]> git.ipfire.org Git - thirdparty/systemd.git/blob - src/network/networkd-link.c
projects / thirdparty / systemd.git / blob
? search:
summary | shortlog | log | commit | commitdiff | tree
blame | history | raw | HEAD
network: always drop configs when corresponding network file does not exist
[thirdparty/systemd.git] / src / network / networkd-link.c
1 /* SPDX-License-Identifier: LGPL-2.1+ */
2
3 #include <netinet/ether.h>
4 #include <linux/if.h>
5 #include <linux/can/netlink.h>
6 #include <unistd.h>
7 #include <stdio_ext.h>
8
9 #include "alloc-util.h"
10 #include "bus-util.h"
11 #include "dhcp-identifier.h"
12 #include "dhcp-lease-internal.h"
13 #include "env-file.h"
14 #include "fd-util.h"
15 #include "fileio.h"
16 #include "missing_network.h"
17 #include "netlink-util.h"
18 #include "network-internal.h"
19 #include "networkd-ipv6-proxy-ndp.h"
20 #include "networkd-lldp-tx.h"
21 #include "networkd-manager.h"
22 #include "networkd-ndisc.h"
23 #include "networkd-neighbor.h"
24 #include "networkd-radv.h"
25 #include "networkd-routing-policy-rule.h"
26 #include "set.h"
27 #include "socket-util.h"
28 #include "stdio-util.h"
29 #include "string-table.h"
30 #include "strv.h"
31 #include "tmpfile-util.h"
32 #include "util.h"
33 #include "virt.h"
34
35 DUID* link_get_duid(Link *link) {
36 if (link->network->duid.type != _DUID_TYPE_INVALID)
37 return &link->network->duid;
38 else
39 return &link->manager->duid;
40 }
41
42 static bool link_dhcp6_enabled(Link *link) {
43 assert(link);
44
45 if (!socket_ipv6_is_supported())
46 return false;
47
48 if (link->flags & IFF_LOOPBACK)
49 return false;
50
51 if (!link->network)
52 return false;
53
54 return link->network->dhcp & ADDRESS_FAMILY_IPV6;
55 }
56
57 static bool link_dhcp4_enabled(Link *link) {
58 assert(link);
59
60 if (link->flags & IFF_LOOPBACK)
61 return false;
62
63 if (!link->network)
64 return false;
65
66 return link->network->dhcp & ADDRESS_FAMILY_IPV4;
67 }
68
69 static bool link_dhcp4_server_enabled(Link *link) {
70 assert(link);
71
72 if (link->flags & IFF_LOOPBACK)
73 return false;
74
75 if (!link->network)
76 return false;
77
78 return link->network->dhcp_server;
79 }
80
81 static bool link_ipv4ll_enabled(Link *link) {
82 assert(link);
83
84 if (link->flags & IFF_LOOPBACK)
85 return false;
86
87 if (!link->network)
88 return false;
89
90 if (streq_ptr(link->kind, "wireguard"))
91 return false;
92
93 return link->network->link_local & ADDRESS_FAMILY_IPV4;
94 }
95
96 static bool link_ipv6ll_enabled(Link *link) {
97 assert(link);
98
99 if (!socket_ipv6_is_supported())
100 return false;
101
102 if (link->flags & IFF_LOOPBACK)
103 return false;
104
105 if (!link->network)
106 return false;
107
108 if (streq_ptr(link->kind, "wireguard"))
109 return false;
110
111 return link->network->link_local & ADDRESS_FAMILY_IPV6;
112 }
113
114 static bool link_ipv6_enabled(Link *link) {
115 assert(link);
116
117 if (!socket_ipv6_is_supported())
118 return false;
119
120 if (link->network->bridge)
121 return false;
122
123 /* DHCPv6 client will not be started if no IPv6 link-local address is configured. */
124 return link_ipv6ll_enabled(link) || network_has_static_ipv6_addresses(link->network);
125 }
126
127 static bool link_radv_enabled(Link *link) {
128 assert(link);
129
130 if (!link_ipv6ll_enabled(link))
131 return false;
132
133 return link->network->router_prefix_delegation != RADV_PREFIX_DELEGATION_NONE;
134 }
135
136 static bool link_lldp_rx_enabled(Link *link) {
137 assert(link);
138
139 if (link->flags & IFF_LOOPBACK)
140 return false;
141
142 if (link->iftype != ARPHRD_ETHER)
143 return false;
144
145 if (!link->network)
146 return false;
147
148 /* LLDP should be handled on bridge slaves as those have a direct
149 * connection to their peers not on the bridge master. Linux doesn't
150 * even (by default) forward lldp packets to the bridge master.*/
151 if (streq_ptr("bridge", link->kind))
152 return false;
153
154 return link->network->lldp_mode != LLDP_MODE_NO;
155 }
156
157 static bool link_lldp_emit_enabled(Link *link) {
158 assert(link);
159
160 if (link->flags & IFF_LOOPBACK)
161 return false;
162
163 if (link->iftype != ARPHRD_ETHER)
164 return false;
165
166 if (!link->network)
167 return false;
168
169 return link->network->lldp_emit != LLDP_EMIT_NO;
170 }
171
172 static bool link_ipv4_forward_enabled(Link *link) {
173 assert(link);
174
175 if (link->flags & IFF_LOOPBACK)
176 return false;
177
178 if (!link->network)
179 return false;
180
181 if (link->network->ip_forward == _ADDRESS_FAMILY_BOOLEAN_INVALID)
182 return false;
183
184 return link->network->ip_forward & ADDRESS_FAMILY_IPV4;
185 }
186
187 static bool link_ipv6_forward_enabled(Link *link) {
188 assert(link);
189
190 if (!socket_ipv6_is_supported())
191 return false;
192
193 if (link->flags & IFF_LOOPBACK)
194 return false;
195
196 if (!link->network)
197 return false;
198
199 if (link->network->ip_forward == _ADDRESS_FAMILY_BOOLEAN_INVALID)
200 return false;
201
202 return link->network->ip_forward & ADDRESS_FAMILY_IPV6;
203 }
204
205 static bool link_proxy_arp_enabled(Link *link) {
206 assert(link);
207
208 if (link->flags & IFF_LOOPBACK)
209 return false;
210
211 if (!link->network)
212 return false;
213
214 if (link->network->proxy_arp < 0)
215 return false;
216
217 return true;
218 }
219
220 static bool link_ipv6_accept_ra_enabled(Link *link) {
221 assert(link);
222
223 if (!socket_ipv6_is_supported())
224 return false;
225
226 if (link->flags & IFF_LOOPBACK)
227 return false;
228
229 if (!link->network)
230 return false;
231
232 if (!link_ipv6ll_enabled(link))
233 return false;
234
235 /* If unset use system default (enabled if local forwarding is disabled.
236 * disabled if local forwarding is enabled).
237 * If set, ignore or enforce RA independent of local forwarding state.
238 */
239 if (link->network->ipv6_accept_ra < 0)
240 /* default to accept RA if ip_forward is disabled and ignore RA if ip_forward is enabled */
241 return !link_ipv6_forward_enabled(link);
242 else if (link->network->ipv6_accept_ra > 0)
243 /* accept RA even if ip_forward is enabled */
244 return true;
245 else
246 /* ignore RA */
247 return false;
248 }
249
250 static IPv6PrivacyExtensions link_ipv6_privacy_extensions(Link *link) {
251 assert(link);
252
253 if (!socket_ipv6_is_supported())
254 return _IPV6_PRIVACY_EXTENSIONS_INVALID;
255
256 if (link->flags & IFF_LOOPBACK)
257 return _IPV6_PRIVACY_EXTENSIONS_INVALID;
258
259 if (!link->network)
260 return _IPV6_PRIVACY_EXTENSIONS_INVALID;
261
262 return link->network->ipv6_privacy_extensions;
263 }
264
265 static int link_enable_ipv6(Link *link) {
266 const char *p = NULL;
267 bool disabled;
268 int r;
269
270 if (link->flags & IFF_LOOPBACK)
271 return 0;
272
273 disabled = !link_ipv6_enabled(link);
274
275 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/disable_ipv6");
276
277 r = write_string_file(p, one_zero(disabled), WRITE_STRING_FILE_VERIFY_ON_FAILURE | WRITE_STRING_FILE_DISABLE_BUFFER);
278 if (r < 0)
279 log_link_warning_errno(link, r, "Cannot %s IPv6 for interface %s: %m",
280 enable_disable(!disabled), link->ifname);
281 else
282 log_link_info(link, "IPv6 successfully %sd", enable_disable(!disabled));
283
284 return 0;
285 }
286
287 void link_update_operstate(Link *link) {
288 LinkOperationalState operstate;
289 assert(link);
290
291 if (link->kernel_operstate == IF_OPER_DORMANT)
292 operstate = LINK_OPERSTATE_DORMANT;
293 else if (link_has_carrier(link)) {
294 Address *address;
295 uint8_t scope = RT_SCOPE_NOWHERE;
296 Iterator i;
297
298 /* if we have carrier, check what addresses we have */
299 SET_FOREACH(address, link->addresses, i) {
300 if (!address_is_ready(address))
301 continue;
302
303 if (address->scope < scope)
304 scope = address->scope;
305 }
306
307 /* for operstate we also take foreign addresses into account */
308 SET_FOREACH(address, link->addresses_foreign, i) {
309 if (!address_is_ready(address))
310 continue;
311
312 if (address->scope < scope)
313 scope = address->scope;
314 }
315
316 if (scope < RT_SCOPE_SITE)
317 /* universally accessible addresses found */
318 operstate = LINK_OPERSTATE_ROUTABLE;
319 else if (scope < RT_SCOPE_HOST)
320 /* only link or site local addresses found */
321 operstate = LINK_OPERSTATE_DEGRADED;
322 else
323 /* no useful addresses found */
324 operstate = LINK_OPERSTATE_CARRIER;
325 } else if (link->flags & IFF_UP)
326 operstate = LINK_OPERSTATE_NO_CARRIER;
327 else
328 operstate = LINK_OPERSTATE_OFF;
329
330 if (link->operstate != operstate) {
331 link->operstate = operstate;
332 link_send_changed(link, "OperationalState", NULL);
333 link_dirty(link);
334 }
335 }
336
337 #define FLAG_STRING(string, flag, old, new) \
338 (((old ^ new) & flag) \
339 ? ((old & flag) ? (" -" string) : (" +" string)) \
340 : "")
341
342 static int link_update_flags(Link *link, sd_netlink_message *m) {
343 unsigned flags, unknown_flags_added, unknown_flags_removed, unknown_flags;
344 uint8_t operstate;
345 int r;
346
347 assert(link);
348
349 r = sd_rtnl_message_link_get_flags(m, &flags);
350 if (r < 0)
351 return log_link_warning_errno(link, r, "Could not get link flags: %m");
352
353 r = sd_netlink_message_read_u8(m, IFLA_OPERSTATE, &operstate);
354 if (r < 0)
355 /* if we got a message without operstate, take it to mean
356 the state was unchanged */
357 operstate = link->kernel_operstate;
358
359 if ((link->flags == flags) && (link->kernel_operstate == operstate))
360 return 0;
361
362 if (link->flags != flags) {
363 log_link_debug(link, "Flags change:%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s",
364 FLAG_STRING("LOOPBACK", IFF_LOOPBACK, link->flags, flags),
365 FLAG_STRING("MASTER", IFF_MASTER, link->flags, flags),
366 FLAG_STRING("SLAVE", IFF_SLAVE, link->flags, flags),
367 FLAG_STRING("UP", IFF_UP, link->flags, flags),
368 FLAG_STRING("DORMANT", IFF_DORMANT, link->flags, flags),
369 FLAG_STRING("LOWER_UP", IFF_LOWER_UP, link->flags, flags),
370 FLAG_STRING("RUNNING", IFF_RUNNING, link->flags, flags),
371 FLAG_STRING("MULTICAST", IFF_MULTICAST, link->flags, flags),
372 FLAG_STRING("BROADCAST", IFF_BROADCAST, link->flags, flags),
373 FLAG_STRING("POINTOPOINT", IFF_POINTOPOINT, link->flags, flags),
374 FLAG_STRING("PROMISC", IFF_PROMISC, link->flags, flags),
375 FLAG_STRING("ALLMULTI", IFF_ALLMULTI, link->flags, flags),
376 FLAG_STRING("PORTSEL", IFF_PORTSEL, link->flags, flags),
377 FLAG_STRING("AUTOMEDIA", IFF_AUTOMEDIA, link->flags, flags),
378 FLAG_STRING("DYNAMIC", IFF_DYNAMIC, link->flags, flags),
379 FLAG_STRING("NOARP", IFF_NOARP, link->flags, flags),
380 FLAG_STRING("NOTRAILERS", IFF_NOTRAILERS, link->flags, flags),
381 FLAG_STRING("DEBUG", IFF_DEBUG, link->flags, flags),
382 FLAG_STRING("ECHO", IFF_ECHO, link->flags, flags));
383
384 unknown_flags = ~(IFF_LOOPBACK | IFF_MASTER | IFF_SLAVE | IFF_UP |
385 IFF_DORMANT | IFF_LOWER_UP | IFF_RUNNING |
386 IFF_MULTICAST | IFF_BROADCAST | IFF_POINTOPOINT |
387 IFF_PROMISC | IFF_ALLMULTI | IFF_PORTSEL |
388 IFF_AUTOMEDIA | IFF_DYNAMIC | IFF_NOARP |
389 IFF_NOTRAILERS | IFF_DEBUG | IFF_ECHO);
390 unknown_flags_added = ((link->flags ^ flags) & flags & unknown_flags);
391 unknown_flags_removed = ((link->flags ^ flags) & link->flags & unknown_flags);
392
393 /* link flags are currently at most 18 bits, let's align to
394 * printing 20 */
395 if (unknown_flags_added)
396 log_link_debug(link,
397 "Unknown link flags gained: %#.5x (ignoring)",
398 unknown_flags_added);
399
400 if (unknown_flags_removed)
401 log_link_debug(link,
402 "Unknown link flags lost: %#.5x (ignoring)",
403 unknown_flags_removed);
404 }
405
406 link->flags = flags;
407 link->kernel_operstate = operstate;
408
409 link_update_operstate(link);
410
411 return 0;
412 }
413
414 DEFINE_TRIVIAL_CLEANUP_FUNC(Link*, link_unref);
415
416 static int link_new(Manager *manager, sd_netlink_message *message, Link **ret) {
417 _cleanup_(link_unrefp) Link *link = NULL;
418 uint16_t type;
419 const char *ifname, *kind = NULL;
420 int r, ifindex;
421 unsigned short iftype;
422
423 assert(manager);
424 assert(message);
425 assert(ret);
426
427 /* check for link kind */
428 r = sd_netlink_message_enter_container(message, IFLA_LINKINFO);
429 if (r == 0) {
430 (void) sd_netlink_message_read_string(message, IFLA_INFO_KIND, &kind);
431 r = sd_netlink_message_exit_container(message);
432 if (r < 0)
433 return r;
434 }
435
436 r = sd_netlink_message_get_type(message, &type);
437 if (r < 0)
438 return r;
439 else if (type != RTM_NEWLINK)
440 return -EINVAL;
441
442 r = sd_rtnl_message_link_get_ifindex(message, &ifindex);
443 if (r < 0)
444 return r;
445 else if (ifindex <= 0)
446 return -EINVAL;
447
448 r = sd_rtnl_message_link_get_type(message, &iftype);
449 if (r < 0)
450 return r;
451
452 r = sd_netlink_message_read_string(message, IFLA_IFNAME, &ifname);
453 if (r < 0)
454 return r;
455
456 link = new(Link, 1);
457 if (!link)
458 return -ENOMEM;
459
460 *link = (Link) {
461 .n_ref = 1,
462 .manager = manager,
463 .state = LINK_STATE_PENDING,
464 .rtnl_extended_attrs = true,
465 .ifindex = ifindex,
466 .iftype = iftype,
467 };
468
469 link->ifname = strdup(ifname);
470 if (!link->ifname)
471 return -ENOMEM;
472
473 if (kind) {
474 link->kind = strdup(kind);
475 if (!link->kind)
476 return -ENOMEM;
477 }
478
479 r = sd_netlink_message_read_u32(message, IFLA_MASTER, (uint32_t *)&link->master_ifindex);
480 if (r < 0)
481 log_link_debug_errno(link, r, "New device has no master, continuing without");
482
483 r = sd_netlink_message_read_ether_addr(message, IFLA_ADDRESS, &link->mac);
484 if (r < 0)
485 log_link_debug_errno(link, r, "MAC address not found for new device, continuing without");
486
487 if (asprintf(&link->state_file, "/run/systemd/netif/links/%d", link->ifindex) < 0)
488 return -ENOMEM;
489
490 if (asprintf(&link->lease_file, "/run/systemd/netif/leases/%d", link->ifindex) < 0)
491 return -ENOMEM;
492
493 if (asprintf(&link->lldp_file, "/run/systemd/netif/lldp/%d", link->ifindex) < 0)
494 return -ENOMEM;
495
496 r = hashmap_ensure_allocated(&manager->links, NULL);
497 if (r < 0)
498 return r;
499
500 r = hashmap_put(manager->links, INT_TO_PTR(link->ifindex), link);
