]> git.ipfire.org Git - thirdparty/systemd.git/blob - src/network/networkd-link.c
projects / thirdparty / systemd.git / blob
? search:


f4ab8aadb80b3eb02cdb1ae7284c21b9ecdbbf05
[thirdparty/systemd.git] / src / network / networkd-link.c
1 /* SPDX-License-Identifier: LGPL-2.1+ */
2
3 #include <netinet/ether.h>
4 #include <linux/if.h>
5 #include <linux/can/netlink.h>
6 #include <unistd.h>
7 #include <stdio_ext.h>
8
9 #include "alloc-util.h"
10 #include "bus-util.h"
11 #include "dhcp-identifier.h"
12 #include "dhcp-lease-internal.h"
13 #include "fd-util.h"
14 #include "fileio.h"
15 #include "netlink-util.h"
16 #include "network-internal.h"
17 #include "networkd-ipv6-proxy-ndp.h"
18 #include "networkd-lldp-tx.h"
19 #include "networkd-manager.h"
20 #include "networkd-ndisc.h"
21 #include "networkd-radv.h"
22 #include "networkd-routing-policy-rule.h"
23 #include "set.h"
24 #include "socket-util.h"
25 #include "stdio-util.h"
26 #include "string-table.h"
27 #include "strv.h"
28 #include "util.h"
29 #include "virt.h"
30
31 DUID* link_get_duid(Link *link) {
32 if (link->network->duid.type != _DUID_TYPE_INVALID)
33 return &link->network->duid;
34 else
35 return &link->manager->duid;
36 }
37
38 static bool link_dhcp6_enabled(Link *link) {
39 assert(link);
40
41 if (!socket_ipv6_is_supported())
42 return false;
43
44 if (link->flags & IFF_LOOPBACK)
45 return false;
46
47 if (!link->network)
48 return false;
49
50 return link->network->dhcp & ADDRESS_FAMILY_IPV6;
51 }
52
53 static bool link_dhcp4_enabled(Link *link) {
54 assert(link);
55
56 if (link->flags & IFF_LOOPBACK)
57 return false;
58
59 if (!link->network)
60 return false;
61
62 return link->network->dhcp & ADDRESS_FAMILY_IPV4;
63 }
64
65 static bool link_dhcp4_server_enabled(Link *link) {
66 assert(link);
67
68 if (link->flags & IFF_LOOPBACK)
69 return false;
70
71 if (!link->network)
72 return false;
73
74 return link->network->dhcp_server;
75 }
76
77 static bool link_ipv4ll_enabled(Link *link) {
78 assert(link);
79
80 if (link->flags & IFF_LOOPBACK)
81 return false;
82
83 if (!link->network)
84 return false;
85
86 if (streq_ptr(link->kind, "wireguard"))
87 return false;
88
89 return link->network->link_local & ADDRESS_FAMILY_IPV4;
90 }
91
92 static bool link_ipv6ll_enabled(Link *link) {
93 assert(link);
94
95 if (!socket_ipv6_is_supported())
96 return false;
97
98 if (link->flags & IFF_LOOPBACK)
99 return false;
100
101 if (!link->network)
102 return false;
103
104 if (streq_ptr(link->kind, "wireguard"))
105 return false;
106
107 return link->network->link_local & ADDRESS_FAMILY_IPV6;
108 }
109
110 static bool link_ipv6_enabled(Link *link) {
111 assert(link);
112
113 if (!socket_ipv6_is_supported())
114 return false;
115
116 if (link->network->bridge)
117 return false;
118
119 /* DHCPv6 client will not be started if no IPv6 link-local address is configured. */
120 return link_ipv6ll_enabled(link) || network_has_static_ipv6_addresses(link->network);
121 }
122
123 static bool link_radv_enabled(Link *link) {
124 assert(link);
125
126 if (!link_ipv6ll_enabled(link))
127 return false;
128
129 return link->network->router_prefix_delegation != RADV_PREFIX_DELEGATION_NONE;
130 }
131
132 static bool link_lldp_rx_enabled(Link *link) {
133 assert(link);
134
135 if (link->flags & IFF_LOOPBACK)
136 return false;
137
138 if (link->iftype != ARPHRD_ETHER)
139 return false;
140
141 if (!link->network)
142 return false;
143
144 /* LLDP should be handled on bridge slaves as those have a direct
145 * connection to their peers not on the bridge master. Linux doesn't
146 * even (by default) forward lldp packets to the bridge master.*/
147 if (streq_ptr("bridge", link->kind))
148 return false;
149
150 return link->network->lldp_mode != LLDP_MODE_NO;
151 }
152
153 static bool link_lldp_emit_enabled(Link *link) {
154 assert(link);
155
156 if (link->flags & IFF_LOOPBACK)
157 return false;
158
159 if (link->iftype != ARPHRD_ETHER)
160 return false;
161
162 if (!link->network)
163 return false;
164
165 return link->network->lldp_emit != LLDP_EMIT_NO;
166 }
167
168 static bool link_ipv4_forward_enabled(Link *link) {
169 assert(link);
170
171 if (link->flags & IFF_LOOPBACK)
172 return false;
173
174 if (!link->network)
175 return false;
176
177 if (link->network->ip_forward == _ADDRESS_FAMILY_BOOLEAN_INVALID)
178 return false;
179
180 return link->network->ip_forward & ADDRESS_FAMILY_IPV4;
181 }
182
183 static bool link_ipv6_forward_enabled(Link *link) {
184 assert(link);
185
186 if (!socket_ipv6_is_supported())
187 return false;
188
189 if (link->flags & IFF_LOOPBACK)
190 return false;
191
192 if (!link->network)
193 return false;
194
195 if (link->network->ip_forward == _ADDRESS_FAMILY_BOOLEAN_INVALID)
196 return false;
197
198 return link->network->ip_forward & ADDRESS_FAMILY_IPV6;
199 }
200
201 static bool link_proxy_arp_enabled(Link *link) {
202 assert(link);
203
204 if (link->flags & IFF_LOOPBACK)
205 return false;
206
207 if (!link->network)
208 return false;
209
210 if (link->network->proxy_arp < 0)
211 return false;
212
213 return true;
214 }
215
216 static bool link_ipv6_accept_ra_enabled(Link *link) {
217 assert(link);
218
219 if (!socket_ipv6_is_supported())
220 return false;
221
222 if (link->flags & IFF_LOOPBACK)
223 return false;
224
225 if (!link->network)
226 return false;
227
228 if (!link_ipv6ll_enabled(link))
229 return false;
230
231 /* If unset use system default (enabled if local forwarding is disabled.
232 * disabled if local forwarding is enabled).
233 * If set, ignore or enforce RA independent of local forwarding state.
234 */
235 if (link->network->ipv6_accept_ra < 0)
236 /* default to accept RA if ip_forward is disabled and ignore RA if ip_forward is enabled */
237 return !link_ipv6_forward_enabled(link);
238 else if (link->network->ipv6_accept_ra > 0)
239 /* accept RA even if ip_forward is enabled */
240 return true;
241 else
242 /* ignore RA */
243 return false;
244 }
245
246 static IPv6PrivacyExtensions link_ipv6_privacy_extensions(Link *link) {
247 assert(link);
248
249 if (!socket_ipv6_is_supported())
250 return _IPV6_PRIVACY_EXTENSIONS_INVALID;
251
252 if (link->flags & IFF_LOOPBACK)
253 return _IPV6_PRIVACY_EXTENSIONS_INVALID;
254
255 if (!link->network)
256 return _IPV6_PRIVACY_EXTENSIONS_INVALID;
257
258 return link->network->ipv6_privacy_extensions;
259 }
260
261 static int link_enable_ipv6(Link *link) {
262 const char *p = NULL;
263 bool disabled;
264 int r;
265
266 if (link->flags & IFF_LOOPBACK)
267 return 0;
268
269 disabled = !link_ipv6_enabled(link);
270
271 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/disable_ipv6");
272
273 r = write_string_file(p, one_zero(disabled), WRITE_STRING_FILE_VERIFY_ON_FAILURE);
274 if (r < 0)
275 log_link_warning_errno(link, r, "Cannot %s IPv6 for interface %s: %m",
276 enable_disable(!disabled), link->ifname);
277 else
278 log_link_info(link, "IPv6 successfully %sd", enable_disable(!disabled));
279
280 return 0;
281 }
282
283 void link_update_operstate(Link *link) {
284 LinkOperationalState operstate;
285 assert(link);
286
287 if (link->kernel_operstate == IF_OPER_DORMANT)
288 operstate = LINK_OPERSTATE_DORMANT;
289 else if (link_has_carrier(link)) {
290 Address *address;
291 uint8_t scope = RT_SCOPE_NOWHERE;
292 Iterator i;
293
294 /* if we have carrier, check what addresses we have */
295 SET_FOREACH(address, link->addresses, i) {
296 if (!address_is_ready(address))
297 continue;
298
299 if (address->scope < scope)
300 scope = address->scope;
301 }
302
303 /* for operstate we also take foreign addresses into account */
304 SET_FOREACH(address, link->addresses_foreign, i) {
305 if (!address_is_ready(address))
306 continue;
307
308 if (address->scope < scope)
309 scope = address->scope;
310 }
311
312 if (scope < RT_SCOPE_SITE)
313 /* universally accessible addresses found */
314 operstate = LINK_OPERSTATE_ROUTABLE;
315 else if (scope < RT_SCOPE_HOST)
316 /* only link or site local addresses found */
317 operstate = LINK_OPERSTATE_DEGRADED;
318 else
319 /* no useful addresses found */
320 operstate = LINK_OPERSTATE_CARRIER;
321 } else if (link->flags & IFF_UP)
322 operstate = LINK_OPERSTATE_NO_CARRIER;
323 else
324 operstate = LINK_OPERSTATE_OFF;
325
326 if (link->operstate != operstate) {
327 link->operstate = operstate;
328 link_send_changed(link, "OperationalState", NULL);
329 link_dirty(link);
330 }
331 }
332
333 #define FLAG_STRING(string, flag, old, new) \
334 (((old ^ new) & flag) \
335 ? ((old & flag) ? (" -" string) : (" +" string)) \
336 : "")
337
338 static int link_update_flags(Link *link, sd_netlink_message *m) {
339 unsigned flags, unknown_flags_added, unknown_flags_removed, unknown_flags;
340 uint8_t operstate;
341 int r;
342
343 assert(link);
344
345 r = sd_rtnl_message_link_get_flags(m, &flags);
346 if (r < 0)
347 return log_link_warning_errno(link, r, "Could not get link flags: %m");
348
349 r = sd_netlink_message_read_u8(m, IFLA_OPERSTATE, &operstate);
350 if (r < 0)
351 /* if we got a message without operstate, take it to mean
352 the state was unchanged */
353 operstate = link->kernel_operstate;
354
355 if ((link->flags == flags) && (link->kernel_operstate == operstate))
356 return 0;
357
358 if (link->flags != flags) {
359 log_link_debug(link, "Flags change:%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s",
360 FLAG_STRING("LOOPBACK", IFF_LOOPBACK, link->flags, flags),
361 FLAG_STRING("MASTER", IFF_MASTER, link->flags, flags),
362 FLAG_STRING("SLAVE", IFF_SLAVE, link->flags, flags),
363 FLAG_STRING("UP", IFF_UP, link->flags, flags),
364 FLAG_STRING("DORMANT", IFF_DORMANT, link->flags, flags),
365 FLAG_STRING("LOWER_UP", IFF_LOWER_UP, link->flags, flags),
366 FLAG_STRING("RUNNING", IFF_RUNNING, link->flags, flags),
367 FLAG_STRING("MULTICAST", IFF_MULTICAST, link->flags, flags),
368 FLAG_STRING("BROADCAST", IFF_BROADCAST, link->flags, flags),
369 FLAG_STRING("POINTOPOINT", IFF_POINTOPOINT, link->flags, flags),
370 FLAG_STRING("PROMISC", IFF_PROMISC, link->flags, flags),
371 FLAG_STRING("ALLMULTI", IFF_ALLMULTI, link->flags, flags),
372 FLAG_STRING("PORTSEL", IFF_PORTSEL, link->flags, flags),
373 FLAG_STRING("AUTOMEDIA", IFF_AUTOMEDIA, link->flags, flags),
374 FLAG_STRING("DYNAMIC", IFF_DYNAMIC, link->flags, flags),
375 FLAG_STRING("NOARP", IFF_NOARP, link->flags, flags),
376 FLAG_STRING("NOTRAILERS", IFF_NOTRAILERS, link->flags, flags),
377 FLAG_STRING("DEBUG", IFF_DEBUG, link->flags, flags),
378 FLAG_STRING("ECHO", IFF_ECHO, link->flags, flags));
379
380 unknown_flags = ~(IFF_LOOPBACK | IFF_MASTER | IFF_SLAVE | IFF_UP |
381 IFF_DORMANT | IFF_LOWER_UP | IFF_RUNNING |
382 IFF_MULTICAST | IFF_BROADCAST | IFF_POINTOPOINT |
383 IFF_PROMISC | IFF_ALLMULTI | IFF_PORTSEL |
384 IFF_AUTOMEDIA | IFF_DYNAMIC | IFF_NOARP |
385 IFF_NOTRAILERS | IFF_DEBUG | IFF_ECHO);
386 unknown_flags_added = ((link->flags ^ flags) & flags & unknown_flags);
387 unknown_flags_removed = ((link->flags ^ flags) & link->flags & unknown_flags);
388
389 /* link flags are currently at most 18 bits, let's align to
390 * printing 20 */
391 if (unknown_flags_added)
392 log_link_debug(link,
393 "Unknown link flags gained: %#.5x (ignoring)",
394 unknown_flags_added);
395
396 if (unknown_flags_removed)
397 log_link_debug(link,
398 "Unknown link flags lost: %#.5x (ignoring)",
399 unknown_flags_removed);
400 }
401
402 link->flags = flags;
403 link->kernel_operstate = operstate;
404
405 link_update_operstate(link);
406
407 return 0;
408 }
409
410 DEFINE_TRIVIAL_CLEANUP_FUNC(Link*, link_unref);
411
412 static int link_new(Manager *manager, sd_netlink_message *message, Link **ret) {
413 _cleanup_(link_unrefp) Link *link = NULL;
414 uint16_t type;
415 const char *ifname, *kind = NULL;
416 int r, ifindex;
417 unsigned short iftype;
418
419 assert(manager);
420 assert(message);
421 assert(ret);
422
423 /* check for link kind */
424 r = sd_netlink_message_enter_container(message, IFLA_LINKINFO);
425 if (r == 0) {
426 (void) sd_netlink_message_read_string(message, IFLA_INFO_KIND, &kind);
427 r = sd_netlink_message_exit_container(message);
428 if (r < 0)
429 return r;
430 }
431
432 r = sd_netlink_message_get_type(message, &type);
433 if (r < 0)
434 return r;
435 else if (type != RTM_NEWLINK)
436 return -EINVAL;
437
438 r = sd_rtnl_message_link_get_ifindex(message, &ifindex);
439 if (r < 0)
440 return r;
441 else if (ifindex <= 0)
442 return -EINVAL;
443
444 r = sd_rtnl_message_link_get_type(message, &iftype);
445 if (r < 0)
446 return r;
447
448 r = sd_netlink_message_read_string(message, IFLA_IFNAME, &ifname);
449 if (r < 0)
450 return r;
451
452 link = new0(Link, 1);
453 if (!link)
454 return -ENOMEM;
455
456 link->n_ref = 1;
457 link->manager = manager;
458 link->state = LINK_STATE_PENDING;
459 link->rtnl_extended_attrs = true;
460 link->ifindex = ifindex;
461 link->iftype = iftype;
462 link->ifname = strdup(ifname);
463 if (!link->ifname)
464 return -ENOMEM;
465
466 if (kind) {
467 link->kind = strdup(kind);
468 if (!link->kind)
469 return -ENOMEM;
470 }
471
472 r = sd_netlink_message_read_ether_addr(message, IFLA_ADDRESS, &link->mac);
473 if (r < 0)
474 log_link_debug_errno(link, r, "MAC address not found for new device, continuing without");
475
476 if (asprintf(&link->state_file, "/run/systemd/netif/links/%d", link->ifindex) < 0)
477 return -ENOMEM;
478
479 if (asprintf(&link->lease_file, "/run/systemd/netif/leases/%d", link->ifindex) < 0)
480 return -ENOMEM;
481
482 if (asprintf(&link->lldp_file, "/run/systemd/netif/lldp/%d", link->ifindex) < 0)
483 return -ENOMEM;
484
485 r = hashmap_ensure_allocated(&manager->links, NULL);
486 if (r < 0)
487 return r;
488
489 r = hashmap_put(manager->links, INT_TO_PTR(link->ifindex), link);
490 if (r < 0)
491 return r;
492
493 r = link_update_flags(link, message);
494 if (r < 0)
495 return r;
496
497 *ret = TAKE_PTR(link);
498
499 return 0;
500 }
501
502 static Link *link_free(Link *link) {
