]> git.ipfire.org Git - thirdparty/systemd.git/blob - src/machine/machined-dbus.c
projects / thirdparty / systemd.git / blob
? search:
summary | shortlog | log | commit | commitdiff | tree
blame | history | raw | HEAD
Merge pull request #15265 from fbuihuu/mount-fixes
[thirdparty/systemd.git] / src / machine / machined-dbus.c
1 /* SPDX-License-Identifier: LGPL-2.1+ */
2
3 #include <errno.h>
4 #include <unistd.h>
5
6 #include "sd-id128.h"
7
8 #include "alloc-util.h"
9 #include "btrfs-util.h"
10 #include "bus-common-errors.h"
11 #include "bus-polkit.h"
12 #include "bus-util.h"
13 #include "cgroup-util.h"
14 #include "errno-util.h"
15 #include "fd-util.h"
16 #include "fileio.h"
17 #include "format-util.h"
18 #include "hostname-util.h"
19 #include "image-dbus.h"
20 #include "io-util.h"
21 #include "machine-dbus.h"
22 #include "machine-image.h"
23 #include "machine-pool.h"
24 #include "machined.h"
25 #include "missing_capability.h"
26 #include "path-util.h"
27 #include "process-util.h"
28 #include "stdio-util.h"
29 #include "strv.h"
30 #include "tmpfile-util.h"
31 #include "unit-name.h"
32 #include "user-util.h"
33
34 static BUS_DEFINE_PROPERTY_GET_GLOBAL(property_get_pool_path, "s", "/var/lib/machines");
35
36 static int property_get_pool_usage(
37 sd_bus *bus,
38 const char *path,
39 const char *interface,
40 const char *property,
41 sd_bus_message *reply,
42 void *userdata,
43 sd_bus_error *error) {
44
45 _cleanup_close_ int fd = -1;
46 uint64_t usage = (uint64_t) -1;
47
48 assert(bus);
49 assert(reply);
50
51 fd = open("/var/lib/machines", O_RDONLY|O_CLOEXEC|O_DIRECTORY);
52 if (fd >= 0) {
53 BtrfsQuotaInfo q;
54
55 if (btrfs_subvol_get_subtree_quota_fd(fd, 0, &q) >= 0)
56 usage = q.referenced;
57 }
58
59 return sd_bus_message_append(reply, "t", usage);
60 }
61
62 static int property_get_pool_limit(
63 sd_bus *bus,
64 const char *path,
65 const char *interface,
66 const char *property,
67 sd_bus_message *reply,
68 void *userdata,
69 sd_bus_error *error) {
70
71 _cleanup_close_ int fd = -1;
72 uint64_t size = (uint64_t) -1;
73
74 assert(bus);
75 assert(reply);
76
77 fd = open("/var/lib/machines", O_RDONLY|O_CLOEXEC|O_DIRECTORY);
78 if (fd >= 0) {
79 BtrfsQuotaInfo q;
80
81 if (btrfs_subvol_get_subtree_quota_fd(fd, 0, &q) >= 0)
82 size = q.referenced_max;
83 }
84
85 return sd_bus_message_append(reply, "t", size);
86 }
87
88 static int method_get_machine(sd_bus_message *message, void *userdata, sd_bus_error *error) {
89 _cleanup_free_ char *p = NULL;
90 Manager *m = userdata;
91 Machine *machine;
92 const char *name;
93 int r;
94
95 assert(message);
96 assert(m);
97
98 r = sd_bus_message_read(message, "s", &name);
99 if (r < 0)
100 return r;
101
102 machine = hashmap_get(m->machines, name);
103 if (!machine)
104 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_MACHINE, "No machine '%s' known", name);
105
106 p = machine_bus_path(machine);
107 if (!p)
108 return -ENOMEM;
109
110 return sd_bus_reply_method_return(message, "o", p);
111 }
112
113 static int method_get_image(sd_bus_message *message, void *userdata, sd_bus_error *error) {
114 _cleanup_free_ char *p = NULL;
115 _unused_ Manager *m = userdata;
116 const char *name;
117 int r;
118
119 assert(message);
120 assert(m);
121
122 r = sd_bus_message_read(message, "s", &name);
123 if (r < 0)
124 return r;
125
126 r = image_find(IMAGE_MACHINE, name, NULL);
127 if (r == -ENOENT)
128 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_IMAGE, "No image '%s' known", name);
129 if (r < 0)
130 return r;
131
132 p = image_bus_path(name);
133 if (!p)
134 return -ENOMEM;
135
136 return sd_bus_reply_method_return(message, "o", p);
137 }
138
139 static int method_get_machine_by_pid(sd_bus_message *message, void *userdata, sd_bus_error *error) {
140 _cleanup_free_ char *p = NULL;
141 Manager *m = userdata;
142 Machine *machine = NULL;
143 pid_t pid;
144 int r;
145
146 assert(message);
147 assert(m);
148
149 assert_cc(sizeof(pid_t) == sizeof(uint32_t));
150
151 r = sd_bus_message_read(message, "u", &pid);
152 if (r < 0)
153 return r;
154
155 if (pid < 0)
156 return -EINVAL;
157
158 if (pid == 0) {
159 _cleanup_(sd_bus_creds_unrefp) sd_bus_creds *creds = NULL;
160
161 r = sd_bus_query_sender_creds(message, SD_BUS_CREDS_PID, &creds);
162 if (r < 0)
163 return r;
164
165 r = sd_bus_creds_get_pid(creds, &pid);
166 if (r < 0)
167 return r;
168 }
169
170 r = manager_get_machine_by_pid(m, pid, &machine);
171 if (r < 0)
172 return r;
173 if (!machine)
174 return sd_bus_error_setf(error, BUS_ERROR_NO_MACHINE_FOR_PID, "PID "PID_FMT" does not belong to any known machine", pid);
175
176 p = machine_bus_path(machine);
177 if (!p)
178 return -ENOMEM;
179
180 return sd_bus_reply_method_return(message, "o", p);
181 }
182
183 static int method_list_machines(sd_bus_message *message, void *userdata, sd_bus_error *error) {
184 _cleanup_(sd_bus_message_unrefp) sd_bus_message *reply = NULL;
185 Manager *m = userdata;
186 Machine *machine;
187 Iterator i;
188 int r;
189
190 assert(message);
191 assert(m);
192
193 r = sd_bus_message_new_method_return(message, &reply);
194 if (r < 0)
195 return sd_bus_error_set_errno(error, r);
196
197 r = sd_bus_message_open_container(reply, 'a', "(ssso)");
198 if (r < 0)
199 return sd_bus_error_set_errno(error, r);
200
201 HASHMAP_FOREACH(machine, m->machines, i) {
202 _cleanup_free_ char *p = NULL;
203
204 p = machine_bus_path(machine);
205 if (!p)
206 return -ENOMEM;
207
208 r = sd_bus_message_append(reply, "(ssso)",
209 machine->name,
210 strempty(machine_class_to_string(machine->class)),
211 machine->service,
212 p);
213 if (r < 0)
214 return sd_bus_error_set_errno(error, r);
215 }
216
217 r = sd_bus_message_close_container(reply);
218 if (r < 0)
219 return sd_bus_error_set_errno(error, r);
220
221 return sd_bus_send(NULL, reply, NULL);
222 }
223
224 static int method_create_or_register_machine(Manager *manager, sd_bus_message *message, bool read_network, Machine **_m, sd_bus_error *error) {
225 const char *name, *service, *class, *root_directory;
226 const int32_t *netif = NULL;
227 MachineClass c;
228 uint32_t leader;
229 sd_id128_t id;
230 const void *v;
231 Machine *m;
232 size_t n, n_netif = 0;
