]> git.ipfire.org Git - thirdparty/systemd.git/blob - src/core/service.c
Merge pull request #6582 from poettering/logind-tty
[thirdparty/systemd.git] / src / core / service.c
1 /***
2 This file is part of systemd.
3
4 Copyright 2010 Lennart Poettering
5
6 systemd is free software; you can redistribute it and/or modify it
7 under the terms of the GNU Lesser General Public License as published by
8 the Free Software Foundation; either version 2.1 of the License, or
9 (at your option) any later version.
10
11 systemd is distributed in the hope that it will be useful, but
12 WITHOUT ANY WARRANTY; without even the implied warranty of
13 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
14 Lesser General Public License for more details.
15
16 You should have received a copy of the GNU Lesser General Public License
17 along with systemd; If not, see <http://www.gnu.org/licenses/>.
18 ***/
19
20 #include <errno.h>
21 #include <signal.h>
22 #include <unistd.h>
23
24 #include "sd-messages.h"
25
26 #include "alloc-util.h"
27 #include "async.h"
28 #include "bus-error.h"
29 #include "bus-kernel.h"
30 #include "bus-util.h"
31 #include "dbus-service.h"
32 #include "def.h"
33 #include "env-util.h"
34 #include "escape.h"
35 #include "exit-status.h"
36 #include "fd-util.h"
37 #include "fileio.h"
38 #include "format-util.h"
39 #include "fs-util.h"
40 #include "load-dropin.h"
41 #include "load-fragment.h"
42 #include "log.h"
43 #include "manager.h"
44 #include "parse-util.h"
45 #include "path-util.h"
46 #include "process-util.h"
47 #include "service.h"
48 #include "signal-util.h"
49 #include "special.h"
50 #include "stdio-util.h"
51 #include "string-table.h"
52 #include "string-util.h"
53 #include "strv.h"
54 #include "unit-name.h"
55 #include "unit.h"
56 #include "utf8.h"
57 #include "util.h"
58
59 static const UnitActiveState state_translation_table[_SERVICE_STATE_MAX] = {
60 [SERVICE_DEAD] = UNIT_INACTIVE,
61 [SERVICE_START_PRE] = UNIT_ACTIVATING,
62 [SERVICE_START] = UNIT_ACTIVATING,
63 [SERVICE_START_POST] = UNIT_ACTIVATING,
64 [SERVICE_RUNNING] = UNIT_ACTIVE,
65 [SERVICE_EXITED] = UNIT_ACTIVE,
66 [SERVICE_RELOAD] = UNIT_RELOADING,
67 [SERVICE_STOP] = UNIT_DEACTIVATING,
68 [SERVICE_STOP_SIGABRT] = UNIT_DEACTIVATING,
69 [SERVICE_STOP_SIGTERM] = UNIT_DEACTIVATING,
70 [SERVICE_STOP_SIGKILL] = UNIT_DEACTIVATING,
71 [SERVICE_STOP_POST] = UNIT_DEACTIVATING,
72 [SERVICE_FINAL_SIGTERM] = UNIT_DEACTIVATING,
73 [SERVICE_FINAL_SIGKILL] = UNIT_DEACTIVATING,
74 [SERVICE_FAILED] = UNIT_FAILED,
75 [SERVICE_AUTO_RESTART] = UNIT_ACTIVATING
76 };
77
78 /* For Type=idle we never want to delay any other jobs, hence we
79 * consider idle jobs active as soon as we start working on them */
80 static const UnitActiveState state_translation_table_idle[_SERVICE_STATE_MAX] = {
81 [SERVICE_DEAD] = UNIT_INACTIVE,
82 [SERVICE_START_PRE] = UNIT_ACTIVE,
83 [SERVICE_START] = UNIT_ACTIVE,
84 [SERVICE_START_POST] = UNIT_ACTIVE,
85 [SERVICE_RUNNING] = UNIT_ACTIVE,
86 [SERVICE_EXITED] = UNIT_ACTIVE,
87 [SERVICE_RELOAD] = UNIT_RELOADING,
88 [SERVICE_STOP] = UNIT_DEACTIVATING,
89 [SERVICE_STOP_SIGABRT] = UNIT_DEACTIVATING,
90 [SERVICE_STOP_SIGTERM] = UNIT_DEACTIVATING,
91 [SERVICE_STOP_SIGKILL] = UNIT_DEACTIVATING,
92 [SERVICE_STOP_POST] = UNIT_DEACTIVATING,
93 [SERVICE_FINAL_SIGTERM] = UNIT_DEACTIVATING,
94 [SERVICE_FINAL_SIGKILL] = UNIT_DEACTIVATING,
95 [SERVICE_FAILED] = UNIT_FAILED,
96 [SERVICE_AUTO_RESTART] = UNIT_ACTIVATING
97 };
98
99 static int service_dispatch_io(sd_event_source *source, int fd, uint32_t events, void *userdata);
100 static int service_dispatch_timer(sd_event_source *source, usec_t usec, void *userdata);
101 static int service_dispatch_watchdog(sd_event_source *source, usec_t usec, void *userdata);
102
103 static void service_enter_signal(Service *s, ServiceState state, ServiceResult f);
104 static void service_enter_reload_by_notify(Service *s);
105
106 static void service_init(Unit *u) {
107 Service *s = SERVICE(u);
108
109 assert(u);
110 assert(u->load_state == UNIT_STUB);
111
112 s->timeout_start_usec = u->manager->default_timeout_start_usec;
113 s->timeout_stop_usec = u->manager->default_timeout_stop_usec;
114 s->restart_usec = u->manager->default_restart_usec;
115 s->runtime_max_usec = USEC_INFINITY;
116 s->type = _SERVICE_TYPE_INVALID;
117 s->socket_fd = -1;
118 s->stdin_fd = s->stdout_fd = s->stderr_fd = -1;
119 s->guess_main_pid = true;
120
121 s->control_command_id = _SERVICE_EXEC_COMMAND_INVALID;
122 }
123
124 static void service_unwatch_control_pid(Service *s) {
125 assert(s);
126
127 if (s->control_pid <= 0)
128 return;
129
130 unit_unwatch_pid(UNIT(s), s->control_pid);
131 s->control_pid = 0;
132 }
133
134 static void service_unwatch_main_pid(Service *s) {
135 assert(s);
136
137 if (s->main_pid <= 0)
138 return;
139
140 unit_unwatch_pid(UNIT(s), s->main_pid);
141 s->main_pid = 0;
142 }
143
144 static void service_unwatch_pid_file(Service *s) {
145 if (!s->pid_file_pathspec)
146 return;
147
148 log_unit_debug(UNIT(s), "Stopping watch for PID file %s", s->pid_file_pathspec->path);
149 path_spec_unwatch(s->pid_file_pathspec);
150 path_spec_done(s->pid_file_pathspec);
151 s->pid_file_pathspec = mfree(s->pid_file_pathspec);
152 }
153
154 static int service_set_main_pid(Service *s, pid_t pid) {
155 pid_t ppid;
156
157 assert(s);
158
159 if (pid <= 1)
160 return -EINVAL;
161
162 if (pid == getpid_cached())
163 return -EINVAL;
164
165 if (s->main_pid == pid && s->main_pid_known)
166 return 0;
167
168 if (s->main_pid != pid) {
169 service_unwatch_main_pid(s);
170 exec_status_start(&s->main_exec_status, pid);
171 }
172
173 s->main_pid = pid;
174 s->main_pid_known = true;
175
176 if (get_process_ppid(pid, &ppid) >= 0 && ppid != getpid_cached()) {
177 log_unit_warning(UNIT(s), "Supervising process "PID_FMT" which is not our child. We'll most likely not notice when it exits.", pid);
178 s->main_pid_alien = true;
179 } else
180 s->main_pid_alien = false;
181
182 return 0;
183 }
184
185 void service_close_socket_fd(Service *s) {
186 assert(s);
187
188 /* Undo the effect of service_set_socket_fd(). */
189
190 s->socket_fd = asynchronous_close(s->socket_fd);
191
192 if (UNIT_ISSET(s->accept_socket)) {
193 socket_connection_unref(SOCKET(UNIT_DEREF(s->accept_socket)));
194 unit_ref_unset(&s->accept_socket);
195 }
196 }
197
198 static void service_stop_watchdog(Service *s) {
199 assert(s);
200
201 s->watchdog_event_source = sd_event_source_unref(s->watchdog_event_source);
202 s->watchdog_timestamp = DUAL_TIMESTAMP_NULL;
203 }
204
205 static usec_t service_get_watchdog_usec(Service *s) {
206 assert(s);
207
208 if (s->watchdog_override_enable)
209 return s->watchdog_override_usec;
210 else
211 return s->watchdog_usec;
212 }
213
214 static void service_start_watchdog(Service *s) {
215 int r;
216 usec_t watchdog_usec;
217
218 assert(s);
219
220 watchdog_usec = service_get_watchdog_usec(s);
221 if (watchdog_usec == 0 || watchdog_usec == USEC_INFINITY)
222 return;
223
224 if (s->watchdog_event_source) {
225 r = sd_event_source_set_time(s->watchdog_event_source, usec_add(s->watchdog_timestamp.monotonic, watchdog_usec));
226 if (r < 0) {
227 log_unit_warning_errno(UNIT(s), r, "Failed to reset watchdog timer: %m");
228 return;
229 }
230
231 r = sd_event_source_set_enabled(s->watchdog_event_source, SD_EVENT_ONESHOT);
232 } else {
233 r = sd_event_add_time(
234 UNIT(s)->manager->event,
235 &s->watchdog_event_source,
236 CLOCK_MONOTONIC,
237 usec_add(s->watchdog_timestamp.monotonic, watchdog_usec), 0,
238 service_dispatch_watchdog, s);
239 if (r < 0) {
240 log_unit_warning_errno(UNIT(s), r, "Failed to add watchdog timer: %m");
241 return;
242 }
243
244 (void) sd_event_source_set_description(s->watchdog_event_source, "service-watchdog");
245
246 /* Let's process everything else which might be a sign
247 * of living before we consider a service died. */
248 r = sd_event_source_set_priority(s->watchdog_event_source, SD_EVENT_PRIORITY_IDLE);
249 }
250
251 if (r < 0)
252 log_unit_warning_errno(UNIT(s), r, "Failed to install watchdog timer: %m");
253 }
254
255 static void service_reset_watchdog(Service *s) {
256 assert(s);
257
258 dual_timestamp_get(&s->watchdog_timestamp);
259 service_start_watchdog(s);
260 }
261
262 static void service_reset_watchdog_timeout(Service *s, usec_t watchdog_override_usec) {
263 assert(s);
264
265 s->watchdog_override_enable = true;
266 s->watchdog_override_usec = watchdog_override_usec;
267 service_reset_watchdog(s);
268
269 log_unit_debug(UNIT(s), "watchdog_usec="USEC_FMT, s->watchdog_usec);
270 log_unit_debug(UNIT(s), "watchdog_override_usec="USEC_FMT, s->watchdog_override_usec);
271 }
272
273 static void service_fd_store_unlink(ServiceFDStore *fs) {
274
275 if (!fs)
276 return;
277
278 if (fs->service) {
279 assert(fs->service->n_fd_store > 0);
280 LIST_REMOVE(fd_store, fs->service->fd_store, fs);
281 fs->service->n_fd_store--;
282 }
283
284 if (fs->event_source) {
285 sd_event_source_set_enabled(fs->event_source, SD_EVENT_OFF);
286 sd_event_source_unref(fs->event_source);
287 }
288
289 free(fs->fdname);
290 safe_close(fs->fd);
291 free(fs);
292 }
293
294 static void service_release_fd_store(Service *s) {
295 assert(s);
296
297 log_unit_debug(UNIT(s), "Releasing all stored fds");
298 while (s->fd_store)
299 service_fd_store_unlink(s->fd_store);
300
301 assert(s->n_fd_store == 0);
302 }
303
304 static void service_release_resources(Unit *u, bool inactive) {
305 Service *s = SERVICE(u);
306
307 assert(s);
308
309 if (!s->fd_store && s->stdin_fd < 0 && s->stdout_fd < 0 && s->stderr_fd < 0)
310 return;
311
312 log_unit_debug(u, "Releasing resources.");
313
314 s->stdin_fd = safe_close(s->stdin_fd);
315 s->stdout_fd = safe_close(s->stdout_fd);
316 s->stderr_fd = safe_close(s->stderr_fd);
317
318 if (inactive)
319 service_release_fd_store(s);
320 }
321
322 static void service_done(Unit *u) {
323 Service *s = SERVICE(u);
324
325 assert(s);
326
327 s->pid_file = mfree(s->pid_file);
328 s->status_text = mfree(s->status_text);
329
330 s->exec_runtime = exec_runtime_unref(s->exec_runtime);
331 exec_command_free_array(s->exec_command, _SERVICE_EXEC_COMMAND_MAX);
332 s->control_command = NULL;
333 s->main_command = NULL;
334
335 dynamic_creds_unref(&s->dynamic_creds);
336
337 exit_status_set_free(&s->restart_prevent_status);
338 exit_status_set_free(&s->restart_force_status);
339 exit_status_set_free(&s->success_status);
340
341 /* This will leak a process, but at least no memory or any of
342 * our resources */
343 service_unwatch_main_pid(s);
344 service_unwatch_control_pid(s);
345 service_unwatch_pid_file(s);
346
347 if (s->bus_name) {
348 unit_unwatch_bus_name(u, s->bus_name);
349 s->bus_name = mfree(s->bus_name);
350 }
351
352 s->bus_name_owner = mfree(s->bus_name_owner);
353
354 service_close_socket_fd(s);
355 s->peer = socket_peer_unref(s->peer);
356
357 unit_ref_unset(&s->accept_socket);
358
359 service_stop_watchdog(s);
360
361 s->timer_event_source = sd_event_source_unref(s->timer_event_source);
362
363 service_release_resources(u, true);
364 }
365
366 static int on_fd_store_io(sd_event_source *e, int fd, uint32_t revents, void *userdata) {
367 ServiceFDStore *fs = userdata;
368
369 assert(e);
370 assert(fs);
371
372 /* If we get either EPOLLHUP or EPOLLERR, it's time to remove this entry from the fd store */
373 log_unit_debug(UNIT(fs->service),
374 "Received %s on stored fd %d (%s), closing.",
375 revents & EPOLLERR ? "EPOLLERR" : "EPOLLHUP",
376 fs->fd, strna(fs->fdname));
377 service_fd_store_unlink(fs);
378 return 0;
379 }
380
381 static int service_add_fd_store(Service *s, int fd, const char *name) {
382 ServiceFDStore *fs;
383 int r;
384
385 /* fd is always consumed if we return >= 0 */
386
387 assert(s);
388 assert(fd >= 0);
389
390 if (s->n_fd_store >= s->n_fd_store_max)
391 return -EXFULL; /* Our store is full.
