]> git.ipfire.org Git - thirdparty/systemd.git/blob - src/network/networkd-link.c
Merge pull request #4879 from poettering/systemd
[thirdparty/systemd.git] / src / network / networkd-link.c
1 /***
2 This file is part of systemd.
3
4 Copyright 2013 Tom Gundersen <teg@jklm.no>
5
6 systemd is free software; you can redistribute it and/or modify it
7 under the terms of the GNU Lesser General Public License as published by
8 the Free Software Foundation; either version 2.1 of the License, or
9 (at your option) any later version.
10
11 systemd is distributed in the hope that it will be useful, but
12 WITHOUT ANY WARRANTY; without even the implied warranty of
13 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
14 Lesser General Public License for more details.
15
16 You should have received a copy of the GNU Lesser General Public License
17 along with systemd; If not, see <http://www.gnu.org/licenses/>.
18 ***/
19
20 #include <netinet/ether.h>
21 #include <linux/if.h>
22 #include <unistd.h>
23
24 #include "alloc-util.h"
25 #include "bus-util.h"
26 #include "dhcp-lease-internal.h"
27 #include "fd-util.h"
28 #include "fileio.h"
29 #include "netlink-util.h"
30 #include "network-internal.h"
31 #include "networkd-lldp-tx.h"
32 #include "networkd-manager.h"
33 #include "networkd-ndisc.h"
34 #include "set.h"
35 #include "socket-util.h"
36 #include "stdio-util.h"
37 #include "string-table.h"
38 #include "udev-util.h"
39 #include "util.h"
40 #include "virt.h"
41
42 static bool link_dhcp6_enabled(Link *link) {
43 assert(link);
44
45 if (!socket_ipv6_is_supported())
46 return false;
47
48 if (link->flags & IFF_LOOPBACK)
49 return false;
50
51 if (!link->network)
52 return false;
53
54 return link->network->dhcp & ADDRESS_FAMILY_IPV6;
55 }
56
57 static bool link_dhcp4_enabled(Link *link) {
58 assert(link);
59
60 if (link->flags & IFF_LOOPBACK)
61 return false;
62
63 if (!link->network)
64 return false;
65
66 return link->network->dhcp & ADDRESS_FAMILY_IPV4;
67 }
68
69 static bool link_dhcp4_server_enabled(Link *link) {
70 assert(link);
71
72 if (link->flags & IFF_LOOPBACK)
73 return false;
74
75 if (!link->network)
76 return false;
77
78 return link->network->dhcp_server;
79 }
80
81 static bool link_ipv4ll_enabled(Link *link) {
82 assert(link);
83
84 if (link->flags & IFF_LOOPBACK)
85 return false;
86
87 if (!link->network)
88 return false;
89
90 return link->network->link_local & ADDRESS_FAMILY_IPV4;
91 }
92
93 static bool link_ipv6ll_enabled(Link *link) {
94 assert(link);
95
96 if (!socket_ipv6_is_supported())
97 return false;
98
99 if (link->flags & IFF_LOOPBACK)
100 return false;
101
102 if (!link->network)
103 return false;
104
105 return link->network->link_local & ADDRESS_FAMILY_IPV6;
106 }
107
108 static bool link_ipv6_enabled(Link *link) {
109 assert(link);
110
111 if (!socket_ipv6_is_supported())
112 return false;
113
114 if (link->network->bridge)
115 return false;
116
117 /* DHCPv6 client will not be started if no IPv6 link-local address is configured. */
118 return link_ipv6ll_enabled(link) || network_has_static_ipv6_addresses(link->network);
119 }
120
121 static bool link_lldp_rx_enabled(Link *link) {
122 assert(link);
123
124 if (link->flags & IFF_LOOPBACK)
125 return false;
126
127 if (link->iftype != ARPHRD_ETHER)
128 return false;
129
130 if (!link->network)
131 return false;
132
133 if (link->network->bridge)
134 return false;
135
136 return link->network->lldp_mode != LLDP_MODE_NO;
137 }
138
139 static bool link_lldp_emit_enabled(Link *link) {
140 assert(link);
141
142 if (link->flags & IFF_LOOPBACK)
143 return false;
144
145 if (link->iftype != ARPHRD_ETHER)
146 return false;
147
148 if (!link->network)
149 return false;
150
151 return link->network->lldp_emit != LLDP_EMIT_NO;
152 }
153
154 static bool link_ipv4_forward_enabled(Link *link) {
155 assert(link);
156
157 if (link->flags & IFF_LOOPBACK)
158 return false;
159
160 if (!link->network)
161 return false;
162
163 if (link->network->ip_forward == _ADDRESS_FAMILY_BOOLEAN_INVALID)
164 return false;
165
166 return link->network->ip_forward & ADDRESS_FAMILY_IPV4;
167 }
168
169 static bool link_ipv6_forward_enabled(Link *link) {
170 assert(link);
171
172 if (!socket_ipv6_is_supported())
173 return false;
174
175 if (link->flags & IFF_LOOPBACK)
176 return false;
177
178 if (!link->network)
179 return false;
180
181 if (link->network->ip_forward == _ADDRESS_FAMILY_BOOLEAN_INVALID)
182 return false;
183
184 return link->network->ip_forward & ADDRESS_FAMILY_IPV6;
185 }
186
187 static bool link_proxy_arp_enabled(Link *link) {
188 assert(link);
189
190 if (link->flags & IFF_LOOPBACK)
191 return false;
192
193 if (!link->network)
194 return false;
195
196 if (link->network->proxy_arp < 0)
197 return false;
198
199 return true;
200 }
201
202 static bool link_ipv6_accept_ra_enabled(Link *link) {
203 assert(link);
204
205 if (!socket_ipv6_is_supported())
206 return false;
207
208 if (link->flags & IFF_LOOPBACK)
209 return false;
210
211 if (!link->network)
212 return false;
213
214 /* If unset use system default (enabled if local forwarding is disabled.
215 * disabled if local forwarding is enabled).
216 * If set, ignore or enforce RA independent of local forwarding state.
217 */
218 if (link->network->ipv6_accept_ra < 0)
219 /* default to accept RA if ip_forward is disabled and ignore RA if ip_forward is enabled */
220 return !link_ipv6_forward_enabled(link);
221 else if (link->network->ipv6_accept_ra > 0)
222 /* accept RA even if ip_forward is enabled */
223 return true;
224 else
225 /* ignore RA */
226 return false;
227 }
228
229 static IPv6PrivacyExtensions link_ipv6_privacy_extensions(Link *link) {
230 assert(link);
231
232 if (!socket_ipv6_is_supported())
233 return _IPV6_PRIVACY_EXTENSIONS_INVALID;
234
235 if (link->flags & IFF_LOOPBACK)
236 return _IPV6_PRIVACY_EXTENSIONS_INVALID;
237
238 if (!link->network)
239 return _IPV6_PRIVACY_EXTENSIONS_INVALID;
240
241 return link->network->ipv6_privacy_extensions;
242 }
243
244 static int link_enable_ipv6(Link *link) {
245 const char *p = NULL;
246 bool disabled;
247 int r;
248
249 if (link->flags & IFF_LOOPBACK)
250 return 0;
251
252 disabled = !link_ipv6_enabled(link);
253
254 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/disable_ipv6");
255
256 r = write_string_file(p, one_zero(disabled), WRITE_STRING_FILE_VERIFY_ON_FAILURE);
257 if (r < 0)
258 log_link_warning_errno(link, r, "Cannot %s IPv6 for interface %s: %m",
259 enable_disable(!disabled), link->ifname);
260 else
261 log_link_info(link, "IPv6 successfully %sd", enable_disable(!disabled));
262
263 return 0;
264 }
265
266 void link_update_operstate(Link *link) {
267 LinkOperationalState operstate;
268 assert(link);
269
270 if (link->kernel_operstate == IF_OPER_DORMANT)
271 operstate = LINK_OPERSTATE_DORMANT;
272 else if (link_has_carrier(link)) {
273 Address *address;
274 uint8_t scope = RT_SCOPE_NOWHERE;
275 Iterator i;
276
277 /* if we have carrier, check what addresses we have */
278 SET_FOREACH(address, link->addresses, i) {
279 if (!address_is_ready(address))
280 continue;
281
282 if (address->scope < scope)
283 scope = address->scope;
284 }
285
286 /* for operstate we also take foreign addresses into account */
287 SET_FOREACH(address, link->addresses_foreign, i) {
288 if (!address_is_ready(address))
289 continue;
290
291 if (address->scope < scope)
292 scope = address->scope;
293 }
294
295 if (scope < RT_SCOPE_SITE)
296 /* universally accessible addresses found */
297 operstate = LINK_OPERSTATE_ROUTABLE;
298 else if (scope < RT_SCOPE_HOST)
299 /* only link or site local addresses found */
300 operstate = LINK_OPERSTATE_DEGRADED;
301 else
302 /* no useful addresses found */
303 operstate = LINK_OPERSTATE_CARRIER;
304 } else if (link->flags & IFF_UP)
305 operstate = LINK_OPERSTATE_NO_CARRIER;
306 else
307 operstate = LINK_OPERSTATE_OFF;
308
309 if (link->operstate != operstate) {
310 link->operstate = operstate;
311 link_send_changed(link, "OperationalState", NULL);
312 link_dirty(link);
313 }
314 }
315
316 #define FLAG_STRING(string, flag, old, new) \
317 (((old ^ new) & flag) \
318 ? ((old & flag) ? (" -" string) : (" +" string)) \
319 : "")
320
321 static int link_update_flags(Link *link, sd_netlink_message *m) {
322 unsigned flags, unknown_flags_added, unknown_flags_removed, unknown_flags;
323 uint8_t operstate;
324 int r;
325
326 assert(link);
327
328 r = sd_rtnl_message_link_get_flags(m, &flags);
