1 /* SPDX-License-Identifier: LGPL-2.1+ */
9 #include "alloc-util.h"
10 #include "btrfs-util.h"
11 #include "bus-common-errors.h"
13 #include "cgroup-util.h"
16 #include "format-util.h"
17 #include "hostname-util.h"
18 #include "image-dbus.h"
20 #include "machine-dbus.h"
21 #include "machine-image.h"
22 #include "machine-pool.h"
24 #include "path-util.h"
25 #include "process-util.h"
26 #include "stdio-util.h"
28 #include "unit-name.h"
29 #include "user-util.h"
31 static BUS_DEFINE_PROPERTY_GET_GLOBAL(property_get_pool_path
, "s", "/var/lib/machines");
33 static int property_get_pool_usage(
36 const char *interface
,
38 sd_bus_message
*reply
,
40 sd_bus_error
*error
) {
42 _cleanup_close_
int fd
= -1;
43 uint64_t usage
= (uint64_t) -1;
49 /* We try to read the quota info from /var/lib/machines, as
50 * well as the usage of the loopback file
51 * /var/lib/machines.raw, and pick the larger value. */
53 fd
= open("/var/lib/machines", O_RDONLY
|O_CLOEXEC
|O_DIRECTORY
);
57 if (btrfs_subvol_get_subtree_quota_fd(fd
, 0, &q
) >= 0)
61 if (stat("/var/lib/machines.raw", &st
) >= 0) {
62 if (usage
== (uint64_t) -1 || st
.st_blocks
* 512ULL > usage
)
63 usage
= st
.st_blocks
* 512ULL;
66 return sd_bus_message_append(reply
, "t", usage
);
69 static int property_get_pool_limit(
72 const char *interface
,
74 sd_bus_message
*reply
,
76 sd_bus_error
*error
) {
78 _cleanup_close_
int fd
= -1;
79 uint64_t size
= (uint64_t) -1;
85 /* We try to read the quota limit from /var/lib/machines, as
86 * well as the size of the loopback file
87 * /var/lib/machines.raw, and pick the smaller value. */
89 fd
= open("/var/lib/machines", O_RDONLY
|O_CLOEXEC
|O_DIRECTORY
);
93 if (btrfs_subvol_get_subtree_quota_fd(fd
, 0, &q
) >= 0)
94 size
= q
.referenced_max
;
97 if (stat("/var/lib/machines.raw", &st
) >= 0) {
98 if (size
== (uint64_t) -1 || (uint64_t) st
.st_size
< size
)
102 return sd_bus_message_append(reply
, "t", size
);
105 static int method_get_machine(sd_bus_message
*message
, void *userdata
, sd_bus_error
*error
) {
106 _cleanup_free_
char *p
= NULL
;
107 Manager
*m
= userdata
;
115 r
= sd_bus_message_read(message
, "s", &name
);
119 machine
= hashmap_get(m
->machines
, name
);
121 return sd_bus_error_setf(error
, BUS_ERROR_NO_SUCH_MACHINE
, "No machine '%s' known", name
);
123 p
= machine_bus_path(machine
);
127 return sd_bus_reply_method_return(message
, "o", p
);
130 static int method_get_image(sd_bus_message
*message
, void *userdata
, sd_bus_error
*error
) {
131 _cleanup_free_
char *p
= NULL
;
132 Manager
*m
= userdata
;
139 r
= sd_bus_message_read(message
, "s", &name
);
143 r
= image_find(IMAGE_MACHINE
, name
, NULL
);
145 return sd_bus_error_setf(error
, BUS_ERROR_NO_SUCH_IMAGE
, "No image '%s' known", name
);
149 p
= image_bus_path(name
);
153 return sd_bus_reply_method_return(message
, "o", p
);
156 static int method_get_machine_by_pid(sd_bus_message
*message
, void *userdata
, sd_bus_error
*error
) {
157 _cleanup_free_
char *p
= NULL
;
158 Manager
*m
= userdata
;
159 Machine
*machine
= NULL
;
166 assert_cc(sizeof(pid_t
) == sizeof(uint32_t));
168 r
= sd_bus_message_read(message
, "u", &pid
);
176 _cleanup_(sd_bus_creds_unrefp
) sd_bus_creds
*creds
= NULL
;
178 r
= sd_bus_query_sender_creds(message
, SD_BUS_CREDS_PID
, &creds
);
182 r
= sd_bus_creds_get_pid(creds
, &pid
);
187 r
= manager_get_machine_by_pid(m
, pid
, &machine
);
191 return sd_bus_error_setf(error
, BUS_ERROR_NO_MACHINE_FOR_PID
, "PID "PID_FMT
" does not belong to any known machine", pid
);
193 p
= machine_bus_path(machine
);
197 return sd_bus_reply_method_return(message
, "o", p
);
200 static int method_list_machines(sd_bus_message
*message
, void *userdata
, sd_bus_error
*error
) {
201 _cleanup_(sd_bus_message_unrefp
) sd_bus_message
*reply
= NULL
;
202 Manager
*m
= userdata
;
210 r
= sd_bus_message_new_method_return(message
, &reply
);
212 return sd_bus_error_set_errno(error
, r
);
214 r
= sd_bus_message_open_container(reply
, 'a', "(ssso)");
216 return sd_bus_error_set_errno(error
, r
);
218 HASHMAP_FOREACH(machine
, m
->machines
, i
) {
219 _cleanup_free_
char *p
= NULL
;
221 p
= machine_bus_path(machine
);
225 r
= sd_bus_message_append(reply
, "(ssso)",
227 strempty(machine_class_to_string(machine
->class)),
231 return sd_bus_error_set_errno(error
, r
);
234 r
= sd_bus_message_close_container(reply
);
236 return sd_bus_error_set_errno(error
, r
);
238 return sd_bus_send(NULL
, reply
, NULL
);
241 static int method_create_or_register_machine(Manager
*manager
, sd_bus_message
*message
, bool read_network
, Machine
**_m
, sd_bus_error
*error
) {
242 const char *name
, *service
, *class, *root_directory
