]> git.ipfire.org Git - thirdparty/systemd.git/blob - src/core/main.c
projects / thirdparty / systemd.git / blob
? search:
summary | shortlog | log | commit | commitdiff | tree
blame | history | raw | HEAD
core: add transient units
[thirdparty/systemd.git] / src / core / main.c
1 /*-*- Mode: C; c-basic-offset: 8; indent-tabs-mode: nil -*-*/
2
3 /***
4 This file is part of systemd.
5
6 Copyright 2010 Lennart Poettering
7
8 systemd is free software; you can redistribute it and/or modify it
9 under the terms of the GNU Lesser General Public License as published by
10 the Free Software Foundation; either version 2.1 of the License, or
11 (at your option) any later version.
12
13 systemd is distributed in the hope that it will be useful, but
14 WITHOUT ANY WARRANTY; without even the implied warranty of
15 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
16 Lesser General Public License for more details.
17
18 You should have received a copy of the GNU Lesser General Public License
19 along with systemd; If not, see <http://www.gnu.org/licenses/>.
20 ***/
21
22 #include <dbus/dbus.h>
23
24 #include <stdio.h>
25 #include <errno.h>
26 #include <string.h>
27 #include <unistd.h>
28 #include <sys/types.h>
29 #include <sys/stat.h>
30 #include <getopt.h>
31 #include <signal.h>
32 #include <sys/wait.h>
33 #include <fcntl.h>
34 #include <sys/prctl.h>
35 #include <sys/mount.h>
36
37 #include "manager.h"
38 #include "log.h"
39 #include "load-fragment.h"
40 #include "fdset.h"
41 #include "special.h"
42 #include "conf-parser.h"
43 #include "dbus-common.h"
44 #include "missing.h"
45 #include "label.h"
46 #include "build.h"
47 #include "strv.h"
48 #include "def.h"
49 #include "virt.h"
50 #include "watchdog.h"
51 #include "path-util.h"
52 #include "switch-root.h"
53 #include "capability.h"
54 #include "killall.h"
55 #include "env-util.h"
56 #include "hwclock.h"
57 #include "sd-daemon.h"
58 #include "sd-messages.h"
59
60 #include "mount-setup.h"
61 #include "loopback-setup.h"
62 #ifdef HAVE_KMOD
63 #include "kmod-setup.h"
64 #endif
65 #include "hostname-setup.h"
66 #include "machine-id-setup.h"
67 #include "locale-setup.h"
68 #include "selinux-setup.h"
69 #include "ima-setup.h"
70 #include "fileio.h"
71 #include "smack-setup.h"
72
73 static enum {
74 ACTION_RUN,
75 ACTION_HELP,
76 ACTION_VERSION,
77 ACTION_TEST,
78 ACTION_DUMP_CONFIGURATION_ITEMS,
79 ACTION_DONE
80 } arg_action = ACTION_RUN;
81
82 static char *arg_default_unit = NULL;
83 static SystemdRunningAs arg_running_as = _SYSTEMD_RUNNING_AS_INVALID;
84
85 static bool arg_dump_core = true;
86 static bool arg_crash_shell = false;
87 static int arg_crash_chvt = -1;
88 static bool arg_confirm_spawn = false;
89 static bool arg_show_status = true;
90 static bool arg_switched_root = false;
91 static char ***arg_join_controllers = NULL;
92 static ExecOutput arg_default_std_output = EXEC_OUTPUT_JOURNAL;
93 static ExecOutput arg_default_std_error = EXEC_OUTPUT_INHERIT;
94 static usec_t arg_runtime_watchdog = 0;
95 static usec_t arg_shutdown_watchdog = 10 * USEC_PER_MINUTE;
96 static char **arg_default_environment = NULL;
97 static struct rlimit *arg_default_rlimit[RLIMIT_NLIMITS] = {};
98 static uint64_t arg_capability_bounding_set_drop = 0;
99 static nsec_t arg_timer_slack_nsec = (nsec_t) -1;
100
101 static FILE* serialization = NULL;
102
103 static void nop_handler(int sig) {
104 }
105
106 _noreturn_ static void crash(int sig) {
107
108 if (getpid() != 1)
109 /* Pass this on immediately, if this is not PID 1 */
110 raise(sig);
111 else if (!arg_dump_core)
112 log_error("Caught <%s>, not dumping core.", signal_to_string(sig));
113 else {
114 struct sigaction sa = {
115 .sa_handler = nop_handler,
116 .sa_flags = SA_NOCLDSTOP|SA_RESTART,
117 };
118 pid_t pid;
119
120 /* We want to wait for the core process, hence let's enable SIGCHLD */
121 sigaction(SIGCHLD, &sa, NULL);
122
123 pid = fork();
124 if (pid < 0)
125 log_error("Caught <%s>, cannot fork for core dump: %s", signal_to_string(sig), strerror(errno));
126
127 else if (pid == 0) {
128 struct rlimit rl = {};
129
130 /* Enable default signal handler for core dump */
131 zero(sa);
132 sa.sa_handler = SIG_DFL;
133 sigaction(sig, &sa, NULL);
134
135 /* Don't limit the core dump size */
136 rl.rlim_cur = RLIM_INFINITY;
137 rl.rlim_max = RLIM_INFINITY;
138 setrlimit(RLIMIT_CORE, &rl);
139
140 /* Just to be sure... */
141 chdir("/");
142
143 /* Raise the signal again */
144 raise(sig);
145
146 assert_not_reached("We shouldn't be here...");
147 _exit(1);
148
149 } else {
150 siginfo_t status;
151 int r;
152
153 /* Order things nicely. */
154 r = wait_for_terminate(pid, &status);
155 if (r < 0)
156 log_error("Caught <%s>, waitpid() failed: %s", signal_to_string(sig), strerror(-r));
157 else if (status.si_code != CLD_DUMPED)
158 log_error("Caught <%s>, core dump failed.", signal_to_string(sig));
159 else
160 log_error("Caught <%s>, dumped core as pid %lu.", signal_to_string(sig), (unsigned long) pid);
161 }
162 }
163
164 if (arg_crash_chvt)
165 chvt(arg_crash_chvt);
166
167 if (arg_crash_shell) {
168 struct sigaction sa = {
169 .sa_handler = SIG_IGN,
170 .sa_flags = SA_NOCLDSTOP|SA_NOCLDWAIT|SA_RESTART,
171 };
172 pid_t pid;
173
174 log_info("Executing crash shell in 10s...");
175 sleep(10);
176
177 /* Let the kernel reap children for us */
178 assert_se(sigaction(SIGCHLD, &sa, NULL) == 0);
179
180 pid = fork();
181 if (pid < 0)
182 log_error("Failed to fork off crash shell: %m");
183 else if (pid == 0) {
184 make_console_stdio();
185 execl("/bin/sh", "/bin/sh", NULL);
186
187 log_error("execl() failed: %m");
188 _exit(1);
189 }
190
191 log_info("Successfully spawned crash shell as pid %lu.", (unsigned long) pid);
192 }
193
194 log_info("Freezing execution.");
195 freeze();
196 }
197
198 static void install_crash_handler(void) {
199 struct sigaction sa = {
200 .sa_handler = crash,
201 .sa_flags = SA_NODEFER,
202 };
203
204 sigaction_many(&sa, SIGNALS_CRASH_HANDLER, -1);
205 }
206
207 static int console_setup(bool do_reset) {
208 int tty_fd, r;
209
210 /* If we are init, we connect stdin/stdout/stderr to /dev/null
211 * and make sure we don't have a controlling tty. */
212
213 release_terminal();
214
215 if (!do_reset)
216 return 0;
217
218 tty_fd = open_terminal("/dev/console", O_WRONLY|O_NOCTTY|O_CLOEXEC);
219 if (tty_fd < 0) {
220 log_error("Failed to open /dev/console: %s", strerror(-tty_fd));
221 return -tty_fd;
222 }
223
224 /* We don't want to force text mode.