329 if (r < 0)
330 return log_link_warning_errno(link, r, "Could not get link flags: %m");
331
332 r = sd_netlink_message_read_u8(m, IFLA_OPERSTATE, &operstate);
333 if (r < 0)
334 /* if we got a message without operstate, take it to mean
335 the state was unchanged */
336 operstate = link->kernel_operstate;
337
338 if ((link->flags == flags) && (link->kernel_operstate == operstate))
339 return 0;
340
341 if (link->flags != flags) {
342 log_link_debug(link, "Flags change:%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s",
343 FLAG_STRING("LOOPBACK", IFF_LOOPBACK, link->flags, flags),
344 FLAG_STRING("MASTER", IFF_MASTER, link->flags, flags),
345 FLAG_STRING("SLAVE", IFF_SLAVE, link->flags, flags),
346 FLAG_STRING("UP", IFF_UP, link->flags, flags),
347 FLAG_STRING("DORMANT", IFF_DORMANT, link->flags, flags),
348 FLAG_STRING("LOWER_UP", IFF_LOWER_UP, link->flags, flags),
349 FLAG_STRING("RUNNING", IFF_RUNNING, link->flags, flags),
350 FLAG_STRING("MULTICAST", IFF_MULTICAST, link->flags, flags),
351 FLAG_STRING("BROADCAST", IFF_BROADCAST, link->flags, flags),
352 FLAG_STRING("POINTOPOINT", IFF_POINTOPOINT, link->flags, flags),
353 FLAG_STRING("PROMISC", IFF_PROMISC, link->flags, flags),
354 FLAG_STRING("ALLMULTI", IFF_ALLMULTI, link->flags, flags),
355 FLAG_STRING("PORTSEL", IFF_PORTSEL, link->flags, flags),
356 FLAG_STRING("AUTOMEDIA", IFF_AUTOMEDIA, link->flags, flags),
357 FLAG_STRING("DYNAMIC", IFF_DYNAMIC, link->flags, flags),
358 FLAG_STRING("NOARP", IFF_NOARP, link->flags, flags),
359 FLAG_STRING("NOTRAILERS", IFF_NOTRAILERS, link->flags, flags),
360 FLAG_STRING("DEBUG", IFF_DEBUG, link->flags, flags),
361 FLAG_STRING("ECHO", IFF_ECHO, link->flags, flags));
362
363 unknown_flags = ~(IFF_LOOPBACK | IFF_MASTER | IFF_SLAVE | IFF_UP |
364 IFF_DORMANT | IFF_LOWER_UP | IFF_RUNNING |
365 IFF_MULTICAST | IFF_BROADCAST | IFF_POINTOPOINT |
366 IFF_PROMISC | IFF_ALLMULTI | IFF_PORTSEL |
367 IFF_AUTOMEDIA | IFF_DYNAMIC | IFF_NOARP |
368 IFF_NOTRAILERS | IFF_DEBUG | IFF_ECHO);
369 unknown_flags_added = ((link->flags ^ flags) & flags & unknown_flags);
370 unknown_flags_removed = ((link->flags ^ flags) & link->flags & unknown_flags);
371
372 /* link flags are currently at most 18 bits, let's align to
373 * printing 20 */
374 if (unknown_flags_added)
375 log_link_debug(link,
376 "Unknown link flags gained: %#.5x (ignoring)",
377 unknown_flags_added);
378
379 if (unknown_flags_removed)
380 log_link_debug(link,
381 "Unknown link flags lost: %#.5x (ignoring)",
382 unknown_flags_removed);
383 }
384
385 link->flags = flags;
386 link->kernel_operstate = operstate;
387
388 link_update_operstate(link);
389
390 return 0;
391 }
392
393 static int link_new(Manager *manager, sd_netlink_message *message, Link **ret) {
394 _cleanup_link_unref_ Link *link = NULL;
395 uint16_t type;
396 const char *ifname, *kind = NULL;
397 int r, ifindex;
398 unsigned short iftype;
399
400 assert(manager);
401 assert(message);
402 assert(ret);
403
404 /* check for link kind */
405 r = sd_netlink_message_enter_container(message, IFLA_LINKINFO);
406 if (r == 0) {
407 (void)sd_netlink_message_read_string(message, IFLA_INFO_KIND, &kind);
408 r = sd_netlink_message_exit_container(message);
409 if (r < 0)
410 return r;
411 }
412
413 r = sd_netlink_message_get_type(message, &type);
414 if (r < 0)
415 return r;
416 else if (type != RTM_NEWLINK)
417 return -EINVAL;
418
419 r = sd_rtnl_message_link_get_ifindex(message, &ifindex);
420 if (r < 0)
421 return r;
422 else if (ifindex <= 0)
423 return -EINVAL;
424
425 r = sd_rtnl_message_link_get_type(message, &iftype);
426 if (r < 0)
427 return r;
428
429 r = sd_netlink_message_read_string(message, IFLA_IFNAME, &ifname);
430 if (r < 0)
431 return r;
432
433 link = new0(Link, 1);
434 if (!link)
435 return -ENOMEM;
436
437 link->n_ref = 1;
438 link->manager = manager;
439 link->state = LINK_STATE_PENDING;
440 link->rtnl_extended_attrs = true;
441 link->ifindex = ifindex;
442 link->iftype = iftype;
443 link->ifname = strdup(ifname);
444 if (!link->ifname)
445 return -ENOMEM;
446
447 if (kind) {
448 link->kind = strdup(kind);
449 if (!link->kind)
450 return -ENOMEM;
451 }
452
453 r = sd_netlink_message_read_ether_addr(message, IFLA_ADDRESS, &link->mac);
454 if (r < 0)
455 log_link_debug_errno(link, r, "MAC address not found for new device, continuing without");
456
457 if (asprintf(&link->state_file, "/run/systemd/netif/links/%d", link->ifindex) < 0)
458 return -ENOMEM;
459
460 if (asprintf(&link->lease_file, "/run/systemd/netif/leases/%d", link->ifindex) < 0)
461 return -ENOMEM;
462
463 if (asprintf(&link->lldp_file, "/run/systemd/netif/lldp/%d", link->ifindex) < 0)
464 return -ENOMEM;
465
466 r = hashmap_ensure_allocated(&manager->links, NULL);
467 if (r < 0)
468 return r;
469
470 r = hashmap_put(manager->links, INT_TO_PTR(link->ifindex), link);
471 if (r < 0)
472 return r;
473
474 r = link_update_flags(link, message);
475 if (r < 0)
476 return r;
477
478 *ret = link;
479 link = NULL;
480
481 return 0;
482 }
483
484 static void link_free(Link *link) {
485 Address *address;
486 Iterator i;
487 Link *carrier;
488
489 if (!link)
490 return;
491
492 while (!set_isempty(link->addresses))
493 address_free(set_first(link->addresses));
494
495 while (!set_isempty(link->addresses_foreign))
496 address_free(set_first(link->addresses_foreign));
497
498 link->addresses = set_free(link->addresses);
499
500 link->addresses_foreign = set_free(link->addresses_foreign);
501
502 while ((address = link->pool_addresses)) {
503 LIST_REMOVE(addresses, link->pool_addresses, address);
504 address_free(address);
505 }
506
507 sd_dhcp_server_unref(link->dhcp_server);
508 sd_dhcp_client_unref(link->dhcp_client);
509 sd_dhcp_lease_unref(link->dhcp_lease);
510
511 link_lldp_emit_stop(link);
512
513 free(link->lease_file);
514
515 sd_lldp_unref(link->lldp);
516 free(link->lldp_file);
517
518 ndisc_flush(link);
519
520 sd_ipv4ll_unref(link->ipv4ll);
521 sd_dhcp6_client_unref(link->dhcp6_client);
522 sd_ndisc_unref(link->ndisc);
523
524 if (link->manager)
525 hashmap_remove(link->manager->links, INT_TO_PTR(link->ifindex));
526
527 free(link->ifname);
528
529 free(link->kind);
530
531 (void)unlink(link->state_file);
532 free(link->state_file);
533
534 udev_device_unref(link->udev_device);
535
536 HASHMAP_FOREACH (carrier, link->bound_to_links, i)
537 hashmap_remove(link->bound_to_links, INT_TO_PTR(carrier->ifindex));
538 hashmap_free(link->bound_to_links);
539
540 HASHMAP_FOREACH (carrier, link->bound_by_links, i)
541 hashmap_remove(link->bound_by_links, INT_TO_PTR(carrier->ifindex));
542 hashmap_free(link->bound_by_links);
543
544 free(link);
545 }
546
547 Link *link_unref(Link *link) {
548 if (!link)
549 return NULL;
550
551 assert(link->n_ref > 0);
552
553 link->n_ref--;
554
555 if (link->n_ref > 0)
556 return NULL;
557
558 link_free(link);
559
560 return NULL;
561 }
562
563 Link *link_ref(Link *link) {
564 if (!link)
565 return NULL;
566
567 assert(link->n_ref > 0);
568
569 link->n_ref++;
570
571 return link;
572 }
573
574 int link_get(Manager *m, int ifindex, Link **ret) {
575 Link *link;
576
577 assert(m);
578 assert(ifindex);
579 assert(ret);
580
581 link = hashmap_get(m->links, INT_TO_PTR(ifindex));
582 if (!link)
583 return -ENODEV;
584
585 *ret = link;
586
587 return 0;
588 }
589
590 static void link_set_state(Link *link, LinkState state) {
591 assert(link);
592
593 if (link->state == state)
594 return;
595
596 link->state = state;
597
598 link_send_changed(link, "AdministrativeState", NULL);
599 }
600
601 static void link_enter_unmanaged(Link *link) {
602 assert(link);
603
604 log_link_debug(link, "Unmanaged");
605
606 link_set_state(link, LINK_STATE_UNMANAGED);
607
608 link_dirty(link);
609 }
610
611 static int link_stop_clients(Link *link) {
612 int r = 0, k;
613
614 assert(link);
615 assert(link->manager);
616 assert(link->manager->event);
617
618 if (link->dhcp_client) {
619 k = sd_dhcp_client_stop(link->dhcp_client);
620 if (k < 0)
621 r = log_link_warning_errno(link, k, "Could not stop DHCPv4 client: %m");
622 }
623
624 if (link->ipv4ll) {
625 k = sd_ipv4ll_stop(link->ipv4ll);
626 if (k < 0)
627 r = log_link_warning_errno(link, k, "Could not stop IPv4 link-local: %m");
628 }
629
630 if (link->dhcp6_client) {
631 k = sd_dhcp6_client_stop(link->dhcp6_client);
632 if (k < 0)
633 r = log_link_warning_errno(link, k, "Could not stop DHCPv6 client: %m");
634 }
635
636 if (link->ndisc) {
