]> git.ipfire.org Git - thirdparty/systemd.git/blob - src/network/networkd-link.c
projects / thirdparty / systemd.git / blob
? search:
summary | shortlog | log | commit | commitdiff | tree
blame | history | raw | HEAD
Merge pull request #11424 from yuwata/fix-11420
[thirdparty/systemd.git] / src / network / networkd-link.c
1 /* SPDX-License-Identifier: LGPL-2.1+ */
2
3 #include <netinet/ether.h>
4 #include <linux/if.h>
5 #include <linux/can/netlink.h>
6 #include <unistd.h>
7 #include <stdio_ext.h>
8
9 #include "alloc-util.h"
10 #include "bus-util.h"
11 #include "dhcp-identifier.h"
12 #include "dhcp-lease-internal.h"
13 #include "env-file.h"
14 #include "fd-util.h"
15 #include "fileio.h"
16 #include "missing_network.h"
17 #include "netlink-util.h"
18 #include "network-internal.h"
19 #include "networkd-ipv6-proxy-ndp.h"
20 #include "networkd-lldp-tx.h"
21 #include "networkd-manager.h"
22 #include "networkd-ndisc.h"
23 #include "networkd-neighbor.h"
24 #include "networkd-radv.h"
25 #include "networkd-routing-policy-rule.h"
26 #include "set.h"
27 #include "socket-util.h"
28 #include "stdio-util.h"
29 #include "string-table.h"
30 #include "strv.h"
31 #include "tmpfile-util.h"
32 #include "util.h"
33 #include "virt.h"
34
35 DUID* link_get_duid(Link *link) {
36 if (link->network->duid.type != _DUID_TYPE_INVALID)
37 return &link->network->duid;
38 else
39 return &link->manager->duid;
40 }
41
42 static bool link_dhcp6_enabled(Link *link) {
43 assert(link);
44
45 if (!socket_ipv6_is_supported())
46 return false;
47
48 if (link->flags & IFF_LOOPBACK)
49 return false;
50
51 if (!link->network)
52 return false;
53
54 return link->network->dhcp & ADDRESS_FAMILY_IPV6;
55 }
56
57 static bool link_dhcp4_enabled(Link *link) {
58 assert(link);
59
60 if (link->flags & IFF_LOOPBACK)
61 return false;
62
63 if (!link->network)
64 return false;
65
66 return link->network->dhcp & ADDRESS_FAMILY_IPV4;
67 }
68
69 static bool link_dhcp4_server_enabled(Link *link) {
70 assert(link);
71
72 if (link->flags & IFF_LOOPBACK)
73 return false;
74
75 if (!link->network)
76 return false;
77
78 return link->network->dhcp_server;
79 }
80
81 static bool link_ipv4ll_enabled(Link *link) {
82 assert(link);
83
84 if (link->flags & IFF_LOOPBACK)
85 return false;
86
87 if (!link->network)
88 return false;
89
90 if (streq_ptr(link->kind, "wireguard"))
91 return false;
92
93 return link->network->link_local & ADDRESS_FAMILY_IPV4;
94 }
95
96 static bool link_ipv6ll_enabled(Link *link) {
97 assert(link);
98
99 if (!socket_ipv6_is_supported())
100 return false;
101
102 if (link->flags & IFF_LOOPBACK)
103 return false;
104
105 if (!link->network)
106 return false;
107
108 if (streq_ptr(link->kind, "wireguard"))
109 return false;
110
111 return link->network->link_local & ADDRESS_FAMILY_IPV6;
112 }
113
114 static bool link_ipv6_enabled(Link *link) {
115 assert(link);
116
117 if (!socket_ipv6_is_supported())
118 return false;
119
120 if (link->network->bridge)
121 return false;
122
123 /* DHCPv6 client will not be started if no IPv6 link-local address is configured. */
124 return link_ipv6ll_enabled(link) || network_has_static_ipv6_addresses(link->network);
125 }
126
127 static bool link_radv_enabled(Link *link) {
128 assert(link);
129
130 if (!link_ipv6ll_enabled(link))
131 return false;
132
133 return link->network->router_prefix_delegation != RADV_PREFIX_DELEGATION_NONE;
134 }
135
136 static bool link_lldp_rx_enabled(Link *link) {
137 assert(link);
138
139 if (link->flags & IFF_LOOPBACK)
140 return false;
141
142 if (link->iftype != ARPHRD_ETHER)
143 return false;
144
145 if (!link->network)
146 return false;
147
148 /* LLDP should be handled on bridge slaves as those have a direct
149 * connection to their peers not on the bridge master. Linux doesn't
150 * even (by default) forward lldp packets to the bridge master.*/
151 if (streq_ptr("bridge", link->kind))
152 return false;
153
154 return link->network->lldp_mode != LLDP_MODE_NO;
155 }
156
157 static bool link_lldp_emit_enabled(Link *link) {
158 assert(link);
159
160 if (link->flags & IFF_LOOPBACK)
161 return false;
162
163 if (link->iftype != ARPHRD_ETHER)
164 return false;
165
166 if (!link->network)
167 return false;
168
169 return link->network->lldp_emit != LLDP_EMIT_NO;
170 }
171
172 static bool link_ipv4_forward_enabled(Link *link) {
173 assert(link);
174
175 if (link->flags & IFF_LOOPBACK)
176 return false;
177
178 if (!link->network)
179 return false;
180
181 if (link->network->ip_forward == _ADDRESS_FAMILY_BOOLEAN_INVALID)
182 return false;
183
184 return link->network->ip_forward & ADDRESS_FAMILY_IPV4;
185 }
186
187 static bool link_ipv6_forward_enabled(Link *link) {
188 assert(link);
189
190 if (!socket_ipv6_is_supported())
191 return false;
192
193 if (link->flags & IFF_LOOPBACK)
194 return false;
195
196 if (!link->network)
197 return false;
198
199 if (link->network->ip_forward == _ADDRESS_FAMILY_BOOLEAN_INVALID)
200 return false;
201
202 return link->network->ip_forward & ADDRESS_FAMILY_IPV6;
203 }
204
205 static bool link_proxy_arp_enabled(Link *link) {
206 assert(link);
207
208 if (link->flags & IFF_LOOPBACK)
209 return false;
210
211 if (!link->network)
212 return false;
213
214 if (link->network->proxy_arp < 0)
215 return false;
216
217 return true;
218 }
219
220 static bool link_ipv6_accept_ra_enabled(Link *link) {
221 assert(link);
222
223 if (!socket_ipv6_is_supported())
224 return false;
225
226 if (link->flags & IFF_LOOPBACK)
227 return false;
228
229 if (!link->network)
230 return false;
231
232 if (!link_ipv6ll_enabled(link))
233 return false;
234
235 /* If unset use system default (enabled if local forwarding is disabled.
236 * disabled if local forwarding is enabled).
237 * If set, ignore or enforce RA independent of local forwarding state.
238 */
239 if (link->network->ipv6_accept_ra < 0)
240 /* default to accept RA if ip_forward is disabled and ignore RA if ip_forward is enabled */
241 return !link_ipv6_forward_enabled(link);
242 else if (link->network->ipv6_accept_ra > 0)
243 /* accept RA even if ip_forward is enabled */
244 return true;
245 else
246 /* ignore RA */
247 return false;
248 }
249
250 static IPv6PrivacyExtensions link_ipv6_privacy_extensions(Link *link) {
251 assert(link);
252
253 if (!socket_ipv6_is_supported())
254 return _IPV6_PRIVACY_EXTENSIONS_INVALID;
255
256 if (link->flags & IFF_LOOPBACK)
257 return _IPV6_PRIVACY_EXTENSIONS_INVALID;
258
259 if (!link->network)
260 return _IPV6_PRIVACY_EXTENSIONS_INVALID;
261
262 return link->network->ipv6_privacy_extensions;
263 }
264
265 static int link_enable_ipv6(Link *link) {
266 const char *p = NULL;
267 bool disabled;
268 int r;
269
270 if (link->flags & IFF_LOOPBACK)
271 return 0;
272
273 disabled = !link_ipv6_enabled(link);
274
275 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/disable_ipv6");
276
277 r = write_string_file(p, one_zero(disabled), WRITE_STRING_FILE_VERIFY_ON_FAILURE | WRITE_STRING_FILE_DISABLE_BUFFER);
278 if (r < 0)
279 log_link_warning_errno(link, r, "Cannot %s IPv6 for interface %s: %m",
280 enable_disable(!disabled), link->ifname);
281 else
282 log_link_info(link, "IPv6 successfully %sd", enable_disable(!disabled));
283
284 return 0;
285 }
286
287 void link_update_operstate(Link *link) {
288 LinkOperationalState operstate;
289 assert(link);
290
291 if (link->kernel_operstate == IF_OPER_DORMANT)
292 operstate = LINK_OPERSTATE_DORMANT;
293 else if (link_has_carrier(link)) {
294 Address *address;
295 uint8_t scope = RT_SCOPE_NOWHERE;
296 Iterator i;
297
298 /* if we have carrier, check what addresses we have */
299 SET_FOREACH(address, link->addresses, i) {
300 if (!address_is_ready(address))
301 continue;
302
303 if (address->scope < scope)
304 scope = address->scope;
305 }
306
307 /* for operstate we also take foreign addresses into account */
308 SET_FOREACH(address, link->addresses_foreign, i) {
309 if (!address_is_ready(address))
310 continue;
311
312 if (address->scope < scope)
313 scope = address->scope;
314 }
315
316 if (scope < RT_SCOPE_SITE)
317 /* universally accessible addresses found */
318 operstate = LINK_OPERSTATE_ROUTABLE;
319 else if (scope < RT_SCOPE_HOST)
320 /* only link or site local addresses found */
321 operstate = LINK_OPERSTATE_DEGRADED;
322 else
323 /* no useful addresses found */
324 operstate = LINK_OPERSTATE_CARRIER;
325 } else if (link->flags & IFF_UP)
326 operstate = LINK_OPERSTATE_NO_CARRIER;
327 else
328 operstate = LINK_OPERSTATE_OFF;
329
330 if (link->operstate != operstate) {
331 link->operstate = operstate;
332 link_send_changed(link, "OperationalState", NULL);
333 link_dirty(link);
334 }
335 }
336
337 #define FLAG_STRING(string, flag, old, new) \
338 (((old ^ new) & flag) \
339 ? ((old & flag) ? (" -" string) : (" +" string)) \
340 : "")
341
342 static int link_update_flags(Link *link, sd_netlink_message *m) {
343 unsigned flags, unknown_flags_added, unknown_flags_removed, unknown_flags;
344 uint8_t operstate;
345 int r;
346
347 assert(link);
348
349 r = sd_rtnl_message_link_get_flags(m, &flags);
350 if (r < 0)
351 return log_link_warning_errno(link, r, "Could not get link flags: %m");
352
353 r = sd_netlink_message_read_u8(m, IFLA_OPERSTATE, &operstate);
354 if (r < 0)
355 /* if we got a message without operstate, take it to mean
356 the state was unchanged */
357 operstate = link->kernel_operstate;
358
359 if ((link->flags == flags) && (link->kernel_operstate == operstate))
360 return 0;
361
362 if (link->flags != flags) {
363 log_link_debug(link, "Flags change:%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s",
364 FLAG_STRING("LOOPBACK", IFF_LOOPBACK, link->flags, flags),
365 FLAG_STRING("MASTER", IFF_MASTER, link->flags, flags),
366 FLAG_STRING("SLAVE", IFF_SLAVE, link->flags, flags),
367 FLAG_STRING("UP", IFF_UP, link->flags, flags),
368 FLAG_STRING("DORMANT", IFF_DORMANT, link->flags, flags),
369 FLAG_STRING("LOWER_UP", IFF_LOWER_UP, link->flags, flags),
370 FLAG_STRING("RUNNING", IFF_RUNNING, link->flags, flags),
371 FLAG_STRING("MULTICAST", IFF_MULTICAST, link->flags, flags),
372 FLAG_STRING("BROADCAST", IFF_BROADCAST, link->flags, flags),
373 FLAG_STRING("POINTOPOINT", IFF_POINTOPOINT, link->flags, flags),
374 FLAG_STRING("PROMISC", IFF_PROMISC, link->flags, flags),
375 FLAG_STRING("ALLMULTI", IFF_ALLMULTI, link->flags, flags),
376 FLAG_STRING("PORTSEL", IFF_PORTSEL, link->flags, flags),
377 FLAG_STRING("AUTOMEDIA", IFF_AUTOMEDIA, link->flags, flags),
378 FLAG_STRING("DYNAMIC", IFF_DYNAMIC, link->flags, flags),
379 FLAG_STRING("NOARP", IFF_NOARP, link->flags, flags),
380 FLAG_STRING("NOTRAILERS", IFF_NOTRAILERS, link->flags, flags),
381 FLAG_STRING("DEBUG", IFF_DEBUG, link->flags, flags),
382 FLAG_STRING("ECHO", IFF_ECHO, link->flags, flags));
383
384 unknown_flags = ~(IFF_LOOPBACK | IFF_MASTER | IFF_SLAVE | IFF_UP |
385 IFF_DORMANT | IFF_LOWER_UP | IFF_RUNNING |
386 IFF_MULTICAST | IFF_BROADCAST | IFF_POINTOPOINT |
387 IFF_PROMISC | IFF_ALLMULTI | IFF_PORTSEL |
388 IFF_AUTOMEDIA | IFF_DYNAMIC | IFF_NOARP |
389 IFF_NOTRAILERS | IFF_DEBUG | IFF_ECHO);
390 unknown_flags_added = ((link->flags ^ flags) & flags & unknown_flags);
391 unknown_flags_removed = ((link->flags ^ flags) & link->flags & unknown_flags);
392
393 /* link flags are currently at most 18 bits, let's align to
394 * printing 20 */
395 if (unknown_flags_added)
396 log_link_debug(link,
397 "Unknown link flags gained: %#.5x (ignoring)",
398 unknown_flags_added);
399
400 if (unknown_flags_removed)
401 log_link_debug(link,
402 "Unknown link flags lost: %#.5x (ignoring)",
403 unknown_flags_removed);
404 }
405
406 link->flags = flags;
407 link->kernel_operstate = operstate;
408
409 link_update_operstate(link);
410
411 return 0;
412 }
413
414 DEFINE_TRIVIAL_CLEANUP_FUNC(Link*, link_unref);
415
416 static int link_new(Manager *manager, sd_netlink_message *message, Link **ret) {
417 _cleanup_(link_unrefp) Link *link = NULL;
418 uint16_t type;
419 const char *ifname, *kind = NULL;
420 int r, ifindex;
421 unsigned short iftype;
422
423 assert(manager);
424 assert(message);
425 assert(ret);
426
427 /* check for link kind */
428 r = sd_netlink_message_enter_container(message, IFLA_LINKINFO);
429 if (r == 0) {
430 (void) sd_netlink_message_read_string(message, IFLA_INFO_KIND, &kind);
431 r = sd_netlink_message_exit_container(message);
432 if (r < 0)
433 return r;
434 }
435
436 r = sd_netlink_message_get_type(message, &type);
437 if (r < 0)
438 return r;
439 else if (type != RTM_NEWLINK)
440 return -EINVAL;
441
442 r = sd_rtnl_message_link_get_ifindex(message, &ifindex);
443 if (r < 0)
444 return r;
445 else if (ifindex <= 0)
446 return -EINVAL;
447
448 r = sd_rtnl_message_link_get_type(message, &iftype);
449 if (r < 0)
450 return r;
451
452 r = sd_netlink_message_read_string(message, IFLA_IFNAME, &ifname);
453 if (r < 0)
454 return r;
455
456 link = new(Link, 1);
457 if (!link)
458 return -ENOMEM;
459
460 *link = (Link) {
461 .n_ref = 1,
462 .manager = manager,
463 .state = LINK_STATE_PENDING,
464 .rtnl_extended_attrs = true,
465 .ifindex = ifindex,
466 .iftype = iftype,
467 };
468
469 link->ifname = strdup(ifname);
470 if (!link->ifname)
471 return -ENOMEM;
472
473 if (kind) {
474 link->kind = strdup(kind);
475 if (!link->kind)
476 return -ENOMEM;
477 }
478
479 r = sd_netlink_message_read_u32(message, IFLA_MASTER, (uint32_t *)&link->master_ifindex);
480 if (r < 0)
481 log_link_debug_errno(link, r, "New device has no master, continuing without");
482
483 r = sd_netlink_message_read_ether_addr(message, IFLA_ADDRESS, &link->mac);
484 if (r < 0)
485 log_link_debug_errno(link, r, "MAC address not found for new device, continuing without");
486
487 if (asprintf(&link->state_file, "/run/systemd/netif/links/%d", link->ifindex) < 0)
488 return -ENOMEM;
489
490 if (asprintf(&link->lease_file, "/run/systemd/netif/leases/%d", link->ifindex) < 0)