233 int r;
234
235 assert(manager);
236 assert(message);
237 assert(_m);
238
239 r = sd_bus_message_read(message, "s", &name);
240 if (r < 0)
241 return r;
242 if (!machine_name_is_valid(name))
243 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid machine name");
244
245 r = sd_bus_message_read_array(message, 'y', &v, &n);
246 if (r < 0)
247 return r;
248 if (n == 0)
249 id = SD_ID128_NULL;
250 else if (n == 16)
251 memcpy(&id, v, n);
252 else
253 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid machine ID parameter");
254
255 r = sd_bus_message_read(message, "ssus", &service, &class, &leader, &root_directory);
256 if (r < 0)
257 return r;
258
259 if (read_network) {
260 size_t i;
261
262 r = sd_bus_message_read_array(message, 'i', (const void**) &netif, &n_netif);
263 if (r < 0)
264 return r;
265
266 n_netif /= sizeof(int32_t);
267
268 for (i = 0; i < n_netif; i++) {
269 if (netif[i] <= 0)
270 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid network interface index %i", netif[i]);
271 }
272 }
273
274 if (isempty(class))
275 c = _MACHINE_CLASS_INVALID;
276 else {
277 c = machine_class_from_string(class);
278 if (c < 0)
279 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid machine class parameter");
280 }
281
282 if (leader == 1)
283 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid leader PID");
284
285 if (!isempty(root_directory) && !path_is_absolute(root_directory))
286 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Root directory must be empty or an absolute path");
287
288 if (leader == 0) {
289 _cleanup_(sd_bus_creds_unrefp) sd_bus_creds *creds = NULL;
290
291 r = sd_bus_query_sender_creds(message, SD_BUS_CREDS_PID, &creds);
292 if (r < 0)
293 return r;
294
295 assert_cc(sizeof(uint32_t) == sizeof(pid_t));
296
297 r = sd_bus_creds_get_pid(creds, (pid_t*) &leader);
298 if (r < 0)
299 return r;
300 }
301
302 if (hashmap_get(manager->machines, name))
303 return sd_bus_error_setf(error, BUS_ERROR_MACHINE_EXISTS, "Machine '%s' already exists", name);
304
305 r = manager_add_machine(manager, name, &m);
306 if (r < 0)
307 return r;
308
309 m->leader = leader;
310 m->class = c;
311 m->id = id;
312
313 if (!isempty(service)) {
314 m->service = strdup(service);
315 if (!m->service) {
316 r = -ENOMEM;
317 goto fail;
318 }
319 }
320
321 if (!isempty(root_directory)) {
322 m->root_directory = strdup(root_directory);
323 if (!m->root_directory) {
324 r = -ENOMEM;
325 goto fail;
326 }
327 }
328
329 if (n_netif > 0) {
330 assert_cc(sizeof(int32_t) == sizeof(int));
331 m->netif = memdup(netif, sizeof(int32_t) * n_netif);
332 if (!m->netif) {
333 r = -ENOMEM;
334 goto fail;
335 }
336
337 m->n_netif = n_netif;
338 }
339
340 *_m = m;
341
342 return 1;
343
344 fail:
345 machine_add_to_gc_queue(m);
346 return r;
347 }
348
349 static int method_create_machine_internal(sd_bus_message *message, bool read_network, void *userdata, sd_bus_error *error) {
350 Manager *manager = userdata;
351 Machine *m = NULL;
352 int r;
353
354 assert(message);
355 assert(manager);
356
357 r = method_create_or_register_machine(manager, message, read_network, &m, error);
358 if (r < 0)
359 return r;
360
361 r = sd_bus_message_enter_container(message, 'a', "(sv)");
362 if (r < 0)
363 goto fail;
364
365 r = machine_start(m, message, error);
366 if (r < 0)
367 goto fail;
368
369 m->create_message = sd_bus_message_ref(message);
370 return 1;
371
372 fail:
373 machine_add_to_gc_queue(m);
374 return r;
375 }
376
377 static int method_create_machine_with_network(sd_bus_message *message, void *userdata, sd_bus_error *error) {
378 return method_create_machine_internal(message, true, userdata, error);
379 }
380
381 static int method_create_machine(sd_bus_message *message, void *userdata, sd_bus_error *error) {
382 return method_create_machine_internal(message, false, userdata, error);
383 }
384
385 static int method_register_machine_internal(sd_bus_message *message, bool read_network, void *userdata, sd_bus_error *error) {
386 Manager *manager = userdata;
387 _cleanup_free_ char *p = NULL;
388 Machine *m = NULL;
389 int r;
390
391 assert(message);
392 assert(manager);
393
394 r = method_create_or_register_machine(manager, message, read_network, &m, error);
395 if (r < 0)
396 return r;
397
398 r = cg_pid_get_unit(m->leader, &m->unit);
399 if (r < 0) {
400 r = sd_bus_error_set_errnof(error, r,
401 "Failed to determine unit of process "PID_FMT" : %m",
402 m->leader);
403 goto fail;
404 }
405
406 r = machine_start(m, NULL, error);
407 if (r < 0)
408 goto fail;
409
410 p = machine_bus_path(m);
411 if (!p) {
412 r = -ENOMEM;
413 goto fail;
414 }
415
416 return sd_bus_reply_method_return(message, "o", p);
417
418 fail:
419 machine_add_to_gc_queue(m);
420 return r;
421 }
422
423 static int method_register_machine_with_network(sd_bus_message *message, void *userdata, sd_bus_error *error) {
424 return method_register_machine_internal(message, true, userdata, error);
425 }
426
427 static int method_register_machine(sd_bus_message *message, void *userdata, sd_bus_error *error) {
428 return method_register_machine_internal(message, false, userdata, error);
429 }
430
431 static int redirect_method_to_machine(sd_bus_message *message, Manager *m, sd_bus_error *error, sd_bus_message_handler_t method) {
432 Machine *machine;
433 const char *name;
434 int r;
435
436 assert(message);
437 assert(m);
438 assert(method);
439
440 r = sd_bus_message_read(message, "s", &name);
441 if (r < 0)
442 return sd_bus_error_set_errno(error, r);
443
444 machine = hashmap_get(m->machines, name);
445 if (!machine)
446 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_MACHINE, "No machine '%s' known", name);
447
448 return method(message, machine, error);
449 }
450
451 static int method_unregister_machine(sd_bus_message *message, void *userdata, sd_bus_error *error) {
452 return redirect_method_to_machine(message, userdata, error, bus_machine_method_unregister);
453 }
454
455 static int method_terminate_machine(sd_bus_message *message, void *userdata, sd_bus_error *error) {
456 return redirect_method_to_machine(message, userdata, error, bus_machine_method_terminate);
457 }
458
