]> git.ipfire.org Git - thirdparty/systemd.git/blob - src/network/networkd-link.c
projects / thirdparty / systemd.git / blob
? search:
summary | shortlog | log | commit | commitdiff | tree
blame | history | raw | HEAD
Merge pull request #10976 from yuwata/typesafe-netlink-call
[thirdparty/systemd.git] / src / network / networkd-link.c
1 /* SPDX-License-Identifier: LGPL-2.1+ */
2
3 #include <netinet/ether.h>
4 #include <linux/if.h>
5 #include <linux/can/netlink.h>
6 #include <unistd.h>
7 #include <stdio_ext.h>
8
9 #include "alloc-util.h"
10 #include "bus-util.h"
11 #include "dhcp-identifier.h"
12 #include "dhcp-lease-internal.h"
13 #include "env-file.h"
14 #include "fd-util.h"
15 #include "fileio.h"
16 #include "netlink-util.h"
17 #include "network-internal.h"
18 #include "networkd-ipv6-proxy-ndp.h"
19 #include "networkd-lldp-tx.h"
20 #include "networkd-manager.h"
21 #include "networkd-ndisc.h"
22 #include "networkd-radv.h"
23 #include "networkd-routing-policy-rule.h"
24 #include "set.h"
25 #include "socket-util.h"
26 #include "stdio-util.h"
27 #include "string-table.h"
28 #include "strv.h"
29 #include "tmpfile-util.h"
30 #include "util.h"
31 #include "virt.h"
32
33 DUID* link_get_duid(Link *link) {
34 if (link->network->duid.type != _DUID_TYPE_INVALID)
35 return &link->network->duid;
36 else
37 return &link->manager->duid;
38 }
39
40 static bool link_dhcp6_enabled(Link *link) {
41 assert(link);
42
43 if (!socket_ipv6_is_supported())
44 return false;
45
46 if (link->flags & IFF_LOOPBACK)
47 return false;
48
49 if (!link->network)
50 return false;
51
52 return link->network->dhcp & ADDRESS_FAMILY_IPV6;
53 }
54
55 static bool link_dhcp4_enabled(Link *link) {
56 assert(link);
57
58 if (link->flags & IFF_LOOPBACK)
59 return false;
60
61 if (!link->network)
62 return false;
63
64 return link->network->dhcp & ADDRESS_FAMILY_IPV4;
65 }
66
67 static bool link_dhcp4_server_enabled(Link *link) {
68 assert(link);
69
70 if (link->flags & IFF_LOOPBACK)
71 return false;
72
73 if (!link->network)
74 return false;
75
76 return link->network->dhcp_server;
77 }
78
79 static bool link_ipv4ll_enabled(Link *link) {
80 assert(link);
81
82 if (link->flags & IFF_LOOPBACK)
83 return false;
84
85 if (!link->network)
86 return false;
87
88 if (streq_ptr(link->kind, "wireguard"))
89 return false;
90
91 return link->network->link_local & ADDRESS_FAMILY_IPV4;
92 }
93
94 static bool link_ipv6ll_enabled(Link *link) {
95 assert(link);
96
97 if (!socket_ipv6_is_supported())
98 return false;
99
100 if (link->flags & IFF_LOOPBACK)
101 return false;
102
103 if (!link->network)
104 return false;
105
106 if (streq_ptr(link->kind, "wireguard"))
107 return false;
108
109 return link->network->link_local & ADDRESS_FAMILY_IPV6;
110 }
111
112 static bool link_ipv6_enabled(Link *link) {
113 assert(link);
114
115 if (!socket_ipv6_is_supported())
116 return false;
117
118 if (link->network->bridge)
119 return false;
120
121 /* DHCPv6 client will not be started if no IPv6 link-local address is configured. */
122 return link_ipv6ll_enabled(link) || network_has_static_ipv6_addresses(link->network);
123 }
124
125 static bool link_radv_enabled(Link *link) {
126 assert(link);
127
128 if (!link_ipv6ll_enabled(link))
129 return false;
130
131 return link->network->router_prefix_delegation != RADV_PREFIX_DELEGATION_NONE;
132 }
133
134 static bool link_lldp_rx_enabled(Link *link) {
135 assert(link);
136
137 if (link->flags & IFF_LOOPBACK)
138 return false;
139
140 if (link->iftype != ARPHRD_ETHER)
141 return false;
142
143 if (!link->network)
144 return false;
145
146 /* LLDP should be handled on bridge slaves as those have a direct
147 * connection to their peers not on the bridge master. Linux doesn't
148 * even (by default) forward lldp packets to the bridge master.*/
149 if (streq_ptr("bridge", link->kind))
150 return false;
151
152 return link->network->lldp_mode != LLDP_MODE_NO;
153 }
154
155 static bool link_lldp_emit_enabled(Link *link) {
156 assert(link);
157
158 if (link->flags & IFF_LOOPBACK)
159 return false;
160
161 if (link->iftype != ARPHRD_ETHER)
162 return false;
163
164 if (!link->network)
165 return false;
166
167 return link->network->lldp_emit != LLDP_EMIT_NO;
168 }
169
170 static bool link_ipv4_forward_enabled(Link *link) {
171 assert(link);
172
173 if (link->flags & IFF_LOOPBACK)
174 return false;
175
176 if (!link->network)
177 return false;
178
179 if (link->network->ip_forward == _ADDRESS_FAMILY_BOOLEAN_INVALID)
180 return false;
181
182 return link->network->ip_forward & ADDRESS_FAMILY_IPV4;
183 }
184
185 static bool link_ipv6_forward_enabled(Link *link) {
186 assert(link);
187
188 if (!socket_ipv6_is_supported())
189 return false;
190
191 if (link->flags & IFF_LOOPBACK)
192 return false;
193
194 if (!link->network)
195 return false;
196
197 if (link->network->ip_forward == _ADDRESS_FAMILY_BOOLEAN_INVALID)
198 return false;
199
200 return link->network->ip_forward & ADDRESS_FAMILY_IPV6;
201 }
202
203 static bool link_proxy_arp_enabled(Link *link) {
204 assert(link);
205
206 if (link->flags & IFF_LOOPBACK)
207 return false;
208
209 if (!link->network)
210 return false;
211
212 if (link->network->proxy_arp < 0)
213 return false;
214
215 return true;
216 }
217
218 static bool link_ipv6_accept_ra_enabled(Link *link) {
219 assert(link);
220
221 if (!socket_ipv6_is_supported())
222 return false;
223
224 if (link->flags & IFF_LOOPBACK)
225 return false;
226
227 if (!link->network)
228 return false;
229
230 if (!link_ipv6ll_enabled(link))
231 return false;
232
233 /* If unset use system default (enabled if local forwarding is disabled.
234 * disabled if local forwarding is enabled).
235 * If set, ignore or enforce RA independent of local forwarding state.
236 */
237 if (link->network->ipv6_accept_ra < 0)
238 /* default to accept RA if ip_forward is disabled and ignore RA if ip_forward is enabled */
239 return !link_ipv6_forward_enabled(link);
240 else if (link->network->ipv6_accept_ra > 0)
241 /* accept RA even if ip_forward is enabled */
242 return true;
243 else
244 /* ignore RA */
245 return false;
246 }
247
248 static IPv6PrivacyExtensions link_ipv6_privacy_extensions(Link *link) {
249 assert(link);
250
251 if (!socket_ipv6_is_supported())
252 return _IPV6_PRIVACY_EXTENSIONS_INVALID;
253
254 if (link->flags & IFF_LOOPBACK)
255 return _IPV6_PRIVACY_EXTENSIONS_INVALID;
256
257 if (!link->network)
258 return _IPV6_PRIVACY_EXTENSIONS_INVALID;
259
260 return link->network->ipv6_privacy_extensions;
261 }
262
263 static int link_enable_ipv6(Link *link) {
264 const char *p = NULL;
265 bool disabled;
266 int r;
267
268 if (link->flags & IFF_LOOPBACK)
269 return 0;
270
271 disabled = !link_ipv6_enabled(link);
272
273 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/disable_ipv6");
274
275 r = write_string_file(p, one_zero(disabled), WRITE_STRING_FILE_VERIFY_ON_FAILURE | WRITE_STRING_FILE_DISABLE_BUFFER);
276 if (r < 0)
277 log_link_warning_errno(link, r, "Cannot %s IPv6 for interface %s: %m",
278 enable_disable(!disabled), link->ifname);
279 else
280 log_link_info(link, "IPv6 successfully %sd", enable_disable(!disabled));
281
282 return 0;
283 }
284
285 void link_update_operstate(Link *link) {
286 LinkOperationalState operstate;
287 assert(link);
288
289 if (link->kernel_operstate == IF_OPER_DORMANT)
290 operstate = LINK_OPERSTATE_DORMANT;
291 else if (link_has_carrier(link)) {
292 Address *address;
293 uint8_t scope = RT_SCOPE_NOWHERE;
294 Iterator i;
295
296 /* if we have carrier, check what addresses we have */
297 SET_FOREACH(address, link->addresses, i) {
298 if (!address_is_ready(address))
299 continue;
300
301 if (address->scope < scope)
302 scope = address->scope;
303 }
304
305 /* for operstate we also take foreign addresses into account */
306 SET_FOREACH(address, link->addresses_foreign, i) {
307 if (!address_is_ready(address))
308 continue;
309
310 if (address->scope < scope)
311 scope = address->scope;
312 }
313
314 if (scope < RT_SCOPE_SITE)
315 /* universally accessible addresses found */
316 operstate = LINK_OPERSTATE_ROUTABLE;
317 else if (scope < RT_SCOPE_HOST)
318 /* only link or site local addresses found */
319 operstate = LINK_OPERSTATE_DEGRADED;
320 else
321 /* no useful addresses found */
322 operstate = LINK_OPERSTATE_CARRIER;
323 } else if (link->flags & IFF_UP)
324 operstate = LINK_OPERSTATE_NO_CARRIER;
325 else
326 operstate = LINK_OPERSTATE_OFF;
327
328 if (link->operstate != operstate) {
329 link->operstate = operstate;
330 link_send_changed(link, "OperationalState", NULL);
331 link_dirty(link);
332 }
333 }
334
335 #define FLAG_STRING(string, flag, old, new) \
336 (((old ^ new) & flag) \
337 ? ((old & flag) ? (" -" string) : (" +" string)) \
338 : "")
339
340 static int link_update_flags(Link *link, sd_netlink_message *m) {
341 unsigned flags, unknown_flags_added, unknown_flags_removed, unknown_flags;
342 uint8_t operstate;
343 int r;
344
345 assert(link);
346
347 r = sd_rtnl_message_link_get_flags(m, &flags);
348 if (r < 0)
349 return log_link_warning_errno(link, r, "Could not get link flags: %m");
350
351 r = sd_netlink_message_read_u8(m, IFLA_OPERSTATE, &operstate);
352 if (r < 0)
353 /* if we got a message without operstate, take it to mean
354 the state was unchanged */
355 operstate = link->kernel_operstate;
356
357 if ((link->flags == flags) && (link->kernel_operstate == operstate))
358 return 0;
359
360 if (link->flags != flags) {
361 log_link_debug(link, "Flags change:%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s",
362 FLAG_STRING("LOOPBACK", IFF_LOOPBACK, link->flags, flags),
363 FLAG_STRING("MASTER", IFF_MASTER, link->flags, flags),
364 FLAG_STRING("SLAVE", IFF_SLAVE, link->flags, flags),
365 FLAG_STRING("UP", IFF_UP, link->flags, flags),
366 FLAG_STRING("DORMANT", IFF_DORMANT, link->flags, flags),
367 FLAG_STRING("LOWER_UP", IFF_LOWER_UP, link->flags, flags),
368 FLAG_STRING("RUNNING", IFF_RUNNING, link->flags, flags),
369 FLAG_STRING("MULTICAST", IFF_MULTICAST, link->flags, flags),
370 FLAG_STRING("BROADCAST", IFF_BROADCAST, link->flags, flags),
371 FLAG_STRING("POINTOPOINT", IFF_POINTOPOINT, link->flags, flags),
372 FLAG_STRING("PROMISC", IFF_PROMISC, link->flags, flags),
373 FLAG_STRING("ALLMULTI", IFF_ALLMULTI, link->flags, flags),
374 FLAG_STRING("PORTSEL", IFF_PORTSEL, link->flags, flags),
375 FLAG_STRING("AUTOMEDIA", IFF_AUTOMEDIA, link->flags, flags),
376 FLAG_STRING("DYNAMIC", IFF_DYNAMIC, link->flags, flags),
377 FLAG_STRING("NOARP", IFF_NOARP, link->flags, flags),
378 FLAG_STRING("NOTRAILERS", IFF_NOTRAILERS, link->flags, flags),
379 FLAG_STRING("DEBUG", IFF_DEBUG, link->flags, flags),
380 FLAG_STRING("ECHO", IFF_ECHO, link->flags, flags));
381
382 unknown_flags = ~(IFF_LOOPBACK | IFF_MASTER | IFF_SLAVE | IFF_UP |
383 IFF_DORMANT | IFF_LOWER_UP | IFF_RUNNING |
384 IFF_MULTICAST | IFF_BROADCAST | IFF_POINTOPOINT |
385 IFF_PROMISC | IFF_ALLMULTI | IFF_PORTSEL |
386 IFF_AUTOMEDIA | IFF_DYNAMIC | IFF_NOARP |
387 IFF_NOTRAILERS | IFF_DEBUG | IFF_ECHO);
388 unknown_flags_added = ((link->flags ^ flags) & flags & unknown_flags);
389 unknown_flags_removed = ((link->flags ^ flags) & link->flags & unknown_flags);
390
391 /* link flags are currently at most 18 bits, let's align to
392 * printing 20 */
393 if (unknown_flags_added)
394 log_link_debug(link,
395 "Unknown link flags gained: %#.5x (ignoring)",
396 unknown_flags_added);
397
398 if (unknown_flags_removed)
399 log_link_debug(link,
400 "Unknown link flags lost: %#.5x (ignoring)",
401 unknown_flags_removed);
402 }
403
404 link->flags = flags;
405 link->kernel_operstate = operstate;
406
407 link_update_operstate(link);
408
409 return 0;
410 }
411
412 DEFINE_TRIVIAL_CLEANUP_FUNC(Link*, link_unref);
413
414 static int link_new(Manager *manager, sd_netlink_message *message, Link **ret) {
415 _cleanup_(link_unrefp) Link *link = NULL;
416 uint16_t type;
417 const char *ifname, *kind = NULL;
418 int r, ifindex;
419 unsigned short iftype;
420
421 assert(manager);
422 assert(message);
423 assert(ret);
424
425 /* check for link kind */
426 r = sd_netlink_message_enter_container(message, IFLA_LINKINFO);
427 if (r == 0) {
428 (void) sd_netlink_message_read_string(message, IFLA_INFO_KIND, &kind);
429 r = sd_netlink_message_exit_container(message);
430 if (r < 0)
431 return r;
432 }
433
434 r = sd_netlink_message_get_type(message, &type);
435 if (r < 0)
436 return r;
437 else if (type != RTM_NEWLINK)
438 return -EINVAL;
439
440 r = sd_rtnl_message_link_get_ifindex(message, &ifindex);
441 if (r < 0)
442 return r;
443 else if (ifindex <= 0)
444 return -EINVAL;
445
446 r = sd_rtnl_message_link_get_type(message, &iftype);
447 if (r < 0)
448 return r;
449
450 r = sd_netlink_message_read_string(message, IFLA_IFNAME, &ifname);
451 if (r < 0)
452 return r;
453
454 link = new(Link, 1);
455 if (!link)
456 return -ENOMEM;
457
458 *link = (Link) {
459 .n_ref = 1,
460 .manager = manager,
461 .state = LINK_STATE_PENDING,
462 .rtnl_extended_attrs = true,
463 .ifindex = ifindex,
464 .iftype = iftype,
465 };
466
467 link->ifname = strdup(ifname);
468 if (!link->ifname)
469 return -ENOMEM;
470
471 if (kind) {
472 link->kind = strdup(kind);
473 if (!link->kind)
474 return -ENOMEM;
475 }
476
477 r = sd_netlink_message_read_u32(message, IFLA_MASTER, (uint32_t *)&link->master_ifindex);
478 if (r < 0)
479 log_link_debug_errno(link, r, "New device has no master, continuing without");
480
481 r = sd_netlink_message_read_ether_addr(message, IFLA_ADDRESS, &link->mac);
482 if (r < 0)
483 log_link_debug_errno(link, r, "MAC address not found for new device, continuing without");
484
485 if (asprintf(&link->state_file, "/run/systemd/netif/links/%d", link->ifindex) < 0)
486 return -ENOMEM;
487
488 if (asprintf(&link->lease_file, "/run/systemd/netif/leases/%d", link->ifindex) < 0)
489 return -ENOMEM;
490
491 if (asprintf(&link->lldp_file, "/run/systemd/netif/lldp/%d", link->ifindex) < 0)
492 return -ENOMEM;