491 return -ENOMEM;
492
493 if (asprintf(&link->lldp_file, "/run/systemd/netif/lldp/%d", link->ifindex) < 0)
494 return -ENOMEM;
495
496 r = hashmap_ensure_allocated(&manager->links, NULL);
497 if (r < 0)
498 return r;
499
500 r = hashmap_put(manager->links, INT_TO_PTR(link->ifindex), link);
501 if (r < 0)
502 return r;
503
504 r = link_update_flags(link, message);
505 if (r < 0)
506 return r;
507
508 *ret = TAKE_PTR(link);
509
510 return 0;
511 }
512
513 static void link_detach_from_manager(Link *link) {
514 if (!link || !link->manager)
515 return;
516
517 hashmap_remove(link->manager->links, INT_TO_PTR(link->ifindex));
518 set_remove(link->manager->links_requesting_uuid, link);
519 link_clean(link);
520 }
521
522 static Link *link_free(Link *link) {
523 Address *address;
524 Link *carrier;
525 Route *route;
526 Iterator i;
527
528 assert(link);
529
530 while ((route = set_first(link->routes)))
531 route_free(route);
532
533 while ((route = set_first(link->routes_foreign)))
534 route_free(route);
535
536 link->routes = set_free(link->routes);
537 link->routes_foreign = set_free(link->routes_foreign);
538
539 while ((address = set_first(link->addresses)))
540 address_free(address);
541
542 while ((address = set_first(link->addresses_foreign)))
543 address_free(address);
544
545 link->addresses = set_free(link->addresses);
546 link->addresses_foreign = set_free(link->addresses_foreign);
547
548 while ((address = link->pool_addresses)) {
549 LIST_REMOVE(addresses, link->pool_addresses, address);
550 address_free(address);
551 }
552
553 sd_dhcp_server_unref(link->dhcp_server);
554 sd_dhcp_client_unref(link->dhcp_client);
555 sd_dhcp_lease_unref(link->dhcp_lease);
556
557 link_lldp_emit_stop(link);
558
559 free(link->lease_file);
560
561 sd_lldp_unref(link->lldp);
562 free(link->lldp_file);
563
564 ndisc_flush(link);
565
566 sd_ipv4ll_unref(link->ipv4ll);
567 sd_dhcp6_client_unref(link->dhcp6_client);
568 sd_ndisc_unref(link->ndisc);
569 sd_radv_unref(link->radv);
570
571 link_detach_from_manager(link);
572
573 free(link->ifname);
574
575 free(link->kind);
576
577 (void) unlink(link->state_file);
578 free(link->state_file);
579
580 sd_device_unref(link->sd_device);
581
582 HASHMAP_FOREACH (carrier, link->bound_to_links, i)
583 hashmap_remove(link->bound_to_links, INT_TO_PTR(carrier->ifindex));
584 hashmap_free(link->bound_to_links);
585
586 HASHMAP_FOREACH (carrier, link->bound_by_links, i)
587 hashmap_remove(link->bound_by_links, INT_TO_PTR(carrier->ifindex));
588 hashmap_free(link->bound_by_links);
589
590 return mfree(link);
591 }
592
593 DEFINE_TRIVIAL_REF_UNREF_FUNC(Link, link, link_free);
594
595 int link_get(Manager *m, int ifindex, Link **ret) {
596 Link *link;
597
598 assert(m);
599 assert(ifindex);
600 assert(ret);
601
602 link = hashmap_get(m->links, INT_TO_PTR(ifindex));
603 if (!link)
604 return -ENODEV;
605
606 *ret = link;
607
608 return 0;
609 }
610
611 static void link_set_state(Link *link, LinkState state) {
612 assert(link);
613
614 if (link->state == state)
615 return;
616
617 link->state = state;
618
619 link_send_changed(link, "AdministrativeState", NULL);
620 }
621
622 static void link_enter_unmanaged(Link *link) {
623 assert(link);
624
625 log_link_debug(link, "Unmanaged");
626
627 link_set_state(link, LINK_STATE_UNMANAGED);
628
629 link_dirty(link);
630 }
631
632 static int link_stop_clients(Link *link) {
633 int r = 0, k;
634
635 assert(link);
636 assert(link->manager);
637 assert(link->manager->event);
638
639 if (link->dhcp_client) {
640 k = sd_dhcp_client_stop(link->dhcp_client);
641 if (k < 0)
642 r = log_link_warning_errno(link, k, "Could not stop DHCPv4 client: %m");
643 }
644
645 if (link->ipv4ll) {
646 k = sd_ipv4ll_stop(link->ipv4ll);
647 if (k < 0)
648 r = log_link_warning_errno(link, k, "Could not stop IPv4 link-local: %m");
649 }
650
651 if (link->dhcp6_client) {
652 k = sd_dhcp6_client_stop(link->dhcp6_client);
653 if (k < 0)
654 r = log_link_warning_errno(link, k, "Could not stop DHCPv6 client: %m");
655 }
656
657 if (link->ndisc) {
658 k = sd_ndisc_stop(link->ndisc);
659 if (k < 0)
660 r = log_link_warning_errno(link, k, "Could not stop IPv6 Router Discovery: %m");
661 }
662
663 if (link->radv) {
664 k = sd_radv_stop(link->radv);
665 if (k < 0)
666 r = log_link_warning_errno(link, k, "Could not stop IPv6 Router Advertisement: %m");
667 }
668
669 link_lldp_emit_stop(link);
670 return r;
671 }
672
673 void link_enter_failed(Link *link) {
674 assert(link);
675
676 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
677 return;
678
679 log_link_warning(link, "Failed");
680
681 link_set_state(link, LINK_STATE_FAILED);
682
683 link_stop_clients(link);
684
685 link_dirty(link);
686 }
687
688 static Address* link_find_dhcp_server_address(Link *link) {
689 Address *address;
690
691 assert(link);
692 assert(link->network);
693
694 /* The first statically configured address if there is any */
695 LIST_FOREACH(addresses, address, link->network->static_addresses) {
696
697 if (address->family != AF_INET)
698 continue;
699
700 if (in_addr_is_null(address->family, &address->in_addr))
701 continue;
702
703 return address;
704 }
705
706 /* If that didn't work, find a suitable address we got from the pool */
707 LIST_FOREACH(addresses, address, link->pool_addresses) {
708 if (address->family != AF_INET)
709 continue;
710
711 return address;
712 }
713
714 return NULL;
715 }
716
717 static void link_enter_configured(Link *link) {
718 assert(link);
719 assert(link->network);
720
721 if (link->state != LINK_STATE_CONFIGURING)
722 return;
723
724 log_link_info(link, "Configured");
725
726 link_set_state(link, LINK_STATE_CONFIGURED);
727
728 link_dirty(link);
729 }
730
731 static int link_request_set_routing_policy_rule(Link *link) {
732 RoutingPolicyRule *rule, *rrule = NULL;
733 int r;
734
735 assert(link);
736 assert(link->network);
737
738 link_set_state(link, LINK_STATE_CONFIGURING);
739 link->routing_policy_rules_configured = false;
740
741 LIST_FOREACH(rules, rule, link->network->rules) {
742 r = routing_policy_rule_get(link->manager, rule->family, &rule->from, rule->from_prefixlen, &rule->to,
743 rule->to_prefixlen, rule->tos, rule->fwmark, rule->table, rule->iif, rule->oif,
744 rule->protocol, &rule->sport, &rule->dport, &rrule);
745 if (r == 0) {
746 (void) routing_policy_rule_make_local(link->manager, rrule);
747 continue;
748 }
749
750 r = routing_policy_rule_configure(rule, link, NULL, false);
751 if (r < 0) {
752 log_link_warning_errno(link, r, "Could not set routing policy rules: %m");
753 link_enter_failed(link);
754 return r;
755 }
756
757 link->routing_policy_rule_messages++;
758 }
759
760 routing_policy_rule_purge(link->manager, link);
761 if (link->routing_policy_rule_messages == 0) {
762 link->routing_policy_rules_configured = true;
763 link_check_ready(link);
764 } else
765 log_link_debug(link, "Setting routing policy rules");
766
767 return 0;
768 }
769
770 static int route_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
771 int r;
772
773 assert(link);
774 assert(link->route_messages > 0);
775 assert(IN_SET(link->state, LINK_STATE_CONFIGURING,
776 LINK_STATE_FAILED, LINK_STATE_LINGER));
777
778 link->route_messages--;
779
780 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
781 return 1;
782
783 r = sd_netlink_message_get_errno(m);
784 if (r < 0 && r != -EEXIST)
785 log_link_warning_errno(link, r, "Could not set route: %m");
786
787 if (link->route_messages == 0) {
788 log_link_debug(link, "Routes set");
789 link->static_routes_configured = true;
790 link_check_ready(link);
791 }
792
793 return 1;
794 }
795
796 static int link_request_set_routes(Link *link) {
797 enum {
798 PHASE_NON_GATEWAY, /* First phase: Routes without a gateway */
799 PHASE_GATEWAY, /* Second phase: Routes with a gateway */
800 _PHASE_MAX
801 } phase;
802 Route *rt;
803 int r;
804
805 assert(link);
806 assert(link->network);
807 assert(link->addresses_configured);
808 assert(link->address_messages == 0);
809 assert(link->state != _LINK_STATE_INVALID);
810
811 link_set_state(link, LINK_STATE_CONFIGURING);
812 link->static_routes_configured = false;
813
814 r = link_request_set_routing_policy_rule(link);
815 if (r < 0)
816 return r;
817
818 /* First add the routes that enable us to talk to gateways, then add in the others that need a gateway. */
819 for (phase = 0; phase < _PHASE_MAX; phase++)
820 LIST_FOREACH(routes, rt, link->network->static_routes) {
821
822 if (in_addr_is_null(rt->family, &rt->gw) != (phase == PHASE_NON_GATEWAY))
823 continue;
824
825 r = route_configure(rt, link, route_handler);
826 if (r < 0) {
827 log_link_warning_errno(link, r, "Could not set routes: %m");
828 link_enter_failed(link);
829 return r;
830 }
831
832 link->route_messages++;
833 }
834
835 if (link->route_messages == 0) {
836 link->static_routes_configured = true;
837 link_check_ready(link);
838 } else
839 log_link_debug(link, "Setting routes");
840
841 return 0;
842 }
843
844 void link_check_ready(Link *link) {
845 Address *a;
846 Iterator i;
847
848 assert(link);
849
850 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
851 return;
852
853 if (!link->network)
854 return;
855
856 if (!link->addresses_configured)
857 return;
858
859 if (!link->neighbors_configured)
860 return;
861
862 SET_FOREACH(a, link->addresses, i)
863 if (!address_is_ready(a))
864 return;
865
866 if (!link->addresses_ready) {
867 link->addresses_ready = true;
868 link_request_set_routes(link);
869 }
870
871 if (!link->static_routes_configured)
872 return;
873
874 if (!link->routing_policy_rules_configured)
875 return;
876
877 if (link_ipv4ll_enabled(link))
878 if (!link->ipv4ll_address ||
879 !link->ipv4ll_route)
880 return;
881
882 if (!link->network->bridge) {
883
884 if (link_ipv6ll_enabled(link))
885 if (in_addr_is_null(AF_INET6, (const union in_addr_union*) &link->ipv6ll_address) > 0)
886 return;
887
888 if ((link_dhcp4_enabled(link) && !link_dhcp6_enabled(link) &&
889 !link->dhcp4_configured) ||
890 (link_dhcp6_enabled(link) && !link_dhcp4_enabled(link) &&
891 !link->dhcp6_configured) ||
892 (link_dhcp4_enabled(link) && link_dhcp6_enabled(link) &&
893 !link->dhcp4_configured && !link->dhcp6_configured))
894 return;
895
896 if (link_ipv6_accept_ra_enabled(link) && !link->ndisc_configured)
897 return;
898 }
899
900 if (link->state != LINK_STATE_CONFIGURED)
901 link_enter_configured(link);
902
903 return;
904 }
905
906 static int link_request_set_neighbors(Link *link) {
907 Neighbor *neighbor;
908 int r;
909
910 assert(link);
911 assert(link->network);
912 assert(link->state != _LINK_STATE_INVALID);
913
914 link_set_state(link, LINK_STATE_CONFIGURING);
915 link->neighbors_configured = false;
916
917 LIST_FOREACH(neighbors, neighbor, link->network->neighbors) {
918 r = neighbor_configure(neighbor, link, NULL);
919 if (r < 0) {
920 log_link_warning_errno(link, r, "Could not set neighbor: %m");
921 link_enter_failed(link);
922 return r;
923 }
924 }
925
926 if (link->neighbor_messages == 0) {
927 link->neighbors_configured = true;
928 link_check_ready(link);
929 } else
930 log_link_debug(link, "Setting neighbors");
931
932 return 0;
933 }
934
935 static int address_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
936 int r;
937
938 assert(rtnl);
939 assert(m);
940 assert(link);
941 assert(link->ifname);
942 assert(link->address_messages > 0);
943 assert(IN_SET(link->state, LINK_STATE_CONFIGURING,
944 LINK_STATE_FAILED, LINK_STATE_LINGER));
945
946 link->address_messages--;
947
948 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
949 return 1;
950
951 r = sd_netlink_message_get_errno(m);
952 if (r < 0 && r != -EEXIST)
953 log_link_warning_errno(link, r, "could not set address: %m");
954 else if (r >= 0)
955 manager_rtnl_process_address(rtnl, m, link->manager);
956
957 if (link->address_messages == 0) {
958 log_link_debug(link, "Addresses set");
959 link->addresses_configured = true;
960 link_check_ready(link);
961 }
962
963 return 1;
964 }
965
966 static int link_push_uplink_dns_to_dhcp_server(Link *link, sd_dhcp_server *s) {
967 _cleanup_free_ struct in_addr *addresses = NULL;
968 size_t n_addresses = 0, n_allocated = 0;
969 unsigned i;
970
971 log_debug("Copying DNS server information from %s", link->ifname);
972
973 if (!link->network)
974 return 0;
975
976 for (i = 0; i < link->network->n_dns; i++) {
977 struct in_addr ia;
978
979 /* Only look for IPv4 addresses */
980 if (link->network->dns[i].family != AF_INET)
981 continue;
982
983 ia = link->network->dns[i].address.in;
984
985 /* Never propagate obviously borked data */
986 if (in4_addr_is_null(&ia) || in4_addr_is_localhost(&ia))
987 continue;
988
989 if (!GREEDY_REALLOC(addresses, n_allocated, n_addresses + 1))
990 return log_oom();
991
992 addresses[n_addresses++] = ia;
993 }
994
995 if (link->network->dhcp_use_dns && link->dhcp_lease) {
996 const struct in_addr *da = NULL;
997 int n;
998
999 n = sd_dhcp_lease_get_dns(link->dhcp_lease, &da);
1000 if (n > 0) {
1001
1002 if (!GREEDY_REALLOC(addresses, n_allocated, n_addresses + n))
1003 return log_oom();
1004
1005 memcpy(addresses + n_addresses, da, n * sizeof(struct in_addr));
1006 n_addresses += n;
1007 }
1008 }
1009
1010 if (n_addresses <= 0)
1011 return 0;
1012
1013 return sd_dhcp_server_set_dns(s, addresses, n_addresses);
1014 }
1015
1016 static int link_push_uplink_ntp_to_dhcp_server(Link *link, sd_dhcp_server *s) {
1017 _cleanup_free_ struct in_addr *addresses = NULL;
1018 size_t n_addresses = 0, n_allocated = 0;
1019 char **a;
1020
1021 if (!link->network)
1022 return 0;
1023
1024 log_debug("Copying NTP server information from %s", link->ifname);
1025
1026 STRV_FOREACH(a, link->network->ntp) {
1027 struct in_addr ia;
1028
1029 /* Only look for IPv4 addresses */
1030 if (inet_pton(AF_INET, *a, &ia) <= 0)