225 * plymouth may be showing pictures already from initrd. */
226 r = reset_terminal_fd(tty_fd, false);
227 if (r < 0)
228 log_error("Failed to reset /dev/console: %s", strerror(-r));
229
230 close_nointr_nofail(tty_fd);
231 return r;
232 }
233
234 static int set_default_unit(const char *u) {
235 char *c;
236
237 assert(u);
238
239 c = strdup(u);
240 if (!c)
241 return -ENOMEM;
242
243 free(arg_default_unit);
244 arg_default_unit = c;
245
246 return 0;
247 }
248
249 static int parse_proc_cmdline_word(const char *word) {
250
251 static const char * const rlmap[] = {
252 "emergency", SPECIAL_EMERGENCY_TARGET,
253 "-b", SPECIAL_EMERGENCY_TARGET,
254 "single", SPECIAL_RESCUE_TARGET,
255 "-s", SPECIAL_RESCUE_TARGET,
256 "s", SPECIAL_RESCUE_TARGET,
257 "S", SPECIAL_RESCUE_TARGET,
258 "1", SPECIAL_RESCUE_TARGET,
259 "2", SPECIAL_RUNLEVEL2_TARGET,
260 "3", SPECIAL_RUNLEVEL3_TARGET,
261 "4", SPECIAL_RUNLEVEL4_TARGET,
262 "5", SPECIAL_RUNLEVEL5_TARGET,
263 };
264
265 assert(word);
266
267 if (startswith(word, "systemd.unit=")) {
268
269 if (!in_initrd())
270 return set_default_unit(word + 13);
271
272 } else if (startswith(word, "rd.systemd.unit=")) {
273
274 if (in_initrd())
275 return set_default_unit(word + 16);
276
277 } else if (startswith(word, "systemd.log_target=")) {
278
279 if (log_set_target_from_string(word + 19) < 0)
280 log_warning("Failed to parse log target %s. Ignoring.", word + 19);
281
282 } else if (startswith(word, "systemd.log_level=")) {
283
284 if (log_set_max_level_from_string(word + 18) < 0)
285 log_warning("Failed to parse log level %s. Ignoring.", word + 18);
286
287 } else if (startswith(word, "systemd.log_color=")) {
288
289 if (log_show_color_from_string(word + 18) < 0)
290 log_warning("Failed to parse log color setting %s. Ignoring.", word + 18);
291
292 } else if (startswith(word, "systemd.log_location=")) {
293
294 if (log_show_location_from_string(word + 21) < 0)
295 log_warning("Failed to parse log location setting %s. Ignoring.", word + 21);
296
297 } else if (startswith(word, "systemd.dump_core=")) {
298 int r;
299
300 if ((r = parse_boolean(word + 18)) < 0)
301 log_warning("Failed to parse dump core switch %s. Ignoring.", word + 18);
302 else
303 arg_dump_core = r;
304
305 } else if (startswith(word, "systemd.crash_shell=")) {
306 int r;
307
308 if ((r = parse_boolean(word + 20)) < 0)
309 log_warning("Failed to parse crash shell switch %s. Ignoring.", word + 20);
310 else
311 arg_crash_shell = r;
312
313 } else if (startswith(word, "systemd.confirm_spawn=")) {
314 int r;
315
316 if ((r = parse_boolean(word + 22)) < 0)
317 log_warning("Failed to parse confirm spawn switch %s. Ignoring.", word + 22);
318 else
319 arg_confirm_spawn = r;
320
321 } else if (startswith(word, "systemd.crash_chvt=")) {
322 int k;
323
324 if (safe_atoi(word + 19, &k) < 0)
325 log_warning("Failed to parse crash chvt switch %s. Ignoring.", word + 19);
326 else
327 arg_crash_chvt = k;
328
329 } else if (startswith(word, "systemd.show_status=")) {
330 int r;
331
332 if ((r = parse_boolean(word + 20)) < 0)
333 log_warning("Failed to parse show status switch %s. Ignoring.", word + 20);
334 else
335 arg_show_status = r;
336 } else if (startswith(word, "systemd.default_standard_output=")) {
337 int r;
338
339 if ((r = exec_output_from_string(word + 32)) < 0)
340 log_warning("Failed to parse default standard output switch %s. Ignoring.", word + 32);
341 else
342 arg_default_std_output = r;
343 } else if (startswith(word, "systemd.default_standard_error=")) {
344 int r;
345
346 if ((r = exec_output_from_string(word + 31)) < 0)
347 log_warning("Failed to parse default standard error switch %s. Ignoring.", word + 31);
348 else
349 arg_default_std_error = r;
350 } else if (startswith(word, "systemd.setenv=")) {
351 _cleanup_free_ char *cenv = NULL;
352 char *eq;
353 int r;
354
355 cenv = strdup(word + 15);
356 if (!cenv)
357 return -ENOMEM;
358
359 eq = strchr(cenv, '=');
360 if (!eq) {
361 if (!env_name_is_valid(cenv))
362 log_warning("Environment variable name '%s' is not valid. Ignoring.", cenv);
363 else {
364 r = unsetenv(cenv);
365 if (r < 0)
366 log_warning("Unsetting environment variable '%s' failed, ignoring: %m", cenv);
367 }
368 } else {
369 if (!env_assignment_is_valid(cenv))
370 log_warning("Environment variable assignment '%s' is not valid. Ignoring.", cenv);
371 else {
372 *eq = 0;
373 r = setenv(cenv, eq + 1, 1);
374 if (r < 0)
375 log_warning("Setting environment variable '%s=%s' failed, ignoring: %m", cenv, eq + 1);
376 }
377 }
378
379 } else if (startswith(word, "systemd.") ||
380 (in_initrd() && startswith(word, "rd.systemd."))) {
381
382 const char *c;
383
384 /* Ignore systemd.journald.xyz and friends */
385 c = word;
386 if (startswith(c, "rd."))
387 c += 3;
388 if (startswith(c, "systemd."))
389 c += 8;
390 if (c[strcspn(c, ".=")] != '.') {
391
392 log_warning("Unknown kernel switch %s. Ignoring.", word);
393
394 log_info("Supported kernel switches:\n"
395 "systemd.unit=UNIT Default unit to start\n"
396 "rd.systemd.unit=UNIT Default unit to start when run in initrd\n"
397 "systemd.dump_core=0|1 Dump core on crash\n"
398 "systemd.crash_shell=0|1 Run shell on crash\n"
399 "systemd.crash_chvt=N Change to VT #N on crash\n"
400 "systemd.confirm_spawn=0|1 Confirm every process spawn\n"
401 "systemd.show_status=0|1 Show status updates on the console during bootup\n"
402 "systemd.log_target=console|kmsg|journal|journal-or-kmsg|syslog|syslog-or-kmsg|null\n"
403 " Log target\n"
404 "systemd.log_level=LEVEL Log level\n"
405 "systemd.log_color=0|1 Highlight important log messages\n"
406 "systemd.log_location=0|1 Include code location in log messages\n"
407 "systemd.default_standard_output=null|tty|syslog|syslog+console|kmsg|kmsg+console|journal|journal+console\n"
408 " Set default log output for services\n"
409 "systemd.default_standard_error=null|tty|syslog|syslog+console|kmsg|kmsg+console|journal|journal+console\n"
410 " Set default log error output for services\n"
411 "systemd.setenv=ASSIGNMENT Set an environment variable for all spawned processes\n");
412 }
413
414 } else if (streq(word, "quiet"))
415 arg_show_status = false;
416 else if (streq(word, "debug"))
417 log_set_max_level(LOG_DEBUG);
418 else if (!in_initrd()) {
419 unsigned i;
420
421 /* SysV compatibility */
422 for (i = 0; i < ELEMENTSOF(rlmap); i += 2)
423 if (streq(word, rlmap[i]))
424 return set_default_unit(rlmap[i+1]);
425 }
426
427 return 0;
428 }
429
430 #define DEFINE_SETTER(name, func, descr) \
431 static int name(const char *unit, \
432 const char *filename, \
433 unsigned line, \
434 const char *section, \
435 const char *lvalue, \
436 int ltype, \
437 const char *rvalue, \
438 void *data, \
439 void *userdata) { \
440 \
441 int r; \
442 \
443 assert(filename); \
444 assert(lvalue); \
445 assert(rvalue); \
446 \
447 r = func(rvalue); \
448 if (r < 0) \
449 log_syntax(unit, LOG_ERR, filename, line, -r, \
450 "Invalid " descr "'%s': %s", \
451 rvalue, strerror(-r)); \
452 \
453 return 0; \
454 }
455
456 DEFINE_SETTER(config_parse_level2, log_set_max_level_from_string, "log level")
457 DEFINE_SETTER(config_parse_target, log_set_target_from_string, "target")
