]> git.ipfire.org Git - thirdparty/systemd.git/blob - src/core/service.c
projects / thirdparty / systemd.git / blob
? search:
summary | shortlog | log | commit | commitdiff | tree
blame | history | raw | HEAD
Merge pull request #10428 from keszybz/failure-actions
[thirdparty/systemd.git] / src / core / service.c
1 /* SPDX-License-Identifier: LGPL-2.1+ */
2
3 #include <errno.h>
4 #include <signal.h>
5 #include <unistd.h>
6
7 #include "sd-messages.h"
8
9 #include "alloc-util.h"
10 #include "async.h"
11 #include "bus-error.h"
12 #include "bus-kernel.h"
13 #include "bus-util.h"
14 #include "dbus-service.h"
15 #include "def.h"
16 #include "env-util.h"
17 #include "escape.h"
18 #include "exit-status.h"
19 #include "fd-util.h"
20 #include "fileio.h"
21 #include "format-util.h"
22 #include "fs-util.h"
23 #include "load-dropin.h"
24 #include "load-fragment.h"
25 #include "log.h"
26 #include "manager.h"
27 #include "parse-util.h"
28 #include "path-util.h"
29 #include "process-util.h"
30 #include "service.h"
31 #include "signal-util.h"
32 #include "special.h"
33 #include "stdio-util.h"
34 #include "string-table.h"
35 #include "string-util.h"
36 #include "strv.h"
37 #include "unit-name.h"
38 #include "unit.h"
39 #include "utf8.h"
40 #include "util.h"
41
42 static const UnitActiveState state_translation_table[_SERVICE_STATE_MAX] = {
43 [SERVICE_DEAD] = UNIT_INACTIVE,
44 [SERVICE_START_PRE] = UNIT_ACTIVATING,
45 [SERVICE_START] = UNIT_ACTIVATING,
46 [SERVICE_START_POST] = UNIT_ACTIVATING,
47 [SERVICE_RUNNING] = UNIT_ACTIVE,
48 [SERVICE_EXITED] = UNIT_ACTIVE,
49 [SERVICE_RELOAD] = UNIT_RELOADING,
50 [SERVICE_STOP] = UNIT_DEACTIVATING,
51 [SERVICE_STOP_WATCHDOG] = UNIT_DEACTIVATING,
52 [SERVICE_STOP_SIGTERM] = UNIT_DEACTIVATING,
53 [SERVICE_STOP_SIGKILL] = UNIT_DEACTIVATING,
54 [SERVICE_STOP_POST] = UNIT_DEACTIVATING,
55 [SERVICE_FINAL_SIGTERM] = UNIT_DEACTIVATING,
56 [SERVICE_FINAL_SIGKILL] = UNIT_DEACTIVATING,
57 [SERVICE_FAILED] = UNIT_FAILED,
58 [SERVICE_AUTO_RESTART] = UNIT_ACTIVATING
59 };
60
61 /* For Type=idle we never want to delay any other jobs, hence we
62 * consider idle jobs active as soon as we start working on them */
63 static const UnitActiveState state_translation_table_idle[_SERVICE_STATE_MAX] = {
64 [SERVICE_DEAD] = UNIT_INACTIVE,
65 [SERVICE_START_PRE] = UNIT_ACTIVE,
66 [SERVICE_START] = UNIT_ACTIVE,
67 [SERVICE_START_POST] = UNIT_ACTIVE,
68 [SERVICE_RUNNING] = UNIT_ACTIVE,
69 [SERVICE_EXITED] = UNIT_ACTIVE,
70 [SERVICE_RELOAD] = UNIT_RELOADING,
71 [SERVICE_STOP] = UNIT_DEACTIVATING,
72 [SERVICE_STOP_WATCHDOG] = UNIT_DEACTIVATING,
73 [SERVICE_STOP_SIGTERM] = UNIT_DEACTIVATING,
74 [SERVICE_STOP_SIGKILL] = UNIT_DEACTIVATING,
75 [SERVICE_STOP_POST] = UNIT_DEACTIVATING,
76 [SERVICE_FINAL_SIGTERM] = UNIT_DEACTIVATING,
77 [SERVICE_FINAL_SIGKILL] = UNIT_DEACTIVATING,
78 [SERVICE_FAILED] = UNIT_FAILED,
79 [SERVICE_AUTO_RESTART] = UNIT_ACTIVATING
80 };
81
82 static int service_dispatch_inotify_io(sd_event_source *source, int fd, uint32_t events, void *userdata);
83 static int service_dispatch_timer(sd_event_source *source, usec_t usec, void *userdata);
84 static int service_dispatch_watchdog(sd_event_source *source, usec_t usec, void *userdata);
85 static int service_dispatch_exec_io(sd_event_source *source, int fd, uint32_t events, void *userdata);
86
87 static void service_enter_signal(Service *s, ServiceState state, ServiceResult f);
88 static void service_enter_reload_by_notify(Service *s);
89
90 static void service_init(Unit *u) {
91 Service *s = SERVICE(u);
92
93 assert(u);
94 assert(u->load_state == UNIT_STUB);
95
96 s->timeout_start_usec = u->manager->default_timeout_start_usec;
97 s->timeout_stop_usec = u->manager->default_timeout_stop_usec;
98 s->restart_usec = u->manager->default_restart_usec;
99 s->runtime_max_usec = USEC_INFINITY;
100 s->type = _SERVICE_TYPE_INVALID;
101 s->socket_fd = -1;
102 s->stdin_fd = s->stdout_fd = s->stderr_fd = -1;
103 s->guess_main_pid = true;
104
105 s->control_command_id = _SERVICE_EXEC_COMMAND_INVALID;
106
107 s->exec_context.keyring_mode = MANAGER_IS_SYSTEM(u->manager) ?
108 EXEC_KEYRING_PRIVATE : EXEC_KEYRING_INHERIT;
109 }
110
111 static void service_unwatch_control_pid(Service *s) {
112 assert(s);
113
114 if (s->control_pid <= 0)
115 return;
116
117 unit_unwatch_pid(UNIT(s), s->control_pid);
118 s->control_pid = 0;
119 }
120
121 static void service_unwatch_main_pid(Service *s) {
122 assert(s);
123
124 if (s->main_pid <= 0)
125 return;
126
127 unit_unwatch_pid(UNIT(s), s->main_pid);
128 s->main_pid = 0;
129 }
130
131 static void service_unwatch_pid_file(Service *s) {
132 if (!s->pid_file_pathspec)
133 return;
134
135 log_unit_debug(UNIT(s), "Stopping watch for PID file %s", s->pid_file_pathspec->path);
136 path_spec_unwatch(s->pid_file_pathspec);
137 path_spec_done(s->pid_file_pathspec);
138 s->pid_file_pathspec = mfree(s->pid_file_pathspec);
139 }
140
141 static int service_set_main_pid(Service *s, pid_t pid) {
142 pid_t ppid;
143
144 assert(s);
145
146 if (pid <= 1)
147 return -EINVAL;
148
149 if (pid == getpid_cached())
150 return -EINVAL;
151
152 if (s->main_pid == pid && s->main_pid_known)
153 return 0;
154
155 if (s->main_pid != pid) {
156 service_unwatch_main_pid(s);
157 exec_status_start(&s->main_exec_status, pid);
158 }
159
160 s->main_pid = pid;
161 s->main_pid_known = true;
162
163 if (get_process_ppid(pid, &ppid) >= 0 && ppid != getpid_cached()) {
164 log_unit_warning(UNIT(s), "Supervising process "PID_FMT" which is not our child. We'll most likely not notice when it exits.", pid);
165 s->main_pid_alien = true;
166 } else
167 s->main_pid_alien = false;
168
169 return 0;
170 }
171
172 void service_close_socket_fd(Service *s) {
173 assert(s);
174
175 /* Undo the effect of service_set_socket_fd(). */
176
177 s->socket_fd = asynchronous_close(s->socket_fd);
178
179 if (UNIT_ISSET(s->accept_socket)) {
180 socket_connection_unref(SOCKET(UNIT_DEREF(s->accept_socket)));
181 unit_ref_unset(&s->accept_socket);
182 }
183 }
184
185 static void service_stop_watchdog(Service *s) {
186 assert(s);
187
188 s->watchdog_event_source = sd_event_source_unref(s->watchdog_event_source);
189 s->watchdog_timestamp = DUAL_TIMESTAMP_NULL;
190 }
191
192 static usec_t service_get_watchdog_usec(Service *s) {
193 assert(s);
194
195 if (s->watchdog_override_enable)
196 return s->watchdog_override_usec;
197 else
198 return s->watchdog_usec;
199 }
200
201 static void service_start_watchdog(Service *s) {
202 int r;
203 usec_t watchdog_usec;
204
205 assert(s);
206
207 watchdog_usec = service_get_watchdog_usec(s);
208 if (IN_SET(watchdog_usec, 0, USEC_INFINITY))
209 return;
210
211 if (s->watchdog_event_source) {
212 r = sd_event_source_set_time(s->watchdog_event_source, usec_add(s->watchdog_timestamp.monotonic, watchdog_usec));
213 if (r < 0) {
214 log_unit_warning_errno(UNIT(s), r, "Failed to reset watchdog timer: %m");
215 return;
216 }
217
218 r = sd_event_source_set_enabled(s->watchdog_event_source, SD_EVENT_ONESHOT);
219 } else {
220 r = sd_event_add_time(
221 UNIT(s)->manager->event,
222 &s->watchdog_event_source,
223 CLOCK_MONOTONIC,
224 usec_add(s->watchdog_timestamp.monotonic, watchdog_usec), 0,
225 service_dispatch_watchdog, s);
226 if (r < 0) {
227 log_unit_warning_errno(UNIT(s), r, "Failed to add watchdog timer: %m");
228 return;
229 }
230
231 (void) sd_event_source_set_description(s->watchdog_event_source, "service-watchdog");
232
233 /* Let's process everything else which might be a sign
234 * of living before we consider a service died. */
235 r = sd_event_source_set_priority(s->watchdog_event_source, SD_EVENT_PRIORITY_IDLE);
236 }
237
238 if (r < 0)
239 log_unit_warning_errno(UNIT(s), r, "Failed to install watchdog timer: %m");
240 }
241
242 static void service_extend_timeout(Service *s, usec_t extend_timeout_usec) {
243 assert(s);
244
245 if (s->timer_event_source) {
246 uint64_t current = 0, extended = 0;
247 int r;
248
249 if (IN_SET(extend_timeout_usec, 0, USEC_INFINITY))
250 return;
251
252 extended = usec_add(now(CLOCK_MONOTONIC), extend_timeout_usec);
253
254 r = sd_event_source_get_time(s->timer_event_source, &current);
255 if (r < 0)
256 log_unit_error_errno(UNIT(s), r, "Failed to retrieve timeout timer: %m");
257 else if (extended > current) {
258 r = sd_event_source_set_time(s->timer_event_source, extended);
259 if (r < 0)
260 log_unit_warning_errno(UNIT(s), r, "Failed to set timeout timer: %m");
261 }
262
263 if (s->watchdog_event_source) {
264 /* extend watchdog if necessary. We've asked for an extended timeout so we
265 * shouldn't expect a watchdog timeout in the interval in between */
266 r = sd_event_source_get_time(s->watchdog_event_source, &current);
267 if (r < 0) {
268 log_unit_error_errno(UNIT(s), r, "Failed to retrieve watchdog timer: %m");
269 return;
270 }
271
272 if (extended > current) {
273 r = sd_event_source_set_time(s->watchdog_event_source, extended);
274 if (r < 0)
275 log_unit_warning_errno(UNIT(s), r, "Failed to set watchdog timer: %m");
276 }
277 }
278 }
279 }
280
281 static void service_reset_watchdog(Service *s) {
282 assert(s);
283
284 dual_timestamp_get(&s->watchdog_timestamp);
285 service_start_watchdog(s);
286 }
287
288 static void service_reset_watchdog_timeout(Service *s, usec_t watchdog_override_usec) {
289 assert(s);
290
291 s->watchdog_override_enable = true;
292 s->watchdog_override_usec = watchdog_override_usec;
293 service_reset_watchdog(s);
294
295 log_unit_debug(UNIT(s), "watchdog_usec="USEC_FMT, s->watchdog_usec);
296 log_unit_debug(UNIT(s), "watchdog_override_usec="USEC_FMT, s->watchdog_override_usec);
297 }
298
299 static void service_fd_store_unlink(ServiceFDStore *fs) {
300
301 if (!fs)
302 return;
303
304 if (fs->service) {
305 assert(fs->service->n_fd_store > 0);
306 LIST_REMOVE(fd_store, fs->service->fd_store, fs);
307 fs->service->n_fd_store--;
308 }
309
310 if (fs->event_source) {
311 sd_event_source_set_enabled(fs->event_source, SD_EVENT_OFF);
312 sd_event_source_unref(fs->event_source);
313 }
314
315 free(fs->fdname);
316 safe_close(fs->fd);
317 free(fs);
318 }
319
320 static void service_release_fd_store(Service *s) {
321 assert(s);
322
323 if (s->n_keep_fd_store > 0)
324 return;
325
326 log_unit_debug(UNIT(s), "Releasing all stored fds");
327 while (s->fd_store)
328 service_fd_store_unlink(s->fd_store);
329
330 assert(s->n_fd_store == 0);
331 }
332
333 static void service_release_resources(Unit *u) {
334 Service *s = SERVICE(u);
335
336 assert(s);
337
338 if (!s->fd_store && s->stdin_fd < 0 && s->stdout_fd < 0 && s->stderr_fd < 0)
339 return;
340
341 log_unit_debug(u, "Releasing resources.");
342
343 s->stdin_fd = safe_close(s->stdin_fd);
344 s->stdout_fd = safe_close(s->stdout_fd);
345 s->stderr_fd = safe_close(s->stderr_fd);
346
347 service_release_fd_store(s);
348 }
349
350 static void service_done(Unit *u) {
351 Service *s = SERVICE(u);
352
353 assert(s);
354
355 s->pid_file = mfree(s->pid_file);
356 s->status_text = mfree(s->status_text);
357
358 s->exec_runtime = exec_runtime_unref(s->exec_runtime, false);
359 exec_command_free_array(s->exec_command, _SERVICE_EXEC_COMMAND_MAX);
360 s->control_command = NULL;
361 s->main_command = NULL;
362
363 dynamic_creds_unref(&s->dynamic_creds);
364
365 exit_status_set_free(&s->restart_prevent_status);
366 exit_status_set_free(&s->restart_force_status);
367 exit_status_set_free(&s->success_status);
368
369 /* This will leak a process, but at least no memory or any of
370 * our resources */
371 service_unwatch_main_pid(s);
372 service_unwatch_control_pid(s);
373 service_unwatch_pid_file(s);
374
375 if (s->bus_name) {
376 unit_unwatch_bus_name(u, s->bus_name);
377 s->bus_name = mfree(s->bus_name);
378 }
379
380 s->bus_name_owner = mfree(s->bus_name_owner);
381
382 s->usb_function_descriptors = mfree(s->usb_function_descriptors);
383 s->usb_function_strings = mfree(s->usb_function_strings);
384
385 service_close_socket_fd(s);
386 s->peer = socket_peer_unref(s->peer);
387
388 unit_ref_unset(&s->accept_socket);
389
390 service_stop_watchdog(s);
391
392 s->timer_event_source = sd_event_source_unref(s->timer_event_source);
393 s->exec_fd_event_source = sd_event_source_unref(s->exec_fd_event_source);
394
395 service_release_resources(u);
396 }
397
398 static int on_fd_store_io(sd_event_source *e, int fd, uint32_t revents, void *userdata) {
399 ServiceFDStore *fs = userdata;
400
401 assert(e);
402 assert(fs);
403
404 /* If we get either EPOLLHUP or EPOLLERR, it's time to remove this entry from the fd store */
405 log_unit_debug(UNIT(fs->service),
406 "Received %s on stored fd %d (%s), closing.",
407 revents & EPOLLERR ? "EPOLLERR" : "EPOLLHUP",
408 fs->fd, strna(fs->fdname));
409 service_fd_store_unlink(fs);
410 return 0;
411 }
412
413 static int service_add_fd_store(Service *s, int fd, const char *name) {
414 ServiceFDStore *fs;
415 int r;
416
417 /* fd is always consumed if we return >= 0 */
418
419 assert(s);
420 assert(fd >= 0);
421
422 if (s->n_fd_store >= s->n_fd_store_max)
423 return -EXFULL; /* Our store is full.
424 * Use this errno rather than E[NM]FILE to distinguish from
425 * the case where systemd itself hits the file limit. */
426
427 LIST_FOREACH(fd_store, fs, s->fd_store) {
428 r = same_fd(fs->fd, fd);
429 if (r < 0)
430 return r;
431 if (r > 0) {
432 safe_close(fd);
433 return 0; /* fd already included */
434 }
435 }
436
437 fs = new0(ServiceFDStore, 1);
438 if (!fs)
439 return -ENOMEM;
440
441 fs->fd = fd;
442 fs->service = s;
443 fs->fdname = strdup(name ?: "stored");
444 if (!fs->fdname) {
445 free(fs);
446 return -ENOMEM;
447 }
448
449 r = sd_event_add_io(UNIT(s)->manager->event, &fs->event_source, fd, 0, on_fd_store_io, fs);
450 if (r < 0 && r != -EPERM) { /* EPERM indicates fds that aren't pollable, which is OK */
451 free(fs->fdname);
452 free(fs);
453 return r;
454 } else if (r >= 0)
455 (void) sd_event_source_set_description(fs->event_source, "service-fd-store");
456
457 LIST_PREPEND(fd_store, s->fd_store, fs);
458 s->n_fd_store++;
459
460 return 1; /* fd newly stored */
461 }
462
463 static int service_add_fd_store_set(Service *s, FDSet *fds, const char *name) {
464 int r;
465
466 assert(s);
467
468 while (fdset_size(fds) > 0) {
469 _cleanup_close_ int fd = -1;
470
471 fd = fdset_steal_first(fds);
472 if (fd < 0)
473 break;
474
475 r = service_add_fd_store(s, fd, name);
476 if (r == -EXFULL)
477 return log_unit_warning_errno(UNIT(s), r,
478 "Cannot store more fds than FileDescriptorStoreMax=%u, closing remaining.",
479 s->n_fd_store_max);
480 if (r < 0)
481 return log_unit_error_errno(UNIT(s), r, "Failed to add fd to store: %m");
482 if (r > 0)
483 log_unit_debug(UNIT(s), "Added fd %u (%s) to fd store.", fd, strna(name));
484 fd = -1;
485 }
486
487 return 0;
488 }
489
490 static void service_remove_fd_store(Service *s, const char *name) {
491 ServiceFDStore *fs, *n;
492
493 assert(s);
494 assert(name);
495
496 LIST_FOREACH_SAFE(fd_store, fs, n, s->fd_store) {
497 if (!streq(fs->fdname, name))
498 continue;
499
500 log_unit_debug(UNIT(s), "Got explicit request to remove fd %i (%s), closing.", fs->fd, name);
501 service_fd_store_unlink(fs);
502 }
503 }
504
505 static int service_arm_timer(Service *s, usec_t usec) {
506 int r;
507
508 assert(s);
509
510 if (s->timer_event_source) {
511 r = sd_event_source_set_time(s->timer_event_source, usec);
512 if (r < 0)
513 return r;
514
515 return sd_event_source_set_enabled(s->timer_event_source, SD_EVENT_ONESHOT);
516 }
517
518 if (usec == USEC_INFINITY)
519 return 0;
520
521 r = sd_event_add_time(
522 UNIT(s)->manager->event,
523 &s->timer_event_source,
524 CLOCK_MONOTONIC,
525 usec, 0,
526 service_dispatch_timer, s);
527 if (r < 0)
528 return r;
529
530 (void) sd_event_source_set_description(s->timer_event_source, "service-timer");
531
532 return 0;
533 }
534
535 static int service_verify(Service *s) {
536 assert(s);
537
538 if (UNIT(s)->load_state != UNIT_LOADED)
539 return 0;
540
541 if (!s->exec_command[SERVICE_EXEC_START] && !s->exec_command[SERVICE_EXEC_STOP]
542 && UNIT(s)->success_action == EMERGENCY_ACTION_NONE) {
543 /* FailureAction= only makes sense if one of the start or stop commands is specified.