1031 continue;
1032
1033 /* Never propagate obviously borked data */
1034 if (in4_addr_is_null(&ia) || in4_addr_is_localhost(&ia))
1035 continue;
1036
1037 if (!GREEDY_REALLOC(addresses, n_allocated, n_addresses + 1))
1038 return log_oom();
1039
1040 addresses[n_addresses++] = ia;
1041 }
1042
1043 if (link->network->dhcp_use_ntp && link->dhcp_lease) {
1044 const struct in_addr *da = NULL;
1045 int n;
1046
1047 n = sd_dhcp_lease_get_ntp(link->dhcp_lease, &da);
1048 if (n > 0) {
1049
1050 if (!GREEDY_REALLOC(addresses, n_allocated, n_addresses + n))
1051 return log_oom();
1052
1053 memcpy(addresses + n_addresses, da, n * sizeof(struct in_addr));
1054 n_addresses += n;
1055 }
1056 }
1057
1058 if (n_addresses <= 0)
1059 return 0;
1060
1061 return sd_dhcp_server_set_ntp(s, addresses, n_addresses);
1062 }
1063
1064 static int link_set_bridge_fdb(Link *link) {
1065 FdbEntry *fdb_entry;
1066 int r;
1067
1068 LIST_FOREACH(static_fdb_entries, fdb_entry, link->network->static_fdb_entries) {
1069 r = fdb_entry_configure(link, fdb_entry);
1070 if (r < 0)
1071 return log_link_error_errno(link, r, "Failed to add MAC entry to static MAC table: %m");
1072 }
1073
1074 return 0;
1075 }
1076
1077 static int link_request_set_addresses(Link *link) {
1078 AddressLabel *label;
1079 Address *ad;
1080 int r;
1081
1082 assert(link);
1083 assert(link->network);
1084 assert(link->state != _LINK_STATE_INVALID);
1085
1086 link_set_state(link, LINK_STATE_CONFIGURING);
1087
1088 /* Reset all *_configured flags we are configuring. */
1089 link->addresses_configured = false;
1090 link->addresses_ready = false;
1091 link->neighbors_configured = false;
1092 link->static_routes_configured = false;
1093 link->routing_policy_rules_configured = false;
1094
1095 r = link_set_bridge_fdb(link);
1096 if (r < 0)
1097 return r;
1098
1099 r = link_request_set_neighbors(link);
1100 if (r < 0)
1101 return r;
1102
1103 LIST_FOREACH(addresses, ad, link->network->static_addresses) {
1104 r = address_configure(ad, link, address_handler, false);
1105 if (r < 0) {
1106 log_link_warning_errno(link, r, "Could not set addresses: %m");
1107 link_enter_failed(link);
1108 return r;
1109 }
1110
1111 link->address_messages++;
1112 }
1113
1114 LIST_FOREACH(labels, label, link->network->address_labels) {
1115 r = address_label_configure(label, link, NULL, false);
1116 if (r < 0) {
1117 log_link_warning_errno(link, r, "Could not set address label: %m");
1118 link_enter_failed(link);
1119 return r;
1120 }
1121
1122 link->address_label_messages++;
1123 }
1124
1125 /* now that we can figure out a default address for the dhcp server,
1126 start it */
1127 if (link_dhcp4_server_enabled(link) && (link->flags & IFF_UP)) {
1128 Address *address;
1129 Link *uplink = NULL;
1130 bool acquired_uplink = false;
1131
1132 address = link_find_dhcp_server_address(link);
1133 if (!address) {
1134 log_link_warning(link, "Failed to find suitable address for DHCPv4 server instance.");
1135 link_enter_failed(link);
1136 return 0;
1137 }
1138
1139 /* use the server address' subnet as the pool */
1140 r = sd_dhcp_server_configure_pool(link->dhcp_server, &address->in_addr.in, address->prefixlen,
1141 link->network->dhcp_server_pool_offset, link->network->dhcp_server_pool_size);
1142 if (r < 0)
1143 return r;
1144
1145 /* TODO:
1146 r = sd_dhcp_server_set_router(link->dhcp_server,
1147 &main_address->in_addr.in);
1148 if (r < 0)
1149 return r;
1150 */
1151
1152 if (link->network->dhcp_server_max_lease_time_usec > 0) {
1153 r = sd_dhcp_server_set_max_lease_time(
1154 link->dhcp_server,
1155 DIV_ROUND_UP(link->network->dhcp_server_max_lease_time_usec, USEC_PER_SEC));
1156 if (r < 0)
1157 return r;
1158 }
1159
1160 if (link->network->dhcp_server_default_lease_time_usec > 0) {
1161 r = sd_dhcp_server_set_default_lease_time(
1162 link->dhcp_server,
1163 DIV_ROUND_UP(link->network->dhcp_server_default_lease_time_usec, USEC_PER_SEC));
1164 if (r < 0)
1165 return r;
1166 }
1167
1168 if (link->network->dhcp_server_emit_dns) {
1169
1170 if (link->network->n_dhcp_server_dns > 0)
1171 r = sd_dhcp_server_set_dns(link->dhcp_server, link->network->dhcp_server_dns, link->network->n_dhcp_server_dns);
1172 else {
1173 uplink = manager_find_uplink(link->manager, link);
1174 acquired_uplink = true;
1175
1176 if (!uplink) {
1177 log_link_debug(link, "Not emitting DNS server information on link, couldn't find suitable uplink.");
1178 r = 0;
1179 } else
1180 r = link_push_uplink_dns_to_dhcp_server(uplink, link->dhcp_server);
1181 }
1182 if (r < 0)
1183 log_link_warning_errno(link, r, "Failed to set DNS server for DHCP server, ignoring: %m");
1184 }
1185
1186 if (link->network->dhcp_server_emit_ntp) {
1187
1188 if (link->network->n_dhcp_server_ntp > 0)
1189 r = sd_dhcp_server_set_ntp(link->dhcp_server, link->network->dhcp_server_ntp, link->network->n_dhcp_server_ntp);
1190 else {
1191 if (!acquired_uplink)
1192 uplink = manager_find_uplink(link->manager, link);
1193
1194 if (!uplink) {
1195 log_link_debug(link, "Not emitting NTP server information on link, couldn't find suitable uplink.");
1196 r = 0;
1197 } else
1198 r = link_push_uplink_ntp_to_dhcp_server(uplink, link->dhcp_server);
1199
1200 }
1201 if (r < 0)
1202 log_link_warning_errno(link, r, "Failed to set NTP server for DHCP server, ignoring: %m");
1203 }
1204
1205 r = sd_dhcp_server_set_emit_router(link->dhcp_server, link->network->dhcp_server_emit_router);
1206 if (r < 0)
1207 return log_link_warning_errno(link, r, "Failed to set router emission for DHCP server: %m");
1208
1209 if (link->network->dhcp_server_emit_timezone) {
1210 _cleanup_free_ char *buffer = NULL;
1211 const char *tz = NULL;
1212
1213 if (link->network->dhcp_server_timezone)
1214 tz = link->network->dhcp_server_timezone;
1215 else {
1216 r = get_timezone(&buffer);
1217 if (r < 0)
1218 log_warning_errno(r, "Failed to determine timezone: %m");
1219 else
1220 tz = buffer;
1221 }
1222
1223 if (tz) {
1224 r = sd_dhcp_server_set_timezone(link->dhcp_server, tz);
1225 if (r < 0)
1226 return r;
1227 }
1228 }
1229 if (!sd_dhcp_server_is_running(link->dhcp_server)) {
1230 r = sd_dhcp_server_start(link->dhcp_server);
1231 if (r < 0) {
1232 log_link_warning_errno(link, r, "Could not start DHCPv4 server instance: %m");
1233
1234 link_enter_failed(link);
1235
1236 return 0;
1237 }
1238 }
1239
1240 log_link_debug(link, "Offering DHCPv4 leases");
1241 }
1242
1243 if (link->address_messages == 0) {
1244 link->addresses_configured = true;
1245 link_check_ready(link);
1246 } else
1247 log_link_debug(link, "Setting addresses");
1248
1249 return 0;
1250 }
1251
1252 static int link_set_bridge_vlan(Link *link) {
1253 int r = 0;
1254
1255 r = br_vlan_configure(link, link->network->pvid, link->network->br_vid_bitmap, link->network->br_untagged_bitmap);
1256 if (r < 0)
1257 log_link_error_errno(link, r, "Failed to assign VLANs to bridge port: %m");
1258
1259 return r;
1260 }
1261
1262 static int link_set_proxy_arp(Link *link) {
1263 const char *p = NULL;
1264 int r;
1265
1266 if (!link_proxy_arp_enabled(link))
1267 return 0;
1268
1269 p = strjoina("/proc/sys/net/ipv4/conf/", link->ifname, "/proxy_arp");
1270
1271 r = write_string_file(p, one_zero(link->network->proxy_arp), WRITE_STRING_FILE_VERIFY_ON_FAILURE | WRITE_STRING_FILE_DISABLE_BUFFER);
1272 if (r < 0)
1273 log_link_warning_errno(link, r, "Cannot configure proxy ARP for interface: %m");
1274
1275 return 0;
1276 }
1277
1278 static int link_set_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
1279 int r;
1280
1281 assert(link);
1282
1283 log_link_debug(link, "Set link");
1284
1285 r = sd_netlink_message_get_errno(m);
1286 if (r < 0 && r != -EEXIST) {
1287 log_link_error_errno(link, r, "Could not join netdev: %m");
1288 link_enter_failed(link);
1289 }
1290
1291 return 1;
1292 }
1293
1294 static int link_configure_after_setting_mtu(Link *link);
1295
1296 static int set_mtu_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
1297 int r;
1298
1299 assert(m);
1300 assert(link);
1301 assert(link->ifname);
1302
1303 link->setting_mtu = false;
1304
1305 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1306 return 1;
1307
1308 r = sd_netlink_message_get_errno(m);
1309 if (r < 0) {
1310 log_link_warning_errno(link, r, "Could not set MTU: %m");
1311 return 1;
1312 }
1313
1314 log_link_debug(link, "Setting MTU done.");
1315
1316 if (link->state == LINK_STATE_PENDING)
1317 (void) link_configure_after_setting_mtu(link);
1318
1319 return 1;
1320 }
1321
1322 int link_set_mtu(Link *link, uint32_t mtu) {
1323 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1324 int r;
1325
1326 assert(link);
1327 assert(link->manager);
1328 assert(link->manager->rtnl);
1329
1330 if (link->mtu == mtu || link->setting_mtu)
1331 return 0;
1332
1333 log_link_debug(link, "Setting MTU: %" PRIu32, mtu);
1334
1335 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1336 if (r < 0)
1337 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1338
1339 /* If IPv6 not configured (no static IPv6 address and IPv6LL autoconfiguration is disabled)
1340 * for this interface, or if it is a bridge slave, then disable IPv6 else enable it. */
1341 (void) link_enable_ipv6(link);
1342
1343 /* IPv6 protocol requires a minimum MTU of IPV6_MTU_MIN(1280) bytes
1344 * on the interface. Bump up MTU bytes to IPV6_MTU_MIN. */
1345 if (link_ipv6_enabled(link) && mtu < IPV6_MIN_MTU) {
1346
1347 log_link_warning(link, "Bumping MTU to " STRINGIFY(IPV6_MIN_MTU) ", as "
1348 "IPv6 is requested and requires a minimum MTU of " STRINGIFY(IPV6_MIN_MTU) " bytes: %m");
1349
1350 mtu = IPV6_MIN_MTU;
1351 }
1352
1353 r = sd_netlink_message_append_u32(req, IFLA_MTU, mtu);
1354 if (r < 0)
1355 return log_link_error_errno(link, r, "Could not append MTU: %m");
1356
1357 r = netlink_call_async(link->manager->rtnl, NULL, req, set_mtu_handler,
1358 link_netlink_destroy_callback, link);
1359 if (r < 0)
1360 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1361
1362 link_ref(link);
1363 link->setting_mtu = true;
1364
1365 return 0;
1366 }
1367
1368 static int set_flags_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
1369 int r;
1370
1371 assert(m);
1372 assert(link);
1373 assert(link->ifname);
1374
1375 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1376 return 1;
1377
1378 r = sd_netlink_message_get_errno(m);
1379 if (r < 0)
1380 log_link_warning_errno(link, r, "Could not set link flags: %m");
1381
1382 return 1;
1383 }
1384
1385 static int link_set_flags(Link *link) {
1386 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1387 unsigned ifi_change = 0;
1388 unsigned ifi_flags = 0;
1389 int r;
1390
1391 assert(link);
1392 assert(link->manager);
1393 assert(link->manager->rtnl);
1394
1395 if (link->flags & IFF_LOOPBACK)
1396 return 0;
1397
1398 if (!link->network)
1399 return 0;
1400
1401 if (link->network->arp < 0 && link->network->multicast < 0 && link->network->allmulticast < 0)
1402 return 0;
1403
1404 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1405 if (r < 0)
1406 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1407
1408 if (link->network->arp >= 0) {
1409 ifi_change |= IFF_NOARP;
1410 SET_FLAG(ifi_flags, IFF_NOARP, link->network->arp == 0);
1411 }
1412
1413 if (link->network->multicast >= 0) {
1414 ifi_change |= IFF_MULTICAST;
1415 SET_FLAG(ifi_flags, IFF_MULTICAST, link->network->multicast);
1416 }
1417
1418 if (link->network->allmulticast >= 0) {
1419 ifi_change |= IFF_ALLMULTI;
1420 SET_FLAG(ifi_flags, IFF_ALLMULTI, link->network->allmulticast);
1421 }
1422
1423 r = sd_rtnl_message_link_set_flags(req, ifi_flags, ifi_change);
1424 if (r < 0)
1425 return log_link_error_errno(link, r, "Could not set link flags: %m");
1426
1427 r = netlink_call_async(link->manager->rtnl, NULL, req, set_flags_handler,
1428 link_netlink_destroy_callback, link);
1429 if (r < 0)
1430 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1431
1432 link_ref(link);
1433
1434 return 0;
1435 }
1436
1437 static int link_set_bridge(Link *link) {
1438 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1439 int r;
1440
1441 assert(link);
1442 assert(link->network);
1443
1444 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1445 if (r < 0)
1446 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1447
1448 r = sd_rtnl_message_link_set_family(req, PF_BRIDGE);
1449 if (r < 0)
1450 return log_link_error_errno(link, r, "Could not set message family: %m");
1451
1452 r = sd_netlink_message_open_container(req, IFLA_PROTINFO);
1453 if (r < 0)
1454 return log_link_error_errno(link, r, "Could not append IFLA_PROTINFO attribute: %m");
1455
1456 if (link->network->use_bpdu >= 0) {
1457 r = sd_netlink_message_append_u8(req, IFLA_BRPORT_GUARD, link->network->use_bpdu);
1458 if (r < 0)
1459 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_GUARD attribute: %m");
1460 }
1461
1462 if (link->network->hairpin >= 0) {
1463 r = sd_netlink_message_append_u8(req, IFLA_BRPORT_MODE, link->network->hairpin);
1464 if (r < 0)
1465 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_MODE attribute: %m");
1466 }
1467
1468 if (link->network->fast_leave >= 0) {
1469 r = sd_netlink_message_append_u8(req, IFLA_BRPORT_FAST_LEAVE, link->network->fast_leave);
1470 if (r < 0)
1471 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_FAST_LEAVE attribute: %m");
1472 }
1473
1474 if (link->network->allow_port_to_be_root >= 0) {
1475 r = sd_netlink_message_append_u8(req, IFLA_BRPORT_PROTECT, link->network->allow_port_to_be_root);
1476 if (r < 0)
1477 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_PROTECT attribute: %m");
1478
1479 }
1480
1481 if (link->network->unicast_flood >= 0) {
1482 r = sd_netlink_message_append_u8(req, IFLA_BRPORT_UNICAST_FLOOD, link->network->unicast_flood);
1483 if (r < 0)
1484 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_UNICAST_FLOOD attribute: %m");
