]> git.ipfire.org Git - thirdparty/systemd.git/blob - src/core/service.c
projects / thirdparty / systemd.git / blob
? search:
summary | shortlog | log | commit | commitdiff | tree
blame | history | raw | HEAD
Merge pull request #11772 from c0d3z3r0/master
[thirdparty/systemd.git] / src / core / service.c
1 /* SPDX-License-Identifier: LGPL-2.1+ */
2
3 #include <errno.h>
4 #include <signal.h>
5 #include <unistd.h>
6
7 #include "sd-messages.h"
8
9 #include "alloc-util.h"
10 #include "async.h"
11 #include "bus-error.h"
12 #include "bus-kernel.h"
13 #include "bus-util.h"
14 #include "dbus-service.h"
15 #include "dbus-unit.h"
16 #include "def.h"
17 #include "env-util.h"
18 #include "escape.h"
19 #include "exit-status.h"
20 #include "fd-util.h"
21 #include "fileio.h"
22 #include "format-util.h"
23 #include "fs-util.h"
24 #include "load-dropin.h"
25 #include "load-fragment.h"
26 #include "log.h"
27 #include "manager.h"
28 #include "parse-util.h"
29 #include "path-util.h"
30 #include "process-util.h"
31 #include "serialize.h"
32 #include "service.h"
33 #include "signal-util.h"
34 #include "special.h"
35 #include "stdio-util.h"
36 #include "string-table.h"
37 #include "string-util.h"
38 #include "strv.h"
39 #include "unit-name.h"
40 #include "unit.h"
41 #include "utf8.h"
42 #include "util.h"
43
44 static const UnitActiveState state_translation_table[_SERVICE_STATE_MAX] = {
45 [SERVICE_DEAD] = UNIT_INACTIVE,
46 [SERVICE_START_PRE] = UNIT_ACTIVATING,
47 [SERVICE_START] = UNIT_ACTIVATING,
48 [SERVICE_START_POST] = UNIT_ACTIVATING,
49 [SERVICE_RUNNING] = UNIT_ACTIVE,
50 [SERVICE_EXITED] = UNIT_ACTIVE,
51 [SERVICE_RELOAD] = UNIT_RELOADING,
52 [SERVICE_STOP] = UNIT_DEACTIVATING,
53 [SERVICE_STOP_WATCHDOG] = UNIT_DEACTIVATING,
54 [SERVICE_STOP_SIGTERM] = UNIT_DEACTIVATING,
55 [SERVICE_STOP_SIGKILL] = UNIT_DEACTIVATING,
56 [SERVICE_STOP_POST] = UNIT_DEACTIVATING,
57 [SERVICE_FINAL_SIGTERM] = UNIT_DEACTIVATING,
58 [SERVICE_FINAL_SIGKILL] = UNIT_DEACTIVATING,
59 [SERVICE_FAILED] = UNIT_FAILED,
60 [SERVICE_AUTO_RESTART] = UNIT_ACTIVATING
61 };
62
63 /* For Type=idle we never want to delay any other jobs, hence we
64 * consider idle jobs active as soon as we start working on them */
65 static const UnitActiveState state_translation_table_idle[_SERVICE_STATE_MAX] = {
66 [SERVICE_DEAD] = UNIT_INACTIVE,
67 [SERVICE_START_PRE] = UNIT_ACTIVE,
68 [SERVICE_START] = UNIT_ACTIVE,
69 [SERVICE_START_POST] = UNIT_ACTIVE,
70 [SERVICE_RUNNING] = UNIT_ACTIVE,
71 [SERVICE_EXITED] = UNIT_ACTIVE,
72 [SERVICE_RELOAD] = UNIT_RELOADING,
73 [SERVICE_STOP] = UNIT_DEACTIVATING,
74 [SERVICE_STOP_WATCHDOG] = UNIT_DEACTIVATING,
75 [SERVICE_STOP_SIGTERM] = UNIT_DEACTIVATING,
76 [SERVICE_STOP_SIGKILL] = UNIT_DEACTIVATING,
77 [SERVICE_STOP_POST] = UNIT_DEACTIVATING,
78 [SERVICE_FINAL_SIGTERM] = UNIT_DEACTIVATING,
79 [SERVICE_FINAL_SIGKILL] = UNIT_DEACTIVATING,
80 [SERVICE_FAILED] = UNIT_FAILED,
81 [SERVICE_AUTO_RESTART] = UNIT_ACTIVATING
82 };
83
84 static int service_dispatch_inotify_io(sd_event_source *source, int fd, uint32_t events, void *userdata);
85 static int service_dispatch_timer(sd_event_source *source, usec_t usec, void *userdata);
86 static int service_dispatch_watchdog(sd_event_source *source, usec_t usec, void *userdata);
87 static int service_dispatch_exec_io(sd_event_source *source, int fd, uint32_t events, void *userdata);
88
89 static void service_enter_signal(Service *s, ServiceState state, ServiceResult f);
90 static void service_enter_reload_by_notify(Service *s);
91
92 static void service_init(Unit *u) {
93 Service *s = SERVICE(u);
94
95 assert(u);
96 assert(u->load_state == UNIT_STUB);
97
98 s->timeout_start_usec = u->manager->default_timeout_start_usec;
99 s->timeout_stop_usec = u->manager->default_timeout_stop_usec;
100 s->restart_usec = u->manager->default_restart_usec;
101 s->runtime_max_usec = USEC_INFINITY;
102 s->type = _SERVICE_TYPE_INVALID;
103 s->socket_fd = -1;
104 s->stdin_fd = s->stdout_fd = s->stderr_fd = -1;
105 s->guess_main_pid = true;
106
107 s->control_command_id = _SERVICE_EXEC_COMMAND_INVALID;
108
109 s->exec_context.keyring_mode = MANAGER_IS_SYSTEM(u->manager) ?
110 EXEC_KEYRING_PRIVATE : EXEC_KEYRING_INHERIT;
111
112 s->watchdog_original_usec = USEC_INFINITY;
113 }
114
115 static void service_unwatch_control_pid(Service *s) {
116 assert(s);
117
118 if (s->control_pid <= 0)
119 return;
120
121 unit_unwatch_pid(UNIT(s), s->control_pid);
122 s->control_pid = 0;
123 }
124
125 static void service_unwatch_main_pid(Service *s) {
126 assert(s);
127
128 if (s->main_pid <= 0)
129 return;
130
131 unit_unwatch_pid(UNIT(s), s->main_pid);
132 s->main_pid = 0;
133 }
134
135 static void service_unwatch_pid_file(Service *s) {
136 if (!s->pid_file_pathspec)
137 return;
138
139 log_unit_debug(UNIT(s), "Stopping watch for PID file %s", s->pid_file_pathspec->path);
140 path_spec_unwatch(s->pid_file_pathspec);
141 path_spec_done(s->pid_file_pathspec);
142 s->pid_file_pathspec = mfree(s->pid_file_pathspec);
143 }
144
145 static int service_set_main_pid(Service *s, pid_t pid) {
146 pid_t ppid;
147
148 assert(s);
149
150 if (pid <= 1)
151 return -EINVAL;
152
153 if (pid == getpid_cached())
154 return -EINVAL;
155
156 if (s->main_pid == pid && s->main_pid_known)
157 return 0;
158
159 if (s->main_pid != pid) {
160 service_unwatch_main_pid(s);
161 exec_status_start(&s->main_exec_status, pid);
162 }
163
164 s->main_pid = pid;
165 s->main_pid_known = true;
166
167 if (get_process_ppid(pid, &ppid) >= 0 && ppid != getpid_cached()) {
168 log_unit_warning(UNIT(s), "Supervising process "PID_FMT" which is not our child. We'll most likely not notice when it exits.", pid);
169 s->main_pid_alien = true;
170 } else
171 s->main_pid_alien = false;
172
173 return 0;
174 }
175
176 void service_close_socket_fd(Service *s) {
177 assert(s);
178
179 /* Undo the effect of service_set_socket_fd(). */
180
181 s->socket_fd = asynchronous_close(s->socket_fd);
182
183 if (UNIT_ISSET(s->accept_socket)) {
184 socket_connection_unref(SOCKET(UNIT_DEREF(s->accept_socket)));
185 unit_ref_unset(&s->accept_socket);
186 }
187 }
188
189 static void service_stop_watchdog(Service *s) {
190 assert(s);
191
192 s->watchdog_event_source = sd_event_source_unref(s->watchdog_event_source);
193 s->watchdog_timestamp = DUAL_TIMESTAMP_NULL;
194 }
195
196 static usec_t service_get_watchdog_usec(Service *s) {
197 assert(s);
198
199 if (s->watchdog_override_enable)
200 return s->watchdog_override_usec;
201
202 return s->watchdog_original_usec;
203 }
204
205 static void service_start_watchdog(Service *s) {
206 usec_t watchdog_usec;
207 int r;
208
209 assert(s);
210
211 watchdog_usec = service_get_watchdog_usec(s);
212 if (IN_SET(watchdog_usec, 0, USEC_INFINITY)) {
213 service_stop_watchdog(s);
214 return;
215 }
216
217 if (s->watchdog_event_source) {
218 r = sd_event_source_set_time(s->watchdog_event_source, usec_add(s->watchdog_timestamp.monotonic, watchdog_usec));
219 if (r < 0) {
220 log_unit_warning_errno(UNIT(s), r, "Failed to reset watchdog timer: %m");
221 return;
222 }
223
224 r = sd_event_source_set_enabled(s->watchdog_event_source, SD_EVENT_ONESHOT);
225 } else {
226 r = sd_event_add_time(
227 UNIT(s)->manager->event,
228 &s->watchdog_event_source,
229 CLOCK_MONOTONIC,
230 usec_add(s->watchdog_timestamp.monotonic, watchdog_usec), 0,
231 service_dispatch_watchdog, s);
232 if (r < 0) {
233 log_unit_warning_errno(UNIT(s), r, "Failed to add watchdog timer: %m");
234 return;
235 }
236
237 (void) sd_event_source_set_description(s->watchdog_event_source, "service-watchdog");
238
239 /* Let's process everything else which might be a sign
240 * of living before we consider a service died. */
241 r = sd_event_source_set_priority(s->watchdog_event_source, SD_EVENT_PRIORITY_IDLE);
242 }
243 if (r < 0)
244 log_unit_warning_errno(UNIT(s), r, "Failed to install watchdog timer: %m");
245 }
246
247 static void service_extend_event_source_timeout(Service *s, sd_event_source *source, usec_t extended) {
248 usec_t current;
249 int r;
250
251 assert(s);
252
253 /* Extends the specified event source timer to at least the specified time, unless it is already later
254 * anyway. */
255
256 if (!source)
257 return;
258
259 r = sd_event_source_get_time(source, &current);
260 if (r < 0) {
261 const char *desc;
262 (void) sd_event_source_get_description(s->timer_event_source, &desc);
263 log_unit_warning_errno(UNIT(s), r, "Failed to retrieve timeout time for event source '%s', ignoring: %m", strna(desc));
264 return;
265 }
266
267 if (current >= extended) /* Current timeout is already longer, ignore this. */
268 return;
269
270 r = sd_event_source_set_time(source, extended);
271 if (r < 0) {
272 const char *desc;
273 (void) sd_event_source_get_description(s->timer_event_source, &desc);
274 log_unit_warning_errno(UNIT(s), r, "Failed to set timeout time for even source '%s', ignoring %m", strna(desc));
275 }
276 }
277
278 static void service_extend_timeout(Service *s, usec_t extend_timeout_usec) {
279 usec_t extended;
280
281 assert(s);
282
283 if (IN_SET(extend_timeout_usec, 0, USEC_INFINITY))
284 return;
285
286 extended = usec_add(now(CLOCK_MONOTONIC), extend_timeout_usec);
287
288 service_extend_event_source_timeout(s, s->timer_event_source, extended);
289 service_extend_event_source_timeout(s, s->watchdog_event_source, extended);
290 }
291
292 static void service_reset_watchdog(Service *s) {
293 assert(s);
294
295 dual_timestamp_get(&s->watchdog_timestamp);
296 service_start_watchdog(s);
297 }
298
299 static void service_override_watchdog_timeout(Service *s, usec_t watchdog_override_usec) {
300 assert(s);
301
302 s->watchdog_override_enable = true;
303 s->watchdog_override_usec = watchdog_override_usec;
304 service_reset_watchdog(s);
305
306 log_unit_debug(UNIT(s), "watchdog_usec="USEC_FMT, s->watchdog_usec);
307 log_unit_debug(UNIT(s), "watchdog_override_usec="USEC_FMT, s->watchdog_override_usec);
308 }
309
310 static void service_fd_store_unlink(ServiceFDStore *fs) {
311
312 if (!fs)
313 return;
314
315 if (fs->service) {
316 assert(fs->service->n_fd_store > 0);
317 LIST_REMOVE(fd_store, fs->service->fd_store, fs);
318 fs->service->n_fd_store--;
319 }
320
321 if (fs->event_source) {
322 sd_event_source_set_enabled(fs->event_source, SD_EVENT_OFF);
323 sd_event_source_unref(fs->event_source);
324 }
325
326 free(fs->fdname);
327 safe_close(fs->fd);
328 free(fs);
329 }
330
331 static void service_release_fd_store(Service *s) {
332 assert(s);
333
334 if (s->n_keep_fd_store > 0)
335 return;
336
337 log_unit_debug(UNIT(s), "Releasing all stored fds");
338 while (s->fd_store)
339 service_fd_store_unlink(s->fd_store);
340
341 assert(s->n_fd_store == 0);
342 }
343
344 static void service_release_resources(Unit *u) {
345 Service *s = SERVICE(u);
346
347 assert(s);
348
349 if (!s->fd_store && s->stdin_fd < 0 && s->stdout_fd < 0 && s->stderr_fd < 0)
350 return;
351
352 log_unit_debug(u, "Releasing resources.");
353
354 s->stdin_fd = safe_close(s->stdin_fd);
355 s->stdout_fd = safe_close(s->stdout_fd);
356 s->stderr_fd = safe_close(s->stderr_fd);
357
358 service_release_fd_store(s);
359 }
360
361 static void service_done(Unit *u) {
362 Service *s = SERVICE(u);
363
364 assert(s);
365
366 s->pid_file = mfree(s->pid_file);
367 s->status_text = mfree(s->status_text);
368
369 s->exec_runtime = exec_runtime_unref(s->exec_runtime, false);
370 exec_command_free_array(s->exec_command, _SERVICE_EXEC_COMMAND_MAX);
371 s->control_command = NULL;
372 s->main_command = NULL;
373
374 dynamic_creds_unref(&s->dynamic_creds);
375
376 exit_status_set_free(&s->restart_prevent_status);
377 exit_status_set_free(&s->restart_force_status);
378 exit_status_set_free(&s->success_status);
379
380 /* This will leak a process, but at least no memory or any of
381 * our resources */
382 service_unwatch_main_pid(s);
383 service_unwatch_control_pid(s);
384 service_unwatch_pid_file(s);
385
386 if (s->bus_name) {
387 unit_unwatch_bus_name(u, s->bus_name);
388 s->bus_name = mfree(s->bus_name);
389 }
390
391 s->bus_name_owner = mfree(s->bus_name_owner);
392
393 s->usb_function_descriptors = mfree(s->usb_function_descriptors);
394 s->usb_function_strings = mfree(s->usb_function_strings);
395
396 service_close_socket_fd(s);
397 s->peer = socket_peer_unref(s->peer);
398
399 unit_ref_unset(&s->accept_socket);
400
401 service_stop_watchdog(s);
402
403 s->timer_event_source = sd_event_source_unref(s->timer_event_source);
404 s->exec_fd_event_source = sd_event_source_unref(s->exec_fd_event_source);
405
406 service_release_resources(u);
407 }
408
409 static int on_fd_store_io(sd_event_source *e, int fd, uint32_t revents, void *userdata) {
410 ServiceFDStore *fs = userdata;
411
412 assert(e);
413 assert(fs);
414
415 /* If we get either EPOLLHUP or EPOLLERR, it's time to remove this entry from the fd store */
416 log_unit_debug(UNIT(fs->service),
417 "Received %s on stored fd %d (%s), closing.",
418 revents & EPOLLERR ? "EPOLLERR" : "EPOLLHUP",
419 fs->fd, strna(fs->fdname));
420 service_fd_store_unlink(fs);
421 return 0;
422 }
423
424 static int service_add_fd_store(Service *s, int fd, const char *name) {
425 ServiceFDStore *fs;
426 int r;
427
428 /* fd is always consumed if we return >= 0 */
429
430 assert(s);
431 assert(fd >= 0);
432
433 if (s->n_fd_store >= s->n_fd_store_max)
434 return -EXFULL; /* Our store is full.
435 * Use this errno rather than E[NM]FILE to distinguish from
436 * the case where systemd itself hits the file limit. */
437
438 LIST_FOREACH(fd_store, fs, s->fd_store) {
439 r = same_fd(fs->fd, fd);
440 if (r < 0)
441 return r;
442 if (r > 0) {
443 safe_close(fd);
444 return 0; /* fd already included */
445 }
446 }
447
448 fs = new0(ServiceFDStore, 1);
449 if (!fs)
450 return -ENOMEM;
451
452 fs->fd = fd;
453 fs->service = s;
454 fs->fdname = strdup(name ?: "stored");
455 if (!fs->fdname) {
456 free(fs);
457 return -ENOMEM;
458 }
459
460 r = sd_event_add_io(UNIT(s)->manager->event, &fs->event_source, fd, 0, on_fd_store_io, fs);
461 if (r < 0 && r != -EPERM) { /* EPERM indicates fds that aren't pollable, which is OK */
462 free(fs->fdname);
463 free(fs);
464 return r;
465 } else if (r >= 0)
466 (void) sd_event_source_set_description(fs->event_source, "service-fd-store");
467
468 LIST_PREPEND(fd_store, s->fd_store, fs);
469 s->n_fd_store++;
470
471 return 1; /* fd newly stored */
472 }
473
474 static int service_add_fd_store_set(Service *s, FDSet *fds, const char *name) {
475 int r;
476
477 assert(s);
478
479 while (fdset_size(fds) > 0) {
480 _cleanup_close_ int fd = -1;
481
482 fd = fdset_steal_first(fds);
483 if (fd < 0)
484 break;
485
486 r = service_add_fd_store(s, fd, name);
487 if (r == -EXFULL)
488 return log_unit_warning_errno(UNIT(s), r,
489 "Cannot store more fds than FileDescriptorStoreMax=%u, closing remaining.",
490 s->n_fd_store_max);
491 if (r < 0)
492 return log_unit_error_errno(UNIT(s), r, "Failed to add fd to store: %m");
493 if (r > 0)
494 log_unit_debug(UNIT(s), "Added fd %u (%s) to fd store.", fd, strna(name));
495 fd = -1;
496 }
497
498 return 0;
499 }
500
501 static void service_remove_fd_store(Service *s, const char *name) {
502 ServiceFDStore *fs, *n;
503
504 assert(s);
505 assert(name);
506
507 LIST_FOREACH_SAFE(fd_store, fs, n, s->fd_store) {
508 if (!streq(fs->fdname, name))
509 continue;
510
511 log_unit_debug(UNIT(s), "Got explicit request to remove fd %i (%s), closing.", fs->fd, name);
512 service_fd_store_unlink(fs);
513 }
514 }
515
516 static int service_arm_timer(Service *s, usec_t usec) {
517 int r;
518
519 assert(s);
520
521 if (s->timer_event_source) {
522 r = sd_event_source_set_time(s->timer_event_source, usec);
523 if (r < 0)
524 return r;
525
526 return sd_event_source_set_enabled(s->timer_event_source, SD_EVENT_ONESHOT);
527 }
528
529 if (usec == USEC_INFINITY)
530 return 0;
531
532 r = sd_event_add_time(
533 UNIT(s)->manager->event,
534 &s->timer_event_source,
535 CLOCK_MONOTONIC,
536 usec, 0,
537 service_dispatch_timer, s);
538 if (r < 0)
539 return r;
540
541 (void) sd_event_source_set_description(s->timer_event_source, "service-timer");
542
543 return 0;
544 }
545
546 static int service_verify(Service *s) {
547 assert(s);
548
549 if (UNIT(s)->load_state != UNIT_LOADED)
550 return 0;
551
552 if (!s->exec_command[SERVICE_EXEC_START] && !s->exec_command[SERVICE_EXEC_STOP]
553 && UNIT(s)->success_action == EMERGENCY_ACTION_NONE) {
554 /* FailureAction= only makes sense if one of the start or stop commands is specified.