459 static int method_kill_machine(sd_bus_message *message, void *userdata, sd_bus_error *error) {
460 return redirect_method_to_machine(message, userdata, error, bus_machine_method_kill);
461 }
462
463 static int method_get_machine_addresses(sd_bus_message *message, void *userdata, sd_bus_error *error) {
464 return redirect_method_to_machine(message, userdata, error, bus_machine_method_get_addresses);
465 }
466
467 static int method_get_machine_os_release(sd_bus_message *message, void *userdata, sd_bus_error *error) {
468 return redirect_method_to_machine(message, userdata, error, bus_machine_method_get_os_release);
469 }
470
471 static int method_list_images(sd_bus_message *message, void *userdata, sd_bus_error *error) {
472 _cleanup_(sd_bus_message_unrefp) sd_bus_message *reply = NULL;
473 _cleanup_hashmap_free_ Hashmap *images = NULL;
474 _unused_ Manager *m = userdata;
475 Image *image;
476 Iterator i;
477 int r;
478
479 assert(message);
480 assert(m);
481
482 images = hashmap_new(&image_hash_ops);
483 if (!images)
484 return -ENOMEM;
485
486 r = image_discover(IMAGE_MACHINE, images);
487 if (r < 0)
488 return r;
489
490 r = sd_bus_message_new_method_return(message, &reply);
491 if (r < 0)
492 return r;
493
494 r = sd_bus_message_open_container(reply, 'a', "(ssbttto)");
495 if (r < 0)
496 return r;
497
498 HASHMAP_FOREACH(image, images, i) {
499 _cleanup_free_ char *p = NULL;
500
501 p = image_bus_path(image->name);
502 if (!p)
503 return -ENOMEM;
504
505 r = sd_bus_message_append(reply, "(ssbttto)",
506 image->name,
507 image_type_to_string(image->type),
508 image->read_only,
509 image->crtime,
510 image->mtime,
511 image->usage,
512 p);
513 if (r < 0)
514 return r;
515 }
516
517 r = sd_bus_message_close_container(reply);
518 if (r < 0)
519 return r;
520
521 return sd_bus_send(NULL, reply, NULL);
522 }
523
524 static int method_open_machine_pty(sd_bus_message *message, void *userdata, sd_bus_error *error) {
525 return redirect_method_to_machine(message, userdata, error, bus_machine_method_open_pty);
526 }
527
528 static int method_open_machine_login(sd_bus_message *message, void *userdata, sd_bus_error *error) {
529 return redirect_method_to_machine(message, userdata, error, bus_machine_method_open_login);
530 }
531
532 static int method_open_machine_shell(sd_bus_message *message, void *userdata, sd_bus_error *error) {
533 return redirect_method_to_machine(message, userdata, error, bus_machine_method_open_shell);
534 }
535
536 static int method_bind_mount_machine(sd_bus_message *message, void *userdata, sd_bus_error *error) {
537 return redirect_method_to_machine(message, userdata, error, bus_machine_method_bind_mount);
538 }
539
540 static int method_copy_machine(sd_bus_message *message, void *userdata, sd_bus_error *error) {
541 return redirect_method_to_machine(message, userdata, error, bus_machine_method_copy);
542 }
543
544 static int method_open_machine_root_directory(sd_bus_message *message, void *userdata, sd_bus_error *error) {
545 return redirect_method_to_machine(message, userdata, error, bus_machine_method_open_root_directory);
546 }
547
548 static int method_get_machine_uid_shift(sd_bus_message *message, void *userdata, sd_bus_error *error) {
549 return redirect_method_to_machine(message, userdata, error, bus_machine_method_get_uid_shift);
550 }
551
552 static int redirect_method_to_image(sd_bus_message *message, Manager *m, sd_bus_error *error, sd_bus_message_handler_t method) {
553 _cleanup_(image_unrefp) Image* i = NULL;
554 const char *name;
555 int r;
556
557 assert(message);
558 assert(m);
559 assert(method);
560
561 r = sd_bus_message_read(message, "s", &name);
562 if (r < 0)
563 return r;
564
565 if (!image_name_is_valid(name))
566 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Image name '%s' is invalid.", name);
567
568 r = image_find(IMAGE_MACHINE, name, &i);
569 if (r == -ENOENT)
570 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_IMAGE, "No image '%s' known", name);
571 if (r < 0)
572 return r;
573
574 i->userdata = m;
575 return method(message, i, error);
576 }
577
578 static int method_remove_image(sd_bus_message *message, void *userdata, sd_bus_error *error) {
579 return redirect_method_to_image(message, userdata, error, bus_image_method_remove);
580 }
581
582 static int method_rename_image(sd_bus_message *message, void *userdata, sd_bus_error *error) {
583 return redirect_method_to_image(message, userdata, error, bus_image_method_rename);
584 }
585
586 static int method_clone_image(sd_bus_message *message, void *userdata, sd_bus_error *error) {
587 return redirect_method_to_image(message, userdata, error, bus_image_method_clone);
588 }
589
590 static int method_mark_image_read_only(sd_bus_message *message, void *userdata, sd_bus_error *error) {
591 return redirect_method_to_image(message, userdata, error, bus_image_method_mark_read_only);
592 }
593
594 static int method_get_image_hostname(sd_bus_message *message, void *userdata, sd_bus_error *error) {
595 return redirect_method_to_image(message, userdata, error, bus_image_method_get_hostname);
596 }
597
598 static int method_get_image_machine_id(sd_bus_message *message, void *userdata, sd_bus_error *error) {
599 return redirect_method_to_image(message, userdata, error, bus_image_method_get_machine_id);
600 }
601
602 static int method_get_image_machine_info(sd_bus_message *message, void *userdata, sd_bus_error *error) {
603 return redirect_method_to_image(message, userdata, error, bus_image_method_get_machine_info);
604 }
605
606 static int method_get_image_os_release(sd_bus_message *message, void *userdata, sd_bus_error *error) {
607 return redirect_method_to_image(message, userdata, error, bus_image_method_get_os_release);
608 }
609
610 static int clean_pool_done(Operation *operation, int ret, sd_bus_error *error) {
611 _cleanup_(sd_bus_message_unrefp) sd_bus_message *reply = NULL;
612 _cleanup_fclose_ FILE *f = NULL;
613 bool success;
614 size_t n;
615 int r;
616
617 assert(operation);
618 assert(operation->extra_fd >= 0);
619
620 if (lseek(operation->extra_fd, 0, SEEK_SET) == (off_t) -1)
621 return -errno;
622
623 f = take_fdopen(&operation->extra_fd, "r");
624 if (!f)