637 k = sd_ndisc_stop(link->ndisc);
638 if (k < 0)
639 r = log_link_warning_errno(link, k, "Could not stop IPv6 Router Discovery: %m");
640 }
641
642 link_lldp_emit_stop(link);
643 return r;
644 }
645
646 void link_enter_failed(Link *link) {
647 assert(link);
648
649 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
650 return;
651
652 log_link_warning(link, "Failed");
653
654 link_set_state(link, LINK_STATE_FAILED);
655
656 link_stop_clients(link);
657
658 link_dirty(link);
659 }
660
661 static Address* link_find_dhcp_server_address(Link *link) {
662 Address *address;
663
664 assert(link);
665 assert(link->network);
666
667 /* The first statically configured address if there is any */
668 LIST_FOREACH(addresses, address, link->network->static_addresses) {
669
670 if (address->family != AF_INET)
671 continue;
672
673 if (in_addr_is_null(address->family, &address->in_addr))
674 continue;
675
676 return address;
677 }
678
679 /* If that didn't work, find a suitable address we got from the pool */
680 LIST_FOREACH(addresses, address, link->pool_addresses) {
681 if (address->family != AF_INET)
682 continue;
683
684 return address;
685 }
686
687 return NULL;
688 }
689
690 static void link_enter_configured(Link *link) {
691 assert(link);
692 assert(link->network);
693
694 if (link->state != LINK_STATE_SETTING_ROUTES)
695 return;
696
697 log_link_info(link, "Configured");
698
699 link_set_state(link, LINK_STATE_CONFIGURED);
700
701 link_dirty(link);
702 }
703
704 void link_check_ready(Link *link) {
705 Address *a;
706 Iterator i;
707
708 assert(link);
709
710 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
711 return;
712
713 if (!link->network)
714 return;
715
716 if (!link->static_configured)
717 return;
718
719 if (link_ipv4ll_enabled(link))
720 if (!link->ipv4ll_address ||
721 !link->ipv4ll_route)
722 return;
723
724 if (link_ipv6ll_enabled(link))
725 if (in_addr_is_null(AF_INET6, (const union in_addr_union*) &link->ipv6ll_address) > 0)
726 return;
727
728 if ((link_dhcp4_enabled(link) && !link_dhcp6_enabled(link) &&
729 !link->dhcp4_configured) ||
730 (link_dhcp6_enabled(link) && !link_dhcp4_enabled(link) &&
731 !link->dhcp6_configured) ||
732 (link_dhcp4_enabled(link) && link_dhcp6_enabled(link) &&
733 !link->dhcp4_configured && !link->dhcp6_configured))
734 return;
735
736 if (link_ipv6_accept_ra_enabled(link) && !link->ndisc_configured)
737 return;
738
739 SET_FOREACH(a, link->addresses, i)
740 if (!address_is_ready(a))
741 return;
742
743 if (link->state != LINK_STATE_CONFIGURED)
744 link_enter_configured(link);
745
746 return;
747 }
748
749 static int route_handler(sd_netlink *rtnl, sd_netlink_message *m, void *userdata) {
750 _cleanup_link_unref_ Link *link = userdata;
751 int r;
752
753 assert(link->link_messages > 0);
754 assert(IN_SET(link->state, LINK_STATE_SETTING_ADDRESSES,
755 LINK_STATE_SETTING_ROUTES, LINK_STATE_FAILED,
756 LINK_STATE_LINGER));
757
758 link->link_messages--;
759
760 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
761 return 1;
762
763 r = sd_netlink_message_get_errno(m);
764 if (r < 0 && r != -EEXIST)
765 log_link_warning_errno(link, r, "Could not set route: %m");
766
767 if (link->link_messages == 0) {
768 log_link_debug(link, "Routes set");
769 link->static_configured = true;
770 link_check_ready(link);
771 }
772
773 return 1;
774 }
775
776 static int link_enter_set_routes(Link *link) {
777 Route *rt;
778 int r;
779
780 assert(link);
781 assert(link->network);
782 assert(link->state == LINK_STATE_SETTING_ADDRESSES);
783
784 link_set_state(link, LINK_STATE_SETTING_ROUTES);
785
786 LIST_FOREACH(routes, rt, link->network->static_routes) {
787 r = route_configure(rt, link, route_handler);
788 if (r < 0) {
789 log_link_warning_errno(link, r, "Could not set routes: %m");
790 link_enter_failed(link);
791 return r;
792 }
793
794 link->link_messages++;
795 }
796
797 if (link->link_messages == 0) {
798 link->static_configured = true;
799 link_check_ready(link);
800 } else
801 log_link_debug(link, "Setting routes");
802
803 return 0;
804 }
805
806 int link_route_remove_handler(sd_netlink *rtnl, sd_netlink_message *m, void *userdata) {
807 _cleanup_link_unref_ Link *link = userdata;
808 int r;
809
810 assert(m);
811 assert(link);
812 assert(link->ifname);
813
814 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
815 return 1;
816
817 r = sd_netlink_message_get_errno(m);
818 if (r < 0 && r != -ESRCH)
819 log_link_warning_errno(link, r, "Could not drop route: %m");
820
821 return 1;
822 }
823
824 static int address_handler(sd_netlink *rtnl, sd_netlink_message *m, void *userdata) {
825 _cleanup_link_unref_ Link *link = userdata;
826 int r;
827
828 assert(rtnl);
829 assert(m);
830 assert(link);
831 assert(link->ifname);
832 assert(link->link_messages > 0);
833 assert(IN_SET(link->state, LINK_STATE_SETTING_ADDRESSES,
834 LINK_STATE_FAILED, LINK_STATE_LINGER));
835
836 link->link_messages--;
837
838 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
839 return 1;
840
841 r = sd_netlink_message_get_errno(m);
842 if (r < 0 && r != -EEXIST)
843 log_link_warning_errno(link, r, "could not set address: %m");
844 else if (r >= 0)
845 manager_rtnl_process_address(rtnl, m, link->manager);
846
847 if (link->link_messages == 0) {
848 log_link_debug(link, "Addresses set");
849 link_enter_set_routes(link);
850 }
851
852 return 1;
853 }
854
855 static int link_push_uplink_dns_to_dhcp_server(Link *link, sd_dhcp_server *s) {
856 _cleanup_free_ struct in_addr *addresses = NULL;
857 size_t n_addresses = 0, n_allocated = 0;
858 unsigned i;
859
860 log_debug("Copying DNS server information from %s", link->ifname);
861
862 if (!link->network)
863 return 0;
864
865 for (i = 0; i < link->network->n_dns; i++) {
866 struct in_addr ia;
867
868 /* Only look for IPv4 addresses */
869 if (link->network->dns[i].family != AF_INET)
870 continue;
871
872 ia = link->network->dns[i].address.in;
873
874 /* Never propagate obviously borked data */
875 if (in4_addr_is_null(&ia) || in4_addr_is_localhost(&ia))
876 continue;
877
878 if (!GREEDY_REALLOC(addresses, n_allocated, n_addresses + 1))
879 return log_oom();
880
881 addresses[n_addresses++] = ia;
882 }
883
884 if (link->network->dhcp_use_dns && link->dhcp_lease) {
885 const struct in_addr *da = NULL;
886 int n;
887
888 n = sd_dhcp_lease_get_dns(link->dhcp_lease, &da);
889 if (n > 0) {
890
891 if (!GREEDY_REALLOC(addresses, n_allocated, n_addresses + n))
892 return log_oom();
893
894 memcpy(addresses + n_addresses, da, n * sizeof(struct in_addr));
895 n_addresses += n;
896 }
897 }
898
899 if (n_addresses <= 0)
900 return 0;
901
902 return sd_dhcp_server_set_dns(s, addresses, n_addresses);
903 }
904
905 static int link_push_uplink_ntp_to_dhcp_server(Link *link, sd_dhcp_server *s) {
906 _cleanup_free_ struct in_addr *addresses = NULL;
907 size_t n_addresses = 0, n_allocated = 0;
908 char **a;
909
910 if (!link->network)
911 return 0;
912
913 log_debug("Copying NTP server information from %s", link->ifname);
914
915 STRV_FOREACH(a, link->network->ntp) {
916 struct in_addr ia;
917
918 /* Only look for IPv4 addresses */
919 if (inet_pton(AF_INET, *a, &ia) <= 0)
920 continue;
921
922 /* Never propagate obviously borked data */
923 if (in4_addr_is_null(&ia) || in4_addr_is_localhost(&ia))
924 continue;
925
926 if (!GREEDY_REALLOC(addresses, n_allocated, n_addresses + 1))
927 return log_oom();
928
929 addresses[n_addresses++] = ia;
930 }
931
932 if (link->network->dhcp_use_ntp && link->dhcp_lease) {
933 const struct in_addr *da = NULL;
934 int n;
935
936 n = sd_dhcp_lease_get_ntp(link->dhcp_lease, &da);
937 if (n > 0) {
938
939 if (!GREEDY_REALLOC(addresses, n_allocated, n_addresses + n))
940 return log_oom();
941
942 memcpy(addresses + n_addresses, da, n * sizeof(struct in_addr));
943 n_addresses += n;
944 }
945 }
946
947 if (n_addresses <= 0)
948 return 0;
949
950 return sd_dhcp_server_set_ntp(s, addresses, n_addresses);
951 }
952
953 static int link_set_bridge_fdb(Link *link) {
954 FdbEntry *fdb_entry;
955 int r;
956
957 LIST_FOREACH(static_fdb_entries, fdb_entry, link->network->static_fdb_entries) {
958 r = fdb_entry_configure(link, fdb_entry);
959 if (r < 0)
960 return log_link_error_errno(link, r, "Failed to add MAC entry to static MAC table: %m");
961 }
962
963 return 0;
964 }
965
966 static int link_enter_set_addresses(Link *link) {
967 Address *ad;
968 int r;
969
970 assert(link);
971 assert(link->network);
