]> git.ipfire.org Git - thirdparty/systemd.git/blob - src/core/service.c
projects / thirdparty / systemd.git / blob
? search:
summary | shortlog | log | commit | commitdiff | tree
blame | history | raw | HEAD
tree-wide: remove Lennart's copyright lines
[thirdparty/systemd.git] / src / core / service.c
1 /* SPDX-License-Identifier: LGPL-2.1+ */
2
3 #include <errno.h>
4 #include <signal.h>
5 #include <unistd.h>
6
7 #include "sd-messages.h"
8
9 #include "alloc-util.h"
10 #include "async.h"
11 #include "bus-error.h"
12 #include "bus-kernel.h"
13 #include "bus-util.h"
14 #include "dbus-service.h"
15 #include "def.h"
16 #include "env-util.h"
17 #include "escape.h"
18 #include "exit-status.h"
19 #include "fd-util.h"
20 #include "fileio.h"
21 #include "format-util.h"
22 #include "fs-util.h"
23 #include "load-dropin.h"
24 #include "load-fragment.h"
25 #include "log.h"
26 #include "manager.h"
27 #include "parse-util.h"
28 #include "path-util.h"
29 #include "process-util.h"
30 #include "service.h"
31 #include "signal-util.h"
32 #include "special.h"
33 #include "stdio-util.h"
34 #include "string-table.h"
35 #include "string-util.h"
36 #include "strv.h"
37 #include "unit-name.h"
38 #include "unit.h"
39 #include "utf8.h"
40 #include "util.h"
41
42 static const UnitActiveState state_translation_table[_SERVICE_STATE_MAX] = {
43 [SERVICE_DEAD] = UNIT_INACTIVE,
44 [SERVICE_START_PRE] = UNIT_ACTIVATING,
45 [SERVICE_START] = UNIT_ACTIVATING,
46 [SERVICE_START_POST] = UNIT_ACTIVATING,
47 [SERVICE_RUNNING] = UNIT_ACTIVE,
48 [SERVICE_EXITED] = UNIT_ACTIVE,
49 [SERVICE_RELOAD] = UNIT_RELOADING,
50 [SERVICE_STOP] = UNIT_DEACTIVATING,
51 [SERVICE_STOP_SIGABRT] = UNIT_DEACTIVATING,
52 [SERVICE_STOP_SIGTERM] = UNIT_DEACTIVATING,
53 [SERVICE_STOP_SIGKILL] = UNIT_DEACTIVATING,
54 [SERVICE_STOP_POST] = UNIT_DEACTIVATING,
55 [SERVICE_FINAL_SIGTERM] = UNIT_DEACTIVATING,
56 [SERVICE_FINAL_SIGKILL] = UNIT_DEACTIVATING,
57 [SERVICE_FAILED] = UNIT_FAILED,
58 [SERVICE_AUTO_RESTART] = UNIT_ACTIVATING
59 };
60
61 /* For Type=idle we never want to delay any other jobs, hence we
62 * consider idle jobs active as soon as we start working on them */
63 static const UnitActiveState state_translation_table_idle[_SERVICE_STATE_MAX] = {
64 [SERVICE_DEAD] = UNIT_INACTIVE,
65 [SERVICE_START_PRE] = UNIT_ACTIVE,
66 [SERVICE_START] = UNIT_ACTIVE,
67 [SERVICE_START_POST] = UNIT_ACTIVE,
68 [SERVICE_RUNNING] = UNIT_ACTIVE,
69 [SERVICE_EXITED] = UNIT_ACTIVE,
70 [SERVICE_RELOAD] = UNIT_RELOADING,
71 [SERVICE_STOP] = UNIT_DEACTIVATING,
72 [SERVICE_STOP_SIGABRT] = UNIT_DEACTIVATING,
73 [SERVICE_STOP_SIGTERM] = UNIT_DEACTIVATING,
74 [SERVICE_STOP_SIGKILL] = UNIT_DEACTIVATING,
75 [SERVICE_STOP_POST] = UNIT_DEACTIVATING,
76 [SERVICE_FINAL_SIGTERM] = UNIT_DEACTIVATING,
77 [SERVICE_FINAL_SIGKILL] = UNIT_DEACTIVATING,
78 [SERVICE_FAILED] = UNIT_FAILED,
79 [SERVICE_AUTO_RESTART] = UNIT_ACTIVATING
80 };
81
82 static int service_dispatch_io(sd_event_source *source, int fd, uint32_t events, void *userdata);
83 static int service_dispatch_timer(sd_event_source *source, usec_t usec, void *userdata);
84 static int service_dispatch_watchdog(sd_event_source *source, usec_t usec, void *userdata);
85
86 static void service_enter_signal(Service *s, ServiceState state, ServiceResult f);
87 static void service_enter_reload_by_notify(Service *s);
88
89 static void service_init(Unit *u) {
90 Service *s = SERVICE(u);
91
92 assert(u);
93 assert(u->load_state == UNIT_STUB);
94
95 s->timeout_start_usec = u->manager->default_timeout_start_usec;
96 s->timeout_stop_usec = u->manager->default_timeout_stop_usec;
97 s->restart_usec = u->manager->default_restart_usec;
98 s->runtime_max_usec = USEC_INFINITY;
99 s->type = _SERVICE_TYPE_INVALID;
100 s->socket_fd = -1;
101 s->stdin_fd = s->stdout_fd = s->stderr_fd = -1;
102 s->guess_main_pid = true;
103
104 s->control_command_id = _SERVICE_EXEC_COMMAND_INVALID;
105
106 s->exec_context.keyring_mode = MANAGER_IS_SYSTEM(u->manager) ?
107 EXEC_KEYRING_PRIVATE : EXEC_KEYRING_INHERIT;
108 }
109
110 static void service_unwatch_control_pid(Service *s) {
111 assert(s);
112
113 if (s->control_pid <= 0)
114 return;
115
116 unit_unwatch_pid(UNIT(s), s->control_pid);
117 s->control_pid = 0;
118 }
119
120 static void service_unwatch_main_pid(Service *s) {
121 assert(s);
122
123 if (s->main_pid <= 0)
124 return;
125
126 unit_unwatch_pid(UNIT(s), s->main_pid);
127 s->main_pid = 0;
128 }
129
130 static void service_unwatch_pid_file(Service *s) {
131 if (!s->pid_file_pathspec)
132 return;
133
134 log_unit_debug(UNIT(s), "Stopping watch for PID file %s", s->pid_file_pathspec->path);
135 path_spec_unwatch(s->pid_file_pathspec);
136 path_spec_done(s->pid_file_pathspec);
137 s->pid_file_pathspec = mfree(s->pid_file_pathspec);
138 }
139
140 static int service_set_main_pid(Service *s, pid_t pid) {
141 pid_t ppid;
142
143 assert(s);
144
145 if (pid <= 1)
146 return -EINVAL;
147
148 if (pid == getpid_cached())
149 return -EINVAL;
150
151 if (s->main_pid == pid && s->main_pid_known)
152 return 0;
153
154 if (s->main_pid != pid) {
155 service_unwatch_main_pid(s);
156 exec_status_start(&s->main_exec_status, pid);
157 }
158
159 s->main_pid = pid;
160 s->main_pid_known = true;
161
162 if (get_process_ppid(pid, &ppid) >= 0 && ppid != getpid_cached()) {
163 log_unit_warning(UNIT(s), "Supervising process "PID_FMT" which is not our child. We'll most likely not notice when it exits.", pid);
164 s->main_pid_alien = true;
165 } else
166 s->main_pid_alien = false;
167
168 return 0;
169 }
170
171 void service_close_socket_fd(Service *s) {
172 assert(s);
173
174 /* Undo the effect of service_set_socket_fd(). */
175
176 s->socket_fd = asynchronous_close(s->socket_fd);
177
178 if (UNIT_ISSET(s->accept_socket)) {
179 socket_connection_unref(SOCKET(UNIT_DEREF(s->accept_socket)));
180 unit_ref_unset(&s->accept_socket);
181 }
182 }
183
184 static void service_stop_watchdog(Service *s) {
185 assert(s);
186
187 s->watchdog_event_source = sd_event_source_unref(s->watchdog_event_source);
188 s->watchdog_timestamp = DUAL_TIMESTAMP_NULL;
189 }
190
191 static usec_t service_get_watchdog_usec(Service *s) {
192 assert(s);
193
194 if (s->watchdog_override_enable)
195 return s->watchdog_override_usec;
196 else
197 return s->watchdog_usec;
198 }
199
200 static void service_start_watchdog(Service *s) {
201 int r;
202 usec_t watchdog_usec;
203
204 assert(s);
205
206 watchdog_usec = service_get_watchdog_usec(s);
207 if (IN_SET(watchdog_usec, 0, USEC_INFINITY))
208 return;
209
210 if (s->watchdog_event_source) {
211 r = sd_event_source_set_time(s->watchdog_event_source, usec_add(s->watchdog_timestamp.monotonic, watchdog_usec));
212 if (r < 0) {
213 log_unit_warning_errno(UNIT(s), r, "Failed to reset watchdog timer: %m");
214 return;
215 }
216
217 r = sd_event_source_set_enabled(s->watchdog_event_source, SD_EVENT_ONESHOT);
218 } else {
219 r = sd_event_add_time(
220 UNIT(s)->manager->event,
221 &s->watchdog_event_source,
222 CLOCK_MONOTONIC,
223 usec_add(s->watchdog_timestamp.monotonic, watchdog_usec), 0,
224 service_dispatch_watchdog, s);
225 if (r < 0) {
226 log_unit_warning_errno(UNIT(s), r, "Failed to add watchdog timer: %m");
227 return;
228 }
229
230 (void) sd_event_source_set_description(s->watchdog_event_source, "service-watchdog");
231
232 /* Let's process everything else which might be a sign
233 * of living before we consider a service died. */
234 r = sd_event_source_set_priority(s->watchdog_event_source, SD_EVENT_PRIORITY_IDLE);
235 }
236
237 if (r < 0)
238 log_unit_warning_errno(UNIT(s), r, "Failed to install watchdog timer: %m");
239 }
240
241 static void service_extend_timeout(Service *s, usec_t extend_timeout_usec) {
242 assert(s);
243
244 if (s->timer_event_source) {
245 uint64_t current = 0, extended = 0;
246 int r;
247
248 if (IN_SET(extend_timeout_usec, 0, USEC_INFINITY))
249 return;
250
251 extended = usec_add(now(CLOCK_MONOTONIC), extend_timeout_usec);
252
253 r = sd_event_source_get_time(s->timer_event_source, &current);
254 if (r < 0)
255 log_unit_error_errno(UNIT(s), r, "Failed to retrieve timeout timer: %m");
256 else if (extended > current) {
257 r = sd_event_source_set_time(s->timer_event_source, extended);
258 if (r < 0)
259 log_unit_warning_errno(UNIT(s), r, "Failed to set timeout timer: %m");
260 }
261
262 if (s->watchdog_event_source) {
263 /* extend watchdog if necessary. We've asked for an extended timeout so we
264 * shouldn't expect a watchdog timeout in the interval in between */
265 r = sd_event_source_get_time(s->watchdog_event_source, &current);
266 if (r < 0) {
267 log_unit_error_errno(UNIT(s), r, "Failed to retrieve watchdog timer: %m");
268 return;
269 }
270
271 if (extended > current) {
272 r = sd_event_source_set_time(s->watchdog_event_source, extended);
273 if (r < 0)
274 log_unit_warning_errno(UNIT(s), r, "Failed to set watchdog timer: %m");
275 }
276 }
277 }
278 }
279
280 static void service_reset_watchdog(Service *s) {
281 assert(s);
282
283 dual_timestamp_get(&s->watchdog_timestamp);
284 service_start_watchdog(s);
285 }
286
287 static void service_reset_watchdog_timeout(Service *s, usec_t watchdog_override_usec) {
288 assert(s);
289
290 s->watchdog_override_enable = true;
291 s->watchdog_override_usec = watchdog_override_usec;
292 service_reset_watchdog(s);
293
294 log_unit_debug(UNIT(s), "watchdog_usec="USEC_FMT, s->watchdog_usec);
295 log_unit_debug(UNIT(s), "watchdog_override_usec="USEC_FMT, s->watchdog_override_usec);
296 }
297
298 static void service_fd_store_unlink(ServiceFDStore *fs) {
299
300 if (!fs)
301 return;
302
303 if (fs->service) {
304 assert(fs->service->n_fd_store > 0);
305 LIST_REMOVE(fd_store, fs->service->fd_store, fs);
306 fs->service->n_fd_store--;
307 }
308
309 if (fs->event_source) {
310 sd_event_source_set_enabled(fs->event_source, SD_EVENT_OFF);
311 sd_event_source_unref(fs->event_source);
312 }
313
314 free(fs->fdname);
315 safe_close(fs->fd);
316 free(fs);
317 }
318
319 static void service_release_fd_store(Service *s) {
320 assert(s);
321
322 if (s->n_keep_fd_store > 0)
323 return;
324
325 log_unit_debug(UNIT(s), "Releasing all stored fds");
326 while (s->fd_store)
327 service_fd_store_unlink(s->fd_store);
328
329 assert(s->n_fd_store == 0);
330 }
331
332 static void service_release_resources(Unit *u) {
333 Service *s = SERVICE(u);
334
335 assert(s);
336
337 if (!s->fd_store && s->stdin_fd < 0 && s->stdout_fd < 0 && s->stderr_fd < 0)
338 return;
339
340 log_unit_debug(u, "Releasing resources.");
341
342 s->stdin_fd = safe_close(s->stdin_fd);
343 s->stdout_fd = safe_close(s->stdout_fd);
344 s->stderr_fd = safe_close(s->stderr_fd);
345
346 service_release_fd_store(s);
347 }
348
349 static void service_done(Unit *u) {
350 Service *s = SERVICE(u);
351
352 assert(s);
353
354 s->pid_file = mfree(s->pid_file);
355 s->status_text = mfree(s->status_text);
356
357 s->exec_runtime = exec_runtime_unref(s->exec_runtime, false);
358 exec_command_free_array(s->exec_command, _SERVICE_EXEC_COMMAND_MAX);
359 s->control_command = NULL;
360 s->main_command = NULL;
361
362 dynamic_creds_unref(&s->dynamic_creds);
363
364 exit_status_set_free(&s->restart_prevent_status);
365 exit_status_set_free(&s->restart_force_status);
366 exit_status_set_free(&s->success_status);
367
368 /* This will leak a process, but at least no memory or any of
369 * our resources */
370 service_unwatch_main_pid(s);
371 service_unwatch_control_pid(s);
372 service_unwatch_pid_file(s);
373
374 if (s->bus_name) {
375 unit_unwatch_bus_name(u, s->bus_name);
376 s->bus_name = mfree(s->bus_name);
377 }
378
379 s->bus_name_owner = mfree(s->bus_name_owner);
380
381 s->usb_function_descriptors = mfree(s->usb_function_descriptors);
382 s->usb_function_strings = mfree(s->usb_function_strings);
383
384 service_close_socket_fd(s);
385 s->peer = socket_peer_unref(s->peer);
386
387 unit_ref_unset(&s->accept_socket);
388
389 service_stop_watchdog(s);
390
391 s->timer_event_source = sd_event_source_unref(s->timer_event_source);
392
393 service_release_resources(u);
394 }
395
396 static int on_fd_store_io(sd_event_source *e, int fd, uint32_t revents, void *userdata) {
397 ServiceFDStore *fs = userdata;
398
399 assert(e);
400 assert(fs);
401
402 /* If we get either EPOLLHUP or EPOLLERR, it's time to remove this entry from the fd store */
403 log_unit_debug(UNIT(fs->service),
404 "Received %s on stored fd %d (%s), closing.",
405 revents & EPOLLERR ? "EPOLLERR" : "EPOLLHUP",
406 fs->fd, strna(fs->fdname));
407 service_fd_store_unlink(fs);
408 return 0;
409 }
410
411 static int service_add_fd_store(Service *s, int fd, const char *name) {
412 ServiceFDStore *fs;
413 int r;
414
415 /* fd is always consumed if we return >= 0 */
416
417 assert(s);
418 assert(fd >= 0);
419
420 if (s->n_fd_store >= s->n_fd_store_max)
421 return -EXFULL; /* Our store is full.
