]> git.ipfire.org Git - thirdparty/systemd.git/blob - src/core/service.c
projects / thirdparty / systemd.git / blob
? search:
summary | shortlog | log | commit | commitdiff | tree
blame | history | raw | HEAD
core: implement /run/systemd/units/-based path for passing unit info from PID 1 to...
[thirdparty/systemd.git] / src / core / service.c
1 /***
2 This file is part of systemd.
3
4 Copyright 2010 Lennart Poettering
5
6 systemd is free software; you can redistribute it and/or modify it
7 under the terms of the GNU Lesser General Public License as published by
8 the Free Software Foundation; either version 2.1 of the License, or
9 (at your option) any later version.
10
11 systemd is distributed in the hope that it will be useful, but
12 WITHOUT ANY WARRANTY; without even the implied warranty of
13 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
14 Lesser General Public License for more details.
15
16 You should have received a copy of the GNU Lesser General Public License
17 along with systemd; If not, see <http://www.gnu.org/licenses/>.
18 ***/
19
20 #include <errno.h>
21 #include <signal.h>
22 #include <unistd.h>
23
24 #include "sd-messages.h"
25
26 #include "alloc-util.h"
27 #include "async.h"
28 #include "bus-error.h"
29 #include "bus-kernel.h"
30 #include "bus-util.h"
31 #include "dbus-service.h"
32 #include "def.h"
33 #include "env-util.h"
34 #include "escape.h"
35 #include "exit-status.h"
36 #include "fd-util.h"
37 #include "fileio.h"
38 #include "format-util.h"
39 #include "fs-util.h"
40 #include "load-dropin.h"
41 #include "load-fragment.h"
42 #include "log.h"
43 #include "manager.h"
44 #include "parse-util.h"
45 #include "path-util.h"
46 #include "process-util.h"
47 #include "service.h"
48 #include "signal-util.h"
49 #include "special.h"
50 #include "stdio-util.h"
51 #include "string-table.h"
52 #include "string-util.h"
53 #include "strv.h"
54 #include "unit-name.h"
55 #include "unit.h"
56 #include "utf8.h"
57 #include "util.h"
58
59 static const UnitActiveState state_translation_table[_SERVICE_STATE_MAX] = {
60 [SERVICE_DEAD] = UNIT_INACTIVE,
61 [SERVICE_START_PRE] = UNIT_ACTIVATING,
62 [SERVICE_START] = UNIT_ACTIVATING,
63 [SERVICE_START_POST] = UNIT_ACTIVATING,
64 [SERVICE_RUNNING] = UNIT_ACTIVE,
65 [SERVICE_EXITED] = UNIT_ACTIVE,
66 [SERVICE_RELOAD] = UNIT_RELOADING,
67 [SERVICE_STOP] = UNIT_DEACTIVATING,
68 [SERVICE_STOP_SIGABRT] = UNIT_DEACTIVATING,
69 [SERVICE_STOP_SIGTERM] = UNIT_DEACTIVATING,
70 [SERVICE_STOP_SIGKILL] = UNIT_DEACTIVATING,
71 [SERVICE_STOP_POST] = UNIT_DEACTIVATING,
72 [SERVICE_FINAL_SIGTERM] = UNIT_DEACTIVATING,
73 [SERVICE_FINAL_SIGKILL] = UNIT_DEACTIVATING,
74 [SERVICE_FAILED] = UNIT_FAILED,
75 [SERVICE_AUTO_RESTART] = UNIT_ACTIVATING
76 };
77
78 /* For Type=idle we never want to delay any other jobs, hence we
79 * consider idle jobs active as soon as we start working on them */
80 static const UnitActiveState state_translation_table_idle[_SERVICE_STATE_MAX] = {
81 [SERVICE_DEAD] = UNIT_INACTIVE,
82 [SERVICE_START_PRE] = UNIT_ACTIVE,
83 [SERVICE_START] = UNIT_ACTIVE,
84 [SERVICE_START_POST] = UNIT_ACTIVE,
85 [SERVICE_RUNNING] = UNIT_ACTIVE,
86 [SERVICE_EXITED] = UNIT_ACTIVE,
87 [SERVICE_RELOAD] = UNIT_RELOADING,
88 [SERVICE_STOP] = UNIT_DEACTIVATING,
89 [SERVICE_STOP_SIGABRT] = UNIT_DEACTIVATING,
90 [SERVICE_STOP_SIGTERM] = UNIT_DEACTIVATING,
91 [SERVICE_STOP_SIGKILL] = UNIT_DEACTIVATING,
92 [SERVICE_STOP_POST] = UNIT_DEACTIVATING,
93 [SERVICE_FINAL_SIGTERM] = UNIT_DEACTIVATING,
94 [SERVICE_FINAL_SIGKILL] = UNIT_DEACTIVATING,
95 [SERVICE_FAILED] = UNIT_FAILED,
96 [SERVICE_AUTO_RESTART] = UNIT_ACTIVATING
97 };
98
99 static int service_dispatch_io(sd_event_source *source, int fd, uint32_t events, void *userdata);
100 static int service_dispatch_timer(sd_event_source *source, usec_t usec, void *userdata);
101 static int service_dispatch_watchdog(sd_event_source *source, usec_t usec, void *userdata);
102
103 static void service_enter_signal(Service *s, ServiceState state, ServiceResult f);
104 static void service_enter_reload_by_notify(Service *s);
105
106 static void service_init(Unit *u) {
107 Service *s = SERVICE(u);
108
109 assert(u);
110 assert(u->load_state == UNIT_STUB);
111
112 s->timeout_start_usec = u->manager->default_timeout_start_usec;
113 s->timeout_stop_usec = u->manager->default_timeout_stop_usec;
114 s->restart_usec = u->manager->default_restart_usec;
115 s->runtime_max_usec = USEC_INFINITY;
116 s->type = _SERVICE_TYPE_INVALID;
117 s->socket_fd = -1;
118 s->stdin_fd = s->stdout_fd = s->stderr_fd = -1;
119 s->guess_main_pid = true;
120
121 s->control_command_id = _SERVICE_EXEC_COMMAND_INVALID;
122 }
123
124 static void service_unwatch_control_pid(Service *s) {
125 assert(s);
126
127 if (s->control_pid <= 0)
128 return;
129
130 unit_unwatch_pid(UNIT(s), s->control_pid);
131 s->control_pid = 0;
132 }
133
134 static void service_unwatch_main_pid(Service *s) {
135 assert(s);
136
137 if (s->main_pid <= 0)
138 return;
139
140 unit_unwatch_pid(UNIT(s), s->main_pid);
141 s->main_pid = 0;
142 }
143
144 static void service_unwatch_pid_file(Service *s) {
145 if (!s->pid_file_pathspec)
146 return;
147
148 log_unit_debug(UNIT(s), "Stopping watch for PID file %s", s->pid_file_pathspec->path);
149 path_spec_unwatch(s->pid_file_pathspec);
150 path_spec_done(s->pid_file_pathspec);
151 s->pid_file_pathspec = mfree(s->pid_file_pathspec);
152 }
153
154 static int service_set_main_pid(Service *s, pid_t pid) {
155 pid_t ppid;
156
157 assert(s);
158
159 if (pid <= 1)
160 return -EINVAL;
161
162 if (pid == getpid_cached())
163 return -EINVAL;
164
165 if (s->main_pid == pid && s->main_pid_known)
166 return 0;
167
168 if (s->main_pid != pid) {
169 service_unwatch_main_pid(s);
170 exec_status_start(&s->main_exec_status, pid);
171 }
172
173 s->main_pid = pid;
174 s->main_pid_known = true;
175
176 if (get_process_ppid(pid, &ppid) >= 0 && ppid != getpid_cached()) {
177 log_unit_warning(UNIT(s), "Supervising process "PID_FMT" which is not our child. We'll most likely not notice when it exits.", pid);
178 s->main_pid_alien = true;
179 } else
180 s->main_pid_alien = false;
181
182 return 0;
183 }
184
185 void service_close_socket_fd(Service *s) {
186 assert(s);
187
188 /* Undo the effect of service_set_socket_fd(). */
189
190 s->socket_fd = asynchronous_close(s->socket_fd);
191
192 if (UNIT_ISSET(s->accept_socket)) {
193 socket_connection_unref(SOCKET(UNIT_DEREF(s->accept_socket)));
194 unit_ref_unset(&s->accept_socket);
195 }
196 }
197
198 static void service_stop_watchdog(Service *s) {
199 assert(s);
200
201 s->watchdog_event_source = sd_event_source_unref(s->watchdog_event_source);
202 s->watchdog_timestamp = DUAL_TIMESTAMP_NULL;
203 }
204
205 static usec_t service_get_watchdog_usec(Service *s) {
206 assert(s);
207
208 if (s->watchdog_override_enable)
209 return s->watchdog_override_usec;
210 else
211 return s->watchdog_usec;
212 }
213
214 static void service_start_watchdog(Service *s) {
215 int r;
216 usec_t watchdog_usec;
217
218 assert(s);
219
220 watchdog_usec = service_get_watchdog_usec(s);
221 if (IN_SET(watchdog_usec, 0, USEC_INFINITY))
222 return;
223
224 if (s->watchdog_event_source) {
225 r = sd_event_source_set_time(s->watchdog_event_source, usec_add(s->watchdog_timestamp.monotonic, watchdog_usec));
226 if (r < 0) {
227 log_unit_warning_errno(UNIT(s), r, "Failed to reset watchdog timer: %m");
228 return;
229 }
230
231 r = sd_event_source_set_enabled(s->watchdog_event_source, SD_EVENT_ONESHOT);
232 } else {
233 r = sd_event_add_time(
234 UNIT(s)->manager->event,
235 &s->watchdog_event_source,
236 CLOCK_MONOTONIC,
237 usec_add(s->watchdog_timestamp.monotonic, watchdog_usec), 0,
238 service_dispatch_watchdog, s);
239 if (r < 0) {
240 log_unit_warning_errno(UNIT(s), r, "Failed to add watchdog timer: %m");
241 return;
242 }
243
244 (void) sd_event_source_set_description(s->watchdog_event_source, "service-watchdog");
245
246 /* Let's process everything else which might be a sign
247 * of living before we consider a service died. */
248 r = sd_event_source_set_priority(s->watchdog_event_source, SD_EVENT_PRIORITY_IDLE);
249 }
250
251 if (r < 0)
252 log_unit_warning_errno(UNIT(s), r, "Failed to install watchdog timer: %m");
253 }
254
255 static void service_reset_watchdog(Service *s) {
256 assert(s);
257
258 dual_timestamp_get(&s->watchdog_timestamp);
259 service_start_watchdog(s);
260 }
261
262 static void service_reset_watchdog_timeout(Service *s, usec_t watchdog_override_usec) {
263 assert(s);
264
265 s->watchdog_override_enable = true;
266 s->watchdog_override_usec = watchdog_override_usec;
267 service_reset_watchdog(s);
268
269 log_unit_debug(UNIT(s), "watchdog_usec="USEC_FMT, s->watchdog_usec);
270 log_unit_debug(UNIT(s), "watchdog_override_usec="USEC_FMT, s->watchdog_override_usec);
271 }
272
273 static void service_fd_store_unlink(ServiceFDStore *fs) {
274
275 if (!fs)
276 return;
277
278 if (fs->service) {
279 assert(fs->service->n_fd_store > 0);
280 LIST_REMOVE(fd_store, fs->service->fd_store, fs);
281 fs->service->n_fd_store--;
282 }
283
284 if (fs->event_source) {
285 sd_event_source_set_enabled(fs->event_source, SD_EVENT_OFF);
286 sd_event_source_unref(fs->event_source);
287 }
288
289 free(fs->fdname);
290 safe_close(fs->fd);
291 free(fs);
292 }
293
294 static void service_release_fd_store(Service *s) {
295 assert(s);
296
297 log_unit_debug(UNIT(s), "Releasing all stored fds");
298 while (s->fd_store)
299 service_fd_store_unlink(s->fd_store);
300
301 assert(s->n_fd_store == 0);
302 }
303
304 static void service_release_resources(Unit *u, bool inactive) {
305 Service *s = SERVICE(u);
306
307 assert(s);
308
309 if (!s->fd_store && s->stdin_fd < 0 && s->stdout_fd < 0 && s->stderr_fd < 0)
310 return;
311
312 log_unit_debug(u, "Releasing resources.");
313
314 s->stdin_fd = safe_close(s->stdin_fd);
315 s->stdout_fd = safe_close(s->stdout_fd);
316 s->stderr_fd = safe_close(s->stderr_fd);
317
318 if (inactive)
319 service_release_fd_store(s);
320 }
321
322 static void service_done(Unit *u) {
323 Service *s = SERVICE(u);
324
325 assert(s);
326
327 s->pid_file = mfree(s->pid_file);
328 s->status_text = mfree(s->status_text);
329
330 s->exec_runtime = exec_runtime_unref(s->exec_runtime);
331 exec_command_free_array(s->exec_command, _SERVICE_EXEC_COMMAND_MAX);
332 s->control_command = NULL;
333 s->main_command = NULL;
334
335 dynamic_creds_unref(&s->dynamic_creds);
336
337 exit_status_set_free(&s->restart_prevent_status);
338 exit_status_set_free(&s->restart_force_status);
339 exit_status_set_free(&s->success_status);
340
341 /* This will leak a process, but at least no memory or any of
342 * our resources */
343 service_unwatch_main_pid(s);
344 service_unwatch_control_pid(s);
345 service_unwatch_pid_file(s);
346
347 if (s->bus_name) {
348 unit_unwatch_bus_name(u, s->bus_name);
349 s->bus_name = mfree(s->bus_name);
350 }
351
352 s->bus_name_owner = mfree(s->bus_name_owner);
353
354 service_close_socket_fd(s);
355 s->peer = socket_peer_unref(s->peer);
356
357 unit_ref_unset(&s->accept_socket);
358
359 service_stop_watchdog(s);
360
361 s->timer_event_source = sd_event_source_unref(s->timer_event_source);
362
363 service_release_resources(u, true);
364 }
365
366 static int on_fd_store_io(sd_event_source *e, int fd, uint32_t revents, void *userdata) {
367 ServiceFDStore *fs = userdata;
368
369 assert(e);
370 assert(fs);
371
372 /* If we get either EPOLLHUP or EPOLLERR, it's time to remove this entry from the fd store */
373 log_unit_debug(UNIT(fs->service),
374 "Received %s on stored fd %d (%s), closing.",
375 revents & EPOLLERR ? "EPOLLERR" : "EPOLLHUP",
376 fs->fd, strna(fs->fdname));
377 service_fd_store_unlink(fs);
378 return 0;
379 }
380
381 static int service_add_fd_store(Service *s, int fd, const char *name) {
382 ServiceFDStore *fs;
383 int r;
384
385 /* fd is always consumed if we return >= 0 */
386
387 assert(s);
388 assert(fd >= 0);
389
390 if (s->n_fd_store >= s->n_fd_store_max)
391 return -EXFULL; /* Our store is full.