392 * Use this errno rather than E[NM]FILE to distinguish from
393 * the case where systemd itself hits the file limit. */
394
395 LIST_FOREACH(fd_store, fs, s->fd_store) {
396 r = same_fd(fs->fd, fd);
397 if (r < 0)
398 return r;
399 if (r > 0) {
400 safe_close(fd);
401 return 0; /* fd already included */
402 }
403 }
404
405 fs = new0(ServiceFDStore, 1);
406 if (!fs)
407 return -ENOMEM;
408
409 fs->fd = fd;
410 fs->service = s;
411 fs->fdname = strdup(name ?: "stored");
412 if (!fs->fdname) {
413 free(fs);
414 return -ENOMEM;
415 }
416
417 r = sd_event_add_io(UNIT(s)->manager->event, &fs->event_source, fd, 0, on_fd_store_io, fs);
418 if (r < 0 && r != -EPERM) { /* EPERM indicates fds that aren't pollable, which is OK */
419 free(fs->fdname);
420 free(fs);
421 return r;
422 } else if (r >= 0)
423 (void) sd_event_source_set_description(fs->event_source, "service-fd-store");
424
425 LIST_PREPEND(fd_store, s->fd_store, fs);
426 s->n_fd_store++;
427
428 return 1; /* fd newly stored */
429 }
430
431 static int service_add_fd_store_set(Service *s, FDSet *fds, const char *name) {
432 int r;
433
434 assert(s);
435
436 while (fdset_size(fds) > 0) {
437 _cleanup_close_ int fd = -1;
438
439 fd = fdset_steal_first(fds);
440 if (fd < 0)
441 break;
442
443 r = service_add_fd_store(s, fd, name);
444 if (r == -EXFULL)
445 return log_unit_warning_errno(UNIT(s), r,
446 "Cannot store more fds than FileDescriptorStoreMax=%u, closing remaining.",
447 s->n_fd_store_max);
448 if (r < 0)
449 return log_unit_error_errno(UNIT(s), r, "Failed to add fd to store: %m");
450 if (r > 0)
451 log_unit_debug(UNIT(s), "Added fd %u (%s) to fd store.", fd, strna(name));
452 fd = -1;
453 }
454
455 return 0;
456 }
457
458 static int service_arm_timer(Service *s, usec_t usec) {
459 int r;
460
461 assert(s);
462
463 if (s->timer_event_source) {
464 r = sd_event_source_set_time(s->timer_event_source, usec);
465 if (r < 0)
466 return r;
467
468 return sd_event_source_set_enabled(s->timer_event_source, SD_EVENT_ONESHOT);
469 }
470
471 if (usec == USEC_INFINITY)
472 return 0;
473
474 r = sd_event_add_time(
475 UNIT(s)->manager->event,
476 &s->timer_event_source,
477 CLOCK_MONOTONIC,
478 usec, 0,
479 service_dispatch_timer, s);
480 if (r < 0)
481 return r;
482
483 (void) sd_event_source_set_description(s->timer_event_source, "service-timer");
484
485 return 0;
486 }
487
488 static int service_verify(Service *s) {
489 assert(s);
490
491 if (UNIT(s)->load_state != UNIT_LOADED)
492 return 0;
493
494 if (!s->exec_command[SERVICE_EXEC_START] && !s->exec_command[SERVICE_EXEC_STOP]) {
495 log_unit_error(UNIT(s), "Service lacks both ExecStart= and ExecStop= setting. Refusing.");
496 return -EINVAL;
497 }
498
499 if (s->type != SERVICE_ONESHOT && !s->exec_command[SERVICE_EXEC_START]) {
500 log_unit_error(UNIT(s), "Service has no ExecStart= setting, which is only allowed for Type=oneshot services. Refusing.");
501 return -EINVAL;
502 }
503
504 if (!s->remain_after_exit && !s->exec_command[SERVICE_EXEC_START]) {
505 log_unit_error(UNIT(s), "Service has no ExecStart= setting, which is only allowed for RemainAfterExit=yes services. Refusing.");
506 return -EINVAL;
507 }
508
509 if (s->type != SERVICE_ONESHOT && s->exec_command[SERVICE_EXEC_START]->command_next) {
510 log_unit_error(UNIT(s), "Service has more than one ExecStart= setting, which is only allowed for Type=oneshot services. Refusing.");
511 return -EINVAL;
512 }
513
514 if (s->type == SERVICE_ONESHOT && s->restart != SERVICE_RESTART_NO) {
515 log_unit_error(UNIT(s), "Service has Restart= setting other than no, which isn't allowed for Type=oneshot services. Refusing.");
516 return -EINVAL;
517 }
518
519 if (s->type == SERVICE_ONESHOT && !exit_status_set_is_empty(&s->restart_force_status)) {
520 log_unit_error(UNIT(s), "Service has RestartForceStatus= set, which isn't allowed for Type=oneshot services. Refusing.");
521 return -EINVAL;
522 }
523
524 if (s->type == SERVICE_DBUS && !s->bus_name) {
525 log_unit_error(UNIT(s), "Service is of type D-Bus but no D-Bus service name has been specified. Refusing.");
526 return -EINVAL;
527 }
528
529 if (s->bus_name && s->type != SERVICE_DBUS)
530 log_unit_warning(UNIT(s), "Service has a D-Bus service name specified, but is not of type dbus. Ignoring.");
531
532 if (s->exec_context.pam_name && !(s->kill_context.kill_mode == KILL_CONTROL_GROUP || s->kill_context.kill_mode == KILL_MIXED)) {
533 log_unit_error(UNIT(s), "Service has PAM enabled. Kill mode must be set to 'control-group' or 'mixed'. Refusing.");
534 return -EINVAL;
535 }
536
537 if (s->usb_function_descriptors && !s->usb_function_strings)
538 log_unit_warning(UNIT(s), "Service has USBFunctionDescriptors= setting, but no USBFunctionStrings=. Ignoring.");
539
540 if (!s->usb_function_descriptors && s->usb_function_strings)
541 log_unit_warning(UNIT(s), "Service has USBFunctionStrings= setting, but no USBFunctionDescriptors=. Ignoring.");
542
543 if (s->runtime_max_usec != USEC_INFINITY && s->type == SERVICE_ONESHOT)
544 log_unit_warning(UNIT(s), "MaxRuntimeSec= has no effect in combination with Type=oneshot. Ignoring.");
545
546 return 0;
547 }
548
549 static int service_add_default_dependencies(Service *s) {
550 int r;
551
552 assert(s);
553
554 if (!UNIT(s)->default_dependencies)
555 return 0;
556
557 /* Add a number of automatic dependencies useful for the
558 * majority of services. */
559
560 if (MANAGER_IS_SYSTEM(UNIT(s)->manager)) {
561 /* First, pull in the really early boot stuff, and
562 * require it, so that we fail if we can't acquire
563 * it. */
564
565 r = unit_add_two_dependencies_by_name(UNIT(s), UNIT_AFTER, UNIT_REQUIRES, SPECIAL_SYSINIT_TARGET, NULL, true);
566 if (r < 0)
567 return r;
568 } else {
569
570 /* In the --user instance there's no sysinit.target,
571 * in that case require basic.target instead. */
572
573 r = unit_add_dependency_by_name(UNIT(s), UNIT_REQUIRES, SPECIAL_BASIC_TARGET, NULL, true);
574 if (r < 0)
575 return r;
576 }
577
578 /* Second, if the rest of the base system is in the same
579 * transaction, order us after it, but do not pull it in or
580 * even require it. */
581 r = unit_add_dependency_by_name(UNIT(s), UNIT_AFTER, SPECIAL_BASIC_TARGET, NULL, true);
582 if (r < 0)
583 return r;
584
585 /* Third, add us in for normal shutdown. */
586 return unit_add_two_dependencies_by_name(UNIT(s), UNIT_BEFORE, UNIT_CONFLICTS, SPECIAL_SHUTDOWN_TARGET, NULL, true);
587 }
588
589 static void service_fix_output(Service *s) {
590 assert(s);
591
592 /* If nothing has been explicitly configured, patch default
593 * output in. If input is socket/tty we avoid this however,
594 * since in that case we want output to default to the same
595 * place as we read input from. */
596
597 if (s->exec_context.std_error == EXEC_OUTPUT_INHERIT &&
598 s->exec_context.std_output == EXEC_OUTPUT_INHERIT &&
599 s->exec_context.std_input == EXEC_INPUT_NULL)
600 s->exec_context.std_error = UNIT(s)->manager->default_std_error;
601
602 if (s->exec_context.std_output == EXEC_OUTPUT_INHERIT &&
603 s->exec_context.std_input == EXEC_INPUT_NULL)
604 s->exec_context.std_output = UNIT(s)->manager->default_std_output;
605 }
606
607 static int service_setup_bus_name(Service *s) {
608 int r;
609
610 assert(s);
611
612 if (!s->bus_name)
613 return 0;
614
615 r = unit_add_dependency_by_name(UNIT(s), UNIT_REQUIRES, SPECIAL_DBUS_SOCKET, NULL, true);
616 if (r < 0)
617 return log_unit_error_errno(UNIT(s), r, "Failed to add dependency on " SPECIAL_DBUS_SOCKET ": %m");
618
619 /* We always want to be ordered against dbus.socket if both are in the transaction. */
620 r = unit_add_dependency_by_name(UNIT(s), UNIT_AFTER, SPECIAL_DBUS_SOCKET, NULL, true);
621 if (r < 0)
622 return log_unit_error_errno(UNIT(s), r, "Failed to add dependency on " SPECIAL_DBUS_SOCKET ": %m");
623
624 r = unit_watch_bus_name(UNIT(s), s->bus_name);
625 if (r == -EEXIST)
626 return log_unit_error_errno(UNIT(s), r, "Two services allocated for the same bus name %s, refusing operation.", s->bus_name);
627 if (r < 0)
628 return log_unit_error_errno(UNIT(s), r, "Cannot watch bus name %s: %m", s->bus_name);
629
630 return 0;
631 }
632
633 static int service_add_extras(Service *s) {
634 int r;
635
636 assert(s);
637
638 if (s->type == _SERVICE_TYPE_INVALID) {
639 /* Figure out a type automatically */
640 if (s->bus_name)
641 s->type = SERVICE_DBUS;
642 else if (s->exec_command[SERVICE_EXEC_START])
643 s->type = SERVICE_SIMPLE;
644 else
645 s->type = SERVICE_ONESHOT;
646 }
647
648 /* Oneshot services have disabled start timeout by default */
649 if (s->type == SERVICE_ONESHOT && !s->start_timeout_defined)
650 s->timeout_start_usec = USEC_INFINITY;
651
652 service_fix_output(s);
653
654 r = unit_patch_contexts(UNIT(s));
655 if (r < 0)
656 return r;
657
658 r = unit_add_exec_dependencies(UNIT(s), &s->exec_context);
659 if (r < 0)
660 return r;
661
662 r = unit_set_default_slice(UNIT(s));
663 if (r < 0)
664 return r;
665
666 if (s->type == SERVICE_NOTIFY && s->notify_access == NOTIFY_NONE)
667 s->notify_access = NOTIFY_MAIN;
668
669 if (s->watchdog_usec > 0 && s->notify_access == NOTIFY_NONE)
670 s->notify_access = NOTIFY_MAIN;
671
672 r = service_add_default_dependencies(s);
673 if (r < 0)
674 return r;
675
676 r = service_setup_bus_name(s);
677 if (r < 0)
678 return r;
679
680 return 0;
681 }
682
683 static int service_load(Unit *u) {
684 Service *s = SERVICE(u);
685 int r;
686
687 assert(s);
688
689 /* Load a .service file */
690 r = unit_load_fragment(u);
691 if (r < 0)
692 return r;
693
694 /* Still nothing found? Then let's give up */
695 if (u->load_state == UNIT_STUB)
696 return -ENOENT;
697
698 /* This is a new unit? Then let's add in some extras */
699 if (u->load_state == UNIT_LOADED) {
700
701 /* We were able to load something, then let's add in
702 * the dropin directories. */
703 r = unit_load_dropin(u);
704 if (r < 0)
705 return r;
706
707 /* This is a new unit? Then let's add in some
708 * extras */
709 r = service_add_extras(s);
710 if (r < 0)
711 return r;
712 }
713
714 return service_verify(s);
715 }
716
717 static void service_dump(Unit *u, FILE *f, const char *prefix) {
718 ServiceExecCommand c;
719 Service *s = SERVICE(u);
720 const char *prefix2;
721
722 assert(s);
723
724 prefix = strempty(prefix);
725 prefix2 = strjoina(prefix, "\t");
726
727 fprintf(f,
728 "%sService State: %s\n"
729 "%sResult: %s\n"
730 "%sReload Result: %s\n"
731 "%sPermissionsStartOnly: %s\n"
732 "%sRootDirectoryStartOnly: %s\n"
733 "%sRemainAfterExit: %s\n"
734 "%sGuessMainPID: %s\n"
735 "%sType: %s\n"
736 "%sRestart: %s\n"
737 "%sNotifyAccess: %s\n"
738 "%sNotifyState: %s\n",
739 prefix, service_state_to_string(s->state),
740 prefix, service_result_to_string(s->result),
741 prefix, service_result_to_string(s->reload_result),
742 prefix, yes_no(s->permissions_start_only),
743 prefix, yes_no(s->root_directory_start_only),
744 prefix, yes_no(s->remain_after_exit),
745 prefix, yes_no(s->guess_main_pid),
746 prefix, service_type_to_string(s->type),
747 prefix, service_restart_to_string(s->restart),
748 prefix, notify_access_to_string(s->notify_access),
749 prefix, notify_state_to_string(s->notify_state));
750
751 if (s->control_pid > 0)
752 fprintf(f,
753 "%sControl PID: "PID_FMT"\n",
754 prefix, s->control_pid);
755
756 if (s->main_pid > 0)
757 fprintf(f,
758 "%sMain PID: "PID_FMT"\n"
759 "%sMain PID Known: %s\n"
760 "%sMain PID Alien: %s\n",
761 prefix, s->main_pid,
762 prefix, yes_no(s->main_pid_known),
763 prefix, yes_no(s->main_pid_alien));
764
765 if (s->pid_file)
766 fprintf(f,
767 "%sPIDFile: %s\n",
768 prefix, s->pid_file);
769
770 if (s->bus_name)
771 fprintf(f,
772 "%sBusName: %s\n"
773 "%sBus Name Good: %s\n",
774 prefix, s->bus_name,
775 prefix, yes_no(s->bus_name_good));
776
777 if (UNIT_ISSET(s->accept_socket))
778 fprintf(f,
779 "%sAccept Socket: %s\n",
780 prefix, UNIT_DEREF(s->accept_socket)->id);
781
782 kill_context_dump(&s->kill_context, f, prefix);
783 exec_context_dump(&s->exec_context, f, prefix);
784
785 for (c = 0; c < _SERVICE_EXEC_COMMAND_MAX; c++) {
786
787 if (!s->exec_command[c])
788 continue;
789
790 fprintf(f, "%s-> %s:\n",
791 prefix, service_exec_command_to_string(c));
792
793 exec_command_dump_list(s->exec_command[c], f, prefix2);
794 }
795
796 if (s->status_text)
797 fprintf(f, "%sStatus Text: %s\n",
798 prefix, s->status_text);
799
800 if (s->n_fd_store_max > 0)
801 fprintf(f,
802 "%sFile Descriptor Store Max: %u\n"
803 "%sFile Descriptor Store Current: %u\n",
804 prefix, s->n_fd_store_max,
805 prefix, s->n_fd_store);
806 }
807
808 static int service_load_pid_file(Service *s, bool may_warn) {
809 _cleanup_free_ char *k = NULL;
810 int r;
811 pid_t pid;
812
813 assert(s);
814
815 if (!s->pid_file)
816 return -ENOENT;
817
818 r = read_one_line_file(s->pid_file, &k);
819 if (r < 0) {
820 if (may_warn)
821 log_unit_info_errno(UNIT(s), r, "PID file %s not readable (yet?) after %s: %m", s->pid_file, service_state_to_string(s->state));
822 return r;
823 }
824
825 r = parse_pid(k, &pid);
826 if (r < 0) {
827 if (may_warn)
828 log_unit_info_errno(UNIT(s), r, "Failed to read PID from file %s: %m", s->pid_file);
829 return r;
830 }
831
832 if (!pid_is_alive(pid)) {
833 if (may_warn)