493
494 r = hashmap_ensure_allocated(&manager->links, NULL);
495 if (r < 0)
496 return r;
497
498 r = hashmap_put(manager->links, INT_TO_PTR(link->ifindex), link);
499 if (r < 0)
500 return r;
501
502 r = link_update_flags(link, message);
503 if (r < 0)
504 return r;
505
506 *ret = TAKE_PTR(link);
507
508 return 0;
509 }
510
511 static void link_detach_from_manager(Link *link) {
512 if (!link || !link->manager)
513 return;
514
515 hashmap_remove(link->manager->links, INT_TO_PTR(link->ifindex));
516 set_remove(link->manager->links_requesting_uuid, link);
517 link_clean(link);
518
519 link->manager = NULL;
520 }
521
522 static Link *link_free(Link *link) {
523 Address *address;
524 Link *carrier;
525 Route *route;
526 Iterator i;
527
528 assert(link);
529
530 while ((route = set_first(link->routes)))
531 route_free(route);
532
533 while ((route = set_first(link->routes_foreign)))
534 route_free(route);
535
536 link->routes = set_free(link->routes);
537 link->routes_foreign = set_free(link->routes_foreign);
538
539 while ((address = set_first(link->addresses)))
540 address_free(address);
541
542 while ((address = set_first(link->addresses_foreign)))
543 address_free(address);
544
545 link->addresses = set_free(link->addresses);
546 link->addresses_foreign = set_free(link->addresses_foreign);
547
548 while ((address = link->pool_addresses)) {
549 LIST_REMOVE(addresses, link->pool_addresses, address);
550 address_free(address);
551 }
552
553 sd_dhcp_server_unref(link->dhcp_server);
554 sd_dhcp_client_unref(link->dhcp_client);
555 sd_dhcp_lease_unref(link->dhcp_lease);
556
557 link_lldp_emit_stop(link);
558
559 free(link->lease_file);
560
561 sd_lldp_unref(link->lldp);
562 free(link->lldp_file);
563
564 ndisc_flush(link);
565
566 sd_ipv4ll_unref(link->ipv4ll);
567 sd_dhcp6_client_unref(link->dhcp6_client);
568 sd_ndisc_unref(link->ndisc);
569 sd_radv_unref(link->radv);
570
571 link_detach_from_manager(link);
572
573 free(link->ifname);
574
575 free(link->kind);
576
577 (void) unlink(link->state_file);
578 free(link->state_file);
579
580 sd_device_unref(link->sd_device);
581
582 HASHMAP_FOREACH (carrier, link->bound_to_links, i)
583 hashmap_remove(link->bound_to_links, INT_TO_PTR(carrier->ifindex));
584 hashmap_free(link->bound_to_links);
585
586 HASHMAP_FOREACH (carrier, link->bound_by_links, i)
587 hashmap_remove(link->bound_by_links, INT_TO_PTR(carrier->ifindex));
588 hashmap_free(link->bound_by_links);
589
590 return mfree(link);
591 }
592
593 DEFINE_TRIVIAL_REF_UNREF_FUNC(Link, link, link_free);
594
595 int link_get(Manager *m, int ifindex, Link **ret) {
596 Link *link;
597
598 assert(m);
599 assert(ifindex);
600 assert(ret);
601
602 link = hashmap_get(m->links, INT_TO_PTR(ifindex));
603 if (!link)
604 return -ENODEV;
605
606 *ret = link;
607
608 return 0;
609 }
610
611 static void link_set_state(Link *link, LinkState state) {
612 assert(link);
613
614 if (link->state == state)
615 return;
616
617 link->state = state;
618
619 link_send_changed(link, "AdministrativeState", NULL);
620 }
621
622 static void link_enter_unmanaged(Link *link) {
623 assert(link);
624
625 log_link_debug(link, "Unmanaged");
626
627 link_set_state(link, LINK_STATE_UNMANAGED);
628
629 link_dirty(link);
630 }
631
632 static int link_stop_clients(Link *link) {
633 int r = 0, k;
634
635 assert(link);
636 assert(link->manager);
637 assert(link->manager->event);
638
639 if (link->dhcp_client) {
640 k = sd_dhcp_client_stop(link->dhcp_client);
641 if (k < 0)
642 r = log_link_warning_errno(link, k, "Could not stop DHCPv4 client: %m");
643 }
644
645 if (link->ipv4ll) {
646 k = sd_ipv4ll_stop(link->ipv4ll);
647 if (k < 0)
648 r = log_link_warning_errno(link, k, "Could not stop IPv4 link-local: %m");
649 }
650
651 if (link->dhcp6_client) {
652 k = sd_dhcp6_client_stop(link->dhcp6_client);
653 if (k < 0)
654 r = log_link_warning_errno(link, k, "Could not stop DHCPv6 client: %m");
655 }
656
657 if (link->ndisc) {
658 k = sd_ndisc_stop(link->ndisc);
659 if (k < 0)
660 r = log_link_warning_errno(link, k, "Could not stop IPv6 Router Discovery: %m");
661 }
662
663 if (link->radv) {
664 k = sd_radv_stop(link->radv);
665 if (k < 0)
666 r = log_link_warning_errno(link, k, "Could not stop IPv6 Router Advertisement: %m");
667 }
668
669 link_lldp_emit_stop(link);
670 return r;
671 }
672
673 void link_enter_failed(Link *link) {
674 assert(link);
675
676 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
677 return;
678
679 log_link_warning(link, "Failed");
680
681 link_set_state(link, LINK_STATE_FAILED);
682
683 link_stop_clients(link);
684
685 link_dirty(link);
686 }
687
688 static Address* link_find_dhcp_server_address(Link *link) {
689 Address *address;
690
691 assert(link);
692 assert(link->network);
693
694 /* The first statically configured address if there is any */
695 LIST_FOREACH(addresses, address, link->network->static_addresses) {
696
697 if (address->family != AF_INET)
698 continue;
699
700 if (in_addr_is_null(address->family, &address->in_addr))
701 continue;
702
703 return address;
704 }
705
706 /* If that didn't work, find a suitable address we got from the pool */
707 LIST_FOREACH(addresses, address, link->pool_addresses) {
708 if (address->family != AF_INET)
709 continue;
710
711 return address;
712 }
713
714 return NULL;
715 }
716
717 static void link_enter_configured(Link *link) {
718 assert(link);
719 assert(link->network);
720
721 if (link->state != LINK_STATE_SETTING_ROUTES)
722 return;
723
724 log_link_info(link, "Configured");
725
726 link_set_state(link, LINK_STATE_CONFIGURED);
727
728 link_dirty(link);
729 }
730
731 void link_check_ready(Link *link) {
732 Address *a;
733 Iterator i;
734
735 assert(link);
736
737 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
738 return;
739
740 if (!link->network)
741 return;
742
743 if (!link->static_routes_configured)
744 return;
745
746 if (!link->routing_policy_rules_configured)
747 return;
748
749 if (link_ipv4ll_enabled(link))
750 if (!link->ipv4ll_address ||
751 !link->ipv4ll_route)
752 return;
753
754 if (!link->network->bridge) {
755
756 if (link_ipv6ll_enabled(link))
757 if (in_addr_is_null(AF_INET6, (const union in_addr_union*) &link->ipv6ll_address) > 0)
758 return;
759
760 if ((link_dhcp4_enabled(link) && !link_dhcp6_enabled(link) &&
761 !link->dhcp4_configured) ||
762 (link_dhcp6_enabled(link) && !link_dhcp4_enabled(link) &&
763 !link->dhcp6_configured) ||
764 (link_dhcp4_enabled(link) && link_dhcp6_enabled(link) &&
765 !link->dhcp4_configured && !link->dhcp6_configured))
766 return;
767
768 if (link_ipv6_accept_ra_enabled(link) && !link->ndisc_configured)
769 return;
770 }
771
772 SET_FOREACH(a, link->addresses, i)
773 if (!address_is_ready(a))
774 return;
775
776 if (link->state != LINK_STATE_CONFIGURED)
777 link_enter_configured(link);
778
779 return;
780 }
781
782 static int link_set_routing_policy_rule(Link *link) {
783 RoutingPolicyRule *rule, *rrule = NULL;
784 int r;
785
786 assert(link);
787 assert(link->network);
788
789 LIST_FOREACH(rules, rule, link->network->rules) {
790 r = routing_policy_rule_get(link->manager, rule->family, &rule->from, rule->from_prefixlen, &rule->to,
791 rule->to_prefixlen, rule->tos, rule->fwmark, rule->table, rule->iif, rule->oif,
792 rule->protocol, &rule->sport, &rule->dport, &rrule);
793 if (r == 0) {
794 (void) routing_policy_rule_make_local(link->manager, rrule);
795 continue;
796 }
797
798 r = routing_policy_rule_configure(rule, link, NULL, false);
799 if (r < 0) {
800 log_link_warning_errno(link, r, "Could not set routing policy rules: %m");
801 link_enter_failed(link);
802 return r;
803 }
804
805 link->routing_policy_rule_messages++;
806 }
807
808 routing_policy_rule_purge(link->manager, link);
809 if (link->routing_policy_rule_messages == 0) {
810 link->routing_policy_rules_configured = true;
811 link_check_ready(link);
812 } else
813 log_link_debug(link, "Setting routing policy rules");
814
815 return 0;
816 }
817
818 static int route_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
819 int r;
820
821 assert(link);
822 assert(link->route_messages > 0);
823 assert(IN_SET(link->state, LINK_STATE_SETTING_ADDRESSES,
824 LINK_STATE_SETTING_ROUTES, LINK_STATE_FAILED,
825 LINK_STATE_LINGER));
826
827 link->route_messages--;
828
829 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
830 return 1;
831
832 r = sd_netlink_message_get_errno(m);
833 if (r < 0 && r != -EEXIST)
834 log_link_warning_errno(link, r, "Could not set route: %m");
835
836 if (link->route_messages == 0) {
837 log_link_debug(link, "Routes set");
838 link->static_routes_configured = true;
839 link_check_ready(link);
840 }
841
842 return 1;
843 }
844
845 static int link_enter_set_routes(Link *link) {
846 enum {
847 PHASE_NON_GATEWAY, /* First phase: Routes without a gateway */
848 PHASE_GATEWAY, /* Second phase: Routes with a gateway */
849 _PHASE_MAX
850 } phase;
851 Route *rt;
852 int r;
853
854 assert(link);
855 assert(link->network);
856 assert(link->state == LINK_STATE_SETTING_ADDRESSES);
857
858 (void) link_set_routing_policy_rule(link);
859
860 link_set_state(link, LINK_STATE_SETTING_ROUTES);
861
862 /* First add the routes that enable us to talk to gateways, then add in the others that need a gateway. */
863 for (phase = 0; phase < _PHASE_MAX; phase++)
864 LIST_FOREACH(routes, rt, link->network->static_routes) {
865
866 if (in_addr_is_null(rt->family, &rt->gw) != (phase == PHASE_NON_GATEWAY))
867 continue;
868
869 r = route_configure(rt, link, route_handler);
870 if (r < 0) {
871 log_link_warning_errno(link, r, "Could not set routes: %m");
872 link_enter_failed(link);
873 return r;
874 }
875
876 link->route_messages++;
877 }
878
879 if (link->route_messages == 0) {
880 link->static_routes_configured = true;
881 link_check_ready(link);
882 } else
883 log_link_debug(link, "Setting routes");
884
885 return 0;
886 }
887
888 static int address_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
889 int r;
890
891 assert(rtnl);
892 assert(m);
893 assert(link);
894 assert(link->ifname);
895 assert(link->address_messages > 0);
896 assert(IN_SET(link->state, LINK_STATE_SETTING_ADDRESSES,
897 LINK_STATE_FAILED, LINK_STATE_LINGER));
898
899 link->address_messages--;
900
901 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
902 return 1;
903
904 r = sd_netlink_message_get_errno(m);
905 if (r < 0 && r != -EEXIST)
906 log_link_warning_errno(link, r, "could not set address: %m");
907 else if (r >= 0)
908 manager_rtnl_process_address(rtnl, m, link->manager);
909
910 if (link->address_messages == 0) {
911 log_link_debug(link, "Addresses set");
912 link_enter_set_routes(link);
913 }
914
915 return 1;
916 }
917
918 static int link_push_uplink_dns_to_dhcp_server(Link *link, sd_dhcp_server *s) {
919 _cleanup_free_ struct in_addr *addresses = NULL;
920 size_t n_addresses = 0, n_allocated = 0;
921 unsigned i;
922
923 log_debug("Copying DNS server information from %s", link->ifname);
924
925 if (!link->network)
926 return 0;
927
928 for (i = 0; i < link->network->n_dns; i++) {
929 struct in_addr ia;
930
931 /* Only look for IPv4 addresses */
932 if (link->network->dns[i].family != AF_INET)
933 continue;
934
935 ia = link->network->dns[i].address.in;
936
937 /* Never propagate obviously borked data */
938 if (in4_addr_is_null(&ia) || in4_addr_is_localhost(&ia))
939 continue;
940
941 if (!GREEDY_REALLOC(addresses, n_allocated, n_addresses + 1))
942 return log_oom();
943
944 addresses[n_addresses++] = ia;
945 }
946
947 if (link->network->dhcp_use_dns && link->dhcp_lease) {
948 const struct in_addr *da = NULL;
949 int n;
950
951 n = sd_dhcp_lease_get_dns(link->dhcp_lease, &da);
952 if (n > 0) {
953
954 if (!GREEDY_REALLOC(addresses, n_allocated, n_addresses + n))
955 return log_oom();
956
957 memcpy(addresses + n_addresses, da, n * sizeof(struct in_addr));
958 n_addresses += n;
959 }
960 }
961
962 if (n_addresses <= 0)
963 return 0;
964
965 return sd_dhcp_server_set_dns(s, addresses, n_addresses);
966 }
967
968 static int link_push_uplink_ntp_to_dhcp_server(Link *link, sd_dhcp_server *s) {
969 _cleanup_free_ struct in_addr *addresses = NULL;
970 size_t n_addresses = 0, n_allocated = 0;
971 char **a;
972
973 if (!link->network)
974 return 0;
975
976 log_debug("Copying NTP server information from %s", link->ifname);
977
978 STRV_FOREACH(a, link->network->ntp) {
979 struct in_addr ia;
980
981 /* Only look for IPv4 addresses */
982 if (inet_pton(AF_INET, *a, &ia) <= 0)
983 continue;
984
985 /* Never propagate obviously borked data */
986 if (in4_addr_is_null(&ia) || in4_addr_is_localhost(&ia))
987 continue;
988
989 if (!GREEDY_REALLOC(addresses, n_allocated, n_addresses + 1))
990 return log_oom();
991
992 addresses[n_addresses++] = ia;
993 }
994
995 if (link->network->dhcp_use_ntp && link->dhcp_lease) {
996 const struct in_addr *da = NULL;
997 int n;
998
999 n = sd_dhcp_lease_get_ntp(link->dhcp_lease, &da);
1000 if (n > 0) {
1001
1002 if (!GREEDY_REALLOC(addresses, n_allocated, n_addresses + n))
1003 return log_oom();
1004
1005 memcpy(addresses + n_addresses, da, n * sizeof(struct in_addr));
1006 n_addresses += n;
1007 }
1008 }
1009
1010 if (n_addresses <= 0)
1011 return 0;
1012
1013 return sd_dhcp_server_set_ntp(s, addresses, n_addresses);
1014 }
1015
1016 static int link_set_bridge_fdb(Link *link) {
1017 FdbEntry *fdb_entry;
1018 int r;
1019
1020 LIST_FOREACH(static_fdb_entries, fdb_entry, link->network->static_fdb_entries) {
1021 r = fdb_entry_configure(link, fdb_entry);
1022 if (r < 0)
1023 return log_link_error_errno(link, r, "Failed to add MAC entry to static MAC table: %m");
1024 }
1025
1026 return 0;
1027 }
1028
1029 static int link_enter_set_addresses(Link *link) {
1030 AddressLabel *label;
1031 Address *ad;
1032 int r;
1033
1034 assert(link);
1035 assert(link->network);
1036 assert(link->state != _LINK_STATE_INVALID);
1037
1038 r = link_set_bridge_fdb(link);
1039 if (r < 0)