422 * Use this errno rather than E[NM]FILE to distinguish from
423 * the case where systemd itself hits the file limit. */
424
425 LIST_FOREACH(fd_store, fs, s->fd_store) {
426 r = same_fd(fs->fd, fd);
427 if (r < 0)
428 return r;
429 if (r > 0) {
430 safe_close(fd);
431 return 0; /* fd already included */
432 }
433 }
434
435 fs = new0(ServiceFDStore, 1);
436 if (!fs)
437 return -ENOMEM;
438
439 fs->fd = fd;
440 fs->service = s;
441 fs->fdname = strdup(name ?: "stored");
442 if (!fs->fdname) {
443 free(fs);
444 return -ENOMEM;
445 }
446
447 r = sd_event_add_io(UNIT(s)->manager->event, &fs->event_source, fd, 0, on_fd_store_io, fs);
448 if (r < 0 && r != -EPERM) { /* EPERM indicates fds that aren't pollable, which is OK */
449 free(fs->fdname);
450 free(fs);
451 return r;
452 } else if (r >= 0)
453 (void) sd_event_source_set_description(fs->event_source, "service-fd-store");
454
455 LIST_PREPEND(fd_store, s->fd_store, fs);
456 s->n_fd_store++;
457
458 return 1; /* fd newly stored */
459 }
460
461 static int service_add_fd_store_set(Service *s, FDSet *fds, const char *name) {
462 int r;
463
464 assert(s);
465
466 while (fdset_size(fds) > 0) {
467 _cleanup_close_ int fd = -1;
468
469 fd = fdset_steal_first(fds);
470 if (fd < 0)
471 break;
472
473 r = service_add_fd_store(s, fd, name);
474 if (r == -EXFULL)
475 return log_unit_warning_errno(UNIT(s), r,
476 "Cannot store more fds than FileDescriptorStoreMax=%u, closing remaining.",
477 s->n_fd_store_max);
478 if (r < 0)
479 return log_unit_error_errno(UNIT(s), r, "Failed to add fd to store: %m");
480 if (r > 0)
481 log_unit_debug(UNIT(s), "Added fd %u (%s) to fd store.", fd, strna(name));
482 fd = -1;
483 }
484
485 return 0;
486 }
487
488 static void service_remove_fd_store(Service *s, const char *name) {
489 ServiceFDStore *fs, *n;
490
491 assert(s);
492 assert(name);
493
494 LIST_FOREACH_SAFE(fd_store, fs, n, s->fd_store) {
495 if (!streq(fs->fdname, name))
496 continue;
497
498 log_unit_debug(UNIT(s), "Got explicit request to remove fd %i (%s), closing.", fs->fd, name);
499 service_fd_store_unlink(fs);
500 }
501 }
502
503 static int service_arm_timer(Service *s, usec_t usec) {
504 int r;
505
506 assert(s);
507
508 if (s->timer_event_source) {
509 r = sd_event_source_set_time(s->timer_event_source, usec);
510 if (r < 0)
511 return r;
512
513 return sd_event_source_set_enabled(s->timer_event_source, SD_EVENT_ONESHOT);
514 }
515
516 if (usec == USEC_INFINITY)
517 return 0;
518
519 r = sd_event_add_time(
520 UNIT(s)->manager->event,
521 &s->timer_event_source,
522 CLOCK_MONOTONIC,
523 usec, 0,
524 service_dispatch_timer, s);
525 if (r < 0)
526 return r;
527
528 (void) sd_event_source_set_description(s->timer_event_source, "service-timer");
529
530 return 0;
531 }
532
533 static int service_verify(Service *s) {
534 assert(s);
535
536 if (UNIT(s)->load_state != UNIT_LOADED)
537 return 0;
538
539 if (!s->exec_command[SERVICE_EXEC_START] && !s->exec_command[SERVICE_EXEC_STOP]) {
540 log_unit_error(UNIT(s), "Service lacks both ExecStart= and ExecStop= setting. Refusing.");
541 return -ENOEXEC;
542 }
543
544 if (s->type != SERVICE_ONESHOT && !s->exec_command[SERVICE_EXEC_START]) {
545 log_unit_error(UNIT(s), "Service has no ExecStart= setting, which is only allowed for Type=oneshot services. Refusing.");
546 return -ENOEXEC;
547 }
548
549 if (!s->remain_after_exit && !s->exec_command[SERVICE_EXEC_START]) {
550 log_unit_error(UNIT(s), "Service has no ExecStart= setting, which is only allowed for RemainAfterExit=yes services. Refusing.");
551 return -ENOEXEC;
552 }
553
554 if (s->type != SERVICE_ONESHOT && s->exec_command[SERVICE_EXEC_START]->command_next) {
555 log_unit_error(UNIT(s), "Service has more than one ExecStart= setting, which is only allowed for Type=oneshot services. Refusing.");
556 return -ENOEXEC;
557 }
558
559 if (s->type == SERVICE_ONESHOT && s->restart != SERVICE_RESTART_NO) {
560 log_unit_error(UNIT(s), "Service has Restart= setting other than no, which isn't allowed for Type=oneshot services. Refusing.");
561 return -ENOEXEC;
562 }
563
564 if (s->type == SERVICE_ONESHOT && !exit_status_set_is_empty(&s->restart_force_status)) {
565 log_unit_error(UNIT(s), "Service has RestartForceStatus= set, which isn't allowed for Type=oneshot services. Refusing.");
566 return -ENOEXEC;
567 }
568
569 if (s->type == SERVICE_DBUS && !s->bus_name) {
570 log_unit_error(UNIT(s), "Service is of type D-Bus but no D-Bus service name has been specified. Refusing.");
571 return -ENOEXEC;
572 }
573
574 if (s->bus_name && s->type != SERVICE_DBUS)
575 log_unit_warning(UNIT(s), "Service has a D-Bus service name specified, but is not of type dbus. Ignoring.");
576
577 if (s->exec_context.pam_name && !IN_SET(s->kill_context.kill_mode, KILL_CONTROL_GROUP, KILL_MIXED)) {
578 log_unit_error(UNIT(s), "Service has PAM enabled. Kill mode must be set to 'control-group' or 'mixed'. Refusing.");
579 return -ENOEXEC;
580 }
581
582 if (s->usb_function_descriptors && !s->usb_function_strings)
583 log_unit_warning(UNIT(s), "Service has USBFunctionDescriptors= setting, but no USBFunctionStrings=. Ignoring.");
584
585 if (!s->usb_function_descriptors && s->usb_function_strings)
586 log_unit_warning(UNIT(s), "Service has USBFunctionStrings= setting, but no USBFunctionDescriptors=. Ignoring.");
587
588 if (s->runtime_max_usec != USEC_INFINITY && s->type == SERVICE_ONESHOT)
589 log_unit_warning(UNIT(s), "MaxRuntimeSec= has no effect in combination with Type=oneshot. Ignoring.");
590
591 return 0;
592 }
593
594 static int service_add_default_dependencies(Service *s) {
595 int r;
596
597 assert(s);
598
599 if (!UNIT(s)->default_dependencies)
600 return 0;
601
602 /* Add a number of automatic dependencies useful for the
603 * majority of services. */
604
605 if (MANAGER_IS_SYSTEM(UNIT(s)->manager)) {
606 /* First, pull in the really early boot stuff, and
607 * require it, so that we fail if we can't acquire
608 * it. */
609
610 r = unit_add_two_dependencies_by_name(UNIT(s), UNIT_AFTER, UNIT_REQUIRES, SPECIAL_SYSINIT_TARGET, NULL, true, UNIT_DEPENDENCY_DEFAULT);
611 if (r < 0)
612 return r;
613 } else {
614
615 /* In the --user instance there's no sysinit.target,
616 * in that case require basic.target instead. */
617
618 r = unit_add_dependency_by_name(UNIT(s), UNIT_REQUIRES, SPECIAL_BASIC_TARGET, NULL, true, UNIT_DEPENDENCY_DEFAULT);
619 if (r < 0)
620 return r;
621 }
622
623 /* Second, if the rest of the base system is in the same
624 * transaction, order us after it, but do not pull it in or
625 * even require it. */
626 r = unit_add_dependency_by_name(UNIT(s), UNIT_AFTER, SPECIAL_BASIC_TARGET, NULL, true, UNIT_DEPENDENCY_DEFAULT);
627 if (r < 0)
628 return r;
629
630 /* Third, add us in for normal shutdown. */
631 return unit_add_two_dependencies_by_name(UNIT(s), UNIT_BEFORE, UNIT_CONFLICTS, SPECIAL_SHUTDOWN_TARGET, NULL, true, UNIT_DEPENDENCY_DEFAULT);
632 }
633
634 static void service_fix_output(Service *s) {
635 assert(s);
636
637 /* If nothing has been explicitly configured, patch default output in. If input is socket/tty we avoid this
638 * however, since in that case we want output to default to the same place as we read input from. */
639
640 if (s->exec_context.std_error == EXEC_OUTPUT_INHERIT &&
641 s->exec_context.std_output == EXEC_OUTPUT_INHERIT &&
642 s->exec_context.std_input == EXEC_INPUT_NULL)
643 s->exec_context.std_error = UNIT(s)->manager->default_std_error;
644
645 if (s->exec_context.std_output == EXEC_OUTPUT_INHERIT &&
646 s->exec_context.std_input == EXEC_INPUT_NULL)
647 s->exec_context.std_output = UNIT(s)->manager->default_std_output;
648
649 if (s->exec_context.std_input == EXEC_INPUT_NULL &&
650 s->exec_context.stdin_data_size > 0)
651 s->exec_context.std_input = EXEC_INPUT_DATA;
652 }
653
654 static int service_setup_bus_name(Service *s) {
655 int r;
656
657 assert(s);
658
659 if (!s->bus_name)
660 return 0;
661
662 r = unit_add_dependency_by_name(UNIT(s), UNIT_REQUIRES, SPECIAL_DBUS_SOCKET, NULL, true, UNIT_DEPENDENCY_FILE);
663 if (r < 0)
664 return log_unit_error_errno(UNIT(s), r, "Failed to add dependency on " SPECIAL_DBUS_SOCKET ": %m");
665
666 /* We always want to be ordered against dbus.socket if both are in the transaction. */
667 r = unit_add_dependency_by_name(UNIT(s), UNIT_AFTER, SPECIAL_DBUS_SOCKET, NULL, true, UNIT_DEPENDENCY_FILE);
668 if (r < 0)
669 return log_unit_error_errno(UNIT(s), r, "Failed to add dependency on " SPECIAL_DBUS_SOCKET ": %m");
670
671 r = unit_watch_bus_name(UNIT(s), s->bus_name);
672 if (r == -EEXIST)
673 return log_unit_error_errno(UNIT(s), r, "Two services allocated for the same bus name %s, refusing operation.", s->bus_name);
674 if (r < 0)
675 return log_unit_error_errno(UNIT(s), r, "Cannot watch bus name %s: %m", s->bus_name);
676
677 return 0;
678 }
679
680 static int service_add_extras(Service *s) {
681 int r;
682
683 assert(s);
684
685 if (s->type == _SERVICE_TYPE_INVALID) {
686 /* Figure out a type automatically */
687 if (s->bus_name)
688 s->type = SERVICE_DBUS;
689 else if (s->exec_command[SERVICE_EXEC_START])
690 s->type = SERVICE_SIMPLE;
691 else
692 s->type = SERVICE_ONESHOT;
693 }
694
695 /* Oneshot services have disabled start timeout by default */
696 if (s->type == SERVICE_ONESHOT && !s->start_timeout_defined)
697 s->timeout_start_usec = USEC_INFINITY;
698
699 service_fix_output(s);
700
701 r = unit_patch_contexts(UNIT(s));
702 if (r < 0)
703 return r;
704
705 r = unit_add_exec_dependencies(UNIT(s), &s->exec_context);
706 if (r < 0)
707 return r;
708
709 r = unit_set_default_slice(UNIT(s));
710 if (r < 0)
711 return r;
712
713 /* If the service needs the notify socket, let's enable it automatically. */
714 if (s->notify_access == NOTIFY_NONE &&
715 (s->type == SERVICE_NOTIFY || s->watchdog_usec > 0 || s->n_fd_store_max > 0))
716 s->notify_access = NOTIFY_MAIN;
717
718 r = service_add_default_dependencies(s);
719 if (r < 0)
720 return r;
721
722 r = service_setup_bus_name(s);
723 if (r < 0)
724 return r;
725
726 return 0;
727 }
728
729 static int service_load(Unit *u) {
730 Service *s = SERVICE(u);
731 int r;
732
733 assert(s);
734
735 /* Load a .service file */
736 r = unit_load_fragment(u);
737 if (r < 0)
738 return r;
739
740 /* Still nothing found? Then let's give up */
741 if (u->load_state == UNIT_STUB)
742 return -ENOENT;
743
744 /* This is a new unit? Then let's add in some extras */
745 if (u->load_state == UNIT_LOADED) {
746
747 /* We were able to load something, then let's add in
748 * the dropin directories. */
749 r = unit_load_dropin(u);
750 if (r < 0)
751 return r;
752
753 /* This is a new unit? Then let's add in some
754 * extras */
755 r = service_add_extras(s);
756 if (r < 0)
757 return r;
758 }
759
760 return service_verify(s);
761 }
762
763 static void service_dump(Unit *u, FILE *f, const char *prefix) {
764 char buf_restart[FORMAT_TIMESPAN_MAX], buf_start[FORMAT_TIMESPAN_MAX], buf_stop[FORMAT_TIMESPAN_MAX];
765 char buf_runtime[FORMAT_TIMESPAN_MAX], buf_watchdog[FORMAT_TIMESPAN_MAX];
766 ServiceExecCommand c;
767 Service *s = SERVICE(u);
768 const char *prefix2;
769
770 assert(s);
771
772 prefix = strempty(prefix);
773 prefix2 = strjoina(prefix, "\t");
774
775 fprintf(f,
776 "%sService State: %s\n"
777 "%sResult: %s\n"
778 "%sReload Result: %s\n"
779 "%sPermissionsStartOnly: %s\n"
780 "%sRootDirectoryStartOnly: %s\n"
781 "%sRemainAfterExit: %s\n"
782 "%sGuessMainPID: %s\n"
783 "%sType: %s\n"
784 "%sRestart: %s\n"
785 "%sNotifyAccess: %s\n"
786 "%sNotifyState: %s\n",
787 prefix, service_state_to_string(s->state),
788 prefix, service_result_to_string(s->result),
789 prefix, service_result_to_string(s->reload_result),
790 prefix, yes_no(s->permissions_start_only),
791 prefix, yes_no(s->root_directory_start_only),
792 prefix, yes_no(s->remain_after_exit),
793 prefix, yes_no(s->guess_main_pid),
794 prefix, service_type_to_string(s->type),
795 prefix, service_restart_to_string(s->restart),
796 prefix, notify_access_to_string(s->notify_access),
797 prefix, notify_state_to_string(s->notify_state));
798
799 if (s->control_pid > 0)
800 fprintf(f,
801 "%sControl PID: "PID_FMT"\n",
802 prefix, s->control_pid);
803
804 if (s->main_pid > 0)
805 fprintf(f,
806 "%sMain PID: "PID_FMT"\n"
807 "%sMain PID Known: %s\n"
808 "%sMain PID Alien: %s\n",
809 prefix, s->main_pid,
810 prefix, yes_no(s->main_pid_known),
811 prefix, yes_no(s->main_pid_alien));
812
813 if (s->pid_file)
814 fprintf(f,
815 "%sPIDFile: %s\n",
816 prefix, s->pid_file);
817
818 if (s->bus_name)
819 fprintf(f,
820 "%sBusName: %s\n"
821 "%sBus Name Good: %s\n",
822 prefix, s->bus_name,
823 prefix, yes_no(s->bus_name_good));
824
825 if (UNIT_ISSET(s->accept_socket))
826 fprintf(f,
827 "%sAccept Socket: %s\n",
828 prefix, UNIT_DEREF(s->accept_socket)->id);
829
830 fprintf(f,
831 "%sRestartSec: %s\n"
832 "%sTimeoutStartSec: %s\n"
833 "%sTimeoutStopSec: %s\n"
834 "%sRuntimeMaxSec: %s\n"
835 "%sWatchdogSec: %s\n",
836 prefix, format_timespan(buf_restart, sizeof(buf_restart), s->restart_usec, USEC_PER_SEC),
837 prefix, format_timespan(buf_start, sizeof(buf_start), s->timeout_start_usec, USEC_PER_SEC),
838 prefix, format_timespan(buf_stop, sizeof(buf_stop), s->timeout_stop_usec, USEC_PER_SEC),
839 prefix, format_timespan(buf_runtime, sizeof(buf_runtime), s->runtime_max_usec, USEC_PER_SEC),
840 prefix, format_timespan(buf_watchdog, sizeof(buf_watchdog), s->watchdog_usec, USEC_PER_SEC));
841
842 kill_context_dump(&s->kill_context, f, prefix);
843 exec_context_dump(&s->exec_context, f, prefix);
844
845 for (c = 0; c < _SERVICE_EXEC_COMMAND_MAX; c++) {
846
847 if (!s->exec_command[c])
848 continue;
849
850 fprintf(f, "%s-> %s:\n",
851 prefix, service_exec_command_to_string(c));
852
853 exec_command_dump_list(s->exec_command[c], f, prefix2);
854 }
855
856 if (s->status_text)
857 fprintf(f, "%sStatus Text: %s\n",
858 prefix, s->status_text);
859
860 if (s->n_fd_store_max > 0)
861 fprintf(f,
862 "%sFile Descriptor Store Max: %u\n"
863 "%sFile Descriptor Store Current: %zu\n",
864 prefix, s->n_fd_store_max,
865 prefix, s->n_fd_store);
866
867 cgroup_context_dump(&s->cgroup_context, f, prefix);
868 }
869
870 static int service_is_suitable_main_pid(Service *s, pid_t pid, int prio) {
871 Unit *owner;
872
873 assert(s);
874 assert(pid_is_valid(pid));
875
876 /* Checks whether the specified PID is suitable as main PID for this service. returns negative if not, 0 if the
877 * PID is questionnable but should be accepted if the source of configuration is trusted. > 0 if the PID is
878 * good */
879
880 if (pid == getpid_cached() || pid == 1) {
881 log_unit_full(UNIT(s), prio, 0, "New main PID "PID_FMT" is the manager, refusing.", pid);
882 return -EPERM;
883 }
884
885 if (pid == s->control_pid) {
886 log_unit_full(UNIT(s), prio, 0, "New main PID "PID_FMT" is the control process, refusing.", pid);
887 return -EPERM;
888 }
889
890 if (!pid_is_alive(pid)) {
891 log_unit_full(UNIT(s), prio, 0, "New main PID "PID_FMT" does not exist or is a zombie.", pid);
892 return -ESRCH;
893 }
894
895 owner = manager_get_unit_by_pid(UNIT(s)->manager, pid);
896 if (owner == UNIT(s)) {
897 log_unit_debug(UNIT(s), "New main PID "PID_FMT" belongs to service, we are happy.", pid);
898 return 1; /* Yay, it's definitely a good PID */
899 }
900
901 return 0; /* Hmm it's a suspicious PID, let's accept it if configuration source is trusted */
902 }
903
904 static int service_load_pid_file(Service *s, bool may_warn) {
905 char procfs[STRLEN("/proc/self/fd/") + DECIMAL_STR_MAX(int)];
906 bool questionable_pid_file = false;
907 _cleanup_free_ char *k = NULL;
908 _cleanup_close_ int fd = -1;
909 int r, prio;
910 pid_t pid;
911
912 assert(s);
913
914 if (!s->pid_file)
915 return -ENOENT;
916
917 prio = may_warn ? LOG_INFO : LOG_DEBUG;
918
919 fd = chase_symlinks(s->pid_file, NULL, CHASE_OPEN|CHASE_SAFE, NULL);
920 if (fd == -EPERM) {
921 log_unit_full(UNIT(s), LOG_DEBUG, fd, "Permission denied while opening PID file or potentially unsafe symlink chain, will now retry with relaxed checks: %s", s->pid_file);
922
923 questionable_pid_file = true;