972 assert(link->state != _LINK_STATE_INVALID);
973
974 r = link_set_bridge_fdb(link);
975 if (r < 0)
976 return r;
977
978 link_set_state(link, LINK_STATE_SETTING_ADDRESSES);
979
980 LIST_FOREACH(addresses, ad, link->network->static_addresses) {
981 r = address_configure(ad, link, address_handler, false);
982 if (r < 0) {
983 log_link_warning_errno(link, r, "Could not set addresses: %m");
984 link_enter_failed(link);
985 return r;
986 }
987
988 link->link_messages++;
989 }
990
991 /* now that we can figure out a default address for the dhcp server,
992 start it */
993 if (link_dhcp4_server_enabled(link)) {
994 Address *address;
995 Link *uplink = NULL;
996 bool acquired_uplink = false;
997
998 address = link_find_dhcp_server_address(link);
999 if (!address) {
1000 log_link_warning(link, "Failed to find suitable address for DHCPv4 server instance.");
1001 link_enter_failed(link);
1002 return 0;
1003 }
1004
1005 /* use the server address' subnet as the pool */
1006 r = sd_dhcp_server_configure_pool(link->dhcp_server, &address->in_addr.in, address->prefixlen,
1007 link->network->dhcp_server_pool_offset, link->network->dhcp_server_pool_size);
1008 if (r < 0)
1009 return r;
1010
1011 /* TODO:
1012 r = sd_dhcp_server_set_router(link->dhcp_server,
1013 &main_address->in_addr.in);
1014 if (r < 0)
1015 return r;
1016 */
1017
1018 if (link->network->dhcp_server_max_lease_time_usec > 0) {
1019 r = sd_dhcp_server_set_max_lease_time(
1020 link->dhcp_server,
1021 DIV_ROUND_UP(link->network->dhcp_server_max_lease_time_usec, USEC_PER_SEC));
1022 if (r < 0)
1023 return r;
1024 }
1025
1026 if (link->network->dhcp_server_default_lease_time_usec > 0) {
1027 r = sd_dhcp_server_set_default_lease_time(
1028 link->dhcp_server,
1029 DIV_ROUND_UP(link->network->dhcp_server_default_lease_time_usec, USEC_PER_SEC));
1030 if (r < 0)
1031 return r;
1032 }
1033
1034 if (link->network->dhcp_server_emit_dns) {
1035
1036 if (link->network->n_dhcp_server_dns > 0)
1037 r = sd_dhcp_server_set_dns(link->dhcp_server, link->network->dhcp_server_dns, link->network->n_dhcp_server_dns);
1038 else {
1039 uplink = manager_find_uplink(link->manager, link);
1040 acquired_uplink = true;
1041
1042 if (!uplink) {
1043 log_link_debug(link, "Not emitting DNS server information on link, couldn't find suitable uplink.");
1044 r = 0;
1045 } else
1046 r = link_push_uplink_dns_to_dhcp_server(uplink, link->dhcp_server);
1047 }
1048 if (r < 0)
1049 log_link_warning_errno(link, r, "Failed to set DNS server for DHCP server, ignoring: %m");
1050 }
1051
1052
1053 if (link->network->dhcp_server_emit_ntp) {
1054
1055 if (link->network->n_dhcp_server_ntp > 0)
1056 r = sd_dhcp_server_set_ntp(link->dhcp_server, link->network->dhcp_server_ntp, link->network->n_dhcp_server_ntp);
1057 else {
1058 if (!acquired_uplink)
1059 uplink = manager_find_uplink(link->manager, link);
1060
1061 if (!uplink) {
1062 log_link_debug(link, "Not emitting NTP server information on link, couldn't find suitable uplink.");
1063 r = 0;
1064 } else
1065 r = link_push_uplink_ntp_to_dhcp_server(uplink, link->dhcp_server);
1066
1067 }
1068 if (r < 0)
1069 log_link_warning_errno(link, r, "Failed to set NTP server for DHCP server, ignoring: %m");
1070 }
1071
1072 r = sd_dhcp_server_set_emit_router(link->dhcp_server, link->network->dhcp_server_emit_router);
1073 if (r < 0) {
1074 log_link_warning_errno(link, r, "Failed to set router emission for DHCP server: %m");
1075 return r;
1076 }
1077
1078 if (link->network->dhcp_server_emit_timezone) {
1079 _cleanup_free_ char *buffer = NULL;
1080 const char *tz = NULL;
1081
1082 if (link->network->dhcp_server_timezone)
1083 tz = link->network->dhcp_server_timezone;
1084 else {
1085 r = get_timezone(&buffer);
1086 if (r < 0)
1087 log_warning_errno(r, "Failed to determine timezone: %m");
1088 else
1089 tz = buffer;
1090 }
1091
1092 if (tz) {
1093 r = sd_dhcp_server_set_timezone(link->dhcp_server, tz);
1094 if (r < 0)
1095 return r;
1096 }
1097 }
1098
1099 r = sd_dhcp_server_start(link->dhcp_server);
1100 if (r < 0) {
1101 log_link_warning_errno(link, r, "Could not start DHCPv4 server instance: %m");
1102
1103 link_enter_failed(link);
1104
1105 return 0;
1106 }
1107
1108 log_link_debug(link, "Offering DHCPv4 leases");
1109 }
1110
1111 if (link->link_messages == 0)
1112 link_enter_set_routes(link);
1113 else
1114 log_link_debug(link, "Setting addresses");
1115
1116 return 0;
1117 }
1118
1119 int link_address_remove_handler(sd_netlink *rtnl, sd_netlink_message *m, void *userdata) {
1120 _cleanup_link_unref_ Link *link = userdata;
1121 int r;
1122
1123 assert(m);
1124 assert(link);
1125 assert(link->ifname);
1126
1127 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1128 return 1;
1129
1130 r = sd_netlink_message_get_errno(m);
1131 if (r < 0 && r != -EADDRNOTAVAIL)
1132 log_link_warning_errno(link, r, "Could not drop address: %m");
1133
1134 return 1;
1135 }
1136
1137 static int link_set_bridge_vlan(Link *link) {
1138 int r = 0;
1139
1140 r = br_vlan_configure(link, link->network->pvid, link->network->br_vid_bitmap, link->network->br_untagged_bitmap);
1141 if (r < 0)
1142 log_link_error_errno(link, r, "Failed to assign VLANs to bridge port: %m");
1143
1144 return r;
1145 }
1146
1147 static int link_set_proxy_arp(Link *link) {
1148 const char *p = NULL;
1149 int r;
1150
1151 if (!link_proxy_arp_enabled(link))
1152 return 0;
1153
1154 p = strjoina("/proc/sys/net/ipv4/conf/", link->ifname, "/proxy_arp");
1155
1156 r = write_string_file(p, one_zero(link->network->proxy_arp), WRITE_STRING_FILE_VERIFY_ON_FAILURE);
1157 if (r < 0)
1158 log_link_warning_errno(link, r, "Cannot configure proxy ARP for interface: %m");
1159
1160 return 0;
1161 }
1162
1163 static int link_set_handler(sd_netlink *rtnl, sd_netlink_message *m, void *userdata) {
1164 _cleanup_link_unref_ Link *link = userdata;
1165 int r;
1166
1167 log_link_debug(link, "Set link");
1168
1169 r = sd_netlink_message_get_errno(m);
1170 if (r < 0 && r != -EEXIST) {
1171 log_link_error_errno(link, r, "Could not join netdev: %m");
1172 link_enter_failed(link);
1173 return 1;
1174 }
1175
1176 return 0;
1177 }
1178
1179 static int set_mtu_handler(sd_netlink *rtnl, sd_netlink_message *m, void *userdata) {
1180 _cleanup_link_unref_ Link *link = userdata;
1181 int r;
1182
1183 assert(m);
1184 assert(link);
1185 assert(link->ifname);
1186
1187 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1188 return 1;
1189
1190 r = sd_netlink_message_get_errno(m);
1191 if (r < 0)
1192 log_link_warning_errno(link, r, "Could not set MTU: %m");
1193
1194 return 1;
1195 }
1196
1197 int link_set_mtu(Link *link, uint32_t mtu) {
1198 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1199 int r;
1200
1201 assert(link);
1202 assert(link->manager);
1203 assert(link->manager->rtnl);
1204
1205 log_link_debug(link, "Setting MTU: %" PRIu32, mtu);
1206
1207 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1208 if (r < 0)
1209 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1210
1211 r = sd_netlink_message_append_u32(req, IFLA_MTU, mtu);
1212 if (r < 0)
1213 return log_link_error_errno(link, r, "Could not append MTU: %m");
1214
1215 r = sd_netlink_call_async(link->manager->rtnl, req, set_mtu_handler, link, 0, NULL);
1216 if (r < 0)
1217 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1218
1219 link_ref(link);
1220
1221 return 0;
1222 }
1223
1224 static int set_flags_handler(sd_netlink *rtnl, sd_netlink_message *m, void *userdata) {
1225 _cleanup_link_unref_ Link *link = userdata;
1226 int r;
1227
1228 assert(m);
1229 assert(link);
1230 assert(link->ifname);
1231
1232 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1233 return 1;
1234
1235 r = sd_netlink_message_get_errno(m);
1236 if (r < 0)
1237 log_link_warning_errno(link, r, "Could not set link flags: %m");
1238
1239 return 1;
1240 }
1241
1242 static int link_set_flags(Link *link) {
1243 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1244 unsigned ifi_change = 0;
1245 unsigned ifi_flags = 0;
1246 int r;
1247
1248 assert(link);
1249 assert(link->manager);
1250 assert(link->manager->rtnl);
1251
1252 if (link->flags & IFF_LOOPBACK)
1253 return 0;
1254
1255 if (!link->network)
1256 return 0;
1257
1258 if (link->network->arp < 0)
1259 return 0;
1260
1261 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1262 if (r < 0)
1263 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1264
1265 if (link->network->arp >= 0) {
1266 ifi_change |= IFF_NOARP;
