1 /* SPDX-License-Identifier: LGPL-2.1+ */
7 #include "sd-messages.h"
9 #include "alloc-util.h"
11 #include "bus-error.h"
12 #include "bus-kernel.h"
14 #include "dbus-service.h"
15 #include "dbus-unit.h"
19 #include "exit-status.h"
22 #include "format-util.h"
24 #include "load-dropin.h"
25 #include "load-fragment.h"
28 #include "parse-util.h"
29 #include "path-util.h"
30 #include "process-util.h"
31 #include "serialize.h"
33 #include "signal-util.h"
35 #include "stdio-util.h"
36 #include "string-table.h"
37 #include "string-util.h"
39 #include "unit-name.h"
44 static const UnitActiveState state_translation_table
[_SERVICE_STATE_MAX
] = {
45 [SERVICE_DEAD
] = UNIT_INACTIVE
,
46 [SERVICE_START_PRE
] = UNIT_ACTIVATING
,
47 [SERVICE_START
] = UNIT_ACTIVATING
,
48 [SERVICE_START_POST
] = UNIT_ACTIVATING
,
49 [SERVICE_RUNNING
] = UNIT_ACTIVE
,
50 [SERVICE_EXITED
] = UNIT_ACTIVE
,
51 [SERVICE_RELOAD
] = UNIT_RELOADING
,
52 [SERVICE_STOP
] = UNIT_DEACTIVATING
,
53 [SERVICE_STOP_WATCHDOG
] = UNIT_DEACTIVATING
,
54 [SERVICE_STOP_SIGTERM
] = UNIT_DEACTIVATING
,
55 [SERVICE_STOP_SIGKILL
] = UNIT_DEACTIVATING
,
56 [SERVICE_STOP_POST
] = UNIT_DEACTIVATING
,
57 [SERVICE_FINAL_SIGTERM
] = UNIT_DEACTIVATING
,
58 [SERVICE_FINAL_SIGKILL
] = UNIT_DEACTIVATING
,
59 [SERVICE_FAILED
] = UNIT_FAILED
,
60 [SERVICE_AUTO_RESTART
] = UNIT_ACTIVATING
63 /* For Type=idle we never want to delay any other jobs, hence we
64 * consider idle jobs active as soon as we start working on them */
65 static const UnitActiveState state_translation_table_idle
[_SERVICE_STATE_MAX
] = {
66 [SERVICE_DEAD
] = UNIT_INACTIVE
,
67 [SERVICE_START_PRE
] = UNIT_ACTIVE
,
68 [SERVICE_START
] = UNIT_ACTIVE
,
69 [SERVICE_START_POST
] = UNIT_ACTIVE
,
70 [SERVICE_RUNNING
] = UNIT_ACTIVE
,
71 [SERVICE_EXITED
] = UNIT_ACTIVE
,
72 [SERVICE_RELOAD
] = UNIT_RELOADING
,
73 [SERVICE_STOP
] = UNIT_DEACTIVATING
,
74 [SERVICE_STOP_WATCHDOG
] = UNIT_DEACTIVATING
,
75 [SERVICE_STOP_SIGTERM
] = UNIT_DEACTIVATING
,
76 [SERVICE_STOP_SIGKILL
] = UNIT_DEACTIVATING
,
77 [SERVICE_STOP_POST
] = UNIT_DEACTIVATING
,
78 [SERVICE_FINAL_SIGTERM
] = UNIT_DEACTIVATING
,
79 [SERVICE_FINAL_SIGKILL
] = UNIT_DEACTIVATING
,
80 [SERVICE_FAILED
] = UNIT_FAILED
,
81 [SERVICE_AUTO_RESTART
] = UNIT_ACTIVATING
84 static int service_dispatch_inotify_io(sd_event_source
*source
, int fd
, uint32_t events
, void *userdata
);
85 static int service_dispatch_timer(sd_event_source
*source
, usec_t usec
, void *userdata
);
86 static int service_dispatch_watchdog(sd_event_source
*source
, usec_t usec
, void *userdata
);
87 static int service_dispatch_exec_io(sd_event_source
*source
, int fd
, uint32_t events
, void *userdata
);
89 static void service_enter_signal(Service
*s
, ServiceState state
, ServiceResult f
);
90 static void service_enter_reload_by_notify(Service
*s
);
92 static void service_init(Unit
*u
) {
93 Service
*s
= SERVICE(u
);
96 assert(u
->load_state
== UNIT_STUB
);
98 s
->timeout_start_usec
= u
->manager
->default_timeout_start_usec
;
99 s
->timeout_stop_usec
= u
->manager
->default_timeout_stop_usec
;
100 s
->restart_usec
= u
->manager
->default_restart_usec
;
101 s
->runtime_max_usec
= USEC_INFINITY
;
102 s
->type
= _SERVICE_TYPE_INVALID
;
104 s
->stdin_fd
= s
->stdout_fd
= s
->stderr_fd
= -1;
105 s
->guess_main_pid
= true;
107 s
->control_command_id
= _SERVICE_EXEC_COMMAND_INVALID
;
109 s
->exec_context
.keyring_mode
= MANAGER_IS_SYSTEM(u
->manager
) ?
110 EXEC_KEYRING_PRIVATE
: EXEC_KEYRING_INHERIT
;
112 s
->watchdog_original_usec
= USEC_INFINITY
;
115 static void service_unwatch_control_pid(Service
*s
) {
118 if (s
->control_pid
<= 0)
121 unit_unwatch_pid(UNIT(s
), s
->control_pid
);
125 static void service_unwatch_main_pid(Service
*s
) {
128 if (s
->main_pid
<= 0)
131 unit_unwatch_pid(UNIT(s
), s
->main_pid
);
135 static void service_unwatch_pid_file(Service
*s
) {
136 if (!s
->pid_file_pathspec
)
139 log_unit_debug(UNIT(s
), "Stopping watch for PID file %s", s
->pid_file_pathspec
->path
);
140 path_spec_unwatch(s
->pid_file_pathspec
);
141 path_spec_done(s
->pid_file_pathspec
);
142 s
->pid_file_pathspec
= mfree(s
->pid_file_pathspec
);
145 static int service_set_main_pid(Service
*s
, pid_t pid
) {
151 if (pid
== getpid_cached())
154 if (s
->main_pid
== pid
&& s
->main_pid_known
)
157 if (s
->main_pid
!= pid
) {
158 service_unwatch_main_pid(s
);
159 exec_status_start(&s
->main_exec_status
, pid
);
163 s
->main_pid_known
= true;
164 s
->main_pid_alien
= pid_is_my_child(pid
) == 0;
166 if (s
->main_pid_alien
)
167 log_unit_warning(UNIT(s
), "Supervising process "PID_FMT
" which is not our child. We'll most likely not notice when it exits.", pid
);
172 void service_close_socket_fd(Service
*s
) {
175 /* Undo the effect of service_set_socket_fd(). */
177 s
->socket_fd
= asynchronous_close(s
->socket_fd
);
179 if (UNIT_ISSET(s
->accept_socket
)) {
180 socket_connection_unref(SOCKET(UNIT_DEREF(s
->accept_socket
)));
181 unit_ref_unset(&s
->accept_socket
);
185 static void service_stop_watchdog(Service
*s
) {
188 s
->watchdog_event_source
= sd_event_source_unref(s
->watchdog_event_source
);
189 s
->watchdog_timestamp
= DUAL_TIMESTAMP_NULL
;
192 static usec_t
service_get_watchdog_usec(Service
*s
) {
195 if (s
->watchdog_override_enable
)
196 return s
->watchdog_override_usec
;
198 return s
->watchdog_original_usec
;
201 static void service_start_watchdog(Service
*s
) {
202 usec_t watchdog_usec
;
207 watchdog_usec
= service_get_watchdog_usec(s
);
208 if (IN_SET(watchdog_usec
, 0, USEC_INFINITY
)) {
209 service_stop_watchdog(s
);
213 if (s
->watchdog_event_source
) {
214 r
= sd_event_source_set_time(s
->watchdog_event_source
, usec_add(s
->watchdog_timestamp
.monotonic
, watchdog_usec
));
216 log_unit_warning_errno(UNIT(s
), r
, "Failed to reset watchdog timer: %m");
220 r
= sd_event_source_set_enabled(s
->watchdog_event_source
, SD_EVENT_ONESHOT
);
222 r
= sd_event_add_time(
223 UNIT(s
)->manager
->event
,
224 &s
->watchdog_event_source
,
226 usec_add(s
->watchdog_timestamp
.monotonic
, watchdog_usec
), 0,
227 service_dispatch_watchdog
, s
);
229 log_unit_warning_errno(UNIT(s
), r
, "Failed to add watchdog timer: %m");
233 (void) sd_event_source_set_description(s
->watchdog_event_source
, "service-watchdog");
235 /* Let's process everything else which might be a sign
236 * of living before we consider a service died. */
237 r
= sd_event_source_set_priority(s
->watchdog_event_source
, SD_EVENT_PRIORITY_IDLE
);
240 log_unit_warning_errno(UNIT(s
), r
, "Failed to install watchdog timer: %m");
243 static void service_extend_event_source_timeout(Service
*s
, sd_event_source
*source
, usec_t extended
) {
249 /* Extends the specified event source timer to at least the specified time, unless it is already later
255 r
= sd_event_source_get_time(source
, ¤t
);
258 (void) sd_event_source_get_description(s
->timer_event_source
, &desc
);
259 log_unit_warning_errno(UNIT(s
), r
, "Failed to retrieve timeout time for event source '%s', ignoring: %m", strna(desc
));
263 if (current
>= extended
) /* Current timeout is already longer, ignore this. */
266 r
= sd_event_source_set_time(source
, extended
);
269 (void) sd_event_source_get_description(s
->timer_event_source
, &desc
);
270 log_unit_warning_errno(UNIT(s
), r
, "Failed to set timeout time for even source '%s', ignoring %m", strna(desc
));
274 static void service_extend_timeout(Service
*s
, usec_t extend_timeout_usec
) {
279 if (IN_SET(extend_timeout_usec
, 0, USEC_INFINITY
))
282 extended
= usec_add(now(CLOCK_MONOTONIC
), extend_timeout_usec
);
284 service_extend_event_source_timeout(s
, s
->timer_event_source
, extended
);
285 service_extend_event_source_timeout(s
, s
->watchdog_event_source
, extended
);
288 static void service_reset_watchdog(Service
*s
) {
291 dual_timestamp_get(&s
->watchdog_timestamp
);
292 service_start_watchdog(s
);
295 static void service_override_watchdog_timeout(Service
*s
, usec_t watchdog_override_usec
) {
298 s
->watchdog_override_enable
= true;
299 s
->watchdog_override_usec
= watchdog_override_usec
;
300 service_reset_watchdog(s
);
302 log_unit_debug(UNIT(s
), "watchdog_usec="USEC_FMT
, s
->watchdog_usec
);
303 log_unit_debug(UNIT(s
), "watchdog_override_usec="USEC_FMT
, s
->watchdog_override_usec
);
306 static void service_fd_store_unlink(ServiceFDStore
*fs
) {
312 assert(fs
->service
->n_fd_store
> 0);
313 LIST_REMOVE(fd_store
, fs
->service
->fd_store
, fs
);
314 fs
->service
->n_fd_store
--;
317 if (fs
->event_source
) {
318 sd_event_source_set_enabled(fs
->event_source
, SD_EVENT_OFF
);
319 sd_event_source_unref(fs
->event_source
);
327 static void service_release_fd_store(Service
*s
) {
330 if (s
->n_keep_fd_store
> 0)
333 log_unit_debug(UNIT(s
), "Releasing all stored fds");
335 service_fd_store_unlink(s
->fd_store
);
337 assert(s
->n_fd_store
== 0);
340 static void service_release_resources(Unit
*u
) {
341 Service
*s
= SERVICE(u
);
345 if (!s
->fd_store
&& s
->stdin_fd
< 0 && s
->stdout_fd
< 0 && s
->stderr_fd
< 0)
348 log_unit_debug(u
, "Releasing resources.");
350 s
->stdin_fd
= safe_close(s
->stdin_fd
);
351 s
->stdout_fd
= safe_close(s
->stdout_fd
);
352 s
->stderr_fd
= safe_close(s
->stderr_fd
);
354 service_release_fd_store(s
);
357 static void service_done(Unit
*u
) {
358 Service
*s
= SERVICE(u
);
362 s
->pid_file
= mfree(s
->pid_file
);
363 s
->status_text
= mfree(s
->status_text
);
365 s
->exec_runtime
= exec_runtime_unref(s
->exec_runtime
, false);
366 exec_command_free_array(s
->exec_command
, _SERVICE_EXEC_COMMAND_MAX
);
367 s
->control_command
= NULL
;
368 s
->main_command
= NULL
;
370 dynamic_creds_unref(&s
->dynamic_creds
);
372 exit_status_set_free(&s
->restart_prevent_status
);
373 exit_status_set_free(&s
->restart_force_status
);
374 exit_status_set_free(&s
->success_status
);
376 /* This will leak a process, but at least no memory or any of
378 service_unwatch_main_pid(s
);
379 service_unwatch_control_pid(s
);
380 service_unwatch_pid_file(s
);
383 unit_unwatch_bus_name(u
, s
->bus_name
);
384 s
->bus_name
= mfree(s
->bus_name
);
387 s
->bus_name_owner
= mfree(s
->bus_name_owner
);
389 s
->usb_function_descriptors
= mfree(s
->usb_function_descriptors
);
390 s
->usb_function_strings
= mfree(s
->usb_function_strings
);
392 service_close_socket_fd(s
);
393 s
->peer
= socket_peer_unref(s
->peer
);
395 unit_ref_unset(&s
->accept_socket
);
397 service_stop_watchdog(s
);
399 s
->timer_event_source
= sd_event_source_unref(s
->timer_event_source
);
400 s
->exec_fd_event_source
= sd_event_source_unref(s
->exec_fd_event_source
);
402 service_release_resources(u
);
405 static int on_fd_store_io(sd_event_source
*e
, int fd
, uint32_t revents
, void *userdata
) {
406 ServiceFDStore
*fs
= userdata
;
411 /* If we get either EPOLLHUP or EPOLLERR, it's time to remove this entry from the fd store */
412 log_unit_debug(UNIT(fs
->service
),
413 "Received %s on stored fd %d (%s), closing.",
414 revents
& EPOLLERR
? "EPOLLERR" : "EPOLLHUP",
415 fs
->fd
, strna(fs
->fdname
));
416 service_fd_store_unlink(fs
);
420 static int service_add_fd_store(Service
*s
, int fd
, const char *name
) {
424 /* fd is always consumed if we return >= 0 */
429 if (s
->n_fd_store
>= s
->n_fd_store_max
)
430 return -EXFULL
; /* Our store is full.
431 * Use this errno rather than E[NM]FILE to distinguish from
432 * the case where systemd itself hits the file limit. */
434 LIST_FOREACH(fd_store
, fs
, s
->fd_store
) {
435 r
= same_fd(fs
->fd
, fd
);
440 return 0; /* fd already included */
444 fs
= new0(ServiceFDStore
, 1);
450 fs
->fdname
= strdup(name
?: "stored");
456 r
= sd_event_add_io(UNIT(s
)->manager
->event
, &fs
->event_source
, fd
, 0, on_fd_store_io
, fs
);
457 if (r
< 0 && r
!= -EPERM
) { /* EPERM indicates fds that aren't pollable, which is OK */
462 (void) sd_event_source_set_description(fs
->event_source
, "service-fd-store");
464 LIST_PREPEND(fd_store
, s
->fd_store
, fs
);
467 return 1; /* fd newly stored */
470 static int service_add_fd_store_set(Service
*s
, FDSet
*fds
, const char *name
) {
475 while (fdset_size(fds
) > 0) {
476 _cleanup_close_
int fd
= -1;
478 fd
= fdset_steal_first(fds
);
482 r
= service_add_fd_store(s
, fd
, name
);
484 return log_unit_warning_errno(UNIT(s
), r
,
485 "Cannot store more fds than FileDescriptorStoreMax=%u, closing remaining.",
488 return log_unit_error_errno(UNIT(s
), r
, "Failed to add fd to store: %m");
490 log_unit_debug(UNIT(s
), "Added fd %u (%s) to fd store.", fd
, strna(name
));
497 static void service_remove_fd_store(Service
*s
, const char *name
) {
498 ServiceFDStore
*fs
, *n
;
503 LIST_FOREACH_SAFE(fd_store
, fs
, n
, s
->fd_store
) {
504 if (!streq(fs
->fdname
, name
))
507 log_unit_debug(UNIT(s
), "Got explicit request to remove fd %i (%s), closing.", fs
->fd
, name
);
508 service_fd_store_unlink(fs
);
512 static int service_arm_timer(Service
*s
, usec_t usec
) {
517 if (s
->timer_event_source
) {
518 r
= sd_event_source_set_time(s
->timer_event_source
, usec
);
522 return sd_event_source_set_enabled(s
->timer_event_source
, SD_EVENT_ONESHOT
);
525 if (usec
== USEC_INFINITY
)
528 r
= sd_event_add_time(
529 UNIT(s
)->manager
->event
,
530 &s
->timer_event_source
,
533 service_dispatch_timer
, s
);
537 (void) sd_event_source_set_description(s
->timer_event_source
, "service-timer");
542 static int service_verify(Service
*s
) {
545 if (UNIT(s
)->load_state
!= UNIT_LOADED
)
548 if (!s
->exec_command
[SERVICE_EXEC_START
] && !s
->exec_command
[SERVICE_EXEC_STOP
]
549 && UNIT(s
)->success_action
== EMERGENCY_ACTION_NONE
) {
550 /* FailureAction= only makes sense if one of the start or stop commands is specified.