1485 }
1486
1487 if (link->network->multicast_to_unicast >= 0) {
1488 r = sd_netlink_message_append_u8(req, IFLA_BRPORT_MCAST_TO_UCAST, link->network->multicast_to_unicast);
1489 if (r < 0)
1490 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_MCAST_TO_UCAST attribute: %m");
1491 }
1492
1493 if (link->network->cost != 0) {
1494 r = sd_netlink_message_append_u32(req, IFLA_BRPORT_COST, link->network->cost);
1495 if (r < 0)
1496 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_COST attribute: %m");
1497 }
1498
1499 if (link->network->priority != LINK_BRIDGE_PORT_PRIORITY_INVALID) {
1500 r = sd_netlink_message_append_u16(req, IFLA_BRPORT_PRIORITY, link->network->priority);
1501 if (r < 0)
1502 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_PRIORITY attribute: %m");
1503 }
1504
1505 r = sd_netlink_message_close_container(req);
1506 if (r < 0)
1507 return log_link_error_errno(link, r, "Could not append IFLA_LINKINFO attribute: %m");
1508
1509 r = netlink_call_async(link->manager->rtnl, NULL, req, link_set_handler,
1510 link_netlink_destroy_callback, link);
1511 if (r < 0)
1512 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1513
1514 link_ref(link);
1515
1516 return r;
1517 }
1518
1519 static int link_bond_set(Link *link) {
1520 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1521 int r;
1522
1523 assert(link);
1524 assert(link->network);
1525
1526 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_NEWLINK, link->network->bond->ifindex);
1527 if (r < 0)
1528 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1529
1530 r = sd_netlink_message_set_flags(req, NLM_F_REQUEST | NLM_F_ACK);
1531 if (r < 0)
1532 return log_link_error_errno(link, r, "Could not set netlink flags: %m");
1533
1534 r = sd_netlink_message_open_container(req, IFLA_LINKINFO);
1535 if (r < 0)
1536 return log_link_error_errno(link, r, "Could not append IFLA_PROTINFO attribute: %m");
1537
1538 r = sd_netlink_message_open_container_union(req, IFLA_INFO_DATA, "bond");
1539 if (r < 0)
1540 return log_link_error_errno(link, r, "Could not append IFLA_INFO_DATA attribute: %m");
1541
1542 if (link->network->active_slave) {
1543 r = sd_netlink_message_append_u32(req, IFLA_BOND_ACTIVE_SLAVE, link->ifindex);
1544 if (r < 0)
1545 return log_link_error_errno(link, r, "Could not append IFLA_BOND_ACTIVE_SLAVE attribute: %m");
1546 }
1547
1548 if (link->network->primary_slave) {
1549 r = sd_netlink_message_append_u32(req, IFLA_BOND_PRIMARY, link->ifindex);
1550 if (r < 0)
1551 return log_link_error_errno(link, r, "Could not append IFLA_BOND_PRIMARY attribute: %m");
1552 }
1553
1554 r = sd_netlink_message_close_container(req);
1555 if (r < 0)
1556 return log_link_error_errno(link, r, "Could not append IFLA_LINKINFO attribute: %m");
1557
1558 r = sd_netlink_message_close_container(req);
1559 if (r < 0)
1560 return log_link_error_errno(link, r, "Could not append IFLA_INFO_DATA attribute: %m");
1561
1562 r = netlink_call_async(link->manager->rtnl, NULL, req, set_flags_handler,
1563 link_netlink_destroy_callback, link);
1564 if (r < 0)
1565 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1566
1567 link_ref(link);
1568
1569 return r;
1570 }
1571
1572 static int link_lldp_save(Link *link) {
1573 _cleanup_free_ char *temp_path = NULL;
1574 _cleanup_fclose_ FILE *f = NULL;
1575 sd_lldp_neighbor **l = NULL;
1576 int n = 0, r, i;
1577
1578 assert(link);
1579 assert(link->lldp_file);
1580
1581 if (!link->lldp) {
1582 (void) unlink(link->lldp_file);
1583 return 0;
1584 }
1585
1586 r = sd_lldp_get_neighbors(link->lldp, &l);
1587 if (r < 0)
1588 goto finish;
1589 if (r == 0) {
1590 (void) unlink(link->lldp_file);
1591 goto finish;
1592 }
1593
1594 n = r;
1595
1596 r = fopen_temporary(link->lldp_file, &f, &temp_path);
1597 if (r < 0)
1598 goto finish;
1599
1600 fchmod(fileno(f), 0644);
1601
1602 for (i = 0; i < n; i++) {
1603 const void *p;
1604 le64_t u;
1605 size_t sz;
1606
1607 r = sd_lldp_neighbor_get_raw(l[i], &p, &sz);
1608 if (r < 0)
1609 goto finish;
1610
1611 u = htole64(sz);
1612 (void) fwrite(&u, 1, sizeof(u), f);
1613 (void) fwrite(p, 1, sz, f);
1614 }
1615
1616 r = fflush_and_check(f);
1617 if (r < 0)
1618 goto finish;
1619
1620 if (rename(temp_path, link->lldp_file) < 0) {
1621 r = -errno;
1622 goto finish;
1623 }
1624
1625 finish:
1626 if (r < 0) {
1627 (void) unlink(link->lldp_file);
1628 if (temp_path)
1629 (void) unlink(temp_path);
1630
1631 log_link_error_errno(link, r, "Failed to save LLDP data to %s: %m", link->lldp_file);
1632 }
1633
1634 if (l) {
1635 for (i = 0; i < n; i++)
1636 sd_lldp_neighbor_unref(l[i]);
1637 free(l);
1638 }
1639
1640 return r;
1641 }
1642
1643 static void lldp_handler(sd_lldp *lldp, sd_lldp_event event, sd_lldp_neighbor *n, void *userdata) {
1644 Link *link = userdata;
1645 int r;
1646
1647 assert(link);
1648
1649 (void) link_lldp_save(link);
1650
1651 if (link_lldp_emit_enabled(link) && event == SD_LLDP_EVENT_ADDED) {
1652 /* If we received information about a new neighbor, restart the LLDP "fast" logic */
1653
1654 log_link_debug(link, "Received LLDP datagram from previously unknown neighbor, restarting 'fast' LLDP transmission.");
1655
1656 r = link_lldp_emit_start(link);
1657 if (r < 0)
1658 log_link_warning_errno(link, r, "Failed to restart LLDP transmission: %m");
1659 }
1660 }
1661
1662 static int link_acquire_ipv6_conf(Link *link) {
1663 int r;
1664
1665 assert(link);
1666
1667 if (link_ipv6_accept_ra_enabled(link)) {
1668 assert(link->ndisc);
1669
1670 log_link_debug(link, "Discovering IPv6 routers");
1671
1672 r = sd_ndisc_start(link->ndisc);
1673 if (r < 0 && r != -EBUSY)
1674 return log_link_warning_errno(link, r, "Could not start IPv6 Router Discovery: %m");
1675 }
1676
1677 if (link_radv_enabled(link)) {
1678 assert(link->radv);
1679 assert(in_addr_is_link_local(AF_INET6, (const union in_addr_union*)&link->ipv6ll_address) > 0);
1680
1681 log_link_debug(link, "Starting IPv6 Router Advertisements");
1682
1683 r = sd_radv_start(link->radv);
1684 if (r < 0 && r != -EBUSY)
1685 return log_link_warning_errno(link, r, "Could not start IPv6 Router Advertisement: %m");
1686 }
1687
1688 (void) dhcp6_request_prefix_delegation(link);
1689
1690 return 0;
1691 }
1692
1693 static int link_acquire_ipv4_conf(Link *link) {
1694 int r;
1695
1696 assert(link);
1697 assert(link->network);
1698 assert(link->manager);
1699 assert(link->manager->event);
1700
1701 if (link_ipv4ll_enabled(link)) {
1702 assert(link->ipv4ll);
1703
1704 log_link_debug(link, "Acquiring IPv4 link-local address");
1705
1706 r = sd_ipv4ll_start(link->ipv4ll);
1707 if (r < 0)
1708 return log_link_warning_errno(link, r, "Could not acquire IPv4 link-local address: %m");
1709 }
1710
1711 if (link_dhcp4_enabled(link)) {
1712 assert(link->dhcp_client);
1713
1714 log_link_debug(link, "Acquiring DHCPv4 lease");
1715
1716 r = sd_dhcp_client_start(link->dhcp_client);
1717 if (r < 0)
1718 return log_link_warning_errno(link, r, "Could not acquire DHCPv4 lease: %m");
1719 }
1720
1721 return 0;
1722 }
1723
1724 static int link_acquire_conf(Link *link) {
1725 int r;
1726
1727 assert(link);
1728
1729 r = link_acquire_ipv4_conf(link);
1730 if (r < 0)
1731 return r;
1732
1733 if (in_addr_is_null(AF_INET6, (const union in_addr_union*) &link->ipv6ll_address) == 0) {
1734 r = link_acquire_ipv6_conf(link);
1735 if (r < 0)
1736 return r;
1737 }
1738
1739 if (link_lldp_emit_enabled(link)) {
1740 r = link_lldp_emit_start(link);
1741 if (r < 0)
1742 return log_link_warning_errno(link, r, "Failed to start LLDP transmission: %m");
1743 }
1744
1745 return 0;
1746 }
1747
1748 bool link_has_carrier(Link *link) {
1749 /* see Documentation/networking/operstates.txt in the kernel sources */
1750
1751 if (link->kernel_operstate == IF_OPER_UP)
1752 return true;
1753
1754 if (link->kernel_operstate == IF_OPER_UNKNOWN)
1755 /* operstate may not be implemented, so fall back to flags */
1756 if ((link->flags & IFF_LOWER_UP) && !(link->flags & IFF_DORMANT))
1757 return true;
1758
1759 return false;
1760 }
1761
1762 static int link_up_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
1763 int r;
1764
1765 assert(link);
1766
1767 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1768 return 1;
1769
1770 r = sd_netlink_message_get_errno(m);
1771 if (r < 0)
1772 /* we warn but don't fail the link, as it may be brought up later */
1773 log_link_warning_errno(link, r, "Could not bring up interface: %m");
1774
1775 return 1;
1776 }
1777
1778 int link_up(Link *link) {
1779 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1780 uint8_t ipv6ll_mode;
1781 int r;
1782
1783 assert(link);
1784 assert(link->network);
1785 assert(link->manager);
1786 assert(link->manager->rtnl);
1787
1788 log_link_debug(link, "Bringing link up");
1789
1790 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1791 if (r < 0)
1792 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1793
1794 /* set it free if not enslaved with networkd */
1795 if (!link->network->bridge && !link->network->bond && !link->network->vrf) {
1796 r = sd_netlink_message_append_u32(req, IFLA_MASTER, 0);
1797 if (r < 0)
1798 return log_link_error_errno(link, r, "Could not append IFLA_MASTER attribute: %m");
1799 }
1800
1801 r = sd_rtnl_message_link_set_flags(req, IFF_UP, IFF_UP);
1802 if (r < 0)
1803 return log_link_error_errno(link, r, "Could not set link flags: %m");
1804
1805 if (link->network->mac) {
1806 r = sd_netlink_message_append_ether_addr(req, IFLA_ADDRESS, link->network->mac);
1807 if (r < 0)
1808 return log_link_error_errno(link, r, "Could not set MAC address: %m");
1809 }
1810
1811 r = sd_netlink_message_open_container(req, IFLA_AF_SPEC);
1812 if (r < 0)
1813 return log_link_error_errno(link, r, "Could not open IFLA_AF_SPEC container: %m");
1814
1815 if (link_ipv6_enabled(link)) {
1816 /* if the kernel lacks ipv6 support setting IFF_UP fails if any ipv6 options are passed */
1817 r = sd_netlink_message_open_container(req, AF_INET6);
1818 if (r < 0)
1819 return log_link_error_errno(link, r, "Could not open AF_INET6 container: %m");
1820
1821 if (!link_ipv6ll_enabled(link))
1822 ipv6ll_mode = IN6_ADDR_GEN_MODE_NONE;
1823 else {
1824 const char *p = NULL;
1825 _cleanup_free_ char *stable_secret = NULL;
1826
1827 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/stable_secret");
1828 r = read_one_line_file(p, &stable_secret);
1829
1830 if (r < 0)
1831 ipv6ll_mode = IN6_ADDR_GEN_MODE_EUI64;
1832 else
1833 ipv6ll_mode = IN6_ADDR_GEN_MODE_STABLE_PRIVACY;
1834 }
1835 r = sd_netlink_message_append_u8(req, IFLA_INET6_ADDR_GEN_MODE, ipv6ll_mode);
1836 if (r < 0)
1837 return log_link_error_errno(link, r, "Could not append IFLA_INET6_ADDR_GEN_MODE: %m");
1838
1839 if (!in_addr_is_null(AF_INET6, &link->network->ipv6_token)) {
1840 r = sd_netlink_message_append_in6_addr(req, IFLA_INET6_TOKEN, &link->network->ipv6_token.in6);
1841 if (r < 0)
1842 return log_link_error_errno(link, r, "Could not append IFLA_INET6_TOKEN: %m");
1843 }
1844
1845 r = sd_netlink_message_close_container(req);
1846 if (r < 0)
1847 return log_link_error_errno(link, r, "Could not close AF_INET6 container: %m");
1848 }
1849
1850 r = sd_netlink_message_close_container(req);
1851 if (r < 0)
1852 return log_link_error_errno(link, r, "Could not close IFLA_AF_SPEC container: %m");
1853
1854 r = netlink_call_async(link->manager->rtnl, NULL, req, link_up_handler,
1855 link_netlink_destroy_callback, link);
1856 if (r < 0)
1857 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1858
1859 link_ref(link);
1860
1861 return 0;
1862 }
1863
1864 static int link_up_can(Link *link) {
1865 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1866 int r;
1867
1868 assert(link);
1869
1870 log_link_debug(link, "Bringing CAN link up");
1871
1872 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1873 if (r < 0)
1874 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1875
1876 r = sd_rtnl_message_link_set_flags(req, IFF_UP, IFF_UP);
1877 if (r < 0)
1878 return log_link_error_errno(link, r, "Could not set link flags: %m");
1879
1880 r = netlink_call_async(link->manager->rtnl, NULL, req, link_up_handler,
1881 link_netlink_destroy_callback, link);
1882 if (r < 0)
1883 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1884
1885 link_ref(link);
1886
1887 return 0;
1888 }
1889
1890 static int link_set_can(Link *link) {
1891 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *m = NULL;
1892 int r;
1893
1894 assert(link);
1895 assert(link->network);
1896 assert(link->manager);
1897 assert(link->manager->rtnl);
1898
1899 log_link_debug(link, "link_set_can");
1900
1901 r = sd_rtnl_message_new_link(link->manager->rtnl, &m, RTM_NEWLINK, link->ifindex);
1902 if (r < 0)
1903 return log_link_error_errno(link, r, "Failed to allocate netlink message: %m");
1904
1905 r = sd_netlink_message_set_flags(m, NLM_F_REQUEST | NLM_F_ACK);
1906 if (r < 0)
1907 return log_link_error_errno(link, r, "Could not set netlink flags: %m");
1908
1909 r = sd_netlink_message_open_container(m, IFLA_LINKINFO);
1910 if (r < 0)
1911 return log_link_error_errno(link, r, "Failed to open netlink container: %m");
1912
1913 r = sd_netlink_message_open_container_union(m, IFLA_INFO_DATA, link->kind);
1914 if (r < 0)
1915 return log_link_error_errno(link, r, "Could not append IFLA_INFO_DATA attribute: %m");
1916
1917 if (link->network->can_bitrate > 0 || link->network->can_sample_point > 0) {
1918 struct can_bittiming bt = {
1919 .bitrate = link->network->can_bitrate,
1920 .sample_point = link->network->can_sample_point,
1921 };
1922
1923 if (link->network->can_bitrate > UINT32_MAX) {
1924 log_link_error(link, "bitrate (%zu) too big.", link->network->can_bitrate);
1925 return -ERANGE;
1926 }
1927
1928 log_link_debug(link, "Setting bitrate = %d bit/s", bt.bitrate);
1929 if (link->network->can_sample_point > 0)