1267 ifi_flags |= link->network->arp ? 0 : IFF_NOARP;
1268 }
1269
1270 r = sd_rtnl_message_link_set_flags(req, ifi_flags, ifi_change);
1271 if (r < 0)
1272 return log_link_error_errno(link, r, "Could not set link flags: %m");
1273
1274 r = sd_netlink_call_async(link->manager->rtnl, req, set_flags_handler, link, 0, NULL);
1275 if (r < 0)
1276 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1277
1278 link_ref(link);
1279
1280 return 0;
1281 }
1282
1283 static int link_set_bridge(Link *link) {
1284 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1285 int r;
1286
1287 assert(link);
1288 assert(link->network);
1289
1290 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1291 if (r < 0)
1292 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1293
1294 r = sd_rtnl_message_link_set_family(req, PF_BRIDGE);
1295 if (r < 0)
1296 return log_link_error_errno(link, r, "Could not set message family: %m");
1297
1298 r = sd_netlink_message_open_container(req, IFLA_PROTINFO);
1299 if (r < 0)
1300 return log_link_error_errno(link, r, "Could not append IFLA_PROTINFO attribute: %m");
1301
1302 r = sd_netlink_message_append_u8(req, IFLA_BRPORT_GUARD, !link->network->use_bpdu);
1303 if (r < 0)
1304 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_GUARD attribute: %m");
1305
1306 r = sd_netlink_message_append_u8(req, IFLA_BRPORT_MODE, link->network->hairpin);
1307 if (r < 0)
1308 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_MODE attribute: %m");
1309
1310 r = sd_netlink_message_append_u8(req, IFLA_BRPORT_FAST_LEAVE, link->network->fast_leave);
1311 if (r < 0)
1312 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_FAST_LEAVE attribute: %m");
1313
1314 r = sd_netlink_message_append_u8(req, IFLA_BRPORT_PROTECT, !link->network->allow_port_to_be_root);
1315 if (r < 0)
1316 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_PROTECT attribute: %m");
1317
1318 r = sd_netlink_message_append_u8(req, IFLA_BRPORT_UNICAST_FLOOD, link->network->unicast_flood);
1319 if (r < 0)
1320 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_UNICAST_FLOOD attribute: %m");
1321
1322 if (link->network->cost != 0) {
1323 r = sd_netlink_message_append_u32(req, IFLA_BRPORT_COST, link->network->cost);
1324 if (r < 0)
1325 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_COST attribute: %m");
1326 }
1327
1328 r = sd_netlink_message_close_container(req);
1329 if (r < 0)
1330 return log_link_error_errno(link, r, "Could not append IFLA_LINKINFO attribute: %m");
1331
1332 r = sd_netlink_call_async(link->manager->rtnl, req, link_set_handler, link, 0, NULL);
1333 if (r < 0)
1334 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1335
1336 link_ref(link);
1337
1338 return r;
1339 }
1340
1341 static int link_bond_set(Link *link) {
1342 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1343 int r;
1344
1345 assert(link);
1346 assert(link->network);
1347
1348 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_NEWLINK, link->network->bond->ifindex);
1349 if (r < 0)
1350 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1351
1352 r = sd_netlink_message_set_flags(req, NLM_F_REQUEST | NLM_F_ACK);
1353 if (r < 0)
1354 return log_link_error_errno(link, r, "Could not set netlink flags: %m");
1355
1356 r = sd_netlink_message_open_container(req, IFLA_LINKINFO);
1357 if (r < 0)
1358 return log_link_error_errno(link, r, "Could not append IFLA_PROTINFO attribute: %m");
1359
1360 r = sd_netlink_message_open_container_union(req, IFLA_INFO_DATA, "bond");
1361 if (r < 0)
1362 return log_link_error_errno(link, r, "Could not append IFLA_INFO_DATA attribute: %m");
1363
1364 if (link->network->active_slave) {
1365 r = sd_netlink_message_append_u32(req, IFLA_BOND_ACTIVE_SLAVE, link->ifindex);
1366 if (r < 0)
1367 return log_link_error_errno(link, r, "Could not append IFLA_BOND_ACTIVE_SLAVE attribute: %m");
1368 }
1369
1370 if (link->network->primary_slave) {
1371 r = sd_netlink_message_append_u32(req, IFLA_BOND_PRIMARY, link->ifindex);
1372 if (r < 0)
1373 return log_link_error_errno(link, r, "Could not append IFLA_BOND_PRIMARY attribute: %m");
1374 }
1375
1376 r = sd_netlink_message_close_container(req);
1377 if (r < 0)
1378 return log_link_error_errno(link, r, "Could not append IFLA_LINKINFO attribute: %m");
1379
1380 r = sd_netlink_message_close_container(req);
1381 if (r < 0)
1382 return log_link_error_errno(link, r, "Could not append IFLA_INFO_DATA attribute: %m");
1383
1384 r = sd_netlink_call_async(link->manager->rtnl, req, set_flags_handler, link, 0, NULL);
1385 if (r < 0)
1386 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1387
1388 link_ref(link);
1389
1390 return r;
1391 }
1392
1393 static int link_lldp_save(Link *link) {
1394 _cleanup_free_ char *temp_path = NULL;
1395 _cleanup_fclose_ FILE *f = NULL;
1396 sd_lldp_neighbor **l = NULL;
1397 int n = 0, r, i;
1398
1399 assert(link);
1400 assert(link->lldp_file);
1401
1402 if (!link->lldp) {
1403 (void) unlink(link->lldp_file);
1404 return 0;
1405 }
1406
1407 r = sd_lldp_get_neighbors(link->lldp, &l);
1408 if (r < 0)
1409 goto finish;
1410 if (r == 0) {
1411 (void) unlink(link->lldp_file);
1412 goto finish;
1413 }
1414
1415 n = r;
1416
1417 r = fopen_temporary(link->lldp_file, &f, &temp_path);
1418 if (r < 0)
1419 goto finish;
1420
1421 fchmod(fileno(f), 0644);
1422
1423 for (i = 0; i < n; i++) {
1424 const void *p;
1425 le64_t u;
1426 size_t sz;
1427
1428 r = sd_lldp_neighbor_get_raw(l[i], &p, &sz);
1429 if (r < 0)
1430 goto finish;
1431
1432 u = htole64(sz);
1433 (void) fwrite(&u, 1, sizeof(u), f);
1434 (void) fwrite(p, 1, sz, f);
1435 }
1436
1437 r = fflush_and_check(f);
1438 if (r < 0)
1439 goto finish;
1440
1441 if (rename(temp_path, link->lldp_file) < 0) {
1442 r = -errno;
1443 goto finish;
1444 }
1445
1446 finish:
1447 if (r < 0) {
1448 (void) unlink(link->lldp_file);
1449 if (temp_path)
1450 (void) unlink(temp_path);
1451
1452 log_link_error_errno(link, r, "Failed to save LLDP data to %s: %m", link->lldp_file);
1453 }
1454
1455 if (l) {
1456 for (i = 0; i < n; i++)
1457 sd_lldp_neighbor_unref(l[i]);
1458 free(l);
1459 }
1460
1461 return r;
1462 }
1463
1464 static void lldp_handler(sd_lldp *lldp, sd_lldp_event event, sd_lldp_neighbor *n, void *userdata) {
1465 Link *link = userdata;
1466 int r;
1467
1468 assert(link);
1469
1470 (void) link_lldp_save(link);
1471
1472 if (link_lldp_emit_enabled(link) && event == SD_LLDP_EVENT_ADDED) {
1473 /* If we received information about a new neighbor, restart the LLDP "fast" logic */
1474
1475 log_link_debug(link, "Received LLDP datagram from previously unknown neighbor, restarting 'fast' LLDP transmission.");
1476
1477 r = link_lldp_emit_start(link);
1478 if (r < 0)
1479 log_link_warning_errno(link, r, "Failed to restart LLDP transmission: %m");
1480 }
1481 }
1482
1483 static int link_acquire_ipv6_conf(Link *link) {
1484 int r;
1485
1486 assert(link);
1487
1488 if (link_dhcp6_enabled(link)) {
1489 assert(link->dhcp6_client);
1490 assert(in_addr_is_link_local(AF_INET6, (const union in_addr_union*)&link->ipv6ll_address) > 0);
1491
1492 /* start DHCPv6 client in stateless mode */
1493 r = dhcp6_request_address(link, true);
1494 if (r < 0 && r != -EBUSY)
1495 return log_link_warning_errno(link, r, "Could not acquire DHCPv6 lease: %m");
1496 else
1497 log_link_debug(link, "Acquiring DHCPv6 lease");
1498 }
1499
1500 if (link_ipv6_accept_ra_enabled(link)) {
1501 assert(link->ndisc);
1502
1503 log_link_debug(link, "Discovering IPv6 routers");
1504
1505 r = sd_ndisc_start(link->ndisc);
1506 if (r < 0 && r != -EBUSY)
1507 return log_link_warning_errno(link, r, "Could not start IPv6 Router Discovery: %m");
1508 }
1509
1510 return 0;
1511 }
1512
1513 static int link_acquire_ipv4_conf(Link *link) {
1514 int r;
1515
1516 assert(link);
1517 assert(link->network);
1518 assert(link->manager);
1519 assert(link->manager->event);
1520
1521 if (link_ipv4ll_enabled(link)) {
1522 assert(link->ipv4ll);
1523
1524 log_link_debug(link, "Acquiring IPv4 link-local address");
1525
1526 r = sd_ipv4ll_start(link->ipv4ll);
1527 if (r < 0)
1528 return log_link_warning_errno(link, r, "Could not acquire IPv4 link-local address: %m");
1529 }
1530
1531 if (link_dhcp4_enabled(link)) {
1532 assert(link->dhcp_client);
1533
1534 log_link_debug(link, "Acquiring DHCPv4 lease");
1535
1536 r = sd_dhcp_client_start(link->dhcp_client);
1537 if (r < 0)
1538 return log_link_warning_errno(link, r, "Could not acquire DHCPv4 lease: %m");
1539 }