392 * Use this errno rather than E[NM]FILE to distinguish from
393 * the case where systemd itself hits the file limit. */
394
395 LIST_FOREACH(fd_store, fs, s->fd_store) {
396 r = same_fd(fs->fd, fd);
397 if (r < 0)
398 return r;
399 if (r > 0) {
400 safe_close(fd);
401 return 0; /* fd already included */
402 }
403 }
404
405 fs = new0(ServiceFDStore, 1);
406 if (!fs)
407 return -ENOMEM;
408
409 fs->fd = fd;
410 fs->service = s;
411 fs->fdname = strdup(name ?: "stored");
412 if (!fs->fdname) {
413 free(fs);
414 return -ENOMEM;
415 }
416
417 r = sd_event_add_io(UNIT(s)->manager->event, &fs->event_source, fd, 0, on_fd_store_io, fs);
418 if (r < 0 && r != -EPERM) { /* EPERM indicates fds that aren't pollable, which is OK */
419 free(fs->fdname);
420 free(fs);
421 return r;
422 } else if (r >= 0)
423 (void) sd_event_source_set_description(fs->event_source, "service-fd-store");
424
425 LIST_PREPEND(fd_store, s->fd_store, fs);
426 s->n_fd_store++;
427
428 return 1; /* fd newly stored */
429 }
430
431 static int service_add_fd_store_set(Service *s, FDSet *fds, const char *name) {
432 int r;
433
434 assert(s);
435
436 while (fdset_size(fds) > 0) {
437 _cleanup_close_ int fd = -1;
438
439 fd = fdset_steal_first(fds);
440 if (fd < 0)
441 break;
442
443 r = service_add_fd_store(s, fd, name);
444 if (r == -EXFULL)
445 return log_unit_warning_errno(UNIT(s), r,
446 "Cannot store more fds than FileDescriptorStoreMax=%u, closing remaining.",
447 s->n_fd_store_max);
448 if (r < 0)
449 return log_unit_error_errno(UNIT(s), r, "Failed to add fd to store: %m");
450 if (r > 0)
451 log_unit_debug(UNIT(s), "Added fd %u (%s) to fd store.", fd, strna(name));
452 fd = -1;
453 }
454
455 return 0;
456 }
457
458 static int service_arm_timer(Service *s, usec_t usec) {
459 int r;
460
461 assert(s);
462
463 if (s->timer_event_source) {
464 r = sd_event_source_set_time(s->timer_event_source, usec);
465 if (r < 0)
466 return r;
467
468 return sd_event_source_set_enabled(s->timer_event_source, SD_EVENT_ONESHOT);
469 }
470
471 if (usec == USEC_INFINITY)
472 return 0;
473
474 r = sd_event_add_time(
475 UNIT(s)->manager->event,
476 &s->timer_event_source,
477 CLOCK_MONOTONIC,
478 usec, 0,
479 service_dispatch_timer, s);
480 if (r < 0)
481 return r;
482
483 (void) sd_event_source_set_description(s->timer_event_source, "service-timer");
484
485 return 0;
486 }
487
488 static int service_verify(Service *s) {
489 assert(s);
490
491 if (UNIT(s)->load_state != UNIT_LOADED)
492 return 0;
493
494 if (!s->exec_command[SERVICE_EXEC_START] && !s->exec_command[SERVICE_EXEC_STOP]) {
495 log_unit_error(UNIT(s), "Service lacks both ExecStart= and ExecStop= setting. Refusing.");
496 return -EINVAL;
497 }
498
499 if (s->type != SERVICE_ONESHOT && !s->exec_command[SERVICE_EXEC_START]) {
500 log_unit_error(UNIT(s), "Service has no ExecStart= setting, which is only allowed for Type=oneshot services. Refusing.");
501 return -EINVAL;
502 }
503
504 if (!s->remain_after_exit && !s->exec_command[SERVICE_EXEC_START]) {
505 log_unit_error(UNIT(s), "Service has no ExecStart= setting, which is only allowed for RemainAfterExit=yes services. Refusing.");
506 return -EINVAL;
507 }
508
509 if (s->type != SERVICE_ONESHOT && s->exec_command[SERVICE_EXEC_START]->command_next) {
510 log_unit_error(UNIT(s), "Service has more than one ExecStart= setting, which is only allowed for Type=oneshot services. Refusing.");
511 return -EINVAL;
512 }
513
514 if (s->type == SERVICE_ONESHOT && s->restart != SERVICE_RESTART_NO) {
515 log_unit_error(UNIT(s), "Service has Restart= setting other than no, which isn't allowed for Type=oneshot services. Refusing.");
516 return -EINVAL;
517 }
518
519 if (s->type == SERVICE_ONESHOT && !exit_status_set_is_empty(&s->restart_force_status)) {
520 log_unit_error(UNIT(s), "Service has RestartForceStatus= set, which isn't allowed for Type=oneshot services. Refusing.");
521 return -EINVAL;
522 }
523
524 if (s->type == SERVICE_DBUS && !s->bus_name) {
525 log_unit_error(UNIT(s), "Service is of type D-Bus but no D-Bus service name has been specified. Refusing.");
526 return -EINVAL;
527 }
528
529 if (s->bus_name && s->type != SERVICE_DBUS)
530 log_unit_warning(UNIT(s), "Service has a D-Bus service name specified, but is not of type dbus. Ignoring.");
531
532 if (s->exec_context.pam_name && !IN_SET(s->kill_context.kill_mode, KILL_CONTROL_GROUP, KILL_MIXED)) {
533 log_unit_error(UNIT(s), "Service has PAM enabled. Kill mode must be set to 'control-group' or 'mixed'. Refusing.");
534 return -EINVAL;
535 }
536
537 if (s->usb_function_descriptors && !s->usb_function_strings)
538 log_unit_warning(UNIT(s), "Service has USBFunctionDescriptors= setting, but no USBFunctionStrings=. Ignoring.");
539
540 if (!s->usb_function_descriptors && s->usb_function_strings)
541 log_unit_warning(UNIT(s), "Service has USBFunctionStrings= setting, but no USBFunctionDescriptors=. Ignoring.");
542
543 if (s->runtime_max_usec != USEC_INFINITY && s->type == SERVICE_ONESHOT)
544 log_unit_warning(UNIT(s), "MaxRuntimeSec= has no effect in combination with Type=oneshot. Ignoring.");
545
546 return 0;
547 }
548
549 static int service_add_default_dependencies(Service *s) {
550 int r;
551
552 assert(s);
553
554 if (!UNIT(s)->default_dependencies)
555 return 0;
556
557 /* Add a number of automatic dependencies useful for the
558 * majority of services. */
559
560 if (MANAGER_IS_SYSTEM(UNIT(s)->manager)) {
561 /* First, pull in the really early boot stuff, and
562 * require it, so that we fail if we can't acquire
563 * it. */
564
565 r = unit_add_two_dependencies_by_name(UNIT(s), UNIT_AFTER, UNIT_REQUIRES, SPECIAL_SYSINIT_TARGET, NULL, true, UNIT_DEPENDENCY_DEFAULT);
566 if (r < 0)
567 return r;
568 } else {
569
570 /* In the --user instance there's no sysinit.target,
571 * in that case require basic.target instead. */
572
573 r = unit_add_dependency_by_name(UNIT(s), UNIT_REQUIRES, SPECIAL_BASIC_TARGET, NULL, true, UNIT_DEPENDENCY_DEFAULT);
574 if (r < 0)
575 return r;
576 }
577
578 /* Second, if the rest of the base system is in the same
579 * transaction, order us after it, but do not pull it in or
580 * even require it. */
581 r = unit_add_dependency_by_name(UNIT(s), UNIT_AFTER, SPECIAL_BASIC_TARGET, NULL, true, UNIT_DEPENDENCY_DEFAULT);
582 if (r < 0)
583 return r;
584
585 /* Third, add us in for normal shutdown. */
586 return unit_add_two_dependencies_by_name(UNIT(s), UNIT_BEFORE, UNIT_CONFLICTS, SPECIAL_SHUTDOWN_TARGET, NULL, true, UNIT_DEPENDENCY_DEFAULT);
587 }
588
589 static void service_fix_output(Service *s) {
590 assert(s);
591
592 /* If nothing has been explicitly configured, patch default
593 * output in. If input is socket/tty we avoid this however,
594 * since in that case we want output to default to the same
595 * place as we read input from. */
596
597 if (s->exec_context.std_error == EXEC_OUTPUT_INHERIT &&
598 s->exec_context.std_output == EXEC_OUTPUT_INHERIT &&
599 s->exec_context.std_input == EXEC_INPUT_NULL)
600 s->exec_context.std_error = UNIT(s)->manager->default_std_error;
601
602 if (s->exec_context.std_output == EXEC_OUTPUT_INHERIT &&
603 s->exec_context.std_input == EXEC_INPUT_NULL)
604 s->exec_context.std_output = UNIT(s)->manager->default_std_output;
605 }
606
607 static int service_setup_bus_name(Service *s) {
608 int r;
609
610 assert(s);
611
612 if (!s->bus_name)
613 return 0;
614
615 r = unit_add_dependency_by_name(UNIT(s), UNIT_REQUIRES, SPECIAL_DBUS_SOCKET, NULL, true, UNIT_DEPENDENCY_FILE);
616 if (r < 0)
617 return log_unit_error_errno(UNIT(s), r, "Failed to add dependency on " SPECIAL_DBUS_SOCKET ": %m");
618
619 /* We always want to be ordered against dbus.socket if both are in the transaction. */
620 r = unit_add_dependency_by_name(UNIT(s), UNIT_AFTER, SPECIAL_DBUS_SOCKET, NULL, true, UNIT_DEPENDENCY_FILE);
621 if (r < 0)
622 return log_unit_error_errno(UNIT(s), r, "Failed to add dependency on " SPECIAL_DBUS_SOCKET ": %m");
623
624 r = unit_watch_bus_name(UNIT(s), s->bus_name);
625 if (r == -EEXIST)
626 return log_unit_error_errno(UNIT(s), r, "Two services allocated for the same bus name %s, refusing operation.", s->bus_name);
627 if (r < 0)
628 return log_unit_error_errno(UNIT(s), r, "Cannot watch bus name %s: %m", s->bus_name);
629
630 return 0;
631 }
632
633 static int service_add_extras(Service *s) {
634 int r;
635
636 assert(s);
637
638 if (s->type == _SERVICE_TYPE_INVALID) {
639 /* Figure out a type automatically */
640 if (s->bus_name)
641 s->type = SERVICE_DBUS;
642 else if (s->exec_command[SERVICE_EXEC_START])
643 s->type = SERVICE_SIMPLE;
644 else
645 s->type = SERVICE_ONESHOT;
646 }
647
648 /* Oneshot services have disabled start timeout by default */
649 if (s->type == SERVICE_ONESHOT && !s->start_timeout_defined)
650 s->timeout_start_usec = USEC_INFINITY;
651
652 service_fix_output(s);
653
654 r = unit_patch_contexts(UNIT(s));
655 if (r < 0)
656 return r;
657
658 r = unit_add_exec_dependencies(UNIT(s), &s->exec_context);
659 if (r < 0)
660 return r;
661
662 r = unit_set_default_slice(UNIT(s));
663 if (r < 0)
664 return r;
665
666 if (s->type == SERVICE_NOTIFY && s->notify_access == NOTIFY_NONE)
667 s->notify_access = NOTIFY_MAIN;
668
669 if (s->watchdog_usec > 0 && s->notify_access == NOTIFY_NONE)
670 s->notify_access = NOTIFY_MAIN;
671
672 r = service_add_default_dependencies(s);
673 if (r < 0)
674 return r;
675
676 r = service_setup_bus_name(s);
677 if (r < 0)
678 return r;
679
680 return 0;
681 }
682
683 static int service_load(Unit *u) {
684 Service *s = SERVICE(u);
685 int r;
686
687 assert(s);
688
689 /* Load a .service file */
690 r = unit_load_fragment(u);
691 if (r < 0)
692 return r;
693
694 /* Still nothing found? Then let's give up */
695 if (u->load_state == UNIT_STUB)
696 return -ENOENT;
697
698 /* This is a new unit? Then let's add in some extras */
699 if (u->load_state == UNIT_LOADED) {
700
701 /* We were able to load something, then let's add in
702 * the dropin directories. */
703 r = unit_load_dropin(u);
704 if (r < 0)
705 return r;
706
707 /* This is a new unit? Then let's add in some
708 * extras */
709 r = service_add_extras(s);
710 if (r < 0)
711 return r;
712 }
713
714 return service_verify(s);
715 }
716
717 static void service_dump(Unit *u, FILE *f, const char *prefix) {
718 ServiceExecCommand c;
719 Service *s = SERVICE(u);
720 const char *prefix2;
721
722 assert(s);
723
724 prefix = strempty(prefix);
725 prefix2 = strjoina(prefix, "\t");
726
727 fprintf(f,
728 "%sService State: %s\n"
729 "%sResult: %s\n"
730 "%sReload Result: %s\n"
731 "%sPermissionsStartOnly: %s\n"
732 "%sRootDirectoryStartOnly: %s\n"
733 "%sRemainAfterExit: %s\n"
734 "%sGuessMainPID: %s\n"
735 "%sType: %s\n"
736 "%sRestart: %s\n"
737 "%sNotifyAccess: %s\n"
738 "%sNotifyState: %s\n",
739 prefix, service_state_to_string(s->state),
740 prefix, service_result_to_string(s->result),
741 prefix, service_result_to_string(s->reload_result),
742 prefix, yes_no(s->permissions_start_only),
743 prefix, yes_no(s->root_directory_start_only),
744 prefix, yes_no(s->remain_after_exit),
745 prefix, yes_no(s->guess_main_pid),
746 prefix, service_type_to_string(s->type),
747 prefix, service_restart_to_string(s->restart),
748 prefix, notify_access_to_string(s->notify_access),
749 prefix, notify_state_to_string(s->notify_state));
750
751 if (s->control_pid > 0)
752 fprintf(f,
753 "%sControl PID: "PID_FMT"\n",
754 prefix, s->control_pid);
755
756 if (s->main_pid > 0)
757 fprintf(f,
758 "%sMain PID: "PID_FMT"\n"
759 "%sMain PID Known: %s\n"
760 "%sMain PID Alien: %s\n",
761 prefix, s->main_pid,
762 prefix, yes_no(s->main_pid_known),
763 prefix, yes_no(s->main_pid_alien));
764
765 if (s->pid_file)
766 fprintf(f,
767 "%sPIDFile: %s\n",
768 prefix, s->pid_file);
769
770 if (s->bus_name)
771 fprintf(f,
772 "%sBusName: %s\n"
773 "%sBus Name Good: %s\n",
774 prefix, s->bus_name,
775 prefix, yes_no(s->bus_name_good));
776
777 if (UNIT_ISSET(s->accept_socket))
778 fprintf(f,
779 "%sAccept Socket: %s\n",
780 prefix, UNIT_DEREF(s->accept_socket)->id);
781
782 kill_context_dump(&s->kill_context, f, prefix);
783 exec_context_dump(&s->exec_context, f, prefix);
784
785 for (c = 0; c < _SERVICE_EXEC_COMMAND_MAX; c++) {
786
787 if (!s->exec_command[c])
788 continue;
789
790 fprintf(f, "%s-> %s:\n",
791 prefix, service_exec_command_to_string(c));
792
793 exec_command_dump_list(s->exec_command[c], f, prefix2);
794 }
795
796 if (s->status_text)
797 fprintf(f, "%sStatus Text: %s\n",
798 prefix, s->status_text);
799
800 if (s->n_fd_store_max > 0)
801 fprintf(f,
802 "%sFile Descriptor Store Max: %u\n"
803 "%sFile Descriptor Store Current: %u\n",
804 prefix, s->n_fd_store_max,
805 prefix, s->n_fd_store);
806
807 cgroup_context_dump(&s->cgroup_context, f, prefix);
808 }
809
810 static int service_load_pid_file(Service *s, bool may_warn) {
811 _cleanup_free_ char *k = NULL;
812 int r;
813 pid_t pid;
814
815 assert(s);
816
817 if (!s->pid_file)
818 return -ENOENT;
819
820 r = read_one_line_file(s->pid_file, &k);
821 if (r < 0) {
822 if (may_warn)
823 log_unit_info_errno(UNIT(s), r, "PID file %s not readable (yet?) after %s: %m", s->pid_file, service_state_to_string(s->state));
824 return r;
825 }
826
827 r = parse_pid(k, &pid);
828 if (r < 0) {
829 if (may_warn)
830 log_unit_info_errno(UNIT(s), r, "Failed to read PID from file %s: %m", s->pid_file);
831 return r;
832 }
833
834 if (!pid_is_alive(pid)) {
835 if (may_warn)