924
925 fd = chase_symlinks(s->pid_file, NULL, CHASE_OPEN, NULL);
926 }
927 if (fd < 0)
928 return log_unit_full(UNIT(s), prio, fd, "Can't open PID file %s (yet?) after %s: %m", s->pid_file, service_state_to_string(s->state));
929
930 /* Let's read the PID file now that we chased it down. But we need to convert the O_PATH fd chase_symlinks() returned us into a proper fd first. */
931 xsprintf(procfs, "/proc/self/fd/%i", fd);
932 r = read_one_line_file(procfs, &k);
933 if (r < 0)
934 return log_unit_error_errno(UNIT(s), r, "Can't convert PID files %s O_PATH file descriptor to proper file descriptor: %m", s->pid_file);
935
936 r = parse_pid(k, &pid);
937 if (r < 0)
938 return log_unit_full(UNIT(s), prio, r, "Failed to parse PID from file %s: %m", s->pid_file);
939
940 if (s->main_pid_known && pid == s->main_pid)
941 return 0;
942
943 r = service_is_suitable_main_pid(s, pid, prio);
944 if (r < 0)
945 return r;
946 if (r == 0) {
947 struct stat st;
948
949 if (questionable_pid_file) {
950 log_unit_error(UNIT(s), "Refusing to accept PID outside of service control group, acquired through unsafe symlink chain: %s", s->pid_file);
951 return -EPERM;
952 }
953
954 /* Hmm, it's not clear if the new main PID is safe. Let's allow this if the PID file is owned by root */
955
956 if (fstat(fd, &st) < 0)
957 return log_unit_error_errno(UNIT(s), errno, "Failed to fstat() PID file O_PATH fd: %m");
958
959 if (st.st_uid != 0) {
960 log_unit_error(UNIT(s), "New main PID "PID_FMT" does not belong to service, and PID file is not owned by root. Refusing.", pid);
961 return -EPERM;
962 }
963
964 log_unit_debug(UNIT(s), "New main PID "PID_FMT" does not belong to service, but we'll accept it since PID file is owned by root.", pid);
965 }
966
967 if (s->main_pid_known) {
968 log_unit_debug(UNIT(s), "Main PID changing: "PID_FMT" -> "PID_FMT, s->main_pid, pid);
969
970 service_unwatch_main_pid(s);
971 s->main_pid_known = false;
972 } else
973 log_unit_debug(UNIT(s), "Main PID loaded: "PID_FMT, pid);
974
975 r = service_set_main_pid(s, pid);
976 if (r < 0)
977 return r;
978
979 r = unit_watch_pid(UNIT(s), pid);
980 if (r < 0) /* FIXME: we need to do something here */
981 return log_unit_warning_errno(UNIT(s), r, "Failed to watch PID "PID_FMT" for service: %m", pid);
982
983 return 1;
984 }
985
986 static void service_search_main_pid(Service *s) {
987 pid_t pid = 0;
988 int r;
989
990 assert(s);
991
992 /* If we know it anyway, don't ever fallback to unreliable
993 * heuristics */
994 if (s->main_pid_known)
995 return;
996
997 if (!s->guess_main_pid)
998 return;
999
1000 assert(s->main_pid <= 0);
1001
1002 if (unit_search_main_pid(UNIT(s), &pid) < 0)
1003 return;
1004
1005 log_unit_debug(UNIT(s), "Main PID guessed: "PID_FMT, pid);
1006 if (service_set_main_pid(s, pid) < 0)
1007 return;
1008
1009 r = unit_watch_pid(UNIT(s), pid);
1010 if (r < 0)
1011 /* FIXME: we need to do something here */
1012 log_unit_warning_errno(UNIT(s), r, "Failed to watch PID "PID_FMT" from: %m", pid);
1013 }
1014
1015 static void service_set_state(Service *s, ServiceState state) {
1016 ServiceState old_state;
1017 const UnitActiveState *table;
1018
1019 assert(s);
1020
1021 table = s->type == SERVICE_IDLE ? state_translation_table_idle : state_translation_table;
1022
1023 old_state = s->state;
1024 s->state = state;
1025
1026 service_unwatch_pid_file(s);
1027
1028 if (!IN_SET(state,
1029 SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST,
1030 SERVICE_RUNNING,
1031 SERVICE_RELOAD,
1032 SERVICE_STOP, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
1033 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL,
1034 SERVICE_AUTO_RESTART))
1035 s->timer_event_source = sd_event_source_unref(s->timer_event_source);
1036
1037 if (!IN_SET(state,
1038 SERVICE_START, SERVICE_START_POST,
1039 SERVICE_RUNNING, SERVICE_RELOAD,
1040 SERVICE_STOP, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
1041 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL)) {
1042 service_unwatch_main_pid(s);
1043 s->main_command = NULL;
1044 }
1045
1046 if (!IN_SET(state,
1047 SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST,
1048 SERVICE_RELOAD,
1049 SERVICE_STOP, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
1050 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL)) {
1051 service_unwatch_control_pid(s);
1052 s->control_command = NULL;
1053 s->control_command_id = _SERVICE_EXEC_COMMAND_INVALID;
1054 }
1055
1056 if (IN_SET(state, SERVICE_DEAD, SERVICE_FAILED, SERVICE_AUTO_RESTART)) {
1057 unit_unwatch_all_pids(UNIT(s));
1058 unit_dequeue_rewatch_pids(UNIT(s));
1059 }
1060
1061 if (!IN_SET(state,
1062 SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST,
1063 SERVICE_RUNNING, SERVICE_RELOAD,
1064 SERVICE_STOP, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
1065 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL) &&
1066 !(state == SERVICE_DEAD && UNIT(s)->job))
1067 service_close_socket_fd(s);
1068
1069 if (!IN_SET(state, SERVICE_START_POST, SERVICE_RUNNING, SERVICE_RELOAD))
1070 service_stop_watchdog(s);
1071
1072 /* For the inactive states unit_notify() will trim the cgroup,
1073 * but for exit we have to do that ourselves... */
1074 if (state == SERVICE_EXITED && !MANAGER_IS_RELOADING(UNIT(s)->manager))
1075 unit_prune_cgroup(UNIT(s));
1076
1077 if (old_state != state)
1078 log_unit_debug(UNIT(s), "Changed %s -> %s", service_state_to_string(old_state), service_state_to_string(state));
1079
1080 unit_notify(UNIT(s), table[old_state], table[state],
1081 (s->reload_result == SERVICE_SUCCESS ? 0 : UNIT_NOTIFY_RELOAD_FAILURE) |
1082 (s->will_auto_restart ? UNIT_NOTIFY_WILL_AUTO_RESTART : 0));
1083 }
1084
1085 static usec_t service_coldplug_timeout(Service *s) {
1086 assert(s);
1087
1088 switch (s->deserialized_state) {
1089
1090 case SERVICE_START_PRE:
1091 case SERVICE_START:
1092 case SERVICE_START_POST:
1093 case SERVICE_RELOAD:
1094 return usec_add(UNIT(s)->state_change_timestamp.monotonic, s->timeout_start_usec);
1095
1096 case SERVICE_RUNNING:
1097 return usec_add(UNIT(s)->active_enter_timestamp.monotonic, s->runtime_max_usec);
1098
1099 case SERVICE_STOP:
1100 case SERVICE_STOP_SIGABRT:
1101 case SERVICE_STOP_SIGTERM:
1102 case SERVICE_STOP_SIGKILL:
1103 case SERVICE_STOP_POST:
1104 case SERVICE_FINAL_SIGTERM:
1105 case SERVICE_FINAL_SIGKILL:
1106 return usec_add(UNIT(s)->state_change_timestamp.monotonic, s->timeout_stop_usec);
1107
1108 case SERVICE_AUTO_RESTART:
1109 return usec_add(UNIT(s)->inactive_enter_timestamp.monotonic, s->restart_usec);
1110
1111 default:
1112 return USEC_INFINITY;
1113 }
1114 }
1115
1116 static int service_coldplug(Unit *u) {
1117 Service *s = SERVICE(u);
1118 int r;
1119
1120 assert(s);
1121 assert(s->state == SERVICE_DEAD);
1122
1123 if (s->deserialized_state == s->state)
1124 return 0;
1125
1126 r = service_arm_timer(s, service_coldplug_timeout(s));
1127 if (r < 0)
1128 return r;
1129
1130 if (s->main_pid > 0 &&
1131 pid_is_unwaited(s->main_pid) &&
1132 (IN_SET(s->deserialized_state,
1133 SERVICE_START, SERVICE_START_POST,
1134 SERVICE_RUNNING, SERVICE_RELOAD,
1135 SERVICE_STOP, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
1136 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL))) {
1137 r = unit_watch_pid(UNIT(s), s->main_pid);
1138 if (r < 0)
1139 return r;
1140 }
1141
1142 if (s->control_pid > 0 &&
1143 pid_is_unwaited(s->control_pid) &&
1144 IN_SET(s->deserialized_state,
1145 SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST,
1146 SERVICE_RELOAD,
1147 SERVICE_STOP, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
1148 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL)) {
1149 r = unit_watch_pid(UNIT(s), s->control_pid);
1150 if (r < 0)
1151 return r;
1152 }
1153
1154 if (!IN_SET(s->deserialized_state, SERVICE_DEAD, SERVICE_FAILED, SERVICE_AUTO_RESTART)) {
1155 (void) unit_enqueue_rewatch_pids(u);
1156 (void) unit_setup_dynamic_creds(u);
1157 (void) unit_setup_exec_runtime(u);
1158 }
1159
1160 if (IN_SET(s->deserialized_state, SERVICE_START_POST, SERVICE_RUNNING, SERVICE_RELOAD))
1161 service_start_watchdog(s);
1162
1163 if (UNIT_ISSET(s->accept_socket)) {
1164 Socket* socket = SOCKET(UNIT_DEREF(s->accept_socket));
1165
1166 if (socket->max_connections_per_source > 0) {
1167 SocketPeer *peer;
1168
1169 /* Make a best-effort attempt at bumping the connection count */
1170 if (socket_acquire_peer(socket, s->socket_fd, &peer) > 0) {
1171 socket_peer_unref(s->peer);
1172 s->peer = peer;
1173 }
1174 }
1175 }
1176
1177 service_set_state(s, s->deserialized_state);
1178 return 0;
1179 }
1180
1181 static int service_collect_fds(Service *s,
1182 int **fds,
1183 char ***fd_names,
1184 unsigned *n_storage_fds,
1185 unsigned *n_socket_fds) {
1186
1187 _cleanup_strv_free_ char **rfd_names = NULL;
1188 _cleanup_free_ int *rfds = NULL;
1189 unsigned rn_socket_fds = 0, rn_storage_fds = 0;
1190 int r;
1191
1192 assert(s);
1193 assert(fds);
1194 assert(fd_names);
1195 assert(n_socket_fds);
1196
1197 if (s->socket_fd >= 0) {
1198
1199 /* Pass the per-connection socket */
1200
1201 rfds = new(int, 1);
1202 if (!rfds)
1203 return -ENOMEM;
1204 rfds[0] = s->socket_fd;
1205
1206 rfd_names = strv_new("connection", NULL);
1207 if (!rfd_names)
1208 return -ENOMEM;
1209
1210 rn_socket_fds = 1;
1211 } else {
1212 Iterator i;
1213 void *v;
1214 Unit *u;
1215
1216 /* Pass all our configured sockets for singleton services */
1217
1218 HASHMAP_FOREACH_KEY(v, u, UNIT(s)->dependencies[UNIT_TRIGGERED_BY], i) {
1219 _cleanup_free_ int *cfds = NULL;
1220 Socket *sock;
1221 int cn_fds;
1222
1223 if (u->type != UNIT_SOCKET)
1224 continue;
1225
1226 sock = SOCKET(u);
1227
1228 cn_fds = socket_collect_fds(sock, &cfds);
1229 if (cn_fds < 0)
1230 return cn_fds;
1231
1232 if (cn_fds <= 0)
1233 continue;
1234
1235 if (!rfds) {
1236 rfds = TAKE_PTR(cfds);
1237 rn_socket_fds = cn_fds;
1238 } else {
1239 int *t;
1240
1241 t = reallocarray(rfds, rn_socket_fds + cn_fds, sizeof(int));
1242 if (!t)
1243 return -ENOMEM;
1244
1245 memcpy(t + rn_socket_fds, cfds, cn_fds * sizeof(int));
1246
1247 rfds = t;
1248 rn_socket_fds += cn_fds;
1249 }
1250
1251 r = strv_extend_n(&rfd_names, socket_fdname(sock), cn_fds);
1252 if (r < 0)
1253 return r;
1254 }
1255 }
1256
1257 if (s->n_fd_store > 0) {
1258 ServiceFDStore *fs;
1259 unsigned n_fds;
1260 char **nl;
1261 int *t;
1262
1263 t = reallocarray(rfds, rn_socket_fds + s->n_fd_store, sizeof(int));
1264 if (!t)
1265 return -ENOMEM;
1266
1267 rfds = t;
1268
1269 nl = reallocarray(rfd_names, rn_socket_fds + s->n_fd_store + 1, sizeof(char *));
1270 if (!nl)
1271 return -ENOMEM;
1272
1273 rfd_names = nl;
1274 n_fds = rn_socket_fds;
1275
1276 LIST_FOREACH(fd_store, fs, s->fd_store) {
1277 rfds[n_fds] = fs->fd;
1278 rfd_names[n_fds] = strdup(strempty(fs->fdname));
1279 if (!rfd_names[n_fds])
1280 return -ENOMEM;
1281
1282 rn_storage_fds++;
1283 n_fds++;
1284 }
1285
1286 rfd_names[n_fds] = NULL;
1287 }
1288
1289 *fds = TAKE_PTR(rfds);
1290 *fd_names = TAKE_PTR(rfd_names);
1291 *n_socket_fds = rn_socket_fds;
1292 *n_storage_fds = rn_storage_fds;
1293
1294 return 0;
1295 }
1296
1297 static bool service_exec_needs_notify_socket(Service *s, ExecFlags flags) {
1298 assert(s);
1299
1300 /* Notifications are accepted depending on the process and
1301 * the access setting of the service:
1302 * process: \ access: NONE MAIN EXEC ALL
1303 * main no yes yes yes
1304 * control no no yes yes
1305 * other (forked) no no no yes */
1306
1307 if (flags & EXEC_IS_CONTROL)
1308 /* A control process */
1309 return IN_SET(s->notify_access, NOTIFY_EXEC, NOTIFY_ALL);
1310
1311 /* We only spawn main processes and control processes, so any
1312 * process that is not a control process is a main process */
1313 return s->notify_access != NOTIFY_NONE;
1314 }
1315
1316 static int service_spawn(
1317 Service *s,
1318 ExecCommand *c,
1319 usec_t timeout,
1320 ExecFlags flags,
1321 pid_t *_pid) {
1322
1323 ExecParameters exec_params = {
1324 .flags = flags,
1325 .stdin_fd = -1,
1326 .stdout_fd = -1,
1327 .stderr_fd = -1,
1328 };
1329 _cleanup_strv_free_ char **final_env = NULL, **our_env = NULL, **fd_names = NULL;
1330 unsigned n_storage_fds = 0, n_socket_fds = 0, n_env = 0;
1331 _cleanup_free_ int *fds = NULL;
1332 pid_t pid;
1333 int r;
1334
1335 assert(s);
1336 assert(c);
1337 assert(_pid);
1338
1339 r = unit_prepare_exec(UNIT(s));
1340 if (r < 0)
1341 return r;
1342
1343 if (flags & EXEC_IS_CONTROL) {
1344 /* If this is a control process, mask the permissions/chroot application if this is requested. */
1345 if (s->permissions_start_only)
1346 exec_params.flags &= ~EXEC_APPLY_SANDBOXING;
1347 if (s->root_directory_start_only)
1348 exec_params.flags &= ~EXEC_APPLY_CHROOT;
1349 }
1350
1351 if ((flags & EXEC_PASS_FDS) ||
1352 s->exec_context.std_input == EXEC_INPUT_SOCKET ||
1353 s->exec_context.std_output == EXEC_OUTPUT_SOCKET ||
1354 s->exec_context.std_error == EXEC_OUTPUT_SOCKET) {
1355
1356 r = service_collect_fds(s, &fds, &fd_names, &n_storage_fds, &n_socket_fds);
1357 if (r < 0)
1358 return r;
1359
1360 log_unit_debug(UNIT(s), "Passing %i fds to service", n_storage_fds + n_socket_fds);
1361 }
1362
1363 r = service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), timeout));
1364 if (r < 0)
1365 return r;
1366
1367 our_env = new0(char*, 9);
1368 if (!our_env)
1369 return -ENOMEM;
1370
1371 if (service_exec_needs_notify_socket(s, flags))
1372 if (asprintf(our_env + n_env++, "NOTIFY_SOCKET=%s", UNIT(s)->manager->notify_socket) < 0)
1373 return -ENOMEM;
1374
1375 if (s->main_pid > 0)
1376 if (asprintf(our_env + n_env++, "MAINPID="PID_FMT, s->main_pid) < 0)
1377 return -ENOMEM;
1378
1379 if (MANAGER_IS_USER(UNIT(s)->manager))
1380 if (asprintf(our_env + n_env++, "MANAGERPID="PID_FMT, getpid_cached()) < 0)
1381 return -ENOMEM;
1382
1383 if (s->socket_fd >= 0) {
1384 union sockaddr_union sa;
1385 socklen_t salen = sizeof(sa);
1386
1387 /* If this is a per-connection service instance, let's set $REMOTE_ADDR and $REMOTE_PORT to something
1388 * useful. Note that we do this only when we are still connected at this point in time, which we might
1389 * very well not be. Hence we ignore all errors when retrieving peer information (as that might result
1390 * in ENOTCONN), and just use whate we can use. */
1391
1392 if (getpeername(s->socket_fd, &sa.sa, &salen) >= 0 &&
1393 IN_SET(sa.sa.sa_family, AF_INET, AF_INET6, AF_VSOCK)) {
1394
1395 _cleanup_free_ char *addr = NULL;
1396 char *t;
1397 unsigned port;
1398
1399 r = sockaddr_pretty(&sa.sa, salen, true, false, &addr);
1400 if (r < 0)
1401 return r;
1402
1403 t = strappend("REMOTE_ADDR=", addr);
1404 if (!t)
1405 return -ENOMEM;
1406 our_env[n_env++] = t;
1407
1408 r = sockaddr_port(&sa.sa, &port);
1409 if (r < 0)
1410 return r;
1411
1412 if (asprintf(&t, "REMOTE_PORT=%u", port) < 0)
1413 return -ENOMEM;
1414 our_env[n_env++] = t;
1415 }
1416 }
1417
1418 if (flags & EXEC_SETENV_RESULT) {
1419 if (asprintf(our_env + n_env++, "SERVICE_RESULT=%s", service_result_to_string(s->result)) < 0)
1420 return -ENOMEM;
1421
1422 if (s->main_exec_status.pid > 0 &&
1423 dual_timestamp_is_set(&s->main_exec_status.exit_timestamp)) {
1424 if (asprintf(our_env + n_env++, "EXIT_CODE=%s", sigchld_code_to_string(s->main_exec_status.code)) < 0)
1425 return -ENOMEM;
1426
1427 if (s->main_exec_status.code == CLD_EXITED)
1428 r = asprintf(our_env + n_env++, "EXIT_STATUS=%i", s->main_exec_status.status);
1429 else
1430 r = asprintf(our_env + n_env++, "EXIT_STATUS=%s", signal_to_string(s->main_exec_status.status));
1431 if (r < 0)
1432 return -ENOMEM;
1433 }
1434 }
1435
1436 unit_set_exec_params(UNIT(s), &exec_params);
1437
1438 final_env = strv_env_merge(2, exec_params.environment, our_env, NULL);
1439 if (!final_env)
1440 return -ENOMEM;
1441
1442 /* System services should get a new keyring by default. */
1443 SET_FLAG(exec_params.flags, EXEC_NEW_KEYRING, MANAGER_IS_SYSTEM(UNIT(s)->manager));
1444
1445 /* System D-Bus needs nss-systemd disabled, so that we don't deadlock */
1446 SET_FLAG(exec_params.flags, EXEC_NSS_BYPASS_BUS,