551 * SuccessAction= will be executed unconditionally if no commands are specified. Hence,
552 * either a command or SuccessAction= are required. */
554 log_unit_error(UNIT(s
), "Service has no ExecStart=, ExecStop=, or SuccessAction=. Refusing.");
558 if (s
->type
!= SERVICE_ONESHOT
&& !s
->exec_command
[SERVICE_EXEC_START
]) {
559 log_unit_error(UNIT(s
), "Service has no ExecStart= setting, which is only allowed for Type=oneshot services. Refusing.");
563 if (!s
->remain_after_exit
&& !s
->exec_command
[SERVICE_EXEC_START
] && UNIT(s
)->success_action
== EMERGENCY_ACTION_NONE
) {
564 log_unit_error(UNIT(s
), "Service has no ExecStart= and no SuccessAction= settings and does not have RemainAfterExit=yes set. Refusing.");
568 if (s
->type
!= SERVICE_ONESHOT
&& s
->exec_command
[SERVICE_EXEC_START
]->command_next
) {
569 log_unit_error(UNIT(s
), "Service has more than one ExecStart= setting, which is only allowed for Type=oneshot services. Refusing.");
573 if (s
->type
== SERVICE_ONESHOT
&& s
->restart
!= SERVICE_RESTART_NO
) {
574 log_unit_error(UNIT(s
), "Service has Restart= setting other than no, which isn't allowed for Type=oneshot services. Refusing.");
578 if (s
->type
== SERVICE_ONESHOT
&& !exit_status_set_is_empty(&s
->restart_force_status
)) {
579 log_unit_error(UNIT(s
), "Service has RestartForceStatus= set, which isn't allowed for Type=oneshot services. Refusing.");
583 if (s
->type
== SERVICE_DBUS
&& !s
->bus_name
) {
584 log_unit_error(UNIT(s
), "Service is of type D-Bus but no D-Bus service name has been specified. Refusing.");
588 if (s
->bus_name
&& s
->type
!= SERVICE_DBUS
)
589 log_unit_warning(UNIT(s
), "Service has a D-Bus service name specified, but is not of type dbus. Ignoring.");
591 if (s
->exec_context
.pam_name
&& !IN_SET(s
->kill_context
.kill_mode
, KILL_CONTROL_GROUP
, KILL_MIXED
)) {
592 log_unit_error(UNIT(s
), "Service has PAM enabled. Kill mode must be set to 'control-group' or 'mixed'. Refusing.");
596 if (s
->usb_function_descriptors
&& !s
->usb_function_strings
)
597 log_unit_warning(UNIT(s
), "Service has USBFunctionDescriptors= setting, but no USBFunctionStrings=. Ignoring.");
599 if (!s
->usb_function_descriptors
&& s
->usb_function_strings
)
600 log_unit_warning(UNIT(s
), "Service has USBFunctionStrings= setting, but no USBFunctionDescriptors=. Ignoring.");
602 if (s
->runtime_max_usec
!= USEC_INFINITY
&& s
->type
== SERVICE_ONESHOT
)
603 log_unit_warning(UNIT(s
), "MaxRuntimeSec= has no effect in combination with Type=oneshot. Ignoring.");
608 static int service_add_default_dependencies(Service
*s
) {
613 if (!UNIT(s
)->default_dependencies
)
616 /* Add a number of automatic dependencies useful for the
617 * majority of services. */
619 if (MANAGER_IS_SYSTEM(UNIT(s
)->manager
)) {
620 /* First, pull in the really early boot stuff, and
621 * require it, so that we fail if we can't acquire
624 r
= unit_add_two_dependencies_by_name(UNIT(s
), UNIT_AFTER
, UNIT_REQUIRES
, SPECIAL_SYSINIT_TARGET
, true, UNIT_DEPENDENCY_DEFAULT
);
629 /* In the --user instance there's no sysinit.target,
630 * in that case require basic.target instead. */
632 r
= unit_add_dependency_by_name(UNIT(s
), UNIT_REQUIRES
, SPECIAL_BASIC_TARGET
, true, UNIT_DEPENDENCY_DEFAULT
);
637 /* Second, if the rest of the base system is in the same
638 * transaction, order us after it, but do not pull it in or
639 * even require it. */
640 r
= unit_add_dependency_by_name(UNIT(s
), UNIT_AFTER
, SPECIAL_BASIC_TARGET
, true, UNIT_DEPENDENCY_DEFAULT
);
644 /* Third, add us in for normal shutdown. */
645 return unit_add_two_dependencies_by_name(UNIT(s
), UNIT_BEFORE
, UNIT_CONFLICTS
, SPECIAL_SHUTDOWN_TARGET
, true, UNIT_DEPENDENCY_DEFAULT
);
648 static void service_fix_output(Service
*s
) {
651 /* If nothing has been explicitly configured, patch default output in. If input is socket/tty we avoid this
652 * however, since in that case we want output to default to the same place as we read input from. */
654 if (s
->exec_context
.std_error
== EXEC_OUTPUT_INHERIT
&&
655 s
->exec_context
.std_output
== EXEC_OUTPUT_INHERIT
&&
656 s
->exec_context
.std_input
== EXEC_INPUT_NULL
)
657 s
->exec_context
.std_error
= UNIT(s
)->manager
->default_std_error
;
659 if (s
->exec_context
.std_output
== EXEC_OUTPUT_INHERIT
&&
660 s
->exec_context
.std_input
== EXEC_INPUT_NULL
)
661 s
->exec_context
.std_output
= UNIT(s
)->manager
->default_std_output
;
663 if (s
->exec_context
.std_input
== EXEC_INPUT_NULL
&&
664 s
->exec_context
.stdin_data_size
> 0)
665 s
->exec_context
.std_input
= EXEC_INPUT_DATA
;
668 static int service_setup_bus_name(Service
*s
) {
676 r
= unit_add_dependency_by_name(UNIT(s
), UNIT_REQUIRES
, SPECIAL_DBUS_SOCKET
, true, UNIT_DEPENDENCY_FILE
);
678 return log_unit_error_errno(UNIT(s
), r
, "Failed to add dependency on " SPECIAL_DBUS_SOCKET
": %m");
680 /* We always want to be ordered against dbus.socket if both are in the transaction. */
681 r
= unit_add_dependency_by_name(UNIT(s
), UNIT_AFTER
, SPECIAL_DBUS_SOCKET
, true, UNIT_DEPENDENCY_FILE
);
683 return log_unit_error_errno(UNIT(s
), r
, "Failed to add dependency on " SPECIAL_DBUS_SOCKET
": %m");
685 r
= unit_watch_bus_name(UNIT(s
), s
->bus_name
);
687 return log_unit_error_errno(UNIT(s
), r
, "Two services allocated for the same bus name %s, refusing operation.", s
->bus_name
);
689 return log_unit_error_errno(UNIT(s
), r
, "Cannot watch bus name %s: %m", s
->bus_name
);
694 static int service_add_extras(Service
*s
) {
699 if (s
->type
== _SERVICE_TYPE_INVALID
) {
700 /* Figure out a type automatically */
702 s
->type
= SERVICE_DBUS
;
703 else if (s
->exec_command
[SERVICE_EXEC_START
])
704 s
->type
= SERVICE_SIMPLE
;
706 s
->type
= SERVICE_ONESHOT
;
709 /* Oneshot services have disabled start timeout by default */
710 if (s
->type
== SERVICE_ONESHOT
&& !s
->start_timeout_defined
)
711 s
->timeout_start_usec
= USEC_INFINITY
;
713 service_fix_output(s
);
715 r
= unit_patch_contexts(UNIT(s
));
719 r
= unit_add_exec_dependencies(UNIT(s
), &s
->exec_context
);
723 r
= unit_set_default_slice(UNIT(s
));
727 /* If the service needs the notify socket, let's enable it automatically. */
728 if (s
->notify_access
== NOTIFY_NONE
&&
729 (s
->type
== SERVICE_NOTIFY
|| s
->watchdog_usec
> 0 || s
->n_fd_store_max
> 0))
730 s
->notify_access
= NOTIFY_MAIN
;
732 r
= service_add_default_dependencies(s
);
736 r
= service_setup_bus_name(s
);
743 static int service_load(Unit
*u
) {
744 Service
*s
= SERVICE(u
);
749 /* Load a .service file */
750 r
= unit_load_fragment(u
);
754 /* Still nothing found? Then let's give up */
755 if (u
->load_state
== UNIT_STUB
)
758 /* This is a new unit? Then let's add in some extras */
759 if (u
->load_state
== UNIT_LOADED
) {
761 /* We were able to load something, then let's add in
762 * the dropin directories. */
763 r
= unit_load_dropin(u
);
767 /* This is a new unit? Then let's add in some
769 r
= service_add_extras(s
);
774 return service_verify(s
);
777 static void service_dump(Unit
*u
, FILE *f
, const char *prefix
) {
778 char buf_restart
[FORMAT_TIMESPAN_MAX
], buf_start
[FORMAT_TIMESPAN_MAX
], buf_stop
[FORMAT_TIMESPAN_MAX
];
779 char buf_runtime
[FORMAT_TIMESPAN_MAX
], buf_watchdog
[FORMAT_TIMESPAN_MAX
];
780 ServiceExecCommand c
;
781 Service
*s
= SERVICE(u
);
786 prefix
= strempty(prefix
);
787 prefix2
= strjoina(prefix
, "\t");
790 "%sService State: %s\n"
792 "%sReload Result: %s\n"
793 "%sPermissionsStartOnly: %s\n"
794 "%sRootDirectoryStartOnly: %s\n"
795 "%sRemainAfterExit: %s\n"
796 "%sGuessMainPID: %s\n"
799 "%sNotifyAccess: %s\n"
800 "%sNotifyState: %s\n",
801 prefix
, service_state_to_string(s
->state
),
802 prefix
, service_result_to_string(s
->result
),
803 prefix
, service_result_to_string(s
->reload_result
),
804 prefix
, yes_no(s
->permissions_start_only
),
805 prefix
, yes_no(s
->root_directory_start_only
),
806 prefix
, yes_no(s
->remain_after_exit
),
807 prefix
, yes_no(s
->guess_main_pid
),
808 prefix
, service_type_to_string(s
->type
),
809 prefix
, service_restart_to_string(s
->restart
),
810 prefix
, notify_access_to_string(s
->notify_access
),
811 prefix
, notify_state_to_string(s
->notify_state
));
813 if (s
->control_pid
> 0)
815 "%sControl PID: "PID_FMT
"\n",
816 prefix
, s
->control_pid
);
820 "%sMain PID: "PID_FMT
"\n"
821 "%sMain PID Known: %s\n"
822 "%sMain PID Alien: %s\n",
824 prefix
, yes_no(s
->main_pid_known
),
825 prefix
, yes_no(s
->main_pid_alien
));
830 prefix
, s
->pid_file
);
835 "%sBus Name Good: %s\n",
837 prefix
, yes_no(s
->bus_name_good
));
839 if (UNIT_ISSET(s
->accept_socket
))
841 "%sAccept Socket: %s\n",
842 prefix
, UNIT_DEREF(s
->accept_socket
)->id
);
846 "%sTimeoutStartSec: %s\n"
847 "%sTimeoutStopSec: %s\n"
848 "%sRuntimeMaxSec: %s\n"
849 "%sWatchdogSec: %s\n",
850 prefix
, format_timespan(buf_restart
, sizeof(buf_restart
), s
->restart_usec
, USEC_PER_SEC
),
851 prefix
, format_timespan(buf_start
, sizeof(buf_start
), s
->timeout_start_usec
, USEC_PER_SEC
),
852 prefix
, format_timespan(buf_stop
, sizeof(buf_stop
), s
->timeout_stop_usec
, USEC_PER_SEC
),
853 prefix
, format_timespan(buf_runtime
, sizeof(buf_runtime
), s
->runtime_max_usec
, USEC_PER_SEC
),
854 prefix
, format_timespan(buf_watchdog
, sizeof(buf_watchdog
), s
->watchdog_usec
, USEC_PER_SEC
));
856 kill_context_dump(&s
->kill_context
, f
, prefix
);
857 exec_context_dump(&s
->exec_context
, f
, prefix
);
859 for (c
= 0; c
< _SERVICE_EXEC_COMMAND_MAX
; c
++) {
861 if (!s
->exec_command
[c
])
864 fprintf(f
, "%s-> %s:\n",
865 prefix
, service_exec_command_to_string(c
));
867 exec_command_dump_list(s
->exec_command
[c
], f
, prefix2
);
871 fprintf(f
, "%sStatus Text: %s\n",
872 prefix
, s
->status_text
);
874 if (s
->n_fd_store_max
> 0)
876 "%sFile Descriptor Store Max: %u\n"
877 "%sFile Descriptor Store Current: %zu\n",
878 prefix
, s
->n_fd_store_max
,
879 prefix
, s
->n_fd_store
);
881 cgroup_context_dump(&s
->cgroup_context
, f
, prefix
);
884 static int service_is_suitable_main_pid(Service
*s
, pid_t pid
, int prio
) {
888 assert(pid_is_valid(pid
));
890 /* Checks whether the specified PID is suitable as main PID for this service. returns negative if not, 0 if the
891 * PID is questionnable but should be accepted if the source of configuration is trusted. > 0 if the PID is
894 if (pid
== getpid_cached() || pid
== 1) {
895 log_unit_full(UNIT(s
), prio
, 0, "New main PID "PID_FMT
" is the manager, refusing.", pid
);
899 if (pid
== s
->control_pid
) {
900 log_unit_full(UNIT(s
), prio
, 0, "New main PID "PID_FMT
" is the control process, refusing.", pid
);
904 if (!pid_is_alive(pid
)) {
905 log_unit_full(UNIT(s
), prio
, 0, "New main PID "PID_FMT
" does not exist or is a zombie.", pid
);
909 owner
= manager_get_unit_by_pid(UNIT(s
)->manager
, pid
);
910 if (owner
== UNIT(s
)) {
911 log_unit_debug(UNIT(s
), "New main PID "PID_FMT
" belongs to service, we are happy.", pid
);
912 return 1; /* Yay, it's definitely a good PID */
915 return 0; /* Hmm it's a suspicious PID, let's accept it if configuration source is trusted */
918 static int service_load_pid_file(Service
*s
, bool may_warn
) {
919 char procfs
[STRLEN("/proc/self/fd/") + DECIMAL_STR_MAX(int)];
920 bool questionable_pid_file
= false;
921 _cleanup_free_
char *k
= NULL
;
922 _cleanup_close_
int fd
= -1;
931 prio
= may_warn
? LOG_INFO
: LOG_DEBUG
;
933 fd
= chase_symlinks(s
->pid_file
, NULL
, CHASE_OPEN
|CHASE_SAFE
, NULL
);
934 if (fd
== -ENOLINK
) {
935 log_unit_full(UNIT(s
), LOG_DEBUG
, fd
, "Potentially unsafe symlink chain, will now retry with relaxed checks: %s", s
->pid_file
);
937 questionable_pid_file
= true;
939 fd
= chase_symlinks(s
->pid_file
, NULL
, CHASE_OPEN
, NULL
);
942 return log_unit_full(UNIT(s
), prio
, fd
, "Can't open PID file %s (yet?) after %s: %m", s
->pid_file
, service_state_to_string(s
->state
));
944 /* Let's read the PID file now that we chased it down. But we need to convert the O_PATH fd chase_symlinks() returned us into a proper fd first. */
945 xsprintf(procfs
, "/proc/self/fd/%i", fd
);
946 r
= read_one_line_file(procfs
, &k
);
948 return log_unit_error_errno(UNIT(s
), r
, "Can't convert PID files %s O_PATH file descriptor to proper file descriptor: %m", s
->pid_file
);
950 r
= parse_pid(k
, &pid
);
952 return log_unit_full(UNIT(s
), prio
, r
, "Failed to parse PID from file %s: %m", s
->pid_file
);
954 if (s
->main_pid_known
&& pid
== s
->main_pid
)
957 r
= service_is_suitable_main_pid(s
, pid
, prio
);
963 if (questionable_pid_file
) {
964 log_unit_error(UNIT(s
), "Refusing to accept PID outside of service control group, acquired through unsafe symlink chain: %s", s
->pid_file
);
968 /* Hmm, it's not clear if the new main PID is safe. Let's allow this if the PID file is owned by root */
970 if (fstat(fd
, &st
) < 0)
971 return log_unit_error_errno(UNIT(s
), errno
, "Failed to fstat() PID file O_PATH fd: %m");
973 if (st
.st_uid
!= 0) {
974 log_unit_error(UNIT(s
), "New main PID "PID_FMT
" does not belong to service, and PID file is not owned by root. Refusing.", pid
);
978 log_unit_debug(UNIT(s
), "New main PID "PID_FMT
" does not belong to service, but we'll accept it since PID file is owned by root.", pid
);
981 if (s
->main_pid_known
) {
982 log_unit_debug(UNIT(s
), "Main PID changing: "PID_FMT