501 if (r < 0)
502 return r;
503
504 r = link_update_flags(link, message);
505 if (r < 0)
506 return r;
507
508 *ret = TAKE_PTR(link);
509
510 return 0;
511 }
512
513 static void link_detach_from_manager(Link *link) {
514 if (!link || !link->manager)
515 return;
516
517 hashmap_remove(link->manager->links, INT_TO_PTR(link->ifindex));
518 set_remove(link->manager->links_requesting_uuid, link);
519 link_clean(link);
520 }
521
522 static Link *link_free(Link *link) {
523 Address *address;
524 Link *carrier;
525 Route *route;
526 Iterator i;
527
528 assert(link);
529
530 while ((route = set_first(link->routes)))
531 route_free(route);
532
533 while ((route = set_first(link->routes_foreign)))
534 route_free(route);
535
536 link->routes = set_free(link->routes);
537 link->routes_foreign = set_free(link->routes_foreign);
538
539 while ((address = set_first(link->addresses)))
540 address_free(address);
541
542 while ((address = set_first(link->addresses_foreign)))
543 address_free(address);
544
545 link->addresses = set_free(link->addresses);
546 link->addresses_foreign = set_free(link->addresses_foreign);
547
548 while ((address = link->pool_addresses)) {
549 LIST_REMOVE(addresses, link->pool_addresses, address);
550 address_free(address);
551 }
552
553 sd_dhcp_server_unref(link->dhcp_server);
554 sd_dhcp_client_unref(link->dhcp_client);
555 sd_dhcp_lease_unref(link->dhcp_lease);
556
557 link_lldp_emit_stop(link);
558
559 free(link->lease_file);
560
561 sd_lldp_unref(link->lldp);
562 free(link->lldp_file);
563
564 ndisc_flush(link);
565
566 sd_ipv4ll_unref(link->ipv4ll);
567 sd_dhcp6_client_unref(link->dhcp6_client);
568 sd_ndisc_unref(link->ndisc);
569 sd_radv_unref(link->radv);
570
571 link_detach_from_manager(link);
572
573 free(link->ifname);
574
575 free(link->kind);
576
577 (void) unlink(link->state_file);
578 free(link->state_file);
579
580 sd_device_unref(link->sd_device);
581
582 HASHMAP_FOREACH (carrier, link->bound_to_links, i)
583 hashmap_remove(link->bound_to_links, INT_TO_PTR(carrier->ifindex));
584 hashmap_free(link->bound_to_links);
585
586 HASHMAP_FOREACH (carrier, link->bound_by_links, i)
587 hashmap_remove(link->bound_by_links, INT_TO_PTR(carrier->ifindex));
588 hashmap_free(link->bound_by_links);
589
590 return mfree(link);
591 }
592
593 DEFINE_TRIVIAL_REF_UNREF_FUNC(Link, link, link_free);
594
595 int link_get(Manager *m, int ifindex, Link **ret) {
596 Link *link;
597
598 assert(m);
599 assert(ifindex);
600 assert(ret);
601
602 link = hashmap_get(m->links, INT_TO_PTR(ifindex));
603 if (!link)
604 return -ENODEV;
605
606 *ret = link;
607
608 return 0;
609 }
610
611 static void link_set_state(Link *link, LinkState state) {
612 assert(link);
613
614 if (link->state == state)
615 return;
616
617 link->state = state;
618
619 link_send_changed(link, "AdministrativeState", NULL);
620 }
621
622 static void link_enter_unmanaged(Link *link) {
623 assert(link);
624
625 log_link_debug(link, "Unmanaged");
626
627 link_set_state(link, LINK_STATE_UNMANAGED);
628
629 link_dirty(link);
630 }
631
632 static int link_stop_clients(Link *link) {
633 int r = 0, k;
634
635 assert(link);
636 assert(link->manager);
637 assert(link->manager->event);
638
639 if (link->dhcp_client) {
640 k = sd_dhcp_client_stop(link->dhcp_client);
641 if (k < 0)
642 r = log_link_warning_errno(link, k, "Could not stop DHCPv4 client: %m");
643 }
644
645 if (link->ipv4ll) {
646 k = sd_ipv4ll_stop(link->ipv4ll);
647 if (k < 0)
648 r = log_link_warning_errno(link, k, "Could not stop IPv4 link-local: %m");
649 }
650
651 if (link->dhcp6_client) {
652 k = sd_dhcp6_client_stop(link->dhcp6_client);
653 if (k < 0)
654 r = log_link_warning_errno(link, k, "Could not stop DHCPv6 client: %m");
655 }
656
657 if (link->ndisc) {
658 k = sd_ndisc_stop(link->ndisc);
659 if (k < 0)
660 r = log_link_warning_errno(link, k, "Could not stop IPv6 Router Discovery: %m");
661 }
662
663 if (link->radv) {
664 k = sd_radv_stop(link->radv);
665 if (k < 0)
666 r = log_link_warning_errno(link, k, "Could not stop IPv6 Router Advertisement: %m");
667 }
668
669 link_lldp_emit_stop(link);
670 return r;
671 }
672
673 void link_enter_failed(Link *link) {
674 assert(link);
675
676 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
677 return;
678
679 log_link_warning(link, "Failed");
680
681 link_set_state(link, LINK_STATE_FAILED);
682
683 link_stop_clients(link);
684
685 link_dirty(link);
686 }
687
688 static Address* link_find_dhcp_server_address(Link *link) {
689 Address *address;
690
691 assert(link);
692 assert(link->network);
693
694 /* The first statically configured address if there is any */
695 LIST_FOREACH(addresses, address, link->network->static_addresses) {
696
697 if (address->family != AF_INET)
698 continue;
699
700 if (in_addr_is_null(address->family, &address->in_addr))
701 continue;
702
703 return address;
704 }
705
706 /* If that didn't work, find a suitable address we got from the pool */
707 LIST_FOREACH(addresses, address, link->pool_addresses) {
708 if (address->family != AF_INET)
709 continue;
710
711 return address;
712 }
713
714 return NULL;
715 }
716
717 static void link_enter_configured(Link *link) {
718 assert(link);
719 assert(link->network);
720
721 if (link->state != LINK_STATE_CONFIGURING)
722 return;
723
724 log_link_info(link, "Configured");
725
726 link_set_state(link, LINK_STATE_CONFIGURED);
727
728 link_dirty(link);
729 }
730
731 static int link_request_set_routing_policy_rule(Link *link) {
732 RoutingPolicyRule *rule, *rrule = NULL;
733 int r;
734
735 assert(link);
736 assert(link->network);
737
738 link_set_state(link, LINK_STATE_CONFIGURING);
739 link->routing_policy_rules_configured = false;
740
741 LIST_FOREACH(rules, rule, link->network->rules) {
742 r = routing_policy_rule_get(link->manager, rule->family, &rule->from, rule->from_prefixlen, &rule->to,
743 rule->to_prefixlen, rule->tos, rule->fwmark, rule->table, rule->iif, rule->oif,
744 rule->protocol, &rule->sport, &rule->dport, &rrule);
745 if (r == 0) {
746 (void) routing_policy_rule_make_local(link->manager, rrule);
747 continue;
748 }
749
750 r = routing_policy_rule_configure(rule, link, NULL, false);
751 if (r < 0) {
752 log_link_warning_errno(link, r, "Could not set routing policy rules: %m");
753 link_enter_failed(link);
754 return r;
755 }
756
757 link->routing_policy_rule_messages++;
758 }
759
760 routing_policy_rule_purge(link->manager, link);
761 if (link->routing_policy_rule_messages == 0) {
762 link->routing_policy_rules_configured = true;
763 link_check_ready(link);
764 } else
765 log_link_debug(link, "Setting routing policy rules");
766
767 return 0;
768 }
769
770 static int route_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
771 int r;
772
773 assert(link);
774 assert(link->route_messages > 0);
775 assert(IN_SET(link->state, LINK_STATE_CONFIGURING,
776 LINK_STATE_FAILED, LINK_STATE_LINGER));
777
778 link->route_messages--;
779
780 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
781 return 1;
782
783 r = sd_netlink_message_get_errno(m);
784 if (r < 0 && r != -EEXIST)
785 log_link_warning_errno(link, r, "Could not set route: %m");
786
787 if (link->route_messages == 0) {
788 log_link_debug(link, "Routes set");
789 link->static_routes_configured = true;
790 link_check_ready(link);
791 }
792
793 return 1;
794 }
795
796 static int link_request_set_routes(Link *link) {
797 enum {
798 PHASE_NON_GATEWAY, /* First phase: Routes without a gateway */
799 PHASE_GATEWAY, /* Second phase: Routes with a gateway */
800 _PHASE_MAX
801 } phase;
802 Route *rt;
803 int r;
804
805 assert(link);
806 assert(link->network);
807 assert(link->addresses_configured);
808 assert(link->address_messages == 0);
809 assert(link->state != _LINK_STATE_INVALID);
810
811 link_set_state(link, LINK_STATE_CONFIGURING);
812 link->static_routes_configured = false;
813
814 r = link_request_set_routing_policy_rule(link);
815 if (r < 0)
816 return r;
817
818 /* First add the routes that enable us to talk to gateways, then add in the others that need a gateway. */
819 for (phase = 0; phase < _PHASE_MAX; phase++)
820 LIST_FOREACH(routes, rt, link->network->static_routes) {
821
822 if (in_addr_is_null(rt->family, &rt->gw) != (phase == PHASE_NON_GATEWAY))
823 continue;
824
825 r = route_configure(rt, link, route_handler);
826 if (r < 0) {
827 log_link_warning_errno(link, r, "Could not set routes: %m");
828 link_enter_failed(link);
829 return r;
830 }
831
832 link->route_messages++;
833 }
834
835 if (link->route_messages == 0) {
836 link->static_routes_configured = true;
837 link_check_ready(link);
838 } else
839 log_link_debug(link, "Setting routes");
840
841 return 0;
842 }
843
844 void link_check_ready(Link *link) {
845 Address *a;
846 Iterator i;
847
848 assert(link);
849
850 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
851 return;
852
853 if (!link->network)
854 return;
855
856 if (!link->addresses_configured)
857 return;
858
859 if (!link->neighbors_configured)
860 return;
861
862 SET_FOREACH(a, link->addresses, i)
863 if (!address_is_ready(a))
864 return;
865
866 if (!link->addresses_ready) {
867 link->addresses_ready = true;
868 link_request_set_routes(link);
869 }
870
871 if (!link->static_routes_configured)
872 return;
873
874 if (!link->routing_policy_rules_configured)
875 return;
876
877 if (link_ipv4ll_enabled(link))
878 if (!link->ipv4ll_address ||
879 !link->ipv4ll_route)
880 return;
881
882 if (!link->network->bridge) {
883
884 if (link_ipv6ll_enabled(link) &&
885 in_addr_is_null(AF_INET6, (const union in_addr_union*) &link->ipv6ll_address))
886 return;
887
888 if ((link_dhcp4_enabled(link) && !link_dhcp6_enabled(link) &&
889 !link->dhcp4_configured) ||
890 (link_dhcp6_enabled(link) && !link_dhcp4_enabled(link) &&
891 !link->dhcp6_configured) ||
892 (link_dhcp4_enabled(link) && link_dhcp6_enabled(link) &&
893 !link->dhcp4_configured && !link->dhcp6_configured))
894 return;
895
896 if (link_ipv6_accept_ra_enabled(link) && !link->ndisc_configured)
897 return;
898 }
899
900 if (link->state != LINK_STATE_CONFIGURED)
901 link_enter_configured(link);
902
903 return;
904 }
905
906 static int link_request_set_neighbors(Link *link) {
907 Neighbor *neighbor;
908 int r;
909
910 assert(link);
911 assert(link->network);
912 assert(link->state != _LINK_STATE_INVALID);
913
914 link_set_state(link, LINK_STATE_CONFIGURING);
915 link->neighbors_configured = false;
916
917 LIST_FOREACH(neighbors, neighbor, link->network->neighbors) {
918 r = neighbor_configure(neighbor, link, NULL);
919 if (r < 0) {
920 log_link_warning_errno(link, r, "Could not set neighbor: %m");
921 link_enter_failed(link);
922 return r;
923 }
924 }
925
926 if (link->neighbor_messages == 0) {
927 link->neighbors_configured = true;
928 link_check_ready(link);
929 } else
930 log_link_debug(link, "Setting neighbors");
931
932 return 0;
933 }
934
935 static int address_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
936 int r;
937
938 assert(rtnl);
939 assert(m);
940 assert(link);
941 assert(link->ifname);
942 assert(link->address_messages > 0);
943 assert(IN_SET(link->state, LINK_STATE_CONFIGURING,
944 LINK_STATE_FAILED, LINK_STATE_LINGER));
945
946 link->address_messages--;
947
948 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
949 return 1;
950
951 r = sd_netlink_message_get_errno(m);
952 if (r < 0 && r != -EEXIST)
953 log_link_warning_errno(link, r, "could not set address: %m");
954 else if (r >= 0)
955 manager_rtnl_process_address(rtnl, m, link->manager);
956
957 if (link->address_messages == 0) {
958 log_link_debug(link, "Addresses set");
959 link->addresses_configured = true;
960 link_check_ready(link);
961 }
962
963 return 1;
964 }
965
966 static int link_push_uplink_dns_to_dhcp_server(Link *link, sd_dhcp_server *s) {
967 _cleanup_free_ struct in_addr *addresses = NULL;
968 size_t n_addresses = 0, n_allocated = 0;
969 unsigned i;
970
971 log_debug("Copying DNS server information from %s", link->ifname);
972
973 if (!link->network)
974 return 0;
975
976 for (i = 0; i < link->network->n_dns; i++) {
977 struct in_addr ia;
978
979 /* Only look for IPv4 addresses */
980 if (link->network->dns[i].family != AF_INET)
981 continue;
982
983 ia = link->network->dns[i].address.in;
984
985 /* Never propagate obviously borked data */
986 if (in4_addr_is_null(&ia) || in4_addr_is_localhost(&ia))
987 continue;
988
989 if (!GREEDY_REALLOC(addresses, n_allocated, n_addresses + 1))
990 return log_oom();
991
992 addresses[n_addresses++] = ia;
993 }
994
995 if (link->network->dhcp_use_dns && link->dhcp_lease) {
996 const struct in_addr *da = NULL;
997 int n;
998
999 n = sd_dhcp_lease_get_dns(link->dhcp_lease, &da);
1000 if (n > 0) {
1001
1002 if (!GREEDY_REALLOC(addresses, n_allocated, n_addresses + n))
1003 return log_oom();
1004
1005 memcpy(addresses + n_addresses, da, n * sizeof(struct in_addr));
1006 n_addresses += n;
1007 }
1008 }
1009
1010 if (n_addresses <= 0)
1011 return 0;
1012
1013 return sd_dhcp_server_set_dns(s, addresses, n_addresses);
1014 }
1015
1016 static int link_push_uplink_ntp_to_dhcp_server(Link *link, sd_dhcp_server *s) {
1017 _cleanup_free_ struct in_addr *addresses = NULL;
1018 size_t n_addresses = 0, n_allocated = 0;
1019 char **a;
1020
1021 if (!link->network)
1022 return 0;
1023
1024 log_debug("Copying NTP server information from %s", link->ifname);
1025
1026 STRV_FOREACH(a, link->network->ntp) {
1027 struct in_addr ia;
1028
1029 /* Only look for IPv4 addresses */
1030 if (inet_pton(AF_INET, *a, &ia) <= 0)
1031 continue;
1032
1033 /* Never propagate obviously borked data */
1034 if (in4_addr_is_null(&ia) || in4_addr_is_localhost(&ia))
1035 continue;
1036
1037 if (!GREEDY_REALLOC(addresses, n_allocated, n_addresses + 1))
1038 return log_oom();
1039
1040 addresses[n_addresses++] = ia;
1041 }
1042
1043 if (link->network->dhcp_use_ntp && link->dhcp_lease) {
1044 const struct in_addr *da = NULL;
1045 int n;
1046
1047 n = sd_dhcp_lease_get_ntp(link->dhcp_lease, &da);
1048 if (n > 0) {
1049
1050 if (!GREEDY_REALLOC(addresses, n_allocated, n_addresses + n))
1051 return log_oom();
1052
