]> git.ipfire.org Git - thirdparty/systemd.git/blob - src/network/networkd-link.c
projects / thirdparty / systemd.git / blob
? search:


8ad590dae3e98bb5926d423c9e8000eff53a53b0
[thirdparty/systemd.git] / src / network / networkd-link.c
1 /* SPDX-License-Identifier: LGPL-2.1+ */
2
3 #include <netinet/in.h>
4 #include <linux/if.h>
5 #include <unistd.h>
6
7 #include "alloc-util.h"
8 #include "bus-util.h"
9 #include "dhcp-identifier.h"
10 #include "dhcp-lease-internal.h"
11 #include "env-file.h"
12 #include "fd-util.h"
13 #include "fileio.h"
14 #include "missing_network.h"
15 #include "netdev/bridge.h"
16 #include "netdev/vrf.h"
17 #include "netlink-util.h"
18 #include "network-internal.h"
19 #include "networkd-can.h"
20 #include "networkd-ipv6-proxy-ndp.h"
21 #include "networkd-lldp-tx.h"
22 #include "networkd-manager.h"
23 #include "networkd-ndisc.h"
24 #include "networkd-neighbor.h"
25 #include "networkd-radv.h"
26 #include "networkd-routing-policy-rule.h"
27 #include "set.h"
28 #include "socket-util.h"
29 #include "stdio-util.h"
30 #include "string-table.h"
31 #include "strv.h"
32 #include "sysctl-util.h"
33 #include "tmpfile-util.h"
34 #include "udev-util.h"
35 #include "util.h"
36 #include "virt.h"
37
38 uint32_t link_get_vrf_table(Link *link) {
39 return link->network->vrf ? VRF(link->network->vrf)->table : RT_TABLE_MAIN;
40 }
41
42 uint32_t link_get_dhcp_route_table(Link *link) {
43 /* When the interface is part of an VRF use the VRFs routing table, unless
44 * another table is explicitly specified. */
45 if (link->network->dhcp_route_table_set)
46 return link->network->dhcp_route_table;
47 return link_get_vrf_table(link);
48 }
49
50 uint32_t link_get_ipv6_accept_ra_route_table(Link *link) {
51 if (link->network->ipv6_accept_ra_route_table_set)
52 return link->network->ipv6_accept_ra_route_table;
53 return link_get_vrf_table(link);
54 }
55
56 DUID* link_get_duid(Link *link) {
57 if (link->network->duid.type != _DUID_TYPE_INVALID)
58 return &link->network->duid;
59 else
60 return &link->manager->duid;
61 }
62
63 static bool link_dhcp6_enabled(Link *link) {
64 assert(link);
65
66 if (!socket_ipv6_is_supported())
67 return false;
68
69 if (link->flags & IFF_LOOPBACK)
70 return false;
71
72 if (!link->network)
73 return false;
74
75 if (link->network->bond)
76 return false;
77
78 if (manager_sysctl_ipv6_enabled(link->manager) == 0)
79 return false;
80
81 return link->network->dhcp & ADDRESS_FAMILY_IPV6;
82 }
83
84 static bool link_dhcp4_enabled(Link *link) {
85 assert(link);
86
87 if (link->flags & IFF_LOOPBACK)
88 return false;
89
90 if (!link->network)
91 return false;
92
93 if (link->network->bond)
94 return false;
95
96 return link->network->dhcp & ADDRESS_FAMILY_IPV4;
97 }
98
99 static bool link_dhcp4_server_enabled(Link *link) {
100 assert(link);
101
102 if (link->flags & IFF_LOOPBACK)
103 return false;
104
105 if (!link->network)
106 return false;
107
108 if (link->network->bond)
109 return false;
110
111 return link->network->dhcp_server;
112 }
113
114 bool link_ipv4ll_enabled(Link *link) {
115 assert(link);
116
117 if (link->flags & IFF_LOOPBACK)
118 return false;
119
120 if (!link->network)
121 return false;
122
123 if (STRPTR_IN_SET(link->kind, "vrf", "wireguard"))
124 return false;
125
126 if (link->network->bond)
127 return false;
128
129 return link->network->link_local & ADDRESS_FAMILY_IPV4;
130 }
131
132 bool link_ipv4ll_fallback_enabled(Link *link) {
133 assert(link);
134
135 if (link->flags & IFF_LOOPBACK)
136 return false;
137
138 if (!link->network)
139 return false;
140
141 if (STRPTR_IN_SET(link->kind, "vrf", "wireguard"))
142 return false;
143
144 if (link->network->bond)
145 return false;
146
147 return link->network->link_local & ADDRESS_FAMILY_FALLBACK_IPV4;
148 }
149
150 static bool link_ipv6ll_enabled(Link *link) {
151 assert(link);
152
153 if (!socket_ipv6_is_supported())
154 return false;
155
156 if (link->flags & IFF_LOOPBACK)
157 return false;
158
159 if (!link->network)
160 return false;
161
162 if (STRPTR_IN_SET(link->kind, "vrf", "wireguard"))
163 return false;
164
165 if (link->network->bond)
166 return false;
167
168 if (manager_sysctl_ipv6_enabled(link->manager) == 0)
169 return false;
170
171 return link->network->link_local & ADDRESS_FAMILY_IPV6;
172 }
173
174 static bool link_ipv6_enabled(Link *link) {
175 assert(link);
176
177 if (!socket_ipv6_is_supported())
178 return false;
179
180 if (link->network->bond)
181 return false;
182
183 if (manager_sysctl_ipv6_enabled(link->manager) == 0)
184 return false;
185
186 /* DHCPv6 client will not be started if no IPv6 link-local address is configured. */
187 return link_ipv6ll_enabled(link) || network_has_static_ipv6_addresses(link->network);
188 }
189
190 static bool link_radv_enabled(Link *link) {
191 assert(link);
192
193 if (!link_ipv6ll_enabled(link))
194 return false;
195
196 return link->network->router_prefix_delegation != RADV_PREFIX_DELEGATION_NONE;
197 }
198
199 static bool link_ipv4_forward_enabled(Link *link) {
200 assert(link);
201
202 if (link->flags & IFF_LOOPBACK)
203 return false;
204
205 if (!link->network)
206 return false;
207
208 if (link->network->ip_forward == _ADDRESS_FAMILY_BOOLEAN_INVALID)
209 return false;
210
211 return link->network->ip_forward & ADDRESS_FAMILY_IPV4;
212 }
213
214 static bool link_ipv6_forward_enabled(Link *link) {
215 assert(link);
216
217 if (!socket_ipv6_is_supported())
218 return false;
219
220 if (link->flags & IFF_LOOPBACK)
221 return false;
222
223 if (!link->network)
224 return false;
225
226 if (link->network->ip_forward == _ADDRESS_FAMILY_BOOLEAN_INVALID)
227 return false;
228
229 if (manager_sysctl_ipv6_enabled(link->manager) == 0)
230 return false;
231
232 return link->network->ip_forward & ADDRESS_FAMILY_IPV6;
233 }
234
235 static bool link_proxy_arp_enabled(Link *link) {
236 assert(link);
237
238 if (link->flags & IFF_LOOPBACK)
239 return false;
240
241 if (!link->network)
242 return false;
243
244 if (link->network->proxy_arp < 0)
245 return false;
246
247 return true;
248 }
249
250 static bool link_ipv6_accept_ra_enabled(Link *link) {
251 assert(link);
252
253 if (!socket_ipv6_is_supported())
254 return false;
255
256 if (link->flags & IFF_LOOPBACK)
257 return false;
258
259 if (!link->network)
260 return false;
261
262 if (!link_ipv6ll_enabled(link))
263 return false;
264
265 /* If unset use system default (enabled if local forwarding is disabled.
266 * disabled if local forwarding is enabled).
267 * If set, ignore or enforce RA independent of local forwarding state.
268 */
269 if (link->network->ipv6_accept_ra < 0)
270 /* default to accept RA if ip_forward is disabled and ignore RA if ip_forward is enabled */
271 return !link_ipv6_forward_enabled(link);
272 else if (link->network->ipv6_accept_ra > 0)
273 /* accept RA even if ip_forward is enabled */
274 return true;
275 else
276 /* ignore RA */
277 return false;
278 }
279
280 static IPv6PrivacyExtensions link_ipv6_privacy_extensions(Link *link) {
281 assert(link);
282
283 if (!socket_ipv6_is_supported())
284 return _IPV6_PRIVACY_EXTENSIONS_INVALID;
285
286 if (link->flags & IFF_LOOPBACK)
287 return _IPV6_PRIVACY_EXTENSIONS_INVALID;
288
289 if (!link->network)
290 return _IPV6_PRIVACY_EXTENSIONS_INVALID;
291
292 return link->network->ipv6_privacy_extensions;
293 }
294
295 static int link_enable_ipv6(Link *link) {
296 bool disabled;
297 int r;
298
299 if (link->flags & IFF_LOOPBACK)
300 return 0;
301
302 disabled = !link_ipv6_enabled(link);
303
304 r = sysctl_write_ip_property_boolean(AF_INET6, link->ifname, "disable_ipv6", disabled);
305 if (r < 0)
306 log_link_warning_errno(link, r, "Cannot %s IPv6: %m", enable_disable(!disabled));
307 else
308 log_link_info(link, "IPv6 successfully %sd", enable_disable(!disabled));
309
310 return 0;
311 }
312
313 static bool link_is_enslaved(Link *link) {
314 if (link->flags & IFF_SLAVE)
315 /* Even if the link is not managed by networkd, honor IFF_SLAVE flag. */
316 return true;
317
318 if (!link->enslaved_raw)
319 return false;
320
321 if (!link->network)
322 return false;
323
324 if (link->network->bridge)
325 /* TODO: support the case when link is not managed by networkd. */
326 return true;
327
328 return false;
329 }
330
331 static void link_update_master_operstate(Link *link, NetDev *netdev) {
332 Link *master;
333
334 if (!netdev)
335 return;
336
337 if (link_get(link->manager, netdev->ifindex, &master) < 0)
338 return;
339
340 link_update_operstate(master, true);
341 }
342
343 void link_update_operstate(Link *link, bool also_update_master) {
344 LinkOperationalState operstate;
345 Iterator i;
346
347 assert(link);
348
349 if (link->kernel_operstate == IF_OPER_DORMANT)
350 operstate = LINK_OPERSTATE_DORMANT;
351 else if (link_has_carrier(link)) {
352 Address *address;
353 uint8_t scope = RT_SCOPE_NOWHERE;
354
355 /* if we have carrier, check what addresses we have */
356 SET_FOREACH(address, link->addresses, i) {
357 if (!address_is_ready(address))
358 continue;
359
360 if (address->scope < scope)
361 scope = address->scope;
362 }
363
364 /* for operstate we also take foreign addresses into account */
365 SET_FOREACH(address, link->addresses_foreign, i) {
366 if (!address_is_ready(address))
367 continue;
368
369 if (address->scope < scope)
370 scope = address->scope;
371 }
372
373 if (scope < RT_SCOPE_SITE)
374 /* universally accessible addresses found */
375 operstate = LINK_OPERSTATE_ROUTABLE;
376 else if (scope < RT_SCOPE_HOST)
377 /* only link or site local addresses found */
378 operstate = LINK_OPERSTATE_DEGRADED;
379 else
380 /* no useful addresses found */
381 operstate = LINK_OPERSTATE_CARRIER;
382 } else if (link->flags & IFF_UP)
383 operstate = LINK_OPERSTATE_NO_CARRIER;
384 else
385 operstate = LINK_OPERSTATE_OFF;
386
387 if (IN_SET(operstate, LINK_OPERSTATE_DEGRADED, LINK_OPERSTATE_CARRIER) &&
388 link_is_enslaved(link))
389 operstate = LINK_OPERSTATE_ENSLAVED;
390
391 if (operstate >= LINK_OPERSTATE_CARRIER) {
392 Link *slave;
393
394 SET_FOREACH(slave, link->slaves, i) {
395 link_update_operstate(slave, false);
396
397 if (slave->operstate < LINK_OPERSTATE_CARRIER)
398 operstate = LINK_OPERSTATE_DEGRADED_CARRIER;
399 }
400 }
401
402 if (link->operstate != operstate) {
403 link->operstate = operstate;
404 link_send_changed(link, "OperationalState", NULL);
405 link_dirty(link);
406 }
407
408 if (also_update_master && link->network) {
409 link_update_master_operstate(link, link->network->bond);
410 link_update_master_operstate(link, link->network->bridge);
411 }
412 }
413
414 #define FLAG_STRING(string, flag, old, new) \
415 (((old ^ new) & flag) \
416 ? ((old & flag) ? (" -" string) : (" +" string)) \
417 : "")
418
419 static int link_update_flags(Link *link, sd_netlink_message *m) {
420 unsigned flags, unknown_flags_added, unknown_flags_removed, unknown_flags;
421 uint8_t operstate;
422 int r;
423
424 assert(link);
425
426 r = sd_rtnl_message_link_get_flags(m, &flags);
427 if (r < 0)
428 return log_link_warning_errno(link, r, "Could not get link flags: %m");
429
430 r = sd_netlink_message_read_u8(m, IFLA_OPERSTATE, &operstate);
431 if (r < 0)
432 /* if we got a message without operstate, take it to mean
433 the state was unchanged */
434 operstate = link->kernel_operstate;
435
436 if ((link->flags == flags) && (link->kernel_operstate == operstate))
437 return 0;
438
439 if (link->flags != flags) {
440 log_link_debug(link, "Flags change:%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s",
441 FLAG_STRING("LOOPBACK", IFF_LOOPBACK, link->flags, flags),
442 FLAG_STRING("MASTER", IFF_MASTER, link->flags, flags),
443 FLAG_STRING("SLAVE", IFF_SLAVE, link->flags, flags),
444 FLAG_STRING("UP", IFF_UP, link->flags, flags),
445 FLAG_STRING("DORMANT", IFF_DORMANT, link->flags, flags),
446 FLAG_STRING("LOWER_UP", IFF_LOWER_UP, link->flags, flags),
447 FLAG_STRING("RUNNING", IFF_RUNNING, link->flags, flags),
448 FLAG_STRING("MULTICAST", IFF_MULTICAST, link->flags, flags),
449 FLAG_STRING("BROADCAST", IFF_BROADCAST, link->flags, flags),
450 FLAG_STRING("POINTOPOINT", IFF_POINTOPOINT, link->flags, flags),
451 FLAG_STRING("PROMISC", IFF_PROMISC, link->flags, flags),
452 FLAG_STRING("ALLMULTI", IFF_ALLMULTI, link->flags, flags),
453 FLAG_STRING("PORTSEL", IFF_PORTSEL, link->flags, flags),
454 FLAG_STRING("AUTOMEDIA", IFF_AUTOMEDIA, link->flags, flags),
455 FLAG_STRING("DYNAMIC", IFF_DYNAMIC, link->flags, flags),
456 FLAG_STRING("NOARP", IFF_NOARP, link->flags, flags),
457 FLAG_STRING("NOTRAILERS", IFF_NOTRAILERS, link->flags, flags),
458 FLAG_STRING("DEBUG", IFF_DEBUG, link->flags, flags),
459 FLAG_STRING("ECHO", IFF_ECHO, link->flags, flags));
460
461 unknown_flags = ~(IFF_LOOPBACK | IFF_MASTER | IFF_SLAVE | IFF_UP |
462 IFF_DORMANT | IFF_LOWER_UP | IFF_RUNNING |
463 IFF_MULTICAST | IFF_BROADCAST | IFF_POINTOPOINT |
464 IFF_PROMISC | IFF_ALLMULTI | IFF_PORTSEL |
465 IFF_AUTOMEDIA | IFF_DYNAMIC | IFF_NOARP |
466 IFF_NOTRAILERS | IFF_DEBUG | IFF_ECHO);
467 unknown_flags_added = ((link->flags ^ flags) & flags & unknown_flags);
468 unknown_flags_removed = ((link->flags ^ flags) & link->flags & unknown_flags);
469
470 /* link flags are currently at most 18 bits, let's align to
471 * printing 20 */
472 if (unknown_flags_added)
473 log_link_debug(link,
474 "Unknown link flags gained: %#.5x (ignoring)",
475 unknown_flags_added);
476
477 if (unknown_flags_removed)
478 log_link_debug(link,
479 "Unknown link flags lost: %#.5x (ignoring)",
480 unknown_flags_removed);
481 }