1930 log_link_debug(link, "Setting sample point = %d.%d%%", bt.sample_point / 10, bt.sample_point % 10);
1931 else
1932 log_link_debug(link, "Using default sample point");
1933
1934 r = sd_netlink_message_append_data(m, IFLA_CAN_BITTIMING, &bt, sizeof(bt));
1935 if (r < 0)
1936 return log_link_error_errno(link, r, "Could not append IFLA_CAN_BITTIMING attribute: %m");
1937 }
1938
1939 if (link->network->can_restart_us > 0) {
1940 char time_string[FORMAT_TIMESPAN_MAX];
1941 uint64_t restart_ms;
1942
1943 if (link->network->can_restart_us == USEC_INFINITY)
1944 restart_ms = 0;
1945 else
1946 restart_ms = DIV_ROUND_UP(link->network->can_restart_us, USEC_PER_MSEC);
1947
1948 format_timespan(time_string, FORMAT_TIMESPAN_MAX, restart_ms * 1000, MSEC_PER_SEC);
1949
1950 if (restart_ms > UINT32_MAX) {
1951 log_link_error(link, "restart timeout (%s) too big.", time_string);
1952 return -ERANGE;
1953 }
1954
1955 log_link_debug(link, "Setting restart = %s", time_string);
1956
1957 r = sd_netlink_message_append_u32(m, IFLA_CAN_RESTART_MS, restart_ms);
1958 if (r < 0)
1959 return log_link_error_errno(link, r, "Could not append IFLA_CAN_RESTART_MS attribute: %m");
1960 }
1961
1962 r = sd_netlink_message_close_container(m);
1963 if (r < 0)
1964 return log_link_error_errno(link, r, "Failed to close netlink container: %m");
1965
1966 r = sd_netlink_message_close_container(m);
1967 if (r < 0)
1968 return log_link_error_errno(link, r, "Failed to close netlink container: %m");
1969
1970 r = netlink_call_async(link->manager->rtnl, NULL, m, link_set_handler,
1971 link_netlink_destroy_callback, link);
1972 if (r < 0)
1973 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1974
1975 link_ref(link);
1976
1977 if (!(link->flags & IFF_UP)) {
1978 r = link_up_can(link);
1979 if (r < 0) {
1980 link_enter_failed(link);
1981 return r;
1982 }
1983 }
1984
1985 log_link_debug(link, "link_set_can done");
1986
1987 return r;
1988 }
1989
1990 static int link_down_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
1991 int r;
1992
1993 assert(link);
1994
1995 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1996 return 1;
1997
1998 r = sd_netlink_message_get_errno(m);
1999 if (r < 0)
2000 log_link_warning_errno(link, r, "Could not bring down interface: %m");
2001
2002 if (streq_ptr(link->kind, "can"))
2003 link_set_can(link);
2004
2005 return 1;
2006 }
2007
2008 int link_down(Link *link) {
2009 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
2010 int r;
2011
2012 assert(link);
2013 assert(link->manager);
2014 assert(link->manager->rtnl);
2015
2016 log_link_debug(link, "Bringing link down");
2017
2018 r = sd_rtnl_message_new_link(link->manager->rtnl, &req,
2019 RTM_SETLINK, link->ifindex);
2020 if (r < 0)
2021 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
2022
2023 r = sd_rtnl_message_link_set_flags(req, 0, IFF_UP);
2024 if (r < 0)
2025 return log_link_error_errno(link, r, "Could not set link flags: %m");
2026
2027 r = netlink_call_async(link->manager->rtnl, NULL, req, link_down_handler,
2028 link_netlink_destroy_callback, link);
2029 if (r < 0)
2030 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
2031
2032 link_ref(link);
2033
2034 return 0;
2035 }
2036
2037 static int link_handle_bound_to_list(Link *link) {
2038 Link *l;
2039 Iterator i;
2040 int r;
2041 bool required_up = false;
2042 bool link_is_up = false;
2043
2044 assert(link);
2045
2046 if (hashmap_isempty(link->bound_to_links))
2047 return 0;
2048
2049 if (link->flags & IFF_UP)
2050 link_is_up = true;
2051
2052 HASHMAP_FOREACH (l, link->bound_to_links, i)
2053 if (link_has_carrier(l)) {
2054 required_up = true;
2055 break;
2056 }
2057
2058 if (!required_up && link_is_up) {
2059 r = link_down(link);
2060 if (r < 0)
2061 return r;
2062 } else if (required_up && !link_is_up) {
2063 r = link_up(link);
2064 if (r < 0)
2065 return r;
2066 }
2067
2068 return 0;
2069 }
2070
2071 static int link_handle_bound_by_list(Link *link) {
2072 Iterator i;
2073 Link *l;
2074 int r;
2075
2076 assert(link);
2077
2078 if (hashmap_isempty(link->bound_by_links))
2079 return 0;
2080
2081 HASHMAP_FOREACH (l, link->bound_by_links, i) {
2082 r = link_handle_bound_to_list(l);
2083 if (r < 0)
2084 return r;
2085 }
2086
2087 return 0;
2088 }
2089
2090 static int link_put_carrier(Link *link, Link *carrier, Hashmap **h) {
2091 int r;
2092
2093 assert(link);
2094 assert(carrier);
2095
2096 if (link == carrier)
2097 return 0;
2098
2099 if (hashmap_get(*h, INT_TO_PTR(carrier->ifindex)))
2100 return 0;
2101
2102 r = hashmap_ensure_allocated(h, NULL);
2103 if (r < 0)
2104 return r;
2105
2106 r = hashmap_put(*h, INT_TO_PTR(carrier->ifindex), carrier);
2107 if (r < 0)
2108 return r;
2109
2110 return 0;
2111 }
2112
2113 static int link_new_bound_by_list(Link *link) {
2114 Manager *m;
2115 Link *carrier;
2116 Iterator i;
2117 int r;
2118 bool list_updated = false;
2119
2120 assert(link);
2121 assert(link->manager);
2122
2123 m = link->manager;
2124
2125 HASHMAP_FOREACH(carrier, m->links, i) {
2126 if (!carrier->network)
2127 continue;
2128
2129 if (strv_isempty(carrier->network->bind_carrier))
2130 continue;
2131
2132 if (strv_fnmatch(carrier->network->bind_carrier, link->ifname, 0)) {
2133 r = link_put_carrier(link, carrier, &link->bound_by_links);
2134 if (r < 0)
2135 return r;
2136
2137 list_updated = true;
2138 }
2139 }
2140
2141 if (list_updated)
2142 link_dirty(link);
2143
2144 HASHMAP_FOREACH(carrier, link->bound_by_links, i) {
2145 r = link_put_carrier(carrier, link, &carrier->bound_to_links);
2146 if (r < 0)
2147 return r;
2148
2149 link_dirty(carrier);
2150 }
2151
2152 return 0;
2153 }
2154
2155 static int link_new_bound_to_list(Link *link) {
2156 Manager *m;
2157 Link *carrier;
2158 Iterator i;
2159 int r;
2160 bool list_updated = false;
2161
2162 assert(link);
2163 assert(link->manager);
2164
2165 if (!link->network)
2166 return 0;
2167
2168 if (strv_isempty(link->network->bind_carrier))
2169 return 0;
2170
2171 m = link->manager;
2172
2173 HASHMAP_FOREACH (carrier, m->links, i) {
2174 if (strv_fnmatch(link->network->bind_carrier, carrier->ifname, 0)) {
2175 r = link_put_carrier(link, carrier, &link->bound_to_links);
2176 if (r < 0)
2177 return r;
2178
2179 list_updated = true;
2180 }
2181 }
2182
2183 if (list_updated)
2184 link_dirty(link);
2185
2186 HASHMAP_FOREACH (carrier, link->bound_to_links, i) {
2187 r = link_put_carrier(carrier, link, &carrier->bound_by_links);
2188 if (r < 0)
2189 return r;
2190
2191 link_dirty(carrier);
2192 }
2193
2194 return 0;
2195 }
2196
2197 static int link_new_carrier_maps(Link *link) {
2198 int r;
2199
2200 r = link_new_bound_by_list(link);
2201 if (r < 0)
2202 return r;
2203
2204 r = link_handle_bound_by_list(link);
2205 if (r < 0)
2206 return r;
2207
2208 r = link_new_bound_to_list(link);
2209 if (r < 0)
2210 return r;
2211
2212 r = link_handle_bound_to_list(link);
2213 if (r < 0)
2214 return r;
2215
2216 return 0;
2217 }
2218
2219 static void link_free_bound_to_list(Link *link) {
2220 Link *bound_to;
2221 Iterator i;
2222
2223 HASHMAP_FOREACH (bound_to, link->bound_to_links, i) {
2224 hashmap_remove(link->bound_to_links, INT_TO_PTR(bound_to->ifindex));
2225
2226 if (hashmap_remove(bound_to->bound_by_links, INT_TO_PTR(link->ifindex)))
2227 link_dirty(bound_to);
2228 }
2229
2230 return;
2231 }
2232
2233 static void link_free_bound_by_list(Link *link) {
2234 Link *bound_by;
2235 Iterator i;
2236
2237 HASHMAP_FOREACH (bound_by, link->bound_by_links, i) {
2238 hashmap_remove(link->bound_by_links, INT_TO_PTR(bound_by->ifindex));
2239
2240 if (hashmap_remove(bound_by->bound_to_links, INT_TO_PTR(link->ifindex))) {
2241 link_dirty(bound_by);
2242 link_handle_bound_to_list(bound_by);
2243 }
2244 }
2245
2246 return;
2247 }
2248
2249 static void link_free_carrier_maps(Link *link) {
2250 bool list_updated = false;
2251
2252 assert(link);
2253
2254 if (!hashmap_isempty(link->bound_to_links)) {
2255 link_free_bound_to_list(link);
2256 list_updated = true;
2257 }
2258
2259 if (!hashmap_isempty(link->bound_by_links)) {
2260 link_free_bound_by_list(link);
2261 list_updated = true;
2262 }
2263
2264 if (list_updated)
2265 link_dirty(link);
2266
2267 return;
2268 }
2269
2270 void link_drop(Link *link) {
2271 if (!link || link->state == LINK_STATE_LINGER)
2272 return;
2273
2274 link_set_state(link, LINK_STATE_LINGER);
2275
2276 link_free_carrier_maps(link);
2277
2278 log_link_debug(link, "Link removed");
2279
2280 (void) unlink(link->state_file);
2281
2282 link_detach_from_manager(link);
2283
2284 link_unref(link);
2285
2286 return;
2287 }
2288
2289 static int link_joined(Link *link) {
2290 int r;
2291
2292 assert(link);
2293 assert(link->network);
2294
2295 if (!hashmap_isempty(link->bound_to_links)) {
2296 r = link_handle_bound_to_list(link);
2297 if (r < 0)
2298 return r;
2299 } else if (!(link->flags & IFF_UP)) {
2300 r = link_up(link);
2301 if (r < 0) {
2302 link_enter_failed(link);
2303 return r;
2304 }
2305 }
2306
2307 if (link->network->bridge) {
2308 r = link_set_bridge(link);
2309 if (r < 0)
2310 log_link_error_errno(link, r, "Could not set bridge message: %m");
2311 }
2312
2313 if (link->network->bond) {
2314 r = link_bond_set(link);
2315 if (r < 0)
2316 log_link_error_errno(link, r, "Could not set bond message: %m");
2317 }
2318
2319 if (link->network->use_br_vlan &&
2320 (link->network->bridge || streq_ptr("bridge", link->kind))) {
2321 r = link_set_bridge_vlan(link);
2322 if (r < 0)
2323 log_link_error_errno(link, r, "Could not set bridge vlan: %m");
2324 }
2325
2326 /* Skip setting up addresses until it gets carrier,
2327 or it would try to set addresses twice,
2328 which is bad for non-idempotent steps. */
2329 if (!link_has_carrier(link) && !link->network->configure_without_carrier)
2330 return 0;
2331
2332 return link_request_set_addresses(link);
2333 }
2334
2335 static int netdev_join_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
2336 int r;
2337
2338 assert(link);
2339 assert(link->network);
2340
2341 link->enslaving--;
2342
2343 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
2344 return 1;
2345
2346 r = sd_netlink_message_get_errno(m);
2347 if (r < 0 && r != -EEXIST) {
2348 log_link_error_errno(link, r, "Could not join netdev: %m");
2349 link_enter_failed(link);
2350 return 1;
2351 } else
2352 log_link_debug(link, "Joined netdev");
2353
2354 if (link->enslaving <= 0)
2355 link_joined(link);
2356
2357 return 1;
2358 }
2359
2360 static int link_enter_join_netdev(Link *link) {
2361 NetDev *netdev;
2362 Iterator i;
2363 int r;
2364
2365 assert(link);
2366 assert(link->network);
2367 assert(link->state == LINK_STATE_PENDING);
2368
2369 link_set_state(link, LINK_STATE_CONFIGURING);
2370
2371 link_dirty(link);
2372
2373 if (!link->network->bridge &&
2374 !link->network->bond &&
2375 !link->network->vrf &&
2376 hashmap_isempty(link->network->stacked_netdevs))
2377 return link_joined(link);
2378
2379 if (link->network->bond) {
2380 if (link->network->bond->state == NETDEV_STATE_READY &&
2381 link->network->bond->ifindex == link->master_ifindex)
2382 return link_joined(link);
2383
2384 log_struct(LOG_DEBUG,
2385 LOG_LINK_INTERFACE(link),
2386 LOG_NETDEV_INTERFACE(link->network->bond),
2387 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", link->network->bond->ifname));
2388
2389 r = netdev_join(link->network->bond, link, netdev_join_handler);
2390 if (r < 0) {
2391 log_struct_errno(LOG_WARNING, r,
2392 LOG_LINK_INTERFACE(link),
2393 LOG_NETDEV_INTERFACE(link->network->bond),
2394 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", link->network->bond->ifname));
2395 link_enter_failed(link);
2396 return r;
2397 }
2398
2399 link->enslaving++;
2400 }
2401
2402 if (link->network->bridge) {
2403 log_struct(LOG_DEBUG,
2404 LOG_LINK_INTERFACE(link),
2405 LOG_NETDEV_INTERFACE(link->network->bridge),
2406 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", link->network->bridge->ifname));
2407
2408 r = netdev_join(link->network->bridge, link, netdev_join_handler);
2409 if (r < 0) {
2410 log_struct_errno(LOG_WARNING, r,
2411 LOG_LINK_INTERFACE(link),
2412 LOG_NETDEV_INTERFACE(link->network->bridge),
2413 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", link->network->bridge->ifname));
2414 link_enter_failed(link);
2415 return r;
2416 }
2417
2418 link->enslaving++;
2419 }
2420
2421 if (link->network->vrf) {
2422 log_struct(LOG_DEBUG,
2423 LOG_LINK_INTERFACE(link),
2424 LOG_NETDEV_INTERFACE(link->network->vrf),
2425 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", link->network->vrf->ifname));
2426
2427 r = netdev_join(link->network->vrf, link, netdev_join_handler);
2428 if (r < 0) {
2429 log_struct_errno(LOG_WARNING, r,
2430 LOG_LINK_INTERFACE(link),
2431 LOG_NETDEV_INTERFACE(link->network->vrf),
2432 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", link->network->vrf->ifname));
2433 link_enter_failed(link);
2434 return r;
2435 }
2436
2437 link->enslaving++;
2438 }
2439
2440 HASHMAP_FOREACH(netdev, link->network->stacked_netdevs, i) {
2441
2442 if (netdev->ifindex > 0) {
2443 link_joined(link);
2444 continue;
2445 }
2446
2447 log_struct(LOG_DEBUG,
2448 LOG_LINK_INTERFACE(link),
2449 LOG_NETDEV_INTERFACE(netdev),
2450 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", netdev->ifname));
2451
2452 r = netdev_join(netdev, link, netdev_join_handler);
2453 if (r < 0) {
2454 log_struct_errno(LOG_WARNING, r,
2455 LOG_LINK_INTERFACE(link),
2456 LOG_NETDEV_INTERFACE(netdev),
2457 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", netdev->ifname));
2458 link_enter_failed(link);
2459 return r;
2460 }
2461
2462 link->enslaving++;
2463 }
2464
2465 return 0;
2466 }
2467
2468 static int link_set_ipv4_forward(Link *link) {
2469 int r;
2470
2471 if (!link_ipv4_forward_enabled(link))
2472 return 0;
2473
2474 /* We propagate the forwarding flag from one interface to the