" -> "PID_FMT
, s
->main_pid
, pid
);
984 service_unwatch_main_pid(s
);
985 s
->main_pid_known
= false;
987 log_unit_debug(UNIT(s
), "Main PID loaded: "PID_FMT
, pid
);
989 r
= service_set_main_pid(s
, pid
);
993 r
= unit_watch_pid(UNIT(s
), pid
, false);
994 if (r
< 0) /* FIXME: we need to do something here */
995 return log_unit_warning_errno(UNIT(s
), r
, "Failed to watch PID "PID_FMT
" for service: %m", pid
);
1000 static void service_search_main_pid(Service
*s
) {
1006 /* If we know it anyway, don't ever fallback to unreliable
1008 if (s
->main_pid_known
)
1011 if (!s
->guess_main_pid
)
1014 assert(s
->main_pid
<= 0);
1016 if (unit_search_main_pid(UNIT(s
), &pid
) < 0)
1019 log_unit_debug(UNIT(s
), "Main PID guessed: "PID_FMT
, pid
);
1020 if (service_set_main_pid(s
, pid
) < 0)
1023 r
= unit_watch_pid(UNIT(s
), pid
, false);
1025 /* FIXME: we need to do something here */
1026 log_unit_warning_errno(UNIT(s
), r
, "Failed to watch PID "PID_FMT
" from: %m", pid
);
1029 static void service_set_state(Service
*s
, ServiceState state
) {
1030 ServiceState old_state
;
1031 const UnitActiveState
*table
;
1035 if (s
->state
!= state
)
1036 bus_unit_send_pending_change_signal(UNIT(s
), false);
1038 table
= s
->type
== SERVICE_IDLE
? state_translation_table_idle
: state_translation_table
;
1040 old_state
= s
->state
;
1043 service_unwatch_pid_file(s
);
1046 SERVICE_START_PRE
, SERVICE_START
, SERVICE_START_POST
,
1049 SERVICE_STOP
, SERVICE_STOP_WATCHDOG
, SERVICE_STOP_SIGTERM
, SERVICE_STOP_SIGKILL
, SERVICE_STOP_POST
,
1050 SERVICE_FINAL_SIGTERM
, SERVICE_FINAL_SIGKILL
,
1051 SERVICE_AUTO_RESTART
))
1052 s
->timer_event_source
= sd_event_source_unref(s
->timer_event_source
);
1055 SERVICE_START
, SERVICE_START_POST
,
1056 SERVICE_RUNNING
, SERVICE_RELOAD
,
1057 SERVICE_STOP
, SERVICE_STOP_WATCHDOG
, SERVICE_STOP_SIGTERM
, SERVICE_STOP_SIGKILL
, SERVICE_STOP_POST
,
1058 SERVICE_FINAL_SIGTERM
, SERVICE_FINAL_SIGKILL
)) {
1059 service_unwatch_main_pid(s
);
1060 s
->main_command
= NULL
;
1064 SERVICE_START_PRE
, SERVICE_START
, SERVICE_START_POST
,
1066 SERVICE_STOP
, SERVICE_STOP_WATCHDOG
, SERVICE_STOP_SIGTERM
, SERVICE_STOP_SIGKILL
, SERVICE_STOP_POST
,
1067 SERVICE_FINAL_SIGTERM
, SERVICE_FINAL_SIGKILL
)) {
1068 service_unwatch_control_pid(s
);
1069 s
->control_command
= NULL
;
1070 s
->control_command_id
= _SERVICE_EXEC_COMMAND_INVALID
;
1073 if (IN_SET(state
, SERVICE_DEAD
, SERVICE_FAILED
, SERVICE_AUTO_RESTART
)) {
1074 unit_unwatch_all_pids(UNIT(s
));
1075 unit_dequeue_rewatch_pids(UNIT(s
));
1079 SERVICE_START_PRE
, SERVICE_START
, SERVICE_START_POST
,
1080 SERVICE_RUNNING
, SERVICE_RELOAD
,
1081 SERVICE_STOP
, SERVICE_STOP_WATCHDOG
, SERVICE_STOP_SIGTERM
, SERVICE_STOP_SIGKILL
, SERVICE_STOP_POST
,
1082 SERVICE_FINAL_SIGTERM
, SERVICE_FINAL_SIGKILL
) &&
1083 !(state
== SERVICE_DEAD
&& UNIT(s
)->job
))
1084 service_close_socket_fd(s
);
1086 if (state
!= SERVICE_START
)
1087 s
->exec_fd_event_source
= sd_event_source_unref(s
->exec_fd_event_source
);
1089 if (!IN_SET(state
, SERVICE_START_POST
, SERVICE_RUNNING
, SERVICE_RELOAD
))
1090 service_stop_watchdog(s
);
1092 /* For the inactive states unit_notify() will trim the cgroup,
1093 * but for exit we have to do that ourselves... */
1094 if (state
== SERVICE_EXITED
&& !MANAGER_IS_RELOADING(UNIT(s
)->manager
))
1095 unit_prune_cgroup(UNIT(s
));
1097 if (old_state
!= state
)
1098 log_unit_debug(UNIT(s
), "Changed %s -> %s", service_state_to_string(old_state
), service_state_to_string(state
));
1100 unit_notify(UNIT(s
), table
[old_state
], table
[state
],
1101 (s
->reload_result
== SERVICE_SUCCESS
? 0 : UNIT_NOTIFY_RELOAD_FAILURE
) |
1102 (s
->will_auto_restart
? UNIT_NOTIFY_WILL_AUTO_RESTART
: 0));
1105 static usec_t
service_coldplug_timeout(Service
*s
) {
1108 switch (s
->deserialized_state
) {
1110 case SERVICE_START_PRE
:
1112 case SERVICE_START_POST
:
1113 case SERVICE_RELOAD
:
1114 return usec_add(UNIT(s
)->state_change_timestamp
.monotonic
, s
->timeout_start_usec
);
1116 case SERVICE_RUNNING
:
1117 return usec_add(UNIT(s
)->active_enter_timestamp
.monotonic
, s
->runtime_max_usec
);
1120 case SERVICE_STOP_WATCHDOG
:
1121 case SERVICE_STOP_SIGTERM
:
1122 case SERVICE_STOP_SIGKILL
:
1123 case SERVICE_STOP_POST
:
1124 case SERVICE_FINAL_SIGTERM
:
1125 case SERVICE_FINAL_SIGKILL
:
1126 return usec_add(UNIT(s
)->state_change_timestamp
.monotonic
, s
->timeout_stop_usec
);
1128 case SERVICE_AUTO_RESTART
:
1129 return usec_add(UNIT(s
)->inactive_enter_timestamp
.monotonic
, s
->restart_usec
);
1132 return USEC_INFINITY
;
1136 static int service_coldplug(Unit
*u
) {
1137 Service
*s
= SERVICE(u
);
1141 assert(s
->state
== SERVICE_DEAD
);
1143 if (s
->deserialized_state
== s
->state
)
1146 r
= service_arm_timer(s
, service_coldplug_timeout(s
));
1150 if (s
->main_pid
> 0 &&
1151 pid_is_unwaited(s
->main_pid
) &&
1152 (IN_SET(s
->deserialized_state
,
1153 SERVICE_START
, SERVICE_START_POST
,
1154 SERVICE_RUNNING
, SERVICE_RELOAD
,
1155 SERVICE_STOP
, SERVICE_STOP_WATCHDOG
, SERVICE_STOP_SIGTERM
, SERVICE_STOP_SIGKILL
, SERVICE_STOP_POST
,
1156 SERVICE_FINAL_SIGTERM
, SERVICE_FINAL_SIGKILL
))) {
1157 r
= unit_watch_pid(UNIT(s
), s
->main_pid
, false);
1162 if (s
->control_pid
> 0 &&
1163 pid_is_unwaited(s
->control_pid
) &&
1164 IN_SET(s
->deserialized_state
,
1165 SERVICE_START_PRE
, SERVICE_START
, SERVICE_START_POST
,
1167 SERVICE_STOP
, SERVICE_STOP_WATCHDOG
, SERVICE_STOP_SIGTERM
, SERVICE_STOP_SIGKILL
, SERVICE_STOP_POST
,
1168 SERVICE_FINAL_SIGTERM
, SERVICE_FINAL_SIGKILL
)) {
1169 r
= unit_watch_pid(UNIT(s
), s
->control_pid
, false);
1174 if (!IN_SET(s
->deserialized_state
, SERVICE_DEAD
, SERVICE_FAILED
, SERVICE_AUTO_RESTART
)) {
1175 (void) unit_enqueue_rewatch_pids(u
);
1176 (void) unit_setup_dynamic_creds(u
);
1177 (void) unit_setup_exec_runtime(u
);
1180 if (IN_SET(s
->deserialized_state
, SERVICE_START_POST
, SERVICE_RUNNING
, SERVICE_RELOAD
))
1181 service_start_watchdog(s
);
1183 if (UNIT_ISSET(s
->accept_socket
)) {
1184 Socket
* socket
= SOCKET(UNIT_DEREF(s
->accept_socket
));
1186 if (socket
->max_connections_per_source
> 0) {
1189 /* Make a best-effort attempt at bumping the connection count */
1190 if (socket_acquire_peer(socket
, s
->socket_fd
, &peer
) > 0) {
1191 socket_peer_unref(s
->peer
);
1197 service_set_state(s
, s
->deserialized_state
);
1201 static int service_collect_fds(
1205 size_t *n_socket_fds
,
1206 size_t *n_storage_fds
) {
1208 _cleanup_strv_free_
char **rfd_names
= NULL
;
1209 _cleanup_free_
int *rfds
= NULL
;
1210 size_t rn_socket_fds
= 0, rn_storage_fds
= 0;
1216 assert(n_socket_fds
);
1217 assert(n_storage_fds
);
1219 if (s
->socket_fd
>= 0) {
1221 /* Pass the per-connection socket */
1226 rfds
[0] = s
->socket_fd
;
1228 rfd_names
= strv_new("connection");
1238 /* Pass all our configured sockets for singleton services */
1240 HASHMAP_FOREACH_KEY(v
, u
, UNIT(s
)->dependencies
[UNIT_TRIGGERED_BY
], i
) {
1241 _cleanup_free_
int *cfds
= NULL
;
1245 if (u
->type
!= UNIT_SOCKET
)
1250 cn_fds
= socket_collect_fds(sock
, &cfds
);
1258 rfds
= TAKE_PTR(cfds
);
1259 rn_socket_fds
= cn_fds
;
1263 t
= reallocarray(rfds
, rn_socket_fds
+ cn_fds
, sizeof(int));
1267 memcpy(t
+ rn_socket_fds
, cfds
, cn_fds
* sizeof(int));
1270 rn_socket_fds
+= cn_fds
;
1273 r
= strv_extend_n(&rfd_names
, socket_fdname(sock
), cn_fds
);
1279 if (s
->n_fd_store
> 0) {
1285 t
= reallocarray(rfds
, rn_socket_fds
+ s
->n_fd_store
, sizeof(int));
1291 nl
= reallocarray(rfd_names
, rn_socket_fds
+ s
->n_fd_store
+ 1, sizeof(char *));
1296 n_fds
= rn_socket_fds
;
1298 LIST_FOREACH(fd_store
, fs
, s
->fd_store
) {
1299 rfds
[n_fds
] = fs
->fd
;
1300 rfd_names
[n_fds
] = strdup(strempty(fs
->fdname
));
1301 if (!rfd_names
[n_fds
])
1308 rfd_names
[n_fds
] = NULL
;
1311 *fds
= TAKE_PTR(rfds
);
1312 *fd_names
= TAKE_PTR(rfd_names
);
1313 *n_socket_fds
= rn_socket_fds
;
1314 *n_storage_fds
= rn_storage_fds
;
1319 static int service_allocate_exec_fd_event_source(
1322 sd_event_source
**ret_event_source
) {
1324 _cleanup_(sd_event_source_unrefp
) sd_event_source
*source
= NULL
;
1329 assert(ret_event_source
);
1331 r
= sd_event_add_io(UNIT(s
)->manager
->event
, &source
, fd
, 0, service_dispatch_exec_io
, s
);
1333 return log_unit_error_errno(UNIT(s
), r
, "Failed to allocate exec_fd event source: %m");
1335 /* This is a bit lower priority than SIGCHLD, as that carries a lot more interesting failure information */
1337 r
= sd_event_source_set_priority(source
, SD_EVENT_PRIORITY_NORMAL
-3);
1339 return log_unit_error_errno(UNIT(s
), r
, "Failed to adjust priority of exec_fd event source: %m");
1341 (void) sd_event_source_set_description(source
, "service event_fd");
1343 r
= sd_event_source_set_io_fd_own(source
, true);
1345 return log_unit_error_errno(UNIT(s
), r
, "Failed to pass ownership of fd to event source: %m");
1347 *ret_event_source
= TAKE_PTR(source
);
1351 static int service_allocate_exec_fd(
1353 sd_event_source
**ret_event_source
,
1356 _cleanup_close_pair_
int p
[2] = { -1, -1 };
1360 assert(ret_event_source
);
1361 assert(ret_exec_fd
);
1363 if (pipe2(p
, O_CLOEXEC
|O_NONBLOCK
) < 0)
1364 return log_unit_error_errno(UNIT(s
), errno
, "Failed to allocate exec_fd pipe: %m");
1366 r
= service_allocate_exec_fd_event_source(s
, p
[0], ret_event_source
);
1371 *ret_exec_fd
= TAKE_FD(p
[1]);
1376 static bool service_exec_needs_notify_socket(Service
*s
, ExecFlags flags
) {
1379 /* Notifications are accepted depending on the process and
1380 * the access setting of the service:
1381 * process: \ access: NONE MAIN EXEC ALL
1382 * main no yes yes yes
1383 * control no no yes yes
1384 * other (forked) no no no yes */
1386 if (flags
& EXEC_IS_CONTROL
)
1387 /* A control process */
1388 return IN_SET(s
->notify_access
, NOTIFY_EXEC
, NOTIFY_ALL
);
1390 /* We only spawn main processes and control processes, so any
1391 * process that is not a control process is a main process */
1392 return s
->notify_access
!= NOTIFY_NONE
;
1395 static int service_spawn(
1402 _cleanup_(exec_params_clear
) ExecParameters exec_params
= {
1409 _cleanup_strv_free_
char **final_env
= NULL
, **our_env
= NULL
, **fd_names
= NULL
;
1410 _cleanup_(sd_event_source_unrefp
) sd_event_source
*exec_fd_source
= NULL
;
1411 size_t n_socket_fds
= 0, n_storage_fds
= 0, n_env
= 0;
1412 _cleanup_close_
int exec_fd
= -1;
1413 _cleanup_free_
int *fds
= NULL
;
1421 r
= unit_prepare_exec(UNIT(s
)); /* This realizes the cgroup, among other things */
1425 if (flags
& EXEC_IS_CONTROL
) {
1426 /* If this is a control process, mask the permissions/chroot application if this is requested. */
1427 if (s
->permissions_start_only
)
1428 exec_params
.flags
&= ~EXEC_APPLY_SANDBOXING
;
1429 if (s
->root_directory_start_only
)
1430 exec_params
.flags
&= ~EXEC_APPLY_CHROOT
;
1433 if ((flags
& EXEC_PASS_FDS
) ||
1434 s
->exec_context
.std_input
== EXEC_INPUT_SOCKET
||
1435 s
->exec_context
.std_output
== EXEC_OUTPUT_SOCKET
||
1436 s
->exec_context
.std_error
== EXEC_OUTPUT_SOCKET
) {
1438 r
= service_collect_fds(s
, &fds
, &fd_names
, &n_socket_fds
, &n_storage_fds
);
1442 log_unit_debug(UNIT(s
), "Passing %zu fds to service", n_socket_fds
+ n_storage_fds
);
1445 if (!FLAGS_SET(flags
, EXEC_IS_CONTROL
) && s
->type
== SERVICE_EXEC
) {
1446 assert(!s
->exec_fd_event_source
);
1448 r
= service_allocate_exec_fd(s
, &exec_fd_source
, &exec_fd
);
1453 r
= service_arm_timer(s
, usec_add(now(CLOCK_MONOTONIC
), timeout
));
1457 our_env
= new0(char*, 10);
1461 if (service_exec_needs_notify_socket(s
, flags
))
1462 if (asprintf(our_env
+ n_env
++, "NOTIFY_SOCKET=%s", UNIT(s
)->manager
->notify_socket
) < 0)
1465 if (s
->main_pid
> 0)
1466 if (asprintf(our_env
+ n_env
++, "MAINPID="PID_FMT
, s
->main_pid
) < 0)
1469 if (MANAGER_IS_USER(UNIT(s
)->manager
))
1470 if (asprintf(our_env
+ n_env
++, "MANAGERPID="PID_FMT
, getpid_cached()) < 0)
1474 if (asprintf(our_env
+ n_env
++, "PIDFILE=%s", s
->pid_file
) < 0)
1477 if (s
->socket_fd
>= 0) {
1478 union sockaddr_union sa
;
1479 socklen_t salen
= sizeof(sa
);
1481 /* If this is a per-connection service instance, let's set $REMOTE_ADDR and $REMOTE_PORT to something
1482 * useful. Note that we do this only when we are still connected at this point in time, which we might
1483 * very well not be. Hence we ignore all errors when retrieving peer information (as that might result
1484 * in ENOTCONN), and just use whate we can use. */
1486 if (getpeername(s
->socket_fd
, &sa
.sa
, &salen
) >= 0 &&
1487 IN_SET(sa
.sa
.sa_family
, AF_INET
, AF_INET6
, AF_VSOCK
)) {
1489 _cleanup_free_
char *addr
= NULL
;
1493 r
= sockaddr_pretty(&sa
.sa
, salen
, true, false, &addr
);
1497 t
= strappend("REMOTE_ADDR=", addr
);
1500 our_env
[n_env
++] = t
;
1502 r
= sockaddr_port(&sa
.sa
, &port
);
1506 if (asprintf(&t
, "REMOTE_PORT=%u", port
) < 0)
1508 our_env
[n_env
++] = t
;
1512 if (flags
& EXEC_SETENV_RESULT
) {
1513 if (asprintf(our_env
+ n_env
++, "SERVICE_RESULT=%s", service_result_to_string(s
->result
)) < 0)
1516 if (s
->main_exec_status
.pid
> 0 &&
1517 dual_timestamp_is_set(&s
->main_exec_status
.exit_timestamp
)) {
1518 if (asprintf(our_env
+ n_env
++, "EXIT_CODE=%s", sigchld_code_to_string(s
->main_exec_status
.code
)) < 0)
1521 if (s
->main_exec_status
.code