482
483 link->flags = flags;
484 link->kernel_operstate = operstate;
485
486 link_update_operstate(link, true);
487
488 return 0;
489 }
490
491 static int link_new(Manager *manager, sd_netlink_message *message, Link **ret) {
492 _cleanup_(link_unrefp) Link *link = NULL;
493 uint16_t type;
494 const char *ifname, *kind = NULL;
495 int r, ifindex;
496 unsigned short iftype;
497
498 assert(manager);
499 assert(message);
500 assert(ret);
501
502 /* check for link kind */
503 r = sd_netlink_message_enter_container(message, IFLA_LINKINFO);
504 if (r == 0) {
505 (void) sd_netlink_message_read_string(message, IFLA_INFO_KIND, &kind);
506 r = sd_netlink_message_exit_container(message);
507 if (r < 0)
508 return r;
509 }
510
511 r = sd_netlink_message_get_type(message, &type);
512 if (r < 0)
513 return r;
514 else if (type != RTM_NEWLINK)
515 return -EINVAL;
516
517 r = sd_rtnl_message_link_get_ifindex(message, &ifindex);
518 if (r < 0)
519 return r;
520 else if (ifindex <= 0)
521 return -EINVAL;
522
523 r = sd_rtnl_message_link_get_type(message, &iftype);
524 if (r < 0)
525 return r;
526
527 r = sd_netlink_message_read_string(message, IFLA_IFNAME, &ifname);
528 if (r < 0)
529 return r;
530
531 link = new(Link, 1);
532 if (!link)
533 return -ENOMEM;
534
535 *link = (Link) {
536 .n_ref = 1,
537 .manager = manager,
538 .state = LINK_STATE_PENDING,
539 .rtnl_extended_attrs = true,
540 .ifindex = ifindex,
541 .iftype = iftype,
542 };
543
544 link->ifname = strdup(ifname);
545 if (!link->ifname)
546 return -ENOMEM;
547
548 if (kind) {
549 link->kind = strdup(kind);
550 if (!link->kind)
551 return -ENOMEM;
552 }
553
554 r = sd_netlink_message_read_u32(message, IFLA_MASTER, (uint32_t *)&link->master_ifindex);
555 if (r < 0)
556 log_link_debug_errno(link, r, "New device has no master, continuing without");
557
558 r = sd_netlink_message_read_ether_addr(message, IFLA_ADDRESS, &link->mac);
559 if (r < 0)
560 log_link_debug_errno(link, r, "MAC address not found for new device, continuing without");
561
562 if (asprintf(&link->state_file, "/run/systemd/netif/links/%d", link->ifindex) < 0)
563 return -ENOMEM;
564
565 if (asprintf(&link->lease_file, "/run/systemd/netif/leases/%d", link->ifindex) < 0)
566 return -ENOMEM;
567
568 if (asprintf(&link->lldp_file, "/run/systemd/netif/lldp/%d", link->ifindex) < 0)
569 return -ENOMEM;
570
571 r = hashmap_ensure_allocated(&manager->links, NULL);
572 if (r < 0)
573 return r;
574
575 r = hashmap_put(manager->links, INT_TO_PTR(link->ifindex), link);
576 if (r < 0)
577 return r;
578
579 r = link_update_flags(link, message);
580 if (r < 0)
581 return r;
582
583 *ret = TAKE_PTR(link);
584
585 return 0;
586 }
587
588 static Link *link_free(Link *link) {
589 Address *address;
590
591 assert(link);
592
593 link->routes = set_free_with_destructor(link->routes, route_free);
594 link->routes_foreign = set_free_with_destructor(link->routes_foreign, route_free);
595
596 link->addresses = set_free_with_destructor(link->addresses, address_free);
597 link->addresses_foreign = set_free_with_destructor(link->addresses_foreign, address_free);
598
599 while ((address = link->pool_addresses)) {
600 LIST_REMOVE(addresses, link->pool_addresses, address);
601 address_free(address);
602 }
603
604 sd_dhcp_server_unref(link->dhcp_server);
605 sd_dhcp_client_unref(link->dhcp_client);
606 sd_dhcp_lease_unref(link->dhcp_lease);
607
608 link_lldp_emit_stop(link);
609
610 free(link->lease_file);
611
612 sd_lldp_unref(link->lldp);
613 free(link->lldp_file);
614
615 ndisc_flush(link);
616
617 sd_ipv4ll_unref(link->ipv4ll);
618 sd_dhcp6_client_unref(link->dhcp6_client);
619 sd_ndisc_unref(link->ndisc);
620 sd_radv_unref(link->radv);
621
622 free(link->ifname);
623 free(link->kind);
624
625 (void) unlink(link->state_file);
626 free(link->state_file);
627
628 sd_device_unref(link->sd_device);
629
630 hashmap_free(link->bound_to_links);
631 hashmap_free(link->bound_by_links);
632
633 set_free_with_destructor(link->slaves, link_unref);
634
635 network_unref(link->network);
636
637 return mfree(link);
638 }
639
640 DEFINE_TRIVIAL_REF_UNREF_FUNC(Link, link, link_free);
641
642 int link_get(Manager *m, int ifindex, Link **ret) {
643 Link *link;
644
645 assert(m);
646 assert(ifindex);
647 assert(ret);
648
649 link = hashmap_get(m->links, INT_TO_PTR(ifindex));
650 if (!link)
651 return -ENODEV;
652
653 *ret = link;
654
655 return 0;
656 }
657
658 static void link_set_state(Link *link, LinkState state) {
659 assert(link);
660
661 if (link->state == state)
662 return;
663
664 log_link_debug(link, "State changed: %s -> %s",
665 link_state_to_string(link->state),
666 link_state_to_string(state));
667
668 link->state = state;
669
670 link_send_changed(link, "AdministrativeState", NULL);
671 }
672
673 static void link_enter_unmanaged(Link *link) {
674 assert(link);
675
676 log_link_debug(link, "Unmanaged");
677
678 link_set_state(link, LINK_STATE_UNMANAGED);
679
680 link_dirty(link);
681 }
682
683 int link_stop_clients(Link *link) {
684 int r = 0, k;
685
686 assert(link);
687 assert(link->manager);
688 assert(link->manager->event);
689
690 if (link->dhcp_client) {
691 k = sd_dhcp_client_stop(link->dhcp_client);
692 if (k < 0)
693 r = log_link_warning_errno(link, k, "Could not stop DHCPv4 client: %m");
694 }
695
696 if (link->ipv4ll) {
697 k = sd_ipv4ll_stop(link->ipv4ll);
698 if (k < 0)
699 r = log_link_warning_errno(link, k, "Could not stop IPv4 link-local: %m");
700 }
701
702 if (link->dhcp6_client) {
703 k = sd_dhcp6_client_stop(link->dhcp6_client);
704 if (k < 0)
705 r = log_link_warning_errno(link, k, "Could not stop DHCPv6 client: %m");
706 }
707
708 if (link->ndisc) {
709 k = sd_ndisc_stop(link->ndisc);
710 if (k < 0)
711 r = log_link_warning_errno(link, k, "Could not stop IPv6 Router Discovery: %m");
712 }
713
714 if (link->radv) {
715 k = sd_radv_stop(link->radv);
716 if (k < 0)
717 r = log_link_warning_errno(link, k, "Could not stop IPv6 Router Advertisement: %m");
718 }
719
720 link_lldp_emit_stop(link);
721 return r;
722 }
723
724 void link_enter_failed(Link *link) {
725 assert(link);
726
727 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
728 return;
729
730 log_link_warning(link, "Failed");
731
732 link_set_state(link, LINK_STATE_FAILED);
733
734 link_stop_clients(link);
735
736 link_dirty(link);
737 }
738
739 static Address* link_find_dhcp_server_address(Link *link) {
740 Address *address;
741
742 assert(link);
743 assert(link->network);
744
745 /* The first statically configured address if there is any */
746 LIST_FOREACH(addresses, address, link->network->static_addresses) {
747
748 if (address->family != AF_INET)
749 continue;
750
751 if (in_addr_is_null(address->family, &address->in_addr))
752 continue;
753
754 return address;
755 }
756
757 /* If that didn't work, find a suitable address we got from the pool */
758 LIST_FOREACH(addresses, address, link->pool_addresses) {
759 if (address->family != AF_INET)
760 continue;
761
762 return address;
763 }
764
765 return NULL;
766 }
767
768 static int link_join_netdevs_after_configured(Link *link) {
769 NetDev *netdev;
770 Iterator i;
771 int r;
772
773 HASHMAP_FOREACH(netdev, link->network->stacked_netdevs, i) {
774 if (netdev->ifindex > 0)
775 /* Assume already enslaved. */
776 continue;
777
778 if (netdev_get_create_type(netdev) != NETDEV_CREATE_AFTER_CONFIGURED)
779 continue;
780
781 log_struct(LOG_DEBUG,
782 LOG_LINK_INTERFACE(link),
783 LOG_NETDEV_INTERFACE(netdev),
784 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", netdev->ifname));
785
786 r = netdev_join(netdev, link, NULL);
787 if (r < 0)
788 return log_struct_errno(LOG_WARNING, r,
789 LOG_LINK_INTERFACE(link),
790 LOG_NETDEV_INTERFACE(netdev),
791 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", netdev->ifname));
792 }
793
794 return 0;
795 }
796
797 static void link_enter_configured(Link *link) {
798 assert(link);
799 assert(link->network);
800
801 if (link->state != LINK_STATE_CONFIGURING)
802 return;
803
804 log_link_info(link, "Configured");
805
806 link_set_state(link, LINK_STATE_CONFIGURED);
807
808 (void) link_join_netdevs_after_configured(link);
809
810 link_dirty(link);
811 }
812
813 static int link_request_set_routing_policy_rule(Link *link) {
814 RoutingPolicyRule *rule, *rrule = NULL;
815 int r;
816
817 assert(link);
818 assert(link->network);
819
820 link_set_state(link, LINK_STATE_CONFIGURING);
821 link->routing_policy_rules_configured = false;
822
823 LIST_FOREACH(rules, rule, link->network->rules) {
824 r = routing_policy_rule_get(link->manager, rule->family, &rule->from, rule->from_prefixlen, &rule->to,
825 rule->to_prefixlen, rule->tos, rule->fwmark, rule->table, rule->iif, rule->oif,
826 rule->protocol, &rule->sport, &rule->dport, &rrule);
827 if (r == 0) {
828 (void) routing_policy_rule_make_local(link->manager, rrule);
829 continue;
830 }
831
832 r = routing_policy_rule_configure(rule, link, NULL, false);
833 if (r < 0) {
834 log_link_warning_errno(link, r, "Could not set routing policy rules: %m");
835 link_enter_failed(link);
836 return r;
837 }
838
839 link->routing_policy_rule_messages++;
840 }
841
842 routing_policy_rule_purge(link->manager, link);
843 if (link->routing_policy_rule_messages == 0) {
844 link->routing_policy_rules_configured = true;
845 link_check_ready(link);
846 } else
847 log_link_debug(link, "Setting routing policy rules");
848
849 return 0;
850 }
851
852 static int route_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
853 int r;
854
855 assert(link);
856 assert(link->route_messages > 0);
857 assert(IN_SET(link->state, LINK_STATE_CONFIGURING,
858 LINK_STATE_FAILED, LINK_STATE_LINGER));
859
860 link->route_messages--;
861
862 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
863 return 1;
864
865 r = sd_netlink_message_get_errno(m);
866 if (r < 0 && r != -EEXIST)
867 log_link_warning_errno(link, r, "Could not set route: %m");
868
869 if (link->route_messages == 0) {
870 log_link_debug(link, "Routes set");
871 link->static_routes_configured = true;
872 link_check_ready(link);
873 }
874
875 return 1;
876 }
877
878 int link_request_set_routes(Link *link) {
879 enum {
880 PHASE_NON_GATEWAY, /* First phase: Routes without a gateway */
881 PHASE_GATEWAY, /* Second phase: Routes with a gateway */
882 _PHASE_MAX
883 } phase;
884 Route *rt;
885 int r;
886
887 assert(link);
888 assert(link->network);
889 assert(link->addresses_configured);
890 assert(link->address_messages == 0);
891 assert(link->state != _LINK_STATE_INVALID);
892
893 link_set_state(link, LINK_STATE_CONFIGURING);
894 link->static_routes_configured = false;
895
896 r = link_request_set_routing_policy_rule(link);
897 if (r < 0)
898 return r;
899
900 /* First add the routes that enable us to talk to gateways, then add in the others that need a gateway. */
901 for (phase = 0; phase < _PHASE_MAX; phase++)
902 LIST_FOREACH(routes, rt, link->network->static_routes) {
903
904 if (in_addr_is_null(rt->family, &rt->gw) != (phase == PHASE_NON_GATEWAY))
905 continue;
906
907 r = route_configure(rt, link, route_handler);
908 if (r < 0) {
909 log_link_warning_errno(link, r, "Could not set routes: %m");
910 link_enter_failed(link);
911 return r;
912 }
913
914 link->route_messages++;
915 }
916
917 if (link->route_messages == 0) {
918 link->static_routes_configured = true;
919 link_check_ready(link);
920 } else
921 log_link_debug(link, "Setting routes");
922
923 return 0;
924 }
925
926 void link_check_ready(Link *link) {
927 Address *a;
928 Iterator i;
929
930 assert(link);
931
932 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
933 return;
934
935 if (!link->network)
936 return;
937
938 if (!link->addresses_configured)
939 return;
940
941 if (!link->neighbors_configured)
942 return;
943
944 SET_FOREACH(a, link->addresses, i)
945 if (!address_is_ready(a))
946 return;
947
948 if (!link->addresses_ready) {
949 link->addresses_ready = true;
950 link_request_set_routes(link);
951 }
952
953 if (!link->static_routes_configured)
954 return;
955
956 if (!link->routing_policy_rules_configured)
957 return;
958
959 if (link_ipv4ll_enabled(link) && !(link->ipv4ll_address && link->ipv4ll_route))
960 return;
961
962 if (link_ipv6ll_enabled(link) &&
963 in_addr_is_null(AF_INET6, (const union in_addr_union*) &link->ipv6ll_address))
964 return;
965
966 if ((link_dhcp4_enabled(link) || link_dhcp6_enabled(link)) &&
967 !(link->dhcp4_configured || link->dhcp6_configured) &&
968 !(link_ipv4ll_fallback_enabled(link) && link->ipv4ll_address && link->ipv4ll_route))
969 /* When DHCP is enabled, at least one protocol must provide an address, or
970 * an IPv4ll fallback address must be configured. */
971 return;
972
973 if (link_ipv6_accept_ra_enabled(link) && !link->ndisc_configured)
974 return;
975
976 if (link->state != LINK_STATE_CONFIGURED)
977 link_enter_configured(link);
978
979 return;
980 }
981
982 static int link_request_set_neighbors(Link *link) {
983 Neighbor *neighbor;
984 int r;
985
986 assert(link);
987 assert(link->network);
988 assert(link->state != _LINK_STATE_INVALID);
989
990 link_set_state(link, LINK_STATE_CONFIGURING);
991 link->neighbors_configured = false;
992
993 LIST_FOREACH(neighbors, neighbor, link->network->neighbors) {
994 r = neighbor_configure(neighbor, link, NULL);
995 if (r < 0) {
996 log_link_warning_errno(link, r, "Could not set neighbor: %m");
997 link_enter_failed(link);
998 return r;
999 }
1000 }
1001
1002 if (link->neighbor_messages == 0) {
1003 link->neighbors_configured = true;