2475 * global setting one way. This means: as long as at least one
2476 * interface was configured at any time that had IP forwarding
2477 * enabled the setting will stay on for good. We do this
2478 * primarily to keep IPv4 and IPv6 packet forwarding behaviour
2479 * somewhat in sync (see below). */
2480
2481 r = write_string_file("/proc/sys/net/ipv4/ip_forward", "1", WRITE_STRING_FILE_VERIFY_ON_FAILURE | WRITE_STRING_FILE_DISABLE_BUFFER);
2482 if (r < 0)
2483 log_link_warning_errno(link, r, "Cannot turn on IPv4 packet forwarding, ignoring: %m");
2484
2485 return 0;
2486 }
2487
2488 static int link_set_ipv6_forward(Link *link) {
2489 int r;
2490
2491 if (!link_ipv6_forward_enabled(link))
2492 return 0;
2493
2494 /* On Linux, the IPv6 stack does not know a per-interface
2495 * packet forwarding setting: either packet forwarding is on
2496 * for all, or off for all. We hence don't bother with a
2497 * per-interface setting, but simply propagate the interface
2498 * flag, if it is set, to the global flag, one-way. Note that
2499 * while IPv4 would allow a per-interface flag, we expose the
2500 * same behaviour there and also propagate the setting from
2501 * one to all, to keep things simple (see above). */
2502
2503 r = write_string_file("/proc/sys/net/ipv6/conf/all/forwarding", "1", WRITE_STRING_FILE_VERIFY_ON_FAILURE | WRITE_STRING_FILE_DISABLE_BUFFER);
2504 if (r < 0)
2505 log_link_warning_errno(link, r, "Cannot configure IPv6 packet forwarding, ignoring: %m");
2506
2507 return 0;
2508 }
2509
2510 static int link_set_ipv6_privacy_extensions(Link *link) {
2511 char buf[DECIMAL_STR_MAX(unsigned) + 1];
2512 IPv6PrivacyExtensions s;
2513 const char *p = NULL;
2514 int r;
2515
2516 s = link_ipv6_privacy_extensions(link);
2517 if (s < 0)
2518 return 0;
2519
2520 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/use_tempaddr");
2521 xsprintf(buf, "%u", (unsigned) link->network->ipv6_privacy_extensions);
2522
2523 r = write_string_file(p, buf, WRITE_STRING_FILE_VERIFY_ON_FAILURE | WRITE_STRING_FILE_DISABLE_BUFFER);
2524 if (r < 0)
2525 log_link_warning_errno(link, r, "Cannot configure IPv6 privacy extension for interface: %m");
2526
2527 return 0;
2528 }
2529
2530 static int link_set_ipv6_accept_ra(Link *link) {
2531 const char *p = NULL;
2532 int r;
2533
2534 /* Make this a NOP if IPv6 is not available */
2535 if (!socket_ipv6_is_supported())
2536 return 0;
2537
2538 if (link->flags & IFF_LOOPBACK)
2539 return 0;
2540
2541 if (!link->network)
2542 return 0;
2543
2544 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/accept_ra");
2545
2546 /* We handle router advertisements ourselves, tell the kernel to GTFO */
2547 r = write_string_file(p, "0", WRITE_STRING_FILE_VERIFY_ON_FAILURE | WRITE_STRING_FILE_DISABLE_BUFFER);
2548 if (r < 0)
2549 log_link_warning_errno(link, r, "Cannot disable kernel IPv6 accept_ra for interface: %m");
2550
2551 return 0;
2552 }
2553
2554 static int link_set_ipv6_dad_transmits(Link *link) {
2555 char buf[DECIMAL_STR_MAX(int) + 1];
2556 const char *p = NULL;
2557 int r;
2558
2559 /* Make this a NOP if IPv6 is not available */
2560 if (!socket_ipv6_is_supported())
2561 return 0;
2562
2563 if (link->flags & IFF_LOOPBACK)
2564 return 0;
2565
2566 if (!link->network)
2567 return 0;
2568
2569 if (link->network->ipv6_dad_transmits < 0)
2570 return 0;
2571
2572 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/dad_transmits");
2573 xsprintf(buf, "%i", link->network->ipv6_dad_transmits);
2574
2575 r = write_string_file(p, buf, WRITE_STRING_FILE_VERIFY_ON_FAILURE | WRITE_STRING_FILE_DISABLE_BUFFER);
2576 if (r < 0)
2577 log_link_warning_errno(link, r, "Cannot set IPv6 dad transmits for interface: %m");
2578
2579 return 0;
2580 }
2581
2582 static int link_set_ipv6_hop_limit(Link *link) {
2583 char buf[DECIMAL_STR_MAX(int) + 1];
2584 const char *p = NULL;
2585 int r;
2586
2587 /* Make this a NOP if IPv6 is not available */
2588 if (!socket_ipv6_is_supported())
2589 return 0;
2590
2591 if (link->flags & IFF_LOOPBACK)
2592 return 0;
2593
2594 if (!link->network)
2595 return 0;
2596
2597 if (link->network->ipv6_hop_limit < 0)
2598 return 0;
2599
2600 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/hop_limit");
2601 xsprintf(buf, "%i", link->network->ipv6_hop_limit);
2602
2603 r = write_string_file(p, buf, WRITE_STRING_FILE_VERIFY_ON_FAILURE | WRITE_STRING_FILE_DISABLE_BUFFER);
2604 if (r < 0)
2605 log_link_warning_errno(link, r, "Cannot set IPv6 hop limit for interface: %m");
2606
2607 return 0;
2608 }
2609
2610 static int link_set_ipv6_mtu(Link *link) {
2611 char buf[DECIMAL_STR_MAX(unsigned) + 1];
2612 const char *p = NULL;
2613 int r;
2614
2615 /* Make this a NOP if IPv6 is not available */
2616 if (!socket_ipv6_is_supported())
2617 return 0;
2618
2619 if (link->flags & IFF_LOOPBACK)
2620 return 0;
2621
2622 if (link->network->ipv6_mtu == 0)
2623 return 0;
2624
2625 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/mtu");
2626
2627 xsprintf(buf, "%" PRIu32, link->network->ipv6_mtu);
2628
2629 r = write_string_file(p, buf, WRITE_STRING_FILE_DISABLE_BUFFER);
2630 if (r < 0)
2631 log_link_warning_errno(link, r, "Cannot set IPv6 MTU for interface: %m");
2632
2633 return 0;
2634 }
2635
2636 static bool link_is_static_address_configured(Link *link, Address *address) {
2637 Address *net_address;
2638
2639 assert(link);
2640 assert(address);
2641
2642 if (!link->network)
2643 return false;
2644
2645 LIST_FOREACH(addresses, net_address, link->network->static_addresses)
2646 if (address_equal(net_address, address))
2647 return true;
2648
2649 return false;
2650 }
2651
2652 static bool link_is_static_route_configured(Link *link, Route *route) {
2653 Route *net_route;
2654
2655 assert(link);
2656 assert(route);
2657
2658 if (!link->network)
2659 return false;
2660
2661 LIST_FOREACH(routes, net_route, link->network->static_routes)
2662 if (route_equal(net_route, route))
2663 return true;
2664
2665 return false;
2666 }
2667
2668 static int link_drop_foreign_config(Link *link) {
2669 Address *address;
2670 Route *route;
2671 Iterator i;
2672 int r;
2673
2674 SET_FOREACH(address, link->addresses_foreign, i) {
2675 /* we consider IPv6LL addresses to be managed by the kernel */
2676 if (address->family == AF_INET6 && in_addr_is_link_local(AF_INET6, &address->in_addr) == 1)
2677 continue;
2678
2679 if (link_is_static_address_configured(link, address)) {
2680 r = address_add(link, address->family, &address->in_addr, address->prefixlen, NULL);
2681 if (r < 0)
2682 return log_link_error_errno(link, r, "Failed to add address: %m");
2683 } else {
2684 r = address_remove(address, link, NULL);
2685 if (r < 0)
2686 return r;
2687 }
2688 }
2689
2690 SET_FOREACH(route, link->routes_foreign, i) {
2691 /* do not touch routes managed by the kernel */
2692 if (route->protocol == RTPROT_KERNEL)
2693 continue;
2694
2695 if (link_is_static_route_configured(link, route)) {
2696 r = route_add(link, route->family, &route->dst, route->dst_prefixlen, route->tos, route->priority, route->table, NULL);
2697 if (r < 0)
2698 return r;
2699 } else {
2700 r = route_remove(route, link, NULL);
2701 if (r < 0)
2702 return r;
2703 }
2704 }
2705
2706 return 0;
2707 }
2708
2709 static int link_drop_config(Link *link) {
2710 Address *address, *pool_address;
2711 Route *route;
2712 Iterator i;
2713 int r;
2714
2715 SET_FOREACH(address, link->addresses, i) {
2716 /* we consider IPv6LL addresses to be managed by the kernel */
2717 if (address->family == AF_INET6 && in_addr_is_link_local(AF_INET6, &address->in_addr) == 1)
2718 continue;
2719
2720 r = address_remove(address, link, NULL);
2721 if (r < 0)
2722 return r;
2723
2724 /* If this address came from an address pool, clean up the pool */
2725 LIST_FOREACH(addresses, pool_address, link->pool_addresses) {
2726 if (address_equal(address, pool_address)) {
2727 LIST_REMOVE(addresses, link->pool_addresses, pool_address);
2728 address_free(pool_address);
2729 break;
2730 }
2731 }
2732 }
2733
2734 SET_FOREACH(route, link->routes, i) {
2735 /* do not touch routes managed by the kernel */
2736 if (route->protocol == RTPROT_KERNEL)
2737 continue;
2738
2739 r = route_remove(route, link, NULL);
2740 if (r < 0)
2741 return r;
2742 }
2743
2744 ndisc_flush(link);
2745
2746 return 0;
2747 }
2748
2749 static int link_update_lldp(Link *link) {
2750 int r;
2751
2752 assert(link);
2753
2754 if (!link->lldp)
2755 return 0;
2756
2757 if (link->flags & IFF_UP) {
2758 r = sd_lldp_start(link->lldp);
2759 if (r > 0)
2760 log_link_debug(link, "Started LLDP.");
2761 } else {
2762 r = sd_lldp_stop(link->lldp);
2763 if (r > 0)
2764 log_link_debug(link, "Stopped LLDP.");
2765 }
2766
2767 return r;
2768 }
2769
2770 static int link_configure_can(Link *link) {
2771 int r;
2772
2773 if (streq_ptr(link->kind, "can")) {
2774 /* The CAN interface must be down to configure bitrate, etc... */
2775 if ((link->flags & IFF_UP)) {
2776 r = link_down(link);
2777 if (r < 0) {
2778 link_enter_failed(link);
2779 return r;
2780 }
2781
2782 return 0;
2783 }
2784
2785 return link_set_can(link);
2786 }
2787
2788 if (!(link->flags & IFF_UP)) {
2789 r = link_up_can(link);
2790 if (r < 0) {
2791 link_enter_failed(link);
2792 return r;
2793 }
2794 }
2795
2796 return 0;
2797 }
2798
2799 static int link_configure(Link *link) {
2800 int r;
2801
2802 assert(link);
2803 assert(link->network);
2804 assert(link->state == LINK_STATE_PENDING);
2805
2806 if (STRPTR_IN_SET(link->kind, "can", "vcan"))
2807 return link_configure_can(link);
2808
2809 /* Drop foreign config, but ignore loopback or critical devices.
2810 * We do not want to remove loopback address or addresses used for root NFS. */
2811 if (!(link->flags & IFF_LOOPBACK) && !(link->network->dhcp_critical)) {
2812 r = link_drop_foreign_config(link);
2813 if (r < 0)
2814 return r;
2815 }
2816
2817 r = link_set_proxy_arp(link);
2818 if (r < 0)
2819 return r;
2820
2821 r = ipv6_proxy_ndp_addresses_configure(link);
2822 if (r < 0)
2823 return r;
2824
2825 r = link_set_ipv4_forward(link);
2826 if (r < 0)
2827 return r;
2828
2829 r = link_set_ipv6_forward(link);
2830 if (r < 0)
2831 return r;
2832
2833 r = link_set_ipv6_privacy_extensions(link);
2834 if (r < 0)
2835 return r;
2836
2837 r = link_set_ipv6_accept_ra(link);
2838 if (r < 0)
2839 return r;
2840
2841 r = link_set_ipv6_dad_transmits(link);
2842 if (r < 0)
2843 return r;
2844
2845 r = link_set_ipv6_hop_limit(link);
2846 if (r < 0)
2847 return r;
2848
2849 r = link_set_flags(link);
2850 if (r < 0)
2851 return r;
2852
2853 r = link_set_ipv6_mtu(link);
2854 if (r < 0)
2855 return r;
2856
2857 if (link_ipv4ll_enabled(link)) {
2858 r = ipv4ll_configure(link);
2859 if (r < 0)
2860 return r;
2861 }
2862
2863 if (link_dhcp4_enabled(link)) {
2864 r = dhcp4_set_promote_secondaries(link);
2865 if (r < 0)
2866 return r;
2867
2868 r = dhcp4_configure(link);
2869 if (r < 0)
2870 return r;
2871 }
2872
2873 if (link_dhcp4_server_enabled(link)) {
2874 r = sd_dhcp_server_new(&link->dhcp_server, link->ifindex);
2875 if (r < 0)
2876 return r;
2877
2878 r = sd_dhcp_server_attach_event(link->dhcp_server, NULL, 0);
2879 if (r < 0)
2880 return r;
2881 }
2882
2883 if (link_dhcp6_enabled(link) ||
2884 link_ipv6_accept_ra_enabled(link)) {
2885 r = dhcp6_configure(link);
2886 if (r < 0)
2887 return r;
2888 }
2889
2890 if (link_ipv6_accept_ra_enabled(link)) {
2891 r = ndisc_configure(link);
2892 if (r < 0)
2893 return r;
2894 }
2895
2896 if (link_radv_enabled(link)) {
2897 r = radv_configure(link);
2898 if (r < 0)
2899 return r;
2900 }
2901
2902 if (link_lldp_rx_enabled(link)) {
2903 r = sd_lldp_new(&link->lldp);
2904 if (r < 0)
2905 return r;
2906
2907 r = sd_lldp_set_ifindex(link->lldp, link->ifindex);
2908 if (r < 0)
2909 return r;
2910
2911 r = sd_lldp_match_capabilities(link->lldp,
2912 link->network->lldp_mode == LLDP_MODE_ROUTERS_ONLY ?
2913 SD_LLDP_SYSTEM_CAPABILITIES_ALL_ROUTERS :
2914 SD_LLDP_SYSTEM_CAPABILITIES_ALL);
2915 if (r < 0)
2916 return r;
2917
2918 r = sd_lldp_set_filter_address(link->lldp, &link->mac);
2919 if (r < 0)
2920 return r;
2921
2922 r = sd_lldp_attach_event(link->lldp, NULL, 0);
2923 if (r < 0)
2924 return r;
2925
2926 r = sd_lldp_set_callback(link->lldp, lldp_handler, link);
2927 if (r < 0)
2928 return r;
2929
2930 r = link_update_lldp(link);
2931 if (r < 0)
2932 return r;
2933 }
2934
2935 if (link->network->mtu > 0) {
2936 r = link_set_mtu(link, link->network->mtu);
2937 if (r < 0)
2938 return r;
2939 }
2940
2941 return link_configure_after_setting_mtu(link);
2942 }
2943
2944 static int link_configure_after_setting_mtu(Link *link) {
2945 int r;
2946
2947 assert(link);
2948 assert(link->network);
2949 assert(link->state == LINK_STATE_PENDING);
2950
2951 if (link->setting_mtu)
2952 return 0;
2953
2954 if (link_has_carrier(link) || link->network->configure_without_carrier) {
2955 r = link_acquire_conf(link);
2956 if (r < 0)
2957 return r;
2958 }
2959
2960 return link_enter_join_netdev(link);
2961 }
2962
2963 static int duid_set_uuid(DUID *duid, sd_id128_t uuid) {
2964 assert(duid);
2965
2966 if (duid->raw_data_len > 0)
2967 return 0;
2968
2969 if (duid->type != DUID_TYPE_UUID)
2970 return -EINVAL;
2971
2972 memcpy(&duid->raw_data, &uuid, sizeof(sd_id128_t));
2973 duid->raw_data_len = sizeof(sd_id128_t);
2974
2975 return 1;
2976 }
2977
2978 int get_product_uuid_handler(sd_bus_message *m, void *userdata, sd_bus_error *ret_error) {
2979 Manager *manager = userdata;
2980 const sd_bus_error *e;
2981 const void *a;
2982 size_t sz;
2983 DUID *duid;
2984 Link *link;
2985 int r;
2986
2987 assert(m);
2988 assert(manager);
2989
2990 e = sd_bus_message_get_error(m);
2991 if (e) {
2992 log_error_errno(sd_bus_error_get_errno(e),
2993 "Could not get product UUID. Falling back to use machine-app-specific ID as DUID-UUID: %s",
2994 e->message);