;
243 const int32_t *netif
= NULL
;
249 size_t n
, n_netif
= 0;
256 r
= sd_bus_message_read(message
, "s", &name
);
259 if (!machine_name_is_valid(name
))
260 return sd_bus_error_setf(error
, SD_BUS_ERROR_INVALID_ARGS
, "Invalid machine name");
262 r
= sd_bus_message_read_array(message
, 'y', &v
, &n
);
270 return sd_bus_error_setf(error
, SD_BUS_ERROR_INVALID_ARGS
, "Invalid machine ID parameter");
272 r
= sd_bus_message_read(message
, "ssus", &service
, &class, &leader
, &root_directory
);
279 r
= sd_bus_message_read_array(message
, 'i', (const void**) &netif
, &n_netif
);
283 n_netif
/= sizeof(int32_t);
285 for (i
= 0; i
< n_netif
; i
++) {
287 return sd_bus_error_setf(error
, SD_BUS_ERROR_INVALID_ARGS
, "Invalid network interface index %i", netif
[i
]);
292 c
= _MACHINE_CLASS_INVALID
;
294 c
= machine_class_from_string(class);
296 return sd_bus_error_setf(error
, SD_BUS_ERROR_INVALID_ARGS
, "Invalid machine class parameter");
300 return sd_bus_error_setf(error
, SD_BUS_ERROR_INVALID_ARGS
, "Invalid leader PID");
302 if (!isempty(root_directory
) && !path_is_absolute(root_directory
))
303 return sd_bus_error_setf(error
, SD_BUS_ERROR_INVALID_ARGS
, "Root directory must be empty or an absolute path");
306 _cleanup_(sd_bus_creds_unrefp
) sd_bus_creds
*creds
= NULL
;
308 r
= sd_bus_query_sender_creds(message
, SD_BUS_CREDS_PID
, &creds
);
312 assert_cc(sizeof(uint32_t) == sizeof(pid_t
));
314 r
= sd_bus_creds_get_pid(creds
, (pid_t
*) &leader
);
319 if (hashmap_get(manager
->machines
, name
))
320 return sd_bus_error_setf(error
, BUS_ERROR_MACHINE_EXISTS
, "Machine '%s' already exists", name
);
322 r
= manager_add_machine(manager
, name
, &m
);
330 if (!isempty(service
)) {
331 m
->service
= strdup(service
);
338 if (!isempty(root_directory
)) {
339 m
->root_directory
= strdup(root_directory
);
340 if (!m
->root_directory
) {
347 assert_cc(sizeof(int32_t) == sizeof(int));
348 m
->netif
= memdup(netif
, sizeof(int32_t) * n_netif
);
354 m
->n_netif
= n_netif
;
362 machine_add_to_gc_queue(m
);
366 static int method_create_machine_internal(sd_bus_message
*message
, bool read_network
, void *userdata
, sd_bus_error
*error
) {
367 Manager
*manager
= userdata
;
374 r
= method_create_or_register_machine(manager
, message
, read_network
, &m
, error
);
378 r
= sd_bus_message_enter_container(message
, 'a', "(sv)");
382 r
= machine_start(m
, message
, error
);
386 m
->create_message
= sd_bus_message_ref(message
);
390 machine_add_to_gc_queue(m
);
394 static int method_create_machine_with_network(sd_bus_message
*message
, void *userdata
, sd_bus_error
*error
) {
395 return method_create_machine_internal(message
, true, userdata
, error
);
398 static int method_create_machine(sd_bus_message
*message
, void *userdata
, sd_bus_error
*error
) {
399 return method_create_machine_internal(message
, false, userdata
, error
);
402 static int method_register_machine_internal(sd_bus_message
*message
, bool read_network
, void *userdata
, sd_bus_error
*error
) {
403 Manager
*manager
= userdata
;
404 _cleanup_free_
char *p
= NULL
;
411 r
= method_create_or_register_machine(manager
, message
, read_network
, &m
, error
);
415 r
= cg_pid_get_unit(m
->leader
, &m
->unit
);
417 r
= sd_bus_error_set_errnof(error
, r
,
418 "Failed to determine unit of process "PID_FMT
" : %m",
423 r
= machine_start(m
, NULL
, error
);
427 p
= machine_bus_path(m
);
433 return sd_bus_reply_method_return(message
, "o", p
);
436 machine_add_to_gc_queue(m
);
440 static int method_register_machine_with_network(sd_bus_message
*message
, void *userdata
, sd_bus_error
*error
) {
441 return method_register_machine_internal(message
, true, userdata
, error
);
444 static int method_register_machine(sd_bus_message
*message
, void *userdata
, sd_bus_error
*error
) {
445 return method_register_machine_internal(message
, false, userdata
, error
);
448 static int redirect_method_to_machine(sd_bus_message
*message
, Manager
*m
, sd_bus_error
*error
, sd_bus_message_handler_t method
) {
457 r
= sd_bus_message_read(message
, "s", &name
);
459 return sd_bus_error_set_errno(error
, r
);
461 machine
= hashmap_get(m
->machines
, name
);
463 return sd_bus_error_setf(error
, BUS_ERROR_NO_SUCH_MACHINE
, "No machine '%s' known", name
);
465 return method(message
, machine
, error
);
468 static int method_terminate_machine(sd_bus_message
*message
, void *userdata
, sd_bus_error
*error
) {
469 return redirect_method_to_machine(message
, userdata
, error
, bus_machine_method_terminate
);
472 static int method_kill_machine(sd_bus_message
*message
, void *userdata
, sd_bus_error
*error
) {
473 return redirect_method_to_machine(message