544 * SuccessAction= will be executed unconditionally if no commands are specified. Hence,
545 * either a command or SuccessAction= are required. */
546
547 log_unit_error(UNIT(s), "Service has no ExecStart=, ExecStop=, or SuccessAction=. Refusing.");
548 return -ENOEXEC;
549 }
550
551 if (s->type != SERVICE_ONESHOT && !s->exec_command[SERVICE_EXEC_START]) {
552 log_unit_error(UNIT(s), "Service has no ExecStart= setting, which is only allowed for Type=oneshot services. Refusing.");
553 return -ENOEXEC;
554 }
555
556 if (!s->remain_after_exit && !s->exec_command[SERVICE_EXEC_START] && UNIT(s)->success_action == EMERGENCY_ACTION_NONE) {
557 log_unit_error(UNIT(s), "Service has no ExecStart= and no SuccessAction= settings and does not have RemainAfterExit=yes set. Refusing.");
558 return -ENOEXEC;
559 }
560
561 if (s->type != SERVICE_ONESHOT && s->exec_command[SERVICE_EXEC_START]->command_next) {
562 log_unit_error(UNIT(s), "Service has more than one ExecStart= setting, which is only allowed for Type=oneshot services. Refusing.");
563 return -ENOEXEC;
564 }
565
566 if (s->type == SERVICE_ONESHOT && s->restart != SERVICE_RESTART_NO) {
567 log_unit_error(UNIT(s), "Service has Restart= setting other than no, which isn't allowed for Type=oneshot services. Refusing.");
568 return -ENOEXEC;
569 }
570
571 if (s->type == SERVICE_ONESHOT && !exit_status_set_is_empty(&s->restart_force_status)) {
572 log_unit_error(UNIT(s), "Service has RestartForceStatus= set, which isn't allowed for Type=oneshot services. Refusing.");
573 return -ENOEXEC;
574 }
575
576 if (s->type == SERVICE_DBUS && !s->bus_name) {
577 log_unit_error(UNIT(s), "Service is of type D-Bus but no D-Bus service name has been specified. Refusing.");
578 return -ENOEXEC;
579 }
580
581 if (s->bus_name && s->type != SERVICE_DBUS)
582 log_unit_warning(UNIT(s), "Service has a D-Bus service name specified, but is not of type dbus. Ignoring.");
583
584 if (s->exec_context.pam_name && !IN_SET(s->kill_context.kill_mode, KILL_CONTROL_GROUP, KILL_MIXED)) {
585 log_unit_error(UNIT(s), "Service has PAM enabled. Kill mode must be set to 'control-group' or 'mixed'. Refusing.");
586 return -ENOEXEC;
587 }
588
589 if (s->usb_function_descriptors && !s->usb_function_strings)
590 log_unit_warning(UNIT(s), "Service has USBFunctionDescriptors= setting, but no USBFunctionStrings=. Ignoring.");
591
592 if (!s->usb_function_descriptors && s->usb_function_strings)
593 log_unit_warning(UNIT(s), "Service has USBFunctionStrings= setting, but no USBFunctionDescriptors=. Ignoring.");
594
595 if (s->runtime_max_usec != USEC_INFINITY && s->type == SERVICE_ONESHOT)
596 log_unit_warning(UNIT(s), "MaxRuntimeSec= has no effect in combination with Type=oneshot. Ignoring.");
597
598 return 0;
599 }
600
601 static int service_add_default_dependencies(Service *s) {
602 int r;
603
604 assert(s);
605
606 if (!UNIT(s)->default_dependencies)
607 return 0;
608
609 /* Add a number of automatic dependencies useful for the
610 * majority of services. */
611
612 if (MANAGER_IS_SYSTEM(UNIT(s)->manager)) {
613 /* First, pull in the really early boot stuff, and
614 * require it, so that we fail if we can't acquire
615 * it. */
616
617 r = unit_add_two_dependencies_by_name(UNIT(s), UNIT_AFTER, UNIT_REQUIRES, SPECIAL_SYSINIT_TARGET, true, UNIT_DEPENDENCY_DEFAULT);
618 if (r < 0)
619 return r;
620 } else {
621
622 /* In the --user instance there's no sysinit.target,
623 * in that case require basic.target instead. */
624
625 r = unit_add_dependency_by_name(UNIT(s), UNIT_REQUIRES, SPECIAL_BASIC_TARGET, true, UNIT_DEPENDENCY_DEFAULT);
626 if (r < 0)
627 return r;
628 }
629
630 /* Second, if the rest of the base system is in the same
631 * transaction, order us after it, but do not pull it in or
632 * even require it. */
633 r = unit_add_dependency_by_name(UNIT(s), UNIT_AFTER, SPECIAL_BASIC_TARGET, true, UNIT_DEPENDENCY_DEFAULT);
634 if (r < 0)
635 return r;
636
637 /* Third, add us in for normal shutdown. */
638 return unit_add_two_dependencies_by_name(UNIT(s), UNIT_BEFORE, UNIT_CONFLICTS, SPECIAL_SHUTDOWN_TARGET, true, UNIT_DEPENDENCY_DEFAULT);
639 }
640
641 static void service_fix_output(Service *s) {
642 assert(s);
643
644 /* If nothing has been explicitly configured, patch default output in. If input is socket/tty we avoid this
645 * however, since in that case we want output to default to the same place as we read input from. */
646
647 if (s->exec_context.std_error == EXEC_OUTPUT_INHERIT &&
648 s->exec_context.std_output == EXEC_OUTPUT_INHERIT &&
649 s->exec_context.std_input == EXEC_INPUT_NULL)
650 s->exec_context.std_error = UNIT(s)->manager->default_std_error;
651
652 if (s->exec_context.std_output == EXEC_OUTPUT_INHERIT &&
653 s->exec_context.std_input == EXEC_INPUT_NULL)
654 s->exec_context.std_output = UNIT(s)->manager->default_std_output;
655
656 if (s->exec_context.std_input == EXEC_INPUT_NULL &&
657 s->exec_context.stdin_data_size > 0)
658 s->exec_context.std_input = EXEC_INPUT_DATA;
659 }
660
661 static int service_setup_bus_name(Service *s) {
662 int r;
663
664 assert(s);
665
666 if (!s->bus_name)
667 return 0;
668
669 r = unit_add_dependency_by_name(UNIT(s), UNIT_REQUIRES, SPECIAL_DBUS_SOCKET, true, UNIT_DEPENDENCY_FILE);
670 if (r < 0)
671 return log_unit_error_errno(UNIT(s), r, "Failed to add dependency on " SPECIAL_DBUS_SOCKET ": %m");
672
673 /* We always want to be ordered against dbus.socket if both are in the transaction. */
674 r = unit_add_dependency_by_name(UNIT(s), UNIT_AFTER, SPECIAL_DBUS_SOCKET, true, UNIT_DEPENDENCY_FILE);
675 if (r < 0)
676 return log_unit_error_errno(UNIT(s), r, "Failed to add dependency on " SPECIAL_DBUS_SOCKET ": %m");
677
678 r = unit_watch_bus_name(UNIT(s), s->bus_name);
679 if (r == -EEXIST)
680 return log_unit_error_errno(UNIT(s), r, "Two services allocated for the same bus name %s, refusing operation.", s->bus_name);
681 if (r < 0)
682 return log_unit_error_errno(UNIT(s), r, "Cannot watch bus name %s: %m", s->bus_name);
683
684 return 0;
685 }
686
687 static int service_add_extras(Service *s) {
688 int r;
689
690 assert(s);
691
692 if (s->type == _SERVICE_TYPE_INVALID) {
693 /* Figure out a type automatically */
694 if (s->bus_name)
695 s->type = SERVICE_DBUS;
696 else if (s->exec_command[SERVICE_EXEC_START])
697 s->type = SERVICE_SIMPLE;
698 else
699 s->type = SERVICE_ONESHOT;
700 }
701
702 /* Oneshot services have disabled start timeout by default */
703 if (s->type == SERVICE_ONESHOT && !s->start_timeout_defined)
704 s->timeout_start_usec = USEC_INFINITY;
705
706 service_fix_output(s);
707
708 r = unit_patch_contexts(UNIT(s));
709 if (r < 0)
710 return r;
711
712 r = unit_add_exec_dependencies(UNIT(s), &s->exec_context);
713 if (r < 0)
714 return r;
715
716 r = unit_set_default_slice(UNIT(s));
717 if (r < 0)
718 return r;
719
720 /* If the service needs the notify socket, let's enable it automatically. */
721 if (s->notify_access == NOTIFY_NONE &&
722 (s->type == SERVICE_NOTIFY || s->watchdog_usec > 0 || s->n_fd_store_max > 0))
723 s->notify_access = NOTIFY_MAIN;
724
725 r = service_add_default_dependencies(s);
726 if (r < 0)
727 return r;
728
729 r = service_setup_bus_name(s);
730 if (r < 0)
731 return r;
732
733 return 0;
734 }
735
736 static int service_load(Unit *u) {
737 Service *s = SERVICE(u);
738 int r;
739
740 assert(s);
741
742 /* Load a .service file */
743 r = unit_load_fragment(u);
744 if (r < 0)
745 return r;
746
747 /* Still nothing found? Then let's give up */
748 if (u->load_state == UNIT_STUB)
749 return -ENOENT;
750
751 /* This is a new unit? Then let's add in some extras */
752 if (u->load_state == UNIT_LOADED) {
753
754 /* We were able to load something, then let's add in
755 * the dropin directories. */
756 r = unit_load_dropin(u);
757 if (r < 0)
758 return r;
759
760 /* This is a new unit? Then let's add in some
761 * extras */
762 r = service_add_extras(s);
763 if (r < 0)
764 return r;
765 }
766
767 return service_verify(s);
768 }
769
770 static void service_dump(Unit *u, FILE *f, const char *prefix) {
771 char buf_restart[FORMAT_TIMESPAN_MAX], buf_start[FORMAT_TIMESPAN_MAX], buf_stop[FORMAT_TIMESPAN_MAX];
772 char buf_runtime[FORMAT_TIMESPAN_MAX], buf_watchdog[FORMAT_TIMESPAN_MAX];
773 ServiceExecCommand c;
774 Service *s = SERVICE(u);
775 const char *prefix2;
776
777 assert(s);
778
779 prefix = strempty(prefix);
780 prefix2 = strjoina(prefix, "\t");
781
782 fprintf(f,
783 "%sService State: %s\n"
784 "%sResult: %s\n"
785 "%sReload Result: %s\n"
786 "%sPermissionsStartOnly: %s\n"
787 "%sRootDirectoryStartOnly: %s\n"
788 "%sRemainAfterExit: %s\n"
789 "%sGuessMainPID: %s\n"
790 "%sType: %s\n"
791 "%sRestart: %s\n"
792 "%sNotifyAccess: %s\n"
793 "%sNotifyState: %s\n",
794 prefix, service_state_to_string(s->state),
795 prefix, service_result_to_string(s->result),
796 prefix, service_result_to_string(s->reload_result),
797 prefix, yes_no(s->permissions_start_only),
798 prefix, yes_no(s->root_directory_start_only),
799 prefix, yes_no(s->remain_after_exit),
800 prefix, yes_no(s->guess_main_pid),
801 prefix, service_type_to_string(s->type),
802 prefix, service_restart_to_string(s->restart),
803 prefix, notify_access_to_string(s->notify_access),
804 prefix, notify_state_to_string(s->notify_state));
805
806 if (s->control_pid > 0)
807 fprintf(f,
808 "%sControl PID: "PID_FMT"\n",
809 prefix, s->control_pid);
810
811 if (s->main_pid > 0)
812 fprintf(f,
813 "%sMain PID: "PID_FMT"\n"
814 "%sMain PID Known: %s\n"
815 "%sMain PID Alien: %s\n",
816 prefix, s->main_pid,
817 prefix, yes_no(s->main_pid_known),
818 prefix, yes_no(s->main_pid_alien));
819
820 if (s->pid_file)
821 fprintf(f,
822 "%sPIDFile: %s\n",
823 prefix, s->pid_file);
824
825 if (s->bus_name)
826 fprintf(f,
827 "%sBusName: %s\n"
828 "%sBus Name Good: %s\n",
829 prefix, s->bus_name,
830 prefix, yes_no(s->bus_name_good));
831
832 if (UNIT_ISSET(s->accept_socket))
833 fprintf(f,
834 "%sAccept Socket: %s\n",
835 prefix, UNIT_DEREF(s->accept_socket)->id);
836
837 fprintf(f,
838 "%sRestartSec: %s\n"
839 "%sTimeoutStartSec: %s\n"
840 "%sTimeoutStopSec: %s\n"
841 "%sRuntimeMaxSec: %s\n"
842 "%sWatchdogSec: %s\n",
843 prefix, format_timespan(buf_restart, sizeof(buf_restart), s->restart_usec, USEC_PER_SEC),
844 prefix, format_timespan(buf_start, sizeof(buf_start), s->timeout_start_usec, USEC_PER_SEC),
845 prefix, format_timespan(buf_stop, sizeof(buf_stop), s->timeout_stop_usec, USEC_PER_SEC),
846 prefix, format_timespan(buf_runtime, sizeof(buf_runtime), s->runtime_max_usec, USEC_PER_SEC),
847 prefix, format_timespan(buf_watchdog, sizeof(buf_watchdog), s->watchdog_usec, USEC_PER_SEC));
848
849 kill_context_dump(&s->kill_context, f, prefix);
850 exec_context_dump(&s->exec_context, f, prefix);
851
852 for (c = 0; c < _SERVICE_EXEC_COMMAND_MAX; c++) {
853
854 if (!s->exec_command[c])
855 continue;
856
857 fprintf(f, "%s-> %s:\n",
858 prefix, service_exec_command_to_string(c));
859
860 exec_command_dump_list(s->exec_command[c], f, prefix2);
861 }
862
863 if (s->status_text)
864 fprintf(f, "%sStatus Text: %s\n",
865 prefix, s->status_text);
866
867 if (s->n_fd_store_max > 0)
868 fprintf(f,
869 "%sFile Descriptor Store Max: %u\n"
870 "%sFile Descriptor Store Current: %zu\n",
871 prefix, s->n_fd_store_max,
872 prefix, s->n_fd_store);
873
874 cgroup_context_dump(&s->cgroup_context, f, prefix);
875 }
876
877 static int service_is_suitable_main_pid(Service *s, pid_t pid, int prio) {
878 Unit *owner;
879
880 assert(s);
881 assert(pid_is_valid(pid));
882
883 /* Checks whether the specified PID is suitable as main PID for this service. returns negative if not, 0 if the
884 * PID is questionnable but should be accepted if the source of configuration is trusted. > 0 if the PID is
885 * good */
886
887 if (pid == getpid_cached() || pid == 1) {
888 log_unit_full(UNIT(s), prio, 0, "New main PID "PID_FMT" is the manager, refusing.", pid);
889 return -EPERM;
890 }
891
892 if (pid == s->control_pid) {
893 log_unit_full(UNIT(s), prio, 0, "New main PID "PID_FMT" is the control process, refusing.", pid);
894 return -EPERM;
895 }
896
897 if (!pid_is_alive(pid)) {
898 log_unit_full(UNIT(s), prio, 0, "New main PID "PID_FMT" does not exist or is a zombie.", pid);
899 return -ESRCH;
900 }
901
902 owner = manager_get_unit_by_pid(UNIT(s)->manager, pid);
903 if (owner == UNIT(s)) {
904 log_unit_debug(UNIT(s), "New main PID "PID_FMT" belongs to service, we are happy.", pid);
905 return 1; /* Yay, it's definitely a good PID */
906 }
907
908 return 0; /* Hmm it's a suspicious PID, let's accept it if configuration source is trusted */
909 }
910
911 static int service_load_pid_file(Service *s, bool may_warn) {
912 char procfs[STRLEN("/proc/self/fd/") + DECIMAL_STR_MAX(int)];
913 bool questionable_pid_file = false;
914 _cleanup_free_ char *k = NULL;
915 _cleanup_close_ int fd = -1;
916 int r, prio;
917 pid_t pid;
918
919 assert(s);
920
921 if (!s->pid_file)
922 return -ENOENT;
923
924 prio = may_warn ? LOG_INFO : LOG_DEBUG;
925
926 fd = chase_symlinks(s->pid_file, NULL, CHASE_OPEN|CHASE_SAFE, NULL);
927 if (fd == -EPERM) {
928 log_unit_full(UNIT(s), LOG_DEBUG, fd, "Permission denied while opening PID file or potentially unsafe symlink chain, will now retry with relaxed checks: %s", s->pid_file);
929
930 questionable_pid_file = true;
931
932 fd = chase_symlinks(s->pid_file, NULL, CHASE_OPEN, NULL);
933 }
934 if (fd < 0)
935 return log_unit_full(UNIT(s), prio, fd, "Can't open PID file %s (yet?) after %s: %m", s->pid_file, service_state_to_string(s->state));
936
937 /* Let's read the PID file now that we chased it down. But we need to convert the O_PATH fd chase_symlinks() returned us into a proper fd first. */
938 xsprintf(procfs, "/proc/self/fd/%i", fd);
939 r = read_one_line_file(procfs, &k);
940 if (r < 0)
941 return log_unit_error_errno(UNIT(s), r, "Can't convert PID files %s O_PATH file descriptor to proper file descriptor: %m", s->pid_file);
942
943 r = parse_pid(k, &pid);
944 if (r < 0)
945 return log_unit_full(UNIT(s), prio, r, "Failed to parse PID from file %s: %m", s->pid_file);
946
947 if (s->main_pid_known && pid == s->main_pid)
948 return 0;
949
950 r = service_is_suitable_main_pid(s, pid, prio);
951 if (r < 0)
952 return r;
953 if (r == 0) {
954 struct stat st;
955
956 if (questionable_pid_file) {
957 log_unit_error(UNIT(s), "Refusing to accept PID outside of service control group, acquired through unsafe symlink chain: %s", s->pid_file);
958 return -EPERM;
959 }
960
961 /* Hmm, it's not clear if the new main PID is safe. Let's allow this if the PID file is owned by root */
962
963 if (fstat(fd, &st) < 0)
964 return log_unit_error_errno(UNIT(s), errno, "Failed to fstat() PID file O_PATH fd: %m");
965
966 if (st.st_uid != 0) {
967 log_unit_error(UNIT(s), "New main PID "PID_FMT" does not belong to service, and PID file is not owned by root. Refusing.", pid);
968 return -EPERM;
969 }
970
971 log_unit_debug(UNIT(s), "New main PID "PID_FMT" does not belong to service, but we'll accept it since PID file is owned by root.", pid);
972 }
973
974 if (s->main_pid_known) {
975 log_unit_debug(UNIT(s), "Main PID changing: "PID_FMT" -> "PID_FMT, s->main_pid, pid);
976
977 service_unwatch_main_pid(s);
978 s->main_pid_known = false;
979 } else
980 log_unit_debug(UNIT(s), "Main PID loaded: "PID_FMT, pid);
981
982 r = service_set_main_pid(s, pid);
983 if (r < 0)
984 return r;
985
986 r = unit_watch_pid(UNIT(s), pid);
987 if (r < 0) /* FIXME: we need to do something here */
988 return log_unit_warning_errno(UNIT(s), r, "Failed to watch PID "PID_FMT" for service: %m", pid);
989
990 return 1;
991 }
992
993 static void service_search_main_pid(Service *s) {
994 pid_t pid = 0;
995 int r;
996
997 assert(s);
998
999 /* If we know it anyway, don't ever fallback to unreliable
1000 * heuristics */
1001 if (s->main_pid_known)
1002 return;
1003
1004 if (!s->guess_main_pid)
1005 return;
1006
1007 assert(s->main_pid <= 0);
1008
1009 if (unit_search_main_pid(UNIT(s), &pid) < 0)
1010 return;
1011
1012 log_unit_debug(UNIT(s), "Main PID guessed: "PID_FMT, pid);
1013 if (service_set_main_pid(s, pid) < 0)
1014 return;
1015
1016 r = unit_watch_pid(UNIT(s), pid);
1017 if (r < 0)
1018 /* FIXME: we need to do something here */
1019 log_unit_warning_errno(UNIT(s), r, "Failed to watch PID "PID_FMT" from: %m", pid);
1020 }
1021
1022 static void service_set_state(Service *s, ServiceState state) {
1023 ServiceState old_state;
1024 const UnitActiveState *table;
1025
1026 assert(s);
1027
1028 table = s->type == SERVICE_IDLE ? state_translation_table_idle : state_translation_table;
1029
1030 old_state = s->state;
1031 s->state = state;
1032
1033 service_unwatch_pid_file(s);
1034
1035 if (!IN_SET(state,