458 DEFINE_SETTER(config_parse_color, log_show_color_from_string, "color" )
459 DEFINE_SETTER(config_parse_location, log_show_location_from_string, "location")
460
461
462 static int config_parse_cpu_affinity2(const char *unit,
463 const char *filename,
464 unsigned line,
465 const char *section,
466 const char *lvalue,
467 int ltype,
468 const char *rvalue,
469 void *data,
470 void *userdata) {
471
472 char *w;
473 size_t l;
474 char *state;
475 cpu_set_t *c = NULL;
476 unsigned ncpus = 0;
477
478 assert(filename);
479 assert(lvalue);
480 assert(rvalue);
481
482 FOREACH_WORD_QUOTED(w, l, rvalue, state) {
483 char *t;
484 int r;
485 unsigned cpu;
486
487 if (!(t = strndup(w, l)))
488 return log_oom();
489
490 r = safe_atou(t, &cpu);
491 free(t);
492
493 if (!c)
494 if (!(c = cpu_set_malloc(&ncpus)))
495 return log_oom();
496
497 if (r < 0 || cpu >= ncpus) {
498 log_syntax(unit, LOG_ERR, filename, line, -r,
499 "Failed to parse CPU affinity '%s'", rvalue);
500 CPU_FREE(c);
501 return -EBADMSG;
502 }
503
504 CPU_SET_S(cpu, CPU_ALLOC_SIZE(ncpus), c);
505 }
506
507 if (c) {
508 if (sched_setaffinity(0, CPU_ALLOC_SIZE(ncpus), c) < 0)
509 log_warning_unit(unit, "Failed to set CPU affinity: %m");
510
511 CPU_FREE(c);
512 }
513
514 return 0;
515 }
516
517 static void strv_free_free(char ***l) {
518 char ***i;
519
520 if (!l)
521 return;
522
523 for (i = l; *i; i++)
524 strv_free(*i);
525
526 free(l);
527 }
528
529 static void free_join_controllers(void) {
530 strv_free_free(arg_join_controllers);
531 arg_join_controllers = NULL;
532 }
533
534 static int config_parse_join_controllers(const char *unit,
535 const char *filename,
536 unsigned line,
537 const char *section,
538 const char *lvalue,
539 int ltype,
540 const char *rvalue,
541 void *data,
542 void *userdata) {
543
544 unsigned n = 0;
545 char *state, *w;
546 size_t length;
547
548 assert(filename);
549 assert(lvalue);
550 assert(rvalue);
551
552 free_join_controllers();
553
554 FOREACH_WORD_QUOTED(w, length, rvalue, state) {
555 char *s, **l;
556
557 s = strndup(w, length);
558 if (!s)
559 return log_oom();
560
561 l = strv_split(s, ",");
562 free(s);
563
564 strv_uniq(l);
565
566 if (strv_length(l) <= 1) {
567 strv_free(l);
568 continue;
569 }
570
571 if (!arg_join_controllers) {
572 arg_join_controllers = new(char**, 2);
573 if (!arg_join_controllers) {
574 strv_free(l);
575 return log_oom();
576 }
577
578 arg_join_controllers[0] = l;
579 arg_join_controllers[1] = NULL;
580
581 n = 1;
582 } else {
583 char ***a;
584 char ***t;
585
586 t = new0(char**, n+2);
587 if (!t) {
588 strv_free(l);
589 return log_oom();
590 }
591
592 n = 0;
593
594 for (a = arg_join_controllers; *a; a++) {
595
596 if (strv_overlap(*a, l)) {
597 char **c;
598
599 c = strv_merge(*a, l);
600 if (!c) {
601 strv_free(l);
602 strv_free_free(t);
603 return log_oom();
604 }
605
606 strv_free(l);
607 l = c;
608 } else {
609 char **c;
610
611 c = strv_copy(*a);
612 if (!c) {
613 strv_free(l);
614 strv_free_free(t);
615 return log_oom();
616 }
617
618 t[n++] = c;
619 }
620 }
621
622 t[n++] = strv_uniq(l);
623
624 strv_free_free(arg_join_controllers);
625 arg_join_controllers = t;
626 }
627 }
628
629 return 0;
630 }
631
632 static int parse_config_file(void) {
633
634 const ConfigTableItem items[] = {
635 { "Manager", "LogLevel", config_parse_level2, 0, NULL },
636 { "Manager", "LogTarget", config_parse_target, 0, NULL },
637 { "Manager", "LogColor", config_parse_color, 0, NULL },
638 { "Manager", "LogLocation", config_parse_location, 0, NULL },
639 { "Manager", "DumpCore", config_parse_bool, 0, &arg_dump_core },
640 { "Manager", "CrashShell", config_parse_bool, 0, &arg_crash_shell },
641 { "Manager", "ShowStatus", config_parse_bool, 0, &arg_show_status },
642 { "Manager", "CrashChVT", config_parse_int, 0, &arg_crash_chvt },
643 { "Manager", "CPUAffinity", config_parse_cpu_affinity2, 0, NULL },
644 { "Manager", "DefaultStandardOutput", config_parse_output, 0, &arg_default_std_output },
645 { "Manager", "DefaultStandardError", config_parse_output, 0, &arg_default_std_error },
646 { "Manager", "JoinControllers", config_parse_join_controllers, 0, &arg_join_controllers },
647 { "Manager", "RuntimeWatchdogSec", config_parse_sec, 0, &arg_runtime_watchdog },
648 { "Manager", "ShutdownWatchdogSec", config_parse_sec, 0, &arg_shutdown_watchdog },
649 { "Manager", "CapabilityBoundingSet", config_parse_bounding_set, 0, &arg_capability_bounding_set_drop },
650 { "Manager", "TimerSlackNSec", config_parse_nsec, 0, &arg_timer_slack_nsec },
651 { "Manager", "DefaultEnvironment", config_parse_environ, 0, &arg_default_environment },
652 { "Manager", "DefaultLimitCPU", config_parse_limit, 0, &arg_default_rlimit[RLIMIT_CPU]},
653 { "Manager", "DefaultLimitFSIZE", config_parse_limit, 0, &arg_default_rlimit[RLIMIT_FSIZE]},
654 { "Manager", "DefaultLimitDATA", config_parse_limit, 0, &arg_default_rlimit[RLIMIT_DATA]},
655 { "Manager", "DefaultLimitSTACK", config_parse_limit, 0, &arg_default_rlimit[RLIMIT_STACK]},
656 { "Manager", "DefaultLimitCORE", config_parse_limit, 0, &arg_default_rlimit[RLIMIT_CORE]},
657 { "Manager", "DefaultLimitRSS", config_parse_limit, 0, &arg_default_rlimit[RLIMIT_RSS]},
658 { "Manager", "DefaultLimitNOFILE", config_parse_limit, 0, &arg_default_rlimit[RLIMIT_NOFILE]},
659 { "Manager", "DefaultLimitAS", config_parse_limit, 0, &arg_default_rlimit[RLIMIT_AS]},
660 { "Manager", "DefaultLimitNPROC", config_parse_limit, 0, &arg_default_rlimit[RLIMIT_NPROC]},
661 { "Manager", "DefaultLimitMEMLOCK", config_parse_limit, 0, &arg_default_rlimit[RLIMIT_MEMLOCK]},
662 { "Manager", "DefaultLimitLOCKS", config_parse_limit, 0, &arg_default_rlimit[RLIMIT_LOCKS]},
663 { "Manager", "DefaultLimitSIGPENDING",config_parse_limit, 0, &arg_default_rlimit[RLIMIT_SIGPENDING]},
664 { "Manager", "DefaultLimitMSGQUEUE", config_parse_limit, 0, &arg_default_rlimit[RLIMIT_MSGQUEUE]},
665 { "Manager", "DefaultLimitNICE", config_parse_limit, 0, &arg_default_rlimit[RLIMIT_NICE]},
666 { "Manager", "DefaultLimitRTPRIO", config_parse_limit, 0, &arg_default_rlimit[RLIMIT_RTPRIO]},
667 { "Manager", "DefaultLimitRTTIME", config_parse_limit, 0, &arg_default_rlimit[RLIMIT_RTTIME]},
668 { NULL, NULL, NULL, 0, NULL }
669 };
670
671 _cleanup_fclose_ FILE *f;
672 const char *fn;
673 int r;
674
675 fn = arg_running_as == SYSTEMD_SYSTEM ? PKGSYSCONFDIR "/system.conf" : PKGSYSCONFDIR "/user.conf";
676 f = fopen(fn, "re");
677 if (!f) {
678 if (errno == ENOENT)
679 return 0;
680
681 log_warning("Failed to open configuration file '%s': %m", fn);
682 return 0;
683 }
684
685 r = config_parse(NULL, fn, f, "Manager\0", config_item_table_lookup, (void*) items, false, false, NULL);
686 if (r < 0)
687 log_warning("Failed to parse configuration file: %s", strerror(-r));
688
689 return 0;
690 }
691
692 static int parse_proc_cmdline(void) {
693 _cleanup_free_ char *line = NULL;
694 char *w, *state;
695 int r;
696 size_t l;
697
698 /* Don't read /proc/cmdline if we are in a container, since
699 * that is only relevant for the host system */
700 if (detect_container(NULL) > 0)
701 return 0;
702
703 r = read_one_line_file("/proc/cmdline", &line);
704 if (r < 0) {