1447 MANAGER_IS_SYSTEM(UNIT(s)->manager) && unit_has_name(UNIT(s), SPECIAL_DBUS_SERVICE));
1448
1449 exec_params.argv = c->argv;
1450 exec_params.environment = final_env;
1451 exec_params.fds = fds;
1452 exec_params.fd_names = fd_names;
1453 exec_params.n_storage_fds = n_storage_fds;
1454 exec_params.n_socket_fds = n_socket_fds;
1455 exec_params.watchdog_usec = s->watchdog_usec;
1456 exec_params.selinux_context_net = s->socket_fd_selinux_context_net;
1457 if (s->type == SERVICE_IDLE)
1458 exec_params.idle_pipe = UNIT(s)->manager->idle_pipe;
1459 exec_params.stdin_fd = s->stdin_fd;
1460 exec_params.stdout_fd = s->stdout_fd;
1461 exec_params.stderr_fd = s->stderr_fd;
1462
1463 r = exec_spawn(UNIT(s),
1464 c,
1465 &s->exec_context,
1466 &exec_params,
1467 s->exec_runtime,
1468 &s->dynamic_creds,
1469 &pid);
1470 if (r < 0)
1471 return r;
1472
1473 r = unit_watch_pid(UNIT(s), pid);
1474 if (r < 0) /* FIXME: we need to do something here */
1475 return r;
1476
1477 *_pid = pid;
1478
1479 return 0;
1480 }
1481
1482 static int main_pid_good(Service *s) {
1483 assert(s);
1484
1485 /* Returns 0 if the pid is dead, > 0 if it is good, < 0 if we don't know */
1486
1487 /* If we know the pid file, then let's just check if it is
1488 * still valid */
1489 if (s->main_pid_known) {
1490
1491 /* If it's an alien child let's check if it is still
1492 * alive ... */
1493 if (s->main_pid_alien && s->main_pid > 0)
1494 return pid_is_alive(s->main_pid);
1495
1496 /* .. otherwise assume we'll get a SIGCHLD for it,
1497 * which we really should wait for to collect exit
1498 * status and code */
1499 return s->main_pid > 0;
1500 }
1501
1502 /* We don't know the pid */
1503 return -EAGAIN;
1504 }
1505
1506 static int control_pid_good(Service *s) {
1507 assert(s);
1508
1509 /* Returns 0 if the control PID is dead, > 0 if it is good. We never actually return < 0 here, but in order to
1510 * make this function as similar as possible to main_pid_good() and cgroup_good(), we pretend that < 0 also
1511 * means: we can't figure it out. */
1512
1513 return s->control_pid > 0;
1514 }
1515
1516 static int cgroup_good(Service *s) {
1517 int r;
1518
1519 assert(s);
1520
1521 /* Returns 0 if the cgroup is empty or doesn't exist, > 0 if it is exists and is populated, < 0 if we can't
1522 * figure it out */
1523
1524 if (!UNIT(s)->cgroup_path)
1525 return 0;
1526
1527 r = cg_is_empty_recursive(SYSTEMD_CGROUP_CONTROLLER, UNIT(s)->cgroup_path);
1528 if (r < 0)
1529 return r;
1530
1531 return r == 0;
1532 }
1533
1534 static bool service_shall_restart(Service *s) {
1535 assert(s);
1536
1537 /* Don't restart after manual stops */
1538 if (s->forbid_restart)
1539 return false;
1540
1541 /* Never restart if this is configured as special exception */
1542 if (exit_status_set_test(&s->restart_prevent_status, s->main_exec_status.code, s->main_exec_status.status))
1543 return false;
1544
1545 /* Restart if the exit code/status are configured as restart triggers */
1546 if (exit_status_set_test(&s->restart_force_status, s->main_exec_status.code, s->main_exec_status.status))
1547 return true;
1548
1549 switch (s->restart) {
1550
1551 case SERVICE_RESTART_NO:
1552 return false;
1553
1554 case SERVICE_RESTART_ALWAYS:
1555 return true;
1556
1557 case SERVICE_RESTART_ON_SUCCESS:
1558 return s->result == SERVICE_SUCCESS;
1559
1560 case SERVICE_RESTART_ON_FAILURE:
1561 return s->result != SERVICE_SUCCESS;
1562
1563 case SERVICE_RESTART_ON_ABNORMAL:
1564 return !IN_SET(s->result, SERVICE_SUCCESS, SERVICE_FAILURE_EXIT_CODE);
1565
1566 case SERVICE_RESTART_ON_WATCHDOG:
1567 return s->result == SERVICE_FAILURE_WATCHDOG;
1568
1569 case SERVICE_RESTART_ON_ABORT:
1570 return IN_SET(s->result, SERVICE_FAILURE_SIGNAL, SERVICE_FAILURE_CORE_DUMP);
1571
1572 default:
1573 assert_not_reached("unknown restart setting");
1574 }
1575 }
1576
1577 static bool service_will_restart(Unit *u) {
1578 Service *s = SERVICE(u);
1579
1580 assert(s);
1581
1582 if (s->will_auto_restart)
1583 return true;
1584 if (s->state == SERVICE_AUTO_RESTART)
1585 return true;
1586 if (!UNIT(s)->job)
1587 return false;
1588 if (UNIT(s)->job->type == JOB_START)
1589 return true;
1590
1591 return false;
1592 }
1593
1594 static void service_enter_dead(Service *s, ServiceResult f, bool allow_restart) {
1595 int r;
1596
1597 assert(s);
1598
1599 /* If there's a stop job queued before we enter the DEAD state, we shouldn't act on Restart=, in order to not
1600 * undo what has already been enqueued. */
1601 if (unit_stop_pending(UNIT(s)))
1602 allow_restart = false;
1603
1604 if (s->result == SERVICE_SUCCESS)
1605 s->result = f;
1606
1607 if (s->result != SERVICE_SUCCESS)
1608 log_unit_warning(UNIT(s), "Failed with result '%s'.", service_result_to_string(s->result));
1609
1610 if (allow_restart && service_shall_restart(s))
1611 s->will_auto_restart = true;
1612
1613 /* Make sure service_release_resources() doesn't destroy our FD store, while we are changing through
1614 * SERVICE_FAILED/SERVICE_DEAD before entering into SERVICE_AUTO_RESTART. */
1615 s->n_keep_fd_store ++;
1616
1617 service_set_state(s, s->result != SERVICE_SUCCESS ? SERVICE_FAILED : SERVICE_DEAD);
1618
1619 if (s->will_auto_restart) {
1620 s->will_auto_restart = false;
1621
1622 r = service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), s->restart_usec));
1623 if (r < 0) {
1624 s->n_keep_fd_store--;
1625 goto fail;
1626 }
1627
1628 service_set_state(s, SERVICE_AUTO_RESTART);
1629 } else
1630 /* If we shan't restart, then flush out the restart counter. But don't do that immediately, so that the
1631 * user can still introspect the counter. Do so on the next start. */
1632 s->flush_n_restarts = true;
1633
1634 /* The new state is in effect, let's decrease the fd store ref counter again. Let's also readd us to the GC
1635 * queue, so that the fd store is possibly gc'ed again */
1636 s->n_keep_fd_store--;
1637 unit_add_to_gc_queue(UNIT(s));
1638
1639 /* The next restart might not be a manual stop, hence reset the flag indicating manual stops */
1640 s->forbid_restart = false;
1641
1642 /* We want fresh tmpdirs in case service is started again immediately */
1643 s->exec_runtime = exec_runtime_unref(s->exec_runtime, true);
1644
1645 if (s->exec_context.runtime_directory_preserve_mode == EXEC_PRESERVE_NO ||
1646 (s->exec_context.runtime_directory_preserve_mode == EXEC_PRESERVE_RESTART && !service_will_restart(UNIT(s))))
1647 /* Also, remove the runtime directory */
1648 exec_context_destroy_runtime_directory(&s->exec_context, UNIT(s)->manager->prefix[EXEC_DIRECTORY_RUNTIME]);
1649
1650 /* Get rid of the IPC bits of the user */
1651 unit_unref_uid_gid(UNIT(s), true);
1652
1653 /* Release the user, and destroy it if we are the only remaining owner */
1654 dynamic_creds_destroy(&s->dynamic_creds);
1655
1656 /* Try to delete the pid file. At this point it will be
1657 * out-of-date, and some software might be confused by it, so
1658 * let's remove it. */
1659 if (s->pid_file)
1660 (void) unlink(s->pid_file);
1661
1662 return;
1663
1664 fail:
1665 log_unit_warning_errno(UNIT(s), r, "Failed to run install restart timer: %m");
1666 service_enter_dead(s, SERVICE_FAILURE_RESOURCES, false);
1667 }
1668
1669 static void service_enter_stop_post(Service *s, ServiceResult f) {
1670 int r;
1671 assert(s);
1672
1673 if (s->result == SERVICE_SUCCESS)
1674 s->result = f;
1675
1676 service_unwatch_control_pid(s);
1677
1678 (void) unit_enqueue_rewatch_pids(UNIT(s));
1679
1680 s->control_command = s->exec_command[SERVICE_EXEC_STOP_POST];
1681 if (s->control_command) {
1682 s->control_command_id = SERVICE_EXEC_STOP_POST;
1683
1684 r = service_spawn(s,
1685 s->control_command,
1686 s->timeout_stop_usec,
1687 EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_APPLY_TTY_STDIN|EXEC_IS_CONTROL|EXEC_SETENV_RESULT,
1688 &s->control_pid);
1689 if (r < 0)
1690 goto fail;
1691
1692 service_set_state(s, SERVICE_STOP_POST);
1693 } else
1694 service_enter_signal(s, SERVICE_FINAL_SIGTERM, SERVICE_SUCCESS);
1695
1696 return;
1697
1698 fail:
1699 log_unit_warning_errno(UNIT(s), r, "Failed to run 'stop-post' task: %m");
1700 service_enter_signal(s, SERVICE_FINAL_SIGTERM, SERVICE_FAILURE_RESOURCES);
1701 }
1702
1703 static int state_to_kill_operation(ServiceState state) {
1704 switch (state) {
1705
1706 case SERVICE_STOP_SIGABRT:
1707 return KILL_ABORT;
1708
1709 case SERVICE_STOP_SIGTERM:
1710 case SERVICE_FINAL_SIGTERM:
1711 return KILL_TERMINATE;
1712
1713 case SERVICE_STOP_SIGKILL:
1714 case SERVICE_FINAL_SIGKILL:
1715 return KILL_KILL;
1716
1717 default:
1718 return _KILL_OPERATION_INVALID;
1719 }
1720 }
1721
1722 static void service_enter_signal(Service *s, ServiceState state, ServiceResult f) {
1723 int r;
1724
1725 assert(s);
1726
1727 if (s->result == SERVICE_SUCCESS)
1728 s->result = f;
1729
1730 /* Before sending any signal, make sure we track all members of this cgroup */
1731 (void) unit_watch_all_pids(UNIT(s));
1732
1733 /* Also, enqueue a job that we recheck all our PIDs a bit later, given that it's likely some processes have
1734 * died now */
1735 (void) unit_enqueue_rewatch_pids(UNIT(s));
1736
1737 r = unit_kill_context(
1738 UNIT(s),
1739 &s->kill_context,
1740 state_to_kill_operation(state),
1741 s->main_pid,
1742 s->control_pid,
1743 s->main_pid_alien);
1744 if (r < 0)
1745 goto fail;
1746
1747 if (r > 0) {
1748 r = service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), s->timeout_stop_usec));
1749 if (r < 0)
1750 goto fail;
1751
1752 service_set_state(s, state);
1753 } else if (IN_SET(state, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM) && s->kill_context.send_sigkill)
1754 service_enter_signal(s, SERVICE_STOP_SIGKILL, SERVICE_SUCCESS);
1755 else if (IN_SET(state, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL))
1756 service_enter_stop_post(s, SERVICE_SUCCESS);
1757 else if (state == SERVICE_FINAL_SIGTERM && s->kill_context.send_sigkill)
1758 service_enter_signal(s, SERVICE_FINAL_SIGKILL, SERVICE_SUCCESS);
1759 else
1760 service_enter_dead(s, SERVICE_SUCCESS, true);
1761
1762 return;
1763
1764 fail:
1765 log_unit_warning_errno(UNIT(s), r, "Failed to kill processes: %m");
1766
1767 if (IN_SET(state, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL))
1768 service_enter_stop_post(s, SERVICE_FAILURE_RESOURCES);
1769 else
1770 service_enter_dead(s, SERVICE_FAILURE_RESOURCES, true);
1771 }
1772
1773 static void service_enter_stop_by_notify(Service *s) {
1774 assert(s);
1775
1776 (void) unit_enqueue_rewatch_pids(UNIT(s));
1777
1778 service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), s->timeout_stop_usec));
1779
1780 /* The service told us it's stopping, so it's as if we SIGTERM'd it. */
1781 service_set_state(s, SERVICE_STOP_SIGTERM);
1782 }
1783
1784 static void service_enter_stop(Service *s, ServiceResult f) {
1785 int r;
1786
1787 assert(s);
1788
1789 if (s->result == SERVICE_SUCCESS)
1790 s->result = f;
1791
1792 service_unwatch_control_pid(s);
1793 (void) unit_enqueue_rewatch_pids(UNIT(s));
1794
1795 s->control_command = s->exec_command[SERVICE_EXEC_STOP];
1796 if (s->control_command) {
1797 s->control_command_id = SERVICE_EXEC_STOP;
1798
1799 r = service_spawn(s,
1800 s->control_command,
1801 s->timeout_stop_usec,
1802 EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_IS_CONTROL|EXEC_SETENV_RESULT,
1803 &s->control_pid);
1804 if (r < 0)
1805 goto fail;
1806
1807 service_set_state(s, SERVICE_STOP);
1808 } else
1809 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_SUCCESS);
1810
1811 return;
1812
1813 fail:
1814 log_unit_warning_errno(UNIT(s), r, "Failed to run 'stop' task: %m");
1815 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_RESOURCES);
1816 }
1817
1818 static bool service_good(Service *s) {
1819 int main_pid_ok;
1820 assert(s);
1821
1822 if (s->type == SERVICE_DBUS && !s->bus_name_good)
1823 return false;
1824
1825 main_pid_ok = main_pid_good(s);
1826 if (main_pid_ok > 0) /* It's alive */
1827 return true;
1828 if (main_pid_ok == 0) /* It's dead */
1829 return false;
1830
1831 /* OK, we don't know anything about the main PID, maybe
1832 * because there is none. Let's check the control group
1833 * instead. */
1834
1835 return cgroup_good(s) != 0;
1836 }
1837
1838 static void service_enter_running(Service *s, ServiceResult f) {
1839 assert(s);
1840
1841 if (s->result == SERVICE_SUCCESS)
1842 s->result = f;
1843
1844 service_unwatch_control_pid(s);
1845
1846 if (s->result != SERVICE_SUCCESS)
1847 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
1848 else if (service_good(s)) {
1849
1850 /* If there are any queued up sd_notify() notifications, process them now */
1851 if (s->notify_state == NOTIFY_RELOADING)
1852 service_enter_reload_by_notify(s);
1853 else if (s->notify_state == NOTIFY_STOPPING)
1854 service_enter_stop_by_notify(s);
1855 else {
1856 service_set_state(s, SERVICE_RUNNING);
1857 service_arm_timer(s, usec_add(UNIT(s)->active_enter_timestamp.monotonic, s->runtime_max_usec));
1858 }
1859
1860 } else if (s->remain_after_exit)
1861 service_set_state(s, SERVICE_EXITED);
1862 else
1863 service_enter_stop(s, SERVICE_SUCCESS);
1864 }
1865
1866 static void service_enter_start_post(Service *s) {
1867 int r;
1868 assert(s);
1869
1870 service_unwatch_control_pid(s);
1871 service_reset_watchdog(s);
1872
1873 s->control_command = s->exec_command[SERVICE_EXEC_START_POST];
1874 if (s->control_command) {
1875 s->control_command_id = SERVICE_EXEC_START_POST;
1876
1877 r = service_spawn(s,
1878 s->control_command,
1879 s->timeout_start_usec,
1880 EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_IS_CONTROL,
1881 &s->control_pid);
1882 if (r < 0)
1883 goto fail;
1884
1885 service_set_state(s, SERVICE_START_POST);
1886 } else
1887 service_enter_running(s, SERVICE_SUCCESS);
1888
1889 return;
1890
1891 fail:
1892 log_unit_warning_errno(UNIT(s), r, "Failed to run 'start-post' task: %m");
1893 service_enter_stop(s, SERVICE_FAILURE_RESOURCES);
1894 }
1895
1896 static void service_kill_control_process(Service *s) {
1897 int r;
1898
1899 assert(s);
1900
1901 if (s->control_pid <= 0)
1902 return;
1903
1904 r = kill_and_sigcont(s->control_pid, SIGKILL);
1905 if (r < 0) {
1906 _cleanup_free_ char *comm = NULL;
1907
1908 (void) get_process_comm(s->control_pid, &comm);
1909
1910 log_unit_debug_errno(UNIT(s), r, "Failed to kill control process " PID_FMT " (%s), ignoring: %m",
1911 s->control_pid, strna(comm));
1912 }
1913 }
1914
1915 static void service_enter_start(Service *s) {
1916 ExecCommand *c;
1917 usec_t timeout;
1918 pid_t pid;
1919 int r;
1920
1921 assert(s);
1922
1923 service_unwatch_control_pid(s);
1924 service_unwatch_main_pid(s);
1925
1926 unit_warn_leftover_processes(UNIT(s));
1927
1928 if (s->type == SERVICE_FORKING) {
1929 s->control_command_id = SERVICE_EXEC_START;
1930 c = s->control_command = s->exec_command[SERVICE_EXEC_START];
1931
1932 s->main_command = NULL;
1933 } else {
1934 s->control_command_id = _SERVICE_EXEC_COMMAND_INVALID;
1935 s->control_command = NULL;
1936
1937 c = s->main_command = s->exec_command[SERVICE_EXEC_START];
1938 }
1939
1940 if (!c) {
1941 if (s->type != SERVICE_ONESHOT) {
1942 /* There's no command line configured for the main command? Hmm, that is strange. This can only
1943 * happen if the configuration changes at runtime. In this case, let's enter a failure
1944 * state. */
1945 log_unit_error(UNIT(s), "There's no 'start' task anymore we could start.");
1946 r = -ENXIO;
1947 goto fail;
1948 }
1949
1950 service_enter_start_post(s);
1951 return;
1952 }
1953
1954 if (IN_SET(s->type, SERVICE_SIMPLE, SERVICE_IDLE))
1955 /* For simple + idle this is the main process. We don't apply any timeout here, but
1956 * service_enter_running() will later apply the .runtime_max_usec timeout. */
1957 timeout = USEC_INFINITY;
1958 else
1959 timeout = s->timeout_start_usec;
1960
1961 r = service_spawn(s,
1962 c,
1963 timeout,
1964 EXEC_PASS_FDS|EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_APPLY_TTY_STDIN|EXEC_SET_WATCHDOG,
1965 &pid);
1966 if (r < 0)
1967 goto fail;
1968
1969 if (IN_SET(s->type, SERVICE_SIMPLE, SERVICE_IDLE)) {