503 Address *address;
504 Link *carrier;
505 Route *route;
506 Iterator i;
507
508 assert(link);
509
510 while ((route = set_first(link->routes)))
511 route_free(route);
512
513 while ((route = set_first(link->routes_foreign)))
514 route_free(route);
515
516 link->routes = set_free(link->routes);
517 link->routes_foreign = set_free(link->routes_foreign);
518
519 while ((address = set_first(link->addresses)))
520 address_free(address);
521
522 while ((address = set_first(link->addresses_foreign)))
523 address_free(address);
524
525 link->addresses = set_free(link->addresses);
526 link->addresses_foreign = set_free(link->addresses_foreign);
527
528 while ((address = link->pool_addresses)) {
529 LIST_REMOVE(addresses, link->pool_addresses, address);
530 address_free(address);
531 }
532
533 sd_dhcp_server_unref(link->dhcp_server);
534 sd_dhcp_client_unref(link->dhcp_client);
535 sd_dhcp_lease_unref(link->dhcp_lease);
536
537 link_lldp_emit_stop(link);
538
539 free(link->lease_file);
540
541 sd_lldp_unref(link->lldp);
542 free(link->lldp_file);
543
544 ndisc_flush(link);
545
546 sd_ipv4ll_unref(link->ipv4ll);
547 sd_dhcp6_client_unref(link->dhcp6_client);
548 sd_ndisc_unref(link->ndisc);
549 sd_radv_unref(link->radv);
550
551 if (link->manager) {
552 hashmap_remove(link->manager->links, INT_TO_PTR(link->ifindex));
553 set_remove(link->manager->links_requesting_uuid, link);
554 link_clean(link);
555 }
556
557 free(link->ifname);
558
559 free(link->kind);
560
561 (void) unlink(link->state_file);
562 free(link->state_file);
563
564 sd_device_unref(link->sd_device);
565
566 HASHMAP_FOREACH (carrier, link->bound_to_links, i)
567 hashmap_remove(link->bound_to_links, INT_TO_PTR(carrier->ifindex));
568 hashmap_free(link->bound_to_links);
569
570 HASHMAP_FOREACH (carrier, link->bound_by_links, i)
571 hashmap_remove(link->bound_by_links, INT_TO_PTR(carrier->ifindex));
572 hashmap_free(link->bound_by_links);
573
574 return mfree(link);
575 }
576
577 DEFINE_TRIVIAL_REF_UNREF_FUNC(Link, link, link_free);
578
579 void link_netlink_destroy_callback(void *userdata) {
580 Link *link = userdata;
581
582 assert(userdata);
583
584 link_unref(link);
585 }
586
587 int link_get(Manager *m, int ifindex, Link **ret) {
588 Link *link;
589
590 assert(m);
591 assert(ifindex);
592 assert(ret);
593
594 link = hashmap_get(m->links, INT_TO_PTR(ifindex));
595 if (!link)
596 return -ENODEV;
597
598 *ret = link;
599
600 return 0;
601 }
602
603 static void link_set_state(Link *link, LinkState state) {
604 assert(link);
605
606 if (link->state == state)
607 return;
608
609 link->state = state;
610
611 link_send_changed(link, "AdministrativeState", NULL);
612 }
613
614 static void link_enter_unmanaged(Link *link) {
615 assert(link);
616
617 log_link_debug(link, "Unmanaged");
618
619 link_set_state(link, LINK_STATE_UNMANAGED);
620
621 link_dirty(link);
622 }
623
624 static int link_stop_clients(Link *link) {
625 int r = 0, k;
626
627 assert(link);
628 assert(link->manager);
629 assert(link->manager->event);
630
631 if (link->dhcp_client) {
632 k = sd_dhcp_client_stop(link->dhcp_client);
633 if (k < 0)
634 r = log_link_warning_errno(link, k, "Could not stop DHCPv4 client: %m");
635 }
636
637 if (link->ipv4ll) {
638 k = sd_ipv4ll_stop(link->ipv4ll);
639 if (k < 0)
640 r = log_link_warning_errno(link, k, "Could not stop IPv4 link-local: %m");
641 }
642
643 if (link->dhcp6_client) {
644 k = sd_dhcp6_client_stop(link->dhcp6_client);
645 if (k < 0)
646 r = log_link_warning_errno(link, k, "Could not stop DHCPv6 client: %m");
647 }
648
649 if (link->ndisc) {
650 k = sd_ndisc_stop(link->ndisc);
651 if (k < 0)
652 r = log_link_warning_errno(link, k, "Could not stop IPv6 Router Discovery: %m");
653 }
654
655 if (link->radv) {
656 k = sd_radv_stop(link->radv);
657 if (k < 0)
658 r = log_link_warning_errno(link, k, "Could not stop IPv6 Router Advertisement: %m");
659 }
660
661 link_lldp_emit_stop(link);
662 return r;
663 }
664
665 void link_enter_failed(Link *link) {
666 assert(link);
667
668 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
669 return;
670
671 log_link_warning(link, "Failed");
672
673 link_set_state(link, LINK_STATE_FAILED);
674
675 link_stop_clients(link);
676
677 link_dirty(link);
678 }
679
680 static Address* link_find_dhcp_server_address(Link *link) {
681 Address *address;
682
683 assert(link);
684 assert(link->network);
685
686 /* The first statically configured address if there is any */
687 LIST_FOREACH(addresses, address, link->network->static_addresses) {
688
689 if (address->family != AF_INET)
690 continue;
691
692 if (in_addr_is_null(address->family, &address->in_addr))
693 continue;
694
695 return address;
696 }
697
698 /* If that didn't work, find a suitable address we got from the pool */
699 LIST_FOREACH(addresses, address, link->pool_addresses) {
700 if (address->family != AF_INET)
701 continue;
702
703 return address;
704 }
705
706 return NULL;
707 }
708
709 static void link_enter_configured(Link *link) {
710 assert(link);
711 assert(link->network);
712
713 if (link->state != LINK_STATE_SETTING_ROUTES)
714 return;
715
716 log_link_info(link, "Configured");
717
718 link_set_state(link, LINK_STATE_CONFIGURED);
719
720 link_dirty(link);
721 }
722
723 void link_check_ready(Link *link) {
724 Address *a;
725 Iterator i;
726
727 assert(link);
728
729 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
730 return;
731
732 if (!link->network)
733 return;
734
735 if (!link->static_routes_configured)
736 return;
737
738 if (!link->routing_policy_rules_configured)
739 return;
740
741 if (link_ipv4ll_enabled(link))
742 if (!link->ipv4ll_address ||
743 !link->ipv4ll_route)
744 return;
745
746 if (!link->network->bridge) {
747
748 if (link_ipv6ll_enabled(link))
749 if (in_addr_is_null(AF_INET6, (const union in_addr_union*) &link->ipv6ll_address) > 0)
750 return;
751
752 if ((link_dhcp4_enabled(link) && !link_dhcp6_enabled(link) &&
753 !link->dhcp4_configured) ||
754 (link_dhcp6_enabled(link) && !link_dhcp4_enabled(link) &&
755 !link->dhcp6_configured) ||
756 (link_dhcp4_enabled(link) && link_dhcp6_enabled(link) &&
757 !link->dhcp4_configured && !link->dhcp6_configured))
758 return;
759
760 if (link_ipv6_accept_ra_enabled(link) && !link->ndisc_configured)
761 return;
762 }
763
764 SET_FOREACH(a, link->addresses, i)
765 if (!address_is_ready(a))
766 return;
767
768 if (link->state != LINK_STATE_CONFIGURED)
769 link_enter_configured(link);
770
771 return;
772 }
773
774 static int link_set_routing_policy_rule(Link *link) {
775 RoutingPolicyRule *rule, *rrule = NULL;
776 int r;
777
778 assert(link);
779 assert(link->network);
780
781 LIST_FOREACH(rules, rule, link->network->rules) {
782 r = routing_policy_rule_get(link->manager, rule->family, &rule->from, rule->from_prefixlen, &rule->to,
783 rule->to_prefixlen, rule->tos, rule->fwmark, rule->table, rule->iif, rule->oif, &rrule);
784 if (r == 1) {
785 (void) routing_policy_rule_make_local(link->manager, rrule);
786 continue;
787 }
788
789 r = routing_policy_rule_configure(rule, link, link_routing_policy_rule_handler, false);
790 if (r < 0) {
791 log_link_warning_errno(link, r, "Could not set routing policy rules: %m");
792 link_enter_failed(link);
793 return r;
794 }
795
796 link->routing_policy_rule_messages++;
797 }
798
799 routing_policy_rule_purge(link->manager, link);
800 if (link->routing_policy_rule_messages == 0) {
801 link->routing_policy_rules_configured = true;
802 link_check_ready(link);
803 } else
804 log_link_debug(link, "Setting routing policy rules");
805
806 return 0;
807 }
808
809 static int route_handler(sd_netlink *rtnl, sd_netlink_message *m, void *userdata) {
810 Link *link = userdata;
811 int r;
812
813 assert(link);
814 assert(link->route_messages > 0);
815 assert(IN_SET(link->state, LINK_STATE_SETTING_ADDRESSES,
816 LINK_STATE_SETTING_ROUTES, LINK_STATE_FAILED,
817 LINK_STATE_LINGER));
818
819 link->route_messages--;
820
821 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
822 return 1;
823
824 r = sd_netlink_message_get_errno(m);
825 if (r < 0 && r != -EEXIST)
826 log_link_warning_errno(link, r, "Could not set route: %m");
827
828 if (link->route_messages == 0) {
829 log_link_debug(link, "Routes set");
830 link->static_routes_configured = true;
831 link_check_ready(link);
832 }
833
834 return 1;
835 }
836
837 static int link_enter_set_routes(Link *link) {
838 Route *rt;
839 int r;
840
841 assert(link);
842 assert(link->network);
843 assert(link->state == LINK_STATE_SETTING_ADDRESSES);
844
845 (void) link_set_routing_policy_rule(link);
846
847 link_set_state(link, LINK_STATE_SETTING_ROUTES);
848
849 LIST_FOREACH(routes, rt, link->network->static_routes) {
850 r = route_configure(rt, link, route_handler);
851 if (r < 0) {
852 log_link_warning_errno(link, r, "Could not set routes: %m");
853 link_enter_failed(link);
854 return r;
855 }
856
857 link->route_messages++;
858 }
859
860 if (link->route_messages == 0) {
861 link->static_routes_configured = true;
862 link_check_ready(link);
863 } else
864 log_link_debug(link, "Setting routes");
865
866 return 0;
867 }
868
869 int link_route_remove_handler(sd_netlink *rtnl, sd_netlink_message *m, void *userdata) {
870 Link *link = userdata;
871 int r;
872
873 assert(m);
874 assert(link);
875 assert(link->ifname);
876
877 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
878 return 1;
879
880 r = sd_netlink_message_get_errno(m);
881 if (r < 0 && r != -ESRCH)
882 log_link_warning_errno(link, r, "Could not drop route: %m");
883
884 return 1;
885 }
886
887 static int address_handler(sd_netlink *rtnl, sd_netlink_message *m, void *userdata) {
888 Link *link = userdata;
889 int r;
890
891 assert(rtnl);
892 assert(m);
893 assert(link);
894 assert(link->ifname);
895 assert(link->address_messages > 0);
896 assert(IN_SET(link->state, LINK_STATE_SETTING_ADDRESSES,
897 LINK_STATE_FAILED, LINK_STATE_LINGER));
898
899 link->address_messages--;
900
901 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
902 return 1;
903
904 r = sd_netlink_message_get_errno(m);
905 if (r < 0 && r != -EEXIST)
906 log_link_warning_errno(link, r, "could not set address: %m");
907 else if (r >= 0)
908 manager_rtnl_process_address(rtnl, m, link->manager);
909
910 if (link->address_messages == 0) {
911 log_link_debug(link, "Addresses set");
912 link_enter_set_routes(link);
913 }
914
915 return 1;
916 }
917
918 static int address_label_handler(sd_netlink *rtnl, sd_netlink_message *m, void *userdata) {
919 Link *link = userdata;
920 int r;
921
922 assert(rtnl);
923 assert(m);
924 assert(link);
925 assert(link->ifname);
926 assert(link->address_label_messages > 0);
927
928 link->address_label_messages--;
929
930 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
931 return 1;
932
933 r = sd_netlink_message_get_errno(m);
934 if (r < 0 && r != -EEXIST)
935 log_link_warning_errno(link, r, "could not set address label: %m");
936 else if (r >= 0)
937 manager_rtnl_process_address(rtnl, m, link->manager);
938
939 if (link->address_label_messages == 0)
940 log_link_debug(link, "Addresses label set");
941
942 return 1;
943 }
944
945 static int link_push_uplink_dns_to_dhcp_server(Link *link, sd_dhcp_server *s) {
946 _cleanup_free_ struct in_addr *addresses = NULL;
947 size_t n_addresses = 0, n_allocated = 0;
948 unsigned i;
949
950 log_debug("Copying DNS server information from %s", link->ifname);
951
952 if (!link->network)
953 return 0;
954
955 for (i = 0; i < link->network->n_dns; i++) {
956 struct in_addr ia;
957
958 /* Only look for IPv4 addresses */
959 if (link->network->dns[i].family != AF_INET)
960 continue;
961
962 ia = link->network->dns[i].address.in;
963
964 /* Never propagate obviously borked data */
965 if (in4_addr_is_null(&ia) || in4_addr_is_localhost(&ia))
966 continue;
967
968 if (!GREEDY_REALLOC(addresses, n_allocated, n_addresses + 1))
969 return log_oom();
970
971 addresses[n_addresses++] = ia;
972 }
973
974 if (link->network->dhcp_use_dns && link->dhcp_lease) {
975 const struct in_addr *da = NULL;
976 int n;
977
978 n = sd_dhcp_lease_get_dns(link->dhcp_lease, &da);
979 if (n > 0) {
980
981 if (!GREEDY_REALLOC(addresses, n_allocated, n_addresses + n))
982 return log_oom();
983
984 memcpy(addresses + n_addresses, da, n * sizeof(struct in_addr));
985 n_addresses += n;
986 }
987 }
988
989 if (n_addresses <= 0)
990 return 0;
991
992 return sd_dhcp_server_set_dns(s, addresses, n_addresses);
993 }
994
995 static int link_push_uplink_ntp_to_dhcp_server(Link *link, sd_dhcp_server *s) {
996 _cleanup_free_ struct in_addr *addresses = NULL;
997 size_t n_addresses = 0, n_allocated = 0;
998 char **a;
999
1000 if (!link->network)
1001 return 0;
1002
1003 log_debug("Copying NTP server information from %s", link->ifname);
1004
1005 STRV_FOREACH(a, link->network->ntp) {
1006 struct in_addr ia;
1007
1008 /* Only look for IPv4 addresses */
1009 if (inet_pton(AF_INET, *a, &ia) <= 0)
1010 continue;
1011
1012 /* Never propagate obviously borked data */
1013 if (in4_addr_is_null(&ia) || in4_addr_is_localhost(&ia))
1014 continue;
1015
1016 if (!GREEDY_REALLOC(addresses, n_allocated, n_addresses + 1))
1017 return log_oom();
1018
1019 addresses[n_addresses++] = ia;
1020 }
1021
1022 if (link->network->dhcp_use_ntp && link->dhcp_lease) {
1023 const struct in_addr *da = NULL;
1024 int n;
1025
1026 n = sd_dhcp_lease_get_ntp(link->dhcp_lease, &da);
1027 if (n > 0) {
1028
1029 if (!GREEDY_REALLOC(addresses, n_allocated, n_addresses + n))
1030 return log_oom();
1031
1032 memcpy(addresses + n_addresses, da, n * sizeof(struct in_addr));
1033 n_addresses += n;
1034 }
1035 }
1036
1037 if (n_addresses <= 0)
1038 return 0;
1039
1040 return sd_dhcp_server_set_ntp(s, addresses, n_addresses);
1041 }
1042
1043 static int link_set_bridge_fdb(Link *link) {
1044 FdbEntry *fdb_entry;
1045 int r;
1046
1047 LIST_FOREACH(static_fdb_entries, fdb_entry, link->network->static_fdb_entries) {