625 return -errno;
626
627 /* The resulting temporary file starts with a boolean value that indicates success or not. */
628 errno = 0;
629 n = fread(&success, 1, sizeof(success), f);
630 if (n != sizeof(success))
631 return ret < 0 ? ret : errno_or_else(EIO);
632
633 if (ret < 0) {
634 _cleanup_free_ char *name = NULL;
635
636 /* The clean-up operation failed. In this case the resulting temporary file should contain a boolean
637 * set to false followed by the name of the failed image. Let's try to read this and use it for the
638 * error message. If we can't read it, don't mind, and return the naked error. */
639
640 if (success) /* The resulting temporary file could not be updated, ignore it. */
641 return ret;
642
643 r = read_nul_string(f, LONG_LINE_MAX, &name);
644 if (r <= 0) /* Same here... */
645 return ret;
646
647 return sd_bus_error_set_errnof(error, ret, "Failed to remove image %s: %m", name);
648 }
649
650 assert(success);
651
652 r = sd_bus_message_new_method_return(operation->message, &reply);
653 if (r < 0)
654 return r;
655
656 r = sd_bus_message_open_container(reply, 'a', "(st)");
657 if (r < 0)
658 return r;
659
660 /* On success the resulting temporary file will contain a list of image names that were removed followed by
661 * their size on disk. Let's read that and turn it into a bus message. */
662 for (;;) {
663 _cleanup_free_ char *name = NULL;
664 uint64_t size;
665
666 r = read_nul_string(f, LONG_LINE_MAX, &name);
667 if (r < 0)
668 return r;
669 if (r == 0) /* reached the end */
670 break;
671
672 errno = 0;
673 n = fread(&size, 1, sizeof(size), f);
674 if (n != sizeof(size))
675 return errno_or_else(EIO);
676
677 r = sd_bus_message_append(reply, "(st)", name, size);
678 if (r < 0)
679 return r;
680 }
681
682 r = sd_bus_message_close_container(reply);
683 if (r < 0)
684 return r;
685
686 return sd_bus_send(NULL, reply, NULL);
687 }
688
689 static int method_clean_pool(sd_bus_message *message, void *userdata, sd_bus_error *error) {
690 enum {
691 REMOVE_ALL,
692 REMOVE_HIDDEN,
693 } mode;
694
695 _cleanup_close_pair_ int errno_pipe_fd[2] = { -1, -1 };
696 _cleanup_close_ int result_fd = -1;
697 Manager *m = userdata;
698 Operation *operation;
699 const char *mm;
700 pid_t child;
701 int r;
702
703 assert(message);
704
705 if (m->n_operations >= OPERATIONS_MAX)
706 return sd_bus_error_setf(error, SD_BUS_ERROR_LIMITS_EXCEEDED, "Too many ongoing operations.");
707
708 r = sd_bus_message_read(message, "s", &mm);
709 if (r < 0)
710 return r;
711
712 if (streq(mm, "all"))
713 mode = REMOVE_ALL;
714 else if (streq(mm, "hidden"))
715 mode = REMOVE_HIDDEN;
716 else
717 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Unknown mode '%s'.", mm);
718
719 r = bus_verify_polkit_async(
720 message,
721 CAP_SYS_ADMIN,
722 "org.freedesktop.machine1.manage-machines",
723 NULL,
724 false,
725 UID_INVALID,
726 &m->polkit_registry,
727 error);
728 if (r < 0)
729 return r;
730 if (r == 0)
731 return 1; /* Will call us back */
732
733 if (pipe2(errno_pipe_fd, O_CLOEXEC|O_NONBLOCK) < 0)
734 return sd_bus_error_set_errnof(error, errno, "Failed to create pipe: %m");
735
736 /* Create a temporary file we can dump information about deleted images into. We use a temporary file for this
737 * instead of a pipe or so, since this might grow quit large in theory and we don't want to process this
738 * continuously */
739 result_fd = open_tmpfile_unlinkable(NULL, O_RDWR|O_CLOEXEC);
740 if (result_fd < 0)
741 return -errno;
742
743 /* This might be a slow operation, run it asynchronously in a background process */
744 r = safe_fork("(sd-clean)", FORK_RESET_SIGNALS, &child);
745 if (r < 0)
746 return sd_bus_error_set_errnof(error, r, "Failed to fork(): %m");
747 if (r == 0) {
748 _cleanup_hashmap_free_ Hashmap *images = NULL;
749 bool success = true;
750 Image *image;
751 Iterator i;
752 ssize_t l;
753
754 errno_pipe_fd[0] = safe_close(errno_pipe_fd[0]);
755
756 images = hashmap_new(&image_hash_ops);
757 if (!images) {
758 r = -ENOMEM;
759 goto child_fail;
760 }
761
762 r = image_discover(IMAGE_MACHINE, images);
763 if (r < 0)
764 goto child_fail;
765
766 l = write(result_fd, &success, sizeof(success));
767 if (l < 0) {
768 r = -errno;
769 goto child_fail;
770 }
771
772 HASHMAP_FOREACH(image, images, i) {
773
774 /* We can't remove vendor images (i.e. those in /usr) */
775 if (IMAGE_IS_VENDOR(image))
776 continue;
777
778 if (IMAGE_IS_HOST(image))
779 continue;
780
781 if (mode == REMOVE_HIDDEN && !IMAGE_IS_HIDDEN(image))
782 continue;
783
784 r = image_remove(image);
785 if (r == -EBUSY) /* keep images that are currently being used. */
786 continue;
787 if (r < 0) {
788 /* If the operation failed, let's override everything we wrote, and instead write there at which image we failed. */
789 success = false;
790 (void) ftruncate(result_fd, 0);
791 (void) lseek(result_fd, 0, SEEK_SET);
792 (void) write(result_fd, &success, sizeof(success));
793 (void) write(result_fd, image->name, strlen(image->name)+1);
794 goto child_fail;
795 }
796
797 l = write(result_fd, image->name, strlen(image->name)+1);
798 if (l < 0) {
799 r = -errno;
800 goto child_fail;
801 }
802
803 l = write(result_fd, &image->usage_exclusive, sizeof(image->usage_exclusive));
804 if (l < 0) {
805 r = -errno;
806 goto child_fail;
807 }
808 }
809
810 result_fd = safe_close(result_fd);
811 _exit(EXIT_SUCCESS);
812
813 child_fail:
814 (void) write(errno_pipe_fd[1], &r, sizeof(r));
815 _exit(EXIT_FAILURE);
816 }
817
818 errno_pipe_fd[1] = safe_close(errno_pipe_fd[1]);
819
820 /* The clean-up might take a while, hence install a watch on the child and return */
821
822 r = operation_new(m, NULL, child, message, errno_pipe_fd[0], &operation);
823 if (r < 0) {
824 (void) sigkill_wait(child);
825 return r;
826 }
827
828 operation->extra_fd = result_fd;
829 operation->done = clean_pool_done;
830
831 result_fd = -1;
832 errno_pipe_fd[0] = -1;
833
834 return 1;
835 }
836
837 static int method_set_pool_limit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
838 Manager *m = userdata;
839 uint64_t limit;
840 int r;
841
842 assert(message);
843
844 r = sd_bus_message_read(message, "t", &limit);
845 if (r < 0)