, userdata
, error
, bus_machine_method_kill
);
476 static int method_get_machine_addresses(sd_bus_message
*message
, void *userdata
, sd_bus_error
*error
) {
477 return redirect_method_to_machine(message
, userdata
, error
, bus_machine_method_get_addresses
);
480 static int method_get_machine_os_release(sd_bus_message
*message
, void *userdata
, sd_bus_error
*error
) {
481 return redirect_method_to_machine(message
, userdata
, error
, bus_machine_method_get_os_release
);
484 static int method_list_images(sd_bus_message
*message
, void *userdata
, sd_bus_error
*error
) {
485 _cleanup_(sd_bus_message_unrefp
) sd_bus_message
*reply
= NULL
;
486 _cleanup_(image_hashmap_freep
) Hashmap
*images
= NULL
;
487 Manager
*m
= userdata
;
495 images
= hashmap_new(&string_hash_ops
);
499 r
= image_discover(IMAGE_MACHINE
, images
);
503 r
= sd_bus_message_new_method_return(message
, &reply
);
507 r
= sd_bus_message_open_container(reply
, 'a', "(ssbttto)");
511 HASHMAP_FOREACH(image
, images
, i
) {
512 _cleanup_free_
char *p
= NULL
;
514 p
= image_bus_path(image
->name
);
518 r
= sd_bus_message_append(reply
, "(ssbttto)",
520 image_type_to_string(image
->type
),
530 r
= sd_bus_message_close_container(reply
);
534 return sd_bus_send(NULL
, reply
, NULL
);
537 static int method_open_machine_pty(sd_bus_message
*message
, void *userdata
, sd_bus_error
*error
) {
538 return redirect_method_to_machine(message
, userdata
, error
, bus_machine_method_open_pty
);
541 static int method_open_machine_login(sd_bus_message
*message
, void *userdata
, sd_bus_error
*error
) {
542 return redirect_method_to_machine(message
, userdata
, error
, bus_machine_method_open_login
);
545 static int method_open_machine_shell(sd_bus_message
*message
, void *userdata
, sd_bus_error
*error
) {
546 return redirect_method_to_machine(message
, userdata
, error
, bus_machine_method_open_shell
);
549 static int method_bind_mount_machine(sd_bus_message
*message
, void *userdata
, sd_bus_error
*error
) {
550 return redirect_method_to_machine(message
, userdata
, error
, bus_machine_method_bind_mount
);
553 static int method_copy_machine(sd_bus_message
*message
, void *userdata
, sd_bus_error
*error
) {
554 return redirect_method_to_machine(message
, userdata
, error
, bus_machine_method_copy
);
557 static int method_open_machine_root_directory(sd_bus_message
*message
, void *userdata
, sd_bus_error
*error
) {
558 return redirect_method_to_machine(message
, userdata
, error
, bus_machine_method_open_root_directory
);
561 static int method_get_machine_uid_shift(sd_bus_message
*message
, void *userdata
, sd_bus_error
*error
) {
562 return redirect_method_to_machine(message
, userdata
, error
, bus_machine_method_get_uid_shift
);
565 static int redirect_method_to_image(sd_bus_message
*message
, Manager
*m
, sd_bus_error
*error
, sd_bus_message_handler_t method
) {
566 _cleanup_(image_unrefp
) Image
* i
= NULL
;
574 r
= sd_bus_message_read(message
, "s", &name
);
578 if (!image_name_is_valid(name
))
579 return sd_bus_error_setf(error
, SD_BUS_ERROR_INVALID_ARGS
, "Image name '%s' is invalid.", name
);
581 r
= image_find(IMAGE_MACHINE
, name
, &i
);
583 return sd_bus_error_setf(error
, BUS_ERROR_NO_SUCH_IMAGE
, "No image '%s' known", name
);
588 return method(message
, i
, error
);
591 static int method_remove_image(sd_bus_message
*message
, void *userdata
, sd_bus_error
*error
) {
592 return redirect_method_to_image(message
, userdata
, error
, bus_image_method_remove
);
595 static int method_rename_image(sd_bus_message
*message
, void *userdata
, sd_bus_error
*error
) {
596 return redirect_method_to_image(message
, userdata
, error
, bus_image_method_rename
);
599 static int method_clone_image(sd_bus_message
*message
, void *userdata
, sd_bus_error
*error
) {
600 return redirect_method_to_image(message
, userdata
, error
, bus_image_method_clone
);
603 static int method_mark_image_read_only(sd_bus_message
*message
, void *userdata
, sd_bus_error
*error
) {
604 return redirect_method_to_image(message
, userdata
, error
, bus_image_method_mark_read_only
);
607 static int method_get_image_hostname(sd_bus_message
*message
, void *userdata
, sd_bus_error
*error
) {
608 return redirect_method_to_image(message
, userdata
, error
, bus_image_method_get_hostname
);
611 static int method_get_image_machine_id(sd_bus_message
*message
, void *userdata
, sd_bus_error
*error
) {
612 return redirect_method_to_image(message
, userdata
, error
, bus_image_method_get_machine_id
);
615 static int method_get_image_machine_info(sd_bus_message
*message
, void *userdata
, sd_bus_error
*error
) {
616 return redirect_method_to_image(message