555 * SuccessAction= will be executed unconditionally if no commands are specified. Hence,
556 * either a command or SuccessAction= are required. */
557
558 log_unit_error(UNIT(s), "Service has no ExecStart=, ExecStop=, or SuccessAction=. Refusing.");
559 return -ENOEXEC;
560 }
561
562 if (s->type != SERVICE_ONESHOT && !s->exec_command[SERVICE_EXEC_START]) {
563 log_unit_error(UNIT(s), "Service has no ExecStart= setting, which is only allowed for Type=oneshot services. Refusing.");
564 return -ENOEXEC;
565 }
566
567 if (!s->remain_after_exit && !s->exec_command[SERVICE_EXEC_START] && UNIT(s)->success_action == EMERGENCY_ACTION_NONE) {
568 log_unit_error(UNIT(s), "Service has no ExecStart= and no SuccessAction= settings and does not have RemainAfterExit=yes set. Refusing.");
569 return -ENOEXEC;
570 }
571
572 if (s->type != SERVICE_ONESHOT && s->exec_command[SERVICE_EXEC_START]->command_next) {
573 log_unit_error(UNIT(s), "Service has more than one ExecStart= setting, which is only allowed for Type=oneshot services. Refusing.");
574 return -ENOEXEC;
575 }
576
577 if (s->type == SERVICE_ONESHOT && s->restart != SERVICE_RESTART_NO) {
578 log_unit_error(UNIT(s), "Service has Restart= setting other than no, which isn't allowed for Type=oneshot services. Refusing.");
579 return -ENOEXEC;
580 }
581
582 if (s->type == SERVICE_ONESHOT && !exit_status_set_is_empty(&s->restart_force_status)) {
583 log_unit_error(UNIT(s), "Service has RestartForceStatus= set, which isn't allowed for Type=oneshot services. Refusing.");
584 return -ENOEXEC;
585 }
586
587 if (s->type == SERVICE_DBUS && !s->bus_name) {
588 log_unit_error(UNIT(s), "Service is of type D-Bus but no D-Bus service name has been specified. Refusing.");
589 return -ENOEXEC;
590 }
591
592 if (s->bus_name && s->type != SERVICE_DBUS)
593 log_unit_warning(UNIT(s), "Service has a D-Bus service name specified, but is not of type dbus. Ignoring.");
594
595 if (s->exec_context.pam_name && !IN_SET(s->kill_context.kill_mode, KILL_CONTROL_GROUP, KILL_MIXED)) {
596 log_unit_error(UNIT(s), "Service has PAM enabled. Kill mode must be set to 'control-group' or 'mixed'. Refusing.");
597 return -ENOEXEC;
598 }
599
600 if (s->usb_function_descriptors && !s->usb_function_strings)
601 log_unit_warning(UNIT(s), "Service has USBFunctionDescriptors= setting, but no USBFunctionStrings=. Ignoring.");
602
603 if (!s->usb_function_descriptors && s->usb_function_strings)
604 log_unit_warning(UNIT(s), "Service has USBFunctionStrings= setting, but no USBFunctionDescriptors=. Ignoring.");
605
606 if (s->runtime_max_usec != USEC_INFINITY && s->type == SERVICE_ONESHOT)
607 log_unit_warning(UNIT(s), "MaxRuntimeSec= has no effect in combination with Type=oneshot. Ignoring.");
608
609 return 0;
610 }
611
612 static int service_add_default_dependencies(Service *s) {
613 int r;
614
615 assert(s);
616
617 if (!UNIT(s)->default_dependencies)
618 return 0;
619
620 /* Add a number of automatic dependencies useful for the
621 * majority of services. */
622
623 if (MANAGER_IS_SYSTEM(UNIT(s)->manager)) {
624 /* First, pull in the really early boot stuff, and
625 * require it, so that we fail if we can't acquire
626 * it. */
627
628 r = unit_add_two_dependencies_by_name(UNIT(s), UNIT_AFTER, UNIT_REQUIRES, SPECIAL_SYSINIT_TARGET, true, UNIT_DEPENDENCY_DEFAULT);
629 if (r < 0)
630 return r;
631 } else {
632
633 /* In the --user instance there's no sysinit.target,
634 * in that case require basic.target instead. */
635
636 r = unit_add_dependency_by_name(UNIT(s), UNIT_REQUIRES, SPECIAL_BASIC_TARGET, true, UNIT_DEPENDENCY_DEFAULT);
637 if (r < 0)
638 return r;
639 }
640
641 /* Second, if the rest of the base system is in the same
642 * transaction, order us after it, but do not pull it in or
643 * even require it. */
644 r = unit_add_dependency_by_name(UNIT(s), UNIT_AFTER, SPECIAL_BASIC_TARGET, true, UNIT_DEPENDENCY_DEFAULT);
645 if (r < 0)
646 return r;
647
648 /* Third, add us in for normal shutdown. */
649 return unit_add_two_dependencies_by_name(UNIT(s), UNIT_BEFORE, UNIT_CONFLICTS, SPECIAL_SHUTDOWN_TARGET, true, UNIT_DEPENDENCY_DEFAULT);
650 }
651
652 static void service_fix_output(Service *s) {
653 assert(s);
654
655 /* If nothing has been explicitly configured, patch default output in. If input is socket/tty we avoid this
656 * however, since in that case we want output to default to the same place as we read input from. */
657
658 if (s->exec_context.std_error == EXEC_OUTPUT_INHERIT &&
659 s->exec_context.std_output == EXEC_OUTPUT_INHERIT &&
660 s->exec_context.std_input == EXEC_INPUT_NULL)
661 s->exec_context.std_error = UNIT(s)->manager->default_std_error;
662
663 if (s->exec_context.std_output == EXEC_OUTPUT_INHERIT &&
664 s->exec_context.std_input == EXEC_INPUT_NULL)
665 s->exec_context.std_output = UNIT(s)->manager->default_std_output;
666
667 if (s->exec_context.std_input == EXEC_INPUT_NULL &&
668 s->exec_context.stdin_data_size > 0)
669 s->exec_context.std_input = EXEC_INPUT_DATA;
670 }
671
672 static int service_setup_bus_name(Service *s) {
673 int r;
674
675 assert(s);
676
677 if (!s->bus_name)
678 return 0;
679
680 r = unit_add_dependency_by_name(UNIT(s), UNIT_REQUIRES, SPECIAL_DBUS_SOCKET, true, UNIT_DEPENDENCY_FILE);
681 if (r < 0)
682 return log_unit_error_errno(UNIT(s), r, "Failed to add dependency on " SPECIAL_DBUS_SOCKET ": %m");
683
684 /* We always want to be ordered against dbus.socket if both are in the transaction. */
685 r = unit_add_dependency_by_name(UNIT(s), UNIT_AFTER, SPECIAL_DBUS_SOCKET, true, UNIT_DEPENDENCY_FILE);
686 if (r < 0)
687 return log_unit_error_errno(UNIT(s), r, "Failed to add dependency on " SPECIAL_DBUS_SOCKET ": %m");
688
689 r = unit_watch_bus_name(UNIT(s), s->bus_name);
690 if (r == -EEXIST)
691 return log_unit_error_errno(UNIT(s), r, "Two services allocated for the same bus name %s, refusing operation.", s->bus_name);
692 if (r < 0)
693 return log_unit_error_errno(UNIT(s), r, "Cannot watch bus name %s: %m", s->bus_name);
694
695 return 0;
696 }
697
698 static int service_add_extras(Service *s) {
699 int r;
700
701 assert(s);
702
703 if (s->type == _SERVICE_TYPE_INVALID) {
704 /* Figure out a type automatically */
705 if (s->bus_name)
706 s->type = SERVICE_DBUS;
707 else if (s->exec_command[SERVICE_EXEC_START])
708 s->type = SERVICE_SIMPLE;
709 else
710 s->type = SERVICE_ONESHOT;
711 }
712
713 /* Oneshot services have disabled start timeout by default */
714 if (s->type == SERVICE_ONESHOT && !s->start_timeout_defined)
715 s->timeout_start_usec = USEC_INFINITY;
716
717 service_fix_output(s);
718
719 r = unit_patch_contexts(UNIT(s));
720 if (r < 0)
721 return r;
722
723 r = unit_add_exec_dependencies(UNIT(s), &s->exec_context);
724 if (r < 0)
725 return r;
726
727 r = unit_set_default_slice(UNIT(s));
728 if (r < 0)
729 return r;
730
731 /* If the service needs the notify socket, let's enable it automatically. */
732 if (s->notify_access == NOTIFY_NONE &&
733 (s->type == SERVICE_NOTIFY || s->watchdog_usec > 0 || s->n_fd_store_max > 0))
734 s->notify_access = NOTIFY_MAIN;
735
736 r = service_add_default_dependencies(s);
737 if (r < 0)
738 return r;
739
740 r = service_setup_bus_name(s);
741 if (r < 0)
742 return r;
743
744 return 0;
745 }
746
747 static int service_load(Unit *u) {
748 Service *s = SERVICE(u);
749 int r;
750
751 assert(s);
752
753 /* Load a .service file */
754 r = unit_load_fragment(u);
755 if (r < 0)
756 return r;
757
758 /* Still nothing found? Then let's give up */
759 if (u->load_state == UNIT_STUB)
760 return -ENOENT;
761
762 /* This is a new unit? Then let's add in some extras */
763 if (u->load_state == UNIT_LOADED) {
764
765 /* We were able to load something, then let's add in
766 * the dropin directories. */
767 r = unit_load_dropin(u);
768 if (r < 0)
769 return r;
770
771 /* This is a new unit? Then let's add in some
772 * extras */
773 r = service_add_extras(s);
774 if (r < 0)
775 return r;
776 }
777
778 return service_verify(s);
779 }
780
781 static void service_dump(Unit *u, FILE *f, const char *prefix) {
782 char buf_restart[FORMAT_TIMESPAN_MAX], buf_start[FORMAT_TIMESPAN_MAX], buf_stop[FORMAT_TIMESPAN_MAX];
783 char buf_runtime[FORMAT_TIMESPAN_MAX], buf_watchdog[FORMAT_TIMESPAN_MAX];
784 ServiceExecCommand c;
785 Service *s = SERVICE(u);
786 const char *prefix2;
787
788 assert(s);
789
790 prefix = strempty(prefix);
791 prefix2 = strjoina(prefix, "\t");
792
793 fprintf(f,
794 "%sService State: %s\n"
795 "%sResult: %s\n"
796 "%sReload Result: %s\n"
797 "%sPermissionsStartOnly: %s\n"
798 "%sRootDirectoryStartOnly: %s\n"
799 "%sRemainAfterExit: %s\n"
800 "%sGuessMainPID: %s\n"
801 "%sType: %s\n"
802 "%sRestart: %s\n"
803 "%sNotifyAccess: %s\n"
804 "%sNotifyState: %s\n",
805 prefix, service_state_to_string(s->state),
806 prefix, service_result_to_string(s->result),
807 prefix, service_result_to_string(s->reload_result),
808 prefix, yes_no(s->permissions_start_only),
809 prefix, yes_no(s->root_directory_start_only),
810 prefix, yes_no(s->remain_after_exit),
811 prefix, yes_no(s->guess_main_pid),
812 prefix, service_type_to_string(s->type),
813 prefix, service_restart_to_string(s->restart),
814 prefix, notify_access_to_string(s->notify_access),
815 prefix, notify_state_to_string(s->notify_state));
816
817 if (s->control_pid > 0)
818 fprintf(f,
819 "%sControl PID: "PID_FMT"\n",
820 prefix, s->control_pid);
821
822 if (s->main_pid > 0)
823 fprintf(f,
824 "%sMain PID: "PID_FMT"\n"
825 "%sMain PID Known: %s\n"
826 "%sMain PID Alien: %s\n",
827 prefix, s->main_pid,
828 prefix, yes_no(s->main_pid_known),
829 prefix, yes_no(s->main_pid_alien));
830
831 if (s->pid_file)
832 fprintf(f,
833 "%sPIDFile: %s\n",
834 prefix, s->pid_file);
835
836 if (s->bus_name)
837 fprintf(f,
838 "%sBusName: %s\n"
839 "%sBus Name Good: %s\n",
840 prefix, s->bus_name,
841 prefix, yes_no(s->bus_name_good));
842
843 if (UNIT_ISSET(s->accept_socket))
844 fprintf(f,
845 "%sAccept Socket: %s\n",
846 prefix, UNIT_DEREF(s->accept_socket)->id);
847
848 fprintf(f,
849 "%sRestartSec: %s\n"
850 "%sTimeoutStartSec: %s\n"
851 "%sTimeoutStopSec: %s\n"
852 "%sRuntimeMaxSec: %s\n"
853 "%sWatchdogSec: %s\n",
854 prefix, format_timespan(buf_restart, sizeof(buf_restart), s->restart_usec, USEC_PER_SEC),
855 prefix, format_timespan(buf_start, sizeof(buf_start), s->timeout_start_usec, USEC_PER_SEC),
856 prefix, format_timespan(buf_stop, sizeof(buf_stop), s->timeout_stop_usec, USEC_PER_SEC),
857 prefix, format_timespan(buf_runtime, sizeof(buf_runtime), s->runtime_max_usec, USEC_PER_SEC),
858 prefix, format_timespan(buf_watchdog, sizeof(buf_watchdog), s->watchdog_usec, USEC_PER_SEC));
859
860 kill_context_dump(&s->kill_context, f, prefix);
861 exec_context_dump(&s->exec_context, f, prefix);
862
863 for (c = 0; c < _SERVICE_EXEC_COMMAND_MAX; c++) {
864
865 if (!s->exec_command[c])
866 continue;
867
868 fprintf(f, "%s-> %s:\n",
869 prefix, service_exec_command_to_string(c));
870
871 exec_command_dump_list(s->exec_command[c], f, prefix2);
872 }
873
874 if (s->status_text)
875 fprintf(f, "%sStatus Text: %s\n",
876 prefix, s->status_text);
877
878 if (s->n_fd_store_max > 0)
879 fprintf(f,
880 "%sFile Descriptor Store Max: %u\n"
881 "%sFile Descriptor Store Current: %zu\n",
882 prefix, s->n_fd_store_max,
883 prefix, s->n_fd_store);
884
885 cgroup_context_dump(&s->cgroup_context, f, prefix);
886 }
887
888 static int service_is_suitable_main_pid(Service *s, pid_t pid, int prio) {
889 Unit *owner;
890
891 assert(s);
892 assert(pid_is_valid(pid));
893
894 /* Checks whether the specified PID is suitable as main PID for this service. returns negative if not, 0 if the
895 * PID is questionnable but should be accepted if the source of configuration is trusted. > 0 if the PID is
896 * good */
897
898 if (pid == getpid_cached() || pid == 1) {
899 log_unit_full(UNIT(s), prio, 0, "New main PID "PID_FMT" is the manager, refusing.", pid);
900 return -EPERM;
901 }
902
903 if (pid == s->control_pid) {
904 log_unit_full(UNIT(s), prio, 0, "New main PID "PID_FMT" is the control process, refusing.", pid);
905 return -EPERM;
906 }
907
908 if (!pid_is_alive(pid)) {
909 log_unit_full(UNIT(s), prio, 0, "New main PID "PID_FMT" does not exist or is a zombie.", pid);
910 return -ESRCH;
911 }
912
913 owner = manager_get_unit_by_pid(UNIT(s)->manager, pid);
914 if (owner == UNIT(s)) {
915 log_unit_debug(UNIT(s), "New main PID "PID_FMT" belongs to service, we are happy.", pid);
916 return 1; /* Yay, it's definitely a good PID */
917 }
918
919 return 0; /* Hmm it's a suspicious PID, let's accept it if configuration source is trusted */
920 }
921
922 static int service_load_pid_file(Service *s, bool may_warn) {
923 char procfs[STRLEN("/proc/self/fd/") + DECIMAL_STR_MAX(int)];
924 bool questionable_pid_file = false;
925 _cleanup_free_ char *k = NULL;
926 _cleanup_close_ int fd = -1;
927 int r, prio;
928 pid_t pid;
929
930 assert(s);
931
932 if (!s->pid_file)
933 return -ENOENT;
934
935 prio = may_warn ? LOG_INFO : LOG_DEBUG;
936
937 fd = chase_symlinks(s->pid_file, NULL, CHASE_OPEN|CHASE_SAFE, NULL);
938 if (fd == -ENOLINK) {
939 log_unit_full(UNIT(s), LOG_DEBUG, fd, "Potentially unsafe symlink chain, will now retry with relaxed checks: %s", s->pid_file);
940
941 questionable_pid_file = true;
942
943 fd = chase_symlinks(s->pid_file, NULL, CHASE_OPEN, NULL);
944 }
945 if (fd < 0)
946 return log_unit_full(UNIT(s), prio, fd, "Can't open PID file %s (yet?) after %s: %m", s->pid_file, service_state_to_string(s->state));
947
948 /* Let's read the PID file now that we chased it down. But we need to convert the O_PATH fd chase_symlinks() returned us into a proper fd first. */
949 xsprintf(procfs, "/proc/self/fd/%i", fd);
950 r = read_one_line_file(procfs, &k);
951 if (r < 0)
952 return log_unit_error_errno(UNIT(s), r, "Can't convert PID files %s O_PATH file descriptor to proper file descriptor: %m", s->pid_file);
953
954 r = parse_pid(k, &pid);
955 if (r < 0)
956 return log_unit_full(UNIT(s), prio, r, "Failed to parse PID from file %s: %m", s->pid_file);
957
958 if (s->main_pid_known && pid == s->main_pid)
959 return 0;
960
961 r = service_is_suitable_main_pid(s, pid, prio);
962 if (r < 0)
963 return r;
964 if (r == 0) {
965 struct stat st;
966
967 if (questionable_pid_file) {
968 log_unit_error(UNIT(s), "Refusing to accept PID outside of service control group, acquired through unsafe symlink chain: %s", s->pid_file);
969 return -EPERM;
970 }
971
972 /* Hmm, it's not clear if the new main PID is safe. Let's allow this if the PID file is owned by root */
973
974 if (fstat(fd, &st) < 0)
975 return log_unit_error_errno(UNIT(s), errno, "Failed to fstat() PID file O_PATH fd: %m");
976
977 if (st.st_uid != 0) {
978 log_unit_error(UNIT(s), "New main PID "PID_FMT" does not belong to service, and PID file is not owned by root. Refusing.", pid);
979 return -EPERM;
980 }
981
982 log_unit_debug(UNIT(s), "New main PID "PID_FMT" does not belong to service, but we'll accept it since PID file is owned by root.", pid);
983 }
984
985 if (s->main_pid_known) {
986 log_unit_debug(UNIT(s), "Main PID changing: "PID_FMT" -> "PID_FMT, s->main_pid, pid);
987
988 service_unwatch_main_pid(s);
989 s->main_pid_known = false;
990 } else
991 log_unit_debug(UNIT(s), "Main PID loaded: "PID_FMT, pid);
992
993 r = service_set_main_pid(s, pid);
994 if (r < 0)
995 return r;
996
997 r = unit_watch_pid(UNIT(s), pid);
998 if (r < 0) /* FIXME: we need to do something here */
999 return log_unit_warning_errno(UNIT(s), r, "Failed to watch PID "PID_FMT" for service: %m", pid);
1000
1001 return 1;
1002 }
1003
1004 static void service_search_main_pid(Service *s) {
1005 pid_t pid = 0;
1006 int r;
1007