705 log_warning("Failed to read /proc/cmdline, ignoring: %s", strerror(-r));
706 return 0;
707 }
708
709 FOREACH_WORD_QUOTED(w, l, line, state) {
710 _cleanup_free_ char *word;
711
712 word = strndup(w, l);
713 if (!word)
714 return log_oom();
715
716 r = parse_proc_cmdline_word(word);
717 if (r < 0) {
718 log_error("Failed on cmdline argument %s: %s", word, strerror(-r));
719 return r;
720 }
721 }
722
723 return 0;
724 }
725
726 static int parse_argv(int argc, char *argv[]) {
727
728 enum {
729 ARG_LOG_LEVEL = 0x100,
730 ARG_LOG_TARGET,
731 ARG_LOG_COLOR,
732 ARG_LOG_LOCATION,
733 ARG_UNIT,
734 ARG_SYSTEM,
735 ARG_USER,
736 ARG_TEST,
737 ARG_VERSION,
738 ARG_DUMP_CONFIGURATION_ITEMS,
739 ARG_DUMP_CORE,
740 ARG_CRASH_SHELL,
741 ARG_CONFIRM_SPAWN,
742 ARG_SHOW_STATUS,
743 ARG_DESERIALIZE,
744 ARG_SWITCHED_ROOT,
745 ARG_INTROSPECT,
746 ARG_DEFAULT_STD_OUTPUT,
747 ARG_DEFAULT_STD_ERROR
748 };
749
750 static const struct option options[] = {
751 { "log-level", required_argument, NULL, ARG_LOG_LEVEL },
752 { "log-target", required_argument, NULL, ARG_LOG_TARGET },
753 { "log-color", optional_argument, NULL, ARG_LOG_COLOR },
754 { "log-location", optional_argument, NULL, ARG_LOG_LOCATION },
755 { "unit", required_argument, NULL, ARG_UNIT },
756 { "system", no_argument, NULL, ARG_SYSTEM },
757 { "user", no_argument, NULL, ARG_USER },
758 { "test", no_argument, NULL, ARG_TEST },
759 { "help", no_argument, NULL, 'h' },
760 { "version", no_argument, NULL, ARG_VERSION },
761 { "dump-configuration-items", no_argument, NULL, ARG_DUMP_CONFIGURATION_ITEMS },
762 { "dump-core", optional_argument, NULL, ARG_DUMP_CORE },
763 { "crash-shell", optional_argument, NULL, ARG_CRASH_SHELL },
764 { "confirm-spawn", optional_argument, NULL, ARG_CONFIRM_SPAWN },
765 { "show-status", optional_argument, NULL, ARG_SHOW_STATUS },
766 { "deserialize", required_argument, NULL, ARG_DESERIALIZE },
767 { "switched-root", no_argument, NULL, ARG_SWITCHED_ROOT },
768 { "introspect", optional_argument, NULL, ARG_INTROSPECT },
769 { "default-standard-output", required_argument, NULL, ARG_DEFAULT_STD_OUTPUT, },
770 { "default-standard-error", required_argument, NULL, ARG_DEFAULT_STD_ERROR, },
771 { NULL, 0, NULL, 0 }
772 };
773
774 int c, r;
775
776 assert(argc >= 1);
777 assert(argv);
778
779 if (getpid() == 1)
780 opterr = 0;
781
782 while ((c = getopt_long(argc, argv, "hDbsz:", options, NULL)) >= 0)
783
784 switch (c) {
785
786 case ARG_LOG_LEVEL:
787 if ((r = log_set_max_level_from_string(optarg)) < 0) {
788 log_error("Failed to parse log level %s.", optarg);
789 return r;
790 }
791
792 break;
793
794 case ARG_LOG_TARGET:
795
796 if ((r = log_set_target_from_string(optarg)) < 0) {
797 log_error("Failed to parse log target %s.", optarg);
798 return r;
799 }
800
801 break;
802
803 case ARG_LOG_COLOR:
804
805 if (optarg) {
806 if ((r = log_show_color_from_string(optarg)) < 0) {
807 log_error("Failed to parse log color setting %s.", optarg);
808 return r;
809 }
810 } else
811 log_show_color(true);
812
813 break;
814
815 case ARG_LOG_LOCATION:
816
817 if (optarg) {
818 if ((r = log_show_location_from_string(optarg)) < 0) {
819 log_error("Failed to parse log location setting %s.", optarg);
820 return r;
821 }
822 } else
823 log_show_location(true);
824
825 break;
826
827 case ARG_DEFAULT_STD_OUTPUT:
828
829 if ((r = exec_output_from_string(optarg)) < 0) {
830 log_error("Failed to parse default standard output setting %s.", optarg);
831 return r;
832 } else
833 arg_default_std_output = r;
834 break;
835
836 case ARG_DEFAULT_STD_ERROR:
837
838 if ((r = exec_output_from_string(optarg)) < 0) {
839 log_error("Failed to parse default standard error output setting %s.", optarg);
840 return r;
841 } else
842 arg_default_std_error = r;
843 break;
844
845 case ARG_UNIT:
846
847 if ((r = set_default_unit(optarg)) < 0) {
848 log_error("Failed to set default unit %s: %s", optarg, strerror(-r));
849 return r;
850 }
851
852 break;
853
854 case ARG_SYSTEM:
855 arg_running_as = SYSTEMD_SYSTEM;
856 break;
857
858 case ARG_USER:
859 arg_running_as = SYSTEMD_USER;
860 break;
861
862 case ARG_TEST:
863 arg_action = ACTION_TEST;
864 break;
865
866 case ARG_VERSION:
867 arg_action = ACTION_VERSION;
868 break;
869
870 case ARG_DUMP_CONFIGURATION_ITEMS:
871 arg_action = ACTION_DUMP_CONFIGURATION_ITEMS;
872 break;
873
874 case ARG_DUMP_CORE:
875 r = optarg ? parse_boolean(optarg) : 1;
876 if (r < 0) {
877 log_error("Failed to parse dump core boolean %s.", optarg);
878 return r;
879 }
880 arg_dump_core = r;
881 break;
882
883 case ARG_CRASH_SHELL:
884 r = optarg ? parse_boolean(optarg) : 1;
885 if (r < 0) {
886 log_error("Failed to parse crash shell boolean %s.", optarg);
887 return r;
888 }
889 arg_crash_shell = r;
890 break;
891
892 case ARG_CONFIRM_SPAWN:
893 r = optarg ? parse_boolean(optarg) : 1;
894 if (r < 0) {
895 log_error("Failed to parse confirm spawn boolean %s.", optarg);
896 return r;
897 }
898 arg_confirm_spawn = r;
899 break;
900
901 case ARG_SHOW_STATUS:
902 r = optarg ? parse_boolean(optarg) : 1;
903 if (r < 0) {
904 log_error("Failed to parse show status boolean %s.", optarg);
905 return r;
906 }
907 arg_show_status = r;
908 break;
909
910 case ARG_DESERIALIZE: {
911 int fd;
912 FILE *f;
913
914 r = safe_atoi(optarg, &fd);
915 if (r < 0 || fd < 0) {
916 log_error("Failed to parse deserialize option %s.", optarg);
917 return r < 0 ? r : -EINVAL;
918 }
919
920 fd_cloexec(fd, true);
921
922 f = fdopen(fd, "r");
923 if (!f) {
924 log_error("Failed to open serialization fd: %m");
925 return -errno;
926 }
927
928 if (serialization)
929 fclose(serialization);
930
931 serialization = f;
932
933 break;
934 }
935
936 case ARG_SWITCHED_ROOT:
937 arg_switched_root = true;
938 break;
939
940 case ARG_INTROSPECT: {
941 const char * const * i = NULL;
942
943 for (i = bus_interface_table; *i; i += 2)
944 if (!optarg || streq(i[0], optarg)) {
945 fputs(DBUS_INTROSPECT_1_0_XML_DOCTYPE_DECL_NODE
946 "<node>\n", stdout);
947 fputs(i[1], stdout);
948 fputs("</node>\n", stdout);
949
950 if (optarg)
951 break;
952 }
953
954 if (!i[0] && optarg)
955 log_error("Unknown interface %s.", optarg);
956
957 arg_action = ACTION_DONE;
958 break;
959 }
960
961 case 'h':
962 arg_action = ACTION_HELP;
963 break;
964
965 case 'D':
966 log_set_max_level(LOG_DEBUG);
967 break;
968
969 case 'b':
970 case 's':
971 case 'z':
972 /* Just to eat away the sysvinit kernel
973 * cmdline args without getopt() error
974 * messages that we'll parse in
975 * parse_proc_cmdline_word() or ignore. */
976
977 case '?':
978 default:
979 if (getpid() != 1) {
980 log_error("Unknown option code %c", c);
981 return -EINVAL;
982 }
983
984 break;
985 }
986
987 if (optind < argc && getpid() != 1) {
988 /* Hmm, when we aren't run as init system
989 * let's complain about excess arguments */
990
991 log_error("Excess arguments.");
992 return -EINVAL;
993 }
994
995 if (detect_container(NULL) > 0) {
996 char **a;
997
998 /* All /proc/cmdline arguments the kernel didn't
999 * understand it passed to us. We're not really
1000 * interested in that usually since /proc/cmdline is
1001 * more interesting and complete. With one exception:
1002 * if we are run in a container /proc/cmdline is not
1003 * relevant for the container, hence we rely on argv[]
1004 * instead. */
1005
1006 for (a = argv; a < argv + argc; a++)
1007 if ((r = parse_proc_cmdline_word(*a)) < 0) {
1008 log_error("Failed on cmdline argument %s: %s", *a, strerror(-r));
1009 return r;
1010 }
1011 }
1012
1013 return 0;
1014 }
1015
1016 static int help(void) {
1017
1018 printf("%s [OPTIONS...]\n\n"
1019 "Starts up and maintains the system or user services.\n\n"
1020 " -h --help Show this help\n"
1021 " --test Determine startup sequence, dump it and exit\n"
1022 " --dump-configuration-items Dump understood unit configuration items\n"
1023 " --introspect[=INTERFACE] Extract D-Bus interface data\n"
1024 " --unit=UNIT Set default unit\n"
1025 " --system Run a system instance, even if PID != 1\n"
1026 " --user Run a user instance\n"
1027 " --dump-core[=0|1] Dump core on crash\n"
1028 " --crash-shell[=0|1] Run shell on crash\n"
1029 " --confirm-spawn[=0|1] Ask for confirmation when spawning processes\n"
1030 " --show-status[=0|1] Show status updates on the console during bootup\n"
1031 " --log-target=TARGET Set log target (console, journal, syslog, kmsg, journal-or-kmsg, syslog-or-kmsg, null)\n"
1032 " --log-level=LEVEL Set log level (debug, info, notice, warning, err, crit, alert, emerg)\n"
1033 " --log-color[=0|1] Highlight important log messages\n"
1034 " --log-location[=0|1] Include code location in log messages\n"
1035 " --default-standard-output= Set default standard output for services\n"
1036 " --default-standard-error= Set default standard error output for services\n",
1037 program_invocation_short_name);
1038
1039 return 0;
1040 }
1041
1042 static int version(void) {
1043 puts(PACKAGE_STRING);
1044 puts(SYSTEMD_FEATURES);
1045
1046 return 0;
1047 }
1048
1049 static int prepare_reexecute(Manager *m, FILE **_f, FDSet **_fds, bool switching_root) {
1050 FILE *f = NULL;
1051 FDSet *fds = NULL;
1052 int r;
1053
1054 assert(m);
1055 assert(_f);
1056 assert(_fds);
1057
1058 /* Make sure nothing is really destructed when we shut down */
1059 m->n_reloading ++;
1060
1061 r = manager_open_serialization(m, &f);
1062 if (r < 0) {
1063 log_error("Failed to create serialization file: %s", strerror(-r));
1064 goto fail;
1065 }
1066
1067 fds = fdset_new();
1068 if (!fds) {
1069 r = -ENOMEM;
1070 log_error("Failed to allocate fd set: %s", strerror(-r));
1071 goto fail;
1072 }
1073
1074 r = manager_serialize(m, f, fds, switching_root);
1075 if (r < 0) {
1076 log_error("Failed to serialize state: %s", strerror(-r));
1077 goto fail;
1078 }
1079
1080 if (fseeko(f, 0, SEEK_SET) < 0) {
1081 log_error("Failed to rewind serialization fd: %m");
1082 goto fail;
1083 }
1084
1085 r = fd_cloexec(fileno(f), false);
1086 if (r < 0) {
1087 log_error("Failed to disable O_CLOEXEC for serialization: %s", strerror(-r));
1088 goto fail;
1089 }
1090
1091 r = fdset_cloexec(fds, false);
1092 if (r < 0) {
1093 log_error("Failed to disable O_CLOEXEC for serialization fds: %s", strerror(-r));
1094 goto fail;
1095 }
1096
1097 *_f = f;
1098 *_fds = fds;
1099
1100 return 0;
1101
1102 fail:
1103 fdset_free(fds);
1104
1105 if (f)
1106 fclose(f);
1107
1108 return r;
1109 }
1110
1111 static int bump_rlimit_nofile(struct rlimit *saved_rlimit) {
1112 struct rlimit nl;
1113 int r;
1114
1115 assert(saved_rlimit);
1116
1117 /* Save the original RLIMIT_NOFILE so that we can reset it
1118 * later when transitioning from the initrd to the main
1119 * systemd or suchlike. */
1120 if (getrlimit(RLIMIT_NOFILE, saved_rlimit) < 0) {
1121 log_error("Reading RLIMIT_NOFILE failed: %m");
1122 return -errno;
1123 }
1124
1125 /* Make sure forked processes get the default kernel setting */
1126 if (!arg_default_rlimit[RLIMIT_NOFILE]) {
1127 struct rlimit *rl;
1128
1129 rl = newdup(struct rlimit, saved_rlimit, 1);
1130 if (!rl)
1131 return log_oom();
1132
1133 arg_default_rlimit[RLIMIT_NOFILE] = rl;
1134 }
1135
1136 /* Bump up the resource limit for ourselves substantially */
1137 nl.rlim_cur = nl.rlim_max = 64*1024;
1138 r = setrlimit_closest(RLIMIT_NOFILE, &nl);
1139 if (r < 0) {
1140 log_error("Setting RLIMIT_NOFILE failed: %s", strerror(-r));
1141 return r;
1142 }
1143
1144 return 0;
1145 }
1146
1147 static struct dual_timestamp* parse_initrd_timestamp(struct dual_timestamp *t) {
1148 const char *e;
1149 unsigned long long a, b;
1150
1151 assert(t);
1152
1153 e = getenv("RD_TIMESTAMP");
1154 if (!e)
1155 return NULL;
1156
1157 if (sscanf(e, "%llu %llu", &a, &b) != 2)
1158 return NULL;
1159
1160 t->realtime = (usec_t) a;
1161 t->monotonic = (usec_t) b;
1162
1163 return t;
1164 }
1165
1166 static void test_mtab(void) {
1167 char *p;
1168
1169 /* Check that /etc/mtab is a symlink */
1170
1171 if (readlink_malloc("/etc/mtab", &p) >= 0) {
1172 bool b;
1173
1174 b = streq(p, "/proc/self/mounts") || streq(p, "/proc/mounts");
1175 free(p);
1176
1177 if (b)
1178 return;
1179 }
1180
1181 log_warning("/etc/mtab is not a symlink or not pointing to /proc/self/mounts. "
1182 "This is not supported anymore. "
1183 "Please make sure to replace this file by a symlink to avoid incorrect or misleading mount(8) output.");
1184 }
1185
1186 static void test_usr(void) {
1187
1188 /* Check that /usr is not a separate fs */
1189
1190 if (dir_is_empty("/usr") <= 0)
1191 return;
1192
1193 log_warning("/usr appears to be on its own filesytem and is not already mounted. This is not a supported setup. "
1194 "Some things will probably break (sometimes even silently) in mysterious ways. "
1195 "Consult http://freedesktop.org/wiki/Software/systemd/separate-usr-is-broken for more information.");
1196 }
1197
1198 static void test_cgroups(void) {
1199
1200 if (access("/proc/cgroups", F_OK) >= 0)
1201 return;
1202
1203 log_warning("CONFIG_CGROUPS was not set when your kernel was compiled. "
1204 "Systems without control groups are not supported. "
1205 "We will now sleep for 10s, and then continue boot-up. "
1206 "Expect breakage and please do not file bugs. "
1207 "Instead fix your kernel and enable CONFIG_CGROUPS. "
1208 "Consult http://0pointer.de/blog/projects/cgroups-vs-cgroups.html for more information.");
1209
1210 sleep(10);
1211 }
1212
1213 static int initialize_join_controllers(void) {
1214 /* By default, mount "cpu" + "cpuacct" together, and "net_cls"
1215 * + "net_prio". We'd like to add "cpuset" to the mix, but
1216 * "cpuset" does't really work for groups with no initialized
1217 * attributes. */
1218
1219 arg_join_controllers = new(char**, 3);
1220 if (!arg_join_controllers)
1221 return -ENOMEM;
1222
1223 arg_join_controllers[0] = strv_new("cpu", "cpuacct", NULL);
1224 arg_join_controllers[1] = strv_new("net_cls", "net_prio", NULL);
1225 arg_join_controllers[2] = NULL;
1226
1227 if (!arg_join_controllers[0] || !arg_join_controllers[1]) {
1228 free_join_controllers();
1229 return -ENOMEM;
1230 }
1231
1232 return 0;
1233 }
1234
1235 int main(int argc, char *argv[]) {
1236 Manager *m = NULL;
1237 int r, retval = EXIT_FAILURE;
1238 usec_t before_startup, after_startup;
1239 char timespan[FORMAT_TIMESPAN_MAX];
1240 FDSet *fds = NULL;
1241 bool reexecute = false;
1242 const char *shutdown_verb = NULL;