1036 SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST,
1037 SERVICE_RUNNING,
1038 SERVICE_RELOAD,
1039 SERVICE_STOP, SERVICE_STOP_WATCHDOG, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
1040 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL,
1041 SERVICE_AUTO_RESTART))
1042 s->timer_event_source = sd_event_source_unref(s->timer_event_source);
1043
1044 if (!IN_SET(state,
1045 SERVICE_START, SERVICE_START_POST,
1046 SERVICE_RUNNING, SERVICE_RELOAD,
1047 SERVICE_STOP, SERVICE_STOP_WATCHDOG, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
1048 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL)) {
1049 service_unwatch_main_pid(s);
1050 s->main_command = NULL;
1051 }
1052
1053 if (!IN_SET(state,
1054 SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST,
1055 SERVICE_RELOAD,
1056 SERVICE_STOP, SERVICE_STOP_WATCHDOG, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
1057 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL)) {
1058 service_unwatch_control_pid(s);
1059 s->control_command = NULL;
1060 s->control_command_id = _SERVICE_EXEC_COMMAND_INVALID;
1061 }
1062
1063 if (IN_SET(state, SERVICE_DEAD, SERVICE_FAILED, SERVICE_AUTO_RESTART)) {
1064 unit_unwatch_all_pids(UNIT(s));
1065 unit_dequeue_rewatch_pids(UNIT(s));
1066 }
1067
1068 if (!IN_SET(state,
1069 SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST,
1070 SERVICE_RUNNING, SERVICE_RELOAD,
1071 SERVICE_STOP, SERVICE_STOP_WATCHDOG, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
1072 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL) &&
1073 !(state == SERVICE_DEAD && UNIT(s)->job))
1074 service_close_socket_fd(s);
1075
1076 if (state != SERVICE_START)
1077 s->exec_fd_event_source = sd_event_source_unref(s->exec_fd_event_source);
1078
1079 if (!IN_SET(state, SERVICE_START_POST, SERVICE_RUNNING, SERVICE_RELOAD))
1080 service_stop_watchdog(s);
1081
1082 /* For the inactive states unit_notify() will trim the cgroup,
1083 * but for exit we have to do that ourselves... */
1084 if (state == SERVICE_EXITED && !MANAGER_IS_RELOADING(UNIT(s)->manager))
1085 unit_prune_cgroup(UNIT(s));
1086
1087 if (old_state != state)
1088 log_unit_debug(UNIT(s), "Changed %s -> %s", service_state_to_string(old_state), service_state_to_string(state));
1089
1090 unit_notify(UNIT(s), table[old_state], table[state],
1091 (s->reload_result == SERVICE_SUCCESS ? 0 : UNIT_NOTIFY_RELOAD_FAILURE) |
1092 (s->will_auto_restart ? UNIT_NOTIFY_WILL_AUTO_RESTART : 0));
1093 }
1094
1095 static usec_t service_coldplug_timeout(Service *s) {
1096 assert(s);
1097
1098 switch (s->deserialized_state) {
1099
1100 case SERVICE_START_PRE:
1101 case SERVICE_START:
1102 case SERVICE_START_POST:
1103 case SERVICE_RELOAD:
1104 return usec_add(UNIT(s)->state_change_timestamp.monotonic, s->timeout_start_usec);
1105
1106 case SERVICE_RUNNING:
1107 return usec_add(UNIT(s)->active_enter_timestamp.monotonic, s->runtime_max_usec);
1108
1109 case SERVICE_STOP:
1110 case SERVICE_STOP_WATCHDOG:
1111 case SERVICE_STOP_SIGTERM:
1112 case SERVICE_STOP_SIGKILL:
1113 case SERVICE_STOP_POST:
1114 case SERVICE_FINAL_SIGTERM:
1115 case SERVICE_FINAL_SIGKILL:
1116 return usec_add(UNIT(s)->state_change_timestamp.monotonic, s->timeout_stop_usec);
1117
1118 case SERVICE_AUTO_RESTART:
1119 return usec_add(UNIT(s)->inactive_enter_timestamp.monotonic, s->restart_usec);
1120
1121 default:
1122 return USEC_INFINITY;
1123 }
1124 }
1125
1126 static int service_coldplug(Unit *u) {
1127 Service *s = SERVICE(u);
1128 int r;
1129
1130 assert(s);
1131 assert(s->state == SERVICE_DEAD);
1132
1133 if (s->deserialized_state == s->state)
1134 return 0;
1135
1136 r = service_arm_timer(s, service_coldplug_timeout(s));
1137 if (r < 0)
1138 return r;
1139
1140 if (s->main_pid > 0 &&
1141 pid_is_unwaited(s->main_pid) &&
1142 (IN_SET(s->deserialized_state,
1143 SERVICE_START, SERVICE_START_POST,
1144 SERVICE_RUNNING, SERVICE_RELOAD,
1145 SERVICE_STOP, SERVICE_STOP_WATCHDOG, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
1146 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL))) {
1147 r = unit_watch_pid(UNIT(s), s->main_pid);
1148 if (r < 0)
1149 return r;
1150 }
1151
1152 if (s->control_pid > 0 &&
1153 pid_is_unwaited(s->control_pid) &&
1154 IN_SET(s->deserialized_state,
1155 SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST,
1156 SERVICE_RELOAD,
1157 SERVICE_STOP, SERVICE_STOP_WATCHDOG, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
1158 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL)) {
1159 r = unit_watch_pid(UNIT(s), s->control_pid);
1160 if (r < 0)
1161 return r;
1162 }
1163
1164 if (!IN_SET(s->deserialized_state, SERVICE_DEAD, SERVICE_FAILED, SERVICE_AUTO_RESTART)) {
1165 (void) unit_enqueue_rewatch_pids(u);
1166 (void) unit_setup_dynamic_creds(u);
1167 (void) unit_setup_exec_runtime(u);
1168 }
1169
1170 if (IN_SET(s->deserialized_state, SERVICE_START_POST, SERVICE_RUNNING, SERVICE_RELOAD))
1171 service_start_watchdog(s);
1172
1173 if (UNIT_ISSET(s->accept_socket)) {
1174 Socket* socket = SOCKET(UNIT_DEREF(s->accept_socket));
1175
1176 if (socket->max_connections_per_source > 0) {
1177 SocketPeer *peer;
1178
1179 /* Make a best-effort attempt at bumping the connection count */
1180 if (socket_acquire_peer(socket, s->socket_fd, &peer) > 0) {
1181 socket_peer_unref(s->peer);
1182 s->peer = peer;
1183 }
1184 }
1185 }
1186
1187 service_set_state(s, s->deserialized_state);
1188 return 0;
1189 }
1190
1191 static int service_collect_fds(
1192 Service *s,
1193 int **fds,
1194 char ***fd_names,
1195 size_t *n_socket_fds,
1196 size_t *n_storage_fds) {
1197
1198 _cleanup_strv_free_ char **rfd_names = NULL;
1199 _cleanup_free_ int *rfds = NULL;
1200 size_t rn_socket_fds = 0, rn_storage_fds = 0;
1201 int r;
1202
1203 assert(s);
1204 assert(fds);
1205 assert(fd_names);
1206 assert(n_socket_fds);
1207 assert(n_storage_fds);
1208
1209 if (s->socket_fd >= 0) {
1210
1211 /* Pass the per-connection socket */
1212
1213 rfds = new(int, 1);
1214 if (!rfds)
1215 return -ENOMEM;
1216 rfds[0] = s->socket_fd;
1217
1218 rfd_names = strv_new("connection", NULL);
1219 if (!rfd_names)
1220 return -ENOMEM;
1221
1222 rn_socket_fds = 1;
1223 } else {
1224 Iterator i;
1225 void *v;
1226 Unit *u;
1227
1228 /* Pass all our configured sockets for singleton services */
1229
1230 HASHMAP_FOREACH_KEY(v, u, UNIT(s)->dependencies[UNIT_TRIGGERED_BY], i) {
1231 _cleanup_free_ int *cfds = NULL;
1232 Socket *sock;
1233 int cn_fds;
1234
1235 if (u->type != UNIT_SOCKET)
1236 continue;
1237
1238 sock = SOCKET(u);
1239
1240 cn_fds = socket_collect_fds(sock, &cfds);
1241 if (cn_fds < 0)
1242 return cn_fds;
1243
1244 if (cn_fds <= 0)
1245 continue;
1246
1247 if (!rfds) {
1248 rfds = TAKE_PTR(cfds);
1249 rn_socket_fds = cn_fds;
1250 } else {
1251 int *t;
1252
1253 t = reallocarray(rfds, rn_socket_fds + cn_fds, sizeof(int));
1254 if (!t)
1255 return -ENOMEM;
1256
1257 memcpy(t + rn_socket_fds, cfds, cn_fds * sizeof(int));
1258
1259 rfds = t;
1260 rn_socket_fds += cn_fds;
1261 }
1262
1263 r = strv_extend_n(&rfd_names, socket_fdname(sock), cn_fds);
1264 if (r < 0)
1265 return r;
1266 }
1267 }
1268
1269 if (s->n_fd_store > 0) {
1270 ServiceFDStore *fs;
1271 size_t n_fds;
1272 char **nl;
1273 int *t;
1274
1275 t = reallocarray(rfds, rn_socket_fds + s->n_fd_store, sizeof(int));
1276 if (!t)
1277 return -ENOMEM;
1278
1279 rfds = t;
1280
1281 nl = reallocarray(rfd_names, rn_socket_fds + s->n_fd_store + 1, sizeof(char *));
1282 if (!nl)
1283 return -ENOMEM;
1284
1285 rfd_names = nl;
1286 n_fds = rn_socket_fds;
1287
1288 LIST_FOREACH(fd_store, fs, s->fd_store) {
1289 rfds[n_fds] = fs->fd;
1290 rfd_names[n_fds] = strdup(strempty(fs->fdname));
1291 if (!rfd_names[n_fds])
1292 return -ENOMEM;
1293
1294 rn_storage_fds++;
1295 n_fds++;
1296 }
1297
1298 rfd_names[n_fds] = NULL;
1299 }
1300
1301 *fds = TAKE_PTR(rfds);
1302 *fd_names = TAKE_PTR(rfd_names);
1303 *n_socket_fds = rn_socket_fds;
1304 *n_storage_fds = rn_storage_fds;
1305
1306 return 0;
1307 }
1308
1309 static int service_allocate_exec_fd_event_source(
1310 Service *s,
1311 int fd,
1312 sd_event_source **ret_event_source) {
1313
1314 _cleanup_(sd_event_source_unrefp) sd_event_source *source = NULL;
1315 int r;
1316
1317 assert(s);
1318 assert(fd >= 0);
1319 assert(ret_event_source);
1320
1321 r = sd_event_add_io(UNIT(s)->manager->event, &source, fd, 0, service_dispatch_exec_io, s);
1322 if (r < 0)
1323 return log_unit_error_errno(UNIT(s), r, "Failed to allocate exec_fd event source: %m");
1324
1325 /* This is a bit lower priority than SIGCHLD, as that carries a lot more interesting failure information */
1326
1327 r = sd_event_source_set_priority(source, SD_EVENT_PRIORITY_NORMAL-3);
1328 if (r < 0)
1329 return log_unit_error_errno(UNIT(s), r, "Failed to adjust priority of exec_fd event source: %m");
1330
1331 (void) sd_event_source_set_description(source, "service event_fd");
1332
1333 r = sd_event_source_set_io_fd_own(source, true);
1334 if (r < 0)
1335 return log_unit_error_errno(UNIT(s), r, "Failed to pass ownership of fd to event source: %m");
1336
1337 *ret_event_source = TAKE_PTR(source);
1338 return 0;
1339 }
1340
1341 static int service_allocate_exec_fd(
1342 Service *s,
1343 sd_event_source **ret_event_source,
1344 int* ret_exec_fd) {
1345
1346 _cleanup_close_pair_ int p[2] = { -1, -1 };
1347 int r;
1348
1349 assert(s);
1350 assert(ret_event_source);
1351 assert(ret_exec_fd);
1352
1353 if (pipe2(p, O_CLOEXEC|O_NONBLOCK) < 0)
1354 return log_unit_error_errno(UNIT(s), errno, "Failed to allocate exec_fd pipe: %m");
1355
1356 r = service_allocate_exec_fd_event_source(s, p[0], ret_event_source);
1357 if (r < 0)
1358 return r;
1359
1360 p[0] = -1;
1361 *ret_exec_fd = TAKE_FD(p[1]);
1362
1363 return 0;
1364 }
1365
1366 static bool service_exec_needs_notify_socket(Service *s, ExecFlags flags) {
1367 assert(s);
1368
1369 /* Notifications are accepted depending on the process and
1370 * the access setting of the service:
1371 * process: \ access: NONE MAIN EXEC ALL
1372 * main no yes yes yes
1373 * control no no yes yes
1374 * other (forked) no no no yes */
1375
1376 if (flags & EXEC_IS_CONTROL)
1377 /* A control process */
1378 return IN_SET(s->notify_access, NOTIFY_EXEC, NOTIFY_ALL);
1379
1380 /* We only spawn main processes and control processes, so any
1381 * process that is not a control process is a main process */
1382 return s->notify_access != NOTIFY_NONE;
1383 }
1384
1385 static int service_spawn(
1386 Service *s,
1387 ExecCommand *c,
1388 usec_t timeout,
1389 ExecFlags flags,
1390 pid_t *_pid) {
1391
1392 ExecParameters exec_params = {
1393 .flags = flags,
1394 .stdin_fd = -1,
1395 .stdout_fd = -1,
1396 .stderr_fd = -1,
1397 .exec_fd = -1,
1398 };
1399 _cleanup_strv_free_ char **final_env = NULL, **our_env = NULL, **fd_names = NULL;
1400 _cleanup_(sd_event_source_unrefp) sd_event_source *exec_fd_source = NULL;
1401 size_t n_socket_fds = 0, n_storage_fds = 0, n_env = 0;
1402 _cleanup_close_ int exec_fd = -1;
1403 _cleanup_free_ int *fds = NULL;
1404 pid_t pid;
1405 int r;
1406
1407 assert(s);
1408 assert(c);
1409 assert(_pid);
1410
1411 r = unit_prepare_exec(UNIT(s));
1412 if (r < 0)
1413 return r;
1414
1415 if (flags & EXEC_IS_CONTROL) {
1416 /* If this is a control process, mask the permissions/chroot application if this is requested. */
1417 if (s->permissions_start_only)
1418 exec_params.flags &= ~EXEC_APPLY_SANDBOXING;
1419 if (s->root_directory_start_only)
1420 exec_params.flags &= ~EXEC_APPLY_CHROOT;
1421 }
1422
1423 if ((flags & EXEC_PASS_FDS) ||
1424 s->exec_context.std_input == EXEC_INPUT_SOCKET ||
1425 s->exec_context.std_output == EXEC_OUTPUT_SOCKET ||
1426 s->exec_context.std_error == EXEC_OUTPUT_SOCKET) {
1427
1428 r = service_collect_fds(s, &fds, &fd_names, &n_socket_fds, &n_storage_fds);
1429 if (r < 0)
1430 return r;
1431
1432 log_unit_debug(UNIT(s), "Passing %zu fds to service", n_socket_fds + n_storage_fds);
1433 }
1434
1435 if (!FLAGS_SET(flags, EXEC_IS_CONTROL) && s->type == SERVICE_EXEC) {
1436 assert(!s->exec_fd_event_source);
1437
1438 r = service_allocate_exec_fd(s, &exec_fd_source, &exec_fd);
1439 if (r < 0)
1440 return r;
1441 }
1442
1443 r = service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), timeout));
1444 if (r < 0)
1445 return r;
1446
1447 our_env = new0(char*, 9);
1448 if (!our_env)
1449 return -ENOMEM;
1450
1451 if (service_exec_needs_notify_socket(s, flags))
1452 if (asprintf(our_env + n_env++, "NOTIFY_SOCKET=%s", UNIT(s)->manager->notify_socket) < 0)
1453 return -ENOMEM;
1454
1455 if (s->main_pid > 0)
1456 if (asprintf(our_env + n_env++, "MAINPID="PID_FMT, s->main_pid) < 0)
1457 return -ENOMEM;
1458
1459 if (MANAGER_IS_USER(UNIT(s)->manager))
1460 if (asprintf(our_env + n_env++, "MANAGERPID="PID_FMT, getpid_cached()) < 0)
1461 return -ENOMEM;
1462
1463 if (s->socket_fd >= 0) {
1464 union sockaddr_union sa;
1465 socklen_t salen = sizeof(sa);
1466
1467 /* If this is a per-connection service instance, let's set $REMOTE_ADDR and $REMOTE_PORT to something
1468 * useful. Note that we do this only when we are still connected at this point in time, which we might
1469 * very well not be. Hence we ignore all errors when retrieving peer information (as that might result
1470 * in ENOTCONN), and just use whate we can use. */
1471
1472 if (getpeername(s->socket_fd, &sa.sa, &salen) >= 0 &&
1473 IN_SET(sa.sa.sa_family, AF_INET, AF_INET6, AF_VSOCK)) {
1474
1475 _cleanup_free_ char *addr = NULL;
1476 char *t;
1477 unsigned port;
1478
1479 r = sockaddr_pretty(&sa.sa, salen, true, false, &addr);
1480 if (r < 0)
1481 return r;
1482
1483 t = strappend("REMOTE_ADDR=", addr);
1484 if (!t)
1485 return -ENOMEM;
1486 our_env[n_env++] = t;
1487
1488 r = sockaddr_port(&sa.sa, &port);
1489 if (r < 0)
1490 return r;
1491
1492 if (asprintf(&t, "REMOTE_PORT=%u", port) < 0)
1493 return -ENOMEM;
1494 our_env[n_env++] = t;
1495 }
1496 }
1497
1498 if (flags & EXEC_SETENV_RESULT) {
1499 if (asprintf(our_env + n_env++, "SERVICE_RESULT=%s", service_result_to_string(s->result)) < 0)
1500 return -ENOMEM;
1501
1502 if (s->main_exec_status.pid > 0 &&
1503 dual_timestamp_is_set(&s->main_exec_status.exit_timestamp)) {
1504 if (asprintf(our_env + n_env++, "EXIT_CODE=%s", sigchld_code_to_string(s->main_exec_status.code)) < 0)
1505 return -ENOMEM;
1506
1507 if (s->main_exec_status.code == CLD_EXITED)
1508 r = asprintf(our_env + n_env++, "EXIT_STATUS=%i", s->main_exec_status.status);
1509 else
1510 r = asprintf(our_env + n_env++, "EXIT_STATUS=%s", signal_to_string(s->main_exec_status.status));
1511 if (r < 0)
1512 return -ENOMEM;
1513 }
1514 }
1515
1516 unit_set_exec_params(UNIT(s), &exec_params);
1517
1518 final_env = strv_env_merge(2, exec_params.environment, our_env, NULL);
1519 if (!final_env)
1520 return -ENOMEM;
1521
1522 /* System services should get a new keyring by default. */
1523 SET_FLAG(exec_params.flags, EXEC_NEW_KEYRING, MANAGER_IS_SYSTEM(UNIT(s)->manager));
1524
1525 /* System D-Bus needs nss-systemd disabled, so that we don't deadlock */
1526 SET_FLAG(exec_params.flags, EXEC_NSS_BYPASS_BUS,
1527 MANAGER_IS_SYSTEM(UNIT(s)->manager) && unit_has_name(UNIT(s), SPECIAL_DBUS_SERVICE));
1528
1529 exec_params.environment = final_env;
1530 exec_params.fds = fds;
1531 exec_params.fd_names = fd_names;
1532 exec_params.n_socket_fds = n_socket_fds;
1533 exec_params.n_storage_fds = n_storage_fds;
1534 exec_params.watchdog_usec = s->watchdog_usec;
1535 exec_params.selinux_context_net = s->socket_fd_selinux_context_net;
1536 if (s->type == SERVICE_IDLE)
1537 exec_params.idle_pipe = UNIT(s)->manager->idle_pipe;
1538 exec_params.stdin_fd = s->stdin_fd;
1539 exec_params.stdout_fd = s->stdout_fd;
1540 exec_params.stderr_fd = s->stderr_fd;
1541 exec_params.exec_fd = exec_fd;
1542
1543 r = exec_spawn(UNIT(s),
1544 c,
1545 &s->exec_context,
1546 &exec_params,
1547 s->exec_runtime,
1548 &s->dynamic_creds,
1549 &pid);
1550 if (r < 0)
1551 return r;
1552
1553 s->exec_fd_event_source = TAKE_PTR(exec_fd_source);
1554 s->exec_fd_hot = false;
1555
1556 r = unit_watch_pid(UNIT(s), pid);
1557 if (r < 0) /* FIXME: we need to do something here */
1558 return r;
1559
1560 *_pid = pid;
1561
1562 return 0;
1563 }
1564
1565 static int main_pid_good(Service *s) {
1566 assert(s);
1567
1568 /* Returns 0 if the pid is dead, > 0 if it is good, < 0 if we don't know */
1569
1570 /* If we know the pid file, then let's just check if it is
1571 * still valid */
1572 if (s->main_pid_known) {
1573
1574 /* If it's an alien child let's check if it is still
1575 * alive ... */
1576 if (s->main_pid_alien && s->main_pid > 0)
1577 return pid_is_alive(s->main_pid);
1578
1579 /* .. otherwise assume we'll get a SIGCHLD for it,
1580 * which we really should wait for to collect exit