2995 goto configure;
2996 }
2997
2998 r = sd_bus_message_read_array(m, 'y', &a, &sz);
2999 if (r < 0)
3000 goto configure;
3001
3002 if (sz != sizeof(sd_id128_t)) {
3003 log_error("Invalid product UUID. Falling back to use machine-app-specific ID as DUID-UUID.");
3004 goto configure;
3005 }
3006
3007 memcpy(&manager->product_uuid, a, sz);
3008 while ((duid = set_steal_first(manager->duids_requesting_uuid)))
3009 (void) duid_set_uuid(duid, manager->product_uuid);
3010
3011 manager->duids_requesting_uuid = set_free(manager->duids_requesting_uuid);
3012
3013 configure:
3014 while ((link = set_steal_first(manager->links_requesting_uuid))) {
3015 r = link_configure(link);
3016 if (r < 0)
3017 log_link_error_errno(link, r, "Failed to configure link: %m");
3018 }
3019
3020 manager->links_requesting_uuid = set_free(manager->links_requesting_uuid);
3021
3022 /* To avoid calling GetProductUUID() bus method so frequently, set the flag below
3023 * even if the method fails. */
3024 manager->has_product_uuid = true;
3025
3026 return 1;
3027 }
3028
3029 static bool link_requires_uuid(Link *link) {
3030 const DUID *duid;
3031
3032 assert(link);
3033 assert(link->manager);
3034 assert(link->network);
3035
3036 duid = link_get_duid(link);
3037 if (duid->type != DUID_TYPE_UUID || duid->raw_data_len != 0)
3038 return false;
3039
3040 if (link_dhcp4_enabled(link) && IN_SET(link->network->dhcp_client_identifier, DHCP_CLIENT_ID_DUID, DHCP_CLIENT_ID_DUID_ONLY))
3041 return true;
3042
3043 if (link_dhcp6_enabled(link) || link_ipv6_accept_ra_enabled(link))
3044 return true;
3045
3046 return false;
3047 }
3048
3049 static int link_configure_duid(Link *link) {
3050 Manager *m;
3051 DUID *duid;
3052 int r;
3053
3054 assert(link);
3055 assert(link->manager);
3056 assert(link->network);
3057
3058 m = link->manager;
3059 duid = link_get_duid(link);
3060
3061 if (!link_requires_uuid(link))
3062 return 1;
3063
3064 if (m->has_product_uuid) {
3065 (void) duid_set_uuid(duid, m->product_uuid);
3066 return 1;
3067 }
3068
3069 if (!m->links_requesting_uuid) {
3070 r = manager_request_product_uuid(m, link);
3071 if (r < 0) {
3072 if (r == -ENOMEM)
3073 return r;
3074
3075 log_link_warning_errno(link, r,
3076 "Failed to get product UUID. Falling back to use machine-app-specific ID as DUID-UUID: %m");
3077 return 1;
3078 }
3079 } else {
3080 r = set_put(m->links_requesting_uuid, link);
3081 if (r < 0)
3082 return log_oom();
3083
3084 r = set_put(m->duids_requesting_uuid, duid);
3085 if (r < 0)
3086 return log_oom();
3087 }
3088
3089 return 0;
3090 }
3091
3092 static int link_initialized_and_synced(Link *link) {
3093 Network *network;
3094 int r;
3095
3096 assert(link);
3097 assert(link->ifname);
3098 assert(link->manager);
3099
3100 if (link->state != LINK_STATE_PENDING)
3101 return 1;
3102
3103 log_link_debug(link, "Link state is up-to-date");
3104
3105 r = link_new_bound_by_list(link);
3106 if (r < 0)
3107 return r;
3108
3109 r = link_handle_bound_by_list(link);
3110 if (r < 0)
3111 return r;
3112
3113 if (!link->network) {
3114 r = network_get(link->manager, link->sd_device, link->ifname,
3115 &link->mac, &network);
3116 if (r == -ENOENT) {
3117 link_enter_unmanaged(link);
3118 return 1;
3119 } else if (r == 0 && network->unmanaged) {
3120 link_enter_unmanaged(link);
3121 return 0;
3122 } else if (r < 0)
3123 return r;
3124
3125 if (link->flags & IFF_LOOPBACK) {
3126 if (network->link_local != ADDRESS_FAMILY_NO)
3127 log_link_debug(link, "Ignoring link-local autoconfiguration for loopback link");
3128
3129 if (network->dhcp != ADDRESS_FAMILY_NO)
3130 log_link_debug(link, "Ignoring DHCP clients for loopback link");
3131
3132 if (network->dhcp_server)
3133 log_link_debug(link, "Ignoring DHCP server for loopback link");
3134 }
3135
3136 r = network_apply(network, link);
3137 if (r < 0)
3138 return r;
3139 }
3140
3141 r = link_new_bound_to_list(link);
3142 if (r < 0)
3143 return r;
3144
3145 /* link_configure_duid() returns 0 if it requests product UUID. In that case,
3146 * link_configure() is called later asynchronously. */
3147 r = link_configure_duid(link);
3148 if (r <= 0)
3149 return r;
3150
3151 r = link_configure(link);
3152 if (r < 0)
3153 return r;
3154
3155 return 1;
3156 }
3157
3158 static int link_initialized_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
3159 (void) link_initialized_and_synced(link);
3160 return 1;
3161 }
3162
3163 int link_initialized(Link *link, sd_device *device) {
3164 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
3165 int r;
3166
3167 assert(link);
3168 assert(link->manager);
3169 assert(link->manager->rtnl);
3170 assert(device);
3171
3172 if (link->state != LINK_STATE_PENDING)
3173 return 0;
3174
3175 if (link->sd_device)
3176 return 0;
3177
3178 log_link_debug(link, "udev initialized link");
3179
3180 link->sd_device = sd_device_ref(device);
3181
3182 /* udev has initialized the link, but we don't know if we have yet
3183 * processed the NEWLINK messages with the latest state. Do a GETLINK,
3184 * when it returns we know that the pending NEWLINKs have already been
3185 * processed and that we are up-to-date */
3186
3187 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_GETLINK,
3188 link->ifindex);
3189 if (r < 0)
3190 return r;
3191
3192 r = netlink_call_async(link->manager->rtnl, NULL, req, link_initialized_handler,
3193 link_netlink_destroy_callback, link);
3194 if (r < 0)
3195 return r;
3196
3197 link_ref(link);
3198
3199 return 0;
3200 }
3201
3202 static int link_load(Link *link) {
3203 _cleanup_free_ char *network_file = NULL,
3204 *addresses = NULL,
3205 *routes = NULL,
3206 *dhcp4_address = NULL,
3207 *ipv4ll_address = NULL;
3208 union in_addr_union address;
3209 union in_addr_union route_dst;
3210 const char *p;
3211 int r;
3212
3213 assert(link);
3214
3215 r = parse_env_file(NULL, link->state_file,
3216 "NETWORK_FILE", &network_file,
3217 "ADDRESSES", &addresses,
3218 "ROUTES", &routes,
3219 "DHCP4_ADDRESS", &dhcp4_address,
3220 "IPV4LL_ADDRESS", &ipv4ll_address);
3221 if (r < 0 && r != -ENOENT)
3222 return log_link_error_errno(link, r, "Failed to read %s: %m", link->state_file);
3223
3224 if (network_file) {
3225 Network *network;
3226 char *suffix;
3227
3228 /* drop suffix */
3229 suffix = strrchr(network_file, '.');
3230 if (!suffix) {
3231 log_link_debug(link, "Failed to get network name from %s", network_file);
3232 goto network_file_fail;
3233 }
3234 *suffix = '\0';
3235
3236 r = network_get_by_name(link->manager, basename(network_file), &network);
3237 if (r < 0) {
3238 log_link_debug_errno(link, r, "Failed to get network %s: %m", basename(network_file));
3239 goto network_file_fail;
3240 }
3241
3242 r = network_apply(network, link);
3243 if (r < 0)
3244 return log_link_error_errno(link, r, "Failed to apply network %s: %m", basename(network_file));
3245 }
3246
3247 network_file_fail:
3248
3249 if (addresses) {
3250 p = addresses;
3251
3252 for (;;) {
3253 _cleanup_free_ char *address_str = NULL;
3254 char *prefixlen_str;
3255 int family;
3256 unsigned char prefixlen;
3257
3258 r = extract_first_word(&p, &address_str, NULL, 0);
3259 if (r < 0) {
3260 log_link_debug_errno(link, r, "Failed to extract next address string: %m");
3261 continue;
3262 }
3263 if (r == 0)
3264 break;
3265
3266 prefixlen_str = strchr(address_str, '/');
3267 if (!prefixlen_str) {
3268 log_link_debug(link, "Failed to parse address and prefix length %s", address_str);
3269 continue;
3270 }
3271
3272 *prefixlen_str++ = '\0';
3273
3274 r = sscanf(prefixlen_str, "%hhu", &prefixlen);
3275 if (r != 1) {
3276 log_link_error(link, "Failed to parse prefixlen %s", prefixlen_str);
3277 continue;
3278 }
3279
3280 r = in_addr_from_string_auto(address_str, &family, &address);
3281 if (r < 0) {
3282 log_link_debug_errno(link, r, "Failed to parse address %s: %m", address_str);
3283 continue;
3284 }
3285
3286 r = address_add(link, family, &address, prefixlen, NULL);
3287 if (r < 0)
3288 return log_link_error_errno(link, r, "Failed to add address: %m");
3289 }
3290 }
3291
3292 if (routes) {
3293 p = routes;
3294
3295 for (;;) {
3296 Route *route;
3297 _cleanup_free_ char *route_str = NULL;
3298 _cleanup_(sd_event_source_unrefp) sd_event_source *expire = NULL;
3299 usec_t lifetime;
3300 char *prefixlen_str;
3301 int family;
3302 unsigned char prefixlen, tos, table;
3303 uint32_t priority;
3304
3305 r = extract_first_word(&p, &route_str, NULL, 0);
3306 if (r < 0) {
3307 log_link_debug_errno(link, r, "Failed to extract next route string: %m");
3308 continue;
3309 }
3310 if (r == 0)
3311 break;
3312
3313 prefixlen_str = strchr(route_str, '/');
3314 if (!prefixlen_str) {
3315 log_link_debug(link, "Failed to parse route %s", route_str);
3316 continue;
3317 }
3318
3319 *prefixlen_str++ = '\0';
3320
3321 r = sscanf(prefixlen_str, "%hhu/%hhu/%"SCNu32"/%hhu/"USEC_FMT, &prefixlen, &tos, &priority, &table, &lifetime);
3322 if (r != 5) {
3323 log_link_debug(link,
3324 "Failed to parse destination prefix length, tos, priority, table or expiration %s",
3325 prefixlen_str);
3326 continue;
3327 }
3328
3329 r = in_addr_from_string_auto(route_str, &family, &route_dst);
3330 if (r < 0) {
3331 log_link_debug_errno(link, r, "Failed to parse route destination %s: %m", route_str);
3332 continue;
3333 }
3334
3335 r = route_add(link, family, &route_dst, prefixlen, tos, priority, table, &route);
3336 if (r < 0)
3337 return log_link_error_errno(link, r, "Failed to add route: %m");
3338
3339 if (lifetime != USEC_INFINITY && !kernel_route_expiration_supported()) {
3340 r = sd_event_add_time(link->manager->event, &expire, clock_boottime_or_monotonic(), lifetime,
3341 0, route_expire_handler, route);
3342 if (r < 0)
3343 log_link_warning_errno(link, r, "Could not arm route expiration handler: %m");
3344 }
3345
3346 route->lifetime = lifetime;
3347 sd_event_source_unref(route->expire);
3348 route->expire = TAKE_PTR(expire);
3349 }
3350 }
3351
3352 if (dhcp4_address) {
3353 r = in_addr_from_string(AF_INET, dhcp4_address, &address);
3354 if (r < 0) {
3355 log_link_debug_errno(link, r, "Failed to parse DHCPv4 address %s: %m", dhcp4_address);
3356 goto dhcp4_address_fail;
3357 }
3358
3359 r = sd_dhcp_client_new(&link->dhcp_client, link->network ? link->network->dhcp_anonymize : 0);
3360 if (r < 0)
3361 return log_link_error_errno(link, r, "Failed to create DHCPv4 client: %m");
3362
3363 r = sd_dhcp_client_set_request_address(link->dhcp_client, &address.in);
3364 if (r < 0)
3365 return log_link_error_errno(link, r, "Failed to set initial DHCPv4 address %s: %m", dhcp4_address);
3366 }
3367
3368 dhcp4_address_fail:
3369
3370 if (ipv4ll_address) {
3371 r = in_addr_from_string(AF_INET, ipv4ll_address, &address);
3372 if (r < 0) {
3373 log_link_debug_errno(link, r, "Failed to parse IPv4LL address %s: %m", ipv4ll_address);
3374 goto ipv4ll_address_fail;
3375 }
3376
3377 r = sd_ipv4ll_new(&link->ipv4ll);
3378 if (r < 0)
3379 return log_link_error_errno(link, r, "Failed to create IPv4LL client: %m");
3380
3381 r = sd_ipv4ll_set_address(link->ipv4ll, &address.in);
3382 if (r < 0)
3383 return log_link_error_errno(link, r, "Failed to set initial IPv4LL address %s: %m", ipv4ll_address);
3384 }
3385
3386 ipv4ll_address_fail:
3387
3388 return 0;
3389 }
3390
3391 int link_add(Manager *m, sd_netlink_message *message, Link **ret) {
3392 _cleanup_(sd_device_unrefp) sd_device *device = NULL;
3393 char ifindex_str[2 + DECIMAL_STR_MAX(int)];
3394 Link *link;
3395 int r;
3396
3397 assert(m);
3398 assert(m->rtnl);
3399 assert(message);
3400 assert(ret);
3401
3402 r = link_new(m, message, ret);
3403 if (r < 0)
3404 return r;
3405
3406 link = *ret;
3407
3408 log_link_debug(link, "Link %d added", link->ifindex);
3409
3410 r = link_load(link);
3411 if (r < 0)
3412 return r;
3413
3414 if (detect_container() <= 0) {
3415 /* not in a container, udev will be around */
3416 sprintf(ifindex_str, "n%d", link->ifindex);
3417 r = sd_device_new_from_device_id(&device, ifindex_str);
3418 if (r < 0) {
3419 log_link_warning_errno(link, r, "Could not find device: %m");
3420 goto failed;
3421 }
3422
3423 r = sd_device_get_is_initialized(device);
3424 if (r < 0) {
3425 log_link_warning_errno(link, r, "Could not determine whether the device is initialized or not: %m");
3426 goto failed;
3427 }
3428 if (r == 0) {
3429 /* not yet ready */
3430 log_link_debug(link, "link pending udev initialization...");
3431 return 0;
3432 }
3433
3434 r = link_initialized(link, device);
3435 if (r < 0)
3436 goto failed;
3437 } else {
3438 r = link_initialized_and_synced(link);
3439 if (r < 0)
3440 goto failed;
3441 }
3442
3443 return 0;
3444 failed:
3445 link_enter_failed(link);
3446 return r;
3447 }
3448
3449 int link_ipv6ll_gained(Link *link, const struct in6_addr *address) {
3450 int r;
3451
3452 assert(link);
3453
3454 log_link_info(link, "Gained IPv6LL");
3455
3456 link->ipv6ll_address = *address;
3457 link_check_ready(link);
3458
3459 if (!IN_SET(link->state, LINK_STATE_PENDING, LINK_STATE_UNMANAGED, LINK_STATE_FAILED)) {
3460 r = link_acquire_ipv6_conf(link);
3461 if (r < 0) {
3462 link_enter_failed(link);
3463 return r;
3464 }
3465 }
3466
3467 return 0;
3468 }
3469
3470 static int link_carrier_gained(Link *link) {
3471 int r;
3472
3473 assert(link);
3474
3475 if (!IN_SET(link->state, LINK_STATE_PENDING, LINK_STATE_UNMANAGED, LINK_STATE_FAILED)) {
3476 r = link_acquire_conf(link);
3477 if (r < 0) {
3478 link_enter_failed(link);
3479 return r;
3480 }
3481
3482 r = link_request_set_addresses(link);
3483 if (r < 0)
3484 return r;
3485 }
3486
3487 r = link_handle_bound_by_list(link);
3488 if (r < 0)
3489 return r;
3490
3491 return 0;
3492 }
3493
3494 static int link_carrier_lost(Link *link) {
3495 int r;
3496
3497 assert(link);
3498
3499 /* Some devices reset itself while setting the MTU. This causes the DHCP client fall into a loop.