836 log_unit_info(UNIT(s), "PID "PID_FMT" read from file %s does not exist or is a zombie.", pid, s->pid_file);
837 return -ESRCH;
838 }
839
840 if (s->main_pid_known) {
841 if (pid == s->main_pid)
842 return 0;
843
844 log_unit_debug(UNIT(s), "Main PID changing: "PID_FMT" -> "PID_FMT, s->main_pid, pid);
845
846 service_unwatch_main_pid(s);
847 s->main_pid_known = false;
848 } else
849 log_unit_debug(UNIT(s), "Main PID loaded: "PID_FMT, pid);
850
851 r = service_set_main_pid(s, pid);
852 if (r < 0)
853 return r;
854
855 r = unit_watch_pid(UNIT(s), pid);
856 if (r < 0) /* FIXME: we need to do something here */
857 return log_unit_warning_errno(UNIT(s), r, "Failed to watch PID "PID_FMT" for service: %m", pid);
858
859 return 0;
860 }
861
862 static void service_search_main_pid(Service *s) {
863 pid_t pid = 0;
864 int r;
865
866 assert(s);
867
868 /* If we know it anyway, don't ever fallback to unreliable
869 * heuristics */
870 if (s->main_pid_known)
871 return;
872
873 if (!s->guess_main_pid)
874 return;
875
876 assert(s->main_pid <= 0);
877
878 if (unit_search_main_pid(UNIT(s), &pid) < 0)
879 return;
880
881 log_unit_debug(UNIT(s), "Main PID guessed: "PID_FMT, pid);
882 if (service_set_main_pid(s, pid) < 0)
883 return;
884
885 r = unit_watch_pid(UNIT(s), pid);
886 if (r < 0)
887 /* FIXME: we need to do something here */
888 log_unit_warning_errno(UNIT(s), r, "Failed to watch PID "PID_FMT" from: %m", pid);
889 }
890
891 static void service_set_state(Service *s, ServiceState state) {
892 ServiceState old_state;
893 const UnitActiveState *table;
894
895 assert(s);
896
897 table = s->type == SERVICE_IDLE ? state_translation_table_idle : state_translation_table;
898
899 old_state = s->state;
900 s->state = state;
901
902 service_unwatch_pid_file(s);
903
904 if (!IN_SET(state,
905 SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST,
906 SERVICE_RUNNING,
907 SERVICE_RELOAD,
908 SERVICE_STOP, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
909 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL,
910 SERVICE_AUTO_RESTART))
911 s->timer_event_source = sd_event_source_unref(s->timer_event_source);
912
913 if (!IN_SET(state,
914 SERVICE_START, SERVICE_START_POST,
915 SERVICE_RUNNING, SERVICE_RELOAD,
916 SERVICE_STOP, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
917 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL)) {
918 service_unwatch_main_pid(s);
919 s->main_command = NULL;
920 }
921
922 if (!IN_SET(state,
923 SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST,
924 SERVICE_RELOAD,
925 SERVICE_STOP, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
926 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL)) {
927 service_unwatch_control_pid(s);
928 s->control_command = NULL;
929 s->control_command_id = _SERVICE_EXEC_COMMAND_INVALID;
930 }
931
932 if (IN_SET(state, SERVICE_DEAD, SERVICE_FAILED, SERVICE_AUTO_RESTART))
933 unit_unwatch_all_pids(UNIT(s));
934
935 if (!IN_SET(state,
936 SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST,
937 SERVICE_RUNNING, SERVICE_RELOAD,
938 SERVICE_STOP, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
939 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL) &&
940 !(state == SERVICE_DEAD && UNIT(s)->job))
941 service_close_socket_fd(s);
942
943 if (!IN_SET(state, SERVICE_START_POST, SERVICE_RUNNING, SERVICE_RELOAD))
944 service_stop_watchdog(s);
945
946 /* For the inactive states unit_notify() will trim the cgroup,
947 * but for exit we have to do that ourselves... */
948 if (state == SERVICE_EXITED && !MANAGER_IS_RELOADING(UNIT(s)->manager))
949 unit_prune_cgroup(UNIT(s));
950
951 /* For remain_after_exit services, let's see if we can "release" the
952 * hold on the console, since unit_notify() only does that in case of
953 * change of state */
954 if (state == SERVICE_EXITED &&
955 s->remain_after_exit &&
956 UNIT(s)->manager->n_on_console > 0) {
957
958 ExecContext *ec;
959
960 ec = unit_get_exec_context(UNIT(s));
961 if (ec && exec_context_may_touch_console(ec)) {
962 Manager *m = UNIT(s)->manager;
963
964 m->n_on_console--;
965 if (m->n_on_console == 0)
966 /* unset no_console_output flag, since the console is free */
967 m->no_console_output = false;
968 }
969 }
970
971 if (old_state != state)
972 log_unit_debug(UNIT(s), "Changed %s -> %s", service_state_to_string(old_state), service_state_to_string(state));
973
974 unit_notify(UNIT(s), table[old_state], table[state], s->reload_result == SERVICE_SUCCESS);
975 }
976
977 static usec_t service_coldplug_timeout(Service *s) {
978 assert(s);
979
980 switch (s->deserialized_state) {
981
982 case SERVICE_START_PRE:
983 case SERVICE_START:
984 case SERVICE_START_POST:
985 case SERVICE_RELOAD:
986 return usec_add(UNIT(s)->state_change_timestamp.monotonic, s->timeout_start_usec);
987
988 case SERVICE_RUNNING:
989 return usec_add(UNIT(s)->active_enter_timestamp.monotonic, s->runtime_max_usec);
990
991 case SERVICE_STOP:
992 case SERVICE_STOP_SIGABRT:
993 case SERVICE_STOP_SIGTERM:
994 case SERVICE_STOP_SIGKILL:
995 case SERVICE_STOP_POST:
996 case SERVICE_FINAL_SIGTERM:
997 case SERVICE_FINAL_SIGKILL:
998 return usec_add(UNIT(s)->state_change_timestamp.monotonic, s->timeout_stop_usec);
999
1000 case SERVICE_AUTO_RESTART:
1001 return usec_add(UNIT(s)->inactive_enter_timestamp.monotonic, s->restart_usec);
1002
1003 default:
1004 return USEC_INFINITY;
1005 }
1006 }
1007
1008 static int service_coldplug(Unit *u) {
1009 Service *s = SERVICE(u);
1010 int r;
1011
1012 assert(s);
1013 assert(s->state == SERVICE_DEAD);
1014
1015 if (s->deserialized_state == s->state)
1016 return 0;
1017
1018 r = service_arm_timer(s, service_coldplug_timeout(s));
1019 if (r < 0)
1020 return r;
1021
1022 if (s->main_pid > 0 &&
1023 pid_is_unwaited(s->main_pid) &&
1024 ((s->deserialized_state == SERVICE_START && IN_SET(s->type, SERVICE_FORKING, SERVICE_DBUS, SERVICE_ONESHOT, SERVICE_NOTIFY)) ||
1025 IN_SET(s->deserialized_state,
1026 SERVICE_START, SERVICE_START_POST,
1027 SERVICE_RUNNING, SERVICE_RELOAD,
1028 SERVICE_STOP, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
1029 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL))) {
1030 r = unit_watch_pid(UNIT(s), s->main_pid);
1031 if (r < 0)
1032 return r;
1033 }
1034
1035 if (s->control_pid > 0 &&
1036 pid_is_unwaited(s->control_pid) &&
1037 IN_SET(s->deserialized_state,
1038 SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST,
1039 SERVICE_RELOAD,
1040 SERVICE_STOP, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
1041 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL)) {
1042 r = unit_watch_pid(UNIT(s), s->control_pid);
1043 if (r < 0)
1044 return r;
1045 }
1046
1047 if (!IN_SET(s->deserialized_state, SERVICE_DEAD, SERVICE_FAILED, SERVICE_AUTO_RESTART))
1048 unit_watch_all_pids(UNIT(s));
1049
1050 if (IN_SET(s->deserialized_state, SERVICE_START_POST, SERVICE_RUNNING, SERVICE_RELOAD))
1051 service_start_watchdog(s);
1052
1053 if (!IN_SET(s->deserialized_state, SERVICE_DEAD, SERVICE_FAILED, SERVICE_AUTO_RESTART))
1054 (void) unit_setup_dynamic_creds(u);
1055
1056 if (UNIT_ISSET(s->accept_socket)) {
1057 Socket* socket = SOCKET(UNIT_DEREF(s->accept_socket));
1058
1059 if (socket->max_connections_per_source > 0) {
1060 SocketPeer *peer;
1061
1062 /* Make a best-effort attempt at bumping the connection count */
1063 if (socket_acquire_peer(socket, s->socket_fd, &peer) > 0) {
1064 socket_peer_unref(s->peer);
1065 s->peer = peer;
1066 }
1067 }
1068 }
1069
1070 service_set_state(s, s->deserialized_state);
1071 return 0;
1072 }
1073
1074 static int service_collect_fds(Service *s,
1075 int **fds,
1076 char ***fd_names,
1077 unsigned *n_storage_fds,
1078 unsigned *n_socket_fds) {
1079
1080 _cleanup_strv_free_ char **rfd_names = NULL;
1081 _cleanup_free_ int *rfds = NULL;
1082 unsigned rn_socket_fds = 0, rn_storage_fds = 0;
1083 int r;
1084
1085 assert(s);
1086 assert(fds);
1087 assert(fd_names);
1088 assert(n_socket_fds);
1089
1090 if (s->socket_fd >= 0) {
1091
1092 /* Pass the per-connection socket */
1093
1094 rfds = new(int, 1);
1095 if (!rfds)
1096 return -ENOMEM;
1097 rfds[0] = s->socket_fd;
1098
1099 rfd_names = strv_new("connection", NULL);
1100 if (!rfd_names)
1101 return -ENOMEM;
1102
1103 rn_socket_fds = 1;
1104 } else {
1105 Iterator i;
1106 void *v;
1107 Unit *u;
1108
1109 /* Pass all our configured sockets for singleton services */
1110
1111 HASHMAP_FOREACH_KEY(v, u, UNIT(s)->dependencies[UNIT_TRIGGERED_BY], i) {
1112 _cleanup_free_ int *cfds = NULL;
1113 Socket *sock;
1114 int cn_fds;
1115
1116 if (u->type != UNIT_SOCKET)
1117 continue;
1118
1119 sock = SOCKET(u);
1120
1121 cn_fds = socket_collect_fds(sock, &cfds);
1122 if (cn_fds < 0)
1123 return cn_fds;
1124
1125 if (cn_fds <= 0)
1126 continue;
1127
1128 if (!rfds) {
1129 rfds = cfds;
1130 rn_socket_fds = cn_fds;
1131
1132 cfds = NULL;
1133 } else {
1134 int *t;
1135
1136 t = realloc(rfds, (rn_socket_fds + cn_fds) * sizeof(int));
1137 if (!t)
1138 return -ENOMEM;
1139
1140 memcpy(t + rn_socket_fds, cfds, cn_fds * sizeof(int));
1141
1142 rfds = t;
1143 rn_socket_fds += cn_fds;
1144 }
1145
1146 r = strv_extend_n(&rfd_names, socket_fdname(sock), cn_fds);
1147 if (r < 0)
1148 return r;
1149 }
1150 }
1151
1152 if (s->n_fd_store > 0) {
1153 ServiceFDStore *fs;
1154 unsigned n_fds;
1155 char **nl;
1156 int *t;
1157
1158 t = realloc(rfds, (rn_socket_fds + s->n_fd_store) * sizeof(int));
1159 if (!t)
1160 return -ENOMEM;
1161
1162 rfds = t;
1163
1164 nl = realloc(rfd_names, (rn_socket_fds + s->n_fd_store + 1) * sizeof(char*));
1165 if (!nl)
1166 return -ENOMEM;
1167
1168 rfd_names = nl;
1169 n_fds = rn_socket_fds;
1170
1171 LIST_FOREACH(fd_store, fs, s->fd_store) {
1172 rfds[n_fds] = fs->fd;
1173 rfd_names[n_fds] = strdup(strempty(fs->fdname));
1174 if (!rfd_names[n_fds])
1175 return -ENOMEM;
1176
1177 rn_storage_fds++;
1178 n_fds++;
1179 }
1180
1181 rfd_names[n_fds] = NULL;
1182 }
1183
1184 *fds = rfds;
1185 *fd_names = rfd_names;
1186 *n_socket_fds = rn_socket_fds;
1187 *n_storage_fds = rn_storage_fds;
1188
1189 rfds = NULL;
1190 rfd_names = NULL;
1191
1192 return 0;
1193 }
1194
1195 static bool service_exec_needs_notify_socket(Service *s, ExecFlags flags) {
1196 assert(s);
1197
1198 /* Notifications are accepted depending on the process and
1199 * the access setting of the service:
1200 * process: \ access: NONE MAIN EXEC ALL
1201 * main no yes yes yes
1202 * control no no yes yes
1203 * other (forked) no no no yes */
1204
1205 if (flags & EXEC_IS_CONTROL)
1206 /* A control process */
1207 return IN_SET(s->notify_access, NOTIFY_EXEC, NOTIFY_ALL);
1208
1209 /* We only spawn main processes and control processes, so any
1210 * process that is not a control process is a main process */
1211 return s->notify_access != NOTIFY_NONE;
1212 }
1213
1214 static int service_spawn(
1215 Service *s,
1216 ExecCommand *c,
1217 usec_t timeout,
1218 ExecFlags flags,
1219 pid_t *_pid) {
1220
1221 _cleanup_strv_free_ char **final_env = NULL, **our_env = NULL, **fd_names = NULL;
1222 _cleanup_free_ int *fds = NULL;
1223 unsigned n_storage_fds = 0, n_socket_fds = 0, n_env = 0;
1224 pid_t pid;
1225
1226 ExecParameters exec_params = {
1227 .flags = flags,
1228 .stdin_fd = -1,
1229 .stdout_fd = -1,
1230 .stderr_fd = -1,
1231 };
1232
1233 int r;
1234
1235 assert(s);
1236 assert(c);
1237 assert(_pid);
1238
1239 if (flags & EXEC_IS_CONTROL) {
1240 /* If this is a control process, mask the permissions/chroot application if this is requested. */
1241 if (s->permissions_start_only)
1242 exec_params.flags &= ~EXEC_APPLY_SANDBOXING;
1243 if (s->root_directory_start_only)
1244 exec_params.flags &= ~EXEC_APPLY_CHROOT;
1245 }
1246
1247 (void) unit_realize_cgroup(UNIT(s));
1248 if (s->reset_accounting) {
1249 (void) unit_reset_cpu_accounting(UNIT(s));
1250 (void) unit_reset_ip_accounting(UNIT(s));
1251 s->reset_accounting = false;
1252 }
1253
1254 unit_export_state_files(UNIT(s));
1255
1256 r = unit_setup_exec_runtime(UNIT(s));
1257 if (r < 0)
1258 return r;
1259
1260 r = unit_setup_dynamic_creds(UNIT(s));
1261 if (r < 0)
1262 return r;
1263
1264 if ((flags & EXEC_PASS_FDS) ||
1265 s->exec_context.std_input == EXEC_INPUT_SOCKET ||
1266 s->exec_context.std_output == EXEC_OUTPUT_SOCKET ||
1267 s->exec_context.std_error == EXEC_OUTPUT_SOCKET) {
1268
1269 r = service_collect_fds(s, &fds, &fd_names, &n_storage_fds, &n_socket_fds);
1270 if (r < 0)
1271 return r;
1272
1273 log_unit_debug(UNIT(s), "Passing %i fds to service", n_storage_fds + n_socket_fds);
1274 }
1275
1276 r = service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), timeout));
1277 if (r < 0)
1278 return r;
1279
1280 our_env = new0(char*, 9);
1281 if (!our_env)
1282 return -ENOMEM;
1283
1284 if (service_exec_needs_notify_socket(s, flags))
1285 if (asprintf(our_env + n_env++, "NOTIFY_SOCKET=%s", UNIT(s)->manager->notify_socket) < 0)
1286 return -ENOMEM;
1287
1288 if (s->main_pid > 0)
1289 if (asprintf(our_env + n_env++, "MAINPID="PID_FMT, s->main_pid) < 0)
1290 return -ENOMEM;
1291
1292 if (MANAGER_IS_USER(UNIT(s)->manager))
1293 if (asprintf(our_env + n_env++, "MANAGERPID="PID_FMT, getpid_cached()) < 0)
1294 return -ENOMEM;
1295
1296 if (s->socket_fd >= 0) {
1297 union sockaddr_union sa;
1298 socklen_t salen = sizeof(sa);
1299
1300 r = getpeername(s->socket_fd, &sa.sa, &salen);
1301 if (r < 0) {
1302 r = -errno;
1303
1304 /* ENOTCONN is legitimate if the endpoint disappeared on shutdown.