1581 * status and code */
1582 return s->main_pid > 0;
1583 }
1584
1585 /* We don't know the pid */
1586 return -EAGAIN;
1587 }
1588
1589 static int control_pid_good(Service *s) {
1590 assert(s);
1591
1592 /* Returns 0 if the control PID is dead, > 0 if it is good. We never actually return < 0 here, but in order to
1593 * make this function as similar as possible to main_pid_good() and cgroup_good(), we pretend that < 0 also
1594 * means: we can't figure it out. */
1595
1596 return s->control_pid > 0;
1597 }
1598
1599 static int cgroup_good(Service *s) {
1600 int r;
1601
1602 assert(s);
1603
1604 /* Returns 0 if the cgroup is empty or doesn't exist, > 0 if it is exists and is populated, < 0 if we can't
1605 * figure it out */
1606
1607 if (!UNIT(s)->cgroup_path)
1608 return 0;
1609
1610 r = cg_is_empty_recursive(SYSTEMD_CGROUP_CONTROLLER, UNIT(s)->cgroup_path);
1611 if (r < 0)
1612 return r;
1613
1614 return r == 0;
1615 }
1616
1617 static bool service_shall_restart(Service *s) {
1618 assert(s);
1619
1620 /* Don't restart after manual stops */
1621 if (s->forbid_restart)
1622 return false;
1623
1624 /* Never restart if this is configured as special exception */
1625 if (exit_status_set_test(&s->restart_prevent_status, s->main_exec_status.code, s->main_exec_status.status))
1626 return false;
1627
1628 /* Restart if the exit code/status are configured as restart triggers */
1629 if (exit_status_set_test(&s->restart_force_status, s->main_exec_status.code, s->main_exec_status.status))
1630 return true;
1631
1632 switch (s->restart) {
1633
1634 case SERVICE_RESTART_NO:
1635 return false;
1636
1637 case SERVICE_RESTART_ALWAYS:
1638 return true;
1639
1640 case SERVICE_RESTART_ON_SUCCESS:
1641 return s->result == SERVICE_SUCCESS;
1642
1643 case SERVICE_RESTART_ON_FAILURE:
1644 return s->result != SERVICE_SUCCESS;
1645
1646 case SERVICE_RESTART_ON_ABNORMAL:
1647 return !IN_SET(s->result, SERVICE_SUCCESS, SERVICE_FAILURE_EXIT_CODE);
1648
1649 case SERVICE_RESTART_ON_WATCHDOG:
1650 return s->result == SERVICE_FAILURE_WATCHDOG;
1651
1652 case SERVICE_RESTART_ON_ABORT:
1653 return IN_SET(s->result, SERVICE_FAILURE_SIGNAL, SERVICE_FAILURE_CORE_DUMP);
1654
1655 default:
1656 assert_not_reached("unknown restart setting");
1657 }
1658 }
1659
1660 static bool service_will_restart(Unit *u) {
1661 Service *s = SERVICE(u);
1662
1663 assert(s);
1664
1665 if (s->will_auto_restart)
1666 return true;
1667 if (s->state == SERVICE_AUTO_RESTART)
1668 return true;
1669 if (!UNIT(s)->job)
1670 return false;
1671 if (UNIT(s)->job->type == JOB_START)
1672 return true;
1673
1674 return false;
1675 }
1676
1677 static void service_enter_dead(Service *s, ServiceResult f, bool allow_restart) {
1678 int r;
1679
1680 assert(s);
1681
1682 /* If there's a stop job queued before we enter the DEAD state, we shouldn't act on Restart=, in order to not
1683 * undo what has already been enqueued. */
1684 if (unit_stop_pending(UNIT(s)))
1685 allow_restart = false;
1686
1687 if (s->result == SERVICE_SUCCESS)
1688 s->result = f;
1689
1690 if (s->result != SERVICE_SUCCESS)
1691 log_unit_warning(UNIT(s), "Failed with result '%s'.", service_result_to_string(s->result));
1692
1693 if (allow_restart && service_shall_restart(s))
1694 s->will_auto_restart = true;
1695
1696 /* Make sure service_release_resources() doesn't destroy our FD store, while we are changing through
1697 * SERVICE_FAILED/SERVICE_DEAD before entering into SERVICE_AUTO_RESTART. */
1698 s->n_keep_fd_store ++;
1699
1700 service_set_state(s, s->result != SERVICE_SUCCESS ? SERVICE_FAILED : SERVICE_DEAD);
1701
1702 if (s->will_auto_restart) {
1703 s->will_auto_restart = false;
1704
1705 r = service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), s->restart_usec));
1706 if (r < 0) {
1707 s->n_keep_fd_store--;
1708 goto fail;
1709 }
1710
1711 service_set_state(s, SERVICE_AUTO_RESTART);
1712 } else
1713 /* If we shan't restart, then flush out the restart counter. But don't do that immediately, so that the
1714 * user can still introspect the counter. Do so on the next start. */
1715 s->flush_n_restarts = true;
1716
1717 /* The new state is in effect, let's decrease the fd store ref counter again. Let's also readd us to the GC
1718 * queue, so that the fd store is possibly gc'ed again */
1719 s->n_keep_fd_store--;
1720 unit_add_to_gc_queue(UNIT(s));
1721
1722 /* The next restart might not be a manual stop, hence reset the flag indicating manual stops */
1723 s->forbid_restart = false;
1724
1725 /* We want fresh tmpdirs in case service is started again immediately */
1726 s->exec_runtime = exec_runtime_unref(s->exec_runtime, true);
1727
1728 if (s->exec_context.runtime_directory_preserve_mode == EXEC_PRESERVE_NO ||
1729 (s->exec_context.runtime_directory_preserve_mode == EXEC_PRESERVE_RESTART && !service_will_restart(UNIT(s))))
1730 /* Also, remove the runtime directory */
1731 exec_context_destroy_runtime_directory(&s->exec_context, UNIT(s)->manager->prefix[EXEC_DIRECTORY_RUNTIME]);
1732
1733 /* Get rid of the IPC bits of the user */
1734 unit_unref_uid_gid(UNIT(s), true);
1735
1736 /* Release the user, and destroy it if we are the only remaining owner */
1737 dynamic_creds_destroy(&s->dynamic_creds);
1738
1739 /* Try to delete the pid file. At this point it will be
1740 * out-of-date, and some software might be confused by it, so
1741 * let's remove it. */
1742 if (s->pid_file)
1743 (void) unlink(s->pid_file);
1744
1745 return;
1746
1747 fail:
1748 log_unit_warning_errno(UNIT(s), r, "Failed to run install restart timer: %m");
1749 service_enter_dead(s, SERVICE_FAILURE_RESOURCES, false);
1750 }
1751
1752 static void service_enter_stop_post(Service *s, ServiceResult f) {
1753 int r;
1754 assert(s);
1755
1756 if (s->result == SERVICE_SUCCESS)
1757 s->result = f;
1758
1759 service_unwatch_control_pid(s);
1760 (void) unit_enqueue_rewatch_pids(UNIT(s));
1761
1762 s->control_command = s->exec_command[SERVICE_EXEC_STOP_POST];
1763 if (s->control_command) {
1764 s->control_command_id = SERVICE_EXEC_STOP_POST;
1765
1766 r = service_spawn(s,
1767 s->control_command,
1768 s->timeout_stop_usec,
1769 EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_APPLY_TTY_STDIN|EXEC_IS_CONTROL|EXEC_SETENV_RESULT,
1770 &s->control_pid);
1771 if (r < 0)
1772 goto fail;
1773
1774 service_set_state(s, SERVICE_STOP_POST);
1775 } else
1776 service_enter_signal(s, SERVICE_FINAL_SIGTERM, SERVICE_SUCCESS);
1777
1778 return;
1779
1780 fail:
1781 log_unit_warning_errno(UNIT(s), r, "Failed to run 'stop-post' task: %m");
1782 service_enter_signal(s, SERVICE_FINAL_SIGTERM, SERVICE_FAILURE_RESOURCES);
1783 }
1784
1785 static int state_to_kill_operation(ServiceState state) {
1786 switch (state) {
1787
1788 case SERVICE_STOP_WATCHDOG:
1789 return KILL_WATCHDOG;
1790
1791 case SERVICE_STOP_SIGTERM:
1792 case SERVICE_FINAL_SIGTERM:
1793 return KILL_TERMINATE;
1794
1795 case SERVICE_STOP_SIGKILL:
1796 case SERVICE_FINAL_SIGKILL:
1797 return KILL_KILL;
1798
1799 default:
1800 return _KILL_OPERATION_INVALID;
1801 }
1802 }
1803
1804 static void service_enter_signal(Service *s, ServiceState state, ServiceResult f) {
1805 int r;
1806
1807 assert(s);
1808
1809 if (s->result == SERVICE_SUCCESS)
1810 s->result = f;
1811
1812 /* Before sending any signal, make sure we track all members of this cgroup */
1813 (void) unit_watch_all_pids(UNIT(s));
1814
1815 /* Also, enqueue a job that we recheck all our PIDs a bit later, given that it's likely some processes have
1816 * died now */
1817 (void) unit_enqueue_rewatch_pids(UNIT(s));
1818
1819 r = unit_kill_context(
1820 UNIT(s),
1821 &s->kill_context,
1822 state_to_kill_operation(state),
1823 s->main_pid,
1824 s->control_pid,
1825 s->main_pid_alien);
1826 if (r < 0)
1827 goto fail;
1828
1829 if (r > 0) {
1830 r = service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), s->timeout_stop_usec));
1831 if (r < 0)
1832 goto fail;
1833
1834 service_set_state(s, state);
1835 } else if (IN_SET(state, SERVICE_STOP_WATCHDOG, SERVICE_STOP_SIGTERM) && s->kill_context.send_sigkill)
1836 service_enter_signal(s, SERVICE_STOP_SIGKILL, SERVICE_SUCCESS);
1837 else if (IN_SET(state, SERVICE_STOP_WATCHDOG, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL))
1838 service_enter_stop_post(s, SERVICE_SUCCESS);
1839 else if (state == SERVICE_FINAL_SIGTERM && s->kill_context.send_sigkill)
1840 service_enter_signal(s, SERVICE_FINAL_SIGKILL, SERVICE_SUCCESS);
1841 else
1842 service_enter_dead(s, SERVICE_SUCCESS, true);
1843
1844 return;
1845
1846 fail:
1847 log_unit_warning_errno(UNIT(s), r, "Failed to kill processes: %m");
1848
1849 if (IN_SET(state, SERVICE_STOP_WATCHDOG, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL))
1850 service_enter_stop_post(s, SERVICE_FAILURE_RESOURCES);
1851 else
1852 service_enter_dead(s, SERVICE_FAILURE_RESOURCES, true);
1853 }
1854
1855 static void service_enter_stop_by_notify(Service *s) {
1856 assert(s);
1857
1858 (void) unit_enqueue_rewatch_pids(UNIT(s));
1859
1860 service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), s->timeout_stop_usec));
1861
1862 /* The service told us it's stopping, so it's as if we SIGTERM'd it. */
1863 service_set_state(s, SERVICE_STOP_SIGTERM);
1864 }
1865
1866 static void service_enter_stop(Service *s, ServiceResult f) {
1867 int r;
1868
1869 assert(s);
1870
1871 if (s->result == SERVICE_SUCCESS)
1872 s->result = f;
1873
1874 service_unwatch_control_pid(s);
1875 (void) unit_enqueue_rewatch_pids(UNIT(s));
1876
1877 s->control_command = s->exec_command[SERVICE_EXEC_STOP];
1878 if (s->control_command) {
1879 s->control_command_id = SERVICE_EXEC_STOP;
1880
1881 r = service_spawn(s,
1882 s->control_command,
1883 s->timeout_stop_usec,
1884 EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_IS_CONTROL|EXEC_SETENV_RESULT,
1885 &s->control_pid);
1886 if (r < 0)
1887 goto fail;
1888
1889 service_set_state(s, SERVICE_STOP);
1890 } else
1891 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_SUCCESS);
1892
1893 return;
1894
1895 fail:
1896 log_unit_warning_errno(UNIT(s), r, "Failed to run 'stop' task: %m");
1897 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_RESOURCES);
1898 }
1899
1900 static bool service_good(Service *s) {
1901 int main_pid_ok;
1902 assert(s);
1903
1904 if (s->type == SERVICE_DBUS && !s->bus_name_good)
1905 return false;
1906
1907 main_pid_ok = main_pid_good(s);
1908 if (main_pid_ok > 0) /* It's alive */
1909 return true;
1910 if (main_pid_ok == 0) /* It's dead */
1911 return false;
1912
1913 /* OK, we don't know anything about the main PID, maybe
1914 * because there is none. Let's check the control group
1915 * instead. */
1916
1917 return cgroup_good(s) != 0;
1918 }
1919
1920 static void service_enter_running(Service *s, ServiceResult f) {
1921 assert(s);
1922
1923 if (s->result == SERVICE_SUCCESS)
1924 s->result = f;
1925
1926 service_unwatch_control_pid(s);
1927
1928 if (s->result != SERVICE_SUCCESS)
1929 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
1930 else if (service_good(s)) {
1931
1932 /* If there are any queued up sd_notify() notifications, process them now */
1933 if (s->notify_state == NOTIFY_RELOADING)
1934 service_enter_reload_by_notify(s);
1935 else if (s->notify_state == NOTIFY_STOPPING)
1936 service_enter_stop_by_notify(s);
1937 else {
1938 service_set_state(s, SERVICE_RUNNING);
1939 service_arm_timer(s, usec_add(UNIT(s)->active_enter_timestamp.monotonic, s->runtime_max_usec));
1940 }
1941
1942 } else if (s->remain_after_exit)
1943 service_set_state(s, SERVICE_EXITED);
1944 else
1945 service_enter_stop(s, SERVICE_SUCCESS);
1946 }
1947
1948 static void service_enter_start_post(Service *s) {
1949 int r;
1950 assert(s);
1951
1952 service_unwatch_control_pid(s);
1953 service_reset_watchdog(s);
1954
1955 s->control_command = s->exec_command[SERVICE_EXEC_START_POST];
1956 if (s->control_command) {
1957 s->control_command_id = SERVICE_EXEC_START_POST;
1958
1959 r = service_spawn(s,
1960 s->control_command,
1961 s->timeout_start_usec,
1962 EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_IS_CONTROL,
1963 &s->control_pid);
1964 if (r < 0)
1965 goto fail;
1966
1967 service_set_state(s, SERVICE_START_POST);
1968 } else
1969 service_enter_running(s, SERVICE_SUCCESS);
1970
1971 return;
1972
1973 fail:
1974 log_unit_warning_errno(UNIT(s), r, "Failed to run 'start-post' task: %m");
1975 service_enter_stop(s, SERVICE_FAILURE_RESOURCES);
1976 }
1977
1978 static void service_kill_control_process(Service *s) {
1979 int r;
1980
1981 assert(s);
1982
1983 if (s->control_pid <= 0)
1984 return;
1985
1986 r = kill_and_sigcont(s->control_pid, SIGKILL);
1987 if (r < 0) {
1988 _cleanup_free_ char *comm = NULL;
1989
1990 (void) get_process_comm(s->control_pid, &comm);
1991
1992 log_unit_debug_errno(UNIT(s), r, "Failed to kill control process " PID_FMT " (%s), ignoring: %m",
1993 s->control_pid, strna(comm));
1994 }
1995 }
1996
1997 static void service_enter_start(Service *s) {
1998 ExecCommand *c;
1999 usec_t timeout;
2000 pid_t pid;
2001 int r;
2002
2003 assert(s);
2004
2005 service_unwatch_control_pid(s);
2006 service_unwatch_main_pid(s);
2007
2008 unit_warn_leftover_processes(UNIT(s));
2009
2010 if (s->type == SERVICE_FORKING) {
2011 s->control_command_id = SERVICE_EXEC_START;
2012 c = s->control_command = s->exec_command[SERVICE_EXEC_START];
2013
2014 s->main_command = NULL;
2015 } else {
2016 s->control_command_id = _SERVICE_EXEC_COMMAND_INVALID;
2017 s->control_command = NULL;
2018
2019 c = s->main_command = s->exec_command[SERVICE_EXEC_START];
2020 }
2021
2022 if (!c) {
2023 if (s->type != SERVICE_ONESHOT) {
2024 /* There's no command line configured for the main command? Hmm, that is strange. This can only
2025 * happen if the configuration changes at runtime. In this case, let's enter a failure
2026 * state. */
2027 log_unit_error(UNIT(s), "There's no 'start' task anymore we could start.");
2028 r = -ENXIO;
2029 goto fail;
2030 }
2031
2032 /* We force a fake state transition here. Otherwise, the unit would go directly from
2033 * SERVICE_DEAD to SERVICE_DEAD without SERVICE_ACTIVATING or SERVICE_ACTIVE
2034 * inbetween. This way we can later trigger actions that depend on the state
2035 * transition, including SuccessAction=. */
2036 service_set_state(s, SERVICE_START);
2037
2038 service_enter_start_post(s);
2039 return;
2040 }
2041
2042 if (IN_SET(s->type, SERVICE_SIMPLE, SERVICE_IDLE))
2043 /* For simple + idle this is the main process. We don't apply any timeout here, but
2044 * service_enter_running() will later apply the .runtime_max_usec timeout. */
2045 timeout = USEC_INFINITY;
2046 else
2047 timeout = s->timeout_start_usec;
2048
2049 r = service_spawn(s,
2050 c,
2051 timeout,
2052 EXEC_PASS_FDS|EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_APPLY_TTY_STDIN|EXEC_SET_WATCHDOG,
2053 &pid);
2054 if (r < 0)
2055 goto fail;
2056
2057 if (IN_SET(s->type, SERVICE_SIMPLE, SERVICE_IDLE)) {
2058 /* For simple services we immediately start
2059 * the START_POST binaries. */
2060
2061 service_set_main_pid(s, pid);
2062 service_enter_start_post(s);
2063
2064 } else if (s->type == SERVICE_FORKING) {
2065
2066 /* For forking services we wait until the start
2067 * process exited. */
2068
2069 s->control_pid = pid;
2070 service_set_state(s, SERVICE_START);
2071
2072 } else if (IN_SET(s->type, SERVICE_ONESHOT, SERVICE_DBUS, SERVICE_NOTIFY, SERVICE_EXEC)) {
2073
2074 /* For oneshot services we wait until the start process exited, too, but it is our main process. */
2075
2076 /* For D-Bus services we know the main pid right away, but wait for the bus name to appear on the
2077 * bus. 'notify' and 'exec' services are similar. */
2078
2079 service_set_main_pid(s, pid);
2080 service_set_state(s, SERVICE_START);
2081 } else
2082 assert_not_reached("Unknown service type");
2083
2084 return;
2085
2086 fail:
2087 log_unit_warning_errno(UNIT(s), r, "Failed to run 'start' task: %m");
2088 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_RESOURCES);
2089 }
2090
2091 static void service_enter_start_pre(Service *s) {
2092 int r;
2093
2094 assert(s);
2095
2096 service_unwatch_control_pid(s);
2097
2098 s->control_command = s->exec_command[SERVICE_EXEC_START_PRE];
2099 if (s->control_command) {
2100
2101 unit_warn_leftover_processes(UNIT(s));
2102
2103 s->control_command_id = SERVICE_EXEC_START_PRE;
2104
2105 r = service_spawn(s,
2106 s->control_command,
2107 s->timeout_start_usec,
2108 EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_IS_CONTROL|EXEC_APPLY_TTY_STDIN,
2109 &s->control_pid);
2110 if (r < 0)
2111 goto fail;
2112
2113 service_set_state(s, SERVICE_START_PRE);
2114 } else
2115 service_enter_start(s);
2116
2117 return;
2118
2119 fail:
2120 log_unit_warning_errno(UNIT(s), r, "Failed to run 'start-pre' task: %m");