1048 r = fdb_entry_configure(link, fdb_entry);
1049 if (r < 0)
1050 return log_link_error_errno(link, r, "Failed to add MAC entry to static MAC table: %m");
1051 }
1052
1053 return 0;
1054 }
1055
1056 static int link_enter_set_addresses(Link *link) {
1057 AddressLabel *label;
1058 Address *ad;
1059 int r;
1060
1061 assert(link);
1062 assert(link->network);
1063 assert(link->state != _LINK_STATE_INVALID);
1064
1065 r = link_set_bridge_fdb(link);
1066 if (r < 0)
1067 return r;
1068
1069 link_set_state(link, LINK_STATE_SETTING_ADDRESSES);
1070
1071 LIST_FOREACH(addresses, ad, link->network->static_addresses) {
1072 r = address_configure(ad, link, address_handler, false);
1073 if (r < 0) {
1074 log_link_warning_errno(link, r, "Could not set addresses: %m");
1075 link_enter_failed(link);
1076 return r;
1077 }
1078
1079 link->address_messages++;
1080 }
1081
1082 LIST_FOREACH(labels, label, link->network->address_labels) {
1083 r = address_label_configure(label, link, address_label_handler, false);
1084 if (r < 0) {
1085 log_link_warning_errno(link, r, "Could not set address label: %m");
1086 link_enter_failed(link);
1087 return r;
1088 }
1089
1090 link->address_label_messages++;
1091 }
1092
1093 /* now that we can figure out a default address for the dhcp server,
1094 start it */
1095 if (link_dhcp4_server_enabled(link) && (link->flags & IFF_UP)) {
1096 Address *address;
1097 Link *uplink = NULL;
1098 bool acquired_uplink = false;
1099
1100 address = link_find_dhcp_server_address(link);
1101 if (!address) {
1102 log_link_warning(link, "Failed to find suitable address for DHCPv4 server instance.");
1103 link_enter_failed(link);
1104 return 0;
1105 }
1106
1107 /* use the server address' subnet as the pool */
1108 r = sd_dhcp_server_configure_pool(link->dhcp_server, &address->in_addr.in, address->prefixlen,
1109 link->network->dhcp_server_pool_offset, link->network->dhcp_server_pool_size);
1110 if (r < 0)
1111 return r;
1112
1113 /* TODO:
1114 r = sd_dhcp_server_set_router(link->dhcp_server,
1115 &main_address->in_addr.in);
1116 if (r < 0)
1117 return r;
1118 */
1119
1120 if (link->network->dhcp_server_max_lease_time_usec > 0) {
1121 r = sd_dhcp_server_set_max_lease_time(
1122 link->dhcp_server,
1123 DIV_ROUND_UP(link->network->dhcp_server_max_lease_time_usec, USEC_PER_SEC));
1124 if (r < 0)
1125 return r;
1126 }
1127
1128 if (link->network->dhcp_server_default_lease_time_usec > 0) {
1129 r = sd_dhcp_server_set_default_lease_time(
1130 link->dhcp_server,
1131 DIV_ROUND_UP(link->network->dhcp_server_default_lease_time_usec, USEC_PER_SEC));
1132 if (r < 0)
1133 return r;
1134 }
1135
1136 if (link->network->dhcp_server_emit_dns) {
1137
1138 if (link->network->n_dhcp_server_dns > 0)
1139 r = sd_dhcp_server_set_dns(link->dhcp_server, link->network->dhcp_server_dns, link->network->n_dhcp_server_dns);
1140 else {
1141 uplink = manager_find_uplink(link->manager, link);
1142 acquired_uplink = true;
1143
1144 if (!uplink) {
1145 log_link_debug(link, "Not emitting DNS server information on link, couldn't find suitable uplink.");
1146 r = 0;
1147 } else
1148 r = link_push_uplink_dns_to_dhcp_server(uplink, link->dhcp_server);
1149 }
1150 if (r < 0)
1151 log_link_warning_errno(link, r, "Failed to set DNS server for DHCP server, ignoring: %m");
1152 }
1153
1154 if (link->network->dhcp_server_emit_ntp) {
1155
1156 if (link->network->n_dhcp_server_ntp > 0)
1157 r = sd_dhcp_server_set_ntp(link->dhcp_server, link->network->dhcp_server_ntp, link->network->n_dhcp_server_ntp);
1158 else {
1159 if (!acquired_uplink)
1160 uplink = manager_find_uplink(link->manager, link);
1161
1162 if (!uplink) {
1163 log_link_debug(link, "Not emitting NTP server information on link, couldn't find suitable uplink.");
1164 r = 0;
1165 } else
1166 r = link_push_uplink_ntp_to_dhcp_server(uplink, link->dhcp_server);
1167
1168 }
1169 if (r < 0)
1170 log_link_warning_errno(link, r, "Failed to set NTP server for DHCP server, ignoring: %m");
1171 }
1172
1173 r = sd_dhcp_server_set_emit_router(link->dhcp_server, link->network->dhcp_server_emit_router);
1174 if (r < 0)
1175 return log_link_warning_errno(link, r, "Failed to set router emission for DHCP server: %m");
1176
1177 if (link->network->dhcp_server_emit_timezone) {
1178 _cleanup_free_ char *buffer = NULL;
1179 const char *tz = NULL;
1180
1181 if (link->network->dhcp_server_timezone)
1182 tz = link->network->dhcp_server_timezone;
1183 else {
1184 r = get_timezone(&buffer);
1185 if (r < 0)
1186 log_warning_errno(r, "Failed to determine timezone: %m");
1187 else
1188 tz = buffer;
1189 }
1190
1191 if (tz) {
1192 r = sd_dhcp_server_set_timezone(link->dhcp_server, tz);
1193 if (r < 0)
1194 return r;
1195 }
1196 }
1197
1198 r = sd_dhcp_server_start(link->dhcp_server);
1199 if (r < 0) {
1200 log_link_warning_errno(link, r, "Could not start DHCPv4 server instance: %m");
1201
1202 link_enter_failed(link);
1203
1204 return 0;
1205 }
1206
1207 log_link_debug(link, "Offering DHCPv4 leases");
1208 }
1209
1210 if (link->address_messages == 0)
1211 link_enter_set_routes(link);
1212 else
1213 log_link_debug(link, "Setting addresses");
1214
1215 return 0;
1216 }
1217
1218 int link_address_remove_handler(sd_netlink *rtnl, sd_netlink_message *m, void *userdata) {
1219 Link *link = userdata;
1220 int r;
1221
1222 assert(m);
1223 assert(link);
1224 assert(link->ifname);
1225
1226 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1227 return 1;
1228
1229 r = sd_netlink_message_get_errno(m);
1230 if (r < 0 && r != -EADDRNOTAVAIL)
1231 log_link_warning_errno(link, r, "Could not drop address: %m");
1232
1233 return 1;
1234 }
1235
1236 static int link_set_bridge_vlan(Link *link) {
1237 int r = 0;
1238
1239 r = br_vlan_configure(link, link->network->pvid, link->network->br_vid_bitmap, link->network->br_untagged_bitmap);
1240 if (r < 0)
1241 log_link_error_errno(link, r, "Failed to assign VLANs to bridge port: %m");
1242
1243 return r;
1244 }
1245
1246 static int link_set_proxy_arp(Link *link) {
1247 const char *p = NULL;
1248 int r;
1249
1250 if (!link_proxy_arp_enabled(link))
1251 return 0;
1252
1253 p = strjoina("/proc/sys/net/ipv4/conf/", link->ifname, "/proxy_arp");
1254
1255 r = write_string_file(p, one_zero(link->network->proxy_arp), WRITE_STRING_FILE_VERIFY_ON_FAILURE);
1256 if (r < 0)
1257 log_link_warning_errno(link, r, "Cannot configure proxy ARP for interface: %m");
1258
1259 return 0;
1260 }
1261
1262 static int link_set_handler(sd_netlink *rtnl, sd_netlink_message *m, void *userdata) {
1263 Link *link = userdata;
1264 int r;
1265
1266 assert(link);
1267
1268 log_link_debug(link, "Set link");
1269
1270 r = sd_netlink_message_get_errno(m);
1271 if (r < 0 && r != -EEXIST) {
1272 log_link_error_errno(link, r, "Could not join netdev: %m");
1273 link_enter_failed(link);
1274 }
1275
1276 return 1;
1277 }
1278
1279 static int link_configure_after_setting_mtu(Link *link);
1280
1281 static int set_mtu_handler(sd_netlink *rtnl, sd_netlink_message *m, void *userdata) {
1282 Link *link = userdata;
1283 int r;
1284
1285 assert(m);
1286 assert(link);
1287 assert(link->ifname);
1288
1289 link->setting_mtu = false;
1290
1291 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1292 return 1;
1293
1294 r = sd_netlink_message_get_errno(m);
1295 if (r < 0) {
1296 log_link_warning_errno(link, r, "Could not set MTU: %m");
1297 return 1;
1298 }
1299
1300 log_link_debug(link, "Setting MTU done.");
1301
1302 if (link->state == LINK_STATE_PENDING)
1303 (void) link_configure_after_setting_mtu(link);
1304
1305 return 1;
1306 }
1307
1308 int link_set_mtu(Link *link, uint32_t mtu) {
1309 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1310 int r;
1311
1312 assert(link);
1313 assert(link->manager);
1314 assert(link->manager->rtnl);
1315
1316 if (link->mtu == mtu || link->setting_mtu)
1317 return 0;
1318
1319 log_link_debug(link, "Setting MTU: %" PRIu32, mtu);
1320
1321 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1322 if (r < 0)
1323 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1324
1325 /* If IPv6 not configured (no static IPv6 address and IPv6LL autoconfiguration is disabled)
1326 * for this interface, or if it is a bridge slave, then disable IPv6 else enable it. */
1327 (void) link_enable_ipv6(link);
1328
1329 /* IPv6 protocol requires a minimum MTU of IPV6_MTU_MIN(1280) bytes
1330 * on the interface. Bump up MTU bytes to IPV6_MTU_MIN. */
1331 if (link_ipv6_enabled(link) && mtu < IPV6_MIN_MTU) {
1332
1333 log_link_warning(link, "Bumping MTU to " STRINGIFY(IPV6_MIN_MTU) ", as "
1334 "IPv6 is requested and requires a minimum MTU of " STRINGIFY(IPV6_MIN_MTU) " bytes: %m");
1335
1336 mtu = IPV6_MIN_MTU;
1337 }
1338
1339 r = sd_netlink_message_append_u32(req, IFLA_MTU, mtu);
1340 if (r < 0)
1341 return log_link_error_errno(link, r, "Could not append MTU: %m");
1342
1343 r = sd_netlink_call_async(link->manager->rtnl, NULL, req, set_mtu_handler,
1344 link_netlink_destroy_callback, link, 0, __func__);
1345 if (r < 0)
1346 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1347
1348 link_ref(link);
1349 link->setting_mtu = true;
1350
1351 return 0;
1352 }
1353
1354 static int set_flags_handler(sd_netlink *rtnl, sd_netlink_message *m, void *userdata) {
1355 Link *link = userdata;
1356 int r;
1357
1358 assert(m);
1359 assert(link);
1360 assert(link->ifname);
1361
1362 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1363 return 1;
1364
1365 r = sd_netlink_message_get_errno(m);
1366 if (r < 0)
1367 log_link_warning_errno(link, r, "Could not set link flags: %m");
1368
1369 return 1;
1370 }
1371
1372 static int link_set_flags(Link *link) {
1373 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1374 unsigned ifi_change = 0;
1375 unsigned ifi_flags = 0;
1376 int r;
1377
1378 assert(link);
1379 assert(link->manager);
1380 assert(link->manager->rtnl);
1381
1382 if (link->flags & IFF_LOOPBACK)
1383 return 0;
1384
1385 if (!link->network)
1386 return 0;
1387
1388 if (link->network->arp < 0 && link->network->multicast < 0 && link->network->allmulticast < 0)
1389 return 0;
1390
1391 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1392 if (r < 0)
1393 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1394
1395 if (link->network->arp >= 0) {
1396 ifi_change |= IFF_NOARP;
1397 SET_FLAG(ifi_flags, IFF_NOARP, link->network->arp == 0);
1398 }
1399
1400 if (link->network->multicast >= 0) {
1401 ifi_change |= IFF_MULTICAST;
1402 SET_FLAG(ifi_flags, IFF_MULTICAST, link->network->multicast);
1403 }
1404
1405 if (link->network->allmulticast >= 0) {
1406 ifi_change |= IFF_ALLMULTI;
1407 SET_FLAG(ifi_flags, IFF_ALLMULTI, link->network->allmulticast);
1408 }
1409
1410 r = sd_rtnl_message_link_set_flags(req, ifi_flags, ifi_change);
1411 if (r < 0)
1412 return log_link_error_errno(link, r, "Could not set link flags: %m");
1413
1414 r = sd_netlink_call_async(link->manager->rtnl, NULL, req, set_flags_handler,
1415 link_netlink_destroy_callback, link, 0, __func__);
1416 if (r < 0)
1417 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1418
1419 link_ref(link);
1420
1421 return 0;
1422 }
1423
1424 static int link_set_bridge(Link *link) {
1425 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1426 int r;
1427
1428 assert(link);
1429 assert(link->network);
1430
1431 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1432 if (r < 0)
1433 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1434
1435 r = sd_rtnl_message_link_set_family(req, PF_BRIDGE);
1436 if (r < 0)
1437 return log_link_error_errno(link, r, "Could not set message family: %m");
1438
1439 r = sd_netlink_message_open_container(req, IFLA_PROTINFO);
1440 if (r < 0)
1441 return log_link_error_errno(link, r, "Could not append IFLA_PROTINFO attribute: %m");
1442
1443 if (link->network->use_bpdu >= 0) {
1444 r = sd_netlink_message_append_u8(req, IFLA_BRPORT_GUARD, link->network->use_bpdu);
1445 if (r < 0)
1446 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_GUARD attribute: %m");
1447 }
1448
1449 if (link->network->hairpin >= 0) {
1450 r = sd_netlink_message_append_u8(req, IFLA_BRPORT_MODE, link->network->hairpin);
1451 if (r < 0)
1452 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_MODE attribute: %m");
1453 }
1454
1455 if (link->network->fast_leave >= 0) {
1456 r = sd_netlink_message_append_u8(req, IFLA_BRPORT_FAST_LEAVE, link->network->fast_leave);
1457 if (r < 0)
1458 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_FAST_LEAVE attribute: %m");
1459 }
1460
1461 if (link->network->allow_port_to_be_root >= 0) {
1462 r = sd_netlink_message_append_u8(req, IFLA_BRPORT_PROTECT, link->network->allow_port_to_be_root);
1463 if (r < 0)
1464 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_PROTECT attribute: %m");
1465
1466 }
1467
1468 if (link->network->unicast_flood >= 0) {
1469 r = sd_netlink_message_append_u8(req, IFLA_BRPORT_UNICAST_FLOOD, link->network->unicast_flood);
1470 if (r < 0)
1471 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_UNICAST_FLOOD attribute: %m");
1472
1473 }
1474
1475 if (link->network->cost != 0) {
1476 r = sd_netlink_message_append_u32(req, IFLA_BRPORT_COST, link->network->cost);
1477 if (r < 0)
1478 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_COST attribute: %m");
1479 }
1480 if (link->network->priority != LINK_BRIDGE_PORT_PRIORITY_INVALID) {
1481 r = sd_netlink_message_append_u16(req, IFLA_BRPORT_PRIORITY, link->network->priority);
1482 if (r < 0)
1483 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_PRIORITY attribute: %m");
1484 }
1485
1486 r = sd_netlink_message_close_container(req);
1487 if (r < 0)
1488 return log_link_error_errno(link, r, "Could not append IFLA_LINKINFO attribute: %m");
1489
1490 r = sd_netlink_call_async(link->manager->rtnl, NULL, req, link_set_handler,
1491 link_netlink_destroy_callback, link, 0, __func__);
1492 if (r < 0)