846 return r;
847 if (!FILE_SIZE_VALID_OR_INFINITY(limit))
848 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "New limit out of range");
849
850 r = bus_verify_polkit_async(
851 message,
852 CAP_SYS_ADMIN,
853 "org.freedesktop.machine1.manage-machines",
854 NULL,
855 false,
856 UID_INVALID,
857 &m->polkit_registry,
858 error);
859 if (r < 0)
860 return r;
861 if (r == 0)
862 return 1; /* Will call us back */
863
864 /* Set up the machine directory if necessary */
865 r = setup_machine_directory(error);
866 if (r < 0)
867 return r;
868
869 (void) btrfs_qgroup_set_limit("/var/lib/machines", 0, limit);
870
871 r = btrfs_subvol_set_subtree_quota_limit("/var/lib/machines", 0, limit);
872 if (r == -ENOTTY)
873 return sd_bus_error_setf(error, SD_BUS_ERROR_NOT_SUPPORTED, "Quota is only supported on btrfs.");
874 if (r < 0)
875 return sd_bus_error_set_errnof(error, r, "Failed to adjust quota limit: %m");
876
877 return sd_bus_reply_method_return(message, NULL);
878 }
879
880 static int method_set_image_limit(sd_bus_message *message, void *userdata, sd_bus_error *error) {
881 return redirect_method_to_image(message, userdata, error, bus_image_method_set_limit);
882 }
883
884 static int method_map_from_machine_user(sd_bus_message *message, void *userdata, sd_bus_error *error) {
885 _cleanup_fclose_ FILE *f = NULL;
886 Manager *m = userdata;
887 const char *name, *p;
888 Machine *machine;
889 uint32_t uid;
890 int r;
891
892 r = sd_bus_message_read(message, "su", &name, &uid);
893 if (r < 0)
894 return r;
895
896 if (!uid_is_valid(uid))
897 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid user ID " UID_FMT, uid);
898
899 machine = hashmap_get(m->machines, name);
900 if (!machine)
901 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_MACHINE, "No machine '%s' known", name);
902
903 if (machine->class != MACHINE_CONTAINER)
904 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Not supported for non-container machines.");
905
906 p = procfs_file_alloca(machine->leader, "uid_map");
907 f = fopen(p, "re");
908 if (!f)
909 return -errno;
910
911 for (;;) {
912 uid_t uid_base, uid_shift, uid_range, converted;
913 int k;
914
915 errno = 0;
916 k = fscanf(f, UID_FMT " " UID_FMT " " UID_FMT, &uid_base, &uid_shift, &uid_range);
917 if (k < 0 && feof(f))
918 break;
919 if (k != 3) {
920 if (ferror(f))
921 return errno_or_else(EIO);
922
923 return -EIO;
924 }
925
926 if (uid < uid_base || uid >= uid_base + uid_range)
927 continue;
928
929 converted = uid - uid_base + uid_shift;
930 if (!uid_is_valid(converted))
931 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid user ID " UID_FMT, uid);
932
933 return sd_bus_reply_method_return(message, "u", (uint32_t) converted);
934 }
935
936 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_USER_MAPPING, "Machine '%s' has no matching user mappings.", name);
937 }
938
939 static int method_map_to_machine_user(sd_bus_message *message, void *userdata, sd_bus_error *error) {
940 Manager *m = userdata;
941 Machine *machine;
942 uid_t uid;
943 Iterator i;
944 int r;
945
946 r = sd_bus_message_read(message, "u", &uid);
947 if (r < 0)
948 return r;
949 if (!uid_is_valid(uid))
950 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid user ID " UID_FMT, uid);
951 if (uid < 0x10000)
952 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_USER_MAPPING, "User " UID_FMT " belongs to host UID range", uid);
953
954 HASHMAP_FOREACH(machine, m->machines, i) {
955 _cleanup_fclose_ FILE *f = NULL;
956 char p[STRLEN("/proc//uid_map") + DECIMAL_STR_MAX(pid_t) + 1];
957
958 if (machine->class != MACHINE_CONTAINER)
959 continue;
960
961 xsprintf(p, "/proc/" UID_FMT "/uid_map", machine->leader);
962 f = fopen(p, "re");
963 if (!f) {
964 log_warning_errno(errno, "Failed to open %s, ignoring,", p);
965 continue;
966 }
967
968 for (;;) {
969 _cleanup_free_ char *o = NULL;
970 uid_t uid_base, uid_shift, uid_range, converted;
971 int k;
972
973 errno = 0;
974 k = fscanf(f, UID_FMT " " UID_FMT " " UID_FMT, &uid_base, &uid_shift, &uid_range);
975 if (k < 0 && feof(f))
976 break;
977 if (k != 3) {
978 if (ferror(f))
979 return errno_or_else(EIO);
980
981 return -EIO;
982 }
983
984 /* The private user namespace is disabled, ignoring. */
985 if (uid_shift == 0)
986 continue;
987
988 if (uid < uid_shift || uid >= uid_shift + uid_range)
989 continue;
990
991 converted = (uid - uid_shift + uid_base);
992 if (!uid_is_valid(converted))
993 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid user ID " UID_FMT, uid);
994
995 o = machine_bus_path(machine);
996 if (!o)
997 return -ENOMEM;
998
999 return sd_bus_reply_method_return(message, "sou", machine->name, o, (uint32_t) converted);
1000 }
1001 }
1002
1003 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_USER_MAPPING, "No matching user mapping for " UID_FMT ".", uid);
1004 }
1005
1006 static int method_map_from_machine_group(sd_bus_message *message, void *groupdata, sd_bus_error *error) {
1007 _cleanup_fclose_ FILE *f = NULL;
1008 Manager *m = groupdata;
1009 const char *name, *p;
1010 Machine *machine;
1011 uint32_t gid;
1012 int r;
1013
1014 r = sd_bus_message_read(message, "su", &name, &gid);
1015 if (r < 0)
1016 return r;
1017
1018 if (!gid_is_valid(gid))
1019 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid group ID " GID_FMT, gid);
1020
1021 machine = hashmap_get(m->machines, name);
1022 if (!machine)
1023 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_MACHINE, "No machine '%s' known", name);
1024
1025 if (machine->class != MACHINE_CONTAINER)
1026 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Not supported for non-container machines.");
1027
1028 p = procfs_file_alloca(machine->leader, "gid_map");
1029 f = fopen(p, "re");
1030 if (!f)
1031 return -errno;
1032
1033 for (;;) {
1034 gid_t gid_base, gid_shift, gid_range, converted;
1035 int k;
1036
1037 errno = 0;
1038 k = fscanf(f, GID_FMT " " GID_FMT " " GID_FMT, &gid_base, &gid_shift, &gid_range);
1039 if (k < 0 && feof(f))
1040 break;
1041 if (k != 3) {
1042 if (ferror(f))
1043 return errno_or_else(EIO);
1044
1045 return -EIO;
1046 }
1047
1048 if (gid < gid_base || gid >= gid_base + gid_range)
1049 continue;