, userdata
, error
, bus_image_method_get_machine_info
);
619 static int method_get_image_os_release(sd_bus_message
*message
, void *userdata
, sd_bus_error
*error
) {
620 return redirect_method_to_image(message
, userdata
, error
, bus_image_method_get_os_release
);
623 static int clean_pool_done(Operation
*operation
, int ret
, sd_bus_error
*error
) {
624 _cleanup_(sd_bus_message_unrefp
) sd_bus_message
*reply
= NULL
;
625 _cleanup_fclose_
FILE *f
= NULL
;
631 assert(operation
->extra_fd
>= 0);
633 if (lseek(operation
->extra_fd
, 0, SEEK_SET
) == (off_t
) -1)
636 f
= fdopen(operation
->extra_fd
, "re");
640 operation
->extra_fd
= -1;
642 /* The resulting temporary file starts with a boolean value that indicates success or not. */
644 n
= fread(&success
, 1, sizeof(success
), f
);
645 if (n
!= sizeof(success
))
646 return ret
< 0 ? ret
: (errno
!= 0 ? -errno
: -EIO
);
649 _cleanup_free_
char *name
= NULL
;
651 /* The clean-up operation failed. In this case the resulting temporary file should contain a boolean
652 * set to false followed by the name of the failed image. Let's try to read this and use it for the
653 * error message. If we can't read it, don't mind, and return the naked error. */
655 if (success
) /* The resulting temporary file could not be updated, ignore it. */
658 r
= read_nul_string(f
, &name
);
659 if (r
< 0 || isempty(name
)) /* Same here... */
662 return sd_bus_error_set_errnof(error
, ret
, "Failed to remove image %s: %m", name
);
667 r
= sd_bus_message_new_method_return(operation
->message
, &reply
);
671 r
= sd_bus_message_open_container(reply
, 'a', "(st)");
675 /* On success the resulting temporary file will contain a list of image names that were removed followed by
676 * their size on disk. Let's read that and turn it into a bus message. */
678 _cleanup_free_
char *name
= NULL
;
681 r
= read_nul_string(f
, &name
);
684 if (isempty(name
)) /* reached the end */
688 n
= fread(&size
, 1, sizeof(size
), f
);
689 if (n
!= sizeof(size
))
690 return errno
!= 0 ? -errno
: -EIO
;
692 r
= sd_bus_message_append(reply
, "(st)", name
, size
);
697 r
= sd_bus_message_close_container(reply
);
701 return sd_bus_send(NULL
, reply
, NULL
);
704 static int method_clean_pool(sd_bus_message
*message
, void *userdata
, sd_bus_error
*error
) {
710 _cleanup_close_pair_
int errno_pipe_fd
[2] = { -1, -1 };
711 _cleanup_close_
int result_fd
= -1;
712 Manager
*m
= userdata
;
713 Operation
*operation
;
720 if (m
->n_operations
>= OPERATIONS_MAX
)
721 return sd_bus_error_setf(error
, SD_BUS_ERROR_LIMITS_EXCEEDED
, "Too many ongoing operations.");
723 r
= sd_bus_message_read(message
, "s", &mm
);
727 if (streq(mm
, "all"))
729 else if (streq(mm
, "hidden"))
730 mode
= REMOVE_HIDDEN
;
732 return sd_bus_error_setf(error
, SD_BUS_ERROR_INVALID_ARGS
, "Unknown mode '%s'.", mm
);
734 r
= bus_verify_polkit_async(
737 "org.freedesktop.machine1.manage-machines",
746 return 1; /* Will call us back */
748 if (pipe2(errno_pipe_fd
, O_CLOEXEC
|O_NONBLOCK
) < 0)
749 return sd_bus_error_set_errnof(error
, errno
, "Failed to create pipe: %m");
751 /* Create a temporary file we can dump information about deleted images into. We use a temporary file for this
752 * instead of a pipe or so, since this might grow quit large in theory and we don't want to process this
754 result_fd
= open_tmpfile_unlinkable(NULL
, O_RDWR
|O_CLOEXEC
);
758 /* This might be a slow operation, run it asynchronously in a background process */
759 r
= safe_fork("(sd-clean)", FORK_RESET_SIGNALS
, &child
);
761 return sd_bus_error_set_errnof(error
, r
, "Failed to fork(): %m");
763 _cleanup_(image_hashmap_freep
) Hashmap
*images
= NULL
;
769 errno_pipe_fd
[0] = safe_close(errno_pipe_fd
[0]);
771 images
= hashmap_new(&string_hash_ops
);
777 r
= image_discover(IMAGE_MACHINE
, images
);
781 l
= write(result_fd
, &success
, sizeof(success
));
787 HASHMAP_FOREACH(image
, images
, i
) {
789 /* We can't remove vendor images (i.e. those in /usr) */
790 if (IMAGE_IS_VENDOR(image
))
793 if (IMAGE_IS_HOST(image
))
796 if (mode
== REMOVE_HIDDEN
&& !IMAGE_IS_HIDDEN(image
))
799 r
= image_remove(image
);
800 if (r
== -EBUSY
) /* keep images that are currently being used. */
803 /* If the operation failed, let's override everything we wrote, and instead write there at which image we failed. */
805 (void) ftruncate(result_fd
, 0);
806 (void) lseek(result_fd
, 0, SEEK_SET
);
807 (void) write(result_fd
, &success
, sizeof(success
));
808 (void) write(result_fd
, image
->name
, strlen(image
->name
)+1);
812 l
= write(result_fd
, image
->name
, strlen(image
->name
)+1);
818 l
= write(result_fd