1493 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1494
1495 link_ref(link);
1496
1497 return r;
1498 }
1499
1500 static int link_bond_set(Link *link) {
1501 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1502 int r;
1503
1504 assert(link);
1505 assert(link->network);
1506
1507 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_NEWLINK, link->network->bond->ifindex);
1508 if (r < 0)
1509 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1510
1511 r = sd_netlink_message_set_flags(req, NLM_F_REQUEST | NLM_F_ACK);
1512 if (r < 0)
1513 return log_link_error_errno(link, r, "Could not set netlink flags: %m");
1514
1515 r = sd_netlink_message_open_container(req, IFLA_LINKINFO);
1516 if (r < 0)
1517 return log_link_error_errno(link, r, "Could not append IFLA_PROTINFO attribute: %m");
1518
1519 r = sd_netlink_message_open_container_union(req, IFLA_INFO_DATA, "bond");
1520 if (r < 0)
1521 return log_link_error_errno(link, r, "Could not append IFLA_INFO_DATA attribute: %m");
1522
1523 if (link->network->active_slave) {
1524 r = sd_netlink_message_append_u32(req, IFLA_BOND_ACTIVE_SLAVE, link->ifindex);
1525 if (r < 0)
1526 return log_link_error_errno(link, r, "Could not append IFLA_BOND_ACTIVE_SLAVE attribute: %m");
1527 }
1528
1529 if (link->network->primary_slave) {
1530 r = sd_netlink_message_append_u32(req, IFLA_BOND_PRIMARY, link->ifindex);
1531 if (r < 0)
1532 return log_link_error_errno(link, r, "Could not append IFLA_BOND_PRIMARY attribute: %m");
1533 }
1534
1535 r = sd_netlink_message_close_container(req);
1536 if (r < 0)
1537 return log_link_error_errno(link, r, "Could not append IFLA_LINKINFO attribute: %m");
1538
1539 r = sd_netlink_message_close_container(req);
1540 if (r < 0)
1541 return log_link_error_errno(link, r, "Could not append IFLA_INFO_DATA attribute: %m");
1542
1543 r = sd_netlink_call_async(link->manager->rtnl, NULL, req, set_flags_handler,
1544 link_netlink_destroy_callback, link, 0, __func__);
1545 if (r < 0)
1546 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1547
1548 link_ref(link);
1549
1550 return r;
1551 }
1552
1553 static int link_lldp_save(Link *link) {
1554 _cleanup_free_ char *temp_path = NULL;
1555 _cleanup_fclose_ FILE *f = NULL;
1556 sd_lldp_neighbor **l = NULL;
1557 int n = 0, r, i;
1558
1559 assert(link);
1560 assert(link->lldp_file);
1561
1562 if (!link->lldp) {
1563 (void) unlink(link->lldp_file);
1564 return 0;
1565 }
1566
1567 r = sd_lldp_get_neighbors(link->lldp, &l);
1568 if (r < 0)
1569 goto finish;
1570 if (r == 0) {
1571 (void) unlink(link->lldp_file);
1572 goto finish;
1573 }
1574
1575 n = r;
1576
1577 r = fopen_temporary(link->lldp_file, &f, &temp_path);
1578 if (r < 0)
1579 goto finish;
1580
1581 fchmod(fileno(f), 0644);
1582
1583 for (i = 0; i < n; i++) {
1584 const void *p;
1585 le64_t u;
1586 size_t sz;
1587
1588 r = sd_lldp_neighbor_get_raw(l[i], &p, &sz);
1589 if (r < 0)
1590 goto finish;
1591
1592 u = htole64(sz);
1593 (void) fwrite(&u, 1, sizeof(u), f);
1594 (void) fwrite(p, 1, sz, f);
1595 }
1596
1597 r = fflush_and_check(f);
1598 if (r < 0)
1599 goto finish;
1600
1601 if (rename(temp_path, link->lldp_file) < 0) {
1602 r = -errno;
1603 goto finish;
1604 }
1605
1606 finish:
1607 if (r < 0) {
1608 (void) unlink(link->lldp_file);
1609 if (temp_path)
1610 (void) unlink(temp_path);
1611
1612 log_link_error_errno(link, r, "Failed to save LLDP data to %s: %m", link->lldp_file);
1613 }
1614
1615 if (l) {
1616 for (i = 0; i < n; i++)
1617 sd_lldp_neighbor_unref(l[i]);
1618 free(l);
1619 }
1620
1621 return r;
1622 }
1623
1624 static void lldp_handler(sd_lldp *lldp, sd_lldp_event event, sd_lldp_neighbor *n, void *userdata) {
1625 Link *link = userdata;
1626 int r;
1627
1628 assert(link);
1629
1630 (void) link_lldp_save(link);
1631
1632 if (link_lldp_emit_enabled(link) && event == SD_LLDP_EVENT_ADDED) {
1633 /* If we received information about a new neighbor, restart the LLDP "fast" logic */
1634
1635 log_link_debug(link, "Received LLDP datagram from previously unknown neighbor, restarting 'fast' LLDP transmission.");
1636
1637 r = link_lldp_emit_start(link);
1638 if (r < 0)
1639 log_link_warning_errno(link, r, "Failed to restart LLDP transmission: %m");
1640 }
1641 }
1642
1643 static int link_acquire_ipv6_conf(Link *link) {
1644 int r;
1645
1646 assert(link);
1647
1648 if (link_ipv6_accept_ra_enabled(link)) {
1649 assert(link->ndisc);
1650
1651 log_link_debug(link, "Discovering IPv6 routers");
1652
1653 r = sd_ndisc_start(link->ndisc);
1654 if (r < 0 && r != -EBUSY)
1655 return log_link_warning_errno(link, r, "Could not start IPv6 Router Discovery: %m");
1656 }
1657
1658 if (link_radv_enabled(link)) {
1659 assert(link->radv);
1660 assert(in_addr_is_link_local(AF_INET6, (const union in_addr_union*)&link->ipv6ll_address) > 0);
1661
1662 log_link_debug(link, "Starting IPv6 Router Advertisements");
1663
1664 r = sd_radv_start(link->radv);
1665 if (r < 0 && r != -EBUSY)
1666 return log_link_warning_errno(link, r, "Could not start IPv6 Router Advertisement: %m");
1667 }
1668
1669 (void) dhcp6_request_prefix_delegation(link);
1670
1671 return 0;
1672 }
1673
1674 static int link_acquire_ipv4_conf(Link *link) {
1675 int r;
1676
1677 assert(link);
1678 assert(link->network);
1679 assert(link->manager);
1680 assert(link->manager->event);
1681
1682 if (link_ipv4ll_enabled(link)) {
1683 assert(link->ipv4ll);
1684
1685 log_link_debug(link, "Acquiring IPv4 link-local address");
1686
1687 r = sd_ipv4ll_start(link->ipv4ll);
1688 if (r < 0)
1689 return log_link_warning_errno(link, r, "Could not acquire IPv4 link-local address: %m");
1690 }
1691
1692 if (link_dhcp4_enabled(link)) {
1693 assert(link->dhcp_client);
1694
1695 log_link_debug(link, "Acquiring DHCPv4 lease");
1696
1697 r = sd_dhcp_client_start(link->dhcp_client);
1698 if (r < 0)
1699 return log_link_warning_errno(link, r, "Could not acquire DHCPv4 lease: %m");
1700 }
1701
1702 return 0;
1703 }
1704
1705 static int link_acquire_conf(Link *link) {
1706 int r;
1707
1708 assert(link);
1709
1710 r = link_acquire_ipv4_conf(link);
1711 if (r < 0)
1712 return r;
1713
1714 if (in_addr_is_null(AF_INET6, (const union in_addr_union*) &link->ipv6ll_address) == 0) {
1715 r = link_acquire_ipv6_conf(link);
1716 if (r < 0)
1717 return r;
1718 }
1719
1720 if (link_lldp_emit_enabled(link)) {
1721 r = link_lldp_emit_start(link);
1722 if (r < 0)
1723 return log_link_warning_errno(link, r, "Failed to start LLDP transmission: %m");
1724 }
1725
1726 return 0;
1727 }
1728
1729 bool link_has_carrier(Link *link) {
1730 /* see Documentation/networking/operstates.txt in the kernel sources */
1731
1732 if (link->kernel_operstate == IF_OPER_UP)
1733 return true;
1734
1735 if (link->kernel_operstate == IF_OPER_UNKNOWN)
1736 /* operstate may not be implemented, so fall back to flags */
1737 if ((link->flags & IFF_LOWER_UP) && !(link->flags & IFF_DORMANT))
1738 return true;
1739
1740 return false;
1741 }
1742
1743 static int link_up_handler(sd_netlink *rtnl, sd_netlink_message *m, void *userdata) {
1744 Link *link = userdata;
1745 int r;
1746
1747 assert(link);
1748
1749 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1750 return 1;
1751
1752 r = sd_netlink_message_get_errno(m);
1753 if (r < 0)
1754 /* we warn but don't fail the link, as it may be brought up later */
1755 log_link_warning_errno(link, r, "Could not bring up interface: %m");
1756
1757 return 1;
1758 }
1759
1760 int link_up(Link *link) {
1761 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1762 uint8_t ipv6ll_mode;
1763 int r;
1764
1765 assert(link);
1766 assert(link->network);
1767 assert(link->manager);
1768 assert(link->manager->rtnl);
1769
1770 log_link_debug(link, "Bringing link up");
1771
1772 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1773 if (r < 0)
1774 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1775
1776 /* set it free if not enslaved with networkd */
1777 if (!link->network->bridge && !link->network->bond && !link->network->vrf) {
1778 r = sd_netlink_message_append_u32(req, IFLA_MASTER, 0);
1779 if (r < 0)
1780 return log_link_error_errno(link, r, "Could not append IFLA_MASTER attribute: %m");
1781 }
1782
1783 r = sd_rtnl_message_link_set_flags(req, IFF_UP, IFF_UP);
1784 if (r < 0)
1785 return log_link_error_errno(link, r, "Could not set link flags: %m");
1786
1787 if (link->network->mac) {
1788 r = sd_netlink_message_append_ether_addr(req, IFLA_ADDRESS, link->network->mac);
1789 if (r < 0)
1790 return log_link_error_errno(link, r, "Could not set MAC address: %m");
1791 }
1792
1793 r = sd_netlink_message_open_container(req, IFLA_AF_SPEC);
1794 if (r < 0)
1795 return log_link_error_errno(link, r, "Could not open IFLA_AF_SPEC container: %m");
1796
1797 if (link_ipv6_enabled(link)) {
1798 /* if the kernel lacks ipv6 support setting IFF_UP fails if any ipv6 options are passed */
1799 r = sd_netlink_message_open_container(req, AF_INET6);
1800 if (r < 0)
1801 return log_link_error_errno(link, r, "Could not open AF_INET6 container: %m");
1802
1803 if (!link_ipv6ll_enabled(link))
1804 ipv6ll_mode = IN6_ADDR_GEN_MODE_NONE;
1805 else {
1806 const char *p = NULL;
1807 _cleanup_free_ char *stable_secret = NULL;
1808
1809 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/stable_secret");
1810 r = read_one_line_file(p, &stable_secret);
1811
1812 if (r < 0)
1813 ipv6ll_mode = IN6_ADDR_GEN_MODE_EUI64;
1814 else
1815 ipv6ll_mode = IN6_ADDR_GEN_MODE_STABLE_PRIVACY;
1816 }
1817 r = sd_netlink_message_append_u8(req, IFLA_INET6_ADDR_GEN_MODE, ipv6ll_mode);
1818 if (r < 0)
1819 return log_link_error_errno(link, r, "Could not append IFLA_INET6_ADDR_GEN_MODE: %m");
1820
1821 if (!in_addr_is_null(AF_INET6, &link->network->ipv6_token)) {
1822 r = sd_netlink_message_append_in6_addr(req, IFLA_INET6_TOKEN, &link->network->ipv6_token.in6);
1823 if (r < 0)
1824 return log_link_error_errno(link, r, "Could not append IFLA_INET6_TOKEN: %m");
1825 }
1826
1827 r = sd_netlink_message_close_container(req);
1828 if (r < 0)
1829 return log_link_error_errno(link, r, "Could not close AF_INET6 container: %m");
1830 }
1831
1832 r = sd_netlink_message_close_container(req);
1833 if (r < 0)
1834 return log_link_error_errno(link, r, "Could not close IFLA_AF_SPEC container: %m");
1835
1836 r = sd_netlink_call_async(link->manager->rtnl, NULL, req, link_up_handler,
1837 link_netlink_destroy_callback, link, 0, __func__);
1838 if (r < 0)
1839 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1840
1841 link_ref(link);
1842
1843 return 0;
1844 }
1845
1846 static int link_up_can(Link *link) {
1847 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1848 int r;
1849
1850 assert(link);
1851
1852 log_link_debug(link, "Bringing CAN link up");
1853
1854 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1855 if (r < 0)
1856 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1857
1858 r = sd_rtnl_message_link_set_flags(req, IFF_UP, IFF_UP);
1859 if (r < 0)
1860 return log_link_error_errno(link, r, "Could not set link flags: %m");
1861
1862 r = sd_netlink_call_async(link->manager->rtnl, NULL, req, link_up_handler,
1863 link_netlink_destroy_callback, link, 0, __func__);
1864 if (r < 0)
1865 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1866
1867 link_ref(link);
1868
1869 return 0;
1870 }
1871
1872 static int link_set_can(Link *link) {
1873 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *m = NULL;
1874 int r;
1875
1876 assert(link);
1877 assert(link->network);
1878 assert(link->manager);
1879 assert(link->manager->rtnl);
1880
1881 log_link_debug(link, "link_set_can");
1882
1883 r = sd_rtnl_message_new_link(link->manager->rtnl, &m, RTM_NEWLINK, link->ifindex);
1884 if (r < 0)
1885 return log_link_error_errno(link, r, "Failed to allocate netlink message: %m");
1886
1887 r = sd_netlink_message_set_flags(m, NLM_F_REQUEST | NLM_F_ACK);
1888 if (r < 0)
1889 return log_link_error_errno(link, r, "Could not set netlink flags: %m");
1890
1891 r = sd_netlink_message_open_container(m, IFLA_LINKINFO);
1892 if (r < 0)
1893 return log_link_error_errno(link, r, "Failed to open netlink container: %m");
1894
1895 r = sd_netlink_message_open_container_union(m, IFLA_INFO_DATA, link->kind);
1896 if (r < 0)
1897 return log_link_error_errno(link, r, "Could not append IFLA_INFO_DATA attribute: %m");
1898
1899 if (link->network->can_bitrate > 0 || link->network->can_sample_point > 0) {
1900 struct can_bittiming bt = {
1901 .bitrate = link->network->can_bitrate,
1902 .sample_point = link->network->can_sample_point,
1903 };
1904
1905 if (link->network->can_bitrate > UINT32_MAX) {
1906 log_link_error(link, "bitrate (%zu) too big.", link->network->can_bitrate);
1907 return -ERANGE;
1908 }
1909
1910 log_link_debug(link, "Setting bitrate = %d bit/s", bt.bitrate);
1911 if (link->network->can_sample_point > 0)
1912 log_link_debug(link, "Setting sample point = %d.%d%%", bt.sample_point / 10, bt.sample_point % 10);
1913 else
1914 log_link_debug(link, "Using default sample point");
1915
1916 r = sd_netlink_message_append_data(m, IFLA_CAN_BITTIMING, &bt, sizeof(bt));
1917 if (r < 0)
1918 return log_link_error_errno(link, r, "Could not append IFLA_CAN_BITTIMING attribute: %m");
1919 }
1920
1921 if (link->network->can_restart_us > 0) {
1922 char time_string[FORMAT_TIMESPAN_MAX];
1923 uint64_t restart_ms;
1924
1925 if (link->network->can_restart_us == USEC_INFINITY)
1926 restart_ms = 0;
1927 else
1928 restart_ms = DIV_ROUND_UP(link->network->can_restart_us, USEC_PER_MSEC);
1929
1930 format_timespan(time_string, FORMAT_TIMESPAN_MAX, restart_ms * 1000, MSEC_PER_SEC);
1931
1932 if (restart_ms > UINT32_MAX) {
1933 log_link_error(link, "restart timeout (%s) too big.", time_string);
1934 return -ERANGE;
1935 }
1936
1937 log_link_debug(link, "Setting restart = %s", time_string);
1938
1939 r = sd_netlink_message_append_u32(m, IFLA_CAN_RESTART_MS, restart_ms);
1940 if (r < 0)
1941 return log_link_error_errno(link, r, "Could not append IFLA_CAN_RESTART_MS attribute: %m");