1040 return r;
1041
1042 link_set_state(link, LINK_STATE_SETTING_ADDRESSES);
1043
1044 LIST_FOREACH(addresses, ad, link->network->static_addresses) {
1045 r = address_configure(ad, link, address_handler, false);
1046 if (r < 0) {
1047 log_link_warning_errno(link, r, "Could not set addresses: %m");
1048 link_enter_failed(link);
1049 return r;
1050 }
1051
1052 link->address_messages++;
1053 }
1054
1055 LIST_FOREACH(labels, label, link->network->address_labels) {
1056 r = address_label_configure(label, link, NULL, false);
1057 if (r < 0) {
1058 log_link_warning_errno(link, r, "Could not set address label: %m");
1059 link_enter_failed(link);
1060 return r;
1061 }
1062
1063 link->address_label_messages++;
1064 }
1065
1066 /* now that we can figure out a default address for the dhcp server,
1067 start it */
1068 if (link_dhcp4_server_enabled(link) && (link->flags & IFF_UP)) {
1069 Address *address;
1070 Link *uplink = NULL;
1071 bool acquired_uplink = false;
1072
1073 address = link_find_dhcp_server_address(link);
1074 if (!address) {
1075 log_link_warning(link, "Failed to find suitable address for DHCPv4 server instance.");
1076 link_enter_failed(link);
1077 return 0;
1078 }
1079
1080 /* use the server address' subnet as the pool */
1081 r = sd_dhcp_server_configure_pool(link->dhcp_server, &address->in_addr.in, address->prefixlen,
1082 link->network->dhcp_server_pool_offset, link->network->dhcp_server_pool_size);
1083 if (r < 0)
1084 return r;
1085
1086 /* TODO:
1087 r = sd_dhcp_server_set_router(link->dhcp_server,
1088 &main_address->in_addr.in);
1089 if (r < 0)
1090 return r;
1091 */
1092
1093 if (link->network->dhcp_server_max_lease_time_usec > 0) {
1094 r = sd_dhcp_server_set_max_lease_time(
1095 link->dhcp_server,
1096 DIV_ROUND_UP(link->network->dhcp_server_max_lease_time_usec, USEC_PER_SEC));
1097 if (r < 0)
1098 return r;
1099 }
1100
1101 if (link->network->dhcp_server_default_lease_time_usec > 0) {
1102 r = sd_dhcp_server_set_default_lease_time(
1103 link->dhcp_server,
1104 DIV_ROUND_UP(link->network->dhcp_server_default_lease_time_usec, USEC_PER_SEC));
1105 if (r < 0)
1106 return r;
1107 }
1108
1109 if (link->network->dhcp_server_emit_dns) {
1110
1111 if (link->network->n_dhcp_server_dns > 0)
1112 r = sd_dhcp_server_set_dns(link->dhcp_server, link->network->dhcp_server_dns, link->network->n_dhcp_server_dns);
1113 else {
1114 uplink = manager_find_uplink(link->manager, link);
1115 acquired_uplink = true;
1116
1117 if (!uplink) {
1118 log_link_debug(link, "Not emitting DNS server information on link, couldn't find suitable uplink.");
1119 r = 0;
1120 } else
1121 r = link_push_uplink_dns_to_dhcp_server(uplink, link->dhcp_server);
1122 }
1123 if (r < 0)
1124 log_link_warning_errno(link, r, "Failed to set DNS server for DHCP server, ignoring: %m");
1125 }
1126
1127 if (link->network->dhcp_server_emit_ntp) {
1128
1129 if (link->network->n_dhcp_server_ntp > 0)
1130 r = sd_dhcp_server_set_ntp(link->dhcp_server, link->network->dhcp_server_ntp, link->network->n_dhcp_server_ntp);
1131 else {
1132 if (!acquired_uplink)
1133 uplink = manager_find_uplink(link->manager, link);
1134
1135 if (!uplink) {
1136 log_link_debug(link, "Not emitting NTP server information on link, couldn't find suitable uplink.");
1137 r = 0;
1138 } else
1139 r = link_push_uplink_ntp_to_dhcp_server(uplink, link->dhcp_server);
1140
1141 }
1142 if (r < 0)
1143 log_link_warning_errno(link, r, "Failed to set NTP server for DHCP server, ignoring: %m");
1144 }
1145
1146 r = sd_dhcp_server_set_emit_router(link->dhcp_server, link->network->dhcp_server_emit_router);
1147 if (r < 0)
1148 return log_link_warning_errno(link, r, "Failed to set router emission for DHCP server: %m");
1149
1150 if (link->network->dhcp_server_emit_timezone) {
1151 _cleanup_free_ char *buffer = NULL;
1152 const char *tz = NULL;
1153
1154 if (link->network->dhcp_server_timezone)
1155 tz = link->network->dhcp_server_timezone;
1156 else {
1157 r = get_timezone(&buffer);
1158 if (r < 0)
1159 log_warning_errno(r, "Failed to determine timezone: %m");
1160 else
1161 tz = buffer;
1162 }
1163
1164 if (tz) {
1165 r = sd_dhcp_server_set_timezone(link->dhcp_server, tz);
1166 if (r < 0)
1167 return r;
1168 }
1169 }
1170
1171 r = sd_dhcp_server_start(link->dhcp_server);
1172 if (r < 0) {
1173 log_link_warning_errno(link, r, "Could not start DHCPv4 server instance: %m");
1174
1175 link_enter_failed(link);
1176
1177 return 0;
1178 }
1179
1180 log_link_debug(link, "Offering DHCPv4 leases");
1181 }
1182
1183 if (link->address_messages == 0)
1184 link_enter_set_routes(link);
1185 else
1186 log_link_debug(link, "Setting addresses");
1187
1188 return 0;
1189 }
1190
1191 static int link_set_bridge_vlan(Link *link) {
1192 int r = 0;
1193
1194 r = br_vlan_configure(link, link->network->pvid, link->network->br_vid_bitmap, link->network->br_untagged_bitmap);
1195 if (r < 0)
1196 log_link_error_errno(link, r, "Failed to assign VLANs to bridge port: %m");
1197
1198 return r;
1199 }
1200
1201 static int link_set_proxy_arp(Link *link) {
1202 const char *p = NULL;
1203 int r;
1204
1205 if (!link_proxy_arp_enabled(link))
1206 return 0;
1207
1208 p = strjoina("/proc/sys/net/ipv4/conf/", link->ifname, "/proxy_arp");
1209
1210 r = write_string_file(p, one_zero(link->network->proxy_arp), WRITE_STRING_FILE_VERIFY_ON_FAILURE | WRITE_STRING_FILE_DISABLE_BUFFER);
1211 if (r < 0)
1212 log_link_warning_errno(link, r, "Cannot configure proxy ARP for interface: %m");
1213
1214 return 0;
1215 }
1216
1217 static int link_set_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
1218 int r;
1219
1220 assert(link);
1221
1222 log_link_debug(link, "Set link");
1223
1224 r = sd_netlink_message_get_errno(m);
1225 if (r < 0 && r != -EEXIST) {
1226 log_link_error_errno(link, r, "Could not join netdev: %m");
1227 link_enter_failed(link);
1228 }
1229
1230 return 1;
1231 }
1232
1233 static int link_configure_after_setting_mtu(Link *link);
1234
1235 static int set_mtu_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
1236 int r;
1237
1238 assert(m);
1239 assert(link);
1240 assert(link->ifname);
1241
1242 link->setting_mtu = false;
1243
1244 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1245 return 1;
1246
1247 r = sd_netlink_message_get_errno(m);
1248 if (r < 0) {
1249 log_link_warning_errno(link, r, "Could not set MTU: %m");
1250 return 1;
1251 }
1252
1253 log_link_debug(link, "Setting MTU done.");
1254
1255 if (link->state == LINK_STATE_PENDING)
1256 (void) link_configure_after_setting_mtu(link);
1257
1258 return 1;
1259 }
1260
1261 int link_set_mtu(Link *link, uint32_t mtu) {
1262 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1263 int r;
1264
1265 assert(link);
1266 assert(link->manager);
1267 assert(link->manager->rtnl);
1268
1269 if (link->mtu == mtu || link->setting_mtu)
1270 return 0;
1271
1272 log_link_debug(link, "Setting MTU: %" PRIu32, mtu);
1273
1274 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1275 if (r < 0)
1276 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1277
1278 /* If IPv6 not configured (no static IPv6 address and IPv6LL autoconfiguration is disabled)
1279 * for this interface, or if it is a bridge slave, then disable IPv6 else enable it. */
1280 (void) link_enable_ipv6(link);
1281
1282 /* IPv6 protocol requires a minimum MTU of IPV6_MTU_MIN(1280) bytes
1283 * on the interface. Bump up MTU bytes to IPV6_MTU_MIN. */
1284 if (link_ipv6_enabled(link) && mtu < IPV6_MIN_MTU) {
1285
1286 log_link_warning(link, "Bumping MTU to " STRINGIFY(IPV6_MIN_MTU) ", as "
1287 "IPv6 is requested and requires a minimum MTU of " STRINGIFY(IPV6_MIN_MTU) " bytes: %m");
1288
1289 mtu = IPV6_MIN_MTU;
1290 }
1291
1292 r = sd_netlink_message_append_u32(req, IFLA_MTU, mtu);
1293 if (r < 0)
1294 return log_link_error_errno(link, r, "Could not append MTU: %m");
1295
1296 r = netlink_call_async(link->manager->rtnl, NULL, req, set_mtu_handler,
1297 link_netlink_destroy_callback, link);
1298 if (r < 0)
1299 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1300
1301 link_ref(link);
1302 link->setting_mtu = true;
1303
1304 return 0;
1305 }
1306
1307 static int set_flags_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
1308 int r;
1309
1310 assert(m);
1311 assert(link);
1312 assert(link->ifname);
1313
1314 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1315 return 1;
1316
1317 r = sd_netlink_message_get_errno(m);
1318 if (r < 0)
1319 log_link_warning_errno(link, r, "Could not set link flags: %m");
1320
1321 return 1;
1322 }
1323
1324 static int link_set_flags(Link *link) {
1325 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1326 unsigned ifi_change = 0;
1327 unsigned ifi_flags = 0;
1328 int r;
1329
1330 assert(link);
1331 assert(link->manager);
1332 assert(link->manager->rtnl);
1333
1334 if (link->flags & IFF_LOOPBACK)
1335 return 0;
1336
1337 if (!link->network)
1338 return 0;
1339
1340 if (link->network->arp < 0 && link->network->multicast < 0 && link->network->allmulticast < 0)
1341 return 0;
1342
1343 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1344 if (r < 0)
1345 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1346
1347 if (link->network->arp >= 0) {
1348 ifi_change |= IFF_NOARP;
1349 SET_FLAG(ifi_flags, IFF_NOARP, link->network->arp == 0);
1350 }
1351
1352 if (link->network->multicast >= 0) {
1353 ifi_change |= IFF_MULTICAST;
1354 SET_FLAG(ifi_flags, IFF_MULTICAST, link->network->multicast);
1355 }
1356
1357 if (link->network->allmulticast >= 0) {
1358 ifi_change |= IFF_ALLMULTI;
1359 SET_FLAG(ifi_flags, IFF_ALLMULTI, link->network->allmulticast);
1360 }
1361
1362 r = sd_rtnl_message_link_set_flags(req, ifi_flags, ifi_change);
1363 if (r < 0)
1364 return log_link_error_errno(link, r, "Could not set link flags: %m");
1365
1366 r = netlink_call_async(link->manager->rtnl, NULL, req, set_flags_handler,
1367 link_netlink_destroy_callback, link);
1368 if (r < 0)
1369 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1370
1371 link_ref(link);
1372
1373 return 0;
1374 }
1375
1376 static int link_set_bridge(Link *link) {
1377 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1378 int r;
1379
1380 assert(link);
1381 assert(link->network);
1382
1383 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1384 if (r < 0)
1385 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1386
1387 r = sd_rtnl_message_link_set_family(req, PF_BRIDGE);
1388 if (r < 0)
1389 return log_link_error_errno(link, r, "Could not set message family: %m");
1390
1391 r = sd_netlink_message_open_container(req, IFLA_PROTINFO);
1392 if (r < 0)
1393 return log_link_error_errno(link, r, "Could not append IFLA_PROTINFO attribute: %m");
1394
1395 if (link->network->use_bpdu >= 0) {
1396 r = sd_netlink_message_append_u8(req, IFLA_BRPORT_GUARD, link->network->use_bpdu);
1397 if (r < 0)
1398 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_GUARD attribute: %m");
1399 }
1400
1401 if (link->network->hairpin >= 0) {
1402 r = sd_netlink_message_append_u8(req, IFLA_BRPORT_MODE, link->network->hairpin);
1403 if (r < 0)
1404 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_MODE attribute: %m");
1405 }
1406
1407 if (link->network->fast_leave >= 0) {
1408 r = sd_netlink_message_append_u8(req, IFLA_BRPORT_FAST_LEAVE, link->network->fast_leave);
1409 if (r < 0)
1410 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_FAST_LEAVE attribute: %m");
1411 }
1412
1413 if (link->network->allow_port_to_be_root >= 0) {
1414 r = sd_netlink_message_append_u8(req, IFLA_BRPORT_PROTECT, link->network->allow_port_to_be_root);
1415 if (r < 0)
1416 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_PROTECT attribute: %m");
1417
1418 }
1419
1420 if (link->network->unicast_flood >= 0) {
1421 r = sd_netlink_message_append_u8(req, IFLA_BRPORT_UNICAST_FLOOD, link->network->unicast_flood);
1422 if (r < 0)
1423 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_UNICAST_FLOOD attribute: %m");
1424
1425 }
1426
1427 if (link->network->cost != 0) {
1428 r = sd_netlink_message_append_u32(req, IFLA_BRPORT_COST, link->network->cost);
1429 if (r < 0)
1430 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_COST attribute: %m");
1431 }
1432 if (link->network->priority != LINK_BRIDGE_PORT_PRIORITY_INVALID) {
1433 r = sd_netlink_message_append_u16(req, IFLA_BRPORT_PRIORITY, link->network->priority);
1434 if (r < 0)
1435 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_PRIORITY attribute: %m");
1436 }
1437
1438 r = sd_netlink_message_close_container(req);
1439 if (r < 0)
1440 return log_link_error_errno(link, r, "Could not append IFLA_LINKINFO attribute: %m");
1441
1442 r = netlink_call_async(link->manager->rtnl, NULL, req, link_set_handler,
1443 link_netlink_destroy_callback, link);
1444 if (r < 0)
1445 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1446
1447 link_ref(link);
1448
1449 return r;
1450 }
1451
1452 static int link_bond_set(Link *link) {
1453 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1454 int r;
1455
1456 assert(link);
1457 assert(link->network);
1458
1459 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_NEWLINK, link->network->bond->ifindex);
1460 if (r < 0)
1461 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1462
1463 r = sd_netlink_message_set_flags(req, NLM_F_REQUEST | NLM_F_ACK);
1464 if (r < 0)
1465 return log_link_error_errno(link, r, "Could not set netlink flags: %m");
1466
1467 r = sd_netlink_message_open_container(req, IFLA_LINKINFO);
1468 if (r < 0)
1469 return log_link_error_errno(link, r, "Could not append IFLA_PROTINFO attribute: %m");
1470
1471 r = sd_netlink_message_open_container_union(req, IFLA_INFO_DATA, "bond");
1472 if (r < 0)
1473 return log_link_error_errno(link, r, "Could not append IFLA_INFO_DATA attribute: %m");
1474
1475 if (link->network->active_slave) {
1476 r = sd_netlink_message_append_u32(req, IFLA_BOND_ACTIVE_SLAVE, link->ifindex);
1477 if (r < 0)
