hashed, "._openpgpkey.", domain);
915 log_debug("Looking up \"%s\".", full);
916
917 r = resolve_record(bus, full,
918 arg_class ?: DNS_CLASS_IN,
919 arg_type ?: DNS_TYPE_OPENPGPKEY, false);
920
921 if (IN_SET(r, -ENXIO, -ESRCH)) { /* NXDOMAIN or NODATA? */
922 hashed = mfree(hashed);
923 r = string_hashsum_sha224(address, domain - 1 - address, &hashed);
924 if (r < 0)
925 return log_error_errno(r, "Hashing failed: %m");
926
927 full = strjoina(hashed, "._openpgpkey.", domain);
928 log_debug("Looking up \"%s\".", full);
929
930 return resolve_record(bus, full,
931 arg_class ?: DNS_CLASS_IN,
932 arg_type ?: DNS_TYPE_OPENPGPKEY, true);
933 }
934
935 return r;
936 }
937
938 static int verb_openpgp(int argc, char **argv, void *userdata) {
939 sd_bus *bus = userdata;
940 char **p;
941 int q, r = 0;
942
943 STRV_FOREACH(p, argv + 1) {
944 q = resolve_openpgp(bus, *p);
945 if (q < 0)
946 r = q;
947 }
948
949 return r;
950 }
951
952 static int resolve_tlsa(sd_bus *bus, const char *family, const char *address) {
953 const char *port;
954 uint16_t port_num = 443;
955 _cleanup_free_ char *full = NULL;
956 int r;
957
958 assert(bus);
959 assert(address);
960
961 port = strrchr(address, ':');
962 if (port) {
963 r = parse_ip_port(port + 1, &port_num);
964 if (r < 0)
965 return log_error_errno(r, "Invalid port \"%s\".", port + 1);
966
967 address = strndupa(address, port - address);
968 }
969
970 r = asprintf(&full, "_%u._%s.%s",
971 port_num,
972 family,
973 address);
974 if (r < 0)
975 return log_oom();
976
977 log_debug("Looking up \"%s\".", full);
978
979 return resolve_record(bus, full,
980 arg_class ?: DNS_CLASS_IN,
981 arg_type ?: DNS_TYPE_TLSA, true);
982 }
983
984 static bool service_family_is_valid(const char *s) {
985 return STR_IN_SET(s, "tcp", "udp", "sctp");
986 }
987
988 static int verb_tlsa(int argc, char **argv, void *userdata) {
989 sd_bus *bus = userdata;
990 char **p, **args = argv + 1;
991 const char *family = "tcp";
992 int q, r = 0;
993
994 if (service_family_is_valid(argv[1])) {
995 family = argv[1];
996 args++;
997 }
998
999 STRV_FOREACH(p, args) {
1000 q = resolve_tlsa(bus, family, *p);
1001 if (q < 0)
1002 r = q;
1003 }
1004
1005 return r;
1006 }
1007
1008 static int show_statistics(int argc, char **argv, void *userdata) {
1009 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1010 _cleanup_(sd_bus_message_unrefp) sd_bus_message *reply = NULL;
1011 sd_bus *bus = userdata;
1012 uint64_t n_current_transactions, n_total_transactions,
1013 cache_size, n_cache_hit, n_cache_miss,
1014 n_dnssec_secure, n_dnssec_insecure, n_dnssec_bogus, n_dnssec_indeterminate;
1015 int r, dnssec_supported;
1016
1017 assert(bus);
1018
1019 r = sd_bus_get_property_trivial(bus,
1020 "org.freedesktop.resolve1",
1021 "/org/freedesktop/resolve1",
1022 "org.freedesktop.resolve1.Manager",
1023 "DNSSECSupported",
1024 &error,
1025 'b',
1026 &dnssec_supported);
1027 if (r < 0)
1028 return log_error_errno(r, "Failed to get DNSSEC supported state: %s", bus_error_message(&error, r));
1029
1030 printf("DNSSEC supported by current servers: %s%s%s\n\n",
1031 ansi_highlight(),
1032 yes_no(dnssec_supported),
1033 ansi_normal());
1034
1035 r = sd_bus_get_property(bus,
1036 "org.freedesktop.resolve1",
1037 "/org/freedesktop/resolve1",
1038 "org.freedesktop.resolve1.Manager",
1039 "TransactionStatistics",
1040 &error,
1041 &reply,
1042 "(tt)");
1043 if (r < 0)
1044 return log_error_errno(r, "Failed to get transaction statistics: %s", bus_error_message(&error, r));
1045
1046 r = sd_bus_message_read(reply, "(tt)",
1047 &n_current_transactions,
1048 &n_total_transactions);
1049 if (r < 0)
1050 return bus_log_parse_error(r);
1051
1052 printf("%sTransactions%s\n"
1053 "Current Transactions: %" PRIu64 "\n"
1054 " Total Transactions: %" PRIu64 "\n",
1055 ansi_highlight(),
1056 ansi_normal(),
1057 n_current_transactions,
1058 n_total_transactions);
1059
1060 reply = sd_bus_message_unref(reply);
1061
1062 r = sd_bus_get_property(bus,
1063 "org.freedesktop.resolve1",
1064 "/org/freedesktop/resolve1",
1065 "org.freedesktop.resolve1.Manager",
1066 "CacheStatistics",
1067 &error,
1068 &reply,
1069 "(ttt)");
1070 if (r < 0)
1071 return log_error_errno(r, "Failed to get cache statistics: %s", bus_error_message(&error, r));
1072
1073 r = sd_bus_message_read(reply, "(ttt)",
1074 &cache_size,
1075 &n_cache_hit,
1076 &n_cache_miss);
1077 if (r < 0)
1078 return bus_log_parse_error(r);
1079
1080 printf("\n%sCache%s\n"
1081 " Current Cache Size: %" PRIu64 "\n"
1082 " Cache Hits: %" PRIu64 "\n"
1083 " Cache Misses: %" PRIu64 "\n",
1084 ansi_highlight(),
1085 ansi_normal(),
1086 cache_size,
1087 n_cache_hit,
1088 n_cache_miss);
1089
1090 reply = sd_bus_message_unref(reply);
1091
1092 r = sd_bus_get_property(bus,
1093 "org.freedesktop.resolve1",
1094 "/org/freedesktop/resolve1",
1095 "org.freedesktop.resolve1.Manager",
1096 "DNSSECStatistics",
1097 &error,
1098 &reply,
1099 "(tttt)");
1100 if (r < 0)
1101 return log_error_errno(r, "Failed to get DNSSEC statistics: %s", bus_error_message(&error, r));
1102
1103 r = sd_bus_message_read(reply, "(tttt)",
1104 &n_dnssec_secure,
1105 &n_dnssec_insecure,
1106 &n_dnssec_bogus,
1107 &n_dnssec_indeterminate);
1108 if (r < 0)
1109 return bus_log_parse_error(r);
1110
1111 printf("\n%sDNSSEC Verdicts%s\n"
1112 " Secure: %" PRIu64 "\n"
1113 " Insecure: %" PRIu64 "\n"
1114 " Bogus: %" PRIu64 "\n"
1115 " Indeterminate: %" PRIu64 "\n",
1116 ansi_highlight(),
1117 ansi_normal(),
1118 n_dnssec_secure,
1119 n_dnssec_insecure,
1120 n_dnssec_bogus,
1121 n_dnssec_indeterminate);
1122
1123 return 0;
1124 }
1125
1126 static int reset_statistics(int argc, char **argv, void *userdata) {
1127 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1128 sd_bus *bus = userdata;
1129 int r;
1130
1131 r = sd_bus_call_method(bus,
1132 "org.freedesktop.resolve1",
1133 "/org/freedesktop/resolve1",
1134 "org.freedesktop.resolve1.Manager",
1135 "ResetStatistics",
1136 &error,
1137 NULL,
1138 NULL);
1139 if (r < 0)
1140 return log_error_errno(r, "Failed to reset statistics: %s", bus_error_message(&error, r));
1141
1142 return 0;
1143 }
1144
1145 static int flush_caches(int argc, char **argv, void *userdata) {
1146 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1147 sd_bus *bus = userdata;
1148 int r;
1149
1150 r = sd_bus_call_method(bus,
1151 "org.freedesktop.resolve1",
1152 "/org/freedesktop/resolve1",
1153 "org.freedesktop.resolve1.Manager",
1154 "FlushCaches",
1155 &error,
1156 NULL,
1157 NULL);
1158 if (r < 0)
1159 return log_error_errno(r, "Failed to flush caches: %s", bus_error_message(&error, r));
1160
1161 return 0;
1162 }
1163
1164 static int reset_server_features(int argc, char **argv, void *userdata) {
1165 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1166 sd_bus *bus = userdata;
1167 int r;
1168
1169 r = sd_bus_call_method(bus,
1170 "org.freedesktop.resolve1",
1171 "/org/freedesktop/resolve1",
1172 "org.freedesktop.resolve1.Manager",
1173 "ResetServerFeatures",
1174 &error,
1175 NULL,
1176 NULL);
1177 if (r < 0)
1178 return log_error_errno(r, "Failed to reset server features: %s", bus_error_message(&error, r));
1179
1180 return 0;
1181 }
1182
1183 static int read_dns_server_one(sd_bus_message *m, bool with_ifindex, char **ret) {
1184 _cleanup_free_ char *pretty = NULL;
1185 int ifindex, family, r;
1186 const void *a;
1187 size_t sz;
1188
1189 assert(m);
1190 assert(ret);
1191
1192 r = sd_bus_message_enter_container(m, 'r', with_ifindex ? "iiay" : "iay");
1193 if (r <= 0)
1194 return r;
1195
1196 if (with_ifindex) {
1197 r = sd_bus_message_read(m, "i", &ifindex);
1198 if (r < 0)
1199 return r;
1200 }
1201
1202 r = sd_bus_message_read(m, "i", &family);