1053 memcpy(addresses + n_addresses, da, n * sizeof(struct in_addr));
1054 n_addresses += n;
1055 }
1056 }
1057
1058 if (n_addresses <= 0)
1059 return 0;
1060
1061 return sd_dhcp_server_set_ntp(s, addresses, n_addresses);
1062 }
1063
1064 static int link_set_bridge_fdb(Link *link) {
1065 FdbEntry *fdb_entry;
1066 int r;
1067
1068 LIST_FOREACH(static_fdb_entries, fdb_entry, link->network->static_fdb_entries) {
1069 r = fdb_entry_configure(link, fdb_entry);
1070 if (r < 0)
1071 return log_link_error_errno(link, r, "Failed to add MAC entry to static MAC table: %m");
1072 }
1073
1074 return 0;
1075 }
1076
1077 static int link_request_set_addresses(Link *link) {
1078 AddressLabel *label;
1079 Address *ad;
1080 int r;
1081
1082 assert(link);
1083 assert(link->network);
1084 assert(link->state != _LINK_STATE_INVALID);
1085
1086 link_set_state(link, LINK_STATE_CONFIGURING);
1087
1088 /* Reset all *_configured flags we are configuring. */
1089 link->addresses_configured = false;
1090 link->addresses_ready = false;
1091 link->neighbors_configured = false;
1092 link->static_routes_configured = false;
1093 link->routing_policy_rules_configured = false;
1094
1095 r = link_set_bridge_fdb(link);
1096 if (r < 0)
1097 return r;
1098
1099 r = link_request_set_neighbors(link);
1100 if (r < 0)
1101 return r;
1102
1103 LIST_FOREACH(addresses, ad, link->network->static_addresses) {
1104 bool update;
1105
1106 update = address_get(link, ad->family, &ad->in_addr, ad->prefixlen, NULL) > 0;
1107
1108 r = address_configure(ad, link, address_handler, update);
1109 if (r < 0) {
1110 log_link_warning_errno(link, r, "Could not set addresses: %m");
1111 link_enter_failed(link);
1112 return r;
1113 }
1114
1115 link->address_messages++;
1116 }
1117
1118 LIST_FOREACH(labels, label, link->network->address_labels) {
1119 r = address_label_configure(label, link, NULL, false);
1120 if (r < 0) {
1121 log_link_warning_errno(link, r, "Could not set address label: %m");
1122 link_enter_failed(link);
1123 return r;
1124 }
1125
1126 link->address_label_messages++;
1127 }
1128
1129 /* now that we can figure out a default address for the dhcp server,
1130 start it */
1131 if (link_dhcp4_server_enabled(link) && (link->flags & IFF_UP)) {
1132 Address *address;
1133 Link *uplink = NULL;
1134 bool acquired_uplink = false;
1135
1136 address = link_find_dhcp_server_address(link);
1137 if (!address) {
1138 log_link_warning(link, "Failed to find suitable address for DHCPv4 server instance.");
1139 link_enter_failed(link);
1140 return 0;
1141 }
1142
1143 /* use the server address' subnet as the pool */
1144 r = sd_dhcp_server_configure_pool(link->dhcp_server, &address->in_addr.in, address->prefixlen,
1145 link->network->dhcp_server_pool_offset, link->network->dhcp_server_pool_size);
1146 if (r < 0)
1147 return r;
1148
1149 /* TODO:
1150 r = sd_dhcp_server_set_router(link->dhcp_server,
1151 &main_address->in_addr.in);
1152 if (r < 0)
1153 return r;
1154 */
1155
1156 if (link->network->dhcp_server_max_lease_time_usec > 0) {
1157 r = sd_dhcp_server_set_max_lease_time(
1158 link->dhcp_server,
1159 DIV_ROUND_UP(link->network->dhcp_server_max_lease_time_usec, USEC_PER_SEC));
1160 if (r < 0)
1161 return r;
1162 }
1163
1164 if (link->network->dhcp_server_default_lease_time_usec > 0) {
1165 r = sd_dhcp_server_set_default_lease_time(
1166 link->dhcp_server,
1167 DIV_ROUND_UP(link->network->dhcp_server_default_lease_time_usec, USEC_PER_SEC));
1168 if (r < 0)
1169 return r;
1170 }
1171
1172 if (link->network->dhcp_server_emit_dns) {
1173
1174 if (link->network->n_dhcp_server_dns > 0)
1175 r = sd_dhcp_server_set_dns(link->dhcp_server, link->network->dhcp_server_dns, link->network->n_dhcp_server_dns);
1176 else {
1177 uplink = manager_find_uplink(link->manager, link);
1178 acquired_uplink = true;
1179
1180 if (!uplink) {
1181 log_link_debug(link, "Not emitting DNS server information on link, couldn't find suitable uplink.");
1182 r = 0;
1183 } else
1184 r = link_push_uplink_dns_to_dhcp_server(uplink, link->dhcp_server);
1185 }
1186 if (r < 0)
1187 log_link_warning_errno(link, r, "Failed to set DNS server for DHCP server, ignoring: %m");
1188 }
1189
1190 if (link->network->dhcp_server_emit_ntp) {
1191
1192 if (link->network->n_dhcp_server_ntp > 0)
1193 r = sd_dhcp_server_set_ntp(link->dhcp_server, link->network->dhcp_server_ntp, link->network->n_dhcp_server_ntp);
1194 else {
1195 if (!acquired_uplink)
1196 uplink = manager_find_uplink(link->manager, link);
1197
1198 if (!uplink) {
1199 log_link_debug(link, "Not emitting NTP server information on link, couldn't find suitable uplink.");
1200 r = 0;
1201 } else
1202 r = link_push_uplink_ntp_to_dhcp_server(uplink, link->dhcp_server);
1203
1204 }
1205 if (r < 0)
1206 log_link_warning_errno(link, r, "Failed to set NTP server for DHCP server, ignoring: %m");
1207 }
1208
1209 r = sd_dhcp_server_set_emit_router(link->dhcp_server, link->network->dhcp_server_emit_router);
1210 if (r < 0)
1211 return log_link_warning_errno(link, r, "Failed to set router emission for DHCP server: %m");
1212
1213 if (link->network->dhcp_server_emit_timezone) {
1214 _cleanup_free_ char *buffer = NULL;
1215 const char *tz = NULL;
1216
1217 if (link->network->dhcp_server_timezone)
1218 tz = link->network->dhcp_server_timezone;
1219 else {
1220 r = get_timezone(&buffer);
1221 if (r < 0)
1222 log_warning_errno(r, "Failed to determine timezone: %m");
1223 else
1224 tz = buffer;
1225 }
1226
1227 if (tz) {
1228 r = sd_dhcp_server_set_timezone(link->dhcp_server, tz);
1229 if (r < 0)
1230 return r;
1231 }
1232 }
1233 if (!sd_dhcp_server_is_running(link->dhcp_server)) {
1234 r = sd_dhcp_server_start(link->dhcp_server);
1235 if (r < 0) {
1236 log_link_warning_errno(link, r, "Could not start DHCPv4 server instance: %m");
1237
1238 link_enter_failed(link);
1239
1240 return 0;
1241 }
1242 }
1243
1244 log_link_debug(link, "Offering DHCPv4 leases");
1245 }
1246
1247 if (link->address_messages == 0) {
1248 link->addresses_configured = true;
1249 link_check_ready(link);
1250 } else
1251 log_link_debug(link, "Setting addresses");
1252
1253 return 0;
1254 }
1255
1256 static int link_set_bridge_vlan(Link *link) {
1257 int r = 0;
1258
1259 r = br_vlan_configure(link, link->network->pvid, link->network->br_vid_bitmap, link->network->br_untagged_bitmap);
1260 if (r < 0)
1261 log_link_error_errno(link, r, "Failed to assign VLANs to bridge port: %m");
1262
1263 return r;
1264 }
1265
1266 static int link_set_proxy_arp(Link *link) {
1267 const char *p = NULL;
1268 int r;
1269
1270 if (!link_proxy_arp_enabled(link))
1271 return 0;
1272
1273 p = strjoina("/proc/sys/net/ipv4/conf/", link->ifname, "/proxy_arp");
1274
1275 r = write_string_file(p, one_zero(link->network->proxy_arp), WRITE_STRING_FILE_VERIFY_ON_FAILURE | WRITE_STRING_FILE_DISABLE_BUFFER);
1276 if (r < 0)
1277 log_link_warning_errno(link, r, "Cannot configure proxy ARP for interface: %m");
1278
1279 return 0;
1280 }
1281
1282 static int link_set_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
1283 int r;
1284
1285 assert(link);
1286
1287 log_link_debug(link, "Set link");
1288
1289 r = sd_netlink_message_get_errno(m);
1290 if (r < 0 && r != -EEXIST) {
1291 log_link_error_errno(link, r, "Could not join netdev: %m");
1292 link_enter_failed(link);
1293 }
1294
1295 return 1;
1296 }
1297
1298 static int link_configure_after_setting_mtu(Link *link);
1299
1300 static int set_mtu_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
1301 int r;
1302
1303 assert(m);
1304 assert(link);
1305 assert(link->ifname);
1306
1307 link->setting_mtu = false;
1308
1309 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1310 return 1;
1311
1312 r = sd_netlink_message_get_errno(m);
1313 if (r < 0) {
1314 log_link_warning_errno(link, r, "Could not set MTU: %m");
1315 return 1;
1316 }
1317
1318 log_link_debug(link, "Setting MTU done.");
1319
1320 if (link->state == LINK_STATE_PENDING)
1321 (void) link_configure_after_setting_mtu(link);
1322
1323 return 1;
1324 }
1325
1326 int link_set_mtu(Link *link, uint32_t mtu) {
1327 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1328 int r;
1329
1330 assert(link);
1331 assert(link->manager);
1332 assert(link->manager->rtnl);
1333
1334 if (link->mtu == mtu || link->setting_mtu)
1335 return 0;
1336
1337 log_link_debug(link, "Setting MTU: %" PRIu32, mtu);
1338
1339 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1340 if (r < 0)
1341 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1342
1343 /* If IPv6 not configured (no static IPv6 address and IPv6LL autoconfiguration is disabled)
1344 * for this interface, or if it is a bridge slave, then disable IPv6 else enable it. */
1345 (void) link_enable_ipv6(link);
1346
1347 /* IPv6 protocol requires a minimum MTU of IPV6_MTU_MIN(1280) bytes
1348 * on the interface. Bump up MTU bytes to IPV6_MTU_MIN. */
1349 if (link_ipv6_enabled(link) && mtu < IPV6_MIN_MTU) {
1350
1351 log_link_warning(link, "Bumping MTU to " STRINGIFY(IPV6_MIN_MTU) ", as "
1352 "IPv6 is requested and requires a minimum MTU of " STRINGIFY(IPV6_MIN_MTU) " bytes: %m");
1353
1354 mtu = IPV6_MIN_MTU;
1355 }
1356
1357 r = sd_netlink_message_append_u32(req, IFLA_MTU, mtu);
1358 if (r < 0)
1359 return log_link_error_errno(link, r, "Could not append MTU: %m");
1360
1361 r = netlink_call_async(link->manager->rtnl, NULL, req, set_mtu_handler,
1362 link_netlink_destroy_callback, link);
1363 if (r < 0)
1364 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1365
1366 link_ref(link);
1367 link->setting_mtu = true;
1368
1369 return 0;
1370 }
1371
1372 static int set_flags_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
1373 int r;
1374
1375 assert(m);
1376 assert(link);
1377 assert(link->ifname);
1378
1379 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1380 return 1;
1381
1382 r = sd_netlink_message_get_errno(m);
1383 if (r < 0)
1384 log_link_warning_errno(link, r, "Could not set link flags: %m");
1385
1386 return 1;
1387 }
1388
1389 static int link_set_flags(Link *link) {
1390 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1391 unsigned ifi_change = 0;
1392 unsigned ifi_flags = 0;
1393 int r;
1394
1395 assert(link);
1396 assert(link->manager);
1397 assert(link->manager->rtnl);
1398
1399 if (link->flags & IFF_LOOPBACK)
1400 return 0;
1401
1402 if (!link->network)
1403 return 0;
1404
1405 if (link->network->arp < 0 && link->network->multicast < 0 && link->network->allmulticast < 0)
1406 return 0;
1407
1408 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1409 if (r < 0)
1410 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1411
1412 if (link->network->arp >= 0) {
1413 ifi_change |= IFF_NOARP;
1414 SET_FLAG(ifi_flags, IFF_NOARP, link->network->arp == 0);
1415 }
1416
1417 if (link->network->multicast >= 0) {
1418 ifi_change |= IFF_MULTICAST;
1419 SET_FLAG(ifi_flags, IFF_MULTICAST, link->network->multicast);
1420 }
1421
1422 if (link->network->allmulticast >= 0) {
1423 ifi_change |= IFF_ALLMULTI;
1424 SET_FLAG(ifi_flags, IFF_ALLMULTI, link->network->allmulticast);
1425 }
1426
1427 r = sd_rtnl_message_link_set_flags(req, ifi_flags, ifi_change);
1428 if (r < 0)
1429 return log_link_error_errno(link, r, "Could not set link flags: %m");
1430
1431 r = netlink_call_async(link->manager->rtnl, NULL, req, set_flags_handler,
1432 link_netlink_destroy_callback, link);
1433 if (r < 0)
1434 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1435
1436 link_ref(link);
1437
1438 return 0;
1439 }
1440
1441 static int link_set_bridge(Link *link) {
1442 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1443 int r;
1444
1445 assert(link);
1446 assert(link->network);
1447
1448 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1449 if (r < 0)
1450 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1451
1452 r = sd_rtnl_message_link_set_family(req, PF_BRIDGE);
1453 if (r < 0)
1454 return log_link_error_errno(link, r, "Could not set message family: %m");
1455
1456 r = sd_netlink_message_open_container(req, IFLA_PROTINFO);
1457 if (r < 0)
1458 return log_link_error_errno(link, r, "Could not append IFLA_PROTINFO attribute: %m");
1459
1460 if (link->network->use_bpdu >= 0) {
1461 r = sd_netlink_message_append_u8(req, IFLA_BRPORT_GUARD, link->network->use_bpdu);
1462 if (r < 0)
1463 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_GUARD attribute: %m");
1464 }
1465
1466 if (link->network->hairpin >= 0) {
1467 r = sd_netlink_message_append_u8(req, IFLA_BRPORT_MODE, link->network->hairpin);
1468 if (r < 0)
1469 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_MODE attribute: %m");
1470 }
1471
1472 if (link->network->fast_leave >= 0) {
1473 r = sd_netlink_message_append_u8(req, IFLA_BRPORT_FAST_LEAVE, link->network->fast_leave);
1474 if (r < 0)
1475 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_FAST_LEAVE attribute: %m");
1476 }
1477
1478 if (link->network->allow_port_to_be_root >= 0) {
1479 r = sd_netlink_message_append_u8(req, IFLA_BRPORT_PROTECT, link->network->allow_port_to_be_root);
1480 if (r < 0)
1481 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_PROTECT attribute: %m");
1482
1483 }
1484
1485 if (link->network->unicast_flood >= 0) {
1486 r = sd_netlink_message_append_u8(req, IFLA_BRPORT_UNICAST_FLOOD, link->network->unicast_flood);
1487 if (r < 0)
1488 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_UNICAST_FLOOD attribute: %m");
1489 }
1490
1491 if (link->network->multicast_to_unicast >= 0) {
1492 r = sd_netlink_message_append_u8(req, IFLA_BRPORT_MCAST_TO_UCAST, link->network->multicast_to_unicast);
1493 if (r < 0)
1494 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_MCAST_TO_UCAST attribute: %m");
1495 }
1496
1497 if (link->network->cost != 0) {
1498 r = sd_netlink_message_append_u32(req, IFLA_BRPORT_COST, link->network->cost);
1499 if (r < 0)
1500 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_COST attribute: %m");
1501 }
1502
1503 if (link->network->priority != LINK_BRIDGE_PORT_PRIORITY_INVALID) {
1504 r = sd_netlink_message_append_u16(req, IFLA_BRPORT_PRIORITY, link->network->priority);
1505 if (r < 0)
1506 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_PRIORITY attribute: %m");
1507 }
1508