1243 dual_timestamp initrd_timestamp = { 0ULL, 0ULL };
1244 dual_timestamp userspace_timestamp = { 0ULL, 0ULL };
1245 dual_timestamp kernel_timestamp = { 0ULL, 0ULL };
1246 static char systemd[] = "systemd";
1247 bool skip_setup = false;
1248 int j;
1249 bool loaded_policy = false;
1250 bool arm_reboot_watchdog = false;
1251 bool queue_default_job = false;
1252 char *switch_root_dir = NULL, *switch_root_init = NULL;
1253 static struct rlimit saved_rlimit_nofile = { 0, 0 };
1254
1255 #ifdef HAVE_SYSV_COMPAT
1256 if (getpid() != 1 && strstr(program_invocation_short_name, "init")) {
1257 /* This is compatibility support for SysV, where
1258 * calling init as a user is identical to telinit. */
1259
1260 errno = -ENOENT;
1261 execv(SYSTEMCTL_BINARY_PATH, argv);
1262 log_error("Failed to exec " SYSTEMCTL_BINARY_PATH ": %m");
1263 return 1;
1264 }
1265 #endif
1266
1267 dual_timestamp_from_monotonic(&kernel_timestamp, 0);
1268 dual_timestamp_get(&userspace_timestamp);
1269
1270 /* Determine if this is a reexecution or normal bootup. We do
1271 * the full command line parsing much later, so let's just
1272 * have a quick peek here. */
1273 if (strv_find(argv+1, "--deserialize"))
1274 skip_setup = true;
1275
1276 /* If we have switched root, do all the special setup
1277 * things */
1278 if (strv_find(argv+1, "--switched-root"))
1279 skip_setup = false;
1280
1281 /* If we get started via the /sbin/init symlink then we are
1282 called 'init'. After a subsequent reexecution we are then
1283 called 'systemd'. That is confusing, hence let's call us
1284 systemd right-away. */
1285 program_invocation_short_name = systemd;
1286 prctl(PR_SET_NAME, systemd);
1287
1288 saved_argv = argv;
1289 saved_argc = argc;
1290
1291 log_show_color(isatty(STDERR_FILENO) > 0);
1292
1293 if (getpid() == 1 && detect_container(NULL) <= 0) {
1294
1295 /* Running outside of a container as PID 1 */
1296 arg_running_as = SYSTEMD_SYSTEM;
1297 make_null_stdio();
1298 log_set_target(LOG_TARGET_KMSG);
1299 log_open();
1300
1301 if (in_initrd()) {
1302 char *rd_timestamp = NULL;
1303
1304 initrd_timestamp = userspace_timestamp;
1305 asprintf(&rd_timestamp, "%llu %llu",
1306 (unsigned long long) initrd_timestamp.realtime,
1307 (unsigned long long) initrd_timestamp.monotonic);
1308 if (rd_timestamp) {
1309 setenv("RD_TIMESTAMP", rd_timestamp, 1);
1310 free(rd_timestamp);
1311 }
1312 }
1313
1314 if (!skip_setup) {
1315 mount_setup_early();
1316 if (selinux_setup(&loaded_policy) < 0)
1317 goto finish;
1318 if (ima_setup() < 0)
1319 goto finish;
1320 if (smack_setup() < 0)
1321 goto finish;
1322 }
1323
1324 if (label_init(NULL) < 0)
1325 goto finish;
1326
1327 if (!skip_setup) {
1328 if (hwclock_is_localtime() > 0) {
1329 int min;
1330
1331 /* The first-time call to settimeofday() does a time warp in the kernel */
1332 r = hwclock_set_timezone(&min);
1333 if (r < 0)
1334 log_error("Failed to apply local time delta, ignoring: %s", strerror(-r));
1335 else
1336 log_info("RTC configured in localtime, applying delta of %i minutes to system time.", min);
1337 } else if (!in_initrd()) {
1338 /*
1339 * Do dummy first-time call to seal the kernel's time warp magic
1340 *
1341 * Do not call this this from inside the initrd. The initrd might not
1342 * carry /etc/adjtime with LOCAL, but the real system could be set up
1343 * that way. In such case, we need to delay the time-warp or the sealing
1344 * until we reach the real system.
1345 */
1346 hwclock_reset_timezone();
1347
1348 /* Tell the kernel our time zone */
1349 r = hwclock_set_timezone(NULL);
1350 if (r < 0)
1351 log_error("Failed to set the kernel's time zone, ignoring: %s", strerror(-r));
1352 }
1353 }
1354
1355 /* Set the default for later on, but don't actually
1356 * open the logs like this for now. Note that if we
1357 * are transitioning from the initrd there might still
1358 * be journal fd open, and we shouldn't attempt
1359 * opening that before we parsed /proc/cmdline which
1360 * might redirect output elsewhere. */
1361 log_set_target(LOG_TARGET_JOURNAL_OR_KMSG);
1362
1363 } else if (getpid() == 1) {
1364 /* Running inside a container, as PID 1 */
1365 arg_running_as = SYSTEMD_SYSTEM;
1366 log_set_target(LOG_TARGET_CONSOLE);
1367 log_open();
1368
1369 /* For the later on, see above... */
1370 log_set_target(LOG_TARGET_JOURNAL);
1371
1372 /* clear the kernel timestamp,
1373 * because we are in a container */
1374 kernel_timestamp.monotonic = 0ULL;
1375 kernel_timestamp.realtime = 0ULL;
1376
1377 } else {
1378 /* Running as user instance */
1379 arg_running_as = SYSTEMD_USER;
1380 log_set_target(LOG_TARGET_AUTO);
1381 log_open();
1382
1383 /* clear the kernel timestamp,
1384 * because we are not PID 1 */
1385 kernel_timestamp.monotonic = 0ULL;
1386 kernel_timestamp.realtime = 0ULL;
1387 }
1388
1389 /* Initialize default unit */
1390 r = set_default_unit(SPECIAL_DEFAULT_TARGET);
1391 if (r < 0) {
1392 log_error("Failed to set default unit %s: %s", SPECIAL_DEFAULT_TARGET, strerror(-r));
1393 goto finish;
1394 }
1395
1396 r = initialize_join_controllers();
1397 if (r < 0)
1398 goto finish;
1399
1400 /* Mount /proc, /sys and friends, so that /proc/cmdline and
1401 * /proc/$PID/fd is available. */
1402 if (getpid() == 1) {
1403 r = mount_setup(loaded_policy);
1404 if (r < 0)
1405 goto finish;
1406 }
1407
1408 /* Reset all signal handlers. */
1409 assert_se(reset_all_signal_handlers() == 0);
1410
1411 ignore_signals(SIGNALS_IGNORE, -1);
1412
1413 if (parse_config_file() < 0)
1414 goto finish;
1415
1416 if (arg_running_as == SYSTEMD_SYSTEM)
1417 if (parse_proc_cmdline() < 0)
1418 goto finish;
1419
1420 log_parse_environment();
1421
1422 if (parse_argv(argc, argv) < 0)
1423 goto finish;
1424
1425 if (arg_action == ACTION_TEST &&
1426 geteuid() == 0) {
1427 log_error("Don't run test mode as root.");
1428 goto finish;
1429 }
1430
1431 if (arg_running_as == SYSTEMD_USER &&
1432 arg_action == ACTION_RUN &&
1433 sd_booted() <= 0) {
1434 log_error("Trying to run as user instance, but the system has not been booted with systemd.");
1435 goto finish;
1436 }
1437
1438 if (arg_running_as == SYSTEMD_SYSTEM &&
1439 arg_action == ACTION_RUN &&
1440 running_in_chroot() > 0) {
1441 log_error("Cannot be run in a chroot() environment.");
1442 goto finish;
1443 }
1444
1445 if (arg_action == ACTION_HELP) {
1446 retval = help();
1447 goto finish;
1448 } else if (arg_action == ACTION_VERSION) {
1449 retval = version();
1450 goto finish;
1451 } else if (arg_action == ACTION_DUMP_CONFIGURATION_ITEMS) {
1452 unit_dump_config_items(stdout);
1453 retval = EXIT_SUCCESS;
1454 goto finish;
1455 } else if (arg_action == ACTION_DONE) {
1456 retval = EXIT_SUCCESS;
1457 goto finish;
1458 }
1459
1460 assert_se(arg_action == ACTION_RUN || arg_action == ACTION_TEST);
1461
1462 /* Close logging fds, in order not to confuse fdset below */
1463 log_close();
1464
1465 /* Remember open file descriptors for later deserialization */
1466 r = fdset_new_fill(&fds);
1467 if (r < 0) {
1468 log_error("Failed to allocate fd set: %s", strerror(-r));
1469 goto finish;
1470 } else
1471 fdset_cloexec(fds, true);
1472
1473 if (serialization)
1474 assert_se(fdset_remove(fds, fileno(serialization)) >= 0);