1203 if (r < 0)
1204 return r;
1205
1206 r = sd_bus_message_read_array(m, 'y', &a, &sz);
1207 if (r < 0)
1208 return r;
1209
1210 r = sd_bus_message_exit_container(m);
1211 if (r < 0)
1212 return r;
1213
1214 if (with_ifindex && ifindex != 0) {
1215 /* only show the global ones here */
1216 *ret = NULL;
1217 return 1;
1218 }
1219
1220 if (!IN_SET(family, AF_INET, AF_INET6)) {
1221 log_debug("Unexpected family, ignoring: %i", family);
1222
1223 *ret = NULL;
1224 return 1;
1225 }
1226
1227 if (sz != FAMILY_ADDRESS_SIZE(family)) {
1228 log_debug("Address size mismatch, ignoring.");
1229
1230 *ret = NULL;
1231 return 1;
1232 }
1233
1234 r = in_addr_to_string(family, a, &pretty);
1235 if (r < 0)
1236 return r;
1237
1238 *ret = TAKE_PTR(pretty);
1239
1240 return 1;
1241 }
1242
1243 static int map_link_dns_servers(sd_bus *bus, const char *member, sd_bus_message *m, sd_bus_error *error, void *userdata) {
1244 char ***l = userdata;
1245 int r;
1246
1247 assert(bus);
1248 assert(member);
1249 assert(m);
1250 assert(l);
1251
1252 r = sd_bus_message_enter_container(m, 'a', "(iay)");
1253 if (r < 0)
1254 return r;
1255
1256 for (;;) {
1257 char *pretty = NULL;
1258
1259 r = read_dns_server_one(m, false, &pretty);
1260 if (r < 0)
1261 return r;
1262 if (r == 0)
1263 break;
1264
1265 if (isempty(pretty))
1266 continue;
1267
1268 r = strv_consume(l, pretty);
1269 if (r < 0)
1270 return r;
1271 }
1272
1273 r = sd_bus_message_exit_container(m);
1274 if (r < 0)
1275 return r;
1276
1277 return 0;
1278 }
1279
1280 static int map_link_current_dns_server(sd_bus *bus, const char *member, sd_bus_message *m, sd_bus_error *error, void *userdata) {
1281 assert(m);
1282 assert(userdata);
1283
1284 return read_dns_server_one(m, false, userdata);
1285 }
1286
1287 static int read_domain_one(sd_bus_message *m, bool with_ifindex, char **ret) {
1288 _cleanup_free_ char *str = NULL;
1289 int ifindex, route_only, r;
1290 const char *domain;
1291
1292 assert(m);
1293 assert(ret);
1294
1295 if (with_ifindex)
1296 r = sd_bus_message_read(m, "(isb)", &ifindex, &domain, &route_only);
1297 else
1298 r = sd_bus_message_read(m, "(sb)", &domain, &route_only);
1299 if (r <= 0)
1300 return r;
1301
1302 if (with_ifindex && ifindex != 0) {
1303 /* only show the global ones here */
1304 *ret = NULL;
1305 return 1;
1306 }
1307
1308 if (route_only)
1309 str = strappend("~", domain);
1310 else
1311 str = strdup(domain);
1312 if (!str)
1313 return -ENOMEM;
1314
1315 *ret = TAKE_PTR(str);
1316
1317 return 1;
1318 }
1319
1320 static int map_link_domains(sd_bus *bus, const char *member, sd_bus_message *m, sd_bus_error *error, void *userdata) {
1321 char ***l = userdata;
1322 int r;
1323
1324 assert(bus);
1325 assert(member);
1326 assert(m);
1327 assert(l);
1328
1329 r = sd_bus_message_enter_container(m, 'a', "(sb)");
1330 if (r < 0)
1331 return r;
1332
1333 for (;;) {
1334 char *pretty = NULL;
1335
1336 r = read_domain_one(m, false, &pretty);
1337 if (r < 0)
1338 return r;
1339 if (r == 0)
1340 break;
1341
1342 if (isempty(pretty))
1343 continue;
1344
1345 r = strv_consume(l, pretty);
1346 if (r < 0)
1347 return r;
1348 }
1349
1350 r = sd_bus_message_exit_container(m);
1351 if (r < 0)
1352 return r;
1353
1354 return 0;
1355 }
1356
1357 static int status_print_strv_ifindex(int ifindex, const char *ifname, char **p) {
1358 char **i;
1359
1360 printf("%sLink %i (%s)%s:",
1361 ansi_highlight(), ifindex, ifname, ansi_normal());
1362
1363 STRV_FOREACH(i, p)
1364 printf(" %s", *i);
1365
1366 printf("\n");
1367
1368 return 0;
1369 }
1370
1371 struct link_info {
1372 uint64_t scopes_mask;
1373 const char *llmnr;
1374 const char *mdns;
1375 const char *dns_over_tls;
1376 const char *dnssec;
1377 char *current_dns;
1378 char **dns;
1379 char **domains;
1380 char **ntas;
1381 bool dnssec_supported;
1382 };
1383
1384 static void link_info_clear(struct link_info *p) {
1385 free(p->current_dns);
1386 strv_free(p->dns);
1387 strv_free(p->domains);
1388 strv_free(p->ntas);
1389 }
1390
1391 static int status_ifindex(sd_bus *bus, int ifindex, const char *name, StatusMode mode, bool *empty_line) {
1392 static const struct bus_properties_map property_map[] = {
1393 { "ScopesMask", "t", NULL, offsetof(struct link_info, scopes_mask) },
1394 { "DNS", "a(iay)", map_link_dns_servers, offsetof(struct link_info, dns) },
1395 { "CurrentDNSServer", "(iay)", map_link_current_dns_server, offsetof(struct link_info, current_dns) },
1396 { "Domains", "a(sb)", map_link_domains, offsetof(struct link_info, domains) },
1397 { "LLMNR", "s", NULL, offsetof(struct link_info, llmnr) },
1398 { "MulticastDNS", "s", NULL, offsetof(struct link_info, mdns) },
1399 { "DNSOverTLS", "s", NULL, offsetof(struct link_info, dns_over_tls) },
1400 { "DNSSEC", "s", NULL, offsetof(struct link_info, dnssec) },
1401 { "DNSSECNegativeTrustAnchors", "as", NULL, offsetof(struct link_info, ntas) },
1402 { "DNSSECSupported", "b", NULL, offsetof(struct link_info, dnssec_supported) },
1403 {}
1404 };
1405 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1406 _cleanup_(sd_bus_message_unrefp) sd_bus_message *m = NULL;
1407 _cleanup_(link_info_clear) struct link_info link_info = {};
1408 _cleanup_free_ char *ifi = NULL, *p = NULL;
1409 char ifname[IF_NAMESIZE] = "";
1410 char **i;
1411 int r;
1412
1413 assert(bus);
1414 assert(ifindex > 0);
1415
1416 if (!name) {
1417 if (!if_indextoname(ifindex, ifname))
1418 return log_error_errno(errno, "Failed to resolve interface name for %i: %m", ifindex);
1419
1420 name = ifname;
1421 }
1422
1423 if (asprintf(&ifi, "%i", ifindex) < 0)
1424 return log_oom();
1425
1426 r = sd_bus_path_encode("/org/freedesktop/resolve1/link", ifi, &p);
1427 if (r < 0)
1428 return log_oom();
1429
1430 r = bus_map_all_properties(bus,
1431 "org.freedesktop.resolve1",
1432 p,
1433 property_map,
1434 BUS_MAP_BOOLEAN_AS_BOOL,
1435 &error,
1436 &m,
1437 &link_info);
1438 if (r < 0)
1439 return log_error_errno(r, "Failed to get link data for %i: %s", ifindex, bus_error_message(&error, r));
1440
1441 (void) pager_open(arg_pager_flags);
1442
1443 if (mode == STATUS_DNS)
1444 return status_print_strv_ifindex(ifindex, name, link_info.dns);
1445
1446 if (mode == STATUS_DOMAIN)
1447 return status_print_strv_ifindex(ifindex, name, link_info.domains);
1448
1449 if (mode == STATUS_NTA)
1450 return status_print_strv_ifindex(ifindex, name, link_info.ntas);
1451
1452 if (mode == STATUS_LLMNR) {
1453 printf("%sLink %i (%s)%s: %s\n",
1454 ansi_highlight(), ifindex, name, ansi_normal(),
1455 strna(link_info.llmnr));
1456
1457 return 0;
1458 }
1459
1460 if (mode == STATUS_MDNS) {
1461 printf("%sLink %i (%s)%s: %s\n",
1462 ansi_highlight(), ifindex, name, ansi_normal(),
1463 strna(link_info.mdns));
1464
1465 return 0;
1466 }
1467
1468 if (mode == STATUS_PRIVATE) {
1469 printf("%sLink %i (%s)%s: %s\n",
1470 ansi_highlight(), ifindex, name, ansi_normal(),
1471 strna(link_info.dns_over_tls));
1472
1473 return 0;
1474 }
1475
1476 if (mode == STATUS_DNSSEC) {
1477 printf("%sLink %i (%s)%s: %s\n",
1478 ansi_highlight(), ifindex, name, ansi_normal(),
1479 strna(link_info.dnssec));
1480
1481 return 0;
1482 }
1483
1484 if (empty_line && *empty_line)
1485 fputc('\n', stdout);
1486
1487 printf("%sLink %i (%s)%s\n",
1488 ansi_highlight(), ifindex, name, ansi_normal());
1489
1490 if (link_info.scopes_mask == 0)
1491 printf(" Current Scopes: none\n");
1492 else
1493 printf(" Current Scopes:%s%s%s%s%s\n",
1494 link_info.scopes_mask & SD_RESOLVED_DNS ? " DNS" : "",
1495 link_info.scopes_mask & SD_RESOLVED_LLMNR_IPV4 ? " LLMNR/IPv4" : "",
1496 link_info.scopes_mask & SD_RESOLVED_LLMNR_IPV6 ? " LLMNR/IPv6" : "",