1004 link_check_ready(link);
1005 } else
1006 log_link_debug(link, "Setting neighbors");
1007
1008 return 0;
1009 }
1010
1011 static int address_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
1012 int r;
1013
1014 assert(rtnl);
1015 assert(m);
1016 assert(link);
1017 assert(link->ifname);
1018 assert(link->address_messages > 0);
1019 assert(IN_SET(link->state, LINK_STATE_CONFIGURING,
1020 LINK_STATE_FAILED, LINK_STATE_LINGER));
1021
1022 link->address_messages--;
1023
1024 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1025 return 1;
1026
1027 r = sd_netlink_message_get_errno(m);
1028 if (r < 0 && r != -EEXIST)
1029 log_link_warning_errno(link, r, "could not set address: %m");
1030 else if (r >= 0)
1031 manager_rtnl_process_address(rtnl, m, link->manager);
1032
1033 if (link->address_messages == 0) {
1034 log_link_debug(link, "Addresses set");
1035 link->addresses_configured = true;
1036 link_check_ready(link);
1037 }
1038
1039 return 1;
1040 }
1041
1042 static int link_push_uplink_dns_to_dhcp_server(Link *link, sd_dhcp_server *s) {
1043 _cleanup_free_ struct in_addr *addresses = NULL;
1044 size_t n_addresses = 0, n_allocated = 0;
1045 unsigned i;
1046
1047 log_debug("Copying DNS server information from %s", link->ifname);
1048
1049 if (!link->network)
1050 return 0;
1051
1052 for (i = 0; i < link->network->n_dns; i++) {
1053 struct in_addr ia;
1054
1055 /* Only look for IPv4 addresses */
1056 if (link->network->dns[i].family != AF_INET)
1057 continue;
1058
1059 ia = link->network->dns[i].address.in;
1060
1061 /* Never propagate obviously borked data */
1062 if (in4_addr_is_null(&ia) || in4_addr_is_localhost(&ia))
1063 continue;
1064
1065 if (!GREEDY_REALLOC(addresses, n_allocated, n_addresses + 1))
1066 return log_oom();
1067
1068 addresses[n_addresses++] = ia;
1069 }
1070
1071 if (link->network->dhcp_use_dns && link->dhcp_lease) {
1072 const struct in_addr *da = NULL;
1073 int j, n;
1074
1075 n = sd_dhcp_lease_get_dns(link->dhcp_lease, &da);
1076 if (n > 0) {
1077
1078 if (!GREEDY_REALLOC(addresses, n_allocated, n_addresses + n))
1079 return log_oom();
1080
1081 for (j = 0; j < n; j++)
1082 if (in4_addr_is_non_local(&da[j]))
1083 addresses[n_addresses++] = da[j];
1084 }
1085 }
1086
1087 if (n_addresses <= 0)
1088 return 0;
1089
1090 return sd_dhcp_server_set_dns(s, addresses, n_addresses);
1091 }
1092
1093 static int link_push_uplink_ntp_to_dhcp_server(Link *link, sd_dhcp_server *s) {
1094 _cleanup_free_ struct in_addr *addresses = NULL;
1095 size_t n_addresses = 0, n_allocated = 0;
1096 char **a;
1097
1098 if (!link->network)
1099 return 0;
1100
1101 log_debug("Copying NTP server information from %s", link->ifname);
1102
1103 STRV_FOREACH(a, link->network->ntp) {
1104 union in_addr_union ia;
1105
1106 /* Only look for IPv4 addresses */
1107 if (in_addr_from_string(AF_INET, *a, &ia) <= 0)
1108 continue;
1109
1110 /* Never propagate obviously borked data */
1111 if (in4_addr_is_null(&ia.in) || in4_addr_is_localhost(&ia.in))
1112 continue;
1113
1114 if (!GREEDY_REALLOC(addresses, n_allocated, n_addresses + 1))
1115 return log_oom();
1116
1117 addresses[n_addresses++] = ia.in;
1118 }
1119
1120 if (link->network->dhcp_use_ntp && link->dhcp_lease) {
1121 const struct in_addr *da = NULL;
1122 int j, n;
1123
1124 n = sd_dhcp_lease_get_ntp(link->dhcp_lease, &da);
1125 if (n > 0) {
1126
1127 if (!GREEDY_REALLOC(addresses, n_allocated, n_addresses + n))
1128 return log_oom();
1129
1130 for (j = 0; j < n; j++)
1131 if (in4_addr_is_non_local(&da[j]))
1132 addresses[n_addresses++] = da[j];
1133 }
1134 }
1135
1136 if (n_addresses <= 0)
1137 return 0;
1138
1139 return sd_dhcp_server_set_ntp(s, addresses, n_addresses);
1140 }
1141
1142 static int link_set_bridge_fdb(Link *link) {
1143 FdbEntry *fdb_entry;
1144 int r;
1145
1146 LIST_FOREACH(static_fdb_entries, fdb_entry, link->network->static_fdb_entries) {
1147 r = fdb_entry_configure(link, fdb_entry);
1148 if (r < 0)
1149 return log_link_error_errno(link, r, "Failed to add MAC entry to static MAC table: %m");
1150 }
1151
1152 return 0;
1153 }
1154
1155 static int link_request_set_addresses(Link *link) {
1156 AddressLabel *label;
1157 Address *ad;
1158 int r;
1159
1160 assert(link);
1161 assert(link->network);
1162 assert(link->state != _LINK_STATE_INVALID);
1163
1164 link_set_state(link, LINK_STATE_CONFIGURING);
1165
1166 /* Reset all *_configured flags we are configuring. */
1167 link->addresses_configured = false;
1168 link->addresses_ready = false;
1169 link->neighbors_configured = false;
1170 link->static_routes_configured = false;
1171 link->routing_policy_rules_configured = false;
1172
1173 r = link_set_bridge_fdb(link);
1174 if (r < 0)
1175 return r;
1176
1177 r = link_request_set_neighbors(link);
1178 if (r < 0)
1179 return r;
1180
1181 LIST_FOREACH(addresses, ad, link->network->static_addresses) {
1182 bool update;
1183
1184 update = address_get(link, ad->family, &ad->in_addr, ad->prefixlen, NULL) > 0;
1185
1186 r = address_configure(ad, link, address_handler, update);
1187 if (r < 0) {
1188 log_link_warning_errno(link, r, "Could not set addresses: %m");
1189 link_enter_failed(link);
1190 return r;
1191 }
1192
1193 link->address_messages++;
1194 }
1195
1196 LIST_FOREACH(labels, label, link->network->address_labels) {
1197 r = address_label_configure(label, link, NULL, false);
1198 if (r < 0) {
1199 log_link_warning_errno(link, r, "Could not set address label: %m");
1200 link_enter_failed(link);
1201 return r;
1202 }
1203
1204 link->address_label_messages++;
1205 }
1206
1207 /* now that we can figure out a default address for the dhcp server,
1208 start it */
1209 if (link_dhcp4_server_enabled(link) && (link->flags & IFF_UP)) {
1210 Address *address;
1211 Link *uplink = NULL;
1212 bool acquired_uplink = false;
1213
1214 address = link_find_dhcp_server_address(link);
1215 if (!address) {
1216 log_link_warning(link, "Failed to find suitable address for DHCPv4 server instance.");
1217 link_enter_failed(link);
1218 return 0;
1219 }
1220
1221 /* use the server address' subnet as the pool */
1222 r = sd_dhcp_server_configure_pool(link->dhcp_server, &address->in_addr.in, address->prefixlen,
1223 link->network->dhcp_server_pool_offset, link->network->dhcp_server_pool_size);
1224 if (r < 0)
1225 return r;
1226
1227 /* TODO:
1228 r = sd_dhcp_server_set_router(link->dhcp_server,
1229 &main_address->in_addr.in);
1230 if (r < 0)
1231 return r;
1232 */
1233
1234 if (link->network->dhcp_server_max_lease_time_usec > 0) {
1235 r = sd_dhcp_server_set_max_lease_time(
1236 link->dhcp_server,
1237 DIV_ROUND_UP(link->network->dhcp_server_max_lease_time_usec, USEC_PER_SEC));
1238 if (r < 0)
1239 return r;
1240 }
1241
1242 if (link->network->dhcp_server_default_lease_time_usec > 0) {
1243 r = sd_dhcp_server_set_default_lease_time(
1244 link->dhcp_server,
1245 DIV_ROUND_UP(link->network->dhcp_server_default_lease_time_usec, USEC_PER_SEC));
1246 if (r < 0)
1247 return r;
1248 }
1249
1250 if (link->network->dhcp_server_emit_dns) {
1251
1252 if (link->network->n_dhcp_server_dns > 0)
1253 r = sd_dhcp_server_set_dns(link->dhcp_server, link->network->dhcp_server_dns, link->network->n_dhcp_server_dns);
1254 else {
1255 uplink = manager_find_uplink(link->manager, link);
1256 acquired_uplink = true;
1257
1258 if (!uplink) {
1259 log_link_debug(link, "Not emitting DNS server information on link, couldn't find suitable uplink.");
1260 r = 0;
1261 } else
1262 r = link_push_uplink_dns_to_dhcp_server(uplink, link->dhcp_server);
1263 }
1264 if (r < 0)
1265 log_link_warning_errno(link, r, "Failed to set DNS server for DHCP server, ignoring: %m");
1266 }
1267
1268 if (link->network->dhcp_server_emit_ntp) {
1269
1270 if (link->network->n_dhcp_server_ntp > 0)
1271 r = sd_dhcp_server_set_ntp(link->dhcp_server, link->network->dhcp_server_ntp, link->network->n_dhcp_server_ntp);
1272 else {
1273 if (!acquired_uplink)
1274 uplink = manager_find_uplink(link->manager, link);
1275
1276 if (!uplink) {
1277 log_link_debug(link, "Not emitting NTP server information on link, couldn't find suitable uplink.");
1278 r = 0;
1279 } else
1280 r = link_push_uplink_ntp_to_dhcp_server(uplink, link->dhcp_server);
1281
1282 }
1283 if (r < 0)
1284 log_link_warning_errno(link, r, "Failed to set NTP server for DHCP server, ignoring: %m");
1285 }
1286
1287 r = sd_dhcp_server_set_emit_router(link->dhcp_server, link->network->dhcp_server_emit_router);
1288 if (r < 0)
1289 return log_link_warning_errno(link, r, "Failed to set router emission for DHCP server: %m");
1290
1291 if (link->network->dhcp_server_emit_timezone) {
1292 _cleanup_free_ char *buffer = NULL;
1293 const char *tz = NULL;
1294
1295 if (link->network->dhcp_server_timezone)
1296 tz = link->network->dhcp_server_timezone;
1297 else {
1298 r = get_timezone(&buffer);
1299 if (r < 0)
1300 log_warning_errno(r, "Failed to determine timezone: %m");
1301 else
1302 tz = buffer;
1303 }
1304
1305 if (tz) {
1306 r = sd_dhcp_server_set_timezone(link->dhcp_server, tz);
1307 if (r < 0)
1308 return r;
1309 }
1310 }
1311 if (!sd_dhcp_server_is_running(link->dhcp_server)) {
1312 r = sd_dhcp_server_start(link->dhcp_server);
1313 if (r < 0) {
1314 log_link_warning_errno(link, r, "Could not start DHCPv4 server instance: %m");
1315
1316 link_enter_failed(link);
1317
1318 return 0;
1319 }
1320 }
1321
1322 log_link_debug(link, "Offering DHCPv4 leases");
1323 }
1324
1325 if (link->address_messages == 0) {
1326 link->addresses_configured = true;
1327 link_check_ready(link);
1328 } else
1329 log_link_debug(link, "Setting addresses");
1330
1331 return 0;
1332 }
1333
1334 static int link_set_bridge_vlan(Link *link) {
1335 int r = 0;
1336
1337 r = br_vlan_configure(link, link->network->pvid, link->network->br_vid_bitmap, link->network->br_untagged_bitmap);
1338 if (r < 0)
1339 log_link_error_errno(link, r, "Failed to assign VLANs to bridge port: %m");
1340
1341 return r;
1342 }
1343
1344 static int link_set_proxy_arp(Link *link) {
1345 int r;
1346
1347 if (!link_proxy_arp_enabled(link))
1348 return 0;
1349
1350 r = sysctl_write_ip_property_boolean(AF_INET, link->ifname, "proxy_arp", link->network->proxy_arp > 0);
1351 if (r < 0)
1352 log_link_warning_errno(link, r, "Cannot configure proxy ARP for interface: %m");
1353
1354 return 0;
1355 }
1356
1357 static int link_configure_after_setting_mtu(Link *link);
1358
1359 static int set_mtu_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
1360 int r;
1361
1362 assert(m);
1363 assert(link);
1364 assert(link->ifname);
1365
1366 link->setting_mtu = false;
1367
1368 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1369 return 1;
1370
1371 r = sd_netlink_message_get_errno(m);
1372 if (r < 0) {
1373 log_link_warning_errno(link, r, "Could not set MTU: %m");
1374 return 1;
1375 }
1376
1377 log_link_debug(link, "Setting MTU done.");
1378
1379 if (link->state == LINK_STATE_INITIALIZED)
1380 (void) link_configure_after_setting_mtu(link);
1381
1382 return 1;
1383 }
1384
1385 int link_set_mtu(Link *link, uint32_t mtu, bool force) {
1386 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1387 int r;
1388
1389 assert(link);
1390 assert(link->manager);
1391 assert(link->manager->rtnl);
1392
1393 if (mtu == 0 || link->setting_mtu)
1394 return 0;
1395
1396 if (force ? link->mtu == mtu : link->mtu >= mtu)
1397 return 0;
1398
1399 log_link_debug(link, "Setting MTU: %" PRIu32, mtu);
1400
1401 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1402 if (r < 0)
1403 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1404
1405 /* If IPv6 not configured (no static IPv6 address and IPv6LL autoconfiguration is disabled)
1406 * for this interface, then disable IPv6 else enable it. */
1407 (void) link_enable_ipv6(link);
1408
1409 /* IPv6 protocol requires a minimum MTU of IPV6_MTU_MIN(1280) bytes
1410 * on the interface. Bump up MTU bytes to IPV6_MTU_MIN. */
1411 if (link_ipv6_enabled(link) && mtu < IPV6_MIN_MTU) {
1412
1413 log_link_warning(link, "Bumping MTU to " STRINGIFY(IPV6_MIN_MTU) ", as "
1414 "IPv6 is requested and requires a minimum MTU of " STRINGIFY(IPV6_MIN_MTU) " bytes: %m");
1415
1416 mtu = IPV6_MIN_MTU;
1417 }
1418
1419 r = sd_netlink_message_append_u32(req, IFLA_MTU, mtu);
1420 if (r < 0)
1421 return log_link_error_errno(link, r, "Could not append MTU: %m");
1422
1423 r = netlink_call_async(link->manager->rtnl, NULL, req, set_mtu_handler,
1424 link_netlink_destroy_callback, link);
1425 if (r < 0)
1426 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1427
1428 link_ref(link);
1429 link->setting_mtu = true;
1430
1431 return 0;
1432 }
1433
1434 static int set_flags_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
1435 int r;
1436
1437 assert(m);
1438 assert(link);
1439 assert(link->ifname);
1440
1441 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1442 return 1;
1443
1444 r = sd_netlink_message_get_errno(m);
1445 if (r < 0)
1446 log_link_warning_errno(link, r, "Could not set link flags: %m");
1447
1448 return 1;
1449 }
1450
1451 static int link_set_flags(Link *link) {
1452 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1453 unsigned ifi_change = 0;
1454 unsigned ifi_flags = 0;
1455 int r;
1456
1457 assert(link);
1458 assert(link->manager);
1459 assert(link->manager->rtnl);
1460
1461 if (link->flags & IFF_LOOPBACK)
1462 return 0;
1463
1464 if (!link->network)
1465 return 0;
1466
1467 if (link->network->arp < 0 && link->network->multicast < 0 && link->network->allmulticast < 0)
1468 return 0;
1469