== CLD_EXITED
)
1522 r
= asprintf(our_env
+ n_env
++, "EXIT_STATUS=%i", s
->main_exec_status
.status
);
1524 r
= asprintf(our_env
+ n_env
++, "EXIT_STATUS=%s", signal_to_string(s
->main_exec_status
.status
));
1530 r
= unit_set_exec_params(UNIT(s
), &exec_params
);
1534 final_env
= strv_env_merge(2, exec_params
.environment
, our_env
, NULL
);
1538 /* System D-Bus needs nss-systemd disabled, so that we don't deadlock */
1539 SET_FLAG(exec_params
.flags
, EXEC_NSS_BYPASS_BUS
,
1540 MANAGER_IS_SYSTEM(UNIT(s
)->manager
) && unit_has_name(UNIT(s
), SPECIAL_DBUS_SERVICE
));
1542 strv_free_and_replace(exec_params
.environment
, final_env
);
1543 exec_params
.fds
= fds
;
1544 exec_params
.fd_names
= fd_names
;
1545 exec_params
.n_socket_fds
= n_socket_fds
;
1546 exec_params
.n_storage_fds
= n_storage_fds
;
1547 exec_params
.watchdog_usec
= service_get_watchdog_usec(s
);
1548 exec_params
.selinux_context_net
= s
->socket_fd_selinux_context_net
;
1549 if (s
->type
== SERVICE_IDLE
)
1550 exec_params
.idle_pipe
= UNIT(s
)->manager
->idle_pipe
;
1551 exec_params
.stdin_fd
= s
->stdin_fd
;
1552 exec_params
.stdout_fd
= s
->stdout_fd
;
1553 exec_params
.stderr_fd
= s
->stderr_fd
;
1554 exec_params
.exec_fd
= exec_fd
;
1556 r
= exec_spawn(UNIT(s
),
1566 s
->exec_fd_event_source
= TAKE_PTR(exec_fd_source
);
1567 s
->exec_fd_hot
= false;
1569 r
= unit_watch_pid(UNIT(s
), pid
, true);
1578 static int main_pid_good(Service
*s
) {
1581 /* Returns 0 if the pid is dead, > 0 if it is good, < 0 if we don't know */
1583 /* If we know the pid file, then let's just check if it is
1585 if (s
->main_pid_known
) {
1587 /* If it's an alien child let's check if it is still
1589 if (s
->main_pid_alien
&& s
->main_pid
> 0)
1590 return pid_is_alive(s
->main_pid
);
1592 /* .. otherwise assume we'll get a SIGCHLD for it,
1593 * which we really should wait for to collect exit
1594 * status and code */
1595 return s
->main_pid
> 0;
1598 /* We don't know the pid */
1602 static int control_pid_good(Service
*s
) {
1605 /* Returns 0 if the control PID is dead, > 0 if it is good. We never actually return < 0 here, but in order to
1606 * make this function as similar as possible to main_pid_good() and cgroup_good(), we pretend that < 0 also
1607 * means: we can't figure it out. */
1609 return s
->control_pid
> 0;
1612 static int cgroup_good(Service
*s
) {
1617 /* Returns 0 if the cgroup is empty or doesn't exist, > 0 if it is exists and is populated, < 0 if we can't
1620 if (!UNIT(s
)->cgroup_path
)
1623 r
= cg_is_empty_recursive(SYSTEMD_CGROUP_CONTROLLER
, UNIT(s
)->cgroup_path
);
1630 static bool service_shall_restart(Service
*s
) {
1633 /* Don't restart after manual stops */
1634 if (s
->forbid_restart
)
1637 /* Never restart if this is configured as special exception */
1638 if (exit_status_set_test(&s
->restart_prevent_status
, s
->main_exec_status
.code
, s
->main_exec_status
.status
))
1641 /* Restart if the exit code/status are configured as restart triggers */
1642 if (exit_status_set_test(&s
->restart_force_status
, s
->main_exec_status
.code
, s
->main_exec_status
.status
))
1645 switch (s
->restart
) {
1647 case SERVICE_RESTART_NO
:
1650 case SERVICE_RESTART_ALWAYS
:
1653 case SERVICE_RESTART_ON_SUCCESS
:
1654 return s
->result
== SERVICE_SUCCESS
;
1656 case SERVICE_RESTART_ON_FAILURE
:
1657 return s
->result
!= SERVICE_SUCCESS
;
1659 case SERVICE_RESTART_ON_ABNORMAL
:
1660 return !IN_SET(s
->result
, SERVICE_SUCCESS
, SERVICE_FAILURE_EXIT_CODE
);
1662 case SERVICE_RESTART_ON_WATCHDOG
:
1663 return s
->result
== SERVICE_FAILURE_WATCHDOG
;
1665 case SERVICE_RESTART_ON_ABORT
:
1666 return IN_SET(s
->result
, SERVICE_FAILURE_SIGNAL
, SERVICE_FAILURE_CORE_DUMP
);
1669 assert_not_reached("unknown restart setting");
1673 static bool service_will_restart(Unit
*u
) {
1674 Service
*s
= SERVICE(u
);
1678 if (s
->will_auto_restart
)
1680 if (s
->state
== SERVICE_AUTO_RESTART
)
1684 if (UNIT(s
)->job
->type
== JOB_START
)
1690 static void service_enter_dead(Service
*s
, ServiceResult f
, bool allow_restart
) {
1695 /* If there's a stop job queued before we enter the DEAD state, we shouldn't act on Restart=, in order to not
1696 * undo what has already been enqueued. */
1697 if (unit_stop_pending(UNIT(s
)))
1698 allow_restart
= false;
1700 if (s
->result
== SERVICE_SUCCESS
)
1703 unit_log_result(UNIT(s
), s
->result
== SERVICE_SUCCESS
, service_result_to_string(s
->result
));
1705 if (allow_restart
&& service_shall_restart(s
))
1706 s
->will_auto_restart
= true;
1708 /* Make sure service_release_resources() doesn't destroy our FD store, while we are changing through
1709 * SERVICE_FAILED/SERVICE_DEAD before entering into SERVICE_AUTO_RESTART. */
1710 s
->n_keep_fd_store
++;
1712 service_set_state(s
, s
->result
!= SERVICE_SUCCESS
? SERVICE_FAILED
: SERVICE_DEAD
);
1714 if (s
->will_auto_restart
) {
1715 s
->will_auto_restart
= false;
1717 r
= service_arm_timer(s
, usec_add(now(CLOCK_MONOTONIC
), s
->restart_usec
));
1719 s
->n_keep_fd_store
--;
1723 service_set_state(s
, SERVICE_AUTO_RESTART
);
1725 /* If we shan't restart, then flush out the restart counter. But don't do that immediately, so that the
1726 * user can still introspect the counter. Do so on the next start. */
1727 s
->flush_n_restarts
= true;
1729 /* The new state is in effect, let's decrease the fd store ref counter again. Let's also readd us to the GC
1730 * queue, so that the fd store is possibly gc'ed again */
1731 s
->n_keep_fd_store
--;
1732 unit_add_to_gc_queue(UNIT(s
));
1734 /* The next restart might not be a manual stop, hence reset the flag indicating manual stops */
1735 s
->forbid_restart
= false;
1737 /* We want fresh tmpdirs in case service is started again immediately */
1738 s
->exec_runtime
= exec_runtime_unref(s
->exec_runtime
, true);
1740 if (s
->exec_context
.runtime_directory_preserve_mode
== EXEC_PRESERVE_NO
||
1741 (s
->exec_context
.runtime_directory_preserve_mode
== EXEC_PRESERVE_RESTART
&& !service_will_restart(UNIT(s
))))
1742 /* Also, remove the runtime directory */
1743 exec_context_destroy_runtime_directory(&s
->exec_context
, UNIT(s
)->manager
->prefix
[EXEC_DIRECTORY_RUNTIME
]);
1745 /* Get rid of the IPC bits of the user */
1746 unit_unref_uid_gid(UNIT(s
), true);
1748 /* Release the user, and destroy it if we are the only remaining owner */
1749 dynamic_creds_destroy(&s
->dynamic_creds
);
1751 /* Try to delete the pid file. At this point it will be
1752 * out-of-date, and some software might be confused by it, so
1753 * let's remove it. */
1755 (void) unlink(s
->pid_file
);
1757 /* Reset TTY ownership if necessary */
1758 exec_context_revert_tty(&s
->exec_context
);
1763 log_unit_warning_errno(UNIT(s
), r
, "Failed to run install restart timer: %m");
1764 service_enter_dead(s
, SERVICE_FAILURE_RESOURCES
, false);
1767 static void service_enter_stop_post(Service
*s
, ServiceResult f
) {
1771 if (s
->result
== SERVICE_SUCCESS
)
1774 service_unwatch_control_pid(s
);
1775 (void) unit_enqueue_rewatch_pids(UNIT(s
));
1777 s
->control_command
= s
->exec_command
[SERVICE_EXEC_STOP_POST
];
1778 if (s
->control_command
) {
1779 s
->control_command_id
= SERVICE_EXEC_STOP_POST
;
1781 r
= service_spawn(s
,
1783 s
->timeout_stop_usec
,
1784 EXEC_APPLY_SANDBOXING
|EXEC_APPLY_CHROOT
|EXEC_APPLY_TTY_STDIN
|EXEC_IS_CONTROL
|EXEC_SETENV_RESULT
|EXEC_CONTROL_CGROUP
,
1789 service_set_state(s
, SERVICE_STOP_POST
);
1791 service_enter_signal(s
, SERVICE_FINAL_SIGTERM
, SERVICE_SUCCESS
);
1796 log_unit_warning_errno(UNIT(s
), r
, "Failed to run 'stop-post' task: %m");
1797 service_enter_signal(s
, SERVICE_FINAL_SIGTERM
, SERVICE_FAILURE_RESOURCES
);
1800 static int state_to_kill_operation(ServiceState state
) {
1803 case SERVICE_STOP_WATCHDOG
:
1804 return KILL_WATCHDOG
;
1806 case SERVICE_STOP_SIGTERM
:
1807 case SERVICE_FINAL_SIGTERM
:
1808 return KILL_TERMINATE
;
1810 case SERVICE_STOP_SIGKILL
:
1811 case SERVICE_FINAL_SIGKILL
:
1815 return _KILL_OPERATION_INVALID
;
1819 static void service_enter_signal(Service
*s
, ServiceState state
, ServiceResult f
) {
1824 if (s
->result
== SERVICE_SUCCESS
)
1827 /* Before sending any signal, make sure we track all members of this cgroup */
1828 (void) unit_watch_all_pids(UNIT(s
));
1830 /* Also, enqueue a job that we recheck all our PIDs a bit later, given that it's likely some processes have
1832 (void) unit_enqueue_rewatch_pids(UNIT(s
));
1834 r
= unit_kill_context(
1837 state_to_kill_operation(state
),
1845 r
= service_arm_timer(s
, usec_add(now(CLOCK_MONOTONIC
), s
->timeout_stop_usec
));
1849 service_set_state(s
, state
);
1850 } else if (IN_SET(state
, SERVICE_STOP_WATCHDOG
, SERVICE_STOP_SIGTERM
) && s
->kill_context
.send_sigkill
)
1851 service_enter_signal(s
, SERVICE_STOP_SIGKILL
, SERVICE_SUCCESS
);
1852 else if (IN_SET(state
, SERVICE_STOP_WATCHDOG
, SERVICE_STOP_SIGTERM
, SERVICE_STOP_SIGKILL
))
1853 service_enter_stop_post(s
, SERVICE_SUCCESS
);
1854 else if (state
== SERVICE_FINAL_SIGTERM
&& s
->kill_context
.send_sigkill
)
1855 service_enter_signal(s
, SERVICE_FINAL_SIGKILL
, SERVICE_SUCCESS
);
1857 service_enter_dead(s
, SERVICE_SUCCESS
, true);
1862 log_unit_warning_errno(UNIT(s
), r
, "Failed to kill processes: %m");
1864 if (IN_SET(state
, SERVICE_STOP_WATCHDOG
, SERVICE_STOP_SIGTERM
, SERVICE_STOP_SIGKILL
))
1865 service_enter_stop_post(s
, SERVICE_FAILURE_RESOURCES
);
1867 service_enter_dead(s
, SERVICE_FAILURE_RESOURCES
, true);
1870 static void service_enter_stop_by_notify(Service
*s
) {
1873 (void) unit_enqueue_rewatch_pids(UNIT(s
));
1875 service_arm_timer(s
, usec_add(now(CLOCK_MONOTONIC
), s
->timeout_stop_usec
));
1877 /* The service told us it's stopping, so it's as if we SIGTERM'd it. */
1878 service_set_state(s
, SERVICE_STOP_SIGTERM
);
1881 static void service_enter_stop(Service
*s
, ServiceResult f
) {
1886 if (s
->result
== SERVICE_SUCCESS
)
1889 service_unwatch_control_pid(s
);
1890 (void) unit_enqueue_rewatch_pids(UNIT(s
));
1892 s
->control_command
= s
->exec_command
[SERVICE_EXEC_STOP
];
1893 if (s
->control_command
) {
1894 s
->control_command_id
= SERVICE_EXEC_STOP
;
1896 r
= service_spawn(s
,
1898 s
->timeout_stop_usec
,
1899 EXEC_APPLY_SANDBOXING
|EXEC_APPLY_CHROOT
|EXEC_IS_CONTROL
|EXEC_SETENV_RESULT
|EXEC_CONTROL_CGROUP
,
1904 service_set_state(s
, SERVICE_STOP
);
1906 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, SERVICE_SUCCESS
);
1911 log_unit_warning_errno(UNIT(s
), r
, "Failed to run 'stop' task: %m");
1912 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, SERVICE_FAILURE_RESOURCES
);
1915 static bool service_good(Service
*s
) {
1919 if (s
->type
== SERVICE_DBUS
&& !s
->bus_name_good
)
1922 main_pid_ok
= main_pid_good(s
);
1923 if (main_pid_ok
> 0) /* It's alive */
1925 if (main_pid_ok
== 0) /* It's dead */
1928 /* OK, we don't know anything about the main PID, maybe
1929 * because there is none. Let's check the control group
1932 return cgroup_good(s
) != 0;
1935 static void service_enter_running(Service
*s
, ServiceResult f
) {
1938 if (s
->result
== SERVICE_SUCCESS
)
1941 service_unwatch_control_pid(s
);
1943 if (s
->result
!= SERVICE_SUCCESS
)
1944 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, f
);
1945 else if (service_good(s
)) {
1947 /* If there are any queued up sd_notify() notifications, process them now */
1948 if (s
->notify_state
== NOTIFY_RELOADING
)
1949 service_enter_reload_by_notify(s
);
1950 else if (s
->notify_state
== NOTIFY_STOPPING
)
1951 service_enter_stop_by_notify(s
);
1953 service_set_state(s
, SERVICE_RUNNING
);
1954 service_arm_timer(s
, usec_add(UNIT(s
)->active_enter_timestamp
.monotonic
, s
->runtime_max_usec
));
1957 } else if (s
->remain_after_exit
)
1958 service_set_state(s
, SERVICE_EXITED
);
1960 service_enter_stop(s
, SERVICE_SUCCESS
);
1963 static void service_enter_start_post(Service
*s
) {
1967 service_unwatch_control_pid(s
);
1968 service_reset_watchdog(s
);
1970 s
->control_command
= s
->exec_command
[SERVICE_EXEC_START_POST
];
1971 if (s
->control_command
) {
1972 s
->control_command_id
= SERVICE_EXEC_START_POST
;
1974 r
= service_spawn(s
,
1976 s
->timeout_start_usec
,
1977 EXEC_APPLY_SANDBOXING
|EXEC_APPLY_CHROOT
|EXEC_IS_CONTROL
|EXEC_CONTROL_CGROUP
,
1982 service_set_state(s
, SERVICE_START_POST
);
1984 service_enter_running(s
, SERVICE_SUCCESS
);
1989 log_unit_warning_errno(UNIT(s
), r
, "Failed to run 'start-post' task: %m");
1990 service_enter_stop(s
, SERVICE_FAILURE_RESOURCES
);
1993 static void service_kill_control_process(Service
*s
) {
1998 if (s
->control_pid
<= 0)
2001 r
= kill_and_sigcont(s
->control_pid
, SIGKILL
);
2003 _cleanup_free_
char *comm
= NULL
;
2005 (void) get_process_comm(s
->control_pid
, &comm
);
2007 log_unit_debug_errno(UNIT(s
), r
, "Failed to kill control process " PID_FMT
" (%s), ignoring: %m",
2008 s
->control_pid
, strna(comm
));
2012 static int service_adverse_to_leftover_processes(Service
*s
) {
2015 /* KillMode=mixed and control group are used to indicate that all process should be killed off.
2016 * SendSIGKILL is used for services that require a clean shutdown. These are typically database
2017 * service where a SigKilled process would result in a lengthy recovery and who's shutdown or
2018 * startup time is quite variable (so Timeout settings aren't of use).