, &image
->usage_exclusive
, sizeof(image
->usage_exclusive
));
825 result_fd
= safe_close(result_fd
);
829 (void) write(errno_pipe_fd
[1], &r
, sizeof(r
));
833 errno_pipe_fd
[1] = safe_close(errno_pipe_fd
[1]);
835 /* The clean-up might take a while, hence install a watch on the child and return */
837 r
= operation_new(m
, NULL
, child
, message
, errno_pipe_fd
[0], &operation
);
839 (void) sigkill_wait(child
);
843 operation
->extra_fd
= result_fd
;
844 operation
->done
= clean_pool_done
;
847 errno_pipe_fd
[0] = -1;
852 static int method_set_pool_limit(sd_bus_message
*message
, void *userdata
, sd_bus_error
*error
) {
853 Manager
*m
= userdata
;
859 r
= sd_bus_message_read(message
, "t", &limit
);
862 if (!FILE_SIZE_VALID_OR_INFINITY(limit
))
863 return sd_bus_error_setf(error
, SD_BUS_ERROR_INVALID_ARGS
, "New limit out of range");
865 r
= bus_verify_polkit_async(
868 "org.freedesktop.machine1.manage-machines",
877 return 1; /* Will call us back */
879 /* Set up the machine directory if necessary */
880 r
= setup_machine_directory(limit
, error
);
884 /* Resize the backing loopback device, if there is one, except if we asked to drop any limit */
885 if (limit
!= (uint64_t) -1) {
886 r
= btrfs_resize_loopback("/var/lib/machines", limit
, false);
888 return sd_bus_error_setf(error
, SD_BUS_ERROR_NOT_SUPPORTED
, "Quota is only supported on btrfs.");
889 if (r
< 0 && r
!= -ENODEV
) /* ignore ENODEV, as that's what is returned if the file system is not on loopback */
890 return sd_bus_error_set_errnof(error
, r
, "Failed to adjust loopback limit: %m");
893 (void) btrfs_qgroup_set_limit("/var/lib/machines", 0, limit
);
895 r
= btrfs_subvol_set_subtree_quota_limit("/var/lib/machines", 0, limit
);
897 return sd_bus_error_setf(error
, SD_BUS_ERROR_NOT_SUPPORTED
, "Quota is only supported on btrfs.");
899 return sd_bus_error_set_errnof(error
, r
, "Failed to adjust quota limit: %m");
901 return sd_bus_reply_method_return(message
, NULL
);
904 static int method_set_image_limit(sd_bus_message
*message
, void *userdata
, sd_bus_error
*error
) {
905 return redirect_method_to_image(message
, userdata
, error
, bus_image_method_set_limit
);
908 static int method_map_from_machine_user(sd_bus_message
*message
, void *userdata
, sd_bus_error
*error
) {
909 _cleanup_fclose_
FILE *f
= NULL
;
910 Manager
*m
= userdata
;
911 const char *name
, *p
;
916 r
= sd_bus_message_read(message
, "su", &name
, &uid
);
920 if (!uid_is_valid(uid
))
921 return sd_bus_error_setf(error
, SD_BUS_ERROR_INVALID_ARGS
, "Invalid user ID " UID_FMT
, uid
);
923 machine
= hashmap_get(m
->machines
, name
);
925 return sd_bus_error_setf(error
, BUS_ERROR_NO_SUCH_MACHINE
, "No machine '%s' known", name
);
927 if (machine
->class != MACHINE_CONTAINER
)
928 return sd_bus_error_setf(error
, SD_BUS_ERROR_INVALID_ARGS
, "Not supported for non-container machines.");
930 p
= procfs_file_alloca(machine
->leader
, "uid_map");
936 uid_t uid_base
, uid_shift
, uid_range
, converted
;
940 k
= fscanf(f
, UID_FMT
" " UID_FMT
" " UID_FMT
, &uid_base
, &uid_shift
, &uid_range
);
941 if (k
< 0 && feof(f
))
944 if (ferror(f
) && errno
> 0)
950 if (uid
< uid_base
|| uid
>= uid_base
+ uid_range
)
953 converted
= uid
- uid_base
+ uid_shift
;
954 if (!uid_is_valid(converted
))
955 return sd_bus_error_setf(error
, SD_BUS_ERROR_INVALID_ARGS
, "Invalid user ID " UID_FMT
, uid
);
957 return sd_bus_reply_method_return(message
, "u", (uint32_t) converted
);
960 return sd_bus_error_setf(error
, BUS_ERROR_NO_SUCH_USER_MAPPING
, "Machine '%s' has no matching user mappings.", name
);
963 static int method_map_to_machine_user(sd_bus_message
*message
, void *userdata
, sd_bus_error
*error
) {
964 Manager
*m
= userdata
;
970 r
= sd_bus_message_read(message
, "u", &uid
);
973 if (!uid_is_valid(uid
))
974 return sd_bus_error_setf(error
, SD_BUS_ERROR_INVALID_ARGS
, "Invalid user ID " UID_FMT
, uid
);
976 return sd_bus_error_setf(error
, BUS_ERROR_NO_SUCH_USER_MAPPING
, "User " UID_FMT
" belongs to host UID range", uid
);
978 HASHMAP_FOREACH(machine
, m
->machines
, i
) {
979 _cleanup_fclose_
FILE *f
= NULL
;
980 char p
[STRLEN("/proc//uid_map") + DECIMAL_STR_MAX(pid_t
) + 1];
982 if (machine
->class != MACHINE_CONTAINER
)
985 xsprintf(p
, "/proc/" UID_FMT
"/uid_map", machine
->leader
);
988 log_warning_errno(errno
, "Failed to open %s, ignoring,", p
);
993 _cleanup_free_
char *o
= NULL
;
994 uid_t uid_base
, uid_shift
, uid_range
, converted
;
998 k
= fscanf(f
, UID_FMT
" " UID_FMT
" " UID_FMT
, &uid_base
, &uid_shift
, &uid_range
);
999 if (k
< 0 && feof(f
))
1002 if (ferror(f
) && errno
> 0)
1008 /* The private user namespace is disabled, ignoring. */