1050
1051 converted = gid - gid_base + gid_shift;
1052 if (!gid_is_valid(converted))
1053 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid group ID " GID_FMT, gid);
1054
1055 return sd_bus_reply_method_return(message, "u", (uint32_t) converted);
1056 }
1057
1058 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_GROUP_MAPPING, "Machine '%s' has no matching group mappings.", name);
1059 }
1060
1061 static int method_map_to_machine_group(sd_bus_message *message, void *groupdata, sd_bus_error *error) {
1062 Manager *m = groupdata;
1063 Machine *machine;
1064 gid_t gid;
1065 Iterator i;
1066 int r;
1067
1068 r = sd_bus_message_read(message, "u", &gid);
1069 if (r < 0)
1070 return r;
1071 if (!gid_is_valid(gid))
1072 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid group ID " GID_FMT, gid);
1073 if (gid < 0x10000)
1074 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_GROUP_MAPPING, "Group " GID_FMT " belongs to host GID range", gid);
1075
1076 HASHMAP_FOREACH(machine, m->machines, i) {
1077 _cleanup_fclose_ FILE *f = NULL;
1078 char p[STRLEN("/proc//gid_map") + DECIMAL_STR_MAX(pid_t) + 1];
1079
1080 if (machine->class != MACHINE_CONTAINER)
1081 continue;
1082
1083 xsprintf(p, "/proc/" GID_FMT "/gid_map", machine->leader);
1084 f = fopen(p, "re");
1085 if (!f) {
1086 log_warning_errno(errno, "Failed to open %s, ignoring,", p);
1087 continue;
1088 }
1089
1090 for (;;) {
1091 _cleanup_free_ char *o = NULL;
1092 gid_t gid_base, gid_shift, gid_range, converted;
1093 int k;
1094
1095 errno = 0;
1096 k = fscanf(f, GID_FMT " " GID_FMT " " GID_FMT, &gid_base, &gid_shift, &gid_range);
1097 if (k < 0 && feof(f))
1098 break;
1099 if (k != 3) {
1100 if (ferror(f))
1101 return errno_or_else(EIO);
1102
1103 return -EIO;
1104 }
1105
1106 /* The private user namespace is disabled, ignoring. */
1107 if (gid_shift == 0)
1108 continue;
1109
1110 if (gid < gid_shift || gid >= gid_shift + gid_range)
1111 continue;
1112
1113 converted = (gid - gid_shift + gid_base);
1114 if (!gid_is_valid(converted))
1115 return sd_bus_error_setf(error, SD_BUS_ERROR_INVALID_ARGS, "Invalid group ID " GID_FMT, gid);
1116
1117 o = machine_bus_path(machine);
1118 if (!o)
1119 return -ENOMEM;
1120
1121 return sd_bus_reply_method_return(message, "sou", machine->name, o, (uint32_t) converted);
1122 }
1123 }
1124
1125 return sd_bus_error_setf(error, BUS_ERROR_NO_SUCH_GROUP_MAPPING, "No matching group mapping for " GID_FMT ".", gid);
1126 }
1127
1128 const sd_bus_vtable manager_vtable[] = {
1129 SD_BUS_VTABLE_START(0),
1130
1131 SD_BUS_PROPERTY("PoolPath", "s", property_get_pool_path, 0, 0),
1132 SD_BUS_PROPERTY("PoolUsage", "t", property_get_pool_usage, 0, 0),
1133 SD_BUS_PROPERTY("PoolLimit", "t", property_get_pool_limit, 0, 0),
1134
1135 SD_BUS_METHOD_WITH_NAMES("GetMachine",
1136 "s",
1137 SD_BUS_PARAM(name),
1138 "o",
1139 SD_BUS_PARAM(machine),
1140 method_get_machine,
1141 SD_BUS_VTABLE_UNPRIVILEGED),
1142 SD_BUS_METHOD_WITH_NAMES("GetImage",
1143 "s",
1144 SD_BUS_PARAM(name),
1145 "o",
1146 SD_BUS_PARAM(image),
1147 method_get_image,
1148 SD_BUS_VTABLE_UNPRIVILEGED),
1149 SD_BUS_METHOD_WITH_NAMES("GetMachineByPID",
1150 "u",
1151 SD_BUS_PARAM(pid),
1152 "o",
1153 SD_BUS_PARAM(machine),
1154 method_get_machine_by_pid,
1155 SD_BUS_VTABLE_UNPRIVILEGED),
1156 SD_BUS_METHOD_WITH_NAMES("ListMachines",
1157 NULL,,
1158 "a(ssso)",
1159 SD_BUS_PARAM(machines),
1160 method_list_machines,
1161 SD_BUS_VTABLE_UNPRIVILEGED),
1162 SD_BUS_METHOD_WITH_NAMES("ListImages",
1163 NULL,,
1164 "a(ssbttto)",
1165 SD_BUS_PARAM(images),
1166 method_list_images,
1167 SD_BUS_VTABLE_UNPRIVILEGED),
1168 SD_BUS_METHOD_WITH_NAMES("CreateMachine",
1169 "sayssusa(sv)",
1170 SD_BUS_PARAM(name)
1171 SD_BUS_PARAM(id)
1172 SD_BUS_PARAM(service)
1173 SD_BUS_PARAM(class)
1174 SD_BUS_PARAM(leader)
1175 SD_BUS_PARAM(root_directory)
1176 SD_BUS_PARAM(scope_properties),
1177 "o",
1178 SD_BUS_PARAM(path),
1179 method_create_machine, 0),
1180 SD_BUS_METHOD_WITH_NAMES("CreateMachineWithNetwork",
1181 "sayssusaia(sv)",
1182 SD_BUS_PARAM(name)
1183 SD_BUS_PARAM(id)
1184 SD_BUS_PARAM(service)
1185 SD_BUS_PARAM(class)
1186 SD_BUS_PARAM(leader)
1187 SD_BUS_PARAM(root_directory)
1188 SD_BUS_PARAM(ifindices)
1189 SD_BUS_PARAM(scope_properties),
1190 "o",
1191 SD_BUS_PARAM(path),
1192 method_create_machine_with_network, 0),
1193 SD_BUS_METHOD_WITH_NAMES("RegisterMachine",
1194 "sayssus",
1195 SD_BUS_PARAM(name)
1196 SD_BUS_PARAM(id)
1197 SD_BUS_PARAM(service)
1198 SD_BUS_PARAM(class)
1199 SD_BUS_PARAM(leader)
1200 SD_BUS_PARAM(root_directory),
1201 "o",
1202 SD_BUS_PARAM(path),
1203 method_register_machine, 0),
1204 SD_BUS_METHOD_WITH_NAMES("RegisterMachineWithNetwork",
1205 "sayssusai",
1206 SD_BUS_PARAM(name)
1207 SD_BUS_PARAM(id)
1208 SD_BUS_PARAM(service)
1209 SD_BUS_PARAM(class)
1210 SD_BUS_PARAM(leader)
1211 SD_BUS_PARAM(root_directory)
1212 SD_BUS_PARAM(ifindices),
1213 "o",
1214 SD_BUS_PARAM(path),
1215 method_register_machine_with_network, 0),
1216 SD_BUS_METHOD_WITH_NAMES("UnregisterMachine",
1217 "s",
1218 SD_BUS_PARAM(name),
1219 NULL,,
1220 method_unregister_machine,
1221 SD_BUS_VTABLE_UNPRIVILEGED),
1222 SD_BUS_METHOD_WITH_NAMES("TerminateMachine",
1223 "s",
1224 SD_BUS_PARAM(id),
1225 NULL,,
1226 method_terminate_machine,
1227 SD_BUS_VTABLE_UNPRIVILEGED),
1228 SD_BUS_METHOD_WITH_NAMES("KillMachine",
1229 "ssi",
1230 SD_BUS_PARAM(name)
1231 SD_BUS_PARAM(who)
1232 SD_BUS_PARAM(signal),
1233 NULL,,
1234 method_kill_machine,
1235 SD_BUS_VTABLE_UNPRIVILEGED),
1236 SD_BUS_METHOD_WITH_NAMES("GetMachineAddresses",
1237 "s",
1238 SD_BUS_PARAM(name),
1239 "a(iay)",
1240 SD_BUS_PARAM(addresses),
1241 method_get_machine_addresses,
1242 SD_BUS_VTABLE_UNPRIVILEGED),
1243 SD_BUS_METHOD_WITH_NAMES("GetMachineOSRelease",
1244 "s",
1245 SD_BUS_PARAM(name),
1246 "a{ss}",
1247 SD_BUS_PARAM(fields),
1248 method_get_machine_os_release,
1249 SD_BUS_VTABLE_UNPRIVILEGED),
1250 SD_BUS_METHOD_WITH_NAMES("OpenMachinePTY",
1251 "s",
1252 SD_BUS_PARAM(name),
1253 "hs",
1254 SD_BUS_PARAM(pty)
1255 SD_BUS_PARAM(pty_path),
1256 method_open_machine_pty,
1257 0),
1258 SD_BUS_METHOD_WITH_NAMES("OpenMachineLogin",
1259 "s",
1260 SD_BUS_PARAM(name),