2121 service_enter_dead(s, SERVICE_FAILURE_RESOURCES, true);
2122 }
2123
2124 static void service_enter_restart(Service *s) {
2125 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2126 int r;
2127
2128 assert(s);
2129
2130 if (UNIT(s)->job && UNIT(s)->job->type == JOB_STOP) {
2131 /* Don't restart things if we are going down anyway */
2132 log_unit_info(UNIT(s), "Stop job pending for unit, delaying automatic restart.");
2133
2134 r = service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), s->restart_usec));
2135 if (r < 0)
2136 goto fail;
2137
2138 return;
2139 }
2140
2141 /* Any units that are bound to this service must also be
2142 * restarted. We use JOB_RESTART (instead of the more obvious
2143 * JOB_START) here so that those dependency jobs will be added
2144 * as well. */
2145 r = manager_add_job(UNIT(s)->manager, JOB_RESTART, UNIT(s), JOB_FAIL, &error, NULL);
2146 if (r < 0)
2147 goto fail;
2148
2149 /* Count the jobs we enqueue for restarting. This counter is maintained as long as the unit isn't fully
2150 * stopped, i.e. as long as it remains up or remains in auto-start states. The use can reset the counter
2151 * explicitly however via the usual "systemctl reset-failure" logic. */
2152 s->n_restarts ++;
2153 s->flush_n_restarts = false;
2154
2155 log_struct(LOG_INFO,
2156 "MESSAGE_ID=" SD_MESSAGE_UNIT_RESTART_SCHEDULED_STR,
2157 LOG_UNIT_ID(UNIT(s)),
2158 LOG_UNIT_INVOCATION_ID(UNIT(s)),
2159 LOG_UNIT_MESSAGE(UNIT(s), "Scheduled restart job, restart counter is at %u.", s->n_restarts),
2160 "N_RESTARTS=%u", s->n_restarts);
2161
2162 /* Notify clients about changed restart counter */
2163 unit_add_to_dbus_queue(UNIT(s));
2164
2165 /* Note that we stay in the SERVICE_AUTO_RESTART state here,
2166 * it will be canceled as part of the service_stop() call that
2167 * is executed as part of JOB_RESTART. */
2168
2169 return;
2170
2171 fail:
2172 log_unit_warning(UNIT(s), "Failed to schedule restart job: %s", bus_error_message(&error, -r));
2173 service_enter_dead(s, SERVICE_FAILURE_RESOURCES, false);
2174 }
2175
2176 static void service_enter_reload_by_notify(Service *s) {
2177 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2178 int r;
2179
2180 assert(s);
2181
2182 service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), s->timeout_start_usec));
2183 service_set_state(s, SERVICE_RELOAD);
2184
2185 /* service_enter_reload_by_notify is never called during a reload, thus no loops are possible. */
2186 r = manager_propagate_reload(UNIT(s)->manager, UNIT(s), JOB_FAIL, &error);
2187 if (r < 0)
2188 log_unit_warning(UNIT(s), "Failed to schedule propagation of reload: %s", bus_error_message(&error, -r));
2189 }
2190
2191 static void service_enter_reload(Service *s) {
2192 int r;
2193
2194 assert(s);
2195
2196 service_unwatch_control_pid(s);
2197 s->reload_result = SERVICE_SUCCESS;
2198
2199 s->control_command = s->exec_command[SERVICE_EXEC_RELOAD];
2200 if (s->control_command) {
2201 s->control_command_id = SERVICE_EXEC_RELOAD;
2202
2203 r = service_spawn(s,
2204 s->control_command,
2205 s->timeout_start_usec,
2206 EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_IS_CONTROL,
2207 &s->control_pid);
2208 if (r < 0)
2209 goto fail;
2210
2211 service_set_state(s, SERVICE_RELOAD);
2212 } else
2213 service_enter_running(s, SERVICE_SUCCESS);
2214
2215 return;
2216
2217 fail:
2218 log_unit_warning_errno(UNIT(s), r, "Failed to run 'reload' task: %m");
2219 s->reload_result = SERVICE_FAILURE_RESOURCES;
2220 service_enter_running(s, SERVICE_SUCCESS);
2221 }
2222
2223 static void service_run_next_control(Service *s) {
2224 usec_t timeout;
2225 int r;
2226
2227 assert(s);
2228 assert(s->control_command);
2229 assert(s->control_command->command_next);
2230
2231 assert(s->control_command_id != SERVICE_EXEC_START);
2232
2233 s->control_command = s->control_command->command_next;
2234 service_unwatch_control_pid(s);
2235
2236 if (IN_SET(s->state, SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST, SERVICE_RUNNING, SERVICE_RELOAD))
2237 timeout = s->timeout_start_usec;
2238 else
2239 timeout = s->timeout_stop_usec;
2240
2241 r = service_spawn(s,
2242 s->control_command,
2243 timeout,
2244 EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_IS_CONTROL|
2245 (IN_SET(s->control_command_id, SERVICE_EXEC_START_PRE, SERVICE_EXEC_STOP_POST) ? EXEC_APPLY_TTY_STDIN : 0)|
2246 (IN_SET(s->control_command_id, SERVICE_EXEC_STOP, SERVICE_EXEC_STOP_POST) ? EXEC_SETENV_RESULT : 0),
2247 &s->control_pid);
2248 if (r < 0)
2249 goto fail;
2250
2251 return;
2252
2253 fail:
2254 log_unit_warning_errno(UNIT(s), r, "Failed to run next control task: %m");
2255
2256 if (IN_SET(s->state, SERVICE_START_PRE, SERVICE_START_POST, SERVICE_STOP))
2257 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_RESOURCES);
2258 else if (s->state == SERVICE_STOP_POST)
2259 service_enter_dead(s, SERVICE_FAILURE_RESOURCES, true);
2260 else if (s->state == SERVICE_RELOAD) {
2261 s->reload_result = SERVICE_FAILURE_RESOURCES;
2262 service_enter_running(s, SERVICE_SUCCESS);
2263 } else
2264 service_enter_stop(s, SERVICE_FAILURE_RESOURCES);
2265 }
2266
2267 static void service_run_next_main(Service *s) {
2268 pid_t pid;
2269 int r;
2270
2271 assert(s);
2272 assert(s->main_command);
2273 assert(s->main_command->command_next);
2274 assert(s->type == SERVICE_ONESHOT);
2275
2276 s->main_command = s->main_command->command_next;
2277 service_unwatch_main_pid(s);
2278
2279 r = service_spawn(s,
2280 s->main_command,
2281 s->timeout_start_usec,
2282 EXEC_PASS_FDS|EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_APPLY_TTY_STDIN|EXEC_SET_WATCHDOG,
2283 &pid);
2284 if (r < 0)
2285 goto fail;
2286
2287 service_set_main_pid(s, pid);
2288
2289 return;
2290
2291 fail:
2292 log_unit_warning_errno(UNIT(s), r, "Failed to run next main task: %m");
2293 service_enter_stop(s, SERVICE_FAILURE_RESOURCES);
2294 }
2295
2296 static int service_start(Unit *u) {
2297 Service *s = SERVICE(u);
2298 int r;
2299
2300 assert(s);
2301
2302 /* We cannot fulfill this request right now, try again later
2303 * please! */
2304 if (IN_SET(s->state,
2305 SERVICE_STOP, SERVICE_STOP_WATCHDOG, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
2306 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL))
2307 return -EAGAIN;
2308
2309 /* Already on it! */
2310 if (IN_SET(s->state, SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST))
2311 return 0;
2312
2313 /* A service that will be restarted must be stopped first to
2314 * trigger BindsTo and/or OnFailure dependencies. If a user
2315 * does not want to wait for the holdoff time to elapse, the
2316 * service should be manually restarted, not started. We
2317 * simply return EAGAIN here, so that any start jobs stay
2318 * queued, and assume that the auto restart timer will
2319 * eventually trigger the restart. */
2320 if (s->state == SERVICE_AUTO_RESTART)
2321 return -EAGAIN;
2322
2323 assert(IN_SET(s->state, SERVICE_DEAD, SERVICE_FAILED));
2324
2325 /* Make sure we don't enter a busy loop of some kind. */
2326 r = unit_start_limit_test(u);
2327 if (r < 0) {
2328 service_enter_dead(s, SERVICE_FAILURE_START_LIMIT_HIT, false);
2329 return r;
2330 }
2331
2332 r = unit_acquire_invocation_id(u);
2333 if (r < 0)
2334 return r;
2335
2336 s->result = SERVICE_SUCCESS;
2337 s->reload_result = SERVICE_SUCCESS;
2338 s->main_pid_known = false;
2339 s->main_pid_alien = false;
2340 s->forbid_restart = false;
2341
2342 s->status_text = mfree(s->status_text);
2343 s->status_errno = 0;
2344
2345 s->notify_state = NOTIFY_UNKNOWN;
2346
2347 s->watchdog_override_enable = false;
2348 s->watchdog_override_usec = 0;
2349
2350 exec_command_reset_status_list_array(s->exec_command, _SERVICE_EXEC_COMMAND_MAX);
2351 exec_status_reset(&s->main_exec_status);
2352
2353 /* This is not an automatic restart? Flush the restart counter then */
2354 if (s->flush_n_restarts) {
2355 s->n_restarts = 0;
2356 s->flush_n_restarts = false;
2357 }
2358
2359 u->reset_accounting = true;
2360
2361 service_enter_start_pre(s);
2362 return 1;
2363 }
2364
2365 static int service_stop(Unit *u) {
2366 Service *s = SERVICE(u);
2367
2368 assert(s);
2369
2370 /* Don't create restart jobs from manual stops. */
2371 s->forbid_restart = true;
2372
2373 /* Already on it */
2374 if (IN_SET(s->state,
2375 SERVICE_STOP, SERVICE_STOP_WATCHDOG, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
2376 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL))
2377 return 0;
2378
2379 /* A restart will be scheduled or is in progress. */
2380 if (s->state == SERVICE_AUTO_RESTART) {
2381 service_set_state(s, SERVICE_DEAD);
2382 return 0;
2383 }
2384
2385 /* If there's already something running we go directly into
2386 * kill mode. */
2387 if (IN_SET(s->state, SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST, SERVICE_RELOAD)) {
2388 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_SUCCESS);
2389 return 0;
2390 }
2391
2392 assert(IN_SET(s->state, SERVICE_RUNNING, SERVICE_EXITED));
2393
2394 service_enter_stop(s, SERVICE_SUCCESS);
2395 return 1;
2396 }
2397
2398 static int service_reload(Unit *u) {
2399 Service *s = SERVICE(u);
2400
2401 assert(s);
2402
2403 assert(IN_SET(s->state, SERVICE_RUNNING, SERVICE_EXITED));
2404
2405 service_enter_reload(s);
2406 return 1;
2407 }
2408
2409 _pure_ static bool service_can_reload(Unit *u) {
2410 Service *s = SERVICE(u);
2411
2412 assert(s);
2413
2414 return !!s->exec_command[SERVICE_EXEC_RELOAD];
2415 }
2416
2417 static unsigned service_exec_command_index(Unit *u, ServiceExecCommand id, ExecCommand *current) {
2418 Service *s = SERVICE(u);
2419 unsigned idx = 0;
2420 ExecCommand *first, *c;
2421
2422 assert(s);
2423
2424 first = s->exec_command[id];
2425
2426 /* Figure out where we are in the list by walking back to the beginning */
2427 for (c = current; c != first; c = c->command_prev)
2428 idx++;
2429
2430 return idx;
2431 }
2432
2433 static int service_serialize_exec_command(Unit *u, FILE *f, ExecCommand *command) {
2434 Service *s = SERVICE(u);
2435 ServiceExecCommand id;
2436 unsigned idx;
2437 const char *type;
2438 char **arg;
2439 _cleanup_free_ char *args = NULL, *p = NULL;
2440 size_t allocated = 0, length = 0;
2441
2442 assert(s);
2443 assert(f);
2444
2445 if (!command)
2446 return 0;
2447
2448 if (command == s->control_command) {
2449 type = "control";
2450 id = s->control_command_id;
2451 } else {
2452 type = "main";
2453 id = SERVICE_EXEC_START;
2454 }
2455
2456 idx = service_exec_command_index(u, id, command);
2457
2458 STRV_FOREACH(arg, command->argv) {
2459 size_t n;
2460 _cleanup_free_ char *e = NULL;
2461
2462 e = xescape(*arg, WHITESPACE);
2463 if (!e)
2464 return -ENOMEM;
2465
2466 n = strlen(e);
2467 if (!GREEDY_REALLOC(args, allocated, length + 1 + n + 1))
2468 return -ENOMEM;
2469
2470 if (length > 0)
2471 args[length++] = ' ';
2472
2473 memcpy(args + length, e, n);
2474 length += n;
2475 }
2476
2477 if (!GREEDY_REALLOC(args, allocated, length + 1))
2478 return -ENOMEM;
2479 args[length++] = 0;
2480
2481 p = xescape(command->path, WHITESPACE);
2482 if (!p)
2483 return -ENOMEM;
2484
2485 fprintf(f, "%s-command=%s %u %s %s\n", type, service_exec_command_to_string(id), idx, p, args);
2486
2487 return 0;
2488 }
2489
2490 static int service_serialize(Unit *u, FILE *f, FDSet *fds) {
2491 Service *s = SERVICE(u);
2492 ServiceFDStore *fs;
2493 int r;
2494
2495 assert(u);
2496 assert(f);
2497 assert(fds);
2498
2499 unit_serialize_item(u, f, "state", service_state_to_string(s->state));
2500 unit_serialize_item(u, f, "result", service_result_to_string(s->result));
2501 unit_serialize_item(u, f, "reload-result", service_result_to_string(s->reload_result));
2502
2503 if (s->control_pid > 0)
2504 unit_serialize_item_format(u, f, "control-pid", PID_FMT, s->control_pid);
2505
2506 if (s->main_pid_known && s->main_pid > 0)
2507 unit_serialize_item_format(u, f, "main-pid", PID_FMT, s->main_pid);
2508
2509 unit_serialize_item(u, f, "main-pid-known", yes_no(s->main_pid_known));
2510 unit_serialize_item(u, f, "bus-name-good", yes_no(s->bus_name_good));
2511 unit_serialize_item(u, f, "bus-name-owner", s->bus_name_owner);
2512
2513 unit_serialize_item_format(u, f, "n-restarts", "%u", s->n_restarts);
2514 unit_serialize_item(u, f, "flush-n-restarts", yes_no(s->flush_n_restarts));
2515
2516 r = unit_serialize_item_escaped(u, f, "status-text", s->status_text);
2517 if (r < 0)
2518 return r;
2519
2520 service_serialize_exec_command(u, f, s->control_command);
2521 service_serialize_exec_command(u, f, s->main_command);
2522
2523 r = unit_serialize_item_fd(u, f, fds, "stdin-fd", s->stdin_fd);
2524 if (r < 0)
2525 return r;
2526 r = unit_serialize_item_fd(u, f, fds, "stdout-fd", s->stdout_fd);
2527 if (r < 0)
2528 return r;
2529 r = unit_serialize_item_fd(u, f, fds, "stderr-fd", s->stderr_fd);
2530 if (r < 0)
2531 return r;
2532
2533 if (s->exec_fd_event_source) {
2534 r = unit_serialize_item_fd(u, f, fds, "exec-fd", sd_event_source_get_io_fd(s->exec_fd_event_source));
2535 if (r < 0)
2536 return r;
2537 unit_serialize_item(u, f, "exec-fd-hot", yes_no(s->exec_fd_hot));
2538 }
2539
2540 if (UNIT_ISSET(s->accept_socket)) {
2541 r = unit_serialize_item(u, f, "accept-socket", UNIT_DEREF(s->accept_socket)->id);
2542 if (r < 0)
2543 return r;
2544 }
2545
2546 r = unit_serialize_item_fd(u, f, fds, "socket-fd", s->socket_fd);
2547 if (r < 0)
2548 return r;
2549
2550 LIST_FOREACH(fd_store, fs, s->fd_store) {
2551 _cleanup_free_ char *c = NULL;
2552 int copy;
2553
2554 copy = fdset_put_dup(fds, fs->fd);
2555 if (copy < 0)
2556 return copy;
2557
2558 c = cescape(fs->fdname);
2559
2560 unit_serialize_item_format(u, f, "fd-store-fd", "%i %s", copy, strempty(c));
2561 }
2562
2563 if (s->main_exec_status.pid > 0) {
2564 unit_serialize_item_format(u, f, "main-exec-status-pid", PID_FMT, s->main_exec_status.pid);
2565 dual_timestamp_serialize(f, "main-exec-status-start", &s->main_exec_status.start_timestamp);
2566 dual_timestamp_serialize(f, "main-exec-status-exit", &s->main_exec_status.exit_timestamp);
2567
2568 if (dual_timestamp_is_set(&s->main_exec_status.exit_timestamp)) {
2569 unit_serialize_item_format(u, f, "main-exec-status-code", "%i", s->main_exec_status.code);
2570 unit_serialize_item_format(u, f, "main-exec-status-status", "%i", s->main_exec_status.status);
2571 }
2572 }
2573
2574 dual_timestamp_serialize(f, "watchdog-timestamp", &s->watchdog_timestamp);
2575
2576 unit_serialize_item(u, f, "forbid-restart", yes_no(s->forbid_restart));
2577
2578 if (s->watchdog_override_enable)
2579 unit_serialize_item_format(u, f, "watchdog-override-usec", USEC_FMT, s->watchdog_override_usec);
2580
2581 return 0;
2582 }
2583
2584 static int service_deserialize_exec_command(Unit *u, const char *key, const char *value) {
2585 Service *s = SERVICE(u);
2586 int r;
2587 unsigned idx = 0, i;
2588 bool control, found = false;
2589 ServiceExecCommand id = _SERVICE_EXEC_COMMAND_INVALID;
2590 ExecCommand *command = NULL;
2591 _cleanup_free_ char *path = NULL;
2592 _cleanup_strv_free_ char **argv = NULL;
2593
2594 enum ExecCommandState {
2595 STATE_EXEC_COMMAND_TYPE,
2596 STATE_EXEC_COMMAND_INDEX,
2597 STATE_EXEC_COMMAND_PATH,
2598 STATE_EXEC_COMMAND_ARGS,
2599 _STATE_EXEC_COMMAND_MAX,
2600 _STATE_EXEC_COMMAND_INVALID = -1,
2601 } state;
2602
2603 assert(s);
2604 assert(key);
2605 assert(value);
2606
2607 control = streq(key, "control-command");
2608
2609 state = STATE_EXEC_COMMAND_TYPE;
2610
2611 for (;;) {
2612 _cleanup_free_ char *arg = NULL;
2613
2614 r = extract_first_word(&value, &arg, NULL, EXTRACT_CUNESCAPE);
2615 if (r == 0)
2616 break;
2617 else if (r < 0)
2618 return r;
2619
2620 switch (state) {
2621 case STATE_EXEC_COMMAND_TYPE:
2622 id = service_exec_command_from_string(arg);
2623 if (id < 0)
2624 return -EINVAL;
2625
2626 state = STATE_EXEC_COMMAND_INDEX;
2627 break;
2628 case STATE_EXEC_COMMAND_INDEX:
2629 r = safe_atou(arg, &idx);
2630 if (r < 0)
2631 return -EINVAL;
2632
2633 state = STATE_EXEC_COMMAND_PATH;
2634 break;
2635 case STATE_EXEC_COMMAND_PATH:
2636 path = TAKE_PTR(arg);
2637 state = STATE_EXEC_COMMAND_ARGS;
2638
2639 if (!path_is_absolute(path))
2640 return -EINVAL;
2641 break;
2642 case STATE_EXEC_COMMAND_ARGS:
2643 r = strv_extend(&argv, arg);
2644 if (r < 0)
2645 return -ENOMEM;
2646 break;
2647 default:
2648 assert_not_reached("Unknown error at deserialization of exec command");
2649 break;
2650 }
2651 }
2652
2653 if (state != STATE_EXEC_COMMAND_ARGS)
2654 return -EINVAL;
2655
2656 /* Let's check whether exec command on given offset matches data that we just deserialized */
2657 for (command = s->exec_command[id], i = 0; command; command = command->command_next, i++) {