1012 if (uid
< uid_shift
|| uid
>= uid_shift
+ uid_range
)
1015 converted
= (uid
- uid_shift
+ uid_base
);
1016 if (!uid_is_valid(converted
))
1017 return sd_bus_error_setf(error
, SD_BUS_ERROR_INVALID_ARGS
, "Invalid user ID " UID_FMT
, uid
);
1019 o
= machine_bus_path(machine
);
1023 return sd_bus_reply_method_return(message
, "sou", machine
->name
, o
, (uint32_t) converted
);
1027 return sd_bus_error_setf(error
, BUS_ERROR_NO_SUCH_USER_MAPPING
, "No matching user mapping for " UID_FMT
".", uid
);
1030 static int method_map_from_machine_group(sd_bus_message
*message
, void *groupdata
, sd_bus_error
*error
) {
1031 _cleanup_fclose_
FILE *f
= NULL
;
1032 Manager
*m
= groupdata
;
1033 const char *name
, *p
;
1038 r
= sd_bus_message_read(message
, "su", &name
, &gid
);
1042 if (!gid_is_valid(gid
))
1043 return sd_bus_error_setf(error
, SD_BUS_ERROR_INVALID_ARGS
, "Invalid group ID " GID_FMT
, gid
);
1045 machine
= hashmap_get(m
->machines
, name
);
1047 return sd_bus_error_setf(error
, BUS_ERROR_NO_SUCH_MACHINE
, "No machine '%s' known", name
);
1049 if (machine
->class != MACHINE_CONTAINER
)
1050 return sd_bus_error_setf(error
, SD_BUS_ERROR_INVALID_ARGS
, "Not supported for non-container machines.");
1052 p
= procfs_file_alloca(machine
->leader
, "gid_map");
1058 gid_t gid_base
, gid_shift
, gid_range
, converted
;
1062 k
= fscanf(f
, GID_FMT
" " GID_FMT
" " GID_FMT
, &gid_base
, &gid_shift
, &gid_range
);
1063 if (k
< 0 && feof(f
))
1066 if (ferror(f
) && errno
> 0)
1072 if (gid
< gid_base
|| gid
>= gid_base
+ gid_range
)
1075 converted
= gid
- gid_base
+ gid_shift
;
1076 if (!gid_is_valid(converted
))
1077 return sd_bus_error_setf(error
, SD_BUS_ERROR_INVALID_ARGS
, "Invalid group ID " GID_FMT
, gid
);
1079 return sd_bus_reply_method_return(message
, "u", (uint32_t) converted
);
1082 return sd_bus_error_setf(error
, BUS_ERROR_NO_SUCH_GROUP_MAPPING
, "Machine '%s' has no matching group mappings.", name
);
1085 static int method_map_to_machine_group(sd_bus_message
*message
, void *groupdata
, sd_bus_error
*error
) {
1086 Manager
*m
= groupdata
;
1092 r
= sd_bus_message_read(message
, "u", &gid
);
1095 if (!gid_is_valid(gid
))
1096 return sd_bus_error_setf(error
, SD_BUS_ERROR_INVALID_ARGS
, "Invalid group ID " GID_FMT
, gid
);
1098 return sd_bus_error_setf(error
, BUS_ERROR_NO_SUCH_GROUP_MAPPING
, "Group " GID_FMT
" belongs to host GID range", gid
);
1100 HASHMAP_FOREACH(machine
, m
->machines
, i
) {
1101 _cleanup_fclose_
FILE *f
= NULL
;
1102 char p
[STRLEN("/proc//gid_map") + DECIMAL_STR_MAX(pid_t
) + 1];
1104 if (machine
->class != MACHINE_CONTAINER
)
1107 xsprintf(p
, "/proc/" GID_FMT
"/gid_map", machine
->leader
);
1110 log_warning_errno(errno
, "Failed to open %s, ignoring,", p
);
1115 _cleanup_free_
char *o
= NULL
;
1116 gid_t gid_base
, gid_shift
, gid_range
, converted
;
1120 k
= fscanf(f
, GID_FMT
" " GID_FMT
" " GID_FMT
, &gid_base
, &gid_shift
, &gid_range
);
1121 if (k
< 0 && feof(f
))
1124 if (ferror(f
) && errno
> 0)
1130 /* The private user namespace is disabled, ignoring. */
1134 if (gid
< gid_shift
|| gid
>= gid_shift
+ gid_range
)
1137 converted
= (gid
- gid_shift
+ gid_base
);
1138 if (!gid_is_valid(converted
))
1139 return sd_bus_error_setf(error
, SD_BUS_ERROR_INVALID_ARGS
, "Invalid group ID " GID_FMT
, gid
);
1141 o
= machine_bus_path(machine
);
1145 return sd_bus_reply_method_return(message
, "sou", machine
->name
, o
, (uint32_t) converted
);
1149 return sd_bus_error_setf(error
, BUS_ERROR_NO_SUCH_GROUP_MAPPING
, "No matching group mapping for " GID_FMT
".", gid
);
1152 const sd_bus_vtable manager_vtable
[] = {
1153 SD_BUS_VTABLE_START(0),
1154 SD_BUS_PROPERTY("PoolPath", "s", property_get_pool_path
, 0, 0),
1155 SD_BUS_PROPERTY("PoolUsage", "t", property_get_pool_usage
, 0, 0),
1156 SD_BUS_PROPERTY("PoolLimit", "t", property_get_pool_limit
, 0, 0),
1157 SD_BUS_METHOD("GetMachine", "s", "o", method_get_machine
, SD_BUS_VTABLE_UNPRIVILEGED
),
1158 SD_BUS_METHOD("GetImage", "s", "o", method_get_image
, SD_BUS_VTABLE_UNPRIVILEGED
),
1159 SD_BUS_METHOD("GetMachineByPID", "u", "o", method_get_machine_by_pid
, SD_BUS_VTABLE_UNPRIVILEGED
),
1160 SD_BUS_METHOD("ListMachines", NULL
, "a(ssso)", method_list_machines
, SD_BUS_VTABLE_UNPRIVILEGED
),
1161 SD_BUS_METHOD("ListImages", NULL
, "a(ssbttto)", method_list_images
, SD_BUS_VTABLE_UNPRIVILEGED
),
1162 SD_BUS_METHOD("CreateMachine", "sayssusa(sv)", "o", method_create_machine
, 0),
1163 SD_BUS_METHOD("CreateMachineWithNetwork", "sayssusaia(sv)", "o", method_create_machine_with_network
, 0),
1164 SD_BUS_METHOD("RegisterMachine", "sayssus", "o", method_register_machine