1478 return log_link_error_errno(link, r, "Could not append IFLA_BOND_ACTIVE_SLAVE attribute: %m");
1479 }
1480
1481 if (link->network->primary_slave) {
1482 r = sd_netlink_message_append_u32(req, IFLA_BOND_PRIMARY, link->ifindex);
1483 if (r < 0)
1484 return log_link_error_errno(link, r, "Could not append IFLA_BOND_PRIMARY attribute: %m");
1485 }
1486
1487 r = sd_netlink_message_close_container(req);
1488 if (r < 0)
1489 return log_link_error_errno(link, r, "Could not append IFLA_LINKINFO attribute: %m");
1490
1491 r = sd_netlink_message_close_container(req);
1492 if (r < 0)
1493 return log_link_error_errno(link, r, "Could not append IFLA_INFO_DATA attribute: %m");
1494
1495 r = netlink_call_async(link->manager->rtnl, NULL, req, set_flags_handler,
1496 link_netlink_destroy_callback, link);
1497 if (r < 0)
1498 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1499
1500 link_ref(link);
1501
1502 return r;
1503 }
1504
1505 static int link_lldp_save(Link *link) {
1506 _cleanup_free_ char *temp_path = NULL;
1507 _cleanup_fclose_ FILE *f = NULL;
1508 sd_lldp_neighbor **l = NULL;
1509 int n = 0, r, i;
1510
1511 assert(link);
1512 assert(link->lldp_file);
1513
1514 if (!link->lldp) {
1515 (void) unlink(link->lldp_file);
1516 return 0;
1517 }
1518
1519 r = sd_lldp_get_neighbors(link->lldp, &l);
1520 if (r < 0)
1521 goto finish;
1522 if (r == 0) {
1523 (void) unlink(link->lldp_file);
1524 goto finish;
1525 }
1526
1527 n = r;
1528
1529 r = fopen_temporary(link->lldp_file, &f, &temp_path);
1530 if (r < 0)
1531 goto finish;
1532
1533 fchmod(fileno(f), 0644);
1534
1535 for (i = 0; i < n; i++) {
1536 const void *p;
1537 le64_t u;
1538 size_t sz;
1539
1540 r = sd_lldp_neighbor_get_raw(l[i], &p, &sz);
1541 if (r < 0)
1542 goto finish;
1543
1544 u = htole64(sz);
1545 (void) fwrite(&u, 1, sizeof(u), f);
1546 (void) fwrite(p, 1, sz, f);
1547 }
1548
1549 r = fflush_and_check(f);
1550 if (r < 0)
1551 goto finish;
1552
1553 if (rename(temp_path, link->lldp_file) < 0) {
1554 r = -errno;
1555 goto finish;
1556 }
1557
1558 finish:
1559 if (r < 0) {
1560 (void) unlink(link->lldp_file);
1561 if (temp_path)
1562 (void) unlink(temp_path);
1563
1564 log_link_error_errno(link, r, "Failed to save LLDP data to %s: %m", link->lldp_file);
1565 }
1566
1567 if (l) {
1568 for (i = 0; i < n; i++)
1569 sd_lldp_neighbor_unref(l[i]);
1570 free(l);
1571 }
1572
1573 return r;
1574 }
1575
1576 static void lldp_handler(sd_lldp *lldp, sd_lldp_event event, sd_lldp_neighbor *n, void *userdata) {
1577 Link *link = userdata;
1578 int r;
1579
1580 assert(link);
1581
1582 (void) link_lldp_save(link);
1583
1584 if (link_lldp_emit_enabled(link) && event == SD_LLDP_EVENT_ADDED) {
1585 /* If we received information about a new neighbor, restart the LLDP "fast" logic */
1586
1587 log_link_debug(link, "Received LLDP datagram from previously unknown neighbor, restarting 'fast' LLDP transmission.");
1588
1589 r = link_lldp_emit_start(link);
1590 if (r < 0)
1591 log_link_warning_errno(link, r, "Failed to restart LLDP transmission: %m");
1592 }
1593 }
1594
1595 static int link_acquire_ipv6_conf(Link *link) {
1596 int r;
1597
1598 assert(link);
1599
1600 if (link_ipv6_accept_ra_enabled(link)) {
1601 assert(link->ndisc);
1602
1603 log_link_debug(link, "Discovering IPv6 routers");
1604
1605 r = sd_ndisc_start(link->ndisc);
1606 if (r < 0 && r != -EBUSY)
1607 return log_link_warning_errno(link, r, "Could not start IPv6 Router Discovery: %m");
1608 }
1609
1610 if (link_radv_enabled(link)) {
1611 assert(link->radv);
1612 assert(in_addr_is_link_local(AF_INET6, (const union in_addr_union*)&link->ipv6ll_address) > 0);
1613
1614 log_link_debug(link, "Starting IPv6 Router Advertisements");
1615
1616 r = sd_radv_start(link->radv);
1617 if (r < 0 && r != -EBUSY)
1618 return log_link_warning_errno(link, r, "Could not start IPv6 Router Advertisement: %m");
1619 }
1620
1621 (void) dhcp6_request_prefix_delegation(link);
1622
1623 return 0;
1624 }
1625
1626 static int link_acquire_ipv4_conf(Link *link) {
1627 int r;
1628
1629 assert(link);
1630 assert(link->network);
1631 assert(link->manager);
1632 assert(link->manager->event);
1633
1634 if (link_ipv4ll_enabled(link)) {
1635 assert(link->ipv4ll);
1636
1637 log_link_debug(link, "Acquiring IPv4 link-local address");
1638
1639 r = sd_ipv4ll_start(link->ipv4ll);
1640 if (r < 0)
1641 return log_link_warning_errno(link, r, "Could not acquire IPv4 link-local address: %m");
1642 }
1643
1644 if (link_dhcp4_enabled(link)) {
1645 assert(link->dhcp_client);
1646
1647 log_link_debug(link, "Acquiring DHCPv4 lease");
1648
1649 r = sd_dhcp_client_start(link->dhcp_client);
1650 if (r < 0)
1651 return log_link_warning_errno(link, r, "Could not acquire DHCPv4 lease: %m");
1652 }
1653
1654 return 0;
1655 }
1656
1657 static int link_acquire_conf(Link *link) {
1658 int r;
1659
1660 assert(link);
1661
1662 r = link_acquire_ipv4_conf(link);
1663 if (r < 0)
1664 return r;
1665
1666 if (in_addr_is_null(AF_INET6, (const union in_addr_union*) &link->ipv6ll_address) == 0) {
1667 r = link_acquire_ipv6_conf(link);
1668 if (r < 0)
1669 return r;
1670 }
1671
1672 if (link_lldp_emit_enabled(link)) {
1673 r = link_lldp_emit_start(link);
1674 if (r < 0)
1675 return log_link_warning_errno(link, r, "Failed to start LLDP transmission: %m");
1676 }
1677
1678 return 0;
1679 }
1680
1681 bool link_has_carrier(Link *link) {
1682 /* see Documentation/networking/operstates.txt in the kernel sources */
1683
1684 if (link->kernel_operstate == IF_OPER_UP)
1685 return true;
1686
1687 if (link->kernel_operstate == IF_OPER_UNKNOWN)
1688 /* operstate may not be implemented, so fall back to flags */
1689 if ((link->flags & IFF_LOWER_UP) && !(link->flags & IFF_DORMANT))
1690 return true;
1691
1692 return false;
1693 }
1694
1695 static int link_up_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
1696 int r;
1697
1698 assert(link);
1699
1700 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1701 return 1;
1702
1703 r = sd_netlink_message_get_errno(m);
1704 if (r < 0)
1705 /* we warn but don't fail the link, as it may be brought up later */
1706 log_link_warning_errno(link, r, "Could not bring up interface: %m");
1707
1708 return 1;
1709 }
1710
1711 int link_up(Link *link) {
1712 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1713 uint8_t ipv6ll_mode;
1714 int r;
1715
1716 assert(link);
1717 assert(link->network);
1718 assert(link->manager);
1719 assert(link->manager->rtnl);
1720
1721 log_link_debug(link, "Bringing link up");
1722
1723 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1724 if (r < 0)
1725 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1726
1727 /* set it free if not enslaved with networkd */
1728 if (!link->network->bridge && !link->network->bond && !link->network->vrf) {
1729 r = sd_netlink_message_append_u32(req, IFLA_MASTER, 0);
1730 if (r < 0)
1731 return log_link_error_errno(link, r, "Could not append IFLA_MASTER attribute: %m");
1732 }
1733
1734 r = sd_rtnl_message_link_set_flags(req, IFF_UP, IFF_UP);
1735 if (r < 0)
1736 return log_link_error_errno(link, r, "Could not set link flags: %m");
1737
1738 if (link->network->mac) {
1739 r = sd_netlink_message_append_ether_addr(req, IFLA_ADDRESS, link->network->mac);
1740 if (r < 0)
1741 return log_link_error_errno(link, r, "Could not set MAC address: %m");
1742 }
1743
1744 r = sd_netlink_message_open_container(req, IFLA_AF_SPEC);
1745 if (r < 0)
1746 return log_link_error_errno(link, r, "Could not open IFLA_AF_SPEC container: %m");
1747
1748 if (link_ipv6_enabled(link)) {
1749 /* if the kernel lacks ipv6 support setting IFF_UP fails if any ipv6 options are passed */
1750 r = sd_netlink_message_open_container(req, AF_INET6);
1751 if (r < 0)
1752 return log_link_error_errno(link, r, "Could not open AF_INET6 container: %m");
1753
1754 if (!link_ipv6ll_enabled(link))
1755 ipv6ll_mode = IN6_ADDR_GEN_MODE_NONE;
1756 else {
1757 const char *p = NULL;
1758 _cleanup_free_ char *stable_secret = NULL;
1759
1760 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/stable_secret");
1761 r = read_one_line_file(p, &stable_secret);
1762
1763 if (r < 0)
1764 ipv6ll_mode = IN6_ADDR_GEN_MODE_EUI64;
1765 else
1766 ipv6ll_mode = IN6_ADDR_GEN_MODE_STABLE_PRIVACY;
1767 }
1768 r = sd_netlink_message_append_u8(req, IFLA_INET6_ADDR_GEN_MODE, ipv6ll_mode);
1769 if (r < 0)
1770 return log_link_error_errno(link, r, "Could not append IFLA_INET6_ADDR_GEN_MODE: %m");
1771
1772 if (!in_addr_is_null(AF_INET6, &link->network->ipv6_token)) {
1773 r = sd_netlink_message_append_in6_addr(req, IFLA_INET6_TOKEN, &link->network->ipv6_token.in6);
1774 if (r < 0)
1775 return log_link_error_errno(link, r, "Could not append IFLA_INET6_TOKEN: %m");
1776 }
1777
1778 r = sd_netlink_message_close_container(req);
1779 if (r < 0)
1780 return log_link_error_errno(link, r, "Could not close AF_INET6 container: %m");
1781 }
1782
1783 r = sd_netlink_message_close_container(req);
1784 if (r < 0)
1785 return log_link_error_errno(link, r, "Could not close IFLA_AF_SPEC container: %m");
1786
1787 r = netlink_call_async(link->manager->rtnl, NULL, req, link_up_handler,
1788 link_netlink_destroy_callback, link);
1789 if (r < 0)
1790 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1791
1792 link_ref(link);
1793
1794 return 0;
1795 }
1796
1797 static int link_up_can(Link *link) {
1798 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1799 int r;
1800
1801 assert(link);
1802
1803 log_link_debug(link, "Bringing CAN link up");
1804
1805 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1806 if (r < 0)
1807 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1808
1809 r = sd_rtnl_message_link_set_flags(req, IFF_UP, IFF_UP);
1810 if (r < 0)
1811 return log_link_error_errno(link, r, "Could not set link flags: %m");
1812
1813 r = netlink_call_async(link->manager->rtnl, NULL, req, link_up_handler,
1814 link_netlink_destroy_callback, link);
1815 if (r < 0)
1816 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1817
1818 link_ref(link);
1819
1820 return 0;
1821 }
1822
1823 static int link_set_can(Link *link) {
1824 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *m = NULL;
1825 int r;
1826
1827 assert(link);
1828 assert(link->network);
1829 assert(link->manager);
1830 assert(link->manager->rtnl);
1831
1832 log_link_debug(link, "link_set_can");
1833
1834 r = sd_rtnl_message_new_link(link->manager->rtnl, &m, RTM_NEWLINK, link->ifindex);
1835 if (r < 0)
1836 return log_link_error_errno(link, r, "Failed to allocate netlink message: %m");
1837
1838 r = sd_netlink_message_set_flags(m, NLM_F_REQUEST | NLM_F_ACK);
1839 if (r < 0)
1840 return log_link_error_errno(link, r, "Could not set netlink flags: %m");
1841
1842 r = sd_netlink_message_open_container(m, IFLA_LINKINFO);
1843 if (r < 0)
1844 return log_link_error_errno(link, r, "Failed to open netlink container: %m");
1845
1846 r = sd_netlink_message_open_container_union(m, IFLA_INFO_DATA, link->kind);
1847 if (r < 0)
1848 return log_link_error_errno(link, r, "Could not append IFLA_INFO_DATA attribute: %m");
1849
1850 if (link->network->can_bitrate > 0 || link->network->can_sample_point > 0) {
1851 struct can_bittiming bt = {
1852 .bitrate = link->network->can_bitrate,
1853 .sample_point = link->network->can_sample_point,
1854 };
1855
1856 if (link->network->can_bitrate > UINT32_MAX) {
1857 log_link_error(link, "bitrate (%zu) too big.", link->network->can_bitrate);
1858 return -ERANGE;
1859 }
1860
1861 log_link_debug(link, "Setting bitrate = %d bit/s", bt.bitrate);
1862 if (link->network->can_sample_point > 0)
1863 log_link_debug(link, "Setting sample point = %d.%d%%", bt.sample_point / 10, bt.sample_point % 10);
1864 else
1865 log_link_debug(link, "Using default sample point");
1866
1867 r = sd_netlink_message_append_data(m, IFLA_CAN_BITTIMING, &bt, sizeof(bt));
1868 if (r < 0)
1869 return log_link_error_errno(link, r, "Could not append IFLA_CAN_BITTIMING attribute: %m");
1870 }
1871
1872 if (link->network->can_restart_us > 0) {
1873 char time_string[FORMAT_TIMESPAN_MAX];
1874 uint64_t restart_ms;
1875
1876 if (link->network->can_restart_us == USEC_INFINITY)
1877 restart_ms = 0;
1878 else
1879 restart_ms = DIV_ROUND_UP(link->network->can_restart_us, USEC_PER_MSEC);
1880
1881 format_timespan(time_string, FORMAT_TIMESPAN_MAX, restart_ms * 1000, MSEC_PER_SEC);
1882
1883 if (restart_ms > UINT32_MAX) {
1884 log_link_error(link, "restart timeout (%s) too big.", time_string);
1885 return -ERANGE;
1886 }
1887
1888 log_link_debug(link, "Setting restart = %s", time_string);
1889
1890 r = sd_netlink_message_append_u32(m, IFLA_CAN_RESTART_MS, restart_ms);
1891 if (r < 0)
1892 return log_link_error_errno(link, r, "Could not append IFLA_CAN_RESTART_MS attribute: %m");
1893 }
1894
1895 r = sd_netlink_message_close_container(m);
1896 if (r < 0)
1897 return log_link_error_errno(link, r, "Failed to close netlink container: %m");
1898
1899 r = sd_netlink_message_close_container(m);
1900 if (r < 0)
1901 return log_link_error_errno(link, r, "Failed to close netlink container: %m");
1902
1903 r = netlink_call_async(link->manager->rtnl, NULL, m, link_set_handler,
1904 link_netlink_destroy_callback, link);
1905 if (r < 0)
1906 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1907
1908 link_ref(link);
1909
1910 if (!(link->flags & IFF_UP)) {
1911 r = link_up_can(link);
1912 if (r < 0) {
1913 link_enter_failed(link);
1914 return r;
1915 }
1916 }
1917
1918 log_link_debug(link, "link_set_can done");
1919
1920 return r;
1921 }
1922
1923 static int link_down_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
1924 int r;
1925
1926 assert(link);
1927
1928 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1929 return 1;
1930
1931 r = sd_netlink_message_get_errno(m);
1932 if (r < 0)
1933 log_link_warning_errno(link, r, "Could not bring down interface: %m");
1934
1935 if (streq_ptr(link->kind, "can"))
1936 link_set_can(link);
1937
1938 return 1;
1939 }
1940
1941 int link_down(Link *link) {