1509 r = sd_netlink_message_close_container(req);
1510 if (r < 0)
1511 return log_link_error_errno(link, r, "Could not append IFLA_LINKINFO attribute: %m");
1512
1513 r = netlink_call_async(link->manager->rtnl, NULL, req, link_set_handler,
1514 link_netlink_destroy_callback, link);
1515 if (r < 0)
1516 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1517
1518 link_ref(link);
1519
1520 return r;
1521 }
1522
1523 static int link_bond_set(Link *link) {
1524 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1525 int r;
1526
1527 assert(link);
1528 assert(link->network);
1529
1530 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_NEWLINK, link->network->bond->ifindex);
1531 if (r < 0)
1532 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1533
1534 r = sd_netlink_message_set_flags(req, NLM_F_REQUEST | NLM_F_ACK);
1535 if (r < 0)
1536 return log_link_error_errno(link, r, "Could not set netlink flags: %m");
1537
1538 r = sd_netlink_message_open_container(req, IFLA_LINKINFO);
1539 if (r < 0)
1540 return log_link_error_errno(link, r, "Could not append IFLA_PROTINFO attribute: %m");
1541
1542 r = sd_netlink_message_open_container_union(req, IFLA_INFO_DATA, "bond");
1543 if (r < 0)
1544 return log_link_error_errno(link, r, "Could not append IFLA_INFO_DATA attribute: %m");
1545
1546 if (link->network->active_slave) {
1547 r = sd_netlink_message_append_u32(req, IFLA_BOND_ACTIVE_SLAVE, link->ifindex);
1548 if (r < 0)
1549 return log_link_error_errno(link, r, "Could not append IFLA_BOND_ACTIVE_SLAVE attribute: %m");
1550 }
1551
1552 if (link->network->primary_slave) {
1553 r = sd_netlink_message_append_u32(req, IFLA_BOND_PRIMARY, link->ifindex);
1554 if (r < 0)
1555 return log_link_error_errno(link, r, "Could not append IFLA_BOND_PRIMARY attribute: %m");
1556 }
1557
1558 r = sd_netlink_message_close_container(req);
1559 if (r < 0)
1560 return log_link_error_errno(link, r, "Could not append IFLA_LINKINFO attribute: %m");
1561
1562 r = sd_netlink_message_close_container(req);
1563 if (r < 0)
1564 return log_link_error_errno(link, r, "Could not append IFLA_INFO_DATA attribute: %m");
1565
1566 r = netlink_call_async(link->manager->rtnl, NULL, req, set_flags_handler,
1567 link_netlink_destroy_callback, link);
1568 if (r < 0)
1569 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1570
1571 link_ref(link);
1572
1573 return r;
1574 }
1575
1576 static int link_lldp_save(Link *link) {
1577 _cleanup_free_ char *temp_path = NULL;
1578 _cleanup_fclose_ FILE *f = NULL;
1579 sd_lldp_neighbor **l = NULL;
1580 int n = 0, r, i;
1581
1582 assert(link);
1583 assert(link->lldp_file);
1584
1585 if (!link->lldp) {
1586 (void) unlink(link->lldp_file);
1587 return 0;
1588 }
1589
1590 r = sd_lldp_get_neighbors(link->lldp, &l);
1591 if (r < 0)
1592 goto finish;
1593 if (r == 0) {
1594 (void) unlink(link->lldp_file);
1595 goto finish;
1596 }
1597
1598 n = r;
1599
1600 r = fopen_temporary(link->lldp_file, &f, &temp_path);
1601 if (r < 0)
1602 goto finish;
1603
1604 fchmod(fileno(f), 0644);
1605
1606 for (i = 0; i < n; i++) {
1607 const void *p;
1608 le64_t u;
1609 size_t sz;
1610
1611 r = sd_lldp_neighbor_get_raw(l[i], &p, &sz);
1612 if (r < 0)
1613 goto finish;
1614
1615 u = htole64(sz);
1616 (void) fwrite(&u, 1, sizeof(u), f);
1617 (void) fwrite(p, 1, sz, f);
1618 }
1619
1620 r = fflush_and_check(f);
1621 if (r < 0)
1622 goto finish;
1623
1624 if (rename(temp_path, link->lldp_file) < 0) {
1625 r = -errno;
1626 goto finish;
1627 }
1628
1629 finish:
1630 if (r < 0) {
1631 (void) unlink(link->lldp_file);
1632 if (temp_path)
1633 (void) unlink(temp_path);
1634
1635 log_link_error_errno(link, r, "Failed to save LLDP data to %s: %m", link->lldp_file);
1636 }
1637
1638 if (l) {
1639 for (i = 0; i < n; i++)
1640 sd_lldp_neighbor_unref(l[i]);
1641 free(l);
1642 }
1643
1644 return r;
1645 }
1646
1647 static void lldp_handler(sd_lldp *lldp, sd_lldp_event event, sd_lldp_neighbor *n, void *userdata) {
1648 Link *link = userdata;
1649 int r;
1650
1651 assert(link);
1652
1653 (void) link_lldp_save(link);
1654
1655 if (link_lldp_emit_enabled(link) && event == SD_LLDP_EVENT_ADDED) {
1656 /* If we received information about a new neighbor, restart the LLDP "fast" logic */
1657
1658 log_link_debug(link, "Received LLDP datagram from previously unknown neighbor, restarting 'fast' LLDP transmission.");
1659
1660 r = link_lldp_emit_start(link);
1661 if (r < 0)
1662 log_link_warning_errno(link, r, "Failed to restart LLDP transmission: %m");
1663 }
1664 }
1665
1666 static int link_acquire_ipv6_conf(Link *link) {
1667 int r;
1668
1669 assert(link);
1670
1671 if (link_ipv6_accept_ra_enabled(link)) {
1672 assert(link->ndisc);
1673
1674 log_link_debug(link, "Discovering IPv6 routers");
1675
1676 r = sd_ndisc_start(link->ndisc);
1677 if (r < 0 && r != -EBUSY)
1678 return log_link_warning_errno(link, r, "Could not start IPv6 Router Discovery: %m");
1679 }
1680
1681 if (link_radv_enabled(link)) {
1682 assert(link->radv);
1683 assert(in_addr_is_link_local(AF_INET6, (const union in_addr_union*)&link->ipv6ll_address) > 0);
1684
1685 log_link_debug(link, "Starting IPv6 Router Advertisements");
1686
1687 r = sd_radv_start(link->radv);
1688 if (r < 0 && r != -EBUSY)
1689 return log_link_warning_errno(link, r, "Could not start IPv6 Router Advertisement: %m");
1690 }
1691
1692 (void) dhcp6_request_prefix_delegation(link);
1693
1694 return 0;
1695 }
1696
1697 static int link_acquire_ipv4_conf(Link *link) {
1698 int r;
1699
1700 assert(link);
1701 assert(link->network);
1702 assert(link->manager);
1703 assert(link->manager->event);
1704
1705 if (link_ipv4ll_enabled(link)) {
1706 assert(link->ipv4ll);
1707
1708 log_link_debug(link, "Acquiring IPv4 link-local address");
1709
1710 r = sd_ipv4ll_start(link->ipv4ll);
1711 if (r < 0)
1712 return log_link_warning_errno(link, r, "Could not acquire IPv4 link-local address: %m");
1713 }
1714
1715 if (link_dhcp4_enabled(link)) {
1716 assert(link->dhcp_client);
1717
1718 log_link_debug(link, "Acquiring DHCPv4 lease");
1719
1720 r = sd_dhcp_client_start(link->dhcp_client);
1721 if (r < 0)
1722 return log_link_warning_errno(link, r, "Could not acquire DHCPv4 lease: %m");
1723 }
1724
1725 return 0;
1726 }
1727
1728 static int link_acquire_conf(Link *link) {
1729 int r;
1730
1731 assert(link);
1732
1733 r = link_acquire_ipv4_conf(link);
1734 if (r < 0)
1735 return r;
1736
1737 if (!in_addr_is_null(AF_INET6, (const union in_addr_union*) &link->ipv6ll_address)) {
1738 r = link_acquire_ipv6_conf(link);
1739 if (r < 0)
1740 return r;
1741 }
1742
1743 if (link_lldp_emit_enabled(link)) {
1744 r = link_lldp_emit_start(link);
1745 if (r < 0)
1746 return log_link_warning_errno(link, r, "Failed to start LLDP transmission: %m");
1747 }
1748
1749 return 0;
1750 }
1751
1752 bool link_has_carrier(Link *link) {
1753 /* see Documentation/networking/operstates.txt in the kernel sources */
1754
1755 if (link->kernel_operstate == IF_OPER_UP)
1756 return true;
1757
1758 if (link->kernel_operstate == IF_OPER_UNKNOWN)
1759 /* operstate may not be implemented, so fall back to flags */
1760 if ((link->flags & IFF_LOWER_UP) && !(link->flags & IFF_DORMANT))
1761 return true;
1762
1763 return false;
1764 }
1765
1766 static int link_address_genmode_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
1767 int r;
1768
1769 assert(link);
1770
1771 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1772 return 1;
1773
1774 r = sd_netlink_message_get_errno(m);
1775 if (r < 0)
1776 log_link_warning_errno(link, r, "Could not set address genmode for interface: %m");
1777
1778 return 1;
1779 }
1780
1781 static int link_configure_addrgen_mode(Link *link) {
1782 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1783 uint8_t ipv6ll_mode;
1784 int r;
1785
1786 assert(link);
1787 assert(link->network);
1788 assert(link->manager);
1789 assert(link->manager->rtnl);
1790
1791 log_link_debug(link, "Setting address genmode for link");
1792
1793 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1794 if (r < 0)
1795 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1796
1797 r = sd_netlink_message_open_container(req, IFLA_AF_SPEC);
1798 if (r < 0)
1799 return log_link_error_errno(link, r, "Could not open IFLA_AF_SPEC container: %m");
1800
1801 r = sd_netlink_message_open_container(req, AF_INET6);
1802 if (r < 0)
1803 return log_link_error_errno(link, r, "Could not open AF_INET6 container: %m");
1804
1805 if (!link_ipv6ll_enabled(link))
1806 ipv6ll_mode = IN6_ADDR_GEN_MODE_NONE;
1807 else {
1808 const char *p = NULL;
1809 _cleanup_free_ char *stable_secret = NULL;
1810
1811 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/stable_secret");
1812
1813 /* The file may not exist. And event if it exists, when stable_secret is unset,
1814 * then reading the file fails and EIO is returned. */
1815 r = read_one_line_file(p, &stable_secret);
1816 if (r < 0)
1817 ipv6ll_mode = IN6_ADDR_GEN_MODE_EUI64;
1818 else
1819 ipv6ll_mode = IN6_ADDR_GEN_MODE_STABLE_PRIVACY;
1820 }
1821
1822 r = sd_netlink_message_append_u8(req, IFLA_INET6_ADDR_GEN_MODE, ipv6ll_mode);
1823 if (r < 0)
1824 return log_link_error_errno(link, r, "Could not append IFLA_INET6_ADDR_GEN_MODE: %m");
1825
1826 r = sd_netlink_message_close_container(req);
1827 if (r < 0)
1828 return log_link_error_errno(link, r, "Could not close AF_INET6 container: %m");
1829
1830 r = sd_netlink_message_close_container(req);
1831 if (r < 0)
1832 return log_link_error_errno(link, r, "Could not close IFLA_AF_SPEC container: %m");
1833
1834 r = netlink_call_async(link->manager->rtnl, NULL, req, link_address_genmode_handler,
1835 link_netlink_destroy_callback, link);
1836 if (r < 0)
1837 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1838
1839 link_ref(link);
1840
1841 return 0;
1842 }
1843
1844 static int link_up_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
1845 int r;
1846
1847 assert(link);
1848
1849 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1850 return 1;
1851
1852 r = sd_netlink_message_get_errno(m);
1853 if (r < 0)
1854 /* we warn but don't fail the link, as it may be brought up later */
1855 log_link_warning_errno(link, r, "Could not bring up interface: %m");
1856
1857 return 1;
1858 }
1859
1860 static int link_up(Link *link) {
1861 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1862 int r;
1863
1864 assert(link);
1865 assert(link->network);
1866 assert(link->manager);
1867 assert(link->manager->rtnl);
1868
1869 log_link_debug(link, "Bringing link up");
1870
1871 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1872 if (r < 0)
1873 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1874
1875 /* set it free if not enslaved with networkd */
1876 if (!link->network->bridge && !link->network->bond && !link->network->vrf) {
1877 r = sd_netlink_message_append_u32(req, IFLA_MASTER, 0);
1878 if (r < 0)
1879 return log_link_error_errno(link, r, "Could not append IFLA_MASTER attribute: %m");
1880 }
1881
1882 r = sd_rtnl_message_link_set_flags(req, IFF_UP, IFF_UP);
1883 if (r < 0)
1884 return log_link_error_errno(link, r, "Could not set link flags: %m");
1885
1886 if (link->network->mac) {
1887 r = sd_netlink_message_append_ether_addr(req, IFLA_ADDRESS, link->network->mac);
1888 if (r < 0)
1889 return log_link_error_errno(link, r, "Could not set MAC address: %m");
1890 }
1891
1892 if (link_ipv6_enabled(link)) {
1893 r = sd_netlink_message_open_container(req, IFLA_AF_SPEC);
1894 if (r < 0)
1895 return log_link_error_errno(link, r, "Could not open IFLA_AF_SPEC container: %m");
1896
1897 /* if the kernel lacks ipv6 support setting IFF_UP fails if any ipv6 options are passed */
1898 r = sd_netlink_message_open_container(req, AF_INET6);
1899 if (r < 0)
1900 return log_link_error_errno(link, r, "Could not open AF_INET6 container: %m");
1901
1902 if (!in_addr_is_null(AF_INET6, &link->network->ipv6_token)) {
1903 r = sd_netlink_message_append_in6_addr(req, IFLA_INET6_TOKEN, &link->network->ipv6_token.in6);
1904 if (r < 0)
1905 return log_link_error_errno(link, r, "Could not append IFLA_INET6_TOKEN: %m");
1906 }
1907
1908 r = sd_netlink_message_close_container(req);
1909 if (r < 0)
1910 return log_link_error_errno(link, r, "Could not close AF_INET6 container: %m");
1911
1912 r = sd_netlink_message_close_container(req);
1913 if (r < 0)
1914 return log_link_error_errno(link, r, "Could not close IFLA_AF_SPEC container: %m");
1915 }
1916
1917 r = netlink_call_async(link->manager->rtnl, NULL, req, link_up_handler,
1918 link_netlink_destroy_callback, link);
1919 if (r < 0)
1920 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1921
1922 link_ref(link);
1923
1924 return 0;
1925 }
1926
1927 static int link_up_can(Link *link) {
1928 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1929 int r;
1930
1931 assert(link);
1932
1933 log_link_debug(link, "Bringing CAN link up");
1934
1935 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1936 if (r < 0)
1937 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1938
1939 r = sd_rtnl_message_link_set_flags(req, IFF_UP, IFF_UP);
1940 if (r < 0)
1941 return log_link_error_errno(link, r, "Could not set link flags: %m");
1942
1943 r = netlink_call_async(link->manager->rtnl, NULL, req, link_up_handler,
1944 link_netlink_destroy_callback, link);
1945 if (r < 0)
1946 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1947
1948 link_ref(link);
1949
1950 return 0;
1951 }
1952
1953 static int link_set_can(Link *link) {
1954 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *m = NULL;
1955 int r;
1956
1957 assert(link);
1958 assert(link->network);
1959 assert(link->manager);
1960 assert(link->manager->rtnl);
1961
1962 log_link_debug(link, "link_set_can");
1963
1964 r = sd_rtnl_message_new_link(link->manager->rtnl, &m, RTM_NEWLINK, link->ifindex);
1965 if (r < 0)
1966 return log_link_error_errno(link, r, "Failed to allocate netlink message: %m");
1967
1968 r = sd_netlink_message_set_flags(m, NLM_F_REQUEST | NLM_F_ACK);
1969 if (r < 0)
1970 return log_link_error_errno(link, r, "Could not set netlink flags: %m");
1971
1972 r = sd_netlink_message_open_container(m, IFLA_LINKINFO);
1973 if (r < 0)