1470 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1471 if (r < 0)
1472 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1473
1474 if (link->network->arp >= 0) {
1475 ifi_change |= IFF_NOARP;
1476 SET_FLAG(ifi_flags, IFF_NOARP, link->network->arp == 0);
1477 }
1478
1479 if (link->network->multicast >= 0) {
1480 ifi_change |= IFF_MULTICAST;
1481 SET_FLAG(ifi_flags, IFF_MULTICAST, link->network->multicast);
1482 }
1483
1484 if (link->network->allmulticast >= 0) {
1485 ifi_change |= IFF_ALLMULTI;
1486 SET_FLAG(ifi_flags, IFF_ALLMULTI, link->network->allmulticast);
1487 }
1488
1489 r = sd_rtnl_message_link_set_flags(req, ifi_flags, ifi_change);
1490 if (r < 0)
1491 return log_link_error_errno(link, r, "Could not set link flags: %m");
1492
1493 r = netlink_call_async(link->manager->rtnl, NULL, req, set_flags_handler,
1494 link_netlink_destroy_callback, link);
1495 if (r < 0)
1496 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1497
1498 link_ref(link);
1499
1500 return 0;
1501 }
1502
1503 static int link_set_bond_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
1504 int r;
1505
1506 assert(m);
1507 assert(link);
1508 assert(link->ifname);
1509
1510 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1511 return 1;
1512
1513 r = sd_netlink_message_get_errno(m);
1514 if (r < 0) {
1515 log_link_warning_errno(link, r, "Could not set bonding interface: %m");
1516 return 1;
1517 }
1518
1519 return 1;
1520 }
1521
1522 static int link_set_bond(Link *link) {
1523 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1524 int r;
1525
1526 assert(link);
1527 assert(link->network);
1528
1529 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_NEWLINK, link->network->bond->ifindex);
1530 if (r < 0)
1531 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1532
1533 r = sd_netlink_message_set_flags(req, NLM_F_REQUEST | NLM_F_ACK);
1534 if (r < 0)
1535 return log_link_error_errno(link, r, "Could not set netlink flags: %m");
1536
1537 r = sd_netlink_message_open_container(req, IFLA_LINKINFO);
1538 if (r < 0)
1539 return log_link_error_errno(link, r, "Could not append IFLA_PROTINFO attribute: %m");
1540
1541 r = sd_netlink_message_open_container_union(req, IFLA_INFO_DATA, "bond");
1542 if (r < 0)
1543 return log_link_error_errno(link, r, "Could not append IFLA_INFO_DATA attribute: %m");
1544
1545 if (link->network->active_slave) {
1546 r = sd_netlink_message_append_u32(req, IFLA_BOND_ACTIVE_SLAVE, link->ifindex);
1547 if (r < 0)
1548 return log_link_error_errno(link, r, "Could not append IFLA_BOND_ACTIVE_SLAVE attribute: %m");
1549 }
1550
1551 if (link->network->primary_slave) {
1552 r = sd_netlink_message_append_u32(req, IFLA_BOND_PRIMARY, link->ifindex);
1553 if (r < 0)
1554 return log_link_error_errno(link, r, "Could not append IFLA_BOND_PRIMARY attribute: %m");
1555 }
1556
1557 r = sd_netlink_message_close_container(req);
1558 if (r < 0)
1559 return log_link_error_errno(link, r, "Could not append IFLA_LINKINFO attribute: %m");
1560
1561 r = sd_netlink_message_close_container(req);
1562 if (r < 0)
1563 return log_link_error_errno(link, r, "Could not append IFLA_INFO_DATA attribute: %m");
1564
1565 r = netlink_call_async(link->manager->rtnl, NULL, req, link_set_bond_handler,
1566 link_netlink_destroy_callback, link);
1567 if (r < 0)
1568 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1569
1570 link_ref(link);
1571
1572 return r;
1573 }
1574
1575 static int link_acquire_ipv6_conf(Link *link) {
1576 int r;
1577
1578 assert(link);
1579
1580 if (link_ipv6_accept_ra_enabled(link)) {
1581 assert(link->ndisc);
1582
1583 log_link_debug(link, "Discovering IPv6 routers");
1584
1585 r = sd_ndisc_start(link->ndisc);
1586 if (r < 0 && r != -EBUSY)
1587 return log_link_warning_errno(link, r, "Could not start IPv6 Router Discovery: %m");
1588 }
1589
1590 if (link_radv_enabled(link)) {
1591 assert(link->radv);
1592 assert(in_addr_is_link_local(AF_INET6, (const union in_addr_union*)&link->ipv6ll_address) > 0);
1593
1594 log_link_debug(link, "Starting IPv6 Router Advertisements");
1595
1596 r = sd_radv_start(link->radv);
1597 if (r < 0 && r != -EBUSY)
1598 return log_link_warning_errno(link, r, "Could not start IPv6 Router Advertisement: %m");
1599 }
1600
1601 (void) dhcp6_request_prefix_delegation(link);
1602
1603 return 0;
1604 }
1605
1606 static int link_acquire_ipv4_conf(Link *link) {
1607 int r;
1608
1609 assert(link);
1610 assert(link->manager);
1611 assert(link->manager->event);
1612
1613 if (link_ipv4ll_enabled(link)) {
1614 assert(link->ipv4ll);
1615
1616 log_link_debug(link, "Acquiring IPv4 link-local address");
1617
1618 r = sd_ipv4ll_start(link->ipv4ll);
1619 if (r < 0)
1620 return log_link_warning_errno(link, r, "Could not acquire IPv4 link-local address: %m");
1621 }
1622
1623 if (link_dhcp4_enabled(link)) {
1624 assert(link->dhcp_client);
1625
1626 log_link_debug(link, "Acquiring DHCPv4 lease");
1627
1628 r = sd_dhcp_client_start(link->dhcp_client);
1629 if (r < 0)
1630 return log_link_warning_errno(link, r, "Could not acquire DHCPv4 lease: %m");
1631 }
1632
1633 return 0;
1634 }
1635
1636 static int link_acquire_conf(Link *link) {
1637 int r;
1638
1639 assert(link);
1640
1641 r = link_acquire_ipv4_conf(link);
1642 if (r < 0)
1643 return r;
1644
1645 if (!in_addr_is_null(AF_INET6, (const union in_addr_union*) &link->ipv6ll_address)) {
1646 r = link_acquire_ipv6_conf(link);
1647 if (r < 0)
1648 return r;
1649 }
1650
1651 if (link_lldp_emit_enabled(link)) {
1652 r = link_lldp_emit_start(link);
1653 if (r < 0)
1654 return log_link_warning_errno(link, r, "Failed to start LLDP transmission: %m");
1655 }
1656
1657 return 0;
1658 }
1659
1660 bool link_has_carrier(Link *link) {
1661 /* see Documentation/networking/operstates.txt in the kernel sources */
1662
1663 if (link->kernel_operstate == IF_OPER_UP)
1664 return true;
1665
1666 if (link->kernel_operstate == IF_OPER_UNKNOWN)
1667 /* operstate may not be implemented, so fall back to flags */
1668 if ((link->flags & IFF_LOWER_UP) && !(link->flags & IFF_DORMANT))
1669 return true;
1670
1671 return false;
1672 }
1673
1674 static int link_address_genmode_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
1675 int r;
1676
1677 assert(link);
1678
1679 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1680 return 1;
1681
1682 r = sd_netlink_message_get_errno(m);
1683 if (r < 0)
1684 log_link_warning_errno(link, r, "Could not set address genmode for interface: %m");
1685
1686 return 1;
1687 }
1688
1689 static int link_configure_addrgen_mode(Link *link) {
1690 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1691 uint8_t ipv6ll_mode;
1692 int r;
1693
1694 assert(link);
1695 assert(link->network);
1696 assert(link->manager);
1697 assert(link->manager->rtnl);
1698
1699 log_link_debug(link, "Setting address genmode for link");
1700
1701 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1702 if (r < 0)
1703 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1704
1705 r = sd_netlink_message_open_container(req, IFLA_AF_SPEC);
1706 if (r < 0)
1707 return log_link_error_errno(link, r, "Could not open IFLA_AF_SPEC container: %m");
1708
1709 r = sd_netlink_message_open_container(req, AF_INET6);
1710 if (r < 0)
1711 return log_link_error_errno(link, r, "Could not open AF_INET6 container: %m");
1712
1713 if (!link_ipv6ll_enabled(link))
1714 ipv6ll_mode = IN6_ADDR_GEN_MODE_NONE;
1715 else if (sysctl_read_ip_property(AF_INET6, link->ifname, "stable_secret", NULL) < 0)
1716 /* The file may not exist. And event if it exists, when stable_secret is unset,
1717 * reading the file fails with EIO. */
1718 ipv6ll_mode = IN6_ADDR_GEN_MODE_EUI64;
1719 else
1720 ipv6ll_mode = IN6_ADDR_GEN_MODE_STABLE_PRIVACY;
1721
1722 r = sd_netlink_message_append_u8(req, IFLA_INET6_ADDR_GEN_MODE, ipv6ll_mode);
1723 if (r < 0)
1724 return log_link_error_errno(link, r, "Could not append IFLA_INET6_ADDR_GEN_MODE: %m");
1725
1726 r = sd_netlink_message_close_container(req);
1727 if (r < 0)
1728 return log_link_error_errno(link, r, "Could not close AF_INET6 container: %m");
1729
1730 r = sd_netlink_message_close_container(req);
1731 if (r < 0)
1732 return log_link_error_errno(link, r, "Could not close IFLA_AF_SPEC container: %m");
1733
1734 r = netlink_call_async(link->manager->rtnl, NULL, req, link_address_genmode_handler,
1735 link_netlink_destroy_callback, link);
1736 if (r < 0)
1737 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1738
1739 link_ref(link);
1740
1741 return 0;
1742 }
1743
1744 static int link_up_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
1745 int r;
1746
1747 assert(link);
1748
1749 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1750 return 1;
1751
1752 r = sd_netlink_message_get_errno(m);
1753 if (r < 0)
1754 /* we warn but don't fail the link, as it may be brought up later */
1755 log_link_warning_errno(link, r, "Could not bring up interface: %m");
1756
1757 return 1;
1758 }
1759
1760 static int link_up(Link *link) {
1761 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1762 int r;
1763
1764 assert(link);
1765 assert(link->network);
1766 assert(link->manager);
1767 assert(link->manager->rtnl);
1768
1769 log_link_debug(link, "Bringing link up");
1770
1771 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1772 if (r < 0)
1773 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1774
1775 /* set it free if not enslaved with networkd */
1776 if (!link->network->bridge && !link->network->bond && !link->network->vrf) {
1777 r = sd_netlink_message_append_u32(req, IFLA_MASTER, 0);
1778 if (r < 0)
1779 return log_link_error_errno(link, r, "Could not append IFLA_MASTER attribute: %m");
1780 }
1781
1782 r = sd_rtnl_message_link_set_flags(req, IFF_UP, IFF_UP);
1783 if (r < 0)
1784 return log_link_error_errno(link, r, "Could not set link flags: %m");
1785
1786 if (link->network->mac) {
1787 r = sd_netlink_message_append_ether_addr(req, IFLA_ADDRESS, link->network->mac);
1788 if (r < 0)
1789 return log_link_error_errno(link, r, "Could not set MAC address: %m");
1790 }
1791
1792 if (link_ipv6_enabled(link)) {
1793 uint8_t ipv6ll_mode;
1794
1795 r = sd_netlink_message_open_container(req, IFLA_AF_SPEC);
1796 if (r < 0)
1797 return log_link_error_errno(link, r, "Could not open IFLA_AF_SPEC container: %m");
1798
1799 /* if the kernel lacks ipv6 support setting IFF_UP fails if any ipv6 options are passed */
1800 r = sd_netlink_message_open_container(req, AF_INET6);
1801 if (r < 0)
1802 return log_link_error_errno(link, r, "Could not open AF_INET6 container: %m");
1803
1804 if (!in_addr_is_null(AF_INET6, &link->network->ipv6_token)) {
1805 r = sd_netlink_message_append_in6_addr(req, IFLA_INET6_TOKEN, &link->network->ipv6_token.in6);
1806 if (r < 0)
1807 return log_link_error_errno(link, r, "Could not append IFLA_INET6_TOKEN: %m");
1808 }
1809
1810 if (!link_ipv6ll_enabled(link))
1811 ipv6ll_mode = IN6_ADDR_GEN_MODE_NONE;
1812 else if (sysctl_read_ip_property(AF_INET6, link->ifname, "stable_secret", NULL) < 0)
1813 /* The file may not exist. And event if it exists, when stable_secret is unset,
1814 * reading the file fails with EIO. */
1815 ipv6ll_mode = IN6_ADDR_GEN_MODE_EUI64;
1816 else
1817 ipv6ll_mode = IN6_ADDR_GEN_MODE_STABLE_PRIVACY;
1818
1819 r = sd_netlink_message_append_u8(req, IFLA_INET6_ADDR_GEN_MODE, ipv6ll_mode);
1820 if (r < 0)
1821 return log_link_error_errno(link, r, "Could not append IFLA_INET6_ADDR_GEN_MODE: %m");
1822
1823 r = sd_netlink_message_close_container(req);
1824 if (r < 0)
1825 return log_link_error_errno(link, r, "Could not close AF_INET6 container: %m");
1826
1827 r = sd_netlink_message_close_container(req);
1828 if (r < 0)
1829 return log_link_error_errno(link, r, "Could not close IFLA_AF_SPEC container: %m");
1830 }
1831
1832 r = netlink_call_async(link->manager->rtnl, NULL, req, link_up_handler,
1833 link_netlink_destroy_callback, link);
1834 if (r < 0)
1835 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1836
1837 link_ref(link);
1838
1839 return 0;
1840 }
1841
1842 static int link_down_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
1843 int r;
1844
1845 assert(link);
1846
1847 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1848 return 1;
1849
1850 r = sd_netlink_message_get_errno(m);
1851 if (r < 0)
1852 log_link_warning_errno(link, r, "Could not bring down interface: %m");
1853
1854 return 1;
1855 }
1856
1857 int link_down(Link *link, link_netlink_message_handler_t callback) {
1858 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1859 int r;
1860
1861 assert(link);
1862 assert(link->manager);
1863 assert(link->manager->rtnl);
1864
1865 log_link_debug(link, "Bringing link down");
1866
1867 r = sd_rtnl_message_new_link(link->manager->rtnl, &req,
1868 RTM_SETLINK, link->ifindex);
1869 if (r < 0)
1870 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1871
1872 r = sd_rtnl_message_link_set_flags(req, 0, IFF_UP);
1873 if (r < 0)
1874 return log_link_error_errno(link, r, "Could not set link flags: %m");
1875
1876 r = netlink_call_async(link->manager->rtnl, NULL, req,
1877 callback ?: link_down_handler,
1878 link_netlink_destroy_callback, link);
1879 if (r < 0)
1880 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1881
1882 link_ref(link);
1883
1884 return 0;
1885 }
1886
1887 static int link_handle_bound_to_list(Link *link) {
1888 Link *l;
1889 Iterator i;
1890 int r;
1891 bool required_up = false;
1892 bool link_is_up = false;
1893
1894 assert(link);
1895
1896 if (hashmap_isempty(link->bound_to_links))
1897 return 0;
1898