1942 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1943 int r;
1944
1945 assert(link);
1946 assert(link->manager);
1947 assert(link->manager->rtnl);
1948
1949 log_link_debug(link, "Bringing link down");
1950
1951 r = sd_rtnl_message_new_link(link->manager->rtnl, &req,
1952 RTM_SETLINK, link->ifindex);
1953 if (r < 0)
1954 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1955
1956 r = sd_rtnl_message_link_set_flags(req, 0, IFF_UP);
1957 if (r < 0)
1958 return log_link_error_errno(link, r, "Could not set link flags: %m");
1959
1960 r = netlink_call_async(link->manager->rtnl, NULL, req, link_down_handler,
1961 link_netlink_destroy_callback, link);
1962 if (r < 0)
1963 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1964
1965 link_ref(link);
1966
1967 return 0;
1968 }
1969
1970 static int link_handle_bound_to_list(Link *link) {
1971 Link *l;
1972 Iterator i;
1973 int r;
1974 bool required_up = false;
1975 bool link_is_up = false;
1976
1977 assert(link);
1978
1979 if (hashmap_isempty(link->bound_to_links))
1980 return 0;
1981
1982 if (link->flags & IFF_UP)
1983 link_is_up = true;
1984
1985 HASHMAP_FOREACH (l, link->bound_to_links, i)
1986 if (link_has_carrier(l)) {
1987 required_up = true;
1988 break;
1989 }
1990
1991 if (!required_up && link_is_up) {
1992 r = link_down(link);
1993 if (r < 0)
1994 return r;
1995 } else if (required_up && !link_is_up) {
1996 r = link_up(link);
1997 if (r < 0)
1998 return r;
1999 }
2000
2001 return 0;
2002 }
2003
2004 static int link_handle_bound_by_list(Link *link) {
2005 Iterator i;
2006 Link *l;
2007 int r;
2008
2009 assert(link);
2010
2011 if (hashmap_isempty(link->bound_by_links))
2012 return 0;
2013
2014 HASHMAP_FOREACH (l, link->bound_by_links, i) {
2015 r = link_handle_bound_to_list(l);
2016 if (r < 0)
2017 return r;
2018 }
2019
2020 return 0;
2021 }
2022
2023 static int link_put_carrier(Link *link, Link *carrier, Hashmap **h) {
2024 int r;
2025
2026 assert(link);
2027 assert(carrier);
2028
2029 if (link == carrier)
2030 return 0;
2031
2032 if (hashmap_get(*h, INT_TO_PTR(carrier->ifindex)))
2033 return 0;
2034
2035 r = hashmap_ensure_allocated(h, NULL);
2036 if (r < 0)
2037 return r;
2038
2039 r = hashmap_put(*h, INT_TO_PTR(carrier->ifindex), carrier);
2040 if (r < 0)
2041 return r;
2042
2043 return 0;
2044 }
2045
2046 static int link_new_bound_by_list(Link *link) {
2047 Manager *m;
2048 Link *carrier;
2049 Iterator i;
2050 int r;
2051 bool list_updated = false;
2052
2053 assert(link);
2054 assert(link->manager);
2055
2056 m = link->manager;
2057
2058 HASHMAP_FOREACH(carrier, m->links, i) {
2059 if (!carrier->network)
2060 continue;
2061
2062 if (strv_isempty(carrier->network->bind_carrier))
2063 continue;
2064
2065 if (strv_fnmatch(carrier->network->bind_carrier, link->ifname, 0)) {
2066 r = link_put_carrier(link, carrier, &link->bound_by_links);
2067 if (r < 0)
2068 return r;
2069
2070 list_updated = true;
2071 }
2072 }
2073
2074 if (list_updated)
2075 link_dirty(link);
2076
2077 HASHMAP_FOREACH(carrier, link->bound_by_links, i) {
2078 r = link_put_carrier(carrier, link, &carrier->bound_to_links);
2079 if (r < 0)
2080 return r;
2081
2082 link_dirty(carrier);
2083 }
2084
2085 return 0;
2086 }
2087
2088 static int link_new_bound_to_list(Link *link) {
2089 Manager *m;
2090 Link *carrier;
2091 Iterator i;
2092 int r;
2093 bool list_updated = false;
2094
2095 assert(link);
2096 assert(link->manager);
2097
2098 if (!link->network)
2099 return 0;
2100
2101 if (strv_isempty(link->network->bind_carrier))
2102 return 0;
2103
2104 m = link->manager;
2105
2106 HASHMAP_FOREACH (carrier, m->links, i) {
2107 if (strv_fnmatch(link->network->bind_carrier, carrier->ifname, 0)) {
2108 r = link_put_carrier(link, carrier, &link->bound_to_links);
2109 if (r < 0)
2110 return r;
2111
2112 list_updated = true;
2113 }
2114 }
2115
2116 if (list_updated)
2117 link_dirty(link);
2118
2119 HASHMAP_FOREACH (carrier, link->bound_to_links, i) {
2120 r = link_put_carrier(carrier, link, &carrier->bound_by_links);
2121 if (r < 0)
2122 return r;
2123
2124 link_dirty(carrier);
2125 }
2126
2127 return 0;
2128 }
2129
2130 static int link_new_carrier_maps(Link *link) {
2131 int r;
2132
2133 r = link_new_bound_by_list(link);
2134 if (r < 0)
2135 return r;
2136
2137 r = link_handle_bound_by_list(link);
2138 if (r < 0)
2139 return r;
2140
2141 r = link_new_bound_to_list(link);
2142 if (r < 0)
2143 return r;
2144
2145 r = link_handle_bound_to_list(link);
2146 if (r < 0)
2147 return r;
2148
2149 return 0;
2150 }
2151
2152 static void link_free_bound_to_list(Link *link) {
2153 Link *bound_to;
2154 Iterator i;
2155
2156 HASHMAP_FOREACH (bound_to, link->bound_to_links, i) {
2157 hashmap_remove(link->bound_to_links, INT_TO_PTR(bound_to->ifindex));
2158
2159 if (hashmap_remove(bound_to->bound_by_links, INT_TO_PTR(link->ifindex)))
2160 link_dirty(bound_to);
2161 }
2162
2163 return;
2164 }
2165
2166 static void link_free_bound_by_list(Link *link) {
2167 Link *bound_by;
2168 Iterator i;
2169
2170 HASHMAP_FOREACH (bound_by, link->bound_by_links, i) {
2171 hashmap_remove(link->bound_by_links, INT_TO_PTR(bound_by->ifindex));
2172
2173 if (hashmap_remove(bound_by->bound_to_links, INT_TO_PTR(link->ifindex))) {
2174 link_dirty(bound_by);
2175 link_handle_bound_to_list(bound_by);
2176 }
2177 }
2178
2179 return;
2180 }
2181
2182 static void link_free_carrier_maps(Link *link) {
2183 bool list_updated = false;
2184
2185 assert(link);
2186
2187 if (!hashmap_isempty(link->bound_to_links)) {
2188 link_free_bound_to_list(link);
2189 list_updated = true;
2190 }
2191
2192 if (!hashmap_isempty(link->bound_by_links)) {
2193 link_free_bound_by_list(link);
2194 list_updated = true;
2195 }
2196
2197 if (list_updated)
2198 link_dirty(link);
2199
2200 return;
2201 }
2202
2203 void link_drop(Link *link) {
2204 if (!link || link->state == LINK_STATE_LINGER)
2205 return;
2206
2207 link_set_state(link, LINK_STATE_LINGER);
2208
2209 link_free_carrier_maps(link);
2210
2211 log_link_debug(link, "Link removed");
2212
2213 (void) unlink(link->state_file);
2214
2215 link_detach_from_manager(link);
2216
2217 link_unref(link);
2218
2219 return;
2220 }
2221
2222 static int link_joined(Link *link) {
2223 int r;
2224
2225 assert(link);
2226 assert(link->network);
2227
2228 if (!hashmap_isempty(link->bound_to_links)) {
2229 r = link_handle_bound_to_list(link);
2230 if (r < 0)
2231 return r;
2232 } else if (!(link->flags & IFF_UP)) {
2233 r = link_up(link);
2234 if (r < 0) {
2235 link_enter_failed(link);
2236 return r;
2237 }
2238 }
2239
2240 if (link->network->bridge) {
2241 r = link_set_bridge(link);
2242 if (r < 0)
2243 log_link_error_errno(link, r, "Could not set bridge message: %m");
2244 }
2245
2246 if (link->network->bond) {
2247 r = link_bond_set(link);
2248 if (r < 0)
2249 log_link_error_errno(link, r, "Could not set bond message: %m");
2250 }
2251
2252 if (link->network->use_br_vlan &&
2253 (link->network->bridge || streq_ptr("bridge", link->kind))) {
2254 r = link_set_bridge_vlan(link);
2255 if (r < 0)
2256 log_link_error_errno(link, r, "Could not set bridge vlan: %m");
2257 }
2258
2259 /* Skip setting up addresses until it gets carrier,
2260 or it would try to set addresses twice,
2261 which is bad for non-idempotent steps. */
2262 if (!link_has_carrier(link) && !link->network->configure_without_carrier)
2263 return 0;
2264
2265 return link_enter_set_addresses(link);
2266 }
2267
2268 static int netdev_join_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
2269 int r;
2270
2271 assert(link);
2272 assert(link->network);
2273
2274 link->enslaving--;
2275
2276 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
2277 return 1;
2278
2279 r = sd_netlink_message_get_errno(m);
2280 if (r < 0 && r != -EEXIST) {
2281 log_link_error_errno(link, r, "Could not join netdev: %m");
2282 link_enter_failed(link);
2283 return 1;
2284 } else
2285 log_link_debug(link, "Joined netdev");
2286
2287 if (link->enslaving <= 0)
2288 link_joined(link);
2289
2290 return 1;
2291 }
2292
2293 static int link_enter_join_netdev(Link *link) {
2294 NetDev *netdev;
2295 Iterator i;
2296 int r;
2297
2298 assert(link);
2299 assert(link->network);
2300 assert(link->state == LINK_STATE_PENDING);
2301
2302 link_set_state(link, LINK_STATE_ENSLAVING);
2303
2304 link_dirty(link);
2305
2306 if (!link->network->bridge &&
2307 !link->network->bond &&
2308 !link->network->vrf &&
2309 hashmap_isempty(link->network->stacked_netdevs))
2310 return link_joined(link);
2311
2312 if (link->network->bond) {
2313 if (link->network->bond->state == NETDEV_STATE_READY &&
2314 link->network->bond->ifindex == link->master_ifindex)
2315 return link_joined(link);
2316
2317 log_struct(LOG_DEBUG,
2318 LOG_LINK_INTERFACE(link),
2319 LOG_NETDEV_INTERFACE(link->network->bond),
2320 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", link->network->bond->ifname));
2321
2322 r = netdev_join(link->network->bond, link, netdev_join_handler);
2323 if (r < 0) {
2324 log_struct_errno(LOG_WARNING, r,
2325 LOG_LINK_INTERFACE(link),
2326 LOG_NETDEV_INTERFACE(link->network->bond),
2327 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", link->network->bond->ifname));
2328 link_enter_failed(link);
2329 return r;
2330 }
2331
2332 link->enslaving++;
2333 }
2334
2335 if (link->network->bridge) {
2336 log_struct(LOG_DEBUG,
2337 LOG_LINK_INTERFACE(link),
2338 LOG_NETDEV_INTERFACE(link->network->bridge),
2339 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", link->network->bridge->ifname));
2340
2341 r = netdev_join(link->network->bridge, link, netdev_join_handler);
2342 if (r < 0) {
2343 log_struct_errno(LOG_WARNING, r,
2344 LOG_LINK_INTERFACE(link),
2345 LOG_NETDEV_INTERFACE(link->network->bridge),
2346 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", link->network->bridge->ifname));
2347 link_enter_failed(link);
2348 return r;
2349 }
2350
2351 link->enslaving++;
2352 }
2353
2354 if (link->network->vrf) {
2355 log_struct(LOG_DEBUG,
2356 LOG_LINK_INTERFACE(link),
2357 LOG_NETDEV_INTERFACE(link->network->vrf),
2358 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", link->network->vrf->ifname));
2359
2360 r = netdev_join(link->network->vrf, link, netdev_join_handler);
2361 if (r < 0) {
2362 log_struct_errno(LOG_WARNING, r,
2363 LOG_LINK_INTERFACE(link),
2364 LOG_NETDEV_INTERFACE(link->network->vrf),
2365 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", link->network->vrf->ifname));
2366 link_enter_failed(link);
2367 return r;
2368 }
2369
2370 link->enslaving++;
2371 }
2372
2373 HASHMAP_FOREACH(netdev, link->network->stacked_netdevs, i) {
2374
2375 if (netdev->ifindex > 0) {
2376 link_joined(link);
2377 continue;
2378 }
2379
2380 log_struct(LOG_DEBUG,
2381 LOG_LINK_INTERFACE(link),
2382 LOG_NETDEV_INTERFACE(netdev),
2383 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", netdev->ifname));
2384
2385 r = netdev_join(netdev, link, netdev_join_handler);
2386 if (r < 0) {
2387 log_struct_errno(LOG_WARNING, r,
2388 LOG_LINK_INTERFACE(link),
2389 LOG_NETDEV_INTERFACE(netdev),
2390 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", netdev->ifname));
2391 link_enter_failed(link);
2392 return r;
2393 }
2394
2395 link->enslaving++;
2396 }
2397
2398 return 0;
2399 }
2400
2401 static int link_set_ipv4_forward(Link *link) {
2402 int r;
2403
2404 if (!link_ipv4_forward_enabled(link))
2405 return 0;
2406
2407 /* We propagate the forwarding flag from one interface to the
2408 * global setting one way. This means: as long as at least one
2409 * interface was configured at any time that had IP forwarding
2410 * enabled the setting will stay on for good. We do this
2411 * primarily to keep IPv4 and IPv6 packet forwarding behaviour
2412 * somewhat in sync (see below). */
2413
2414 r = write_string_file("/proc/sys/net/ipv4/ip_forward", "1", WRITE_STRING_FILE_VERIFY_ON_FAILURE | WRITE_STRING_FILE_DISABLE_BUFFER);
2415 if (r < 0)
2416 log_link_warning_errno(link, r, "Cannot turn on IPv4 packet forwarding, ignoring: %m");
2417
2418 return 0;
2419 }
2420
2421 static int link_set_ipv6_forward(Link *link) {
2422 int r;
2423
2424 if (!link_ipv6_forward_enabled(link))
2425 return 0;
2426
2427 /* On Linux, the IPv6 stack does not know a per-interface
2428 * packet forwarding setting: either packet forwarding is on
2429 * for all, or off for all. We hence don't bother with a
2430 * per-interface setting, but simply propagate the interface
2431 * flag, if it is set, to the global flag, one-way. Note that
2432 * while IPv4 would allow a per-interface flag, we expose the
2433 * same behaviour there and also propagate the setting from
2434 * one to all, to keep things simple (see above). */
2435
2436 r = write_string_file("/proc/sys/net/ipv6/conf/all/forwarding", "1", WRITE_STRING_FILE_VERIFY_ON_FAILURE | WRITE_STRING_FILE_DISABLE_BUFFER);
2437 if (r < 0)
2438 log_link_warning_errno(link, r, "Cannot configure IPv6 packet forwarding, ignoring: %m");
2439
2440 return 0;
2441 }
2442
2443 static int link_set_ipv6_privacy_extensions(Link *link) {
2444 char buf[DECIMAL_STR_MAX(unsigned) + 1];
2445 IPv6PrivacyExtensions s;
2446 const char *p = NULL;
2447 int r;
2448
2449 s = link_ipv6_privacy_extensions(link);
2450 if (s < 0)
2451 return 0;
2452
2453 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/use_tempaddr");
2454 xsprintf(buf, "%u", (unsigned) link->network->ipv6_privacy_extensions);
2455
2456 r = write_string_file(p, buf, WRITE_STRING_FILE_VERIFY_ON_FAILURE | WRITE_STRING_FILE_DISABLE_BUFFER);
2457 if (r < 0)
2458 log_link_warning_errno(link, r, "Cannot configure IPv6 privacy extension for interface: %m");
2459
2460 return 0;
2461 }
2462
2463 static int link_set_ipv6_accept_ra(Link *link) {
2464 const char *p = NULL;
2465 int r;
2466
2467 /* Make this a NOP if IPv6 is not available */
2468 if (!socket_ipv6_is_supported())
2469 return 0;
2470
2471 if (link->flags & IFF_LOOPBACK)
2472 return 0;
2473
2474 if (!link->network)