1974 return log_link_error_errno(link, r, "Failed to open netlink container: %m");
1975
1976 r = sd_netlink_message_open_container_union(m, IFLA_INFO_DATA, link->kind);
1977 if (r < 0)
1978 return log_link_error_errno(link, r, "Could not append IFLA_INFO_DATA attribute: %m");
1979
1980 if (link->network->can_bitrate > 0 || link->network->can_sample_point > 0) {
1981 struct can_bittiming bt = {
1982 .bitrate = link->network->can_bitrate,
1983 .sample_point = link->network->can_sample_point,
1984 };
1985
1986 if (link->network->can_bitrate > UINT32_MAX) {
1987 log_link_error(link, "bitrate (%zu) too big.", link->network->can_bitrate);
1988 return -ERANGE;
1989 }
1990
1991 log_link_debug(link, "Setting bitrate = %d bit/s", bt.bitrate);
1992 if (link->network->can_sample_point > 0)
1993 log_link_debug(link, "Setting sample point = %d.%d%%", bt.sample_point / 10, bt.sample_point % 10);
1994 else
1995 log_link_debug(link, "Using default sample point");
1996
1997 r = sd_netlink_message_append_data(m, IFLA_CAN_BITTIMING, &bt, sizeof(bt));
1998 if (r < 0)
1999 return log_link_error_errno(link, r, "Could not append IFLA_CAN_BITTIMING attribute: %m");
2000 }
2001
2002 if (link->network->can_restart_us > 0) {
2003 char time_string[FORMAT_TIMESPAN_MAX];
2004 uint64_t restart_ms;
2005
2006 if (link->network->can_restart_us == USEC_INFINITY)
2007 restart_ms = 0;
2008 else
2009 restart_ms = DIV_ROUND_UP(link->network->can_restart_us, USEC_PER_MSEC);
2010
2011 format_timespan(time_string, FORMAT_TIMESPAN_MAX, restart_ms * 1000, MSEC_PER_SEC);
2012
2013 if (restart_ms > UINT32_MAX) {
2014 log_link_error(link, "restart timeout (%s) too big.", time_string);
2015 return -ERANGE;
2016 }
2017
2018 log_link_debug(link, "Setting restart = %s", time_string);
2019
2020 r = sd_netlink_message_append_u32(m, IFLA_CAN_RESTART_MS, restart_ms);
2021 if (r < 0)
2022 return log_link_error_errno(link, r, "Could not append IFLA_CAN_RESTART_MS attribute: %m");
2023 }
2024
2025 r = sd_netlink_message_close_container(m);
2026 if (r < 0)
2027 return log_link_error_errno(link, r, "Failed to close netlink container: %m");
2028
2029 r = sd_netlink_message_close_container(m);
2030 if (r < 0)
2031 return log_link_error_errno(link, r, "Failed to close netlink container: %m");
2032
2033 r = netlink_call_async(link->manager->rtnl, NULL, m, link_set_handler,
2034 link_netlink_destroy_callback, link);
2035 if (r < 0)
2036 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
2037
2038 link_ref(link);
2039
2040 if (!(link->flags & IFF_UP)) {
2041 r = link_up_can(link);
2042 if (r < 0) {
2043 link_enter_failed(link);
2044 return r;
2045 }
2046 }
2047
2048 log_link_debug(link, "link_set_can done");
2049
2050 return r;
2051 }
2052
2053 static int link_down_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
2054 int r;
2055
2056 assert(link);
2057
2058 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
2059 return 1;
2060
2061 r = sd_netlink_message_get_errno(m);
2062 if (r < 0)
2063 log_link_warning_errno(link, r, "Could not bring down interface: %m");
2064
2065 if (streq_ptr(link->kind, "can"))
2066 link_set_can(link);
2067
2068 return 1;
2069 }
2070
2071 int link_down(Link *link) {
2072 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
2073 int r;
2074
2075 assert(link);
2076 assert(link->manager);
2077 assert(link->manager->rtnl);
2078
2079 log_link_debug(link, "Bringing link down");
2080
2081 r = sd_rtnl_message_new_link(link->manager->rtnl, &req,
2082 RTM_SETLINK, link->ifindex);
2083 if (r < 0)
2084 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
2085
2086 r = sd_rtnl_message_link_set_flags(req, 0, IFF_UP);
2087 if (r < 0)
2088 return log_link_error_errno(link, r, "Could not set link flags: %m");
2089
2090 r = netlink_call_async(link->manager->rtnl, NULL, req, link_down_handler,
2091 link_netlink_destroy_callback, link);
2092 if (r < 0)
2093 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
2094
2095 link_ref(link);
2096
2097 return 0;
2098 }
2099
2100 static int link_handle_bound_to_list(Link *link) {
2101 Link *l;
2102 Iterator i;
2103 int r;
2104 bool required_up = false;
2105 bool link_is_up = false;
2106
2107 assert(link);
2108
2109 if (hashmap_isempty(link->bound_to_links))
2110 return 0;
2111
2112 if (link->flags & IFF_UP)
2113 link_is_up = true;
2114
2115 HASHMAP_FOREACH (l, link->bound_to_links, i)
2116 if (link_has_carrier(l)) {
2117 required_up = true;
2118 break;
2119 }
2120
2121 if (!required_up && link_is_up) {
2122 r = link_down(link);
2123 if (r < 0)
2124 return r;
2125 } else if (required_up && !link_is_up) {
2126 r = link_up(link);
2127 if (r < 0)
2128 return r;
2129 }
2130
2131 return 0;
2132 }
2133
2134 static int link_handle_bound_by_list(Link *link) {
2135 Iterator i;
2136 Link *l;
2137 int r;
2138
2139 assert(link);
2140
2141 if (hashmap_isempty(link->bound_by_links))
2142 return 0;
2143
2144 HASHMAP_FOREACH (l, link->bound_by_links, i) {
2145 r = link_handle_bound_to_list(l);
2146 if (r < 0)
2147 return r;
2148 }
2149
2150 return 0;
2151 }
2152
2153 static int link_put_carrier(Link *link, Link *carrier, Hashmap **h) {
2154 int r;
2155
2156 assert(link);
2157 assert(carrier);
2158
2159 if (link == carrier)
2160 return 0;
2161
2162 if (hashmap_get(*h, INT_TO_PTR(carrier->ifindex)))
2163 return 0;
2164
2165 r = hashmap_ensure_allocated(h, NULL);
2166 if (r < 0)
2167 return r;
2168
2169 r = hashmap_put(*h, INT_TO_PTR(carrier->ifindex), carrier);
2170 if (r < 0)
2171 return r;
2172
2173 return 0;
2174 }
2175
2176 static int link_new_bound_by_list(Link *link) {
2177 Manager *m;
2178 Link *carrier;
2179 Iterator i;
2180 int r;
2181 bool list_updated = false;
2182
2183 assert(link);
2184 assert(link->manager);
2185
2186 m = link->manager;
2187
2188 HASHMAP_FOREACH(carrier, m->links, i) {
2189 if (!carrier->network)
2190 continue;
2191
2192 if (strv_isempty(carrier->network->bind_carrier))
2193 continue;
2194
2195 if (strv_fnmatch(carrier->network->bind_carrier, link->ifname, 0)) {
2196 r = link_put_carrier(link, carrier, &link->bound_by_links);
2197 if (r < 0)
2198 return r;
2199
2200 list_updated = true;
2201 }
2202 }
2203
2204 if (list_updated)
2205 link_dirty(link);
2206
2207 HASHMAP_FOREACH(carrier, link->bound_by_links, i) {
2208 r = link_put_carrier(carrier, link, &carrier->bound_to_links);
2209 if (r < 0)
2210 return r;
2211
2212 link_dirty(carrier);
2213 }
2214
2215 return 0;
2216 }
2217
2218 static int link_new_bound_to_list(Link *link) {
2219 Manager *m;
2220 Link *carrier;
2221 Iterator i;
2222 int r;
2223 bool list_updated = false;
2224
2225 assert(link);
2226 assert(link->manager);
2227
2228 if (!link->network)
2229 return 0;
2230
2231 if (strv_isempty(link->network->bind_carrier))
2232 return 0;
2233
2234 m = link->manager;
2235
2236 HASHMAP_FOREACH (carrier, m->links, i) {
2237 if (strv_fnmatch(link->network->bind_carrier, carrier->ifname, 0)) {
2238 r = link_put_carrier(link, carrier, &link->bound_to_links);
2239 if (r < 0)
2240 return r;
2241
2242 list_updated = true;
2243 }
2244 }
2245
2246 if (list_updated)
2247 link_dirty(link);
2248
2249 HASHMAP_FOREACH (carrier, link->bound_to_links, i) {
2250 r = link_put_carrier(carrier, link, &carrier->bound_by_links);
2251 if (r < 0)
2252 return r;
2253
2254 link_dirty(carrier);
2255 }
2256
2257 return 0;
2258 }
2259
2260 static int link_new_carrier_maps(Link *link) {
2261 int r;
2262
2263 r = link_new_bound_by_list(link);
2264 if (r < 0)
2265 return r;
2266
2267 r = link_handle_bound_by_list(link);
2268 if (r < 0)
2269 return r;
2270
2271 r = link_new_bound_to_list(link);
2272 if (r < 0)
2273 return r;
2274
2275 r = link_handle_bound_to_list(link);
2276 if (r < 0)
2277 return r;
2278
2279 return 0;
2280 }
2281
2282 static void link_free_bound_to_list(Link *link) {
2283 Link *bound_to;
2284 Iterator i;
2285
2286 HASHMAP_FOREACH (bound_to, link->bound_to_links, i) {
2287 hashmap_remove(link->bound_to_links, INT_TO_PTR(bound_to->ifindex));
2288
2289 if (hashmap_remove(bound_to->bound_by_links, INT_TO_PTR(link->ifindex)))
2290 link_dirty(bound_to);
2291 }
2292
2293 return;
2294 }
2295
2296 static void link_free_bound_by_list(Link *link) {
2297 Link *bound_by;
2298 Iterator i;
2299
2300 HASHMAP_FOREACH (bound_by, link->bound_by_links, i) {
2301 hashmap_remove(link->bound_by_links, INT_TO_PTR(bound_by->ifindex));
2302
2303 if (hashmap_remove(bound_by->bound_to_links, INT_TO_PTR(link->ifindex))) {
2304 link_dirty(bound_by);
2305 link_handle_bound_to_list(bound_by);
2306 }
2307 }
2308
2309 return;
2310 }
2311
2312 static void link_free_carrier_maps(Link *link) {
2313 bool list_updated = false;
2314
2315 assert(link);
2316
2317 if (!hashmap_isempty(link->bound_to_links)) {
2318 link_free_bound_to_list(link);
2319 list_updated = true;
2320 }
2321
2322 if (!hashmap_isempty(link->bound_by_links)) {
2323 link_free_bound_by_list(link);
2324 list_updated = true;
2325 }
2326
2327 if (list_updated)
2328 link_dirty(link);
2329
2330 return;
2331 }
2332
2333 void link_drop(Link *link) {
2334 if (!link || link->state == LINK_STATE_LINGER)
2335 return;
2336
2337 link_set_state(link, LINK_STATE_LINGER);
2338
2339 link_free_carrier_maps(link);
2340
2341 log_link_debug(link, "Link removed");
2342
2343 (void) unlink(link->state_file);
2344
2345 link_detach_from_manager(link);
2346
2347 link_unref(link);
2348
2349 return;
2350 }
2351
2352 static int link_joined(Link *link) {
2353 int r;
2354
2355 assert(link);
2356 assert(link->network);
2357
2358 if (!hashmap_isempty(link->bound_to_links)) {
2359 r = link_handle_bound_to_list(link);
2360 if (r < 0)
2361 return r;
2362 } else if (!(link->flags & IFF_UP)) {
2363 r = link_up(link);
2364 if (r < 0) {
2365 link_enter_failed(link);
2366 return r;
2367 }
2368 }
2369
2370 if (link->network->bridge) {
2371 r = link_set_bridge(link);
2372 if (r < 0)
2373 log_link_error_errno(link, r, "Could not set bridge message: %m");
2374 }
2375
2376 if (link->network->bond) {
2377 r = link_bond_set(link);
2378 if (r < 0)
2379 log_link_error_errno(link, r, "Could not set bond message: %m");
2380 }
2381
2382 if (link->network->use_br_vlan &&
2383 (link->network->bridge || streq_ptr("bridge", link->kind))) {
2384 r = link_set_bridge_vlan(link);
2385 if (r < 0)
2386 log_link_error_errno(link, r, "Could not set bridge vlan: %m");
2387 }
2388
2389 /* Skip setting up addresses until it gets carrier,
2390 or it would try to set addresses twice,
2391 which is bad for non-idempotent steps. */
2392 if (!link_has_carrier(link) && !link->network->configure_without_carrier)
2393 return 0;
2394
2395 return link_request_set_addresses(link);
2396 }
2397
2398 static int netdev_join_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
2399 int r;
2400
2401 assert(link);
2402 assert(link->network);
2403
2404 link->enslaving--;
2405
2406 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
2407 return 1;
2408
2409 r = sd_netlink_message_get_errno(m);
2410 if (r < 0 && r != -EEXIST) {
2411 log_link_error_errno(link, r, "Could not join netdev: %m");
2412 link_enter_failed(link);
2413 return 1;
2414 } else
2415 log_link_debug(link, "Joined netdev");
2416
2417 if (link->enslaving <= 0)
2418 link_joined(link);
2419
2420 return 1;
2421 }
2422
2423 static int link_enter_join_netdev(Link *link) {
2424 NetDev *netdev;
2425 Iterator i;
2426 int r;
2427
2428 assert(link);
2429 assert(link->network);
2430 assert(link->state == LINK_STATE_PENDING);
2431
2432 link_set_state(link, LINK_STATE_CONFIGURING);
2433
2434 link_dirty(link);
2435
2436 if (!link->network->bridge &&
2437 !link->network->bond &&
2438 !link->network->vrf &&
2439 hashmap_isempty(link->network->stacked_netdevs))
2440 return link_joined(link);
2441
2442 if (link->network->bond) {
2443 if (link->network->bond->state == NETDEV_STATE_READY &&
2444 link->network->bond->ifindex == link->master_ifindex)
2445 return link_joined(link);
2446
2447 log_struct(LOG_DEBUG,
2448 LOG_LINK_INTERFACE(link),
2449 LOG_NETDEV_INTERFACE(link->network->bond),
2450 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", link->network->bond->ifname));
2451
2452 r = netdev_join(link->network->bond, link, netdev_join_handler);
2453 if (r < 0) {
2454 log_struct_errno(LOG_WARNING, r,
2455 LOG_LINK_INTERFACE(link),
2456 LOG_NETDEV_INTERFACE(link->network->bond),
2457 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", link->network->bond->ifname));
2458 link_enter_failed(link);
2459 return r;
2460 }
2461
2462 link->enslaving++;
2463 }
2464
2465 if (link->network->bridge) {
2466 log_struct(LOG_DEBUG,
2467 LOG_LINK_INTERFACE(link),
2468 LOG_NETDEV_INTERFACE(link->network->bridge),
2469 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", link->network->bridge->ifname));
2470
2471 r = netdev_join(link->network->bridge, link, netdev_join_handler);
2472 if (r < 0) {
2473 log_struct_errno(LOG_WARNING, r,
2474 LOG_LINK_INTERFACE(link),
2475 LOG_NETDEV_INTERFACE(link->network->bridge),
2476 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", link->network->bridge->ifname));
2477 link_enter_failed(link);
2478 return r;
2479 }
2480
2481 link->enslaving++;
2482 }
2483
2484 if (link->network->vrf) {
2485 log_struct(LOG_DEBUG,
2486 LOG_LINK_INTERFACE(link),
2487 LOG_NETDEV_INTERFACE(link->network->vrf),
2488 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", link->network->vrf->ifname));
2489
2490 r = netdev_join(link->network->vrf, link, netdev_join_handler);
2491 if (r < 0) {
2492 log_struct_errno(LOG_WARNING, r,
2493 LOG_LINK_INTERFACE(link),
2494 LOG_NETDEV_INTERFACE(link->network->vrf),
2495 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", link->network->vrf->ifname));
2496 link_enter_failed(link);
2497 return r;
2498 }
2499
2500 link->enslaving++;
2501 }
2502
2503 HASHMAP_FOREACH(netdev, link->network->stacked_netdevs, i) {
2504
2505 if (netdev->ifindex > 0) {
2506 link_joined(link);
2507 continue;
2508 }
2509
2510 log_struct(LOG_DEBUG,
2511 LOG_LINK_INTERFACE(link),
2512 LOG_NETDEV_INTERFACE(netdev),
2513 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", netdev->ifname));
2514
2515 r = netdev_join(netdev, link, netdev_join_handler);
2516 if (r < 0) {
2517 log_struct_errno(LOG_WARNING, r,