834 log_unit_info(UNIT(s), "PID "PID_FMT" read from file %s does not exist or is a zombie.", pid, s->pid_file);
835 return -ESRCH;
836 }
837
838 if (s->main_pid_known) {
839 if (pid == s->main_pid)
840 return 0;
841
842 log_unit_debug(UNIT(s), "Main PID changing: "PID_FMT" -> "PID_FMT, s->main_pid, pid);
843
844 service_unwatch_main_pid(s);
845 s->main_pid_known = false;
846 } else
847 log_unit_debug(UNIT(s), "Main PID loaded: "PID_FMT, pid);
848
849 r = service_set_main_pid(s, pid);
850 if (r < 0)
851 return r;
852
853 r = unit_watch_pid(UNIT(s), pid);
854 if (r < 0) /* FIXME: we need to do something here */
855 return log_unit_warning_errno(UNIT(s), r, "Failed to watch PID "PID_FMT" for service: %m", pid);
856
857 return 0;
858 }
859
860 static void service_search_main_pid(Service *s) {
861 pid_t pid = 0;
862 int r;
863
864 assert(s);
865
866 /* If we know it anyway, don't ever fallback to unreliable
867 * heuristics */
868 if (s->main_pid_known)
869 return;
870
871 if (!s->guess_main_pid)
872 return;
873
874 assert(s->main_pid <= 0);
875
876 if (unit_search_main_pid(UNIT(s), &pid) < 0)
877 return;
878
879 log_unit_debug(UNIT(s), "Main PID guessed: "PID_FMT, pid);
880 if (service_set_main_pid(s, pid) < 0)
881 return;
882
883 r = unit_watch_pid(UNIT(s), pid);
884 if (r < 0)
885 /* FIXME: we need to do something here */
886 log_unit_warning_errno(UNIT(s), r, "Failed to watch PID "PID_FMT" from: %m", pid);
887 }
888
889 static void service_set_state(Service *s, ServiceState state) {
890 ServiceState old_state;
891 const UnitActiveState *table;
892
893 assert(s);
894
895 table = s->type == SERVICE_IDLE ? state_translation_table_idle : state_translation_table;
896
897 old_state = s->state;
898 s->state = state;
899
900 service_unwatch_pid_file(s);
901
902 if (!IN_SET(state,
903 SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST,
904 SERVICE_RUNNING,
905 SERVICE_RELOAD,
906 SERVICE_STOP, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
907 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL,
908 SERVICE_AUTO_RESTART))
909 s->timer_event_source = sd_event_source_unref(s->timer_event_source);
910
911 if (!IN_SET(state,
912 SERVICE_START, SERVICE_START_POST,
913 SERVICE_RUNNING, SERVICE_RELOAD,
914 SERVICE_STOP, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
915 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL)) {
916 service_unwatch_main_pid(s);
917 s->main_command = NULL;
918 }
919
920 if (!IN_SET(state,
921 SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST,
922 SERVICE_RELOAD,
923 SERVICE_STOP, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
924 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL)) {
925 service_unwatch_control_pid(s);
926 s->control_command = NULL;
927 s->control_command_id = _SERVICE_EXEC_COMMAND_INVALID;
928 }
929
930 if (IN_SET(state, SERVICE_DEAD, SERVICE_FAILED, SERVICE_AUTO_RESTART))
931 unit_unwatch_all_pids(UNIT(s));
932
933 if (!IN_SET(state,
934 SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST,
935 SERVICE_RUNNING, SERVICE_RELOAD,
936 SERVICE_STOP, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
937 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL) &&
938 !(state == SERVICE_DEAD && UNIT(s)->job))
939 service_close_socket_fd(s);
940
941 if (!IN_SET(state, SERVICE_START_POST, SERVICE_RUNNING, SERVICE_RELOAD))
942 service_stop_watchdog(s);
943
944 /* For the inactive states unit_notify() will trim the cgroup,
945 * but for exit we have to do that ourselves... */
946 if (state == SERVICE_EXITED && !MANAGER_IS_RELOADING(UNIT(s)->manager))
947 unit_prune_cgroup(UNIT(s));
948
949 /* For remain_after_exit services, let's see if we can "release" the
950 * hold on the console, since unit_notify() only does that in case of
951 * change of state */
952 if (state == SERVICE_EXITED &&
953 s->remain_after_exit &&
954 UNIT(s)->manager->n_on_console > 0) {
955
956 ExecContext *ec;
957
958 ec = unit_get_exec_context(UNIT(s));
959 if (ec && exec_context_may_touch_console(ec)) {
960 Manager *m = UNIT(s)->manager;
961
962 m->n_on_console--;
963 if (m->n_on_console == 0)
964 /* unset no_console_output flag, since the console is free */
965 m->no_console_output = false;
966 }
967 }
968
969 if (old_state != state)
970 log_unit_debug(UNIT(s), "Changed %s -> %s", service_state_to_string(old_state), service_state_to_string(state));
971
972 unit_notify(UNIT(s), table[old_state], table[state], s->reload_result == SERVICE_SUCCESS);
973 }
974
975 static usec_t service_coldplug_timeout(Service *s) {
976 assert(s);
977
978 switch (s->deserialized_state) {
979
980 case SERVICE_START_PRE:
981 case SERVICE_START:
982 case SERVICE_START_POST:
983 case SERVICE_RELOAD:
984 return usec_add(UNIT(s)->state_change_timestamp.monotonic, s->timeout_start_usec);
985
986 case SERVICE_RUNNING:
987 return usec_add(UNIT(s)->active_enter_timestamp.monotonic, s->runtime_max_usec);
988
989 case SERVICE_STOP:
990 case SERVICE_STOP_SIGABRT:
991 case SERVICE_STOP_SIGTERM:
992 case SERVICE_STOP_SIGKILL:
993 case SERVICE_STOP_POST:
994 case SERVICE_FINAL_SIGTERM:
995 case SERVICE_FINAL_SIGKILL:
996 return usec_add(UNIT(s)->state_change_timestamp.monotonic, s->timeout_stop_usec);
997
998 case SERVICE_AUTO_RESTART:
999 return usec_add(UNIT(s)->inactive_enter_timestamp.monotonic, s->restart_usec);
1000
1001 default:
1002 return USEC_INFINITY;
1003 }
1004 }
1005
1006 static int service_coldplug(Unit *u) {
1007 Service *s = SERVICE(u);
1008 int r;
1009
1010 assert(s);
1011 assert(s->state == SERVICE_DEAD);
1012
1013 if (s->deserialized_state == s->state)
1014 return 0;
1015
1016 r = service_arm_timer(s, service_coldplug_timeout(s));
1017 if (r < 0)
1018 return r;
1019
1020 if (s->main_pid > 0 &&
1021 pid_is_unwaited(s->main_pid) &&
1022 ((s->deserialized_state == SERVICE_START && IN_SET(s->type, SERVICE_FORKING, SERVICE_DBUS, SERVICE_ONESHOT, SERVICE_NOTIFY)) ||
1023 IN_SET(s->deserialized_state,
1024 SERVICE_START, SERVICE_START_POST,
1025 SERVICE_RUNNING, SERVICE_RELOAD,
1026 SERVICE_STOP, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
1027 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL))) {
1028 r = unit_watch_pid(UNIT(s), s->main_pid);
1029 if (r < 0)
1030 return r;
1031 }
1032
1033 if (s->control_pid > 0 &&
1034 pid_is_unwaited(s->control_pid) &&
1035 IN_SET(s->deserialized_state,
1036 SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST,
1037 SERVICE_RELOAD,
1038 SERVICE_STOP, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
1039 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL)) {
1040 r = unit_watch_pid(UNIT(s), s->control_pid);
1041 if (r < 0)
1042 return r;
1043 }
1044
1045 if (!IN_SET(s->deserialized_state, SERVICE_DEAD, SERVICE_FAILED, SERVICE_AUTO_RESTART))
1046 unit_watch_all_pids(UNIT(s));
1047
1048 if (IN_SET(s->deserialized_state, SERVICE_START_POST, SERVICE_RUNNING, SERVICE_RELOAD))
1049 service_start_watchdog(s);
1050
1051 if (!IN_SET(s->deserialized_state, SERVICE_DEAD, SERVICE_FAILED, SERVICE_AUTO_RESTART))
1052 (void) unit_setup_dynamic_creds(u);
1053
1054 if (UNIT_ISSET(s->accept_socket)) {
1055 Socket* socket = SOCKET(UNIT_DEREF(s->accept_socket));
1056
1057 if (socket->max_connections_per_source > 0) {
1058 SocketPeer *peer;
1059
1060 /* Make a best-effort attempt at bumping the connection count */
1061 if (socket_acquire_peer(socket, s->socket_fd, &peer) > 0) {
1062 socket_peer_unref(s->peer);
1063 s->peer = peer;
1064 }
1065 }
1066 }
1067
1068 service_set_state(s, s->deserialized_state);
1069 return 0;
1070 }
1071
1072 static int service_collect_fds(Service *s,
1073 int **fds,
1074 char ***fd_names,
1075 unsigned *n_storage_fds,
1076 unsigned *n_socket_fds) {
1077
1078 _cleanup_strv_free_ char **rfd_names = NULL;
1079 _cleanup_free_ int *rfds = NULL;
1080 unsigned rn_socket_fds = 0, rn_storage_fds = 0;
1081 int r;
1082
1083 assert(s);
1084 assert(fds);
1085 assert(fd_names);
1086 assert(n_socket_fds);
1087
1088 if (s->socket_fd >= 0) {
1089
1090 /* Pass the per-connection socket */
1091
1092 rfds = new(int, 1);
1093 if (!rfds)
1094 return -ENOMEM;
1095 rfds[0] = s->socket_fd;
1096
1097 rfd_names = strv_new("connection", NULL);
1098 if (!rfd_names)
1099 return -ENOMEM;
1100
1101 rn_socket_fds = 1;
1102 } else {
1103 Iterator i;
1104 Unit *u;
1105
1106 /* Pass all our configured sockets for singleton services */
1107
1108 SET_FOREACH(u, UNIT(s)->dependencies[UNIT_TRIGGERED_BY], i) {
1109 _cleanup_free_ int *cfds = NULL;
1110 Socket *sock;
1111 int cn_fds;
1112
1113 if (u->type != UNIT_SOCKET)
1114 continue;
1115
1116 sock = SOCKET(u);
1117
1118 cn_fds = socket_collect_fds(sock, &cfds);
1119 if (cn_fds < 0)
1120 return cn_fds;
1121
1122 if (cn_fds <= 0)
1123 continue;
1124
1125 if (!rfds) {
1126 rfds = cfds;
1127 rn_socket_fds = cn_fds;
1128
1129 cfds = NULL;
1130 } else {
1131 int *t;
1132
1133 t = realloc(rfds, (rn_socket_fds + cn_fds) * sizeof(int));
1134 if (!t)
1135 return -ENOMEM;
1136
1137 memcpy(t + rn_socket_fds, cfds, cn_fds * sizeof(int));
1138
1139 rfds = t;
1140 rn_socket_fds += cn_fds;
1141 }
1142
1143 r = strv_extend_n(&rfd_names, socket_fdname(sock), cn_fds);
1144 if (r < 0)
1145 return r;
1146 }
1147 }
1148
1149 if (s->n_fd_store > 0) {
1150 ServiceFDStore *fs;
1151 unsigned n_fds;
1152 char **nl;
1153 int *t;
1154
1155 t = realloc(rfds, (rn_socket_fds + s->n_fd_store) * sizeof(int));
1156 if (!t)
1157 return -ENOMEM;
1158
1159 rfds = t;
1160
1161 nl = realloc(rfd_names, (rn_socket_fds + s->n_fd_store + 1) * sizeof(char*));
1162 if (!nl)
1163 return -ENOMEM;
1164
1165 rfd_names = nl;
1166 n_fds = rn_socket_fds;
1167
1168 LIST_FOREACH(fd_store, fs, s->fd_store) {
1169 rfds[n_fds] = fs->fd;
1170 rfd_names[n_fds] = strdup(strempty(fs->fdname));
1171 if (!rfd_names[n_fds])
1172 return -ENOMEM;
1173
1174 rn_storage_fds++;
1175 n_fds++;
1176 }
1177
1178 rfd_names[n_fds] = NULL;
1179 }
1180
1181 *fds = rfds;
1182 *fd_names = rfd_names;
1183 *n_socket_fds = rn_socket_fds;
1184 *n_storage_fds = rn_storage_fds;
1185
1186 rfds = NULL;
1187 rfd_names = NULL;
1188
1189 return 0;
1190 }
1191
1192 static bool service_exec_needs_notify_socket(Service *s, ExecFlags flags) {
1193 assert(s);
1194
1195 /* Notifications are accepted depending on the process and
1196 * the access setting of the service:
1197 * process: \ access: NONE MAIN EXEC ALL
1198 * main no yes yes yes
1199 * control no no yes yes
1200 * other (forked) no no no yes */
1201
1202 if (flags & EXEC_IS_CONTROL)
1203 /* A control process */
1204 return IN_SET(s->notify_access, NOTIFY_EXEC, NOTIFY_ALL);
1205
1206 /* We only spawn main processes and control processes, so any
1207 * process that is not a control process is a main process */
1208 return s->notify_access != NOTIFY_NONE;
1209 }
1210
1211 static int service_spawn(
1212 Service *s,
1213 ExecCommand *c,
1214 usec_t timeout,
1215 ExecFlags flags,
1216 pid_t *_pid) {
1217
1218 _cleanup_strv_free_ char **final_env = NULL, **our_env = NULL, **fd_names = NULL;
1219 _cleanup_free_ int *fds = NULL;
1220 unsigned n_storage_fds = 0, n_socket_fds = 0, n_env = 0;
1221 pid_t pid;
1222
1223 ExecParameters exec_params = {
1224 .flags = flags,
1225 .stdin_fd = -1,
1226 .stdout_fd = -1,
1227 .stderr_fd = -1,
1228 };
1229
1230 int r;
1231
1232 assert(s);
1233 assert(c);
1234 assert(_pid);
1235
1236 if (flags & EXEC_IS_CONTROL) {
1237 /* If this is a control process, mask the permissions/chroot application if this is requested. */
1238 if (s->permissions_start_only)
1239 exec_params.flags &= ~EXEC_APPLY_SANDBOXING;
1240 if (s->root_directory_start_only)
1241 exec_params.flags &= ~EXEC_APPLY_CHROOT;
1242 }
1243
1244 (void) unit_realize_cgroup(UNIT(s));
1245 if (s->reset_cpu_usage) {
1246 (void) unit_reset_cpu_usage(UNIT(s));
1247 s->reset_cpu_usage = false;
1248 }
1249
1250 r = unit_setup_exec_runtime(UNIT(s));
1251 if (r < 0)
1252 return r;
1253
1254 r = unit_setup_dynamic_creds(UNIT(s));
1255 if (r < 0)
1256 return r;
1257
1258 if ((flags & EXEC_PASS_FDS) ||
1259 s->exec_context.std_input == EXEC_INPUT_SOCKET ||
1260 s->exec_context.std_output == EXEC_OUTPUT_SOCKET ||
1261 s->exec_context.std_error == EXEC_OUTPUT_SOCKET) {
1262
1263 r = service_collect_fds(s, &fds, &fd_names, &n_storage_fds, &n_socket_fds);
1264 if (r < 0)
1265 return r;
1266
1267 log_unit_debug(UNIT(s), "Passing %i fds to service", n_storage_fds + n_socket_fds);
1268 }
1269
1270 r = service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), timeout));
1271 if (r < 0)
1272 return r;
1273
1274 our_env = new0(char*, 9);
1275 if (!our_env)
1276 return -ENOMEM;
1277
1278 if (service_exec_needs_notify_socket(s, flags))
1279 if (asprintf(our_env + n_env++, "NOTIFY_SOCKET=%s", UNIT(s)->manager->notify_socket) < 0)
1280 return -ENOMEM;
1281
1282 if (s->main_pid > 0)
1283 if (asprintf(our_env + n_env++, "MAINPID="PID_FMT, s->main_pid) < 0)
1284 return -ENOMEM;
1285
1286 if (MANAGER_IS_USER(UNIT(s)->manager))
1287 if (asprintf(our_env + n_env++, "MANAGERPID="PID_FMT, getpid_cached()) < 0)
1288 return -ENOMEM;
1289
1290 if (s->socket_fd >= 0) {
1291 union sockaddr_union sa;
1292 socklen_t salen = sizeof(sa);
1293
1294 r = getpeername(s->socket_fd, &sa.sa, &salen);
1295 if (r < 0) {
1296 r = -errno;
1297
1298 /* ENOTCONN is legitimate if the endpoint disappeared on shutdown.