2475 return 0;
2476
2477 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/accept_ra");
2478
2479 /* We handle router advertisements ourselves, tell the kernel to GTFO */
2480 r = write_string_file(p, "0", WRITE_STRING_FILE_VERIFY_ON_FAILURE | WRITE_STRING_FILE_DISABLE_BUFFER);
2481 if (r < 0)
2482 log_link_warning_errno(link, r, "Cannot disable kernel IPv6 accept_ra for interface: %m");
2483
2484 return 0;
2485 }
2486
2487 static int link_set_ipv6_dad_transmits(Link *link) {
2488 char buf[DECIMAL_STR_MAX(int) + 1];
2489 const char *p = NULL;
2490 int r;
2491
2492 /* Make this a NOP if IPv6 is not available */
2493 if (!socket_ipv6_is_supported())
2494 return 0;
2495
2496 if (link->flags & IFF_LOOPBACK)
2497 return 0;
2498
2499 if (!link->network)
2500 return 0;
2501
2502 if (link->network->ipv6_dad_transmits < 0)
2503 return 0;
2504
2505 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/dad_transmits");
2506 xsprintf(buf, "%i", link->network->ipv6_dad_transmits);
2507
2508 r = write_string_file(p, buf, WRITE_STRING_FILE_VERIFY_ON_FAILURE | WRITE_STRING_FILE_DISABLE_BUFFER);
2509 if (r < 0)
2510 log_link_warning_errno(link, r, "Cannot set IPv6 dad transmits for interface: %m");
2511
2512 return 0;
2513 }
2514
2515 static int link_set_ipv6_hop_limit(Link *link) {
2516 char buf[DECIMAL_STR_MAX(int) + 1];
2517 const char *p = NULL;
2518 int r;
2519
2520 /* Make this a NOP if IPv6 is not available */
2521 if (!socket_ipv6_is_supported())
2522 return 0;
2523
2524 if (link->flags & IFF_LOOPBACK)
2525 return 0;
2526
2527 if (!link->network)
2528 return 0;
2529
2530 if (link->network->ipv6_hop_limit < 0)
2531 return 0;
2532
2533 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/hop_limit");
2534 xsprintf(buf, "%i", link->network->ipv6_hop_limit);
2535
2536 r = write_string_file(p, buf, WRITE_STRING_FILE_VERIFY_ON_FAILURE | WRITE_STRING_FILE_DISABLE_BUFFER);
2537 if (r < 0)
2538 log_link_warning_errno(link, r, "Cannot set IPv6 hop limit for interface: %m");
2539
2540 return 0;
2541 }
2542
2543 static int link_set_ipv6_mtu(Link *link) {
2544 char buf[DECIMAL_STR_MAX(unsigned) + 1];
2545 const char *p = NULL;
2546 int r;
2547
2548 /* Make this a NOP if IPv6 is not available */
2549 if (!socket_ipv6_is_supported())
2550 return 0;
2551
2552 if (link->flags & IFF_LOOPBACK)
2553 return 0;
2554
2555 if (link->network->ipv6_mtu == 0)
2556 return 0;
2557
2558 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/mtu");
2559
2560 xsprintf(buf, "%" PRIu32, link->network->ipv6_mtu);
2561
2562 r = write_string_file(p, buf, WRITE_STRING_FILE_DISABLE_BUFFER);
2563 if (r < 0)
2564 log_link_warning_errno(link, r, "Cannot set IPv6 MTU for interface: %m");
2565
2566 return 0;
2567 }
2568
2569 static bool link_is_static_address_configured(Link *link, Address *address) {
2570 Address *net_address;
2571
2572 assert(link);
2573 assert(address);
2574
2575 if (!link->network)
2576 return false;
2577
2578 LIST_FOREACH(addresses, net_address, link->network->static_addresses)
2579 if (address_equal(net_address, address))
2580 return true;
2581
2582 return false;
2583 }
2584
2585 static bool link_is_static_route_configured(Link *link, Route *route) {
2586 Route *net_route;
2587
2588 assert(link);
2589 assert(route);
2590
2591 if (!link->network)
2592 return false;
2593
2594 LIST_FOREACH(routes, net_route, link->network->static_routes)
2595 if (route_equal(net_route, route))
2596 return true;
2597
2598 return false;
2599 }
2600
2601 static int link_drop_foreign_config(Link *link) {
2602 Address *address;
2603 Route *route;
2604 Iterator i;
2605 int r;
2606
2607 SET_FOREACH(address, link->addresses_foreign, i) {
2608 /* we consider IPv6LL addresses to be managed by the kernel */
2609 if (address->family == AF_INET6 && in_addr_is_link_local(AF_INET6, &address->in_addr) == 1)
2610 continue;
2611
2612 if (link_is_static_address_configured(link, address)) {
2613 r = address_add(link, address->family, &address->in_addr, address->prefixlen, NULL);
2614 if (r < 0)
2615 return log_link_error_errno(link, r, "Failed to add address: %m");
2616 } else {
2617 r = address_remove(address, link, NULL);
2618 if (r < 0)
2619 return r;
2620 }
2621 }
2622
2623 SET_FOREACH(route, link->routes_foreign, i) {
2624 /* do not touch routes managed by the kernel */
2625 if (route->protocol == RTPROT_KERNEL)
2626 continue;
2627
2628 if (link_is_static_route_configured(link, route)) {
2629 r = route_add(link, route->family, &route->dst, route->dst_prefixlen, route->tos, route->priority, route->table, NULL);
2630 if (r < 0)
2631 return r;
2632 } else {
2633 r = route_remove(route, link, NULL);
2634 if (r < 0)
2635 return r;
2636 }
2637 }
2638
2639 return 0;
2640 }
2641
2642 static int link_drop_config(Link *link) {
2643 Address *address, *pool_address;
2644 Route *route;
2645 Iterator i;
2646 int r;
2647
2648 SET_FOREACH(address, link->addresses, i) {
2649 /* we consider IPv6LL addresses to be managed by the kernel */
2650 if (address->family == AF_INET6 && in_addr_is_link_local(AF_INET6, &address->in_addr) == 1)
2651 continue;
2652
2653 r = address_remove(address, link, NULL);
2654 if (r < 0)
2655 return r;
2656
2657 /* If this address came from an address pool, clean up the pool */
2658 LIST_FOREACH(addresses, pool_address, link->pool_addresses) {
2659 if (address_equal(address, pool_address)) {
2660 LIST_REMOVE(addresses, link->pool_addresses, pool_address);
2661 address_free(pool_address);
2662 break;
2663 }
2664 }
2665 }
2666
2667 SET_FOREACH(route, link->routes, i) {
2668 /* do not touch routes managed by the kernel */
2669 if (route->protocol == RTPROT_KERNEL)
2670 continue;
2671
2672 r = route_remove(route, link, NULL);
2673 if (r < 0)
2674 return r;
2675 }
2676
2677 ndisc_flush(link);
2678
2679 return 0;
2680 }
2681
2682 static int link_update_lldp(Link *link) {
2683 int r;
2684
2685 assert(link);
2686
2687 if (!link->lldp)
2688 return 0;
2689
2690 if (link->flags & IFF_UP) {
2691 r = sd_lldp_start(link->lldp);
2692 if (r > 0)
2693 log_link_debug(link, "Started LLDP.");
2694 } else {
2695 r = sd_lldp_stop(link->lldp);
2696 if (r > 0)
2697 log_link_debug(link, "Stopped LLDP.");
2698 }
2699
2700 return r;
2701 }
2702
2703 static int link_configure_can(Link *link) {
2704 int r;
2705
2706 if (streq_ptr(link->kind, "can")) {
2707 /* The CAN interface must be down to configure bitrate, etc... */
2708 if ((link->flags & IFF_UP)) {
2709 r = link_down(link);
2710 if (r < 0) {
2711 link_enter_failed(link);
2712 return r;
2713 }
2714
2715 return 0;
2716 }
2717
2718 return link_set_can(link);
2719 }
2720
2721 if (!(link->flags & IFF_UP)) {
2722 r = link_up_can(link);
2723 if (r < 0) {
2724 link_enter_failed(link);
2725 return r;
2726 }
2727 }
2728
2729 return 0;
2730 }
2731
2732 static int link_configure(Link *link) {
2733 int r;
2734
2735 assert(link);
2736 assert(link->network);
2737 assert(link->state == LINK_STATE_PENDING);
2738
2739 if (STRPTR_IN_SET(link->kind, "can", "vcan"))
2740 return link_configure_can(link);
2741
2742 /* Drop foreign config, but ignore loopback or critical devices.
2743 * We do not want to remove loopback address or addresses used for root NFS. */
2744 if (!(link->flags & IFF_LOOPBACK) && !(link->network->dhcp_critical)) {
2745 r = link_drop_foreign_config(link);
2746 if (r < 0)
2747 return r;
2748 }
2749
2750 r = link_set_proxy_arp(link);
2751 if (r < 0)
2752 return r;
2753
2754 r = ipv6_proxy_ndp_addresses_configure(link);
2755 if (r < 0)
2756 return r;
2757
2758 r = link_set_ipv4_forward(link);
2759 if (r < 0)
2760 return r;
2761
2762 r = link_set_ipv6_forward(link);
2763 if (r < 0)
2764 return r;
2765
2766 r = link_set_ipv6_privacy_extensions(link);
2767 if (r < 0)
2768 return r;
2769
2770 r = link_set_ipv6_accept_ra(link);
2771 if (r < 0)
2772 return r;
2773
2774 r = link_set_ipv6_dad_transmits(link);
2775 if (r < 0)
2776 return r;
2777
2778 r = link_set_ipv6_hop_limit(link);
2779 if (r < 0)
2780 return r;
2781
2782 r = link_set_flags(link);
2783 if (r < 0)
2784 return r;
2785
2786 r = link_set_ipv6_mtu(link);
2787 if (r < 0)
2788 return r;
2789
2790 if (link_ipv4ll_enabled(link)) {
2791 r = ipv4ll_configure(link);
2792 if (r < 0)
2793 return r;
2794 }
2795
2796 if (link_dhcp4_enabled(link)) {
2797 r = dhcp4_set_promote_secondaries(link);
2798 if (r < 0)
2799 return r;
2800
2801 r = dhcp4_configure(link);
2802 if (r < 0)
2803 return r;
2804 }
2805
2806 if (link_dhcp4_server_enabled(link)) {
2807 r = sd_dhcp_server_new(&link->dhcp_server, link->ifindex);
2808 if (r < 0)
2809 return r;
2810
2811 r = sd_dhcp_server_attach_event(link->dhcp_server, NULL, 0);
2812 if (r < 0)
2813 return r;
2814 }
2815
2816 if (link_dhcp6_enabled(link) ||
2817 link_ipv6_accept_ra_enabled(link)) {
2818 r = dhcp6_configure(link);
2819 if (r < 0)
2820 return r;
2821 }
2822
2823 if (link_ipv6_accept_ra_enabled(link)) {
2824 r = ndisc_configure(link);
2825 if (r < 0)
2826 return r;
2827 }
2828
2829 if (link_radv_enabled(link)) {
2830 r = radv_configure(link);
2831 if (r < 0)
2832 return r;
2833 }
2834
2835 if (link_lldp_rx_enabled(link)) {
2836 r = sd_lldp_new(&link->lldp);
2837 if (r < 0)
2838 return r;
2839
2840 r = sd_lldp_set_ifindex(link->lldp, link->ifindex);
2841 if (r < 0)
2842 return r;
2843
2844 r = sd_lldp_match_capabilities(link->lldp,
2845 link->network->lldp_mode == LLDP_MODE_ROUTERS_ONLY ?
2846 SD_LLDP_SYSTEM_CAPABILITIES_ALL_ROUTERS :
2847 SD_LLDP_SYSTEM_CAPABILITIES_ALL);
2848 if (r < 0)
2849 return r;
2850
2851 r = sd_lldp_set_filter_address(link->lldp, &link->mac);
2852 if (r < 0)
2853 return r;
2854
2855 r = sd_lldp_attach_event(link->lldp, NULL, 0);
2856 if (r < 0)
2857 return r;
2858
2859 r = sd_lldp_set_callback(link->lldp, lldp_handler, link);
2860 if (r < 0)
2861 return r;
2862
2863 r = link_update_lldp(link);
2864 if (r < 0)
2865 return r;
2866 }
2867
2868 if (link->network->mtu > 0) {
2869 r = link_set_mtu(link, link->network->mtu);
2870 if (r < 0)
2871 return r;
2872 }
2873
2874 return link_configure_after_setting_mtu(link);
2875 }
2876
2877 static int link_configure_after_setting_mtu(Link *link) {
2878 int r;
2879
2880 assert(link);
2881 assert(link->network);
2882 assert(link->state == LINK_STATE_PENDING);
2883
2884 if (link->setting_mtu)
2885 return 0;
2886
2887 if (link_has_carrier(link) || link->network->configure_without_carrier) {
2888 r = link_acquire_conf(link);
2889 if (r < 0)
2890 return r;
2891 }
2892
2893 return link_enter_join_netdev(link);
2894 }
2895
2896 static int duid_set_uuid(DUID *duid, sd_id128_t uuid) {
2897 assert(duid);
2898
2899 if (duid->raw_data_len > 0)
2900 return 0;
2901
2902 if (duid->type != DUID_TYPE_UUID)
2903 return -EINVAL;
2904
2905 memcpy(&duid->raw_data, &uuid, sizeof(sd_id128_t));
2906 duid->raw_data_len = sizeof(sd_id128_t);
2907
2908 return 1;
2909 }
2910
2911 int get_product_uuid_handler(sd_bus_message *m, void *userdata, sd_bus_error *ret_error) {
2912 Manager *manager = userdata;
2913 const sd_bus_error *e;
2914 const void *a;
2915 size_t sz;
2916 DUID *duid;
2917 Link *link;
2918 int r;
2919
2920 assert(m);
2921 assert(manager);
2922
2923 e = sd_bus_message_get_error(m);
2924 if (e) {
2925 log_error_errno(sd_bus_error_get_errno(e),
2926 "Could not get product UUID. Falling back to use machine-app-specific ID as DUID-UUID: %s",
2927 e->message);
2928 goto configure;
2929 }
2930
2931 r = sd_bus_message_read_array(m, 'y', &a, &sz);
2932 if (r < 0)
2933 goto configure;
2934
2935 if (sz != sizeof(sd_id128_t)) {
2936 log_error("Invalid product UUID. Falling back to use machine-app-specific ID as DUID-UUID.");
2937 goto configure;
2938 }
2939
2940 memcpy(&manager->product_uuid, a, sz);
2941 while ((duid = set_steal_first(manager->duids_requesting_uuid)))
2942 (void) duid_set_uuid(duid, manager->product_uuid);
2943
2944 manager->duids_requesting_uuid = set_free(manager->duids_requesting_uuid);
2945
2946 configure:
2947 while ((link = set_steal_first(manager->links_requesting_uuid))) {
2948 r = link_configure(link);
2949 if (r < 0)
2950 log_link_error_errno(link, r, "Failed to configure link: %m");
2951 }
2952
2953 manager->links_requesting_uuid = set_free(manager->links_requesting_uuid);
2954
2955 /* To avoid calling GetProductUUID() bus method so frequently, set the flag below
2956 * even if the method fails. */
2957 manager->has_product_uuid = true;
2958
2959 return 1;
2960 }
2961
2962 static bool link_requires_uuid(Link *link) {
2963 const DUID *duid;
2964
2965 assert(link);
2966 assert(link->manager);
2967 assert(link->network);
2968
2969 duid = link_get_duid(link);
2970 if (duid->type != DUID_TYPE_UUID || duid->raw_data_len != 0)
2971 return false;
2972
2973 if (link_dhcp4_enabled(link) && IN_SET(link->network->dhcp_client_identifier, DHCP_CLIENT_ID_DUID, DHCP_CLIENT_ID_DUID_ONLY))
2974 return true;
2975
2976 if (link_dhcp6_enabled(link) || link_ipv6_accept_ra_enabled(link))
2977 return true;
2978
2979 return false;
2980 }
2981
2982 static int link_configure_duid(Link *link) {
2983 Manager *m;
2984 DUID *duid;
2985 int r;
2986
2987 assert(link);
2988 assert(link->manager);
2989 assert(link->network);
2990
2991 m = link->manager;
2992 duid = link_get_duid(link);
2993
2994 if (!link_requires_uuid(link))
2995 return 1;
2996
2997 if (m->has_product_uuid) {
2998 (void) duid_set_uuid(duid, m->product_uuid);
2999 return 1;
3000 }
3001
3002 if (!m->links_requesting_uuid) {
3003 r = manager_request_product_uuid(m, link);
3004 if (r < 0) {
3005 if (r == -ENOMEM)
3006 return r;
3007
3008 log_link_warning_errno(link, r,
3009 "Failed to get product UUID. Falling back to use machine-app-specific ID as DUID-UUID: %m");
3010 return 1;
3011 }
3012 } else {
3013 r = set_put(m->links_requesting_uuid, link);
3014 if (r < 0)
3015 return log_oom();
3016
3017 r = set_put(m->duids_requesting_uuid, duid);
3018 if (r < 0)
3019 return log_oom();
3020 }
3021
3022 return 0;
3023 }
3024
3025 static int link_initialized_and_synced(Link *link) {