1261 "hs",
1262 SD_BUS_PARAM(pty)
1263 SD_BUS_PARAM(pty_path),
1264 method_open_machine_login,
1265 SD_BUS_VTABLE_UNPRIVILEGED),
1266 SD_BUS_METHOD_WITH_NAMES("OpenMachineShell",
1267 "sssasas",
1268 SD_BUS_PARAM(name)
1269 SD_BUS_PARAM(user)
1270 SD_BUS_PARAM(path)
1271 SD_BUS_PARAM(args)
1272 SD_BUS_PARAM(environment),
1273 "hs",
1274 SD_BUS_PARAM(pty)
1275 SD_BUS_PARAM(pty_path),
1276 method_open_machine_shell,
1277 SD_BUS_VTABLE_UNPRIVILEGED),
1278 SD_BUS_METHOD_WITH_NAMES("BindMountMachine",
1279 "sssbb",
1280 SD_BUS_PARAM(name)
1281 SD_BUS_PARAM(source)
1282 SD_BUS_PARAM(destination)
1283 SD_BUS_PARAM(read_only)
1284 SD_BUS_PARAM(mkdir),
1285 NULL,,
1286 method_bind_mount_machine,
1287 SD_BUS_VTABLE_UNPRIVILEGED),
1288 SD_BUS_METHOD_WITH_NAMES("CopyFromMachine",
1289 "sss",
1290 SD_BUS_PARAM(name)
1291 SD_BUS_PARAM(source)
1292 SD_BUS_PARAM(destination),
1293 NULL,,
1294 method_copy_machine,
1295 SD_BUS_VTABLE_UNPRIVILEGED),
1296 SD_BUS_METHOD_WITH_NAMES("CopyToMachine",
1297 "sss",
1298 SD_BUS_PARAM(name)
1299 SD_BUS_PARAM(source)
1300 SD_BUS_PARAM(destination),
1301 NULL,,
1302 method_copy_machine,
1303 SD_BUS_VTABLE_UNPRIVILEGED),
1304 SD_BUS_METHOD_WITH_NAMES("OpenMachineRootDirectory",
1305 "s",
1306 SD_BUS_PARAM(name),
1307 "h",
1308 SD_BUS_PARAM(fd),
1309 method_open_machine_root_directory,
1310 SD_BUS_VTABLE_UNPRIVILEGED),
1311 SD_BUS_METHOD_WITH_NAMES("GetMachineUIDShift",
1312 "s",
1313 SD_BUS_PARAM(name),
1314 "u",
1315 SD_BUS_PARAM(shift),
1316 method_get_machine_uid_shift,
1317 SD_BUS_VTABLE_UNPRIVILEGED),
1318 SD_BUS_METHOD_WITH_NAMES("RemoveImage",
1319 "s",
1320 SD_BUS_PARAM(name),
1321 NULL,,
1322 method_remove_image,
1323 SD_BUS_VTABLE_UNPRIVILEGED),
1324 SD_BUS_METHOD_WITH_NAMES("RenameImage",
1325 "ss",
1326 SD_BUS_PARAM(name)
1327 SD_BUS_PARAM(new_name),
1328 NULL,,
1329 method_rename_image,
1330 SD_BUS_VTABLE_UNPRIVILEGED),
1331 SD_BUS_METHOD_WITH_NAMES("CloneImage",
1332 "ssb",
1333 SD_BUS_PARAM(name)
1334 SD_BUS_PARAM(new_name)
1335 SD_BUS_PARAM(read_only),
1336 NULL,,
1337 method_clone_image,
1338 SD_BUS_VTABLE_UNPRIVILEGED),
1339 SD_BUS_METHOD_WITH_NAMES("MarkImageReadOnly",
1340 "sb",
1341 SD_BUS_PARAM(name)
1342 SD_BUS_PARAM(read_only),
1343 NULL,,
1344 method_mark_image_read_only,
1345 SD_BUS_VTABLE_UNPRIVILEGED),
1346 SD_BUS_METHOD_WITH_NAMES("GetImageHostname",
1347 "s",
1348 SD_BUS_PARAM(name),
1349 "s",
1350 SD_BUS_PARAM(hostname),
1351 method_get_image_hostname,
1352 SD_BUS_VTABLE_UNPRIVILEGED),
1353 SD_BUS_METHOD_WITH_NAMES("GetImageMachineID",
1354 "s",
1355 SD_BUS_PARAM(name),
1356 "ay",
1357 SD_BUS_PARAM(id),
1358 method_get_image_machine_id,
1359 SD_BUS_VTABLE_UNPRIVILEGED),
1360 SD_BUS_METHOD_WITH_NAMES("GetImageMachineInfo",
1361 "s",
1362 SD_BUS_PARAM(name),
1363 "a{ss}",
1364 SD_BUS_PARAM(machine_info),
1365 method_get_image_machine_info,
1366 SD_BUS_VTABLE_UNPRIVILEGED),
1367 SD_BUS_METHOD_WITH_NAMES("GetImageOSRelease",
1368 "s",
1369 SD_BUS_PARAM(name),
1370 "a{ss}",
1371 SD_BUS_PARAM(os_release),
1372 method_get_image_os_release,
1373 SD_BUS_VTABLE_UNPRIVILEGED),
1374 SD_BUS_METHOD_WITH_NAMES("SetPoolLimit",
1375 "t",
1376 SD_BUS_PARAM(size),
1377 NULL,,
1378 method_set_pool_limit,
1379 SD_BUS_VTABLE_UNPRIVILEGED),
1380 SD_BUS_METHOD_WITH_NAMES("SetImageLimit",
1381 "st",
1382 SD_BUS_PARAM(name)
1383 SD_BUS_PARAM(size),
1384 NULL,,
1385 method_set_image_limit,
1386 SD_BUS_VTABLE_UNPRIVILEGED),
1387 SD_BUS_METHOD_WITH_NAMES("CleanPool",
1388 "s",
1389 SD_BUS_PARAM(mode),
1390 "a(st)",
1391 SD_BUS_PARAM(images),
1392 method_clean_pool,
1393 SD_BUS_VTABLE_UNPRIVILEGED),
1394 SD_BUS_METHOD_WITH_NAMES("MapFromMachineUser",
1395 "su",
1396 SD_BUS_PARAM(name)
1397 SD_BUS_PARAM(uid_inner),
1398 "u",
1399 SD_BUS_PARAM(uid_outer),
1400 method_map_from_machine_user,
1401 SD_BUS_VTABLE_UNPRIVILEGED),
1402 SD_BUS_METHOD_WITH_NAMES("MapToMachineUser",
1403 "u",
1404 SD_BUS_PARAM(uid_outer),
1405 "sou",
1406 SD_BUS_PARAM(machine_name)
1407 SD_BUS_PARAM(machine_path)
1408 SD_BUS_PARAM(uid_inner),
1409 method_map_to_machine_user,
1410 SD_BUS_VTABLE_UNPRIVILEGED),
1411 SD_BUS_METHOD_WITH_NAMES("MapFromMachineGroup",
1412 "su",
1413 SD_BUS_PARAM(name)
1414 SD_BUS_PARAM(gid_inner),
1415 "u",
1416 SD_BUS_PARAM(gid_outer),
1417 method_map_from_machine_group,
1418 SD_BUS_VTABLE_UNPRIVILEGED),
1419 SD_BUS_METHOD_WITH_NAMES("MapToMachineGroup",
1420 "u",
1421 SD_BUS_PARAM(gid_outer),
1422 "sou",
1423 SD_BUS_PARAM(machine_name)
1424 SD_BUS_PARAM(machine_path)
1425 SD_BUS_PARAM(gid_inner),
1426 method_map_to_machine_group,
1427 SD_BUS_VTABLE_UNPRIVILEGED),
1428
1429 SD_BUS_SIGNAL_WITH_NAMES("MachineNew",
1430 "so",
1431 SD_BUS_PARAM(machine)
1432 SD_BUS_PARAM(path),
1433 0),
1434 SD_BUS_SIGNAL_WITH_NAMES("MachineRemoved",
1435 "so",
1436 SD_BUS_PARAM(machine)
1437 SD_BUS_PARAM(path),
1438 0),
1439
1440 SD_BUS_VTABLE_END
1441 };
1442
1443 const BusObjectImplementation manager_object = {
1444 "/org/freedesktop/machine1",
1445 "org.freedesktop.machine1.Manager",
1446 .vtables = BUS_VTABLES(manager_vtable),
1447 .children = BUS_IMPLEMENTATIONS( &machine_object,
1448 &image_object ),
1449 };
1450
1451 int match_job_removed(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1452 const char *path, *result, *unit;
1453 Manager *m = userdata;
1454 Machine *machine;
1455 uint32_t id;
1456 int r;
1457
1458 assert(message);
1459 assert(m);
1460
1461 r = sd_bus_message_read(message, "uoss", &id, &path, &unit, &result);
1462 if (r < 0) {
1463 bus_log_parse_error(r);
1464 return 0;
1465 }
1466
1467 machine = hashmap_get(m->machine_units, unit);
1468 if (!machine)
1469 return 0;
1470
1471 if (streq_ptr(path, machine->scope_job)) {
1472 machine->scope_job = mfree(machine->scope_job);
1473
1474 if (machine->started) {
1475 if (streq(result, "done"))
1476 machine_send_create_reply(machine, NULL);
1477 else {
1478 _cleanup_(sd_bus_error_free) sd_bus_error e = SD_BUS_ERROR_NULL;
1479
1480 sd_bus_error_setf(&e, BUS_ERROR_JOB_FAILED, "Start job for unit %s failed with '%s'", unit, result);
1481
1482 machine_send_create_reply(machine, &e);
1483 }
1484 }
1485
1486 machine_save(machine);
1487 }
1488
1489 machine_add_to_gc_queue(machine);
1490 return 0;