1299 * This connection is over, but the socket unit lives on. */
1300 if (r != -ENOTCONN || !IN_SET(s->control_command_id, SERVICE_EXEC_STOP, SERVICE_EXEC_STOP_POST))
1301 return r;
1302 }
1303
1304 if (r == 0 && IN_SET(sa.sa.sa_family, AF_INET, AF_INET6, AF_VSOCK)) {
1305 _cleanup_free_ char *addr = NULL;
1306 char *t;
1307 unsigned port;
1308
1309 r = sockaddr_pretty(&sa.sa, salen, true, false, &addr);
1310 if (r < 0)
1311 return r;
1312
1313 t = strappend("REMOTE_ADDR=", addr);
1314 if (!t)
1315 return -ENOMEM;
1316 our_env[n_env++] = t;
1317
1318 r = sockaddr_port(&sa.sa, &port);
1319 if (r < 0)
1320 return r;
1321
1322 if (asprintf(&t, "REMOTE_PORT=%u", port) < 0)
1323 return -ENOMEM;
1324 our_env[n_env++] = t;
1325 }
1326 }
1327
1328 if (flags & EXEC_SETENV_RESULT) {
1329 if (asprintf(our_env + n_env++, "SERVICE_RESULT=%s", service_result_to_string(s->result)) < 0)
1330 return -ENOMEM;
1331
1332 if (s->main_exec_status.pid > 0 &&
1333 dual_timestamp_is_set(&s->main_exec_status.exit_timestamp)) {
1334 if (asprintf(our_env + n_env++, "EXIT_CODE=%s", sigchld_code_to_string(s->main_exec_status.code)) < 0)
1335 return -ENOMEM;
1336
1337 if (s->main_exec_status.code == CLD_EXITED)
1338 r = asprintf(our_env + n_env++, "EXIT_STATUS=%i", s->main_exec_status.status);
1339 else
1340 r = asprintf(our_env + n_env++, "EXIT_STATUS=%s", signal_to_string(s->main_exec_status.status));
1341 if (r < 0)
1342 return -ENOMEM;
1343 }
1344 }
1345
1346 manager_set_exec_params(UNIT(s)->manager, &exec_params);
1347 unit_set_exec_params(UNIT(s), &exec_params);
1348
1349 final_env = strv_env_merge(2, exec_params.environment, our_env, NULL);
1350 if (!final_env)
1351 return -ENOMEM;
1352
1353 if ((flags & EXEC_IS_CONTROL) && UNIT(s)->cgroup_path) {
1354 exec_params.cgroup_path = strjoina(UNIT(s)->cgroup_path, "/control");
1355 (void) cg_create(SYSTEMD_CGROUP_CONTROLLER, exec_params.cgroup_path);
1356 }
1357
1358 /* System services should get a new keyring by default. */
1359 SET_FLAG(exec_params.flags, EXEC_NEW_KEYRING, MANAGER_IS_SYSTEM(UNIT(s)->manager));
1360
1361 /* System D-Bus needs nss-systemd disabled, so that we don't deadlock */
1362 SET_FLAG(exec_params.flags, EXEC_NSS_BYPASS_BUS,
1363 MANAGER_IS_SYSTEM(UNIT(s)->manager) && unit_has_name(UNIT(s), SPECIAL_DBUS_SERVICE));
1364
1365 exec_params.argv = c->argv;
1366 exec_params.environment = final_env;
1367 exec_params.fds = fds;
1368 exec_params.fd_names = fd_names;
1369 exec_params.n_storage_fds = n_storage_fds;
1370 exec_params.n_socket_fds = n_socket_fds;
1371 exec_params.watchdog_usec = s->watchdog_usec;
1372 exec_params.selinux_context_net = s->socket_fd_selinux_context_net;
1373 if (s->type == SERVICE_IDLE)
1374 exec_params.idle_pipe = UNIT(s)->manager->idle_pipe;
1375 exec_params.stdin_fd = s->stdin_fd;
1376 exec_params.stdout_fd = s->stdout_fd;
1377 exec_params.stderr_fd = s->stderr_fd;
1378
1379 r = exec_spawn(UNIT(s),
1380 c,
1381 &s->exec_context,
1382 &exec_params,
1383 s->exec_runtime,
1384 &s->dynamic_creds,
1385 &pid);
1386 if (r < 0)
1387 return r;
1388
1389 r = unit_watch_pid(UNIT(s), pid);
1390 if (r < 0) /* FIXME: we need to do something here */
1391 return r;
1392
1393 *_pid = pid;
1394
1395 return 0;
1396 }
1397
1398 static int main_pid_good(Service *s) {
1399 assert(s);
1400
1401 /* Returns 0 if the pid is dead, 1 if it is good, -1 if we
1402 * don't know */
1403
1404 /* If we know the pid file, then let's just check if it is
1405 * still valid */
1406 if (s->main_pid_known) {
1407
1408 /* If it's an alien child let's check if it is still
1409 * alive ... */
1410 if (s->main_pid_alien && s->main_pid > 0)
1411 return pid_is_alive(s->main_pid);
1412
1413 /* .. otherwise assume we'll get a SIGCHLD for it,
1414 * which we really should wait for to collect exit
1415 * status and code */
1416 return s->main_pid > 0;
1417 }
1418
1419 /* We don't know the pid */
1420 return -EAGAIN;
1421 }
1422
1423 _pure_ static int control_pid_good(Service *s) {
1424 assert(s);
1425
1426 return s->control_pid > 0;
1427 }
1428
1429 static int cgroup_good(Service *s) {
1430 int r;
1431
1432 assert(s);
1433
1434 if (!UNIT(s)->cgroup_path)
1435 return 0;
1436
1437 r = cg_is_empty_recursive(SYSTEMD_CGROUP_CONTROLLER, UNIT(s)->cgroup_path);
1438 if (r < 0)
1439 return r;
1440
1441 return !r;
1442 }
1443
1444 static bool service_shall_restart(Service *s) {
1445 assert(s);
1446
1447 /* Don't restart after manual stops */
1448 if (s->forbid_restart)
1449 return false;
1450
1451 /* Never restart if this is configured as special exception */
1452 if (exit_status_set_test(&s->restart_prevent_status, s->main_exec_status.code, s->main_exec_status.status))
1453 return false;
1454
1455 /* Restart if the exit code/status are configured as restart triggers */
1456 if (exit_status_set_test(&s->restart_force_status, s->main_exec_status.code, s->main_exec_status.status))
1457 return true;
1458
1459 switch (s->restart) {
1460
1461 case SERVICE_RESTART_NO:
1462 return false;
1463
1464 case SERVICE_RESTART_ALWAYS:
1465 return true;
1466
1467 case SERVICE_RESTART_ON_SUCCESS:
1468 return s->result == SERVICE_SUCCESS;
1469
1470 case SERVICE_RESTART_ON_FAILURE:
1471 return s->result != SERVICE_SUCCESS;
1472
1473 case SERVICE_RESTART_ON_ABNORMAL:
1474 return !IN_SET(s->result, SERVICE_SUCCESS, SERVICE_FAILURE_EXIT_CODE);
1475
1476 case SERVICE_RESTART_ON_WATCHDOG:
1477 return s->result == SERVICE_FAILURE_WATCHDOG;
1478
1479 case SERVICE_RESTART_ON_ABORT:
1480 return IN_SET(s->result, SERVICE_FAILURE_SIGNAL, SERVICE_FAILURE_CORE_DUMP);
1481
1482 default:
1483 assert_not_reached("unknown restart setting");
1484 }
1485 }
1486
1487 static bool service_will_restart(Service *s) {
1488 assert(s);
1489
1490 if (s->state == SERVICE_AUTO_RESTART)
1491 return true;
1492 if (!UNIT(s)->job)
1493 return false;
1494 if (UNIT(s)->job->type == JOB_START)
1495 return true;
1496 return false;
1497 }
1498
1499 static void service_enter_dead(Service *s, ServiceResult f, bool allow_restart) {
1500 int r;
1501
1502 assert(s);
1503
1504 /* If there's a stop job queued before we enter the DEAD state, we shouldn't act on Restart=, in order to not
1505 * undo what has already been enqueued. */
1506 if (unit_stop_pending(UNIT(s)))
1507 allow_restart = false;
1508
1509 if (s->result == SERVICE_SUCCESS)
1510 s->result = f;
1511
1512 service_set_state(s, s->result != SERVICE_SUCCESS ? SERVICE_FAILED : SERVICE_DEAD);
1513
1514 if (s->result != SERVICE_SUCCESS) {
1515 log_unit_warning(UNIT(s), "Failed with result '%s'.", service_result_to_string(s->result));
1516 emergency_action(UNIT(s)->manager, s->emergency_action, UNIT(s)->reboot_arg, "service failed");
1517 }
1518
1519 if (allow_restart && service_shall_restart(s)) {
1520
1521 r = service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), s->restart_usec));
1522 if (r < 0)
1523 goto fail;
1524
1525 service_set_state(s, SERVICE_AUTO_RESTART);
1526 } else
1527 /* If we shan't restart, then flush out the restart counter. But don't do that immediately, so that the
1528 * user can still introspect the counter. Do so on the next start. */
1529 s->flush_n_restarts = true;
1530
1531 /* The next restart might not be a manual stop, hence reset the flag indicating manual stops */
1532 s->forbid_restart = false;
1533
1534 /* We want fresh tmpdirs in case service is started again immediately */
1535 exec_runtime_destroy(s->exec_runtime);
1536 s->exec_runtime = exec_runtime_unref(s->exec_runtime);
1537
1538 if (s->exec_context.runtime_directory_preserve_mode == EXEC_PRESERVE_NO ||
1539 (s->exec_context.runtime_directory_preserve_mode == EXEC_PRESERVE_RESTART && !service_will_restart(s)))
1540 /* Also, remove the runtime directory */
1541 exec_context_destroy_runtime_directory(&s->exec_context, UNIT(s)->manager->prefix[EXEC_DIRECTORY_RUNTIME]);
1542
1543 /* Get rid of the IPC bits of the user */
1544 unit_unref_uid_gid(UNIT(s), true);
1545
1546 /* Release the user, and destroy it if we are the only remaining owner */
1547 dynamic_creds_destroy(&s->dynamic_creds);
1548
1549 /* Try to delete the pid file. At this point it will be
1550 * out-of-date, and some software might be confused by it, so
1551 * let's remove it. */
1552 if (s->pid_file)
1553 (void) unlink(s->pid_file);
1554
1555 return;
1556
1557 fail:
1558 log_unit_warning_errno(UNIT(s), r, "Failed to run install restart timer: %m");
1559 service_enter_dead(s, SERVICE_FAILURE_RESOURCES, false);
1560 }
1561
1562 static void service_enter_stop_post(Service *s, ServiceResult f) {
1563 int r;
1564 assert(s);
1565
1566 if (s->result == SERVICE_SUCCESS)
1567 s->result = f;
1568
1569 service_unwatch_control_pid(s);
1570 unit_watch_all_pids(UNIT(s));
1571
1572 s->control_command = s->exec_command[SERVICE_EXEC_STOP_POST];
1573 if (s->control_command) {
1574 s->control_command_id = SERVICE_EXEC_STOP_POST;
1575
1576 r = service_spawn(s,
1577 s->control_command,
1578 s->timeout_stop_usec,
1579 EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_APPLY_TTY_STDIN|EXEC_IS_CONTROL|EXEC_SETENV_RESULT,
1580 &s->control_pid);
1581 if (r < 0)
1582 goto fail;
1583
1584 service_set_state(s, SERVICE_STOP_POST);
1585 } else
1586 service_enter_signal(s, SERVICE_FINAL_SIGTERM, SERVICE_SUCCESS);
1587
1588 return;
1589
1590 fail:
1591 log_unit_warning_errno(UNIT(s), r, "Failed to run 'stop-post' task: %m");
1592 service_enter_signal(s, SERVICE_FINAL_SIGTERM, SERVICE_FAILURE_RESOURCES);
1593 }
1594
1595 static int state_to_kill_operation(ServiceState state) {
1596 switch (state) {
1597
1598 case SERVICE_STOP_SIGABRT:
1599 return KILL_ABORT;
1600
1601 case SERVICE_STOP_SIGTERM:
1602 case SERVICE_FINAL_SIGTERM:
1603 return KILL_TERMINATE;
1604
1605 case SERVICE_STOP_SIGKILL:
1606 case SERVICE_FINAL_SIGKILL:
1607 return KILL_KILL;
1608
1609 default:
1610 return _KILL_OPERATION_INVALID;
1611 }
1612 }
1613
1614 static void service_enter_signal(Service *s, ServiceState state, ServiceResult f) {
1615 int r;
1616
1617 assert(s);
1618
1619 if (s->result == SERVICE_SUCCESS)
1620 s->result = f;
1621
1622 unit_watch_all_pids(UNIT(s));
1623
1624 r = unit_kill_context(
1625 UNIT(s),
1626 &s->kill_context,
1627 state_to_kill_operation(state),
1628 s->main_pid,
1629 s->control_pid,
1630 s->main_pid_alien);
1631
1632 if (r < 0)
1633 goto fail;
1634
1635 if (r > 0) {
1636 r = service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), s->timeout_stop_usec));
1637 if (r < 0)
1638 goto fail;
1639
1640 service_set_state(s, state);
1641 } else if (IN_SET(state, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM) && s->kill_context.send_sigkill)
1642 service_enter_signal(s, SERVICE_STOP_SIGKILL, SERVICE_SUCCESS);
1643 else if (IN_SET(state, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL))
1644 service_enter_stop_post(s, SERVICE_SUCCESS);
1645 else if (state == SERVICE_FINAL_SIGTERM && s->kill_context.send_sigkill)
1646 service_enter_signal(s, SERVICE_FINAL_SIGKILL, SERVICE_SUCCESS);
1647 else
1648 service_enter_dead(s, SERVICE_SUCCESS, true);
1649
1650 return;
1651
1652 fail:
1653 log_unit_warning_errno(UNIT(s), r, "Failed to kill processes: %m");
1654
1655 if (IN_SET(state, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL))
1656 service_enter_stop_post(s, SERVICE_FAILURE_RESOURCES);
1657 else
1658 service_enter_dead(s, SERVICE_FAILURE_RESOURCES, true);
1659 }
1660
1661 static void service_enter_stop_by_notify(Service *s) {
1662 assert(s);
1663
1664 unit_watch_all_pids(UNIT(s));
1665
1666 service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), s->timeout_stop_usec));
1667
1668 /* The service told us it's stopping, so it's as if we SIGTERM'd it. */
1669 service_set_state(s, SERVICE_STOP_SIGTERM);
1670 }
1671
1672 static void service_enter_stop(Service *s, ServiceResult f) {
1673 int r;
1674
1675 assert(s);
1676
1677 if (s->result == SERVICE_SUCCESS)
1678 s->result = f;
1679
1680 service_unwatch_control_pid(s);
1681 unit_watch_all_pids(UNIT(s));
1682
1683 s->control_command = s->exec_command[SERVICE_EXEC_STOP];
1684 if (s->control_command) {
1685 s->control_command_id = SERVICE_EXEC_STOP;
1686
1687 r = service_spawn(s,
1688 s->control_command,
1689 s->timeout_stop_usec,
1690 EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_IS_CONTROL|EXEC_SETENV_RESULT,
1691 &s->control_pid);
1692 if (r < 0)
1693 goto fail;
1694
1695 service_set_state(s, SERVICE_STOP);
1696 } else
1697 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_SUCCESS);
1698
1699 return;
1700
1701 fail:
1702 log_unit_warning_errno(UNIT(s), r, "Failed to run 'stop' task: %m");
1703 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_RESOURCES);
1704 }
1705
1706 static bool service_good(Service *s) {
1707 int main_pid_ok;
1708 assert(s);
1709
1710 if (s->type == SERVICE_DBUS && !s->bus_name_good)
1711 return false;
1712
1713 main_pid_ok = main_pid_good(s);
1714 if (main_pid_ok > 0) /* It's alive */
1715 return true;
1716 if (main_pid_ok == 0) /* It's dead */
1717 return false;
1718
1719 /* OK, we don't know anything about the main PID, maybe
1720 * because there is none. Let's check the control group
1721 * instead. */
1722
1723 return cgroup_good(s) != 0;
1724 }
1725
1726 static void service_enter_running(Service *s, ServiceResult f) {
1727 assert(s);
1728
1729 if (s->result == SERVICE_SUCCESS)
1730 s->result = f;
1731
1732 service_unwatch_control_pid(s);
1733
1734 if (service_good(s)) {
1735
1736 /* If there are any queued up sd_notify()
1737 * notifications, process them now */
1738 if (s->notify_state == NOTIFY_RELOADING)
1739 service_enter_reload_by_notify(s);
1740 else if (s->notify_state == NOTIFY_STOPPING)
1741 service_enter_stop_by_notify(s);
1742 else {
1743 service_set_state(s, SERVICE_RUNNING);
1744 service_arm_timer(s, usec_add(UNIT(s)->active_enter_timestamp.monotonic, s->runtime_max_usec));
1745 }
1746
1747 } else if (f != SERVICE_SUCCESS)
1748 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
1749 else if (s->remain_after_exit)
1750 service_set_state(s, SERVICE_EXITED);
1751 else
1752 service_enter_stop(s, SERVICE_SUCCESS);
1753 }
1754
1755 static void service_enter_start_post(Service *s) {
1756 int r;
1757 assert(s);
1758
1759 service_unwatch_control_pid(s);
1760 service_reset_watchdog(s);
1761
1762 s->control_command = s->exec_command[SERVICE_EXEC_START_POST];
1763 if (s->control_command) {
1764 s->control_command_id = SERVICE_EXEC_START_POST;
1765
1766 r = service_spawn(s,
1767 s->control_command,
1768 s->timeout_start_usec,
1769 EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_IS_CONTROL,
1770 &s->control_pid);
1771 if (r < 0)
1772 goto fail;
1773
1774 service_set_state(s, SERVICE_START_POST);
1775 } else
1776 service_enter_running(s, SERVICE_SUCCESS);
1777
1778 return;
1779
1780 fail:
1781 log_unit_warning_errno(UNIT(s), r, "Failed to run 'start-post' task: %m");
1782 service_enter_stop(s, SERVICE_FAILURE_RESOURCES);
1783 }
1784
1785 static void service_kill_control_processes(Service *s) {
1786 char *p;
1787
1788 if (!UNIT(s)->cgroup_path)
1789 return;
1790
1791 p = strjoina(UNIT(s)->cgroup_path, "/control");
1792 cg_kill_recursive(SYSTEMD_CGROUP_CONTROLLER, p, SIGKILL, CGROUP_SIGCONT|CGROUP_IGNORE_SELF|CGROUP_REMOVE, NULL, NULL, NULL);
1793 }
1794
1795 static void service_enter_start(Service *s) {
1796 ExecCommand *c;
1797 usec_t timeout;
1798 pid_t pid;
1799 int r;
1800
1801 assert(s);
1802
1803 service_unwatch_control_pid(s);
1804 service_unwatch_main_pid(s);
1805
1806 /* We want to ensure that nobody leaks processes from
1807 * START_PRE here, so let's go on a killing spree, People
1808 * should not spawn long running processes from START_PRE. */
1809 service_kill_control_processes(s);
1810
1811 if (s->type == SERVICE_FORKING) {
1812 s->control_command_id = SERVICE_EXEC_START;
1813 c = s->control_command = s->exec_command[SERVICE_EXEC_START];
1814
1815 s->main_command = NULL;
1816 } else {
1817 s->control_command_id = _SERVICE_EXEC_COMMAND_INVALID;
1818 s->control_command = NULL;
1819
1820 c = s->main_command = s->exec_command[SERVICE_EXEC_START];
1821 }
1822
1823 if (!c) {
1824 if (s->type != SERVICE_ONESHOT) {
1825 /* There's no command line configured for the main command? Hmm, that is strange. This can only
1826 * happen if the configuration changes at runtime. In this case, let's enter a failure
1827 * state. */
