]>
git.ipfire.org Git - thirdparty/systemd.git/blob - src/shared/switch-root.c
1 /* SPDX-License-Identifier: LGPL-2.1+ */
3 This file is part of systemd.
5 Copyright 2012 Harald Hoyer, Lennart Poettering
13 #include <sys/mount.h>
17 #include "base-filesystem.h"
23 #include "mount-util.h"
24 #include "path-util.h"
26 #include "stdio-util.h"
27 #include "string-util.h"
29 #include "switch-root.h"
30 #include "user-util.h"
33 int switch_root(const char *new_root
,
34 const char *old_root_after
, /* path below the new root, where to place the old root after the transition */
35 bool unmount_old_root
,
36 unsigned long mount_flags
) { /* MS_MOVE or MS_BIND */
38 _cleanup_free_
char *resolved_old_root_after
= NULL
;
39 _cleanup_close_
int old_root_fd
= -1;
45 assert(old_root_after
);
47 if (path_equal(new_root
, "/"))
50 /* Check if we shall remove the contents of the old root */
51 old_root_remove
= in_initrd();
52 if (old_root_remove
) {
53 old_root_fd
= open("/", O_RDONLY
|O_NONBLOCK
|O_CLOEXEC
|O_NOCTTY
|O_DIRECTORY
);
55 return log_error_errno(errno
, "Failed to open root directory: %m");
58 /* Determine where we shall place the old root after the transition */
59 r
= chase_symlinks(old_root_after
, new_root
, CHASE_PREFIX_ROOT
|CHASE_NONEXISTENT
, &resolved_old_root_after
);
61 return log_error_errno(r
, "Failed to resolve %s/%s: %m", new_root
, old_root_after
);
62 if (r
== 0) /* Doesn't exist yet. Let's create it */
63 (void) mkdir_p_label(resolved_old_root_after
, 0755);
65 /* Work-around for kernel design: the kernel refuses MS_MOVE if any file systems are mounted MS_SHARED. Hence
66 * remount them MS_PRIVATE here as a work-around.
68 * https://bugzilla.redhat.com/show_bug.cgi?id=847418 */
69 if (mount(NULL
, "/", NULL
, MS_REC
|MS_PRIVATE
, NULL
) < 0)
70 return log_error_errno(errno
, "Failed to set \"/\" mount propagation to private: %m");
72 FOREACH_STRING(i
, "/sys", "/dev", "/run", "/proc") {
73 _cleanup_free_
char *chased
= NULL
;
75 r
= chase_symlinks(i
, new_root
, CHASE_PREFIX_ROOT
|CHASE_NONEXISTENT
, &chased
);
77 return log_error_errno(r
, "Failed to resolve %s/%s: %m", new_root
, i
);
79 /* Already exists. Let's see if it is a mount point already. */
80 r
= path_is_mount_point(chased
, NULL
, 0);
82 return log_error_errno(r
, "Failed to determine whether %s is a mount point: %m", chased
);
83 if (r
> 0) /* If it is already mounted, then do nothing */
86 /* Doesn't exist yet? */
87 (void) mkdir_p_label(chased
, 0755);
89 if (mount(i
, chased
, NULL
, mount_flags
, NULL
) < 0)
90 return log_error_errno(r
, "Failed to mount %s to %s: %m", i
, chased
);
93 /* Do not fail if base_filesystem_create() fails. Not all switch roots are like base_filesystem_create() wants
94 * them to look like. They might even boot, if they are RO and don't have the FS layout. Just ignore the error
95 * and switch_root() nevertheless. */
96 (void) base_filesystem_create(new_root
, UID_INVALID
, GID_INVALID
);
98 if (chdir(new_root
) < 0)
99 return log_error_errno(errno
, "Failed to change directory to %s: %m", new_root
);
101 /* We first try a pivot_root() so that we can umount the old root dir. In many cases (i.e. where rootfs is /),
102 * that's not possible however, and hence we simply overmount root */
103 if (pivot_root(new_root
, resolved_old_root_after
) >= 0) {
105 /* Immediately get rid of the old root, if detach_oldroot is set.
106 * Since we are running off it we need to do this lazily. */
107 if (unmount_old_root
) {
108 r
= umount_recursive(old_root_after
, MNT_DETACH
);
110 log_warning_errno(r
, "Failed to unmount old root directory tree, ignoring: %m");
113 } else if (mount(new_root
, "/", NULL
, MS_MOVE
, NULL
) < 0)
114 return log_error_errno(errno
, "Failed to move %s to /: %m", new_root
);
117 return log_error_errno(errno
, "Failed to change root: %m");
120 return log_error_errno(errno
, "Failed to change directory: %m");
122 if (old_root_fd
>= 0) {
125 if (fstat(old_root_fd
, &rb
) < 0)
126 log_warning_errno(errno
, "Failed to stat old root directory, leaving: %m");
128 (void) rm_rf_children(old_root_fd
, 0, &rb
);