1899 if (link->flags & IFF_UP)
1900 link_is_up = true;
1901
1902 HASHMAP_FOREACH (l, link->bound_to_links, i)
1903 if (link_has_carrier(l)) {
1904 required_up = true;
1905 break;
1906 }
1907
1908 if (!required_up && link_is_up) {
1909 r = link_down(link, NULL);
1910 if (r < 0)
1911 return r;
1912 } else if (required_up && !link_is_up) {
1913 r = link_up(link);
1914 if (r < 0)
1915 return r;
1916 }
1917
1918 return 0;
1919 }
1920
1921 static int link_handle_bound_by_list(Link *link) {
1922 Iterator i;
1923 Link *l;
1924 int r;
1925
1926 assert(link);
1927
1928 if (hashmap_isempty(link->bound_by_links))
1929 return 0;
1930
1931 HASHMAP_FOREACH (l, link->bound_by_links, i) {
1932 r = link_handle_bound_to_list(l);
1933 if (r < 0)
1934 return r;
1935 }
1936
1937 return 0;
1938 }
1939
1940 static int link_put_carrier(Link *link, Link *carrier, Hashmap **h) {
1941 int r;
1942
1943 assert(link);
1944 assert(carrier);
1945
1946 if (link == carrier)
1947 return 0;
1948
1949 if (hashmap_get(*h, INT_TO_PTR(carrier->ifindex)))
1950 return 0;
1951
1952 r = hashmap_ensure_allocated(h, NULL);
1953 if (r < 0)
1954 return r;
1955
1956 r = hashmap_put(*h, INT_TO_PTR(carrier->ifindex), carrier);
1957 if (r < 0)
1958 return r;
1959
1960 return 0;
1961 }
1962
1963 static int link_new_bound_by_list(Link *link) {
1964 Manager *m;
1965 Link *carrier;
1966 Iterator i;
1967 int r;
1968 bool list_updated = false;
1969
1970 assert(link);
1971 assert(link->manager);
1972
1973 m = link->manager;
1974
1975 HASHMAP_FOREACH(carrier, m->links, i) {
1976 if (!carrier->network)
1977 continue;
1978
1979 if (strv_isempty(carrier->network->bind_carrier))
1980 continue;
1981
1982 if (strv_fnmatch(carrier->network->bind_carrier, link->ifname, 0)) {
1983 r = link_put_carrier(link, carrier, &link->bound_by_links);
1984 if (r < 0)
1985 return r;
1986
1987 list_updated = true;
1988 }
1989 }
1990
1991 if (list_updated)
1992 link_dirty(link);
1993
1994 HASHMAP_FOREACH(carrier, link->bound_by_links, i) {
1995 r = link_put_carrier(carrier, link, &carrier->bound_to_links);
1996 if (r < 0)
1997 return r;
1998
1999 link_dirty(carrier);
2000 }
2001
2002 return 0;
2003 }
2004
2005 static int link_new_bound_to_list(Link *link) {
2006 Manager *m;
2007 Link *carrier;
2008 Iterator i;
2009 int r;
2010 bool list_updated = false;
2011
2012 assert(link);
2013 assert(link->manager);
2014
2015 if (!link->network)
2016 return 0;
2017
2018 if (strv_isempty(link->network->bind_carrier))
2019 return 0;
2020
2021 m = link->manager;
2022
2023 HASHMAP_FOREACH (carrier, m->links, i) {
2024 if (strv_fnmatch(link->network->bind_carrier, carrier->ifname, 0)) {
2025 r = link_put_carrier(link, carrier, &link->bound_to_links);
2026 if (r < 0)
2027 return r;
2028
2029 list_updated = true;
2030 }
2031 }
2032
2033 if (list_updated)
2034 link_dirty(link);
2035
2036 HASHMAP_FOREACH (carrier, link->bound_to_links, i) {
2037 r = link_put_carrier(carrier, link, &carrier->bound_by_links);
2038 if (r < 0)
2039 return r;
2040
2041 link_dirty(carrier);
2042 }
2043
2044 return 0;
2045 }
2046
2047 static int link_new_carrier_maps(Link *link) {
2048 int r;
2049
2050 r = link_new_bound_by_list(link);
2051 if (r < 0)
2052 return r;
2053
2054 r = link_handle_bound_by_list(link);
2055 if (r < 0)
2056 return r;
2057
2058 r = link_new_bound_to_list(link);
2059 if (r < 0)
2060 return r;
2061
2062 r = link_handle_bound_to_list(link);
2063 if (r < 0)
2064 return r;
2065
2066 return 0;
2067 }
2068
2069 static void link_free_bound_to_list(Link *link) {
2070 Link *bound_to;
2071 Iterator i;
2072
2073 HASHMAP_FOREACH (bound_to, link->bound_to_links, i) {
2074 hashmap_remove(link->bound_to_links, INT_TO_PTR(bound_to->ifindex));
2075
2076 if (hashmap_remove(bound_to->bound_by_links, INT_TO_PTR(link->ifindex)))
2077 link_dirty(bound_to);
2078 }
2079
2080 return;
2081 }
2082
2083 static void link_free_bound_by_list(Link *link) {
2084 Link *bound_by;
2085 Iterator i;
2086
2087 HASHMAP_FOREACH (bound_by, link->bound_by_links, i) {
2088 hashmap_remove(link->bound_by_links, INT_TO_PTR(bound_by->ifindex));
2089
2090 if (hashmap_remove(bound_by->bound_to_links, INT_TO_PTR(link->ifindex))) {
2091 link_dirty(bound_by);
2092 link_handle_bound_to_list(bound_by);
2093 }
2094 }
2095
2096 return;
2097 }
2098
2099 static void link_free_carrier_maps(Link *link) {
2100 bool list_updated = false;
2101
2102 assert(link);
2103
2104 if (!hashmap_isempty(link->bound_to_links)) {
2105 link_free_bound_to_list(link);
2106 list_updated = true;
2107 }
2108
2109 if (!hashmap_isempty(link->bound_by_links)) {
2110 link_free_bound_by_list(link);
2111 list_updated = true;
2112 }
2113
2114 if (list_updated)
2115 link_dirty(link);
2116
2117 return;
2118 }
2119
2120 static int link_append_to_master(Link *link, NetDev *netdev) {
2121 Link *master;
2122 int r;
2123
2124 assert(link);
2125 assert(netdev);
2126
2127 r = link_get(link->manager, netdev->ifindex, &master);
2128 if (r < 0)
2129 return r;
2130
2131 r = set_ensure_allocated(&master->slaves, NULL);
2132 if (r < 0)
2133 return r;
2134
2135 r = set_put(master->slaves, link);
2136 if (r < 0)
2137 return r;
2138
2139 link_ref(link);
2140 return 0;
2141 }
2142
2143 static void link_drop_from_master(Link *link, NetDev *netdev) {
2144 Link *master;
2145
2146 assert(link);
2147
2148 if (!link->manager || !netdev)
2149 return;
2150
2151 if (link_get(link->manager, netdev->ifindex, &master) < 0)
2152 return;
2153
2154 link_unref(set_remove(master->slaves, link));
2155 }
2156
2157 static void link_detach_from_manager(Link *link) {
2158 if (!link || !link->manager)
2159 return;
2160
2161 link_unref(set_remove(link->manager->links_requesting_uuid, link));
2162 link_clean(link);
2163
2164 /* The following must be called at last. */
2165 assert_se(hashmap_remove(link->manager->links, INT_TO_PTR(link->ifindex)) == link);
2166 link_unref(link);
2167 }
2168
2169 void link_drop(Link *link) {
2170 if (!link || link->state == LINK_STATE_LINGER)
2171 return;
2172
2173 link_set_state(link, LINK_STATE_LINGER);
2174
2175 link_free_carrier_maps(link);
2176
2177 if (link->network) {
2178 link_drop_from_master(link, link->network->bridge);
2179 link_drop_from_master(link, link->network->bond);
2180 }
2181
2182 log_link_debug(link, "Link removed");
2183
2184 (void) unlink(link->state_file);
2185 link_detach_from_manager(link);
2186 }
2187
2188 static int link_joined(Link *link) {
2189 int r;
2190
2191 assert(link);
2192 assert(link->network);
2193
2194 if (!hashmap_isempty(link->bound_to_links)) {
2195 r = link_handle_bound_to_list(link);
2196 if (r < 0)
2197 return r;
2198 } else if (!(link->flags & IFF_UP)) {
2199 r = link_up(link);
2200 if (r < 0) {
2201 link_enter_failed(link);
2202 return r;
2203 }
2204 }
2205
2206 if (link->network->bridge) {
2207 r = link_set_bridge(link);
2208 if (r < 0)
2209 log_link_error_errno(link, r, "Could not set bridge message: %m");
2210
2211 r = link_append_to_master(link, link->network->bridge);
2212 if (r < 0)
2213 log_link_error_errno(link, r, "Failed to add to bridge master's slave list: %m");
2214 }
2215
2216 if (link->network->bond) {
2217 r = link_set_bond(link);
2218 if (r < 0)
2219 log_link_error_errno(link, r, "Could not set bond message: %m");
2220
2221 r = link_append_to_master(link, link->network->bond);
2222 if (r < 0)
2223 log_link_error_errno(link, r, "Failed to add to bond master's slave list: %m");
2224 }
2225
2226 if (link->network->use_br_vlan &&
2227 (link->network->bridge || streq_ptr("bridge", link->kind))) {
2228 r = link_set_bridge_vlan(link);
2229 if (r < 0)
2230 log_link_error_errno(link, r, "Could not set bridge vlan: %m");
2231 }
2232
2233 /* Skip setting up addresses until it gets carrier,
2234 or it would try to set addresses twice,
2235 which is bad for non-idempotent steps. */
2236 if (!link_has_carrier(link) && !link->network->configure_without_carrier)
2237 return 0;
2238
2239 return link_request_set_addresses(link);
2240 }
2241
2242 static int netdev_join_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
2243 int r;
2244
2245 assert(link);
2246 assert(link->network);
2247 assert(link->enslaving > 0);
2248 assert(!link->enslaved_raw);
2249
2250 link->enslaving--;
2251
2252 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
2253 return 1;
2254
2255 r = sd_netlink_message_get_errno(m);
2256 if (r < 0 && r != -EEXIST) {
2257 log_link_error_errno(link, r, "Could not join netdev: %m");
2258 link_enter_failed(link);
2259 return 1;
2260 } else
2261 log_link_debug(link, "Joined netdev");
2262
2263 if (link->enslaving == 0) {
2264 link->enslaved_raw = true;
2265 link_joined(link);
2266 }
2267
2268 return 1;
2269 }
2270
2271 static int link_enter_join_netdev(Link *link) {
2272 NetDev *netdev;
2273 Iterator i;
2274 int r;
2275
2276 assert(link);
2277 assert(link->network);
2278 assert(link->state == LINK_STATE_INITIALIZED);
2279
2280 link_set_state(link, LINK_STATE_CONFIGURING);
2281
2282 link_dirty(link);
2283 link->enslaving = 0;
2284 link->enslaved_raw = false;
2285
2286 if (link->network->bond) {
2287 if (link->network->bond->state == NETDEV_STATE_READY &&
2288 link->network->bond->ifindex == link->master_ifindex)
2289 return link_joined(link);
2290
2291 log_struct(LOG_DEBUG,
2292 LOG_LINK_INTERFACE(link),
2293 LOG_NETDEV_INTERFACE(link->network->bond),
2294 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", link->network->bond->ifname));
2295
2296 link->enslaving++;
2297
2298 r = netdev_join(link->network->bond, link, netdev_join_handler);
2299 if (r < 0) {
2300 log_struct_errno(LOG_WARNING, r,
2301 LOG_LINK_INTERFACE(link),
2302 LOG_NETDEV_INTERFACE(link->network->bond),
2303 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", link->network->bond->ifname));
2304 link_enter_failed(link);
2305 return r;
2306 }
2307 }
2308
2309 if (link->network->bridge) {
2310 log_struct(LOG_DEBUG,
2311 LOG_LINK_INTERFACE(link),
2312 LOG_NETDEV_INTERFACE(link->network->bridge),
2313 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", link->network->bridge->ifname));
2314
2315 link->enslaving++;
2316
2317 r = netdev_join(link->network->bridge, link, netdev_join_handler);
2318 if (r < 0) {
2319 log_struct_errno(LOG_WARNING, r,
2320 LOG_LINK_INTERFACE(link),
2321 LOG_NETDEV_INTERFACE(link->network->bridge),
2322 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", link->network->bridge->ifname));
2323 link_enter_failed(link);
2324 return r;
2325 }
2326 }
2327
2328 if (link->network->vrf) {
2329 log_struct(LOG_DEBUG,
2330 LOG_LINK_INTERFACE(link),
2331 LOG_NETDEV_INTERFACE(link->network->vrf),
2332 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", link->network->vrf->ifname));
2333
2334 link->enslaving++;
2335
2336 r = netdev_join(link->network->vrf, link, netdev_join_handler);
2337 if (r < 0) {
2338 log_struct_errno(LOG_WARNING, r,
2339 LOG_LINK_INTERFACE(link),
2340 LOG_NETDEV_INTERFACE(link->network->vrf),
2341 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", link->network->vrf->ifname));
2342 link_enter_failed(link);
2343 return r;
2344 }
2345 }
2346
2347 HASHMAP_FOREACH(netdev, link->network->stacked_netdevs, i) {
2348
2349 if (netdev->ifindex > 0)
2350 /* Assume already enslaved. */
2351 continue;
2352
2353 if (netdev_get_create_type(netdev) != NETDEV_CREATE_STACKED)
2354 continue;
2355
2356 log_struct(LOG_DEBUG,
2357 LOG_LINK_INTERFACE(link),
2358 LOG_NETDEV_INTERFACE(netdev),
2359 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", netdev->ifname));
2360
2361 link->enslaving++;
2362
2363 r = netdev_join(netdev, link, netdev_join_handler);
2364 if (r < 0) {
2365 log_struct_errno(LOG_WARNING, r,
2366 LOG_LINK_INTERFACE(link),
2367 LOG_NETDEV_INTERFACE(netdev),
2368 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", netdev->ifname));
2369 link_enter_failed(link);
2370 return r;
2371 }
2372 }
2373
2374 if (link->enslaving == 0)
2375 return link_joined(link);
2376
2377 return 0;
2378 }
2379
2380 static int link_set_ipv4_forward(Link *link) {
2381 int r;
2382
2383 if (!link_ipv4_forward_enabled(link))
2384 return 0;
2385
2386 /* We propagate the forwarding flag from one interface to the
2387 * global setting one way. This means: as long as at least one
2388 * interface was configured at any time that had IP forwarding
2389 * enabled the setting will stay on for good. We do this
2390 * primarily to keep IPv4 and IPv6 packet forwarding behaviour
2391 * somewhat in sync (see below). */
2392
2393 r = sysctl_write_ip_property(AF_INET, NULL, "ip_forward", "1");
2394 if (r < 0)
2395 log_link_warning_errno(link, r, "Cannot turn on IPv4 packet forwarding, ignoring: %m");
2396
2397 return 0;
2398 }
2399
2400 static int link_set_ipv6_forward(Link *link) {
2401 int r;
2402
2403 if (!link_ipv6_forward_enabled(link))
2404 return 0;
2405
2406 /* On Linux, the IPv6 stack does not know a per-interface
2407 * packet forwarding setting: either packet forwarding is on
2408 * for all, or off for all. We hence don't bother with a
2409 * per-interface setting, but simply propagate the interface
2410 * flag, if it is set, to the global flag, one-way. Note that
2411 * while IPv4 would allow a per-interface flag, we expose the
2412 * same behaviour there and also propagate the setting from
2413 * one to all, to keep things simple (see above). */
2414
2415 r = sysctl_write_ip_property(AF_INET6, "all", "forwarding", "1");
2416 if (r < 0)
2417 log_link_warning_errno(link, r, "Cannot configure IPv6 packet forwarding, ignoring: %m");
2418
2419 return 0;