, 0),
1165 SD_BUS_METHOD("RegisterMachineWithNetwork", "sayssusai", "o", method_register_machine_with_network
, 0),
1166 SD_BUS_METHOD("TerminateMachine", "s", NULL
, method_terminate_machine
, SD_BUS_VTABLE_UNPRIVILEGED
),
1167 SD_BUS_METHOD("KillMachine", "ssi", NULL
, method_kill_machine
, SD_BUS_VTABLE_UNPRIVILEGED
),
1168 SD_BUS_METHOD("GetMachineAddresses", "s", "a(iay)", method_get_machine_addresses
, SD_BUS_VTABLE_UNPRIVILEGED
),
1169 SD_BUS_METHOD("GetMachineOSRelease", "s", "a{ss}", method_get_machine_os_release
, SD_BUS_VTABLE_UNPRIVILEGED
),
1170 SD_BUS_METHOD("OpenMachinePTY", "s", "hs", method_open_machine_pty
, 0),
1171 SD_BUS_METHOD("OpenMachineLogin", "s", "hs", method_open_machine_login
, SD_BUS_VTABLE_UNPRIVILEGED
),
1172 SD_BUS_METHOD("OpenMachineShell", "sssasas", "hs", method_open_machine_shell
, SD_BUS_VTABLE_UNPRIVILEGED
),
1173 SD_BUS_METHOD("BindMountMachine", "sssbb", NULL
, method_bind_mount_machine
, SD_BUS_VTABLE_UNPRIVILEGED
),
1174 SD_BUS_METHOD("CopyFromMachine", "sss", NULL
, method_copy_machine
, SD_BUS_VTABLE_UNPRIVILEGED
),
1175 SD_BUS_METHOD("CopyToMachine", "sss", NULL
, method_copy_machine
, SD_BUS_VTABLE_UNPRIVILEGED
),
1176 SD_BUS_METHOD("OpenMachineRootDirectory", "s", "h", method_open_machine_root_directory
, SD_BUS_VTABLE_UNPRIVILEGED
),
1177 SD_BUS_METHOD("GetMachineUIDShift", "s", "u", method_get_machine_uid_shift
, SD_BUS_VTABLE_UNPRIVILEGED
),
1178 SD_BUS_METHOD("RemoveImage", "s", NULL
, method_remove_image
, SD_BUS_VTABLE_UNPRIVILEGED
),
1179 SD_BUS_METHOD("RenameImage", "ss", NULL
, method_rename_image
, SD_BUS_VTABLE_UNPRIVILEGED
),
1180 SD_BUS_METHOD("CloneImage", "ssb", NULL
, method_clone_image
, SD_BUS_VTABLE_UNPRIVILEGED
),
1181 SD_BUS_METHOD("MarkImageReadOnly", "sb", NULL
, method_mark_image_read_only
, SD_BUS_VTABLE_UNPRIVILEGED
),
1182 SD_BUS_METHOD("GetImageHostname", "s", "s", method_get_image_hostname
, SD_BUS_VTABLE_UNPRIVILEGED
),
1183 SD_BUS_METHOD("GetImageMachineID", "s", "ay", method_get_image_machine_id
, SD_BUS_VTABLE_UNPRIVILEGED
),
1184 SD_BUS_METHOD("GetImageMachineInfo", "s", "a{ss}", method_get_image_machine_info
, SD_BUS_VTABLE_UNPRIVILEGED
),
1185 SD_BUS_METHOD("GetImageOSRelease", "s", "a{ss}", method_get_image_os_release
, SD_BUS_VTABLE_UNPRIVILEGED
),
1186 SD_BUS_METHOD("SetPoolLimit", "t", NULL
, method_set_pool_limit
, SD_BUS_VTABLE_UNPRIVILEGED
),
1187 SD_BUS_METHOD("SetImageLimit", "st", NULL
, method_set_image_limit
, SD_BUS_VTABLE_UNPRIVILEGED
),
1188 SD_BUS_METHOD("CleanPool", "s", "a(st)", method_clean_pool
, SD_BUS_VTABLE_UNPRIVILEGED
),
1189 SD_BUS_METHOD("MapFromMachineUser", "su", "u", method_map_from_machine_user
, SD_BUS_VTABLE_UNPRIVILEGED
),
1190 SD_BUS_METHOD("MapToMachineUser", "u", "sou", method_map_to_machine_user
, SD_BUS_VTABLE_UNPRIVILEGED
),
1191 SD_BUS_METHOD("MapFromMachineGroup", "su", "u", method_map_from_machine_group
, SD_BUS_VTABLE_UNPRIVILEGED
),
1192 SD_BUS_METHOD("MapToMachineGroup", "u", "sou", method_map_to_machine_group
, SD_BUS_VTABLE_UNPRIVILEGED
),
1193 SD_BUS_SIGNAL("MachineNew", "so", 0),
1194 SD_BUS_SIGNAL("MachineRemoved", "so", 0),
1198 int match_job_removed(sd_bus_message
*message
, void *userdata
, sd_bus_error
*error
) {
1199 const char *path
, *result
, *unit
;
1200 Manager
*m
= userdata
;
1208 r
= sd_bus_message_read(message
, "uoss", &id
, &path
, &unit
, &result
);
1210 bus_log_parse_error(r
);
1214 machine
= hashmap_get(m
->machine_units
, unit
);
1218 if (streq_ptr(path
, machine
->scope_job
)) {
1219 machine
->scope_job
= mfree(machine
->scope_job
);
1221 if (machine
->started
) {
1222 if (streq(result
, "done"))
1223 machine_send_create_reply(machine
, NULL
);
1225 _cleanup_(sd_bus_error_free
) sd_bus_error e
= SD_BUS_ERROR_NULL
;
1227 sd_bus_error_setf(&e
, BUS_ERROR_JOB_FAILED
, "Start job for unit %s failed with '%s'", unit
, result
);
1229 machine_send_create_reply(machine
, &e
);
1233 machine_save(machine
);
1236 machine_add_to_gc_queue(machine
);
1240 int match_properties_changed(sd_bus_message
*message
, void *userdata
, sd_bus_error
*error
) {
1241 _cleanup_free_
char *unit
= NULL
;
1243 Manager
*m
= userdata
;
1250 path
= sd_bus_message_get_path(message
);
1254 r
= unit_name_from_dbus_path(path
, &unit
);
1255 if (r
== -EINVAL
) /* not for a unit */
1262 machine
= hashmap_get(m
->machine_units
, unit
);
1266 machine_add_to_gc_queue(machine
);
1270 int match_unit_removed(sd_bus_message
*message
, void *userdata
, sd_bus_error
*error
) {
1271 const char *path
, *unit
;
1272 Manager
*m
= userdata
;
1279 r
= sd_bus_message_read(message
, "so", &unit
, &path
);
1281 bus_log_parse_error(r
);
1285 machine