2020 * Here we take these two factors and refuse to start a service if there are existing processes
2021 * within a control group. Databases, while generally having some protection against multiple
2022 * instances running, lets not stress the rigor of these. Also ExecStartPre parts of the service
2023 * aren't as rigoriously written to protect aganst against multiple use. */
2024 if (unit_warn_leftover_processes(UNIT(s
)) &&
2025 IN_SET(s
->kill_context
.kill_mode
, KILL_MIXED
, KILL_CONTROL_GROUP
) &&
2026 !s
->kill_context
.send_sigkill
) {
2027 return log_unit_error_errno(UNIT(s
), SYNTHETIC_ERRNO(EBUSY
), "Will not start SendSIGKILL=no service of type KillMode=control-group or mixed while processes exist");
2032 static void service_enter_start(Service
*s
) {
2040 service_unwatch_control_pid(s
);
2041 service_unwatch_main_pid(s
);
2043 r
= service_adverse_to_leftover_processes(s
);
2047 if (s
->type
== SERVICE_FORKING
) {
2048 s
->control_command_id
= SERVICE_EXEC_START
;
2049 c
= s
->control_command
= s
->exec_command
[SERVICE_EXEC_START
];
2051 s
->main_command
= NULL
;
2053 s
->control_command_id
= _SERVICE_EXEC_COMMAND_INVALID
;
2054 s
->control_command
= NULL
;
2056 c
= s
->main_command
= s
->exec_command
[SERVICE_EXEC_START
];
2060 if (s
->type
!= SERVICE_ONESHOT
) {
2061 /* There's no command line configured for the main command? Hmm, that is strange. This can only
2062 * happen if the configuration changes at runtime. In this case, let's enter a failure
2064 log_unit_error(UNIT(s
), "There's no 'start' task anymore we could start.");
2069 /* We force a fake state transition here. Otherwise, the unit would go directly from
2070 * SERVICE_DEAD to SERVICE_DEAD without SERVICE_ACTIVATING or SERVICE_ACTIVE
2071 * inbetween. This way we can later trigger actions that depend on the state
2072 * transition, including SuccessAction=. */
2073 service_set_state(s
, SERVICE_START
);
2075 service_enter_start_post(s
);
2079 if (IN_SET(s
->type
, SERVICE_SIMPLE
, SERVICE_IDLE
))
2080 /* For simple + idle this is the main process. We don't apply any timeout here, but
2081 * service_enter_running() will later apply the .runtime_max_usec timeout. */
2082 timeout
= USEC_INFINITY
;
2084 timeout
= s
->timeout_start_usec
;
2086 r
= service_spawn(s
,
2089 EXEC_PASS_FDS
|EXEC_APPLY_SANDBOXING
|EXEC_APPLY_CHROOT
|EXEC_APPLY_TTY_STDIN
|EXEC_SET_WATCHDOG
,
2094 if (IN_SET(s
->type
, SERVICE_SIMPLE
, SERVICE_IDLE
)) {
2095 /* For simple services we immediately start
2096 * the START_POST binaries. */
2098 service_set_main_pid(s
, pid
);
2099 service_enter_start_post(s
);
2101 } else if (s
->type
== SERVICE_FORKING
) {
2103 /* For forking services we wait until the start
2104 * process exited. */
2106 s
->control_pid
= pid
;
2107 service_set_state(s
, SERVICE_START
);
2109 } else if (IN_SET(s
->type
, SERVICE_ONESHOT
, SERVICE_DBUS
, SERVICE_NOTIFY
, SERVICE_EXEC
)) {
2111 /* For oneshot services we wait until the start process exited, too, but it is our main process. */
2113 /* For D-Bus services we know the main pid right away, but wait for the bus name to appear on the
2114 * bus. 'notify' and 'exec' services are similar. */
2116 service_set_main_pid(s
, pid
);
2117 service_set_state(s
, SERVICE_START
);
2119 assert_not_reached("Unknown service type");
2124 log_unit_warning_errno(UNIT(s
), r
, "Failed to run 'start' task: %m");
2125 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, SERVICE_FAILURE_RESOURCES
);
2128 static void service_enter_start_pre(Service
*s
) {
2133 service_unwatch_control_pid(s
);
2135 s
->control_command
= s
->exec_command
[SERVICE_EXEC_START_PRE
];
2136 if (s
->control_command
) {
2138 r
= service_adverse_to_leftover_processes(s
);
2142 s
->control_command_id
= SERVICE_EXEC_START_PRE
;
2144 r
= service_spawn(s
,
2146 s
->timeout_start_usec
,
2147 EXEC_APPLY_SANDBOXING
|EXEC_APPLY_CHROOT
|EXEC_IS_CONTROL
|EXEC_APPLY_TTY_STDIN
,
2152 service_set_state(s
, SERVICE_START_PRE
);
2154 service_enter_start(s
);
2159 log_unit_warning_errno(UNIT(s
), r
, "Failed to run 'start-pre' task: %m");
2160 service_enter_dead(s
, SERVICE_FAILURE_RESOURCES
, true);
2163 static void service_enter_restart(Service
*s
) {
2164 _cleanup_(sd_bus_error_free
) sd_bus_error error
= SD_BUS_ERROR_NULL
;
2169 if (UNIT(s
)->job
&& UNIT(s
)->job
->type
== JOB_STOP
) {
2170 /* Don't restart things if we are going down anyway */
2171 log_unit_info(UNIT(s
), "Stop job pending for unit, delaying automatic restart.");
2173 r
= service_arm_timer(s
, usec_add(now(CLOCK_MONOTONIC
), s
->restart_usec
));
2180 /* Any units that are bound to this service must also be
2181 * restarted. We use JOB_RESTART (instead of the more obvious
2182 * JOB_START) here so that those dependency jobs will be added
2184 r
= manager_add_job(UNIT(s
)->manager
, JOB_RESTART
, UNIT(s
), JOB_REPLACE
, &error
, NULL
);
2188 /* Count the jobs we enqueue for restarting. This counter is maintained as long as the unit isn't fully
2189 * stopped, i.e. as long as it remains up or remains in auto-start states. The use can reset the counter
2190 * explicitly however via the usual "systemctl reset-failure" logic. */
2192 s
->flush_n_restarts
= false;
2194 log_struct(LOG_INFO
,
2195 "MESSAGE_ID=" SD_MESSAGE_UNIT_RESTART_SCHEDULED_STR
,
2196 LOG_UNIT_ID(UNIT(s
)),
2197 LOG_UNIT_INVOCATION_ID(UNIT(s
)),
2198 LOG_UNIT_MESSAGE(UNIT(s
), "Scheduled restart job, restart counter is at %u.", s
->n_restarts
),
2199 "N_RESTARTS=%u", s
->n_restarts
);
2201 /* Notify clients about changed restart counter */
2202 unit_add_to_dbus_queue(UNIT(s
));
2204 /* Note that we stay in the SERVICE_AUTO_RESTART state here,
2205 * it will be canceled as part of the service_stop() call that
2206 * is executed as part of JOB_RESTART. */
2211 log_unit_warning(UNIT(s
), "Failed to schedule restart job: %s", bus_error_message(&error
, -r
));
2212 service_enter_dead(s
, SERVICE_FAILURE_RESOURCES
, false);
2215 static void service_enter_reload_by_notify(Service
*s
) {
2216 _cleanup_(sd_bus_error_free
) sd_bus_error error
= SD_BUS_ERROR_NULL
;
2221 service_arm_timer(s
, usec_add(now(CLOCK_MONOTONIC
), s
->timeout_start_usec
));
2222 service_set_state(s
, SERVICE_RELOAD
);
2224 /* service_enter_reload_by_notify is never called during a reload, thus no loops are possible. */
2225 r
= manager_propagate_reload(UNIT(s
)->manager
, UNIT(s
), JOB_FAIL
, &error
);
2227 log_unit_warning(UNIT(s
), "Failed to schedule propagation of reload: %s", bus_error_message(&error
, -r
));
2230 static void service_enter_reload(Service
*s
) {
2235 service_unwatch_control_pid(s
);
2236 s
->reload_result
= SERVICE_SUCCESS
;
2238 s
->control_command
= s
->exec_command
[SERVICE_EXEC_RELOAD
];
2239 if (s
->control_command
) {
2240 s
->control_command_id
= SERVICE_EXEC_RELOAD
;
2242 r
= service_spawn(s
,
2244 s
->timeout_start_usec
,
2245 EXEC_APPLY_SANDBOXING
|EXEC_APPLY_CHROOT
|EXEC_IS_CONTROL
|EXEC_CONTROL_CGROUP
,
2250 service_set_state(s
, SERVICE_RELOAD
);
2252 service_enter_running(s
, SERVICE_SUCCESS
);
2257 log_unit_warning_errno(UNIT(s
), r
, "Failed to run 'reload' task: %m");
2258 s
->reload_result
= SERVICE_FAILURE_RESOURCES
;
2259 service_enter_running(s
, SERVICE_SUCCESS
);
2262 static void service_run_next_control(Service
*s
) {
2267 assert(s
->control_command
);
2268 assert(s
->control_command
->command_next
);
2270 assert(s
->control_command_id
!= SERVICE_EXEC_START
);
2272 s
->control_command
= s
->control_command
->command_next
;
2273 service_unwatch_control_pid(s
);
2275 if (IN_SET(s
->state
, SERVICE_START_PRE
, SERVICE_START
, SERVICE_START_POST
, SERVICE_RUNNING
, SERVICE_RELOAD
))
2276 timeout
= s
->timeout_start_usec
;
2278 timeout
= s
->timeout_stop_usec
;
2280 r
= service_spawn(s
,
2283 EXEC_APPLY_SANDBOXING
|EXEC_APPLY_CHROOT
|EXEC_IS_CONTROL
|
2284 (IN_SET(s
->control_command_id
, SERVICE_EXEC_START_PRE
, SERVICE_EXEC_STOP_POST
) ? EXEC_APPLY_TTY_STDIN
: 0)|
2285 (IN_SET(s
->control_command_id
, SERVICE_EXEC_STOP
, SERVICE_EXEC_STOP_POST
) ? EXEC_SETENV_RESULT
: 0)|
2286 (IN_SET(s
->control_command_id
, SERVICE_EXEC_START_POST
, SERVICE_EXEC_RELOAD
, SERVICE_EXEC_STOP
, SERVICE_EXEC_STOP_POST
) ? EXEC_CONTROL_CGROUP
: 0),
2294 log_unit_warning_errno(UNIT(s
), r
, "Failed to run next control task: %m");
2296 if (IN_SET(s
->state
, SERVICE_START_PRE
, SERVICE_START_POST
, SERVICE_STOP
))
2297 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, SERVICE_FAILURE_RESOURCES
);
2298 else if (s
->state
== SERVICE_STOP_POST
)
2299 service_enter_dead(s
, SERVICE_FAILURE_RESOURCES
, true);
2300 else if (s
->state
== SERVICE_RELOAD
) {
2301 s
->reload_result
= SERVICE_FAILURE_RESOURCES
;
2302 service_enter_running(s
, SERVICE_SUCCESS
);
2304 service_enter_stop(s
, SERVICE_FAILURE_RESOURCES
);
2307 static void service_run_next_main(Service
*s
) {
2312 assert(s
->main_command
);
2313 assert(s
->main_command
->command_next
);
2314 assert(s
->type
== SERVICE_ONESHOT
);
2316 s
->main_command
= s
->main_command
->command_next
;
2317 service_unwatch_main_pid(s
);
2319 r
= service_spawn(s
,
2321 s
->timeout_start_usec
,
2322 EXEC_PASS_FDS
|EXEC_APPLY_SANDBOXING
|EXEC_APPLY_CHROOT
|EXEC_APPLY_TTY_STDIN
|EXEC_SET_WATCHDOG
,
2327 service_set_main_pid(s
, pid
);
2332 log_unit_warning_errno(UNIT(s
), r
, "Failed to run next main task: %m");
2333 service_enter_stop(s
, SERVICE_FAILURE_RESOURCES
);
2336 static int service_start(Unit
*u
) {
2337 Service
*s
= SERVICE(u
);
2342 /* We cannot fulfill this request right now, try again later
2344 if (IN_SET(s
->state
,
2345 SERVICE_STOP
, SERVICE_STOP_WATCHDOG
, SERVICE_STOP_SIGTERM
, SERVICE_STOP_SIGKILL
, SERVICE_STOP_POST
,
2346 SERVICE_FINAL_SIGTERM
, SERVICE_FINAL_SIGKILL
))
2349 /* Already on it! */
2350 if (IN_SET(s
->state
, SERVICE_START_PRE
, SERVICE_START
, SERVICE_START_POST
))
2353 /* A service that will be restarted must be stopped first to
2354 * trigger BindsTo and/or OnFailure dependencies. If a user
2355 * does not want to wait for the holdoff time to elapse, the
2356 * service should be manually restarted, not started. We
2357 * simply return EAGAIN here, so that any start jobs stay
2358 * queued, and assume that the auto restart timer will
2359 * eventually trigger the restart. */
2360 if (s
->state
== SERVICE_AUTO_RESTART
)
2363 assert(IN_SET(s
->state
, SERVICE_DEAD
, SERVICE_FAILED
));
2365 /* Make sure we don't enter a busy loop of some kind. */
2366 r
= unit_test_start_limit(u
);
2368 service_enter_dead(s
, SERVICE_FAILURE_START_LIMIT_HIT
, false);
2372 r
= unit_acquire_invocation_id(u
);
2376 s
->result
= SERVICE_SUCCESS
;
2377 s
->reload_result
= SERVICE_SUCCESS
;
2378 s
->main_pid_known
= false;
2379 s
->main_pid_alien
= false;
2380 s
->forbid_restart
= false;
2382 s
->status_text
= mfree(s
->status_text
);
2383 s
->status_errno
= 0;
2385 s
->notify_state
= NOTIFY_UNKNOWN
;
2387 s
->watchdog_original_usec
= s
->watchdog_usec
;
2388 s
->watchdog_override_enable
= false;
2389 s
->watchdog_override_usec
= USEC_INFINITY
;
2391 exec_command_reset_status_list_array(s
->exec_command
, _SERVICE_EXEC_COMMAND_MAX
);
2392 exec_status_reset(&s
->main_exec_status
);
2394 /* This is not an automatic restart? Flush the restart counter then */
2395 if (s
->flush_n_restarts
) {
2397 s
->flush_n_restarts
= false;
2400 u
->reset_accounting
= true;
2402 service_enter_start_pre(s
);
2406 static int service_stop(Unit
*u
) {
2407 Service
*s
= SERVICE(u
);
2411 /* Don't create restart jobs from manual stops. */
2412 s
->forbid_restart
= true;
2415 if (IN_SET(s
->state
,
2416 SERVICE_STOP
, SERVICE_STOP_WATCHDOG
, SERVICE_STOP_SIGTERM
, SERVICE_STOP_SIGKILL
, SERVICE_STOP_POST
,
2417 SERVICE_FINAL_SIGTERM
, SERVICE_FINAL_SIGKILL
))
2420 /* A restart will be scheduled or is in progress. */
2421 if (s
->state
== SERVICE_AUTO_RESTART
) {
2422 service_set_state(s
, SERVICE_DEAD
);
2426 /* If there's already something running we go directly into
2428 if (IN_SET(s
->state
, SERVICE_START_PRE
, SERVICE_START
, SERVICE_START_POST
, SERVICE_RELOAD
)) {
2429 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, SERVICE_SUCCESS
);
2433 assert(IN_SET(s
->state
, SERVICE_RUNNING
, SERVICE_EXITED
));
2435 service_enter_stop(s
, SERVICE_SUCCESS
);
2439 static int service_reload(Unit
*u
) {
2440 Service
*s
= SERVICE(u
);
2444 assert(IN_SET(s
->state
, SERVICE_RUNNING
, SERVICE_EXITED
));
2446 service_enter_reload(s
);
2450 _pure_
static bool service_can_reload(Unit
*u
) {
2451 Service
*s
= SERVICE(u
);
2455 return !!s
->exec_command
[SERVICE_EXEC_RELOAD
];
2458 static unsigned service_exec_command_index(Unit
*u
, ServiceExecCommand id
, ExecCommand
*current
) {
2459 Service
*s
= SERVICE(u
);
2461 ExecCommand
*first
, *c
;
2465 first
= s
->exec_command
[id
];
2467 /* Figure out where we are in the list by walking back to the beginning */
2468 for (c
= current
; c
!= first
; c
= c
->command_prev
)
2474 static int service_serialize_exec_command(Unit
*u
, FILE *f
, ExecCommand
*command
) {
2475 _cleanup_free_
char *args
= NULL
, *p
= NULL
;
2476 size_t allocated
= 0, length
= 0;
2477 Service
*s
= SERVICE(u
);
2478 const char *type
, *key
;
2479 ServiceExecCommand id
;
2489 if (command
== s
->control_command
) {
2491 id
= s
->control_command_id
;
2494 id
= SERVICE_EXEC_START
;
2497 idx
= service_exec_command_index(u
, id
, command
);
2499 STRV_FOREACH(arg
, command
->argv
) {
2500 _cleanup_free_
char *e
= NULL
;
2508 if (!GREEDY_REALLOC(args
, allocated
, length
+ 1 + n
+ 1))
2512 args
[length
++] = ' ';
2514 memcpy(args
+ length
, e
, n
);
2518 if (!GREEDY_REALLOC(args
, allocated
, length
+ 1))
2523 p
= cescape(command
->path
);
2527 key
= strjoina(type
, "-command");
2528 return serialize_item_format(f
, key
, "%s %u %s %s", service_exec_command_to_string(id
), idx
, p
, args
);
2531 static int service_serialize(Unit
*u
, FILE *f
, FDSet
*fds
) {
2532 Service
*s
= SERVICE(u
);
2540 (void) serialize_item(f
, "state", service_state_to_string(s
->state
));
2541 (void) serialize_item(f
, "result", service_result_to_string(s
->result
));
2542 (void) serialize_item(f
, "reload-result", service_result_to_string(s
->reload_result
));
2544 if (s
->control_pid
> 0)
2545 (void) serialize_item_format(f
, "control-pid", PID_FMT
, s
->control_pid
);
2547 if (s
->main_pid_known
&& s
->main_pid
> 0)
2548 (void) serialize_item_format(f
, "main-pid", PID_FMT
, s
->main_pid
);
2550 (void) serialize_bool(f
, "main-pid-known", s
->main_pid_known
);
2551 (void) serialize_bool(f
, "bus-name-good", s
->bus_name_good
);
2552 (void) serialize_bool(f
, "bus-name-owner", s
->bus_name_owner
);
2554 (void) serialize_item_format(f
, "n-restarts", "%u", s
->n_restarts
);
2555 (void) serialize_bool(f
, "flush-n-restarts", s
->flush_n_restarts
);
2557 r
= serialize_item_escaped(f
, "status-text", s
->status_text
);
2561 service_serialize_exec_command(u
, f
, s
->control_command
);
2562 service_serialize_exec_command(u
, f
, s
->main_command
);
2564 r
= serialize_fd(f
, fds
, "stdin-fd", s
->stdin_fd
);
2567 r
= serialize_fd(f
, fds
, "stdout-fd", s
->stdout_fd
);
2570 r
= serialize_fd(f
, fds
, "stderr-fd", s
->stderr_fd
);
2574 if (s
->exec_fd_event_source
) {
2575 r
= serialize_fd(f
, fds
, "exec-fd", sd_event_source_get_io_fd(s
->exec_fd_event_source
));
2579 (void) serialize_bool(f
, "exec-fd-hot", s
->exec_fd_hot
);
2582 if (UNIT_ISSET(s
->accept_socket
)) {
2583 r
= serialize_item(f
, "accept-socket", UNIT_DEREF(s
->accept_socket
)->id
);
2588 r
= serialize_fd(f
, fds
, "socket-fd", s
->socket_fd
);
2592 LIST_FOREACH(fd_store
, fs
, s
->fd_store
) {
2593 _cleanup_free_
char *c
= NULL
;
2596 copy
= fdset_put_dup(fds
, fs
->fd
);
2598 return log_error_errno(copy
, "Failed to copy file descriptor for serialization: %m");
2600 c
= cescape(fs
->fdname
);
2604 (void) serialize_item_format(f
, "fd-store-fd", "%i %s", copy
, c
);
2607 if (s
->main_exec_status
.pid
> 0) {
2608 (void) serialize_item_format(f
, "main-exec-status-pid", PID_FMT
, s
->main_exec_status
.pid
);
2609 (void) serialize_dual_timestamp(f
, "main-exec-status-start", &s
->main_exec_status
.start_timestamp
);
2610 (void) serialize_dual_timestamp(f
, "main-exec-status-exit", &s
->main_exec_status
.exit_timestamp
);
2612 if (dual_timestamp_is_set(&s
->main_exec_status
.exit_timestamp
)) {
2613 (void) serialize_item_format(f
, "main-exec-status-code", "%i", s
->main_exec_status
.code
);
2614 (void) serialize_item_format(f
, "main-exec-status-status", "%i", s
->main_exec_status
.status
);
2618 (void) serialize_dual_timestamp(f
, "watchdog-timestamp", &s
->watchdog_timestamp
);
2619 (void) serialize_bool(f
, "forbid-restart", s
->forbid_restart
);
2621 if (s