1942 }
1943
1944 r = sd_netlink_message_close_container(m);
1945 if (r < 0)
1946 return log_link_error_errno(link, r, "Failed to close netlink container: %m");
1947
1948 r = sd_netlink_message_close_container(m);
1949 if (r < 0)
1950 return log_link_error_errno(link, r, "Failed to close netlink container: %m");
1951
1952 r = sd_netlink_call_async(link->manager->rtnl, NULL, m, link_set_handler,
1953 link_netlink_destroy_callback, link, 0, __func__);
1954 if (r < 0)
1955 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1956
1957 link_ref(link);
1958
1959 if (!(link->flags & IFF_UP)) {
1960 r = link_up_can(link);
1961 if (r < 0) {
1962 link_enter_failed(link);
1963 return r;
1964 }
1965 }
1966
1967 log_link_debug(link, "link_set_can done");
1968
1969 return r;
1970 }
1971
1972 static int link_down_handler(sd_netlink *rtnl, sd_netlink_message *m, void *userdata) {
1973 Link *link = userdata;
1974 int r;
1975
1976 assert(link);
1977
1978 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1979 return 1;
1980
1981 r = sd_netlink_message_get_errno(m);
1982 if (r < 0)
1983 log_link_warning_errno(link, r, "Could not bring down interface: %m");
1984
1985 if (streq_ptr(link->kind, "can"))
1986 link_set_can(link);
1987
1988 return 1;
1989 }
1990
1991 int link_down(Link *link) {
1992 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1993 int r;
1994
1995 assert(link);
1996 assert(link->manager);
1997 assert(link->manager->rtnl);
1998
1999 log_link_debug(link, "Bringing link down");
2000
2001 r = sd_rtnl_message_new_link(link->manager->rtnl, &req,
2002 RTM_SETLINK, link->ifindex);
2003 if (r < 0)
2004 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
2005
2006 r = sd_rtnl_message_link_set_flags(req, 0, IFF_UP);
2007 if (r < 0)
2008 return log_link_error_errno(link, r, "Could not set link flags: %m");
2009
2010 r = sd_netlink_call_async(link->manager->rtnl, NULL, req, link_down_handler,
2011 link_netlink_destroy_callback, link, 0, __func__);
2012 if (r < 0)
2013 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
2014
2015 link_ref(link);
2016
2017 return 0;
2018 }
2019
2020 static int link_handle_bound_to_list(Link *link) {
2021 Link *l;
2022 Iterator i;
2023 int r;
2024 bool required_up = false;
2025 bool link_is_up = false;
2026
2027 assert(link);
2028
2029 if (hashmap_isempty(link->bound_to_links))
2030 return 0;
2031
2032 if (link->flags & IFF_UP)
2033 link_is_up = true;
2034
2035 HASHMAP_FOREACH (l, link->bound_to_links, i)
2036 if (link_has_carrier(l)) {
2037 required_up = true;
2038 break;
2039 }
2040
2041 if (!required_up && link_is_up) {
2042 r = link_down(link);
2043 if (r < 0)
2044 return r;
2045 } else if (required_up && !link_is_up) {
2046 r = link_up(link);
2047 if (r < 0)
2048 return r;
2049 }
2050
2051 return 0;
2052 }
2053
2054 static int link_handle_bound_by_list(Link *link) {
2055 Iterator i;
2056 Link *l;
2057 int r;
2058
2059 assert(link);
2060
2061 if (hashmap_isempty(link->bound_by_links))
2062 return 0;
2063
2064 HASHMAP_FOREACH (l, link->bound_by_links, i) {
2065 r = link_handle_bound_to_list(l);
2066 if (r < 0)
2067 return r;
2068 }
2069
2070 return 0;
2071 }
2072
2073 static int link_put_carrier(Link *link, Link *carrier, Hashmap **h) {
2074 int r;
2075
2076 assert(link);
2077 assert(carrier);
2078
2079 if (link == carrier)
2080 return 0;
2081
2082 if (hashmap_get(*h, INT_TO_PTR(carrier->ifindex)))
2083 return 0;
2084
2085 r = hashmap_ensure_allocated(h, NULL);
2086 if (r < 0)
2087 return r;
2088
2089 r = hashmap_put(*h, INT_TO_PTR(carrier->ifindex), carrier);
2090 if (r < 0)
2091 return r;
2092
2093 return 0;
2094 }
2095
2096 static int link_new_bound_by_list(Link *link) {
2097 Manager *m;
2098 Link *carrier;
2099 Iterator i;
2100 int r;
2101 bool list_updated = false;
2102
2103 assert(link);
2104 assert(link->manager);
2105
2106 m = link->manager;
2107
2108 HASHMAP_FOREACH(carrier, m->links, i) {
2109 if (!carrier->network)
2110 continue;
2111
2112 if (strv_isempty(carrier->network->bind_carrier))
2113 continue;
2114
2115 if (strv_fnmatch(carrier->network->bind_carrier, link->ifname, 0)) {
2116 r = link_put_carrier(link, carrier, &link->bound_by_links);
2117 if (r < 0)
2118 return r;
2119
2120 list_updated = true;
2121 }
2122 }
2123
2124 if (list_updated)
2125 link_dirty(link);
2126
2127 HASHMAP_FOREACH(carrier, link->bound_by_links, i) {
2128 r = link_put_carrier(carrier, link, &carrier->bound_to_links);
2129 if (r < 0)
2130 return r;
2131
2132 link_dirty(carrier);
2133 }
2134
2135 return 0;
2136 }
2137
2138 static int link_new_bound_to_list(Link *link) {
2139 Manager *m;
2140 Link *carrier;
2141 Iterator i;
2142 int r;
2143 bool list_updated = false;
2144
2145 assert(link);
2146 assert(link->manager);
2147
2148 if (!link->network)
2149 return 0;
2150
2151 if (strv_isempty(link->network->bind_carrier))
2152 return 0;
2153
2154 m = link->manager;
2155
2156 HASHMAP_FOREACH (carrier, m->links, i) {
2157 if (strv_fnmatch(link->network->bind_carrier, carrier->ifname, 0)) {
2158 r = link_put_carrier(link, carrier, &link->bound_to_links);
2159 if (r < 0)
2160 return r;
2161
2162 list_updated = true;
2163 }
2164 }
2165
2166 if (list_updated)
2167 link_dirty(link);
2168
2169 HASHMAP_FOREACH (carrier, link->bound_to_links, i) {
2170 r = link_put_carrier(carrier, link, &carrier->bound_by_links);
2171 if (r < 0)
2172 return r;
2173
2174 link_dirty(carrier);
2175 }
2176
2177 return 0;
2178 }
2179
2180 static int link_new_carrier_maps(Link *link) {
2181 int r;
2182
2183 r = link_new_bound_by_list(link);
2184 if (r < 0)
2185 return r;
2186
2187 r = link_handle_bound_by_list(link);
2188 if (r < 0)
2189 return r;
2190
2191 r = link_new_bound_to_list(link);
2192 if (r < 0)
2193 return r;
2194
2195 r = link_handle_bound_to_list(link);
2196 if (r < 0)
2197 return r;
2198
2199 return 0;
2200 }
2201
2202 static void link_free_bound_to_list(Link *link) {
2203 Link *bound_to;
2204 Iterator i;
2205
2206 HASHMAP_FOREACH (bound_to, link->bound_to_links, i) {
2207 hashmap_remove(link->bound_to_links, INT_TO_PTR(bound_to->ifindex));
2208
2209 if (hashmap_remove(bound_to->bound_by_links, INT_TO_PTR(link->ifindex)))
2210 link_dirty(bound_to);
2211 }
2212
2213 return;
2214 }
2215
2216 static void link_free_bound_by_list(Link *link) {
2217 Link *bound_by;
2218 Iterator i;
2219
2220 HASHMAP_FOREACH (bound_by, link->bound_by_links, i) {
2221 hashmap_remove(link->bound_by_links, INT_TO_PTR(bound_by->ifindex));
2222
2223 if (hashmap_remove(bound_by->bound_to_links, INT_TO_PTR(link->ifindex))) {
2224 link_dirty(bound_by);
2225 link_handle_bound_to_list(bound_by);
2226 }
2227 }
2228
2229 return;
2230 }
2231
2232 static void link_free_carrier_maps(Link *link) {
2233 bool list_updated = false;
2234
2235 assert(link);
2236
2237 if (!hashmap_isempty(link->bound_to_links)) {
2238 link_free_bound_to_list(link);
2239 list_updated = true;
2240 }
2241
2242 if (!hashmap_isempty(link->bound_by_links)) {
2243 link_free_bound_by_list(link);
2244 list_updated = true;
2245 }
2246
2247 if (list_updated)
2248 link_dirty(link);
2249
2250 return;
2251 }
2252
2253 void link_drop(Link *link) {
2254 if (!link || link->state == LINK_STATE_LINGER)
2255 return;
2256
2257 link_set_state(link, LINK_STATE_LINGER);
2258
2259 link_free_carrier_maps(link);
2260
2261 log_link_debug(link, "Link removed");
2262
2263 (void) unlink(link->state_file);
2264 link_unref(link);
2265
2266 return;
2267 }
2268
2269 static int link_joined(Link *link) {
2270 int r;
2271
2272 assert(link);
2273 assert(link->network);
2274
2275 if (!hashmap_isempty(link->bound_to_links)) {
2276 r = link_handle_bound_to_list(link);
2277 if (r < 0)
2278 return r;
2279 } else if (!(link->flags & IFF_UP)) {
2280 r = link_up(link);
2281 if (r < 0) {
2282 link_enter_failed(link);
2283 return r;
2284 }
2285 }
2286
2287 if (link->network->bridge) {
2288 r = link_set_bridge(link);
2289 if (r < 0)
2290 log_link_error_errno(link, r, "Could not set bridge message: %m");
2291 }
2292
2293 if (link->network->bond) {
2294 r = link_bond_set(link);
2295 if (r < 0)
2296 log_link_error_errno(link, r, "Could not set bond message: %m");
2297 }
2298
2299 if (link->network->use_br_vlan &&
2300 (link->network->bridge || streq_ptr("bridge", link->kind))) {
2301 r = link_set_bridge_vlan(link);
2302 if (r < 0)
2303 log_link_error_errno(link, r, "Could not set bridge vlan: %m");
2304 }
2305
2306 /* Skip setting up addresses until it gets carrier,
2307 or it would try to set addresses twice,
2308 which is bad for non-idempotent steps. */
2309 if (!link_has_carrier(link) && !link->network->configure_without_carrier)
2310 return 0;
2311
2312 return link_enter_set_addresses(link);
2313 }
2314
2315 static int netdev_join_handler(sd_netlink *rtnl, sd_netlink_message *m, void *userdata) {
2316 Link *link = userdata;
2317 int r;
2318
2319 assert(link);
2320 assert(link->network);
2321
2322 link->enslaving--;
2323
2324 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
2325 return 1;
2326
2327 r = sd_netlink_message_get_errno(m);
2328 if (r < 0 && r != -EEXIST) {
2329 log_link_error_errno(link, r, "Could not join netdev: %m");
2330 link_enter_failed(link);
2331 return 1;
2332 } else
2333 log_link_debug(link, "Joined netdev");
2334
2335 if (link->enslaving <= 0)
2336 link_joined(link);
2337
2338 return 1;
2339 }
2340
2341 static int link_enter_join_netdev(Link *link) {
2342 NetDev *netdev;
2343 Iterator i;
2344 int r;
2345
2346 assert(link);
2347 assert(link->network);
2348 assert(link->state == LINK_STATE_PENDING);
2349
2350 link_set_state(link, LINK_STATE_ENSLAVING);
2351
2352 link_dirty(link);
2353
2354 if (!link->network->bridge &&
2355 !link->network->bond &&
2356 !link->network->vrf &&
2357 hashmap_isempty(link->network->stacked_netdevs))
2358 return link_joined(link);
2359
2360 if (link->network->bond) {
2361 log_struct(LOG_DEBUG,
2362 LOG_LINK_INTERFACE(link),
2363 LOG_NETDEV_INTERFACE(link->network->bond),
2364 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", link->network->bond->ifname));
2365
2366 r = netdev_join(link->network->bond, link, netdev_join_handler);
2367 if (r < 0) {
2368 log_struct_errno(LOG_WARNING, r,
2369 LOG_LINK_INTERFACE(link),
2370 LOG_NETDEV_INTERFACE(link->network->bond),
2371 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", link->network->bond->ifname));
2372 link_enter_failed(link);
2373 return r;
2374 }
2375
2376 link->enslaving++;
2377 }
2378
2379 if (link->network->bridge) {
2380 log_struct(LOG_DEBUG,
2381 LOG_LINK_INTERFACE(link),
2382 LOG_NETDEV_INTERFACE(link->network->bridge),
2383 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", link->network->bridge->ifname));
2384
2385 r = netdev_join(link->network->bridge, link, netdev_join_handler);
2386 if (r < 0) {
2387 log_struct_errno(LOG_WARNING, r,
2388 LOG_LINK_INTERFACE(link),
2389 LOG_NETDEV_INTERFACE(link->network->bridge),
2390 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", link->network->bridge->ifname));
2391 link_enter_failed(link);
2392 return r;
2393 }
2394
2395 link->enslaving++;
2396 }
2397
2398 if (link->network->vrf) {
2399 log_struct(LOG_DEBUG,
2400 LOG_LINK_INTERFACE(link),
2401 LOG_NETDEV_INTERFACE(link->network->vrf),
2402 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", link->network->vrf->ifname));
2403
2404 r = netdev_join(link->network->vrf, link, netdev_join_handler);
2405 if (r < 0) {
2406 log_struct_errno(LOG_WARNING, r,
2407 LOG_LINK_INTERFACE(link),
2408 LOG_NETDEV_INTERFACE(link->network->vrf),
2409 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", link->network->vrf->ifname));
2410 link_enter_failed(link);
2411 return r;
2412 }
2413
2414 link->enslaving++;
2415 }
2416
2417 HASHMAP_FOREACH(netdev, link->network->stacked_netdevs, i) {
2418
2419 if (netdev->ifindex > 0) {
2420 link_joined(link);
2421 continue;
2422 }
2423
2424 log_struct(LOG_DEBUG,
2425 LOG_LINK_INTERFACE(link),
2426 LOG_NETDEV_INTERFACE(netdev),
2427 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", netdev->ifname));
2428
2429 r = netdev_join(netdev, link, netdev_join_handler);
2430 if (r < 0) {
2431 log_struct_errno(LOG_WARNING, r,
2432 LOG_LINK_INTERFACE(link),
2433 LOG_NETDEV_INTERFACE(netdev),
2434 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", netdev->ifname));
2435 link_enter_failed(link);
2436 return r;
2437 }
2438
2439 link->enslaving++;
2440 }
2441
2442 return 0;
2443 }
2444
2445 static int link_set_ipv4_forward(Link *link) {
2446 int r;
2447
2448 if (!link_ipv4_forward_enabled(link))
2449 return 0;
2450
2451 /* We propagate the forwarding flag from one interface to the
2452 * global setting one way. This means: as long as at least one
2453 * interface was configured at any time that had IP forwarding
2454 * enabled the setting will stay on for good. We do this
2455 * primarily to keep IPv4 and IPv6 packet forwarding behaviour
2456 * somewhat in sync (see below). */
2457
2458 r = write_string_file("/proc/sys/net/ipv4/ip_forward", "1", WRITE_STRING_FILE_VERIFY_ON_FAILURE);
2459 if (r < 0)
2460 log_link_warning_errno(link, r, "Cannot turn on IPv4 packet forwarding, ignoring: %m");
2461
2462 return 0;
2463 }
2464
2465 static int link_set_ipv6_forward(Link *link) {
2466 int r;
2467
2468 if (!link_ipv6_forward_enabled(link))
2469 return 0;
2470
2471 /* On Linux, the IPv6 stack does not know a per-interface
2472 * packet forwarding setting: either packet forwarding is on
2473 * for all, or off for all. We hence don't bother with a
2474 * per-interface setting, but simply propagate the interface
2475 * flag, if it is set, to the global flag, one-way. Note that
2476 * while IPv4 would allow a per-interface flag, we expose the
2477 * same behaviour there and also propagate the setting from
2478 * one to all, to keep things simple (see above). */
2479
2480 r = write_string_file("/proc/sys/net/ipv6/conf/all/forwarding", "1", WRITE_STRING_FILE_VERIFY_ON_FAILURE);