1497 link_info.scopes_mask & SD_RESOLVED_MDNS_IPV4 ? " mDNS/IPv4" : "",
1498 link_info.scopes_mask & SD_RESOLVED_MDNS_IPV6 ? " mDNS/IPv6" : "");
1499
1500 printf(" LLMNR setting: %s\n"
1501 "MulticastDNS setting: %s\n"
1502 " DNSOverTLS setting: %s\n"
1503 " DNSSEC setting: %s\n"
1504 " DNSSEC supported: %s\n",
1505 strna(link_info.llmnr),
1506 strna(link_info.mdns),
1507 strna(link_info.dns_over_tls),
1508 strna(link_info.dnssec),
1509 yes_no(link_info.dnssec_supported));
1510
1511 if (link_info.current_dns)
1512 printf(" Current DNS Server: %s\n", link_info.current_dns);
1513
1514 STRV_FOREACH(i, link_info.dns) {
1515 printf(" %s %s\n",
1516 i == link_info.dns ? "DNS Servers:" : " ",
1517 *i);
1518 }
1519
1520 STRV_FOREACH(i, link_info.domains) {
1521 printf(" %s %s\n",
1522 i == link_info.domains ? "DNS Domain:" : " ",
1523 *i);
1524 }
1525
1526 STRV_FOREACH(i, link_info.ntas) {
1527 printf(" %s %s\n",
1528 i == link_info.ntas ? "DNSSEC NTA:" : " ",
1529 *i);
1530 }
1531
1532 if (empty_line)
1533 *empty_line = true;
1534
1535 return 0;
1536 }
1537
1538 static int map_global_dns_servers(sd_bus *bus, const char *member, sd_bus_message *m, sd_bus_error *error, void *userdata) {
1539 char ***l = userdata;
1540 int r;
1541
1542 assert(bus);
1543 assert(member);
1544 assert(m);
1545 assert(l);
1546
1547 r = sd_bus_message_enter_container(m, 'a', "(iiay)");
1548 if (r < 0)
1549 return r;
1550
1551 for (;;) {
1552 char *pretty = NULL;
1553
1554 r = read_dns_server_one(m, true, &pretty);
1555 if (r < 0)
1556 return r;
1557 if (r == 0)
1558 break;
1559
1560 if (isempty(pretty))
1561 continue;
1562
1563 r = strv_consume(l, pretty);
1564 if (r < 0)
1565 return r;
1566 }
1567
1568 r = sd_bus_message_exit_container(m);
1569 if (r < 0)
1570 return r;
1571
1572 return 0;
1573 }
1574
1575 static int map_global_current_dns_server(sd_bus *bus, const char *member, sd_bus_message *m, sd_bus_error *error, void *userdata) {
1576 assert(m);
1577 assert(userdata);
1578
1579 return read_dns_server_one(m, true, userdata);
1580 }
1581
1582 static int map_global_domains(sd_bus *bus, const char *member, sd_bus_message *m, sd_bus_error *error, void *userdata) {
1583 char ***l = userdata;
1584 int r;
1585
1586 assert(bus);
1587 assert(member);
1588 assert(m);
1589 assert(l);
1590
1591 r = sd_bus_message_enter_container(m, 'a', "(isb)");
1592 if (r < 0)
1593 return r;
1594
1595 for (;;) {
1596 char *pretty = NULL;
1597
1598 r = read_domain_one(m, true, &pretty);
1599 if (r < 0)
1600 return r;
1601 if (r == 0)
1602 break;
1603
1604 if (isempty(pretty))
1605 continue;
1606
1607 r = strv_consume(l, pretty);
1608 if (r < 0)
1609 return r;
1610 }
1611
1612 r = sd_bus_message_exit_container(m);
1613 if (r < 0)
1614 return r;
1615
1616 return 0;
1617 }
1618
1619 static int status_print_strv_global(char **p) {
1620 char **i;
1621
1622 printf("%sGlobal%s:", ansi_highlight(), ansi_normal());
1623
1624 STRV_FOREACH(i, p)
1625 printf(" %s", *i);
1626
1627 printf("\n");
1628
1629 return 0;
1630 }
1631
1632 struct global_info {
1633 char *current_dns;
1634 char **dns;
1635 char **fallback_dns;
1636 char **domains;
1637 char **ntas;
1638 const char *llmnr;
1639 const char *mdns;
1640 const char *dns_over_tls;
1641 const char *dnssec;
1642 bool dnssec_supported;
1643 };
1644
1645 static void global_info_clear(struct global_info *p) {
1646 free(p->current_dns);
1647 strv_free(p->dns);
1648 strv_free(p->fallback_dns);
1649 strv_free(p->domains);
1650 strv_free(p->ntas);
1651 }
1652
1653 static int status_global(sd_bus *bus, StatusMode mode, bool *empty_line) {
1654 static const struct bus_properties_map property_map[] = {
1655 { "DNS", "a(iiay)", map_global_dns_servers, offsetof(struct global_info, dns) },
1656 { "FallbackDNS", "a(iiay)", map_global_dns_servers, offsetof(struct global_info, fallback_dns) },
1657 { "CurrentDNSServer", "(iiay)", map_global_current_dns_server, offsetof(struct global_info, current_dns) },
1658 { "Domains", "a(isb)", map_global_domains, offsetof(struct global_info, domains) },
1659 { "DNSSECNegativeTrustAnchors", "as", NULL, offsetof(struct global_info, ntas) },
1660 { "LLMNR", "s", NULL, offsetof(struct global_info, llmnr) },
1661 { "MulticastDNS", "s", NULL, offsetof(struct global_info, mdns) },
1662 { "DNSOverTLS", "s", NULL, offsetof(struct global_info, dns_over_tls) },
1663 { "DNSSEC", "s", NULL, offsetof(struct global_info, dnssec) },
1664 { "DNSSECSupported", "b", NULL, offsetof(struct global_info, dnssec_supported) },
1665 {}
1666 };
1667 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1668 _cleanup_(sd_bus_message_unrefp) sd_bus_message *m = NULL;
1669 _cleanup_(global_info_clear) struct global_info global_info = {};
1670 char **i;
1671 int r;
1672
1673 assert(bus);
1674 assert(empty_line);
1675
1676 r = bus_map_all_properties(bus,
1677 "org.freedesktop.resolve1",
1678 "/org/freedesktop/resolve1",
1679 property_map,
1680 BUS_MAP_BOOLEAN_AS_BOOL,
1681 &error,
1682 &m,
1683 &global_info);
1684 if (r < 0)
1685 return log_error_errno(r, "Failed to get global data: %s", bus_error_message(&error, r));
1686
1687 (void) pager_open(arg_pager_flags);
1688
1689 if (mode == STATUS_DNS)
1690 return status_print_strv_global(global_info.dns);
1691
1692 if (mode == STATUS_DOMAIN)
1693 return status_print_strv_global(global_info.domains);
1694
1695 if (mode == STATUS_NTA)
1696 return status_print_strv_global(global_info.ntas);
1697
1698 if (mode == STATUS_LLMNR) {
1699 printf("%sGlobal%s: %s\n", ansi_highlight(), ansi_normal(),
1700 strna(global_info.llmnr));
1701
1702 return 0;
1703 }
1704
1705 if (mode == STATUS_MDNS) {
1706 printf("%sGlobal%s: %s\n", ansi_highlight(), ansi_normal(),
1707 strna(global_info.mdns));
1708
1709 return 0;
1710 }
1711
1712 if (mode == STATUS_PRIVATE) {
1713 printf("%sGlobal%s: %s\n", ansi_highlight(), ansi_normal(),
1714 strna(global_info.dns_over_tls));
1715
1716 return 0;
1717 }
1718
1719 if (mode == STATUS_DNSSEC) {
1720 printf("%sGlobal%s: %s\n", ansi_highlight(), ansi_normal(),
1721 strna(global_info.dnssec));
1722
1723 return 0;
1724 }
1725
1726 printf("%sGlobal%s\n", ansi_highlight(), ansi_normal());
1727
1728 printf(" LLMNR setting: %s\n"
1729 "MulticastDNS setting: %s\n"
1730 " DNSOverTLS setting: %s\n"
1731 " DNSSEC setting: %s\n"
1732 " DNSSEC supported: %s\n",
1733 strna(global_info.llmnr),
1734 strna(global_info.mdns),
1735 strna(global_info.dns_over_tls),
1736 strna(global_info.dnssec),
1737 yes_no(global_info.dnssec_supported));
1738
1739 if (global_info.current_dns)
1740 printf(" Current DNS Server: %s\n", global_info.current_dns);
1741
1742 STRV_FOREACH(i, global_info.dns) {
1743 printf(" %s %s\n",
1744 i == global_info.dns ? "DNS Servers:" : " ",
1745 *i);
1746 }
1747
1748 STRV_FOREACH(i, global_info.fallback_dns) {
1749 printf("%s %s\n",
1750 i == global_info.fallback_dns ? "Fallback DNS Servers:" : " ",
1751 *i);
1752 }
1753
1754 STRV_FOREACH(i, global_info.domains) {
1755 printf(" %s %s\n",
1756 i == global_info.domains ? "DNS Domain:" : " ",
1757 *i);
1758 }
1759
1760 strv_sort(global_info.ntas);
1761 STRV_FOREACH(i, global_info.ntas) {
1762 printf(" %s %s\n",
1763 i == global_info.ntas ? "DNSSEC NTA:" : " ",
1764 *i);
1765 }
1766
1767 *empty_line = true;
1768
1769 return 0;
1770 }
1771
1772 static int status_all(sd_bus *bus, StatusMode mode) {
1773 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL, *reply = NULL;
1774 _cleanup_(sd_netlink_unrefp) sd_netlink *rtnl = NULL;
1775 sd_netlink_message *i;
1776 bool empty_line = false;
1777 int r;
1778
1779 assert(bus);
1780
1781 r = status_global(bus, mode, &empty_line);
1782 if (r < 0)
1783 return r;
1784
1785 r = sd_netlink_open(&rtnl);
1786 if (r < 0)