1828 log_unit_error(UNIT(s), "There's no 'start' task anymore we could start: %m");
1829 r = -ENXIO;
1830 goto fail;
1831 }
1832
1833 service_enter_start_post(s);
1834 return;
1835 }
1836
1837 if (IN_SET(s->type, SERVICE_SIMPLE, SERVICE_IDLE))
1838 /* For simple + idle this is the main process. We don't apply any timeout here, but
1839 * service_enter_running() will later apply the .runtime_max_usec timeout. */
1840 timeout = USEC_INFINITY;
1841 else
1842 timeout = s->timeout_start_usec;
1843
1844 r = service_spawn(s,
1845 c,
1846 timeout,
1847 EXEC_PASS_FDS|EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_APPLY_TTY_STDIN|EXEC_SET_WATCHDOG,
1848 &pid);
1849 if (r < 0)
1850 goto fail;
1851
1852 if (IN_SET(s->type, SERVICE_SIMPLE, SERVICE_IDLE)) {
1853 /* For simple services we immediately start
1854 * the START_POST binaries. */
1855
1856 service_set_main_pid(s, pid);
1857 service_enter_start_post(s);
1858
1859 } else if (s->type == SERVICE_FORKING) {
1860
1861 /* For forking services we wait until the start
1862 * process exited. */
1863
1864 s->control_pid = pid;
1865 service_set_state(s, SERVICE_START);
1866
1867 } else if (IN_SET(s->type, SERVICE_ONESHOT, SERVICE_DBUS, SERVICE_NOTIFY)) {
1868
1869 /* For oneshot services we wait until the start
1870 * process exited, too, but it is our main process. */
1871
1872 /* For D-Bus services we know the main pid right away,
1873 * but wait for the bus name to appear on the
1874 * bus. Notify services are similar. */
1875
1876 service_set_main_pid(s, pid);
1877 service_set_state(s, SERVICE_START);
1878 } else
1879 assert_not_reached("Unknown service type");
1880
1881 return;
1882
1883 fail:
1884 log_unit_warning_errno(UNIT(s), r, "Failed to run 'start' task: %m");
1885 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_RESOURCES);
1886 }
1887
1888 static void service_enter_start_pre(Service *s) {
1889 int r;
1890
1891 assert(s);
1892
1893 service_unwatch_control_pid(s);
1894
1895 s->control_command = s->exec_command[SERVICE_EXEC_START_PRE];
1896 if (s->control_command) {
1897 /* Before we start anything, let's clear up what might
1898 * be left from previous runs. */
1899 service_kill_control_processes(s);
1900
1901 s->control_command_id = SERVICE_EXEC_START_PRE;
1902
1903 r = service_spawn(s,
1904 s->control_command,
1905 s->timeout_start_usec,
1906 EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_IS_CONTROL|EXEC_APPLY_TTY_STDIN,
1907 &s->control_pid);
1908 if (r < 0)
1909 goto fail;
1910
1911 service_set_state(s, SERVICE_START_PRE);
1912 } else
1913 service_enter_start(s);
1914
1915 return;
1916
1917 fail:
1918 log_unit_warning_errno(UNIT(s), r, "Failed to run 'start-pre' task: %m");
1919 service_enter_dead(s, SERVICE_FAILURE_RESOURCES, true);
1920 }
1921
1922 static void service_enter_restart(Service *s) {
1923 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1924 int r;
1925
1926 assert(s);
1927
1928 if (UNIT(s)->job && UNIT(s)->job->type == JOB_STOP) {
1929 /* Don't restart things if we are going down anyway */
1930 log_unit_info(UNIT(s), "Stop job pending for unit, delaying automatic restart.");
1931
1932 r = service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), s->restart_usec));
1933 if (r < 0)
1934 goto fail;
1935
1936 return;
1937 }
1938
1939 /* Any units that are bound to this service must also be
1940 * restarted. We use JOB_RESTART (instead of the more obvious
1941 * JOB_START) here so that those dependency jobs will be added
1942 * as well. */
1943 r = manager_add_job(UNIT(s)->manager, JOB_RESTART, UNIT(s), JOB_FAIL, &error, NULL);
1944 if (r < 0)
1945 goto fail;
1946
1947 /* Count the jobs we enqueue for restarting. This counter is maintained as long as the unit isn't fully
1948 * stopped, i.e. as long as it remains up or remains in auto-start states. The use can reset the counter
1949 * explicitly however via the usual "systemctl reset-failure" logic. */
1950 s->n_restarts ++;
1951 s->flush_n_restarts = false;
1952
1953 log_struct(LOG_INFO,
1954 "MESSAGE_ID=" SD_MESSAGE_UNIT_RESTART_SCHEDULED_STR,
1955 LOG_UNIT_ID(UNIT(s)),
1956 LOG_UNIT_MESSAGE(UNIT(s), "Scheduled restart job, restart counter is at %u.", s->n_restarts),
1957 "N_RESTARTS=%u", s->n_restarts,
1958 NULL);
1959
1960 /* Notify clients about changed restart counter */
1961 unit_add_to_dbus_queue(UNIT(s));
1962
1963 /* Note that we stay in the SERVICE_AUTO_RESTART state here,
1964 * it will be canceled as part of the service_stop() call that
1965 * is executed as part of JOB_RESTART. */
1966
1967 return;
1968
1969 fail:
1970 log_unit_warning(UNIT(s), "Failed to schedule restart job: %s", bus_error_message(&error, -r));
1971 service_enter_dead(s, SERVICE_FAILURE_RESOURCES, false);
1972 }
1973
1974 static void service_enter_reload_by_notify(Service *s) {
1975 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1976 int r;
1977
1978 assert(s);
1979
1980 service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), s->timeout_start_usec));
1981 service_set_state(s, SERVICE_RELOAD);
1982
1983 /* service_enter_reload_by_notify is never called during a reload, thus no loops are possible. */
1984 r = manager_propagate_reload(UNIT(s)->manager, UNIT(s), JOB_FAIL, &error);
1985 if (r < 0)
1986 log_unit_warning(UNIT(s), "Failed to schedule propagation of reload: %s", bus_error_message(&error, -r));
1987 }
1988
1989 static void service_enter_reload(Service *s) {
1990 int r;
1991
1992 assert(s);
1993
1994 service_unwatch_control_pid(s);
1995 s->reload_result = SERVICE_SUCCESS;
1996
1997 s->control_command = s->exec_command[SERVICE_EXEC_RELOAD];
1998 if (s->control_command) {
1999 s->control_command_id = SERVICE_EXEC_RELOAD;
2000
2001 r = service_spawn(s,
2002 s->control_command,
2003 s->timeout_start_usec,
2004 EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_IS_CONTROL,
2005 &s->control_pid);
2006 if (r < 0)
2007 goto fail;
2008
2009 service_set_state(s, SERVICE_RELOAD);
2010 } else
2011 service_enter_running(s, SERVICE_SUCCESS);
2012
2013 return;
2014
2015 fail:
2016 log_unit_warning_errno(UNIT(s), r, "Failed to run 'reload' task: %m");
2017 s->reload_result = SERVICE_FAILURE_RESOURCES;
2018 service_enter_running(s, SERVICE_SUCCESS);
2019 }
2020
2021 static void service_run_next_control(Service *s) {
2022 usec_t timeout;
2023 int r;
2024
2025 assert(s);
2026 assert(s->control_command);
2027 assert(s->control_command->command_next);
2028
2029 assert(s->control_command_id != SERVICE_EXEC_START);
2030
2031 s->control_command = s->control_command->command_next;
2032 service_unwatch_control_pid(s);
2033
2034 if (IN_SET(s->state, SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST, SERVICE_RUNNING, SERVICE_RELOAD))
2035 timeout = s->timeout_start_usec;
2036 else
2037 timeout = s->timeout_stop_usec;
2038
2039 r = service_spawn(s,
2040 s->control_command,
2041 timeout,
2042 EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_IS_CONTROL|
2043 (IN_SET(s->control_command_id, SERVICE_EXEC_START_PRE, SERVICE_EXEC_STOP_POST) ? EXEC_APPLY_TTY_STDIN : 0)|
2044 (IN_SET(s->control_command_id, SERVICE_EXEC_STOP, SERVICE_EXEC_STOP_POST) ? EXEC_SETENV_RESULT : 0),
2045 &s->control_pid);
2046 if (r < 0)
2047 goto fail;
2048
2049 return;
2050
2051 fail:
2052 log_unit_warning_errno(UNIT(s), r, "Failed to run next control task: %m");
2053
2054 if (IN_SET(s->state, SERVICE_START_PRE, SERVICE_STOP))
2055 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_RESOURCES);
2056 else if (s->state == SERVICE_STOP_POST)
2057 service_enter_dead(s, SERVICE_FAILURE_RESOURCES, true);
2058 else if (s->state == SERVICE_RELOAD) {
2059 s->reload_result = SERVICE_FAILURE_RESOURCES;
2060 service_enter_running(s, SERVICE_SUCCESS);
2061 } else
2062 service_enter_stop(s, SERVICE_FAILURE_RESOURCES);
2063 }
2064
2065 static void service_run_next_main(Service *s) {
2066 pid_t pid;
2067 int r;
2068
2069 assert(s);
2070 assert(s->main_command);
2071 assert(s->main_command->command_next);
2072 assert(s->type == SERVICE_ONESHOT);
2073
2074 s->main_command = s->main_command->command_next;
2075 service_unwatch_main_pid(s);
2076
2077 r = service_spawn(s,
2078 s->main_command,
2079 s->timeout_start_usec,
2080 EXEC_PASS_FDS|EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_APPLY_TTY_STDIN|EXEC_SET_WATCHDOG,
2081 &pid);
2082 if (r < 0)
2083 goto fail;
2084
2085 service_set_main_pid(s, pid);
2086
2087 return;
2088
2089 fail:
2090 log_unit_warning_errno(UNIT(s), r, "Failed to run next main task: %m");
2091 service_enter_stop(s, SERVICE_FAILURE_RESOURCES);
2092 }
2093
2094 static int service_start(Unit *u) {
2095 Service *s = SERVICE(u);
2096 int r;
2097
2098 assert(s);
2099
2100 /* We cannot fulfill this request right now, try again later
2101 * please! */
2102 if (IN_SET(s->state,
2103 SERVICE_STOP, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
2104 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL))
2105 return -EAGAIN;
2106
2107 /* Already on it! */
2108 if (IN_SET(s->state, SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST))
2109 return 0;
2110
2111 /* A service that will be restarted must be stopped first to
2112 * trigger BindsTo and/or OnFailure dependencies. If a user
2113 * does not want to wait for the holdoff time to elapse, the
2114 * service should be manually restarted, not started. We
2115 * simply return EAGAIN here, so that any start jobs stay
2116 * queued, and assume that the auto restart timer will
2117 * eventually trigger the restart. */
2118 if (s->state == SERVICE_AUTO_RESTART)
2119 return -EAGAIN;
2120
2121 assert(IN_SET(s->state, SERVICE_DEAD, SERVICE_FAILED));
2122
2123 /* Make sure we don't enter a busy loop of some kind. */
2124 r = unit_start_limit_test(u);
2125 if (r < 0) {
2126 service_enter_dead(s, SERVICE_FAILURE_START_LIMIT_HIT, false);
2127 return r;
2128 }
2129
2130 r = unit_acquire_invocation_id(u);
2131 if (r < 0)
2132 return r;
2133
2134 s->result = SERVICE_SUCCESS;
2135 s->reload_result = SERVICE_SUCCESS;
2136 s->main_pid_known = false;
2137 s->main_pid_alien = false;
2138 s->forbid_restart = false;
2139 s->reset_cpu_usage = true;
2140
2141 s->status_text = mfree(s->status_text);
2142 s->status_errno = 0;
2143
2144 s->notify_state = NOTIFY_UNKNOWN;
2145
2146 s->watchdog_override_enable = false;
2147 s->watchdog_override_usec = 0;
2148
2149 /* This is not an automatic restart? Flush the restart counter then */
2150 if (s->flush_n_restarts) {
2151 s->n_restarts = 0;
2152 s->flush_n_restarts = false;
2153 }
2154
2155 service_enter_start_pre(s);
2156 return 1;
2157 }
2158
2159 static int service_stop(Unit *u) {
2160 Service *s = SERVICE(u);
2161
2162 assert(s);
2163
2164 /* Don't create restart jobs from manual stops. */
2165 s->forbid_restart = true;
2166
2167 /* Already on it */
2168 if (IN_SET(s->state,
2169 SERVICE_STOP, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
2170 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL))
2171 return 0;
2172
2173 /* A restart will be scheduled or is in progress. */
2174 if (s->state == SERVICE_AUTO_RESTART) {
2175 service_set_state(s, SERVICE_DEAD);
2176 return 0;
2177 }
2178
2179 /* If there's already something running we go directly into
2180 * kill mode. */
2181 if (IN_SET(s->state, SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST, SERVICE_RELOAD)) {
2182 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_SUCCESS);
2183 return 0;
2184 }
2185
2186 assert(IN_SET(s->state, SERVICE_RUNNING, SERVICE_EXITED));
2187
2188 service_enter_stop(s, SERVICE_SUCCESS);
2189 return 1;
2190 }
2191
2192 static int service_reload(Unit *u) {
2193 Service *s = SERVICE(u);
2194
2195 assert(s);
2196
2197 assert(s->state == SERVICE_RUNNING || s->state == SERVICE_EXITED);
2198
2199 service_enter_reload(s);
2200 return 1;
2201 }
2202
2203 _pure_ static bool service_can_reload(Unit *u) {
2204 Service *s = SERVICE(u);
2205
2206 assert(s);
2207
2208 return !!s->exec_command[SERVICE_EXEC_RELOAD];
2209 }
2210
2211 static unsigned service_exec_command_index(Unit *u, ServiceExecCommand id, ExecCommand *current) {
2212 Service *s = SERVICE(u);
2213 unsigned idx = 0;
2214 ExecCommand *first, *c;
2215
2216 assert(s);
2217
2218 first = s->exec_command[id];
2219
2220 /* Figure out where we are in the list by walking back to the beginning */
2221 for (c = current; c != first; c = c->command_prev)
2222 idx++;
2223
2224 return idx;
2225 }
2226
2227 static int service_serialize_exec_command(Unit *u, FILE *f, ExecCommand *command) {
2228 Service *s = SERVICE(u);
2229 ServiceExecCommand id;
2230 unsigned idx;
2231 const char *type;
2232 char **arg;
2233 _cleanup_free_ char *args = NULL, *p = NULL;
2234 size_t allocated = 0, length = 0;
2235
2236 assert(s);
2237 assert(f);
2238
2239 if (!command)
2240 return 0;
2241
2242 if (command == s->control_command) {
2243 type = "control";
2244 id = s->control_command_id;
2245 } else {
2246 type = "main";
2247 id = SERVICE_EXEC_START;
2248 }
2249
2250 idx = service_exec_command_index(u, id, command);
2251
2252 STRV_FOREACH(arg, command->argv) {
2253 size_t n;
2254 _cleanup_free_ char *e = NULL;
2255
2256 e = xescape(*arg, WHITESPACE);
2257 if (!e)
2258 return -ENOMEM;
2259
2260 n = strlen(e);
2261 if (!GREEDY_REALLOC(args, allocated, length + 1 + n + 1))
2262 return -ENOMEM;
2263
2264 if (length > 0)
2265 args[length++] = ' ';
2266
2267 memcpy(args + length, e, n);
2268 length += n;
2269 }
2270
2271 if (!GREEDY_REALLOC(args, allocated, length + 1))
2272 return -ENOMEM;
2273 args[length++] = 0;
2274
2275 p = xescape(command->path, WHITESPACE);
2276 if (!p)
2277 return -ENOMEM;
2278
2279 fprintf(f, "%s-command=%s %u %s %s\n", type, service_exec_command_to_string(id), idx, p, args);
2280
2281 return 0;
2282 }
2283
2284 static int service_serialize(Unit *u, FILE *f, FDSet *fds) {
2285 Service *s = SERVICE(u);
2286 ServiceFDStore *fs;
2287 int r;
2288
2289 assert(u);
2290 assert(f);
2291 assert(fds);
2292
2293 unit_serialize_item(u, f, "state", service_state_to_string(s->state));
2294 unit_serialize_item(u, f, "result", service_result_to_string(s->result));
2295 unit_serialize_item(u, f, "reload-result", service_result_to_string(s->reload_result));
2296
2297 if (s->control_pid > 0)
2298 unit_serialize_item_format(u, f, "control-pid", PID_FMT, s->control_pid);
2299
2300 if (s->main_pid_known && s->main_pid > 0)
2301 unit_serialize_item_format(u, f, "main-pid", PID_FMT, s->main_pid);
2302
2303 unit_serialize_item(u, f, "main-pid-known", yes_no(s->main_pid_known));
2304 unit_serialize_item(u, f, "bus-name-good", yes_no(s->bus_name_good));
2305 unit_serialize_item(u, f, "bus-name-owner", s->bus_name_owner);
2306
2307 unit_serialize_item_format(u, f, "n-restarts", "%u", s->n_restarts);
2308 unit_serialize_item(u, f, "n-restarts", yes_no(s->flush_n_restarts));
2309
2310 r = unit_serialize_item_escaped(u, f, "status-text", s->status_text);
2311 if (r < 0)
2312 return r;
2313
2314 service_serialize_exec_command(u, f, s->control_command);
2315 service_serialize_exec_command(u, f, s->main_command);
2316
2317 r = unit_serialize_item_fd(u, f, fds, "stdin-fd", s->stdin_fd);
2318 if (r < 0)
2319 return r;
2320 r = unit_serialize_item_fd(u, f, fds, "stdout-fd", s->stdout_fd);
2321 if (r < 0)
2322 return r;
2323 r = unit_serialize_item_fd(u, f, fds, "stderr-fd", s->stderr_fd);
2324 if (r < 0)
2325 return r;
2326
2327 if (UNIT_ISSET(s->accept_socket)) {
2328 r = unit_serialize_item(u, f, "accept-socket", UNIT_DEREF(s->accept_socket)->id);
2329 if (r < 0)
2330 return r;
2331 }
2332
2333 r = unit_serialize_item_fd(u, f, fds, "socket-fd", s->socket_fd);
2334 if (r < 0)
2335 return r;
2336
2337 LIST_FOREACH(fd_store, fs, s->fd_store) {
2338 _cleanup_free_ char *c = NULL;
2339 int copy;
2340
2341 copy = fdset_put_dup(fds, fs->fd);
2342 if (copy < 0)
2343 return copy;
2344
2345 c = cescape(fs->fdname);
2346
2347 unit_serialize_item_format(u, f, "fd-store-fd", "%i %s", copy, strempty(c));
2348 }
2349
2350 if (s->main_exec_status.pid > 0) {
2351 unit_serialize_item_format(u, f, "main-exec-status-pid", PID_FMT, s->main_exec_status.pid);
2352 dual_timestamp_serialize(f, "main-exec-status-start", &s->main_exec_status.start_timestamp);
2353 dual_timestamp_serialize(f, "main-exec-status-exit", &s->main_exec_status.exit_timestamp);
2354
2355 if (dual_timestamp_is_set(&s->main_exec_status.exit_timestamp)) {
2356 unit_serialize_item_format(u, f, "main-exec-status-code", "%i", s->main_exec_status.code);