1540
1541 return 0;
1542 }
1543
1544 static int link_acquire_conf(Link *link) {
1545 int r;
1546
1547 assert(link);
1548
1549 r = link_acquire_ipv4_conf(link);
1550 if (r < 0)
1551 return r;
1552
1553 if (in_addr_is_null(AF_INET6, (const union in_addr_union*) &link->ipv6ll_address) == 0) {
1554 r = link_acquire_ipv6_conf(link);
1555 if (r < 0)
1556 return r;
1557 }
1558
1559 if (link_lldp_emit_enabled(link)) {
1560 r = link_lldp_emit_start(link);
1561 if (r < 0)
1562 return log_link_warning_errno(link, r, "Failed to start LLDP transmission: %m");
1563 }
1564
1565 return 0;
1566 }
1567
1568 bool link_has_carrier(Link *link) {
1569 /* see Documentation/networking/operstates.txt in the kernel sources */
1570
1571 if (link->kernel_operstate == IF_OPER_UP)
1572 return true;
1573
1574 if (link->kernel_operstate == IF_OPER_UNKNOWN)
1575 /* operstate may not be implemented, so fall back to flags */
1576 if ((link->flags & IFF_LOWER_UP) && !(link->flags & IFF_DORMANT))
1577 return true;
1578
1579 return false;
1580 }
1581
1582 static int link_up_handler(sd_netlink *rtnl, sd_netlink_message *m, void *userdata) {
1583 _cleanup_link_unref_ Link *link = userdata;
1584 int r;
1585
1586 assert(link);
1587
1588 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1589 return 1;
1590
1591 r = sd_netlink_message_get_errno(m);
1592 if (r < 0)
1593 /* we warn but don't fail the link, as it may be
1594 brought up later */
1595 log_link_warning_errno(link, r, "Could not bring up interface: %m");
1596
1597 return 1;
1598 }
1599
1600 static int link_up(Link *link) {
1601 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1602 uint8_t ipv6ll_mode;
1603 int r;
1604
1605 assert(link);
1606 assert(link->network);
1607 assert(link->manager);
1608 assert(link->manager->rtnl);
1609
1610 log_link_debug(link, "Bringing link up");
1611
1612 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1613 if (r < 0)
1614 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1615
1616 /* set it free if not enslaved with networkd */
1617 if (!link->network->bridge && !link->network->bond && !link->network->vrf) {
1618 r = sd_netlink_message_append_u32(req, IFLA_MASTER, 0);
1619 if (r < 0)
1620 return log_link_error_errno(link, r, "Could not append IFLA_MASTER attribute: %m");
1621 }
1622
1623 r = sd_rtnl_message_link_set_flags(req, IFF_UP, IFF_UP);
1624 if (r < 0)
1625 return log_link_error_errno(link, r, "Could not set link flags: %m");
1626
1627 if (link->network->mac) {
1628 r = sd_netlink_message_append_ether_addr(req, IFLA_ADDRESS, link->network->mac);
1629 if (r < 0)
1630 return log_link_error_errno(link, r, "Could not set MAC address: %m");
1631 }
1632
1633 /* If IPv6 not configured (no static IPv6 address and IPv6LL autoconfiguration is disabled)
1634 for this interface, or if it is a bridge slave, then disable IPv6 else enable it. */
1635 (void) link_enable_ipv6(link);
1636
1637 if (link->network->mtu) {
1638 /* IPv6 protocol requires a minimum MTU of IPV6_MTU_MIN(1280) bytes
1639 on the interface. Bump up MTU bytes to IPV6_MTU_MIN. */
1640 if (link_ipv6_enabled(link) && link->network->mtu < IPV6_MIN_MTU) {
1641
1642 log_link_warning(link, "Bumping MTU to " STRINGIFY(IPV6_MIN_MTU) ", as "
1643 "IPv6 is requested and requires a minimum MTU of " STRINGIFY(IPV6_MIN_MTU) " bytes: %m");
1644
1645 link->network->mtu = IPV6_MIN_MTU;
1646 }
1647
1648 r = sd_netlink_message_append_u32(req, IFLA_MTU, link->network->mtu);
1649 if (r < 0)
1650 return log_link_error_errno(link, r, "Could not set MTU: %m");
1651 }
1652
1653 r = sd_netlink_message_open_container(req, IFLA_AF_SPEC);
1654 if (r < 0)
1655 return log_link_error_errno(link, r, "Could not open IFLA_AF_SPEC container: %m");
1656
1657 if (link_ipv6_enabled(link)) {
1658 /* if the kernel lacks ipv6 support setting IFF_UP fails if any ipv6 options are passed */
1659 r = sd_netlink_message_open_container(req, AF_INET6);
1660 if (r < 0)
1661 return log_link_error_errno(link, r, "Could not open AF_INET6 container: %m");
1662
1663 if (!link_ipv6ll_enabled(link))
1664 ipv6ll_mode = IN6_ADDR_GEN_MODE_NONE;
1665 else {
1666 const char *p = NULL;
1667 _cleanup_free_ char *stable_secret = NULL;
1668
1669 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/stable_secret");
1670 r = read_one_line_file(p, &stable_secret);
1671
1672 if (r < 0)
1673 ipv6ll_mode = IN6_ADDR_GEN_MODE_EUI64;
1674 else
1675 ipv6ll_mode = IN6_ADDR_GEN_MODE_STABLE_PRIVACY;
1676 }
1677 r = sd_netlink_message_append_u8(req, IFLA_INET6_ADDR_GEN_MODE, ipv6ll_mode);
1678 if (r < 0)
1679 return log_link_error_errno(link, r, "Could not append IFLA_INET6_ADDR_GEN_MODE: %m");
1680
1681 if (!in_addr_is_null(AF_INET6, &link->network->ipv6_token)) {
1682 r = sd_netlink_message_append_in6_addr(req, IFLA_INET6_TOKEN, &link->network->ipv6_token.in6);
1683 if (r < 0)
1684 return log_link_error_errno(link, r, "Could not append IFLA_INET6_TOKEN: %m");
1685 }
1686
1687 r = sd_netlink_message_close_container(req);
1688 if (r < 0)
1689 return log_link_error_errno(link, r, "Could not close AF_INET6 container: %m");
1690 }
1691
1692 r = sd_netlink_message_close_container(req);
1693 if (r < 0)
1694 return log_link_error_errno(link, r, "Could not close IFLA_AF_SPEC container: %m");
1695
1696 r = sd_netlink_call_async(link->manager->rtnl, req, link_up_handler, link, 0, NULL);
1697 if (r < 0)
1698 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1699
1700 link_ref(link);
1701
1702 return 0;
1703 }
1704
1705 static int link_down_handler(sd_netlink *rtnl, sd_netlink_message *m, void *userdata) {
1706 _cleanup_link_unref_ Link *link = userdata;
1707 int r;
1708
1709 assert(link);
1710
1711 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1712 return 1;
1713
1714 r = sd_netlink_message_get_errno(m);
1715 if (r < 0)
1716 log_link_warning_errno(link, r, "Could not bring down interface: %m");
1717
1718 return 1;
1719 }
1720
1721 static int link_down(Link *link) {
1722 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1723 int r;
1724
1725 assert(link);
1726 assert(link->manager);
1727 assert(link->manager->rtnl);
1728
1729 log_link_debug(link, "Bringing link down");
1730
1731 r = sd_rtnl_message_new_link(link->manager->rtnl, &req,
1732 RTM_SETLINK, link->ifindex);
1733 if (r < 0)
1734 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1735
1736 r = sd_rtnl_message_link_set_flags(req, 0, IFF_UP);
1737 if (r < 0)
1738 return log_link_error_errno(link, r, "Could not set link flags: %m");
1739
1740 r = sd_netlink_call_async(link->manager->rtnl, req, link_down_handler, link, 0, NULL);
1741 if (r < 0)
1742 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1743
1744 link_ref(link);
1745
1746 return 0;
1747 }
1748
1749 static int link_up_can(Link *link) {
1750 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1751 int r;
1752
1753 assert(link);
1754
1755 log_link_debug(link, "Bringing CAN link up");
1756
1757 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1758 if (r < 0)
1759 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1760
1761 r = sd_rtnl_message_link_set_flags(req, IFF_UP, IFF_UP);
1762 if (r < 0)
1763 return log_link_error_errno(link, r, "Could not set link flags: %m");
1764
1765 r = sd_netlink_call_async(link->manager->rtnl, req, link_up_handler, link, 0, NULL);
1766 if (r < 0)
1767 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1768
1769 link_ref(link);
1770
1771 return 0;
1772 }
1773
1774 static int link_handle_bound_to_list(Link *link) {
1775 Link *l;
1776 Iterator i;
1777 int r;
1778 bool required_up = false;
1779 bool link_is_up = false;
1780
1781 assert(link);
1782
1783 if (hashmap_isempty(link->bound_to_links))
1784 return 0;
1785
1786 if (link->flags & IFF_UP)
1787 link_is_up = true;
1788
1789 HASHMAP_FOREACH (l, link->bound_to_links, i)
1790 if (link_has_carrier(l)) {
1791 required_up = true;
1792 break;
1793 }
1794
1795 if (!required_up && link_is_up) {
1796 r = link_down(link);
1797 if (r < 0)
1798 return r;
1799 } else if (required_up && !link_is_up) {
1800 r = link_up(link);
1801 if (r < 0)
1802 return r;
1803 }
1804
1805 return 0;
1806 }
1807
1808 static int link_handle_bound_by_list(Link *link) {
1809 Iterator i;
1810 Link *l;
1811 int r;
1812
1813 assert(link);
1814
1815 if (hashmap_isempty(link->bound_by_links))
1816 return 0;
1817
1818 HASHMAP_FOREACH (l, link->bound_by_links, i) {
1819 r = link_handle_bound_to_list(l);
1820 if (r < 0)
1821 return r;
1822 }
1823
1824 return 0;