1787 return log_error_errno(r, "Failed to connect to netlink: %m");
1788
1789 r = sd_rtnl_message_new_link(rtnl, &req, RTM_GETLINK, 0);
1790 if (r < 0)
1791 return rtnl_log_create_error(r);
1792
1793 r = sd_netlink_message_request_dump(req, true);
1794 if (r < 0)
1795 return rtnl_log_create_error(r);
1796
1797 r = sd_netlink_call(rtnl, req, 0, &reply);
1798 if (r < 0)
1799 return log_error_errno(r, "Failed to enumerate links: %m");
1800
1801 r = 0;
1802 for (i = reply; i; i = sd_netlink_message_next(i)) {
1803 const char *name;
1804 int ifindex, q;
1805 uint16_t type;
1806
1807 q = sd_netlink_message_get_type(i, &type);
1808 if (q < 0)
1809 return rtnl_log_parse_error(q);
1810
1811 if (type != RTM_NEWLINK)
1812 continue;
1813
1814 q = sd_rtnl_message_link_get_ifindex(i, &ifindex);
1815 if (q < 0)
1816 return rtnl_log_parse_error(q);
1817
1818 if (ifindex == LOOPBACK_IFINDEX)
1819 continue;
1820
1821 q = sd_netlink_message_read_string(i, IFLA_IFNAME, &name);
1822 if (q < 0)
1823 return rtnl_log_parse_error(q);
1824
1825 q = status_ifindex(bus, ifindex, name, mode, &empty_line);
1826 if (q < 0 && r >= 0)
1827 r = q;
1828 }
1829
1830 return r;
1831 }
1832
1833 static int verb_status(int argc, char **argv, void *userdata) {
1834 sd_bus *bus = userdata;
1835 int q, r = 0;
1836
1837 if (argc > 1) {
1838 char **ifname;
1839 bool empty_line = false;
1840
1841 STRV_FOREACH(ifname, argv + 1) {
1842 int ifindex;
1843
1844 ifindex = parse_ifindex_and_warn(*ifname);
1845 if (ifindex < 0)
1846 continue;
1847
1848 q = status_ifindex(bus, ifindex, NULL, STATUS_ALL, &empty_line);
1849 if (q < 0)
1850 r = q;
1851 }
1852 } else
1853 r = status_all(bus, STATUS_ALL);
1854
1855 return r;
1856 }
1857
1858 static int log_interface_is_managed(int r, int ifindex) {
1859 char ifname[IFNAMSIZ];
1860
1861 return log_error_errno(r,
1862 "The specified interface %s is managed by systemd-networkd. Operation refused.\n"
1863 "Please configure DNS settings for systemd-networkd managed interfaces directly in their .network files.",
1864 strna(if_indextoname(ifindex, ifname)));
1865 }
1866
1867 static int verb_dns(int argc, char **argv, void *userdata) {
1868 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1869 _cleanup_(sd_bus_message_unrefp) sd_bus_message *req = NULL;
1870 sd_bus *bus = userdata;
1871 char **p;
1872 int r;
1873
1874 assert(bus);
1875
1876 if (argc <= 1)
1877 return status_all(bus, STATUS_DNS);
1878
1879 r = ifname_mangle(argv[1], false);
1880 if (r < 0)
1881 return r;
1882
1883 if (argc == 2)
1884 return status_ifindex(bus, arg_ifindex, NULL, STATUS_DNS, NULL);
1885
1886 r = sd_bus_message_new_method_call(
1887 bus,
1888 &req,
1889 "org.freedesktop.resolve1",
1890 "/org/freedesktop/resolve1",
1891 "org.freedesktop.resolve1.Manager",
1892 "SetLinkDNS");
1893 if (r < 0)
1894 return bus_log_create_error(r);
1895
1896 r = sd_bus_message_append(req, "i", arg_ifindex);
1897 if (r < 0)
1898 return bus_log_create_error(r);
1899
1900 r = sd_bus_message_open_container(req, 'a', "(iay)");
1901 if (r < 0)
1902 return bus_log_create_error(r);
1903
1904 /* If only argument is the empty string, then call SetLinkDNS() with an
1905 * empty list, which will clear the list of domains for an interface. */
1906 if (!strv_equal(argv + 2, STRV_MAKE(""))) {
1907 STRV_FOREACH(p, argv + 2) {
1908 struct in_addr_data data;
1909
1910 r = in_addr_from_string_auto(*p, &data.family, &data.address);
1911 if (r < 0)
1912 return log_error_errno(r, "Failed to parse DNS server address: %s", *p);
1913
1914 r = sd_bus_message_open_container(req, 'r', "iay");
1915 if (r < 0)
1916 return bus_log_create_error(r);
1917
1918 r = sd_bus_message_append(req, "i", data.family);
1919 if (r < 0)
1920 return bus_log_create_error(r);
1921
1922 r = sd_bus_message_append_array(req, 'y', &data.address, FAMILY_ADDRESS_SIZE(data.family));
1923 if (r < 0)
1924 return bus_log_create_error(r);
1925
1926 r = sd_bus_message_close_container(req);
1927 if (r < 0)
1928 return bus_log_create_error(r);
1929 }
1930 }
1931
1932 r = sd_bus_message_close_container(req);
1933 if (r < 0)
1934 return bus_log_create_error(r);
1935
1936 r = sd_bus_call(bus, req, 0, &error, NULL);
1937 if (r < 0) {
1938 if (sd_bus_error_has_name(&error, BUS_ERROR_LINK_BUSY))
1939 return log_interface_is_managed(r, arg_ifindex);
1940
1941 if (arg_ifindex_permissive &&
1942 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
1943 return 0;
1944
1945 return log_error_errno(r, "Failed to set DNS configuration: %s", bus_error_message(&error, r));
1946 }
1947
1948 return 0;
1949 }
1950
1951 static int verb_domain(int argc, char **argv, void *userdata) {
1952 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1953 _cleanup_(sd_bus_message_unrefp) sd_bus_message *req = NULL;
1954 sd_bus *bus = userdata;
1955 char **p;
1956 int r;
1957
1958 assert(bus);
1959
1960 if (argc <= 1)
1961 return status_all(bus, STATUS_DOMAIN);
1962
1963 r = ifname_mangle(argv[1], false);
1964 if (r < 0)
1965 return r;
1966
1967 if (argc == 2)
1968 return status_ifindex(bus, arg_ifindex, NULL, STATUS_DOMAIN, NULL);
1969
1970 r = sd_bus_message_new_method_call(
1971 bus,
1972 &req,
1973 "org.freedesktop.resolve1",
1974 "/org/freedesktop/resolve1",
1975 "org.freedesktop.resolve1.Manager",
1976 "SetLinkDomains");
1977 if (r < 0)
1978 return bus_log_create_error(r);
1979
1980 r = sd_bus_message_append(req, "i", arg_ifindex);
1981 if (r < 0)
1982 return bus_log_create_error(r);
1983
1984 r = sd_bus_message_open_container(req, 'a', "(sb)");
1985 if (r < 0)
1986 return bus_log_create_error(r);
1987
1988 /* If only argument is the empty string, then call SetLinkDomains() with an
1989 * empty list, which will clear the list of domains for an interface. */
1990 if (!strv_equal(argv + 2, STRV_MAKE(""))) {
1991 STRV_FOREACH(p, argv + 2) {
1992 const char *n;
1993
1994 n = **p == '~' ? *p + 1 : *p;
1995
1996 r = dns_name_is_valid(n);
1997 if (r < 0)
1998 return log_error_errno(r, "Failed to validate specified domain %s: %m", n);
1999 if (r == 0) {
2000 log_error("Domain not valid: %s", n);
2001 return -EINVAL;
2002 }
2003
2004 r = sd_bus_message_append(req, "(sb)", n, **p == '~');
2005 if (r < 0)
2006 return bus_log_create_error(r);
2007 }
2008 }
2009
2010 r = sd_bus_message_close_container(req);
2011 if (r < 0)
2012 return bus_log_create_error(r);
2013
2014 r = sd_bus_call(bus, req, 0, &error, NULL);
2015 if (r < 0) {
2016 if (sd_bus_error_has_name(&error, BUS_ERROR_LINK_BUSY))
2017 return log_interface_is_managed(r, arg_ifindex);
2018
2019 if (arg_ifindex_permissive &&
2020 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
2021 return 0;
2022
2023 return log_error_errno(r, "Failed to set domain configuration: %s", bus_error_message(&error, r));
2024 }
2025
2026 return 0;
2027 }
2028
2029 static int verb_llmnr(int argc, char **argv, void *userdata) {
2030 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2031 sd_bus *bus = userdata;
2032 int r;
2033
2034 assert(bus);
2035
2036 if (argc <= 1)
2037 return status_all(bus, STATUS_LLMNR);
2038
2039 r = ifname_mangle(argv[1], false);
2040 if (r < 0)
2041 return r;
2042
2043 if (argc == 2)
2044 return status_ifindex(bus, arg_ifindex, NULL, STATUS_LLMNR, NULL);
2045
2046 r = sd_bus_call_method(bus,
2047 "org.freedesktop.resolve1",
2048 "/org/freedesktop/resolve1",
2049 "org.freedesktop.resolve1.Manager",
2050 "SetLinkLLMNR",
2051 &error,
2052 NULL,
2053 "is", arg_ifindex, argv[2]);
2054 if (r < 0) {
2055 if (sd_bus_error_has_name(&error, BUS_ERROR_LINK_BUSY))
2056 return log_interface_is_managed(r, arg_ifindex);
2057
2058 if (arg_ifindex_permissive &&
2059 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