1008 assert(s);
1009
1010 /* If we know it anyway, don't ever fallback to unreliable
1011 * heuristics */
1012 if (s->main_pid_known)
1013 return;
1014
1015 if (!s->guess_main_pid)
1016 return;
1017
1018 assert(s->main_pid <= 0);
1019
1020 if (unit_search_main_pid(UNIT(s), &pid) < 0)
1021 return;
1022
1023 log_unit_debug(UNIT(s), "Main PID guessed: "PID_FMT, pid);
1024 if (service_set_main_pid(s, pid) < 0)
1025 return;
1026
1027 r = unit_watch_pid(UNIT(s), pid);
1028 if (r < 0)
1029 /* FIXME: we need to do something here */
1030 log_unit_warning_errno(UNIT(s), r, "Failed to watch PID "PID_FMT" from: %m", pid);
1031 }
1032
1033 static void service_set_state(Service *s, ServiceState state) {
1034 ServiceState old_state;
1035 const UnitActiveState *table;
1036
1037 assert(s);
1038
1039 if (s->state != state)
1040 bus_unit_send_pending_change_signal(UNIT(s), false);
1041
1042 table = s->type == SERVICE_IDLE ? state_translation_table_idle : state_translation_table;
1043
1044 old_state = s->state;
1045 s->state = state;
1046
1047 service_unwatch_pid_file(s);
1048
1049 if (!IN_SET(state,
1050 SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST,
1051 SERVICE_RUNNING,
1052 SERVICE_RELOAD,
1053 SERVICE_STOP, SERVICE_STOP_WATCHDOG, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
1054 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL,
1055 SERVICE_AUTO_RESTART))
1056 s->timer_event_source = sd_event_source_unref(s->timer_event_source);
1057
1058 if (!IN_SET(state,
1059 SERVICE_START, SERVICE_START_POST,
1060 SERVICE_RUNNING, SERVICE_RELOAD,
1061 SERVICE_STOP, SERVICE_STOP_WATCHDOG, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
1062 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL)) {
1063 service_unwatch_main_pid(s);
1064 s->main_command = NULL;
1065 }
1066
1067 if (!IN_SET(state,
1068 SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST,
1069 SERVICE_RELOAD,
1070 SERVICE_STOP, SERVICE_STOP_WATCHDOG, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
1071 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL)) {
1072 service_unwatch_control_pid(s);
1073 s->control_command = NULL;
1074 s->control_command_id = _SERVICE_EXEC_COMMAND_INVALID;
1075 }
1076
1077 if (IN_SET(state, SERVICE_DEAD, SERVICE_FAILED, SERVICE_AUTO_RESTART)) {
1078 unit_unwatch_all_pids(UNIT(s));
1079 unit_dequeue_rewatch_pids(UNIT(s));
1080 }
1081
1082 if (!IN_SET(state,
1083 SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST,
1084 SERVICE_RUNNING, SERVICE_RELOAD,
1085 SERVICE_STOP, SERVICE_STOP_WATCHDOG, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
1086 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL) &&
1087 !(state == SERVICE_DEAD && UNIT(s)->job))
1088 service_close_socket_fd(s);
1089
1090 if (state != SERVICE_START)
1091 s->exec_fd_event_source = sd_event_source_unref(s->exec_fd_event_source);
1092
1093 if (!IN_SET(state, SERVICE_START_POST, SERVICE_RUNNING, SERVICE_RELOAD))
1094 service_stop_watchdog(s);
1095
1096 /* For the inactive states unit_notify() will trim the cgroup,
1097 * but for exit we have to do that ourselves... */
1098 if (state == SERVICE_EXITED && !MANAGER_IS_RELOADING(UNIT(s)->manager))
1099 unit_prune_cgroup(UNIT(s));
1100
1101 if (old_state != state)
1102 log_unit_debug(UNIT(s), "Changed %s -> %s", service_state_to_string(old_state), service_state_to_string(state));
1103
1104 unit_notify(UNIT(s), table[old_state], table[state],
1105 (s->reload_result == SERVICE_SUCCESS ? 0 : UNIT_NOTIFY_RELOAD_FAILURE) |
1106 (s->will_auto_restart ? UNIT_NOTIFY_WILL_AUTO_RESTART : 0));
1107 }
1108
1109 static usec_t service_coldplug_timeout(Service *s) {
1110 assert(s);
1111
1112 switch (s->deserialized_state) {
1113
1114 case SERVICE_START_PRE:
1115 case SERVICE_START:
1116 case SERVICE_START_POST:
1117 case SERVICE_RELOAD:
1118 return usec_add(UNIT(s)->state_change_timestamp.monotonic, s->timeout_start_usec);
1119
1120 case SERVICE_RUNNING:
1121 return usec_add(UNIT(s)->active_enter_timestamp.monotonic, s->runtime_max_usec);
1122
1123 case SERVICE_STOP:
1124 case SERVICE_STOP_WATCHDOG:
1125 case SERVICE_STOP_SIGTERM:
1126 case SERVICE_STOP_SIGKILL:
1127 case SERVICE_STOP_POST:
1128 case SERVICE_FINAL_SIGTERM:
1129 case SERVICE_FINAL_SIGKILL:
1130 return usec_add(UNIT(s)->state_change_timestamp.monotonic, s->timeout_stop_usec);
1131
1132 case SERVICE_AUTO_RESTART:
1133 return usec_add(UNIT(s)->inactive_enter_timestamp.monotonic, s->restart_usec);
1134
1135 default:
1136 return USEC_INFINITY;
1137 }
1138 }
1139
1140 static int service_coldplug(Unit *u) {
1141 Service *s = SERVICE(u);
1142 int r;
1143
1144 assert(s);
1145 assert(s->state == SERVICE_DEAD);
1146
1147 if (s->deserialized_state == s->state)
1148 return 0;
1149
1150 r = service_arm_timer(s, service_coldplug_timeout(s));
1151 if (r < 0)
1152 return r;
1153
1154 if (s->main_pid > 0 &&
1155 pid_is_unwaited(s->main_pid) &&
1156 (IN_SET(s->deserialized_state,
1157 SERVICE_START, SERVICE_START_POST,
1158 SERVICE_RUNNING, SERVICE_RELOAD,
1159 SERVICE_STOP, SERVICE_STOP_WATCHDOG, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
1160 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL))) {
1161 r = unit_watch_pid(UNIT(s), s->main_pid);
1162 if (r < 0)
1163 return r;
1164 }
1165
1166 if (s->control_pid > 0 &&
1167 pid_is_unwaited(s->control_pid) &&
1168 IN_SET(s->deserialized_state,
1169 SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST,
1170 SERVICE_RELOAD,
1171 SERVICE_STOP, SERVICE_STOP_WATCHDOG, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
1172 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL)) {
1173 r = unit_watch_pid(UNIT(s), s->control_pid);
1174 if (r < 0)
1175 return r;
1176 }
1177
1178 if (!IN_SET(s->deserialized_state, SERVICE_DEAD, SERVICE_FAILED, SERVICE_AUTO_RESTART)) {
1179 (void) unit_enqueue_rewatch_pids(u);
1180 (void) unit_setup_dynamic_creds(u);
1181 (void) unit_setup_exec_runtime(u);
1182 }
1183
1184 if (IN_SET(s->deserialized_state, SERVICE_START_POST, SERVICE_RUNNING, SERVICE_RELOAD))
1185 service_start_watchdog(s);
1186
1187 if (UNIT_ISSET(s->accept_socket)) {
1188 Socket* socket = SOCKET(UNIT_DEREF(s->accept_socket));
1189
1190 if (socket->max_connections_per_source > 0) {
1191 SocketPeer *peer;
1192
1193 /* Make a best-effort attempt at bumping the connection count */
1194 if (socket_acquire_peer(socket, s->socket_fd, &peer) > 0) {
1195 socket_peer_unref(s->peer);
1196 s->peer = peer;
1197 }
1198 }
1199 }
1200
1201 service_set_state(s, s->deserialized_state);
1202 return 0;
1203 }
1204
1205 static int service_collect_fds(
1206 Service *s,
1207 int **fds,
1208 char ***fd_names,
1209 size_t *n_socket_fds,
1210 size_t *n_storage_fds) {
1211
1212 _cleanup_strv_free_ char **rfd_names = NULL;
1213 _cleanup_free_ int *rfds = NULL;
1214 size_t rn_socket_fds = 0, rn_storage_fds = 0;
1215 int r;
1216
1217 assert(s);
1218 assert(fds);
1219 assert(fd_names);
1220 assert(n_socket_fds);
1221 assert(n_storage_fds);
1222
1223 if (s->socket_fd >= 0) {
1224
1225 /* Pass the per-connection socket */
1226
1227 rfds = new(int, 1);
1228 if (!rfds)
1229 return -ENOMEM;
1230 rfds[0] = s->socket_fd;
1231
1232 rfd_names = strv_new("connection");
1233 if (!rfd_names)
1234 return -ENOMEM;
1235
1236 rn_socket_fds = 1;
1237 } else {
1238 Iterator i;
1239 void *v;
1240 Unit *u;
1241
1242 /* Pass all our configured sockets for singleton services */
1243
1244 HASHMAP_FOREACH_KEY(v, u, UNIT(s)->dependencies[UNIT_TRIGGERED_BY], i) {
1245 _cleanup_free_ int *cfds = NULL;
1246 Socket *sock;
1247 int cn_fds;
1248
1249 if (u->type != UNIT_SOCKET)
1250 continue;
1251
1252 sock = SOCKET(u);
1253
1254 cn_fds = socket_collect_fds(sock, &cfds);
1255 if (cn_fds < 0)
1256 return cn_fds;
1257
1258 if (cn_fds <= 0)
1259 continue;
1260
1261 if (!rfds) {
1262 rfds = TAKE_PTR(cfds);
1263 rn_socket_fds = cn_fds;
1264 } else {
1265 int *t;
1266
1267 t = reallocarray(rfds, rn_socket_fds + cn_fds, sizeof(int));
1268 if (!t)
1269 return -ENOMEM;
1270
1271 memcpy(t + rn_socket_fds, cfds, cn_fds * sizeof(int));
1272
1273 rfds = t;
1274 rn_socket_fds += cn_fds;
1275 }
1276
1277 r = strv_extend_n(&rfd_names, socket_fdname(sock), cn_fds);
1278 if (r < 0)
1279 return r;
1280 }
1281 }
1282
1283 if (s->n_fd_store > 0) {
1284 ServiceFDStore *fs;
1285 size_t n_fds;
1286 char **nl;
1287 int *t;
1288
1289 t = reallocarray(rfds, rn_socket_fds + s->n_fd_store, sizeof(int));
1290 if (!t)
1291 return -ENOMEM;
1292
1293 rfds = t;
1294
1295 nl = reallocarray(rfd_names, rn_socket_fds + s->n_fd_store + 1, sizeof(char *));
1296 if (!nl)
1297 return -ENOMEM;
1298
1299 rfd_names = nl;
1300 n_fds = rn_socket_fds;
1301
1302 LIST_FOREACH(fd_store, fs, s->fd_store) {
1303 rfds[n_fds] = fs->fd;
1304 rfd_names[n_fds] = strdup(strempty(fs->fdname));
1305 if (!rfd_names[n_fds])
1306 return -ENOMEM;
1307
1308 rn_storage_fds++;
1309 n_fds++;
1310 }
1311
1312 rfd_names[n_fds] = NULL;
1313 }
1314
1315 *fds = TAKE_PTR(rfds);
1316 *fd_names = TAKE_PTR(rfd_names);
1317 *n_socket_fds = rn_socket_fds;
1318 *n_storage_fds = rn_storage_fds;
1319
1320 return 0;
1321 }
1322
1323 static int service_allocate_exec_fd_event_source(
1324 Service *s,
1325 int fd,
1326 sd_event_source **ret_event_source) {
1327
1328 _cleanup_(sd_event_source_unrefp) sd_event_source *source = NULL;
1329 int r;
1330
1331 assert(s);
1332 assert(fd >= 0);
1333 assert(ret_event_source);
1334
1335 r = sd_event_add_io(UNIT(s)->manager->event, &source, fd, 0, service_dispatch_exec_io, s);
1336 if (r < 0)
1337 return log_unit_error_errno(UNIT(s), r, "Failed to allocate exec_fd event source: %m");
1338
1339 /* This is a bit lower priority than SIGCHLD, as that carries a lot more interesting failure information */
1340
1341 r = sd_event_source_set_priority(source, SD_EVENT_PRIORITY_NORMAL-3);
1342 if (r < 0)
1343 return log_unit_error_errno(UNIT(s), r, "Failed to adjust priority of exec_fd event source: %m");
1344
1345 (void) sd_event_source_set_description(source, "service event_fd");
1346
1347 r = sd_event_source_set_io_fd_own(source, true);
1348 if (r < 0)
1349 return log_unit_error_errno(UNIT(s), r, "Failed to pass ownership of fd to event source: %m");
1350
1351 *ret_event_source = TAKE_PTR(source);
1352 return 0;
1353 }
1354
1355 static int service_allocate_exec_fd(
1356 Service *s,
1357 sd_event_source **ret_event_source,
1358 int* ret_exec_fd) {
1359
1360 _cleanup_close_pair_ int p[2] = { -1, -1 };
1361 int r;
1362
1363 assert(s);
1364 assert(ret_event_source);
1365 assert(ret_exec_fd);
1366
1367 if (pipe2(p, O_CLOEXEC|O_NONBLOCK) < 0)
1368 return log_unit_error_errno(UNIT(s), errno, "Failed to allocate exec_fd pipe: %m");
1369
1370 r = service_allocate_exec_fd_event_source(s, p[0], ret_event_source);
1371 if (r < 0)
1372 return r;
1373
1374 p[0] = -1;
1375 *ret_exec_fd = TAKE_FD(p[1]);
1376
1377 return 0;
1378 }
1379
1380 static bool service_exec_needs_notify_socket(Service *s, ExecFlags flags) {
1381 assert(s);
1382
1383 /* Notifications are accepted depending on the process and
1384 * the access setting of the service:
1385 * process: \ access: NONE MAIN EXEC ALL
1386 * main no yes yes yes
1387 * control no no yes yes
1388 * other (forked) no no no yes */
1389
1390 if (flags & EXEC_IS_CONTROL)
1391 /* A control process */
1392 return IN_SET(s->notify_access, NOTIFY_EXEC, NOTIFY_ALL);
1393
1394 /* We only spawn main processes and control processes, so any
1395 * process that is not a control process is a main process */
1396 return s->notify_access != NOTIFY_NONE;
1397 }
1398
1399 static int service_spawn(
1400 Service *s,
1401 ExecCommand *c,
1402 usec_t timeout,
1403 ExecFlags flags,
1404 pid_t *_pid) {
1405
1406 _cleanup_(exec_params_clear) ExecParameters exec_params = {
1407 .flags = flags,
1408 .stdin_fd = -1,
1409 .stdout_fd = -1,
1410 .stderr_fd = -1,
1411 .exec_fd = -1,
1412 };
1413 _cleanup_strv_free_ char **final_env = NULL, **our_env = NULL, **fd_names = NULL;
1414 _cleanup_(sd_event_source_unrefp) sd_event_source *exec_fd_source = NULL;
1415 size_t n_socket_fds = 0, n_storage_fds = 0, n_env = 0;
1416 _cleanup_close_ int exec_fd = -1;
1417 _cleanup_free_ int *fds = NULL;
1418 pid_t pid;
1419 int r;
1420
1421 assert(s);
1422 assert(c);
1423 assert(_pid);
1424
1425 r = unit_prepare_exec(UNIT(s)); /* This realizes the cgroup, among other things */
1426 if (r < 0)
1427 return r;
1428
1429 if (flags & EXEC_IS_CONTROL) {
1430 /* If this is a control process, mask the permissions/chroot application if this is requested. */
1431 if (s->permissions_start_only)
1432 exec_params.flags &= ~EXEC_APPLY_SANDBOXING;
1433 if (s->root_directory_start_only)
1434 exec_params.flags &= ~EXEC_APPLY_CHROOT;
1435 }
1436
1437 if ((flags & EXEC_PASS_FDS) ||
1438 s->exec_context.std_input == EXEC_INPUT_SOCKET ||
1439 s->exec_context.std_output == EXEC_OUTPUT_SOCKET ||
1440 s->exec_context.std_error == EXEC_OUTPUT_SOCKET) {
1441
1442 r = service_collect_fds(s, &fds, &fd_names, &n_socket_fds, &n_storage_fds);
1443 if (r < 0)
1444 return r;
1445
1446 log_unit_debug(UNIT(s), "Passing %zu fds to service", n_socket_fds + n_storage_fds);
1447 }
1448
1449 if (!FLAGS_SET(flags, EXEC_IS_CONTROL) && s->type == SERVICE_EXEC) {
1450 assert(!s->exec_fd_event_source);
1451
1452 r = service_allocate_exec_fd(s, &exec_fd_source, &exec_fd);
1453 if (r < 0)
1454 return r;
1455 }
1456
1457 r = service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), timeout));
1458 if (r < 0)
1459 return r;
1460
1461 our_env = new0(char*, 10);
1462 if (!our_env)
1463 return -ENOMEM;
1464
1465 if (service_exec_needs_notify_socket(s, flags))
1466 if (asprintf(our_env + n_env++, "NOTIFY_SOCKET=%s", UNIT(s)->manager->notify_socket) < 0)
1467 return -ENOMEM;
1468
1469 if (s->main_pid > 0)
1470 if (asprintf(our_env + n_env++, "MAINPID="PID_FMT, s->main_pid) < 0)
1471 return -ENOMEM;
1472
1473 if (MANAGER_IS_USER(UNIT(s)->manager))
1474 if (asprintf(our_env + n_env++, "MANAGERPID="PID_FMT, getpid_cached()) < 0)
1475 return -ENOMEM;
1476
1477 if (s->pid_file)
1478 if (asprintf(our_env + n_env++, "PIDFILE=%s", s->pid_file) < 0)
1479 return -ENOMEM;
1480
1481 if (s->socket_fd >= 0) {
1482 union sockaddr_union sa;
1483 socklen_t salen = sizeof(sa);
1484
1485 /* If this is a per-connection service instance, let's set $REMOTE_ADDR and $REMOTE_PORT to something
1486 * useful. Note that we do this only when we are still connected at this point in time, which we might
1487 * very well not be. Hence we ignore all errors when retrieving peer information (as that might result
1488 * in ENOTCONN), and just use whate we can use. */
1489
1490 if (getpeername(s->socket_fd, &sa.sa, &salen) >= 0 &&
1491 IN_SET(sa.sa.sa_family, AF_INET, AF_INET6, AF_VSOCK)) {
1492
1493 _cleanup_free_ char *addr = NULL;
1494 char *t;
1495 unsigned port;
1496
1497 r = sockaddr_pretty(&sa.sa, salen, true, false, &addr);
1498 if (r < 0)
1499 return r;
1500
1501 t = strappend("REMOTE_ADDR=", addr);
1502 if (!t)
1503 return -ENOMEM;
1504 our_env[n_env++] = t;
1505
1506 r = sockaddr_port(&sa.sa, &port);
1507 if (r < 0)
1508 return r;
1509
1510 if (asprintf(&t, "REMOTE_PORT=%u", port) < 0)
1511 return -ENOMEM;
1512 our_env[n_env++] = t;
1513 }
1514 }
1515
1516 if (flags & EXEC_SETENV_RESULT) {
1517 if (asprintf(our_env + n_env++, "SERVICE_RESULT=%s", service_result_to_string(s->result)) < 0)
1518 return -ENOMEM;
1519
1520 if (s->main_exec_status.pid > 0 &&
1521 dual_timestamp_is_set(&s->main_exec_status.exit_timestamp)) {
1522 if (asprintf(our_env + n_env++, "EXIT_CODE=%s", sigchld_code_to_string(s->main_exec_status.code)) < 0)
1523 return -ENOMEM;
1524
1525 if (s->main_exec_status.code == CLD_EXITED)