2357 unit_serialize_item_format(u, f, "main-exec-status-status", "%i", s->main_exec_status.status);
2358 }
2359 }
2360
2361 dual_timestamp_serialize(f, "watchdog-timestamp", &s->watchdog_timestamp);
2362
2363 unit_serialize_item(u, f, "forbid-restart", yes_no(s->forbid_restart));
2364
2365 if (s->watchdog_override_enable)
2366 unit_serialize_item_format(u, f, "watchdog-override-usec", USEC_FMT, s->watchdog_override_usec);
2367
2368 return 0;
2369 }
2370
2371 static int service_deserialize_exec_command(Unit *u, const char *key, const char *value) {
2372 Service *s = SERVICE(u);
2373 int r;
2374 unsigned idx = 0, i;
2375 bool control, found = false;
2376 ServiceExecCommand id = _SERVICE_EXEC_COMMAND_INVALID;
2377 ExecCommand *command = NULL;
2378 _cleanup_free_ char *path = NULL;
2379 _cleanup_strv_free_ char **argv = NULL;
2380
2381 enum ExecCommandState {
2382 STATE_EXEC_COMMAND_TYPE,
2383 STATE_EXEC_COMMAND_INDEX,
2384 STATE_EXEC_COMMAND_PATH,
2385 STATE_EXEC_COMMAND_ARGS,
2386 _STATE_EXEC_COMMAND_MAX,
2387 _STATE_EXEC_COMMAND_INVALID = -1,
2388 } state;
2389
2390 assert(s);
2391 assert(key);
2392 assert(value);
2393
2394 control = streq(key, "control-command");
2395
2396 state = STATE_EXEC_COMMAND_TYPE;
2397
2398 for (;;) {
2399 _cleanup_free_ char *arg = NULL;
2400
2401 r = extract_first_word(&value, &arg, NULL, EXTRACT_CUNESCAPE);
2402 if (r == 0)
2403 break;
2404 else if (r < 0)
2405 return r;
2406
2407 switch (state) {
2408 case STATE_EXEC_COMMAND_TYPE:
2409 id = service_exec_command_from_string(arg);
2410 if (id < 0)
2411 return -EINVAL;
2412
2413 state = STATE_EXEC_COMMAND_INDEX;
2414 break;
2415 case STATE_EXEC_COMMAND_INDEX:
2416 r = safe_atou(arg, &idx);
2417 if (r < 0)
2418 return -EINVAL;
2419
2420 state = STATE_EXEC_COMMAND_PATH;
2421 break;
2422 case STATE_EXEC_COMMAND_PATH:
2423 path = arg;
2424 arg = NULL;
2425 state = STATE_EXEC_COMMAND_ARGS;
2426
2427 if (!path_is_absolute(path))
2428 return -EINVAL;
2429 break;
2430 case STATE_EXEC_COMMAND_ARGS:
2431 r = strv_extend(&argv, arg);
2432 if (r < 0)
2433 return -ENOMEM;
2434 break;
2435 default:
2436 assert_not_reached("Unknown error at deserialization of exec command");
2437 break;
2438 }
2439 }
2440
2441 if (state != STATE_EXEC_COMMAND_ARGS)
2442 return -EINVAL;
2443
2444 /* Let's check whether exec command on given offset matches data that we just deserialized */
2445 for (command = s->exec_command[id], i = 0; command; command = command->command_next, i++) {
2446 if (i != idx)
2447 continue;
2448
2449 found = strv_equal(argv, command->argv) && streq(command->path, path);
2450 break;
2451 }
2452
2453 if (!found) {
2454 /* Command at the index we serialized is different, let's look for command that exactly
2455 * matches but is on different index. If there is no such command we will not resume execution. */
2456 for (command = s->exec_command[id]; command; command = command->command_next)
2457 if (strv_equal(command->argv, argv) && streq(command->path, path))
2458 break;
2459 }
2460
2461 if (command && control)
2462 s->control_command = command;
2463 else if (command)
2464 s->main_command = command;
2465 else
2466 log_unit_warning(u, "Current command vanished from the unit file, execution of the command list won't be resumed.");
2467
2468 return 0;
2469 }
2470
2471 static int service_deserialize_item(Unit *u, const char *key, const char *value, FDSet *fds) {
2472 Service *s = SERVICE(u);
2473 int r;
2474
2475 assert(u);
2476 assert(key);
2477 assert(value);
2478 assert(fds);
2479
2480 if (streq(key, "state")) {
2481 ServiceState state;
2482
2483 state = service_state_from_string(value);
2484 if (state < 0)
2485 log_unit_debug(u, "Failed to parse state value: %s", value);
2486 else
2487 s->deserialized_state = state;
2488 } else if (streq(key, "result")) {
2489 ServiceResult f;
2490
2491 f = service_result_from_string(value);
2492 if (f < 0)
2493 log_unit_debug(u, "Failed to parse result value: %s", value);
2494 else if (f != SERVICE_SUCCESS)
2495 s->result = f;
2496
2497 } else if (streq(key, "reload-result")) {
2498 ServiceResult f;
2499
2500 f = service_result_from_string(value);
2501 if (f < 0)
2502 log_unit_debug(u, "Failed to parse reload result value: %s", value);
2503 else if (f != SERVICE_SUCCESS)
2504 s->reload_result = f;
2505
2506 } else if (streq(key, "control-pid")) {
2507 pid_t pid;
2508
2509 if (parse_pid(value, &pid) < 0)
2510 log_unit_debug(u, "Failed to parse control-pid value: %s", value);
2511 else
2512 s->control_pid = pid;
2513 } else if (streq(key, "main-pid")) {
2514 pid_t pid;
2515
2516 if (parse_pid(value, &pid) < 0)
2517 log_unit_debug(u, "Failed to parse main-pid value: %s", value);
2518 else {
2519 service_set_main_pid(s, pid);
2520 unit_watch_pid(UNIT(s), pid);
2521 }
2522 } else if (streq(key, "main-pid-known")) {
2523 int b;
2524
2525 b = parse_boolean(value);
2526 if (b < 0)
2527 log_unit_debug(u, "Failed to parse main-pid-known value: %s", value);
2528 else
2529 s->main_pid_known = b;
2530 } else if (streq(key, "bus-name-good")) {
2531 int b;
2532
2533 b = parse_boolean(value);
2534 if (b < 0)
2535 log_unit_debug(u, "Failed to parse bus-name-good value: %s", value);
2536 else
2537 s->bus_name_good = b;
2538 } else if (streq(key, "bus-name-owner")) {
2539 r = free_and_strdup(&s->bus_name_owner, value);
2540 if (r < 0)
2541 log_unit_error_errno(u, r, "Unable to deserialize current bus owner %s: %m", value);
2542 } else if (streq(key, "status-text")) {
2543 char *t;
2544
2545 r = cunescape(value, 0, &t);
2546 if (r < 0)
2547 log_unit_debug_errno(u, r, "Failed to unescape status text: %s", value);
2548 else {
2549 free(s->status_text);
2550 s->status_text = t;
2551 }
2552
2553 } else if (streq(key, "accept-socket")) {
2554 Unit *socket;
2555
2556 r = manager_load_unit(u->manager, value, NULL, NULL, &socket);
2557 if (r < 0)
2558 log_unit_debug_errno(u, r, "Failed to load accept-socket unit: %s", value);
2559 else {
2560 unit_ref_set(&s->accept_socket, socket);
2561 SOCKET(socket)->n_connections++;
2562 }
2563
2564 } else if (streq(key, "socket-fd")) {
2565 int fd;
2566
2567 if (safe_atoi(value, &fd) < 0 || fd < 0 || !fdset_contains(fds, fd))
2568 log_unit_debug(u, "Failed to parse socket-fd value: %s", value);
2569 else {
2570 asynchronous_close(s->socket_fd);
2571 s->socket_fd = fdset_remove(fds, fd);
2572 }
2573 } else if (streq(key, "fd-store-fd")) {
2574 const char *fdv;
2575 size_t pf;
2576 int fd;
2577
2578 pf = strcspn(value, WHITESPACE);
2579 fdv = strndupa(value, pf);
2580
2581 if (safe_atoi(fdv, &fd) < 0 || fd < 0 || !fdset_contains(fds, fd))
2582 log_unit_debug(u, "Failed to parse fd-store-fd value: %s", value);
2583 else {
2584 _cleanup_free_ char *t = NULL;
2585 const char *fdn;
2586
2587 fdn = value + pf;
2588 fdn += strspn(fdn, WHITESPACE);
2589 (void) cunescape(fdn, 0, &t);
2590
2591 r = service_add_fd_store(s, fd, t);
2592 if (r < 0)
2593 log_unit_error_errno(u, r, "Failed to add fd to store: %m");
2594 else
2595 fdset_remove(fds, fd);
2596 }
2597
2598 } else if (streq(key, "main-exec-status-pid")) {
2599 pid_t pid;
2600
2601 if (parse_pid(value, &pid) < 0)
2602 log_unit_debug(u, "Failed to parse main-exec-status-pid value: %s", value);
2603 else
2604 s->main_exec_status.pid = pid;
2605 } else if (streq(key, "main-exec-status-code")) {
2606 int i;
2607
2608 if (safe_atoi(value, &i) < 0)
2609 log_unit_debug(u, "Failed to parse main-exec-status-code value: %s", value);
2610 else
2611 s->main_exec_status.code = i;
2612 } else if (streq(key, "main-exec-status-status")) {
2613 int i;
2614
2615 if (safe_atoi(value, &i) < 0)
2616 log_unit_debug(u, "Failed to parse main-exec-status-status value: %s", value);
2617 else
2618 s->main_exec_status.status = i;
2619 } else if (streq(key, "main-exec-status-start"))
2620 dual_timestamp_deserialize(value, &s->main_exec_status.start_timestamp);
2621 else if (streq(key, "main-exec-status-exit"))
2622 dual_timestamp_deserialize(value, &s->main_exec_status.exit_timestamp);
2623 else if (streq(key, "watchdog-timestamp"))
2624 dual_timestamp_deserialize(value, &s->watchdog_timestamp);
2625 else if (streq(key, "forbid-restart")) {
2626 int b;
2627
2628 b = parse_boolean(value);
2629 if (b < 0)
2630 log_unit_debug(u, "Failed to parse forbid-restart value: %s", value);
2631 else
2632 s->forbid_restart = b;
2633 } else if (streq(key, "stdin-fd")) {
2634 int fd;
2635
2636 if (safe_atoi(value, &fd) < 0 || fd < 0 || !fdset_contains(fds, fd))
2637 log_unit_debug(u, "Failed to parse stdin-fd value: %s", value);
2638 else {
2639 asynchronous_close(s->stdin_fd);
2640 s->stdin_fd = fdset_remove(fds, fd);
2641 s->exec_context.stdio_as_fds = true;
2642 }
2643 } else if (streq(key, "stdout-fd")) {
2644 int fd;
2645
2646 if (safe_atoi(value, &fd) < 0 || fd < 0 || !fdset_contains(fds, fd))
2647 log_unit_debug(u, "Failed to parse stdout-fd value: %s", value);
2648 else {
2649 asynchronous_close(s->stdout_fd);
2650 s->stdout_fd = fdset_remove(fds, fd);
2651 s->exec_context.stdio_as_fds = true;
2652 }
2653 } else if (streq(key, "stderr-fd")) {
2654 int fd;
2655
2656 if (safe_atoi(value, &fd) < 0 || fd < 0 || !fdset_contains(fds, fd))
2657 log_unit_debug(u, "Failed to parse stderr-fd value: %s", value);
2658 else {
2659 asynchronous_close(s->stderr_fd);
2660 s->stderr_fd = fdset_remove(fds, fd);
2661 s->exec_context.stdio_as_fds = true;
2662 }
2663 } else if (streq(key, "watchdog-override-usec")) {
2664 usec_t watchdog_override_usec;
2665 if (timestamp_deserialize(value, &watchdog_override_usec) < 0)
2666 log_unit_debug(u, "Failed to parse watchdog_override_usec value: %s", value);
2667 else {
2668 s->watchdog_override_enable = true;
2669 s->watchdog_override_usec = watchdog_override_usec;
2670 }
2671 } else if (STR_IN_SET(key, "main-command", "control-command")) {
2672 r = service_deserialize_exec_command(u, key, value);
2673 if (r < 0)
2674 log_unit_debug_errno(u, r, "Failed to parse serialized command \"%s\": %m", value);
2675
2676 } else if (streq(key, "n-restarts")) {
2677 r = safe_atou(value, &s->n_restarts);
2678 if (r < 0)
2679 log_unit_debug_errno(u, r, "Failed to parse serialized restart counter '%s': %m", value);
2680
2681 } else if (streq(key, "flush-n-restarts")) {
2682 r = parse_boolean(value);
2683 if (r < 0)
2684 log_unit_debug_errno(u, r, "Failed to parse serialized flush restart counter setting '%s': %m", value);
2685 else
2686 s->flush_n_restarts = r;
2687 } else
2688 log_unit_debug(u, "Unknown serialization key: %s", key);
2689
2690 return 0;
2691 }
2692
2693 _pure_ static UnitActiveState service_active_state(Unit *u) {
2694 const UnitActiveState *table;
2695
2696 assert(u);
2697
2698 table = SERVICE(u)->type == SERVICE_IDLE ? state_translation_table_idle : state_translation_table;
2699
2700 return table[SERVICE(u)->state];
2701 }
2702
2703 static const char *service_sub_state_to_string(Unit *u) {
2704 assert(u);
2705
2706 return service_state_to_string(SERVICE(u)->state);
2707 }
2708
2709 static bool service_check_gc(Unit *u) {
2710 Service *s = SERVICE(u);
2711
2712 assert(s);
2713
2714 /* Never clean up services that still have a process around,
2715 * even if the service is formally dead. */
2716 if (cgroup_good(s) > 0 ||
2717 main_pid_good(s) > 0 ||
2718 control_pid_good(s) > 0)
2719 return true;
2720
2721 return false;
2722 }
2723
2724 static int service_retry_pid_file(Service *s) {
2725 int r;
2726
2727 assert(s->pid_file);
2728 assert(s->state == SERVICE_START || s->state == SERVICE_START_POST);
2729
2730 r = service_load_pid_file(s, false);
2731 if (r < 0)
2732 return r;
2733
2734 service_unwatch_pid_file(s);
2735
2736 service_enter_running(s, SERVICE_SUCCESS);
2737 return 0;
2738 }
2739
2740 static int service_watch_pid_file(Service *s) {
2741 int r;
2742
2743 log_unit_debug(UNIT(s), "Setting watch for PID file %s", s->pid_file_pathspec->path);
2744
2745 r = path_spec_watch(s->pid_file_pathspec, service_dispatch_io);
2746 if (r < 0)
2747 goto fail;
2748
2749 /* the pidfile might have appeared just before we set the watch */
2750 log_unit_debug(UNIT(s), "Trying to read PID file %s in case it changed", s->pid_file_pathspec->path);
2751 service_retry_pid_file(s);
2752
2753 return 0;
2754 fail:
2755 log_unit_error_errno(UNIT(s), r, "Failed to set a watch for PID file %s: %m", s->pid_file_pathspec->path);
2756 service_unwatch_pid_file(s);
2757 return r;
2758 }
2759
2760 static int service_demand_pid_file(Service *s) {
2761 PathSpec *ps;
2762
2763 assert(s->pid_file);
2764 assert(!s->pid_file_pathspec);
2765
2766 ps = new0(PathSpec, 1);
2767 if (!ps)
2768 return -ENOMEM;
2769
2770 ps->unit = UNIT(s);
2771 ps->path = strdup(s->pid_file);
2772 if (!ps->path) {
2773 free(ps);
2774 return -ENOMEM;
2775 }
2776
2777 path_kill_slashes(ps->path);
2778
2779 /* PATH_CHANGED would not be enough. There are daemons (sendmail) that
2780 * keep their PID file open all the time. */
2781 ps->type = PATH_MODIFIED;
2782 ps->inotify_fd = -1;
2783
2784 s->pid_file_pathspec = ps;
2785
2786 return service_watch_pid_file(s);
2787 }
2788
2789 static int service_dispatch_io(sd_event_source *source, int fd, uint32_t events, void *userdata) {
2790 PathSpec *p = userdata;
2791 Service *s;
2792
2793 assert(p);
2794
2795 s = SERVICE(p->unit);
2796
2797 assert(s);
2798 assert(fd >= 0);
2799 assert(s->state == SERVICE_START || s->state == SERVICE_START_POST);
2800 assert(s->pid_file_pathspec);
2801 assert(path_spec_owns_inotify_fd(s->pid_file_pathspec, fd));
2802
2803 log_unit_debug(UNIT(s), "inotify event");
2804
2805 if (path_spec_fd_event(p, events) < 0)
2806 goto fail;
2807
2808 if (service_retry_pid_file(s) == 0)
2809 return 0;
2810
2811 if (service_watch_pid_file(s) < 0)
2812 goto fail;
2813
2814 return 0;
2815
2816 fail:
2817 service_unwatch_pid_file(s);
2818 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_RESOURCES);
2819 return 0;
2820 }
2821
2822 static void service_notify_cgroup_empty_event(Unit *u) {
2823 Service *s = SERVICE(u);
2824
2825 assert(u);
2826
2827 log_unit_debug(u, "cgroup is empty");
2828
2829 switch (s->state) {
2830
2831 /* Waiting for SIGCHLD is usually more interesting,
2832 * because it includes return codes/signals. Which is
2833 * why we ignore the cgroup events for most cases,
2834 * except when we don't know pid which to expect the
2835 * SIGCHLD for. */
2836
2837 case SERVICE_START:
2838 if (s->type == SERVICE_NOTIFY) {
2839 /* No chance of getting a ready notification anymore */
2840 service_enter_stop_post(s, SERVICE_FAILURE_PROTOCOL);
2841 break;
2842 }
2843
2844 /* Fall through */
2845
2846 case SERVICE_START_POST:
2847 if (s->pid_file_pathspec) {
2848 /* Give up hoping for the daemon to write its PID file */
2849 log_unit_warning(u, "Daemon never wrote its PID file. Failing.");
2850
2851 service_unwatch_pid_file(s);
2852 if (s->state == SERVICE_START)
2853 service_enter_stop_post(s, SERVICE_FAILURE_PROTOCOL);
2854 else
2855 service_enter_stop(s, SERVICE_FAILURE_PROTOCOL);
2856 }
2857 break;
2858
2859 case SERVICE_RUNNING:
2860 /* service_enter_running() will figure out what to do */
2861 service_enter_running(s, SERVICE_SUCCESS);
2862 break;
2863
2864 case SERVICE_STOP_SIGABRT:
2865 case SERVICE_STOP_SIGTERM:
2866 case SERVICE_STOP_SIGKILL:
2867
2868 if (main_pid_good(s) <= 0 && !control_pid_good(s))
2869 service_enter_stop_post(s, SERVICE_SUCCESS);
2870
2871 break;
2872
2873 case SERVICE_STOP_POST:
2874 case SERVICE_FINAL_SIGTERM:
2875 case SERVICE_FINAL_SIGKILL:
2876 if (main_pid_good(s) <= 0 && !control_pid_good(s))
2877 service_enter_dead(s, SERVICE_SUCCESS, true);
2878
2879 break;
2880
2881 default:
2882 ;
2883 }
2884 }
2885
2886 static void service_sigchld_event(Unit *u, pid_t pid, int code, int status) {
2887 Service *s = SERVICE(u);
2888 ServiceResult f;
2889
2890 assert(s);
2891 assert(pid >= 0);
2892
2893 if (is_clean_exit(code, status, s->type == SERVICE_ONESHOT ? EXIT_CLEAN_COMMAND : EXIT_CLEAN_DAEMON, &s->success_status))
2894 f = SERVICE_SUCCESS;
2895 else if (code == CLD_EXITED)
2896 f = SERVICE_FAILURE_EXIT_CODE;
2897 else if (code == CLD_KILLED)
2898 f = SERVICE_FAILURE_SIGNAL;
2899 else if (code == CLD_DUMPED)
2900 f = SERVICE_FAILURE_CORE_DUMP;
2901 else
2902 assert_not_reached("Unknown code");
2903
2904 if (s->main_pid == pid) {
2905 /* Forking services may occasionally move to a new PID.