1825 }
1826
1827 static int link_put_carrier(Link *link, Link *carrier, Hashmap **h) {
1828 int r;
1829
1830 assert(link);
1831 assert(carrier);
1832
1833 if (link == carrier)
1834 return 0;
1835
1836 if (hashmap_get(*h, INT_TO_PTR(carrier->ifindex)))
1837 return 0;
1838
1839 r = hashmap_ensure_allocated(h, NULL);
1840 if (r < 0)
1841 return r;
1842
1843 r = hashmap_put(*h, INT_TO_PTR(carrier->ifindex), carrier);
1844 if (r < 0)
1845 return r;
1846
1847 return 0;
1848 }
1849
1850 static int link_new_bound_by_list(Link *link) {
1851 Manager *m;
1852 Link *carrier;
1853 Iterator i;
1854 int r;
1855 bool list_updated = false;
1856
1857 assert(link);
1858 assert(link->manager);
1859
1860 m = link->manager;
1861
1862 HASHMAP_FOREACH(carrier, m->links, i) {
1863 if (!carrier->network)
1864 continue;
1865
1866 if (strv_isempty(carrier->network->bind_carrier))
1867 continue;
1868
1869 if (strv_fnmatch(carrier->network->bind_carrier, link->ifname, 0)) {
1870 r = link_put_carrier(link, carrier, &link->bound_by_links);
1871 if (r < 0)
1872 return r;
1873
1874 list_updated = true;
1875 }
1876 }
1877
1878 if (list_updated)
1879 link_dirty(link);
1880
1881 HASHMAP_FOREACH(carrier, link->bound_by_links, i) {
1882 r = link_put_carrier(carrier, link, &carrier->bound_to_links);
1883 if (r < 0)
1884 return r;
1885
1886 link_dirty(carrier);
1887 }
1888
1889 return 0;
1890 }
1891
1892 static int link_new_bound_to_list(Link *link) {
1893 Manager *m;
1894 Link *carrier;
1895 Iterator i;
1896 int r;
1897 bool list_updated = false;
1898
1899 assert(link);
1900 assert(link->manager);
1901
1902 if (!link->network)
1903 return 0;
1904
1905 if (strv_isempty(link->network->bind_carrier))
1906 return 0;
1907
1908 m = link->manager;
1909
1910 HASHMAP_FOREACH (carrier, m->links, i) {
1911 if (strv_fnmatch(link->network->bind_carrier, carrier->ifname, 0)) {
1912 r = link_put_carrier(link, carrier, &link->bound_to_links);
1913 if (r < 0)
1914 return r;
1915
1916 list_updated = true;
1917 }
1918 }
1919
1920 if (list_updated)
1921 link_dirty(link);
1922
1923 HASHMAP_FOREACH (carrier, link->bound_to_links, i) {
1924 r = link_put_carrier(carrier, link, &carrier->bound_by_links);
1925 if (r < 0)
1926 return r;
1927
1928 link_dirty(carrier);
1929 }
1930
1931 return 0;
1932 }
1933
1934 static int link_new_carrier_maps(Link *link) {
1935 int r;
1936
1937 r = link_new_bound_by_list(link);
1938 if (r < 0)
1939 return r;
1940
1941 r = link_handle_bound_by_list(link);
1942 if (r < 0)
1943 return r;
1944
1945 r = link_new_bound_to_list(link);
1946 if (r < 0)
1947 return r;
1948
1949 r = link_handle_bound_to_list(link);
1950 if (r < 0)
1951 return r;
1952
1953 return 0;
1954 }
1955
1956 static void link_free_bound_to_list(Link *link) {
1957 Link *bound_to;
1958 Iterator i;
1959
1960 HASHMAP_FOREACH (bound_to, link->bound_to_links, i) {
1961 hashmap_remove(link->bound_to_links, INT_TO_PTR(bound_to->ifindex));
1962
1963 if (hashmap_remove(bound_to->bound_by_links, INT_TO_PTR(link->ifindex)))
1964 link_dirty(bound_to);
1965 }
1966
1967 return;
1968 }
1969
1970 static void link_free_bound_by_list(Link *link) {
1971 Link *bound_by;
1972 Iterator i;
1973
1974 HASHMAP_FOREACH (bound_by, link->bound_by_links, i) {
1975 hashmap_remove(link->bound_by_links, INT_TO_PTR(bound_by->ifindex));
1976
1977 if (hashmap_remove(bound_by->bound_to_links, INT_TO_PTR(link->ifindex))) {
1978 link_dirty(bound_by);
1979 link_handle_bound_to_list(bound_by);
1980 }
1981 }
1982
1983 return;
1984 }
1985
1986 static void link_free_carrier_maps(Link *link) {
1987 bool list_updated = false;
1988
1989 assert(link);
1990
1991 if (!hashmap_isempty(link->bound_to_links)) {
1992 link_free_bound_to_list(link);
1993 list_updated = true;
1994 }
1995
1996 if (!hashmap_isempty(link->bound_by_links)) {
1997 link_free_bound_by_list(link);
1998 list_updated = true;
1999 }
2000
2001 if (list_updated)
2002 link_dirty(link);
2003
2004 return;
2005 }
2006
2007 void link_drop(Link *link) {
2008 if (!link || link->state == LINK_STATE_LINGER)
2009 return;
2010
2011 link_set_state(link, LINK_STATE_LINGER);
2012
2013 link_free_carrier_maps(link);
2014
2015 log_link_debug(link, "Link removed");
2016
2017 (void)unlink(link->state_file);
2018 link_unref(link);
2019
2020 return;
2021 }
2022
2023 static int link_joined(Link *link) {
2024 int r;
2025
2026 assert(link);
2027 assert(link->network);
2028
2029 if (!hashmap_isempty(link->bound_to_links)) {
2030 r = link_handle_bound_to_list(link);
2031 if (r < 0)
2032 return r;
2033 } else if (!(link->flags & IFF_UP)) {
2034 r = link_up(link);
2035 if (r < 0) {
2036 link_enter_failed(link);
2037 return r;
2038 }
2039 }
2040
2041 if (link->network->bridge) {
2042 r = link_set_bridge(link);
2043 if (r < 0)
2044 log_link_error_errno(link, r, "Could not set bridge message: %m");
2045 }
2046
2047 if (link->network->bond) {
2048 r = link_bond_set(link);
2049 if (r < 0)
2050 log_link_error_errno(link, r, "Could not set bond message: %m");
2051 }
2052
2053 if (link->network->use_br_vlan &&
2054 (link->network->bridge || streq_ptr("bridge", link->kind))) {
2055 r = link_set_bridge_vlan(link);
2056 if (r < 0)
2057 log_link_error_errno(link, r, "Could not set bridge vlan: %m");
2058 }
2059
2060 return link_enter_set_addresses(link);
2061 }
2062
2063 static int netdev_join_handler(sd_netlink *rtnl, sd_netlink_message *m, void *userdata) {
2064 _cleanup_link_unref_ Link *link = userdata;
2065 int r;
2066
2067 assert(link);
2068 assert(link->network);
2069
2070 link->enslaving--;
2071
2072 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
2073 return 1;
2074
2075 r = sd_netlink_message_get_errno(m);
2076 if (r < 0 && r != -EEXIST) {
2077 log_link_error_errno(link, r, "Could not join netdev: %m");
2078 link_enter_failed(link);
2079 return 1;
2080 } else
2081 log_link_debug(link, "Joined netdev");
2082
2083 if (link->enslaving <= 0)
2084 link_joined(link);
2085
2086 return 1;
2087 }
2088
2089 static int link_enter_join_netdev(Link *link) {
2090 NetDev *netdev;
2091 Iterator i;
2092 int r;
2093
2094 assert(link);
2095 assert(link->network);
2096 assert(link->state == LINK_STATE_PENDING);
2097
2098 link_set_state(link, LINK_STATE_ENSLAVING);
2099
2100 link_dirty(link);
2101
2102 if (!link->network->bridge &&
2103 !link->network->bond &&
2104 !link->network->vrf &&
2105 hashmap_isempty(link->network->stacked_netdevs))
2106 return link_joined(link);
2107
2108 if (link->network->bond) {
2109 log_struct(LOG_DEBUG,
2110 LOG_LINK_INTERFACE(link),
2111 LOG_NETDEV_INTERFACE(link->network->bond),
2112 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", link->network->bond->ifname),
2113 NULL);
2114
2115 r = netdev_join(link->network->bond, link, netdev_join_handler);
2116 if (r < 0) {
2117 log_struct_errno(LOG_WARNING, r,
2118 LOG_LINK_INTERFACE(link),
2119 LOG_NETDEV_INTERFACE(link->network->bond),
2120 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", link->network->bond->ifname),
2121 NULL);
2122
2123 link_enter_failed(link);
2124 return r;
2125 }
2126
2127 link->enslaving++;
2128 }
2129
2130 if (link->network->bridge) {
2131 log_struct(LOG_DEBUG,
2132 LOG_LINK_INTERFACE(link),
2133 LOG_NETDEV_INTERFACE(link->network->bridge),
2134 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", link->network->bridge->ifname),
2135 NULL);
2136
2137 r = netdev_join(link->network->bridge, link, netdev_join_handler);
2138 if (r < 0) {
2139 log_struct_errno(LOG_WARNING, r,
2140 LOG_LINK_INTERFACE(link),
2141 LOG_NETDEV_INTERFACE(link->network->bridge),
2142 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", link->network->bridge->ifname),
2143 NULL),
2144 link_enter_failed(link);
2145 return r;
2146 }
2147
2148 link->enslaving++;
2149 }
2150
2151 if (link->network->vrf) {
2152 log_struct(LOG_DEBUG,
2153 LOG_LINK_INTERFACE(link),
2154 LOG_NETDEV_INTERFACE(link->network->vrf),
2155 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", link->network->vrf->ifname),
2156 NULL);
2157 r = netdev_join(link->network->vrf, link, netdev_join_handler);
2158 if (r < 0) {
2159 log_struct_errno(LOG_WARNING, r,
2160 LOG_LINK_INTERFACE(link),
2161 LOG_NETDEV_INTERFACE(link->network->vrf),
2162 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", link->network->vrf->ifname),
2163 NULL);
2164 link_enter_failed(link);
2165 return r;
2166 }
2167
2168 link->enslaving++;
2169 }
2170
2171 HASHMAP_FOREACH(netdev, link->network->stacked_netdevs, i) {
2172