1526 r = asprintf(our_env + n_env++, "EXIT_STATUS=%i", s->main_exec_status.status);
1527 else
1528 r = asprintf(our_env + n_env++, "EXIT_STATUS=%s", signal_to_string(s->main_exec_status.status));
1529 if (r < 0)
1530 return -ENOMEM;
1531 }
1532 }
1533
1534 r = unit_set_exec_params(UNIT(s), &exec_params);
1535 if (r < 0)
1536 return r;
1537
1538 final_env = strv_env_merge(2, exec_params.environment, our_env, NULL);
1539 if (!final_env)
1540 return -ENOMEM;
1541
1542 /* System D-Bus needs nss-systemd disabled, so that we don't deadlock */
1543 SET_FLAG(exec_params.flags, EXEC_NSS_BYPASS_BUS,
1544 MANAGER_IS_SYSTEM(UNIT(s)->manager) && unit_has_name(UNIT(s), SPECIAL_DBUS_SERVICE));
1545
1546 strv_free_and_replace(exec_params.environment, final_env);
1547 exec_params.fds = fds;
1548 exec_params.fd_names = fd_names;
1549 exec_params.n_socket_fds = n_socket_fds;
1550 exec_params.n_storage_fds = n_storage_fds;
1551 exec_params.watchdog_usec = service_get_watchdog_usec(s);
1552 exec_params.selinux_context_net = s->socket_fd_selinux_context_net;
1553 if (s->type == SERVICE_IDLE)
1554 exec_params.idle_pipe = UNIT(s)->manager->idle_pipe;
1555 exec_params.stdin_fd = s->stdin_fd;
1556 exec_params.stdout_fd = s->stdout_fd;
1557 exec_params.stderr_fd = s->stderr_fd;
1558 exec_params.exec_fd = exec_fd;
1559
1560 r = exec_spawn(UNIT(s),
1561 c,
1562 &s->exec_context,
1563 &exec_params,
1564 s->exec_runtime,
1565 &s->dynamic_creds,
1566 &pid);
1567 if (r < 0)
1568 return r;
1569
1570 s->exec_fd_event_source = TAKE_PTR(exec_fd_source);
1571 s->exec_fd_hot = false;
1572
1573 r = unit_watch_pid(UNIT(s), pid);
1574 if (r < 0) /* FIXME: we need to do something here */
1575 return r;
1576
1577 *_pid = pid;
1578
1579 return 0;
1580 }
1581
1582 static int main_pid_good(Service *s) {
1583 assert(s);
1584
1585 /* Returns 0 if the pid is dead, > 0 if it is good, < 0 if we don't know */
1586
1587 /* If we know the pid file, then let's just check if it is
1588 * still valid */
1589 if (s->main_pid_known) {
1590
1591 /* If it's an alien child let's check if it is still
1592 * alive ... */
1593 if (s->main_pid_alien && s->main_pid > 0)
1594 return pid_is_alive(s->main_pid);
1595
1596 /* .. otherwise assume we'll get a SIGCHLD for it,
1597 * which we really should wait for to collect exit
1598 * status and code */
1599 return s->main_pid > 0;
1600 }
1601
1602 /* We don't know the pid */
1603 return -EAGAIN;
1604 }
1605
1606 static int control_pid_good(Service *s) {
1607 assert(s);
1608
1609 /* Returns 0 if the control PID is dead, > 0 if it is good. We never actually return < 0 here, but in order to
1610 * make this function as similar as possible to main_pid_good() and cgroup_good(), we pretend that < 0 also
1611 * means: we can't figure it out. */
1612
1613 return s->control_pid > 0;
1614 }
1615
1616 static int cgroup_good(Service *s) {
1617 int r;
1618
1619 assert(s);
1620
1621 /* Returns 0 if the cgroup is empty or doesn't exist, > 0 if it is exists and is populated, < 0 if we can't
1622 * figure it out */
1623
1624 if (!UNIT(s)->cgroup_path)
1625 return 0;
1626
1627 r = cg_is_empty_recursive(SYSTEMD_CGROUP_CONTROLLER, UNIT(s)->cgroup_path);
1628 if (r < 0)
1629 return r;
1630
1631 return r == 0;
1632 }
1633
1634 static bool service_shall_restart(Service *s) {
1635 assert(s);
1636
1637 /* Don't restart after manual stops */
1638 if (s->forbid_restart)
1639 return false;
1640
1641 /* Never restart if this is configured as special exception */
1642 if (exit_status_set_test(&s->restart_prevent_status, s->main_exec_status.code, s->main_exec_status.status))
1643 return false;
1644
1645 /* Restart if the exit code/status are configured as restart triggers */
1646 if (exit_status_set_test(&s->restart_force_status, s->main_exec_status.code, s->main_exec_status.status))
1647 return true;
1648
1649 switch (s->restart) {
1650
1651 case SERVICE_RESTART_NO:
1652 return false;
1653
1654 case SERVICE_RESTART_ALWAYS:
1655 return true;
1656
1657 case SERVICE_RESTART_ON_SUCCESS:
1658 return s->result == SERVICE_SUCCESS;
1659
1660 case SERVICE_RESTART_ON_FAILURE:
1661 return s->result != SERVICE_SUCCESS;
1662
1663 case SERVICE_RESTART_ON_ABNORMAL:
1664 return !IN_SET(s->result, SERVICE_SUCCESS, SERVICE_FAILURE_EXIT_CODE);
1665
1666 case SERVICE_RESTART_ON_WATCHDOG:
1667 return s->result == SERVICE_FAILURE_WATCHDOG;
1668
1669 case SERVICE_RESTART_ON_ABORT:
1670 return IN_SET(s->result, SERVICE_FAILURE_SIGNAL, SERVICE_FAILURE_CORE_DUMP);
1671
1672 default:
1673 assert_not_reached("unknown restart setting");
1674 }
1675 }
1676
1677 static bool service_will_restart(Unit *u) {
1678 Service *s = SERVICE(u);
1679
1680 assert(s);
1681
1682 if (s->will_auto_restart)
1683 return true;
1684 if (s->state == SERVICE_AUTO_RESTART)
1685 return true;
1686 if (!UNIT(s)->job)
1687 return false;
1688 if (UNIT(s)->job->type == JOB_START)
1689 return true;
1690
1691 return false;
1692 }
1693
1694 static void service_enter_dead(Service *s, ServiceResult f, bool allow_restart) {
1695 int r;
1696
1697 assert(s);
1698
1699 /* If there's a stop job queued before we enter the DEAD state, we shouldn't act on Restart=, in order to not
1700 * undo what has already been enqueued. */
1701 if (unit_stop_pending(UNIT(s)))
1702 allow_restart = false;
1703
1704 if (s->result == SERVICE_SUCCESS)
1705 s->result = f;
1706
1707 unit_log_result(UNIT(s), s->result == SERVICE_SUCCESS, service_result_to_string(s->result));
1708
1709 if (allow_restart && service_shall_restart(s))
1710 s->will_auto_restart = true;
1711
1712 /* Make sure service_release_resources() doesn't destroy our FD store, while we are changing through
1713 * SERVICE_FAILED/SERVICE_DEAD before entering into SERVICE_AUTO_RESTART. */
1714 s->n_keep_fd_store ++;
1715
1716 service_set_state(s, s->result != SERVICE_SUCCESS ? SERVICE_FAILED : SERVICE_DEAD);
1717
1718 if (s->will_auto_restart) {
1719 s->will_auto_restart = false;
1720
1721 r = service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), s->restart_usec));
1722 if (r < 0) {
1723 s->n_keep_fd_store--;
1724 goto fail;
1725 }
1726
1727 service_set_state(s, SERVICE_AUTO_RESTART);
1728 } else
1729 /* If we shan't restart, then flush out the restart counter. But don't do that immediately, so that the
1730 * user can still introspect the counter. Do so on the next start. */
1731 s->flush_n_restarts = true;
1732
1733 /* The new state is in effect, let's decrease the fd store ref counter again. Let's also readd us to the GC
1734 * queue, so that the fd store is possibly gc'ed again */
1735 s->n_keep_fd_store--;
1736 unit_add_to_gc_queue(UNIT(s));
1737
1738 /* The next restart might not be a manual stop, hence reset the flag indicating manual stops */
1739 s->forbid_restart = false;
1740
1741 /* We want fresh tmpdirs in case service is started again immediately */
1742 s->exec_runtime = exec_runtime_unref(s->exec_runtime, true);
1743
1744 if (s->exec_context.runtime_directory_preserve_mode == EXEC_PRESERVE_NO ||
1745 (s->exec_context.runtime_directory_preserve_mode == EXEC_PRESERVE_RESTART && !service_will_restart(UNIT(s))))
1746 /* Also, remove the runtime directory */
1747 exec_context_destroy_runtime_directory(&s->exec_context, UNIT(s)->manager->prefix[EXEC_DIRECTORY_RUNTIME]);
1748
1749 /* Get rid of the IPC bits of the user */
1750 unit_unref_uid_gid(UNIT(s), true);
1751
1752 /* Release the user, and destroy it if we are the only remaining owner */
1753 dynamic_creds_destroy(&s->dynamic_creds);
1754
1755 /* Try to delete the pid file. At this point it will be
1756 * out-of-date, and some software might be confused by it, so
1757 * let's remove it. */
1758 if (s->pid_file)
1759 (void) unlink(s->pid_file);
1760
1761 return;
1762
1763 fail:
1764 log_unit_warning_errno(UNIT(s), r, "Failed to run install restart timer: %m");
1765 service_enter_dead(s, SERVICE_FAILURE_RESOURCES, false);
1766 }
1767
1768 static void service_enter_stop_post(Service *s, ServiceResult f) {
1769 int r;
1770 assert(s);
1771
1772 if (s->result == SERVICE_SUCCESS)
1773 s->result = f;
1774
1775 service_unwatch_control_pid(s);
1776 (void) unit_enqueue_rewatch_pids(UNIT(s));
1777
1778 s->control_command = s->exec_command[SERVICE_EXEC_STOP_POST];
1779 if (s->control_command) {
1780 s->control_command_id = SERVICE_EXEC_STOP_POST;
1781
1782 r = service_spawn(s,
1783 s->control_command,
1784 s->timeout_stop_usec,
1785 EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_APPLY_TTY_STDIN|EXEC_IS_CONTROL|EXEC_SETENV_RESULT|EXEC_CONTROL_CGROUP,
1786 &s->control_pid);
1787 if (r < 0)
1788 goto fail;
1789
1790 service_set_state(s, SERVICE_STOP_POST);
1791 } else
1792 service_enter_signal(s, SERVICE_FINAL_SIGTERM, SERVICE_SUCCESS);
1793
1794 return;
1795
1796 fail:
1797 log_unit_warning_errno(UNIT(s), r, "Failed to run 'stop-post' task: %m");
1798 service_enter_signal(s, SERVICE_FINAL_SIGTERM, SERVICE_FAILURE_RESOURCES);
1799 }
1800
1801 static int state_to_kill_operation(ServiceState state) {
1802 switch (state) {
1803
1804 case SERVICE_STOP_WATCHDOG:
1805 return KILL_WATCHDOG;
1806
1807 case SERVICE_STOP_SIGTERM:
1808 case SERVICE_FINAL_SIGTERM:
1809 return KILL_TERMINATE;
1810
1811 case SERVICE_STOP_SIGKILL:
1812 case SERVICE_FINAL_SIGKILL:
1813 return KILL_KILL;
1814
1815 default:
1816 return _KILL_OPERATION_INVALID;
1817 }
1818 }
1819
1820 static void service_enter_signal(Service *s, ServiceState state, ServiceResult f) {
1821 int r;
1822
1823 assert(s);
1824
1825 if (s->result == SERVICE_SUCCESS)
1826 s->result = f;
1827
1828 /* Before sending any signal, make sure we track all members of this cgroup */
1829 (void) unit_watch_all_pids(UNIT(s));
1830
1831 /* Also, enqueue a job that we recheck all our PIDs a bit later, given that it's likely some processes have
1832 * died now */
1833 (void) unit_enqueue_rewatch_pids(UNIT(s));
1834
1835 r = unit_kill_context(
1836 UNIT(s),
1837 &s->kill_context,
1838 state_to_kill_operation(state),
1839 s->main_pid,
1840 s->control_pid,
1841 s->main_pid_alien);
1842 if (r < 0)
1843 goto fail;
1844
1845 if (r > 0) {
1846 r = service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), s->timeout_stop_usec));
1847 if (r < 0)
1848 goto fail;
1849
1850 service_set_state(s, state);
1851 } else if (IN_SET(state, SERVICE_STOP_WATCHDOG, SERVICE_STOP_SIGTERM) && s->kill_context.send_sigkill)
1852 service_enter_signal(s, SERVICE_STOP_SIGKILL, SERVICE_SUCCESS);
1853 else if (IN_SET(state, SERVICE_STOP_WATCHDOG, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL))
1854 service_enter_stop_post(s, SERVICE_SUCCESS);
1855 else if (state == SERVICE_FINAL_SIGTERM && s->kill_context.send_sigkill)
1856 service_enter_signal(s, SERVICE_FINAL_SIGKILL, SERVICE_SUCCESS);
1857 else
1858 service_enter_dead(s, SERVICE_SUCCESS, true);
1859
1860 return;
1861
1862 fail:
1863 log_unit_warning_errno(UNIT(s), r, "Failed to kill processes: %m");
1864
1865 if (IN_SET(state, SERVICE_STOP_WATCHDOG, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL))
1866 service_enter_stop_post(s, SERVICE_FAILURE_RESOURCES);
1867 else
1868 service_enter_dead(s, SERVICE_FAILURE_RESOURCES, true);
1869 }
1870
1871 static void service_enter_stop_by_notify(Service *s) {
1872 assert(s);
1873
1874 (void) unit_enqueue_rewatch_pids(UNIT(s));
1875
1876 service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), s->timeout_stop_usec));
1877
1878 /* The service told us it's stopping, so it's as if we SIGTERM'd it. */
1879 service_set_state(s, SERVICE_STOP_SIGTERM);
1880 }
1881
1882 static void service_enter_stop(Service *s, ServiceResult f) {
1883 int r;
1884
1885 assert(s);
1886
1887 if (s->result == SERVICE_SUCCESS)
1888 s->result = f;
1889
1890 service_unwatch_control_pid(s);
1891 (void) unit_enqueue_rewatch_pids(UNIT(s));
1892
1893 s->control_command = s->exec_command[SERVICE_EXEC_STOP];
1894 if (s->control_command) {
1895 s->control_command_id = SERVICE_EXEC_STOP;
1896
1897 r = service_spawn(s,
1898 s->control_command,
1899 s->timeout_stop_usec,
1900 EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_IS_CONTROL|EXEC_SETENV_RESULT|EXEC_CONTROL_CGROUP,
1901 &s->control_pid);
1902 if (r < 0)
1903 goto fail;
1904
1905 service_set_state(s, SERVICE_STOP);
1906 } else
1907 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_SUCCESS);
1908
1909 return;
1910
1911 fail:
1912 log_unit_warning_errno(UNIT(s), r, "Failed to run 'stop' task: %m");
1913 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_RESOURCES);
1914 }
1915
1916 static bool service_good(Service *s) {
1917 int main_pid_ok;
1918 assert(s);
1919
1920 if (s->type == SERVICE_DBUS && !s->bus_name_good)
1921 return false;
1922
1923 main_pid_ok = main_pid_good(s);
1924 if (main_pid_ok > 0) /* It's alive */
1925 return true;
1926 if (main_pid_ok == 0) /* It's dead */
1927 return false;
1928
1929 /* OK, we don't know anything about the main PID, maybe
1930 * because there is none. Let's check the control group
1931 * instead. */
1932
1933 return cgroup_good(s) != 0;
1934 }
1935
1936 static void service_enter_running(Service *s, ServiceResult f) {
1937 assert(s);
1938
1939 if (s->result == SERVICE_SUCCESS)
1940 s->result = f;
1941
1942 service_unwatch_control_pid(s);
1943
1944 if (s->result != SERVICE_SUCCESS)
1945 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
1946 else if (service_good(s)) {
1947
1948 /* If there are any queued up sd_notify() notifications, process them now */
1949 if (s->notify_state == NOTIFY_RELOADING)
1950 service_enter_reload_by_notify(s);
1951 else if (s->notify_state == NOTIFY_STOPPING)
1952 service_enter_stop_by_notify(s);
1953 else {
1954 service_set_state(s, SERVICE_RUNNING);
1955 service_arm_timer(s, usec_add(UNIT(s)->active_enter_timestamp.monotonic, s->runtime_max_usec));
1956 }
1957
1958 } else if (s->remain_after_exit)
1959 service_set_state(s, SERVICE_EXITED);
1960 else
1961 service_enter_stop(s, SERVICE_SUCCESS);
1962 }
1963
1964 static void service_enter_start_post(Service *s) {
1965 int r;
1966 assert(s);
1967
1968 service_unwatch_control_pid(s);
1969 service_reset_watchdog(s);
1970
1971 s->control_command = s->exec_command[SERVICE_EXEC_START_POST];
1972 if (s->control_command) {
1973 s->control_command_id = SERVICE_EXEC_START_POST;
1974
1975 r = service_spawn(s,
1976 s->control_command,
1977 s->timeout_start_usec,
1978 EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_IS_CONTROL|EXEC_CONTROL_CGROUP,
1979 &s->control_pid);
1980 if (r < 0)
1981 goto fail;
1982
1983 service_set_state(s, SERVICE_START_POST);
1984 } else
1985 service_enter_running(s, SERVICE_SUCCESS);
1986
1987 return;
1988
1989 fail:
1990 log_unit_warning_errno(UNIT(s), r, "Failed to run 'start-post' task: %m");
1991 service_enter_stop(s, SERVICE_FAILURE_RESOURCES);
1992 }
1993
1994 static void service_kill_control_process(Service *s) {
1995 int r;
1996
1997 assert(s);
1998
1999 if (s->control_pid <= 0)
2000 return;
2001
2002 r = kill_and_sigcont(s->control_pid, SIGKILL);
2003 if (r < 0) {
2004 _cleanup_free_ char *comm = NULL;
2005
2006 (void) get_process_comm(s->control_pid, &comm);
2007
2008 log_unit_debug_errno(UNIT(s), r, "Failed to kill control process " PID_FMT " (%s), ignoring: %m",
2009 s->control_pid, strna(comm));
2010 }
2011 }
2012
2013 static int service_adverse_to_leftover_processes(Service *s) {
2014 assert(s);
2015
2016 /* KillMode=mixed and control group are used to indicate that all process should be killed off.
2017 * SendSIGKILL is used for services that require a clean shutdown. These are typically database
2018 * service where a SigKilled process would result in a lengthy recovery and who's shutdown or
2019 * startup time is quite variable (so Timeout settings aren't of use).