2060 return 0;
2061
2062 return log_error_errno(r, "Failed to set LLMNR configuration: %s", bus_error_message(&error, r));
2063 }
2064
2065 return 0;
2066 }
2067
2068 static int verb_mdns(int argc, char **argv, void *userdata) {
2069 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2070 sd_bus *bus = userdata;
2071 int r;
2072
2073 assert(bus);
2074
2075 if (argc <= 1)
2076 return status_all(bus, STATUS_MDNS);
2077
2078 r = ifname_mangle(argv[1], false);
2079 if (r < 0)
2080 return r;
2081
2082 if (argc == 2)
2083 return status_ifindex(bus, arg_ifindex, NULL, STATUS_MDNS, NULL);
2084
2085 r = sd_bus_call_method(bus,
2086 "org.freedesktop.resolve1",
2087 "/org/freedesktop/resolve1",
2088 "org.freedesktop.resolve1.Manager",
2089 "SetLinkMulticastDNS",
2090 &error,
2091 NULL,
2092 "is", arg_ifindex, argv[2]);
2093 if (r < 0) {
2094 if (sd_bus_error_has_name(&error, BUS_ERROR_LINK_BUSY))
2095 return log_interface_is_managed(r, arg_ifindex);
2096
2097 if (arg_ifindex_permissive &&
2098 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
2099 return 0;
2100
2101 return log_error_errno(r, "Failed to set MulticastDNS configuration: %s", bus_error_message(&error, r));
2102 }
2103
2104 return 0;
2105 }
2106
2107 static int verb_dns_over_tls(int argc, char **argv, void *userdata) {
2108 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2109 sd_bus *bus = userdata;
2110 int r;
2111
2112 assert(bus);
2113
2114 if (argc <= 1)
2115 return status_all(bus, STATUS_PRIVATE);
2116
2117 r = ifname_mangle(argv[1], false);
2118 if (r < 0)
2119 return r;
2120
2121 if (argc == 2)
2122 return status_ifindex(bus, arg_ifindex, NULL, STATUS_PRIVATE, NULL);
2123
2124 r = sd_bus_call_method(bus,
2125 "org.freedesktop.resolve1",
2126 "/org/freedesktop/resolve1",
2127 "org.freedesktop.resolve1.Manager",
2128 "SetLinkDNSOverTLS",
2129 &error,
2130 NULL,
2131 "is", arg_ifindex, argv[2]);
2132 if (r < 0) {
2133 if (sd_bus_error_has_name(&error, BUS_ERROR_LINK_BUSY))
2134 return log_interface_is_managed(r, arg_ifindex);
2135
2136 if (arg_ifindex_permissive &&
2137 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
2138 return 0;
2139
2140 return log_error_errno(r, "Failed to set DNSOverTLS configuration: %s", bus_error_message(&error, r));
2141 }
2142
2143 return 0;
2144 }
2145
2146 static int verb_dnssec(int argc, char **argv, void *userdata) {
2147 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2148 sd_bus *bus = userdata;
2149 int r;
2150
2151 assert(bus);
2152
2153 if (argc <= 1)
2154 return status_all(bus, STATUS_DNSSEC);
2155
2156 r = ifname_mangle(argv[1], false);
2157 if (r < 0)
2158 return r;
2159
2160 if (argc == 2)
2161 return status_ifindex(bus, arg_ifindex, NULL, STATUS_DNSSEC, NULL);
2162
2163 r = sd_bus_call_method(bus,
2164 "org.freedesktop.resolve1",
2165 "/org/freedesktop/resolve1",
2166 "org.freedesktop.resolve1.Manager",
2167 "SetLinkDNSSEC",
2168 &error,
2169 NULL,
2170 "is", arg_ifindex, argv[2]);
2171 if (r < 0) {
2172 if (sd_bus_error_has_name(&error, BUS_ERROR_LINK_BUSY))
2173 return log_interface_is_managed(r, arg_ifindex);
2174
2175 if (arg_ifindex_permissive &&
2176 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
2177 return 0;
2178
2179 return log_error_errno(r, "Failed to set DNSSEC configuration: %s", bus_error_message(&error, r));
2180 }
2181
2182 return 0;
2183 }
2184
2185 static int verb_nta(int argc, char **argv, void *userdata) {
2186 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2187 _cleanup_(sd_bus_message_unrefp) sd_bus_message *req = NULL;
2188 sd_bus *bus = userdata;
2189 char **p;
2190 int r;
2191 bool clear;
2192
2193 assert(bus);
2194
2195 if (argc <= 1)
2196 return status_all(bus, STATUS_NTA);
2197
2198 r = ifname_mangle(argv[1], false);
2199 if (r < 0)
2200 return r;
2201
2202 if (argc == 2)
2203 return status_ifindex(bus, arg_ifindex, NULL, STATUS_NTA, NULL);
2204
2205 /* If only argument is the empty string, then call SetLinkDNSSECNegativeTrustAnchors()
2206 * with an empty list, which will clear the list of domains for an interface. */
2207 clear = strv_equal(argv + 2, STRV_MAKE(""));
2208
2209 if (!clear)
2210 STRV_FOREACH(p, argv + 2) {
2211 r = dns_name_is_valid(*p);
2212 if (r < 0)
2213 return log_error_errno(r, "Failed to validate specified domain %s: %m", *p);
2214 if (r == 0) {
2215 log_error("Domain not valid: %s", *p);
2216 return -EINVAL;
2217 }
2218 }
2219
2220 r = sd_bus_message_new_method_call(
2221 bus,
2222 &req,
2223 "org.freedesktop.resolve1",
2224 "/org/freedesktop/resolve1",
2225 "org.freedesktop.resolve1.Manager",
2226 "SetLinkDNSSECNegativeTrustAnchors");
2227 if (r < 0)
2228 return bus_log_create_error(r);
2229
2230 r = sd_bus_message_append(req, "i", arg_ifindex);
2231 if (r < 0)
2232 return bus_log_create_error(r);
2233
2234 r = sd_bus_message_append_strv(req, clear ? NULL : argv + 2);
2235 if (r < 0)
2236 return bus_log_create_error(r);
2237
2238 r = sd_bus_call(bus, req, 0, &error, NULL);
2239 if (r < 0) {
2240 if (sd_bus_error_has_name(&error, BUS_ERROR_LINK_BUSY))
2241 return log_interface_is_managed(r, arg_ifindex);
2242
2243 if (arg_ifindex_permissive &&
2244 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
2245 return 0;
2246
2247 return log_error_errno(r, "Failed to set DNSSEC NTA configuration: %s", bus_error_message(&error, r));
2248 }
2249
2250 return 0;
2251 }
2252
2253 static int verb_revert_link(int argc, char **argv, void *userdata) {
2254 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2255 sd_bus *bus = userdata;
2256 int r;
2257
2258 assert(bus);
2259
2260 r = ifname_mangle(argv[1], false);
2261 if (r < 0)
2262 return r;
2263
2264 r = sd_bus_call_method(bus,
2265 "org.freedesktop.resolve1",
2266 "/org/freedesktop/resolve1",
2267 "org.freedesktop.resolve1.Manager",
2268 "RevertLink",
2269 &error,
2270 NULL,
2271 "i", arg_ifindex);
2272 if (r < 0) {
2273 if (arg_ifindex_permissive &&
2274 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
2275 return 0;
2276
2277 return log_error_errno(r, "Failed to revert interface configuration: %s", bus_error_message(&error, r));
2278 }
2279
2280 return 0;
2281 }
2282
2283 static void help_protocol_types(void) {
2284 if (arg_legend)
2285 puts("Known protocol types:");
2286 puts("dns\nllmnr\nllmnr-ipv4\nllmnr-ipv6\nmdns\nmdns-ipv4\nmdns-ipv6");
2287 }
2288
2289 static void help_dns_types(void) {
2290 if (arg_legend)
2291 puts("Known DNS RR types:");
2292
2293 DUMP_STRING_TABLE(dns_type, int, _DNS_TYPE_MAX);
2294 }
2295
2296 static void help_dns_classes(void) {
2297 if (arg_legend)
2298 puts("Known DNS RR classes:");
2299
2300 DUMP_STRING_TABLE(dns_class, int, _DNS_CLASS_MAX);
2301 }
2302
2303 static int compat_help(void) {
2304 _cleanup_free_ char *link = NULL;
2305 int r;
2306
2307 r = terminal_urlify_man("resolvectl", "1", &link);
2308 if (r < 0)
2309 return log_oom();
2310
2311 printf("%1$s [OPTIONS...] HOSTNAME|ADDRESS...\n"
2312 "%1$s [OPTIONS...] --service [[NAME] TYPE] DOMAIN\n"
2313 "%1$s [OPTIONS...] --openpgp EMAIL@DOMAIN...\n"
2314 "%1$s [OPTIONS...] --statistics\n"
2315 "%1$s [OPTIONS...] --reset-statistics\n"
2316 "\n"
2317 "Resolve domain names, IPv4 and IPv6 addresses, DNS records, and services.\n\n"
2318 " -h --help Show this help\n"
2319 " --version Show package version\n"
2320 " --no-pager Do not pipe output into a pager\n"
2321 " -4 Resolve IPv4 addresses\n"
2322 " -6 Resolve IPv6 addresses\n"
2323 " -i --interface=INTERFACE Look on interface\n"
2324 " -p --protocol=PROTO|help Look via protocol\n"
2325 " -t --type=TYPE|help Query RR with DNS type\n"
2326 " -c --class=CLASS|help Query RR with DNS class\n"
2327 " --service Resolve service (SRV)\n"