2906 * As long as they update the PID file before exiting the old
2907 * PID, they're fine. */
2908 if (service_load_pid_file(s, false) == 0)
2909 return;
2910
2911 s->main_pid = 0;
2912 exec_status_exit(&s->main_exec_status, &s->exec_context, pid, code, status);
2913
2914 if (s->main_command) {
2915 /* If this is not a forking service than the
2916 * main process got started and hence we copy
2917 * the exit status so that it is recorded both
2918 * as main and as control process exit
2919 * status */
2920
2921 s->main_command->exec_status = s->main_exec_status;
2922
2923 if (s->main_command->flags & EXEC_COMMAND_IGNORE_FAILURE)
2924 f = SERVICE_SUCCESS;
2925 } else if (s->exec_command[SERVICE_EXEC_START]) {
2926
2927 /* If this is a forked process, then we should
2928 * ignore the return value if this was
2929 * configured for the starter process */
2930
2931 if (s->exec_command[SERVICE_EXEC_START]->flags & EXEC_COMMAND_IGNORE_FAILURE)
2932 f = SERVICE_SUCCESS;
2933 }
2934
2935 /* When this is a successful exit, let's log about the exit code on DEBUG level. If this is a failure
2936 * and the process exited on its own via exit(), then let's make this a NOTICE, under the assumption
2937 * that the service already logged the reason at a higher log level on its own. However, if the service
2938 * died due to a signal, then it most likely didn't say anything about any reason, hence let's raise
2939 * our log level to WARNING then. */
2940
2941 log_struct(f == SERVICE_SUCCESS ? LOG_DEBUG :
2942 (code == CLD_EXITED ? LOG_NOTICE : LOG_WARNING),
2943 LOG_UNIT_MESSAGE(u, "Main process exited, code=%s, status=%i/%s",
2944 sigchld_code_to_string(code), status,
2945 strna(code == CLD_EXITED
2946 ? exit_status_to_string(status, EXIT_STATUS_FULL)
2947 : signal_to_string(status))),
2948 "EXIT_CODE=%s", sigchld_code_to_string(code),
2949 "EXIT_STATUS=%i", status,
2950 LOG_UNIT_ID(u),
2951 NULL);
2952
2953 if (s->result == SERVICE_SUCCESS)
2954 s->result = f;
2955
2956 if (s->main_command &&
2957 s->main_command->command_next &&
2958 s->type == SERVICE_ONESHOT &&
2959 f == SERVICE_SUCCESS) {
2960
2961 /* There is another command to *
2962 * execute, so let's do that. */
2963
2964 log_unit_debug(u, "Running next main command for state %s.", service_state_to_string(s->state));
2965 service_run_next_main(s);
2966
2967 } else {
2968
2969 /* The service exited, so the service is officially
2970 * gone. */
2971 s->main_command = NULL;
2972
2973 switch (s->state) {
2974
2975 case SERVICE_START_POST:
2976 case SERVICE_RELOAD:
2977 case SERVICE_STOP:
2978 /* Need to wait until the operation is
2979 * done */
2980 break;
2981
2982 case SERVICE_START:
2983 if (s->type == SERVICE_ONESHOT) {
2984 /* This was our main goal, so let's go on */
2985 if (f == SERVICE_SUCCESS)
2986 service_enter_start_post(s);
2987 else
2988 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
2989 break;
2990 } else if (s->type == SERVICE_NOTIFY) {
2991 /* Only enter running through a notification, so that the
2992 * SERVICE_START state signifies that no ready notification
2993 * has been received */
2994 if (f != SERVICE_SUCCESS)
2995 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
2996 else if (!s->remain_after_exit)
2997 /* The service has never been active */
2998 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_PROTOCOL);
2999 break;
3000 }
3001
3002 /* Fall through */
3003
3004 case SERVICE_RUNNING:
3005 service_enter_running(s, f);
3006 break;
3007
3008 case SERVICE_STOP_SIGABRT:
3009 case SERVICE_STOP_SIGTERM:
3010 case SERVICE_STOP_SIGKILL:
3011
3012 if (!control_pid_good(s))
3013 service_enter_stop_post(s, f);
3014
3015 /* If there is still a control process, wait for that first */
3016 break;
3017
3018 case SERVICE_STOP_POST:
3019 case SERVICE_FINAL_SIGTERM:
3020 case SERVICE_FINAL_SIGKILL:
3021
3022 if (!control_pid_good(s))
3023 service_enter_dead(s, f, true);
3024 break;
3025
3026 default:
3027 assert_not_reached("Uh, main process died at wrong time.");
3028 }
3029 }
3030
3031 } else if (s->control_pid == pid) {
3032 s->control_pid = 0;
3033
3034 if (s->control_command) {
3035 exec_status_exit(&s->control_command->exec_status, &s->exec_context, pid, code, status);
3036
3037 if (s->control_command->flags & EXEC_COMMAND_IGNORE_FAILURE)
3038 f = SERVICE_SUCCESS;
3039 }
3040
3041 log_unit_full(u, f == SERVICE_SUCCESS ? LOG_DEBUG : LOG_NOTICE, 0,
3042 "Control process exited, code=%s status=%i",
3043 sigchld_code_to_string(code), status);
3044
3045 if (s->result == SERVICE_SUCCESS)
3046 s->result = f;
3047
3048 /* Immediately get rid of the cgroup, so that the
3049 * kernel doesn't delay the cgroup empty messages for
3050 * the service cgroup any longer than necessary */
3051 service_kill_control_processes(s);
3052
3053 if (s->control_command &&
3054 s->control_command->command_next &&
3055 f == SERVICE_SUCCESS) {
3056
3057 /* There is another command to *
3058 * execute, so let's do that. */
3059
3060 log_unit_debug(u, "Running next control command for state %s.", service_state_to_string(s->state));
3061 service_run_next_control(s);
3062
3063 } else {
3064 /* No further commands for this step, so let's
3065 * figure out what to do next */
3066
3067 s->control_command = NULL;
3068 s->control_command_id = _SERVICE_EXEC_COMMAND_INVALID;
3069
3070 log_unit_debug(u, "Got final SIGCHLD for state %s.", service_state_to_string(s->state));
3071
3072 switch (s->state) {
3073
3074 case SERVICE_START_PRE:
3075 if (f == SERVICE_SUCCESS)
3076 service_enter_start(s);
3077 else
3078 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3079 break;
3080
3081 case SERVICE_START:
3082 if (s->type != SERVICE_FORKING)
3083 /* Maybe spurious event due to a reload that changed the type? */
3084 break;
3085
3086 if (f != SERVICE_SUCCESS) {
3087 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3088 break;
3089 }
3090
3091 if (s->pid_file) {
3092 bool has_start_post;
3093 int r;
3094
3095 /* Let's try to load the pid file here if we can.
3096 * The PID file might actually be created by a START_POST
3097 * script. In that case don't worry if the loading fails. */
3098
3099 has_start_post = !!s->exec_command[SERVICE_EXEC_START_POST];
3100 r = service_load_pid_file(s, !has_start_post);
3101 if (!has_start_post && r < 0) {
3102 r = service_demand_pid_file(s);
3103 if (r < 0 || !cgroup_good(s))
3104 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_PROTOCOL);
3105 break;
3106 }
3107 } else
3108 service_search_main_pid(s);
3109
3110 service_enter_start_post(s);
3111 break;
3112
3113 case SERVICE_START_POST:
3114 if (f != SERVICE_SUCCESS) {
3115 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3116 break;
3117 }
3118
3119 if (s->pid_file) {
3120 int r;
3121
3122 r = service_load_pid_file(s, true);
3123 if (r < 0) {
3124 r = service_demand_pid_file(s);
3125 if (r < 0 || !cgroup_good(s))
3126 service_enter_stop(s, SERVICE_FAILURE_PROTOCOL);
3127 break;
3128 }
3129 } else
3130 service_search_main_pid(s);
3131
3132 service_enter_running(s, SERVICE_SUCCESS);
3133 break;
3134
3135 case SERVICE_RELOAD:
3136 if (f == SERVICE_SUCCESS)
3137 if (service_load_pid_file(s, true) < 0)
3138 service_search_main_pid(s);
3139
3140 s->reload_result = f;
3141 service_enter_running(s, SERVICE_SUCCESS);
3142 break;
3143
3144 case SERVICE_STOP:
3145 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3146 break;
3147
3148 case SERVICE_STOP_SIGABRT:
3149 case SERVICE_STOP_SIGTERM:
3150 case SERVICE_STOP_SIGKILL:
3151 if (main_pid_good(s) <= 0)
3152 service_enter_stop_post(s, f);
3153
3154 /* If there is still a service
3155 * process around, wait until
3156 * that one quit, too */
3157 break;
3158
3159 case SERVICE_STOP_POST:
3160 case SERVICE_FINAL_SIGTERM:
3161 case SERVICE_FINAL_SIGKILL:
3162 if (main_pid_good(s) <= 0)
3163 service_enter_dead(s, f, true);
3164 break;
3165
3166 default:
3167 assert_not_reached("Uh, control process died at wrong time.");
3168 }
3169 }
3170 }
3171
3172 /* Notify clients about changed exit status */
3173 unit_add_to_dbus_queue(u);
3174
3175 /* We got one SIGCHLD for the service, let's watch all
3176 * processes that are now running of the service, and watch
3177 * that. Among the PIDs we then watch will be children
3178 * reassigned to us, which hopefully allows us to identify
3179 * when all children are gone */
3180 unit_tidy_watch_pids(u, s->main_pid, s->control_pid);
3181 unit_watch_all_pids(u);
3182
3183 /* If the PID set is empty now, then let's finish this off
3184 (On unified we use proper notifications) */
3185 if (cg_unified_controller(SYSTEMD_CGROUP_CONTROLLER) == 0 && set_isempty(u->pids))
3186 service_notify_cgroup_empty_event(u);
3187 }
3188
3189 static int service_dispatch_timer(sd_event_source *source, usec_t usec, void *userdata) {
3190 Service *s = SERVICE(userdata);
3191
3192 assert(s);
3193 assert(source == s->timer_event_source);
3194
3195 switch (s->state) {
3196
3197 case SERVICE_START_PRE:
3198 case SERVICE_START:
3199 log_unit_warning(UNIT(s), "%s operation timed out. Terminating.", s->state == SERVICE_START ? "Start" : "Start-pre");
3200 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_TIMEOUT);
3201 break;
3202
3203 case SERVICE_START_POST:
3204 log_unit_warning(UNIT(s), "Start-post operation timed out. Stopping.");
3205 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_TIMEOUT);
3206 break;
3207
3208 case SERVICE_RUNNING:
3209 log_unit_warning(UNIT(s), "Service reached runtime time limit. Stopping.");
3210 service_enter_stop(s, SERVICE_FAILURE_TIMEOUT);
3211 break;
3212
3213 case SERVICE_RELOAD:
3214 log_unit_warning(UNIT(s), "Reload operation timed out. Killing reload process.");
3215 service_kill_control_processes(s);
3216 s->reload_result = SERVICE_FAILURE_TIMEOUT;
3217 service_enter_running(s, SERVICE_SUCCESS);
3218 break;
3219
3220 case SERVICE_STOP:
3221 log_unit_warning(UNIT(s), "Stopping timed out. Terminating.");
3222 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_TIMEOUT);
3223 break;
3224
3225 case SERVICE_STOP_SIGABRT:
3226 log_unit_warning(UNIT(s), "State 'stop-sigabrt' timed out. Terminating.");
3227 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_TIMEOUT);
3228 break;
3229
3230 case SERVICE_STOP_SIGTERM:
3231 if (s->kill_context.send_sigkill) {
3232 log_unit_warning(UNIT(s), "State 'stop-sigterm' timed out. Killing.");
3233 service_enter_signal(s, SERVICE_STOP_SIGKILL, SERVICE_FAILURE_TIMEOUT);
3234 } else {
3235 log_unit_warning(UNIT(s), "State 'stop-sigterm' timed out. Skipping SIGKILL.");
3236 service_enter_stop_post(s, SERVICE_FAILURE_TIMEOUT);
3237 }
3238
3239 break;
3240
3241 case SERVICE_STOP_SIGKILL:
3242 /* Uh, we sent a SIGKILL and it is still not gone?
3243 * Must be something we cannot kill, so let's just be
3244 * weirded out and continue */
3245
3246 log_unit_warning(UNIT(s), "Processes still around after SIGKILL. Ignoring.");
3247 service_enter_stop_post(s, SERVICE_FAILURE_TIMEOUT);
3248 break;
3249
3250 case SERVICE_STOP_POST:
3251 log_unit_warning(UNIT(s), "State 'stop-post' timed out. Terminating.");
3252 service_enter_signal(s, SERVICE_FINAL_SIGTERM, SERVICE_FAILURE_TIMEOUT);
3253 break;
3254
3255 case SERVICE_FINAL_SIGTERM:
3256 if (s->kill_context.send_sigkill) {
3257 log_unit_warning(UNIT(s), "State 'stop-final-sigterm' timed out. Killing.");
3258 service_enter_signal(s, SERVICE_FINAL_SIGKILL, SERVICE_FAILURE_TIMEOUT);
3259 } else {
3260 log_unit_warning(UNIT(s), "State 'stop-final-sigterm' timed out. Skipping SIGKILL. Entering failed mode.");
3261 service_enter_dead(s, SERVICE_FAILURE_TIMEOUT, false);
3262 }
3263
3264 break;
3265
3266 case SERVICE_FINAL_SIGKILL:
3267 log_unit_warning(UNIT(s), "Processes still around after final SIGKILL. Entering failed mode.");
3268 service_enter_dead(s, SERVICE_FAILURE_TIMEOUT, true);
3269 break;
3270
3271 case SERVICE_AUTO_RESTART:
3272 log_unit_info(UNIT(s),
3273 s->restart_usec > 0 ?