3500 * setting_mtu keep track whether the device got reset because of setting MTU and does not drop the
3501 * configuration and stop the clients as well. */
3502 if (link->setting_mtu)
3503 return 0;
3504
3505 r = link_stop_clients(link);
3506 if (r < 0) {
3507 link_enter_failed(link);
3508 return r;
3509 }
3510
3511 if (link_dhcp4_server_enabled(link))
3512 (void) sd_dhcp_server_stop(link->dhcp_server);
3513
3514 r = link_drop_config(link);
3515 if (r < 0)
3516 return r;
3517
3518 if (!IN_SET(link->state, LINK_STATE_UNMANAGED, LINK_STATE_PENDING)) {
3519 log_link_debug(link, "State is %s, dropping config", link_state_to_string(link->state));
3520 r = link_drop_foreign_config(link);
3521 if (r < 0)
3522 return r;
3523 }
3524
3525 r = link_handle_bound_by_list(link);
3526 if (r < 0)
3527 return r;
3528
3529 return 0;
3530 }
3531
3532 int link_carrier_reset(Link *link) {
3533 int r;
3534
3535 assert(link);
3536
3537 if (link_has_carrier(link)) {
3538 r = link_carrier_lost(link);
3539 if (r < 0)
3540 return r;
3541
3542 r = link_carrier_gained(link);
3543 if (r < 0)
3544 return r;
3545
3546 log_link_info(link, "Reset carrier");
3547 }
3548
3549 return 0;
3550 }
3551
3552 int link_update(Link *link, sd_netlink_message *m) {
3553 struct ether_addr mac;
3554 const char *ifname;
3555 uint32_t mtu;
3556 bool had_carrier, carrier_gained, carrier_lost;
3557 int r;
3558
3559 assert(link);
3560 assert(link->ifname);
3561 assert(m);
3562
3563 if (link->state == LINK_STATE_LINGER) {
3564 log_link_info(link, "Link readded");
3565 link_set_state(link, LINK_STATE_CONFIGURING);
3566
3567 r = link_new_carrier_maps(link);
3568 if (r < 0)
3569 return r;
3570 }
3571
3572 r = sd_netlink_message_read_string(m, IFLA_IFNAME, &ifname);
3573 if (r >= 0 && !streq(ifname, link->ifname)) {
3574 log_link_info(link, "Interface name change detected, %s has been renamed to %s.", link->ifname, ifname);
3575
3576 if (link->state == LINK_STATE_PENDING) {
3577 r = free_and_strdup(&link->ifname, ifname);
3578 if (r < 0)
3579 return r;
3580 } else {
3581 Manager *manager = link->manager;
3582
3583 link_drop(link);
3584 r = link_add(manager, m, &link);
3585 if (r < 0)
3586 return r;
3587 }
3588 }
3589
3590 r = sd_netlink_message_read_u32(m, IFLA_MTU, &mtu);
3591 if (r >= 0 && mtu > 0) {
3592 link->mtu = mtu;
3593 if (link->original_mtu == 0) {
3594 link->original_mtu = mtu;
3595 log_link_debug(link, "Saved original MTU: %" PRIu32, link->original_mtu);
3596 }
3597
3598 if (link->dhcp_client) {
3599 r = sd_dhcp_client_set_mtu(link->dhcp_client,
3600 link->mtu);
3601 if (r < 0)
3602 return log_link_warning_errno(link, r, "Could not update MTU in DHCP client: %m");
3603 }
3604
3605 if (link->radv) {
3606 r = sd_radv_set_mtu(link->radv, link->mtu);
3607 if (r < 0)
3608 return log_link_warning_errno(link, r, "Could not set MTU for Router Advertisement: %m");
3609 }
3610 }
3611
3612 /* The kernel may broadcast NEWLINK messages without the MAC address
3613 set, simply ignore them. */
3614 r = sd_netlink_message_read_ether_addr(m, IFLA_ADDRESS, &mac);
3615 if (r >= 0) {
3616 if (memcmp(link->mac.ether_addr_octet, mac.ether_addr_octet,
3617 ETH_ALEN)) {
3618
3619 memcpy(link->mac.ether_addr_octet, mac.ether_addr_octet,
3620 ETH_ALEN);
3621
3622 log_link_debug(link, "MAC address: "
3623 "%02hhx:%02hhx:%02hhx:%02hhx:%02hhx:%02hhx",
3624 mac.ether_addr_octet[0],
3625 mac.ether_addr_octet[1],
3626 mac.ether_addr_octet[2],
3627 mac.ether_addr_octet[3],
3628 mac.ether_addr_octet[4],
3629 mac.ether_addr_octet[5]);
3630
3631 if (link->ipv4ll) {
3632 r = sd_ipv4ll_set_mac(link->ipv4ll, &link->mac);
3633 if (r < 0)
3634 return log_link_warning_errno(link, r, "Could not update MAC address in IPv4LL client: %m");
3635 }
3636
3637 if (link->dhcp_client) {
3638 r = sd_dhcp_client_set_mac(link->dhcp_client,
3639 (const uint8_t *) &link->mac,
3640 sizeof (link->mac),
3641 ARPHRD_ETHER);
3642 if (r < 0)
3643 return log_link_warning_errno(link, r, "Could not update MAC address in DHCP client: %m");
3644
3645 r = dhcp4_set_client_identifier(link);
3646 if (r < 0)
3647 return r;
3648 }
3649
3650 if (link->dhcp6_client) {
3651 const DUID* duid = link_get_duid(link);
3652
3653 r = sd_dhcp6_client_set_mac(link->dhcp6_client,
3654 (const uint8_t *) &link->mac,
3655 sizeof (link->mac),
3656 ARPHRD_ETHER);
3657 if (r < 0)
3658 return log_link_warning_errno(link, r, "Could not update MAC address in DHCPv6 client: %m");
3659
3660 if (link->network->iaid_set) {
3661 r = sd_dhcp6_client_set_iaid(link->dhcp6_client,
3662 link->network->iaid);
3663 if (r < 0)
3664 return log_link_warning_errno(link, r, "Could not update DHCPv6 IAID: %m");
3665 }
3666
3667 r = sd_dhcp6_client_set_duid(link->dhcp6_client,
3668 duid->type,
3669 duid->raw_data_len > 0 ? duid->raw_data : NULL,
3670 duid->raw_data_len);
3671 if (r < 0)
3672 return log_link_warning_errno(link, r, "Could not update DHCPv6 DUID: %m");
3673 }
3674
3675 if (link->radv) {
3676 r = sd_radv_set_mac(link->radv, &link->mac);
3677 if (r < 0)
3678 return log_link_warning_errno(link, r, "Could not update MAC for Router Advertisement: %m");
3679 }
3680
3681 if (link->ndisc) {
3682 r = sd_ndisc_set_mac(link->ndisc, &link->mac);
3683 if (r < 0)
3684 return log_link_warning_errno(link, r, "Could not update MAC for ndisc: %m");
3685 }
3686 }
3687 }
3688
3689 had_carrier = link_has_carrier(link);
3690
3691 r = link_update_flags(link, m);
3692 if (r < 0)
3693 return r;
3694
3695 r = link_update_lldp(link);
3696 if (r < 0)
3697 return r;
3698
3699 carrier_gained = !had_carrier && link_has_carrier(link);
3700 carrier_lost = had_carrier && !link_has_carrier(link);
3701
3702 if (carrier_gained) {
3703 log_link_info(link, "Gained carrier");
3704
3705 r = link_carrier_gained(link);
3706 if (r < 0)
3707 return r;
3708 } else if (carrier_lost) {
3709 log_link_info(link, "Lost carrier");
3710
3711 r = link_carrier_lost(link);
3712 if (r < 0)
3713 return r;
3714 }
3715
3716 return 0;
3717 }
3718
3719 static void print_link_hashmap(FILE *f, const char *prefix, Hashmap* h) {
3720 bool space = false;
3721 Iterator i;
3722 Link *link;
3723
3724 assert(f);
3725 assert(prefix);
3726
3727 if (hashmap_isempty(h))
3728 return;
3729
3730 fputs(prefix, f);
3731 HASHMAP_FOREACH(link, h, i) {
3732 if (space)
3733 fputc(' ', f);
3734
3735 fprintf(f, "%i", link->ifindex);
3736 space = true;
3737 }
3738
3739 fputc('\n', f);
3740 }
3741
3742 int link_save(Link *link) {
3743 _cleanup_free_ char *temp_path = NULL;
3744 _cleanup_fclose_ FILE *f = NULL;
3745 const char *admin_state, *oper_state;
3746 Address *a;
3747 Route *route;
3748 Iterator i;
3749 int r;
3750
3751 assert(link);
3752 assert(link->state_file);
3753 assert(link->lease_file);
3754 assert(link->manager);
3755
3756 if (link->state == LINK_STATE_LINGER) {
3757 unlink(link->state_file);
3758 return 0;
3759 }
3760
3761 link_lldp_save(link);
3762
3763 admin_state = link_state_to_string(link->state);
3764 assert(admin_state);
3765
3766 oper_state = link_operstate_to_string(link->operstate);
3767 assert(oper_state);
3768
3769 r = fopen_temporary(link->state_file, &f, &temp_path);
3770 if (r < 0)
3771 goto fail;
3772
3773 (void) __fsetlocking(f, FSETLOCKING_BYCALLER);
3774 (void) fchmod(fileno(f), 0644);
3775
3776 fprintf(f,
3777 "# This is private data. Do not parse.\n"
3778 "ADMIN_STATE=%s\n"
3779 "OPER_STATE=%s\n",
3780 admin_state, oper_state);
3781
3782 if (link->network) {
3783 bool space;
3784 sd_dhcp6_lease *dhcp6_lease = NULL;
3785 const char *dhcp_domainname = NULL;
3786 char **dhcp6_domains = NULL;
3787 char **dhcp_domains = NULL;
3788 unsigned j;
3789
3790 fprintf(f, "REQUIRED_FOR_ONLINE=%s\n",
3791 yes_no(link->network->required_for_online));
3792
3793 if (link->dhcp6_client) {
3794 r = sd_dhcp6_client_get_lease(link->dhcp6_client, &dhcp6_lease);
3795 if (r < 0 && r != -ENOMSG)
3796 log_link_debug(link, "No DHCPv6 lease");
3797 }
3798
3799 fprintf(f, "NETWORK_FILE=%s\n", link->network->filename);
3800
3801 fputs("DNS=", f);
3802 space = false;
3803
3804 for (j = 0; j < link->network->n_dns; j++) {
3805 _cleanup_free_ char *b = NULL;
3806
3807 r = in_addr_to_string(link->network->dns[j].family,
3808 &link->network->dns[j].address, &b);
3809 if (r < 0) {
3810 log_debug_errno(r, "Failed to format address, ignoring: %m");
3811 continue;
3812 }
3813
3814 if (space)
3815 fputc(' ', f);
3816 fputs(b, f);
3817 space = true;
3818 }
3819
3820 if (link->network->dhcp_use_dns &&
3821 link->dhcp_lease) {
3822 const struct in_addr *addresses;
3823
3824 r = sd_dhcp_lease_get_dns(link->dhcp_lease, &addresses);
3825 if (r > 0) {
3826 if (space)
3827 fputc(' ', f);
3828 serialize_in_addrs(f, addresses, r);
3829 space = true;
3830 }
3831 }
3832
3833 if (link->network->dhcp_use_dns && dhcp6_lease) {
3834 struct in6_addr *in6_addrs;
3835
3836 r = sd_dhcp6_lease_get_dns(dhcp6_lease, &in6_addrs);
3837 if (r > 0) {
3838 if (space)
3839 fputc(' ', f);
3840 serialize_in6_addrs(f, in6_addrs, r);
3841 space = true;
3842 }
3843 }
3844
3845 /* Make sure to flush out old entries before we use the NDISC data */
3846 ndisc_vacuum(link);
3847
3848 if (link->network->ipv6_accept_ra_use_dns && link->ndisc_rdnss) {
3849 NDiscRDNSS *dd;
3850
3851 SET_FOREACH(dd, link->ndisc_rdnss, i) {
3852 if (space)
3853 fputc(' ', f);
3854
3855 serialize_in6_addrs(f, &dd->address, 1);
3856 space = true;
3857 }
3858 }
3859
3860 fputc('\n', f);
3861
3862 fputs("NTP=", f);
3863 space = false;
3864 fputstrv(f, link->network->ntp, NULL, &space);
3865
3866 if (link->network->dhcp_use_ntp &&
3867 link->dhcp_lease) {
3868 const struct in_addr *addresses;
3869
3870 r = sd_dhcp_lease_get_ntp(link->dhcp_lease, &addresses);
3871 if (r > 0) {
3872 if (space)
3873 fputc(' ', f);
3874 serialize_in_addrs(f, addresses, r);
3875 space = true;
3876 }
3877 }
3878
3879 if (link->network->dhcp_use_ntp && dhcp6_lease) {
3880 struct in6_addr *in6_addrs;
3881 char **hosts;
3882
3883 r = sd_dhcp6_lease_get_ntp_addrs(dhcp6_lease,
3884 &in6_addrs);
3885 if (r > 0) {
3886 if (space)
3887 fputc(' ', f);
3888 serialize_in6_addrs(f, in6_addrs, r);
3889 space = true;
3890 }
3891
3892 r = sd_dhcp6_lease_get_ntp_fqdn(dhcp6_lease, &hosts);
3893 if (r > 0)
3894 fputstrv(f, hosts, NULL, &space);
3895 }
3896
3897 fputc('\n', f);
3898
3899 if (link->network->dhcp_use_domains != DHCP_USE_DOMAINS_NO) {
3900 if (link->dhcp_lease) {
3901 (void) sd_dhcp_lease_get_domainname(link->dhcp_lease, &dhcp_domainname);
3902 (void) sd_dhcp_lease_get_search_domains(link->dhcp_lease, &dhcp_domains);
3903 }
3904 if (dhcp6_lease)
3905 (void) sd_dhcp6_lease_get_domains(dhcp6_lease, &dhcp6_domains);
3906 }
3907
3908 fputs("DOMAINS=", f);
3909 space = false;
3910 fputstrv(f, link->network->search_domains, NULL, &space);
3911
3912 if (link->network->dhcp_use_domains == DHCP_USE_DOMAINS_YES) {
3913 NDiscDNSSL *dd;
3914
3915 if (dhcp_domainname)
3916 fputs_with_space(f, dhcp_domainname, NULL, &space);
3917 if (dhcp_domains)
3918 fputstrv(f, dhcp_domains, NULL, &space);
3919 if (dhcp6_domains)
3920 fputstrv(f, dhcp6_domains, NULL, &space);
3921
3922 SET_FOREACH(dd, link->ndisc_dnssl, i)
3923 fputs_with_space(f, NDISC_DNSSL_DOMAIN(dd), NULL, &space);
3924 }
3925
3926 fputc('\n', f);
3927
3928 fputs("ROUTE_DOMAINS=", f);
3929 space = false;
3930 fputstrv(f, link->network->route_domains, NULL, &space);
3931
3932 if (link->network->dhcp_use_domains == DHCP_USE_DOMAINS_ROUTE) {
3933 NDiscDNSSL *dd;
3934
3935 if (dhcp_domainname)
3936 fputs_with_space(f, dhcp_domainname, NULL, &space);
3937 if (dhcp_domains)
3938 fputstrv(f, dhcp_domains, NULL, &space);
3939 if (dhcp6_domains)
3940 fputstrv(f, dhcp6_domains, NULL, &space);
3941
3942 SET_FOREACH(dd, link->ndisc_dnssl, i)
3943 fputs_with_space(f, NDISC_DNSSL_DOMAIN(dd), NULL, &space);
3944 }
3945
3946 fputc('\n', f);
3947
3948 fprintf(f, "LLMNR=%s\n",
3949 resolve_support_to_string(link->network->llmnr));
3950 fprintf(f, "MDNS=%s\n",
3951 resolve_support_to_string(link->network->mdns));
3952 if (link->network->dns_default_route >= 0)
3953 fprintf(f, "DNS_DEFAULT_ROUTE=%s\n", yes_no(link->network->dns_default_route));
3954
3955 if (link->network->dns_over_tls_mode != _DNS_OVER_TLS_MODE_INVALID)
3956 fprintf(f, "DNS_OVER_TLS=%s\n",
3957 dns_over_tls_mode_to_string(link->network->dns_over_tls_mode));
3958
3959 if (link->network->dnssec_mode != _DNSSEC_MODE_INVALID)
3960 fprintf(f, "DNSSEC=%s\n",
3961 dnssec_mode_to_string(link->network->dnssec_mode));
3962
3963 if (!set_isempty(link->network->dnssec_negative_trust_anchors)) {
3964 const char *n;
3965
3966 fputs("DNSSEC_NTA=", f);
3967 space = false;
3968 SET_FOREACH(n, link->network->dnssec_negative_trust_anchors, i)
3969 fputs_with_space(f, n, NULL, &space);
3970 fputc('\n', f);
3971 }
3972
3973 fputs("ADDRESSES=", f);
3974 space = false;
3975 SET_FOREACH(a, link->addresses, i) {
3976 _cleanup_free_ char *address_str = NULL;
3977
3978 r = in_addr_to_string(a->family, &a->in_addr, &address_str);
3979 if (r < 0)
3980 goto fail;
3981
3982 fprintf(f, "%s%s/%u", space ? " " : "", address_str, a->prefixlen);
3983 space = true;
3984 }
3985 fputc('\n', f);
3986
3987 fputs("ROUTES=", f);
3988 space = false;
3989 SET_FOREACH(route, link->routes, i) {
3990 _cleanup_free_ char *route_str = NULL;
3991
3992 r = in_addr_to_string(route->family, &route->dst, &route_str);
3993 if (r < 0)
3994 goto fail;
3995
3996 fprintf(f, "%s%s/%hhu/%hhu/%"PRIu32"/%"PRIu32"/"USEC_FMT,
3997 space ? " " : "", route_str,
3998 route->dst_prefixlen, route->tos, route->priority, route->table, route->lifetime);
3999 space = true;
4000 }
4001
4002 fputc('\n', f);
4003 }
4004
4005 print_link_hashmap(f, "CARRIER_BOUND_TO=", link->bound_to_links);
4006 print_link_hashmap(f, "CARRIER_BOUND_BY=", link->bound_by_links);
4007
4008 if (link->dhcp_lease) {
4009 struct in_addr address;
4010 const char *tz = NULL;
4011
4012 assert(link->network);
4013
4014 r = sd_dhcp_lease_get_timezone(link->dhcp_lease, &tz);
4015 if (r >= 0)
4016 fprintf(f, "TIMEZONE=%s\n", tz);
4017
4018 r = sd_dhcp_lease_get_address(link->dhcp_lease, &address);
4019 if (r >= 0) {
4020 fputs("DHCP4_ADDRESS=", f);
4021 serialize_in_addrs(f, &address, 1);
4022 fputc('\n', f);
4023 }
4024
4025 r = dhcp_lease_save(link->dhcp_lease, link->lease_file);
4026 if (r < 0)
4027 goto fail;
4028
4029 fprintf(f,
4030 "DHCP_LEASE=%s\n",
4031 link->lease_file);
4032 } else
4033 unlink(link->lease_file);
4034
4035 if (link->ipv4ll) {
4036 struct in_addr address;
4037
4038 r = sd_ipv4ll_get_address(link->ipv4ll, &address);
4039 if (r >= 0) {
4040 fputs("IPV4LL_ADDRESS=", f);
4041 serialize_in_addrs(f, &address, 1);
4042 fputc('\n', f);
4043 }
4044 }
4045
4046 r = fflush_and_check(f);
4047 if (r < 0)
4048 goto fail;
4049
4050 if (rename(temp_path, link->state_file) < 0) {
4051 r = -errno;
4052 goto fail;
4053 }
4054
4055 return 0;
4056
4057 fail:
4058 (void) unlink(link->state_file);
4059 if (temp_path)
4060 (void) unlink(temp_path);
4061
4062 return log_link_error_errno(link, r, "Failed to save link data to %s: %m", link->state_file);
4063 }
4064
4065 /* The serialized state in /run is no longer up-to-date. */
4066 void link_dirty(Link *link) {
4067 int r;
4068
4069 assert(link);
4070
4071 /* mark manager dirty as link is dirty */
4072 manager_dirty(link->manager);
4073
4074 r = set_ensure_allocated(&link->manager->dirty_links, NULL);
4075 if (r < 0)
4076 /* allocation errors are ignored */
4077 return;
4078
4079 r = set_put(link->manager->dirty_links, link);
4080 if (r <= 0)
4081 /* don't take another ref if the link was already dirty */
4082 return;
4083
4084 link_ref(link);
4085 }
4086
4087 /* The serialized state in /run is up-to-date */
4088 void link_clean(Link *link) {
4089 assert(link);
4090 assert(link->manager);
4091
4092 link_unref(set_remove(link->manager->dirty_links, link));
4093 }
4094
4095 static const char* const link_state_table[_LINK_STATE_MAX] = {
4096 [LINK_STATE_PENDING] = "pending",
4097 [LINK_STATE_CONFIGURING] = "configuring",
4098 [LINK_STATE_CONFIGURED] = "configured",
4099 [LINK_STATE_UNMANAGED] = "unmanaged",
4100 [LINK_STATE_FAILED] = "failed",
4101 [LINK_STATE_LINGER] = "linger",
4102 };
4103
4104 DEFINE_STRING_TABLE_LOOKUP(link_state, LinkState);
4105
4106 static const char* const link_operstate_table[_LINK_OPERSTATE_MAX] = {
4107 [LINK_OPERSTATE_OFF] = "off",
4108 [LINK_OPERSTATE_NO_CARRIER] = "no-carrier",
4109 [LINK_OPERSTATE_DORMANT] = "dormant",
4110 [LINK_OPERSTATE_CARRIER] = "carrier",
4111 [LINK_OPERSTATE_DEGRADED] = "degraded",
4112 [LINK_OPERSTATE_ROUTABLE] = "routable",
4113 };
4114
4115 DEFINE_STRING_TABLE_LOOKUP(link_operstate, LinkOperationalState);
Unnamed repository; edit this file 'description' to name the repository.