2020 *
2021 * Here we take these two factors and refuse to start a service if there are existing processes
2022 * within a control group. Databases, while generally having some protection against multiple
2023 * instances running, lets not stress the rigor of these. Also ExecStartPre parts of the service
2024 * aren't as rigoriously written to protect aganst against multiple use. */
2025 if (unit_warn_leftover_processes(UNIT(s)) &&
2026 IN_SET(s->kill_context.kill_mode, KILL_MIXED, KILL_CONTROL_GROUP) &&
2027 !s->kill_context.send_sigkill) {
2028 return log_unit_error_errno(UNIT(s), SYNTHETIC_ERRNO(EBUSY), "Will not start SendSIGKILL=no service of type KillMode=control-group or mixed while processes exist");
2029 }
2030 return 0;
2031 }
2032
2033 static void service_enter_start(Service *s) {
2034 ExecCommand *c;
2035 usec_t timeout;
2036 pid_t pid;
2037 int r;
2038
2039 assert(s);
2040
2041 service_unwatch_control_pid(s);
2042 service_unwatch_main_pid(s);
2043
2044 r = service_adverse_to_leftover_processes(s);
2045 if (r < 0)
2046 goto fail;
2047
2048 if (s->type == SERVICE_FORKING) {
2049 s->control_command_id = SERVICE_EXEC_START;
2050 c = s->control_command = s->exec_command[SERVICE_EXEC_START];
2051
2052 s->main_command = NULL;
2053 } else {
2054 s->control_command_id = _SERVICE_EXEC_COMMAND_INVALID;
2055 s->control_command = NULL;
2056
2057 c = s->main_command = s->exec_command[SERVICE_EXEC_START];
2058 }
2059
2060 if (!c) {
2061 if (s->type != SERVICE_ONESHOT) {
2062 /* There's no command line configured for the main command? Hmm, that is strange. This can only
2063 * happen if the configuration changes at runtime. In this case, let's enter a failure
2064 * state. */
2065 log_unit_error(UNIT(s), "There's no 'start' task anymore we could start.");
2066 r = -ENXIO;
2067 goto fail;
2068 }
2069
2070 /* We force a fake state transition here. Otherwise, the unit would go directly from
2071 * SERVICE_DEAD to SERVICE_DEAD without SERVICE_ACTIVATING or SERVICE_ACTIVE
2072 * inbetween. This way we can later trigger actions that depend on the state
2073 * transition, including SuccessAction=. */
2074 service_set_state(s, SERVICE_START);
2075
2076 service_enter_start_post(s);
2077 return;
2078 }
2079
2080 if (IN_SET(s->type, SERVICE_SIMPLE, SERVICE_IDLE))
2081 /* For simple + idle this is the main process. We don't apply any timeout here, but
2082 * service_enter_running() will later apply the .runtime_max_usec timeout. */
2083 timeout = USEC_INFINITY;
2084 else
2085 timeout = s->timeout_start_usec;
2086
2087 r = service_spawn(s,
2088 c,
2089 timeout,
2090 EXEC_PASS_FDS|EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_APPLY_TTY_STDIN|EXEC_SET_WATCHDOG,
2091 &pid);
2092 if (r < 0)
2093 goto fail;
2094
2095 if (IN_SET(s->type, SERVICE_SIMPLE, SERVICE_IDLE)) {
2096 /* For simple services we immediately start
2097 * the START_POST binaries. */
2098
2099 service_set_main_pid(s, pid);
2100 service_enter_start_post(s);
2101
2102 } else if (s->type == SERVICE_FORKING) {
2103
2104 /* For forking services we wait until the start
2105 * process exited. */
2106
2107 s->control_pid = pid;
2108 service_set_state(s, SERVICE_START);
2109
2110 } else if (IN_SET(s->type, SERVICE_ONESHOT, SERVICE_DBUS, SERVICE_NOTIFY, SERVICE_EXEC)) {
2111
2112 /* For oneshot services we wait until the start process exited, too, but it is our main process. */
2113
2114 /* For D-Bus services we know the main pid right away, but wait for the bus name to appear on the
2115 * bus. 'notify' and 'exec' services are similar. */
2116
2117 service_set_main_pid(s, pid);
2118 service_set_state(s, SERVICE_START);
2119 } else
2120 assert_not_reached("Unknown service type");
2121
2122 return;
2123
2124 fail:
2125 log_unit_warning_errno(UNIT(s), r, "Failed to run 'start' task: %m");
2126 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_RESOURCES);
2127 }
2128
2129 static void service_enter_start_pre(Service *s) {
2130 int r;
2131
2132 assert(s);
2133
2134 service_unwatch_control_pid(s);
2135
2136 s->control_command = s->exec_command[SERVICE_EXEC_START_PRE];
2137 if (s->control_command) {
2138
2139 r = service_adverse_to_leftover_processes(s);
2140 if (r < 0)
2141 goto fail;
2142
2143 s->control_command_id = SERVICE_EXEC_START_PRE;
2144
2145 r = service_spawn(s,
2146 s->control_command,
2147 s->timeout_start_usec,
2148 EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_IS_CONTROL|EXEC_APPLY_TTY_STDIN,
2149 &s->control_pid);
2150 if (r < 0)
2151 goto fail;
2152
2153 service_set_state(s, SERVICE_START_PRE);
2154 } else
2155 service_enter_start(s);
2156
2157 return;
2158
2159 fail:
2160 log_unit_warning_errno(UNIT(s), r, "Failed to run 'start-pre' task: %m");
2161 service_enter_dead(s, SERVICE_FAILURE_RESOURCES, true);
2162 }
2163
2164 static void service_enter_restart(Service *s) {
2165 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2166 int r;
2167
2168 assert(s);
2169
2170 if (UNIT(s)->job && UNIT(s)->job->type == JOB_STOP) {
2171 /* Don't restart things if we are going down anyway */
2172 log_unit_info(UNIT(s), "Stop job pending for unit, delaying automatic restart.");
2173
2174 r = service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), s->restart_usec));
2175 if (r < 0)
2176 goto fail;
2177
2178 return;
2179 }
2180
2181 /* Any units that are bound to this service must also be
2182 * restarted. We use JOB_RESTART (instead of the more obvious
2183 * JOB_START) here so that those dependency jobs will be added
2184 * as well. */
2185 r = manager_add_job(UNIT(s)->manager, JOB_RESTART, UNIT(s), JOB_REPLACE, &error, NULL);
2186 if (r < 0)
2187 goto fail;
2188
2189 /* Count the jobs we enqueue for restarting. This counter is maintained as long as the unit isn't fully
2190 * stopped, i.e. as long as it remains up or remains in auto-start states. The use can reset the counter
2191 * explicitly however via the usual "systemctl reset-failure" logic. */
2192 s->n_restarts ++;
2193 s->flush_n_restarts = false;
2194
2195 log_struct(LOG_INFO,
2196 "MESSAGE_ID=" SD_MESSAGE_UNIT_RESTART_SCHEDULED_STR,
2197 LOG_UNIT_ID(UNIT(s)),
2198 LOG_UNIT_INVOCATION_ID(UNIT(s)),
2199 LOG_UNIT_MESSAGE(UNIT(s), "Scheduled restart job, restart counter is at %u.", s->n_restarts),
2200 "N_RESTARTS=%u", s->n_restarts);
2201
2202 /* Notify clients about changed restart counter */
2203 unit_add_to_dbus_queue(UNIT(s));
2204
2205 /* Note that we stay in the SERVICE_AUTO_RESTART state here,
2206 * it will be canceled as part of the service_stop() call that
2207 * is executed as part of JOB_RESTART. */
2208
2209 return;
2210
2211 fail:
2212 log_unit_warning(UNIT(s), "Failed to schedule restart job: %s", bus_error_message(&error, -r));
2213 service_enter_dead(s, SERVICE_FAILURE_RESOURCES, false);
2214 }
2215
2216 static void service_enter_reload_by_notify(Service *s) {
2217 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2218 int r;
2219
2220 assert(s);
2221
2222 service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), s->timeout_start_usec));
2223 service_set_state(s, SERVICE_RELOAD);
2224
2225 /* service_enter_reload_by_notify is never called during a reload, thus no loops are possible. */
2226 r = manager_propagate_reload(UNIT(s)->manager, UNIT(s), JOB_FAIL, &error);
2227 if (r < 0)
2228 log_unit_warning(UNIT(s), "Failed to schedule propagation of reload: %s", bus_error_message(&error, -r));
2229 }
2230
2231 static void service_enter_reload(Service *s) {
2232 int r;
2233
2234 assert(s);
2235
2236 service_unwatch_control_pid(s);
2237 s->reload_result = SERVICE_SUCCESS;
2238
2239 s->control_command = s->exec_command[SERVICE_EXEC_RELOAD];
2240 if (s->control_command) {
2241 s->control_command_id = SERVICE_EXEC_RELOAD;
2242
2243 r = service_spawn(s,
2244 s->control_command,
2245 s->timeout_start_usec,
2246 EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_IS_CONTROL|EXEC_CONTROL_CGROUP,
2247 &s->control_pid);
2248 if (r < 0)
2249 goto fail;
2250
2251 service_set_state(s, SERVICE_RELOAD);
2252 } else
2253 service_enter_running(s, SERVICE_SUCCESS);
2254
2255 return;
2256
2257 fail:
2258 log_unit_warning_errno(UNIT(s), r, "Failed to run 'reload' task: %m");
2259 s->reload_result = SERVICE_FAILURE_RESOURCES;
2260 service_enter_running(s, SERVICE_SUCCESS);
2261 }
2262
2263 static void service_run_next_control(Service *s) {
2264 usec_t timeout;
2265 int r;
2266
2267 assert(s);
2268 assert(s->control_command);
2269 assert(s->control_command->command_next);
2270
2271 assert(s->control_command_id != SERVICE_EXEC_START);
2272
2273 s->control_command = s->control_command->command_next;
2274 service_unwatch_control_pid(s);
2275
2276 if (IN_SET(s->state, SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST, SERVICE_RUNNING, SERVICE_RELOAD))
2277 timeout = s->timeout_start_usec;
2278 else
2279 timeout = s->timeout_stop_usec;
2280
2281 r = service_spawn(s,
2282 s->control_command,
2283 timeout,
2284 EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_IS_CONTROL|
2285 (IN_SET(s->control_command_id, SERVICE_EXEC_START_PRE, SERVICE_EXEC_STOP_POST) ? EXEC_APPLY_TTY_STDIN : 0)|
2286 (IN_SET(s->control_command_id, SERVICE_EXEC_STOP, SERVICE_EXEC_STOP_POST) ? EXEC_SETENV_RESULT : 0)|
2287 (IN_SET(s->control_command_id, SERVICE_EXEC_START_POST, SERVICE_EXEC_RELOAD, SERVICE_EXEC_STOP, SERVICE_EXEC_STOP_POST) ? EXEC_CONTROL_CGROUP : 0),
2288 &s->control_pid);
2289 if (r < 0)
2290 goto fail;
2291
2292 return;
2293
2294 fail:
2295 log_unit_warning_errno(UNIT(s), r, "Failed to run next control task: %m");
2296
2297 if (IN_SET(s->state, SERVICE_START_PRE, SERVICE_START_POST, SERVICE_STOP))
2298 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_RESOURCES);
2299 else if (s->state == SERVICE_STOP_POST)
2300 service_enter_dead(s, SERVICE_FAILURE_RESOURCES, true);
2301 else if (s->state == SERVICE_RELOAD) {
2302 s->reload_result = SERVICE_FAILURE_RESOURCES;
2303 service_enter_running(s, SERVICE_SUCCESS);
2304 } else
2305 service_enter_stop(s, SERVICE_FAILURE_RESOURCES);
2306 }
2307
2308 static void service_run_next_main(Service *s) {
2309 pid_t pid;
2310 int r;
2311
2312 assert(s);
2313 assert(s->main_command);
2314 assert(s->main_command->command_next);
2315 assert(s->type == SERVICE_ONESHOT);
2316
2317 s->main_command = s->main_command->command_next;
2318 service_unwatch_main_pid(s);
2319
2320 r = service_spawn(s,
2321 s->main_command,
2322 s->timeout_start_usec,
2323 EXEC_PASS_FDS|EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_APPLY_TTY_STDIN|EXEC_SET_WATCHDOG,
2324 &pid);
2325 if (r < 0)
2326 goto fail;
2327
2328 service_set_main_pid(s, pid);
2329
2330 return;
2331
2332 fail:
2333 log_unit_warning_errno(UNIT(s), r, "Failed to run next main task: %m");
2334 service_enter_stop(s, SERVICE_FAILURE_RESOURCES);
2335 }
2336
2337 static int service_start(Unit *u) {
2338 Service *s = SERVICE(u);
2339 int r;
2340
2341 assert(s);
2342
2343 /* We cannot fulfill this request right now, try again later
2344 * please! */
2345 if (IN_SET(s->state,
2346 SERVICE_STOP, SERVICE_STOP_WATCHDOG, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
2347 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL))
2348 return -EAGAIN;
2349
2350 /* Already on it! */
2351 if (IN_SET(s->state, SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST))
2352 return 0;
2353
2354 /* A service that will be restarted must be stopped first to
2355 * trigger BindsTo and/or OnFailure dependencies. If a user
2356 * does not want to wait for the holdoff time to elapse, the
2357 * service should be manually restarted, not started. We
2358 * simply return EAGAIN here, so that any start jobs stay
2359 * queued, and assume that the auto restart timer will
2360 * eventually trigger the restart. */
2361 if (s->state == SERVICE_AUTO_RESTART)
2362 return -EAGAIN;
2363
2364 assert(IN_SET(s->state, SERVICE_DEAD, SERVICE_FAILED));
2365
2366 /* Make sure we don't enter a busy loop of some kind. */
2367 r = unit_start_limit_test(u);
2368 if (r < 0) {
2369 service_enter_dead(s, SERVICE_FAILURE_START_LIMIT_HIT, false);
2370 return r;
2371 }
2372
2373 r = unit_acquire_invocation_id(u);
2374 if (r < 0)
2375 return r;
2376
2377 s->result = SERVICE_SUCCESS;
2378 s->reload_result = SERVICE_SUCCESS;
2379 s->main_pid_known = false;
2380 s->main_pid_alien = false;
2381 s->forbid_restart = false;
2382
2383 s->status_text = mfree(s->status_text);
2384 s->status_errno = 0;
2385
2386 s->notify_state = NOTIFY_UNKNOWN;
2387
2388 s->watchdog_original_usec = s->watchdog_usec;
2389 s->watchdog_override_enable = false;
2390 s->watchdog_override_usec = USEC_INFINITY;
2391
2392 exec_command_reset_status_list_array(s->exec_command, _SERVICE_EXEC_COMMAND_MAX);
2393 exec_status_reset(&s->main_exec_status);
2394
2395 /* This is not an automatic restart? Flush the restart counter then */
2396 if (s->flush_n_restarts) {
2397 s->n_restarts = 0;
2398 s->flush_n_restarts = false;
2399 }
2400
2401 u->reset_accounting = true;
2402
2403 service_enter_start_pre(s);
2404 return 1;
2405 }
2406
2407 static int service_stop(Unit *u) {
2408 Service *s = SERVICE(u);
2409
2410 assert(s);
2411
2412 /* Don't create restart jobs from manual stops. */
2413 s->forbid_restart = true;
2414
2415 /* Already on it */
2416 if (IN_SET(s->state,
2417 SERVICE_STOP, SERVICE_STOP_WATCHDOG, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
2418 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL))
2419 return 0;
2420
2421 /* A restart will be scheduled or is in progress. */
2422 if (s->state == SERVICE_AUTO_RESTART) {
2423 service_set_state(s, SERVICE_DEAD);
2424 return 0;
2425 }
2426
2427 /* If there's already something running we go directly into
2428 * kill mode. */
2429 if (IN_SET(s->state, SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST, SERVICE_RELOAD)) {
2430 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_SUCCESS);
2431 return 0;
2432 }
2433
2434 assert(IN_SET(s->state, SERVICE_RUNNING, SERVICE_EXITED));
2435
2436 service_enter_stop(s, SERVICE_SUCCESS);
2437 return 1;
2438 }
2439
2440 static int service_reload(Unit *u) {
2441 Service *s = SERVICE(u);
2442
2443 assert(s);
2444
2445 assert(IN_SET(s->state, SERVICE_RUNNING, SERVICE_EXITED));
2446
2447 service_enter_reload(s);
2448 return 1;
2449 }
2450
2451 _pure_ static bool service_can_reload(Unit *u) {
2452 Service *s = SERVICE(u);
2453
2454 assert(s);
2455
2456 return !!s->exec_command[SERVICE_EXEC_RELOAD];
2457 }
2458
2459 static unsigned service_exec_command_index(Unit *u, ServiceExecCommand id, ExecCommand *current) {
2460 Service *s = SERVICE(u);
2461 unsigned idx = 0;
2462 ExecCommand *first, *c;
2463
2464 assert(s);
2465
2466 first = s->exec_command[id];
2467
2468 /* Figure out where we are in the list by walking back to the beginning */
2469 for (c = current; c != first; c = c->command_prev)
2470 idx++;
2471
2472 return idx;
2473 }
2474
2475 static int service_serialize_exec_command(Unit *u, FILE *f, ExecCommand *command) {
2476 _cleanup_free_ char *args = NULL, *p = NULL;
2477 size_t allocated = 0, length = 0;
2478 Service *s = SERVICE(u);
2479 const char *type, *key;
2480 ServiceExecCommand id;
2481 unsigned idx;
2482 char **arg;
2483
2484 assert(s);
2485 assert(f);
2486
2487 if (!command)
2488 return 0;
2489
2490 if (command == s->control_command) {
2491 type = "control";
2492 id = s->control_command_id;
2493 } else {
2494 type = "main";
2495 id = SERVICE_EXEC_START;
2496 }
2497
2498 idx = service_exec_command_index(u, id, command);
2499
2500 STRV_FOREACH(arg, command->argv) {
2501 _cleanup_free_ char *e = NULL;
2502 size_t n;
2503
2504 e = cescape(*arg);
2505 if (!e)
2506 return log_oom();
2507
2508 n = strlen(e);
2509 if (!GREEDY_REALLOC(args, allocated, length + 1 + n + 1))
2510 return log_oom();
2511
2512 if (length > 0)
2513 args[length++] = ' ';
2514
2515 memcpy(args + length, e, n);
2516 length += n;
2517 }
2518
2519 if (!GREEDY_REALLOC(args, allocated, length + 1))
2520 return log_oom();
2521
2522 args[length++] = 0;
2523
2524 p = cescape(command->path);
2525 if (!p)
2526 return -ENOMEM;
2527
2528 key = strjoina(type, "-command");
2529 return serialize_item_format(f, key, "%s %u %s %s", service_exec_command_to_string(id), idx, p, args);
2530 }
2531
2532 static int service_serialize(Unit *u, FILE *f, FDSet *fds) {
2533 Service *s = SERVICE(u);
2534 ServiceFDStore *fs;
2535 int r;
2536
2537 assert(u);
2538 assert(f);
2539 assert(fds);
2540
2541 (void) serialize_item(f, "state", service_state_to_string(s->state));
2542 (void) serialize_item(f, "result", service_result_to_string(s->result));
2543 (void) serialize_item(f, "reload-result", service_result_to_string(s->reload_result));
2544
2545 if (s->control_pid > 0)
2546 (void) serialize_item_format(f, "control-pid", PID_FMT, s->control_pid);
2547
2548 if (s->main_pid_known && s->main_pid > 0)
2549 (void) serialize_item_format(f, "main-pid", PID_FMT, s->main_pid);
2550
2551 (void) serialize_bool(f, "main-pid-known", s->main_pid_known);
2552 (void) serialize_bool(f, "bus-name-good", s->bus_name_good);
2553 (void) serialize_bool(f, "bus-name-owner", s->bus_name_owner);
2554
2555 (void) serialize_item_format(f, "n-restarts", "%u", s->n_restarts);
2556 (void) serialize_bool(f, "flush-n-restarts", s->flush_n_restarts);
2557
2558 r = serialize_item_escaped(f, "status-text", s->status_text);
2559 if (r < 0)
2560 return r;
2561
2562 service_serialize_exec_command(u, f, s->control_command);
2563 service_serialize_exec_command(u, f, s->main_command);
2564
2565 r = serialize_fd(f, fds, "stdin-fd", s->stdin_fd);
2566 if (r < 0)
2567 return r;
2568 r = serialize_fd(f, fds, "stdout-fd", s->stdout_fd);
2569 if (r < 0)
2570 return r;
2571 r = serialize_fd(f, fds, "stderr-fd", s->stderr_fd);
2572 if (r < 0)
2573 return r;
2574
2575 if (s->exec_fd_event_source) {
2576 r = serialize_fd(f, fds, "exec-fd", sd_event_source_get_io_fd(s->exec_fd_event_source));
2577 if (r < 0)
2578 return r;
2579
2580 (void) serialize_bool(f, "exec-fd-hot", s->exec_fd_hot);
2581 }
2582
2583 if (UNIT_ISSET(s->accept_socket)) {
2584 r = serialize_item(f, "accept-socket", UNIT_DEREF(s->accept_socket)->id);
2585 if (r < 0)
2586 return r;
2587 }
2588
2589 r = serialize_fd(f, fds, "socket-fd", s->socket_fd);
2590 if (r < 0)
2591 return r;
2592
2593 LIST_FOREACH(fd_store, fs, s->fd_store) {
2594 _cleanup_free_ char *c = NULL;
2595 int copy;
2596
2597 copy = fdset_put_dup(fds, fs->fd);
2598 if (copy < 0)
2599 return log_error_errno(copy, "Failed to copy file descriptor for serialization: %m");
2600
2601 c = cescape(fs->fdname);
2602 if (!c)
2603 return log_oom();
2604
2605 (void) serialize_item_format(f, "fd-store-fd", "%i %s", copy, c);
2606 }
2607
2608 if (s->main_exec_status.pid > 0) {
2609 (void) serialize_item_format(f, "main-exec-status-pid", PID_FMT, s->main_exec_status.pid);
2610 (void) serialize_dual_timestamp(f, "main-exec-status-start", &s->main_exec_status.start_timestamp);
2611 (void) serialize_dual_timestamp(f, "main-exec-status-exit", &s->main_exec_status.exit_timestamp);
2612
2613 if (dual_timestamp_is_set(&s->main_exec_status.exit_timestamp)) {
2614 (void) serialize_item_format(f, "main-exec-status-code", "%i", s->main_exec_status.code);
2615 (void) serialize_item_format(f, "main-exec-status-status", "%i", s->main_exec_status.status);
2616 }
2617 }
2618