1970 /* For simple services we immediately start
1971 * the START_POST binaries. */
1972
1973 service_set_main_pid(s, pid);
1974 service_enter_start_post(s);
1975
1976 } else if (s->type == SERVICE_FORKING) {
1977
1978 /* For forking services we wait until the start
1979 * process exited. */
1980
1981 s->control_pid = pid;
1982 service_set_state(s, SERVICE_START);
1983
1984 } else if (IN_SET(s->type, SERVICE_ONESHOT, SERVICE_DBUS, SERVICE_NOTIFY)) {
1985
1986 /* For oneshot services we wait until the start
1987 * process exited, too, but it is our main process. */
1988
1989 /* For D-Bus services we know the main pid right away,
1990 * but wait for the bus name to appear on the
1991 * bus. Notify services are similar. */
1992
1993 service_set_main_pid(s, pid);
1994 service_set_state(s, SERVICE_START);
1995 } else
1996 assert_not_reached("Unknown service type");
1997
1998 return;
1999
2000 fail:
2001 log_unit_warning_errno(UNIT(s), r, "Failed to run 'start' task: %m");
2002 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_RESOURCES);
2003 }
2004
2005 static void service_enter_start_pre(Service *s) {
2006 int r;
2007
2008 assert(s);
2009
2010 service_unwatch_control_pid(s);
2011
2012 s->control_command = s->exec_command[SERVICE_EXEC_START_PRE];
2013 if (s->control_command) {
2014
2015 unit_warn_leftover_processes(UNIT(s));
2016
2017 s->control_command_id = SERVICE_EXEC_START_PRE;
2018
2019 r = service_spawn(s,
2020 s->control_command,
2021 s->timeout_start_usec,
2022 EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_IS_CONTROL|EXEC_APPLY_TTY_STDIN,
2023 &s->control_pid);
2024 if (r < 0)
2025 goto fail;
2026
2027 service_set_state(s, SERVICE_START_PRE);
2028 } else
2029 service_enter_start(s);
2030
2031 return;
2032
2033 fail:
2034 log_unit_warning_errno(UNIT(s), r, "Failed to run 'start-pre' task: %m");
2035 service_enter_dead(s, SERVICE_FAILURE_RESOURCES, true);
2036 }
2037
2038 static void service_enter_restart(Service *s) {
2039 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2040 int r;
2041
2042 assert(s);
2043
2044 if (UNIT(s)->job && UNIT(s)->job->type == JOB_STOP) {
2045 /* Don't restart things if we are going down anyway */
2046 log_unit_info(UNIT(s), "Stop job pending for unit, delaying automatic restart.");
2047
2048 r = service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), s->restart_usec));
2049 if (r < 0)
2050 goto fail;
2051
2052 return;
2053 }
2054
2055 /* Any units that are bound to this service must also be
2056 * restarted. We use JOB_RESTART (instead of the more obvious
2057 * JOB_START) here so that those dependency jobs will be added
2058 * as well. */
2059 r = manager_add_job(UNIT(s)->manager, JOB_RESTART, UNIT(s), JOB_FAIL, &error, NULL);
2060 if (r < 0)
2061 goto fail;
2062
2063 /* Count the jobs we enqueue for restarting. This counter is maintained as long as the unit isn't fully
2064 * stopped, i.e. as long as it remains up or remains in auto-start states. The use can reset the counter
2065 * explicitly however via the usual "systemctl reset-failure" logic. */
2066 s->n_restarts ++;
2067 s->flush_n_restarts = false;
2068
2069 log_struct(LOG_INFO,
2070 "MESSAGE_ID=" SD_MESSAGE_UNIT_RESTART_SCHEDULED_STR,
2071 LOG_UNIT_ID(UNIT(s)),
2072 LOG_UNIT_INVOCATION_ID(UNIT(s)),
2073 LOG_UNIT_MESSAGE(UNIT(s), "Scheduled restart job, restart counter is at %u.", s->n_restarts),
2074 "N_RESTARTS=%u", s->n_restarts);
2075
2076 /* Notify clients about changed restart counter */
2077 unit_add_to_dbus_queue(UNIT(s));
2078
2079 /* Note that we stay in the SERVICE_AUTO_RESTART state here,
2080 * it will be canceled as part of the service_stop() call that
2081 * is executed as part of JOB_RESTART. */
2082
2083 return;
2084
2085 fail:
2086 log_unit_warning(UNIT(s), "Failed to schedule restart job: %s", bus_error_message(&error, -r));
2087 service_enter_dead(s, SERVICE_FAILURE_RESOURCES, false);
2088 }
2089
2090 static void service_enter_reload_by_notify(Service *s) {
2091 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2092 int r;
2093
2094 assert(s);
2095
2096 service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), s->timeout_start_usec));
2097 service_set_state(s, SERVICE_RELOAD);
2098
2099 /* service_enter_reload_by_notify is never called during a reload, thus no loops are possible. */
2100 r = manager_propagate_reload(UNIT(s)->manager, UNIT(s), JOB_FAIL, &error);
2101 if (r < 0)
2102 log_unit_warning(UNIT(s), "Failed to schedule propagation of reload: %s", bus_error_message(&error, -r));
2103 }
2104
2105 static void service_enter_reload(Service *s) {
2106 int r;
2107
2108 assert(s);
2109
2110 service_unwatch_control_pid(s);
2111 s->reload_result = SERVICE_SUCCESS;
2112
2113 s->control_command = s->exec_command[SERVICE_EXEC_RELOAD];
2114 if (s->control_command) {
2115 s->control_command_id = SERVICE_EXEC_RELOAD;
2116
2117 r = service_spawn(s,
2118 s->control_command,
2119 s->timeout_start_usec,
2120 EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_IS_CONTROL,
2121 &s->control_pid);
2122 if (r < 0)
2123 goto fail;
2124
2125 service_set_state(s, SERVICE_RELOAD);
2126 } else
2127 service_enter_running(s, SERVICE_SUCCESS);
2128
2129 return;
2130
2131 fail:
2132 log_unit_warning_errno(UNIT(s), r, "Failed to run 'reload' task: %m");
2133 s->reload_result = SERVICE_FAILURE_RESOURCES;
2134 service_enter_running(s, SERVICE_SUCCESS);
2135 }
2136
2137 static void service_run_next_control(Service *s) {
2138 usec_t timeout;
2139 int r;
2140
2141 assert(s);
2142 assert(s->control_command);
2143 assert(s->control_command->command_next);
2144
2145 assert(s->control_command_id != SERVICE_EXEC_START);
2146
2147 s->control_command = s->control_command->command_next;
2148 service_unwatch_control_pid(s);
2149
2150 if (IN_SET(s->state, SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST, SERVICE_RUNNING, SERVICE_RELOAD))
2151 timeout = s->timeout_start_usec;
2152 else
2153 timeout = s->timeout_stop_usec;
2154
2155 r = service_spawn(s,
2156 s->control_command,
2157 timeout,
2158 EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_IS_CONTROL|
2159 (IN_SET(s->control_command_id, SERVICE_EXEC_START_PRE, SERVICE_EXEC_STOP_POST) ? EXEC_APPLY_TTY_STDIN : 0)|
2160 (IN_SET(s->control_command_id, SERVICE_EXEC_STOP, SERVICE_EXEC_STOP_POST) ? EXEC_SETENV_RESULT : 0),
2161 &s->control_pid);
2162 if (r < 0)
2163 goto fail;
2164
2165 return;
2166
2167 fail:
2168 log_unit_warning_errno(UNIT(s), r, "Failed to run next control task: %m");
2169
2170 if (IN_SET(s->state, SERVICE_START_PRE, SERVICE_START_POST, SERVICE_STOP))
2171 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_RESOURCES);
2172 else if (s->state == SERVICE_STOP_POST)
2173 service_enter_dead(s, SERVICE_FAILURE_RESOURCES, true);
2174 else if (s->state == SERVICE_RELOAD) {
2175 s->reload_result = SERVICE_FAILURE_RESOURCES;
2176 service_enter_running(s, SERVICE_SUCCESS);
2177 } else
2178 service_enter_stop(s, SERVICE_FAILURE_RESOURCES);
2179 }
2180
2181 static void service_run_next_main(Service *s) {
2182 pid_t pid;
2183 int r;
2184
2185 assert(s);
2186 assert(s->main_command);
2187 assert(s->main_command->command_next);
2188 assert(s->type == SERVICE_ONESHOT);
2189
2190 s->main_command = s->main_command->command_next;
2191 service_unwatch_main_pid(s);
2192
2193 r = service_spawn(s,
2194 s->main_command,
2195 s->timeout_start_usec,
2196 EXEC_PASS_FDS|EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_APPLY_TTY_STDIN|EXEC_SET_WATCHDOG,
2197 &pid);
2198 if (r < 0)
2199 goto fail;
2200
2201 service_set_main_pid(s, pid);
2202
2203 return;
2204
2205 fail:
2206 log_unit_warning_errno(UNIT(s), r, "Failed to run next main task: %m");
2207 service_enter_stop(s, SERVICE_FAILURE_RESOURCES);
2208 }
2209
2210 static int service_start(Unit *u) {
2211 Service *s = SERVICE(u);
2212 int r;
2213
2214 assert(s);
2215
2216 /* We cannot fulfill this request right now, try again later
2217 * please! */
2218 if (IN_SET(s->state,
2219 SERVICE_STOP, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
2220 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL))
2221 return -EAGAIN;
2222
2223 /* Already on it! */
2224 if (IN_SET(s->state, SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST))
2225 return 0;
2226
2227 /* A service that will be restarted must be stopped first to
2228 * trigger BindsTo and/or OnFailure dependencies. If a user
2229 * does not want to wait for the holdoff time to elapse, the
2230 * service should be manually restarted, not started. We
2231 * simply return EAGAIN here, so that any start jobs stay
2232 * queued, and assume that the auto restart timer will
2233 * eventually trigger the restart. */
2234 if (s->state == SERVICE_AUTO_RESTART)
2235 return -EAGAIN;
2236
2237 assert(IN_SET(s->state, SERVICE_DEAD, SERVICE_FAILED));
2238
2239 /* Make sure we don't enter a busy loop of some kind. */
2240 r = unit_start_limit_test(u);
2241 if (r < 0) {
2242 service_enter_dead(s, SERVICE_FAILURE_START_LIMIT_HIT, false);
2243 return r;
2244 }
2245
2246 r = unit_acquire_invocation_id(u);
2247 if (r < 0)
2248 return r;
2249
2250 s->result = SERVICE_SUCCESS;
2251 s->reload_result = SERVICE_SUCCESS;
2252 s->main_pid_known = false;
2253 s->main_pid_alien = false;
2254 s->forbid_restart = false;
2255
2256 u->reset_accounting = true;
2257
2258 s->status_text = mfree(s->status_text);
2259 s->status_errno = 0;
2260
2261 s->notify_state = NOTIFY_UNKNOWN;
2262
2263 s->watchdog_override_enable = false;
2264 s->watchdog_override_usec = 0;
2265
2266 /* This is not an automatic restart? Flush the restart counter then */
2267 if (s->flush_n_restarts) {
2268 s->n_restarts = 0;
2269 s->flush_n_restarts = false;
2270 }
2271
2272 service_enter_start_pre(s);
2273 return 1;
2274 }
2275
2276 static int service_stop(Unit *u) {
2277 Service *s = SERVICE(u);
2278
2279 assert(s);
2280
2281 /* Don't create restart jobs from manual stops. */
2282 s->forbid_restart = true;
2283
2284 /* Already on it */
2285 if (IN_SET(s->state,
2286 SERVICE_STOP, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
2287 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL))
2288 return 0;
2289
2290 /* A restart will be scheduled or is in progress. */
2291 if (s->state == SERVICE_AUTO_RESTART) {
2292 service_set_state(s, SERVICE_DEAD);
2293 return 0;
2294 }
2295
2296 /* If there's already something running we go directly into
2297 * kill mode. */
2298 if (IN_SET(s->state, SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST, SERVICE_RELOAD)) {
2299 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_SUCCESS);
2300 return 0;
2301 }
2302
2303 assert(IN_SET(s->state, SERVICE_RUNNING, SERVICE_EXITED));
2304
2305 service_enter_stop(s, SERVICE_SUCCESS);
2306 return 1;
2307 }
2308
2309 static int service_reload(Unit *u) {
2310 Service *s = SERVICE(u);
2311
2312 assert(s);
2313
2314 assert(IN_SET(s->state, SERVICE_RUNNING, SERVICE_EXITED));
2315
2316 service_enter_reload(s);
2317 return 1;
2318 }
2319
2320 _pure_ static bool service_can_reload(Unit *u) {
2321 Service *s = SERVICE(u);
2322
2323 assert(s);
2324
2325 return !!s->exec_command[SERVICE_EXEC_RELOAD];
2326 }
2327
2328 static unsigned service_exec_command_index(Unit *u, ServiceExecCommand id, ExecCommand *current) {
2329 Service *s = SERVICE(u);
2330 unsigned idx = 0;
2331 ExecCommand *first, *c;
2332
2333 assert(s);
2334
2335 first = s->exec_command[id];
2336
2337 /* Figure out where we are in the list by walking back to the beginning */
2338 for (c = current; c != first; c = c->command_prev)
2339 idx++;
2340
2341 return idx;
2342 }
2343
2344 static int service_serialize_exec_command(Unit *u, FILE *f, ExecCommand *command) {
2345 Service *s = SERVICE(u);
2346 ServiceExecCommand id;
2347 unsigned idx;
2348 const char *type;
2349 char **arg;
2350 _cleanup_free_ char *args = NULL, *p = NULL;
2351 size_t allocated = 0, length = 0;
2352
2353 assert(s);
2354 assert(f);
2355
2356 if (!command)
2357 return 0;
2358
2359 if (command == s->control_command) {
2360 type = "control";
2361 id = s->control_command_id;
2362 } else {
2363 type = "main";
2364 id = SERVICE_EXEC_START;
2365 }
2366
2367 idx = service_exec_command_index(u, id, command);
2368
2369 STRV_FOREACH(arg, command->argv) {
2370 size_t n;
2371 _cleanup_free_ char *e = NULL;
2372
2373 e = xescape(*arg, WHITESPACE);
2374 if (!e)
2375 return -ENOMEM;
2376
2377 n = strlen(e);
2378 if (!GREEDY_REALLOC(args, allocated, length + 1 + n + 1))
2379 return -ENOMEM;
2380
2381 if (length > 0)
2382 args[length++] = ' ';
2383
2384 memcpy(args + length, e, n);
2385 length += n;
2386 }
2387
2388 if (!GREEDY_REALLOC(args, allocated, length + 1))
2389 return -ENOMEM;
2390 args[length++] = 0;
2391
2392 p = xescape(command->path, WHITESPACE);
2393 if (!p)
2394 return -ENOMEM;
2395
2396 fprintf(f, "%s-command=%s %u %s %s\n", type, service_exec_command_to_string(id), idx, p, args);
2397
2398 return 0;
2399 }
2400
2401 static int service_serialize(Unit *u, FILE *f, FDSet *fds) {
2402 Service *s = SERVICE(u);
2403 ServiceFDStore *fs;
2404 int r;
2405
2406 assert(u);
2407 assert(f);
2408 assert(fds);
2409
2410 unit_serialize_item(u, f, "state", service_state_to_string(s->state));
2411 unit_serialize_item(u, f, "result", service_result_to_string(s->result));
2412 unit_serialize_item(u, f, "reload-result", service_result_to_string(s->reload_result));
2413
2414 if (s->control_pid > 0)
2415 unit_serialize_item_format(u, f, "control-pid", PID_FMT, s->control_pid);
2416
2417 if (s->main_pid_known && s->main_pid > 0)
2418 unit_serialize_item_format(u, f, "main-pid", PID_FMT, s->main_pid);
2419
2420 unit_serialize_item(u, f, "main-pid-known", yes_no(s->main_pid_known));
2421 unit_serialize_item(u, f, "bus-name-good", yes_no(s->bus_name_good));
2422 unit_serialize_item(u, f, "bus-name-owner", s->bus_name_owner);
2423
2424 unit_serialize_item_format(u, f, "n-restarts", "%u", s->n_restarts);
2425 unit_serialize_item(u, f, "flush-n-restarts", yes_no(s->flush_n_restarts));
2426
2427 r = unit_serialize_item_escaped(u, f, "status-text", s->status_text);
2428 if (r < 0)
2429 return r;
2430
2431 service_serialize_exec_command(u, f, s->control_command);
2432 service_serialize_exec_command(u, f, s->main_command);
2433
2434 r = unit_serialize_item_fd(u, f, fds, "stdin-fd", s->stdin_fd);
2435 if (r < 0)
2436 return r;
2437 r = unit_serialize_item_fd(u, f, fds, "stdout-fd", s->stdout_fd);
2438 if (r < 0)
2439 return r;
2440 r = unit_serialize_item_fd(u, f, fds, "stderr-fd", s->stderr_fd);
2441 if (r < 0)
2442 return r;
2443
2444 if (UNIT_ISSET(s->accept_socket)) {
2445 r = unit_serialize_item(u, f, "accept-socket", UNIT_DEREF(s->accept_socket)->id);
2446 if (r < 0)
2447 return r;
2448 }
2449
2450 r = unit_serialize_item_fd(u, f, fds, "socket-fd", s->socket_fd);
2451 if (r < 0)
2452 return r;
2453
2454 LIST_FOREACH(fd_store, fs, s->fd_store) {
2455 _cleanup_free_ char *c = NULL;
2456 int copy;
2457
2458 copy = fdset_put_dup(fds, fs->fd);
2459 if (copy < 0)
2460 return copy;
2461
2462 c = cescape(fs->fdname);
2463
2464 unit_serialize_item_format(u, f, "fd-store-fd", "%i %s", copy, strempty(c));
2465 }
2466
2467 if (s->main_exec_status.pid > 0) {
2468 unit_serialize_item_format(u, f, "main-exec-status-pid", PID_FMT, s->main_exec_status.pid);
2469 dual_timestamp_serialize(f, "main-exec-status-start", &s->main_exec_status.start_timestamp);
2470 dual_timestamp_serialize(f, "main-exec-status-exit", &s->main_exec_status.exit_timestamp);
2471
2472 if (dual_timestamp_is_set(&s->main_exec_status.exit_timestamp)) {
2473 unit_serialize_item_format(u, f, "main-exec-status-code", "%i", s->main_exec_status.code);
2474 unit_serialize_item_format(u, f, "main-exec-status-status", "%i", s->main_exec_status.status);
2475 }
2476 }
2477
2478 dual_timestamp_serialize(f, "watchdog-timestamp", &s->watchdog_timestamp);
2479
2480 unit_serialize_item(u, f, "forbid-restart", yes_no(s->forbid_restart));
2481
2482 if (s->watchdog_override_enable)
2483 unit_serialize_item_format(u, f, "watchdog-override-usec", USEC_FMT, s->watchdog_override_usec);
2484
2485 return 0;
2486 }
2487