2328 " --service-address=BOOL Resolve address for services (default: yes)\n"
2329 " --service-txt=BOOL Resolve TXT records for services (default: yes)\n"
2330 " --openpgp Query OpenPGP public key\n"
2331 " --tlsa Query TLS public key\n"
2332 " --cname=BOOL Follow CNAME redirects (default: yes)\n"
2333 " --search=BOOL Use search domains for single-label names\n"
2334 " (default: yes)\n"
2335 " --raw[=payload|packet] Dump the answer as binary data\n"
2336 " --legend=BOOL Print headers and additional info (default: yes)\n"
2337 " --statistics Show resolver statistics\n"
2338 " --reset-statistics Reset resolver statistics\n"
2339 " --status Show link and server status\n"
2340 " --flush-caches Flush all local DNS caches\n"
2341 " --reset-server-features\n"
2342 " Forget learnt DNS server feature levels\n"
2343 " --set-dns=SERVER Set per-interface DNS server address\n"
2344 " --set-domain=DOMAIN Set per-interface search domain\n"
2345 " --set-llmnr=MODE Set per-interface LLMNR mode\n"
2346 " --set-mdns=MODE Set per-interface MulticastDNS mode\n"
2347 " --set-dnsovertls=MODE Set per-interface DNS-over-TLS mode\n"
2348 " --set-dnssec=MODE Set per-interface DNSSEC mode\n"
2349 " --set-nta=DOMAIN Set per-interface DNSSEC NTA\n"
2350 " --revert Revert per-interface configuration\n"
2351 "\nSee the %2$s for details.\n"
2352 , program_invocation_short_name
2353 , link
2354 );
2355
2356 return 0;
2357 }
2358
2359 static int native_help(void) {
2360 _cleanup_free_ char *link = NULL;
2361 int r;
2362
2363 r = terminal_urlify_man("resolvectl", "1", &link);
2364 if (r < 0)
2365 return log_oom();
2366
2367 printf("%1$s [OPTIONS...] {COMMAND} ...\n"
2368 "\n"
2369 "Send control commands to the network name resolution manager, or\n"
2370 "resolve domain names, IPv4 and IPv6 addresses, DNS records, and services.\n"
2371 "\n"
2372 " -h --help Show this help\n"
2373 " --version Show package version\n"
2374 " --no-pager Do not pipe output into a pager\n"
2375 " -4 Resolve IPv4 addresses\n"
2376 " -6 Resolve IPv6 addresses\n"
2377 " -i --interface=INTERFACE Look on interface\n"
2378 " -p --protocol=PROTO|help Look via protocol\n"
2379 " -t --type=TYPE|help Query RR with DNS type\n"
2380 " -c --class=CLASS|help Query RR with DNS class\n"
2381 " --service-address=BOOL Resolve address for services (default: yes)\n"
2382 " --service-txt=BOOL Resolve TXT records for services (default: yes)\n"
2383 " --cname=BOOL Follow CNAME redirects (default: yes)\n"
2384 " --search=BOOL Use search domains for single-label names\n"
2385 " (default: yes)\n"
2386 " --raw[=payload|packet] Dump the answer as binary data\n"
2387 " --legend=BOOL Print headers and additional info (default: yes)\n"
2388 "\n"
2389 "Commands:\n"
2390 " query HOSTNAME|ADDRESS... Resolve domain names, IPv4 and IPv6 addresses\n"
2391 " service [[NAME] TYPE] DOMAIN Resolve service (SRV)\n"
2392 " openpgp EMAIL@DOMAIN... Query OpenPGP public key\n"
2393 " tlsa DOMAIN[:PORT]... Query TLS public key\n"
2394 " status [LINK...] Show link and server status\n"
2395 " statistics Show resolver statistics\n"
2396 " reset-statistics Reset resolver statistics\n"
2397 " flush-caches Flush all local DNS caches\n"
2398 " reset-server-features Forget learnt DNS server feature levels\n"
2399 " dns [LINK [SERVER...]] Get/set per-interface DNS server address\n"
2400 " domain [LINK [DOMAIN...]] Get/set per-interface search domain\n"
2401 " llmnr [LINK [MODE]] Get/set per-interface LLMNR mode\n"
2402 " mdns [LINK [MODE]] Get/set per-interface MulticastDNS mode\n"
2403 " dnsovertls [LINK [MODE]] Get/set per-interface DNS-over-TLS mode\n"
2404 " dnssec [LINK [MODE]] Get/set per-interface DNSSEC mode\n"
2405 " nta [LINK [DOMAIN...]] Get/set per-interface DNSSEC NTA\n"
2406 " revert LINK Revert per-interface configuration\n"
2407 "\nSee the %2$s for details.\n"
2408 , program_invocation_short_name
2409 , link
2410 );
2411
2412 return 0;
2413 }
2414
2415 static int verb_help(int argc, char **argv, void *userdata) {
2416 return native_help();
2417 }
2418
2419 static int compat_parse_argv(int argc, char *argv[]) {
2420 enum {
2421 ARG_VERSION = 0x100,
2422 ARG_LEGEND,
2423 ARG_SERVICE,
2424 ARG_CNAME,
2425 ARG_SERVICE_ADDRESS,
2426 ARG_SERVICE_TXT,
2427 ARG_OPENPGP,
2428 ARG_TLSA,
2429 ARG_RAW,
2430 ARG_SEARCH,
2431 ARG_STATISTICS,
2432 ARG_RESET_STATISTICS,
2433 ARG_STATUS,
2434 ARG_FLUSH_CACHES,
2435 ARG_RESET_SERVER_FEATURES,
2436 ARG_NO_PAGER,
2437 ARG_SET_DNS,
2438 ARG_SET_DOMAIN,
2439 ARG_SET_LLMNR,
2440 ARG_SET_MDNS,
2441 ARG_SET_PRIVATE,
2442 ARG_SET_DNSSEC,
2443 ARG_SET_NTA,
2444 ARG_REVERT_LINK,
2445 };
2446
2447 static const struct option options[] = {
2448 { "help", no_argument, NULL, 'h' },
2449 { "version", no_argument, NULL, ARG_VERSION },
2450 { "type", required_argument, NULL, 't' },
2451 { "class", required_argument, NULL, 'c' },
2452 { "legend", required_argument, NULL, ARG_LEGEND },
2453 { "interface", required_argument, NULL, 'i' },
2454 { "protocol", required_argument, NULL, 'p' },
2455 { "cname", required_argument, NULL, ARG_CNAME },
2456 { "service", no_argument, NULL, ARG_SERVICE },
2457 { "service-address", required_argument, NULL, ARG_SERVICE_ADDRESS },
2458 { "service-txt", required_argument, NULL, ARG_SERVICE_TXT },
2459 { "openpgp", no_argument, NULL, ARG_OPENPGP },
2460 { "tlsa", optional_argument, NULL, ARG_TLSA },
2461 { "raw", optional_argument, NULL, ARG_RAW },
2462 { "search", required_argument, NULL, ARG_SEARCH },
2463 { "statistics", no_argument, NULL, ARG_STATISTICS, },
2464 { "reset-statistics", no_argument, NULL, ARG_RESET_STATISTICS },
2465 { "status", no_argument, NULL, ARG_STATUS },
2466 { "flush-caches", no_argument, NULL, ARG_FLUSH_CACHES },
2467 { "reset-server-features", no_argument, NULL, ARG_RESET_SERVER_FEATURES },
2468 { "no-pager", no_argument, NULL, ARG_NO_PAGER },
2469 { "set-dns", required_argument, NULL, ARG_SET_DNS },
2470 { "set-domain", required_argument, NULL, ARG_SET_DOMAIN },
2471 { "set-llmnr", required_argument, NULL, ARG_SET_LLMNR },
2472 { "set-mdns", required_argument, NULL, ARG_SET_MDNS },
2473 { "set-dnsovertls", required_argument, NULL, ARG_SET_PRIVATE },
2474 { "set-dnssec", required_argument, NULL, ARG_SET_DNSSEC },
2475 { "set-nta", required_argument, NULL, ARG_SET_NTA },
2476 { "revert", no_argument, NULL, ARG_REVERT_LINK },
2477 {}
2478 };
2479
2480 int c, r;
2481
2482 assert(argc >= 0);
2483 assert(argv);
2484
2485 while ((c = getopt_long(argc, argv, "h46i:t:c:p:", options, NULL)) >= 0)
2486 switch(c) {
2487
2488 case 'h':
2489 return compat_help();
2490
2491 case ARG_VERSION:
2492 return version();
2493
2494 case '4':
2495 arg_family = AF_INET;
2496 break;
2497
2498 case '6':
2499 arg_family = AF_INET6;
2500 break;
2501
2502 case 'i':
2503 arg_ifname = mfree(arg_ifname);
2504 r = ifname_mangle(optarg, true);
2505 if (r < 0)
2506 return r;
2507 break;
2508
2509 case 't':
2510 if (streq(optarg, "help")) {
2511 help_dns_types();
2512 return 0;
2513 }
2514
2515 r = dns_type_from_string(optarg);
2516 if (r < 0) {
2517 log_error("Failed to parse RR record type %s", optarg);
2518 return r;
2519 }
2520 arg_type = (uint16_t) r;
2521 assert((int) arg_type == r);
2522
2523 arg_mode = MODE_RESOLVE_RECORD;
2524 break;
2525
2526 case 'c':
2527 if (streq(optarg, "help")) {
2528 help_dns_classes();
2529 return 0;
2530 }
2531
2532 r = dns_class_from_string(optarg);
2533 if (r < 0) {
2534 log_error("Failed to parse RR record class %s", optarg);
2535 return r;
2536 }
2537 arg_class = (uint16_t) r;
2538 assert((int) arg_class == r);
2539
2540 break;
2541
2542 case ARG_LEGEND:
2543 r = parse_boolean(optarg);
2544 if (r < 0)
2545 return log_error_errno(r, "Failed to parse --legend= argument");