2658 if (i != idx)
2659 continue;
2660
2661 found = strv_equal(argv, command->argv) && streq(command->path, path);
2662 break;
2663 }
2664
2665 if (!found) {
2666 /* Command at the index we serialized is different, let's look for command that exactly
2667 * matches but is on different index. If there is no such command we will not resume execution. */
2668 for (command = s->exec_command[id]; command; command = command->command_next)
2669 if (strv_equal(command->argv, argv) && streq(command->path, path))
2670 break;
2671 }
2672
2673 if (command && control)
2674 s->control_command = command;
2675 else if (command)
2676 s->main_command = command;
2677 else
2678 log_unit_warning(u, "Current command vanished from the unit file, execution of the command list won't be resumed.");
2679
2680 return 0;
2681 }
2682
2683 static int service_deserialize_item(Unit *u, const char *key, const char *value, FDSet *fds) {
2684 Service *s = SERVICE(u);
2685 int r;
2686
2687 assert(u);
2688 assert(key);
2689 assert(value);
2690 assert(fds);
2691
2692 if (streq(key, "state")) {
2693 ServiceState state;
2694
2695 state = service_state_from_string(value);
2696 if (state < 0)
2697 log_unit_debug(u, "Failed to parse state value: %s", value);
2698 else
2699 s->deserialized_state = state;
2700 } else if (streq(key, "result")) {
2701 ServiceResult f;
2702
2703 f = service_result_from_string(value);
2704 if (f < 0)
2705 log_unit_debug(u, "Failed to parse result value: %s", value);
2706 else if (f != SERVICE_SUCCESS)
2707 s->result = f;
2708
2709 } else if (streq(key, "reload-result")) {
2710 ServiceResult f;
2711
2712 f = service_result_from_string(value);
2713 if (f < 0)
2714 log_unit_debug(u, "Failed to parse reload result value: %s", value);
2715 else if (f != SERVICE_SUCCESS)
2716 s->reload_result = f;
2717
2718 } else if (streq(key, "control-pid")) {
2719 pid_t pid;
2720
2721 if (parse_pid(value, &pid) < 0)
2722 log_unit_debug(u, "Failed to parse control-pid value: %s", value);
2723 else
2724 s->control_pid = pid;
2725 } else if (streq(key, "main-pid")) {
2726 pid_t pid;
2727
2728 if (parse_pid(value, &pid) < 0)
2729 log_unit_debug(u, "Failed to parse main-pid value: %s", value);
2730 else
2731 (void) service_set_main_pid(s, pid);
2732 } else if (streq(key, "main-pid-known")) {
2733 int b;
2734
2735 b = parse_boolean(value);
2736 if (b < 0)
2737 log_unit_debug(u, "Failed to parse main-pid-known value: %s", value);
2738 else
2739 s->main_pid_known = b;
2740 } else if (streq(key, "bus-name-good")) {
2741 int b;
2742
2743 b = parse_boolean(value);
2744 if (b < 0)
2745 log_unit_debug(u, "Failed to parse bus-name-good value: %s", value);
2746 else
2747 s->bus_name_good = b;
2748 } else if (streq(key, "bus-name-owner")) {
2749 r = free_and_strdup(&s->bus_name_owner, value);
2750 if (r < 0)
2751 log_unit_error_errno(u, r, "Unable to deserialize current bus owner %s: %m", value);
2752 } else if (streq(key, "status-text")) {
2753 char *t;
2754
2755 r = cunescape(value, 0, &t);
2756 if (r < 0)
2757 log_unit_debug_errno(u, r, "Failed to unescape status text: %s", value);
2758 else {
2759 free(s->status_text);
2760 s->status_text = t;
2761 }
2762
2763 } else if (streq(key, "accept-socket")) {
2764 Unit *socket;
2765
2766 r = manager_load_unit(u->manager, value, NULL, NULL, &socket);
2767 if (r < 0)
2768 log_unit_debug_errno(u, r, "Failed to load accept-socket unit: %s", value);
2769 else {
2770 unit_ref_set(&s->accept_socket, u, socket);
2771 SOCKET(socket)->n_connections++;
2772 }
2773
2774 } else if (streq(key, "socket-fd")) {
2775 int fd;
2776
2777 if (safe_atoi(value, &fd) < 0 || fd < 0 || !fdset_contains(fds, fd))
2778 log_unit_debug(u, "Failed to parse socket-fd value: %s", value);
2779 else {
2780 asynchronous_close(s->socket_fd);
2781 s->socket_fd = fdset_remove(fds, fd);
2782 }
2783 } else if (streq(key, "fd-store-fd")) {
2784 const char *fdv;
2785 size_t pf;
2786 int fd;
2787
2788 pf = strcspn(value, WHITESPACE);
2789 fdv = strndupa(value, pf);
2790
2791 if (safe_atoi(fdv, &fd) < 0 || fd < 0 || !fdset_contains(fds, fd))
2792 log_unit_debug(u, "Failed to parse fd-store-fd value: %s", value);
2793 else {
2794 _cleanup_free_ char *t = NULL;
2795 const char *fdn;
2796
2797 fdn = value + pf;
2798 fdn += strspn(fdn, WHITESPACE);
2799 (void) cunescape(fdn, 0, &t);
2800
2801 r = service_add_fd_store(s, fd, t);
2802 if (r < 0)
2803 log_unit_error_errno(u, r, "Failed to add fd to store: %m");
2804 else
2805 fdset_remove(fds, fd);
2806 }
2807
2808 } else if (streq(key, "main-exec-status-pid")) {
2809 pid_t pid;
2810
2811 if (parse_pid(value, &pid) < 0)
2812 log_unit_debug(u, "Failed to parse main-exec-status-pid value: %s", value);
2813 else
2814 s->main_exec_status.pid = pid;
2815 } else if (streq(key, "main-exec-status-code")) {
2816 int i;
2817
2818 if (safe_atoi(value, &i) < 0)
2819 log_unit_debug(u, "Failed to parse main-exec-status-code value: %s", value);
2820 else
2821 s->main_exec_status.code = i;
2822 } else if (streq(key, "main-exec-status-status")) {
2823 int i;
2824
2825 if (safe_atoi(value, &i) < 0)
2826 log_unit_debug(u, "Failed to parse main-exec-status-status value: %s", value);
2827 else
2828 s->main_exec_status.status = i;
2829 } else if (streq(key, "main-exec-status-start"))
2830 dual_timestamp_deserialize(value, &s->main_exec_status.start_timestamp);
2831 else if (streq(key, "main-exec-status-exit"))
2832 dual_timestamp_deserialize(value, &s->main_exec_status.exit_timestamp);
2833 else if (streq(key, "watchdog-timestamp"))
2834 dual_timestamp_deserialize(value, &s->watchdog_timestamp);
2835 else if (streq(key, "forbid-restart")) {
2836 int b;
2837
2838 b = parse_boolean(value);
2839 if (b < 0)
2840 log_unit_debug(u, "Failed to parse forbid-restart value: %s", value);
2841 else
2842 s->forbid_restart = b;
2843 } else if (streq(key, "stdin-fd")) {
2844 int fd;
2845
2846 if (safe_atoi(value, &fd) < 0 || fd < 0 || !fdset_contains(fds, fd))
2847 log_unit_debug(u, "Failed to parse stdin-fd value: %s", value);
2848 else {
2849 asynchronous_close(s->stdin_fd);
2850 s->stdin_fd = fdset_remove(fds, fd);
2851 s->exec_context.stdio_as_fds = true;
2852 }
2853 } else if (streq(key, "stdout-fd")) {
2854 int fd;
2855
2856 if (safe_atoi(value, &fd) < 0 || fd < 0 || !fdset_contains(fds, fd))
2857 log_unit_debug(u, "Failed to parse stdout-fd value: %s", value);
2858 else {
2859 asynchronous_close(s->stdout_fd);
2860 s->stdout_fd = fdset_remove(fds, fd);
2861 s->exec_context.stdio_as_fds = true;
2862 }
2863 } else if (streq(key, "stderr-fd")) {
2864 int fd;
2865
2866 if (safe_atoi(value, &fd) < 0 || fd < 0 || !fdset_contains(fds, fd))
2867 log_unit_debug(u, "Failed to parse stderr-fd value: %s", value);
2868 else {
2869 asynchronous_close(s->stderr_fd);
2870 s->stderr_fd = fdset_remove(fds, fd);
2871 s->exec_context.stdio_as_fds = true;
2872 }
2873 } else if (streq(key, "exec-fd")) {
2874 int fd;
2875
2876 if (safe_atoi(value, &fd) < 0 || fd < 0 || !fdset_contains(fds, fd))
2877 log_unit_debug(u, "Failed to parse exec-fd value: %s", value);
2878 else {
2879 s->exec_fd_event_source = sd_event_source_unref(s->exec_fd_event_source);
2880
2881 fd = fdset_remove(fds, fd);
2882 if (service_allocate_exec_fd_event_source(s, fd, &s->exec_fd_event_source) < 0)
2883 safe_close(fd);
2884 }
2885 } else if (streq(key, "watchdog-override-usec")) {
2886 usec_t watchdog_override_usec;
2887 if (timestamp_deserialize(value, &watchdog_override_usec) < 0)
2888 log_unit_debug(u, "Failed to parse watchdog_override_usec value: %s", value);
2889 else {
2890 s->watchdog_override_enable = true;
2891 s->watchdog_override_usec = watchdog_override_usec;
2892 }
2893 } else if (STR_IN_SET(key, "main-command", "control-command")) {
2894 r = service_deserialize_exec_command(u, key, value);
2895 if (r < 0)
2896 log_unit_debug_errno(u, r, "Failed to parse serialized command \"%s\": %m", value);
2897
2898 } else if (streq(key, "n-restarts")) {
2899 r = safe_atou(value, &s->n_restarts);
2900 if (r < 0)
2901 log_unit_debug_errno(u, r, "Failed to parse serialized restart counter '%s': %m", value);
2902
2903 } else if (streq(key, "flush-n-restarts")) {
2904 r = parse_boolean(value);
2905 if (r < 0)
2906 log_unit_debug_errno(u, r, "Failed to parse serialized flush restart counter setting '%s': %m", value);
2907 else
2908 s->flush_n_restarts = r;
2909 } else
2910 log_unit_debug(u, "Unknown serialization key: %s", key);
2911
2912 return 0;
2913 }
2914
2915 _pure_ static UnitActiveState service_active_state(Unit *u) {
2916 const UnitActiveState *table;
2917
2918 assert(u);
2919
2920 table = SERVICE(u)->type == SERVICE_IDLE ? state_translation_table_idle : state_translation_table;
2921
2922 return table[SERVICE(u)->state];
2923 }
2924
2925 static const char *service_sub_state_to_string(Unit *u) {
2926 assert(u);
2927
2928 return service_state_to_string(SERVICE(u)->state);
2929 }
2930
2931 static bool service_may_gc(Unit *u) {
2932 Service *s = SERVICE(u);
2933
2934 assert(s);
2935
2936 /* Never clean up services that still have a process around, even if the service is formally dead. Note that
2937 * unit_may_gc() already checked our cgroup for us, we just check our two additional PIDs, too, in case they
2938 * have moved outside of the cgroup. */
2939
2940 if (main_pid_good(s) > 0 ||
2941 control_pid_good(s) > 0)
2942 return false;
2943
2944 return true;
2945 }
2946
2947 static int service_retry_pid_file(Service *s) {
2948 int r;
2949
2950 assert(s->pid_file);
2951 assert(IN_SET(s->state, SERVICE_START, SERVICE_START_POST));
2952
2953 r = service_load_pid_file(s, false);
2954 if (r < 0)
2955 return r;
2956
2957 service_unwatch_pid_file(s);
2958
2959 service_enter_running(s, SERVICE_SUCCESS);
2960 return 0;
2961 }
2962
2963 static int service_watch_pid_file(Service *s) {
2964 int r;
2965
2966 log_unit_debug(UNIT(s), "Setting watch for PID file %s", s->pid_file_pathspec->path);
2967
2968 r = path_spec_watch(s->pid_file_pathspec, service_dispatch_inotify_io);
2969 if (r < 0)
2970 goto fail;
2971
2972 /* the pidfile might have appeared just before we set the watch */
2973 log_unit_debug(UNIT(s), "Trying to read PID file %s in case it changed", s->pid_file_pathspec->path);
2974 service_retry_pid_file(s);
2975
2976 return 0;
2977 fail:
2978 log_unit_error_errno(UNIT(s), r, "Failed to set a watch for PID file %s: %m", s->pid_file_pathspec->path);
2979 service_unwatch_pid_file(s);
2980 return r;
2981 }
2982
2983 static int service_demand_pid_file(Service *s) {
2984 PathSpec *ps;
2985
2986 assert(s->pid_file);
2987 assert(!s->pid_file_pathspec);
2988
2989 ps = new0(PathSpec, 1);
2990 if (!ps)
2991 return -ENOMEM;
2992
2993 ps->unit = UNIT(s);
2994 ps->path = strdup(s->pid_file);
2995 if (!ps->path) {
2996 free(ps);
2997 return -ENOMEM;
2998 }
2999
3000 path_simplify(ps->path, false);
3001
3002 /* PATH_CHANGED would not be enough. There are daemons (sendmail) that
3003 * keep their PID file open all the time. */
3004 ps->type = PATH_MODIFIED;
3005 ps->inotify_fd = -1;
3006
3007 s->pid_file_pathspec = ps;
3008
3009 return service_watch_pid_file(s);
3010 }
3011
3012 static int service_dispatch_inotify_io(sd_event_source *source, int fd, uint32_t events, void *userdata) {
3013 PathSpec *p = userdata;
3014 Service *s;
3015
3016 assert(p);
3017
3018 s = SERVICE(p->unit);
3019
3020 assert(s);
3021 assert(fd >= 0);
3022 assert(IN_SET(s->state, SERVICE_START, SERVICE_START_POST));
3023 assert(s->pid_file_pathspec);
3024 assert(path_spec_owns_inotify_fd(s->pid_file_pathspec, fd));
3025
3026 log_unit_debug(UNIT(s), "inotify event");
3027
3028 if (path_spec_fd_event(p, events) < 0)
3029 goto fail;
3030
3031 if (service_retry_pid_file(s) == 0)
3032 return 0;
3033
3034 if (service_watch_pid_file(s) < 0)
3035 goto fail;
3036
3037 return 0;
3038
3039 fail:
3040 service_unwatch_pid_file(s);
3041 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_RESOURCES);
3042 return 0;
3043 }
3044
3045 static int service_dispatch_exec_io(sd_event_source *source, int fd, uint32_t events, void *userdata) {
3046 Service *s = SERVICE(userdata);
3047
3048 assert(s);
3049
3050 log_unit_debug(UNIT(s), "got exec-fd event");
3051
3052 /* If Type=exec is set, we'll consider a service started successfully the instant we invoked execve()
3053 * successfully for it. We implement this through a pipe() towards the child, which the kernel automatically
3054 * closes for us due to O_CLOEXEC on execve() in the child, which then triggers EOF on the pipe in the
3055 * parent. We need to be careful however, as there are other reasons that we might cause the child's side of
3056 * the pipe to be closed (for example, a simple exit()). To deal with that we'll ignore EOFs on the pipe unless
3057 * the child signalled us first that it is about to call the execve(). It does so by sending us a simple
3058 * non-zero byte via the pipe. We also provide the child with a way to inform us in case execve() failed: if it
3059 * sends a zero byte we'll ignore POLLHUP on the fd again. */
3060
3061 for (;;) {
3062 uint8_t x;
3063 ssize_t n;
3064
3065 n = read(fd, &x, sizeof(x));
3066 if (n < 0) {
3067 if (errno == EAGAIN) /* O_NONBLOCK in effect → everything queued has now been processed. */
3068 return 0;
3069
3070 return log_unit_error_errno(UNIT(s), errno, "Failed to read from exec_fd: %m");
3071 }
3072 if (n == 0) { /* EOF → the event we are waiting for */
3073
3074 s->exec_fd_event_source = sd_event_source_unref(s->exec_fd_event_source);
3075
3076 if (s->exec_fd_hot) { /* Did the child tell us to expect EOF now? */
3077 log_unit_debug(UNIT(s), "Got EOF on exec-fd");
3078
3079 s->exec_fd_hot = false;
3080
3081 /* Nice! This is what we have been waiting for. Transition to next state. */
3082 if (s->type == SERVICE_EXEC && s->state == SERVICE_START)
3083 service_enter_start_post(s);
3084 } else
3085 log_unit_debug(UNIT(s), "Got EOF on exec-fd while it was disabled, ignoring.");
3086
3087 return 0;
3088 }
3089
3090 /* A byte was read → this turns on/off the exec fd logic */
3091 assert(n == sizeof(x));
3092 s->exec_fd_hot = x;
3093 }
3094
3095 return 0;
3096 }
3097
3098 static void service_notify_cgroup_empty_event(Unit *u) {
3099 Service *s = SERVICE(u);
3100
3101 assert(u);
3102
3103 log_unit_debug(u, "cgroup is empty");
3104
3105 switch (s->state) {
3106
3107 /* Waiting for SIGCHLD is usually more interesting,
3108 * because it includes return codes/signals. Which is
3109 * why we ignore the cgroup events for most cases,
3110 * except when we don't know pid which to expect the
3111 * SIGCHLD for. */
3112
3113 case SERVICE_START:
3114 if (s->type == SERVICE_NOTIFY &&
3115 main_pid_good(s) == 0 &&
3116 control_pid_good(s) == 0) {
3117 /* No chance of getting a ready notification anymore */
3118 service_enter_stop_post(s, SERVICE_FAILURE_PROTOCOL);
3119 break;
3120 }
3121
3122 _fallthrough_;
3123 case SERVICE_START_POST:
3124 if (s->pid_file_pathspec &&
3125 main_pid_good(s) == 0 &&
3126 control_pid_good(s) == 0) {
3127
3128 /* Give up hoping for the daemon to write its PID file */
3129 log_unit_warning(u, "Daemon never wrote its PID file. Failing.");
3130
3131 service_unwatch_pid_file(s);
3132 if (s->state == SERVICE_START)
3133 service_enter_stop_post(s, SERVICE_FAILURE_PROTOCOL);
3134 else
3135 service_enter_stop(s, SERVICE_FAILURE_PROTOCOL);
3136 }
3137 break;
3138
3139 case SERVICE_RUNNING:
3140 /* service_enter_running() will figure out what to do */
3141 service_enter_running(s, SERVICE_SUCCESS);
3142 break;
3143
3144 case SERVICE_STOP_WATCHDOG:
3145 case SERVICE_STOP_SIGTERM:
3146 case SERVICE_STOP_SIGKILL:
3147
3148 if (main_pid_good(s) <= 0 && control_pid_good(s) <= 0)
3149 service_enter_stop_post(s, SERVICE_SUCCESS);
3150
3151 break;
3152
3153 case SERVICE_STOP_POST:
3154 case SERVICE_FINAL_SIGTERM:
3155 case SERVICE_FINAL_SIGKILL:
3156 if (main_pid_good(s) <= 0 && control_pid_good(s) <= 0)
3157 service_enter_dead(s, SERVICE_SUCCESS, true);
3158
3159 break;
3160
3161 default:
3162 ;
3163 }
3164 }
3165
3166 static void service_sigchld_event(Unit *u, pid_t pid, int code, int status) {
3167 bool notify_dbus = true;
3168 Service *s = SERVICE(u);
3169 ServiceResult f;
3170
3171 assert(s);
3172 assert(pid >= 0);
3173
3174 if (is_clean_exit(code, status, s->type == SERVICE_ONESHOT ? EXIT_CLEAN_COMMAND : EXIT_CLEAN_DAEMON, &s->success_status))
3175 f = SERVICE_SUCCESS;
3176 else if (code == CLD_EXITED)
3177 f = SERVICE_FAILURE_EXIT_CODE;
3178 else if (code == CLD_KILLED)
3179 f = SERVICE_FAILURE_SIGNAL;
3180 else if (code == CLD_DUMPED)
3181 f = SERVICE_FAILURE_CORE_DUMP;
3182 else
3183 assert_not_reached("Unknown code");
3184
3185 if (s->main_pid == pid) {
3186 /* Forking services may occasionally move to a new PID.