2488 static int service_deserialize_exec_command(Unit *u, const char *key, const char *value) {
2489 Service *s = SERVICE(u);
2490 int r;
2491 unsigned idx = 0, i;
2492 bool control, found = false;
2493 ServiceExecCommand id = _SERVICE_EXEC_COMMAND_INVALID;
2494 ExecCommand *command = NULL;
2495 _cleanup_free_ char *path = NULL;
2496 _cleanup_strv_free_ char **argv = NULL;
2497
2498 enum ExecCommandState {
2499 STATE_EXEC_COMMAND_TYPE,
2500 STATE_EXEC_COMMAND_INDEX,
2501 STATE_EXEC_COMMAND_PATH,
2502 STATE_EXEC_COMMAND_ARGS,
2503 _STATE_EXEC_COMMAND_MAX,
2504 _STATE_EXEC_COMMAND_INVALID = -1,
2505 } state;
2506
2507 assert(s);
2508 assert(key);
2509 assert(value);
2510
2511 control = streq(key, "control-command");
2512
2513 state = STATE_EXEC_COMMAND_TYPE;
2514
2515 for (;;) {
2516 _cleanup_free_ char *arg = NULL;
2517
2518 r = extract_first_word(&value, &arg, NULL, EXTRACT_CUNESCAPE);
2519 if (r == 0)
2520 break;
2521 else if (r < 0)
2522 return r;
2523
2524 switch (state) {
2525 case STATE_EXEC_COMMAND_TYPE:
2526 id = service_exec_command_from_string(arg);
2527 if (id < 0)
2528 return -EINVAL;
2529
2530 state = STATE_EXEC_COMMAND_INDEX;
2531 break;
2532 case STATE_EXEC_COMMAND_INDEX:
2533 r = safe_atou(arg, &idx);
2534 if (r < 0)
2535 return -EINVAL;
2536
2537 state = STATE_EXEC_COMMAND_PATH;
2538 break;
2539 case STATE_EXEC_COMMAND_PATH:
2540 path = TAKE_PTR(arg);
2541 state = STATE_EXEC_COMMAND_ARGS;
2542
2543 if (!path_is_absolute(path))
2544 return -EINVAL;
2545 break;
2546 case STATE_EXEC_COMMAND_ARGS:
2547 r = strv_extend(&argv, arg);
2548 if (r < 0)
2549 return -ENOMEM;
2550 break;
2551 default:
2552 assert_not_reached("Unknown error at deserialization of exec command");
2553 break;
2554 }
2555 }
2556
2557 if (state != STATE_EXEC_COMMAND_ARGS)
2558 return -EINVAL;
2559
2560 /* Let's check whether exec command on given offset matches data that we just deserialized */
2561 for (command = s->exec_command[id], i = 0; command; command = command->command_next, i++) {
2562 if (i != idx)
2563 continue;
2564
2565 found = strv_equal(argv, command->argv) && streq(command->path, path);
2566 break;
2567 }
2568
2569 if (!found) {
2570 /* Command at the index we serialized is different, let's look for command that exactly
2571 * matches but is on different index. If there is no such command we will not resume execution. */
2572 for (command = s->exec_command[id]; command; command = command->command_next)
2573 if (strv_equal(command->argv, argv) && streq(command->path, path))
2574 break;
2575 }
2576
2577 if (command && control)
2578 s->control_command = command;
2579 else if (command)
2580 s->main_command = command;
2581 else
2582 log_unit_warning(u, "Current command vanished from the unit file, execution of the command list won't be resumed.");
2583
2584 return 0;
2585 }
2586
2587 static int service_deserialize_item(Unit *u, const char *key, const char *value, FDSet *fds) {
2588 Service *s = SERVICE(u);
2589 int r;
2590
2591 assert(u);
2592 assert(key);
2593 assert(value);
2594 assert(fds);
2595
2596 if (streq(key, "state")) {
2597 ServiceState state;
2598
2599 state = service_state_from_string(value);
2600 if (state < 0)
2601 log_unit_debug(u, "Failed to parse state value: %s", value);
2602 else
2603 s->deserialized_state = state;
2604 } else if (streq(key, "result")) {
2605 ServiceResult f;
2606
2607 f = service_result_from_string(value);
2608 if (f < 0)
2609 log_unit_debug(u, "Failed to parse result value: %s", value);
2610 else if (f != SERVICE_SUCCESS)
2611 s->result = f;
2612
2613 } else if (streq(key, "reload-result")) {
2614 ServiceResult f;
2615
2616 f = service_result_from_string(value);
2617 if (f < 0)
2618 log_unit_debug(u, "Failed to parse reload result value: %s", value);
2619 else if (f != SERVICE_SUCCESS)
2620 s->reload_result = f;
2621
2622 } else if (streq(key, "control-pid")) {
2623 pid_t pid;
2624
2625 if (parse_pid(value, &pid) < 0)
2626 log_unit_debug(u, "Failed to parse control-pid value: %s", value);
2627 else
2628 s->control_pid = pid;
2629 } else if (streq(key, "main-pid")) {
2630 pid_t pid;
2631
2632 if (parse_pid(value, &pid) < 0)
2633 log_unit_debug(u, "Failed to parse main-pid value: %s", value);
2634 else
2635 (void) service_set_main_pid(s, pid);
2636 } else if (streq(key, "main-pid-known")) {
2637 int b;
2638
2639 b = parse_boolean(value);
2640 if (b < 0)
2641 log_unit_debug(u, "Failed to parse main-pid-known value: %s", value);
2642 else
2643 s->main_pid_known = b;
2644 } else if (streq(key, "bus-name-good")) {
2645 int b;
2646
2647 b = parse_boolean(value);
2648 if (b < 0)
2649 log_unit_debug(u, "Failed to parse bus-name-good value: %s", value);
2650 else
2651 s->bus_name_good = b;
2652 } else if (streq(key, "bus-name-owner")) {
2653 r = free_and_strdup(&s->bus_name_owner, value);
2654 if (r < 0)
2655 log_unit_error_errno(u, r, "Unable to deserialize current bus owner %s: %m", value);
2656 } else if (streq(key, "status-text")) {
2657 char *t;
2658
2659 r = cunescape(value, 0, &t);
2660 if (r < 0)
2661 log_unit_debug_errno(u, r, "Failed to unescape status text: %s", value);
2662 else {
2663 free(s->status_text);
2664 s->status_text = t;
2665 }
2666
2667 } else if (streq(key, "accept-socket")) {
2668 Unit *socket;
2669
2670 r = manager_load_unit(u->manager, value, NULL, NULL, &socket);
2671 if (r < 0)
2672 log_unit_debug_errno(u, r, "Failed to load accept-socket unit: %s", value);
2673 else {
2674 unit_ref_set(&s->accept_socket, u, socket);
2675 SOCKET(socket)->n_connections++;
2676 }
2677
2678 } else if (streq(key, "socket-fd")) {
2679 int fd;
2680
2681 if (safe_atoi(value, &fd) < 0 || fd < 0 || !fdset_contains(fds, fd))
2682 log_unit_debug(u, "Failed to parse socket-fd value: %s", value);
2683 else {
2684 asynchronous_close(s->socket_fd);
2685 s->socket_fd = fdset_remove(fds, fd);
2686 }
2687 } else if (streq(key, "fd-store-fd")) {
2688 const char *fdv;
2689 size_t pf;
2690 int fd;
2691
2692 pf = strcspn(value, WHITESPACE);
2693 fdv = strndupa(value, pf);
2694
2695 if (safe_atoi(fdv, &fd) < 0 || fd < 0 || !fdset_contains(fds, fd))
2696 log_unit_debug(u, "Failed to parse fd-store-fd value: %s", value);
2697 else {
2698 _cleanup_free_ char *t = NULL;
2699 const char *fdn;
2700
2701 fdn = value + pf;
2702 fdn += strspn(fdn, WHITESPACE);
2703 (void) cunescape(fdn, 0, &t);
2704
2705 r = service_add_fd_store(s, fd, t);
2706 if (r < 0)
2707 log_unit_error_errno(u, r, "Failed to add fd to store: %m");
2708 else
2709 fdset_remove(fds, fd);
2710 }
2711
2712 } else if (streq(key, "main-exec-status-pid")) {
2713 pid_t pid;
2714
2715 if (parse_pid(value, &pid) < 0)
2716 log_unit_debug(u, "Failed to parse main-exec-status-pid value: %s", value);
2717 else
2718 s->main_exec_status.pid = pid;
2719 } else if (streq(key, "main-exec-status-code")) {
2720 int i;
2721
2722 if (safe_atoi(value, &i) < 0)
2723 log_unit_debug(u, "Failed to parse main-exec-status-code value: %s", value);
2724 else
2725 s->main_exec_status.code = i;
2726 } else if (streq(key, "main-exec-status-status")) {
2727 int i;
2728
2729 if (safe_atoi(value, &i) < 0)
2730 log_unit_debug(u, "Failed to parse main-exec-status-status value: %s", value);
2731 else
2732 s->main_exec_status.status = i;
2733 } else if (streq(key, "main-exec-status-start"))
2734 dual_timestamp_deserialize(value, &s->main_exec_status.start_timestamp);
2735 else if (streq(key, "main-exec-status-exit"))
2736 dual_timestamp_deserialize(value, &s->main_exec_status.exit_timestamp);
2737 else if (streq(key, "watchdog-timestamp"))
2738 dual_timestamp_deserialize(value, &s->watchdog_timestamp);
2739 else if (streq(key, "forbid-restart")) {
2740 int b;
2741
2742 b = parse_boolean(value);
2743 if (b < 0)
2744 log_unit_debug(u, "Failed to parse forbid-restart value: %s", value);
2745 else
2746 s->forbid_restart = b;
2747 } else if (streq(key, "stdin-fd")) {
2748 int fd;
2749
2750 if (safe_atoi(value, &fd) < 0 || fd < 0 || !fdset_contains(fds, fd))
2751 log_unit_debug(u, "Failed to parse stdin-fd value: %s", value);
2752 else {
2753 asynchronous_close(s->stdin_fd);
2754 s->stdin_fd = fdset_remove(fds, fd);
2755 s->exec_context.stdio_as_fds = true;
2756 }
2757 } else if (streq(key, "stdout-fd")) {
2758 int fd;
2759
2760 if (safe_atoi(value, &fd) < 0 || fd < 0 || !fdset_contains(fds, fd))
2761 log_unit_debug(u, "Failed to parse stdout-fd value: %s", value);
2762 else {
2763 asynchronous_close(s->stdout_fd);
2764 s->stdout_fd = fdset_remove(fds, fd);
2765 s->exec_context.stdio_as_fds = true;
2766 }
2767 } else if (streq(key, "stderr-fd")) {
2768 int fd;
2769
2770 if (safe_atoi(value, &fd) < 0 || fd < 0 || !fdset_contains(fds, fd))
2771 log_unit_debug(u, "Failed to parse stderr-fd value: %s", value);
2772 else {
2773 asynchronous_close(s->stderr_fd);
2774 s->stderr_fd = fdset_remove(fds, fd);
2775 s->exec_context.stdio_as_fds = true;
2776 }
2777 } else if (streq(key, "watchdog-override-usec")) {
2778 usec_t watchdog_override_usec;
2779 if (timestamp_deserialize(value, &watchdog_override_usec) < 0)
2780 log_unit_debug(u, "Failed to parse watchdog_override_usec value: %s", value);
2781 else {
2782 s->watchdog_override_enable = true;
2783 s->watchdog_override_usec = watchdog_override_usec;
2784 }
2785 } else if (STR_IN_SET(key, "main-command", "control-command")) {
2786 r = service_deserialize_exec_command(u, key, value);
2787 if (r < 0)
2788 log_unit_debug_errno(u, r, "Failed to parse serialized command \"%s\": %m", value);
2789
2790 } else if (streq(key, "n-restarts")) {
2791 r = safe_atou(value, &s->n_restarts);
2792 if (r < 0)
2793 log_unit_debug_errno(u, r, "Failed to parse serialized restart counter '%s': %m", value);
2794
2795 } else if (streq(key, "flush-n-restarts")) {
2796 r = parse_boolean(value);
2797 if (r < 0)
2798 log_unit_debug_errno(u, r, "Failed to parse serialized flush restart counter setting '%s': %m", value);
2799 else
2800 s->flush_n_restarts = r;
2801 } else
2802 log_unit_debug(u, "Unknown serialization key: %s", key);
2803
2804 return 0;
2805 }
2806
2807 _pure_ static UnitActiveState service_active_state(Unit *u) {
2808 const UnitActiveState *table;
2809
2810 assert(u);
2811
2812 table = SERVICE(u)->type == SERVICE_IDLE ? state_translation_table_idle : state_translation_table;
2813
2814 return table[SERVICE(u)->state];
2815 }
2816
2817 static const char *service_sub_state_to_string(Unit *u) {
2818 assert(u);
2819
2820 return service_state_to_string(SERVICE(u)->state);
2821 }
2822
2823 static bool service_may_gc(Unit *u) {
2824 Service *s = SERVICE(u);
2825
2826 assert(s);
2827
2828 /* Never clean up services that still have a process around, even if the service is formally dead. Note that
2829 * unit_may_gc() already checked our cgroup for us, we just check our two additional PIDs, too, in case they
2830 * have moved outside of the cgroup. */
2831
2832 if (main_pid_good(s) > 0 ||
2833 control_pid_good(s) > 0)
2834 return false;
2835
2836 return true;
2837 }
2838
2839 static int service_retry_pid_file(Service *s) {
2840 int r;
2841
2842 assert(s->pid_file);
2843 assert(IN_SET(s->state, SERVICE_START, SERVICE_START_POST));
2844
2845 r = service_load_pid_file(s, false);
2846 if (r < 0)
2847 return r;
2848
2849 service_unwatch_pid_file(s);
2850
2851 service_enter_running(s, SERVICE_SUCCESS);
2852 return 0;
2853 }
2854
2855 static int service_watch_pid_file(Service *s) {
2856 int r;
2857
2858 log_unit_debug(UNIT(s), "Setting watch for PID file %s", s->pid_file_pathspec->path);
2859
2860 r = path_spec_watch(s->pid_file_pathspec, service_dispatch_io);
2861 if (r < 0)
2862 goto fail;
2863
2864 /* the pidfile might have appeared just before we set the watch */
2865 log_unit_debug(UNIT(s), "Trying to read PID file %s in case it changed", s->pid_file_pathspec->path);
2866 service_retry_pid_file(s);
2867
2868 return 0;
2869 fail:
2870 log_unit_error_errno(UNIT(s), r, "Failed to set a watch for PID file %s: %m", s->pid_file_pathspec->path);
2871 service_unwatch_pid_file(s);
2872 return r;
2873 }
2874
2875 static int service_demand_pid_file(Service *s) {
2876 PathSpec *ps;
2877
2878 assert(s->pid_file);
2879 assert(!s->pid_file_pathspec);
2880
2881 ps = new0(PathSpec, 1);
2882 if (!ps)
2883 return -ENOMEM;
2884
2885 ps->unit = UNIT(s);
2886 ps->path = strdup(s->pid_file);
2887 if (!ps->path) {
2888 free(ps);
2889 return -ENOMEM;
2890 }
2891
2892 path_simplify(ps->path, false);
2893
2894 /* PATH_CHANGED would not be enough. There are daemons (sendmail) that
2895 * keep their PID file open all the time. */
2896 ps->type = PATH_MODIFIED;
2897 ps->inotify_fd = -1;
2898
2899 s->pid_file_pathspec = ps;
2900
2901 return service_watch_pid_file(s);
2902 }
2903
2904 static int service_dispatch_io(sd_event_source *source, int fd, uint32_t events, void *userdata) {
2905 PathSpec *p = userdata;
2906 Service *s;
2907
2908 assert(p);
2909
2910 s = SERVICE(p->unit);
2911
2912 assert(s);
2913 assert(fd >= 0);
2914 assert(IN_SET(s->state, SERVICE_START, SERVICE_START_POST));
2915 assert(s->pid_file_pathspec);
2916 assert(path_spec_owns_inotify_fd(s->pid_file_pathspec, fd));
2917
2918 log_unit_debug(UNIT(s), "inotify event");
2919
2920 if (path_spec_fd_event(p, events) < 0)
2921 goto fail;
2922
2923 if (service_retry_pid_file(s) == 0)
2924 return 0;
2925
2926 if (service_watch_pid_file(s) < 0)
2927 goto fail;
2928
2929 return 0;
2930
2931 fail:
2932 service_unwatch_pid_file(s);
2933 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_RESOURCES);
2934 return 0;
2935 }
2936
2937 static void service_notify_cgroup_empty_event(Unit *u) {
2938 Service *s = SERVICE(u);
2939
2940 assert(u);
2941
2942 log_unit_debug(u, "cgroup is empty");
2943
2944 switch (s->state) {
2945
2946 /* Waiting for SIGCHLD is usually more interesting,
2947 * because it includes return codes/signals. Which is
2948 * why we ignore the cgroup events for most cases,
2949 * except when we don't know pid which to expect the
2950 * SIGCHLD for. */
2951
2952 case SERVICE_START:
2953 if (s->type == SERVICE_NOTIFY &&
2954 main_pid_good(s) == 0 &&
2955 control_pid_good(s) == 0) {
2956 /* No chance of getting a ready notification anymore */
2957 service_enter_stop_post(s, SERVICE_FAILURE_PROTOCOL);
2958 break;
2959 }
2960
2961 _fallthrough_;
2962 case SERVICE_START_POST:
2963 if (s->pid_file_pathspec &&
2964 main_pid_good(s) == 0 &&
2965 control_pid_good(s) == 0) {
2966
2967 /* Give up hoping for the daemon to write its PID file */
2968 log_unit_warning(u, "Daemon never wrote its PID file. Failing.");
2969
2970 service_unwatch_pid_file(s);
2971 if (s->state == SERVICE_START)
2972 service_enter_stop_post(s, SERVICE_FAILURE_PROTOCOL);
2973 else
2974 service_enter_stop(s, SERVICE_FAILURE_PROTOCOL);
2975 }
2976 break;
2977
2978 case SERVICE_RUNNING:
2979 /* service_enter_running() will figure out what to do */
2980 service_enter_running(s, SERVICE_SUCCESS);
2981 break;
2982
2983 case SERVICE_STOP_SIGABRT:
2984 case SERVICE_STOP_SIGTERM:
2985 case SERVICE_STOP_SIGKILL:
2986
2987 if (main_pid_good(s) <= 0 && control_pid_good(s) <= 0)
2988 service_enter_stop_post(s, SERVICE_SUCCESS);
2989
2990 break;
2991
2992 case SERVICE_STOP_POST:
2993 case SERVICE_FINAL_SIGTERM:
2994 case SERVICE_FINAL_SIGKILL:
2995 if (main_pid_good(s) <= 0 && control_pid_good(s) <= 0)
2996 service_enter_dead(s, SERVICE_SUCCESS, true);
2997
2998 break;
2999
3000 default:
3001 ;
3002 }
3003 }
3004
3005 static void service_sigchld_event(Unit *u, pid_t pid, int code, int status) {
3006 bool notify_dbus = true;
3007 Service *s = SERVICE(u);
3008 ServiceResult f;
3009
3010 assert(s);
3011 assert(pid >= 0);
3012
3013 if (is_clean_exit(code, status, s->type == SERVICE_ONESHOT ? EXIT_CLEAN_COMMAND : EXIT_CLEAN_DAEMON, &s->success_status))
3014 f = SERVICE_SUCCESS;
3015 else if (code == CLD_EXITED)
3016 f = SERVICE_FAILURE_EXIT_CODE;
3017 else if (code == CLD_KILLED)
3018 f = SERVICE_FAILURE_SIGNAL;
3019 else if (code == CLD_DUMPED)
3020 f = SERVICE_FAILURE_CORE_DUMP;
3021 else
3022 assert_not_reached("Unknown code");
3023
3024 if (s->main_pid == pid) {
3025 /* Forking services may occasionally move to a new PID.