2481 if (r < 0)
2482 log_link_warning_errno(link, r, "Cannot configure IPv6 packet forwarding, ignoring: %m");
2483
2484 return 0;
2485 }
2486
2487 static int link_set_ipv6_privacy_extensions(Link *link) {
2488 char buf[DECIMAL_STR_MAX(unsigned) + 1];
2489 IPv6PrivacyExtensions s;
2490 const char *p = NULL;
2491 int r;
2492
2493 s = link_ipv6_privacy_extensions(link);
2494 if (s < 0)
2495 return 0;
2496
2497 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/use_tempaddr");
2498 xsprintf(buf, "%u", (unsigned) link->network->ipv6_privacy_extensions);
2499
2500 r = write_string_file(p, buf, WRITE_STRING_FILE_VERIFY_ON_FAILURE);
2501 if (r < 0)
2502 log_link_warning_errno(link, r, "Cannot configure IPv6 privacy extension for interface: %m");
2503
2504 return 0;
2505 }
2506
2507 static int link_set_ipv6_accept_ra(Link *link) {
2508 const char *p = NULL;
2509 int r;
2510
2511 /* Make this a NOP if IPv6 is not available */
2512 if (!socket_ipv6_is_supported())
2513 return 0;
2514
2515 if (link->flags & IFF_LOOPBACK)
2516 return 0;
2517
2518 if (!link->network)
2519 return 0;
2520
2521 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/accept_ra");
2522
2523 /* We handle router advertisements ourselves, tell the kernel to GTFO */
2524 r = write_string_file(p, "0", WRITE_STRING_FILE_VERIFY_ON_FAILURE);
2525 if (r < 0)
2526 log_link_warning_errno(link, r, "Cannot disable kernel IPv6 accept_ra for interface: %m");
2527
2528 return 0;
2529 }
2530
2531 static int link_set_ipv6_dad_transmits(Link *link) {
2532 char buf[DECIMAL_STR_MAX(int) + 1];
2533 const char *p = NULL;
2534 int r;
2535
2536 /* Make this a NOP if IPv6 is not available */
2537 if (!socket_ipv6_is_supported())
2538 return 0;
2539
2540 if (link->flags & IFF_LOOPBACK)
2541 return 0;
2542
2543 if (!link->network)
2544 return 0;
2545
2546 if (link->network->ipv6_dad_transmits < 0)
2547 return 0;
2548
2549 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/dad_transmits");
2550 xsprintf(buf, "%i", link->network->ipv6_dad_transmits);
2551
2552 r = write_string_file(p, buf, WRITE_STRING_FILE_VERIFY_ON_FAILURE);
2553 if (r < 0)
2554 log_link_warning_errno(link, r, "Cannot set IPv6 dad transmits for interface: %m");
2555
2556 return 0;
2557 }
2558
2559 static int link_set_ipv6_hop_limit(Link *link) {
2560 char buf[DECIMAL_STR_MAX(int) + 1];
2561 const char *p = NULL;
2562 int r;
2563
2564 /* Make this a NOP if IPv6 is not available */
2565 if (!socket_ipv6_is_supported())
2566 return 0;
2567
2568 if (link->flags & IFF_LOOPBACK)
2569 return 0;
2570
2571 if (!link->network)
2572 return 0;
2573
2574 if (link->network->ipv6_hop_limit < 0)
2575 return 0;
2576
2577 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/hop_limit");
2578 xsprintf(buf, "%i", link->network->ipv6_hop_limit);
2579
2580 r = write_string_file(p, buf, WRITE_STRING_FILE_VERIFY_ON_FAILURE);
2581 if (r < 0)
2582 log_link_warning_errno(link, r, "Cannot set IPv6 hop limit for interface: %m");
2583
2584 return 0;
2585 }
2586
2587 static int link_set_ipv6_mtu(Link *link) {
2588 char buf[DECIMAL_STR_MAX(unsigned) + 1];
2589 const char *p = NULL;
2590 int r;
2591
2592 /* Make this a NOP if IPv6 is not available */
2593 if (!socket_ipv6_is_supported())
2594 return 0;
2595
2596 if (link->flags & IFF_LOOPBACK)
2597 return 0;
2598
2599 if (link->network->ipv6_mtu == 0)
2600 return 0;
2601
2602 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/mtu");
2603
2604 xsprintf(buf, "%" PRIu32, link->network->ipv6_mtu);
2605
2606 r = write_string_file(p, buf, 0);
2607 if (r < 0)
2608 log_link_warning_errno(link, r, "Cannot set IPv6 MTU for interface: %m");
2609
2610 return 0;
2611 }
2612
2613 static int link_drop_foreign_config(Link *link) {
2614 Address *address;
2615 Route *route;
2616 Iterator i;
2617 int r;
2618
2619 SET_FOREACH(address, link->addresses_foreign, i) {
2620 /* we consider IPv6LL addresses to be managed by the kernel */
2621 if (address->family == AF_INET6 && in_addr_is_link_local(AF_INET6, &address->in_addr) == 1)
2622 continue;
2623
2624 r = address_remove(address, link, link_address_remove_handler);
2625 if (r < 0)
2626 return r;
2627 }
2628
2629 SET_FOREACH(route, link->routes_foreign, i) {
2630 /* do not touch routes managed by the kernel */
2631 if (route->protocol == RTPROT_KERNEL)
2632 continue;
2633
2634 r = route_remove(route, link, link_route_remove_handler);
2635 if (r < 0)
2636 return r;
2637 }
2638
2639 return 0;
2640 }
2641
2642 static int link_drop_config(Link *link) {
2643 Address *address, *pool_address;
2644 Route *route;
2645 Iterator i;
2646 int r;
2647
2648 SET_FOREACH(address, link->addresses, i) {
2649 /* we consider IPv6LL addresses to be managed by the kernel */
2650 if (address->family == AF_INET6 && in_addr_is_link_local(AF_INET6, &address->in_addr) == 1)
2651 continue;
2652
2653 r = address_remove(address, link, link_address_remove_handler);
2654 if (r < 0)
2655 return r;
2656
2657 /* If this address came from an address pool, clean up the pool */
2658 LIST_FOREACH(addresses, pool_address, link->pool_addresses) {
2659 if (address_equal(address, pool_address)) {
2660 LIST_REMOVE(addresses, link->pool_addresses, pool_address);
2661 address_free(pool_address);
2662 break;
2663 }
2664 }
2665 }
2666
2667 SET_FOREACH(route, link->routes, i) {
2668 /* do not touch routes managed by the kernel */
2669 if (route->protocol == RTPROT_KERNEL)
2670 continue;
2671
2672 r = route_remove(route, link, link_route_remove_handler);
2673 if (r < 0)
2674 return r;
2675 }
2676
2677 ndisc_flush(link);
2678
2679 return 0;
2680 }
2681
2682 static int link_update_lldp(Link *link) {
2683 int r;
2684
2685 assert(link);
2686
2687 if (!link->lldp)
2688 return 0;
2689
2690 if (link->flags & IFF_UP) {
2691 r = sd_lldp_start(link->lldp);
2692 if (r > 0)
2693 log_link_debug(link, "Started LLDP.");
2694 } else {
2695 r = sd_lldp_stop(link->lldp);
2696 if (r > 0)
2697 log_link_debug(link, "Stopped LLDP.");
2698 }
2699
2700 return r;
2701 }
2702
2703 static int link_configure_can(Link *link) {
2704 int r;
2705
2706 if (streq_ptr(link->kind, "can")) {
2707 /* The CAN interface must be down to configure bitrate, etc... */
2708 if ((link->flags & IFF_UP)) {
2709 r = link_down(link);
2710 if (r < 0) {
2711 link_enter_failed(link);
2712 return r;
2713 }
2714
2715 return 0;
2716 }
2717
2718 return link_set_can(link);
2719 }
2720
2721 if (!(link->flags & IFF_UP)) {
2722 r = link_up_can(link);
2723 if (r < 0) {
2724 link_enter_failed(link);
2725 return r;
2726 }
2727 }
2728
2729 return 0;
2730 }
2731
2732 static int link_configure(Link *link) {
2733 int r;
2734
2735 assert(link);
2736 assert(link->network);
2737 assert(link->state == LINK_STATE_PENDING);
2738
2739 if (STRPTR_IN_SET(link->kind, "can", "vcan"))
2740 return link_configure_can(link);
2741
2742 /* Drop foreign config, but ignore loopback or critical devices.
2743 * We do not want to remove loopback address or addresses used for root NFS. */
2744 if (!(link->flags & IFF_LOOPBACK) && !(link->network->dhcp_critical)) {
2745 r = link_drop_foreign_config(link);
2746 if (r < 0)
2747 return r;
2748 }
2749
2750 r = link_set_proxy_arp(link);
2751 if (r < 0)
2752 return r;
2753
2754 r = ipv6_proxy_ndp_addresses_configure(link);
2755 if (r < 0)
2756 return r;
2757
2758 r = link_set_ipv4_forward(link);
2759 if (r < 0)
2760 return r;
2761
2762 r = link_set_ipv6_forward(link);
2763 if (r < 0)
2764 return r;
2765
2766 r = link_set_ipv6_privacy_extensions(link);
2767 if (r < 0)
2768 return r;
2769
2770 r = link_set_ipv6_accept_ra(link);
2771 if (r < 0)
2772 return r;
2773
2774 r = link_set_ipv6_dad_transmits(link);
2775 if (r < 0)
2776 return r;
2777
2778 r = link_set_ipv6_hop_limit(link);
2779 if (r < 0)
2780 return r;
2781
2782 r = link_set_flags(link);
2783 if (r < 0)
2784 return r;
2785
2786 r = link_set_ipv6_mtu(link);
2787 if (r < 0)
2788 return r;
2789
2790 if (link_ipv4ll_enabled(link)) {
2791 r = ipv4ll_configure(link);
2792 if (r < 0)
2793 return r;
2794 }
2795
2796 if (link_dhcp4_enabled(link)) {
2797 r = dhcp4_set_promote_secondaries(link);
2798 if (r < 0)
2799 return r;
2800
2801 r = dhcp4_configure(link);
2802 if (r < 0)
2803 return r;
2804 }
2805
2806 if (link_dhcp4_server_enabled(link)) {
2807 r = sd_dhcp_server_new(&link->dhcp_server, link->ifindex);
2808 if (r < 0)
2809 return r;
2810
2811 r = sd_dhcp_server_attach_event(link->dhcp_server, NULL, 0);
2812 if (r < 0)
2813 return r;
2814 }
2815
2816 if (link_dhcp6_enabled(link) ||
2817 link_ipv6_accept_ra_enabled(link)) {
2818 r = dhcp6_configure(link);
2819 if (r < 0)
2820 return r;
2821 }
2822
2823 if (link_ipv6_accept_ra_enabled(link)) {
2824 r = ndisc_configure(link);
2825 if (r < 0)
2826 return r;
2827 }
2828
2829 if (link_radv_enabled(link)) {
2830 r = radv_configure(link);
2831 if (r < 0)
2832 return r;
2833 }
2834
2835 if (link_lldp_rx_enabled(link)) {
2836 r = sd_lldp_new(&link->lldp);
2837 if (r < 0)
2838 return r;
2839
2840 r = sd_lldp_set_ifindex(link->lldp, link->ifindex);
2841 if (r < 0)
2842 return r;
2843
2844 r = sd_lldp_match_capabilities(link->lldp,
2845 link->network->lldp_mode == LLDP_MODE_ROUTERS_ONLY ?
2846 SD_LLDP_SYSTEM_CAPABILITIES_ALL_ROUTERS :
2847 SD_LLDP_SYSTEM_CAPABILITIES_ALL);
2848 if (r < 0)
2849 return r;
2850
2851 r = sd_lldp_set_filter_address(link->lldp, &link->mac);
2852 if (r < 0)
2853 return r;
2854
2855 r = sd_lldp_attach_event(link->lldp, NULL, 0);
2856 if (r < 0)
2857 return r;
2858
2859 r = sd_lldp_set_callback(link->lldp, lldp_handler, link);
2860 if (r < 0)
2861 return r;
2862
2863 r = link_update_lldp(link);
2864 if (r < 0)
2865 return r;
2866 }
2867
2868 if (link->network->mtu > 0) {
2869 r = link_set_mtu(link, link->network->mtu);
2870 if (r < 0)
2871 return r;
2872 }
2873
2874 return link_configure_after_setting_mtu(link);
2875 }
2876
2877 static int link_configure_after_setting_mtu(Link *link) {
2878 int r;
2879
2880 assert(link);
2881 assert(link->network);
2882 assert(link->state == LINK_STATE_PENDING);
2883
2884 if (link->setting_mtu)
2885 return 0;
2886
2887 if (link_has_carrier(link) || link->network->configure_without_carrier) {
2888 r = link_acquire_conf(link);
2889 if (r < 0)
2890 return r;
2891 }
2892
2893 return link_enter_join_netdev(link);
2894 }
2895
2896 static int duid_set_uuid(DUID *duid, sd_id128_t uuid) {
2897 assert(duid);
2898
2899 if (duid->raw_data_len > 0)
2900 return 0;
2901
2902 if (duid->type != DUID_TYPE_UUID)
2903 return -EINVAL;
2904
2905 memcpy(&duid->raw_data, &uuid, sizeof(sd_id128_t));
2906 duid->raw_data_len = sizeof(sd_id128_t);
2907
2908 return 1;
2909 }
2910
2911 int get_product_uuid_handler(sd_bus_message *m, void *userdata, sd_bus_error *ret_error) {
2912 Manager *manager = userdata;
2913 const sd_bus_error *e;
2914 const void *a;
2915 size_t sz;
2916 DUID *duid;
2917 Link *link;
2918 int r;
2919
2920 assert(m);
2921 assert(manager);
2922
2923 e = sd_bus_message_get_error(m);
2924 if (e) {
2925 log_error_errno(sd_bus_error_get_errno(e),
2926 "Could not get product UUID. Falling back to use machine-app-specific ID as DUID-UUID: %s",
2927 e->message);
2928 goto configure;
2929 }
2930
2931 r = sd_bus_message_read_array(m, 'y', &a, &sz);
2932 if (r < 0)
2933 goto configure;
2934
2935 if (sz != sizeof(sd_id128_t)) {
2936 log_error("Invalid product UUID. Falling back to use machine-app-specific ID as DUID-UUID.");
2937 goto configure;
2938 }
2939
2940 memcpy(&manager->product_uuid, a, sz);
2941 while ((duid = set_steal_first(manager->duids_requesting_uuid)))
2942 (void) duid_set_uuid(duid, manager->product_uuid);
2943
2944 manager->duids_requesting_uuid = set_free(manager->duids_requesting_uuid);
2945
2946 configure:
2947 while ((link = set_steal_first(manager->links_requesting_uuid))) {
2948 r = link_configure(link);
2949 if (r < 0)
2950 log_link_error_errno(link, r, "Failed to configure link: %m");
2951 }
2952
2953 manager->links_requesting_uuid = set_free(manager->links_requesting_uuid);
2954
2955 /* To avoid calling GetProductUUID() bus method so frequently, set the flag below
2956 * even if the method fails. */
2957 manager->has_product_uuid = true;
2958
2959 return 1;
2960 }
2961
2962 static bool link_requires_uuid(Link *link) {
2963 const DUID *duid;
2964
2965 assert(link);
2966 assert(link->manager);
2967 assert(link->network);
2968
2969 duid = link_get_duid(link);
2970 if (duid->type != DUID_TYPE_UUID || duid->raw_data_len != 0)
2971 return false;
2972
2973 if (link_dhcp4_enabled(link) && IN_SET(link->network->dhcp_client_identifier, DHCP_CLIENT_ID_DUID, DHCP_CLIENT_ID_DUID_ONLY))
2974 return true;
2975
2976 if (link_dhcp6_enabled(link) || link_ipv6_accept_ra_enabled(link))
2977 return true;
2978
2979 return false;
2980 }
2981
2982 static int link_configure_duid(Link *link) {
2983 Manager *m;
2984 DUID *duid;
2985 int r;
2986
2987 assert(link);
2988 assert(link->manager);
2989 assert(link->network);
2990
2991 m = link->manager;
2992 duid = link_get_duid(link);
2993
2994 if (!link_requires_uuid(link))
2995 return 1;
2996
2997 if (m->has_product_uuid) {
2998 (void) duid_set_uuid(duid, m->product_uuid);
2999 return 1;
3000 }
3001
3002 if (!m->links_requesting_uuid) {
3003 r = manager_request_product_uuid(m, link);
3004 if (r < 0) {
3005 if (r == -ENOMEM)
3006 return r;
3007
3008 log_link_warning_errno(link, r,
3009 "Failed to get product UUID. Falling back to use machine-app-specific ID as DUID-UUID: %m");
3010 return 1;
3011 }
3012 } else {
3013 r = set_put(m->links_requesting_uuid, link);
3014 if (r < 0)
3015 return log_oom();
3016
3017 r = set_put(m->duids_requesting_uuid, duid);
3018 if (r < 0)
3019 return log_oom();
3020 }
3021
3022 return 0;
3023 }
3024
3025 static int link_initialized_and_synced(Link *link) {
3026 Network *network;
3027 int r;
3028
3029 assert(link);
3030 assert(link->ifname);
3031 assert(link->manager);
3032