->watchdog_override_enable
)
2622 (void) serialize_item_format(f
, "watchdog-override-usec", USEC_FMT
, s
->watchdog_override_usec
);
2624 if (s
->watchdog_original_usec
!= USEC_INFINITY
)
2625 (void) serialize_item_format(f
, "watchdog-original-usec", USEC_FMT
, s
->watchdog_original_usec
);
2630 static int service_deserialize_exec_command(Unit
*u
, const char *key
, const char *value
) {
2631 Service
*s
= SERVICE(u
);
2633 unsigned idx
= 0, i
;
2634 bool control
, found
= false;
2635 ServiceExecCommand id
= _SERVICE_EXEC_COMMAND_INVALID
;
2636 ExecCommand
*command
= NULL
;
2637 _cleanup_free_
char *path
= NULL
;
2638 _cleanup_strv_free_
char **argv
= NULL
;
2640 enum ExecCommandState
{
2641 STATE_EXEC_COMMAND_TYPE
,
2642 STATE_EXEC_COMMAND_INDEX
,
2643 STATE_EXEC_COMMAND_PATH
,
2644 STATE_EXEC_COMMAND_ARGS
,
2645 _STATE_EXEC_COMMAND_MAX
,
2646 _STATE_EXEC_COMMAND_INVALID
= -1,
2653 control
= streq(key
, "control-command");
2655 state
= STATE_EXEC_COMMAND_TYPE
;
2658 _cleanup_free_
char *arg
= NULL
;
2660 r
= extract_first_word(&value
, &arg
, NULL
, EXTRACT_CUNESCAPE
);
2667 case STATE_EXEC_COMMAND_TYPE
:
2668 id
= service_exec_command_from_string(arg
);
2672 state
= STATE_EXEC_COMMAND_INDEX
;
2674 case STATE_EXEC_COMMAND_INDEX
:
2675 r
= safe_atou(arg
, &idx
);
2679 state
= STATE_EXEC_COMMAND_PATH
;
2681 case STATE_EXEC_COMMAND_PATH
:
2682 path
= TAKE_PTR(arg
);
2683 state
= STATE_EXEC_COMMAND_ARGS
;
2685 if (!path_is_absolute(path
))
2688 case STATE_EXEC_COMMAND_ARGS
:
2689 r
= strv_extend(&argv
, arg
);
2694 assert_not_reached("Unknown error at deserialization of exec command");
2699 if (state
!= STATE_EXEC_COMMAND_ARGS
)
2702 /* Let's check whether exec command on given offset matches data that we just deserialized */
2703 for (command
= s
->exec_command
[id
], i
= 0; command
; command
= command
->command_next
, i
++) {
2707 found
= strv_equal(argv
, command
->argv
) && streq(command
->path
, path
);
2712 /* Command at the index we serialized is different, let's look for command that exactly
2713 * matches but is on different index. If there is no such command we will not resume execution. */
2714 for (command
= s
->exec_command
[id
]; command
; command
= command
->command_next
)
2715 if (strv_equal(command
->argv
, argv
) && streq(command
->path
, path
))
2719 if (command
&& control
)
2720 s
->control_command
= command
;
2722 s
->main_command
= command
;
2724 log_unit_warning(u
, "Current command vanished from the unit file, execution of the command list won't be resumed.");
2729 static int service_deserialize_item(Unit
*u
, const char *key
, const char *value
, FDSet
*fds
) {
2730 Service
*s
= SERVICE(u
);
2738 if (streq(key
, "state")) {
2741 state
= service_state_from_string(value
);
2743 log_unit_debug(u
, "Failed to parse state value: %s", value
);
2745 s
->deserialized_state
= state
;
2746 } else if (streq(key
, "result")) {
2749 f
= service_result_from_string(value
);
2751 log_unit_debug(u
, "Failed to parse result value: %s", value
);
2752 else if (f
!= SERVICE_SUCCESS
)
2755 } else if (streq(key
, "reload-result")) {
2758 f
= service_result_from_string(value
);
2760 log_unit_debug(u
, "Failed to parse reload result value: %s", value
);
2761 else if (f
!= SERVICE_SUCCESS
)
2762 s
->reload_result
= f
;
2764 } else if (streq(key
, "control-pid")) {
2767 if (parse_pid(value
, &pid
) < 0)
2768 log_unit_debug(u
, "Failed to parse control-pid value: %s", value
);
2770 s
->control_pid
= pid
;
2771 } else if (streq(key
, "main-pid")) {
2774 if (parse_pid(value
, &pid
) < 0)
2775 log_unit_debug(u
, "Failed to parse main-pid value: %s", value
);
2777 (void) service_set_main_pid(s
, pid
);
2778 } else if (streq(key
, "main-pid-known")) {
2781 b
= parse_boolean(value
);
2783 log_unit_debug(u
, "Failed to parse main-pid-known value: %s", value
);
2785 s
->main_pid_known
= b
;
2786 } else if (streq(key
, "bus-name-good")) {
2789 b
= parse_boolean(value
);
2791 log_unit_debug(u
, "Failed to parse bus-name-good value: %s", value
);
2793 s
->bus_name_good
= b
;
2794 } else if (streq(key
, "bus-name-owner")) {
2795 r
= free_and_strdup(&s
->bus_name_owner
, value
);
2797 log_unit_error_errno(u
, r
, "Unable to deserialize current bus owner %s: %m", value
);
2798 } else if (streq(key
, "status-text")) {
2801 r
= cunescape(value
, 0, &t
);
2803 log_unit_debug_errno(u
, r
, "Failed to unescape status text '%s': %m", value
);
2805 free_and_replace(s
->status_text
, t
);
2807 } else if (streq(key
, "accept-socket")) {
2810 r
= manager_load_unit(u
->manager
, value
, NULL
, NULL
, &socket
);
2812 log_unit_debug_errno(u
, r
, "Failed to load accept-socket unit '%s': %m", value
);
2814 unit_ref_set(&s
->accept_socket
, u
, socket
);
2815 SOCKET(socket
)->n_connections
++;
2818 } else if (streq(key
, "socket-fd")) {
2821 if (safe_atoi(value
, &fd
) < 0 || fd
< 0 || !fdset_contains(fds
, fd
))
2822 log_unit_debug(u
, "Failed to parse socket-fd value: %s", value
);
2824 asynchronous_close(s
->socket_fd
);
2825 s
->socket_fd
= fdset_remove(fds
, fd
);
2827 } else if (streq(key
, "fd-store-fd")) {
2832 pf
= strcspn(value
, WHITESPACE
);
2833 fdv
= strndupa(value
, pf
);
2835 if (safe_atoi(fdv
, &fd
) < 0 || fd
< 0 || !fdset_contains(fds
, fd
))
2836 log_unit_debug(u
, "Failed to parse fd-store-fd value: %s", value
);
2838 _cleanup_free_
char *t
= NULL
;
2842 fdn
+= strspn(fdn
, WHITESPACE
);
2843 (void) cunescape(fdn
, 0, &t
);
2845 r
= service_add_fd_store(s
, fd
, t
);
2847 log_unit_error_errno(u
, r
, "Failed to add fd to store: %m");
2849 fdset_remove(fds
, fd
);
2852 } else if (streq(key
, "main-exec-status-pid")) {
2855 if (parse_pid(value
, &pid
) < 0)
2856 log_unit_debug(u
, "Failed to parse main-exec-status-pid value: %s", value
);
2858 s
->main_exec_status
.pid
= pid
;
2859 } else if (streq(key
, "main-exec-status-code")) {
2862 if (safe_atoi(value
, &i
) < 0)
2863 log_unit_debug(u
, "Failed to parse main-exec-status-code value: %s", value
);
2865 s
->main_exec_status
.code
= i
;
2866 } else if (streq(key
, "main-exec-status-status")) {
2869 if (safe_atoi(value
, &i
) < 0)
2870 log_unit_debug(u
, "Failed to parse main-exec-status-status value: %s", value
);
2872 s
->main_exec_status
.status
= i
;
2873 } else if (streq(key
, "main-exec-status-start"))
2874 deserialize_dual_timestamp(value
, &s
->main_exec_status
.start_timestamp
);
2875 else if (streq(key
, "main-exec-status-exit"))
2876 deserialize_dual_timestamp(value
, &s
->main_exec_status
.exit_timestamp
);
2877 else if (streq(key
, "watchdog-timestamp"))
2878 deserialize_dual_timestamp(value
, &s
->watchdog_timestamp
);
2879 else if (streq(key
, "forbid-restart")) {
2882 b
= parse_boolean(value
);
2884 log_unit_debug(u
, "Failed to parse forbid-restart value: %s", value
);
2886 s
->forbid_restart
= b
;
2887 } else if (streq(key
, "stdin-fd")) {
2890 if (safe_atoi(value
, &fd
) < 0 || fd
< 0 || !fdset_contains(fds
, fd
))
2891 log_unit_debug(u
, "Failed to parse stdin-fd value: %s", value
);
2893 asynchronous_close(s
->stdin_fd
);
2894 s
->stdin_fd
= fdset_remove(fds
, fd
);
2895 s
->exec_context
.stdio_as_fds
= true;
2897 } else if (streq(key
, "stdout-fd")) {
2900 if (safe_atoi(value
, &fd
) < 0 || fd
< 0 || !fdset_contains(fds
, fd
))
2901 log_unit_debug(u
, "Failed to parse stdout-fd value: %s", value
);
2903 asynchronous_close(s
->stdout_fd
);
2904 s
->stdout_fd
= fdset_remove(fds
, fd
);
2905 s
->exec_context
.stdio_as_fds
= true;
2907 } else if (streq(key
, "stderr-fd")) {
2910 if (safe_atoi(value
, &fd
) < 0 || fd
< 0 || !fdset_contains(fds
, fd
))
2911 log_unit_debug(u
, "Failed to parse stderr-fd value: %s", value
);
2913 asynchronous_close(s
->stderr_fd
);
2914 s
->stderr_fd
= fdset_remove(fds
, fd
);
2915 s
->exec_context
.stdio_as_fds
= true;
2917 } else if (streq(key
, "exec-fd")) {
2920 if (safe_atoi(value
, &fd
) < 0 || fd
< 0 || !fdset_contains(fds
, fd
))
2921 log_unit_debug(u
, "Failed to parse exec-fd value: %s", value
);
2923 s
->exec_fd_event_source
= sd_event_source_unref(s
->exec_fd_event_source
);
2925 fd
= fdset_remove(fds
, fd
);
2926 if (service_allocate_exec_fd_event_source(s
, fd
, &s
->exec_fd_event_source
) < 0)
2929 } else if (streq(key
, "watchdog-override-usec")) {
2930 if (deserialize_usec(value
, &s
->watchdog_override_usec
) < 0)
2931 log_unit_debug(u
, "Failed to parse watchdog_override_usec value: %s", value
);
2933 s
->watchdog_override_enable
= true;
2935 } else if (streq(key
, "watchdog-original-usec")) {
2936 if (deserialize_usec(value
, &s
->watchdog_original_usec
) < 0)
2937 log_unit_debug(u
, "Failed to parse watchdog_original_usec value: %s", value
);
2939 } else if (STR_IN_SET(key
, "main-command", "control-command")) {
2940 r
= service_deserialize_exec_command(u
, key
, value
);
2942 log_unit_debug_errno(u
, r
, "Failed to parse serialized command \"%s\": %m", value
);
2944 } else if (streq(key
, "n-restarts")) {
2945 r
= safe_atou(value
, &s
->n_restarts
);
2947 log_unit_debug_errno(u
, r
, "Failed to parse serialized restart counter '%s': %m", value
);
2949 } else if (streq(key
, "flush-n-restarts")) {
2950 r
= parse_boolean(value
);
2952 log_unit_debug_errno(u
, r
, "Failed to parse serialized flush restart counter setting '%s': %m", value
);
2954 s
->flush_n_restarts
= r
;
2956 log_unit_debug(u
, "Unknown serialization key: %s", key
);
2961 _pure_
static UnitActiveState
service_active_state(Unit
*u
) {
2962 const UnitActiveState
*table
;
2966 table
= SERVICE(u
)->type
== SERVICE_IDLE
? state_translation_table_idle
: state_translation_table
;
2968 return table
[SERVICE(u
)->state
];
2971 static const char *service_sub_state_to_string(Unit
*u
) {
2974 return service_state_to_string(SERVICE(u
)->state
);
2977 static bool service_may_gc(Unit
*u
) {
2978 Service
*s
= SERVICE(u
);
2982 /* Never clean up services that still have a process around, even if the service is formally dead. Note that
2983 * unit_may_gc() already checked our cgroup for us, we just check our two additional PIDs, too, in case they
2984 * have moved outside of the cgroup. */
2986 if (main_pid_good(s
) > 0 ||
2987 control_pid_good(s
) > 0)
2993 static int service_retry_pid_file(Service
*s
) {
2996 assert(s
->pid_file
);
2997 assert(IN_SET(s
->state
, SERVICE_START
, SERVICE_START_POST
));
2999 r
= service_load_pid_file(s
, false);
3003 service_unwatch_pid_file(s
);
3005 service_enter_running(s
, SERVICE_SUCCESS
);
3009 static int service_watch_pid_file(Service
*s
) {
3012 log_unit_debug(UNIT(s
), "Setting watch for PID file %s", s
->pid_file_pathspec
->path
);
3014 r
= path_spec_watch(s
->pid_file_pathspec
, service_dispatch_inotify_io
);
3018 /* the pidfile might have appeared just before we set the watch */
3019 log_unit_debug(UNIT(s
), "Trying to read PID file %s in case it changed", s
->pid_file_pathspec
->path
);
3020 service_retry_pid_file(s
);
3024 log_unit_error_errno(UNIT(s
), r
, "Failed to set a watch for PID file %s: %m", s
->pid_file_pathspec
->path
);
3025 service_unwatch_pid_file(s
);
3029 static int service_demand_pid_file(Service
*s
) {
3032 assert(s
->pid_file
);
3033 assert(!s
->pid_file_pathspec
);
3035 ps
= new0(PathSpec
, 1);
3040 ps
->path
= strdup(s
->pid_file
);
3046 path_simplify(ps
->path
, false);
3048 /* PATH_CHANGED would not be enough. There are daemons (sendmail) that
3049 * keep their PID file open all the time. */
3050 ps
->type
= PATH_MODIFIED
;
3051 ps
->inotify_fd
= -1;
3053 s
->pid_file_pathspec
= ps
;
3055 return service_watch_pid_file(s
);
3058 static int service_dispatch_inotify_io(sd_event_source
*source
, int fd
, uint32_t events
, void *userdata
) {
3059 PathSpec
*p
= userdata
;
3064 s
= SERVICE(p
->unit
);
3068 assert(IN_SET(s
->state
, SERVICE_START
, SERVICE_START_POST
));
3069 assert(s
->pid_file_pathspec
);
3070 assert(path_spec_owns_inotify_fd(s
->pid_file_pathspec
, fd
));
3072 log_unit_debug(UNIT(s
), "inotify event");
3074 if (path_spec_fd_event(p
, events
) < 0)
3077 if (service_retry_pid_file(s
) == 0)
3080 if (service_watch_pid_file(s
) < 0)
3086 service_unwatch_pid_file(s
);
3087 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, SERVICE_FAILURE_RESOURCES
);
3091 static int service_dispatch_exec_io(sd_event_source
*source
, int fd
, uint32_t events
, void *userdata
) {
3092 Service
*s
= SERVICE(userdata
);
3096 log_unit_debug(UNIT(s
), "got exec-fd event");
3098 /* If Type=exec is set, we'll consider a service started successfully the instant we invoked execve()
3099 * successfully for it. We implement this through a pipe() towards the child, which the kernel automatically
3100 * closes for us due to O_CLOEXEC on execve() in the child, which then triggers EOF on the pipe in the
3101 * parent. We need to be careful however, as there are other reasons that we might cause the child's side of
3102 * the pipe to be closed (for example, a simple exit()). To deal with that we'll ignore EOFs on the pipe unless
3103 * the child signalled us first that it is about to call the execve(). It does so by sending us a simple
3104 * non-zero byte via the pipe. We also provide the child with a way to inform us in case execve() failed: if it
3105 * sends a zero byte we'll ignore POLLHUP on the fd again. */
3111 n
= read(fd
, &x
, sizeof(x
));
3113 if (errno
== EAGAIN
) /* O_NONBLOCK in effect → everything queued has now been processed. */
3116 return log_unit_error_errno(UNIT(s
), errno
, "Failed to read from exec_fd: %m");
3118 if (n
== 0) { /* EOF → the event we are waiting for */
3120 s
->exec_fd_event_source
= sd_event_source_unref(s
->exec_fd_event_source
);
3122 if (s
->exec_fd_hot
) { /* Did the child tell us to expect EOF now? */
3123 log_unit_debug(UNIT(s
), "Got EOF on exec-fd");
3125 s
->exec_fd_hot
= false;
3127 /* Nice! This is what we have been waiting for. Transition to next state. */
3128 if (s
->type
== SERVICE_EXEC
&& s
->state
== SERVICE_START
)
3129 service_enter_start_post(s
);
3131 log_unit_debug(UNIT(s
), "Got EOF on exec-fd while it was disabled, ignoring.");
3136 /* A byte was read → this turns on/off the exec fd logic */
3137 assert(n
== sizeof(x
));
3144 static void service_notify_cgroup_empty_event(Unit
*u
) {
3145 Service
*s
= SERVICE(u
);
3149 log_unit_debug(u
, "cgroup is empty");
3153 /* Waiting for SIGCHLD is usually more interesting,
3154 * because it includes return codes/signals. Which is
3155 * why we ignore the cgroup events for most cases,
3156 * except when we don't know pid which to expect the
3160 if (s
->type
== SERVICE_NOTIFY
&&
3161 main_pid_good(s
) == 0 &&
3162 control_pid_good(s
) == 0) {
3163 /* No chance of getting a ready notification anymore */
3164 service_enter_stop_post(s
, SERVICE_FAILURE_PROTOCOL
);
3169 case SERVICE_START_POST
:
3170 if (s
->pid_file_pathspec
&&
3171 main_pid_good(s
) == 0 &&
3172 control_pid_good(s
) == 0) {
3174 /* Give up hoping for the daemon to write its PID file */
3175 log_unit_warning(u
, "Daemon never wrote its PID file. Failing.");
3177 service_unwatch_pid_file(s
);
3178 if (s
->state
== SERVICE_START
)
3179 service_enter_stop_post(s
, SERVICE_FAILURE_PROTOCOL
);
3181 service_enter_stop(s
, SERVICE_FAILURE_PROTOCOL
);
3185 case SERVICE_RUNNING
:
3186 /* service_enter_running() will figure out what to do */
3187 service_enter_running(s
, SERVICE_SUCCESS
);
3190 case SERVICE_STOP_WATCHDOG
:
3191 case SERVICE_STOP_SIGTERM
:
3192 case SERVICE_STOP_SIGKILL
:
3194 if (main_pid_good(s
) <= 0 && control_pid_good(s
) <= 0)
3195 service_enter_stop_post(s
, SERVICE_SUCCESS
);
3199 case SERVICE_STOP_POST
:
3200 case SERVICE_FINAL_SIGTERM
:
3201 case SERVICE_FINAL_SIGKILL
:
3202 if (main_pid_good(s
) <= 0 && control_pid_good(s
) <= 0)
3203 service_enter_dead(s
, SERVICE_SUCCESS
, true);
3212 static void service_sigchld_event(Unit
*u
, pid_t pid
, int code
, int status
) {
3213 bool notify_dbus
= true;
3214 Service
*s
= SERVICE(u
);
3216 ExitClean clean_mode
;
3221 /* Oneshot services and non-SERVICE_EXEC_START commands should not be
3222 * considered daemons as they are typically not long running. */
3223 if (s
->type
== SERVICE_ONESHOT
|| (s
->control_pid
== pid
&& s
->control_command_id
!= SERVICE_EXEC_START
))
3224 clean_mode
= EXIT_CLEAN_COMMAND
;
3226 clean_mode
= EXIT_CLEAN_DAEMON
;
3228 if (is_clean_exit(code
, status
, clean_mode
, &s
->success_status
))
3229 f
= SERVICE_SUCCESS
;
3230 else if (code
== CLD_EXITED
)
3231 f
= SERVICE_FAILURE_EXIT_CODE
;
3232 else if (code
== CLD_KILLED
)
3233 f
= SERVICE_FAILURE_SIGNAL
;
3234 else if (code
== CLD_DUMPED
)
3235 f
= SERVICE_FAILURE_CORE_DUMP
;
3237 assert_not_reached("Unknown code");
3239 if (s
->main_pid
== pid
) {
3240 /* Forking services may occasionally move to a new PID.