2546
2547 arg_legend = r;
2548 break;
2549
2550 case 'p':
2551 if (streq(optarg, "help")) {
2552 help_protocol_types();
2553 return 0;
2554 } else if (streq(optarg, "dns"))
2555 arg_flags |= SD_RESOLVED_DNS;
2556 else if (streq(optarg, "llmnr"))
2557 arg_flags |= SD_RESOLVED_LLMNR;
2558 else if (streq(optarg, "llmnr-ipv4"))
2559 arg_flags |= SD_RESOLVED_LLMNR_IPV4;
2560 else if (streq(optarg, "llmnr-ipv6"))
2561 arg_flags |= SD_RESOLVED_LLMNR_IPV6;
2562 else if (streq(optarg, "mdns"))
2563 arg_flags |= SD_RESOLVED_MDNS;
2564 else if (streq(optarg, "mdns-ipv4"))
2565 arg_flags |= SD_RESOLVED_MDNS_IPV4;
2566 else if (streq(optarg, "mdns-ipv6"))
2567 arg_flags |= SD_RESOLVED_MDNS_IPV6;
2568 else
2569 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
2570 "Unknown protocol specifier: %s", optarg);
2571
2572 break;
2573
2574 case ARG_SERVICE:
2575 arg_mode = MODE_RESOLVE_SERVICE;
2576 break;
2577
2578 case ARG_OPENPGP:
2579 arg_mode = MODE_RESOLVE_OPENPGP;
2580 break;
2581
2582 case ARG_TLSA:
2583 arg_mode = MODE_RESOLVE_TLSA;
2584 if (!optarg || service_family_is_valid(optarg))
2585 arg_service_family = optarg;
2586 else
2587 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
2588 "Unknown service family \"%s\".", optarg);
2589 break;
2590
2591 case ARG_RAW:
2592 if (on_tty())
2593 return log_error_errno(SYNTHETIC_ERRNO(ENOTTY),
2594 "Refusing to write binary data to tty.");
2595
2596 if (optarg == NULL || streq(optarg, "payload"))
2597 arg_raw = RAW_PAYLOAD;
2598 else if (streq(optarg, "packet"))
2599 arg_raw = RAW_PACKET;
2600 else
2601 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
2602 "Unknown --raw specifier \"%s\".",
2603 optarg);
2604
2605 arg_legend = false;
2606 break;
2607
2608 case ARG_CNAME:
2609 r = parse_boolean(optarg);
2610 if (r < 0)
2611 return log_error_errno(r, "Failed to parse --cname= argument.");
2612 SET_FLAG(arg_flags, SD_RESOLVED_NO_CNAME, r == 0);
2613 break;
2614
2615 case ARG_SERVICE_ADDRESS:
2616 r = parse_boolean(optarg);
2617 if (r < 0)
2618 return log_error_errno(r, "Failed to parse --service-address= argument.");
2619 SET_FLAG(arg_flags, SD_RESOLVED_NO_ADDRESS, r == 0);
2620 break;
2621
2622 case ARG_SERVICE_TXT:
2623 r = parse_boolean(optarg);
2624 if (r < 0)
2625 return log_error_errno(r, "Failed to parse --service-txt= argument.");
2626 SET_FLAG(arg_flags, SD_RESOLVED_NO_TXT, r == 0);
2627 break;
2628
2629 case ARG_SEARCH:
2630 r = parse_boolean(optarg);
2631 if (r < 0)
2632 return log_error_errno(r, "Failed to parse --search argument.");
2633 SET_FLAG(arg_flags, SD_RESOLVED_NO_SEARCH, r == 0);
2634 break;
2635
2636 case ARG_STATISTICS:
2637 arg_mode = MODE_STATISTICS;
2638 break;
2639
2640 case ARG_RESET_STATISTICS:
2641 arg_mode = MODE_RESET_STATISTICS;
2642 break;
2643
2644 case ARG_FLUSH_CACHES:
2645 arg_mode = MODE_FLUSH_CACHES;
2646 break;
2647
2648 case ARG_RESET_SERVER_FEATURES:
2649 arg_mode = MODE_RESET_SERVER_FEATURES;
2650 break;
2651
2652 case ARG_STATUS:
2653 arg_mode = MODE_STATUS;
2654 break;
2655
2656 case ARG_NO_PAGER:
2657 arg_pager_flags |= PAGER_DISABLE;
2658 break;
2659
2660 case ARG_SET_DNS:
2661 r = strv_extend(&arg_set_dns, optarg);
2662 if (r < 0)
2663 return log_oom();
2664
2665 arg_mode = MODE_SET_LINK;
2666 break;
2667
2668 case ARG_SET_DOMAIN:
2669 r = strv_extend(&arg_set_domain, optarg);
2670 if (r < 0)
2671 return log_oom();
2672
2673 arg_mode = MODE_SET_LINK;
2674 break;
2675
2676 case ARG_SET_LLMNR:
2677 arg_set_llmnr = optarg;
2678 arg_mode = MODE_SET_LINK;
2679 break;
2680
2681 case ARG_SET_MDNS:
2682 arg_set_mdns = optarg;
2683 arg_mode = MODE_SET_LINK;
2684 break;
2685
2686 case ARG_SET_PRIVATE:
2687 arg_set_dns_over_tls = optarg;
2688 arg_mode = MODE_SET_LINK;
2689 break;
2690
2691 case ARG_SET_DNSSEC:
2692 arg_set_dnssec = optarg;
2693 arg_mode = MODE_SET_LINK;
2694 break;
2695
2696 case ARG_SET_NTA:
2697 r = strv_extend(&arg_set_nta, optarg);
2698 if (r < 0)
2699 return log_oom();
2700
2701 arg_mode = MODE_SET_LINK;
2702 break;
2703
2704 case ARG_REVERT_LINK:
2705 arg_mode = MODE_REVERT_LINK;
2706 break;
2707
2708 case '?':
2709 return -EINVAL;
2710
2711 default:
2712 assert_not_reached("Unhandled option");
2713 }
2714
2715 if (arg_type == 0 && arg_class != 0)
2716 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
2717 "--class= may only be used in conjunction with --type=.");
2718
2719 if (arg_type != 0 && arg_mode == MODE_RESOLVE_SERVICE)
2720 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
2721 "--service and --type= may not be combined.");
2722
2723 if (arg_type != 0 && arg_class == 0)
2724 arg_class = DNS_CLASS_IN;
2725
2726 if (arg_class != 0 && arg_type == 0)
2727 arg_type = DNS_TYPE_A;
2728
2729 if (IN_SET(arg_mode, MODE_SET_LINK, MODE_REVERT_LINK)) {
2730
2731 if (arg_ifindex <= 0)
2732 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
2733 "--set-dns=, --set-domain=, --set-llmnr=, --set-mdns=, --set-dnsovertls=, --set-dnssec=, --set-nta= and --revert require --interface=.");
2734
2735 if (arg_ifindex == LOOPBACK_IFINDEX)
2736 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
2737 "Interface can't be the loopback interface (lo). Sorry.");
2738 }
2739
2740 return 1 /* work to do */;
2741 }
2742
2743 static int native_parse_argv(int argc, char *argv[]) {
2744 enum {
2745 ARG_VERSION = 0x100,
2746 ARG_LEGEND,
2747 ARG_CNAME,
2748 ARG_SERVICE_ADDRESS,
2749 ARG_SERVICE_TXT,
2750 ARG_RAW,
2751 ARG_SEARCH,
2752 ARG_NO_PAGER,
2753 };
2754
2755 static const struct option options[] = {
2756 { "help", no_argument, NULL, 'h' },
2757 { "version", no_argument, NULL, ARG_VERSION },
2758 { "type", required_argument, NULL, 't' },
2759 { "class", required_argument, NULL, 'c' },
2760 { "legend", required_argument, NULL, ARG_LEGEND },
2761 { "interface", required_argument, NULL, 'i' },
2762 { "protocol", required_argument, NULL, 'p' },
2763 { "cname", required_argument, NULL, ARG_CNAME },
2764 { "service-address", required_argument, NULL, ARG_SERVICE_ADDRESS },
2765 { "service-txt", required_argument, NULL, ARG_SERVICE_TXT },
2766 { "raw", optional_argument, NULL, ARG_RAW },
2767 { "search", required_argument, NULL, ARG_SEARCH },
2768 { "no-pager", no_argument, NULL, ARG_NO_PAGER },
2769 {}
2770 };
2771
2772 int c, r;
2773
2774 assert(argc >= 0);
2775 assert(argv);
2776
2777 while ((c = getopt_long(argc, argv, "h46i:t:c:p:", options, NULL)) >= 0)
2778 switch(c) {
2779
2780 case 'h':
2781 return native_help();
2782
2783 case ARG_VERSION:
2784 return version();
2785
2786 case '4':
2787 arg_family = AF_INET;
2788 break;
2789
2790 case '6':
2791 arg_family = AF_INET6;
2792 break;
2793
2794 case 'i':
2795 arg_ifname = mfree(arg_ifname);
2796 r = ifname_mangle(optarg, true);
2797 if (r < 0)
2798 return r;
2799 break;
2800
2801 case 't':
2802 if (streq(optarg, "help")) {
2803 help_dns_types();
2804 return 0;
2805 }
2806
2807 r = dns_type_from_string(optarg);
2808 if (r < 0) {
2809 log_error("Failed to parse RR record type %s", optarg);
2810 return r;
2811 }
2812 arg_type = (uint16_t) r;
2813 assert((int) arg_type == r);
2814
2815 break;
2816
2817 case 'c':
2818 if (streq(optarg, "help")) {
2819 help_dns_classes();
2820 return 0;
2821 }
2822
2823 r = dns_class_from_string(optarg);
2824 if (r < 0) {
2825 log_error("Failed to parse RR record class %s", optarg);
2826 return r;
2827 }
2828 arg_class = (uint16_t) r;
2829 assert((int) arg_class == r);
2830
2831 break;
2832
2833 case ARG_LEGEND:
2834 r = parse_boolean(optarg);
2835 if (r < 0)
2836 return log_error_errno(r, "Failed to parse --legend= argument");
2837
2838 arg_legend = r;
2839 break;
2840
2841 case 'p':
2842 if (streq(optarg, "help")) {