2420 }
2421
2422 static int link_set_ipv6_privacy_extensions(Link *link) {
2423 IPv6PrivacyExtensions s;
2424 int r;
2425
2426 s = link_ipv6_privacy_extensions(link);
2427 if (s < 0)
2428 return 0;
2429
2430 r = sysctl_write_ip_property_int(AF_INET6, link->ifname, "use_tempaddr", (int) link->network->ipv6_privacy_extensions);
2431 if (r < 0)
2432 log_link_warning_errno(link, r, "Cannot configure IPv6 privacy extension for interface: %m");
2433
2434 return 0;
2435 }
2436
2437 static int link_set_ipv6_accept_ra(Link *link) {
2438 int r;
2439
2440 /* Make this a NOP if IPv6 is not available */
2441 if (!socket_ipv6_is_supported())
2442 return 0;
2443
2444 if (link->flags & IFF_LOOPBACK)
2445 return 0;
2446
2447 if (!link->network)
2448 return 0;
2449
2450 r = sysctl_write_ip_property(AF_INET6, link->ifname, "accept_ra", "0");
2451 if (r < 0)
2452 log_link_warning_errno(link, r, "Cannot disable kernel IPv6 accept_ra for interface: %m");
2453
2454 return 0;
2455 }
2456
2457 static int link_set_ipv6_dad_transmits(Link *link) {
2458 int r;
2459
2460 /* Make this a NOP if IPv6 is not available */
2461 if (!socket_ipv6_is_supported())
2462 return 0;
2463
2464 if (link->flags & IFF_LOOPBACK)
2465 return 0;
2466
2467 if (!link->network)
2468 return 0;
2469
2470 if (link->network->ipv6_dad_transmits < 0)
2471 return 0;
2472
2473 r = sysctl_write_ip_property_int(AF_INET6, link->ifname, "dad_transmits", link->network->ipv6_dad_transmits);
2474 if (r < 0)
2475 log_link_warning_errno(link, r, "Cannot set IPv6 dad transmits for interface: %m");
2476
2477 return 0;
2478 }
2479
2480 static int link_set_ipv6_hop_limit(Link *link) {
2481 int r;
2482
2483 /* Make this a NOP if IPv6 is not available */
2484 if (!socket_ipv6_is_supported())
2485 return 0;
2486
2487 if (link->flags & IFF_LOOPBACK)
2488 return 0;
2489
2490 if (!link->network)
2491 return 0;
2492
2493 if (link->network->ipv6_hop_limit < 0)
2494 return 0;
2495
2496 r = sysctl_write_ip_property_int(AF_INET6, link->ifname, "hop_limit", link->network->ipv6_hop_limit);
2497 if (r < 0)
2498 log_link_warning_errno(link, r, "Cannot set IPv6 hop limit for interface: %m");
2499
2500 return 0;
2501 }
2502
2503 static int link_set_ipv6_mtu(Link *link) {
2504 int r;
2505
2506 /* Make this a NOP if IPv6 is not available */
2507 if (!socket_ipv6_is_supported())
2508 return 0;
2509
2510 if (link->flags & IFF_LOOPBACK)
2511 return 0;
2512
2513 if (link->network->ipv6_mtu == 0)
2514 return 0;
2515
2516 r = sysctl_write_ip_property_uint32(AF_INET6, link->ifname, "mtu", link->network->ipv6_mtu);
2517 if (r < 0)
2518 log_link_warning_errno(link, r, "Cannot set IPv6 MTU for interface: %m");
2519
2520 return 0;
2521 }
2522
2523 static bool link_is_static_address_configured(Link *link, Address *address) {
2524 Address *net_address;
2525
2526 assert(link);
2527 assert(address);
2528
2529 if (!link->network)
2530 return false;
2531
2532 LIST_FOREACH(addresses, net_address, link->network->static_addresses)
2533 if (address_equal(net_address, address))
2534 return true;
2535
2536 return false;
2537 }
2538
2539 static bool link_is_static_route_configured(Link *link, Route *route) {
2540 Route *net_route;
2541
2542 assert(link);
2543 assert(route);
2544
2545 if (!link->network)
2546 return false;
2547
2548 LIST_FOREACH(routes, net_route, link->network->static_routes)
2549 if (route_equal(net_route, route))
2550 return true;
2551
2552 return false;
2553 }
2554
2555 static int link_drop_foreign_config(Link *link) {
2556 Address *address;
2557 Route *route;
2558 Iterator i;
2559 int r;
2560
2561 SET_FOREACH(address, link->addresses_foreign, i) {
2562 /* we consider IPv6LL addresses to be managed by the kernel */
2563 if (address->family == AF_INET6 && in_addr_is_link_local(AF_INET6, &address->in_addr) == 1)
2564 continue;
2565
2566 if (link_is_static_address_configured(link, address)) {
2567 r = address_add(link, address->family, &address->in_addr, address->prefixlen, NULL);
2568 if (r < 0)
2569 return log_link_error_errno(link, r, "Failed to add address: %m");
2570 } else {
2571 r = address_remove(address, link, NULL);
2572 if (r < 0)
2573 return r;
2574 }
2575 }
2576
2577 SET_FOREACH(route, link->routes_foreign, i) {
2578 /* do not touch routes managed by the kernel */
2579 if (route->protocol == RTPROT_KERNEL)
2580 continue;
2581
2582 if (link_is_static_route_configured(link, route)) {
2583 r = route_add(link, route->family, &route->dst, route->dst_prefixlen, route->tos, route->priority, route->table, NULL);
2584 if (r < 0)
2585 return r;
2586 } else {
2587 r = route_remove(route, link, NULL);
2588 if (r < 0)
2589 return r;
2590 }
2591 }
2592
2593 return 0;
2594 }
2595
2596 static int link_drop_config(Link *link) {
2597 Address *address, *pool_address;
2598 Route *route;
2599 Iterator i;
2600 int r;
2601
2602 SET_FOREACH(address, link->addresses, i) {
2603 /* we consider IPv6LL addresses to be managed by the kernel */
2604 if (address->family == AF_INET6 && in_addr_is_link_local(AF_INET6, &address->in_addr) == 1)
2605 continue;
2606
2607 r = address_remove(address, link, NULL);
2608 if (r < 0)
2609 return r;
2610
2611 /* If this address came from an address pool, clean up the pool */
2612 LIST_FOREACH(addresses, pool_address, link->pool_addresses) {
2613 if (address_equal(address, pool_address)) {
2614 LIST_REMOVE(addresses, link->pool_addresses, pool_address);
2615 address_free(pool_address);
2616 break;
2617 }
2618 }
2619 }
2620
2621 SET_FOREACH(route, link->routes, i) {
2622 /* do not touch routes managed by the kernel */
2623 if (route->protocol == RTPROT_KERNEL)
2624 continue;
2625
2626 r = route_remove(route, link, NULL);
2627 if (r < 0)
2628 return r;
2629 }
2630
2631 ndisc_flush(link);
2632
2633 return 0;
2634 }
2635
2636 static int link_configure(Link *link) {
2637 int r;
2638
2639 assert(link);
2640 assert(link->network);
2641 assert(link->state == LINK_STATE_INITIALIZED);
2642
2643 if (STRPTR_IN_SET(link->kind, "can", "vcan"))
2644 return link_configure_can(link);
2645
2646 /* Drop foreign config, but ignore loopback or critical devices.
2647 * We do not want to remove loopback address or addresses used for root NFS. */
2648 if (!(link->flags & IFF_LOOPBACK) && !(link->network->dhcp_critical)) {
2649 r = link_drop_foreign_config(link);
2650 if (r < 0)
2651 return r;
2652 }
2653
2654 r = link_set_proxy_arp(link);
2655 if (r < 0)
2656 return r;
2657
2658 r = ipv6_proxy_ndp_addresses_configure(link);
2659 if (r < 0)
2660 return r;
2661
2662 r = link_set_ipv4_forward(link);
2663 if (r < 0)
2664 return r;
2665
2666 r = link_set_ipv6_forward(link);
2667 if (r < 0)
2668 return r;
2669
2670 r = link_set_ipv6_privacy_extensions(link);
2671 if (r < 0)
2672 return r;
2673
2674 r = link_set_ipv6_accept_ra(link);
2675 if (r < 0)
2676 return r;
2677
2678 r = link_set_ipv6_dad_transmits(link);
2679 if (r < 0)
2680 return r;
2681
2682 r = link_set_ipv6_hop_limit(link);
2683 if (r < 0)
2684 return r;
2685
2686 r = link_set_flags(link);
2687 if (r < 0)
2688 return r;
2689
2690 r = link_set_ipv6_mtu(link);
2691 if (r < 0)
2692 return r;
2693
2694 if (link_ipv4ll_enabled(link) || link_ipv4ll_fallback_enabled(link)) {
2695 r = ipv4ll_configure(link);
2696 if (r < 0)
2697 return r;
2698 }
2699
2700 if (link_dhcp4_enabled(link)) {
2701 r = dhcp4_set_promote_secondaries(link);
2702 if (r < 0)
2703 return r;
2704
2705 r = dhcp4_configure(link);
2706 if (r < 0)
2707 return r;
2708 }
2709
2710 if (link_dhcp4_server_enabled(link)) {
2711 r = sd_dhcp_server_new(&link->dhcp_server, link->ifindex);
2712 if (r < 0)
2713 return r;
2714
2715 r = sd_dhcp_server_attach_event(link->dhcp_server, NULL, 0);
2716 if (r < 0)
2717 return r;
2718 }
2719
2720 if (link_dhcp6_enabled(link) ||
2721 link_ipv6_accept_ra_enabled(link)) {
2722 r = dhcp6_configure(link);
2723 if (r < 0)
2724 return r;
2725 }
2726
2727 if (link_ipv6_accept_ra_enabled(link)) {
2728 r = ndisc_configure(link);
2729 if (r < 0)
2730 return r;
2731 }
2732
2733 if (link_radv_enabled(link)) {
2734 r = radv_configure(link);
2735 if (r < 0)
2736 return r;
2737 }
2738
2739 if (link_lldp_rx_enabled(link)) {
2740 r = link_lldp_rx_configure(link);
2741 if (r < 0)
2742 return r;
2743 }
2744
2745 r = link_set_mtu(link, link->network->mtu, link->network->mtu_is_set);
2746 if (r < 0)
2747 return r;
2748
2749 if (socket_ipv6_is_supported()) {
2750 r = link_configure_addrgen_mode(link);
2751 if (r < 0)
2752 return r;
2753 }
2754
2755 return link_configure_after_setting_mtu(link);
2756 }
2757
2758 static int link_configure_after_setting_mtu(Link *link) {
2759 int r;
2760
2761 assert(link);
2762 assert(link->network);
2763 assert(link->state == LINK_STATE_INITIALIZED);
2764
2765 if (link->setting_mtu)
2766 return 0;
2767
2768 if (link_has_carrier(link) || link->network->configure_without_carrier) {
2769 r = link_acquire_conf(link);
2770 if (r < 0)
2771 return r;
2772 }
2773
2774 return link_enter_join_netdev(link);
2775 }
2776
2777 static int duid_set_uuid(DUID *duid, sd_id128_t uuid) {
2778 assert(duid);
2779
2780 if (duid->raw_data_len > 0)
2781 return 0;
2782
2783 if (duid->type != DUID_TYPE_UUID)
2784 return -EINVAL;
2785
2786 memcpy(&duid->raw_data, &uuid, sizeof(sd_id128_t));
2787 duid->raw_data_len = sizeof(sd_id128_t);
2788
2789 return 1;
2790 }
2791
2792 int get_product_uuid_handler(sd_bus_message *m, void *userdata, sd_bus_error *ret_error) {
2793 Manager *manager = userdata;
2794 const sd_bus_error *e;
2795 const void *a;
2796 size_t sz;
2797 DUID *duid;
2798 Link *link;
2799 int r;
2800
2801 assert(m);
2802 assert(manager);
2803
2804 e = sd_bus_message_get_error(m);
2805 if (e) {
2806 log_error_errno(sd_bus_error_get_errno(e),
2807 "Could not get product UUID. Falling back to use machine-app-specific ID as DUID-UUID: %s",
2808 e->message);
2809 goto configure;
2810 }
2811
2812 r = sd_bus_message_read_array(m, 'y', &a, &sz);
2813 if (r < 0)
2814 goto configure;
2815
2816 if (sz != sizeof(sd_id128_t)) {
2817 log_error("Invalid product UUID. Falling back to use machine-app-specific ID as DUID-UUID.");
2818 goto configure;
2819 }
2820
2821 memcpy(&manager->product_uuid, a, sz);
2822 while ((duid = set_steal_first(manager->duids_requesting_uuid)))
2823 (void) duid_set_uuid(duid, manager->product_uuid);
2824
2825 manager->duids_requesting_uuid = set_free(manager->duids_requesting_uuid);
2826
2827 configure:
2828 while ((link = set_steal_first(manager->links_requesting_uuid))) {
2829 r = link_configure(link);
2830 if (r < 0)
2831 log_link_error_errno(link, r, "Failed to configure link: %m");
2832 }
2833
2834 manager->links_requesting_uuid = set_free(manager->links_requesting_uuid);
2835
2836 /* To avoid calling GetProductUUID() bus method so frequently, set the flag below
2837 * even if the method fails. */
2838 manager->has_product_uuid = true;
2839
2840 return 1;
2841 }
2842
2843 static bool link_requires_uuid(Link *link) {
2844 const DUID *duid;
2845
2846 assert(link);
2847 assert(link->manager);
2848 assert(link->network);
2849
2850 duid = link_get_duid(link);
2851 if (duid->type != DUID_TYPE_UUID || duid->raw_data_len != 0)
2852 return false;
2853
2854 if (link_dhcp4_enabled(link) && IN_SET(link->network->dhcp_client_identifier, DHCP_CLIENT_ID_DUID, DHCP_CLIENT_ID_DUID_ONLY))
2855 return true;
2856
2857 if (link_dhcp6_enabled(link) || link_ipv6_accept_ra_enabled(link))
2858 return true;
2859
2860 return false;
2861 }
2862
2863 static int link_configure_duid(Link *link) {
2864 Manager *m;
2865 DUID *duid;
2866 int r;
2867
2868 assert(link);
2869 assert(link->manager);
2870 assert(link->network);
2871
2872 m = link->manager;
2873 duid = link_get_duid(link);
2874
2875 if (!link_requires_uuid(link))
2876 return 1;
2877
2878 if (m->has_product_uuid) {
2879 (void) duid_set_uuid(duid, m->product_uuid);
2880 return 1;
2881 }
2882
2883 if (!m->links_requesting_uuid) {
2884 r = manager_request_product_uuid(m, link);
2885 if (r < 0) {
2886 if (r == -ENOMEM)
2887 return r;
2888
2889 log_link_warning_errno(link, r,
2890 "Failed to get product UUID. Falling back to use machine-app-specific ID as DUID-UUID: %m");
2891 return 1;
2892 }
2893 } else {
2894 r = set_put(m->links_requesting_uuid, link);
2895 if (r < 0)
2896 return log_oom();
2897
2898 r = set_put(m->duids_requesting_uuid, duid);
2899 if (r < 0)
2900 return log_oom();
2901 }
2902
2903 return 0;
2904 }
2905
2906 static int link_initialized_and_synced(Link *link) {
2907 Network *network;
2908 int r;
2909
2910 assert(link);
2911 assert(link->ifname);
2912 assert(link->manager);
2913
2914 /* We may get called either from the asynchronous netlink callback,
2915 * or directly for link_add() if running in a container. See link_add(). */
2916 if (!IN_SET(link->state, LINK_STATE_PENDING, LINK_STATE_INITIALIZED))
2917 return 0;
2918
2919 log_link_debug(link, "Link state is up-to-date");
2920 link_set_state(link, LINK_STATE_INITIALIZED);
2921
2922 r = link_new_bound_by_list(link);
2923 if (r < 0)
2924 return r;
2925
2926 r = link_handle_bound_by_list(link);
2927 if (r < 0)
2928 return r;
2929
2930 if (!link->network) {
2931 r = network_get(link->manager, link->sd_device, link->ifname,
2932 &link->mac, &network);
2933 if (r == -ENOENT) {
2934 link_enter_unmanaged(link);
2935 return 0;
2936 } else if (r == 0 && network->unmanaged) {
2937 link_enter_unmanaged(link);
2938 return 0;
2939 } else if (r < 0)
2940 return r;
2941
2942 if (link->flags & IFF_LOOPBACK) {
2943 if (network->link_local != ADDRESS_FAMILY_NO)