3241 * As long as they update the PID file before exiting the old
3242 * PID, they're fine. */
3243 if (service_load_pid_file(s
, false) > 0)
3247 exec_status_exit(&s
->main_exec_status
, &s
->exec_context
, pid
, code
, status
);
3249 if (s
->main_command
) {
3250 /* If this is not a forking service than the
3251 * main process got started and hence we copy
3252 * the exit status so that it is recorded both
3253 * as main and as control process exit
3256 s
->main_command
->exec_status
= s
->main_exec_status
;
3258 if (s
->main_command
->flags
& EXEC_COMMAND_IGNORE_FAILURE
)
3259 f
= SERVICE_SUCCESS
;
3260 } else if (s
->exec_command
[SERVICE_EXEC_START
]) {
3262 /* If this is a forked process, then we should
3263 * ignore the return value if this was
3264 * configured for the starter process */
3266 if (s
->exec_command
[SERVICE_EXEC_START
]->flags
& EXEC_COMMAND_IGNORE_FAILURE
)
3267 f
= SERVICE_SUCCESS
;
3270 /* When this is a successful exit, let's log about the exit code on DEBUG level. If this is a failure
3271 * and the process exited on its own via exit(), then let's make this a NOTICE, under the assumption
3272 * that the service already logged the reason at a higher log level on its own. (Internally,
3273 * unit_log_process_exit() will possibly bump this to WARNING if the service died due to a signal.) */
3274 unit_log_process_exit(
3275 u
, f
== SERVICE_SUCCESS
? LOG_DEBUG
: LOG_NOTICE
,
3277 service_exec_command_to_string(SERVICE_EXEC_START
),
3280 if (s
->result
== SERVICE_SUCCESS
)
3283 if (s
->main_command
&&
3284 s
->main_command
->command_next
&&
3285 s
->type
== SERVICE_ONESHOT
&&
3286 f
== SERVICE_SUCCESS
) {
3288 /* There is another command to *
3289 * execute, so let's do that. */
3291 log_unit_debug(u
, "Running next main command for state %s.", service_state_to_string(s
->state
));
3292 service_run_next_main(s
);
3296 /* The service exited, so the service is officially
3298 s
->main_command
= NULL
;
3302 case SERVICE_START_POST
:
3303 case SERVICE_RELOAD
:
3305 /* Need to wait until the operation is
3310 if (s
->type
== SERVICE_ONESHOT
) {
3311 /* This was our main goal, so let's go on */
3312 if (f
== SERVICE_SUCCESS
)
3313 service_enter_start_post(s
);
3315 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, f
);
3317 } else if (s
->type
== SERVICE_NOTIFY
) {
3318 /* Only enter running through a notification, so that the
3319 * SERVICE_START state signifies that no ready notification
3320 * has been received */
3321 if (f
!= SERVICE_SUCCESS
)
3322 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, f
);
3323 else if (!s
->remain_after_exit
|| s
->notify_access
== NOTIFY_MAIN
)
3324 /* The service has never been and will never be active */
3325 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, SERVICE_FAILURE_PROTOCOL
);
3330 case SERVICE_RUNNING
:
3331 service_enter_running(s
, f
);
3334 case SERVICE_STOP_WATCHDOG
:
3335 case SERVICE_STOP_SIGTERM
:
3336 case SERVICE_STOP_SIGKILL
:
3338 if (control_pid_good(s
) <= 0)
3339 service_enter_stop_post(s
, f
);
3341 /* If there is still a control process, wait for that first */
3344 case SERVICE_STOP_POST
:
3345 case SERVICE_FINAL_SIGTERM
:
3346 case SERVICE_FINAL_SIGKILL
:
3348 if (control_pid_good(s
) <= 0)
3349 service_enter_dead(s
, f
, true);
3353 assert_not_reached("Uh, main process died at wrong time.");
3357 } else if (s
->control_pid
== pid
) {
3360 if (s
->control_command
) {
3361 exec_status_exit(&s
->control_command
->exec_status
, &s
->exec_context
, pid
, code
, status
);
3363 if (s
->control_command
->flags
& EXEC_COMMAND_IGNORE_FAILURE
)
3364 f
= SERVICE_SUCCESS
;
3367 unit_log_process_exit(
3368 u
, f
== SERVICE_SUCCESS
? LOG_DEBUG
: LOG_NOTICE
,
3370 service_exec_command_to_string(s
->control_command_id
),
3373 if (s
->result
== SERVICE_SUCCESS
)
3376 if (s
->control_command
&&
3377 s
->control_command
->command_next
&&
3378 f
== SERVICE_SUCCESS
) {
3380 /* There is another command to *
3381 * execute, so let's do that. */
3383 log_unit_debug(u
, "Running next control command for state %s.", service_state_to_string(s
->state
));
3384 service_run_next_control(s
);
3387 /* No further commands for this step, so let's
3388 * figure out what to do next */
3390 s
->control_command
= NULL
;
3391 s
->control_command_id
= _SERVICE_EXEC_COMMAND_INVALID
;
3393 log_unit_debug(u
, "Got final SIGCHLD for state %s.", service_state_to_string(s
->state
));
3397 case SERVICE_START_PRE
:
3398 if (f
== SERVICE_SUCCESS
)
3399 service_enter_start(s
);
3401 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, f
);
3405 if (s
->type
!= SERVICE_FORKING
)
3406 /* Maybe spurious event due to a reload that changed the type? */
3409 if (f
!= SERVICE_SUCCESS
) {
3410 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, f
);
3415 bool has_start_post
;
3418 /* Let's try to load the pid file here if we can.
3419 * The PID file might actually be created by a START_POST
3420 * script. In that case don't worry if the loading fails. */
3422 has_start_post
= s
->exec_command
[SERVICE_EXEC_START_POST
];
3423 r
= service_load_pid_file(s
, !has_start_post
);
3424 if (!has_start_post
&& r
< 0) {
3425 r
= service_demand_pid_file(s
);
3426 if (r
< 0 || cgroup_good(s
) == 0)
3427 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, SERVICE_FAILURE_PROTOCOL
);
3431 service_search_main_pid(s
);
3433 service_enter_start_post(s
);
3436 case SERVICE_START_POST
:
3437 if (f
!= SERVICE_SUCCESS
) {
3438 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, f
);
3445 r
= service_load_pid_file(s
, true);
3447 r
= service_demand_pid_file(s
);
3448 if (r
< 0 || cgroup_good(s
) == 0)
3449 service_enter_stop(s
, SERVICE_FAILURE_PROTOCOL
);
3453 service_search_main_pid(s
);
3455 service_enter_running(s
, SERVICE_SUCCESS
);
3458 case SERVICE_RELOAD
:
3459 if (f
== SERVICE_SUCCESS
)
3460 if (service_load_pid_file(s
, true) < 0)
3461 service_search_main_pid(s
);
3463 s
->reload_result
= f
;
3464 service_enter_running(s
, SERVICE_SUCCESS
);
3468 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, f
);
3471 case SERVICE_STOP_WATCHDOG
:
3472 case SERVICE_STOP_SIGTERM
:
3473 case SERVICE_STOP_SIGKILL
:
3474 if (main_pid_good(s
) <= 0)
3475 service_enter_stop_post(s
, f
);
3477 /* If there is still a service process around, wait until
3478 * that one quit, too */
3481 case SERVICE_STOP_POST
:
3482 case SERVICE_FINAL_SIGTERM
:
3483 case SERVICE_FINAL_SIGKILL
:
3484 if (main_pid_good(s
) <= 0)
3485 service_enter_dead(s
, f
, true);
3489 assert_not_reached("Uh, control process died at wrong time.");
3492 } else /* Neither control nor main PID? If so, don't notify about anything */
3493 notify_dbus
= false;
3495 /* Notify clients about changed exit status */
3497 unit_add_to_dbus_queue(u
);
3499 /* We watch the main/control process otherwise we can't retrieve the unit they
3500 * belong to with cgroupv1. But if they are not our direct child, we won't get a
3501 * SIGCHLD for them. Therefore we need to look for others to watch so we can
3502 * detect when the cgroup becomes empty. Note that the control process is always
3503 * our child so it's pointless to watch all other processes. */
3504 if (!control_pid_good(s
))
3505 if (!s
->main_pid_known
|| s
->main_pid_alien
)
3506 (void) unit_enqueue_rewatch_pids(u
);
3509 static int service_dispatch_timer(sd_event_source
*source
, usec_t usec
, void *userdata
) {
3510 Service
*s
= SERVICE(userdata
);
3513 assert(source
== s
->timer_event_source
);
3517 case SERVICE_START_PRE
:
3519 log_unit_warning(UNIT(s
), "%s operation timed out. Terminating.", s
->state
== SERVICE_START
? "Start" : "Start-pre");
3520 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, SERVICE_FAILURE_TIMEOUT
);
3523 case SERVICE_START_POST
:
3524 log_unit_warning(UNIT(s
), "Start-post operation timed out. Stopping.");
3525 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, SERVICE_FAILURE_TIMEOUT
);
3528 case SERVICE_RUNNING
:
3529 log_unit_warning(UNIT(s
), "Service reached runtime time limit. Stopping.");
3530 service_enter_stop(s
, SERVICE_FAILURE_TIMEOUT
);
3533 case SERVICE_RELOAD
:
3534 log_unit_warning(UNIT(s
), "Reload operation timed out. Killing reload process.");
3535 service_kill_control_process(s
);
3536 s
->reload_result
= SERVICE_FAILURE_TIMEOUT
;
3537 service_enter_running(s
, SERVICE_SUCCESS
);
3541 log_unit_warning(UNIT(s
), "Stopping timed out. Terminating.");
3542 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, SERVICE_FAILURE_TIMEOUT
);
3545 case SERVICE_STOP_WATCHDOG
:
3546 log_unit_warning(UNIT(s
), "State 'stop-watchdog' timed out. Terminating.");
3547 service_enter_signal(s
, SERVICE_STOP_SIGTERM
, SERVICE_FAILURE_TIMEOUT
);
3550 case SERVICE_STOP_SIGTERM
:
3551 if (s
->kill_context
.send_sigkill
) {
3552 log_unit_warning(UNIT(s
), "State 'stop-sigterm' timed out. Killing.");
3553 service_enter_signal(s
, SERVICE_STOP_SIGKILL
, SERVICE_FAILURE_TIMEOUT
);
3555 log_unit_warning(UNIT(s
), "State 'stop-sigterm' timed out. Skipping SIGKILL.");
3556 service_enter_stop_post(s
, SERVICE_FAILURE_TIMEOUT
);
3561 case SERVICE_STOP_SIGKILL
:
3562 /* Uh, we sent a SIGKILL and it is still not gone?