3026 * As long as they update the PID file before exiting the old
3027 * PID, they're fine. */
3028 if (service_load_pid_file(s, false) > 0)
3029 return;
3030
3031 s->main_pid = 0;
3032 exec_status_exit(&s->main_exec_status, &s->exec_context, pid, code, status);
3033
3034 if (s->main_command) {
3035 /* If this is not a forking service than the
3036 * main process got started and hence we copy
3037 * the exit status so that it is recorded both
3038 * as main and as control process exit
3039 * status */
3040
3041 s->main_command->exec_status = s->main_exec_status;
3042
3043 if (s->main_command->flags & EXEC_COMMAND_IGNORE_FAILURE)
3044 f = SERVICE_SUCCESS;
3045 } else if (s->exec_command[SERVICE_EXEC_START]) {
3046
3047 /* If this is a forked process, then we should
3048 * ignore the return value if this was
3049 * configured for the starter process */
3050
3051 if (s->exec_command[SERVICE_EXEC_START]->flags & EXEC_COMMAND_IGNORE_FAILURE)
3052 f = SERVICE_SUCCESS;
3053 }
3054
3055 /* When this is a successful exit, let's log about the exit code on DEBUG level. If this is a failure
3056 * and the process exited on its own via exit(), then let's make this a NOTICE, under the assumption
3057 * that the service already logged the reason at a higher log level on its own. However, if the service
3058 * died due to a signal, then it most likely didn't say anything about any reason, hence let's raise
3059 * our log level to WARNING then. */
3060
3061 log_struct(f == SERVICE_SUCCESS ? LOG_DEBUG :
3062 (code == CLD_EXITED ? LOG_NOTICE : LOG_WARNING),
3063 LOG_UNIT_MESSAGE(u, "Main process exited, code=%s, status=%i/%s",
3064 sigchld_code_to_string(code), status,
3065 strna(code == CLD_EXITED
3066 ? exit_status_to_string(status, EXIT_STATUS_FULL)
3067 : signal_to_string(status))),
3068 "EXIT_CODE=%s", sigchld_code_to_string(code),
3069 "EXIT_STATUS=%i", status,
3070 LOG_UNIT_ID(u),
3071 LOG_UNIT_INVOCATION_ID(u));
3072
3073 if (s->result == SERVICE_SUCCESS)
3074 s->result = f;
3075
3076 if (s->main_command &&
3077 s->main_command->command_next &&
3078 s->type == SERVICE_ONESHOT &&
3079 f == SERVICE_SUCCESS) {
3080
3081 /* There is another command to *
3082 * execute, so let's do that. */
3083
3084 log_unit_debug(u, "Running next main command for state %s.", service_state_to_string(s->state));
3085 service_run_next_main(s);
3086
3087 } else {
3088
3089 /* The service exited, so the service is officially
3090 * gone. */
3091 s->main_command = NULL;
3092
3093 switch (s->state) {
3094
3095 case SERVICE_START_POST:
3096 case SERVICE_RELOAD:
3097 case SERVICE_STOP:
3098 /* Need to wait until the operation is
3099 * done */
3100 break;
3101
3102 case SERVICE_START:
3103 if (s->type == SERVICE_ONESHOT) {
3104 /* This was our main goal, so let's go on */
3105 if (f == SERVICE_SUCCESS)
3106 service_enter_start_post(s);
3107 else
3108 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3109 break;
3110 } else if (s->type == SERVICE_NOTIFY) {
3111 /* Only enter running through a notification, so that the
3112 * SERVICE_START state signifies that no ready notification
3113 * has been received */
3114 if (f != SERVICE_SUCCESS)
3115 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3116 else if (!s->remain_after_exit || s->notify_access == NOTIFY_MAIN)
3117 /* The service has never been and will never be active */
3118 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_PROTOCOL);
3119 break;
3120 }
3121
3122 _fallthrough_;
3123 case SERVICE_RUNNING:
3124 service_enter_running(s, f);
3125 break;
3126
3127 case SERVICE_STOP_SIGABRT:
3128 case SERVICE_STOP_SIGTERM:
3129 case SERVICE_STOP_SIGKILL:
3130
3131 if (control_pid_good(s) <= 0)
3132 service_enter_stop_post(s, f);
3133
3134 /* If there is still a control process, wait for that first */
3135 break;
3136
3137 case SERVICE_STOP_POST:
3138 case SERVICE_FINAL_SIGTERM:
3139 case SERVICE_FINAL_SIGKILL:
3140
3141 if (control_pid_good(s) <= 0)
3142 service_enter_dead(s, f, true);
3143 break;
3144
3145 default:
3146 assert_not_reached("Uh, main process died at wrong time.");
3147 }
3148 }
3149
3150 } else if (s->control_pid == pid) {
3151 s->control_pid = 0;
3152
3153 if (s->control_command) {
3154 exec_status_exit(&s->control_command->exec_status, &s->exec_context, pid, code, status);
3155
3156 if (s->control_command->flags & EXEC_COMMAND_IGNORE_FAILURE)
3157 f = SERVICE_SUCCESS;
3158 }
3159
3160 log_unit_full(u, f == SERVICE_SUCCESS ? LOG_DEBUG : LOG_NOTICE, 0,
3161 "Control process exited, code=%s status=%i",
3162 sigchld_code_to_string(code), status);
3163
3164 if (s->result == SERVICE_SUCCESS)
3165 s->result = f;
3166
3167 if (s->control_command &&
3168 s->control_command->command_next &&
3169 f == SERVICE_SUCCESS) {
3170
3171 /* There is another command to *
3172 * execute, so let's do that. */
3173
3174 log_unit_debug(u, "Running next control command for state %s.", service_state_to_string(s->state));
3175 service_run_next_control(s);
3176
3177 } else {
3178 /* No further commands for this step, so let's
3179 * figure out what to do next */
3180
3181 s->control_command = NULL;
3182 s->control_command_id = _SERVICE_EXEC_COMMAND_INVALID;
3183
3184 log_unit_debug(u, "Got final SIGCHLD for state %s.", service_state_to_string(s->state));
3185
3186 switch (s->state) {
3187
3188 case SERVICE_START_PRE:
3189 if (f == SERVICE_SUCCESS)
3190 service_enter_start(s);
3191 else
3192 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3193 break;
3194
3195 case SERVICE_START:
3196 if (s->type != SERVICE_FORKING)
3197 /* Maybe spurious event due to a reload that changed the type? */
3198 break;
3199
3200 if (f != SERVICE_SUCCESS) {
3201 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3202 break;
3203 }
3204
3205 if (s->pid_file) {
3206 bool has_start_post;
3207 int r;
3208
3209 /* Let's try to load the pid file here if we can.
3210 * The PID file might actually be created by a START_POST
3211 * script. In that case don't worry if the loading fails. */
3212
3213 has_start_post = s->exec_command[SERVICE_EXEC_START_POST];
3214 r = service_load_pid_file(s, !has_start_post);
3215 if (!has_start_post && r < 0) {
3216 r = service_demand_pid_file(s);
3217 if (r < 0 || cgroup_good(s) == 0)
3218 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_PROTOCOL);
3219 break;
3220 }
3221 } else
3222 service_search_main_pid(s);
3223
3224 service_enter_start_post(s);
3225 break;
3226
3227 case SERVICE_START_POST:
3228 if (f != SERVICE_SUCCESS) {
3229 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3230 break;
3231 }
3232
3233 if (s->pid_file) {
3234 int r;
3235
3236 r = service_load_pid_file(s, true);
3237 if (r < 0) {
3238 r = service_demand_pid_file(s);
3239 if (r < 0 || cgroup_good(s) == 0)
3240 service_enter_stop(s, SERVICE_FAILURE_PROTOCOL);
3241 break;
3242 }
3243 } else
3244 service_search_main_pid(s);
3245
3246 service_enter_running(s, SERVICE_SUCCESS);
3247 break;
3248
3249 case SERVICE_RELOAD:
3250 if (f == SERVICE_SUCCESS)
3251 if (service_load_pid_file(s, true) < 0)
3252 service_search_main_pid(s);
3253
3254 s->reload_result = f;
3255 service_enter_running(s, SERVICE_SUCCESS);
3256 break;
3257
3258 case SERVICE_STOP:
3259 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3260 break;
3261
3262 case SERVICE_STOP_SIGABRT:
3263 case SERVICE_STOP_SIGTERM:
3264 case SERVICE_STOP_SIGKILL:
3265 if (main_pid_good(s) <= 0)
3266 service_enter_stop_post(s, f);
3267
3268 /* If there is still a service
3269 * process around, wait until
3270 * that one quit, too */
3271 break;
3272
3273 case SERVICE_STOP_POST:
3274 case SERVICE_FINAL_SIGTERM:
3275 case SERVICE_FINAL_SIGKILL:
3276 if (main_pid_good(s) <= 0)
3277 service_enter_dead(s, f, true);
3278 break;
3279
3280 default:
3281 assert_not_reached("Uh, control process died at wrong time.");
3282 }
3283 }
3284 } else /* Neither control nor main PID? If so, don't notify about anything */
3285 notify_dbus = false;
3286
3287 /* Notify clients about changed exit status */
3288 if (notify_dbus)
3289 unit_add_to_dbus_queue(u);
3290
3291 /* If we get a SIGCHLD event for one of the processes we were interested in, then we look for others to watch,
3292 * under the assumption that we'll sooner or later get a SIGCHLD for them, as the original process we watched
3293 * was probably the parent of them, and they are hence now our children. */
3294 (void) unit_enqueue_rewatch_pids(u);
3295 }
3296
3297 static int service_dispatch_timer(sd_event_source *source, usec_t usec, void *userdata) {
3298 Service *s = SERVICE(userdata);
3299
3300 assert(s);
3301 assert(source == s->timer_event_source);
3302
3303 switch (s->state) {
3304
3305 case SERVICE_START_PRE:
3306 case SERVICE_START:
3307 log_unit_warning(UNIT(s), "%s operation timed out. Terminating.", s->state == SERVICE_START ? "Start" : "Start-pre");
3308 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_TIMEOUT);
3309 break;
3310
3311 case SERVICE_START_POST:
3312 log_unit_warning(UNIT(s), "Start-post operation timed out. Stopping.");
3313 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_TIMEOUT);
3314 break;
3315
3316 case SERVICE_RUNNING:
3317 log_unit_warning(UNIT(s), "Service reached runtime time limit. Stopping.");
3318 service_enter_stop(s, SERVICE_FAILURE_TIMEOUT);
3319 break;
3320
3321 case SERVICE_RELOAD:
3322 log_unit_warning(UNIT(s), "Reload operation timed out. Killing reload process.");
3323 service_kill_control_process(s);
3324 s->reload_result = SERVICE_FAILURE_TIMEOUT;
3325 service_enter_running(s, SERVICE_SUCCESS);
3326 break;
3327
3328 case SERVICE_STOP:
3329 log_unit_warning(UNIT(s), "Stopping timed out. Terminating.");
3330 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_TIMEOUT);
3331 break;
3332
3333 case SERVICE_STOP_SIGABRT:
3334 log_unit_warning(UNIT(s), "State 'stop-sigabrt' timed out. Terminating.");
3335 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_TIMEOUT);
3336 break;
3337
3338 case SERVICE_STOP_SIGTERM:
3339 if (s->kill_context.send_sigkill) {
3340 log_unit_warning(UNIT(s), "State 'stop-sigterm' timed out. Killing.");
3341 service_enter_signal(s, SERVICE_STOP_SIGKILL, SERVICE_FAILURE_TIMEOUT);
3342 } else {
3343 log_unit_warning(UNIT(s), "State 'stop-sigterm' timed out. Skipping SIGKILL.");
3344 service_enter_stop_post(s, SERVICE_FAILURE_TIMEOUT);
3345 }
3346
3347 break;
3348
3349 case SERVICE_STOP_SIGKILL:
3350 /* Uh, we sent a SIGKILL and it is still not gone?