3026 Network *network;
3027 int r;
3028
3029 assert(link);
3030 assert(link->ifname);
3031 assert(link->manager);
3032
3033 if (link->state != LINK_STATE_PENDING)
3034 return 1;
3035
3036 log_link_debug(link, "Link state is up-to-date");
3037
3038 r = link_new_bound_by_list(link);
3039 if (r < 0)
3040 return r;
3041
3042 r = link_handle_bound_by_list(link);
3043 if (r < 0)
3044 return r;
3045
3046 if (!link->network) {
3047 r = network_get(link->manager, link->sd_device, link->ifname,
3048 &link->mac, &network);
3049 if (r == -ENOENT) {
3050 link_enter_unmanaged(link);
3051 return 1;
3052 } else if (r == 0 && network->unmanaged) {
3053 link_enter_unmanaged(link);
3054 return 0;
3055 } else if (r < 0)
3056 return r;
3057
3058 if (link->flags & IFF_LOOPBACK) {
3059 if (network->link_local != ADDRESS_FAMILY_NO)
3060 log_link_debug(link, "Ignoring link-local autoconfiguration for loopback link");
3061
3062 if (network->dhcp != ADDRESS_FAMILY_NO)
3063 log_link_debug(link, "Ignoring DHCP clients for loopback link");
3064
3065 if (network->dhcp_server)
3066 log_link_debug(link, "Ignoring DHCP server for loopback link");
3067 }
3068
3069 r = network_apply(network, link);
3070 if (r < 0)
3071 return r;
3072 }
3073
3074 r = link_new_bound_to_list(link);
3075 if (r < 0)
3076 return r;
3077
3078 /* link_configure_duid() returns 0 if it requests product UUID. In that case,
3079 * link_configure() is called later asynchronously. */
3080 r = link_configure_duid(link);
3081 if (r <= 0)
3082 return r;
3083
3084 r = link_configure(link);
3085 if (r < 0)
3086 return r;
3087
3088 return 1;
3089 }
3090
3091 static int link_initialized_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
3092 (void) link_initialized_and_synced(link);
3093 return 1;
3094 }
3095
3096 int link_initialized(Link *link, sd_device *device) {
3097 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
3098 int r;
3099
3100 assert(link);
3101 assert(link->manager);
3102 assert(link->manager->rtnl);
3103 assert(device);
3104
3105 if (link->state != LINK_STATE_PENDING)
3106 return 0;
3107
3108 if (link->sd_device)
3109 return 0;
3110
3111 log_link_debug(link, "udev initialized link");
3112
3113 link->sd_device = sd_device_ref(device);
3114
3115 /* udev has initialized the link, but we don't know if we have yet
3116 * processed the NEWLINK messages with the latest state. Do a GETLINK,
3117 * when it returns we know that the pending NEWLINKs have already been
3118 * processed and that we are up-to-date */
3119
3120 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_GETLINK,
3121 link->ifindex);
3122 if (r < 0)
3123 return r;
3124
3125 r = netlink_call_async(link->manager->rtnl, NULL, req, link_initialized_handler,
3126 link_netlink_destroy_callback, link);
3127 if (r < 0)
3128 return r;
3129
3130 link_ref(link);
3131
3132 return 0;
3133 }
3134
3135 static int link_load(Link *link) {
3136 _cleanup_free_ char *network_file = NULL,
3137 *addresses = NULL,
3138 *routes = NULL,
3139 *dhcp4_address = NULL,
3140 *ipv4ll_address = NULL;
3141 union in_addr_union address;
3142 union in_addr_union route_dst;
3143 const char *p;
3144 int r;
3145
3146 assert(link);
3147
3148 r = parse_env_file(NULL, link->state_file,
3149 "NETWORK_FILE", &network_file,
3150 "ADDRESSES", &addresses,
3151 "ROUTES", &routes,
3152 "DHCP4_ADDRESS", &dhcp4_address,
3153 "IPV4LL_ADDRESS", &ipv4ll_address);
3154 if (r < 0 && r != -ENOENT)
3155 return log_link_error_errno(link, r, "Failed to read %s: %m", link->state_file);
3156
3157 if (network_file) {
3158 Network *network;
3159 char *suffix;
3160
3161 /* drop suffix */
3162 suffix = strrchr(network_file, '.');
3163 if (!suffix) {
3164 log_link_debug(link, "Failed to get network name from %s", network_file);
3165 goto network_file_fail;
3166 }
3167 *suffix = '\0';
3168
3169 r = network_get_by_name(link->manager, basename(network_file), &network);
3170 if (r < 0) {
3171 log_link_debug_errno(link, r, "Failed to get network %s: %m", basename(network_file));
3172 goto network_file_fail;
3173 }
3174
3175 r = network_apply(network, link);
3176 if (r < 0)
3177 return log_link_error_errno(link, r, "Failed to apply network %s: %m", basename(network_file));
3178 }
3179
3180 network_file_fail:
3181
3182 if (addresses) {
3183 p = addresses;
3184
3185 for (;;) {
3186 _cleanup_free_ char *address_str = NULL;
3187 char *prefixlen_str;
3188 int family;
3189 unsigned char prefixlen;
3190
3191 r = extract_first_word(&p, &address_str, NULL, 0);
3192 if (r < 0) {
3193 log_link_debug_errno(link, r, "Failed to extract next address string: %m");
3194 continue;
3195 }
3196 if (r == 0)
3197 break;
3198
3199 prefixlen_str = strchr(address_str, '/');
3200 if (!prefixlen_str) {
3201 log_link_debug(link, "Failed to parse address and prefix length %s", address_str);
3202 continue;
3203 }
3204
3205 *prefixlen_str++ = '\0';
3206
3207 r = sscanf(prefixlen_str, "%hhu", &prefixlen);
3208 if (r != 1) {
3209 log_link_error(link, "Failed to parse prefixlen %s", prefixlen_str);
3210 continue;
3211 }
3212
3213 r = in_addr_from_string_auto(address_str, &family, &address);
3214 if (r < 0) {
3215 log_link_debug_errno(link, r, "Failed to parse address %s: %m", address_str);
3216 continue;
3217 }
3218
3219 r = address_add(link, family, &address, prefixlen, NULL);
3220 if (r < 0)
3221 return log_link_error_errno(link, r, "Failed to add address: %m");
3222 }
3223 }
3224
3225 if (routes) {
3226 p = routes;
3227
3228 for (;;) {
3229 Route *route;
3230 _cleanup_free_ char *route_str = NULL;
3231 _cleanup_(sd_event_source_unrefp) sd_event_source *expire = NULL;
3232 usec_t lifetime;
3233 char *prefixlen_str;
3234 int family;
3235 unsigned char prefixlen, tos, table;
3236 uint32_t priority;
3237
3238 r = extract_first_word(&p, &route_str, NULL, 0);
3239 if (r < 0) {
3240 log_link_debug_errno(link, r, "Failed to extract next route string: %m");
3241 continue;
3242 }
3243 if (r == 0)
3244 break;
3245
3246 prefixlen_str = strchr(route_str, '/');
3247 if (!prefixlen_str) {
3248 log_link_debug(link, "Failed to parse route %s", route_str);
3249 continue;
3250 }
3251
3252 *prefixlen_str++ = '\0';
3253
3254 r = sscanf(prefixlen_str, "%hhu/%hhu/%"SCNu32"/%hhu/"USEC_FMT, &prefixlen, &tos, &priority, &table, &lifetime);
3255 if (r != 5) {
3256 log_link_debug(link,
3257 "Failed to parse destination prefix length, tos, priority, table or expiration %s",
3258 prefixlen_str);
3259 continue;
3260 }
3261
3262 r = in_addr_from_string_auto(route_str, &family, &route_dst);
3263 if (r < 0) {
3264 log_link_debug_errno(link, r, "Failed to parse route destination %s: %m", route_str);
3265 continue;
3266 }
3267
3268 r = route_add(link, family, &route_dst, prefixlen, tos, priority, table, &route);
3269 if (r < 0)
3270 return log_link_error_errno(link, r, "Failed to add route: %m");
3271
3272 if (lifetime != USEC_INFINITY && !kernel_route_expiration_supported()) {
3273 r = sd_event_add_time(link->manager->event, &expire, clock_boottime_or_monotonic(), lifetime,
3274 0, route_expire_handler, route);
3275 if (r < 0)
3276 log_link_warning_errno(link, r, "Could not arm route expiration handler: %m");
3277 }
3278
3279 route->lifetime = lifetime;
3280 sd_event_source_unref(route->expire);
3281 route->expire = TAKE_PTR(expire);
3282 }
3283 }
3284
3285 if (dhcp4_address) {
3286 r = in_addr_from_string(AF_INET, dhcp4_address, &address);
3287 if (r < 0) {
3288 log_link_debug_errno(link, r, "Failed to parse DHCPv4 address %s: %m", dhcp4_address);
3289 goto dhcp4_address_fail;
3290 }
3291
3292 r = sd_dhcp_client_new(&link->dhcp_client, link->network ? link->network->dhcp_anonymize : 0);
3293 if (r < 0)
3294 return log_link_error_errno(link, r, "Failed to create DHCPv4 client: %m");
3295
3296 r = sd_dhcp_client_set_request_address(link->dhcp_client, &address.in);
3297 if (r < 0)
3298 return log_link_error_errno(link, r, "Failed to set initial DHCPv4 address %s: %m", dhcp4_address);
3299 }
3300
3301 dhcp4_address_fail:
3302
3303 if (ipv4ll_address) {
3304 r = in_addr_from_string(AF_INET, ipv4ll_address, &address);
3305 if (r < 0) {
3306 log_link_debug_errno(link, r, "Failed to parse IPv4LL address %s: %m", ipv4ll_address);
3307 goto ipv4ll_address_fail;
3308 }
3309
3310 r = sd_ipv4ll_new(&link->ipv4ll);
3311 if (r < 0)
3312 return log_link_error_errno(link, r, "Failed to create IPv4LL client: %m");
3313
3314 r = sd_ipv4ll_set_address(link->ipv4ll, &address.in);
3315 if (r < 0)
3316 return log_link_error_errno(link, r, "Failed to set initial IPv4LL address %s: %m", ipv4ll_address);
3317 }
3318
3319 ipv4ll_address_fail:
3320
3321 return 0;
3322 }
3323
3324 int link_add(Manager *m, sd_netlink_message *message, Link **ret) {
3325 _cleanup_(sd_device_unrefp) sd_device *device = NULL;
3326 char ifindex_str[2 + DECIMAL_STR_MAX(int)];
3327 Link *link;
3328 int r;
3329
3330 assert(m);
3331 assert(m->rtnl);
3332 assert(message);
3333 assert(ret);
3334
3335 r = link_new(m, message, ret);
3336 if (r < 0)
3337 return r;
3338
3339 link = *ret;
3340
3341 log_link_debug(link, "Link %d added", link->ifindex);
3342
3343 r = link_load(link);
3344 if (r < 0)
3345 return r;
3346
3347 if (detect_container() <= 0) {
3348 /* not in a container, udev will be around */
3349 sprintf(ifindex_str, "n%d", link->ifindex);
3350 r = sd_device_new_from_device_id(&device, ifindex_str);
3351 if (r < 0) {
3352 log_link_warning_errno(link, r, "Could not find device: %m");
3353 goto failed;
3354 }
3355
3356 r = sd_device_get_is_initialized(device);
3357 if (r < 0) {
3358 log_link_warning_errno(link, r, "Could not determine whether the device is initialized or not: %m");
3359 goto failed;
3360 }
3361 if (r == 0) {
3362 /* not yet ready */
3363 log_link_debug(link, "link pending udev initialization...");
3364 return 0;
3365 }
3366
3367 r = link_initialized(link, device);
3368 if (r < 0)
3369 goto failed;
3370 } else {
3371 r = link_initialized_and_synced(link);
3372 if (r < 0)
3373 goto failed;
3374 }
3375
3376 return 0;
3377 failed:
3378 link_enter_failed(link);
3379 return r;
3380 }
3381
3382 int link_ipv6ll_gained(Link *link, const struct in6_addr *address) {
3383 int r;
3384
3385 assert(link);
3386
3387 log_link_info(link, "Gained IPv6LL");
3388
3389 link->ipv6ll_address = *address;
3390 link_check_ready(link);
3391
3392 if (!IN_SET(link->state, LINK_STATE_PENDING, LINK_STATE_UNMANAGED, LINK_STATE_FAILED)) {
3393 r = link_acquire_ipv6_conf(link);
3394 if (r < 0) {
3395 link_enter_failed(link);
3396 return r;
3397 }
3398 }
3399
3400 return 0;
3401 }
3402
3403 static int link_carrier_gained(Link *link) {
3404 int r;
3405
3406 assert(link);
3407
3408 if (!IN_SET(link->state, LINK_STATE_PENDING, LINK_STATE_UNMANAGED, LINK_STATE_FAILED)) {
3409 r = link_acquire_conf(link);
3410 if (r < 0) {
3411 link_enter_failed(link);
3412 return r;
3413 }
3414
3415 r = link_enter_set_addresses(link);
3416 if (r < 0)
3417 return r;
3418 }
3419
3420 r = link_handle_bound_by_list(link);
3421 if (r < 0)
3422 return r;
3423
3424 return 0;
3425 }
3426
3427 static int link_carrier_lost(Link *link) {
3428 int r;
3429
3430 assert(link);
3431
3432 /* Some devices reset itself while setting the MTU. This causes the DHCP client fall into a loop.
3433 * setting_mtu keep track whether the device got reset because of setting MTU and does not drop the
3434 * configuration and stop the clients as well. */
3435 if (link->setting_mtu)
3436 return 0;
3437
3438 r = link_stop_clients(link);
3439 if (r < 0) {
3440 link_enter_failed(link);
3441 return r;
3442 }
3443
3444 if (link_dhcp4_server_enabled(link))
3445 (void) sd_dhcp_server_stop(link->dhcp_server);
3446
3447 r = link_drop_config(link);
3448 if (r < 0)
3449 return r;
3450
3451 if (!IN_SET(link->state, LINK_STATE_UNMANAGED, LINK_STATE_PENDING)) {
3452 log_link_debug(link, "State is %s, dropping config", link_state_to_string(link->state));
3453 r = link_drop_foreign_config(link);
3454 if (r < 0)
3455 return r;
3456 }
3457
3458 r = link_handle_bound_by_list(link);
3459 if (r < 0)
3460 return r;
3461
3462 return 0;
3463 }
3464
3465 int link_carrier_reset(Link *link) {
3466 int r;
3467
3468 assert(link);
3469
3470 if (link_has_carrier(link)) {
3471 r = link_carrier_lost(link);
3472 if (r < 0)
3473 return r;
3474
3475 r = link_carrier_gained(link);
3476 if (r < 0)
3477 return r;
3478
3479 log_link_info(link, "Reset carrier");
3480 }
3481
3482 return 0;
3483 }
3484
3485 int link_update(Link *link, sd_netlink_message *m) {
3486 struct ether_addr mac;
3487 const char *ifname;
3488 uint32_t mtu;
3489 bool had_carrier, carrier_gained, carrier_lost;
3490 int r;
3491
3492 assert(link);
3493 assert(link->ifname);
3494 assert(m);
3495
3496 if (link->state == LINK_STATE_LINGER) {
3497 log_link_info(link, "Link readded");
3498 link_set_state(link, LINK_STATE_ENSLAVING);
3499
3500 r = link_new_carrier_maps(link);
3501 if (r < 0)
3502 return r;
3503 }
3504
3505 r = sd_netlink_message_read_string(m, IFLA_IFNAME, &ifname);
3506 if (r >= 0 && !streq(ifname, link->ifname)) {
3507 log_link_info(link, "Interface name change detected, %s has been renamed to %s.", link->ifname, ifname);
3508
3509 if (link->state == LINK_STATE_PENDING) {
3510 r = free_and_strdup(&link->ifname, ifname);
3511 if (r < 0)
3512 return r;
3513 } else {
3514 Manager *manager = link->manager;
3515
3516 link_drop(link);
3517 r = link_add(manager, m, &link);
3518 if (r < 0)
3519 return r;
3520 }
3521 }
3522
3523 r = sd_netlink_message_read_u32(m, IFLA_MTU, &mtu);
3524 if (r >= 0 && mtu > 0) {
3525 link->mtu = mtu;
3526 if (link->original_mtu == 0) {
3527 link->original_mtu = mtu;
3528 log_link_debug(link, "Saved original MTU: %" PRIu32, link->original_mtu);
3529 }
3530
3531 if (link->dhcp_client) {
3532 r = sd_dhcp_client_set_mtu(link->dhcp_client,
3533 link->mtu);
3534 if (r < 0)
3535 return log_link_warning_errno(link, r, "Could not update MTU in DHCP client: %m");
3536 }
3537
3538 if (link->radv) {