3033 if (link->state != LINK_STATE_PENDING)
3034 return 1;
3035
3036 log_link_debug(link, "Link state is up-to-date");
3037
3038 r = link_new_bound_by_list(link);
3039 if (r < 0)
3040 return r;
3041
3042 r = link_handle_bound_by_list(link);
3043 if (r < 0)
3044 return r;
3045
3046 if (!link->network) {
3047 r = network_get(link->manager, link->sd_device, link->ifname,
3048 &link->mac, &network);
3049 if (r == -ENOENT) {
3050 link_enter_unmanaged(link);
3051 return 1;
3052 } else if (r == 0 && network->unmanaged) {
3053 link_enter_unmanaged(link);
3054 return 0;
3055 } else if (r < 0)
3056 return r;
3057
3058 if (link->flags & IFF_LOOPBACK) {
3059 if (network->link_local != ADDRESS_FAMILY_NO)
3060 log_link_debug(link, "Ignoring link-local autoconfiguration for loopback link");
3061
3062 if (network->dhcp != ADDRESS_FAMILY_NO)
3063 log_link_debug(link, "Ignoring DHCP clients for loopback link");
3064
3065 if (network->dhcp_server)
3066 log_link_debug(link, "Ignoring DHCP server for loopback link");
3067 }
3068
3069 r = network_apply(network, link);
3070 if (r < 0)
3071 return r;
3072 }
3073
3074 r = link_new_bound_to_list(link);
3075 if (r < 0)
3076 return r;
3077
3078 /* link_configure_duid() returns 0 if it requests product UUID. In that case,
3079 * link_configure() is called later asynchronously. */
3080 r = link_configure_duid(link);
3081 if (r <= 0)
3082 return r;
3083
3084 r = link_configure(link);
3085 if (r < 0)
3086 return r;
3087
3088 return 1;
3089 }
3090
3091 static int link_initialized_handler(sd_netlink *rtnl, sd_netlink_message *m, void *userdata) {
3092 (void) link_initialized_and_synced(userdata);
3093 return 1;
3094 }
3095
3096 int link_initialized(Link *link, sd_device *device) {
3097 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
3098 int r;
3099
3100 assert(link);
3101 assert(link->manager);
3102 assert(link->manager->rtnl);
3103 assert(device);
3104
3105 if (link->state != LINK_STATE_PENDING)
3106 return 0;
3107
3108 if (link->sd_device)
3109 return 0;
3110
3111 log_link_debug(link, "udev initialized link");
3112
3113 link->sd_device = sd_device_ref(device);
3114
3115 /* udev has initialized the link, but we don't know if we have yet
3116 * processed the NEWLINK messages with the latest state. Do a GETLINK,
3117 * when it returns we know that the pending NEWLINKs have already been
3118 * processed and that we are up-to-date */
3119
3120 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_GETLINK,
3121 link->ifindex);
3122 if (r < 0)
3123 return r;
3124
3125 r = sd_netlink_call_async(link->manager->rtnl, NULL, req, link_initialized_handler,
3126 link_netlink_destroy_callback, link, 0, __func__);
3127 if (r < 0)
3128 return r;
3129
3130 link_ref(link);
3131
3132 return 0;
3133 }
3134
3135 static int link_load(Link *link) {
3136 _cleanup_free_ char *network_file = NULL,
3137 *addresses = NULL,
3138 *routes = NULL,
3139 *dhcp4_address = NULL,
3140 *ipv4ll_address = NULL;
3141 union in_addr_union address;
3142 union in_addr_union route_dst;
3143 const char *p;
3144 int r;
3145
3146 assert(link);
3147
3148 r = parse_env_file(NULL, link->state_file, NEWLINE,
3149 "NETWORK_FILE", &network_file,
3150 "ADDRESSES", &addresses,
3151 "ROUTES", &routes,
3152 "DHCP4_ADDRESS", &dhcp4_address,
3153 "IPV4LL_ADDRESS", &ipv4ll_address,
3154 NULL);
3155 if (r < 0 && r != -ENOENT)
3156 return log_link_error_errno(link, r, "Failed to read %s: %m", link->state_file);
3157
3158 if (network_file) {
3159 Network *network;
3160 char *suffix;
3161
3162 /* drop suffix */
3163 suffix = strrchr(network_file, '.');
3164 if (!suffix) {
3165 log_link_debug(link, "Failed to get network name from %s", network_file);
3166 goto network_file_fail;
3167 }
3168 *suffix = '\0';
3169
3170 r = network_get_by_name(link->manager, basename(network_file), &network);
3171 if (r < 0) {
3172 log_link_debug_errno(link, r, "Failed to get network %s: %m", basename(network_file));
3173 goto network_file_fail;
3174 }
3175
3176 r = network_apply(network, link);
3177 if (r < 0)
3178 return log_link_error_errno(link, r, "Failed to apply network %s: %m", basename(network_file));
3179 }
3180
3181 network_file_fail:
3182
3183 if (addresses) {
3184 p = addresses;
3185
3186 for (;;) {
3187 _cleanup_free_ char *address_str = NULL;
3188 char *prefixlen_str;
3189 int family;
3190 unsigned char prefixlen;
3191
3192 r = extract_first_word(&p, &address_str, NULL, 0);
3193 if (r < 0) {
3194 log_link_debug_errno(link, r, "Failed to extract next address string: %m");
3195 continue;
3196 }
3197 if (r == 0)
3198 break;
3199
3200 prefixlen_str = strchr(address_str, '/');
3201 if (!prefixlen_str) {
3202 log_link_debug(link, "Failed to parse address and prefix length %s", address_str);
3203 continue;
3204 }
3205
3206 *prefixlen_str++ = '\0';
3207
3208 r = sscanf(prefixlen_str, "%hhu", &prefixlen);
3209 if (r != 1) {
3210 log_link_error(link, "Failed to parse prefixlen %s", prefixlen_str);
3211 continue;
3212 }
3213
3214 r = in_addr_from_string_auto(address_str, &family, &address);
3215 if (r < 0) {
3216 log_link_debug_errno(link, r, "Failed to parse address %s: %m", address_str);
3217 continue;
3218 }
3219
3220 r = address_add(link, family, &address, prefixlen, NULL);
3221 if (r < 0)
3222 return log_link_error_errno(link, r, "Failed to add address: %m");
3223 }
3224 }
3225
3226 if (routes) {
3227 p = routes;
3228
3229 for (;;) {
3230 Route *route;
3231 _cleanup_free_ char *route_str = NULL;
3232 _cleanup_(sd_event_source_unrefp) sd_event_source *expire = NULL;
3233 usec_t lifetime;
3234 char *prefixlen_str;
3235 int family;
3236 unsigned char prefixlen, tos, table;
3237 uint32_t priority;
3238
3239 r = extract_first_word(&p, &route_str, NULL, 0);
3240 if (r < 0) {
3241 log_link_debug_errno(link, r, "Failed to extract next route string: %m");
3242 continue;
3243 }
3244 if (r == 0)
3245 break;
3246
3247 prefixlen_str = strchr(route_str, '/');
3248 if (!prefixlen_str) {
3249 log_link_debug(link, "Failed to parse route %s", route_str);
3250 continue;
3251 }
3252
3253 *prefixlen_str++ = '\0';
3254
3255 r = sscanf(prefixlen_str, "%hhu/%hhu/%"SCNu32"/%hhu/"USEC_FMT, &prefixlen, &tos, &priority, &table, &lifetime);
3256 if (r != 5) {
3257 log_link_debug(link,
3258 "Failed to parse destination prefix length, tos, priority, table or expiration %s",
3259 prefixlen_str);
3260 continue;
3261 }
3262
3263 r = in_addr_from_string_auto(route_str, &family, &route_dst);
3264 if (r < 0) {
3265 log_link_debug_errno(link, r, "Failed to parse route destination %s: %m", route_str);
3266 continue;
3267 }
3268
3269 r = route_add(link, family, &route_dst, prefixlen, tos, priority, table, &route);
3270 if (r < 0)
3271 return log_link_error_errno(link, r, "Failed to add route: %m");
3272
3273 if (lifetime != USEC_INFINITY && !kernel_route_expiration_supported()) {
3274 r = sd_event_add_time(link->manager->event, &expire, clock_boottime_or_monotonic(), lifetime,
3275 0, route_expire_handler, route);
3276 if (r < 0)
3277 log_link_warning_errno(link, r, "Could not arm route expiration handler: %m");
3278 }
3279
3280 route->lifetime = lifetime;
3281 sd_event_source_unref(route->expire);
3282 route->expire = TAKE_PTR(expire);
3283 }
3284 }
3285
3286 if (dhcp4_address) {
3287 r = in_addr_from_string(AF_INET, dhcp4_address, &address);
3288 if (r < 0) {
3289 log_link_debug_errno(link, r, "Failed to parse DHCPv4 address %s: %m", dhcp4_address);
3290 goto dhcp4_address_fail;
3291 }
3292
3293 r = sd_dhcp_client_new(&link->dhcp_client, link->network ? link->network->dhcp_anonymize : 0);
3294 if (r < 0)
3295 return log_link_error_errno(link, r, "Failed to create DHCPv4 client: %m");
3296
3297 r = sd_dhcp_client_set_request_address(link->dhcp_client, &address.in);
3298 if (r < 0)
3299 return log_link_error_errno(link, r, "Failed to set initial DHCPv4 address %s: %m", dhcp4_address);
3300 }
3301
3302 dhcp4_address_fail:
3303
3304 if (ipv4ll_address) {
3305 r = in_addr_from_string(AF_INET, ipv4ll_address, &address);
3306 if (r < 0) {
3307 log_link_debug_errno(link, r, "Failed to parse IPv4LL address %s: %m", ipv4ll_address);
3308 goto ipv4ll_address_fail;
3309 }
3310
3311 r = sd_ipv4ll_new(&link->ipv4ll);
3312 if (r < 0)
3313 return log_link_error_errno(link, r, "Failed to create IPv4LL client: %m");
3314
3315 r = sd_ipv4ll_set_address(link->ipv4ll, &address.in);
3316 if (r < 0)
3317 return log_link_error_errno(link, r, "Failed to set initial IPv4LL address %s: %m", ipv4ll_address);
3318 }
3319
3320 ipv4ll_address_fail:
3321
3322 return 0;
3323 }
3324
3325 int link_add(Manager *m, sd_netlink_message *message, Link **ret) {
3326 _cleanup_(sd_device_unrefp) sd_device *device = NULL;
3327 char ifindex_str[2 + DECIMAL_STR_MAX(int)];
3328 int initialized, r;
3329 Link *link;
3330
3331 assert(m);
3332 assert(m->rtnl);
3333 assert(message);
3334 assert(ret);
3335
3336 r = link_new(m, message, ret);
3337 if (r < 0)
3338 return r;
3339
3340 link = *ret;
3341
3342 log_link_debug(link, "Link %d added", link->ifindex);
3343
3344 r = link_load(link);
3345 if (r < 0)
3346 return r;
3347
3348 if (detect_container() <= 0) {
3349 /* not in a container, udev will be around */
3350 sprintf(ifindex_str, "n%d", link->ifindex);
3351 r = sd_device_new_from_device_id(&device, ifindex_str);
3352 if (r < 0) {
3353 log_link_warning_errno(link, r, "Could not find device: %m");
3354 goto failed;
3355 }
3356
3357 r = sd_device_get_is_initialized(device, &initialized);
3358 if (r < 0) {
3359 log_link_warning_errno(link, r, "Could not determine whether the device is initialized or not: %m");
3360 goto failed;
3361 }
3362 if (!initialized) {
3363 /* not yet ready */
3364 log_link_debug(link, "link pending udev initialization...");
3365 return 0;
3366 }
3367
3368 r = link_initialized(link, device);
3369 if (r < 0)
3370 goto failed;
3371 } else {
3372 r = link_initialized_and_synced(link);
3373 if (r < 0)
3374 goto failed;
3375 }
3376
3377 return 0;
3378 failed:
3379 link_enter_failed(link);
3380 return r;
3381 }
3382
3383 int link_ipv6ll_gained(Link *link, const struct in6_addr *address) {
3384 int r;
3385
3386 assert(link);
3387
3388 log_link_info(link, "Gained IPv6LL");
3389
3390 link->ipv6ll_address = *address;
3391 link_check_ready(link);
3392
3393 if (!IN_SET(link->state, LINK_STATE_PENDING, LINK_STATE_UNMANAGED, LINK_STATE_FAILED)) {
3394 r = link_acquire_ipv6_conf(link);
3395 if (r < 0) {
3396 link_enter_failed(link);
3397 return r;
3398 }
3399 }
3400
3401 return 0;
3402 }
3403
3404 static int link_carrier_gained(Link *link) {
3405 int r;
3406
3407 assert(link);
3408
3409 if (!IN_SET(link->state, LINK_STATE_PENDING, LINK_STATE_UNMANAGED, LINK_STATE_FAILED)) {
3410 r = link_acquire_conf(link);
3411 if (r < 0) {
3412 link_enter_failed(link);
3413 return r;
3414 }
3415
3416 r = link_enter_set_addresses(link);
3417 if (r < 0)
3418 return r;
3419 }
3420
3421 r = link_handle_bound_by_list(link);
3422 if (r < 0)
3423 return r;
3424
3425 return 0;
3426 }
3427
3428 static int link_carrier_lost(Link *link) {
3429 int r;
3430
3431 assert(link);
3432
3433 /* Some devices reset itself while setting the MTU. This causes the DHCP client fall into a loop.
3434 * setting_mtu keep track whether the device got reset because of setting MTU and does not drop the
3435 * configuration and stop the clients as well. */
3436 if (link->setting_mtu)
3437 return 0;
3438
3439 r = link_stop_clients(link);
3440 if (r < 0) {
3441 link_enter_failed(link);
3442 return r;
3443 }
3444
3445 if (link_dhcp4_server_enabled(link))
3446 (void) sd_dhcp_server_stop(link->dhcp_server);
3447
3448 r = link_drop_config(link);
3449 if (r < 0)
3450 return r;
3451
3452 if (!IN_SET(link->state, LINK_STATE_UNMANAGED, LINK_STATE_PENDING)) {
3453 log_link_debug(link, "State is %s, dropping config", link_state_to_string(link->state));
3454 r = link_drop_foreign_config(link);
3455 if (r < 0)
3456 return r;
3457 }
3458
3459 r = link_handle_bound_by_list(link);
3460 if (r < 0)
3461 return r;
3462
3463 return 0;
3464 }
3465
3466 int link_carrier_reset(Link *link) {
3467 int r;
3468
3469 assert(link);
3470
3471 if (link_has_carrier(link)) {
3472 r = link_carrier_lost(link);
3473 if (r < 0)
3474 return r;
3475
3476 r = link_carrier_gained(link);
3477 if (r < 0)
3478 return r;
3479
3480 log_link_info(link, "Reset carrier");
3481 }
3482
3483 return 0;
3484 }
3485
3486 int link_update(Link *link, sd_netlink_message *m) {
3487 struct ether_addr mac;
3488 const char *ifname;
3489 uint32_t mtu;
3490 bool had_carrier, carrier_gained, carrier_lost;
3491 int r;
3492
3493 assert(link);
3494 assert(link->ifname);
3495 assert(m);
3496
3497 if (link->state == LINK_STATE_LINGER) {
3498 log_link_info(link, "Link readded");
3499 link_set_state(link, LINK_STATE_ENSLAVING);
3500
3501 r = link_new_carrier_maps(link);
3502 if (r < 0)
3503 return r;
3504 }
3505
3506 r = sd_netlink_message_read_string(m, IFLA_IFNAME, &ifname);
3507 if (r >= 0 && !streq(ifname, link->ifname)) {
3508 log_link_info(link, "Interface name change detected, %s has been renamed to %s.", link->ifname, ifname);
3509
3510 if (link->state == LINK_STATE_PENDING) {
3511 r = free_and_strdup(&link->ifname, ifname);
3512 if (r < 0)
3513 return r;
3514 } else {
3515 Manager *manager = link->manager;
3516
3517 link_drop(link);
3518 r = link_add(manager, m, &link);
3519 if (r < 0)
3520 return r;
3521 }
3522 }
3523
3524 r = sd_netlink_message_read_u32(m, IFLA_MTU, &mtu);
3525 if (r >= 0 && mtu > 0) {
3526 link->mtu = mtu;
3527 if (link->original_mtu == 0) {
3528 link->original_mtu = mtu;
3529 log_link_debug(link, "Saved original MTU: %" PRIu32, link->original_mtu);
3530 }
3531
3532 if (link->dhcp_client) {
3533 r = sd_dhcp_client_set_mtu(link->dhcp_client,
3534 link->mtu);
3535 if (r < 0)
3536 return log_link_warning_errno(link, r, "Could not update MTU in DHCP client: %m");
3537 }
3538
3539 if (link->radv) {
3540 r = sd_radv_set_mtu(link->radv, link->mtu);