1305 * This connection is over, but the socket unit lives on. */
1306 if (r != -ENOTCONN || !IN_SET(s->control_command_id, SERVICE_EXEC_STOP, SERVICE_EXEC_STOP_POST))
1307 return r;
1308 }
1309
1310 if (r == 0 && IN_SET(sa.sa.sa_family, AF_INET, AF_INET6, AF_VSOCK)) {
1311 _cleanup_free_ char *addr = NULL;
1312 char *t;
1313 unsigned port;
1314
1315 r = sockaddr_pretty(&sa.sa, salen, true, false, &addr);
1316 if (r < 0)
1317 return r;
1318
1319 t = strappend("REMOTE_ADDR=", addr);
1320 if (!t)
1321 return -ENOMEM;
1322 our_env[n_env++] = t;
1323
1324 r = sockaddr_port(&sa.sa, &port);
1325 if (r < 0)
1326 return r;
1327
1328 if (asprintf(&t, "REMOTE_PORT=%u", port) < 0)
1329 return -ENOMEM;
1330 our_env[n_env++] = t;
1331 }
1332 }
1333
1334 if (flags & EXEC_SETENV_RESULT) {
1335 if (asprintf(our_env + n_env++, "SERVICE_RESULT=%s", service_result_to_string(s->result)) < 0)
1336 return -ENOMEM;
1337
1338 if (s->main_exec_status.pid > 0 &&
1339 dual_timestamp_is_set(&s->main_exec_status.exit_timestamp)) {
1340 if (asprintf(our_env + n_env++, "EXIT_CODE=%s", sigchld_code_to_string(s->main_exec_status.code)) < 0)
1341 return -ENOMEM;
1342
1343 if (s->main_exec_status.code == CLD_EXITED)
1344 r = asprintf(our_env + n_env++, "EXIT_STATUS=%i", s->main_exec_status.status);
1345 else
1346 r = asprintf(our_env + n_env++, "EXIT_STATUS=%s", signal_to_string(s->main_exec_status.status));
1347 if (r < 0)
1348 return -ENOMEM;
1349 }
1350 }
1351
1352 manager_set_exec_params(UNIT(s)->manager, &exec_params);
1353 unit_set_exec_params(UNIT(s), &exec_params);
1354
1355 final_env = strv_env_merge(2, exec_params.environment, our_env, NULL);
1356 if (!final_env)
1357 return -ENOMEM;
1358
1359 if ((flags & EXEC_IS_CONTROL) && UNIT(s)->cgroup_path) {
1360 exec_params.cgroup_path = strjoina(UNIT(s)->cgroup_path, "/control");
1361 (void) cg_create(SYSTEMD_CGROUP_CONTROLLER, exec_params.cgroup_path);
1362 }
1363
1364 /* System services should get a new keyring by default. */
1365 SET_FLAG(exec_params.flags, EXEC_NEW_KEYRING, MANAGER_IS_SYSTEM(UNIT(s)->manager));
1366
1367 /* System D-Bus needs nss-systemd disabled, so that we don't deadlock */
1368 SET_FLAG(exec_params.flags, EXEC_NSS_BYPASS_BUS,
1369 MANAGER_IS_SYSTEM(UNIT(s)->manager) && unit_has_name(UNIT(s), SPECIAL_DBUS_SERVICE));
1370
1371 exec_params.argv = c->argv;
1372 exec_params.environment = final_env;
1373 exec_params.fds = fds;
1374 exec_params.fd_names = fd_names;
1375 exec_params.n_storage_fds = n_storage_fds;
1376 exec_params.n_socket_fds = n_socket_fds;
1377 exec_params.watchdog_usec = s->watchdog_usec;
1378 exec_params.selinux_context_net = s->socket_fd_selinux_context_net;
1379 if (s->type == SERVICE_IDLE)
1380 exec_params.idle_pipe = UNIT(s)->manager->idle_pipe;
1381 exec_params.stdin_fd = s->stdin_fd;
1382 exec_params.stdout_fd = s->stdout_fd;
1383 exec_params.stderr_fd = s->stderr_fd;
1384
1385 r = exec_spawn(UNIT(s),
1386 c,
1387 &s->exec_context,
1388 &exec_params,
1389 s->exec_runtime,
1390 &s->dynamic_creds,
1391 &pid);
1392 if (r < 0)
1393 return r;
1394
1395 r = unit_watch_pid(UNIT(s), pid);
1396 if (r < 0) /* FIXME: we need to do something here */
1397 return r;
1398
1399 *_pid = pid;
1400
1401 return 0;
1402 }
1403
1404 static int main_pid_good(Service *s) {
1405 assert(s);
1406
1407 /* Returns 0 if the pid is dead, > 0 if it is good, < 0 if we don't know */
1408
1409 /* If we know the pid file, then let's just check if it is
1410 * still valid */
1411 if (s->main_pid_known) {
1412
1413 /* If it's an alien child let's check if it is still
1414 * alive ... */
1415 if (s->main_pid_alien && s->main_pid > 0)
1416 return pid_is_alive(s->main_pid);
1417
1418 /* .. otherwise assume we'll get a SIGCHLD for it,
1419 * which we really should wait for to collect exit
1420 * status and code */
1421 return s->main_pid > 0;
1422 }
1423
1424 /* We don't know the pid */
1425 return -EAGAIN;
1426 }
1427
1428 static int control_pid_good(Service *s) {
1429 assert(s);
1430
1431 /* Returns 0 if the control PID is dead, > 0 if it is good. We never actually return < 0 here, but in order to
1432 * make this function as similar as possible to main_pid_good() and cgroup_good(), we pretend that < 0 also
1433 * means: we can't figure it out. */
1434
1435 return s->control_pid > 0;
1436 }
1437
1438 static int cgroup_good(Service *s) {
1439 int r;
1440
1441 assert(s);
1442
1443 /* Returns 0 if the cgroup is empty or doesn't exist, > 0 if it is exists and is populated, < 0 if we can't
1444 * figure it out */
1445
1446 if (!UNIT(s)->cgroup_path)
1447 return 0;
1448
1449 r = cg_is_empty_recursive(SYSTEMD_CGROUP_CONTROLLER, UNIT(s)->cgroup_path);
1450 if (r < 0)
1451 return r;
1452
1453 return r == 0;
1454 }
1455
1456 static bool service_shall_restart(Service *s) {
1457 assert(s);
1458
1459 /* Don't restart after manual stops */
1460 if (s->forbid_restart)
1461 return false;
1462
1463 /* Never restart if this is configured as special exception */
1464 if (exit_status_set_test(&s->restart_prevent_status, s->main_exec_status.code, s->main_exec_status.status))
1465 return false;
1466
1467 /* Restart if the exit code/status are configured as restart triggers */
1468 if (exit_status_set_test(&s->restart_force_status, s->main_exec_status.code, s->main_exec_status.status))
1469 return true;
1470
1471 switch (s->restart) {
1472
1473 case SERVICE_RESTART_NO:
1474 return false;
1475
1476 case SERVICE_RESTART_ALWAYS:
1477 return true;
1478
1479 case SERVICE_RESTART_ON_SUCCESS:
1480 return s->result == SERVICE_SUCCESS;
1481
1482 case SERVICE_RESTART_ON_FAILURE:
1483 return s->result != SERVICE_SUCCESS;
1484
1485 case SERVICE_RESTART_ON_ABNORMAL:
1486 return !IN_SET(s->result, SERVICE_SUCCESS, SERVICE_FAILURE_EXIT_CODE);
1487
1488 case SERVICE_RESTART_ON_WATCHDOG:
1489 return s->result == SERVICE_FAILURE_WATCHDOG;
1490
1491 case SERVICE_RESTART_ON_ABORT:
1492 return IN_SET(s->result, SERVICE_FAILURE_SIGNAL, SERVICE_FAILURE_CORE_DUMP);
1493
1494 default:
1495 assert_not_reached("unknown restart setting");
1496 }
1497 }
1498
1499 static bool service_will_restart(Service *s) {
1500 assert(s);
1501
1502 if (s->state == SERVICE_AUTO_RESTART)
1503 return true;
1504 if (!UNIT(s)->job)
1505 return false;
1506 if (UNIT(s)->job->type == JOB_START)
1507 return true;
1508 return false;
1509 }
1510
1511 static void service_enter_dead(Service *s, ServiceResult f, bool allow_restart) {
1512 int r;
1513
1514 assert(s);
1515
1516 /* If there's a stop job queued before we enter the DEAD state, we shouldn't act on Restart=, in order to not
1517 * undo what has already been enqueued. */
1518 if (unit_stop_pending(UNIT(s)))
1519 allow_restart = false;
1520
1521 if (s->result == SERVICE_SUCCESS)
1522 s->result = f;
1523
1524 if (s->result != SERVICE_SUCCESS)
1525 log_unit_warning(UNIT(s), "Failed with result '%s'.", service_result_to_string(s->result));
1526
1527 service_set_state(s, s->result != SERVICE_SUCCESS ? SERVICE_FAILED : SERVICE_DEAD);
1528
1529 if (s->result != SERVICE_SUCCESS)
1530 emergency_action(UNIT(s)->manager, s->emergency_action, UNIT(s)->reboot_arg, "service failed");
1531
1532 if (allow_restart && service_shall_restart(s)) {
1533
1534 r = service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), s->restart_usec));
1535 if (r < 0)
1536 goto fail;
1537
1538 service_set_state(s, SERVICE_AUTO_RESTART);
1539 } else
1540 /* If we shan't restart, then flush out the restart counter. But don't do that immediately, so that the
1541 * user can still introspect the counter. Do so on the next start. */
1542 s->flush_n_restarts = true;
1543
1544 /* The next restart might not be a manual stop, hence reset the flag indicating manual stops */
1545 s->forbid_restart = false;
1546
1547 /* We want fresh tmpdirs in case service is started again immediately */
1548 exec_runtime_destroy(s->exec_runtime);
1549 s->exec_runtime = exec_runtime_unref(s->exec_runtime);
1550
1551 if (s->exec_context.runtime_directory_preserve_mode == EXEC_PRESERVE_NO ||
1552 (s->exec_context.runtime_directory_preserve_mode == EXEC_PRESERVE_RESTART && !service_will_restart(s)))
1553 /* Also, remove the runtime directory */
1554 exec_context_destroy_runtime_directory(&s->exec_context, UNIT(s)->manager->prefix[EXEC_DIRECTORY_RUNTIME]);
1555
1556 /* Get rid of the IPC bits of the user */
1557 unit_unref_uid_gid(UNIT(s), true);
1558
1559 /* Release the user, and destroy it if we are the only remaining owner */
1560 dynamic_creds_destroy(&s->dynamic_creds);
1561
1562 /* Try to delete the pid file. At this point it will be
1563 * out-of-date, and some software might be confused by it, so
1564 * let's remove it. */
1565 if (s->pid_file)
1566 (void) unlink(s->pid_file);
1567
1568 return;
1569
1570 fail:
1571 log_unit_warning_errno(UNIT(s), r, "Failed to run install restart timer: %m");
1572 service_enter_dead(s, SERVICE_FAILURE_RESOURCES, false);
1573 }
1574
1575 static void service_enter_stop_post(Service *s, ServiceResult f) {
1576 int r;
1577 assert(s);
1578
1579 if (s->result == SERVICE_SUCCESS)
1580 s->result = f;
1581
1582 service_unwatch_control_pid(s);
1583 unit_watch_all_pids(UNIT(s));
1584
1585 s->control_command = s->exec_command[SERVICE_EXEC_STOP_POST];
1586 if (s->control_command) {
1587 s->control_command_id = SERVICE_EXEC_STOP_POST;
1588
1589 r = service_spawn(s,
1590 s->control_command,
1591 s->timeout_stop_usec,
1592 EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_APPLY_TTY_STDIN|EXEC_IS_CONTROL|EXEC_SETENV_RESULT,
1593 &s->control_pid);
1594 if (r < 0)
1595 goto fail;
1596
1597 service_set_state(s, SERVICE_STOP_POST);
1598 } else
1599 service_enter_signal(s, SERVICE_FINAL_SIGTERM, SERVICE_SUCCESS);
1600
1601 return;
1602
1603 fail:
1604 log_unit_warning_errno(UNIT(s), r, "Failed to run 'stop-post' task: %m");
1605 service_enter_signal(s, SERVICE_FINAL_SIGTERM, SERVICE_FAILURE_RESOURCES);
1606 }
1607
1608 static int state_to_kill_operation(ServiceState state) {
1609 switch (state) {
1610
1611 case SERVICE_STOP_SIGABRT:
1612 return KILL_ABORT;
1613
1614 case SERVICE_STOP_SIGTERM:
1615 case SERVICE_FINAL_SIGTERM:
1616 return KILL_TERMINATE;
1617
1618 case SERVICE_STOP_SIGKILL:
1619 case SERVICE_FINAL_SIGKILL:
1620 return KILL_KILL;
1621
1622 default:
1623 return _KILL_OPERATION_INVALID;
1624 }
1625 }
1626
1627 static void service_enter_signal(Service *s, ServiceState state, ServiceResult f) {
1628 int r;
1629
1630 assert(s);
1631
1632 if (s->result == SERVICE_SUCCESS)
1633 s->result = f;
1634
1635 unit_watch_all_pids(UNIT(s));
1636
1637 r = unit_kill_context(
1638 UNIT(s),
1639 &s->kill_context,
1640 state_to_kill_operation(state),
1641 s->main_pid,
1642 s->control_pid,
1643 s->main_pid_alien);
1644 if (r < 0)
1645 goto fail;
1646
1647 if (r > 0) {
1648 r = service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), s->timeout_stop_usec));
1649 if (r < 0)
1650 goto fail;
1651
1652 service_set_state(s, state);
1653 } else if (IN_SET(state, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM) && s->kill_context.send_sigkill)
1654 service_enter_signal(s, SERVICE_STOP_SIGKILL, SERVICE_SUCCESS);
1655 else if (IN_SET(state, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL))
1656 service_enter_stop_post(s, SERVICE_SUCCESS);
1657 else if (state == SERVICE_FINAL_SIGTERM && s->kill_context.send_sigkill)
1658 service_enter_signal(s, SERVICE_FINAL_SIGKILL, SERVICE_SUCCESS);
1659 else
1660 service_enter_dead(s, SERVICE_SUCCESS, true);
1661
1662 return;
1663
1664 fail:
1665 log_unit_warning_errno(UNIT(s), r, "Failed to kill processes: %m");
1666
1667 if (IN_SET(state, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL))
1668 service_enter_stop_post(s, SERVICE_FAILURE_RESOURCES);
1669 else
1670 service_enter_dead(s, SERVICE_FAILURE_RESOURCES, true);
1671 }
1672
1673 static void service_enter_stop_by_notify(Service *s) {
1674 assert(s);
1675
1676 unit_watch_all_pids(UNIT(s));
1677
1678 service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), s->timeout_stop_usec));
1679
1680 /* The service told us it's stopping, so it's as if we SIGTERM'd it. */
1681 service_set_state(s, SERVICE_STOP_SIGTERM);
1682 }
1683
1684 static void service_enter_stop(Service *s, ServiceResult f) {
1685 int r;
1686
1687 assert(s);
1688
1689 if (s->result == SERVICE_SUCCESS)
1690 s->result = f;
1691
1692 service_unwatch_control_pid(s);
1693 unit_watch_all_pids(UNIT(s));
1694
1695 s->control_command = s->exec_command[SERVICE_EXEC_STOP];
1696 if (s->control_command) {
1697 s->control_command_id = SERVICE_EXEC_STOP;
1698
1699 r = service_spawn(s,
1700 s->control_command,
1701 s->timeout_stop_usec,
1702 EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_IS_CONTROL|EXEC_SETENV_RESULT,
1703 &s->control_pid);
1704 if (r < 0)
1705 goto fail;
1706
1707 service_set_state(s, SERVICE_STOP);
1708 } else
1709 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_SUCCESS);
1710
1711 return;
1712
1713 fail:
1714 log_unit_warning_errno(UNIT(s), r, "Failed to run 'stop' task: %m");
1715 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_RESOURCES);
1716 }
1717
1718 static bool service_good(Service *s) {
1719 int main_pid_ok;
1720 assert(s);
1721
1722 if (s->type == SERVICE_DBUS && !s->bus_name_good)
1723 return false;
1724
1725 main_pid_ok = main_pid_good(s);
1726 if (main_pid_ok > 0) /* It's alive */
1727 return true;
1728 if (main_pid_ok == 0) /* It's dead */
1729 return false;
1730
1731 /* OK, we don't know anything about the main PID, maybe
1732 * because there is none. Let's check the control group
1733 * instead. */
1734
1735 return cgroup_good(s) != 0;
1736 }
1737
1738 static void service_enter_running(Service *s, ServiceResult f) {
1739 assert(s);
1740
1741 if (s->result == SERVICE_SUCCESS)
1742 s->result = f;
1743
1744 service_unwatch_control_pid(s);
1745
1746 if (service_good(s)) {
1747
1748 /* If there are any queued up sd_notify()
1749 * notifications, process them now */
1750 if (s->notify_state == NOTIFY_RELOADING)
1751 service_enter_reload_by_notify(s);
1752 else if (s->notify_state == NOTIFY_STOPPING)
1753 service_enter_stop_by_notify(s);
1754 else {
1755 service_set_state(s, SERVICE_RUNNING);
1756 service_arm_timer(s, usec_add(UNIT(s)->active_enter_timestamp.monotonic, s->runtime_max_usec));
1757 }
1758
1759 } else if (f != SERVICE_SUCCESS)
1760 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
1761 else if (s->remain_after_exit)
1762 service_set_state(s, SERVICE_EXITED);
1763 else
1764 service_enter_stop(s, SERVICE_SUCCESS);
1765 }
1766
1767 static void service_enter_start_post(Service *s) {
1768 int r;
1769 assert(s);
1770
1771 service_unwatch_control_pid(s);
1772 service_reset_watchdog(s);
1773
1774 s->control_command = s->exec_command[SERVICE_EXEC_START_POST];
1775 if (s->control_command) {
1776 s->control_command_id = SERVICE_EXEC_START_POST;
1777
1778 r = service_spawn(s,
1779 s->control_command,
1780 s->timeout_start_usec,
1781 EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_IS_CONTROL,
1782 &s->control_pid);
1783 if (r < 0)
1784 goto fail;
1785
1786 service_set_state(s, SERVICE_START_POST);
1787 } else
1788 service_enter_running(s, SERVICE_SUCCESS);
1789
1790 return;
1791
1792 fail:
1793 log_unit_warning_errno(UNIT(s), r, "Failed to run 'start-post' task: %m");
1794 service_enter_stop(s, SERVICE_FAILURE_RESOURCES);
1795 }
1796
1797 static void service_kill_control_processes(Service *s) {
1798 int r;
1799
1800 assert(s);
1801
1802 if (s->control_pid > 0) {
1803 r = kill_and_sigcont(s->control_pid, SIGKILL);
1804 if (r < 0) {
1805 _cleanup_free_ char *comm = NULL;
1806
1807 (void) get_process_comm(s->control_pid, &comm);
1808
1809 log_unit_debug_errno(UNIT(s), r, "Failed to kill control process " PID_FMT " (%s), ignoring: %m",
1810 s->control_pid, strna(comm));
1811 }
1812 }
1813
1814 if (UNIT(s)->cgroup_path) {
1815 _cleanup_set_free_ Set *pid_set = NULL;
1816 char *p;
1817
1818 if (s->control_pid > 0) {
1819 r = set_make(&pid_set, PID_TO_PTR(s->control_pid), NULL);
1820 if (r < 0) {
1821 log_oom();
1822 return;
1823 }
1824 }
1825
1826 p = strjoina(UNIT(s)->cgroup_path, "/control");
1827 r = cg_kill_recursive(SYSTEMD_CGROUP_CONTROLLER, p, SIGKILL, CGROUP_SIGCONT|CGROUP_IGNORE_SELF|CGROUP_REMOVE, pid_set, NULL, NULL);
1828 if (r < 0)
1829 log_unit_debug_errno(UNIT(s), r, "Failed to send SIGKILL to processes of control group %s: %m", p);
1830 }
1831 }
1832
1833 static void service_enter_start(Service *s) {
1834 ExecCommand *c;
1835 usec_t timeout;
1836 pid_t pid;
1837 int r;
1838
1839 assert(s);
1840
1841 service_unwatch_control_pid(s);
1842 service_unwatch_main_pid(s);
1843
1844 /* We want to ensure that nobody leaks processes from
1845 * START_PRE here, so let's go on a killing spree, People
1846 * should not spawn long running processes from START_PRE. */