1475
1476 /* Set up PATH unless it is already set */
1477 setenv("PATH",
1478 #ifdef HAVE_SPLIT_USR
1479 "/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
1480 #else
1481 "/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin",
1482 #endif
1483 arg_running_as == SYSTEMD_SYSTEM);
1484
1485 if (arg_running_as == SYSTEMD_SYSTEM) {
1486 /* Parse the data passed to us. We leave this
1487 * variables set, but the manager later on will not
1488 * pass them on to our children. */
1489 if (!in_initrd())
1490 parse_initrd_timestamp(&initrd_timestamp);
1491
1492 /* Unset some environment variables passed in from the
1493 * kernel that don't really make sense for us. */
1494 unsetenv("HOME");
1495 unsetenv("TERM");
1496
1497 /* When we are invoked by a shell, these might be set,
1498 * but make little sense to pass on */
1499 unsetenv("PWD");
1500 unsetenv("SHLVL");
1501 unsetenv("_");
1502
1503 /* When we are invoked by a chroot-like tool such as
1504 * nspawn, these might be set, but make little sense
1505 * to pass on */
1506 unsetenv("USER");
1507 unsetenv("LOGNAME");
1508
1509 /* We suppress the socket activation env vars, as
1510 * we'll try to match *any* open fd to units if
1511 * possible. */
1512 unsetenv("LISTEN_FDS");
1513 unsetenv("LISTEN_PID");
1514
1515 /* All other variables are left as is, so that clients
1516 * can still read them via /proc/1/environ */
1517 }
1518
1519 /* Move out of the way, so that we won't block unmounts */
1520 assert_se(chdir("/") == 0);
1521
1522 if (arg_running_as == SYSTEMD_SYSTEM) {
1523 /* Become a session leader if we aren't one yet. */
1524 setsid();
1525
1526 /* Disable the umask logic */
1527 umask(0);
1528 }
1529
1530 /* Make sure D-Bus doesn't fiddle with the SIGPIPE handlers */
1531 dbus_connection_set_change_sigpipe(FALSE);
1532
1533 /* Reset the console, but only if this is really init and we
1534 * are freshly booted */
1535 if (arg_running_as == SYSTEMD_SYSTEM && arg_action == ACTION_RUN)
1536 console_setup(getpid() == 1 && !skip_setup);
1537
1538 /* Open the logging devices, if possible and necessary */
1539 log_open();
1540
1541 /* Make sure we leave a core dump without panicing the
1542 * kernel. */
1543 if (getpid() == 1) {
1544 install_crash_handler();
1545
1546 r = mount_cgroup_controllers(arg_join_controllers);
1547 if (r < 0)
1548 goto finish;
1549 }
1550
1551 if (arg_running_as == SYSTEMD_SYSTEM) {
1552 const char *virtualization = NULL;
1553
1554 log_info(PACKAGE_STRING " running in system mode. (" SYSTEMD_FEATURES ")");
1555
1556 detect_virtualization(&virtualization);
1557 if (virtualization)
1558 log_info("Detected virtualization '%s'.", virtualization);
1559
1560 if (in_initrd())
1561 log_info("Running in initial RAM disk.");
1562
1563 } else
1564 log_debug(PACKAGE_STRING " running in user mode. (" SYSTEMD_FEATURES ")");
1565
1566 if (arg_running_as == SYSTEMD_SYSTEM && !skip_setup) {
1567 locale_setup();
1568
1569 if (arg_show_status || plymouth_running())
1570 status_welcome();
1571
1572 #ifdef HAVE_KMOD
1573 kmod_setup();
1574 #endif
1575 hostname_setup();
1576 machine_id_setup();
1577 loopback_setup();
1578
1579 test_mtab();
1580 test_usr();
1581 test_cgroups();
1582 }
1583
1584 if (arg_running_as == SYSTEMD_SYSTEM && arg_runtime_watchdog > 0)
1585 watchdog_set_timeout(&arg_runtime_watchdog);
1586
1587 if (arg_timer_slack_nsec != (nsec_t) -1)
1588 if (prctl(PR_SET_TIMERSLACK, arg_timer_slack_nsec) < 0)
1589 log_error("Failed to adjust timer slack: %m");
1590
1591 if (arg_capability_bounding_set_drop) {
1592 r = capability_bounding_set_drop(arg_capability_bounding_set_drop, true);
1593 if (r < 0) {
1594 log_error("Failed to drop capability bounding set: %s", strerror(-r));
1595 goto finish;
1596 }
1597 r = capability_bounding_set_drop_usermode(arg_capability_bounding_set_drop);
1598 if (r < 0) {
1599 log_error("Failed to drop capability bounding set of usermode helpers: %s", strerror(-r));
1600 goto finish;
1601 }
1602 }
1603
1604 if (arg_running_as == SYSTEMD_USER) {
1605 /* Become reaper of our children */
1606 if (prctl(PR_SET_CHILD_SUBREAPER, 1) < 0) {
1607 log_warning("Failed to make us a subreaper: %m");
1608 if (errno == EINVAL)
1609 log_info("Perhaps the kernel version is too old (< 3.4?)");
1610 }
1611 }
1612
1613 if (arg_running_as == SYSTEMD_SYSTEM)
1614 bump_rlimit_nofile(&saved_rlimit_nofile);
1615
1616 r = manager_new(arg_running_as, &m);
1617 if (r < 0) {
1618 log_error("Failed to allocate manager object: %s", strerror(-r));
1619 goto finish;
1620 }
1621
1622 m->confirm_spawn = arg_confirm_spawn;
1623 m->default_std_output = arg_default_std_output;
1624 m->default_std_error = arg_default_std_error;
1625 m->runtime_watchdog = arg_runtime_watchdog;
1626 m->shutdown_watchdog = arg_shutdown_watchdog;
1627 m->userspace_timestamp = userspace_timestamp;
1628 m->kernel_timestamp = kernel_timestamp;
1629 m->initrd_timestamp = initrd_timestamp;
1630
1631 manager_set_default_rlimits(m, arg_default_rlimit);
1632
1633 if (arg_default_environment)
1634 manager_set_default_environment(m, arg_default_environment);
1635
1636 manager_set_show_status(m, arg_show_status);
1637
1638 /* Remember whether we should queue the default job */
1639 queue_default_job = !serialization || arg_switched_root;
1640
1641 before_startup = now(CLOCK_MONOTONIC);
1642
1643 r = manager_startup(m, serialization, fds);
1644 if (r < 0)
1645 log_error("Failed to fully start up daemon: %s", strerror(-r));
1646
1647 /* This will close all file descriptors that were opened, but
1648 * not claimed by any unit. */
1649 fdset_free(fds);
1650
1651 if (serialization) {
1652 fclose(serialization);
1653 serialization = NULL;
1654 }
1655
1656 if (queue_default_job) {
1657 DBusError error;
1658 Unit *target = NULL;
1659 Job *default_unit_job;
1660
1661 dbus_error_init(&error);
1662
1663 log_debug("Activating default unit: %s", arg_default_unit);
1664
1665 r = manager_load_unit(m, arg_default_unit, NULL, &error, &target);
1666 if (r < 0) {
1667 log_error("Failed to load default target: %s", bus_error(&error, r));
1668 dbus_error_free(&error);
1669 } else if (target->load_state == UNIT_ERROR || target->load_state == UNIT_NOT_FOUND)
1670 log_error("Failed to load default target: %s", strerror(-target->load_error));
1671 else if (target->load_state == UNIT_MASKED)
1672 log_error("Default target masked.");
1673
1674 if (!target || target->load_state != UNIT_LOADED) {
1675 log_info("Trying to load rescue target...");
1676
1677 r = manager_load_unit(m, SPECIAL_RESCUE_TARGET, NULL, &error, &target);
1678 if (r < 0) {
1679 log_error("Failed to load rescue target: %s", bus_error(&error, r));
1680 dbus_error_free(&error);
1681 goto finish;
1682 } else if (target->load_state == UNIT_ERROR || target->load_state == UNIT_ERROR) {
1683 log_error("Failed to load rescue target: %s", strerror(-target->load_error));
1684 goto finish;
1685 } else if (target->load_state == UNIT_MASKED) {
1686 log_error("Rescue target masked.");
1687 goto finish;
1688 }
1689 }
1690
1691 assert(target->load_state == UNIT_LOADED);
1692
1693 if (arg_action == ACTION_TEST) {
1694 printf("-> By units:\n");
1695 manager_dump_units(m, stdout, "\t");