2619 (void) serialize_dual_timestamp(f, "watchdog-timestamp", &s->watchdog_timestamp);
2620 (void) serialize_bool(f, "forbid-restart", s->forbid_restart);
2621
2622 if (s->watchdog_override_enable)
2623 (void) serialize_item_format(f, "watchdog-override-usec", USEC_FMT, s->watchdog_override_usec);
2624
2625 if (s->watchdog_original_usec != USEC_INFINITY)
2626 (void) serialize_item_format(f, "watchdog-original-usec", USEC_FMT, s->watchdog_original_usec);
2627
2628 return 0;
2629 }
2630
2631 static int service_deserialize_exec_command(Unit *u, const char *key, const char *value) {
2632 Service *s = SERVICE(u);
2633 int r;
2634 unsigned idx = 0, i;
2635 bool control, found = false;
2636 ServiceExecCommand id = _SERVICE_EXEC_COMMAND_INVALID;
2637 ExecCommand *command = NULL;
2638 _cleanup_free_ char *path = NULL;
2639 _cleanup_strv_free_ char **argv = NULL;
2640
2641 enum ExecCommandState {
2642 STATE_EXEC_COMMAND_TYPE,
2643 STATE_EXEC_COMMAND_INDEX,
2644 STATE_EXEC_COMMAND_PATH,
2645 STATE_EXEC_COMMAND_ARGS,
2646 _STATE_EXEC_COMMAND_MAX,
2647 _STATE_EXEC_COMMAND_INVALID = -1,
2648 } state;
2649
2650 assert(s);
2651 assert(key);
2652 assert(value);
2653
2654 control = streq(key, "control-command");
2655
2656 state = STATE_EXEC_COMMAND_TYPE;
2657
2658 for (;;) {
2659 _cleanup_free_ char *arg = NULL;
2660
2661 r = extract_first_word(&value, &arg, NULL, EXTRACT_CUNESCAPE);
2662 if (r < 0)
2663 return r;
2664 if (r == 0)
2665 break;
2666
2667 switch (state) {
2668 case STATE_EXEC_COMMAND_TYPE:
2669 id = service_exec_command_from_string(arg);
2670 if (id < 0)
2671 return -EINVAL;
2672
2673 state = STATE_EXEC_COMMAND_INDEX;
2674 break;
2675 case STATE_EXEC_COMMAND_INDEX:
2676 r = safe_atou(arg, &idx);
2677 if (r < 0)
2678 return -EINVAL;
2679
2680 state = STATE_EXEC_COMMAND_PATH;
2681 break;
2682 case STATE_EXEC_COMMAND_PATH:
2683 path = TAKE_PTR(arg);
2684 state = STATE_EXEC_COMMAND_ARGS;
2685
2686 if (!path_is_absolute(path))
2687 return -EINVAL;
2688 break;
2689 case STATE_EXEC_COMMAND_ARGS:
2690 r = strv_extend(&argv, arg);
2691 if (r < 0)
2692 return -ENOMEM;
2693 break;
2694 default:
2695 assert_not_reached("Unknown error at deserialization of exec command");
2696 break;
2697 }
2698 }
2699
2700 if (state != STATE_EXEC_COMMAND_ARGS)
2701 return -EINVAL;
2702
2703 /* Let's check whether exec command on given offset matches data that we just deserialized */
2704 for (command = s->exec_command[id], i = 0; command; command = command->command_next, i++) {
2705 if (i != idx)
2706 continue;
2707
2708 found = strv_equal(argv, command->argv) && streq(command->path, path);
2709 break;
2710 }
2711
2712 if (!found) {
2713 /* Command at the index we serialized is different, let's look for command that exactly
2714 * matches but is on different index. If there is no such command we will not resume execution. */
2715 for (command = s->exec_command[id]; command; command = command->command_next)
2716 if (strv_equal(command->argv, argv) && streq(command->path, path))
2717 break;
2718 }
2719
2720 if (command && control)
2721 s->control_command = command;
2722 else if (command)
2723 s->main_command = command;
2724 else
2725 log_unit_warning(u, "Current command vanished from the unit file, execution of the command list won't be resumed.");
2726
2727 return 0;
2728 }
2729
2730 static int service_deserialize_item(Unit *u, const char *key, const char *value, FDSet *fds) {
2731 Service *s = SERVICE(u);
2732 int r;
2733
2734 assert(u);
2735 assert(key);
2736 assert(value);
2737 assert(fds);
2738
2739 if (streq(key, "state")) {
2740 ServiceState state;
2741
2742 state = service_state_from_string(value);
2743 if (state < 0)
2744 log_unit_debug(u, "Failed to parse state value: %s", value);
2745 else
2746 s->deserialized_state = state;
2747 } else if (streq(key, "result")) {
2748 ServiceResult f;
2749
2750 f = service_result_from_string(value);
2751 if (f < 0)
2752 log_unit_debug(u, "Failed to parse result value: %s", value);
2753 else if (f != SERVICE_SUCCESS)
2754 s->result = f;
2755
2756 } else if (streq(key, "reload-result")) {
2757 ServiceResult f;
2758
2759 f = service_result_from_string(value);
2760 if (f < 0)
2761 log_unit_debug(u, "Failed to parse reload result value: %s", value);
2762 else if (f != SERVICE_SUCCESS)
2763 s->reload_result = f;
2764
2765 } else if (streq(key, "control-pid")) {
2766 pid_t pid;
2767
2768 if (parse_pid(value, &pid) < 0)
2769 log_unit_debug(u, "Failed to parse control-pid value: %s", value);
2770 else
2771 s->control_pid = pid;
2772 } else if (streq(key, "main-pid")) {
2773 pid_t pid;
2774
2775 if (parse_pid(value, &pid) < 0)
2776 log_unit_debug(u, "Failed to parse main-pid value: %s", value);
2777 else
2778 (void) service_set_main_pid(s, pid);
2779 } else if (streq(key, "main-pid-known")) {
2780 int b;
2781
2782 b = parse_boolean(value);
2783 if (b < 0)
2784 log_unit_debug(u, "Failed to parse main-pid-known value: %s", value);
2785 else
2786 s->main_pid_known = b;
2787 } else if (streq(key, "bus-name-good")) {
2788 int b;
2789
2790 b = parse_boolean(value);
2791 if (b < 0)
2792 log_unit_debug(u, "Failed to parse bus-name-good value: %s", value);
2793 else
2794 s->bus_name_good = b;
2795 } else if (streq(key, "bus-name-owner")) {
2796 r = free_and_strdup(&s->bus_name_owner, value);
2797 if (r < 0)
2798 log_unit_error_errno(u, r, "Unable to deserialize current bus owner %s: %m", value);
2799 } else if (streq(key, "status-text")) {
2800 char *t;
2801
2802 r = cunescape(value, 0, &t);
2803 if (r < 0)
2804 log_unit_debug_errno(u, r, "Failed to unescape status text '%s': %m", value);
2805 else
2806 free_and_replace(s->status_text, t);
2807
2808 } else if (streq(key, "accept-socket")) {
2809 Unit *socket;
2810
2811 r = manager_load_unit(u->manager, value, NULL, NULL, &socket);
2812 if (r < 0)
2813 log_unit_debug_errno(u, r, "Failed to load accept-socket unit '%s': %m", value);
2814 else {
2815 unit_ref_set(&s->accept_socket, u, socket);
2816 SOCKET(socket)->n_connections++;
2817 }
2818
2819 } else if (streq(key, "socket-fd")) {
2820 int fd;
2821
2822 if (safe_atoi(value, &fd) < 0 || fd < 0 || !fdset_contains(fds, fd))
2823 log_unit_debug(u, "Failed to parse socket-fd value: %s", value);
2824 else {
2825 asynchronous_close(s->socket_fd);
2826 s->socket_fd = fdset_remove(fds, fd);
2827 }
2828 } else if (streq(key, "fd-store-fd")) {
2829 const char *fdv;
2830 size_t pf;
2831 int fd;
2832
2833 pf = strcspn(value, WHITESPACE);
2834 fdv = strndupa(value, pf);
2835
2836 if (safe_atoi(fdv, &fd) < 0 || fd < 0 || !fdset_contains(fds, fd))
2837 log_unit_debug(u, "Failed to parse fd-store-fd value: %s", value);
2838 else {
2839 _cleanup_free_ char *t = NULL;
2840 const char *fdn;
2841
2842 fdn = value + pf;
2843 fdn += strspn(fdn, WHITESPACE);
2844 (void) cunescape(fdn, 0, &t);
2845
2846 r = service_add_fd_store(s, fd, t);
2847 if (r < 0)
2848 log_unit_error_errno(u, r, "Failed to add fd to store: %m");
2849 else
2850 fdset_remove(fds, fd);
2851 }
2852
2853 } else if (streq(key, "main-exec-status-pid")) {
2854 pid_t pid;
2855
2856 if (parse_pid(value, &pid) < 0)
2857 log_unit_debug(u, "Failed to parse main-exec-status-pid value: %s", value);
2858 else
2859 s->main_exec_status.pid = pid;
2860 } else if (streq(key, "main-exec-status-code")) {
2861 int i;
2862
2863 if (safe_atoi(value, &i) < 0)
2864 log_unit_debug(u, "Failed to parse main-exec-status-code value: %s", value);
2865 else
2866 s->main_exec_status.code = i;
2867 } else if (streq(key, "main-exec-status-status")) {
2868 int i;
2869
2870 if (safe_atoi(value, &i) < 0)
2871 log_unit_debug(u, "Failed to parse main-exec-status-status value: %s", value);
2872 else
2873 s->main_exec_status.status = i;
2874 } else if (streq(key, "main-exec-status-start"))
2875 deserialize_dual_timestamp(value, &s->main_exec_status.start_timestamp);
2876 else if (streq(key, "main-exec-status-exit"))
2877 deserialize_dual_timestamp(value, &s->main_exec_status.exit_timestamp);
2878 else if (streq(key, "watchdog-timestamp"))
2879 deserialize_dual_timestamp(value, &s->watchdog_timestamp);
2880 else if (streq(key, "forbid-restart")) {
2881 int b;
2882
2883 b = parse_boolean(value);
2884 if (b < 0)
2885 log_unit_debug(u, "Failed to parse forbid-restart value: %s", value);
2886 else
2887 s->forbid_restart = b;
2888 } else if (streq(key, "stdin-fd")) {
2889 int fd;
2890
2891 if (safe_atoi(value, &fd) < 0 || fd < 0 || !fdset_contains(fds, fd))
2892 log_unit_debug(u, "Failed to parse stdin-fd value: %s", value);
2893 else {
2894 asynchronous_close(s->stdin_fd);
2895 s->stdin_fd = fdset_remove(fds, fd);
2896 s->exec_context.stdio_as_fds = true;
2897 }
2898 } else if (streq(key, "stdout-fd")) {
2899 int fd;
2900
2901 if (safe_atoi(value, &fd) < 0 || fd < 0 || !fdset_contains(fds, fd))
2902 log_unit_debug(u, "Failed to parse stdout-fd value: %s", value);
2903 else {
2904 asynchronous_close(s->stdout_fd);
2905 s->stdout_fd = fdset_remove(fds, fd);
2906 s->exec_context.stdio_as_fds = true;
2907 }
2908 } else if (streq(key, "stderr-fd")) {
2909 int fd;
2910
2911 if (safe_atoi(value, &fd) < 0 || fd < 0 || !fdset_contains(fds, fd))
2912 log_unit_debug(u, "Failed to parse stderr-fd value: %s", value);
2913 else {
2914 asynchronous_close(s->stderr_fd);
2915 s->stderr_fd = fdset_remove(fds, fd);
2916 s->exec_context.stdio_as_fds = true;
2917 }
2918 } else if (streq(key, "exec-fd")) {
2919 int fd;
2920
2921 if (safe_atoi(value, &fd) < 0 || fd < 0 || !fdset_contains(fds, fd))
2922 log_unit_debug(u, "Failed to parse exec-fd value: %s", value);
2923 else {
2924 s->exec_fd_event_source = sd_event_source_unref(s->exec_fd_event_source);
2925
2926 fd = fdset_remove(fds, fd);
2927 if (service_allocate_exec_fd_event_source(s, fd, &s->exec_fd_event_source) < 0)
2928 safe_close(fd);
2929 }
2930 } else if (streq(key, "watchdog-override-usec")) {
2931 if (deserialize_usec(value, &s->watchdog_override_usec) < 0)
2932 log_unit_debug(u, "Failed to parse watchdog_override_usec value: %s", value);
2933 else
2934 s->watchdog_override_enable = true;
2935
2936 } else if (streq(key, "watchdog-original-usec")) {
2937 if (deserialize_usec(value, &s->watchdog_original_usec) < 0)
2938 log_unit_debug(u, "Failed to parse watchdog_original_usec value: %s", value);
2939
2940 } else if (STR_IN_SET(key, "main-command", "control-command")) {
2941 r = service_deserialize_exec_command(u, key, value);
2942 if (r < 0)
2943 log_unit_debug_errno(u, r, "Failed to parse serialized command \"%s\": %m", value);
2944
2945 } else if (streq(key, "n-restarts")) {
2946 r = safe_atou(value, &s->n_restarts);
2947 if (r < 0)
2948 log_unit_debug_errno(u, r, "Failed to parse serialized restart counter '%s': %m", value);
2949
2950 } else if (streq(key, "flush-n-restarts")) {
2951 r = parse_boolean(value);
2952 if (r < 0)
2953 log_unit_debug_errno(u, r, "Failed to parse serialized flush restart counter setting '%s': %m", value);
2954 else
2955 s->flush_n_restarts = r;
2956 } else
2957 log_unit_debug(u, "Unknown serialization key: %s", key);
2958
2959 return 0;
2960 }
2961
2962 _pure_ static UnitActiveState service_active_state(Unit *u) {
2963 const UnitActiveState *table;
2964
2965 assert(u);
2966
2967 table = SERVICE(u)->type == SERVICE_IDLE ? state_translation_table_idle : state_translation_table;
2968
2969 return table[SERVICE(u)->state];
2970 }
2971
2972 static const char *service_sub_state_to_string(Unit *u) {
2973 assert(u);
2974
2975 return service_state_to_string(SERVICE(u)->state);
2976 }
2977
2978 static bool service_may_gc(Unit *u) {
2979 Service *s = SERVICE(u);
2980
2981 assert(s);
2982
2983 /* Never clean up services that still have a process around, even if the service is formally dead. Note that
2984 * unit_may_gc() already checked our cgroup for us, we just check our two additional PIDs, too, in case they
2985 * have moved outside of the cgroup. */
2986
2987 if (main_pid_good(s) > 0 ||
2988 control_pid_good(s) > 0)
2989 return false;
2990
2991 return true;
2992 }
2993
2994 static int service_retry_pid_file(Service *s) {
2995 int r;
2996
2997 assert(s->pid_file);
2998 assert(IN_SET(s->state, SERVICE_START, SERVICE_START_POST));
2999
3000 r = service_load_pid_file(s, false);
3001 if (r < 0)
3002 return r;
3003
3004 service_unwatch_pid_file(s);
3005
3006 service_enter_running(s, SERVICE_SUCCESS);
3007 return 0;
3008 }
3009
3010 static int service_watch_pid_file(Service *s) {
3011 int r;
3012
3013 log_unit_debug(UNIT(s), "Setting watch for PID file %s", s->pid_file_pathspec->path);
3014
3015 r = path_spec_watch(s->pid_file_pathspec, service_dispatch_inotify_io);
3016 if (r < 0)
3017 goto fail;
3018
3019 /* the pidfile might have appeared just before we set the watch */
3020 log_unit_debug(UNIT(s), "Trying to read PID file %s in case it changed", s->pid_file_pathspec->path);
3021 service_retry_pid_file(s);
3022
3023 return 0;
3024 fail:
3025 log_unit_error_errno(UNIT(s), r, "Failed to set a watch for PID file %s: %m", s->pid_file_pathspec->path);
3026 service_unwatch_pid_file(s);
3027 return r;
3028 }
3029
3030 static int service_demand_pid_file(Service *s) {
3031 PathSpec *ps;
3032
3033 assert(s->pid_file);
3034 assert(!s->pid_file_pathspec);
3035
3036 ps = new0(PathSpec, 1);
3037 if (!ps)
3038 return -ENOMEM;
3039
3040 ps->unit = UNIT(s);
3041 ps->path = strdup(s->pid_file);
3042 if (!ps->path) {
3043 free(ps);
3044 return -ENOMEM;
3045 }
3046
3047 path_simplify(ps->path, false);
3048
3049 /* PATH_CHANGED would not be enough. There are daemons (sendmail) that
3050 * keep their PID file open all the time. */
3051 ps->type = PATH_MODIFIED;
3052 ps->inotify_fd = -1;
3053
3054 s->pid_file_pathspec = ps;
3055
3056 return service_watch_pid_file(s);
3057 }
3058
3059 static int service_dispatch_inotify_io(sd_event_source *source, int fd, uint32_t events, void *userdata) {
3060 PathSpec *p = userdata;
3061 Service *s;
3062
3063 assert(p);
3064
3065 s = SERVICE(p->unit);
3066
3067 assert(s);
3068 assert(fd >= 0);
3069 assert(IN_SET(s->state, SERVICE_START, SERVICE_START_POST));
3070 assert(s->pid_file_pathspec);
3071 assert(path_spec_owns_inotify_fd(s->pid_file_pathspec, fd));
3072
3073 log_unit_debug(UNIT(s), "inotify event");
3074
3075 if (path_spec_fd_event(p, events) < 0)
3076 goto fail;
3077
3078 if (service_retry_pid_file(s) == 0)
3079 return 0;
3080
3081 if (service_watch_pid_file(s) < 0)
3082 goto fail;
3083
3084 return 0;
3085
3086 fail:
3087 service_unwatch_pid_file(s);
3088 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_RESOURCES);
3089 return 0;
3090 }
3091
3092 static int service_dispatch_exec_io(sd_event_source *source, int fd, uint32_t events, void *userdata) {
3093 Service *s = SERVICE(userdata);
3094
3095 assert(s);
3096
3097 log_unit_debug(UNIT(s), "got exec-fd event");
3098
3099 /* If Type=exec is set, we'll consider a service started successfully the instant we invoked execve()
3100 * successfully for it. We implement this through a pipe() towards the child, which the kernel automatically
3101 * closes for us due to O_CLOEXEC on execve() in the child, which then triggers EOF on the pipe in the
3102 * parent. We need to be careful however, as there are other reasons that we might cause the child's side of
3103 * the pipe to be closed (for example, a simple exit()). To deal with that we'll ignore EOFs on the pipe unless
3104 * the child signalled us first that it is about to call the execve(). It does so by sending us a simple
3105 * non-zero byte via the pipe. We also provide the child with a way to inform us in case execve() failed: if it
3106 * sends a zero byte we'll ignore POLLHUP on the fd again. */
3107
3108 for (;;) {
3109 uint8_t x;
3110 ssize_t n;
3111
3112 n = read(fd, &x, sizeof(x));
3113 if (n < 0) {
3114 if (errno == EAGAIN) /* O_NONBLOCK in effect → everything queued has now been processed. */
3115 return 0;
3116
3117 return log_unit_error_errno(UNIT(s), errno, "Failed to read from exec_fd: %m");
3118 }
3119 if (n == 0) { /* EOF → the event we are waiting for */
3120
3121 s->exec_fd_event_source = sd_event_source_unref(s->exec_fd_event_source);
3122
3123 if (s->exec_fd_hot) { /* Did the child tell us to expect EOF now? */
3124 log_unit_debug(UNIT(s), "Got EOF on exec-fd");
3125
3126 s->exec_fd_hot = false;
3127
3128 /* Nice! This is what we have been waiting for. Transition to next state. */
3129 if (s->type == SERVICE_EXEC && s->state == SERVICE_START)
3130 service_enter_start_post(s);
3131 } else
3132 log_unit_debug(UNIT(s), "Got EOF on exec-fd while it was disabled, ignoring.");
3133
3134 return 0;
3135 }
3136
3137 /* A byte was read → this turns on/off the exec fd logic */
3138 assert(n == sizeof(x));
3139 s->exec_fd_hot = x;
3140 }
3141
3142 return 0;
3143 }
3144
3145 static void service_notify_cgroup_empty_event(Unit *u) {
3146 Service *s = SERVICE(u);
3147
3148 assert(u);
3149
3150 log_unit_debug(u, "cgroup is empty");
3151
3152 switch (s->state) {
3153
3154 /* Waiting for SIGCHLD is usually more interesting,
3155 * because it includes return codes/signals. Which is
3156 * why we ignore the cgroup events for most cases,
3157 * except when we don't know pid which to expect the
3158 * SIGCHLD for. */
3159
3160 case SERVICE_START:
3161 if (s->type == SERVICE_NOTIFY &&
3162 main_pid_good(s) == 0 &&
3163 control_pid_good(s) == 0) {
3164 /* No chance of getting a ready notification anymore */
3165 service_enter_stop_post(s, SERVICE_FAILURE_PROTOCOL);
3166 break;
3167 }
3168
3169 _fallthrough_;
3170 case SERVICE_START_POST:
3171 if (s->pid_file_pathspec &&
3172 main_pid_good(s) == 0 &&
3173 control_pid_good(s) == 0) {
3174
3175 /* Give up hoping for the daemon to write its PID file */
3176 log_unit_warning(u, "Daemon never wrote its PID file. Failing.");
3177
3178 service_unwatch_pid_file(s);
3179 if (s->state == SERVICE_START)
3180 service_enter_stop_post(s, SERVICE_FAILURE_PROTOCOL);
3181 else
3182 service_enter_stop(s, SERVICE_FAILURE_PROTOCOL);
3183 }
3184 break;
3185
3186 case SERVICE_RUNNING:
3187 /* service_enter_running() will figure out what to do */
3188 service_enter_running(s, SERVICE_SUCCESS);
3189 break;
3190
3191 case SERVICE_STOP_WATCHDOG:
3192 case SERVICE_STOP_SIGTERM:
3193 case SERVICE_STOP_SIGKILL:
3194
3195 if (main_pid_good(s) <= 0 && control_pid_good(s) <= 0)
3196 service_enter_stop_post(s, SERVICE_SUCCESS);
3197
3198 break;
3199
3200 case SERVICE_STOP_POST:
3201 case SERVICE_FINAL_SIGTERM:
3202 case SERVICE_FINAL_SIGKILL:
3203 if (main_pid_good(s) <= 0 && control_pid_good(s) <= 0)
3204 service_enter_dead(s, SERVICE_SUCCESS, true);
3205
3206 break;
3207
3208 default:
3209 ;
3210 }
3211 }
3212
3213 static void service_sigchld_event(Unit *u, pid_t pid, int code, int status) {
3214 bool notify_dbus = true;
3215 Service *s = SERVICE(u);
3216 ServiceResult f;
3217
3218 assert(s);
3219 assert(pid >= 0);
3220
3221 if (is_clean_exit(code, status, s->type == SERVICE_ONESHOT ? EXIT_CLEAN_COMMAND : EXIT_CLEAN_DAEMON, &s->success_status))
3222 f = SERVICE_SUCCESS;
3223 else if (code == CLD_EXITED)
3224 f = SERVICE_FAILURE_EXIT_CODE;
3225 else if (code == CLD_KILLED)
3226 f = SERVICE_FAILURE_SIGNAL;
3227 else if (code == CLD_DUMPED)
3228 f = SERVICE_FAILURE_CORE_DUMP;
3229 else
3230 assert_not_reached("Unknown code");
3231
3232 if (s->main_pid == pid) {
3233 /* Forking services may occasionally move to a new PID.