1847 service_kill_control_processes(s);
1848
1849 if (s->type == SERVICE_FORKING) {
1850 s->control_command_id = SERVICE_EXEC_START;
1851 c = s->control_command = s->exec_command[SERVICE_EXEC_START];
1852
1853 s->main_command = NULL;
1854 } else {
1855 s->control_command_id = _SERVICE_EXEC_COMMAND_INVALID;
1856 s->control_command = NULL;
1857
1858 c = s->main_command = s->exec_command[SERVICE_EXEC_START];
1859 }
1860
1861 if (!c) {
1862 if (s->type != SERVICE_ONESHOT) {
1863 /* There's no command line configured for the main command? Hmm, that is strange. This can only
1864 * happen if the configuration changes at runtime. In this case, let's enter a failure
1865 * state. */
1866 log_unit_error(UNIT(s), "There's no 'start' task anymore we could start: %m");
1867 r = -ENXIO;
1868 goto fail;
1869 }
1870
1871 service_enter_start_post(s);
1872 return;
1873 }
1874
1875 if (IN_SET(s->type, SERVICE_SIMPLE, SERVICE_IDLE))
1876 /* For simple + idle this is the main process. We don't apply any timeout here, but
1877 * service_enter_running() will later apply the .runtime_max_usec timeout. */
1878 timeout = USEC_INFINITY;
1879 else
1880 timeout = s->timeout_start_usec;
1881
1882 r = service_spawn(s,
1883 c,
1884 timeout,
1885 EXEC_PASS_FDS|EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_APPLY_TTY_STDIN|EXEC_SET_WATCHDOG,
1886 &pid);
1887 if (r < 0)
1888 goto fail;
1889
1890 if (IN_SET(s->type, SERVICE_SIMPLE, SERVICE_IDLE)) {
1891 /* For simple services we immediately start
1892 * the START_POST binaries. */
1893
1894 service_set_main_pid(s, pid);
1895 service_enter_start_post(s);
1896
1897 } else if (s->type == SERVICE_FORKING) {
1898
1899 /* For forking services we wait until the start
1900 * process exited. */
1901
1902 s->control_pid = pid;
1903 service_set_state(s, SERVICE_START);
1904
1905 } else if (IN_SET(s->type, SERVICE_ONESHOT, SERVICE_DBUS, SERVICE_NOTIFY)) {
1906
1907 /* For oneshot services we wait until the start
1908 * process exited, too, but it is our main process. */
1909
1910 /* For D-Bus services we know the main pid right away,
1911 * but wait for the bus name to appear on the
1912 * bus. Notify services are similar. */
1913
1914 service_set_main_pid(s, pid);
1915 service_set_state(s, SERVICE_START);
1916 } else
1917 assert_not_reached("Unknown service type");
1918
1919 return;
1920
1921 fail:
1922 log_unit_warning_errno(UNIT(s), r, "Failed to run 'start' task: %m");
1923 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_RESOURCES);
1924 }
1925
1926 static void service_enter_start_pre(Service *s) {
1927 int r;
1928
1929 assert(s);
1930
1931 service_unwatch_control_pid(s);
1932
1933 s->control_command = s->exec_command[SERVICE_EXEC_START_PRE];
1934 if (s->control_command) {
1935 /* Before we start anything, let's clear up what might
1936 * be left from previous runs. */
1937 service_kill_control_processes(s);
1938
1939 s->control_command_id = SERVICE_EXEC_START_PRE;
1940
1941 r = service_spawn(s,
1942 s->control_command,
1943 s->timeout_start_usec,
1944 EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_IS_CONTROL|EXEC_APPLY_TTY_STDIN,
1945 &s->control_pid);
1946 if (r < 0)
1947 goto fail;
1948
1949 service_set_state(s, SERVICE_START_PRE);
1950 } else
1951 service_enter_start(s);
1952
1953 return;
1954
1955 fail:
1956 log_unit_warning_errno(UNIT(s), r, "Failed to run 'start-pre' task: %m");
1957 service_enter_dead(s, SERVICE_FAILURE_RESOURCES, true);
1958 }
1959
1960 static void service_enter_restart(Service *s) {
1961 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1962 int r;
1963
1964 assert(s);
1965
1966 if (UNIT(s)->job && UNIT(s)->job->type == JOB_STOP) {
1967 /* Don't restart things if we are going down anyway */
1968 log_unit_info(UNIT(s), "Stop job pending for unit, delaying automatic restart.");
1969
1970 r = service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), s->restart_usec));
1971 if (r < 0)
1972 goto fail;
1973
1974 return;
1975 }
1976
1977 /* Any units that are bound to this service must also be
1978 * restarted. We use JOB_RESTART (instead of the more obvious
1979 * JOB_START) here so that those dependency jobs will be added
1980 * as well. */
1981 r = manager_add_job(UNIT(s)->manager, JOB_RESTART, UNIT(s), JOB_FAIL, &error, NULL);
1982 if (r < 0)
1983 goto fail;
1984
1985 /* Count the jobs we enqueue for restarting. This counter is maintained as long as the unit isn't fully
1986 * stopped, i.e. as long as it remains up or remains in auto-start states. The use can reset the counter
1987 * explicitly however via the usual "systemctl reset-failure" logic. */
1988 s->n_restarts ++;
1989 s->flush_n_restarts = false;
1990
1991 log_struct(LOG_INFO,
1992 "MESSAGE_ID=" SD_MESSAGE_UNIT_RESTART_SCHEDULED_STR,
1993 LOG_UNIT_ID(UNIT(s)),
1994 LOG_UNIT_INVOCATION_ID(UNIT(s)),
1995 LOG_UNIT_MESSAGE(UNIT(s), "Scheduled restart job, restart counter is at %u.", s->n_restarts),
1996 "N_RESTARTS=%u", s->n_restarts,
1997 NULL);
1998
1999 /* Notify clients about changed restart counter */
2000 unit_add_to_dbus_queue(UNIT(s));
2001
2002 /* Note that we stay in the SERVICE_AUTO_RESTART state here,
2003 * it will be canceled as part of the service_stop() call that
2004 * is executed as part of JOB_RESTART. */
2005
2006 return;
2007
2008 fail:
2009 log_unit_warning(UNIT(s), "Failed to schedule restart job: %s", bus_error_message(&error, -r));
2010 service_enter_dead(s, SERVICE_FAILURE_RESOURCES, false);
2011 }
2012
2013 static void service_enter_reload_by_notify(Service *s) {
2014 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2015 int r;
2016
2017 assert(s);
2018
2019 service_arm_timer(s, usec_add(now(CLOCK_MONOTONIC), s->timeout_start_usec));
2020 service_set_state(s, SERVICE_RELOAD);
2021
2022 /* service_enter_reload_by_notify is never called during a reload, thus no loops are possible. */
2023 r = manager_propagate_reload(UNIT(s)->manager, UNIT(s), JOB_FAIL, &error);
2024 if (r < 0)
2025 log_unit_warning(UNIT(s), "Failed to schedule propagation of reload: %s", bus_error_message(&error, -r));
2026 }
2027
2028 static void service_enter_reload(Service *s) {
2029 int r;
2030
2031 assert(s);
2032
2033 service_unwatch_control_pid(s);
2034 s->reload_result = SERVICE_SUCCESS;
2035
2036 s->control_command = s->exec_command[SERVICE_EXEC_RELOAD];
2037 if (s->control_command) {
2038 s->control_command_id = SERVICE_EXEC_RELOAD;
2039
2040 r = service_spawn(s,
2041 s->control_command,
2042 s->timeout_start_usec,
2043 EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_IS_CONTROL,
2044 &s->control_pid);
2045 if (r < 0)
2046 goto fail;
2047
2048 service_set_state(s, SERVICE_RELOAD);
2049 } else
2050 service_enter_running(s, SERVICE_SUCCESS);
2051
2052 return;
2053
2054 fail:
2055 log_unit_warning_errno(UNIT(s), r, "Failed to run 'reload' task: %m");
2056 s->reload_result = SERVICE_FAILURE_RESOURCES;
2057 service_enter_running(s, SERVICE_SUCCESS);
2058 }
2059
2060 static void service_run_next_control(Service *s) {
2061 usec_t timeout;
2062 int r;
2063
2064 assert(s);
2065 assert(s->control_command);
2066 assert(s->control_command->command_next);
2067
2068 assert(s->control_command_id != SERVICE_EXEC_START);
2069
2070 s->control_command = s->control_command->command_next;
2071 service_unwatch_control_pid(s);
2072
2073 if (IN_SET(s->state, SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST, SERVICE_RUNNING, SERVICE_RELOAD))
2074 timeout = s->timeout_start_usec;
2075 else
2076 timeout = s->timeout_stop_usec;
2077
2078 r = service_spawn(s,
2079 s->control_command,
2080 timeout,
2081 EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_IS_CONTROL|
2082 (IN_SET(s->control_command_id, SERVICE_EXEC_START_PRE, SERVICE_EXEC_STOP_POST) ? EXEC_APPLY_TTY_STDIN : 0)|
2083 (IN_SET(s->control_command_id, SERVICE_EXEC_STOP, SERVICE_EXEC_STOP_POST) ? EXEC_SETENV_RESULT : 0),
2084 &s->control_pid);
2085 if (r < 0)
2086 goto fail;
2087
2088 return;
2089
2090 fail:
2091 log_unit_warning_errno(UNIT(s), r, "Failed to run next control task: %m");
2092
2093 if (IN_SET(s->state, SERVICE_START_PRE, SERVICE_START_POST, SERVICE_STOP))
2094 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_RESOURCES);
2095 else if (s->state == SERVICE_STOP_POST)
2096 service_enter_dead(s, SERVICE_FAILURE_RESOURCES, true);
2097 else if (s->state == SERVICE_RELOAD) {
2098 s->reload_result = SERVICE_FAILURE_RESOURCES;
2099 service_enter_running(s, SERVICE_SUCCESS);
2100 } else
2101 service_enter_stop(s, SERVICE_FAILURE_RESOURCES);
2102 }
2103
2104 static void service_run_next_main(Service *s) {
2105 pid_t pid;
2106 int r;
2107
2108 assert(s);
2109 assert(s->main_command);
2110 assert(s->main_command->command_next);
2111 assert(s->type == SERVICE_ONESHOT);
2112
2113 s->main_command = s->main_command->command_next;
2114 service_unwatch_main_pid(s);
2115
2116 r = service_spawn(s,
2117 s->main_command,
2118 s->timeout_start_usec,
2119 EXEC_PASS_FDS|EXEC_APPLY_SANDBOXING|EXEC_APPLY_CHROOT|EXEC_APPLY_TTY_STDIN|EXEC_SET_WATCHDOG,
2120 &pid);
2121 if (r < 0)
2122 goto fail;
2123
2124 service_set_main_pid(s, pid);
2125
2126 return;
2127
2128 fail:
2129 log_unit_warning_errno(UNIT(s), r, "Failed to run next main task: %m");
2130 service_enter_stop(s, SERVICE_FAILURE_RESOURCES);
2131 }
2132
2133 static int service_start(Unit *u) {
2134 Service *s = SERVICE(u);
2135 int r;
2136
2137 assert(s);
2138
2139 /* We cannot fulfill this request right now, try again later
2140 * please! */
2141 if (IN_SET(s->state,
2142 SERVICE_STOP, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
2143 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL))
2144 return -EAGAIN;
2145
2146 /* Already on it! */
2147 if (IN_SET(s->state, SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST))
2148 return 0;
2149
2150 /* A service that will be restarted must be stopped first to
2151 * trigger BindsTo and/or OnFailure dependencies. If a user
2152 * does not want to wait for the holdoff time to elapse, the
2153 * service should be manually restarted, not started. We
2154 * simply return EAGAIN here, so that any start jobs stay
2155 * queued, and assume that the auto restart timer will
2156 * eventually trigger the restart. */
2157 if (s->state == SERVICE_AUTO_RESTART)
2158 return -EAGAIN;
2159
2160 assert(IN_SET(s->state, SERVICE_DEAD, SERVICE_FAILED));
2161
2162 /* Make sure we don't enter a busy loop of some kind. */
2163 r = unit_start_limit_test(u);
2164 if (r < 0) {
2165 service_enter_dead(s, SERVICE_FAILURE_START_LIMIT_HIT, false);
2166 return r;
2167 }
2168
2169 r = unit_acquire_invocation_id(u);
2170 if (r < 0)
2171 return r;
2172
2173 s->result = SERVICE_SUCCESS;
2174 s->reload_result = SERVICE_SUCCESS;
2175 s->main_pid_known = false;
2176 s->main_pid_alien = false;
2177 s->forbid_restart = false;
2178 s->reset_accounting = true;
2179
2180 s->status_text = mfree(s->status_text);
2181 s->status_errno = 0;
2182
2183 s->notify_state = NOTIFY_UNKNOWN;
2184
2185 s->watchdog_override_enable = false;
2186 s->watchdog_override_usec = 0;
2187
2188 /* This is not an automatic restart? Flush the restart counter then */
2189 if (s->flush_n_restarts) {
2190 s->n_restarts = 0;
2191 s->flush_n_restarts = false;
2192 }
2193
2194 service_enter_start_pre(s);
2195 return 1;
2196 }
2197
2198 static int service_stop(Unit *u) {
2199 Service *s = SERVICE(u);
2200
2201 assert(s);
2202
2203 /* Don't create restart jobs from manual stops. */
2204 s->forbid_restart = true;
2205
2206 /* Already on it */
2207 if (IN_SET(s->state,
2208 SERVICE_STOP, SERVICE_STOP_SIGABRT, SERVICE_STOP_SIGTERM, SERVICE_STOP_SIGKILL, SERVICE_STOP_POST,
2209 SERVICE_FINAL_SIGTERM, SERVICE_FINAL_SIGKILL))
2210 return 0;
2211
2212 /* A restart will be scheduled or is in progress. */
2213 if (s->state == SERVICE_AUTO_RESTART) {
2214 service_set_state(s, SERVICE_DEAD);
2215 return 0;
2216 }
2217
2218 /* If there's already something running we go directly into
2219 * kill mode. */
2220 if (IN_SET(s->state, SERVICE_START_PRE, SERVICE_START, SERVICE_START_POST, SERVICE_RELOAD)) {
2221 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_SUCCESS);
2222 return 0;
2223 }
2224
2225 assert(IN_SET(s->state, SERVICE_RUNNING, SERVICE_EXITED));
2226
2227 service_enter_stop(s, SERVICE_SUCCESS);
2228 return 1;
2229 }
2230
2231 static int service_reload(Unit *u) {
2232 Service *s = SERVICE(u);
2233
2234 assert(s);
2235
2236 assert(IN_SET(s->state, SERVICE_RUNNING, SERVICE_EXITED));
2237
2238 service_enter_reload(s);
2239 return 1;
2240 }
2241
2242 _pure_ static bool service_can_reload(Unit *u) {
2243 Service *s = SERVICE(u);
2244
2245 assert(s);
2246
2247 return !!s->exec_command[SERVICE_EXEC_RELOAD];
2248 }
2249
2250 static unsigned service_exec_command_index(Unit *u, ServiceExecCommand id, ExecCommand *current) {
2251 Service *s = SERVICE(u);
2252 unsigned idx = 0;
2253 ExecCommand *first, *c;
2254
2255 assert(s);
2256
2257 first = s->exec_command[id];
2258
2259 /* Figure out where we are in the list by walking back to the beginning */
2260 for (c = current; c != first; c = c->command_prev)
2261 idx++;
2262
2263 return idx;
2264 }
2265
2266 static int service_serialize_exec_command(Unit *u, FILE *f, ExecCommand *command) {
2267 Service *s = SERVICE(u);
2268 ServiceExecCommand id;
2269 unsigned idx;
2270 const char *type;
2271 char **arg;
2272 _cleanup_free_ char *args = NULL, *p = NULL;
2273 size_t allocated = 0, length = 0;
2274
2275 assert(s);
2276 assert(f);
2277
2278 if (!command)
2279 return 0;
2280
2281 if (command == s->control_command) {
2282 type = "control";
2283 id = s->control_command_id;
2284 } else {
2285 type = "main";
2286 id = SERVICE_EXEC_START;
2287 }
2288
2289 idx = service_exec_command_index(u, id, command);
2290
2291 STRV_FOREACH(arg, command->argv) {
2292 size_t n;
2293 _cleanup_free_ char *e = NULL;
2294
2295 e = xescape(*arg, WHITESPACE);
2296 if (!e)
2297 return -ENOMEM;
2298
2299 n = strlen(e);
2300 if (!GREEDY_REALLOC(args, allocated, length + 1 + n + 1))
2301 return -ENOMEM;
2302
2303 if (length > 0)
2304 args[length++] = ' ';
2305
2306 memcpy(args + length, e, n);
2307 length += n;
2308 }
2309
2310 if (!GREEDY_REALLOC(args, allocated, length + 1))
2311 return -ENOMEM;
2312 args[length++] = 0;
2313
2314 p = xescape(command->path, WHITESPACE);
2315 if (!p)
2316 return -ENOMEM;
2317
2318 fprintf(f, "%s-command=%s %u %s %s\n", type, service_exec_command_to_string(id), idx, p, args);
2319
2320 return 0;
2321 }
2322
2323 static int service_serialize(Unit *u, FILE *f, FDSet *fds) {
2324 Service *s = SERVICE(u);
2325 ServiceFDStore *fs;
2326 int r;
2327
2328 assert(u);
2329 assert(f);
2330 assert(fds);
2331
2332 unit_serialize_item(u, f, "state", service_state_to_string(s->state));
2333 unit_serialize_item(u, f, "result", service_result_to_string(s->result));
2334 unit_serialize_item(u, f, "reload-result", service_result_to_string(s->reload_result));
2335
2336 if (s->control_pid > 0)
2337 unit_serialize_item_format(u, f, "control-pid", PID_FMT, s->control_pid);
2338
2339 if (s->main_pid_known && s->main_pid > 0)
2340 unit_serialize_item_format(u, f, "main-pid", PID_FMT, s->main_pid);
2341
2342 unit_serialize_item(u, f, "main-pid-known", yes_no(s->main_pid_known));
2343 unit_serialize_item(u, f, "bus-name-good", yes_no(s->bus_name_good));
2344 unit_serialize_item(u, f, "bus-name-owner", s->bus_name_owner);
2345
2346 unit_serialize_item_format(u, f, "n-restarts", "%u", s->n_restarts);
2347 unit_serialize_item(u, f, "flush-n-restarts", yes_no(s->flush_n_restarts));
2348
2349 r = unit_serialize_item_escaped(u, f, "status-text", s->status_text);
2350 if (r < 0)
2351 return r;
2352
2353 service_serialize_exec_command(u, f, s->control_command);
2354 service_serialize_exec_command(u, f, s->main_command);
2355
2356 r = unit_serialize_item_fd(u, f, fds, "stdin-fd", s->stdin_fd);
2357 if (r < 0)
2358 return r;
2359 r = unit_serialize_item_fd(u, f, fds, "stdout-fd", s->stdout_fd);
2360 if (r < 0)
2361 return r;
2362 r = unit_serialize_item_fd(u, f, fds, "stderr-fd", s->stderr_fd);
2363 if (r < 0)
2364 return r;
2365
2366 if (UNIT_ISSET(s->accept_socket)) {
2367 r = unit_serialize_item(u, f, "accept-socket", UNIT_DEREF(s->accept_socket)->id);
2368 if (r < 0)
2369 return r;
2370 }
2371
2372 r = unit_serialize_item_fd(u, f, fds, "socket-fd", s->socket_fd);
2373 if (r < 0)
2374 return r;
2375
2376 LIST_FOREACH(fd_store, fs, s->fd_store) {
2377 _cleanup_free_ char *c = NULL;
2378 int copy;
2379
2380 copy = fdset_put_dup(fds, fs->fd);
2381 if (copy < 0)
2382 return copy;
2383
2384 c = cescape(fs->fdname);
2385
2386 unit_serialize_item_format(u, f, "fd-store-fd", "%i %s", copy, strempty(c));
2387 }
2388
2389 if (s->main_exec_status.pid > 0) {
2390 unit_serialize_item_format(u, f, "main-exec-status-pid", PID_FMT, s->main_exec_status.pid);