2944 log_link_debug(link, "Ignoring link-local autoconfiguration for loopback link");
2945
2946 if (network->dhcp != ADDRESS_FAMILY_NO)
2947 log_link_debug(link, "Ignoring DHCP clients for loopback link");
2948
2949 if (network->dhcp_server)
2950 log_link_debug(link, "Ignoring DHCP server for loopback link");
2951 }
2952
2953 r = network_apply(network, link);
2954 if (r < 0)
2955 return r;
2956 }
2957
2958 r = link_new_bound_to_list(link);
2959 if (r < 0)
2960 return r;
2961
2962 /* link_configure_duid() returns 0 if it requests product UUID. In that case,
2963 * link_configure() is called later asynchronously. */
2964 r = link_configure_duid(link);
2965 if (r <= 0)
2966 return r;
2967
2968 r = link_configure(link);
2969 if (r < 0)
2970 return r;
2971
2972 return 0;
2973 }
2974
2975 static int link_initialized_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
2976 (void) link_initialized_and_synced(link);
2977 return 1;
2978 }
2979
2980 int link_initialized(Link *link, sd_device *device) {
2981 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
2982 int r;
2983
2984 assert(link);
2985 assert(link->manager);
2986 assert(link->manager->rtnl);
2987 assert(device);
2988
2989 if (link->state != LINK_STATE_PENDING)
2990 return 0;
2991
2992 if (link->sd_device)
2993 return 0;
2994
2995 log_link_debug(link, "udev initialized link");
2996 link_set_state(link, LINK_STATE_INITIALIZED);
2997
2998 link->sd_device = sd_device_ref(device);
2999
3000 /* udev has initialized the link, but we don't know if we have yet
3001 * processed the NEWLINK messages with the latest state. Do a GETLINK,
3002 * when it returns we know that the pending NEWLINKs have already been
3003 * processed and that we are up-to-date */
3004
3005 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_GETLINK,
3006 link->ifindex);
3007 if (r < 0)
3008 return r;
3009
3010 r = netlink_call_async(link->manager->rtnl, NULL, req, link_initialized_handler,
3011 link_netlink_destroy_callback, link);
3012 if (r < 0)
3013 return r;
3014
3015 link_ref(link);
3016
3017 return 0;
3018 }
3019
3020 static int link_load(Link *link) {
3021 _cleanup_free_ char *network_file = NULL,
3022 *addresses = NULL,
3023 *routes = NULL,
3024 *dhcp4_address = NULL,
3025 *ipv4ll_address = NULL;
3026 union in_addr_union address;
3027 union in_addr_union route_dst;
3028 const char *p;
3029 int r;
3030
3031 assert(link);
3032
3033 r = parse_env_file(NULL, link->state_file,
3034 "NETWORK_FILE", &network_file,
3035 "ADDRESSES", &addresses,
3036 "ROUTES", &routes,
3037 "DHCP4_ADDRESS", &dhcp4_address,
3038 "IPV4LL_ADDRESS", &ipv4ll_address);
3039 if (r < 0 && r != -ENOENT)
3040 return log_link_error_errno(link, r, "Failed to read %s: %m", link->state_file);
3041
3042 if (network_file) {
3043 Network *network;
3044 char *suffix;
3045
3046 /* drop suffix */
3047 suffix = strrchr(network_file, '.');
3048 if (!suffix) {
3049 log_link_debug(link, "Failed to get network name from %s", network_file);
3050 goto network_file_fail;
3051 }
3052 *suffix = '\0';
3053
3054 r = network_get_by_name(link->manager, basename(network_file), &network);
3055 if (r < 0) {
3056 log_link_debug_errno(link, r, "Failed to get network %s: %m", basename(network_file));
3057 goto network_file_fail;
3058 }
3059
3060 r = network_apply(network, link);
3061 if (r < 0)
3062 return log_link_error_errno(link, r, "Failed to apply network %s: %m", basename(network_file));
3063 }
3064
3065 network_file_fail:
3066
3067 if (addresses) {
3068 p = addresses;
3069
3070 for (;;) {
3071 _cleanup_free_ char *address_str = NULL;
3072 char *prefixlen_str;
3073 int family;
3074 unsigned char prefixlen;
3075
3076 r = extract_first_word(&p, &address_str, NULL, 0);
3077 if (r < 0) {
3078 log_link_debug_errno(link, r, "Failed to extract next address string: %m");
3079 continue;
3080 }
3081 if (r == 0)
3082 break;
3083
3084 prefixlen_str = strchr(address_str, '/');
3085 if (!prefixlen_str) {
3086 log_link_debug(link, "Failed to parse address and prefix length %s", address_str);
3087 continue;
3088 }
3089
3090 *prefixlen_str++ = '\0';
3091
3092 r = sscanf(prefixlen_str, "%hhu", &prefixlen);
3093 if (r != 1) {
3094 log_link_error(link, "Failed to parse prefixlen %s", prefixlen_str);
3095 continue;
3096 }
3097
3098 r = in_addr_from_string_auto(address_str, &family, &address);
3099 if (r < 0) {
3100 log_link_debug_errno(link, r, "Failed to parse address %s: %m", address_str);
3101 continue;
3102 }
3103
3104 r = address_add(link, family, &address, prefixlen, NULL);
3105 if (r < 0)
3106 return log_link_error_errno(link, r, "Failed to add address: %m");
3107 }
3108 }
3109
3110 if (routes) {
3111 p = routes;
3112
3113 for (;;) {
3114 Route *route;
3115 _cleanup_free_ char *route_str = NULL;
3116 _cleanup_(sd_event_source_unrefp) sd_event_source *expire = NULL;
3117 usec_t lifetime;
3118 char *prefixlen_str;
3119 int family;
3120 unsigned char prefixlen, tos, table;
3121 uint32_t priority;
3122
3123 r = extract_first_word(&p, &route_str, NULL, 0);
3124 if (r < 0) {
3125 log_link_debug_errno(link, r, "Failed to extract next route string: %m");
3126 continue;
3127 }
3128 if (r == 0)
3129 break;
3130
3131 prefixlen_str = strchr(route_str, '/');
3132 if (!prefixlen_str) {
3133 log_link_debug(link, "Failed to parse route %s", route_str);
3134 continue;
3135 }
3136
3137 *prefixlen_str++ = '\0';
3138
3139 r = sscanf(prefixlen_str, "%hhu/%hhu/%"SCNu32"/%hhu/"USEC_FMT, &prefixlen, &tos, &priority, &table, &lifetime);
3140 if (r != 5) {
3141 log_link_debug(link,
3142 "Failed to parse destination prefix length, tos, priority, table or expiration %s",
3143 prefixlen_str);
3144 continue;
3145 }
3146
3147 r = in_addr_from_string_auto(route_str, &family, &route_dst);
3148 if (r < 0) {
3149 log_link_debug_errno(link, r, "Failed to parse route destination %s: %m", route_str);
3150 continue;
3151 }
3152
3153 r = route_add(link, family, &route_dst, prefixlen, tos, priority, table, &route);
3154 if (r < 0)
3155 return log_link_error_errno(link, r, "Failed to add route: %m");
3156
3157 if (lifetime != USEC_INFINITY && !kernel_route_expiration_supported()) {
3158 r = sd_event_add_time(link->manager->event, &expire, clock_boottime_or_monotonic(), lifetime,
3159 0, route_expire_handler, route);
3160 if (r < 0)
3161 log_link_warning_errno(link, r, "Could not arm route expiration handler: %m");
3162 }
3163
3164 route->lifetime = lifetime;
3165 sd_event_source_unref(route->expire);
3166 route->expire = TAKE_PTR(expire);
3167 }
3168 }
3169
3170 if (dhcp4_address) {
3171 r = in_addr_from_string(AF_INET, dhcp4_address, &address);
3172 if (r < 0) {
3173 log_link_debug_errno(link, r, "Failed to parse DHCPv4 address %s: %m", dhcp4_address);
3174 goto dhcp4_address_fail;
3175 }
3176
3177 r = sd_dhcp_client_new(&link->dhcp_client, link->network ? link->network->dhcp_anonymize : 0);
3178 if (r < 0)
3179 return log_link_error_errno(link, r, "Failed to create DHCPv4 client: %m");
3180
3181 r = sd_dhcp_client_set_request_address(link->dhcp_client, &address.in);
3182 if (r < 0)
3183 return log_link_error_errno(link, r, "Failed to set initial DHCPv4 address %s: %m", dhcp4_address);
3184 }
3185
3186 dhcp4_address_fail:
3187
3188 if (ipv4ll_address) {
3189 r = in_addr_from_string(AF_INET, ipv4ll_address, &address);
3190 if (r < 0) {
3191 log_link_debug_errno(link, r, "Failed to parse IPv4LL address %s: %m", ipv4ll_address);
3192 goto ipv4ll_address_fail;
3193 }
3194
3195 r = sd_ipv4ll_new(&link->ipv4ll);
3196 if (r < 0)
3197 return log_link_error_errno(link, r, "Failed to create IPv4LL client: %m");
3198
3199 r = sd_ipv4ll_set_address(link->ipv4ll, &address.in);
3200 if (r < 0)
3201 return log_link_error_errno(link, r, "Failed to set initial IPv4LL address %s: %m", ipv4ll_address);
3202 }
3203
3204 ipv4ll_address_fail:
3205
3206 return 0;
3207 }
3208
3209 int link_add(Manager *m, sd_netlink_message *message, Link **ret) {
3210 _cleanup_(sd_device_unrefp) sd_device *device = NULL;
3211 char ifindex_str[2 + DECIMAL_STR_MAX(int)];
3212 Link *link;
3213 int r;
3214
3215 assert(m);
3216 assert(m->rtnl);
3217 assert(message);
3218 assert(ret);
3219
3220 r = link_new(m, message, ret);
3221 if (r < 0)
3222 return r;
3223
3224 link = *ret;
3225
3226 log_link_debug(link, "Link %d added", link->ifindex);
3227
3228 r = link_load(link);
3229 if (r < 0)
3230 return r;
3231
3232 if (detect_container() <= 0) {
3233 /* not in a container, udev will be around */
3234 sprintf(ifindex_str, "n%d", link->ifindex);
3235 r = sd_device_new_from_device_id(&device, ifindex_str);
3236 if (r < 0) {
3237 log_link_warning_errno(link, r, "Could not find device: %m");
3238 goto failed;
3239 }
3240
3241 r = sd_device_get_is_initialized(device);
3242 if (r < 0) {
3243 log_link_warning_errno(link, r, "Could not determine whether the device is initialized or not: %m");
3244 goto failed;
3245 }
3246 if (r == 0) {
3247 /* not yet ready */
3248 log_link_debug(link, "link pending udev initialization...");
3249 return 0;
3250 }
3251
3252 r = device_is_renaming(device);
3253 if (r < 0) {
3254 log_link_warning_errno(link, r, "Failed to determine the device is renamed or not: %m");
3255 goto failed;
3256 }
3257 if (r > 0) {
3258 log_link_debug(link, "Interface is under renaming, pending initialization.");
3259 return 0;
3260 }
3261
3262 r = link_initialized(link, device);
3263 if (r < 0)
3264 goto failed;
3265 } else {
3266 r = link_initialized_and_synced(link);
3267 if (r < 0)
3268 goto failed;
3269 }
3270
3271 return 0;
3272 failed:
3273 link_enter_failed(link);
3274 return r;
3275 }
3276
3277 int link_ipv6ll_gained(Link *link, const struct in6_addr *address) {
3278 int r;
3279
3280 assert(link);
3281
3282 log_link_info(link, "Gained IPv6LL");
3283
3284 link->ipv6ll_address = *address;
3285 link_check_ready(link);
3286
3287 if (IN_SET(link->state, LINK_STATE_CONFIGURING, LINK_STATE_CONFIGURED)) {
3288 r = link_acquire_ipv6_conf(link);
3289 if (r < 0) {
3290 link_enter_failed(link);
3291 return r;
3292 }
3293 }
3294
3295 return 0;
3296 }
3297
3298 static int link_carrier_gained(Link *link) {
3299 int r;
3300
3301 assert(link);
3302
3303 if (IN_SET(link->state, LINK_STATE_CONFIGURING, LINK_STATE_CONFIGURED)) {
3304 r = link_acquire_conf(link);
3305 if (r < 0) {
3306 link_enter_failed(link);
3307 return r;
3308 }
3309
3310 r = link_request_set_addresses(link);
3311 if (r < 0)
3312 return r;
3313 }
3314
3315 r = link_handle_bound_by_list(link);
3316 if (r < 0)
3317 return r;
3318
3319 return 0;
3320 }
3321
3322 static int link_carrier_lost(Link *link) {
3323 int r;
3324
3325 assert(link);
3326
3327 if (link->network && link->network->ignore_carrier_loss)
3328 return 0;
3329
3330 /* Some devices reset itself while setting the MTU. This causes the DHCP client fall into a loop.
3331 * setting_mtu keep track whether the device got reset because of setting MTU and does not drop the
3332 * configuration and stop the clients as well. */
3333 if (link->setting_mtu)
3334 return 0;
3335
3336 r = link_stop_clients(link);
3337 if (r < 0) {
3338 link_enter_failed(link);
3339 return r;
3340 }
3341
3342 if (link_dhcp4_server_enabled(link))
3343 (void) sd_dhcp_server_stop(link->dhcp_server);
3344
3345 r = link_drop_config(link);
3346 if (r < 0)
3347 return r;
3348
3349 if (!IN_SET(link->state, LINK_STATE_UNMANAGED, LINK_STATE_PENDING)) {
3350 log_link_debug(link, "State is %s, dropping config", link_state_to_string(link->state));
3351 r = link_drop_foreign_config(link);
3352 if (r < 0)
3353 return r;
3354 }
3355
3356 r = link_handle_bound_by_list(link);
3357 if (r < 0)
3358 return r;
3359
3360 return 0;
3361 }
3362
3363 int link_carrier_reset(Link *link) {
3364 int r;
3365
3366 assert(link);
3367
3368 if (link_has_carrier(link)) {
3369 r = link_carrier_lost(link);
3370 if (r < 0)
3371 return r;
3372
3373 r = link_carrier_gained(link);
3374 if (r < 0)
3375 return r;
3376
3377 log_link_info(link, "Reset carrier");
3378 }
3379
3380 return 0;
3381 }
3382
3383 int link_update(Link *link, sd_netlink_message *m) {
3384 struct ether_addr mac;
3385 const char *ifname;
3386 uint32_t mtu;
3387 bool had_carrier, carrier_gained, carrier_lost;
3388 int r;
3389
3390 assert(link);
3391 assert(link->ifname);
3392 assert(m);
3393
3394 if (link->state == LINK_STATE_LINGER) {
3395 log_link_info(link, "Link re-added");
3396 link_set_state(link, LINK_STATE_CONFIGURING);
3397
3398 r = link_new_carrier_maps(link);
3399 if (r < 0)
3400 return r;
3401 }
3402
3403 r = sd_netlink_message_read_string(m, IFLA_IFNAME, &ifname);
3404 if (r >= 0 && !streq(ifname, link->ifname)) {
3405 Manager *manager = link->manager;
3406
3407 log_link_info(link, "Interface name change detected, %s has been renamed to %s.", link->ifname, ifname);
3408
3409 link_drop(link);
3410 r = link_add(manager, m, &link);
3411 if (r < 0)
3412 return r;
3413 }
3414
3415 r = sd_netlink_message_read_u32(m, IFLA_MTU, &mtu);
3416 if (r >= 0 && mtu > 0) {
3417 link->mtu = mtu;
3418 if (link->original_mtu == 0) {
3419 link->original_mtu = mtu;
3420 log_link_debug(link, "Saved original MTU: %" PRIu32, link->original_mtu);
3421 }
3422
3423 if (link->dhcp_client) {
3424 r = sd_dhcp_client_set_mtu(link->dhcp_client,
3425 link->mtu);
3426 if (r < 0)
3427 return log_link_warning_errno(link, r, "Could not update MTU in DHCP client: %m");
3428 }
3429
3430 if (link->radv) {
3431 r = sd_radv_set_mtu(link->radv, link->mtu);
3432 if (r < 0)
3433 return log_link_warning_errno(link, r, "Could not set MTU for Router Advertisement: %m");
3434 }