2518 LOG_LINK_INTERFACE(link),
2519 LOG_NETDEV_INTERFACE(netdev),
2520 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", netdev->ifname));
2521 link_enter_failed(link);
2522 return r;
2523 }
2524
2525 link->enslaving++;
2526 }
2527
2528 return 0;
2529 }
2530
2531 static int link_set_ipv4_forward(Link *link) {
2532 int r;
2533
2534 if (!link_ipv4_forward_enabled(link))
2535 return 0;
2536
2537 /* We propagate the forwarding flag from one interface to the
2538 * global setting one way. This means: as long as at least one
2539 * interface was configured at any time that had IP forwarding
2540 * enabled the setting will stay on for good. We do this
2541 * primarily to keep IPv4 and IPv6 packet forwarding behaviour
2542 * somewhat in sync (see below). */
2543
2544 r = write_string_file("/proc/sys/net/ipv4/ip_forward", "1", WRITE_STRING_FILE_VERIFY_ON_FAILURE | WRITE_STRING_FILE_DISABLE_BUFFER);
2545 if (r < 0)
2546 log_link_warning_errno(link, r, "Cannot turn on IPv4 packet forwarding, ignoring: %m");
2547
2548 return 0;
2549 }
2550
2551 static int link_set_ipv6_forward(Link *link) {
2552 int r;
2553
2554 if (!link_ipv6_forward_enabled(link))
2555 return 0;
2556
2557 /* On Linux, the IPv6 stack does not know a per-interface
2558 * packet forwarding setting: either packet forwarding is on
2559 * for all, or off for all. We hence don't bother with a
2560 * per-interface setting, but simply propagate the interface
2561 * flag, if it is set, to the global flag, one-way. Note that
2562 * while IPv4 would allow a per-interface flag, we expose the
2563 * same behaviour there and also propagate the setting from
2564 * one to all, to keep things simple (see above). */
2565
2566 r = write_string_file("/proc/sys/net/ipv6/conf/all/forwarding", "1", WRITE_STRING_FILE_VERIFY_ON_FAILURE | WRITE_STRING_FILE_DISABLE_BUFFER);
2567 if (r < 0)
2568 log_link_warning_errno(link, r, "Cannot configure IPv6 packet forwarding, ignoring: %m");
2569
2570 return 0;
2571 }
2572
2573 static int link_set_ipv6_privacy_extensions(Link *link) {
2574 char buf[DECIMAL_STR_MAX(unsigned) + 1];
2575 IPv6PrivacyExtensions s;
2576 const char *p = NULL;
2577 int r;
2578
2579 s = link_ipv6_privacy_extensions(link);
2580 if (s < 0)
2581 return 0;
2582
2583 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/use_tempaddr");
2584 xsprintf(buf, "%u", (unsigned) link->network->ipv6_privacy_extensions);
2585
2586 r = write_string_file(p, buf, WRITE_STRING_FILE_VERIFY_ON_FAILURE | WRITE_STRING_FILE_DISABLE_BUFFER);
2587 if (r < 0)
2588 log_link_warning_errno(link, r, "Cannot configure IPv6 privacy extension for interface: %m");
2589
2590 return 0;
2591 }
2592
2593 static int link_set_ipv6_accept_ra(Link *link) {
2594 const char *p = NULL;
2595 int r;
2596
2597 /* Make this a NOP if IPv6 is not available */
2598 if (!socket_ipv6_is_supported())
2599 return 0;
2600
2601 if (link->flags & IFF_LOOPBACK)
2602 return 0;
2603
2604 if (!link->network)
2605 return 0;
2606
2607 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/accept_ra");
2608
2609 /* We handle router advertisements ourselves, tell the kernel to GTFO */
2610 r = write_string_file(p, "0", WRITE_STRING_FILE_VERIFY_ON_FAILURE | WRITE_STRING_FILE_DISABLE_BUFFER);
2611 if (r < 0)
2612 log_link_warning_errno(link, r, "Cannot disable kernel IPv6 accept_ra for interface: %m");
2613
2614 return 0;
2615 }
2616
2617 static int link_set_ipv6_dad_transmits(Link *link) {
2618 char buf[DECIMAL_STR_MAX(int) + 1];
2619 const char *p = NULL;
2620 int r;
2621
2622 /* Make this a NOP if IPv6 is not available */
2623 if (!socket_ipv6_is_supported())
2624 return 0;
2625
2626 if (link->flags & IFF_LOOPBACK)
2627 return 0;
2628
2629 if (!link->network)
2630 return 0;
2631
2632 if (link->network->ipv6_dad_transmits < 0)
2633 return 0;
2634
2635 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/dad_transmits");
2636 xsprintf(buf, "%i", link->network->ipv6_dad_transmits);
2637
2638 r = write_string_file(p, buf, WRITE_STRING_FILE_VERIFY_ON_FAILURE | WRITE_STRING_FILE_DISABLE_BUFFER);
2639 if (r < 0)
2640 log_link_warning_errno(link, r, "Cannot set IPv6 dad transmits for interface: %m");
2641
2642 return 0;
2643 }
2644
2645 static int link_set_ipv6_hop_limit(Link *link) {
2646 char buf[DECIMAL_STR_MAX(int) + 1];
2647 const char *p = NULL;
2648 int r;
2649
2650 /* Make this a NOP if IPv6 is not available */
2651 if (!socket_ipv6_is_supported())
2652 return 0;
2653
2654 if (link->flags & IFF_LOOPBACK)
2655 return 0;
2656
2657 if (!link->network)
2658 return 0;
2659
2660 if (link->network->ipv6_hop_limit < 0)
2661 return 0;
2662
2663 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/hop_limit");
2664 xsprintf(buf, "%i", link->network->ipv6_hop_limit);
2665
2666 r = write_string_file(p, buf, WRITE_STRING_FILE_VERIFY_ON_FAILURE | WRITE_STRING_FILE_DISABLE_BUFFER);
2667 if (r < 0)
2668 log_link_warning_errno(link, r, "Cannot set IPv6 hop limit for interface: %m");
2669
2670 return 0;
2671 }
2672
2673 static int link_set_ipv6_mtu(Link *link) {
2674 char buf[DECIMAL_STR_MAX(unsigned) + 1];
2675 const char *p = NULL;
2676 int r;
2677
2678 /* Make this a NOP if IPv6 is not available */
2679 if (!socket_ipv6_is_supported())
2680 return 0;
2681
2682 if (link->flags & IFF_LOOPBACK)
2683 return 0;
2684
2685 if (link->network->ipv6_mtu == 0)
2686 return 0;
2687
2688 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/mtu");
2689
2690 xsprintf(buf, "%" PRIu32, link->network->ipv6_mtu);
2691
2692 r = write_string_file(p, buf, WRITE_STRING_FILE_DISABLE_BUFFER);
2693 if (r < 0)
2694 log_link_warning_errno(link, r, "Cannot set IPv6 MTU for interface: %m");
2695
2696 return 0;
2697 }
2698
2699 static bool link_is_static_address_configured(Link *link, Address *address) {
2700 Address *net_address;
2701
2702 assert(link);
2703 assert(address);
2704
2705 if (!link->network)
2706 return false;
2707
2708 LIST_FOREACH(addresses, net_address, link->network->static_addresses)
2709 if (address_equal(net_address, address))
2710 return true;
2711
2712 return false;
2713 }
2714
2715 static bool link_is_static_route_configured(Link *link, Route *route) {
2716 Route *net_route;
2717
2718 assert(link);
2719 assert(route);
2720
2721 if (!link->network)
2722 return false;
2723
2724 LIST_FOREACH(routes, net_route, link->network->static_routes)
2725 if (route_equal(net_route, route))
2726 return true;
2727
2728 return false;
2729 }
2730
2731 static int link_drop_foreign_config(Link *link) {
2732 Address *address;
2733 Route *route;
2734 Iterator i;
2735 int r;
2736
2737 SET_FOREACH(address, link->addresses_foreign, i) {
2738 /* we consider IPv6LL addresses to be managed by the kernel */
2739 if (address->family == AF_INET6 && in_addr_is_link_local(AF_INET6, &address->in_addr) == 1)
2740 continue;
2741
2742 if (link_is_static_address_configured(link, address)) {
2743 r = address_add(link, address->family, &address->in_addr, address->prefixlen, NULL);
2744 if (r < 0)
2745 return log_link_error_errno(link, r, "Failed to add address: %m");
2746 } else {
2747 r = address_remove(address, link, NULL);
2748 if (r < 0)
2749 return r;
2750 }
2751 }
2752
2753 SET_FOREACH(route, link->routes_foreign, i) {
2754 /* do not touch routes managed by the kernel */
2755 if (route->protocol == RTPROT_KERNEL)
2756 continue;
2757
2758 if (link_is_static_route_configured(link, route)) {
2759 r = route_add(link, route->family, &route->dst, route->dst_prefixlen, route->tos, route->priority, route->table, NULL);
2760 if (r < 0)
2761 return r;
2762 } else {
2763 r = route_remove(route, link, NULL);
2764 if (r < 0)
2765 return r;
2766 }
2767 }
2768
2769 return 0;
2770 }
2771
2772 static int link_drop_config(Link *link) {
2773 Address *address, *pool_address;
2774 Route *route;
2775 Iterator i;
2776 int r;
2777
2778 SET_FOREACH(address, link->addresses, i) {
2779 /* we consider IPv6LL addresses to be managed by the kernel */
2780 if (address->family == AF_INET6 && in_addr_is_link_local(AF_INET6, &address->in_addr) == 1)
2781 continue;
2782
2783 r = address_remove(address, link, NULL);
2784 if (r < 0)
2785 return r;
2786
2787 /* If this address came from an address pool, clean up the pool */
2788 LIST_FOREACH(addresses, pool_address, link->pool_addresses) {
2789 if (address_equal(address, pool_address)) {
2790 LIST_REMOVE(addresses, link->pool_addresses, pool_address);
2791 address_free(pool_address);
2792 break;
2793 }
2794 }
2795 }
2796
2797 SET_FOREACH(route, link->routes, i) {
2798 /* do not touch routes managed by the kernel */
2799 if (route->protocol == RTPROT_KERNEL)
2800 continue;
2801
2802 r = route_remove(route, link, NULL);
2803 if (r < 0)
2804 return r;
2805 }
2806
2807 ndisc_flush(link);
2808
2809 return 0;
2810 }
2811
2812 static int link_update_lldp(Link *link) {
2813 int r;
2814
2815 assert(link);
2816
2817 if (!link->lldp)
2818 return 0;
2819
2820 if (link->flags & IFF_UP) {
2821 r = sd_lldp_start(link->lldp);
2822 if (r > 0)
2823 log_link_debug(link, "Started LLDP.");
2824 } else {
2825 r = sd_lldp_stop(link->lldp);
2826 if (r > 0)
2827 log_link_debug(link, "Stopped LLDP.");
2828 }
2829
2830 return r;
2831 }
2832
2833 static int link_configure_can(Link *link) {
2834 int r;
2835
2836 if (streq_ptr(link->kind, "can")) {
2837 /* The CAN interface must be down to configure bitrate, etc... */
2838 if ((link->flags & IFF_UP)) {
2839 r = link_down(link);
2840 if (r < 0) {
2841 link_enter_failed(link);
2842 return r;
2843 }
2844
2845 return 0;
2846 }
2847
2848 return link_set_can(link);
2849 }
2850
2851 if (!(link->flags & IFF_UP)) {
2852 r = link_up_can(link);
2853 if (r < 0) {
2854 link_enter_failed(link);
2855 return r;
2856 }
2857 }
2858
2859 return 0;
2860 }
2861
2862 static int link_configure(Link *link) {
2863 int r;
2864
2865 assert(link);
2866 assert(link->network);
2867 assert(link->state == LINK_STATE_PENDING);
2868
2869 if (STRPTR_IN_SET(link->kind, "can", "vcan"))
2870 return link_configure_can(link);
2871
2872 /* Drop foreign config, but ignore loopback or critical devices.
2873 * We do not want to remove loopback address or addresses used for root NFS. */
2874 if (!(link->flags & IFF_LOOPBACK) && !(link->network->dhcp_critical)) {
2875 r = link_drop_foreign_config(link);
2876 if (r < 0)
2877 return r;
2878 }
2879
2880 r = link_set_proxy_arp(link);
2881 if (r < 0)
2882 return r;
2883
2884 r = ipv6_proxy_ndp_addresses_configure(link);
2885 if (r < 0)
2886 return r;
2887
2888 r = link_set_ipv4_forward(link);
2889 if (r < 0)
2890 return r;
2891
2892 r = link_set_ipv6_forward(link);
2893 if (r < 0)
2894 return r;
2895
2896 r = link_set_ipv6_privacy_extensions(link);
2897 if (r < 0)
2898 return r;
2899
2900 r = link_set_ipv6_accept_ra(link);
2901 if (r < 0)
2902 return r;
2903
2904 r = link_set_ipv6_dad_transmits(link);
2905 if (r < 0)
2906 return r;
2907
2908 r = link_set_ipv6_hop_limit(link);
2909 if (r < 0)
2910 return r;
2911
2912 r = link_set_flags(link);
2913 if (r < 0)
2914 return r;
2915
2916 r = link_set_ipv6_mtu(link);
2917 if (r < 0)
2918 return r;
2919
2920 if (link_ipv4ll_enabled(link)) {
2921 r = ipv4ll_configure(link);
2922 if (r < 0)
2923 return r;
2924 }
2925
2926 if (link_dhcp4_enabled(link)) {
2927 r = dhcp4_set_promote_secondaries(link);
2928 if (r < 0)
2929 return r;
2930
2931 r = dhcp4_configure(link);
2932 if (r < 0)
2933 return r;
2934 }
2935
2936 if (link_dhcp4_server_enabled(link)) {
2937 r = sd_dhcp_server_new(&link->dhcp_server, link->ifindex);
2938 if (r < 0)
2939 return r;
2940
2941 r = sd_dhcp_server_attach_event(link->dhcp_server, NULL, 0);
2942 if (r < 0)
2943 return r;
2944 }
2945
2946 if (link_dhcp6_enabled(link) ||
2947 link_ipv6_accept_ra_enabled(link)) {
2948 r = dhcp6_configure(link);
2949 if (r < 0)
2950 return r;
2951 }
2952
2953 if (link_ipv6_accept_ra_enabled(link)) {
2954 r = ndisc_configure(link);
2955 if (r < 0)
2956 return r;
2957 }
2958
2959 if (link_radv_enabled(link)) {
2960 r = radv_configure(link);
2961 if (r < 0)
2962 return r;
2963 }
2964
2965 if (link_lldp_rx_enabled(link)) {
2966 r = sd_lldp_new(&link->lldp);
2967 if (r < 0)
2968 return r;
2969
2970 r = sd_lldp_set_ifindex(link->lldp, link->ifindex);
2971 if (r < 0)
2972 return r;
2973
2974 r = sd_lldp_match_capabilities(link->lldp,
2975 link->network->lldp_mode == LLDP_MODE_ROUTERS_ONLY ?
2976 SD_LLDP_SYSTEM_CAPABILITIES_ALL_ROUTERS :
2977 SD_LLDP_SYSTEM_CAPABILITIES_ALL);
2978 if (r < 0)
2979 return r;
2980
2981 r = sd_lldp_set_filter_address(link->lldp, &link->mac);
2982 if (r < 0)
2983 return r;
2984
2985 r = sd_lldp_attach_event(link->lldp, NULL, 0);
2986 if (r < 0)
2987 return r;
2988
2989 r = sd_lldp_set_callback(link->lldp, lldp_handler, link);
2990 if (r < 0)
2991 return r;
2992
2993 r = link_update_lldp(link);
2994 if (r < 0)
2995 return r;
2996 }
2997
2998 if (link->network->mtu > 0) {
2999 r = link_set_mtu(link, link->network->mtu);
3000 if (r < 0)
3001 return r;
3002 }
3003
3004 if (socket_ipv6_is_supported()) {
3005 r = link_configure_addrgen_mode(link);
3006 if (r < 0)
3007 return r;
3008 }
3009
3010 return link_configure_after_setting_mtu(link);
3011 }
3012
3013 static int link_configure_after_setting_mtu(Link *link) {
3014 int r;
3015
3016 assert(link);
3017 assert(link->network);
3018 assert(link->state == LINK_STATE_PENDING);
3019
3020 if (link->setting_mtu)
3021 return 0;
3022
3023 if (link_has_carrier(link) || link->network->configure_without_carrier) {
3024 r = link_acquire_conf(link);
3025 if (r < 0)
3026 return r;
3027 }
3028
3029 return link_enter_join_netdev(link);
3030 }
3031
3032 static int duid_set_uuid(DUID *duid, sd_id128_t uuid) {
3033 assert(duid);
3034
3035 if (duid->raw_data_len > 0)
3036 return 0;
3037
3038 if (duid->type != DUID_TYPE_UUID)
3039 return -EINVAL;
3040
3041 memcpy(&duid->raw_data, &uuid, sizeof(sd_id128_t));
3042 duid->raw_data_len = sizeof(sd_id128_t);
3043
3044 return 1;
3045 }
3046
3047 int get_product_uuid_handler(sd_bus_message *m, void *userdata, sd_bus_error *ret_error) {
3048 Manager *manager = userdata;
3049 const sd_bus_error *e;
3050 const void *a;
3051 size_t sz;
3052 DUID *duid;
3053 Link *link;
3054 int r;
3055
3056 assert(m);