3563 * Must be something we cannot kill, so let's just be
3564 * weirded out and continue */
3566 log_unit_warning(UNIT(s
), "Processes still around after SIGKILL. Ignoring.");
3567 service_enter_stop_post(s
, SERVICE_FAILURE_TIMEOUT
);
3570 case SERVICE_STOP_POST
:
3571 log_unit_warning(UNIT(s
), "State 'stop-post' timed out. Terminating.");
3572 service_enter_signal(s
, SERVICE_FINAL_SIGTERM
, SERVICE_FAILURE_TIMEOUT
);
3575 case SERVICE_FINAL_SIGTERM
:
3576 if (s
->kill_context
.send_sigkill
) {
3577 log_unit_warning(UNIT(s
), "State 'stop-final-sigterm' timed out. Killing.");
3578 service_enter_signal(s
, SERVICE_FINAL_SIGKILL
, SERVICE_FAILURE_TIMEOUT
);
3580 log_unit_warning(UNIT(s
), "State 'stop-final-sigterm' timed out. Skipping SIGKILL. Entering failed mode.");
3581 service_enter_dead(s
, SERVICE_FAILURE_TIMEOUT
, false);
3586 case SERVICE_FINAL_SIGKILL
:
3587 log_unit_warning(UNIT(s
), "Processes still around after final SIGKILL. Entering failed mode.");
3588 service_enter_dead(s
, SERVICE_FAILURE_TIMEOUT
, true);
3591 case SERVICE_AUTO_RESTART
:
3592 if (s
->restart_usec
> 0) {
3593 char buf_restart
[FORMAT_TIMESPAN_MAX
];
3594 log_unit_info(UNIT(s
),
3595 "Service RestartSec=%s expired, scheduling restart.",
3596 format_timespan(buf_restart
, sizeof buf_restart
, s
->restart_usec
, USEC_PER_SEC
));
3598 log_unit_info(UNIT(s
),
3599 "Service has no hold-off time (RestartSec=0), scheduling restart.");
3601 service_enter_restart(s
);
3605 assert_not_reached("Timeout at wrong time.");
3611 static int service_dispatch_watchdog(sd_event_source
*source
, usec_t usec
, void *userdata
) {
3612 Service
*s
= SERVICE(userdata
);
3613 char t
[FORMAT_TIMESPAN_MAX
];
3614 usec_t watchdog_usec
;
3617 assert(source
== s
->watchdog_event_source
);
3619 watchdog_usec
= service_get_watchdog_usec(s
);
3621 if (UNIT(s
)->manager
->service_watchdogs
) {
3622 log_unit_error(UNIT(s
), "Watchdog timeout (limit %s)!",
3623 format_timespan(t
, sizeof(t
), watchdog_usec
, 1));
3625 service_enter_signal(s
, SERVICE_STOP_WATCHDOG
, SERVICE_FAILURE_WATCHDOG
);
3627 log_unit_warning(UNIT(s
), "Watchdog disabled! Ignoring watchdog timeout (limit %s)!",
3628 format_timespan(t
, sizeof(t
), watchdog_usec
, 1));
3633 static bool service_notify_message_authorized(Service
*s
, pid_t pid
, char **tags
, FDSet
*fds
) {
3636 if (s
->notify_access
== NOTIFY_NONE
) {
3637 log_unit_warning(UNIT(s
), "Got notification message from PID "PID_FMT
", but reception is disabled.", pid
);
3641 if (s
->notify_access
== NOTIFY_MAIN
&& pid
!= s
->main_pid
) {
3642 if (s
->main_pid
!= 0)
3643 log_unit_warning(UNIT(s
), "Got notification message from PID "PID_FMT
", but reception only permitted for main PID "PID_FMT
, pid
, s
->main_pid
);
3645 log_unit_warning(UNIT(s
), "Got notification message from PID "PID_FMT
", but reception only permitted for main PID which is currently not known", pid
);
3650 if (s
->notify_access
== NOTIFY_EXEC
&& pid
!= s
->main_pid
&& pid
!= s
->control_pid
) {
3651 if (s
->main_pid
!= 0 && s
->control_pid
!= 0)
3652 log_unit_warning(UNIT(s
), "Got notification message from PID "PID_FMT
", but reception only permitted for main PID "PID_FMT
" and control PID "PID_FMT
,
3653 pid
, s
->main_pid
, s
->control_pid
);
3654 else if (s
->main_pid
!= 0)
3655 log_unit_warning(UNIT(s
), "Got notification message from PID "PID_FMT
", but reception only permitted for main PID "PID_FMT
, pid
, s
->main_pid
);
3656 else if (s
->control_pid
!= 0)
3657 log_unit_warning(UNIT(s
), "Got notification message from PID "PID_FMT
", but reception only permitted for control PID "PID_FMT
, pid
, s
->control_pid
);
3659 log_unit_warning(UNIT(s
), "Got notification message from PID "PID_FMT
", but reception only permitted for main PID and control PID which are currently not known", pid
);
3667 static void service_notify_message(
3669 const struct ucred
*ucred
,
3673 Service
*s
= SERVICE(u
);
3674 bool notify_dbus
= false;
3682 if (!service_notify_message_authorized(SERVICE(u
), ucred
->pid
, tags
, fds
))
3685 if (DEBUG_LOGGING
) {
3686 _cleanup_free_
char *cc
= NULL
;
3688 cc
= strv_join(tags
, ", ");
3689 log_unit_debug(u
, "Got notification message from PID "PID_FMT
" (%s)", ucred
->pid
, isempty(cc
) ? "n/a" : cc
);
3692 /* Interpret MAINPID= */
3693 e
= strv_find_startswith(tags
, "MAINPID=");
3694 if (e
&& IN_SET(s
->state
, SERVICE_START
, SERVICE_START_POST
, SERVICE_RUNNING
, SERVICE_RELOAD
)) {
3697 if (parse_pid(e
, &new_main_pid
) < 0)
3698 log_unit_warning(u
, "Failed to parse MAINPID= field in notification message, ignoring: %s", e
);
3699 else if (!s
->main_pid_known
|| new_main_pid
!= s
->main_pid
) {
3701 r
= service_is_suitable_main_pid(s
, new_main_pid
, LOG_WARNING
);
3703 /* The new main PID is a bit suspicous, which is OK if the sender is privileged. */
3705 if (ucred
->uid
== 0) {
3706 log_unit_debug(u
, "New main PID "PID_FMT
" does not belong to service, but we'll accept it as the request to change it came from a privileged process.", new_main_pid
);
3709 log_unit_debug(u
, "New main PID "PID_FMT
" does not belong to service, refusing.", new_main_pid
);
3712 service_set_main_pid(s
, new_main_pid
);
3714 r
= unit_watch_pid(UNIT(s
), new_main_pid
, false);
3716 log_unit_warning_errno(UNIT(s
), r
, "Failed to watch new main PID "PID_FMT
" for service: %m", new_main_pid
);
3723 /* Interpret READY=/STOPPING=/RELOADING=. Last one wins. */
3724 STRV_FOREACH_BACKWARDS(i
, tags
) {
3726 if (streq(*i
, "READY=1")) {
3727 s
->notify_state
= NOTIFY_READY
;
3729 /* Type=notify services inform us about completed
3730 * initialization with READY=1 */
3731 if (s
->type
== SERVICE_NOTIFY
&& s
->state
== SERVICE_START
)
3732 service_enter_start_post(s
);
3734 /* Sending READY=1 while we are reloading informs us
3735 * that the reloading is complete */
3736 if (s
->state
== SERVICE_RELOAD
&& s
->control_pid
== 0)
3737 service_enter_running(s
, SERVICE_SUCCESS
);
3742 } else if (streq(*i
, "RELOADING=1")) {
3743 s
->notify_state
= NOTIFY_RELOADING
;
3745 if (s
->state
== SERVICE_RUNNING
)
3746 service_enter_reload_by_notify(s
);
3751 } else if (streq(*i
, "STOPPING=1")) {
3752 s
->notify_state
= NOTIFY_STOPPING
;
3754 if (s
->state
== SERVICE_RUNNING
)
3755 service_enter_stop_by_notify(s
);
3762 /* Interpret STATUS= */
3763 e
= strv_find_startswith(tags
, "STATUS=");
3765 _cleanup_free_
char *t
= NULL
;
3768 /* Note that this size limit check is mostly paranoia: since the datagram size we are willing
3769 * to process is already limited to NOTIFY_BUFFER_MAX, this limit here should never be hit. */
3770 if (strlen(e
) > STATUS_TEXT_MAX
)
3771 log_unit_warning(u
, "Status message overly long (%zu > %u), ignoring.", strlen(e
), STATUS_TEXT_MAX
);
3772 else if (!utf8_is_valid(e
))
3773 log_unit_warning(u
, "Status message in notification message is not UTF-8 clean, ignoring.");
3781 if (!streq_ptr(s
->status_text
, t
)) {
3782 free_and_replace(s
->status_text
, t
);
3787 /* Interpret ERRNO= */
3788 e
= strv_find_startswith(tags
, "ERRNO=");
3792 status_errno
= parse_errno(e
);
3793 if (status_errno
< 0)
3794 log_unit_warning_errno(u
, status_errno
,
3795 "Failed to parse ERRNO= field value '%s' in notification message: %m", e
);
3796 else if (s
->status_errno
!= status_errno
) {
3797 s
->status_errno
= status_errno
;
3802 /* Interpret EXTEND_TIMEOUT= */
3803 e
= strv_find_startswith(tags
, "EXTEND_TIMEOUT_USEC=");
3805 usec_t extend_timeout_usec
;
3806 if (safe_atou64(e
, &extend_timeout_usec
) < 0)
3807 log_unit_warning(u
, "Failed to parse EXTEND_TIMEOUT_USEC=%s", e
);
3809 service_extend_timeout(s
, extend_timeout_usec
);
3812 /* Interpret WATCHDOG= */
3813 if (strv_find(tags
, "WATCHDOG=1"))
3814 service_reset_watchdog(s
);
3816 e
= strv_find_startswith(tags
, "WATCHDOG_USEC=");
3818 usec_t watchdog_override_usec
;
3819 if (safe_atou64(e
, &watchdog_override_usec
) < 0)
3820 log_unit_warning(u
, "Failed to parse WATCHDOG_USEC=%s", e
);
3822 service_override_watchdog_timeout(s
, watchdog_override_usec
);
3825 /* Process FD store messages. Either FDSTOREREMOVE=1 for removal, or FDSTORE=1 for addition. In both cases,
3826 * process FDNAME= for picking the file descriptor name to use. Note that FDNAME= is required when removing
3827 * fds, but optional when pushing in new fds, for compatibility reasons. */
3828 if (strv_find(tags
, "FDSTOREREMOVE=1")) {
3831 name
= strv_find_startswith(tags
, "FDNAME=");
3832 if (!name
|| !fdname_is_valid(name
))
3833 log_unit_warning(u
, "FDSTOREREMOVE=1 requested, but no valid file descriptor name passed, ignoring.");
3835 service_remove_fd_store(s
, name
);
3837 } else if (strv_find(tags
, "FDSTORE=1")) {
3840 name
= strv_find_startswith(tags
, "FDNAME=");
3841 if (name
&& !fdname_is_valid(name
)) {
3842 log_unit_warning(u
, "Passed FDNAME= name is invalid, ignoring.");
3846 (void) service_add_fd_store_set(s
, fds
, name
);
3849 /* Notify clients about changed status or main pid */
3851 unit_add_to_dbus_queue(u
);
3854 static int service_get_timeout(Unit
*u
, usec_t
*timeout
) {
3855 Service
*s
= SERVICE(u
);
3859 if (!s
->timer_event_source
)
3862 r
= sd_event_source_get_time(s
->timer_event_source
, &t
);
3865 if (t
== USEC_INFINITY
)
3872 static void service_bus_name_owner_change(
3875 const char *old_owner
,
3876 const char *new_owner
) {
3878 Service
*s
= SERVICE(u
);
3884 assert(streq(s
->bus_name
, name
));
3885 assert(old_owner
|| new_owner
);
3887 if (old_owner
&& new_owner
)
3888 log_unit_debug(u
, "D-Bus name %s changed owner from %s to %s", name
, old_owner
, new_owner
);
3890 log_unit_debug(u
, "D-Bus name %s no longer registered by %s", name
, old_owner
);
3892 log_unit_debug(u
, "D-Bus name %s now registered by %s", name
, new_owner
);
3894 s
->bus_name_good
= !!new_owner
;
3896 /* Track the current owner, so we can reconstruct changes after a daemon reload */
3897 r
= free_and_strdup(&s
->bus_name_owner
, new_owner
);
3899 log_unit_error_errno(u
, r
, "Unable to set new bus name owner %s: %m", new_owner
);
3903 if (s
->type
== SERVICE_DBUS
) {
3905 /* service_enter_running() will figure out what to
3907 if (s
->state
== SERVICE_RUNNING
)
3908 service_enter_running(s
, SERVICE_SUCCESS
);
3909 else if (s
->state
== SERVICE_START
&& new_owner
)
3910 service_enter_start_post(s
);
3912 } else if (new_owner
&&
3920 _cleanup_(sd_bus_creds_unrefp
) sd_bus_creds
*creds
= NULL
;
3923 /* Try to acquire PID from bus service */
3925 r
= sd_bus_get_name_creds(u
->manager
->api_bus
, name
, SD_BUS_CREDS_PID
, &creds
);
3927 r
= sd_bus_creds_get_pid(creds
, &pid
);
3929 log_unit_debug(u
, "D-Bus name %s is now owned by process " PID_FMT
, name
, pid
);
3931 service_set_main_pid(s
, pid
);
3932 unit_watch_pid(UNIT(s
), pid
, false);
3937 int service_set_socket_fd(Service
*s
, int fd
, Socket
*sock
, bool selinux_context_net
) {
3938 _cleanup_free_
char *peer
= NULL
;
3944 /* This is called by the socket code when instantiating a new service for a stream socket and the socket needs
3945 * to be configured. We take ownership of the passed fd on success. */
3947 if (UNIT(s
)->load_state
!= UNIT_LOADED
)
3950 if (s
->socket_fd
>= 0)
3953 if (s
->state
!= SERVICE_DEAD
)
3956 if (getpeername_pretty(fd
, true, &peer
) >= 0) {
3958 if (UNIT(s
)->description
) {
3959 _cleanup_free_
char *a
;
3961 a
= strjoin(UNIT(s
)->description
, " (", peer
, ")");
3965 r
= unit_set_description(UNIT(s
), a
);
3967 r
= unit_set_description(UNIT(s
), peer
);
3973 r
= unit_add_two_dependencies(UNIT(sock
), UNIT_BEFORE
, UNIT_TRIGGERS
, UNIT(s
), false, UNIT_DEPENDENCY_IMPLICIT
);
3978 s
->socket_fd_selinux_context_net
= selinux_context_net
;
3980 unit_ref_set(&s
->accept_socket
, UNIT(s
), UNIT(sock
));
3984 static void service_reset_failed(Unit
*u
) {
3985 Service
*s
= SERVICE(u
);
3989 if (s
->state
== SERVICE_FAILED
)
3990 service_set_state(s
, SERVICE_DEAD
);
3992 s
->result
= SERVICE_SUCCESS
;
3993 s
->reload_result
= SERVICE_SUCCESS
;
3995 s
->flush_n_restarts
= false;
3998 static int service_kill(Unit
*u
, KillWho who
, int signo
, sd_bus_error
*error
) {
3999 Service
*s
= SERVICE(u
);
4003 return unit_kill_common(u
, who
, signo
, s
->main_pid
, s
->control_pid
, error
);
4006 static int service_main_pid(Unit
*u
) {
4007 Service
*s
= SERVICE(u
);
4014 static int service_control_pid(Unit
*u
) {
4015 Service
*s
= SERVICE(u
);
4019 return s
->control_pid
;
4022 static bool service_needs_console(Unit
*u
) {
4023 Service
*s
= SERVICE(u
);
4027 /* We provide our own implementation of this here, instead of relying of the generic implementation
4028 * unit_needs_console() provides, since we want to return false if we are in SERVICE_EXITED state. */
4030 if (!exec_context_may_touch_console(&s
->exec_context
))
4033 return IN_SET(s
->state
,
4040 SERVICE_STOP_WATCHDOG
,
4041 SERVICE_STOP_SIGTERM
,
4042 SERVICE_STOP_SIGKILL
,
4044 SERVICE_FINAL_SIGTERM
,
4045 SERVICE_FINAL_SIGKILL
);
4048 static int service_exit_status(Unit
*u
) {
4049 Service
*s
= SERVICE(u
);
4053 if (s
->main_exec_status
.pid
<= 0 ||
4054 !dual_timestamp_is_set(&s
->main_exec_status
.exit_timestamp
))
4057 if (s
->main_exec_status
.code
!= CLD_EXITED
)
4060 return s
->main_exec_status
.status
;
4063 static const char* const service_restart_table
[_SERVICE_RESTART_MAX
] = {
4064 [SERVICE_RESTART_NO
] = "no",
4065 [SERVICE_RESTART_ON_SUCCESS
] = "on-success",
4066 [SERVICE_RESTART_ON_FAILURE
] = "on-failure",
4067 [SERVICE_RESTART_ON_ABNORMAL
] = "on-abnormal",
4068 [SERVICE_RESTART_ON_WATCHDOG
] = "on-watchdog",
4069 [SERVICE_RESTART_ON_ABORT
] = "on-abort",
4070 [SERVICE_RESTART_ALWAYS
] = "always",
4073 DEFINE_STRING_TABLE_LOOKUP(service_restart
, ServiceRestart
);
4075 static const char* const service_type_table
[_SERVICE_TYPE_MAX
] = {
4076 [SERVICE_SIMPLE
] = "simple",
4077 [SERVICE_FORKING
] = "forking",
4078 [SERVICE_ONESHOT
] = "oneshot",
4079 [SERVICE_DBUS
] = "dbus",
4080 [SERVICE_NOTIFY
] = "notify",
4081 [SERVICE_IDLE
] = "idle",
4082 [SERVICE_EXEC
] = "exec",
4085 DEFINE_STRING_TABLE_LOOKUP(service_type
, ServiceType
);
4087 static const char* const service_exec_command_table
[_SERVICE_EXEC_COMMAND_MAX
] = {
4088 [SERVICE_EXEC_START_PRE
] = "ExecStartPre",
4089 [SERVICE_EXEC_START
] = "ExecStart",
4090 [SERVICE_EXEC_START_POST
] = "ExecStartPost",
4091 [SERVICE_EXEC_RELOAD
] = "ExecReload",
4092 [SERVICE_EXEC_STOP
] = "ExecStop",
4093 [SERVICE_EXEC_STOP_POST
] = "ExecStopPost",
4096 DEFINE_STRING_TABLE_LOOKUP(service_exec_command
, ServiceExecCommand
);
4098 static const char* const notify_state_table
[_NOTIFY_STATE_MAX
] = {
4099 [NOTIFY_UNKNOWN
] = "unknown",
4100 [NOTIFY_READY
] = "ready",
4101 [NOTIFY_RELOADING
] = "reloading",
4102 [NOTIFY_STOPPING
] = "stopping",
4105 DEFINE_STRING_TABLE_LOOKUP(notify_state
, NotifyState
);
4107 static const char* const service_result_table
[_SERVICE_RESULT_MAX
] = {
4108 [SERVICE_SUCCESS
] = "success",
4109 [SERVICE_FAILURE_RESOURCES
] = "resources",
4110 [SERVICE_FAILURE_PROTOCOL
] = "protocol",
4111 [SERVICE_FAILURE_TIMEOUT
] = "timeout",
4112 [SERVICE_FAILURE_EXIT_CODE
] = "exit-code",
4113 [SERVICE_FAILURE_SIGNAL
] = "signal",
4114 [SERVICE_FAILURE_CORE_DUMP
] = "core-dump",
4115 [SERVICE_FAILURE_WATCHDOG
] = "watchdog",
4116 [SERVICE_FAILURE_START_LIMIT_HIT
] = "start-limit-hit",
4119 DEFINE_STRING_TABLE_LOOKUP(service_result
, ServiceResult
);
4121 const UnitVTable service_vtable
= {
4122 .object_size
= sizeof(Service
),
4123 .exec_context_offset
= offsetof(Service
, exec_context
),
4124 .cgroup_context_offset
= offsetof(Service
, cgroup_context
),
4125 .kill_context_offset
= offsetof(Service
, kill_context
),
4126 .exec_runtime_offset
= offsetof(Service
, exec_runtime
),
4127 .dynamic_creds_offset
= offsetof(Service
, dynamic_creds
),
4133 .private_section
= "Service",
4135 .can_transient
= true,
4136 .can_delegate
= true,
4138 .init
= service_init
,
4139 .done
= service_done
,
4140 .load
= service_load
,
4141 .release_resources
= service_release_resources
,
4143 .coldplug
= service_coldplug
,
4145 .dump
= service_dump
,
4147 .start
= service_start
,
4148 .stop
= service_stop
,
4149 .reload
= service_reload
,
4151 .can_reload
= service_can_reload
,
4153 .kill
= service_kill
,
4155 .serialize
= service_serialize
,
4156 .deserialize_item
= service_deserialize_item
,
4158 .active_state
= service_active_state
,
4159 .sub_state_to_string
= service_sub_state_to_string
,
4161 .will_restart
= service_will_restart
,
4163 .may_gc
= service_may_gc
,
4165 .sigchld_event
= service_sigchld_event
,
4167 .reset_failed
= service_reset_failed
,
4169 .notify_cgroup_empty
= service_notify_cgroup_empty_event
,
4170 .notify_message
= service_notify_message
,
4172 .main_pid
= service_main_pid
,
4173 .control_pid
= service_control_pid
,
4175 .bus_name_owner_change
= service_bus_name_owner_change
,
4177 .bus_vtable
= bus_service_vtable
,
4178 .bus_set_property
= bus_service_set_property
,
4179 .bus_commit_properties
= bus_service_commit_properties
,
4181 .get_timeout
= service_get_timeout
,
4182 .needs_console
= service_needs_console
,
4183 .exit_status
= service_exit_status
,
4185 .status_message_formats
= {
4186 .starting_stopping
= {
4187 [0] = "Starting %s...",
4188 [1] = "Stopping %s...",
4190 .finished_start_job
= {
4191 [JOB_DONE
] = "Started %s.",
4192 [JOB_FAILED
] = "Failed to start %s.",
4194 .finished_stop_job
= {
4195 [JOB_DONE
] = "Stopped %s.",
4196 [JOB_FAILED
] = "Stopped (with error) %s.",