3539 r = sd_radv_set_mtu(link->radv, link->mtu);
3540 if (r < 0)
3541 return log_link_warning_errno(link, r, "Could not set MTU for Router Advertisement: %m");
3542 }
3543 }
3544
3545 /* The kernel may broadcast NEWLINK messages without the MAC address
3546 set, simply ignore them. */
3547 r = sd_netlink_message_read_ether_addr(m, IFLA_ADDRESS, &mac);
3548 if (r >= 0) {
3549 if (memcmp(link->mac.ether_addr_octet, mac.ether_addr_octet,
3550 ETH_ALEN)) {
3551
3552 memcpy(link->mac.ether_addr_octet, mac.ether_addr_octet,
3553 ETH_ALEN);
3554
3555 log_link_debug(link, "MAC address: "
3556 "%02hhx:%02hhx:%02hhx:%02hhx:%02hhx:%02hhx",
3557 mac.ether_addr_octet[0],
3558 mac.ether_addr_octet[1],
3559 mac.ether_addr_octet[2],
3560 mac.ether_addr_octet[3],
3561 mac.ether_addr_octet[4],
3562 mac.ether_addr_octet[5]);
3563
3564 if (link->ipv4ll) {
3565 r = sd_ipv4ll_set_mac(link->ipv4ll, &link->mac);
3566 if (r < 0)
3567 return log_link_warning_errno(link, r, "Could not update MAC address in IPv4LL client: %m");
3568 }
3569
3570 if (link->dhcp_client) {
3571 r = sd_dhcp_client_set_mac(link->dhcp_client,
3572 (const uint8_t *) &link->mac,
3573 sizeof (link->mac),
3574 ARPHRD_ETHER);
3575 if (r < 0)
3576 return log_link_warning_errno(link, r, "Could not update MAC address in DHCP client: %m");
3577
3578 r = dhcp4_set_client_identifier(link);
3579 if (r < 0)
3580 return r;
3581 }
3582
3583 if (link->dhcp6_client) {
3584 const DUID* duid = link_get_duid(link);
3585
3586 r = sd_dhcp6_client_set_mac(link->dhcp6_client,
3587 (const uint8_t *) &link->mac,
3588 sizeof (link->mac),
3589 ARPHRD_ETHER);
3590 if (r < 0)
3591 return log_link_warning_errno(link, r, "Could not update MAC address in DHCPv6 client: %m");
3592
3593 r = sd_dhcp6_client_set_iaid(link->dhcp6_client,
3594 link->network->iaid);
3595 if (r < 0)
3596 return log_link_warning_errno(link, r, "Could not update DHCPv6 IAID: %m");
3597
3598 r = sd_dhcp6_client_set_duid(link->dhcp6_client,
3599 duid->type,
3600 duid->raw_data_len > 0 ? duid->raw_data : NULL,
3601 duid->raw_data_len);
3602 if (r < 0)
3603 return log_link_warning_errno(link, r, "Could not update DHCPv6 DUID: %m");
3604 }
3605
3606 if (link->radv) {
3607 r = sd_radv_set_mac(link->radv, &link->mac);
3608 if (r < 0)
3609 return log_link_warning_errno(link, r, "Could not update MAC for Router Advertisement: %m");
3610 }
3611
3612 if (link->ndisc) {
3613 r = sd_ndisc_set_mac(link->ndisc, &link->mac);
3614 if (r < 0)
3615 return log_link_warning_errno(link, r, "Could not update MAC for ndisc: %m");
3616 }
3617 }
3618 }
3619
3620 had_carrier = link_has_carrier(link);
3621
3622 r = link_update_flags(link, m);
3623 if (r < 0)
3624 return r;
3625
3626 r = link_update_lldp(link);
3627 if (r < 0)
3628 return r;
3629
3630 carrier_gained = !had_carrier && link_has_carrier(link);
3631 carrier_lost = had_carrier && !link_has_carrier(link);
3632
3633 if (carrier_gained) {
3634 log_link_info(link, "Gained carrier");
3635
3636 r = link_carrier_gained(link);
3637 if (r < 0)
3638 return r;
3639 } else if (carrier_lost) {
3640 log_link_info(link, "Lost carrier");
3641
3642 r = link_carrier_lost(link);
3643 if (r < 0)
3644 return r;
3645 }
3646
3647 return 0;
3648 }
3649
3650 static void print_link_hashmap(FILE *f, const char *prefix, Hashmap* h) {
3651 bool space = false;
3652 Iterator i;
3653 Link *link;
3654
3655 assert(f);
3656 assert(prefix);
3657
3658 if (hashmap_isempty(h))
3659 return;
3660
3661 fputs(prefix, f);
3662 HASHMAP_FOREACH(link, h, i) {
3663 if (space)
3664 fputc(' ', f);
3665
3666 fprintf(f, "%i", link->ifindex);
3667 space = true;
3668 }
3669
3670 fputc('\n', f);
3671 }
3672
3673 int link_save(Link *link) {
3674 _cleanup_free_ char *temp_path = NULL;
3675 _cleanup_fclose_ FILE *f = NULL;
3676 const char *admin_state, *oper_state;
3677 Address *a;
3678 Route *route;
3679 Iterator i;
3680 int r;
3681
3682 assert(link);
3683 assert(link->state_file);
3684 assert(link->lease_file);
3685 assert(link->manager);
3686
3687 if (link->state == LINK_STATE_LINGER) {
3688 unlink(link->state_file);
3689 return 0;
3690 }
3691
3692 link_lldp_save(link);
3693
3694 admin_state = link_state_to_string(link->state);
3695 assert(admin_state);
3696
3697 oper_state = link_operstate_to_string(link->operstate);
3698 assert(oper_state);
3699
3700 r = fopen_temporary(link->state_file, &f, &temp_path);
3701 if (r < 0)
3702 goto fail;
3703
3704 (void) __fsetlocking(f, FSETLOCKING_BYCALLER);
3705 (void) fchmod(fileno(f), 0644);
3706
3707 fprintf(f,
3708 "# This is private data. Do not parse.\n"
3709 "ADMIN_STATE=%s\n"
3710 "OPER_STATE=%s\n",
3711 admin_state, oper_state);
3712
3713 if (link->network) {
3714 bool space;
3715 sd_dhcp6_lease *dhcp6_lease = NULL;
3716 const char *dhcp_domainname = NULL;
3717 char **dhcp6_domains = NULL;
3718 char **dhcp_domains = NULL;
3719 unsigned j;
3720
3721 fprintf(f, "REQUIRED_FOR_ONLINE=%s\n",
3722 yes_no(link->network->required_for_online));
3723
3724 if (link->dhcp6_client) {
3725 r = sd_dhcp6_client_get_lease(link->dhcp6_client, &dhcp6_lease);
3726 if (r < 0 && r != -ENOMSG)
3727 log_link_debug(link, "No DHCPv6 lease");
3728 }
3729
3730 fprintf(f, "NETWORK_FILE=%s\n", link->network->filename);
3731
3732 fputs("DNS=", f);
3733 space = false;
3734
3735 for (j = 0; j < link->network->n_dns; j++) {
3736 _cleanup_free_ char *b = NULL;
3737
3738 r = in_addr_to_string(link->network->dns[j].family,
3739 &link->network->dns[j].address, &b);
3740 if (r < 0) {
3741 log_debug_errno(r, "Failed to format address, ignoring: %m");
3742 continue;
3743 }
3744
3745 if (space)
3746 fputc(' ', f);
3747 fputs(b, f);
3748 space = true;
3749 }
3750
3751 if (link->network->dhcp_use_dns &&
3752 link->dhcp_lease) {
3753 const struct in_addr *addresses;
3754
3755 r = sd_dhcp_lease_get_dns(link->dhcp_lease, &addresses);
3756 if (r > 0) {
3757 if (space)
3758 fputc(' ', f);
3759 serialize_in_addrs(f, addresses, r);
3760 space = true;
3761 }
3762 }
3763
3764 if (link->network->dhcp_use_dns && dhcp6_lease) {
3765 struct in6_addr *in6_addrs;
3766
3767 r = sd_dhcp6_lease_get_dns(dhcp6_lease, &in6_addrs);
3768 if (r > 0) {
3769 if (space)
3770 fputc(' ', f);
3771 serialize_in6_addrs(f, in6_addrs, r);
3772 space = true;
3773 }
3774 }
3775
3776 /* Make sure to flush out old entries before we use the NDISC data */
3777 ndisc_vacuum(link);
3778
3779 if (link->network->ipv6_accept_ra_use_dns && link->ndisc_rdnss) {
3780 NDiscRDNSS *dd;
3781
3782 SET_FOREACH(dd, link->ndisc_rdnss, i) {
3783 if (space)
3784 fputc(' ', f);
3785
3786 serialize_in6_addrs(f, &dd->address, 1);
3787 space = true;
3788 }
3789 }
3790
3791 fputc('\n', f);
3792
3793 fputs("NTP=", f);
3794 space = false;
3795 fputstrv(f, link->network->ntp, NULL, &space);
3796
3797 if (link->network->dhcp_use_ntp &&
3798 link->dhcp_lease) {
3799 const struct in_addr *addresses;
3800
3801 r = sd_dhcp_lease_get_ntp(link->dhcp_lease, &addresses);
3802 if (r > 0) {
3803 if (space)
3804 fputc(' ', f);
3805 serialize_in_addrs(f, addresses, r);
3806 space = true;
3807 }
3808 }
3809
3810 if (link->network->dhcp_use_ntp && dhcp6_lease) {
3811 struct in6_addr *in6_addrs;
3812 char **hosts;
3813
3814 r = sd_dhcp6_lease_get_ntp_addrs(dhcp6_lease,
3815 &in6_addrs);
3816 if (r > 0) {
3817 if (space)
3818 fputc(' ', f);
3819 serialize_in6_addrs(f, in6_addrs, r);
3820 space = true;
3821 }
3822
3823 r = sd_dhcp6_lease_get_ntp_fqdn(dhcp6_lease, &hosts);
3824 if (r > 0)
3825 fputstrv(f, hosts, NULL, &space);
3826 }
3827
3828 fputc('\n', f);
3829
3830 if (link->network->dhcp_use_domains != DHCP_USE_DOMAINS_NO) {
3831 if (link->dhcp_lease) {
3832 (void) sd_dhcp_lease_get_domainname(link->dhcp_lease, &dhcp_domainname);
3833 (void) sd_dhcp_lease_get_search_domains(link->dhcp_lease, &dhcp_domains);
3834 }
3835 if (dhcp6_lease)
3836 (void) sd_dhcp6_lease_get_domains(dhcp6_lease, &dhcp6_domains);
3837 }
3838
3839 fputs("DOMAINS=", f);
3840 space = false;
3841 fputstrv(f, link->network->search_domains, NULL, &space);
3842
3843 if (link->network->dhcp_use_domains == DHCP_USE_DOMAINS_YES) {
3844 NDiscDNSSL *dd;
3845
3846 if (dhcp_domainname)
3847 fputs_with_space(f, dhcp_domainname, NULL, &space);
3848 if (dhcp_domains)
3849 fputstrv(f, dhcp_domains, NULL, &space);
3850 if (dhcp6_domains)
3851 fputstrv(f, dhcp6_domains, NULL, &space);
3852
3853 SET_FOREACH(dd, link->ndisc_dnssl, i)
3854 fputs_with_space(f, NDISC_DNSSL_DOMAIN(dd), NULL, &space);
3855 }
3856
3857 fputc('\n', f);
3858
3859 fputs("ROUTE_DOMAINS=", f);
3860 space = false;
3861 fputstrv(f, link->network->route_domains, NULL, &space);
3862
3863 if (link->network->dhcp_use_domains == DHCP_USE_DOMAINS_ROUTE) {
3864 NDiscDNSSL *dd;
3865
3866 if (dhcp_domainname)
3867 fputs_with_space(f, dhcp_domainname, NULL, &space);
3868 if (dhcp_domains)
3869 fputstrv(f, dhcp_domains, NULL, &space);
3870 if (dhcp6_domains)
3871 fputstrv(f, dhcp6_domains, NULL, &space);
3872
3873 SET_FOREACH(dd, link->ndisc_dnssl, i)
3874 fputs_with_space(f, NDISC_DNSSL_DOMAIN(dd), NULL, &space);
3875 }
3876
3877 fputc('\n', f);
3878
3879 fprintf(f, "LLMNR=%s\n",
3880 resolve_support_to_string(link->network->llmnr));
3881 fprintf(f, "MDNS=%s\n",
3882 resolve_support_to_string(link->network->mdns));
3883
3884 if (link->network->dns_over_tls_mode != _DNS_OVER_TLS_MODE_INVALID)
3885 fprintf(f, "DNS_OVER_TLS=%s\n",
3886 dns_over_tls_mode_to_string(link->network->dns_over_tls_mode));
3887
3888 if (link->network->dnssec_mode != _DNSSEC_MODE_INVALID)
3889 fprintf(f, "DNSSEC=%s\n",
3890 dnssec_mode_to_string(link->network->dnssec_mode));
3891
3892 if (!set_isempty(link->network->dnssec_negative_trust_anchors)) {
3893 const char *n;
3894
3895 fputs("DNSSEC_NTA=", f);
3896 space = false;
3897 SET_FOREACH(n, link->network->dnssec_negative_trust_anchors, i)
3898 fputs_with_space(f, n, NULL, &space);
3899 fputc('\n', f);
3900 }
3901
3902 fputs("ADDRESSES=", f);
3903 space = false;
3904 SET_FOREACH(a, link->addresses, i) {
3905 _cleanup_free_ char *address_str = NULL;
3906
3907 r = in_addr_to_string(a->family, &a->in_addr, &address_str);
3908 if (r < 0)
3909 goto fail;
3910
3911 fprintf(f, "%s%s/%u", space ? " " : "", address_str, a->prefixlen);
3912 space = true;
3913 }
3914 fputc('\n', f);
3915
3916 fputs("ROUTES=", f);
3917 space = false;
3918 SET_FOREACH(route, link->routes, i) {
3919 _cleanup_free_ char *route_str = NULL;
3920
3921 r = in_addr_to_string(route->family, &route->dst, &route_str);
3922 if (r < 0)
3923 goto fail;
3924
3925 fprintf(f, "%s%s/%hhu/%hhu/%"PRIu32"/%"PRIu32"/"USEC_FMT,
3926 space ? " " : "", route_str,
3927 route->dst_prefixlen, route->tos, route->priority, route->table, route->lifetime);
3928 space = true;
3929 }
3930
3931 fputc('\n', f);
3932 }
3933
3934 print_link_hashmap(f, "CARRIER_BOUND_TO=", link->bound_to_links);
3935 print_link_hashmap(f, "CARRIER_BOUND_BY=", link->bound_by_links);
3936
3937 if (link->dhcp_lease) {
3938 struct in_addr address;
3939 const char *tz = NULL;
3940
3941 assert(link->network);
3942
3943 r = sd_dhcp_lease_get_timezone(link->dhcp_lease, &tz);
3944 if (r >= 0)
3945 fprintf(f, "TIMEZONE=%s\n", tz);
3946
3947 r = sd_dhcp_lease_get_address(link->dhcp_lease, &address);
3948 if (r >= 0) {
3949 fputs("DHCP4_ADDRESS=", f);
3950 serialize_in_addrs(f, &address, 1);
3951 fputc('\n', f);
3952 }
3953
3954 r = dhcp_lease_save(link->dhcp_lease, link->lease_file);
3955 if (r < 0)
3956 goto fail;
3957
3958 fprintf(f,
3959 "DHCP_LEASE=%s\n",
3960 link->lease_file);
3961 } else
3962 unlink(link->lease_file);
3963
3964 if (link->ipv4ll) {
3965 struct in_addr address;
3966
3967 r = sd_ipv4ll_get_address(link->ipv4ll, &address);
3968 if (r >= 0) {
3969 fputs("IPV4LL_ADDRESS=", f);
3970 serialize_in_addrs(f, &address, 1);
3971 fputc('\n', f);
3972 }
3973 }
3974
3975 r = fflush_and_check(f);
3976 if (r < 0)
3977 goto fail;
3978
3979 if (rename(temp_path, link->state_file) < 0) {
3980 r = -errno;
3981 goto fail;
3982 }
3983
3984 return 0;
3985
3986 fail:
3987 (void) unlink(link->state_file);
3988 if (temp_path)
3989 (void) unlink(temp_path);
3990
3991 return log_link_error_errno(link, r, "Failed to save link data to %s: %m", link->state_file);
3992 }
3993
3994 /* The serialized state in /run is no longer up-to-date. */
3995 void link_dirty(Link *link) {
3996 int r;
3997
3998 assert(link);
3999
4000 /* mark manager dirty as link is dirty */
4001 manager_dirty(link->manager);
4002
4003 r = set_ensure_allocated(&link->manager->dirty_links, NULL);
4004 if (r < 0)
4005 /* allocation errors are ignored */
4006 return;
4007
4008 r = set_put(link->manager->dirty_links, link);
4009 if (r <= 0)
4010 /* don't take another ref if the link was already dirty */
4011 return;
4012
4013 link_ref(link);
4014 }
4015
4016 /* The serialized state in /run is up-to-date */
4017 void link_clean(Link *link) {
4018 assert(link);
4019 assert(link->manager);
4020
4021 link_unref(set_remove(link->manager->dirty_links, link));
4022 }
4023
4024 static const char* const link_state_table[_LINK_STATE_MAX] = {
4025 [LINK_STATE_PENDING] = "pending",
4026 [LINK_STATE_ENSLAVING] = "configuring",
4027 [LINK_STATE_SETTING_ADDRESSES] = "configuring",
4028 [LINK_STATE_SETTING_ROUTES] = "configuring",
4029 [LINK_STATE_CONFIGURED] = "configured",
4030 [LINK_STATE_UNMANAGED] = "unmanaged",
4031 [LINK_STATE_FAILED] = "failed",
4032 [LINK_STATE_LINGER] = "linger",
4033 };
4034
4035 DEFINE_STRING_TABLE_LOOKUP(link_state, LinkState);
4036
4037 static const char* const link_operstate_table[_LINK_OPERSTATE_MAX] = {
4038 [LINK_OPERSTATE_OFF] = "off",
4039 [LINK_OPERSTATE_NO_CARRIER] = "no-carrier",
4040 [LINK_OPERSTATE_DORMANT] = "dormant",
4041 [LINK_OPERSTATE_CARRIER] = "carrier",
4042 [LINK_OPERSTATE_DEGRADED] = "degraded",
4043 [LINK_OPERSTATE_ROUTABLE] = "routable",
4044 };
4045
4046 DEFINE_STRING_TABLE_LOOKUP(link_operstate, LinkOperationalState);
Unnamed repository; edit this file 'description' to name the repository.