3057 assert(manager);
3058
3059 e = sd_bus_message_get_error(m);
3060 if (e) {
3061 log_error_errno(sd_bus_error_get_errno(e),
3062 "Could not get product UUID. Falling back to use machine-app-specific ID as DUID-UUID: %s",
3063 e->message);
3064 goto configure;
3065 }
3066
3067 r = sd_bus_message_read_array(m, 'y', &a, &sz);
3068 if (r < 0)
3069 goto configure;
3070
3071 if (sz != sizeof(sd_id128_t)) {
3072 log_error("Invalid product UUID. Falling back to use machine-app-specific ID as DUID-UUID.");
3073 goto configure;
3074 }
3075
3076 memcpy(&manager->product_uuid, a, sz);
3077 while ((duid = set_steal_first(manager->duids_requesting_uuid)))
3078 (void) duid_set_uuid(duid, manager->product_uuid);
3079
3080 manager->duids_requesting_uuid = set_free(manager->duids_requesting_uuid);
3081
3082 configure:
3083 while ((link = set_steal_first(manager->links_requesting_uuid))) {
3084 r = link_configure(link);
3085 if (r < 0)
3086 log_link_error_errno(link, r, "Failed to configure link: %m");
3087 }
3088
3089 manager->links_requesting_uuid = set_free(manager->links_requesting_uuid);
3090
3091 /* To avoid calling GetProductUUID() bus method so frequently, set the flag below
3092 * even if the method fails. */
3093 manager->has_product_uuid = true;
3094
3095 return 1;
3096 }
3097
3098 static bool link_requires_uuid(Link *link) {
3099 const DUID *duid;
3100
3101 assert(link);
3102 assert(link->manager);
3103 assert(link->network);
3104
3105 duid = link_get_duid(link);
3106 if (duid->type != DUID_TYPE_UUID || duid->raw_data_len != 0)
3107 return false;
3108
3109 if (link_dhcp4_enabled(link) && IN_SET(link->network->dhcp_client_identifier, DHCP_CLIENT_ID_DUID, DHCP_CLIENT_ID_DUID_ONLY))
3110 return true;
3111
3112 if (link_dhcp6_enabled(link) || link_ipv6_accept_ra_enabled(link))
3113 return true;
3114
3115 return false;
3116 }
3117
3118 static int link_configure_duid(Link *link) {
3119 Manager *m;
3120 DUID *duid;
3121 int r;
3122
3123 assert(link);
3124 assert(link->manager);
3125 assert(link->network);
3126
3127 m = link->manager;
3128 duid = link_get_duid(link);
3129
3130 if (!link_requires_uuid(link))
3131 return 1;
3132
3133 if (m->has_product_uuid) {
3134 (void) duid_set_uuid(duid, m->product_uuid);
3135 return 1;
3136 }
3137
3138 if (!m->links_requesting_uuid) {
3139 r = manager_request_product_uuid(m, link);
3140 if (r < 0) {
3141 if (r == -ENOMEM)
3142 return r;
3143
3144 log_link_warning_errno(link, r,
3145 "Failed to get product UUID. Falling back to use machine-app-specific ID as DUID-UUID: %m");
3146 return 1;
3147 }
3148 } else {
3149 r = set_put(m->links_requesting_uuid, link);
3150 if (r < 0)
3151 return log_oom();
3152
3153 r = set_put(m->duids_requesting_uuid, duid);
3154 if (r < 0)
3155 return log_oom();
3156 }
3157
3158 return 0;
3159 }
3160
3161 static int link_initialized_and_synced(Link *link) {
3162 Network *network;
3163 int r;
3164
3165 assert(link);
3166 assert(link->ifname);
3167 assert(link->manager);
3168
3169 if (link->state != LINK_STATE_PENDING)
3170 return 1;
3171
3172 log_link_debug(link, "Link state is up-to-date");
3173
3174 r = link_new_bound_by_list(link);
3175 if (r < 0)
3176 return r;
3177
3178 r = link_handle_bound_by_list(link);
3179 if (r < 0)
3180 return r;
3181
3182 if (!link->network) {
3183 r = network_get(link->manager, link->sd_device, link->ifname,
3184 &link->mac, &network);
3185 if (r == -ENOENT) {
3186 link_enter_unmanaged(link);
3187 return 1;
3188 } else if (r == 0 && network->unmanaged) {
3189 link_enter_unmanaged(link);
3190 return 0;
3191 } else if (r < 0)
3192 return r;
3193
3194 if (link->flags & IFF_LOOPBACK) {
3195 if (network->link_local != ADDRESS_FAMILY_NO)
3196 log_link_debug(link, "Ignoring link-local autoconfiguration for loopback link");
3197
3198 if (network->dhcp != ADDRESS_FAMILY_NO)
3199 log_link_debug(link, "Ignoring DHCP clients for loopback link");
3200
3201 if (network->dhcp_server)
3202 log_link_debug(link, "Ignoring DHCP server for loopback link");
3203 }
3204
3205 r = network_apply(network, link);
3206 if (r < 0)
3207 return r;
3208 }
3209
3210 r = link_new_bound_to_list(link);
3211 if (r < 0)
3212 return r;
3213
3214 /* link_configure_duid() returns 0 if it requests product UUID. In that case,
3215 * link_configure() is called later asynchronously. */
3216 r = link_configure_duid(link);
3217 if (r <= 0)
3218 return r;
3219
3220 r = link_configure(link);
3221 if (r < 0)
3222 return r;
3223
3224 return 1;
3225 }
3226
3227 static int link_initialized_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
3228 (void) link_initialized_and_synced(link);
3229 return 1;
3230 }
3231
3232 int link_initialized(Link *link, sd_device *device) {
3233 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
3234 int r;
3235
3236 assert(link);
3237 assert(link->manager);
3238 assert(link->manager->rtnl);
3239 assert(device);
3240
3241 if (link->state != LINK_STATE_PENDING)
3242 return 0;
3243
3244 if (link->sd_device)
3245 return 0;
3246
3247 log_link_debug(link, "udev initialized link");
3248
3249 link->sd_device = sd_device_ref(device);
3250
3251 /* udev has initialized the link, but we don't know if we have yet
3252 * processed the NEWLINK messages with the latest state. Do a GETLINK,
3253 * when it returns we know that the pending NEWLINKs have already been
3254 * processed and that we are up-to-date */
3255
3256 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_GETLINK,
3257 link->ifindex);
3258 if (r < 0)
3259 return r;
3260
3261 r = netlink_call_async(link->manager->rtnl, NULL, req, link_initialized_handler,
3262 link_netlink_destroy_callback, link);
3263 if (r < 0)
3264 return r;
3265
3266 link_ref(link);
3267
3268 return 0;
3269 }
3270
3271 static int link_load(Link *link) {
3272 _cleanup_free_ char *network_file = NULL,
3273 *addresses = NULL,
3274 *routes = NULL,
3275 *dhcp4_address = NULL,
3276 *ipv4ll_address = NULL;
3277 union in_addr_union address;
3278 union in_addr_union route_dst;
3279 const char *p;
3280 int r;
3281
3282 assert(link);
3283
3284 r = parse_env_file(NULL, link->state_file,
3285 "NETWORK_FILE", &network_file,
3286 "ADDRESSES", &addresses,
3287 "ROUTES", &routes,
3288 "DHCP4_ADDRESS", &dhcp4_address,
3289 "IPV4LL_ADDRESS", &ipv4ll_address);
3290 if (r < 0 && r != -ENOENT)
3291 return log_link_error_errno(link, r, "Failed to read %s: %m", link->state_file);
3292
3293 if (network_file) {
3294 Network *network;
3295 char *suffix;
3296
3297 /* drop suffix */
3298 suffix = strrchr(network_file, '.');
3299 if (!suffix) {
3300 log_link_debug(link, "Failed to get network name from %s", network_file);
3301 goto network_file_fail;
3302 }
3303 *suffix = '\0';
3304
3305 r = network_get_by_name(link->manager, basename(network_file), &network);
3306 if (r < 0) {
3307 log_link_debug_errno(link, r, "Failed to get network %s: %m", basename(network_file));
3308 goto network_file_fail;
3309 }
3310
3311 r = network_apply(network, link);
3312 if (r < 0)
3313 return log_link_error_errno(link, r, "Failed to apply network %s: %m", basename(network_file));
3314 }
3315
3316 network_file_fail:
3317
3318 if (addresses) {
3319 p = addresses;
3320
3321 for (;;) {
3322 _cleanup_free_ char *address_str = NULL;
3323 char *prefixlen_str;
3324 int family;
3325 unsigned char prefixlen;
3326
3327 r = extract_first_word(&p, &address_str, NULL, 0);
3328 if (r < 0) {
3329 log_link_debug_errno(link, r, "Failed to extract next address string: %m");
3330 continue;
3331 }
3332 if (r == 0)
3333 break;
3334
3335 prefixlen_str = strchr(address_str, '/');
3336 if (!prefixlen_str) {
3337 log_link_debug(link, "Failed to parse address and prefix length %s", address_str);
3338 continue;
3339 }
3340
3341 *prefixlen_str++ = '\0';
3342
3343 r = sscanf(prefixlen_str, "%hhu", &prefixlen);
3344 if (r != 1) {
3345 log_link_error(link, "Failed to parse prefixlen %s", prefixlen_str);
3346 continue;
3347 }
3348
3349 r = in_addr_from_string_auto(address_str, &family, &address);
3350 if (r < 0) {
3351 log_link_debug_errno(link, r, "Failed to parse address %s: %m", address_str);
3352 continue;
3353 }
3354
3355 r = address_add(link, family, &address, prefixlen, NULL);
3356 if (r < 0)
3357 return log_link_error_errno(link, r, "Failed to add address: %m");
3358 }
3359 }
3360
3361 if (routes) {
3362 p = routes;
3363
3364 for (;;) {
3365 Route *route;
3366 _cleanup_free_ char *route_str = NULL;
3367 _cleanup_(sd_event_source_unrefp) sd_event_source *expire = NULL;
3368 usec_t lifetime;
3369 char *prefixlen_str;
3370 int family;
3371 unsigned char prefixlen, tos, table;
3372 uint32_t priority;
3373
3374 r = extract_first_word(&p, &route_str, NULL, 0);
3375 if (r < 0) {
3376 log_link_debug_errno(link, r, "Failed to extract next route string: %m");
3377 continue;
3378 }
3379 if (r == 0)
3380 break;
3381
3382 prefixlen_str = strchr(route_str, '/');
3383 if (!prefixlen_str) {
3384 log_link_debug(link, "Failed to parse route %s", route_str);
3385 continue;
3386 }
3387
3388 *prefixlen_str++ = '\0';
3389
3390 r = sscanf(prefixlen_str, "%hhu/%hhu/%"SCNu32"/%hhu/"USEC_FMT, &prefixlen, &tos, &priority, &table, &lifetime);
3391 if (r != 5) {
3392 log_link_debug(link,
3393 "Failed to parse destination prefix length, tos, priority, table or expiration %s",
3394 prefixlen_str);
3395 continue;
3396 }
3397
3398 r = in_addr_from_string_auto(route_str, &family, &route_dst);
3399 if (r < 0) {
3400 log_link_debug_errno(link, r, "Failed to parse route destination %s: %m", route_str);
3401 continue;
3402 }
3403
3404 r = route_add(link, family, &route_dst, prefixlen, tos, priority, table, &route);
3405 if (r < 0)
3406 return log_link_error_errno(link, r, "Failed to add route: %m");
3407
3408 if (lifetime != USEC_INFINITY && !kernel_route_expiration_supported()) {
3409 r = sd_event_add_time(link->manager->event, &expire, clock_boottime_or_monotonic(), lifetime,
3410 0, route_expire_handler, route);
3411 if (r < 0)
3412 log_link_warning_errno(link, r, "Could not arm route expiration handler: %m");
3413 }
3414
3415 route->lifetime = lifetime;
3416 sd_event_source_unref(route->expire);
3417 route->expire = TAKE_PTR(expire);
3418 }
3419 }
3420
3421 if (dhcp4_address) {
3422 r = in_addr_from_string(AF_INET, dhcp4_address, &address);
3423 if (r < 0) {
3424 log_link_debug_errno(link, r, "Failed to parse DHCPv4 address %s: %m", dhcp4_address);
3425 goto dhcp4_address_fail;
3426 }
3427
3428 r = sd_dhcp_client_new(&link->dhcp_client, link->network ? link->network->dhcp_anonymize : 0);
3429 if (r < 0)
3430 return log_link_error_errno(link, r, "Failed to create DHCPv4 client: %m");
3431
3432 r = sd_dhcp_client_set_request_address(link->dhcp_client, &address.in);
3433 if (r < 0)
3434 return log_link_error_errno(link, r, "Failed to set initial DHCPv4 address %s: %m", dhcp4_address);
3435 }
3436
3437 dhcp4_address_fail:
3438
3439 if (ipv4ll_address) {
3440 r = in_addr_from_string(AF_INET, ipv4ll_address, &address);
3441 if (r < 0) {
3442 log_link_debug_errno(link, r, "Failed to parse IPv4LL address %s: %m", ipv4ll_address);
3443 goto ipv4ll_address_fail;
3444 }
3445
3446 r = sd_ipv4ll_new(&link->ipv4ll);
3447 if (r < 0)
3448 return log_link_error_errno(link, r, "Failed to create IPv4LL client: %m");
3449
3450 r = sd_ipv4ll_set_address(link->ipv4ll, &address.in);
3451 if (r < 0)
3452 return log_link_error_errno(link, r, "Failed to set initial IPv4LL address %s: %m", ipv4ll_address);
3453 }
3454
3455 ipv4ll_address_fail:
3456
3457 return 0;
3458 }
3459
3460 int link_add(Manager *m, sd_netlink_message *message, Link **ret) {
3461 _cleanup_(sd_device_unrefp) sd_device *device = NULL;
3462 char ifindex_str[2 + DECIMAL_STR_MAX(int)];
3463 Link *link;
3464 int r;
3465
3466 assert(m);
3467 assert(m->rtnl);
3468 assert(message);
3469 assert(ret);
3470
3471 r = link_new(m, message, ret);
3472 if (r < 0)
3473 return r;
3474
3475 link = *ret;
3476
3477 log_link_debug(link, "Link %d added", link->ifindex);
3478
3479 r = link_load(link);
3480 if (r < 0)
3481 return r;
3482
3483 if (detect_container() <= 0) {
3484 /* not in a container, udev will be around */
3485 sprintf(ifindex_str, "n%d", link->ifindex);
3486 r = sd_device_new_from_device_id(&device, ifindex_str);
3487 if (r < 0) {
3488 log_link_warning_errno(link, r, "Could not find device: %m");
3489 goto failed;
3490 }
3491
3492 r = sd_device_get_is_initialized(device);
3493 if (r < 0) {
3494 log_link_warning_errno(link, r, "Could not determine whether the device is initialized or not: %m");
3495 goto failed;
3496 }
3497 if (r == 0) {
3498 /* not yet ready */
3499 log_link_debug(link, "link pending udev initialization...");
3500 return 0;
3501 }
3502
3503 r = link_initialized(link, device);
3504 if (r < 0)
3505 goto failed;
3506 } else {
3507 r = link_initialized_and_synced(link);
3508 if (r < 0)
3509 goto failed;
3510 }
3511
3512 return 0;
3513 failed:
3514 link_enter_failed(link);
3515 return r;
3516 }
3517
3518 int link_ipv6ll_gained(Link *link, const struct in6_addr *address) {
3519 int r;
3520
3521 assert(link);
3522
3523 log_link_info(link, "Gained IPv6LL");
3524
3525 link->ipv6ll_address = *address;
3526 link_check_ready(link);
3527
3528 if (!IN_SET(link->state, LINK_STATE_PENDING, LINK_STATE_UNMANAGED, LINK_STATE_FAILED)) {
3529 r = link_acquire_ipv6_conf(link);
3530 if (r < 0) {
3531 link_enter_failed(link);
3532 return r;
3533 }
3534 }
3535
3536 return 0;
3537 }
3538
3539 static int link_carrier_gained(Link *link) {
3540 int r;
3541
3542 assert(link);
3543
3544 if (!IN_SET(link->state, LINK_STATE_PENDING, LINK_STATE_UNMANAGED, LINK_STATE_FAILED)) {
3545 r = link_acquire_conf(link);
3546 if (r < 0) {
3547 link_enter_failed(link);
3548 return r;
3549 }
3550
3551 r = link_request_set_addresses(link);
3552 if (r < 0)
3553 return r;
3554 }
3555
3556 r = link_handle_bound_by_list(link);
3557 if (r < 0)
3558 return r;
3559
3560 return 0;
3561 }
3562
3563 static int link_carrier_lost(Link *link) {
3564 int r;
3565
3566 assert(link);
3567
3568 if (link->network && link->network->ignore_carrier_loss)
3569 return 0;
3570
3571 /* Some devices reset itself while setting the MTU. This causes the DHCP client fall into a loop.