3435 }
3436
3437 /* The kernel may broadcast NEWLINK messages without the MAC address
3438 set, simply ignore them. */
3439 r = sd_netlink_message_read_ether_addr(m, IFLA_ADDRESS, &mac);
3440 if (r >= 0) {
3441 if (memcmp(link->mac.ether_addr_octet, mac.ether_addr_octet,
3442 ETH_ALEN)) {
3443
3444 memcpy(link->mac.ether_addr_octet, mac.ether_addr_octet,
3445 ETH_ALEN);
3446
3447 log_link_debug(link, "MAC address: "
3448 "%02hhx:%02hhx:%02hhx:%02hhx:%02hhx:%02hhx",
3449 mac.ether_addr_octet[0],
3450 mac.ether_addr_octet[1],
3451 mac.ether_addr_octet[2],
3452 mac.ether_addr_octet[3],
3453 mac.ether_addr_octet[4],
3454 mac.ether_addr_octet[5]);
3455
3456 if (link->ipv4ll) {
3457 r = sd_ipv4ll_set_mac(link->ipv4ll, &link->mac);
3458 if (r < 0)
3459 return log_link_warning_errno(link, r, "Could not update MAC address in IPv4LL client: %m");
3460 }
3461
3462 if (link->dhcp_client) {
3463 r = sd_dhcp_client_set_mac(link->dhcp_client,
3464 (const uint8_t *) &link->mac,
3465 sizeof (link->mac),
3466 ARPHRD_ETHER);
3467 if (r < 0)
3468 return log_link_warning_errno(link, r, "Could not update MAC address in DHCP client: %m");
3469
3470 r = dhcp4_set_client_identifier(link);
3471 if (r < 0)
3472 return r;
3473 }
3474
3475 if (link->dhcp6_client) {
3476 const DUID* duid = link_get_duid(link);
3477
3478 r = sd_dhcp6_client_set_mac(link->dhcp6_client,
3479 (const uint8_t *) &link->mac,
3480 sizeof (link->mac),
3481 ARPHRD_ETHER);
3482 if (r < 0)
3483 return log_link_warning_errno(link, r, "Could not update MAC address in DHCPv6 client: %m");
3484
3485 if (link->network->iaid_set) {
3486 r = sd_dhcp6_client_set_iaid(link->dhcp6_client,
3487 link->network->iaid);
3488 if (r < 0)
3489 return log_link_warning_errno(link, r, "Could not update DHCPv6 IAID: %m");
3490 }
3491
3492 r = sd_dhcp6_client_set_duid(link->dhcp6_client,
3493 duid->type,
3494 duid->raw_data_len > 0 ? duid->raw_data : NULL,
3495 duid->raw_data_len);
3496 if (r < 0)
3497 return log_link_warning_errno(link, r, "Could not update DHCPv6 DUID: %m");
3498 }
3499
3500 if (link->radv) {
3501 r = sd_radv_set_mac(link->radv, &link->mac);
3502 if (r < 0)
3503 return log_link_warning_errno(link, r, "Could not update MAC for Router Advertisement: %m");
3504 }
3505
3506 if (link->ndisc) {
3507 r = sd_ndisc_set_mac(link->ndisc, &link->mac);
3508 if (r < 0)
3509 return log_link_warning_errno(link, r, "Could not update MAC for ndisc: %m");
3510 }
3511 }
3512 }
3513
3514 had_carrier = link_has_carrier(link);
3515
3516 r = link_update_flags(link, m);
3517 if (r < 0)
3518 return r;
3519
3520 r = link_update_lldp(link);
3521 if (r < 0)
3522 return r;
3523
3524 carrier_gained = !had_carrier && link_has_carrier(link);
3525 carrier_lost = had_carrier && !link_has_carrier(link);
3526
3527 if (carrier_gained) {
3528 log_link_info(link, "Gained carrier");
3529
3530 r = link_carrier_gained(link);
3531 if (r < 0)
3532 return r;
3533 } else if (carrier_lost) {
3534 log_link_info(link, "Lost carrier");
3535
3536 r = link_carrier_lost(link);
3537 if (r < 0)
3538 return r;
3539 }
3540
3541 return 0;
3542 }
3543
3544 static void print_link_hashmap(FILE *f, const char *prefix, Hashmap* h) {
3545 bool space = false;
3546 Iterator i;
3547 Link *link;
3548
3549 assert(f);
3550 assert(prefix);
3551
3552 if (hashmap_isempty(h))
3553 return;
3554
3555 fputs(prefix, f);
3556 HASHMAP_FOREACH(link, h, i) {
3557 if (space)
3558 fputc(' ', f);
3559
3560 fprintf(f, "%i", link->ifindex);
3561 space = true;
3562 }
3563
3564 fputc('\n', f);
3565 }
3566
3567 int link_save(Link *link) {
3568 _cleanup_free_ char *temp_path = NULL;
3569 _cleanup_fclose_ FILE *f = NULL;
3570 const char *admin_state, *oper_state;
3571 Address *a;
3572 Route *route;
3573 Iterator i;
3574 int r;
3575
3576 assert(link);
3577 assert(link->state_file);
3578 assert(link->lease_file);
3579 assert(link->manager);
3580
3581 if (link->state == LINK_STATE_LINGER) {
3582 (void) unlink(link->state_file);
3583 return 0;
3584 }
3585
3586 link_lldp_save(link);
3587
3588 admin_state = link_state_to_string(link->state);
3589 assert(admin_state);
3590
3591 oper_state = link_operstate_to_string(link->operstate);
3592 assert(oper_state);
3593
3594 r = fopen_temporary(link->state_file, &f, &temp_path);
3595 if (r < 0)
3596 goto fail;
3597
3598 (void) fchmod(fileno(f), 0644);
3599
3600 fprintf(f,
3601 "# This is private data. Do not parse.\n"
3602 "ADMIN_STATE=%s\n"
3603 "OPER_STATE=%s\n",
3604 admin_state, oper_state);
3605
3606 if (link->network) {
3607 bool space;
3608 sd_dhcp6_lease *dhcp6_lease = NULL;
3609 const char *dhcp_domainname = NULL;
3610 char **dhcp6_domains = NULL;
3611 char **dhcp_domains = NULL;
3612 unsigned j;
3613
3614 fprintf(f, "REQUIRED_FOR_ONLINE=%s\n",
3615 yes_no(link->network->required_for_online));
3616
3617 fprintf(f, "REQUIRED_OPER_STATE_FOR_ONLINE=%s\n",
3618 strempty(link_operstate_to_string(link->network->required_operstate_for_online)));
3619
3620 if (link->dhcp6_client) {
3621 r = sd_dhcp6_client_get_lease(link->dhcp6_client, &dhcp6_lease);
3622 if (r < 0 && r != -ENOMSG)
3623 log_link_debug(link, "No DHCPv6 lease");
3624 }
3625
3626 fprintf(f, "NETWORK_FILE=%s\n", link->network->filename);
3627
3628 fputs("DNS=", f);
3629 space = false;
3630
3631 for (j = 0; j < link->network->n_dns; j++) {
3632 _cleanup_free_ char *b = NULL;
3633
3634 r = in_addr_to_string(link->network->dns[j].family,
3635 &link->network->dns[j].address, &b);
3636 if (r < 0) {
3637 log_debug_errno(r, "Failed to format address, ignoring: %m");
3638 continue;
3639 }
3640
3641 if (space)
3642 fputc(' ', f);
3643 fputs(b, f);
3644 space = true;
3645 }
3646
3647 if (link->network->dhcp_use_dns &&
3648 link->dhcp_lease) {
3649 const struct in_addr *addresses;
3650
3651 r = sd_dhcp_lease_get_dns(link->dhcp_lease, &addresses);
3652 if (r > 0)
3653 if (serialize_in_addrs(f, addresses, r, space, in4_addr_is_non_local) > 0)
3654 space = true;
3655 }
3656
3657 if (link->network->dhcp_use_dns && dhcp6_lease) {
3658 struct in6_addr *in6_addrs;
3659
3660 r = sd_dhcp6_lease_get_dns(dhcp6_lease, &in6_addrs);
3661 if (r > 0) {
3662 if (space)
3663 fputc(' ', f);
3664 serialize_in6_addrs(f, in6_addrs, r);
3665 space = true;
3666 }
3667 }
3668
3669 /* Make sure to flush out old entries before we use the NDISC data */
3670 ndisc_vacuum(link);
3671
3672 if (link->network->ipv6_accept_ra_use_dns && link->ndisc_rdnss) {
3673 NDiscRDNSS *dd;
3674
3675 SET_FOREACH(dd, link->ndisc_rdnss, i) {
3676 if (space)
3677 fputc(' ', f);
3678
3679 serialize_in6_addrs(f, &dd->address, 1);
3680 space = true;
3681 }
3682 }
3683
3684 fputc('\n', f);
3685
3686 fputs("NTP=", f);
3687 space = false;
3688 fputstrv(f, link->network->ntp, NULL, &space);
3689
3690 if (link->network->dhcp_use_ntp &&
3691 link->dhcp_lease) {
3692 const struct in_addr *addresses;
3693
3694 r = sd_dhcp_lease_get_ntp(link->dhcp_lease, &addresses);
3695 if (r > 0)
3696 if (serialize_in_addrs(f, addresses, r, space, in4_addr_is_non_local) > 0)
3697 space = true;
3698 }
3699
3700 if (link->network->dhcp_use_ntp && dhcp6_lease) {
3701 struct in6_addr *in6_addrs;
3702 char **hosts;
3703
3704 r = sd_dhcp6_lease_get_ntp_addrs(dhcp6_lease,
3705 &in6_addrs);
3706 if (r > 0) {
3707 if (space)
3708 fputc(' ', f);
3709 serialize_in6_addrs(f, in6_addrs, r);
3710 space = true;
3711 }
3712
3713 r = sd_dhcp6_lease_get_ntp_fqdn(dhcp6_lease, &hosts);
3714 if (r > 0)
3715 fputstrv(f, hosts, NULL, &space);
3716 }
3717
3718 fputc('\n', f);
3719
3720 if (link->network->dhcp_use_domains != DHCP_USE_DOMAINS_NO) {
3721 if (link->dhcp_lease) {
3722 (void) sd_dhcp_lease_get_domainname(link->dhcp_lease, &dhcp_domainname);
3723 (void) sd_dhcp_lease_get_search_domains(link->dhcp_lease, &dhcp_domains);
3724 }
3725 if (dhcp6_lease)
3726 (void) sd_dhcp6_lease_get_domains(dhcp6_lease, &dhcp6_domains);
3727 }
3728
3729 ordered_set_print(f, "DOMAINS=", link->network->search_domains);
3730
3731 if (link->network->dhcp_use_domains == DHCP_USE_DOMAINS_YES) {
3732 NDiscDNSSL *dd;
3733
3734 if (dhcp_domainname)
3735 fputs_with_space(f, dhcp_domainname, NULL, &space);
3736 if (dhcp_domains)
3737 fputstrv(f, dhcp_domains, NULL, &space);
3738 if (dhcp6_domains)
3739 fputstrv(f, dhcp6_domains, NULL, &space);
3740
3741 SET_FOREACH(dd, link->ndisc_dnssl, i)
3742 fputs_with_space(f, NDISC_DNSSL_DOMAIN(dd), NULL, &space);
3743 }
3744
3745 fputc('\n', f);
3746
3747 ordered_set_print(f, "ROUTE_DOMAINS=", link->network->route_domains);
3748
3749 if (link->network->dhcp_use_domains == DHCP_USE_DOMAINS_ROUTE) {
3750 NDiscDNSSL *dd;
3751
3752 if (dhcp_domainname)
3753 fputs_with_space(f, dhcp_domainname, NULL, &space);
3754 if (dhcp_domains)
3755 fputstrv(f, dhcp_domains, NULL, &space);
3756 if (dhcp6_domains)
3757 fputstrv(f, dhcp6_domains, NULL, &space);
3758
3759 SET_FOREACH(dd, link->ndisc_dnssl, i)
3760 fputs_with_space(f, NDISC_DNSSL_DOMAIN(dd), NULL, &space);
3761 }
3762
3763 fputc('\n', f);
3764
3765 fprintf(f, "LLMNR=%s\n",
3766 resolve_support_to_string(link->network->llmnr));
3767 fprintf(f, "MDNS=%s\n",
3768 resolve_support_to_string(link->network->mdns));
3769 if (link->network->dns_default_route >= 0)
3770 fprintf(f, "DNS_DEFAULT_ROUTE=%s\n", yes_no(link->network->dns_default_route));
3771
3772 if (link->network->dns_over_tls_mode != _DNS_OVER_TLS_MODE_INVALID)
3773 fprintf(f, "DNS_OVER_TLS=%s\n",
3774 dns_over_tls_mode_to_string(link->network->dns_over_tls_mode));
3775
3776 if (link->network->dnssec_mode != _DNSSEC_MODE_INVALID)
3777 fprintf(f, "DNSSEC=%s\n",
3778 dnssec_mode_to_string(link->network->dnssec_mode));
3779
3780 if (!set_isempty(link->network->dnssec_negative_trust_anchors)) {
3781 const char *n;
3782
3783 fputs("DNSSEC_NTA=", f);
3784 space = false;
3785 SET_FOREACH(n, link->network->dnssec_negative_trust_anchors, i)
3786 fputs_with_space(f, n, NULL, &space);
3787 fputc('\n', f);
3788 }
3789
3790 fputs("ADDRESSES=", f);
3791 space = false;
3792 SET_FOREACH(a, link->addresses, i) {
3793 _cleanup_free_ char *address_str = NULL;
3794
3795 r = in_addr_to_string(a->family, &a->in_addr, &address_str);
3796 if (r < 0)
3797 goto fail;
3798
3799 fprintf(f, "%s%s/%u", space ? " " : "", address_str, a->prefixlen);
3800 space = true;
3801 }
3802 fputc('\n', f);
3803
3804 fputs("ROUTES=", f);
3805 space = false;
3806 SET_FOREACH(route, link->routes, i) {
3807 _cleanup_free_ char *route_str = NULL;
3808
3809 r = in_addr_to_string(route->family, &route->dst, &route_str);
3810 if (r < 0)
3811 goto fail;
3812
3813 fprintf(f, "%s%s/%hhu/%hhu/%"PRIu32"/%"PRIu32"/"USEC_FMT,
3814 space ? " " : "", route_str,
3815 route->dst_prefixlen, route->tos, route->priority, route->table, route->lifetime);
3816 space = true;
3817 }
3818
3819 fputc('\n', f);
3820 }
3821
3822 print_link_hashmap(f, "CARRIER_BOUND_TO=", link->bound_to_links);
3823 print_link_hashmap(f, "CARRIER_BOUND_BY=", link->bound_by_links);
3824
3825 if (link->dhcp_lease) {
3826 struct in_addr address;
3827 const char *tz = NULL;
3828
3829 assert(link->network);
3830
3831 r = sd_dhcp_lease_get_timezone(link->dhcp_lease, &tz);
3832 if (r >= 0)
3833 fprintf(f, "TIMEZONE=%s\n", tz);
3834
3835 r = sd_dhcp_lease_get_address(link->dhcp_lease, &address);
3836 if (r >= 0) {
3837 fputs("DHCP4_ADDRESS=", f);
3838 serialize_in_addrs(f, &address, 1, false, NULL);
3839 fputc('\n', f);
3840 }
3841
3842 r = dhcp_lease_save(link->dhcp_lease, link->lease_file);
3843 if (r < 0)
3844 goto fail;
3845
3846 fprintf(f,
3847 "DHCP_LEASE=%s\n",
3848 link->lease_file);
3849 } else
3850 (void) unlink(link->lease_file);
3851
3852 if (link->ipv4ll) {
3853 struct in_addr address;
3854
3855 r = sd_ipv4ll_get_address(link->ipv4ll, &address);
3856 if (r >= 0) {
3857 fputs("IPV4LL_ADDRESS=", f);
3858 serialize_in_addrs(f, &address, 1, false, NULL);
3859 fputc('\n', f);
3860 }
3861 }
3862
3863 r = fflush_and_check(f);
3864 if (r < 0)
3865 goto fail;
3866
3867 if (rename(temp_path, link->state_file) < 0) {
3868 r = -errno;
3869 goto fail;
3870 }
3871
3872 return 0;
3873
3874 fail:
3875 (void) unlink(link->state_file);
3876 if (temp_path)
3877 (void) unlink(temp_path);
3878
3879 return log_link_error_errno(link, r, "Failed to save link data to %s: %m", link->state_file);
3880 }
3881
3882 /* The serialized state in /run is no longer up-to-date. */
3883 void link_dirty(Link *link) {
3884 int r;
3885
3886 assert(link);
3887
3888 /* mark manager dirty as link is dirty */
3889 manager_dirty(link->manager);
3890
3891 r = set_ensure_allocated(&link->manager->dirty_links, NULL);
3892 if (r < 0)
3893 /* allocation errors are ignored */
3894 return;
3895
3896 r = set_put(link->manager->dirty_links, link);
3897 if (r <= 0)
3898 /* don't take another ref if the link was already dirty */
3899 return;
3900
3901 link_ref(link);
3902 }
3903
3904 /* The serialized state in /run is up-to-date */
3905 void link_clean(Link *link) {
3906 assert(link);
3907 assert(link->manager);
3908
3909 link_unref(set_remove(link->manager->dirty_links, link));
3910 }
3911
3912 static const char* const link_state_table[_LINK_STATE_MAX] = {
3913 [LINK_STATE_PENDING] = "pending",
3914 [LINK_STATE_INITIALIZED] = "initialized",
3915 [LINK_STATE_CONFIGURING] = "configuring",
3916 [LINK_STATE_CONFIGURED] = "configured",
3917 [LINK_STATE_UNMANAGED] = "unmanaged",
3918 [LINK_STATE_FAILED] = "failed",
3919 [LINK_STATE_LINGER] = "linger",
3920 };
3921
3922 DEFINE_STRING_TABLE_LOOKUP(link_state, LinkState);
Unnamed repository; edit this file 'description' to name the repository.