3187 * As long as they update the PID file before exiting the old
3188 * PID, they're fine. */
3189 if (service_load_pid_file(s, false) > 0)
3190 return;
3191
3192 s->main_pid = 0;
3193 exec_status_exit(&s->main_exec_status, &s->exec_context, pid, code, status);
3194
3195 if (s->main_command) {
3196 /* If this is not a forking service than the
3197 * main process got started and hence we copy
3198 * the exit status so that it is recorded both
3199 * as main and as control process exit
3200 * status */
3201
3202 s->main_command->exec_status = s->main_exec_status;
3203
3204 if (s->main_command->flags & EXEC_COMMAND_IGNORE_FAILURE)
3205 f = SERVICE_SUCCESS;
3206 } else if (s->exec_command[SERVICE_EXEC_START]) {
3207
3208 /* If this is a forked process, then we should
3209 * ignore the return value if this was
3210 * configured for the starter process */
3211
3212 if (s->exec_command[SERVICE_EXEC_START]->flags & EXEC_COMMAND_IGNORE_FAILURE)
3213 f = SERVICE_SUCCESS;
3214 }
3215
3216 /* When this is a successful exit, let's log about the exit code on DEBUG level. If this is a failure
3217 * and the process exited on its own via exit(), then let's make this a NOTICE, under the assumption
3218 * that the service already logged the reason at a higher log level on its own. However, if the service
3219 * died due to a signal, then it most likely didn't say anything about any reason, hence let's raise
3220 * our log level to WARNING then. */
3221
3222 log_struct(f == SERVICE_SUCCESS ? LOG_DEBUG :
3223 (code == CLD_EXITED ? LOG_NOTICE : LOG_WARNING),
3224 LOG_UNIT_MESSAGE(u, "Main process exited, code=%s, status=%i/%s",
3225 sigchld_code_to_string(code), status,
3226 strna(code == CLD_EXITED
3227 ? exit_status_to_string(status, EXIT_STATUS_FULL)
3228 : signal_to_string(status))),
3229 "EXIT_CODE=%s", sigchld_code_to_string(code),
3230 "EXIT_STATUS=%i", status,
3231 LOG_UNIT_ID(u),
3232 LOG_UNIT_INVOCATION_ID(u));
3233
3234 if (s->result == SERVICE_SUCCESS)
3235 s->result = f;
3236
3237 if (s->main_command &&
3238 s->main_command->command_next &&
3239 s->type == SERVICE_ONESHOT &&
3240 f == SERVICE_SUCCESS) {
3241
3242 /* There is another command to *
3243 * execute, so let's do that. */
3244
3245 log_unit_debug(u, "Running next main command for state %s.", service_state_to_string(s->state));
3246 service_run_next_main(s);
3247
3248 } else {
3249
3250 /* The service exited, so the service is officially
3251 * gone. */
3252 s->main_command = NULL;
3253
3254 switch (s->state) {
3255
3256 case SERVICE_START_POST:
3257 case SERVICE_RELOAD:
3258 case SERVICE_STOP:
3259 /* Need to wait until the operation is
3260 * done */
3261 break;
3262
3263 case SERVICE_START:
3264 if (s->type == SERVICE_ONESHOT) {
3265 /* This was our main goal, so let's go on */
3266 if (f == SERVICE_SUCCESS)
3267 service_enter_start_post(s);
3268 else
3269 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3270 break;
3271 } else if (s->type == SERVICE_NOTIFY) {
3272 /* Only enter running through a notification, so that the
3273 * SERVICE_START state signifies that no ready notification
3274 * has been received */
3275 if (f != SERVICE_SUCCESS)
3276 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3277 else if (!s->remain_after_exit || s->notify_access == NOTIFY_MAIN)
3278 /* The service has never been and will never be active */
3279 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_PROTOCOL);
3280 break;
3281 }
3282
3283 _fallthrough_;
3284 case SERVICE_RUNNING:
3285 service_enter_running(s, f);
3286 break;
3287
3288 case SERVICE_STOP_WATCHDOG:
3289 case SERVICE_STOP_SIGTERM:
3290 case SERVICE_STOP_SIGKILL:
3291
3292 if (control_pid_good(s) <= 0)
3293 service_enter_stop_post(s, f);
3294
3295 /* If there is still a control process, wait for that first */
3296 break;
3297
3298 case SERVICE_STOP_POST:
3299 case SERVICE_FINAL_SIGTERM:
3300 case SERVICE_FINAL_SIGKILL:
3301
3302 if (control_pid_good(s) <= 0)
3303 service_enter_dead(s, f, true);
3304 break;
3305
3306 default:
3307 assert_not_reached("Uh, main process died at wrong time.");
3308 }
3309 }
3310
3311 } else if (s->control_pid == pid) {
3312 s->control_pid = 0;
3313
3314 if (s->control_command) {
3315 exec_status_exit(&s->control_command->exec_status, &s->exec_context, pid, code, status);
3316
3317 if (s->control_command->flags & EXEC_COMMAND_IGNORE_FAILURE)
3318 f = SERVICE_SUCCESS;
3319 }
3320
3321 log_unit_full(u, f == SERVICE_SUCCESS ? LOG_DEBUG : LOG_NOTICE, 0,
3322 "Control process exited, code=%s status=%i",
3323 sigchld_code_to_string(code), status);
3324
3325 if (s->result == SERVICE_SUCCESS)
3326 s->result = f;
3327
3328 if (s->control_command &&
3329 s->control_command->command_next &&
3330 f == SERVICE_SUCCESS) {
3331
3332 /* There is another command to *
3333 * execute, so let's do that. */
3334
3335 log_unit_debug(u, "Running next control command for state %s.", service_state_to_string(s->state));
3336 service_run_next_control(s);
3337
3338 } else {
3339 /* No further commands for this step, so let's
3340 * figure out what to do next */
3341
3342 s->control_command = NULL;
3343 s->control_command_id = _SERVICE_EXEC_COMMAND_INVALID;
3344
3345 log_unit_debug(u, "Got final SIGCHLD for state %s.", service_state_to_string(s->state));
3346
3347 switch (s->state) {
3348
3349 case SERVICE_START_PRE:
3350 if (f == SERVICE_SUCCESS)
3351 service_enter_start(s);
3352 else
3353 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3354 break;
3355
3356 case SERVICE_START:
3357 if (s->type != SERVICE_FORKING)
3358 /* Maybe spurious event due to a reload that changed the type? */
3359 break;
3360
3361 if (f != SERVICE_SUCCESS) {
3362 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3363 break;
3364 }
3365
3366 if (s->pid_file) {
3367 bool has_start_post;
3368 int r;
3369
3370 /* Let's try to load the pid file here if we can.
3371 * The PID file might actually be created by a START_POST
3372 * script. In that case don't worry if the loading fails. */
3373
3374 has_start_post = s->exec_command[SERVICE_EXEC_START_POST];
3375 r = service_load_pid_file(s, !has_start_post);
3376 if (!has_start_post && r < 0) {
3377 r = service_demand_pid_file(s);
3378 if (r < 0 || cgroup_good(s) == 0)
3379 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_PROTOCOL);
3380 break;
3381 }
3382 } else
3383 service_search_main_pid(s);
3384
3385 service_enter_start_post(s);
3386 break;
3387
3388 case SERVICE_START_POST:
3389 if (f != SERVICE_SUCCESS) {
3390 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3391 break;
3392 }
3393
3394 if (s->pid_file) {
3395 int r;
3396
3397 r = service_load_pid_file(s, true);
3398 if (r < 0) {
3399 r = service_demand_pid_file(s);
3400 if (r < 0 || cgroup_good(s) == 0)
3401 service_enter_stop(s, SERVICE_FAILURE_PROTOCOL);
3402 break;
3403 }
3404 } else
3405 service_search_main_pid(s);
3406
3407 service_enter_running(s, SERVICE_SUCCESS);
3408 break;
3409
3410 case SERVICE_RELOAD:
3411 if (f == SERVICE_SUCCESS)
3412 if (service_load_pid_file(s, true) < 0)
3413 service_search_main_pid(s);
3414
3415 s->reload_result = f;
3416 service_enter_running(s, SERVICE_SUCCESS);
3417 break;
3418
3419 case SERVICE_STOP:
3420 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3421 break;
3422
3423 case SERVICE_STOP_WATCHDOG:
3424 case SERVICE_STOP_SIGTERM:
3425 case SERVICE_STOP_SIGKILL:
3426 if (main_pid_good(s) <= 0)
3427 service_enter_stop_post(s, f);
3428
3429 /* If there is still a service
3430 * process around, wait until
3431 * that one quit, too */
3432 break;
3433
3434 case SERVICE_STOP_POST:
3435 case SERVICE_FINAL_SIGTERM:
3436 case SERVICE_FINAL_SIGKILL:
3437 if (main_pid_good(s) <= 0)
3438 service_enter_dead(s, f, true);
3439 break;
3440
3441 default:
3442 assert_not_reached("Uh, control process died at wrong time.");
3443 }
3444 }
3445 } else /* Neither control nor main PID? If so, don't notify about anything */
3446 notify_dbus = false;
3447
3448 /* Notify clients about changed exit status */
3449 if (notify_dbus)
3450 unit_add_to_dbus_queue(u);
3451
3452 /* If we get a SIGCHLD event for one of the processes we were interested in, then we look for others to watch,
3453 * under the assumption that we'll sooner or later get a SIGCHLD for them, as the original process we watched
3454 * was probably the parent of them, and they are hence now our children. */
3455 (void) unit_enqueue_rewatch_pids(u);
3456 }
3457
3458 static int service_dispatch_timer(sd_event_source *source, usec_t usec, void *userdata) {
3459 Service *s = SERVICE(userdata);
3460
3461 assert(s);
3462 assert(source == s->timer_event_source);
3463
3464 switch (s->state) {
3465
3466 case SERVICE_START_PRE:
3467 case SERVICE_START:
3468 log_unit_warning(UNIT(s), "%s operation timed out. Terminating.", s->state == SERVICE_START ? "Start" : "Start-pre");
3469 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_TIMEOUT);
3470 break;
3471
3472 case SERVICE_START_POST:
3473 log_unit_warning(UNIT(s), "Start-post operation timed out. Stopping.");
3474 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_TIMEOUT);
3475 break;
3476
3477 case SERVICE_RUNNING:
3478 log_unit_warning(UNIT(s), "Service reached runtime time limit. Stopping.");
3479 service_enter_stop(s, SERVICE_FAILURE_TIMEOUT);
3480 break;
3481
3482 case SERVICE_RELOAD:
3483 log_unit_warning(UNIT(s), "Reload operation timed out. Killing reload process.");
3484 service_kill_control_process(s);
3485 s->reload_result = SERVICE_FAILURE_TIMEOUT;
3486 service_enter_running(s, SERVICE_SUCCESS);
3487 break;
3488
3489 case SERVICE_STOP:
3490 log_unit_warning(UNIT(s), "Stopping timed out. Terminating.");
3491 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_TIMEOUT);
3492 break;
3493
3494 case SERVICE_STOP_WATCHDOG:
3495 log_unit_warning(UNIT(s), "State 'stop-watchdog' timed out. Terminating.");
3496 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_TIMEOUT);
3497 break;
3498
3499 case SERVICE_STOP_SIGTERM:
3500 if (s->kill_context.send_sigkill) {
3501 log_unit_warning(UNIT(s), "State 'stop-sigterm' timed out. Killing.");
3502 service_enter_signal(s, SERVICE_STOP_SIGKILL, SERVICE_FAILURE_TIMEOUT);
3503 } else {
3504 log_unit_warning(UNIT(s), "State 'stop-sigterm' timed out. Skipping SIGKILL.");
3505 service_enter_stop_post(s, SERVICE_FAILURE_TIMEOUT);
3506 }
3507
3508 break;
3509
3510 case SERVICE_STOP_SIGKILL:
3511 /* Uh, we sent a SIGKILL and it is still not gone?