= hashmap_get(m
->machine_units
, unit
);
1289 machine_add_to_gc_queue(machine
);
1293 int match_reloading(sd_bus_message
*message
, void *userdata
, sd_bus_error
*error
) {
1294 Manager
*m
= userdata
;
1302 r
= sd_bus_message_read(message
, "b", &b
);
1304 bus_log_parse_error(r
);
1310 /* systemd finished reloading, let's recheck all our machines */
1311 log_debug("System manager has been reloaded, rechecking machines...");
1313 HASHMAP_FOREACH(machine
, m
->machines
, i
)
1314 machine_add_to_gc_queue(machine
);
1319 int manager_start_scope(
1324 const char *description
,
1325 sd_bus_message
*more_properties
,
1326 sd_bus_error
*error
,
1329 _cleanup_(sd_bus_message_unrefp
) sd_bus_message
*m
= NULL
, *reply
= NULL
;
1336 r
= sd_bus_message_new_method_call(
1339 "org.freedesktop.systemd1",
1340 "/org/freedesktop/systemd1",
1341 "org.freedesktop.systemd1.Manager",
1342 "StartTransientUnit");
1346 r
= sd_bus_message_append(m
, "ss", strempty(scope
), "fail");
1350 r
= sd_bus_message_open_container(m
, 'a', "(sv)");
1354 if (!isempty(slice
)) {
1355 r
= sd_bus_message_append(m
, "(sv)", "Slice", "s", slice
);
1360 if (!isempty(description
)) {
1361 r
= sd_bus_message_append(m
, "(sv)", "Description", "s", description
);
1366 r
= sd_bus_message_append(m
, "(sv)(sv)(sv)(sv)(sv)",
1367 "PIDs", "au", 1, pid
,
1369 "CollectMode", "s", "inactive-or-failed",
1371 "TasksMax", "t", UINT64_C(16384));
1375 if (more_properties
) {
1376 r
= sd_bus_message_copy(m
, more_properties
, true);
1381 r
= sd_bus_message_close_container(m
);
1385 r
= sd_bus_message_append(m
, "a(sa(sv))", 0);
1389 r
= sd_bus_call(manager
->bus
, m
, 0, error
, &reply
);
1397 r
= sd_bus_message_read(reply
, "o", &j
);
1411 int manager_unref_unit(
1414 sd_bus_error
*error
) {
1419 return sd_bus_call_method(
1421 "org.freedesktop.systemd1",
1422 "/org/freedesktop/systemd1",
1423 "org.freedesktop.systemd1.Manager",
1431 int manager_stop_unit(Manager
*manager
, const char *unit
, sd_bus_error
*error
, char **job
) {
1432 _cleanup_(sd_bus_message_unrefp
) sd_bus_message
*reply
= NULL
;
1438 r
= sd_bus_call_method(
1440 "org.freedesktop.systemd1",
1441 "/org/freedesktop/systemd1",
1442 "org.freedesktop.systemd1.Manager",
1446 "ss", unit
, "fail");
1448 if (sd_bus_error_has_name(error
, BUS_ERROR_NO_SUCH_UNIT
) ||
1449 sd_bus_error_has_name(error
, BUS_ERROR_LOAD_FAILED
)) {
1454 sd_bus_error_free(error
);
1465 r
= sd_bus_message_read(reply
, "o", &j
);
1479 int manager_kill_unit(Manager
*manager
, const char *unit
, int signo
, sd_bus_error
*error
) {
1483 return sd_bus_call_method(
1485 "org.freedesktop.systemd1",
1486 "/org/freedesktop/systemd1",
1487 "org.freedesktop.systemd1.Manager",
1491 "ssi", unit
, "all", signo
);
1494 int manager_unit_is_active(Manager
*manager
, const char *unit
) {
1495 _cleanup_(sd_bus_error_free
) sd_bus_error error
= SD_BUS_ERROR_NULL
;
1496 _cleanup_(sd_bus_message_unrefp
) sd_bus_message
*reply
= NULL
;
1497 _cleanup_free_
char *path
= NULL
;
1504 path
= unit_dbus_path_from_name(unit
);
1508 r
= sd_bus_get_property(
1510 "org.freedesktop.systemd1",
1512 "org.freedesktop.systemd1.Unit",
1518 if (sd_bus_error_has_name(&error
, SD_BUS_ERROR_NO_REPLY
) ||
1519 sd_bus_error_has_name(&error
, SD_BUS_ERROR_DISCONNECTED
))
1522 if (sd_bus_error_has_name(&error
, BUS_ERROR_NO_SUCH_UNIT
) ||
1523 sd_bus_error_has_name(&error
, BUS_ERROR_LOAD_FAILED
))
1529 r
= sd_bus_message_read(reply
, "s", &state
);
1533 return !STR_IN_SET(state
, "inactive", "failed");
1536 int manager_job_is_active(Manager
*manager
, const char *path
) {
1537 _cleanup_(sd_bus_error_free
) sd_bus_error error
= SD_BUS_ERROR_NULL
;
1538 _cleanup_(sd_bus_message_unrefp
) sd_bus_message
*reply
= NULL
;
1544 r
= sd_bus_get_property(
1546 "org.freedesktop.systemd1",
1548 "org.freedesktop.systemd1.Job",
1554 if (sd_bus_error_has_name(&error
, SD_BUS_ERROR_NO_REPLY
) ||
1555 sd_bus_error_has_name(&error
, SD_BUS_ERROR_DISCONNECTED
))
1558 if (sd_bus_error_has_name(&error
, SD_BUS_ERROR_UNKNOWN_OBJECT
))
1564 /* We don't actually care about the state really. The fact
1565 * that we could read the job state is enough for us */
1570 int manager_get_machine_by_pid(Manager
*m
, pid_t pid
, Machine
**machine
) {
1578 mm
= hashmap_get(m
->machine_leaders
, PID_TO_PTR(pid
));
1580 _cleanup_free_
char *unit
= NULL
;
1582 r
= cg_pid_get_unit(pid
, &unit
);
1584 mm
= hashmap_get(m
->machine_units
, unit
);
1593 int manager_add_machine(Manager
*m
, const char *name
, Machine
**_machine
) {
1599 machine
= hashmap_get(m
->machines
, name
);
1601 machine
= machine_new(m
, _MACHINE_CLASS_INVALID
, name
);
1607 *_machine
= machine
;