3541 if (r < 0)
3542 return log_link_warning_errno(link, r, "Could not set MTU for Router Advertisement: %m");
3543 }
3544 }
3545
3546 /* The kernel may broadcast NEWLINK messages without the MAC address
3547 set, simply ignore them. */
3548 r = sd_netlink_message_read_ether_addr(m, IFLA_ADDRESS, &mac);
3549 if (r >= 0) {
3550 if (memcmp(link->mac.ether_addr_octet, mac.ether_addr_octet,
3551 ETH_ALEN)) {
3552
3553 memcpy(link->mac.ether_addr_octet, mac.ether_addr_octet,
3554 ETH_ALEN);
3555
3556 log_link_debug(link, "MAC address: "
3557 "%02hhx:%02hhx:%02hhx:%02hhx:%02hhx:%02hhx",
3558 mac.ether_addr_octet[0],
3559 mac.ether_addr_octet[1],
3560 mac.ether_addr_octet[2],
3561 mac.ether_addr_octet[3],
3562 mac.ether_addr_octet[4],
3563 mac.ether_addr_octet[5]);
3564
3565 if (link->ipv4ll) {
3566 r = sd_ipv4ll_set_mac(link->ipv4ll, &link->mac);
3567 if (r < 0)
3568 return log_link_warning_errno(link, r, "Could not update MAC address in IPv4LL client: %m");
3569 }
3570
3571 if (link->dhcp_client) {
3572 r = sd_dhcp_client_set_mac(link->dhcp_client,
3573 (const uint8_t *) &link->mac,
3574 sizeof (link->mac),
3575 ARPHRD_ETHER);
3576 if (r < 0)
3577 return log_link_warning_errno(link, r, "Could not update MAC address in DHCP client: %m");
3578
3579 r = dhcp4_set_client_identifier(link);
3580 if (r < 0)
3581 return r;
3582 }
3583
3584 if (link->dhcp6_client) {
3585 const DUID* duid = link_get_duid(link);
3586
3587 r = sd_dhcp6_client_set_mac(link->dhcp6_client,
3588 (const uint8_t *) &link->mac,
3589 sizeof (link->mac),
3590 ARPHRD_ETHER);
3591 if (r < 0)
3592 return log_link_warning_errno(link, r, "Could not update MAC address in DHCPv6 client: %m");
3593
3594 r = sd_dhcp6_client_set_iaid(link->dhcp6_client,
3595 link->network->iaid);
3596 if (r < 0)
3597 return log_link_warning_errno(link, r, "Could not update DHCPv6 IAID: %m");
3598
3599 r = sd_dhcp6_client_set_duid(link->dhcp6_client,
3600 duid->type,
3601 duid->raw_data_len > 0 ? duid->raw_data : NULL,
3602 duid->raw_data_len);
3603 if (r < 0)
3604 return log_link_warning_errno(link, r, "Could not update DHCPv6 DUID: %m");
3605 }
3606
3607 if (link->radv) {
3608 r = sd_radv_set_mac(link->radv, &link->mac);
3609 if (r < 0)
3610 return log_link_warning_errno(link, r, "Could not update MAC for Router Advertisement: %m");
3611 }
3612
3613 if (link->ndisc) {
3614 r = sd_ndisc_set_mac(link->ndisc, &link->mac);
3615 if (r < 0)
3616 return log_link_warning_errno(link, r, "Could not update MAC for ndisc: %m");
3617 }
3618 }
3619 }
3620
3621 had_carrier = link_has_carrier(link);
3622
3623 r = link_update_flags(link, m);
3624 if (r < 0)
3625 return r;
3626
3627 r = link_update_lldp(link);
3628 if (r < 0)
3629 return r;
3630
3631 carrier_gained = !had_carrier && link_has_carrier(link);
3632 carrier_lost = had_carrier && !link_has_carrier(link);
3633
3634 if (carrier_gained) {
3635 log_link_info(link, "Gained carrier");
3636
3637 r = link_carrier_gained(link);
3638 if (r < 0)
3639 return r;
3640 } else if (carrier_lost) {
3641 log_link_info(link, "Lost carrier");
3642
3643 r = link_carrier_lost(link);
3644 if (r < 0)
3645 return r;
3646 }
3647
3648 return 0;
3649 }
3650
3651 static void print_link_hashmap(FILE *f, const char *prefix, Hashmap* h) {
3652 bool space = false;
3653 Iterator i;
3654 Link *link;
3655
3656 assert(f);
3657 assert(prefix);
3658
3659 if (hashmap_isempty(h))
3660 return;
3661
3662 fputs(prefix, f);
3663 HASHMAP_FOREACH(link, h, i) {
3664 if (space)
3665 fputc(' ', f);
3666
3667 fprintf(f, "%i", link->ifindex);
3668 space = true;
3669 }
3670
3671 fputc('\n', f);
3672 }
3673
3674 int link_save(Link *link) {
3675 _cleanup_free_ char *temp_path = NULL;
3676 _cleanup_fclose_ FILE *f = NULL;
3677 const char *admin_state, *oper_state;
3678 Address *a;
3679 Route *route;
3680 Iterator i;
3681 int r;
3682
3683 assert(link);
3684 assert(link->state_file);
3685 assert(link->lease_file);
3686 assert(link->manager);
3687
3688 if (link->state == LINK_STATE_LINGER) {
3689 unlink(link->state_file);
3690 return 0;
3691 }
3692
3693 link_lldp_save(link);
3694
3695 admin_state = link_state_to_string(link->state);
3696 assert(admin_state);
3697
3698 oper_state = link_operstate_to_string(link->operstate);
3699 assert(oper_state);
3700
3701 r = fopen_temporary(link->state_file, &f, &temp_path);
3702 if (r < 0)
3703 goto fail;
3704
3705 (void) __fsetlocking(f, FSETLOCKING_BYCALLER);
3706 (void) fchmod(fileno(f), 0644);
3707
3708 fprintf(f,
3709 "# This is private data. Do not parse.\n"
3710 "ADMIN_STATE=%s\n"
3711 "OPER_STATE=%s\n",
3712 admin_state, oper_state);
3713
3714 if (link->network) {
3715 bool space;
3716 sd_dhcp6_lease *dhcp6_lease = NULL;
3717 const char *dhcp_domainname = NULL;
3718 char **dhcp6_domains = NULL;
3719 char **dhcp_domains = NULL;
3720 unsigned j;
3721
3722 fprintf(f, "REQUIRED_FOR_ONLINE=%s\n",
3723 yes_no(link->network->required_for_online));
3724
3725 if (link->dhcp6_client) {
3726 r = sd_dhcp6_client_get_lease(link->dhcp6_client, &dhcp6_lease);
3727 if (r < 0 && r != -ENOMSG)
3728 log_link_debug(link, "No DHCPv6 lease");
3729 }
3730
3731 fprintf(f, "NETWORK_FILE=%s\n", link->network->filename);
3732
3733 fputs("DNS=", f);
3734 space = false;
3735
3736 for (j = 0; j < link->network->n_dns; j++) {
3737 _cleanup_free_ char *b = NULL;
3738
3739 r = in_addr_to_string(link->network->dns[j].family,
3740 &link->network->dns[j].address, &b);
3741 if (r < 0) {
3742 log_debug_errno(r, "Failed to format address, ignoring: %m");
3743 continue;
3744 }
3745
3746 if (space)
3747 fputc(' ', f);
3748 fputs(b, f);
3749 space = true;
3750 }
3751
3752 if (link->network->dhcp_use_dns &&
3753 link->dhcp_lease) {
3754 const struct in_addr *addresses;
3755
3756 r = sd_dhcp_lease_get_dns(link->dhcp_lease, &addresses);
3757 if (r > 0) {
3758 if (space)
3759 fputc(' ', f);
3760 serialize_in_addrs(f, addresses, r);
3761 space = true;
3762 }
3763 }
3764
3765 if (link->network->dhcp_use_dns && dhcp6_lease) {
3766 struct in6_addr *in6_addrs;
3767
3768 r = sd_dhcp6_lease_get_dns(dhcp6_lease, &in6_addrs);
3769 if (r > 0) {
3770 if (space)
3771 fputc(' ', f);
3772 serialize_in6_addrs(f, in6_addrs, r);
3773 space = true;
3774 }
3775 }
3776
3777 /* Make sure to flush out old entries before we use the NDISC data */
3778 ndisc_vacuum(link);
3779
3780 if (link->network->ipv6_accept_ra_use_dns && link->ndisc_rdnss) {
3781 NDiscRDNSS *dd;
3782
3783 SET_FOREACH(dd, link->ndisc_rdnss, i) {
3784 if (space)
3785 fputc(' ', f);
3786
3787 serialize_in6_addrs(f, &dd->address, 1);
3788 space = true;
3789 }
3790 }
3791
3792 fputc('\n', f);
3793
3794 fputs("NTP=", f);
3795 space = false;
3796 fputstrv(f, link->network->ntp, NULL, &space);
3797
3798 if (link->network->dhcp_use_ntp &&
3799 link->dhcp_lease) {
3800 const struct in_addr *addresses;
3801
3802 r = sd_dhcp_lease_get_ntp(link->dhcp_lease, &addresses);
3803 if (r > 0) {
3804 if (space)
3805 fputc(' ', f);
3806 serialize_in_addrs(f, addresses, r);
3807 space = true;
3808 }
3809 }
3810
3811 if (link->network->dhcp_use_ntp && dhcp6_lease) {
3812 struct in6_addr *in6_addrs;
3813 char **hosts;
3814
3815 r = sd_dhcp6_lease_get_ntp_addrs(dhcp6_lease,
3816 &in6_addrs);
3817 if (r > 0) {
3818 if (space)
3819 fputc(' ', f);
3820 serialize_in6_addrs(f, in6_addrs, r);
3821 space = true;
3822 }
3823
3824 r = sd_dhcp6_lease_get_ntp_fqdn(dhcp6_lease, &hosts);
3825 if (r > 0)
3826 fputstrv(f, hosts, NULL, &space);
3827 }
3828
3829 fputc('\n', f);
3830
3831 if (link->network->dhcp_use_domains != DHCP_USE_DOMAINS_NO) {
3832 if (link->dhcp_lease) {
3833 (void) sd_dhcp_lease_get_domainname(link->dhcp_lease, &dhcp_domainname);
3834 (void) sd_dhcp_lease_get_search_domains(link->dhcp_lease, &dhcp_domains);
3835 }
3836 if (dhcp6_lease)
3837 (void) sd_dhcp6_lease_get_domains(dhcp6_lease, &dhcp6_domains);
3838 }
3839
3840 fputs("DOMAINS=", f);
3841 space = false;
3842 fputstrv(f, link->network->search_domains, NULL, &space);
3843
3844 if (link->network->dhcp_use_domains == DHCP_USE_DOMAINS_YES) {
3845 NDiscDNSSL *dd;
3846
3847 if (dhcp_domainname)
3848 fputs_with_space(f, dhcp_domainname, NULL, &space);
3849 if (dhcp_domains)
3850 fputstrv(f, dhcp_domains, NULL, &space);
3851 if (dhcp6_domains)
3852 fputstrv(f, dhcp6_domains, NULL, &space);
3853
3854 SET_FOREACH(dd, link->ndisc_dnssl, i)
3855 fputs_with_space(f, NDISC_DNSSL_DOMAIN(dd), NULL, &space);
3856 }
3857
3858 fputc('\n', f);
3859
3860 fputs("ROUTE_DOMAINS=", f);
3861 space = false;
3862 fputstrv(f, link->network->route_domains, NULL, &space);
3863
3864 if (link->network->dhcp_use_domains == DHCP_USE_DOMAINS_ROUTE) {
3865 NDiscDNSSL *dd;
3866
3867 if (dhcp_domainname)
3868 fputs_with_space(f, dhcp_domainname, NULL, &space);
3869 if (dhcp_domains)
3870 fputstrv(f, dhcp_domains, NULL, &space);
3871 if (dhcp6_domains)
3872 fputstrv(f, dhcp6_domains, NULL, &space);
3873
3874 SET_FOREACH(dd, link->ndisc_dnssl, i)
3875 fputs_with_space(f, NDISC_DNSSL_DOMAIN(dd), NULL, &space);
3876 }
3877
3878 fputc('\n', f);
3879
3880 fprintf(f, "LLMNR=%s\n",
3881 resolve_support_to_string(link->network->llmnr));
3882 fprintf(f, "MDNS=%s\n",
3883 resolve_support_to_string(link->network->mdns));
3884
3885 if (link->network->dns_over_tls_mode != _DNS_OVER_TLS_MODE_INVALID)
3886 fprintf(f, "DNS_OVER_TLS=%s\n",
3887 dns_over_tls_mode_to_string(link->network->dns_over_tls_mode));
3888
3889 if (link->network->dnssec_mode != _DNSSEC_MODE_INVALID)
3890 fprintf(f, "DNSSEC=%s\n",
3891 dnssec_mode_to_string(link->network->dnssec_mode));
3892
3893 if (!set_isempty(link->network->dnssec_negative_trust_anchors)) {
3894 const char *n;
3895
3896 fputs("DNSSEC_NTA=", f);
3897 space = false;
3898 SET_FOREACH(n, link->network->dnssec_negative_trust_anchors, i)
3899 fputs_with_space(f, n, NULL, &space);
3900 fputc('\n', f);
3901 }
3902
3903 fputs("ADDRESSES=", f);
3904 space = false;
3905 SET_FOREACH(a, link->addresses, i) {
3906 _cleanup_free_ char *address_str = NULL;
3907
3908 r = in_addr_to_string(a->family, &a->in_addr, &address_str);
3909 if (r < 0)
3910 goto fail;
3911
3912 fprintf(f, "%s%s/%u", space ? " " : "", address_str, a->prefixlen);
3913 space = true;
3914 }
3915 fputc('\n', f);
3916
3917 fputs("ROUTES=", f);
3918 space = false;
3919 SET_FOREACH(route, link->routes, i) {
3920 _cleanup_free_ char *route_str = NULL;
3921
3922 r = in_addr_to_string(route->family, &route->dst, &route_str);
3923 if (r < 0)
3924 goto fail;
3925
3926 fprintf(f, "%s%s/%hhu/%hhu/%"PRIu32"/%"PRIu32"/"USEC_FMT,
3927 space ? " " : "", route_str,
3928 route->dst_prefixlen, route->tos, route->priority, route->table, route->lifetime);
3929 space = true;
3930 }
3931
3932 fputc('\n', f);
3933 }
3934
3935 print_link_hashmap(f, "CARRIER_BOUND_TO=", link->bound_to_links);
3936 print_link_hashmap(f, "CARRIER_BOUND_BY=", link->bound_by_links);
3937
3938 if (link->dhcp_lease) {
3939 struct in_addr address;
3940 const char *tz = NULL;
3941
3942 assert(link->network);
3943
3944 r = sd_dhcp_lease_get_timezone(link->dhcp_lease, &tz);
3945 if (r >= 0)
3946 fprintf(f, "TIMEZONE=%s\n", tz);
3947
3948 r = sd_dhcp_lease_get_address(link->dhcp_lease, &address);
3949 if (r >= 0) {
3950 fputs("DHCP4_ADDRESS=", f);
3951 serialize_in_addrs(f, &address, 1);
3952 fputc('\n', f);
3953 }
3954
3955 r = dhcp_lease_save(link->dhcp_lease, link->lease_file);
3956 if (r < 0)
3957 goto fail;
3958
3959 fprintf(f,
3960 "DHCP_LEASE=%s\n",
3961 link->lease_file);
3962 } else
3963 unlink(link->lease_file);
3964
3965 if (link->ipv4ll) {
3966 struct in_addr address;
3967
3968 r = sd_ipv4ll_get_address(link->ipv4ll, &address);
3969 if (r >= 0) {
3970 fputs("IPV4LL_ADDRESS=", f);
3971 serialize_in_addrs(f, &address, 1);
3972 fputc('\n', f);
3973 }
3974 }
3975
3976 r = fflush_and_check(f);
3977 if (r < 0)
3978 goto fail;
3979
3980 if (rename(temp_path, link->state_file) < 0) {
3981 r = -errno;
3982 goto fail;
3983 }
3984
3985 return 0;
3986
3987 fail:
3988 (void) unlink(link->state_file);
3989 if (temp_path)
3990 (void) unlink(temp_path);
3991
3992 return log_link_error_errno(link, r, "Failed to save link data to %s: %m", link->state_file);
3993 }
3994
3995 /* The serialized state in /run is no longer up-to-date. */
3996 void link_dirty(Link *link) {
3997 int r;
3998
3999 assert(link);
4000
4001 /* mark manager dirty as link is dirty */
4002 manager_dirty(link->manager);
4003
4004 r = set_ensure_allocated(&link->manager->dirty_links, NULL);
4005 if (r < 0)
4006 /* allocation errors are ignored */
4007 return;
4008
4009 r = set_put(link->manager->dirty_links, link);
4010 if (r <= 0)
4011 /* don't take another ref if the link was already dirty */
4012 return;
4013
4014 link_ref(link);
4015 }
4016
4017 /* The serialized state in /run is up-to-date */
4018 void link_clean(Link *link) {
4019 assert(link);
4020 assert(link->manager);
4021
4022 link_unref(set_remove(link->manager->dirty_links, link));
4023 }
4024
4025 static const char* const link_state_table[_LINK_STATE_MAX] = {
4026 [LINK_STATE_PENDING] = "pending",
4027 [LINK_STATE_ENSLAVING] = "configuring",
4028 [LINK_STATE_SETTING_ADDRESSES] = "configuring",
4029 [LINK_STATE_SETTING_ROUTES] = "configuring",
4030 [LINK_STATE_CONFIGURED] = "configured",
4031 [LINK_STATE_UNMANAGED] = "unmanaged",
4032 [LINK_STATE_FAILED] = "failed",
4033 [LINK_STATE_LINGER] = "linger",
4034 };
4035
4036 DEFINE_STRING_TABLE_LOOKUP(link_state, LinkState);
4037
4038 static const char* const link_operstate_table[_LINK_OPERSTATE_MAX] = {
4039 [LINK_OPERSTATE_OFF] = "off",
4040 [LINK_OPERSTATE_NO_CARRIER] = "no-carrier",
4041 [LINK_OPERSTATE_DORMANT] = "dormant",
4042 [LINK_OPERSTATE_CARRIER] = "carrier",
4043 [LINK_OPERSTATE_DEGRADED] = "degraded",
4044 [LINK_OPERSTATE_ROUTABLE] = "routable",
4045 };
4046
4047 DEFINE_STRING_TABLE_LOOKUP(link_operstate, LinkOperationalState);
Unnamed repository; edit this file 'description' to name the repository.