2391 dual_timestamp_serialize(f, "main-exec-status-start", &s->main_exec_status.start_timestamp);
2392 dual_timestamp_serialize(f, "main-exec-status-exit", &s->main_exec_status.exit_timestamp);
2393
2394 if (dual_timestamp_is_set(&s->main_exec_status.exit_timestamp)) {
2395 unit_serialize_item_format(u, f, "main-exec-status-code", "%i", s->main_exec_status.code);
2396 unit_serialize_item_format(u, f, "main-exec-status-status", "%i", s->main_exec_status.status);
2397 }
2398 }
2399
2400 dual_timestamp_serialize(f, "watchdog-timestamp", &s->watchdog_timestamp);
2401
2402 unit_serialize_item(u, f, "forbid-restart", yes_no(s->forbid_restart));
2403
2404 if (s->watchdog_override_enable)
2405 unit_serialize_item_format(u, f, "watchdog-override-usec", USEC_FMT, s->watchdog_override_usec);
2406
2407 return 0;
2408 }
2409
2410 static int service_deserialize_exec_command(Unit *u, const char *key, const char *value) {
2411 Service *s = SERVICE(u);
2412 int r;
2413 unsigned idx = 0, i;
2414 bool control, found = false;
2415 ServiceExecCommand id = _SERVICE_EXEC_COMMAND_INVALID;
2416 ExecCommand *command = NULL;
2417 _cleanup_free_ char *path = NULL;
2418 _cleanup_strv_free_ char **argv = NULL;
2419
2420 enum ExecCommandState {
2421 STATE_EXEC_COMMAND_TYPE,
2422 STATE_EXEC_COMMAND_INDEX,
2423 STATE_EXEC_COMMAND_PATH,
2424 STATE_EXEC_COMMAND_ARGS,
2425 _STATE_EXEC_COMMAND_MAX,
2426 _STATE_EXEC_COMMAND_INVALID = -1,
2427 } state;
2428
2429 assert(s);
2430 assert(key);
2431 assert(value);
2432
2433 control = streq(key, "control-command");
2434
2435 state = STATE_EXEC_COMMAND_TYPE;
2436
2437 for (;;) {
2438 _cleanup_free_ char *arg = NULL;
2439
2440 r = extract_first_word(&value, &arg, NULL, EXTRACT_CUNESCAPE);
2441 if (r == 0)
2442 break;
2443 else if (r < 0)
2444 return r;
2445
2446 switch (state) {
2447 case STATE_EXEC_COMMAND_TYPE:
2448 id = service_exec_command_from_string(arg);
2449 if (id < 0)
2450 return -EINVAL;
2451
2452 state = STATE_EXEC_COMMAND_INDEX;
2453 break;
2454 case STATE_EXEC_COMMAND_INDEX:
2455 r = safe_atou(arg, &idx);
2456 if (r < 0)
2457 return -EINVAL;
2458
2459 state = STATE_EXEC_COMMAND_PATH;
2460 break;
2461 case STATE_EXEC_COMMAND_PATH:
2462 path = arg;
2463 arg = NULL;
2464 state = STATE_EXEC_COMMAND_ARGS;
2465
2466 if (!path_is_absolute(path))
2467 return -EINVAL;
2468 break;
2469 case STATE_EXEC_COMMAND_ARGS:
2470 r = strv_extend(&argv, arg);
2471 if (r < 0)
2472 return -ENOMEM;
2473 break;
2474 default:
2475 assert_not_reached("Unknown error at deserialization of exec command");
2476 break;
2477 }
2478 }
2479
2480 if (state != STATE_EXEC_COMMAND_ARGS)
2481 return -EINVAL;
2482
2483 /* Let's check whether exec command on given offset matches data that we just deserialized */
2484 for (command = s->exec_command[id], i = 0; command; command = command->command_next, i++) {
2485 if (i != idx)
2486 continue;
2487
2488 found = strv_equal(argv, command->argv) && streq(command->path, path);
2489 break;
2490 }
2491
2492 if (!found) {
2493 /* Command at the index we serialized is different, let's look for command that exactly
2494 * matches but is on different index. If there is no such command we will not resume execution. */
2495 for (command = s->exec_command[id]; command; command = command->command_next)
2496 if (strv_equal(command->argv, argv) && streq(command->path, path))
2497 break;
2498 }
2499
2500 if (command && control)
2501 s->control_command = command;
2502 else if (command)
2503 s->main_command = command;
2504 else
2505 log_unit_warning(u, "Current command vanished from the unit file, execution of the command list won't be resumed.");
2506
2507 return 0;
2508 }
2509
2510 static int service_deserialize_item(Unit *u, const char *key, const char *value, FDSet *fds) {
2511 Service *s = SERVICE(u);
2512 int r;
2513
2514 assert(u);
2515 assert(key);
2516 assert(value);
2517 assert(fds);
2518
2519 if (streq(key, "state")) {
2520 ServiceState state;
2521
2522 state = service_state_from_string(value);
2523 if (state < 0)
2524 log_unit_debug(u, "Failed to parse state value: %s", value);
2525 else
2526 s->deserialized_state = state;
2527 } else if (streq(key, "result")) {
2528 ServiceResult f;
2529
2530 f = service_result_from_string(value);
2531 if (f < 0)
2532 log_unit_debug(u, "Failed to parse result value: %s", value);
2533 else if (f != SERVICE_SUCCESS)
2534 s->result = f;
2535
2536 } else if (streq(key, "reload-result")) {
2537 ServiceResult f;
2538
2539 f = service_result_from_string(value);
2540 if (f < 0)
2541 log_unit_debug(u, "Failed to parse reload result value: %s", value);
2542 else if (f != SERVICE_SUCCESS)
2543 s->reload_result = f;
2544
2545 } else if (streq(key, "control-pid")) {
2546 pid_t pid;
2547
2548 if (parse_pid(value, &pid) < 0)
2549 log_unit_debug(u, "Failed to parse control-pid value: %s", value);
2550 else
2551 s->control_pid = pid;
2552 } else if (streq(key, "main-pid")) {
2553 pid_t pid;
2554
2555 if (parse_pid(value, &pid) < 0)
2556 log_unit_debug(u, "Failed to parse main-pid value: %s", value);
2557 else {
2558 service_set_main_pid(s, pid);
2559 unit_watch_pid(UNIT(s), pid);
2560 }
2561 } else if (streq(key, "main-pid-known")) {
2562 int b;
2563
2564 b = parse_boolean(value);
2565 if (b < 0)
2566 log_unit_debug(u, "Failed to parse main-pid-known value: %s", value);
2567 else
2568 s->main_pid_known = b;
2569 } else if (streq(key, "bus-name-good")) {
2570 int b;
2571
2572 b = parse_boolean(value);
2573 if (b < 0)
2574 log_unit_debug(u, "Failed to parse bus-name-good value: %s", value);
2575 else
2576 s->bus_name_good = b;
2577 } else if (streq(key, "bus-name-owner")) {
2578 r = free_and_strdup(&s->bus_name_owner, value);
2579 if (r < 0)
2580 log_unit_error_errno(u, r, "Unable to deserialize current bus owner %s: %m", value);
2581 } else if (streq(key, "status-text")) {
2582 char *t;
2583
2584 r = cunescape(value, 0, &t);
2585 if (r < 0)
2586 log_unit_debug_errno(u, r, "Failed to unescape status text: %s", value);
2587 else {
2588 free(s->status_text);
2589 s->status_text = t;
2590 }
2591
2592 } else if (streq(key, "accept-socket")) {
2593 Unit *socket;
2594
2595 r = manager_load_unit(u->manager, value, NULL, NULL, &socket);
2596 if (r < 0)
2597 log_unit_debug_errno(u, r, "Failed to load accept-socket unit: %s", value);
2598 else {
2599 unit_ref_set(&s->accept_socket, socket);
2600 SOCKET(socket)->n_connections++;
2601 }
2602
2603 } else if (streq(key, "socket-fd")) {
2604 int fd;
2605
2606 if (safe_atoi(value, &fd) < 0 || fd < 0 || !fdset_contains(fds, fd))
2607 log_unit_debug(u, "Failed to parse socket-fd value: %s", value);
2608 else {
2609 asynchronous_close(s->socket_fd);
2610 s->socket_fd = fdset_remove(fds, fd);
2611 }
2612 } else if (streq(key, "fd-store-fd")) {
2613 const char *fdv;
2614 size_t pf;
2615 int fd;
2616
2617 pf = strcspn(value, WHITESPACE);
2618 fdv = strndupa(value, pf);
2619
2620 if (safe_atoi(fdv, &fd) < 0 || fd < 0 || !fdset_contains(fds, fd))
2621 log_unit_debug(u, "Failed to parse fd-store-fd value: %s", value);
2622 else {
2623 _cleanup_free_ char *t = NULL;
2624 const char *fdn;
2625
2626 fdn = value + pf;
2627 fdn += strspn(fdn, WHITESPACE);
2628 (void) cunescape(fdn, 0, &t);
2629
2630 r = service_add_fd_store(s, fd, t);
2631 if (r < 0)
2632 log_unit_error_errno(u, r, "Failed to add fd to store: %m");
2633 else
2634 fdset_remove(fds, fd);
2635 }
2636
2637 } else if (streq(key, "main-exec-status-pid")) {
2638 pid_t pid;
2639
2640 if (parse_pid(value, &pid) < 0)
2641 log_unit_debug(u, "Failed to parse main-exec-status-pid value: %s", value);
2642 else
2643 s->main_exec_status.pid = pid;
2644 } else if (streq(key, "main-exec-status-code")) {
2645 int i;
2646
2647 if (safe_atoi(value, &i) < 0)
2648 log_unit_debug(u, "Failed to parse main-exec-status-code value: %s", value);
2649 else
2650 s->main_exec_status.code = i;
2651 } else if (streq(key, "main-exec-status-status")) {
2652 int i;
2653
2654 if (safe_atoi(value, &i) < 0)
2655 log_unit_debug(u, "Failed to parse main-exec-status-status value: %s", value);
2656 else
2657 s->main_exec_status.status = i;
2658 } else if (streq(key, "main-exec-status-start"))
2659 dual_timestamp_deserialize(value, &s->main_exec_status.start_timestamp);
2660 else if (streq(key, "main-exec-status-exit"))
2661 dual_timestamp_deserialize(value, &s->main_exec_status.exit_timestamp);
2662 else if (streq(key, "watchdog-timestamp"))
2663 dual_timestamp_deserialize(value, &s->watchdog_timestamp);
2664 else if (streq(key, "forbid-restart")) {
2665 int b;
2666
2667 b = parse_boolean(value);
2668 if (b < 0)
2669 log_unit_debug(u, "Failed to parse forbid-restart value: %s", value);
2670 else
2671 s->forbid_restart = b;
2672 } else if (streq(key, "stdin-fd")) {
2673 int fd;
2674
2675 if (safe_atoi(value, &fd) < 0 || fd < 0 || !fdset_contains(fds, fd))
2676 log_unit_debug(u, "Failed to parse stdin-fd value: %s", value);
2677 else {
2678 asynchronous_close(s->stdin_fd);
2679 s->stdin_fd = fdset_remove(fds, fd);
2680 s->exec_context.stdio_as_fds = true;
2681 }
2682 } else if (streq(key, "stdout-fd")) {
2683 int fd;
2684
2685 if (safe_atoi(value, &fd) < 0 || fd < 0 || !fdset_contains(fds, fd))
2686 log_unit_debug(u, "Failed to parse stdout-fd value: %s", value);
2687 else {
2688 asynchronous_close(s->stdout_fd);
2689 s->stdout_fd = fdset_remove(fds, fd);
2690 s->exec_context.stdio_as_fds = true;
2691 }
2692 } else if (streq(key, "stderr-fd")) {
2693 int fd;
2694
2695 if (safe_atoi(value, &fd) < 0 || fd < 0 || !fdset_contains(fds, fd))
2696 log_unit_debug(u, "Failed to parse stderr-fd value: %s", value);
2697 else {
2698 asynchronous_close(s->stderr_fd);
2699 s->stderr_fd = fdset_remove(fds, fd);
2700 s->exec_context.stdio_as_fds = true;
2701 }
2702 } else if (streq(key, "watchdog-override-usec")) {
2703 usec_t watchdog_override_usec;
2704 if (timestamp_deserialize(value, &watchdog_override_usec) < 0)
2705 log_unit_debug(u, "Failed to parse watchdog_override_usec value: %s", value);
2706 else {
2707 s->watchdog_override_enable = true;
2708 s->watchdog_override_usec = watchdog_override_usec;
2709 }
2710 } else if (STR_IN_SET(key, "main-command", "control-command")) {
2711 r = service_deserialize_exec_command(u, key, value);
2712 if (r < 0)
2713 log_unit_debug_errno(u, r, "Failed to parse serialized command \"%s\": %m", value);
2714
2715 } else if (streq(key, "n-restarts")) {
2716 r = safe_atou(value, &s->n_restarts);
2717 if (r < 0)
2718 log_unit_debug_errno(u, r, "Failed to parse serialized restart counter '%s': %m", value);
2719
2720 } else if (streq(key, "flush-n-restarts")) {
2721 r = parse_boolean(value);
2722 if (r < 0)
2723 log_unit_debug_errno(u, r, "Failed to parse serialized flush restart counter setting '%s': %m", value);
2724 else
2725 s->flush_n_restarts = r;
2726 } else
2727 log_unit_debug(u, "Unknown serialization key: %s", key);
2728
2729 return 0;
2730 }
2731
2732 _pure_ static UnitActiveState service_active_state(Unit *u) {
2733 const UnitActiveState *table;
2734
2735 assert(u);
2736
2737 table = SERVICE(u)->type == SERVICE_IDLE ? state_translation_table_idle : state_translation_table;
2738
2739 return table[SERVICE(u)->state];
2740 }
2741
2742 static const char *service_sub_state_to_string(Unit *u) {
2743 assert(u);
2744
2745 return service_state_to_string(SERVICE(u)->state);
2746 }
2747
2748 static bool service_check_gc(Unit *u) {
2749 Service *s = SERVICE(u);
2750
2751 assert(s);
2752
2753 /* Never clean up services that still have a process around,
2754 * even if the service is formally dead. */
2755 if (cgroup_good(s) > 0 ||
2756 main_pid_good(s) > 0 ||
2757 control_pid_good(s) > 0)
2758 return true;
2759
2760 return false;
2761 }
2762
2763 static int service_retry_pid_file(Service *s) {
2764 int r;
2765
2766 assert(s->pid_file);
2767 assert(IN_SET(s->state, SERVICE_START, SERVICE_START_POST));
2768
2769 r = service_load_pid_file(s, false);
2770 if (r < 0)
2771 return r;
2772
2773 service_unwatch_pid_file(s);
2774
2775 service_enter_running(s, SERVICE_SUCCESS);
2776 return 0;
2777 }
2778
2779 static int service_watch_pid_file(Service *s) {
2780 int r;
2781
2782 log_unit_debug(UNIT(s), "Setting watch for PID file %s", s->pid_file_pathspec->path);
2783
2784 r = path_spec_watch(s->pid_file_pathspec, service_dispatch_io);
2785 if (r < 0)
2786 goto fail;
2787
2788 /* the pidfile might have appeared just before we set the watch */
2789 log_unit_debug(UNIT(s), "Trying to read PID file %s in case it changed", s->pid_file_pathspec->path);
2790 service_retry_pid_file(s);
2791
2792 return 0;
2793 fail:
2794 log_unit_error_errno(UNIT(s), r, "Failed to set a watch for PID file %s: %m", s->pid_file_pathspec->path);
2795 service_unwatch_pid_file(s);
2796 return r;
2797 }
2798
2799 static int service_demand_pid_file(Service *s) {
2800 PathSpec *ps;
2801
2802 assert(s->pid_file);
2803 assert(!s->pid_file_pathspec);
2804
2805 ps = new0(PathSpec, 1);
2806 if (!ps)
2807 return -ENOMEM;
2808
2809 ps->unit = UNIT(s);
2810 ps->path = strdup(s->pid_file);
2811 if (!ps->path) {
2812 free(ps);
2813 return -ENOMEM;
2814 }
2815
2816 path_kill_slashes(ps->path);
2817
2818 /* PATH_CHANGED would not be enough. There are daemons (sendmail) that
2819 * keep their PID file open all the time. */
2820 ps->type = PATH_MODIFIED;
2821 ps->inotify_fd = -1;
2822
2823 s->pid_file_pathspec = ps;
2824
2825 return service_watch_pid_file(s);
2826 }
2827
2828 static int service_dispatch_io(sd_event_source *source, int fd, uint32_t events, void *userdata) {
2829 PathSpec *p = userdata;
2830 Service *s;
2831
2832 assert(p);
2833
2834 s = SERVICE(p->unit);
2835
2836 assert(s);
2837 assert(fd >= 0);
2838 assert(IN_SET(s->state, SERVICE_START, SERVICE_START_POST));
2839 assert(s->pid_file_pathspec);
2840 assert(path_spec_owns_inotify_fd(s->pid_file_pathspec, fd));
2841
2842 log_unit_debug(UNIT(s), "inotify event");
2843
2844 if (path_spec_fd_event(p, events) < 0)
2845 goto fail;
2846
2847 if (service_retry_pid_file(s) == 0)
2848 return 0;
2849
2850 if (service_watch_pid_file(s) < 0)
2851 goto fail;
2852
2853 return 0;
2854
2855 fail:
2856 service_unwatch_pid_file(s);
2857 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_RESOURCES);
2858 return 0;
2859 }
2860
2861 static void service_notify_cgroup_empty_event(Unit *u) {
2862 Service *s = SERVICE(u);
2863
2864 assert(u);
2865
2866 log_unit_debug(u, "cgroup is empty");
2867
2868 switch (s->state) {
2869
2870 /* Waiting for SIGCHLD is usually more interesting,
2871 * because it includes return codes/signals. Which is
2872 * why we ignore the cgroup events for most cases,
2873 * except when we don't know pid which to expect the
2874 * SIGCHLD for. */
2875
2876 case SERVICE_START:
2877 if (s->type == SERVICE_NOTIFY &&
2878 main_pid_good(s) == 0 &&
2879 control_pid_good(s) == 0) {
2880 /* No chance of getting a ready notification anymore */
2881 service_enter_stop_post(s, SERVICE_FAILURE_PROTOCOL);
2882 break;
2883 }
2884
2885 /* Fall through */
2886
2887 case SERVICE_START_POST:
2888 if (s->pid_file_pathspec &&
2889 main_pid_good(s) == 0 &&
2890 control_pid_good(s) == 0) {
2891
2892 /* Give up hoping for the daemon to write its PID file */
2893 log_unit_warning(u, "Daemon never wrote its PID file. Failing.");
2894
2895 service_unwatch_pid_file(s);
2896 if (s->state == SERVICE_START)
2897 service_enter_stop_post(s, SERVICE_FAILURE_PROTOCOL);
2898 else
2899 service_enter_stop(s, SERVICE_FAILURE_PROTOCOL);
2900 }
2901 break;
2902
2903 case SERVICE_RUNNING:
2904 /* service_enter_running() will figure out what to do */
2905 service_enter_running(s, SERVICE_SUCCESS);
2906 break;
2907
2908 case SERVICE_STOP_SIGABRT:
2909 case SERVICE_STOP_SIGTERM:
2910 case SERVICE_STOP_SIGKILL:
2911
2912 if (main_pid_good(s) <= 0 && control_pid_good(s) <= 0)
2913 service_enter_stop_post(s, SERVICE_SUCCESS);
2914
2915 break;
2916
2917 case SERVICE_STOP_POST:
2918 case SERVICE_FINAL_SIGTERM:
2919 case SERVICE_FINAL_SIGKILL:
2920 if (main_pid_good(s) <= 0 && control_pid_good(s) <= 0)
2921 service_enter_dead(s, SERVICE_SUCCESS, true);
2922
2923 break;
2924
2925 default:
2926 ;
2927 }
2928 }
2929
2930 static void service_sigchld_event(Unit *u, pid_t pid, int code, int status) {
2931 Service *s = SERVICE(u);
2932 ServiceResult f;
2933
2934 assert(s);
2935 assert(pid >= 0);
2936
2937 if (is_clean_exit(code, status, s->type == SERVICE_ONESHOT ? EXIT_CLEAN_COMMAND : EXIT_CLEAN_DAEMON, &s->success_status))
2938 f = SERVICE_SUCCESS;
2939 else if (code == CLD_EXITED)
2940 f = SERVICE_FAILURE_EXIT_CODE;
2941 else if (code == CLD_KILLED)
2942 f = SERVICE_FAILURE_SIGNAL;
2943 else if (code == CLD_DUMPED)
2944 f = SERVICE_FAILURE_CORE_DUMP;
2945 else
2946 assert_not_reached("Unknown code");
2947
2948 if (s->main_pid == pid) {
2949 /* Forking services may occasionally move to a new PID.