3274 "Service hold-off time over, scheduling restart." :
3275 "Service has no hold-off time, scheduling restart.");
3276 service_enter_restart(s);
3277 break;
3278
3279 default:
3280 assert_not_reached("Timeout at wrong time.");
3281 }
3282
3283 return 0;
3284 }
3285
3286 static int service_dispatch_watchdog(sd_event_source *source, usec_t usec, void *userdata) {
3287 Service *s = SERVICE(userdata);
3288 char t[FORMAT_TIMESPAN_MAX];
3289 usec_t watchdog_usec;
3290
3291 assert(s);
3292 assert(source == s->watchdog_event_source);
3293
3294 watchdog_usec = service_get_watchdog_usec(s);
3295
3296 log_unit_error(UNIT(s), "Watchdog timeout (limit %s)!",
3297 format_timespan(t, sizeof(t), watchdog_usec, 1));
3298
3299 service_enter_signal(s, SERVICE_STOP_SIGABRT, SERVICE_FAILURE_WATCHDOG);
3300
3301 return 0;
3302 }
3303
3304 static void service_notify_message(Unit *u, pid_t pid, char **tags, FDSet *fds) {
3305 Service *s = SERVICE(u);
3306 _cleanup_free_ char *cc = NULL;
3307 bool notify_dbus = false;
3308 const char *e;
3309
3310 assert(u);
3311
3312 cc = strv_join(tags, ", ");
3313
3314 if (s->notify_access == NOTIFY_NONE) {
3315 log_unit_warning(u, "Got notification message from PID "PID_FMT", but reception is disabled.", pid);
3316 return;
3317 } else if (s->notify_access == NOTIFY_MAIN && pid != s->main_pid) {
3318 if (s->main_pid != 0)
3319 log_unit_warning(u, "Got notification message from PID "PID_FMT", but reception only permitted for main PID "PID_FMT, pid, s->main_pid);
3320 else
3321 log_unit_warning(u, "Got notification message from PID "PID_FMT", but reception only permitted for main PID which is currently not known", pid);
3322 return;
3323 } else if (s->notify_access == NOTIFY_EXEC && pid != s->main_pid && pid != s->control_pid) {
3324 if (s->main_pid != 0 && s->control_pid != 0)
3325 log_unit_warning(u, "Got notification message from PID "PID_FMT", but reception only permitted for main PID "PID_FMT" and control PID "PID_FMT,
3326 pid, s->main_pid, s->control_pid);
3327 else if (s->main_pid != 0)
3328 log_unit_warning(u, "Got notification message from PID "PID_FMT", but reception only permitted for main PID "PID_FMT, pid, s->main_pid);
3329 else if (s->control_pid != 0)
3330 log_unit_warning(u, "Got notification message from PID "PID_FMT", but reception only permitted for control PID "PID_FMT, pid, s->control_pid);
3331 else
3332 log_unit_warning(u, "Got notification message from PID "PID_FMT", but reception only permitted for main PID and control PID which are currently not known", pid);
3333 return;
3334 } else
3335 log_unit_debug(u, "Got notification message from PID "PID_FMT" (%s)", pid, isempty(cc) ? "n/a" : cc);
3336
3337 /* Interpret MAINPID= */
3338 e = strv_find_startswith(tags, "MAINPID=");
3339 if (e && IN_SET(s->state, SERVICE_START, SERVICE_START_POST, SERVICE_RUNNING, SERVICE_RELOAD)) {
3340 if (parse_pid(e, &pid) < 0)
3341 log_unit_warning(u, "Failed to parse MAINPID= field in notification message: %s", e);
3342 else if (pid == s->control_pid)
3343 log_unit_warning(u, "A control process cannot also be the main process");
3344 else if (pid == getpid_cached() || pid == 1)
3345 log_unit_warning(u, "Service manager can't be main process, ignoring sd_notify() MAINPID= field");
3346 else {
3347 service_set_main_pid(s, pid);
3348 unit_watch_pid(UNIT(s), pid);
3349 notify_dbus = true;
3350 }
3351 }
3352
3353 /* Interpret RELOADING= */
3354 if (strv_find(tags, "RELOADING=1")) {
3355
3356 s->notify_state = NOTIFY_RELOADING;
3357
3358 if (s->state == SERVICE_RUNNING)
3359 service_enter_reload_by_notify(s);
3360
3361 notify_dbus = true;
3362 }
3363
3364 /* Interpret READY= */
3365 if (strv_find(tags, "READY=1")) {
3366
3367 s->notify_state = NOTIFY_READY;
3368
3369 /* Type=notify services inform us about completed
3370 * initialization with READY=1 */
3371 if (s->type == SERVICE_NOTIFY && s->state == SERVICE_START)
3372 service_enter_start_post(s);
3373
3374 /* Sending READY=1 while we are reloading informs us
3375 * that the reloading is complete */
3376 if (s->state == SERVICE_RELOAD && s->control_pid == 0)
3377 service_enter_running(s, SERVICE_SUCCESS);
3378
3379 notify_dbus = true;
3380 }
3381
3382 /* Interpret STOPPING= */
3383 if (strv_find(tags, "STOPPING=1")) {
3384
3385 s->notify_state = NOTIFY_STOPPING;
3386
3387 if (s->state == SERVICE_RUNNING)
3388 service_enter_stop_by_notify(s);
3389
3390 notify_dbus = true;
3391 }
3392
3393 /* Interpret STATUS= */
3394 e = strv_find_startswith(tags, "STATUS=");
3395 if (e) {
3396 _cleanup_free_ char *t = NULL;
3397
3398 if (!isempty(e)) {
3399 if (!utf8_is_valid(e))
3400 log_unit_warning(u, "Status message in notification message is not UTF-8 clean.");
3401 else {
3402 t = strdup(e);
3403 if (!t)
3404 log_oom();
3405 }
3406 }
3407
3408 if (!streq_ptr(s->status_text, t)) {
3409
3410 free_and_replace(s->status_text, t);
3411
3412 notify_dbus = true;
3413 }
3414 }
3415
3416 /* Interpret ERRNO= */
3417 e = strv_find_startswith(tags, "ERRNO=");
3418 if (e) {
3419 int status_errno;
3420
3421 if (safe_atoi(e, &status_errno) < 0 || status_errno < 0)
3422 log_unit_warning(u, "Failed to parse ERRNO= field in notification message: %s", e);
3423 else {
3424 if (s->status_errno != status_errno) {
3425 s->status_errno = status_errno;
3426 notify_dbus = true;
3427 }
3428 }
3429 }
3430
3431 /* Interpret WATCHDOG= */
3432 if (strv_find(tags, "WATCHDOG=1"))
3433 service_reset_watchdog(s);
3434
3435 if (strv_find(tags, "FDSTORE=1")) {
3436 const char *name;
3437
3438 name = strv_find_startswith(tags, "FDNAME=");
3439 if (name && !fdname_is_valid(name)) {
3440 log_unit_warning(u, "Passed FDNAME= name is invalid, ignoring.");
3441 name = NULL;
3442 }
3443
3444 service_add_fd_store_set(s, fds, name);
3445 }
3446
3447 e = strv_find_startswith(tags, "WATCHDOG_USEC=");
3448 if (e) {
3449 usec_t watchdog_override_usec;
3450 if (safe_atou64(e, &watchdog_override_usec) < 0)
3451 log_unit_warning(u, "Failed to parse WATCHDOG_USEC=%s", e);
3452 else
3453 service_reset_watchdog_timeout(s, watchdog_override_usec);
3454 }
3455
3456 /* Notify clients about changed status or main pid */
3457 if (notify_dbus)
3458 unit_add_to_dbus_queue(u);
3459 }
3460
3461 static int service_get_timeout(Unit *u, usec_t *timeout) {
3462 Service *s = SERVICE(u);
3463 uint64_t t;
3464 int r;
3465
3466 if (!s->timer_event_source)
3467 return 0;
3468
3469 r = sd_event_source_get_time(s->timer_event_source, &t);
3470 if (r < 0)
3471 return r;
3472 if (t == USEC_INFINITY)
3473 return 0;
3474
3475 *timeout = t;
3476 return 1;
3477 }
3478
3479 static void service_bus_name_owner_change(
3480 Unit *u,
3481 const char *name,
3482 const char *old_owner,
3483 const char *new_owner) {
3484
3485 Service *s = SERVICE(u);
3486 int r;
3487
3488 assert(s);
3489 assert(name);
3490
3491 assert(streq(s->bus_name, name));
3492 assert(old_owner || new_owner);
3493
3494 if (old_owner && new_owner)
3495 log_unit_debug(u, "D-Bus name %s changed owner from %s to %s", name, old_owner, new_owner);
3496 else if (old_owner)
3497 log_unit_debug(u, "D-Bus name %s no longer registered by %s", name, old_owner);
3498 else
3499 log_unit_debug(u, "D-Bus name %s now registered by %s", name, new_owner);
3500
3501 s->bus_name_good = !!new_owner;
3502
3503 /* Track the current owner, so we can reconstruct changes after a daemon reload */
3504 r = free_and_strdup(&s->bus_name_owner, new_owner);
3505 if (r < 0) {
3506 log_unit_error_errno(u, r, "Unable to set new bus name owner %s: %m", new_owner);
3507 return;
3508 }
3509
3510 if (s->type == SERVICE_DBUS) {
3511
3512 /* service_enter_running() will figure out what to
3513 * do */
3514 if (s->state == SERVICE_RUNNING)
3515 service_enter_running(s, SERVICE_SUCCESS);
3516 else if (s->state == SERVICE_START && new_owner)
3517 service_enter_start_post(s);
3518
3519 } else if (new_owner &&
3520 s->main_pid <= 0 &&
3521 (s->state == SERVICE_START ||
3522 s->state == SERVICE_START_POST ||
3523 s->state == SERVICE_RUNNING ||
3524 s->state == SERVICE_RELOAD)) {
3525
3526 _cleanup_(sd_bus_creds_unrefp) sd_bus_creds *creds = NULL;
3527 pid_t pid;
3528
3529 /* Try to acquire PID from bus service */
3530
3531 r = sd_bus_get_name_creds(u->manager->api_bus, name, SD_BUS_CREDS_PID, &creds);
3532 if (r >= 0)
3533 r = sd_bus_creds_get_pid(creds, &pid);
3534 if (r >= 0) {
3535 log_unit_debug(u, "D-Bus name %s is now owned by process " PID_FMT, name, pid);
3536
3537 service_set_main_pid(s, pid);
3538 unit_watch_pid(UNIT(s), pid);
3539 }
3540 }
3541 }
3542
3543 int service_set_socket_fd(Service *s, int fd, Socket *sock, bool selinux_context_net) {
3544 _cleanup_free_ char *peer = NULL;
3545 int r;
3546
3547 assert(s);
3548 assert(fd >= 0);
3549
3550 /* This is called by the socket code when instantiating a new service for a stream socket and the socket needs
3551 * to be configured. We take ownership of the passed fd on success. */
3552
3553 if (UNIT(s)->load_state != UNIT_LOADED)
3554 return -EINVAL;
3555
3556 if (s->socket_fd >= 0)
3557 return -EBUSY;
3558
3559 if (s->state != SERVICE_DEAD)
3560 return -EAGAIN;
3561
3562 if (getpeername_pretty(fd, true, &peer) >= 0) {
3563
3564 if (UNIT(s)->description) {
3565 _cleanup_free_ char *a;
3566
3567 a = strjoin(UNIT(s)->description, " (", peer, ")");
3568 if (!a)
3569 return -ENOMEM;
3570
3571 r = unit_set_description(UNIT(s), a);
3572 } else
3573 r = unit_set_description(UNIT(s), peer);
3574
3575 if (r < 0)
3576 return r;
3577 }
3578
3579 r = unit_add_two_dependencies(UNIT(sock), UNIT_BEFORE, UNIT_TRIGGERS, UNIT(s), false);
3580 if (r < 0)
3581 return r;
3582
3583 s->socket_fd = fd;
3584 s->socket_fd_selinux_context_net = selinux_context_net;
3585
3586 unit_ref_set(&s->accept_socket, UNIT(sock));
3587 return 0;
3588 }
3589
3590 static void service_reset_failed(Unit *u) {
3591 Service *s = SERVICE(u);
3592
3593 assert(s);
3594
3595 if (s->state == SERVICE_FAILED)
3596 service_set_state(s, SERVICE_DEAD);
3597
3598 s->result = SERVICE_SUCCESS;
3599 s->reload_result = SERVICE_SUCCESS;
3600 s->n_restarts = 0;
3601 s->flush_n_restarts = false;
3602 }
3603
3604 static int service_kill(Unit *u, KillWho who, int signo, sd_bus_error *error) {
3605 Service *s = SERVICE(u);
3606
3607 return unit_kill_common(u, who, signo, s->main_pid, s->control_pid, error);
3608 }
3609
3610 static int service_main_pid(Unit *u) {
3611 Service *s = SERVICE(u);
3612
3613 assert(s);
3614
3615 return s->main_pid;
3616 }
3617
3618 static int service_control_pid(Unit *u) {
3619 Service *s = SERVICE(u);
3620
3621 assert(s);
3622
3623 return s->control_pid;
3624 }
3625
3626 static const char* const service_restart_table[_SERVICE_RESTART_MAX] = {
3627 [SERVICE_RESTART_NO] = "no",
3628 [SERVICE_RESTART_ON_SUCCESS] = "on-success",
3629 [SERVICE_RESTART_ON_FAILURE] = "on-failure",
3630 [SERVICE_RESTART_ON_ABNORMAL] = "on-abnormal",
3631 [SERVICE_RESTART_ON_WATCHDOG] = "on-watchdog",
3632 [SERVICE_RESTART_ON_ABORT] = "on-abort",
3633 [SERVICE_RESTART_ALWAYS] = "always",
3634 };
3635
3636 DEFINE_STRING_TABLE_LOOKUP(service_restart, ServiceRestart);
3637
3638 static const char* const service_type_table[_SERVICE_TYPE_MAX] = {
3639 [SERVICE_SIMPLE] = "simple",
3640 [SERVICE_FORKING] = "forking",
3641 [SERVICE_ONESHOT] = "oneshot",
3642 [SERVICE_DBUS] = "dbus",
3643 [SERVICE_NOTIFY] = "notify",
3644 [SERVICE_IDLE] = "idle"
3645 };
3646
3647 DEFINE_STRING_TABLE_LOOKUP(service_type, ServiceType);
3648
3649 static const char* const service_exec_command_table[_SERVICE_EXEC_COMMAND_MAX] = {
3650 [SERVICE_EXEC_START_PRE] = "ExecStartPre",
3651 [SERVICE_EXEC_START] = "ExecStart",
3652 [SERVICE_EXEC_START_POST] = "ExecStartPost",
3653 [SERVICE_EXEC_RELOAD] = "ExecReload",
3654 [SERVICE_EXEC_STOP] = "ExecStop",
3655 [SERVICE_EXEC_STOP_POST] = "ExecStopPost",
3656 };
3657
3658 DEFINE_STRING_TABLE_LOOKUP(service_exec_command, ServiceExecCommand);
3659
3660 static const char* const notify_state_table[_NOTIFY_STATE_MAX] = {
3661 [NOTIFY_UNKNOWN] = "unknown",
3662 [NOTIFY_READY] = "ready",
3663 [NOTIFY_RELOADING] = "reloading",
3664 [NOTIFY_STOPPING] = "stopping",
3665 };
3666
3667 DEFINE_STRING_TABLE_LOOKUP(notify_state, NotifyState);
3668
3669 static const char* const service_result_table[_SERVICE_RESULT_MAX] = {
3670 [SERVICE_SUCCESS] = "success",
3671 [SERVICE_FAILURE_RESOURCES] = "resources",
3672 [SERVICE_FAILURE_PROTOCOL] = "protocol",
3673 [SERVICE_FAILURE_TIMEOUT] = "timeout",
3674 [SERVICE_FAILURE_EXIT_CODE] = "exit-code",
3675 [SERVICE_FAILURE_SIGNAL] = "signal",
3676 [SERVICE_FAILURE_CORE_DUMP] = "core-dump",
3677 [SERVICE_FAILURE_WATCHDOG] = "watchdog",
3678 [SERVICE_FAILURE_START_LIMIT_HIT] = "start-limit-hit",
3679 };
3680
3681 DEFINE_STRING_TABLE_LOOKUP(service_result, ServiceResult);
3682
3683 const UnitVTable service_vtable = {
3684 .object_size = sizeof(Service),
3685 .exec_context_offset = offsetof(Service, exec_context),
3686 .cgroup_context_offset = offsetof(Service, cgroup_context),
3687 .kill_context_offset = offsetof(Service, kill_context),
3688 .exec_runtime_offset = offsetof(Service, exec_runtime),
3689 .dynamic_creds_offset = offsetof(Service, dynamic_creds),
3690
3691 .sections =
3692 "Unit\0"
3693 "Service\0"
3694 "Install\0",
3695 .private_section = "Service",
3696
3697 .init = service_init,
3698 .done = service_done,
3699 .load = service_load,
3700 .release_resources = service_release_resources,
3701
3702 .coldplug = service_coldplug,
3703
3704 .dump = service_dump,
3705
3706 .start = service_start,
3707 .stop = service_stop,
3708 .reload = service_reload,
3709
3710 .can_reload = service_can_reload,
3711
3712 .kill = service_kill,
3713
3714 .serialize = service_serialize,
3715 .deserialize_item = service_deserialize_item,
3716
3717 .active_state = service_active_state,
3718 .sub_state_to_string = service_sub_state_to_string,
3719
3720 .check_gc = service_check_gc,
3721
3722 .sigchld_event = service_sigchld_event,
3723
3724 .reset_failed = service_reset_failed,
3725
3726 .notify_cgroup_empty = service_notify_cgroup_empty_event,
3727 .notify_message = service_notify_message,
3728
3729 .main_pid = service_main_pid,
3730 .control_pid = service_control_pid,
3731
3732 .bus_name_owner_change = service_bus_name_owner_change,
3733
3734 .bus_vtable = bus_service_vtable,
3735 .bus_set_property = bus_service_set_property,
3736 .bus_commit_properties = bus_service_commit_properties,
3737
3738 .get_timeout = service_get_timeout,
3739 .can_transient = true,
3740
3741 .status_message_formats = {
3742 .starting_stopping = {
3743 [0] = "Starting %s...",
3744 [1] = "Stopping %s...",
3745 },
3746 .finished_start_job = {
3747 [JOB_DONE] = "Started %s.",
3748 [JOB_FAILED] = "Failed to start %s.",
3749 },
3750 .finished_stop_job = {
3751 [JOB_DONE] = "Stopped %s.",
3752 [JOB_FAILED] = "Stopped (with error) %s.",
3753 },
3754 },
3755 };