3234 * As long as they update the PID file before exiting the old
3235 * PID, they're fine. */
3236 if (service_load_pid_file(s, false) > 0)
3237 return;
3238
3239 s->main_pid = 0;
3240 exec_status_exit(&s->main_exec_status, &s->exec_context, pid, code, status);
3241
3242 if (s->main_command) {
3243 /* If this is not a forking service than the
3244 * main process got started and hence we copy
3245 * the exit status so that it is recorded both
3246 * as main and as control process exit
3247 * status */
3248
3249 s->main_command->exec_status = s->main_exec_status;
3250
3251 if (s->main_command->flags & EXEC_COMMAND_IGNORE_FAILURE)
3252 f = SERVICE_SUCCESS;
3253 } else if (s->exec_command[SERVICE_EXEC_START]) {
3254
3255 /* If this is a forked process, then we should
3256 * ignore the return value if this was
3257 * configured for the starter process */
3258
3259 if (s->exec_command[SERVICE_EXEC_START]->flags & EXEC_COMMAND_IGNORE_FAILURE)
3260 f = SERVICE_SUCCESS;
3261 }
3262
3263 /* When this is a successful exit, let's log about the exit code on DEBUG level. If this is a failure
3264 * and the process exited on its own via exit(), then let's make this a NOTICE, under the assumption
3265 * that the service already logged the reason at a higher log level on its own. (Internally,
3266 * unit_log_process_exit() will possibly bump this to WARNING if the service died due to a signal.) */
3267 unit_log_process_exit(
3268 u, f == SERVICE_SUCCESS ? LOG_DEBUG : LOG_NOTICE,
3269 "Main process",
3270 service_exec_command_to_string(SERVICE_EXEC_START),
3271 code, status);
3272
3273 if (s->result == SERVICE_SUCCESS)
3274 s->result = f;
3275
3276 if (s->main_command &&
3277 s->main_command->command_next &&
3278 s->type == SERVICE_ONESHOT &&
3279 f == SERVICE_SUCCESS) {
3280
3281 /* There is another command to *
3282 * execute, so let's do that. */
3283
3284 log_unit_debug(u, "Running next main command for state %s.", service_state_to_string(s->state));
3285 service_run_next_main(s);
3286
3287 } else {
3288
3289 /* The service exited, so the service is officially
3290 * gone. */
3291 s->main_command = NULL;
3292
3293 switch (s->state) {
3294
3295 case SERVICE_START_POST:
3296 case SERVICE_RELOAD:
3297 case SERVICE_STOP:
3298 /* Need to wait until the operation is
3299 * done */
3300 break;
3301
3302 case SERVICE_START:
3303 if (s->type == SERVICE_ONESHOT) {
3304 /* This was our main goal, so let's go on */
3305 if (f == SERVICE_SUCCESS)
3306 service_enter_start_post(s);
3307 else
3308 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3309 break;
3310 } else if (s->type == SERVICE_NOTIFY) {
3311 /* Only enter running through a notification, so that the
3312 * SERVICE_START state signifies that no ready notification
3313 * has been received */
3314 if (f != SERVICE_SUCCESS)
3315 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3316 else if (!s->remain_after_exit || s->notify_access == NOTIFY_MAIN)
3317 /* The service has never been and will never be active */
3318 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_PROTOCOL);
3319 break;
3320 }
3321
3322 _fallthrough_;
3323 case SERVICE_RUNNING:
3324 service_enter_running(s, f);
3325 break;
3326
3327 case SERVICE_STOP_WATCHDOG:
3328 case SERVICE_STOP_SIGTERM:
3329 case SERVICE_STOP_SIGKILL:
3330
3331 if (control_pid_good(s) <= 0)
3332 service_enter_stop_post(s, f);
3333
3334 /* If there is still a control process, wait for that first */
3335 break;
3336
3337 case SERVICE_STOP_POST:
3338 case SERVICE_FINAL_SIGTERM:
3339 case SERVICE_FINAL_SIGKILL:
3340
3341 if (control_pid_good(s) <= 0)
3342 service_enter_dead(s, f, true);
3343 break;
3344
3345 default:
3346 assert_not_reached("Uh, main process died at wrong time.");
3347 }
3348 }
3349
3350 } else if (s->control_pid == pid) {
3351 s->control_pid = 0;
3352
3353 if (s->control_command) {
3354 exec_status_exit(&s->control_command->exec_status, &s->exec_context, pid, code, status);
3355
3356 if (s->control_command->flags & EXEC_COMMAND_IGNORE_FAILURE)
3357 f = SERVICE_SUCCESS;
3358 }
3359
3360 unit_log_process_exit(
3361 u, f == SERVICE_SUCCESS ? LOG_DEBUG : LOG_NOTICE,
3362 "Control process",
3363 service_exec_command_to_string(s->control_command_id),
3364 code, status);
3365
3366 if (s->result == SERVICE_SUCCESS)
3367 s->result = f;
3368
3369 if (s->control_command &&
3370 s->control_command->command_next &&
3371 f == SERVICE_SUCCESS) {
3372
3373 /* There is another command to *
3374 * execute, so let's do that. */
3375
3376 log_unit_debug(u, "Running next control command for state %s.", service_state_to_string(s->state));
3377 service_run_next_control(s);
3378
3379 } else {
3380 /* No further commands for this step, so let's
3381 * figure out what to do next */
3382
3383 s->control_command = NULL;
3384 s->control_command_id = _SERVICE_EXEC_COMMAND_INVALID;
3385
3386 log_unit_debug(u, "Got final SIGCHLD for state %s.", service_state_to_string(s->state));
3387
3388 switch (s->state) {
3389
3390 case SERVICE_START_PRE:
3391 if (f == SERVICE_SUCCESS)
3392 service_enter_start(s);
3393 else
3394 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3395 break;
3396
3397 case SERVICE_START:
3398 if (s->type != SERVICE_FORKING)
3399 /* Maybe spurious event due to a reload that changed the type? */
3400 break;
3401
3402 if (f != SERVICE_SUCCESS) {
3403 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3404 break;
3405 }
3406
3407 if (s->pid_file) {
3408 bool has_start_post;
3409 int r;
3410
3411 /* Let's try to load the pid file here if we can.
3412 * The PID file might actually be created by a START_POST
3413 * script. In that case don't worry if the loading fails. */
3414
3415 has_start_post = s->exec_command[SERVICE_EXEC_START_POST];
3416 r = service_load_pid_file(s, !has_start_post);
3417 if (!has_start_post && r < 0) {
3418 r = service_demand_pid_file(s);
3419 if (r < 0 || cgroup_good(s) == 0)
3420 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_PROTOCOL);
3421 break;
3422 }
3423 } else
3424 service_search_main_pid(s);
3425
3426 service_enter_start_post(s);
3427 break;
3428
3429 case SERVICE_START_POST:
3430 if (f != SERVICE_SUCCESS) {
3431 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3432 break;
3433 }
3434
3435 if (s->pid_file) {
3436 int r;
3437
3438 r = service_load_pid_file(s, true);
3439 if (r < 0) {
3440 r = service_demand_pid_file(s);
3441 if (r < 0 || cgroup_good(s) == 0)
3442 service_enter_stop(s, SERVICE_FAILURE_PROTOCOL);
3443 break;
3444 }
3445 } else
3446 service_search_main_pid(s);
3447
3448 service_enter_running(s, SERVICE_SUCCESS);
3449 break;
3450
3451 case SERVICE_RELOAD:
3452 if (f == SERVICE_SUCCESS)
3453 if (service_load_pid_file(s, true) < 0)
3454 service_search_main_pid(s);
3455
3456 s->reload_result = f;
3457 service_enter_running(s, SERVICE_SUCCESS);
3458 break;
3459
3460 case SERVICE_STOP:
3461 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3462 break;
3463
3464 case SERVICE_STOP_WATCHDOG:
3465 case SERVICE_STOP_SIGTERM:
3466 case SERVICE_STOP_SIGKILL:
3467 if (main_pid_good(s) <= 0)
3468 service_enter_stop_post(s, f);
3469
3470 /* If there is still a service
3471 * process around, wait until
3472 * that one quit, too */
3473 break;
3474
3475 case SERVICE_STOP_POST:
3476 case SERVICE_FINAL_SIGTERM:
3477 case SERVICE_FINAL_SIGKILL:
3478 if (main_pid_good(s) <= 0)
3479 service_enter_dead(s, f, true);
3480 break;
3481
3482 default:
3483 assert_not_reached("Uh, control process died at wrong time.");
3484 }
3485 }
3486 } else /* Neither control nor main PID? If so, don't notify about anything */
3487 notify_dbus = false;
3488
3489 /* Notify clients about changed exit status */
3490 if (notify_dbus)
3491 unit_add_to_dbus_queue(u);
3492
3493 /* If we get a SIGCHLD event for one of the processes we were interested in, then we look for others to watch,
3494 * under the assumption that we'll sooner or later get a SIGCHLD for them, as the original process we watched
3495 * was probably the parent of them, and they are hence now our children. */
3496 (void) unit_enqueue_rewatch_pids(u);
3497 }
3498
3499 static int service_dispatch_timer(sd_event_source *source, usec_t usec, void *userdata) {
3500 Service *s = SERVICE(userdata);
3501
3502 assert(s);
3503 assert(source == s->timer_event_source);
3504
3505 switch (s->state) {
3506
3507 case SERVICE_START_PRE:
3508 case SERVICE_START:
3509 log_unit_warning(UNIT(s), "%s operation timed out. Terminating.", s->state == SERVICE_START ? "Start" : "Start-pre");
3510 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_TIMEOUT);
3511 break;
3512
3513 case SERVICE_START_POST:
3514 log_unit_warning(UNIT(s), "Start-post operation timed out. Stopping.");
3515 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_TIMEOUT);
3516 break;
3517
3518 case SERVICE_RUNNING:
3519 log_unit_warning(UNIT(s), "Service reached runtime time limit. Stopping.");
3520 service_enter_stop(s, SERVICE_FAILURE_TIMEOUT);
3521 break;
3522
3523 case SERVICE_RELOAD:
3524 log_unit_warning(UNIT(s), "Reload operation timed out. Killing reload process.");
3525 service_kill_control_process(s);
3526 s->reload_result = SERVICE_FAILURE_TIMEOUT;
3527 service_enter_running(s, SERVICE_SUCCESS);
3528 break;
3529
3530 case SERVICE_STOP:
3531 log_unit_warning(UNIT(s), "Stopping timed out. Terminating.");
3532 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_TIMEOUT);
3533 break;
3534
3535 case SERVICE_STOP_WATCHDOG:
3536 log_unit_warning(UNIT(s), "State 'stop-watchdog' timed out. Terminating.");
3537 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_TIMEOUT);
3538 break;
3539
3540 case SERVICE_STOP_SIGTERM:
3541 if (s->kill_context.send_sigkill) {
3542 log_unit_warning(UNIT(s), "State 'stop-sigterm' timed out. Killing.");
3543 service_enter_signal(s, SERVICE_STOP_SIGKILL, SERVICE_FAILURE_TIMEOUT);
3544 } else {
3545 log_unit_warning(UNIT(s), "State 'stop-sigterm' timed out. Skipping SIGKILL.");
3546 service_enter_stop_post(s, SERVICE_FAILURE_TIMEOUT);
3547 }
3548
3549 break;
3550
3551 case SERVICE_STOP_SIGKILL:
3552 /* Uh, we sent a SIGKILL and it is still not gone?