3351 * Must be something we cannot kill, so let's just be
3352 * weirded out and continue */
3353
3354 log_unit_warning(UNIT(s), "Processes still around after SIGKILL. Ignoring.");
3355 service_enter_stop_post(s, SERVICE_FAILURE_TIMEOUT);
3356 break;
3357
3358 case SERVICE_STOP_POST:
3359 log_unit_warning(UNIT(s), "State 'stop-post' timed out. Terminating.");
3360 service_enter_signal(s, SERVICE_FINAL_SIGTERM, SERVICE_FAILURE_TIMEOUT);
3361 break;
3362
3363 case SERVICE_FINAL_SIGTERM:
3364 if (s->kill_context.send_sigkill) {
3365 log_unit_warning(UNIT(s), "State 'stop-final-sigterm' timed out. Killing.");
3366 service_enter_signal(s, SERVICE_FINAL_SIGKILL, SERVICE_FAILURE_TIMEOUT);
3367 } else {
3368 log_unit_warning(UNIT(s), "State 'stop-final-sigterm' timed out. Skipping SIGKILL. Entering failed mode.");
3369 service_enter_dead(s, SERVICE_FAILURE_TIMEOUT, false);
3370 }
3371
3372 break;
3373
3374 case SERVICE_FINAL_SIGKILL:
3375 log_unit_warning(UNIT(s), "Processes still around after final SIGKILL. Entering failed mode.");
3376 service_enter_dead(s, SERVICE_FAILURE_TIMEOUT, true);
3377 break;
3378
3379 case SERVICE_AUTO_RESTART:
3380 if (s->restart_usec > 0) {
3381 char buf_restart[FORMAT_TIMESPAN_MAX];
3382 log_unit_info(UNIT(s),
3383 "Service RestartSec=%s expired, scheduling restart.",
3384 format_timespan(buf_restart, sizeof buf_restart, s->restart_usec, USEC_PER_SEC));
3385 } else
3386 log_unit_info(UNIT(s),
3387 "Service has no hold-off time (RestartSec=0), scheduling restart.");
3388
3389 service_enter_restart(s);
3390 break;
3391
3392 default:
3393 assert_not_reached("Timeout at wrong time.");
3394 }
3395
3396 return 0;
3397 }
3398
3399 static int service_dispatch_watchdog(sd_event_source *source, usec_t usec, void *userdata) {
3400 Service *s = SERVICE(userdata);
3401 char t[FORMAT_TIMESPAN_MAX];
3402 usec_t watchdog_usec;
3403
3404 assert(s);
3405 assert(source == s->watchdog_event_source);
3406
3407 watchdog_usec = service_get_watchdog_usec(s);
3408
3409 if (UNIT(s)->manager->service_watchdogs) {
3410 log_unit_error(UNIT(s), "Watchdog timeout (limit %s)!",
3411 format_timespan(t, sizeof(t), watchdog_usec, 1));
3412
3413 service_enter_signal(s, SERVICE_STOP_SIGABRT, SERVICE_FAILURE_WATCHDOG);
3414 } else
3415 log_unit_warning(UNIT(s), "Watchdog disabled! Ignoring watchdog timeout (limit %s)!",
3416 format_timespan(t, sizeof(t), watchdog_usec, 1));
3417
3418 return 0;
3419 }
3420
3421 static bool service_notify_message_authorized(Service *s, pid_t pid, char **tags, FDSet *fds) {
3422 assert(s);
3423
3424 if (s->notify_access == NOTIFY_NONE) {
3425 log_unit_warning(UNIT(s), "Got notification message from PID "PID_FMT", but reception is disabled.", pid);
3426 return false;
3427 }
3428
3429 if (s->notify_access == NOTIFY_MAIN && pid != s->main_pid) {
3430 if (s->main_pid != 0)
3431 log_unit_warning(UNIT(s), "Got notification message from PID "PID_FMT", but reception only permitted for main PID "PID_FMT, pid, s->main_pid);
3432 else
3433 log_unit_warning(UNIT(s), "Got notification message from PID "PID_FMT", but reception only permitted for main PID which is currently not known", pid);
3434
3435 return false;
3436 }
3437
3438 if (s->notify_access == NOTIFY_EXEC && pid != s->main_pid && pid != s->control_pid) {
3439 if (s->main_pid != 0 && s->control_pid != 0)
3440 log_unit_warning(UNIT(s), "Got notification message from PID "PID_FMT", but reception only permitted for main PID "PID_FMT" and control PID "PID_FMT,
3441 pid, s->main_pid, s->control_pid);
3442 else if (s->main_pid != 0)
3443 log_unit_warning(UNIT(s), "Got notification message from PID "PID_FMT", but reception only permitted for main PID "PID_FMT, pid, s->main_pid);
3444 else if (s->control_pid != 0)
3445 log_unit_warning(UNIT(s), "Got notification message from PID "PID_FMT", but reception only permitted for control PID "PID_FMT, pid, s->control_pid);
3446 else
3447 log_unit_warning(UNIT(s), "Got notification message from PID "PID_FMT", but reception only permitted for main PID and control PID which are currently not known", pid);
3448
3449 return false;
3450 }
3451
3452 return true;
3453 }
3454
3455 static void service_notify_message(
3456 Unit *u,
3457 const struct ucred *ucred,
3458 char **tags,
3459 FDSet *fds) {
3460
3461 Service *s = SERVICE(u);
3462 bool notify_dbus = false;
3463 const char *e;
3464 char **i;
3465 int r;
3466
3467 assert(u);
3468 assert(ucred);
3469
3470 if (!service_notify_message_authorized(SERVICE(u), ucred->pid, tags, fds))
3471 return;
3472
3473 if (DEBUG_LOGGING) {
3474 _cleanup_free_ char *cc = NULL;
3475
3476 cc = strv_join(tags, ", ");
3477 log_unit_debug(u, "Got notification message from PID "PID_FMT" (%s)", ucred->pid, isempty(cc) ? "n/a" : cc);
3478 }
3479
3480 /* Interpret MAINPID= */
3481 e = strv_find_startswith(tags, "MAINPID=");
3482 if (e && IN_SET(s->state, SERVICE_START, SERVICE_START_POST, SERVICE_RUNNING, SERVICE_RELOAD)) {
3483 pid_t new_main_pid;
3484
3485 if (parse_pid(e, &new_main_pid) < 0)
3486 log_unit_warning(u, "Failed to parse MAINPID= field in notification message, ignoring: %s", e);
3487 else if (!s->main_pid_known || new_main_pid != s->main_pid) {
3488
3489 r = service_is_suitable_main_pid(s, new_main_pid, LOG_WARNING);
3490 if (r == 0) {
3491 /* The new main PID is a bit suspicous, which is OK if the sender is privileged. */
3492
3493 if (ucred->uid == 0) {
3494 log_unit_debug(u, "New main PID "PID_FMT" does not belong to service, but we'll accept it as the request to change it came from a privileged process.", new_main_pid);
3495 r = 1;
3496 } else
3497 log_unit_debug(u, "New main PID "PID_FMT" does not belong to service, refusing.", new_main_pid);
3498 }
3499 if (r > 0) {
3500 service_set_main_pid(s, new_main_pid);
3501 unit_watch_pid(UNIT(s), new_main_pid);
3502 notify_dbus = true;
3503 }
3504 }
3505 }
3506
3507 /* Interpret READY=/STOPPING=/RELOADING=. Last one wins. */
3508 STRV_FOREACH_BACKWARDS(i, tags) {
3509
3510 if (streq(*i, "READY=1")) {
3511 s->notify_state = NOTIFY_READY;
3512
3513 /* Type=notify services inform us about completed
3514 * initialization with READY=1 */
3515 if (s->type == SERVICE_NOTIFY && s->state == SERVICE_START)
3516 service_enter_start_post(s);
3517
3518 /* Sending READY=1 while we are reloading informs us
3519 * that the reloading is complete */
3520 if (s->state == SERVICE_RELOAD && s->control_pid == 0)
3521 service_enter_running(s, SERVICE_SUCCESS);
3522
3523 notify_dbus = true;
3524 break;
3525
3526 } else if (streq(*i, "RELOADING=1")) {
3527 s->notify_state = NOTIFY_RELOADING;
3528
3529 if (s->state == SERVICE_RUNNING)
3530 service_enter_reload_by_notify(s);
3531
3532 notify_dbus = true;
3533 break;
3534
3535 } else if (streq(*i, "STOPPING=1")) {
3536 s->notify_state = NOTIFY_STOPPING;
3537
3538 if (s->state == SERVICE_RUNNING)
3539 service_enter_stop_by_notify(s);
3540
3541 notify_dbus = true;
3542 break;
3543 }
3544 }
3545
3546 /* Interpret STATUS= */
3547 e = strv_find_startswith(tags, "STATUS=");
3548 if (e) {
3549 _cleanup_free_ char *t = NULL;
3550
3551 if (!isempty(e)) {
3552 if (!utf8_is_valid(e))
3553 log_unit_warning(u, "Status message in notification message is not UTF-8 clean.");
3554 else {
3555 t = strdup(e);
3556 if (!t)
3557 log_oom();
3558 }
3559 }
3560
3561 if (!streq_ptr(s->status_text, t)) {
3562 free_and_replace(s->status_text, t);
3563 notify_dbus = true;
3564 }
3565 }
3566
3567 /* Interpret ERRNO= */
3568 e = strv_find_startswith(tags, "ERRNO=");
3569 if (e) {
3570 int status_errno;
3571
3572 status_errno = parse_errno(e);
3573 if (status_errno < 0)
3574 log_unit_warning_errno(u, status_errno,
3575 "Failed to parse ERRNO= field in notification message: %s", e);
3576 else if (s->status_errno != status_errno) {
3577 s->status_errno = status_errno;
3578 notify_dbus = true;
3579 }
3580 }
3581
3582 /* Interpret EXTEND_TIMEOUT= */
3583 e = strv_find_startswith(tags, "EXTEND_TIMEOUT_USEC=");
3584 if (e) {
3585 usec_t extend_timeout_usec;
3586 if (safe_atou64(e, &extend_timeout_usec) < 0)
3587 log_unit_warning(u, "Failed to parse EXTEND_TIMEOUT_USEC=%s", e);
3588 else
3589 service_extend_timeout(s, extend_timeout_usec);
3590 }
3591
3592 /* Interpret WATCHDOG= */
3593 if (strv_find(tags, "WATCHDOG=1"))
3594 service_reset_watchdog(s);
3595
3596 e = strv_find_startswith(tags, "WATCHDOG_USEC=");
3597 if (e) {
3598 usec_t watchdog_override_usec;
3599 if (safe_atou64(e, &watchdog_override_usec) < 0)
3600 log_unit_warning(u, "Failed to parse WATCHDOG_USEC=%s", e);
3601 else
3602 service_reset_watchdog_timeout(s, watchdog_override_usec);
3603 }
3604
3605 /* Process FD store messages. Either FDSTOREREMOVE=1 for removal, or FDSTORE=1 for addition. In both cases,
3606 * process FDNAME= for picking the file descriptor name to use. Note that FDNAME= is required when removing
3607 * fds, but optional when pushing in new fds, for compatibility reasons. */
3608 if (strv_find(tags, "FDSTOREREMOVE=1")) {
3609 const char *name;
3610
3611 name = strv_find_startswith(tags, "FDNAME=");
3612 if (!name || !fdname_is_valid(name))
3613 log_unit_warning(u, "FDSTOREREMOVE=1 requested, but no valid file descriptor name passed, ignoring.");
3614 else
3615 service_remove_fd_store(s, name);
3616
3617 } else if (strv_find(tags, "FDSTORE=1")) {
3618 const char *name;
3619
3620 name = strv_find_startswith(tags, "FDNAME=");
3621 if (name && !fdname_is_valid(name)) {
3622 log_unit_warning(u, "Passed FDNAME= name is invalid, ignoring.");
3623 name = NULL;
3624 }
3625
3626 (void) service_add_fd_store_set(s, fds, name);
3627 }
3628
3629 /* Notify clients about changed status or main pid */
3630 if (notify_dbus)
3631 unit_add_to_dbus_queue(u);
3632 }
3633
3634 static int service_get_timeout(Unit *u, usec_t *timeout) {
3635 Service *s = SERVICE(u);
3636 uint64_t t;
3637 int r;
3638
3639 if (!s->timer_event_source)
3640 return 0;
3641
3642 r = sd_event_source_get_time(s->timer_event_source, &t);
3643 if (r < 0)
3644 return r;
3645 if (t == USEC_INFINITY)
3646 return 0;
3647
3648 *timeout = t;
3649 return 1;
3650 }
3651
3652 static void service_bus_name_owner_change(
3653 Unit *u,
3654 const char *name,
3655 const char *old_owner,
3656 const char *new_owner) {
3657
3658 Service *s = SERVICE(u);
3659 int r;
3660
3661 assert(s);
3662 assert(name);
3663
3664 assert(streq(s->bus_name, name));
3665 assert(old_owner || new_owner);
3666
3667 if (old_owner && new_owner)
3668 log_unit_debug(u, "D-Bus name %s changed owner from %s to %s", name, old_owner, new_owner);
3669 else if (old_owner)
3670 log_unit_debug(u, "D-Bus name %s no longer registered by %s", name, old_owner);
3671 else
3672 log_unit_debug(u, "D-Bus name %s now registered by %s", name, new_owner);
3673
3674 s->bus_name_good = !!new_owner;
3675
3676 /* Track the current owner, so we can reconstruct changes after a daemon reload */
3677 r = free_and_strdup(&s->bus_name_owner, new_owner);
3678 if (r < 0) {
3679 log_unit_error_errno(u, r, "Unable to set new bus name owner %s: %m", new_owner);
3680 return;
3681 }
3682
3683 if (s->type == SERVICE_DBUS) {
3684
3685 /* service_enter_running() will figure out what to
3686 * do */
3687 if (s->state == SERVICE_RUNNING)
3688 service_enter_running(s, SERVICE_SUCCESS);
3689 else if (s->state == SERVICE_START && new_owner)
3690 service_enter_start_post(s);
3691
3692 } else if (new_owner &&
3693 s->main_pid <= 0 &&
3694 IN_SET(s->state,
3695 SERVICE_START,
3696 SERVICE_START_POST,
3697 SERVICE_RUNNING,
3698 SERVICE_RELOAD)) {
3699
3700 _cleanup_(sd_bus_creds_unrefp) sd_bus_creds *creds = NULL;
3701 pid_t pid;
3702
3703 /* Try to acquire PID from bus service */
3704
3705 r = sd_bus_get_name_creds(u->manager->api_bus, name, SD_BUS_CREDS_PID, &creds);
3706 if (r >= 0)
3707 r = sd_bus_creds_get_pid(creds, &pid);
3708 if (r >= 0) {
3709 log_unit_debug(u, "D-Bus name %s is now owned by process " PID_FMT, name, pid);
3710
3711 service_set_main_pid(s, pid);
3712 unit_watch_pid(UNIT(s), pid);
3713 }
3714 }
3715 }
3716
3717 int service_set_socket_fd(Service *s, int fd, Socket *sock, bool selinux_context_net) {
3718 _cleanup_free_ char *peer = NULL;
3719 int r;
3720
3721 assert(s);
3722 assert(fd >= 0);
3723
3724 /* This is called by the socket code when instantiating a new service for a stream socket and the socket needs
3725 * to be configured. We take ownership of the passed fd on success. */
3726
3727 if (UNIT(s)->load_state != UNIT_LOADED)
3728 return -EINVAL;
3729
3730 if (s->socket_fd >= 0)
3731 return -EBUSY;
3732
3733 if (s->state != SERVICE_DEAD)
3734 return -EAGAIN;
3735
3736 if (getpeername_pretty(fd, true, &peer) >= 0) {
3737
3738 if (UNIT(s)->description) {
3739 _cleanup_free_ char *a;
3740
3741 a = strjoin(UNIT(s)->description, " (", peer, ")");
3742 if (!a)
3743 return -ENOMEM;
3744
3745 r = unit_set_description(UNIT(s), a);
3746 } else
3747 r = unit_set_description(UNIT(s), peer);
3748
3749 if (r < 0)
3750 return r;
3751 }
3752
3753 r = unit_add_two_dependencies(UNIT(sock), UNIT_BEFORE, UNIT_TRIGGERS, UNIT(s), false, UNIT_DEPENDENCY_IMPLICIT);
3754 if (r < 0)
3755 return r;
3756
3757 s->socket_fd = fd;
3758 s->socket_fd_selinux_context_net = selinux_context_net;
3759
3760 unit_ref_set(&s->accept_socket, UNIT(s), UNIT(sock));
3761 return 0;
3762 }
3763
3764 static void service_reset_failed(Unit *u) {
3765 Service *s = SERVICE(u);
3766
3767 assert(s);
3768
3769 if (s->state == SERVICE_FAILED)
3770 service_set_state(s, SERVICE_DEAD);
3771
3772 s->result = SERVICE_SUCCESS;
3773 s->reload_result = SERVICE_SUCCESS;
3774 s->n_restarts = 0;
3775 s->flush_n_restarts = false;
3776 }
3777
3778 static int service_kill(Unit *u, KillWho who, int signo, sd_bus_error *error) {
3779 Service *s = SERVICE(u);
3780
3781 assert(s);
3782
3783 return unit_kill_common(u, who, signo, s->main_pid, s->control_pid, error);
3784 }
3785
3786 static int service_main_pid(Unit *u) {
3787 Service *s = SERVICE(u);
3788
3789 assert(s);
3790
3791 return s->main_pid;
3792 }
3793
3794 static int service_control_pid(Unit *u) {
3795 Service *s = SERVICE(u);
3796
3797 assert(s);
3798
3799 return s->control_pid;
3800 }
3801
3802 static bool service_needs_console(Unit *u) {
3803 Service *s = SERVICE(u);
3804
3805 assert(s);
3806
3807 /* We provide our own implementation of this here, instead of relying of the generic implementation
3808 * unit_needs_console() provides, since we want to return false if we are in SERVICE_EXITED state. */
3809
3810 if (!exec_context_may_touch_console(&s->exec_context))
3811 return false;
3812
3813 return IN_SET(s->state,
3814 SERVICE_START_PRE,
3815 SERVICE_START,
3816 SERVICE_START_POST,
3817 SERVICE_RUNNING,
3818 SERVICE_RELOAD,
3819 SERVICE_STOP,
3820 SERVICE_STOP_SIGABRT,
3821 SERVICE_STOP_SIGTERM,
3822 SERVICE_STOP_SIGKILL,
3823 SERVICE_STOP_POST,
3824 SERVICE_FINAL_SIGTERM,
3825 SERVICE_FINAL_SIGKILL);
3826 }
3827
3828 static const char* const service_restart_table[_SERVICE_RESTART_MAX] = {
3829 [SERVICE_RESTART_NO] = "no",
3830 [SERVICE_RESTART_ON_SUCCESS] = "on-success",
3831 [SERVICE_RESTART_ON_FAILURE] = "on-failure",
3832 [SERVICE_RESTART_ON_ABNORMAL] = "on-abnormal",
3833 [SERVICE_RESTART_ON_WATCHDOG] = "on-watchdog",
3834 [SERVICE_RESTART_ON_ABORT] = "on-abort",
3835 [SERVICE_RESTART_ALWAYS] = "always",
3836 };
3837
3838 DEFINE_STRING_TABLE_LOOKUP(service_restart, ServiceRestart);
3839
3840 static const char* const service_type_table[_SERVICE_TYPE_MAX] = {
3841 [SERVICE_SIMPLE] = "simple",
3842 [SERVICE_FORKING] = "forking",
3843 [SERVICE_ONESHOT] = "oneshot",
3844 [SERVICE_DBUS] = "dbus",
3845 [SERVICE_NOTIFY] = "notify",
3846 [SERVICE_IDLE] = "idle"
3847 };
3848
3849 DEFINE_STRING_TABLE_LOOKUP(service_type, ServiceType);
3850
3851 static const char* const service_exec_command_table[_SERVICE_EXEC_COMMAND_MAX] = {
3852 [SERVICE_EXEC_START_PRE] = "ExecStartPre",
3853 [SERVICE_EXEC_START] = "ExecStart",
3854 [SERVICE_EXEC_START_POST] = "ExecStartPost",
3855 [SERVICE_EXEC_RELOAD] = "ExecReload",
3856 [SERVICE_EXEC_STOP] = "ExecStop",
3857 [SERVICE_EXEC_STOP_POST] = "ExecStopPost",
3858 };
3859
3860 DEFINE_STRING_TABLE_LOOKUP(service_exec_command, ServiceExecCommand);
3861
3862 static const char* const notify_state_table[_NOTIFY_STATE_MAX] = {
3863 [NOTIFY_UNKNOWN] = "unknown",
3864 [NOTIFY_READY] = "ready",
3865 [NOTIFY_RELOADING] = "reloading",
3866 [NOTIFY_STOPPING] = "stopping",
3867 };
3868
3869 DEFINE_STRING_TABLE_LOOKUP(notify_state, NotifyState);
3870
3871 static const char* const service_result_table[_SERVICE_RESULT_MAX] = {
3872 [SERVICE_SUCCESS] = "success",
3873 [SERVICE_FAILURE_RESOURCES] = "resources",
3874 [SERVICE_FAILURE_PROTOCOL] = "protocol",
3875 [SERVICE_FAILURE_TIMEOUT] = "timeout",
3876 [SERVICE_FAILURE_EXIT_CODE] = "exit-code",
3877 [SERVICE_FAILURE_SIGNAL] = "signal",
3878 [SERVICE_FAILURE_CORE_DUMP] = "core-dump",
3879 [SERVICE_FAILURE_WATCHDOG] = "watchdog",
3880 [SERVICE_FAILURE_START_LIMIT_HIT] = "start-limit-hit",
3881 };
3882
3883 DEFINE_STRING_TABLE_LOOKUP(service_result, ServiceResult);
3884
3885 const UnitVTable service_vtable = {
3886 .object_size = sizeof(Service),
3887 .exec_context_offset = offsetof(Service, exec_context),
3888 .cgroup_context_offset = offsetof(Service, cgroup_context),
3889 .kill_context_offset = offsetof(Service, kill_context),
3890 .exec_runtime_offset = offsetof(Service, exec_runtime),
3891 .dynamic_creds_offset = offsetof(Service, dynamic_creds),
3892
3893 .sections =
3894 "Unit\0"
3895 "Service\0"
3896 "Install\0",
3897 .private_section = "Service",
3898
3899 .can_transient = true,
3900 .can_delegate = true,
3901
3902 .init = service_init,
3903 .done = service_done,
3904 .load = service_load,
3905 .release_resources = service_release_resources,
3906
3907 .coldplug = service_coldplug,
3908
3909 .dump = service_dump,
3910
3911 .start = service_start,
3912 .stop = service_stop,
3913 .reload = service_reload,
3914
3915 .can_reload = service_can_reload,
3916
3917 .kill = service_kill,
3918
3919 .serialize = service_serialize,
3920 .deserialize_item = service_deserialize_item,
3921
3922 .active_state = service_active_state,
3923 .sub_state_to_string = service_sub_state_to_string,
3924
3925 .will_restart = service_will_restart,
3926
3927 .may_gc = service_may_gc,
3928
3929 .sigchld_event = service_sigchld_event,
3930
3931 .reset_failed = service_reset_failed,
3932
3933 .notify_cgroup_empty = service_notify_cgroup_empty_event,
3934 .notify_message = service_notify_message,
3935
3936 .main_pid = service_main_pid,
3937 .control_pid = service_control_pid,
3938
3939 .bus_name_owner_change = service_bus_name_owner_change,
3940
3941 .bus_vtable = bus_service_vtable,
3942 .bus_set_property = bus_service_set_property,
3943 .bus_commit_properties = bus_service_commit_properties,
3944
3945 .get_timeout = service_get_timeout,
3946 .needs_console = service_needs_console,
3947
3948 .status_message_formats = {
3949 .starting_stopping = {
3950 [0] = "Starting %s...",
3951 [1] = "Stopping %s...",
3952 },
3953 .finished_start_job = {
3954 [JOB_DONE] = "Started %s.",
3955 [JOB_FAILED] = "Failed to start %s.",
3956 },
3957 .finished_stop_job = {
3958 [JOB_DONE] = "Stopped %s.",
3959 [JOB_FAILED] = "Stopped (with error) %s.",
3960 },
3961 },
3962 };
Unnamed repository; edit this file 'description' to name the repository.