2843 help_protocol_types();
2844 return 0;
2845 } else if (streq(optarg, "dns"))
2846 arg_flags |= SD_RESOLVED_DNS;
2847 else if (streq(optarg, "llmnr"))
2848 arg_flags |= SD_RESOLVED_LLMNR;
2849 else if (streq(optarg, "llmnr-ipv4"))
2850 arg_flags |= SD_RESOLVED_LLMNR_IPV4;
2851 else if (streq(optarg, "llmnr-ipv6"))
2852 arg_flags |= SD_RESOLVED_LLMNR_IPV6;
2853 else if (streq(optarg, "mdns"))
2854 arg_flags |= SD_RESOLVED_MDNS;
2855 else if (streq(optarg, "mdns-ipv4"))
2856 arg_flags |= SD_RESOLVED_MDNS_IPV4;
2857 else if (streq(optarg, "mdns-ipv6"))
2858 arg_flags |= SD_RESOLVED_MDNS_IPV6;
2859 else
2860 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
2861 "Unknown protocol specifier: %s",
2862 optarg);
2863
2864 break;
2865
2866 case ARG_RAW:
2867 if (on_tty())
2868 return log_error_errno(SYNTHETIC_ERRNO(ENOTTY),
2869 "Refusing to write binary data to tty.");
2870
2871 if (optarg == NULL || streq(optarg, "payload"))
2872 arg_raw = RAW_PAYLOAD;
2873 else if (streq(optarg, "packet"))
2874 arg_raw = RAW_PACKET;
2875 else
2876 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
2877 "Unknown --raw specifier \"%s\".",
2878 optarg);
2879
2880 arg_legend = false;
2881 break;
2882
2883 case ARG_CNAME:
2884 r = parse_boolean(optarg);
2885 if (r < 0)
2886 return log_error_errno(r, "Failed to parse --cname= argument.");
2887 SET_FLAG(arg_flags, SD_RESOLVED_NO_CNAME, r == 0);
2888 break;
2889
2890 case ARG_SERVICE_ADDRESS:
2891 r = parse_boolean(optarg);
2892 if (r < 0)
2893 return log_error_errno(r, "Failed to parse --service-address= argument.");
2894 SET_FLAG(arg_flags, SD_RESOLVED_NO_ADDRESS, r == 0);
2895 break;
2896
2897 case ARG_SERVICE_TXT:
2898 r = parse_boolean(optarg);
2899 if (r < 0)
2900 return log_error_errno(r, "Failed to parse --service-txt= argument.");
2901 SET_FLAG(arg_flags, SD_RESOLVED_NO_TXT, r == 0);
2902 break;
2903
2904 case ARG_SEARCH:
2905 r = parse_boolean(optarg);
2906 if (r < 0)
2907 return log_error_errno(r, "Failed to parse --search argument.");
2908 SET_FLAG(arg_flags, SD_RESOLVED_NO_SEARCH, r == 0);
2909 break;
2910
2911 case ARG_NO_PAGER:
2912 arg_pager_flags |= PAGER_DISABLE;
2913 break;
2914
2915 case '?':
2916 return -EINVAL;
2917
2918 default:
2919 assert_not_reached("Unhandled option");
2920 }
2921
2922 if (arg_type == 0 && arg_class != 0)
2923 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
2924 "--class= may only be used in conjunction with --type=.");
2925
2926 if (arg_type != 0 && arg_class == 0)
2927 arg_class = DNS_CLASS_IN;
2928
2929 if (arg_class != 0 && arg_type == 0)
2930 arg_type = DNS_TYPE_A;
2931
2932 return 1 /* work to do */;
2933 }
2934
2935 static int native_main(int argc, char *argv[], sd_bus *bus) {
2936
2937 static const Verb verbs[] = {
2938 { "help", VERB_ANY, VERB_ANY, 0, verb_help },
2939 { "status", VERB_ANY, VERB_ANY, VERB_DEFAULT, verb_status },
2940 { "query", 2, VERB_ANY, 0, verb_query },
2941 { "service", 2, 4, 0, verb_service },
2942 { "openpgp", 2, VERB_ANY, 0, verb_openpgp },
2943 { "tlsa", 2, VERB_ANY, 0, verb_tlsa },
2944 { "statistics", VERB_ANY, 1, 0, show_statistics },
2945 { "reset-statistics", VERB_ANY, 1, 0, reset_statistics },
2946 { "flush-caches", VERB_ANY, 1, 0, flush_caches },
2947 { "reset-server-features", VERB_ANY, 1, 0, reset_server_features },
2948 { "dns", VERB_ANY, VERB_ANY, 0, verb_dns },
2949 { "domain", VERB_ANY, VERB_ANY, 0, verb_domain },
2950 { "llmnr", VERB_ANY, 3, 0, verb_llmnr },
2951 { "mdns", VERB_ANY, 3, 0, verb_mdns },
2952 { "dnsovertls", VERB_ANY, 3, 0, verb_dns_over_tls },
2953 { "dnssec", VERB_ANY, 3, 0, verb_dnssec },
2954 { "nta", VERB_ANY, VERB_ANY, 0, verb_nta },
2955 { "revert", 2, 2, 0, verb_revert_link },
2956 {}
2957 };
2958
2959 return dispatch_verb(argc, argv, verbs, bus);
2960 }
2961
2962 static int translate(const char *verb, const char *single_arg, size_t num_args, char **args, sd_bus *bus) {
2963 char **fake, **p;
2964 size_t num, i;
2965
2966 assert(verb);
2967 assert(num_args == 0 || args);
2968
2969 num = !!single_arg + num_args + 1;
2970
2971 p = fake = newa0(char *, num + 1);
2972 *p++ = (char *) verb;
2973 if (single_arg)
2974 *p++ = (char *) single_arg;
2975 for (i = 0; i < num_args; i++)
2976 *p++ = args[i];
2977
2978 optind = 0;
2979 return native_main((int) num, fake, bus);
2980 }
2981
2982 static int compat_main(int argc, char *argv[], sd_bus *bus) {
2983 int r = 0;
2984
2985 switch (arg_mode) {
2986 case MODE_RESOLVE_HOST:
2987 case MODE_RESOLVE_RECORD:
2988 return translate("query", NULL, argc - optind, argv + optind, bus);
2989
2990 case MODE_RESOLVE_SERVICE:
2991 return translate("service", NULL, argc - optind, argv + optind, bus);
2992
2993 case MODE_RESOLVE_OPENPGP:
2994 return translate("openpgp", NULL, argc - optind, argv + optind, bus);
2995
2996 case MODE_RESOLVE_TLSA:
2997 return translate("tlsa", arg_service_family, argc - optind, argv + optind, bus);
2998
2999 case MODE_STATISTICS:
3000 return translate("statistics", NULL, 0, NULL, bus);
3001
3002 case MODE_RESET_STATISTICS:
3003 return translate("reset-statistics", NULL, 0, NULL, bus);
3004
3005 case MODE_FLUSH_CACHES:
3006 return translate("flush-caches", NULL, 0, NULL, bus);
3007
3008 case MODE_RESET_SERVER_FEATURES:
3009 return translate("reset-server-features", NULL, 0, NULL, bus);
3010
3011 case MODE_STATUS:
3012 return translate("status", NULL, argc - optind, argv + optind, bus);
3013
3014 case MODE_SET_LINK:
3015 assert(arg_ifname);
3016
3017 if (arg_set_dns) {
3018 r = translate("dns", arg_ifname, strv_length(arg_set_dns), arg_set_dns, bus);
3019 if (r < 0)
3020 return r;
3021 }
3022
3023 if (arg_set_domain) {
3024 r = translate("domain", arg_ifname, strv_length(arg_set_domain), arg_set_domain, bus);
3025 if (r < 0)
3026 return r;
3027 }
3028
3029 if (arg_set_nta) {
3030 r = translate("nta", arg_ifname, strv_length(arg_set_nta), arg_set_nta, bus);
3031 if (r < 0)
3032 return r;
3033 }
3034
3035 if (arg_set_llmnr) {
3036 r = translate("llmnr", arg_ifname, 1, (char **) &arg_set_llmnr, bus);
3037 if (r < 0)
3038 return r;
3039 }
3040
3041 if (arg_set_mdns) {
3042 r = translate("mdns", arg_ifname, 1, (char **) &arg_set_mdns, bus);
3043 if (r < 0)
3044 return r;
3045 }
3046
3047 if (arg_set_dns_over_tls) {
3048 r = translate("dnsovertls", arg_ifname, 1, (char **) &arg_set_dns_over_tls, bus);
3049 if (r < 0)
3050 return r;
3051 }
3052
3053 if (arg_set_dnssec) {
3054 r = translate("dnssec", arg_ifname, 1, (char **) &arg_set_dnssec, bus);
3055 if (r < 0)
3056 return r;
3057 }
3058
3059 return r;
3060
3061 case MODE_REVERT_LINK:
3062 assert(arg_ifname);
3063
3064 return translate("revert", arg_ifname, 0, NULL, bus);
3065
3066 case _MODE_INVALID:
3067 assert_not_reached("invalid mode");
3068 }
3069
3070 return 0;
3071 }
3072
3073 static int run(int argc, char **argv) {
3074 _cleanup_(sd_bus_flush_close_unrefp) sd_bus *bus = NULL;
3075 int r;
3076
3077 setlocale(LC_ALL, "");
3078 log_parse_environment();
3079 log_open();
3080
3081 if (streq(program_invocation_short_name, "resolvconf"))
3082 r = resolvconf_parse_argv(argc, argv);
3083 else if (streq(program_invocation_short_name, "systemd-resolve"))
3084 r = compat_parse_argv(argc, argv);
3085 else
3086 r = native_parse_argv(argc, argv);
3087 if (r <= 0)
3088 return r;
3089
3090 r = sd_bus_open_system(&bus);
3091 if (r < 0)
3092 return log_error_errno(r, "sd_bus_open_system: %m");
3093
3094 if (STR_IN_SET(program_invocation_short_name, "systemd-resolve", "resolvconf"))
3095 return compat_main(argc, argv, bus);
3096
3097 return native_main(argc, argv, bus);
3098 }
3099
3100 DEFINE_MAIN_FUNCTION(run);
Unnamed repository; edit this file 'description' to name the repository.