3553 * Must be something we cannot kill, so let's just be
3554 * weirded out and continue */
3555
3556 log_unit_warning(UNIT(s), "Processes still around after SIGKILL. Ignoring.");
3557 service_enter_stop_post(s, SERVICE_FAILURE_TIMEOUT);
3558 break;
3559
3560 case SERVICE_STOP_POST:
3561 log_unit_warning(UNIT(s), "State 'stop-post' timed out. Terminating.");
3562 service_enter_signal(s, SERVICE_FINAL_SIGTERM, SERVICE_FAILURE_TIMEOUT);
3563 break;
3564
3565 case SERVICE_FINAL_SIGTERM:
3566 if (s->kill_context.send_sigkill) {
3567 log_unit_warning(UNIT(s), "State 'stop-final-sigterm' timed out. Killing.");
3568 service_enter_signal(s, SERVICE_FINAL_SIGKILL, SERVICE_FAILURE_TIMEOUT);
3569 } else {
3570 log_unit_warning(UNIT(s), "State 'stop-final-sigterm' timed out. Skipping SIGKILL. Entering failed mode.");
3571 service_enter_dead(s, SERVICE_FAILURE_TIMEOUT, false);
3572 }
3573
3574 break;
3575
3576 case SERVICE_FINAL_SIGKILL:
3577 log_unit_warning(UNIT(s), "Processes still around after final SIGKILL. Entering failed mode.");
3578 service_enter_dead(s, SERVICE_FAILURE_TIMEOUT, true);
3579 break;
3580
3581 case SERVICE_AUTO_RESTART:
3582 if (s->restart_usec > 0) {
3583 char buf_restart[FORMAT_TIMESPAN_MAX];
3584 log_unit_info(UNIT(s),
3585 "Service RestartSec=%s expired, scheduling restart.",
3586 format_timespan(buf_restart, sizeof buf_restart, s->restart_usec, USEC_PER_SEC));
3587 } else
3588 log_unit_info(UNIT(s),
3589 "Service has no hold-off time (RestartSec=0), scheduling restart.");
3590
3591 service_enter_restart(s);
3592 break;
3593
3594 default:
3595 assert_not_reached("Timeout at wrong time.");
3596 }
3597
3598 return 0;
3599 }
3600
3601 static int service_dispatch_watchdog(sd_event_source *source, usec_t usec, void *userdata) {
3602 Service *s = SERVICE(userdata);
3603 char t[FORMAT_TIMESPAN_MAX];
3604 usec_t watchdog_usec;
3605
3606 assert(s);
3607 assert(source == s->watchdog_event_source);
3608
3609 watchdog_usec = service_get_watchdog_usec(s);
3610
3611 if (UNIT(s)->manager->service_watchdogs) {
3612 log_unit_error(UNIT(s), "Watchdog timeout (limit %s)!",
3613 format_timespan(t, sizeof(t), watchdog_usec, 1));
3614
3615 service_enter_signal(s, SERVICE_STOP_WATCHDOG, SERVICE_FAILURE_WATCHDOG);
3616 } else
3617 log_unit_warning(UNIT(s), "Watchdog disabled! Ignoring watchdog timeout (limit %s)!",
3618 format_timespan(t, sizeof(t), watchdog_usec, 1));
3619
3620 return 0;
3621 }
3622
3623 static bool service_notify_message_authorized(Service *s, pid_t pid, char **tags, FDSet *fds) {
3624 assert(s);
3625
3626 if (s->notify_access == NOTIFY_NONE) {
3627 log_unit_warning(UNIT(s), "Got notification message from PID "PID_FMT", but reception is disabled.", pid);
3628 return false;
3629 }
3630
3631 if (s->notify_access == NOTIFY_MAIN && pid != s->main_pid) {
3632 if (s->main_pid != 0)
3633 log_unit_warning(UNIT(s), "Got notification message from PID "PID_FMT", but reception only permitted for main PID "PID_FMT, pid, s->main_pid);
3634 else
3635 log_unit_warning(UNIT(s), "Got notification message from PID "PID_FMT", but reception only permitted for main PID which is currently not known", pid);
3636
3637 return false;
3638 }
3639
3640 if (s->notify_access == NOTIFY_EXEC && pid != s->main_pid && pid != s->control_pid) {
3641 if (s->main_pid != 0 && s->control_pid != 0)
3642 log_unit_warning(UNIT(s), "Got notification message from PID "PID_FMT", but reception only permitted for main PID "PID_FMT" and control PID "PID_FMT,
3643 pid, s->main_pid, s->control_pid);
3644 else if (s->main_pid != 0)
3645 log_unit_warning(UNIT(s), "Got notification message from PID "PID_FMT", but reception only permitted for main PID "PID_FMT, pid, s->main_pid);
3646 else if (s->control_pid != 0)
3647 log_unit_warning(UNIT(s), "Got notification message from PID "PID_FMT", but reception only permitted for control PID "PID_FMT, pid, s->control_pid);
3648 else
3649 log_unit_warning(UNIT(s), "Got notification message from PID "PID_FMT", but reception only permitted for main PID and control PID which are currently not known", pid);
3650
3651 return false;
3652 }
3653
3654 return true;
3655 }
3656
3657 static void service_notify_message(
3658 Unit *u,
3659 const struct ucred *ucred,
3660 char **tags,
3661 FDSet *fds) {
3662
3663 Service *s = SERVICE(u);
3664 bool notify_dbus = false;
3665 const char *e;
3666 char **i;
3667 int r;
3668
3669 assert(u);
3670 assert(ucred);
3671
3672 if (!service_notify_message_authorized(SERVICE(u), ucred->pid, tags, fds))
3673 return;
3674
3675 if (DEBUG_LOGGING) {
3676 _cleanup_free_ char *cc = NULL;
3677
3678 cc = strv_join(tags, ", ");
3679 log_unit_debug(u, "Got notification message from PID "PID_FMT" (%s)", ucred->pid, isempty(cc) ? "n/a" : cc);
3680 }
3681
3682 /* Interpret MAINPID= */
3683 e = strv_find_startswith(tags, "MAINPID=");
3684 if (e && IN_SET(s->state, SERVICE_START, SERVICE_START_POST, SERVICE_RUNNING, SERVICE_RELOAD)) {
3685 pid_t new_main_pid;
3686
3687 if (parse_pid(e, &new_main_pid) < 0)
3688 log_unit_warning(u, "Failed to parse MAINPID= field in notification message, ignoring: %s", e);
3689 else if (!s->main_pid_known || new_main_pid != s->main_pid) {
3690
3691 r = service_is_suitable_main_pid(s, new_main_pid, LOG_WARNING);
3692 if (r == 0) {
3693 /* The new main PID is a bit suspicous, which is OK if the sender is privileged. */
3694
3695 if (ucred->uid == 0) {
3696 log_unit_debug(u, "New main PID "PID_FMT" does not belong to service, but we'll accept it as the request to change it came from a privileged process.", new_main_pid);
3697 r = 1;
3698 } else
3699 log_unit_debug(u, "New main PID "PID_FMT" does not belong to service, refusing.", new_main_pid);
3700 }
3701 if (r > 0) {
3702 service_set_main_pid(s, new_main_pid);
3703
3704 r = unit_watch_pid(UNIT(s), new_main_pid);
3705 if (r < 0)
3706 log_unit_warning_errno(UNIT(s), r, "Failed to watch new main PID "PID_FMT" for service: %m", new_main_pid);
3707
3708 notify_dbus = true;
3709 }
3710 }
3711 }
3712
3713 /* Interpret READY=/STOPPING=/RELOADING=. Last one wins. */
3714 STRV_FOREACH_BACKWARDS(i, tags) {
3715
3716 if (streq(*i, "READY=1")) {
3717 s->notify_state = NOTIFY_READY;
3718
3719 /* Type=notify services inform us about completed
3720 * initialization with READY=1 */
3721 if (s->type == SERVICE_NOTIFY && s->state == SERVICE_START)
3722 service_enter_start_post(s);
3723
3724 /* Sending READY=1 while we are reloading informs us
3725 * that the reloading is complete */
3726 if (s->state == SERVICE_RELOAD && s->control_pid == 0)
3727 service_enter_running(s, SERVICE_SUCCESS);
3728
3729 notify_dbus = true;
3730 break;
3731
3732 } else if (streq(*i, "RELOADING=1")) {
3733 s->notify_state = NOTIFY_RELOADING;
3734
3735 if (s->state == SERVICE_RUNNING)
3736 service_enter_reload_by_notify(s);
3737
3738 notify_dbus = true;
3739 break;
3740
3741 } else if (streq(*i, "STOPPING=1")) {
3742 s->notify_state = NOTIFY_STOPPING;
3743
3744 if (s->state == SERVICE_RUNNING)
3745 service_enter_stop_by_notify(s);
3746
3747 notify_dbus = true;
3748 break;
3749 }
3750 }
3751
3752 /* Interpret STATUS= */
3753 e = strv_find_startswith(tags, "STATUS=");
3754 if (e) {
3755 _cleanup_free_ char *t = NULL;
3756
3757 if (!isempty(e)) {
3758 /* Note that this size limit check is mostly paranoia: since the datagram size we are willing
3759 * to process is already limited to NOTIFY_BUFFER_MAX, this limit here should never be hit. */
3760 if (strlen(e) > STATUS_TEXT_MAX)
3761 log_unit_warning(u, "Status message overly long (%zu > %u), ignoring.", strlen(e), STATUS_TEXT_MAX);
3762 else if (!utf8_is_valid(e))
3763 log_unit_warning(u, "Status message in notification message is not UTF-8 clean, ignoring.");
3764 else {
3765 t = strdup(e);
3766 if (!t)
3767 log_oom();
3768 }
3769 }
3770
3771 if (!streq_ptr(s->status_text, t)) {
3772 free_and_replace(s->status_text, t);
3773 notify_dbus = true;
3774 }
3775 }
3776
3777 /* Interpret ERRNO= */
3778 e = strv_find_startswith(tags, "ERRNO=");
3779 if (e) {
3780 int status_errno;
3781
3782 status_errno = parse_errno(e);
3783 if (status_errno < 0)
3784 log_unit_warning_errno(u, status_errno,
3785 "Failed to parse ERRNO= field value '%s' in notification message: %m", e);
3786 else if (s->status_errno != status_errno) {
3787 s->status_errno = status_errno;
3788 notify_dbus = true;
3789 }
3790 }
3791
3792 /* Interpret EXTEND_TIMEOUT= */
3793 e = strv_find_startswith(tags, "EXTEND_TIMEOUT_USEC=");
3794 if (e) {
3795 usec_t extend_timeout_usec;
3796 if (safe_atou64(e, &extend_timeout_usec) < 0)
3797 log_unit_warning(u, "Failed to parse EXTEND_TIMEOUT_USEC=%s", e);
3798 else
3799 service_extend_timeout(s, extend_timeout_usec);
3800 }
3801
3802 /* Interpret WATCHDOG= */
3803 if (strv_find(tags, "WATCHDOG=1"))
3804 service_reset_watchdog(s);
3805
3806 e = strv_find_startswith(tags, "WATCHDOG_USEC=");
3807 if (e) {
3808 usec_t watchdog_override_usec;
3809 if (safe_atou64(e, &watchdog_override_usec) < 0)
3810 log_unit_warning(u, "Failed to parse WATCHDOG_USEC=%s", e);
3811 else
3812 service_override_watchdog_timeout(s, watchdog_override_usec);
3813 }
3814
3815 /* Process FD store messages. Either FDSTOREREMOVE=1 for removal, or FDSTORE=1 for addition. In both cases,
3816 * process FDNAME= for picking the file descriptor name to use. Note that FDNAME= is required when removing
3817 * fds, but optional when pushing in new fds, for compatibility reasons. */
3818 if (strv_find(tags, "FDSTOREREMOVE=1")) {
3819 const char *name;
3820
3821 name = strv_find_startswith(tags, "FDNAME=");
3822 if (!name || !fdname_is_valid(name))
3823 log_unit_warning(u, "FDSTOREREMOVE=1 requested, but no valid file descriptor name passed, ignoring.");
3824 else
3825 service_remove_fd_store(s, name);
3826
3827 } else if (strv_find(tags, "FDSTORE=1")) {
3828 const char *name;
3829
3830 name = strv_find_startswith(tags, "FDNAME=");
3831 if (name && !fdname_is_valid(name)) {
3832 log_unit_warning(u, "Passed FDNAME= name is invalid, ignoring.");
3833 name = NULL;
3834 }
3835
3836 (void) service_add_fd_store_set(s, fds, name);
3837 }
3838
3839 /* Notify clients about changed status or main pid */
3840 if (notify_dbus)
3841 unit_add_to_dbus_queue(u);
3842 }
3843
3844 static int service_get_timeout(Unit *u, usec_t *timeout) {
3845 Service *s = SERVICE(u);
3846 uint64_t t;
3847 int r;
3848
3849 if (!s->timer_event_source)
3850 return 0;
3851
3852 r = sd_event_source_get_time(s->timer_event_source, &t);
3853 if (r < 0)
3854 return r;
3855 if (t == USEC_INFINITY)
3856 return 0;
3857
3858 *timeout = t;
3859 return 1;
3860 }
3861
3862 static void service_bus_name_owner_change(
3863 Unit *u,
3864 const char *name,
3865 const char *old_owner,
3866 const char *new_owner) {
3867
3868 Service *s = SERVICE(u);
3869 int r;
3870
3871 assert(s);
3872 assert(name);
3873
3874 assert(streq(s->bus_name, name));
3875 assert(old_owner || new_owner);
3876
3877 if (old_owner && new_owner)
3878 log_unit_debug(u, "D-Bus name %s changed owner from %s to %s", name, old_owner, new_owner);
3879 else if (old_owner)
3880 log_unit_debug(u, "D-Bus name %s no longer registered by %s", name, old_owner);
3881 else
3882 log_unit_debug(u, "D-Bus name %s now registered by %s", name, new_owner);
3883
3884 s->bus_name_good = !!new_owner;
3885
3886 /* Track the current owner, so we can reconstruct changes after a daemon reload */
3887 r = free_and_strdup(&s->bus_name_owner, new_owner);
3888 if (r < 0) {
3889 log_unit_error_errno(u, r, "Unable to set new bus name owner %s: %m", new_owner);
3890 return;
3891 }
3892
3893 if (s->type == SERVICE_DBUS) {
3894
3895 /* service_enter_running() will figure out what to
3896 * do */
3897 if (s->state == SERVICE_RUNNING)
3898 service_enter_running(s, SERVICE_SUCCESS);
3899 else if (s->state == SERVICE_START && new_owner)
3900 service_enter_start_post(s);
3901
3902 } else if (new_owner &&
3903 s->main_pid <= 0 &&
3904 IN_SET(s->state,
3905 SERVICE_START,
3906 SERVICE_START_POST,
3907 SERVICE_RUNNING,
3908 SERVICE_RELOAD)) {
3909
3910 _cleanup_(sd_bus_creds_unrefp) sd_bus_creds *creds = NULL;
3911 pid_t pid;
3912
3913 /* Try to acquire PID from bus service */
3914
3915 r = sd_bus_get_name_creds(u->manager->api_bus, name, SD_BUS_CREDS_PID, &creds);
3916 if (r >= 0)
3917 r = sd_bus_creds_get_pid(creds, &pid);
3918 if (r >= 0) {
3919 log_unit_debug(u, "D-Bus name %s is now owned by process " PID_FMT, name, pid);
3920
3921 service_set_main_pid(s, pid);
3922 unit_watch_pid(UNIT(s), pid);
3923 }
3924 }
3925 }
3926
3927 int service_set_socket_fd(Service *s, int fd, Socket *sock, bool selinux_context_net) {
3928 _cleanup_free_ char *peer = NULL;
3929 int r;
3930
3931 assert(s);
3932 assert(fd >= 0);
3933
3934 /* This is called by the socket code when instantiating a new service for a stream socket and the socket needs
3935 * to be configured. We take ownership of the passed fd on success. */
3936
3937 if (UNIT(s)->load_state != UNIT_LOADED)
3938 return -EINVAL;
3939
3940 if (s->socket_fd >= 0)
3941 return -EBUSY;
3942
3943 if (s->state != SERVICE_DEAD)
3944 return -EAGAIN;
3945
3946 if (getpeername_pretty(fd, true, &peer) >= 0) {
3947
3948 if (UNIT(s)->description) {
3949 _cleanup_free_ char *a;
3950
3951 a = strjoin(UNIT(s)->description, " (", peer, ")");
3952 if (!a)
3953 return -ENOMEM;
3954
3955 r = unit_set_description(UNIT(s), a);
3956 } else
3957 r = unit_set_description(UNIT(s), peer);
3958
3959 if (r < 0)
3960 return r;
3961 }
3962
3963 r = unit_add_two_dependencies(UNIT(sock), UNIT_BEFORE, UNIT_TRIGGERS, UNIT(s), false, UNIT_DEPENDENCY_IMPLICIT);
3964 if (r < 0)
3965 return r;
3966
3967 s->socket_fd = fd;
3968 s->socket_fd_selinux_context_net = selinux_context_net;
3969
3970 unit_ref_set(&s->accept_socket, UNIT(s), UNIT(sock));
3971 return 0;
3972 }
3973
3974 static void service_reset_failed(Unit *u) {
3975 Service *s = SERVICE(u);
3976
3977 assert(s);
3978
3979 if (s->state == SERVICE_FAILED)
3980 service_set_state(s, SERVICE_DEAD);
3981
3982 s->result = SERVICE_SUCCESS;
3983 s->reload_result = SERVICE_SUCCESS;
3984 s->n_restarts = 0;
3985 s->flush_n_restarts = false;
3986 }
3987
3988 static int service_kill(Unit *u, KillWho who, int signo, sd_bus_error *error) {
3989 Service *s = SERVICE(u);
3990
3991 assert(s);
3992
3993 return unit_kill_common(u, who, signo, s->main_pid, s->control_pid, error);
3994 }
3995
3996 static int service_main_pid(Unit *u) {
3997 Service *s = SERVICE(u);
3998
3999 assert(s);
4000
4001 return s->main_pid;
4002 }
4003
4004 static int service_control_pid(Unit *u) {
4005 Service *s = SERVICE(u);
4006
4007 assert(s);
4008
4009 return s->control_pid;
4010 }
4011
4012 static bool service_needs_console(Unit *u) {
4013 Service *s = SERVICE(u);
4014
4015 assert(s);
4016
4017 /* We provide our own implementation of this here, instead of relying of the generic implementation
4018 * unit_needs_console() provides, since we want to return false if we are in SERVICE_EXITED state. */
4019
4020 if (!exec_context_may_touch_console(&s->exec_context))
4021 return false;
4022
4023 return IN_SET(s->state,
4024 SERVICE_START_PRE,
4025 SERVICE_START,
4026 SERVICE_START_POST,
4027 SERVICE_RUNNING,
4028 SERVICE_RELOAD,
4029 SERVICE_STOP,
4030 SERVICE_STOP_WATCHDOG,
4031 SERVICE_STOP_SIGTERM,
4032 SERVICE_STOP_SIGKILL,
4033 SERVICE_STOP_POST,
4034 SERVICE_FINAL_SIGTERM,
4035 SERVICE_FINAL_SIGKILL);
4036 }
4037
4038 static int service_exit_status(Unit *u) {
4039 Service *s = SERVICE(u);
4040
4041 assert(u);
4042
4043 if (s->main_exec_status.pid <= 0 ||
4044 !dual_timestamp_is_set(&s->main_exec_status.exit_timestamp))
4045 return -ENODATA;
4046
4047 if (s->main_exec_status.code != CLD_EXITED)
4048 return -EBADE;
4049
4050 return s->main_exec_status.status;
4051 }
4052
4053 static const char* const service_restart_table[_SERVICE_RESTART_MAX] = {
4054 [SERVICE_RESTART_NO] = "no",
4055 [SERVICE_RESTART_ON_SUCCESS] = "on-success",
4056 [SERVICE_RESTART_ON_FAILURE] = "on-failure",
4057 [SERVICE_RESTART_ON_ABNORMAL] = "on-abnormal",
4058 [SERVICE_RESTART_ON_WATCHDOG] = "on-watchdog",
4059 [SERVICE_RESTART_ON_ABORT] = "on-abort",
4060 [SERVICE_RESTART_ALWAYS] = "always",
4061 };
4062
4063 DEFINE_STRING_TABLE_LOOKUP(service_restart, ServiceRestart);
4064
4065 static const char* const service_type_table[_SERVICE_TYPE_MAX] = {
4066 [SERVICE_SIMPLE] = "simple",
4067 [SERVICE_FORKING] = "forking",
4068 [SERVICE_ONESHOT] = "oneshot",
4069 [SERVICE_DBUS] = "dbus",
4070 [SERVICE_NOTIFY] = "notify",
4071 [SERVICE_IDLE] = "idle",
4072 [SERVICE_EXEC] = "exec",
4073 };
4074
4075 DEFINE_STRING_TABLE_LOOKUP(service_type, ServiceType);
4076
4077 static const char* const service_exec_command_table[_SERVICE_EXEC_COMMAND_MAX] = {
4078 [SERVICE_EXEC_START_PRE] = "ExecStartPre",
4079 [SERVICE_EXEC_START] = "ExecStart",
4080 [SERVICE_EXEC_START_POST] = "ExecStartPost",
4081 [SERVICE_EXEC_RELOAD] = "ExecReload",
4082 [SERVICE_EXEC_STOP] = "ExecStop",
4083 [SERVICE_EXEC_STOP_POST] = "ExecStopPost",
4084 };
4085
4086 DEFINE_STRING_TABLE_LOOKUP(service_exec_command, ServiceExecCommand);
4087
4088 static const char* const notify_state_table[_NOTIFY_STATE_MAX] = {
4089 [NOTIFY_UNKNOWN] = "unknown",
4090 [NOTIFY_READY] = "ready",
4091 [NOTIFY_RELOADING] = "reloading",
4092 [NOTIFY_STOPPING] = "stopping",
4093 };
4094
4095 DEFINE_STRING_TABLE_LOOKUP(notify_state, NotifyState);
4096
4097 static const char* const service_result_table[_SERVICE_RESULT_MAX] = {
4098 [SERVICE_SUCCESS] = "success",
4099 [SERVICE_FAILURE_RESOURCES] = "resources",
4100 [SERVICE_FAILURE_PROTOCOL] = "protocol",
4101 [SERVICE_FAILURE_TIMEOUT] = "timeout",
4102 [SERVICE_FAILURE_EXIT_CODE] = "exit-code",
4103 [SERVICE_FAILURE_SIGNAL] = "signal",
4104 [SERVICE_FAILURE_CORE_DUMP] = "core-dump",
4105 [SERVICE_FAILURE_WATCHDOG] = "watchdog",
4106 [SERVICE_FAILURE_START_LIMIT_HIT] = "start-limit-hit",
4107 };
4108
4109 DEFINE_STRING_TABLE_LOOKUP(service_result, ServiceResult);
4110
4111 const UnitVTable service_vtable = {
4112 .object_size = sizeof(Service),
4113 .exec_context_offset = offsetof(Service, exec_context),
4114 .cgroup_context_offset = offsetof(Service, cgroup_context),
4115 .kill_context_offset = offsetof(Service, kill_context),
4116 .exec_runtime_offset = offsetof(Service, exec_runtime),
4117 .dynamic_creds_offset = offsetof(Service, dynamic_creds),
4118
4119 .sections =
4120 "Unit\0"
4121 "Service\0"
4122 "Install\0",
4123 .private_section = "Service",
4124
4125 .can_transient = true,
4126 .can_delegate = true,
4127
4128 .init = service_init,
4129 .done = service_done,
4130 .load = service_load,
4131 .release_resources = service_release_resources,
4132
4133 .coldplug = service_coldplug,
4134
4135 .dump = service_dump,
4136
4137 .start = service_start,
4138 .stop = service_stop,
4139 .reload = service_reload,
4140
4141 .can_reload = service_can_reload,
4142
4143 .kill = service_kill,
4144
4145 .serialize = service_serialize,
4146 .deserialize_item = service_deserialize_item,
4147
4148 .active_state = service_active_state,
4149 .sub_state_to_string = service_sub_state_to_string,
4150
4151 .will_restart = service_will_restart,
4152
4153 .may_gc = service_may_gc,
4154
4155 .sigchld_event = service_sigchld_event,
4156
4157 .reset_failed = service_reset_failed,
4158
4159 .notify_cgroup_empty = service_notify_cgroup_empty_event,
4160 .notify_message = service_notify_message,
4161
4162 .main_pid = service_main_pid,
4163 .control_pid = service_control_pid,
4164
4165 .bus_name_owner_change = service_bus_name_owner_change,
4166
4167 .bus_vtable = bus_service_vtable,
4168 .bus_set_property = bus_service_set_property,
4169 .bus_commit_properties = bus_service_commit_properties,
4170
4171 .get_timeout = service_get_timeout,
4172 .needs_console = service_needs_console,
4173 .exit_status = service_exit_status,
4174
4175 .status_message_formats = {
4176 .starting_stopping = {
4177 [0] = "Starting %s...",
4178 [1] = "Stopping %s...",
4179 },
4180 .finished_start_job = {
4181 [JOB_DONE] = "Started %s.",
4182 [JOB_FAILED] = "Failed to start %s.",
4183 },
4184 .finished_stop_job = {
4185 [JOB_DONE] = "Stopped %s.",
4186 [JOB_FAILED] = "Stopped (with error) %s.",
4187 },
4188 },
4189 };
Unnamed repository; edit this file 'description' to name the repository.