3512 * Must be something we cannot kill, so let's just be
3513 * weirded out and continue */
3514
3515 log_unit_warning(UNIT(s), "Processes still around after SIGKILL. Ignoring.");
3516 service_enter_stop_post(s, SERVICE_FAILURE_TIMEOUT);
3517 break;
3518
3519 case SERVICE_STOP_POST:
3520 log_unit_warning(UNIT(s), "State 'stop-post' timed out. Terminating.");
3521 service_enter_signal(s, SERVICE_FINAL_SIGTERM, SERVICE_FAILURE_TIMEOUT);
3522 break;
3523
3524 case SERVICE_FINAL_SIGTERM:
3525 if (s->kill_context.send_sigkill) {
3526 log_unit_warning(UNIT(s), "State 'stop-final-sigterm' timed out. Killing.");
3527 service_enter_signal(s, SERVICE_FINAL_SIGKILL, SERVICE_FAILURE_TIMEOUT);
3528 } else {
3529 log_unit_warning(UNIT(s), "State 'stop-final-sigterm' timed out. Skipping SIGKILL. Entering failed mode.");
3530 service_enter_dead(s, SERVICE_FAILURE_TIMEOUT, false);
3531 }
3532
3533 break;
3534
3535 case SERVICE_FINAL_SIGKILL:
3536 log_unit_warning(UNIT(s), "Processes still around after final SIGKILL. Entering failed mode.");
3537 service_enter_dead(s, SERVICE_FAILURE_TIMEOUT, true);
3538 break;
3539
3540 case SERVICE_AUTO_RESTART:
3541 if (s->restart_usec > 0) {
3542 char buf_restart[FORMAT_TIMESPAN_MAX];
3543 log_unit_info(UNIT(s),
3544 "Service RestartSec=%s expired, scheduling restart.",
3545 format_timespan(buf_restart, sizeof buf_restart, s->restart_usec, USEC_PER_SEC));
3546 } else
3547 log_unit_info(UNIT(s),
3548 "Service has no hold-off time (RestartSec=0), scheduling restart.");
3549
3550 service_enter_restart(s);
3551 break;
3552
3553 default:
3554 assert_not_reached("Timeout at wrong time.");
3555 }
3556
3557 return 0;
3558 }
3559
3560 static int service_dispatch_watchdog(sd_event_source *source, usec_t usec, void *userdata) {
3561 Service *s = SERVICE(userdata);
3562 char t[FORMAT_TIMESPAN_MAX];
3563 usec_t watchdog_usec;
3564
3565 assert(s);
3566 assert(source == s->watchdog_event_source);
3567
3568 watchdog_usec = service_get_watchdog_usec(s);
3569
3570 if (UNIT(s)->manager->service_watchdogs) {
3571 log_unit_error(UNIT(s), "Watchdog timeout (limit %s)!",
3572 format_timespan(t, sizeof(t), watchdog_usec, 1));
3573
3574 service_enter_signal(s, SERVICE_STOP_WATCHDOG, SERVICE_FAILURE_WATCHDOG);
3575 } else
3576 log_unit_warning(UNIT(s), "Watchdog disabled! Ignoring watchdog timeout (limit %s)!",
3577 format_timespan(t, sizeof(t), watchdog_usec, 1));
3578
3579 return 0;
3580 }
3581
3582 static bool service_notify_message_authorized(Service *s, pid_t pid, char **tags, FDSet *fds) {
3583 assert(s);
3584
3585 if (s->notify_access == NOTIFY_NONE) {
3586 log_unit_warning(UNIT(s), "Got notification message from PID "PID_FMT", but reception is disabled.", pid);
3587 return false;
3588 }
3589
3590 if (s->notify_access == NOTIFY_MAIN && pid != s->main_pid) {
3591 if (s->main_pid != 0)
3592 log_unit_warning(UNIT(s), "Got notification message from PID "PID_FMT", but reception only permitted for main PID "PID_FMT, pid, s->main_pid);
3593 else
3594 log_unit_warning(UNIT(s), "Got notification message from PID "PID_FMT", but reception only permitted for main PID which is currently not known", pid);
3595
3596 return false;
3597 }
3598
3599 if (s->notify_access == NOTIFY_EXEC && pid != s->main_pid && pid != s->control_pid) {
3600 if (s->main_pid != 0 && s->control_pid != 0)
3601 log_unit_warning(UNIT(s), "Got notification message from PID "PID_FMT", but reception only permitted for main PID "PID_FMT" and control PID "PID_FMT,
3602 pid, s->main_pid, s->control_pid);
3603 else if (s->main_pid != 0)
3604 log_unit_warning(UNIT(s), "Got notification message from PID "PID_FMT", but reception only permitted for main PID "PID_FMT, pid, s->main_pid);
3605 else if (s->control_pid != 0)
3606 log_unit_warning(UNIT(s), "Got notification message from PID "PID_FMT", but reception only permitted for control PID "PID_FMT, pid, s->control_pid);
3607 else
3608 log_unit_warning(UNIT(s), "Got notification message from PID "PID_FMT", but reception only permitted for main PID and control PID which are currently not known", pid);
3609
3610 return false;
3611 }
3612
3613 return true;
3614 }
3615
3616 static void service_notify_message(
3617 Unit *u,
3618 const struct ucred *ucred,
3619 char **tags,
3620 FDSet *fds) {
3621
3622 Service *s = SERVICE(u);
3623 bool notify_dbus = false;
3624 const char *e;
3625 char **i;
3626 int r;
3627
3628 assert(u);
3629 assert(ucred);
3630
3631 if (!service_notify_message_authorized(SERVICE(u), ucred->pid, tags, fds))
3632 return;
3633
3634 if (DEBUG_LOGGING) {
3635 _cleanup_free_ char *cc = NULL;
3636
3637 cc = strv_join(tags, ", ");
3638 log_unit_debug(u, "Got notification message from PID "PID_FMT" (%s)", ucred->pid, isempty(cc) ? "n/a" : cc);
3639 }
3640
3641 /* Interpret MAINPID= */
3642 e = strv_find_startswith(tags, "MAINPID=");
3643 if (e && IN_SET(s->state, SERVICE_START, SERVICE_START_POST, SERVICE_RUNNING, SERVICE_RELOAD)) {
3644 pid_t new_main_pid;
3645
3646 if (parse_pid(e, &new_main_pid) < 0)
3647 log_unit_warning(u, "Failed to parse MAINPID= field in notification message, ignoring: %s", e);
3648 else if (!s->main_pid_known || new_main_pid != s->main_pid) {
3649
3650 r = service_is_suitable_main_pid(s, new_main_pid, LOG_WARNING);
3651 if (r == 0) {
3652 /* The new main PID is a bit suspicous, which is OK if the sender is privileged. */
3653
3654 if (ucred->uid == 0) {
3655 log_unit_debug(u, "New main PID "PID_FMT" does not belong to service, but we'll accept it as the request to change it came from a privileged process.", new_main_pid);
3656 r = 1;
3657 } else
3658 log_unit_debug(u, "New main PID "PID_FMT" does not belong to service, refusing.", new_main_pid);
3659 }
3660 if (r > 0) {
3661 service_set_main_pid(s, new_main_pid);
3662
3663 r = unit_watch_pid(UNIT(s), new_main_pid);
3664 if (r < 0)
3665 log_unit_warning_errno(UNIT(s), r, "Failed to watch new main PID "PID_FMT" for service: %m", new_main_pid);
3666
3667 notify_dbus = true;
3668 }
3669 }
3670 }
3671
3672 /* Interpret READY=/STOPPING=/RELOADING=. Last one wins. */
3673 STRV_FOREACH_BACKWARDS(i, tags) {
3674
3675 if (streq(*i, "READY=1")) {
3676 s->notify_state = NOTIFY_READY;
3677
3678 /* Type=notify services inform us about completed
3679 * initialization with READY=1 */
3680 if (s->type == SERVICE_NOTIFY && s->state == SERVICE_START)
3681 service_enter_start_post(s);
3682
3683 /* Sending READY=1 while we are reloading informs us
3684 * that the reloading is complete */
3685 if (s->state == SERVICE_RELOAD && s->control_pid == 0)
3686 service_enter_running(s, SERVICE_SUCCESS);
3687
3688 notify_dbus = true;
3689 break;
3690
3691 } else if (streq(*i, "RELOADING=1")) {
3692 s->notify_state = NOTIFY_RELOADING;
3693
3694 if (s->state == SERVICE_RUNNING)
3695 service_enter_reload_by_notify(s);
3696
3697 notify_dbus = true;
3698 break;
3699
3700 } else if (streq(*i, "STOPPING=1")) {
3701 s->notify_state = NOTIFY_STOPPING;
3702
3703 if (s->state == SERVICE_RUNNING)
3704 service_enter_stop_by_notify(s);
3705
3706 notify_dbus = true;
3707 break;
3708 }
3709 }
3710
3711 /* Interpret STATUS= */
3712 e = strv_find_startswith(tags, "STATUS=");
3713 if (e) {
3714 _cleanup_free_ char *t = NULL;
3715
3716 if (!isempty(e)) {
3717 if (!utf8_is_valid(e))
3718 log_unit_warning(u, "Status message in notification message is not UTF-8 clean.");
3719 else {
3720 t = strdup(e);
3721 if (!t)
3722 log_oom();
3723 }
3724 }
3725
3726 if (!streq_ptr(s->status_text, t)) {
3727 free_and_replace(s->status_text, t);
3728 notify_dbus = true;
3729 }
3730 }
3731
3732 /* Interpret ERRNO= */
3733 e = strv_find_startswith(tags, "ERRNO=");
3734 if (e) {
3735 int status_errno;
3736
3737 status_errno = parse_errno(e);
3738 if (status_errno < 0)
3739 log_unit_warning_errno(u, status_errno,
3740 "Failed to parse ERRNO= field in notification message: %s", e);
3741 else if (s->status_errno != status_errno) {
3742 s->status_errno = status_errno;
3743 notify_dbus = true;
3744 }
3745 }
3746
3747 /* Interpret EXTEND_TIMEOUT= */
3748 e = strv_find_startswith(tags, "EXTEND_TIMEOUT_USEC=");
3749 if (e) {
3750 usec_t extend_timeout_usec;
3751 if (safe_atou64(e, &extend_timeout_usec) < 0)
3752 log_unit_warning(u, "Failed to parse EXTEND_TIMEOUT_USEC=%s", e);
3753 else
3754 service_extend_timeout(s, extend_timeout_usec);
3755 }
3756
3757 /* Interpret WATCHDOG= */
3758 if (strv_find(tags, "WATCHDOG=1"))
3759 service_reset_watchdog(s);
3760
3761 e = strv_find_startswith(tags, "WATCHDOG_USEC=");
3762 if (e) {
3763 usec_t watchdog_override_usec;
3764 if (safe_atou64(e, &watchdog_override_usec) < 0)
3765 log_unit_warning(u, "Failed to parse WATCHDOG_USEC=%s", e);
3766 else
3767 service_reset_watchdog_timeout(s, watchdog_override_usec);
3768 }
3769
3770 /* Process FD store messages. Either FDSTOREREMOVE=1 for removal, or FDSTORE=1 for addition. In both cases,
3771 * process FDNAME= for picking the file descriptor name to use. Note that FDNAME= is required when removing
3772 * fds, but optional when pushing in new fds, for compatibility reasons. */
3773 if (strv_find(tags, "FDSTOREREMOVE=1")) {
3774 const char *name;
3775
3776 name = strv_find_startswith(tags, "FDNAME=");
3777 if (!name || !fdname_is_valid(name))
3778 log_unit_warning(u, "FDSTOREREMOVE=1 requested, but no valid file descriptor name passed, ignoring.");
3779 else
3780 service_remove_fd_store(s, name);
3781
3782 } else if (strv_find(tags, "FDSTORE=1")) {
3783 const char *name;
3784
3785 name = strv_find_startswith(tags, "FDNAME=");
3786 if (name && !fdname_is_valid(name)) {
3787 log_unit_warning(u, "Passed FDNAME= name is invalid, ignoring.");
3788 name = NULL;
3789 }
3790
3791 (void) service_add_fd_store_set(s, fds, name);
3792 }
3793
3794 /* Notify clients about changed status or main pid */
3795 if (notify_dbus)
3796 unit_add_to_dbus_queue(u);
3797 }
3798
3799 static int service_get_timeout(Unit *u, usec_t *timeout) {
3800 Service *s = SERVICE(u);
3801 uint64_t t;
3802 int r;
3803
3804 if (!s->timer_event_source)
3805 return 0;
3806
3807 r = sd_event_source_get_time(s->timer_event_source, &t);
3808 if (r < 0)
3809 return r;
3810 if (t == USEC_INFINITY)
3811 return 0;
3812
3813 *timeout = t;
3814 return 1;
3815 }
3816
3817 static void service_bus_name_owner_change(
3818 Unit *u,
3819 const char *name,
3820 const char *old_owner,
3821 const char *new_owner) {
3822
3823 Service *s = SERVICE(u);
3824 int r;
3825
3826 assert(s);
3827 assert(name);
3828
3829 assert(streq(s->bus_name, name));
3830 assert(old_owner || new_owner);
3831
3832 if (old_owner && new_owner)
3833 log_unit_debug(u, "D-Bus name %s changed owner from %s to %s", name, old_owner, new_owner);
3834 else if (old_owner)
3835 log_unit_debug(u, "D-Bus name %s no longer registered by %s", name, old_owner);
3836 else
3837 log_unit_debug(u, "D-Bus name %s now registered by %s", name, new_owner);
3838
3839 s->bus_name_good = !!new_owner;
3840
3841 /* Track the current owner, so we can reconstruct changes after a daemon reload */
3842 r = free_and_strdup(&s->bus_name_owner, new_owner);
3843 if (r < 0) {
3844 log_unit_error_errno(u, r, "Unable to set new bus name owner %s: %m", new_owner);
3845 return;
3846 }
3847
3848 if (s->type == SERVICE_DBUS) {
3849
3850 /* service_enter_running() will figure out what to
3851 * do */
3852 if (s->state == SERVICE_RUNNING)
3853 service_enter_running(s, SERVICE_SUCCESS);
3854 else if (s->state == SERVICE_START && new_owner)
3855 service_enter_start_post(s);
3856
3857 } else if (new_owner &&
3858 s->main_pid <= 0 &&
3859 IN_SET(s->state,
3860 SERVICE_START,
3861 SERVICE_START_POST,
3862 SERVICE_RUNNING,
3863 SERVICE_RELOAD)) {
3864
3865 _cleanup_(sd_bus_creds_unrefp) sd_bus_creds *creds = NULL;
3866 pid_t pid;
3867
3868 /* Try to acquire PID from bus service */
3869
3870 r = sd_bus_get_name_creds(u->manager->api_bus, name, SD_BUS_CREDS_PID, &creds);
3871 if (r >= 0)
3872 r = sd_bus_creds_get_pid(creds, &pid);
3873 if (r >= 0) {
3874 log_unit_debug(u, "D-Bus name %s is now owned by process " PID_FMT, name, pid);
3875
3876 service_set_main_pid(s, pid);
3877 unit_watch_pid(UNIT(s), pid);
3878 }
3879 }
3880 }
3881
3882 int service_set_socket_fd(Service *s, int fd, Socket *sock, bool selinux_context_net) {
3883 _cleanup_free_ char *peer = NULL;
3884 int r;
3885
3886 assert(s);
3887 assert(fd >= 0);
3888
3889 /* This is called by the socket code when instantiating a new service for a stream socket and the socket needs
3890 * to be configured. We take ownership of the passed fd on success. */
3891
3892 if (UNIT(s)->load_state != UNIT_LOADED)
3893 return -EINVAL;
3894
3895 if (s->socket_fd >= 0)
3896 return -EBUSY;
3897
3898 if (s->state != SERVICE_DEAD)
3899 return -EAGAIN;
3900
3901 if (getpeername_pretty(fd, true, &peer) >= 0) {
3902
3903 if (UNIT(s)->description) {
3904 _cleanup_free_ char *a;
3905
3906 a = strjoin(UNIT(s)->description, " (", peer, ")");
3907 if (!a)
3908 return -ENOMEM;
3909
3910 r = unit_set_description(UNIT(s), a);
3911 } else
3912 r = unit_set_description(UNIT(s), peer);
3913
3914 if (r < 0)
3915 return r;
3916 }
3917
3918 r = unit_add_two_dependencies(UNIT(sock), UNIT_BEFORE, UNIT_TRIGGERS, UNIT(s), false, UNIT_DEPENDENCY_IMPLICIT);
3919 if (r < 0)
3920 return r;
3921
3922 s->socket_fd = fd;
3923 s->socket_fd_selinux_context_net = selinux_context_net;
3924
3925 unit_ref_set(&s->accept_socket, UNIT(s), UNIT(sock));
3926 return 0;
3927 }
3928
3929 static void service_reset_failed(Unit *u) {
3930 Service *s = SERVICE(u);
3931
3932 assert(s);
3933
3934 if (s->state == SERVICE_FAILED)
3935 service_set_state(s, SERVICE_DEAD);
3936
3937 s->result = SERVICE_SUCCESS;
3938 s->reload_result = SERVICE_SUCCESS;
3939 s->n_restarts = 0;
3940 s->flush_n_restarts = false;
3941 }
3942
3943 static int service_kill(Unit *u, KillWho who, int signo, sd_bus_error *error) {
3944 Service *s = SERVICE(u);
3945
3946 assert(s);
3947
3948 return unit_kill_common(u, who, signo, s->main_pid, s->control_pid, error);
3949 }
3950
3951 static int service_main_pid(Unit *u) {
3952 Service *s = SERVICE(u);
3953
3954 assert(s);
3955
3956 return s->main_pid;
3957 }
3958
3959 static int service_control_pid(Unit *u) {
3960 Service *s = SERVICE(u);
3961
3962 assert(s);
3963
3964 return s->control_pid;
3965 }
3966
3967 static bool service_needs_console(Unit *u) {
3968 Service *s = SERVICE(u);
3969
3970 assert(s);
3971
3972 /* We provide our own implementation of this here, instead of relying of the generic implementation
3973 * unit_needs_console() provides, since we want to return false if we are in SERVICE_EXITED state. */
3974
3975 if (!exec_context_may_touch_console(&s->exec_context))
3976 return false;
3977
3978 return IN_SET(s->state,
3979 SERVICE_START_PRE,
3980 SERVICE_START,
3981 SERVICE_START_POST,
3982 SERVICE_RUNNING,
3983 SERVICE_RELOAD,
3984 SERVICE_STOP,
3985 SERVICE_STOP_WATCHDOG,
3986 SERVICE_STOP_SIGTERM,
3987 SERVICE_STOP_SIGKILL,
3988 SERVICE_STOP_POST,
3989 SERVICE_FINAL_SIGTERM,
3990 SERVICE_FINAL_SIGKILL);
3991 }
3992
3993 static const char* const service_restart_table[_SERVICE_RESTART_MAX] = {
3994 [SERVICE_RESTART_NO] = "no",
3995 [SERVICE_RESTART_ON_SUCCESS] = "on-success",
3996 [SERVICE_RESTART_ON_FAILURE] = "on-failure",
3997 [SERVICE_RESTART_ON_ABNORMAL] = "on-abnormal",
3998 [SERVICE_RESTART_ON_WATCHDOG] = "on-watchdog",
3999 [SERVICE_RESTART_ON_ABORT] = "on-abort",
4000 [SERVICE_RESTART_ALWAYS] = "always",
4001 };
4002
4003 DEFINE_STRING_TABLE_LOOKUP(service_restart, ServiceRestart);
4004
4005 static const char* const service_type_table[_SERVICE_TYPE_MAX] = {
4006 [SERVICE_SIMPLE] = "simple",
4007 [SERVICE_FORKING] = "forking",
4008 [SERVICE_ONESHOT] = "oneshot",
4009 [SERVICE_DBUS] = "dbus",
4010 [SERVICE_NOTIFY] = "notify",
4011 [SERVICE_IDLE] = "idle",
4012 [SERVICE_EXEC] = "exec",
4013 };
4014
4015 DEFINE_STRING_TABLE_LOOKUP(service_type, ServiceType);
4016
4017 static const char* const service_exec_command_table[_SERVICE_EXEC_COMMAND_MAX] = {
4018 [SERVICE_EXEC_START_PRE] = "ExecStartPre",
4019 [SERVICE_EXEC_START] = "ExecStart",
4020 [SERVICE_EXEC_START_POST] = "ExecStartPost",
4021 [SERVICE_EXEC_RELOAD] = "ExecReload",
4022 [SERVICE_EXEC_STOP] = "ExecStop",
4023 [SERVICE_EXEC_STOP_POST] = "ExecStopPost",
4024 };
4025
4026 DEFINE_STRING_TABLE_LOOKUP(service_exec_command, ServiceExecCommand);
4027
4028 static const char* const notify_state_table[_NOTIFY_STATE_MAX] = {
4029 [NOTIFY_UNKNOWN] = "unknown",
4030 [NOTIFY_READY] = "ready",
4031 [NOTIFY_RELOADING] = "reloading",
4032 [NOTIFY_STOPPING] = "stopping",
4033 };
4034
4035 DEFINE_STRING_TABLE_LOOKUP(notify_state, NotifyState);
4036
4037 static const char* const service_result_table[_SERVICE_RESULT_MAX] = {
4038 [SERVICE_SUCCESS] = "success",
4039 [SERVICE_FAILURE_RESOURCES] = "resources",
4040 [SERVICE_FAILURE_PROTOCOL] = "protocol",
4041 [SERVICE_FAILURE_TIMEOUT] = "timeout",
4042 [SERVICE_FAILURE_EXIT_CODE] = "exit-code",
4043 [SERVICE_FAILURE_SIGNAL] = "signal",
4044 [SERVICE_FAILURE_CORE_DUMP] = "core-dump",
4045 [SERVICE_FAILURE_WATCHDOG] = "watchdog",
4046 [SERVICE_FAILURE_START_LIMIT_HIT] = "start-limit-hit",
4047 };
4048
4049 DEFINE_STRING_TABLE_LOOKUP(service_result, ServiceResult);
4050
4051 const UnitVTable service_vtable = {
4052 .object_size = sizeof(Service),
4053 .exec_context_offset = offsetof(Service, exec_context),
4054 .cgroup_context_offset = offsetof(Service, cgroup_context),
4055 .kill_context_offset = offsetof(Service, kill_context),
4056 .exec_runtime_offset = offsetof(Service, exec_runtime),
4057 .dynamic_creds_offset = offsetof(Service, dynamic_creds),
4058
4059 .sections =
4060 "Unit\0"
4061 "Service\0"
4062 "Install\0",
4063 .private_section = "Service",
4064
4065 .can_transient = true,
4066 .can_delegate = true,
4067
4068 .init = service_init,
4069 .done = service_done,
4070 .load = service_load,
4071 .release_resources = service_release_resources,
4072
4073 .coldplug = service_coldplug,
4074
4075 .dump = service_dump,
4076
4077 .start = service_start,
4078 .stop = service_stop,
4079 .reload = service_reload,
4080
4081 .can_reload = service_can_reload,
4082
4083 .kill = service_kill,
4084
4085 .serialize = service_serialize,
4086 .deserialize_item = service_deserialize_item,
4087
4088 .active_state = service_active_state,
4089 .sub_state_to_string = service_sub_state_to_string,
4090
4091 .will_restart = service_will_restart,
4092
4093 .may_gc = service_may_gc,
4094
4095 .sigchld_event = service_sigchld_event,
4096
4097 .reset_failed = service_reset_failed,
4098
4099 .notify_cgroup_empty = service_notify_cgroup_empty_event,
4100 .notify_message = service_notify_message,
4101
4102 .main_pid = service_main_pid,
4103 .control_pid = service_control_pid,
4104
4105 .bus_name_owner_change = service_bus_name_owner_change,
4106
4107 .bus_vtable = bus_service_vtable,
4108 .bus_set_property = bus_service_set_property,
4109 .bus_commit_properties = bus_service_commit_properties,
4110
4111 .get_timeout = service_get_timeout,
4112 .needs_console = service_needs_console,
4113
4114 .status_message_formats = {
4115 .starting_stopping = {
4116 [0] = "Starting %s...",
4117 [1] = "Stopping %s...",
4118 },
4119 .finished_start_job = {
4120 [JOB_DONE] = "Started %s.",
4121 [JOB_FAILED] = "Failed to start %s.",
4122 },
4123 .finished_stop_job = {
4124 [JOB_DONE] = "Stopped %s.",
4125 [JOB_FAILED] = "Stopped (with error) %s.",
4126 },
4127 },
4128 };
Unnamed repository; edit this file 'description' to name the repository.