2950 * As long as they update the PID file before exiting the old
2951 * PID, they're fine. */
2952 if (service_load_pid_file(s, false) == 0)
2953 return;
2954
2955 s->main_pid = 0;
2956 exec_status_exit(&s->main_exec_status, &s->exec_context, pid, code, status);
2957
2958 if (s->main_command) {
2959 /* If this is not a forking service than the
2960 * main process got started and hence we copy
2961 * the exit status so that it is recorded both
2962 * as main and as control process exit
2963 * status */
2964
2965 s->main_command->exec_status = s->main_exec_status;
2966
2967 if (s->main_command->flags & EXEC_COMMAND_IGNORE_FAILURE)
2968 f = SERVICE_SUCCESS;
2969 } else if (s->exec_command[SERVICE_EXEC_START]) {
2970
2971 /* If this is a forked process, then we should
2972 * ignore the return value if this was
2973 * configured for the starter process */
2974
2975 if (s->exec_command[SERVICE_EXEC_START]->flags & EXEC_COMMAND_IGNORE_FAILURE)
2976 f = SERVICE_SUCCESS;
2977 }
2978
2979 /* When this is a successful exit, let's log about the exit code on DEBUG level. If this is a failure
2980 * and the process exited on its own via exit(), then let's make this a NOTICE, under the assumption
2981 * that the service already logged the reason at a higher log level on its own. However, if the service
2982 * died due to a signal, then it most likely didn't say anything about any reason, hence let's raise
2983 * our log level to WARNING then. */
2984
2985 log_struct(f == SERVICE_SUCCESS ? LOG_DEBUG :
2986 (code == CLD_EXITED ? LOG_NOTICE : LOG_WARNING),
2987 LOG_UNIT_MESSAGE(u, "Main process exited, code=%s, status=%i/%s",
2988 sigchld_code_to_string(code), status,
2989 strna(code == CLD_EXITED
2990 ? exit_status_to_string(status, EXIT_STATUS_FULL)
2991 : signal_to_string(status))),
2992 "EXIT_CODE=%s", sigchld_code_to_string(code),
2993 "EXIT_STATUS=%i", status,
2994 LOG_UNIT_ID(u),
2995 LOG_UNIT_INVOCATION_ID(u),
2996 NULL);
2997
2998 if (s->result == SERVICE_SUCCESS)
2999 s->result = f;
3000
3001 if (s->main_command &&
3002 s->main_command->command_next &&
3003 s->type == SERVICE_ONESHOT &&
3004 f == SERVICE_SUCCESS) {
3005
3006 /* There is another command to *
3007 * execute, so let's do that. */
3008
3009 log_unit_debug(u, "Running next main command for state %s.", service_state_to_string(s->state));
3010 service_run_next_main(s);
3011
3012 } else {
3013
3014 /* The service exited, so the service is officially
3015 * gone. */
3016 s->main_command = NULL;
3017
3018 switch (s->state) {
3019
3020 case SERVICE_START_POST:
3021 case SERVICE_RELOAD:
3022 case SERVICE_STOP:
3023 /* Need to wait until the operation is
3024 * done */
3025 break;
3026
3027 case SERVICE_START:
3028 if (s->type == SERVICE_ONESHOT) {
3029 /* This was our main goal, so let's go on */
3030 if (f == SERVICE_SUCCESS)
3031 service_enter_start_post(s);
3032 else
3033 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3034 break;
3035 } else if (s->type == SERVICE_NOTIFY) {
3036 /* Only enter running through a notification, so that the
3037 * SERVICE_START state signifies that no ready notification
3038 * has been received */
3039 if (f != SERVICE_SUCCESS)
3040 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3041 else if (!s->remain_after_exit || s->notify_access == NOTIFY_MAIN)
3042 /* The service has never been and will never be active */
3043 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_PROTOCOL);
3044 break;
3045 }
3046
3047 /* Fall through */
3048
3049 case SERVICE_RUNNING:
3050 service_enter_running(s, f);
3051 break;
3052
3053 case SERVICE_STOP_SIGABRT:
3054 case SERVICE_STOP_SIGTERM:
3055 case SERVICE_STOP_SIGKILL:
3056
3057 if (control_pid_good(s) <= 0)
3058 service_enter_stop_post(s, f);
3059
3060 /* If there is still a control process, wait for that first */
3061 break;
3062
3063 case SERVICE_STOP_POST:
3064 case SERVICE_FINAL_SIGTERM:
3065 case SERVICE_FINAL_SIGKILL:
3066
3067 if (control_pid_good(s) <= 0)
3068 service_enter_dead(s, f, true);
3069 break;
3070
3071 default:
3072 assert_not_reached("Uh, main process died at wrong time.");
3073 }
3074 }
3075
3076 } else if (s->control_pid == pid) {
3077 s->control_pid = 0;
3078
3079 if (s->control_command) {
3080 exec_status_exit(&s->control_command->exec_status, &s->exec_context, pid, code, status);
3081
3082 if (s->control_command->flags & EXEC_COMMAND_IGNORE_FAILURE)
3083 f = SERVICE_SUCCESS;
3084 }
3085
3086 log_unit_full(u, f == SERVICE_SUCCESS ? LOG_DEBUG : LOG_NOTICE, 0,
3087 "Control process exited, code=%s status=%i",
3088 sigchld_code_to_string(code), status);
3089
3090 if (s->result == SERVICE_SUCCESS)
3091 s->result = f;
3092
3093 /* Immediately get rid of the cgroup, so that the
3094 * kernel doesn't delay the cgroup empty messages for
3095 * the service cgroup any longer than necessary */
3096 service_kill_control_processes(s);
3097
3098 if (s->control_command &&
3099 s->control_command->command_next &&
3100 f == SERVICE_SUCCESS) {
3101
3102 /* There is another command to *
3103 * execute, so let's do that. */
3104
3105 log_unit_debug(u, "Running next control command for state %s.", service_state_to_string(s->state));
3106 service_run_next_control(s);
3107
3108 } else {
3109 /* No further commands for this step, so let's
3110 * figure out what to do next */
3111
3112 s->control_command = NULL;
3113 s->control_command_id = _SERVICE_EXEC_COMMAND_INVALID;
3114
3115 log_unit_debug(u, "Got final SIGCHLD for state %s.", service_state_to_string(s->state));
3116
3117 switch (s->state) {
3118
3119 case SERVICE_START_PRE:
3120 if (f == SERVICE_SUCCESS)
3121 service_enter_start(s);
3122 else
3123 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3124 break;
3125
3126 case SERVICE_START:
3127 if (s->type != SERVICE_FORKING)
3128 /* Maybe spurious event due to a reload that changed the type? */
3129 break;
3130
3131 if (f != SERVICE_SUCCESS) {
3132 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3133 break;
3134 }
3135
3136 if (s->pid_file) {
3137 bool has_start_post;
3138 int r;
3139
3140 /* Let's try to load the pid file here if we can.
3141 * The PID file might actually be created by a START_POST
3142 * script. In that case don't worry if the loading fails. */
3143
3144 has_start_post = !!s->exec_command[SERVICE_EXEC_START_POST];
3145 r = service_load_pid_file(s, !has_start_post);
3146 if (!has_start_post && r < 0) {
3147 r = service_demand_pid_file(s);
3148 if (r < 0 || cgroup_good(s) == 0)
3149 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_PROTOCOL);
3150 break;
3151 }
3152 } else
3153 service_search_main_pid(s);
3154
3155 service_enter_start_post(s);
3156 break;
3157
3158 case SERVICE_START_POST:
3159 if (f != SERVICE_SUCCESS) {
3160 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3161 break;
3162 }
3163
3164 if (s->pid_file) {
3165 int r;
3166
3167 r = service_load_pid_file(s, true);
3168 if (r < 0) {
3169 r = service_demand_pid_file(s);
3170 if (r < 0 || cgroup_good(s) == 0)
3171 service_enter_stop(s, SERVICE_FAILURE_PROTOCOL);
3172 break;
3173 }
3174 } else
3175 service_search_main_pid(s);
3176
3177 service_enter_running(s, SERVICE_SUCCESS);
3178 break;
3179
3180 case SERVICE_RELOAD:
3181 if (f == SERVICE_SUCCESS)
3182 if (service_load_pid_file(s, true) < 0)
3183 service_search_main_pid(s);
3184
3185 s->reload_result = f;
3186 service_enter_running(s, SERVICE_SUCCESS);
3187 break;
3188
3189 case SERVICE_STOP:
3190 service_enter_signal(s, SERVICE_STOP_SIGTERM, f);
3191 break;
3192
3193 case SERVICE_STOP_SIGABRT:
3194 case SERVICE_STOP_SIGTERM:
3195 case SERVICE_STOP_SIGKILL:
3196 if (main_pid_good(s) <= 0)
3197 service_enter_stop_post(s, f);
3198
3199 /* If there is still a service
3200 * process around, wait until
3201 * that one quit, too */
3202 break;
3203
3204 case SERVICE_STOP_POST:
3205 case SERVICE_FINAL_SIGTERM:
3206 case SERVICE_FINAL_SIGKILL:
3207 if (main_pid_good(s) <= 0)
3208 service_enter_dead(s, f, true);
3209 break;
3210
3211 default:
3212 assert_not_reached("Uh, control process died at wrong time.");
3213 }
3214 }
3215 }
3216
3217 /* Notify clients about changed exit status */
3218 unit_add_to_dbus_queue(u);
3219
3220 /* We got one SIGCHLD for the service, let's watch all
3221 * processes that are now running of the service, and watch
3222 * that. Among the PIDs we then watch will be children
3223 * reassigned to us, which hopefully allows us to identify
3224 * when all children are gone */
3225 unit_tidy_watch_pids(u, s->main_pid, s->control_pid);
3226 unit_watch_all_pids(u);
3227
3228 /* If the PID set is empty now, then let's finish this off
3229 (On unified we use proper notifications) */
3230 if (cg_unified_controller(SYSTEMD_CGROUP_CONTROLLER) == 0 && set_isempty(u->pids))
3231 unit_add_to_cgroup_empty_queue(u);
3232 }
3233
3234 static int service_dispatch_timer(sd_event_source *source, usec_t usec, void *userdata) {
3235 Service *s = SERVICE(userdata);
3236
3237 assert(s);
3238 assert(source == s->timer_event_source);
3239
3240 switch (s->state) {
3241
3242 case SERVICE_START_PRE:
3243 case SERVICE_START:
3244 log_unit_warning(UNIT(s), "%s operation timed out. Terminating.", s->state == SERVICE_START ? "Start" : "Start-pre");
3245 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_TIMEOUT);
3246 break;
3247
3248 case SERVICE_START_POST:
3249 log_unit_warning(UNIT(s), "Start-post operation timed out. Stopping.");
3250 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_TIMEOUT);
3251 break;
3252
3253 case SERVICE_RUNNING:
3254 log_unit_warning(UNIT(s), "Service reached runtime time limit. Stopping.");
3255 service_enter_stop(s, SERVICE_FAILURE_TIMEOUT);
3256 break;
3257
3258 case SERVICE_RELOAD:
3259 log_unit_warning(UNIT(s), "Reload operation timed out. Killing reload process.");
3260 service_kill_control_processes(s);
3261 s->reload_result = SERVICE_FAILURE_TIMEOUT;
3262 service_enter_running(s, SERVICE_SUCCESS);
3263 break;
3264
3265 case SERVICE_STOP:
3266 log_unit_warning(UNIT(s), "Stopping timed out. Terminating.");
3267 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_TIMEOUT);
3268 break;
3269
3270 case SERVICE_STOP_SIGABRT:
3271 log_unit_warning(UNIT(s), "State 'stop-sigabrt' timed out. Terminating.");
3272 service_enter_signal(s, SERVICE_STOP_SIGTERM, SERVICE_FAILURE_TIMEOUT);
3273 break;
3274
3275 case SERVICE_STOP_SIGTERM:
3276 if (s->kill_context.send_sigkill) {
3277 log_unit_warning(UNIT(s), "State 'stop-sigterm' timed out. Killing.");
3278 service_enter_signal(s, SERVICE_STOP_SIGKILL, SERVICE_FAILURE_TIMEOUT);
3279 } else {
3280 log_unit_warning(UNIT(s), "State 'stop-sigterm' timed out. Skipping SIGKILL.");
3281 service_enter_stop_post(s, SERVICE_FAILURE_TIMEOUT);
3282 }
3283
3284 break;
3285
3286 case SERVICE_STOP_SIGKILL:
3287 /* Uh, we sent a SIGKILL and it is still not gone?
3288 * Must be something we cannot kill, so let's just be
3289 * weirded out and continue */
3290
3291 log_unit_warning(UNIT(s), "Processes still around after SIGKILL. Ignoring.");
3292 service_enter_stop_post(s, SERVICE_FAILURE_TIMEOUT);
3293 break;
3294
3295 case SERVICE_STOP_POST:
3296 log_unit_warning(UNIT(s), "State 'stop-post' timed out. Terminating.");
3297 service_enter_signal(s, SERVICE_FINAL_SIGTERM, SERVICE_FAILURE_TIMEOUT);
3298 break;
3299
3300 case SERVICE_FINAL_SIGTERM:
3301 if (s->kill_context.send_sigkill) {
3302 log_unit_warning(UNIT(s), "State 'stop-final-sigterm' timed out. Killing.");
3303 service_enter_signal(s, SERVICE_FINAL_SIGKILL, SERVICE_FAILURE_TIMEOUT);
3304 } else {
3305 log_unit_warning(UNIT(s), "State 'stop-final-sigterm' timed out. Skipping SIGKILL. Entering failed mode.");
3306 service_enter_dead(s, SERVICE_FAILURE_TIMEOUT, false);
3307 }
3308
3309 break;
3310
3311 case SERVICE_FINAL_SIGKILL:
3312 log_unit_warning(UNIT(s), "Processes still around after final SIGKILL. Entering failed mode.");
3313 service_enter_dead(s, SERVICE_FAILURE_TIMEOUT, true);
3314 break;
3315
3316 case SERVICE_AUTO_RESTART:
3317 log_unit_info(UNIT(s),
3318 s->restart_usec > 0 ?