1696 }
1697
1698 r = manager_add_job(m, JOB_START, target, JOB_ISOLATE, false, &error, &default_unit_job);
1699 if (r == -EPERM) {
1700 log_debug("Default target could not be isolated, starting instead: %s", bus_error(&error, r));
1701 dbus_error_free(&error);
1702
1703 r = manager_add_job(m, JOB_START, target, JOB_REPLACE, false, &error, &default_unit_job);
1704 if (r < 0) {
1705 log_error("Failed to start default target: %s", bus_error(&error, r));
1706 dbus_error_free(&error);
1707 goto finish;
1708 }
1709 } else if (r < 0) {
1710 log_error("Failed to isolate default target: %s", bus_error(&error, r));
1711 dbus_error_free(&error);
1712 goto finish;
1713 }
1714
1715 m->default_unit_job_id = default_unit_job->id;
1716
1717 after_startup = now(CLOCK_MONOTONIC);
1718 log_full(arg_action == ACTION_TEST ? LOG_INFO : LOG_DEBUG,
1719 "Loaded units and determined initial transaction in %s.",
1720 format_timespan(timespan, sizeof(timespan), after_startup - before_startup, 0));
1721
1722 if (arg_action == ACTION_TEST) {
1723 printf("-> By jobs:\n");
1724 manager_dump_jobs(m, stdout, "\t");
1725 retval = EXIT_SUCCESS;
1726 goto finish;
1727 }
1728 }
1729
1730 for (;;) {
1731 r = manager_loop(m);
1732 if (r < 0) {
1733 log_error("Failed to run mainloop: %s", strerror(-r));
1734 goto finish;
1735 }
1736
1737 switch (m->exit_code) {
1738
1739 case MANAGER_EXIT:
1740 retval = EXIT_SUCCESS;
1741 log_debug("Exit.");
1742 goto finish;
1743
1744 case MANAGER_RELOAD:
1745 log_info("Reloading.");
1746 r = manager_reload(m);
1747 if (r < 0)
1748 log_error("Failed to reload: %s", strerror(-r));
1749 break;
1750
1751 case MANAGER_REEXECUTE:
1752
1753 if (prepare_reexecute(m, &serialization, &fds, false) < 0)
1754 goto finish;
1755
1756 reexecute = true;
1757 log_notice("Reexecuting.");
1758 goto finish;
1759
1760 case MANAGER_SWITCH_ROOT:
1761 /* Steal the switch root parameters */
1762 switch_root_dir = m->switch_root;
1763 switch_root_init = m->switch_root_init;
1764 m->switch_root = m->switch_root_init = NULL;
1765
1766 if (!switch_root_init)
1767 if (prepare_reexecute(m, &serialization, &fds, true) < 0)
1768 goto finish;
1769
1770 reexecute = true;
1771 log_notice("Switching root.");
1772 goto finish;
1773
1774 case MANAGER_REBOOT:
1775 case MANAGER_POWEROFF:
1776 case MANAGER_HALT:
1777 case MANAGER_KEXEC: {
1778 static const char * const table[_MANAGER_EXIT_CODE_MAX] = {
1779 [MANAGER_REBOOT] = "reboot",
1780 [MANAGER_POWEROFF] = "poweroff",
1781 [MANAGER_HALT] = "halt",
1782 [MANAGER_KEXEC] = "kexec"
1783 };
1784
1785 assert_se(shutdown_verb = table[m->exit_code]);
1786 arm_reboot_watchdog = m->exit_code == MANAGER_REBOOT;
1787
1788 log_notice("Shutting down.");
1789 goto finish;
1790 }
1791
1792 default:
1793 assert_not_reached("Unknown exit code.");
1794 }
1795 }
1796
1797 finish:
1798 if (m)
1799 manager_free(m);
1800
1801 for (j = 0; j < RLIMIT_NLIMITS; j++)
1802 free(arg_default_rlimit[j]);
1803
1804 free(arg_default_unit);
1805 free_join_controllers();
1806
1807 dbus_shutdown();
1808 label_finish();
1809
1810 if (reexecute) {
1811 const char **args;
1812 unsigned i, args_size;
1813
1814 /* Close and disarm the watchdog, so that the new
1815 * instance can reinitialize it, but doesn't get
1816 * rebooted while we do that */
1817 watchdog_close(true);
1818
1819 /* Reset the RLIMIT_NOFILE to the kernel default, so
1820 * that the new systemd can pass the kernel default to
1821 * its child processes */
1822 if (saved_rlimit_nofile.rlim_cur > 0)
1823 setrlimit(RLIMIT_NOFILE, &saved_rlimit_nofile);
1824
1825 if (switch_root_dir) {
1826 /* Kill all remaining processes from the
1827 * initrd, but don't wait for them, so that we
1828 * can handle the SIGCHLD for them after
1829 * deserializing. */
1830 broadcast_signal(SIGTERM, false);
1831
1832 /* And switch root */
1833 r = switch_root(switch_root_dir);
1834 if (r < 0)
1835 log_error("Failed to switch root, ignoring: %s", strerror(-r));
1836 }
1837
1838 args_size = MAX(6, argc+1);
1839 args = newa(const char*, args_size);
1840
1841 if (!switch_root_init) {
1842 char sfd[16];
1843
1844 /* First try to spawn ourselves with the right
1845 * path, and with full serialization. We do
1846 * this only if the user didn't specify an
1847 * explicit init to spawn. */
1848
1849 assert(serialization);
1850 assert(fds);
1851
1852 snprintf(sfd, sizeof(sfd), "%i", fileno(serialization));
1853 char_array_0(sfd);
1854
1855 i = 0;
1856 args[i++] = SYSTEMD_BINARY_PATH;
1857 if (switch_root_dir)
1858 args[i++] = "--switched-root";
1859 args[i++] = arg_running_as == SYSTEMD_SYSTEM ? "--system" : "--user";
1860 args[i++] = "--deserialize";
1861 args[i++] = sfd;
1862 args[i++] = NULL;
1863
1864 assert(i <= args_size);
1865 execv(args[0], (char* const*) args);
1866 }
1867
1868 /* Try the fallback, if there is any, without any
1869 * serialization. We pass the original argv[] and
1870 * envp[]. (Well, modulo the ordering changes due to
1871 * getopt() in argv[], and some cleanups in envp[],
1872 * but let's hope that doesn't matter.) */
1873
1874 if (serialization) {
1875 fclose(serialization);
1876 serialization = NULL;
1877 }
1878
1879 if (fds) {
1880 fdset_free(fds);
1881 fds = NULL;
1882 }
1883
1884 /* Reopen the console */
1885 make_console_stdio();
1886
1887 for (j = 1, i = 1; j < argc; j++)
1888 args[i++] = argv[j];
1889 args[i++] = NULL;
1890 assert(i <= args_size);
1891
1892 if (switch_root_init) {
1893 args[0] = switch_root_init;
1894 execv(args[0], (char* const*) args);
1895 log_warning("Failed to execute configured init, trying fallback: %m");
1896 }
1897
1898 args[0] = "/sbin/init";
1899 execv(args[0], (char* const*) args);
1900
1901 if (errno == ENOENT) {
1902 log_warning("No /sbin/init, trying fallback");
1903
1904 args[0] = "/bin/sh";
1905 args[1] = NULL;
1906 execv(args[0], (char* const*) args);
1907 log_error("Failed to execute /bin/sh, giving up: %m");
1908 } else
1909 log_warning("Failed to execute /sbin/init, giving up: %m");
1910 }
1911
1912 if (serialization)
1913 fclose(serialization);
1914
1915 if (fds)
1916 fdset_free(fds);
1917
1918 if (shutdown_verb) {
1919 const char * command_line[] = {
1920 SYSTEMD_SHUTDOWN_BINARY_PATH,
1921 shutdown_verb,
1922 NULL
1923 };
1924 char **env_block;
1925
1926 if (arm_reboot_watchdog && arg_shutdown_watchdog > 0) {
1927 char e[32];
1928
1929 /* If we reboot let's set the shutdown
1930 * watchdog and tell the shutdown binary to
1931 * repeatedly ping it */
1932 watchdog_set_timeout(&arg_shutdown_watchdog);
1933 watchdog_close(false);
1934
1935 /* Tell the binary how often to ping */
1936 snprintf(e, sizeof(e), "WATCHDOG_USEC=%llu", (unsigned long long) arg_shutdown_watchdog);
1937 char_array_0(e);
1938
1939 env_block = strv_append(environ, e);
1940 } else {
1941 env_block = strv_copy(environ);
1942 watchdog_close(true);
1943 }
1944
1945 execve(SYSTEMD_SHUTDOWN_BINARY_PATH, (char **) command_line, env_block);
1946 free(env_block);
1947 log_error("Failed to execute shutdown binary, freezing: %m");
1948 }
1949
1950 if (getpid() == 1)
1951 freeze();
1952
1953 return retval;
1954 }
Unnamed repository; edit this file 'description' to name the repository.