3572 * setting_mtu keep track whether the device got reset because of setting MTU and does not drop the
3573 * configuration and stop the clients as well. */
3574 if (link->setting_mtu)
3575 return 0;
3576
3577 r = link_stop_clients(link);
3578 if (r < 0) {
3579 link_enter_failed(link);
3580 return r;
3581 }
3582
3583 if (link_dhcp4_server_enabled(link))
3584 (void) sd_dhcp_server_stop(link->dhcp_server);
3585
3586 r = link_drop_config(link);
3587 if (r < 0)
3588 return r;
3589
3590 if (!IN_SET(link->state, LINK_STATE_UNMANAGED, LINK_STATE_PENDING)) {
3591 log_link_debug(link, "State is %s, dropping config", link_state_to_string(link->state));
3592 r = link_drop_foreign_config(link);
3593 if (r < 0)
3594 return r;
3595 }
3596
3597 r = link_handle_bound_by_list(link);
3598 if (r < 0)
3599 return r;
3600
3601 return 0;
3602 }
3603
3604 int link_carrier_reset(Link *link) {
3605 int r;
3606
3607 assert(link);
3608
3609 if (link_has_carrier(link)) {
3610 r = link_carrier_lost(link);
3611 if (r < 0)
3612 return r;
3613
3614 r = link_carrier_gained(link);
3615 if (r < 0)
3616 return r;
3617
3618 log_link_info(link, "Reset carrier");
3619 }
3620
3621 return 0;
3622 }
3623
3624 int link_update(Link *link, sd_netlink_message *m) {
3625 struct ether_addr mac;
3626 const char *ifname;
3627 uint32_t mtu;
3628 bool had_carrier, carrier_gained, carrier_lost;
3629 int r;
3630
3631 assert(link);
3632 assert(link->ifname);
3633 assert(m);
3634
3635 if (link->state == LINK_STATE_LINGER) {
3636 log_link_info(link, "Link readded");
3637 link_set_state(link, LINK_STATE_CONFIGURING);
3638
3639 r = link_new_carrier_maps(link);
3640 if (r < 0)
3641 return r;
3642 }
3643
3644 r = sd_netlink_message_read_string(m, IFLA_IFNAME, &ifname);
3645 if (r >= 0 && !streq(ifname, link->ifname)) {
3646 log_link_info(link, "Interface name change detected, %s has been renamed to %s.", link->ifname, ifname);
3647
3648 if (link->state == LINK_STATE_PENDING) {
3649 r = free_and_strdup(&link->ifname, ifname);
3650 if (r < 0)
3651 return r;
3652 } else {
3653 Manager *manager = link->manager;
3654
3655 link_drop(link);
3656 r = link_add(manager, m, &link);
3657 if (r < 0)
3658 return r;
3659 }
3660 }
3661
3662 r = sd_netlink_message_read_u32(m, IFLA_MTU, &mtu);
3663 if (r >= 0 && mtu > 0) {
3664 link->mtu = mtu;
3665 if (link->original_mtu == 0) {
3666 link->original_mtu = mtu;
3667 log_link_debug(link, "Saved original MTU: %" PRIu32, link->original_mtu);
3668 }
3669
3670 if (link->dhcp_client) {
3671 r = sd_dhcp_client_set_mtu(link->dhcp_client,
3672 link->mtu);
3673 if (r < 0)
3674 return log_link_warning_errno(link, r, "Could not update MTU in DHCP client: %m");
3675 }
3676
3677 if (link->radv) {
3678 r = sd_radv_set_mtu(link->radv, link->mtu);
3679 if (r < 0)
3680 return log_link_warning_errno(link, r, "Could not set MTU for Router Advertisement: %m");
3681 }
3682 }
3683
3684 /* The kernel may broadcast NEWLINK messages without the MAC address
3685 set, simply ignore them. */
3686 r = sd_netlink_message_read_ether_addr(m, IFLA_ADDRESS, &mac);
3687 if (r >= 0) {
3688 if (memcmp(link->mac.ether_addr_octet, mac.ether_addr_octet,
3689 ETH_ALEN)) {
3690
3691 memcpy(link->mac.ether_addr_octet, mac.ether_addr_octet,
3692 ETH_ALEN);
3693
3694 log_link_debug(link, "MAC address: "
3695 "%02hhx:%02hhx:%02hhx:%02hhx:%02hhx:%02hhx",
3696 mac.ether_addr_octet[0],
3697 mac.ether_addr_octet[1],
3698 mac.ether_addr_octet[2],
3699 mac.ether_addr_octet[3],
3700 mac.ether_addr_octet[4],
3701 mac.ether_addr_octet[5]);
3702
3703 if (link->ipv4ll) {
3704 r = sd_ipv4ll_set_mac(link->ipv4ll, &link->mac);
3705 if (r < 0)
3706 return log_link_warning_errno(link, r, "Could not update MAC address in IPv4LL client: %m");
3707 }
3708
3709 if (link->dhcp_client) {
3710 r = sd_dhcp_client_set_mac(link->dhcp_client,
3711 (const uint8_t *) &link->mac,
3712 sizeof (link->mac),
3713 ARPHRD_ETHER);
3714 if (r < 0)
3715 return log_link_warning_errno(link, r, "Could not update MAC address in DHCP client: %m");
3716
3717 r = dhcp4_set_client_identifier(link);
3718 if (r < 0)
3719 return r;
3720 }
3721
3722 if (link->dhcp6_client) {
3723 const DUID* duid = link_get_duid(link);
3724
3725 r = sd_dhcp6_client_set_mac(link->dhcp6_client,
3726 (const uint8_t *) &link->mac,
3727 sizeof (link->mac),
3728 ARPHRD_ETHER);
3729 if (r < 0)
3730 return log_link_warning_errno(link, r, "Could not update MAC address in DHCPv6 client: %m");
3731
3732 if (link->network->iaid_set) {
3733 r = sd_dhcp6_client_set_iaid(link->dhcp6_client,
3734 link->network->iaid);
3735 if (r < 0)
3736 return log_link_warning_errno(link, r, "Could not update DHCPv6 IAID: %m");
3737 }
3738
3739 r = sd_dhcp6_client_set_duid(link->dhcp6_client,
3740 duid->type,
3741 duid->raw_data_len > 0 ? duid->raw_data : NULL,
3742 duid->raw_data_len);
3743 if (r < 0)
3744 return log_link_warning_errno(link, r, "Could not update DHCPv6 DUID: %m");
3745 }
3746
3747 if (link->radv) {
3748 r = sd_radv_set_mac(link->radv, &link->mac);
3749 if (r < 0)
3750 return log_link_warning_errno(link, r, "Could not update MAC for Router Advertisement: %m");
3751 }
3752
3753 if (link->ndisc) {
3754 r = sd_ndisc_set_mac(link->ndisc, &link->mac);
3755 if (r < 0)
3756 return log_link_warning_errno(link, r, "Could not update MAC for ndisc: %m");
3757 }
3758 }
3759 }
3760
3761 had_carrier = link_has_carrier(link);
3762
3763 r = link_update_flags(link, m);
3764 if (r < 0)
3765 return r;
3766
3767 r = link_update_lldp(link);
3768 if (r < 0)
3769 return r;
3770
3771 carrier_gained = !had_carrier && link_has_carrier(link);
3772 carrier_lost = had_carrier && !link_has_carrier(link);
3773
3774 if (carrier_gained) {
3775 log_link_info(link, "Gained carrier");
3776
3777 r = link_carrier_gained(link);
3778 if (r < 0)
3779 return r;
3780 } else if (carrier_lost) {
3781 log_link_info(link, "Lost carrier");
3782
3783 r = link_carrier_lost(link);
3784 if (r < 0)
3785 return r;
3786 }
3787
3788 return 0;
3789 }
3790
3791 static void print_link_hashmap(FILE *f, const char *prefix, Hashmap* h) {
3792 bool space = false;
3793 Iterator i;
3794 Link *link;
3795
3796 assert(f);
3797 assert(prefix);
3798
3799 if (hashmap_isempty(h))
3800 return;
3801
3802 fputs(prefix, f);
3803 HASHMAP_FOREACH(link, h, i) {
3804 if (space)
3805 fputc(' ', f);
3806
3807 fprintf(f, "%i", link->ifindex);
3808 space = true;
3809 }
3810
3811 fputc('\n', f);
3812 }
3813
3814 int link_save(Link *link) {
3815 _cleanup_free_ char *temp_path = NULL;
3816 _cleanup_fclose_ FILE *f = NULL;
3817 const char *admin_state, *oper_state;
3818 Address *a;
3819 Route *route;
3820 Iterator i;
3821 int r;
3822
3823 assert(link);
3824 assert(link->state_file);
3825 assert(link->lease_file);
3826 assert(link->manager);
3827
3828 if (link->state == LINK_STATE_LINGER) {
3829 unlink(link->state_file);
3830 return 0;
3831 }
3832
3833 link_lldp_save(link);
3834
3835 admin_state = link_state_to_string(link->state);
3836 assert(admin_state);
3837
3838 oper_state = link_operstate_to_string(link->operstate);
3839 assert(oper_state);
3840
3841 r = fopen_temporary(link->state_file, &f, &temp_path);
3842 if (r < 0)
3843 goto fail;
3844
3845 (void) __fsetlocking(f, FSETLOCKING_BYCALLER);
3846 (void) fchmod(fileno(f), 0644);
3847
3848 fprintf(f,
3849 "# This is private data. Do not parse.\n"
3850 "ADMIN_STATE=%s\n"
3851 "OPER_STATE=%s\n",
3852 admin_state, oper_state);
3853
3854 if (link->network) {
3855 bool space;
3856 sd_dhcp6_lease *dhcp6_lease = NULL;
3857 const char *dhcp_domainname = NULL;
3858 char **dhcp6_domains = NULL;
3859 char **dhcp_domains = NULL;
3860 unsigned j;
3861
3862 fprintf(f, "REQUIRED_FOR_ONLINE=%s\n",
3863 yes_no(link->network->required_for_online));
3864
3865 if (link->dhcp6_client) {
3866 r = sd_dhcp6_client_get_lease(link->dhcp6_client, &dhcp6_lease);
3867 if (r < 0 && r != -ENOMSG)
3868 log_link_debug(link, "No DHCPv6 lease");
3869 }
3870
3871 fprintf(f, "NETWORK_FILE=%s\n", link->network->filename);
3872
3873 fputs("DNS=", f);
3874 space = false;
3875
3876 for (j = 0; j < link->network->n_dns; j++) {
3877 _cleanup_free_ char *b = NULL;
3878
3879 r = in_addr_to_string(link->network->dns[j].family,
3880 &link->network->dns[j].address, &b);
3881 if (r < 0) {
3882 log_debug_errno(r, "Failed to format address, ignoring: %m");
3883 continue;
3884 }
3885
3886 if (space)
3887 fputc(' ', f);
3888 fputs(b, f);
3889 space = true;
3890 }
3891
3892 if (link->network->dhcp_use_dns &&
3893 link->dhcp_lease) {
3894 const struct in_addr *addresses;
3895
3896 r = sd_dhcp_lease_get_dns(link->dhcp_lease, &addresses);
3897 if (r > 0) {
3898 if (space)
3899 fputc(' ', f);
3900 serialize_in_addrs(f, addresses, r);
3901 space = true;
3902 }
3903 }
3904
3905 if (link->network->dhcp_use_dns && dhcp6_lease) {
3906 struct in6_addr *in6_addrs;
3907
3908 r = sd_dhcp6_lease_get_dns(dhcp6_lease, &in6_addrs);
3909 if (r > 0) {
3910 if (space)
3911 fputc(' ', f);
3912 serialize_in6_addrs(f, in6_addrs, r);
3913 space = true;
3914 }
3915 }
3916
3917 /* Make sure to flush out old entries before we use the NDISC data */
3918 ndisc_vacuum(link);
3919
3920 if (link->network->ipv6_accept_ra_use_dns && link->ndisc_rdnss) {
3921 NDiscRDNSS *dd;
3922
3923 SET_FOREACH(dd, link->ndisc_rdnss, i) {
3924 if (space)
3925 fputc(' ', f);
3926
3927 serialize_in6_addrs(f, &dd->address, 1);
3928 space = true;
3929 }
3930 }
3931
3932 fputc('\n', f);
3933
3934 fputs("NTP=", f);
3935 space = false;
3936 fputstrv(f, link->network->ntp, NULL, &space);
3937
3938 if (link->network->dhcp_use_ntp &&
3939 link->dhcp_lease) {
3940 const struct in_addr *addresses;
3941
3942 r = sd_dhcp_lease_get_ntp(link->dhcp_lease, &addresses);
3943 if (r > 0) {
3944 if (space)
3945 fputc(' ', f);
3946 serialize_in_addrs(f, addresses, r);
3947 space = true;
3948 }
3949 }
3950
3951 if (link->network->dhcp_use_ntp && dhcp6_lease) {
3952 struct in6_addr *in6_addrs;
3953 char **hosts;
3954
3955 r = sd_dhcp6_lease_get_ntp_addrs(dhcp6_lease,
3956 &in6_addrs);
3957 if (r > 0) {
3958 if (space)
3959 fputc(' ', f);
3960 serialize_in6_addrs(f, in6_addrs, r);
3961 space = true;
3962 }
3963
3964 r = sd_dhcp6_lease_get_ntp_fqdn(dhcp6_lease, &hosts);
3965 if (r > 0)
3966 fputstrv(f, hosts, NULL, &space);
3967 }
3968
3969 fputc('\n', f);
3970
3971 if (link->network->dhcp_use_domains != DHCP_USE_DOMAINS_NO) {
3972 if (link->dhcp_lease) {
3973 (void) sd_dhcp_lease_get_domainname(link->dhcp_lease, &dhcp_domainname);
3974 (void) sd_dhcp_lease_get_search_domains(link->dhcp_lease, &dhcp_domains);
3975 }
3976 if (dhcp6_lease)
3977 (void) sd_dhcp6_lease_get_domains(dhcp6_lease, &dhcp6_domains);
3978 }
3979
3980 fputs("DOMAINS=", f);
3981 space = false;
3982 fputstrv(f, link->network->search_domains, NULL, &space);
3983
3984 if (link->network->dhcp_use_domains == DHCP_USE_DOMAINS_YES) {
3985 NDiscDNSSL *dd;
3986
3987 if (dhcp_domainname)
3988 fputs_with_space(f, dhcp_domainname, NULL, &space);
3989 if (dhcp_domains)
3990 fputstrv(f, dhcp_domains, NULL, &space);
3991 if (dhcp6_domains)
3992 fputstrv(f, dhcp6_domains, NULL, &space);
3993
3994 SET_FOREACH(dd, link->ndisc_dnssl, i)
3995 fputs_with_space(f, NDISC_DNSSL_DOMAIN(dd), NULL, &space);
3996 }
3997
3998 fputc('\n', f);
3999
4000 fputs("ROUTE_DOMAINS=", f);
4001 space = false;
4002 fputstrv(f, link->network->route_domains, NULL, &space);
4003
4004 if (link->network->dhcp_use_domains == DHCP_USE_DOMAINS_ROUTE) {
4005 NDiscDNSSL *dd;
4006
4007 if (dhcp_domainname)
4008 fputs_with_space(f, dhcp_domainname, NULL, &space);
4009 if (dhcp_domains)
4010 fputstrv(f, dhcp_domains, NULL, &space);
4011 if (dhcp6_domains)
4012 fputstrv(f, dhcp6_domains, NULL, &space);
4013
4014 SET_FOREACH(dd, link->ndisc_dnssl, i)
4015 fputs_with_space(f, NDISC_DNSSL_DOMAIN(dd), NULL, &space);
4016 }
4017
4018 fputc('\n', f);
4019
4020 fprintf(f, "LLMNR=%s\n",
4021 resolve_support_to_string(link->network->llmnr));
4022 fprintf(f, "MDNS=%s\n",
4023 resolve_support_to_string(link->network->mdns));
4024 if (link->network->dns_default_route >= 0)
4025 fprintf(f, "DNS_DEFAULT_ROUTE=%s\n", yes_no(link->network->dns_default_route));
4026
4027 if (link->network->dns_over_tls_mode != _DNS_OVER_TLS_MODE_INVALID)
4028 fprintf(f, "DNS_OVER_TLS=%s\n",
4029 dns_over_tls_mode_to_string(link->network->dns_over_tls_mode));
4030
4031 if (link->network->dnssec_mode != _DNSSEC_MODE_INVALID)
4032 fprintf(f, "DNSSEC=%s\n",
4033 dnssec_mode_to_string(link->network->dnssec_mode));
4034
4035 if (!set_isempty(link->network->dnssec_negative_trust_anchors)) {
4036 const char *n;
4037
4038 fputs("DNSSEC_NTA=", f);
4039 space = false;
4040 SET_FOREACH(n, link->network->dnssec_negative_trust_anchors, i)
4041 fputs_with_space(f, n, NULL, &space);
4042 fputc('\n', f);
4043 }
4044
4045 fputs("ADDRESSES=", f);
4046 space = false;
4047 SET_FOREACH(a, link->addresses, i) {
4048 _cleanup_free_ char *address_str = NULL;
4049
4050 r = in_addr_to_string(a->family, &a->in_addr, &address_str);
4051 if (r < 0)
4052 goto fail;
4053
4054 fprintf(f, "%s%s/%u", space ? " " : "", address_str, a->prefixlen);
4055 space = true;
4056 }
4057 fputc('\n', f);
4058
4059 fputs("ROUTES=", f);
4060 space = false;
4061 SET_FOREACH(route, link->routes, i) {
4062 _cleanup_free_ char *route_str = NULL;
4063
4064 r = in_addr_to_string(route->family, &route->dst, &route_str);
4065 if (r < 0)
4066 goto fail;
4067
4068 fprintf(f, "%s%s/%hhu/%hhu/%"PRIu32"/%"PRIu32"/"USEC_FMT,
4069 space ? " " : "", route_str,
4070 route->dst_prefixlen, route->tos, route->priority, route->table, route->lifetime);
4071 space = true;
4072 }
4073
4074 fputc('\n', f);
4075 }
4076
4077 print_link_hashmap(f, "CARRIER_BOUND_TO=", link->bound_to_links);
4078 print_link_hashmap(f, "CARRIER_BOUND_BY=", link->bound_by_links);
4079
4080 if (link->dhcp_lease) {
4081 struct in_addr address;
4082 const char *tz = NULL;
4083
4084 assert(link->network);
4085
4086 r = sd_dhcp_lease_get_timezone(link->dhcp_lease, &tz);
4087 if (r >= 0)
4088 fprintf(f, "TIMEZONE=%s\n", tz);
4089
4090 r = sd_dhcp_lease_get_address(link->dhcp_lease, &address);
4091 if (r >= 0) {
4092 fputs("DHCP4_ADDRESS=", f);
4093 serialize_in_addrs(f, &address, 1);
4094 fputc('\n', f);
4095 }
4096
4097 r = dhcp_lease_save(link->dhcp_lease, link->lease_file);
4098 if (r < 0)
4099 goto fail;
4100
4101 fprintf(f,
4102 "DHCP_LEASE=%s\n",
4103 link->lease_file);
4104 } else
4105 unlink(link->lease_file);
4106
4107 if (link->ipv4ll) {
4108 struct in_addr address;
4109
4110 r = sd_ipv4ll_get_address(link->ipv4ll, &address);
4111 if (r >= 0) {
4112 fputs("IPV4LL_ADDRESS=", f);
4113 serialize_in_addrs(f, &address, 1);
4114 fputc('\n', f);
4115 }
4116 }
4117
4118 r = fflush_and_check(f);
4119 if (r < 0)
4120 goto fail;
4121
4122 if (rename(temp_path, link->state_file) < 0) {
4123 r = -errno;
4124 goto fail;
4125 }
4126
4127 return 0;
4128
4129 fail:
4130 (void) unlink(link->state_file);
4131 if (temp_path)
4132 (void) unlink(temp_path);
4133
4134 return log_link_error_errno(link, r, "Failed to save link data to %s: %m", link->state_file);
4135 }
4136
4137 /* The serialized state in /run is no longer up-to-date. */
4138 void link_dirty(Link *link) {
4139 int r;
4140
4141 assert(link);
4142
4143 /* mark manager dirty as link is dirty */
4144 manager_dirty(link->manager);
4145
4146 r = set_ensure_allocated(&link->manager->dirty_links, NULL);
4147 if (r < 0)
4148 /* allocation errors are ignored */
4149 return;
4150
4151 r = set_put(link->manager->dirty_links, link);
4152 if (r <= 0)
4153 /* don't take another ref if the link was already dirty */
4154 return;
4155
4156 link_ref(link);
4157 }
4158
4159 /* The serialized state in /run is up-to-date */
4160 void link_clean(Link *link) {
4161 assert(link);
4162 assert(link->manager);
4163
4164 link_unref(set_remove(link->manager->dirty_links, link));
4165 }
4166
4167 static const char* const link_state_table[_LINK_STATE_MAX] = {
4168 [LINK_STATE_PENDING] = "pending",
4169 [LINK_STATE_CONFIGURING] = "configuring",
4170 [LINK_STATE_CONFIGURED] = "configured",
4171 [LINK_STATE_UNMANAGED] = "unmanaged",
4172 [LINK_STATE_FAILED] = "failed",
4173 [LINK_STATE_LINGER] = "linger",
4174 };
4175
4176 DEFINE_STRING_TABLE_LOOKUP(link_state, LinkState);
4177
4178 static const char* const link_operstate_table[_LINK_OPERSTATE_MAX] = {
4179 [LINK_OPERSTATE_OFF] = "off",
4180 [LINK_OPERSTATE_NO_CARRIER] = "no-carrier",
4181 [LINK_OPERSTATE_DORMANT] = "dormant",
4182 [LINK_OPERSTATE_CARRIER] = "carrier",
4183 [LINK_OPERSTATE_DEGRADED] = "degraded",
4184 [LINK_OPERSTATE_ROUTABLE] = "routable",
4185 };
4186
4187 DEFINE_STRING_TABLE_LOOKUP(link_operstate, LinkOperationalState);
Unnamed repository; edit this file 'description' to name the repository.