3319 "Service hold-off time over, scheduling restart." :
3320 "Service has no hold-off time, scheduling restart.");
3321 service_enter_restart(s);
3322 break;
3323
3324 default:
3325 assert_not_reached("Timeout at wrong time.");
3326 }
3327
3328 return 0;
3329 }
3330
3331 static int service_dispatch_watchdog(sd_event_source *source, usec_t usec, void *userdata) {
3332 Service *s = SERVICE(userdata);
3333 char t[FORMAT_TIMESPAN_MAX];
3334 usec_t watchdog_usec;
3335
3336 assert(s);
3337 assert(source == s->watchdog_event_source);
3338
3339 watchdog_usec = service_get_watchdog_usec(s);
3340
3341 log_unit_error(UNIT(s), "Watchdog timeout (limit %s)!",
3342 format_timespan(t, sizeof(t), watchdog_usec, 1));
3343
3344 service_enter_signal(s, SERVICE_STOP_SIGABRT, SERVICE_FAILURE_WATCHDOG);
3345
3346 return 0;
3347 }
3348
3349 static void service_notify_message(Unit *u, pid_t pid, char **tags, FDSet *fds) {
3350 Service *s = SERVICE(u);
3351 _cleanup_free_ char *cc = NULL;
3352 bool notify_dbus = false;
3353 const char *e;
3354
3355 assert(u);
3356
3357 cc = strv_join(tags, ", ");
3358
3359 if (s->notify_access == NOTIFY_NONE) {
3360 log_unit_warning(u, "Got notification message from PID "PID_FMT", but reception is disabled.", pid);
3361 return;
3362 } else if (s->notify_access == NOTIFY_MAIN && pid != s->main_pid) {
3363 if (s->main_pid != 0)
3364 log_unit_warning(u, "Got notification message from PID "PID_FMT", but reception only permitted for main PID "PID_FMT, pid, s->main_pid);
3365 else
3366 log_unit_warning(u, "Got notification message from PID "PID_FMT", but reception only permitted for main PID which is currently not known", pid);
3367 return;
3368 } else if (s->notify_access == NOTIFY_EXEC && pid != s->main_pid && pid != s->control_pid) {
3369 if (s->main_pid != 0 && s->control_pid != 0)
3370 log_unit_warning(u, "Got notification message from PID "PID_FMT", but reception only permitted for main PID "PID_FMT" and control PID "PID_FMT,
3371 pid, s->main_pid, s->control_pid);
3372 else if (s->main_pid != 0)
3373 log_unit_warning(u, "Got notification message from PID "PID_FMT", but reception only permitted for main PID "PID_FMT, pid, s->main_pid);
3374 else if (s->control_pid != 0)
3375 log_unit_warning(u, "Got notification message from PID "PID_FMT", but reception only permitted for control PID "PID_FMT, pid, s->control_pid);
3376 else
3377 log_unit_warning(u, "Got notification message from PID "PID_FMT", but reception only permitted for main PID and control PID which are currently not known", pid);
3378 return;
3379 } else
3380 log_unit_debug(u, "Got notification message from PID "PID_FMT" (%s)", pid, isempty(cc) ? "n/a" : cc);
3381
3382 /* Interpret MAINPID= */
3383 e = strv_find_startswith(tags, "MAINPID=");
3384 if (e && IN_SET(s->state, SERVICE_START, SERVICE_START_POST, SERVICE_RUNNING, SERVICE_RELOAD)) {
3385 if (parse_pid(e, &pid) < 0)
3386 log_unit_warning(u, "Failed to parse MAINPID= field in notification message: %s", e);
3387 else if (pid == s->control_pid)
3388 log_unit_warning(u, "A control process cannot also be the main process");
3389 else if (pid == getpid_cached() || pid == 1)
3390 log_unit_warning(u, "Service manager can't be main process, ignoring sd_notify() MAINPID= field");
3391 else {
3392 service_set_main_pid(s, pid);
3393 unit_watch_pid(UNIT(s), pid);
3394 notify_dbus = true;
3395 }
3396 }
3397
3398 /* Interpret RELOADING= */
3399 if (strv_find(tags, "RELOADING=1")) {
3400
3401 s->notify_state = NOTIFY_RELOADING;
3402
3403 if (s->state == SERVICE_RUNNING)
3404 service_enter_reload_by_notify(s);
3405
3406 notify_dbus = true;
3407 }
3408
3409 /* Interpret READY= */
3410 if (strv_find(tags, "READY=1")) {
3411
3412 s->notify_state = NOTIFY_READY;
3413
3414 /* Type=notify services inform us about completed
3415 * initialization with READY=1 */
3416 if (s->type == SERVICE_NOTIFY && s->state == SERVICE_START)
3417 service_enter_start_post(s);
3418
3419 /* Sending READY=1 while we are reloading informs us
3420 * that the reloading is complete */
3421 if (s->state == SERVICE_RELOAD && s->control_pid == 0)
3422 service_enter_running(s, SERVICE_SUCCESS);
3423
3424 notify_dbus = true;
3425 }
3426
3427 /* Interpret STOPPING= */
3428 if (strv_find(tags, "STOPPING=1")) {
3429
3430 s->notify_state = NOTIFY_STOPPING;
3431
3432 if (s->state == SERVICE_RUNNING)
3433 service_enter_stop_by_notify(s);
3434
3435 notify_dbus = true;
3436 }
3437
3438 /* Interpret STATUS= */
3439 e = strv_find_startswith(tags, "STATUS=");
3440 if (e) {
3441 _cleanup_free_ char *t = NULL;
3442
3443 if (!isempty(e)) {
3444 if (!utf8_is_valid(e))
3445 log_unit_warning(u, "Status message in notification message is not UTF-8 clean.");
3446 else {
3447 t = strdup(e);
3448 if (!t)
3449 log_oom();
3450 }
3451 }
3452
3453 if (!streq_ptr(s->status_text, t)) {
3454 free_and_replace(s->status_text, t);
3455 notify_dbus = true;
3456 }
3457 }
3458
3459 /* Interpret ERRNO= */
3460 e = strv_find_startswith(tags, "ERRNO=");
3461 if (e) {
3462 int status_errno;
3463
3464 if (safe_atoi(e, &status_errno) < 0 || status_errno < 0)
3465 log_unit_warning(u, "Failed to parse ERRNO= field in notification message: %s", e);
3466 else {
3467 if (s->status_errno != status_errno) {
3468 s->status_errno = status_errno;
3469 notify_dbus = true;
3470 }
3471 }
3472 }
3473
3474 /* Interpret WATCHDOG= */
3475 if (strv_find(tags, "WATCHDOG=1"))
3476 service_reset_watchdog(s);
3477
3478 if (strv_find(tags, "FDSTORE=1")) {
3479 const char *name;
3480
3481 name = strv_find_startswith(tags, "FDNAME=");
3482 if (name && !fdname_is_valid(name)) {
3483 log_unit_warning(u, "Passed FDNAME= name is invalid, ignoring.");
3484 name = NULL;
3485 }
3486
3487 service_add_fd_store_set(s, fds, name);
3488 }
3489
3490 e = strv_find_startswith(tags, "WATCHDOG_USEC=");
3491 if (e) {
3492 usec_t watchdog_override_usec;
3493 if (safe_atou64(e, &watchdog_override_usec) < 0)
3494 log_unit_warning(u, "Failed to parse WATCHDOG_USEC=%s", e);
3495 else
3496 service_reset_watchdog_timeout(s, watchdog_override_usec);
3497 }
3498
3499 /* Notify clients about changed status or main pid */
3500 if (notify_dbus)
3501 unit_add_to_dbus_queue(u);
3502 }
3503
3504 static int service_get_timeout(Unit *u, usec_t *timeout) {
3505 Service *s = SERVICE(u);
3506 uint64_t t;
3507 int r;
3508
3509 if (!s->timer_event_source)
3510 return 0;
3511
3512 r = sd_event_source_get_time(s->timer_event_source, &t);
3513 if (r < 0)
3514 return r;
3515 if (t == USEC_INFINITY)
3516 return 0;
3517
3518 *timeout = t;
3519 return 1;
3520 }
3521
3522 static void service_bus_name_owner_change(
3523 Unit *u,
3524 const char *name,
3525 const char *old_owner,
3526 const char *new_owner) {
3527
3528 Service *s = SERVICE(u);
3529 int r;
3530
3531 assert(s);
3532 assert(name);
3533
3534 assert(streq(s->bus_name, name));
3535 assert(old_owner || new_owner);
3536
3537 if (old_owner && new_owner)
3538 log_unit_debug(u, "D-Bus name %s changed owner from %s to %s", name, old_owner, new_owner);
3539 else if (old_owner)
3540 log_unit_debug(u, "D-Bus name %s no longer registered by %s", name, old_owner);
3541 else
3542 log_unit_debug(u, "D-Bus name %s now registered by %s", name, new_owner);
3543
3544 s->bus_name_good = !!new_owner;
3545
3546 /* Track the current owner, so we can reconstruct changes after a daemon reload */
3547 r = free_and_strdup(&s->bus_name_owner, new_owner);
3548 if (r < 0) {
3549 log_unit_error_errno(u, r, "Unable to set new bus name owner %s: %m", new_owner);
3550 return;
3551 }
3552
3553 if (s->type == SERVICE_DBUS) {
3554
3555 /* service_enter_running() will figure out what to
3556 * do */
3557 if (s->state == SERVICE_RUNNING)
3558 service_enter_running(s, SERVICE_SUCCESS);
3559 else if (s->state == SERVICE_START && new_owner)
3560 service_enter_start_post(s);
3561
3562 } else if (new_owner &&
3563 s->main_pid <= 0 &&
3564 IN_SET(s->state,
3565 SERVICE_START,
3566 SERVICE_START_POST,
3567 SERVICE_RUNNING,
3568 SERVICE_RELOAD)) {
3569
3570 _cleanup_(sd_bus_creds_unrefp) sd_bus_creds *creds = NULL;
3571 pid_t pid;
3572
3573 /* Try to acquire PID from bus service */
3574
3575 r = sd_bus_get_name_creds(u->manager->api_bus, name, SD_BUS_CREDS_PID, &creds);
3576 if (r >= 0)
3577 r = sd_bus_creds_get_pid(creds, &pid);
3578 if (r >= 0) {
3579 log_unit_debug(u, "D-Bus name %s is now owned by process " PID_FMT, name, pid);
3580
3581 service_set_main_pid(s, pid);
3582 unit_watch_pid(UNIT(s), pid);
3583 }
3584 }
3585 }
3586
3587 int service_set_socket_fd(Service *s, int fd, Socket *sock, bool selinux_context_net) {
3588 _cleanup_free_ char *peer = NULL;
3589 int r;
3590
3591 assert(s);
3592 assert(fd >= 0);
3593
3594 /* This is called by the socket code when instantiating a new service for a stream socket and the socket needs
3595 * to be configured. We take ownership of the passed fd on success. */
3596
3597 if (UNIT(s)->load_state != UNIT_LOADED)
3598 return -EINVAL;
3599
3600 if (s->socket_fd >= 0)
3601 return -EBUSY;
3602
3603 if (s->state != SERVICE_DEAD)
3604 return -EAGAIN;
3605
3606 if (getpeername_pretty(fd, true, &peer) >= 0) {
3607
3608 if (UNIT(s)->description) {
3609 _cleanup_free_ char *a;
3610
3611 a = strjoin(UNIT(s)->description, " (", peer, ")");
3612 if (!a)
3613 return -ENOMEM;
3614
3615 r = unit_set_description(UNIT(s), a);
3616 } else
3617 r = unit_set_description(UNIT(s), peer);
3618
3619 if (r < 0)
3620 return r;
3621 }
3622
3623 r = unit_add_two_dependencies(UNIT(sock), UNIT_BEFORE, UNIT_TRIGGERS, UNIT(s), false, UNIT_DEPENDENCY_IMPLICIT);
3624 if (r < 0)
3625 return r;
3626
3627 s->socket_fd = fd;
3628 s->socket_fd_selinux_context_net = selinux_context_net;
3629
3630 unit_ref_set(&s->accept_socket, UNIT(sock));
3631 return 0;
3632 }
3633
3634 static void service_reset_failed(Unit *u) {
3635 Service *s = SERVICE(u);
3636
3637 assert(s);
3638
3639 if (s->state == SERVICE_FAILED)
3640 service_set_state(s, SERVICE_DEAD);
3641
3642 s->result = SERVICE_SUCCESS;
3643 s->reload_result = SERVICE_SUCCESS;
3644 s->n_restarts = 0;
3645 s->flush_n_restarts = false;
3646 }
3647
3648 static int service_kill(Unit *u, KillWho who, int signo, sd_bus_error *error) {
3649 Service *s = SERVICE(u);
3650
3651 assert(s);
3652
3653 return unit_kill_common(u, who, signo, s->main_pid, s->control_pid, error);
3654 }
3655
3656 static int service_main_pid(Unit *u) {
3657 Service *s = SERVICE(u);
3658
3659 assert(s);
3660
3661 return s->main_pid;
3662 }
3663
3664 static int service_control_pid(Unit *u) {
3665 Service *s = SERVICE(u);
3666
3667 assert(s);
3668
3669 return s->control_pid;
3670 }
3671
3672 static const char* const service_restart_table[_SERVICE_RESTART_MAX] = {
3673 [SERVICE_RESTART_NO] = "no",
3674 [SERVICE_RESTART_ON_SUCCESS] = "on-success",
3675 [SERVICE_RESTART_ON_FAILURE] = "on-failure",
3676 [SERVICE_RESTART_ON_ABNORMAL] = "on-abnormal",
3677 [SERVICE_RESTART_ON_WATCHDOG] = "on-watchdog",
3678 [SERVICE_RESTART_ON_ABORT] = "on-abort",
3679 [SERVICE_RESTART_ALWAYS] = "always",
3680 };
3681
3682 DEFINE_STRING_TABLE_LOOKUP(service_restart, ServiceRestart);
3683
3684 static const char* const service_type_table[_SERVICE_TYPE_MAX] = {
3685 [SERVICE_SIMPLE] = "simple",
3686 [SERVICE_FORKING] = "forking",
3687 [SERVICE_ONESHOT] = "oneshot",
3688 [SERVICE_DBUS] = "dbus",
3689 [SERVICE_NOTIFY] = "notify",
3690 [SERVICE_IDLE] = "idle"
3691 };
3692
3693 DEFINE_STRING_TABLE_LOOKUP(service_type, ServiceType);
3694
3695 static const char* const service_exec_command_table[_SERVICE_EXEC_COMMAND_MAX] = {
3696 [SERVICE_EXEC_START_PRE] = "ExecStartPre",
3697 [SERVICE_EXEC_START] = "ExecStart",
3698 [SERVICE_EXEC_START_POST] = "ExecStartPost",
3699 [SERVICE_EXEC_RELOAD] = "ExecReload",
3700 [SERVICE_EXEC_STOP] = "ExecStop",
3701 [SERVICE_EXEC_STOP_POST] = "ExecStopPost",
3702 };
3703
3704 DEFINE_STRING_TABLE_LOOKUP(service_exec_command, ServiceExecCommand);
3705
3706 static const char* const notify_state_table[_NOTIFY_STATE_MAX] = {
3707 [NOTIFY_UNKNOWN] = "unknown",
3708 [NOTIFY_READY] = "ready",
3709 [NOTIFY_RELOADING] = "reloading",
3710 [NOTIFY_STOPPING] = "stopping",
3711 };
3712
3713 DEFINE_STRING_TABLE_LOOKUP(notify_state, NotifyState);
3714
3715 static const char* const service_result_table[_SERVICE_RESULT_MAX] = {
3716 [SERVICE_SUCCESS] = "success",
3717 [SERVICE_FAILURE_RESOURCES] = "resources",
3718 [SERVICE_FAILURE_PROTOCOL] = "protocol",
3719 [SERVICE_FAILURE_TIMEOUT] = "timeout",
3720 [SERVICE_FAILURE_EXIT_CODE] = "exit-code",
3721 [SERVICE_FAILURE_SIGNAL] = "signal",
3722 [SERVICE_FAILURE_CORE_DUMP] = "core-dump",
3723 [SERVICE_FAILURE_WATCHDOG] = "watchdog",
3724 [SERVICE_FAILURE_START_LIMIT_HIT] = "start-limit-hit",
3725 };
3726
3727 DEFINE_STRING_TABLE_LOOKUP(service_result, ServiceResult);
3728
3729 const UnitVTable service_vtable = {
3730 .object_size = sizeof(Service),
3731 .exec_context_offset = offsetof(Service, exec_context),
3732 .cgroup_context_offset = offsetof(Service, cgroup_context),
3733 .kill_context_offset = offsetof(Service, kill_context),
3734 .exec_runtime_offset = offsetof(Service, exec_runtime),
3735 .dynamic_creds_offset = offsetof(Service, dynamic_creds),
3736
3737 .sections =
3738 "Unit\0"
3739 "Service\0"
3740 "Install\0",
3741 .private_section = "Service",
3742
3743 .init = service_init,
3744 .done = service_done,
3745 .load = service_load,
3746 .release_resources = service_release_resources,
3747
3748 .coldplug = service_coldplug,
3749
3750 .dump = service_dump,
3751
3752 .start = service_start,
3753 .stop = service_stop,
3754 .reload = service_reload,
3755
3756 .can_reload = service_can_reload,
3757
3758 .kill = service_kill,
3759
3760 .serialize = service_serialize,
3761 .deserialize_item = service_deserialize_item,
3762
3763 .active_state = service_active_state,
3764 .sub_state_to_string = service_sub_state_to_string,
3765
3766 .check_gc = service_check_gc,
3767
3768 .sigchld_event = service_sigchld_event,
3769
3770 .reset_failed = service_reset_failed,
3771
3772 .notify_cgroup_empty = service_notify_cgroup_empty_event,
3773 .notify_message = service_notify_message,
3774
3775 .main_pid = service_main_pid,
3776 .control_pid = service_control_pid,
3777
3778 .bus_name_owner_change = service_bus_name_owner_change,
3779
3780 .bus_vtable = bus_service_vtable,
3781 .bus_set_property = bus_service_set_property,
3782 .bus_commit_properties = bus_service_commit_properties,
3783
3784 .get_timeout = service_get_timeout,
3785 .can_transient = true,
3786
3787 .status_message_formats = {
3788 .starting_stopping = {
3789 [0] = "Starting %s...",
3790 [1] = "Stopping %s...",
3791 },
3792 .finished_start_job = {
3793 [JOB_DONE] = "Started %s.",
3794 [JOB_FAILED] = "Failed to start %s.",
3795 },
3796 .finished_stop_job = {
3797 [JOB_DONE] = "Stopped %s.",
3798 [JOB_FAILED] = "Stopped (with error) %s.",
3799 },
3800 },
3801 };
Unnamed repository; edit this file 'description' to name the repository.