1491 }
1492
1493 int match_properties_changed(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1494 _cleanup_free_ char *unit = NULL;
1495 const char *path;
1496 Manager *m = userdata;
1497 Machine *machine;
1498 int r;
1499
1500 assert(message);
1501 assert(m);
1502
1503 path = sd_bus_message_get_path(message);
1504 if (!path)
1505 return 0;
1506
1507 r = unit_name_from_dbus_path(path, &unit);
1508 if (r == -EINVAL) /* not for a unit */
1509 return 0;
1510 if (r < 0) {
1511 log_oom();
1512 return 0;
1513 }
1514
1515 machine = hashmap_get(m->machine_units, unit);
1516 if (!machine)
1517 return 0;
1518
1519 machine_add_to_gc_queue(machine);
1520 return 0;
1521 }
1522
1523 int match_unit_removed(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1524 const char *path, *unit;
1525 Manager *m = userdata;
1526 Machine *machine;
1527 int r;
1528
1529 assert(message);
1530 assert(m);
1531
1532 r = sd_bus_message_read(message, "so", &unit, &path);
1533 if (r < 0) {
1534 bus_log_parse_error(r);
1535 return 0;
1536 }
1537
1538 machine = hashmap_get(m->machine_units, unit);
1539 if (!machine)
1540 return 0;
1541
1542 machine_add_to_gc_queue(machine);
1543 return 0;
1544 }
1545
1546 int match_reloading(sd_bus_message *message, void *userdata, sd_bus_error *error) {
1547 Manager *m = userdata;
1548 Machine *machine;
1549 Iterator i;
1550 int b, r;
1551
1552 assert(message);
1553 assert(m);
1554
1555 r = sd_bus_message_read(message, "b", &b);
1556 if (r < 0) {
1557 bus_log_parse_error(r);
1558 return 0;
1559 }
1560 if (b)
1561 return 0;
1562
1563 /* systemd finished reloading, let's recheck all our machines */
1564 log_debug("System manager has been reloaded, rechecking machines...");
1565
1566 HASHMAP_FOREACH(machine, m->machines, i)
1567 machine_add_to_gc_queue(machine);
1568
1569 return 0;
1570 }
1571
1572 int manager_unref_unit(
1573 Manager *m,
1574 const char *unit,
1575 sd_bus_error *error) {
1576
1577 assert(m);
1578 assert(unit);
1579
1580 return bus_call_method(m->bus, bus_systemd_mgr, "UnrefUnit", error, NULL, "s", unit);
1581 }
1582
1583 int manager_stop_unit(Manager *manager, const char *unit, sd_bus_error *error, char **job) {
1584 _cleanup_(sd_bus_message_unrefp) sd_bus_message *reply = NULL;
1585 int r;
1586
1587 assert(manager);
1588 assert(unit);
1589
1590 r = bus_call_method(manager->bus, bus_systemd_mgr, "StopUnit", error, &reply, "ss", unit, "fail");
1591 if (r < 0) {
1592 if (sd_bus_error_has_name(error, BUS_ERROR_NO_SUCH_UNIT) ||
1593 sd_bus_error_has_name(error, BUS_ERROR_LOAD_FAILED)) {
1594
1595 if (job)
1596 *job = NULL;
1597
1598 sd_bus_error_free(error);
1599 return 0;
1600 }
1601
1602 return r;
1603 }
1604
1605 if (job) {
1606 const char *j;
1607 char *copy;
1608
1609 r = sd_bus_message_read(reply, "o", &j);
1610 if (r < 0)
1611 return r;
1612
1613 copy = strdup(j);
1614 if (!copy)
1615 return -ENOMEM;
1616
1617 *job = copy;
1618 }
1619
1620 return 1;
1621 }
1622
1623 int manager_kill_unit(Manager *manager, const char *unit, int signo, sd_bus_error *error) {
1624 assert(manager);
1625 assert(unit);
1626
1627 return bus_call_method(manager->bus, bus_systemd_mgr, "KillUnit", error, NULL, "ssi", unit, "all", signo);
1628 }
1629
1630 int manager_unit_is_active(Manager *manager, const char *unit) {
1631 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1632 _cleanup_(sd_bus_message_unrefp) sd_bus_message *reply = NULL;
1633 _cleanup_free_ char *path = NULL;
1634 const char *state;
1635 int r;
1636
1637 assert(manager);
1638 assert(unit);
1639
1640 path = unit_dbus_path_from_name(unit);
1641 if (!path)
1642 return -ENOMEM;
1643
1644 r = sd_bus_get_property(
1645 manager->bus,
1646 "org.freedesktop.systemd1",
1647 path,
1648 "org.freedesktop.systemd1.Unit",
1649 "ActiveState",
1650 &error,
1651 &reply,
1652 "s");
1653 if (r < 0) {
1654 if (sd_bus_error_has_name(&error, SD_BUS_ERROR_NO_REPLY) ||
1655 sd_bus_error_has_name(&error, SD_BUS_ERROR_DISCONNECTED))
1656 return true;
1657
1658 if (sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_UNIT) ||
1659 sd_bus_error_has_name(&error, BUS_ERROR_LOAD_FAILED))
1660 return false;
1661
1662 return r;
1663 }
1664
1665 r = sd_bus_message_read(reply, "s", &state);
1666 if (r < 0)
1667 return -EINVAL;
1668
1669 return !STR_IN_SET(state, "inactive", "failed");
1670 }
1671
1672 int manager_job_is_active(Manager *manager, const char *path) {
1673 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1674 _cleanup_(sd_bus_message_unrefp) sd_bus_message *reply = NULL;
1675 int r;
1676
1677 assert(manager);
1678 assert(path);
1679
1680 r = sd_bus_get_property(
1681 manager->bus,
1682 "org.freedesktop.systemd1",
1683 path,
1684 "org.freedesktop.systemd1.Job",
1685 "State",
1686 &error,
1687 &reply,
1688 "s");
1689 if (r < 0) {
1690 if (sd_bus_error_has_name(&error, SD_BUS_ERROR_NO_REPLY) ||
1691 sd_bus_error_has_name(&error, SD_BUS_ERROR_DISCONNECTED))
1692 return true;
1693
1694 if (sd_bus_error_has_name(&error, SD_BUS_ERROR_UNKNOWN_OBJECT))
1695 return false;
1696
1697 return r;
1698 }
1699
1700 /* We don't actually care about the state really. The fact
1701 * that we could read the job state is enough for us */
1702
1703 return true;
1704 }
1705
1706 int manager_get_machine_by_pid(Manager *m, pid_t pid, Machine **machine) {
1707 Machine *mm;
1708 int r;
1709
1710 assert(m);
1711 assert(pid >= 1);
1712 assert(machine);
1713
1714 mm = hashmap_get(m->machine_leaders, PID_TO_PTR(pid));
1715 if (!mm) {
1716 _cleanup_free_ char *unit = NULL;
1717
1718 r = cg_pid_get_unit(pid, &unit);
1719 if (r >= 0)
1720 mm = hashmap_get(m->machine_units, unit);
1721 }
1722 if (!mm)
1723 return 0;
1724
1725 *machine = mm;
1726 return 1;
1727 }
1728
1729 int manager_add_machine(Manager *m, const char *name, Machine **_machine) {
1730 Machine *machine;
1731
1732 assert(m);
1733 assert(name);
1734
1735 machine = hashmap_get(m->machines, name);
1736 if (!machine) {
1737 machine = machine_new(m, _MACHINE_CLASS_INVALID, name);
1738 if (!machine)
1739 return -ENOMEM;
1740 }
1741
1742 if (_machine)
1743 *_machine = machine;
1744
1745 return 0;
1746 }
Unnamed repository; edit this file 'description' to name the repository.