2173 log_struct(LOG_DEBUG,
2174 LOG_LINK_INTERFACE(link),
2175 LOG_NETDEV_INTERFACE(netdev),
2176 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", netdev->ifname),
2177 NULL);
2178
2179 r = netdev_join(netdev, link, netdev_join_handler);
2180 if (r < 0) {
2181 log_struct_errno(LOG_WARNING, r,
2182 LOG_LINK_INTERFACE(link),
2183 LOG_NETDEV_INTERFACE(netdev),
2184 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", netdev->ifname),
2185 NULL);
2186 link_enter_failed(link);
2187 return r;
2188 }
2189
2190 link->enslaving++;
2191 }
2192
2193 return 0;
2194 }
2195
2196 static int link_set_ipv4_forward(Link *link) {
2197 int r;
2198
2199 if (!link_ipv4_forward_enabled(link))
2200 return 0;
2201
2202 /* We propagate the forwarding flag from one interface to the
2203 * global setting one way. This means: as long as at least one
2204 * interface was configured at any time that had IP forwarding
2205 * enabled the setting will stay on for good. We do this
2206 * primarily to keep IPv4 and IPv6 packet forwarding behaviour
2207 * somewhat in sync (see below). */
2208
2209 r = write_string_file("/proc/sys/net/ipv4/ip_forward", "1", WRITE_STRING_FILE_VERIFY_ON_FAILURE);
2210 if (r < 0)
2211 log_link_warning_errno(link, r, "Cannot turn on IPv4 packet forwarding, ignoring: %m");
2212
2213 return 0;
2214 }
2215
2216 static int link_set_ipv6_forward(Link *link) {
2217 int r;
2218
2219 if (!link_ipv6_forward_enabled(link))
2220 return 0;
2221
2222 /* On Linux, the IPv6 stack does not know a per-interface
2223 * packet forwarding setting: either packet forwarding is on
2224 * for all, or off for all. We hence don't bother with a
2225 * per-interface setting, but simply propagate the interface
2226 * flag, if it is set, to the global flag, one-way. Note that
2227 * while IPv4 would allow a per-interface flag, we expose the
2228 * same behaviour there and also propagate the setting from
2229 * one to all, to keep things simple (see above). */
2230
2231 r = write_string_file("/proc/sys/net/ipv6/conf/all/forwarding", "1", WRITE_STRING_FILE_VERIFY_ON_FAILURE);
2232 if (r < 0)
2233 log_link_warning_errno(link, r, "Cannot configure IPv6 packet forwarding, ignoring: %m");
2234
2235 return 0;
2236 }
2237
2238 static int link_set_ipv6_privacy_extensions(Link *link) {
2239 char buf[DECIMAL_STR_MAX(unsigned) + 1];
2240 IPv6PrivacyExtensions s;
2241 const char *p = NULL;
2242 int r;
2243
2244 s = link_ipv6_privacy_extensions(link);
2245 if (s < 0)
2246 return 0;
2247
2248 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/use_tempaddr");
2249 xsprintf(buf, "%u", (unsigned) link->network->ipv6_privacy_extensions);
2250
2251 r = write_string_file(p, buf, WRITE_STRING_FILE_VERIFY_ON_FAILURE);
2252 if (r < 0)
2253 log_link_warning_errno(link, r, "Cannot configure IPv6 privacy extension for interface: %m");
2254
2255 return 0;
2256 }
2257
2258 static int link_set_ipv6_accept_ra(Link *link) {
2259 const char *p = NULL;
2260 int r;
2261
2262 /* Make this a NOP if IPv6 is not available */
2263 if (!socket_ipv6_is_supported())
2264 return 0;
2265
2266 if (link->flags & IFF_LOOPBACK)
2267 return 0;
2268
2269 if (!link->network)
2270 return 0;
2271
2272 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/accept_ra");
2273
2274 /* We handle router advertisements ourselves, tell the kernel to GTFO */
2275 r = write_string_file(p, "0", WRITE_STRING_FILE_VERIFY_ON_FAILURE);
2276 if (r < 0)
2277 log_link_warning_errno(link, r, "Cannot disable kernel IPv6 accept_ra for interface: %m");
2278
2279 return 0;
2280 }
2281
2282 static int link_set_ipv6_dad_transmits(Link *link) {
2283 char buf[DECIMAL_STR_MAX(int) + 1];
2284 const char *p = NULL;
2285 int r;
2286
2287 /* Make this a NOP if IPv6 is not available */
2288 if (!socket_ipv6_is_supported())
2289 return 0;
2290
2291 if (link->flags & IFF_LOOPBACK)
2292 return 0;
2293
2294 if (!link->network)
2295 return 0;
2296
2297 if (link->network->ipv6_dad_transmits < 0)
2298 return 0;
2299
2300 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/dad_transmits");
2301 xsprintf(buf, "%i", link->network->ipv6_dad_transmits);
2302
2303 r = write_string_file(p, buf, WRITE_STRING_FILE_VERIFY_ON_FAILURE);
2304 if (r < 0)
2305 log_link_warning_errno(link, r, "Cannot set IPv6 dad transmits for interface: %m");
2306
2307 return 0;
2308 }
2309
2310 static int link_set_ipv6_hop_limit(Link *link) {
2311 char buf[DECIMAL_STR_MAX(int) + 1];
2312 const char *p = NULL;
2313 int r;
2314
2315 /* Make this a NOP if IPv6 is not available */
2316 if (!socket_ipv6_is_supported())
2317 return 0;
2318
2319 if (link->flags & IFF_LOOPBACK)
2320 return 0;
2321
2322 if (!link->network)
2323 return 0;
2324
2325 if (link->network->ipv6_hop_limit < 0)
2326 return 0;
2327
2328 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/hop_limit");
2329 xsprintf(buf, "%i", link->network->ipv6_hop_limit);
2330
2331 r = write_string_file(p, buf, WRITE_STRING_FILE_VERIFY_ON_FAILURE);
2332 if (r < 0)
2333 log_link_warning_errno(link, r, "Cannot set IPv6 hop limit for interface: %m");
2334
2335 return 0;
2336 }
2337
2338 static int link_drop_foreign_config(Link *link) {
2339 Address *address;
2340 Route *route;
2341 Iterator i;
2342 int r;
2343
2344 SET_FOREACH(address, link->addresses_foreign, i) {
2345 /* we consider IPv6LL addresses to be managed by the kernel */
2346 if (address->family == AF_INET6 && in_addr_is_link_local(AF_INET6, &address->in_addr) == 1)
2347 continue;
2348
2349 r = address_remove(address, link, link_address_remove_handler);
2350 if (r < 0)
2351 return r;
2352 }
2353
2354 SET_FOREACH(route, link->routes_foreign, i) {
2355 /* do not touch routes managed by the kernel */
2356 if (route->protocol == RTPROT_KERNEL)
2357 continue;
2358
2359 r = route_remove(route, link, link_route_remove_handler);
2360 if (r < 0)
2361 return r;
2362 }
2363
2364 return 0;
2365 }
2366
2367 static int link_drop_config(Link *link) {
2368 Address *address;
2369 Route *route;
2370 Iterator i;
2371 int r;
2372
2373 SET_FOREACH(address, link->addresses, i) {
2374 /* we consider IPv6LL addresses to be managed by the kernel */
2375 if (address->family == AF_INET6 && in_addr_is_link_local(AF_INET6, &address->in_addr) == 1)
2376 continue;
2377
2378 r = address_remove(address, link, link_address_remove_handler);
2379 if (r < 0)
2380 return r;
2381 }
2382
2383 SET_FOREACH(route, link->routes, i) {
2384 /* do not touch routes managed by the kernel */
2385 if (route->protocol == RTPROT_KERNEL)
2386 continue;
2387
2388 r = route_remove(route, link, link_route_remove_handler);
2389 if (r < 0)
2390 return r;
2391 }
2392
2393 ndisc_flush(link);
2394
2395 return 0;
2396 }
2397
2398 static int link_update_lldp(Link *link) {
2399 int r;
2400
2401 assert(link);
2402
2403 if (!link->lldp)
2404 return 0;
2405
2406 if (link->flags & IFF_UP) {
2407 r = sd_lldp_start(link->lldp);
2408 if (r > 0)
2409 log_link_debug(link, "Started LLDP.");
2410 } else {
2411 r = sd_lldp_stop(link->lldp);
2412 if (r > 0)
2413 log_link_debug(link, "Stopped LLDP.");
2414 }
2415
2416 return r;
2417 }
2418
2419 static int link_configure(Link *link) {
2420 int r;
2421
2422 assert(link);
2423 assert(link->network);
2424 assert(link->state == LINK_STATE_PENDING);
2425
2426 if (streq_ptr(link->kind, "vcan")) {
2427
2428 if (!(link->flags & IFF_UP)) {
2429 r = link_up_can(link);
2430 if (r < 0) {
2431 link_enter_failed(link);
2432 return r;
2433 }
2434 }
2435
2436 return 0;
2437 }
2438
2439 /* Drop foreign config, but ignore loopback or critical devices.
2440 * We do not want to remove loopback address or addresses used for root NFS. */
2441 if (!(link->flags & IFF_LOOPBACK) && !(link->network->dhcp_critical)) {
2442 r = link_drop_foreign_config(link);
2443 if (r < 0)
2444 return r;
2445 }
2446
2447 r = link_set_proxy_arp(link);
2448 if (r < 0)
2449 return r;
2450
2451 r = link_set_ipv4_forward(link);
2452 if (r < 0)
2453 return r;
2454
2455 r = link_set_ipv6_forward(link);
2456 if (r < 0)
2457 return r;
2458
2459 r = link_set_ipv6_privacy_extensions(link);
2460 if (r < 0)
2461 return r;
2462
2463 r = link_set_ipv6_accept_ra(link);
2464 if (r < 0)
2465 return r;
2466
2467 r = link_set_ipv6_dad_transmits(link);
2468 if (r < 0)
2469 return r;
2470
2471 r = link_set_ipv6_hop_limit(link);
2472 if (r < 0)
2473 return r;
2474
2475 r = link_set_flags(link);
2476 if (r < 0)
2477 return r;
2478
2479 if (link_ipv4ll_enabled(link)) {
2480 r = ipv4ll_configure(link);
2481 if (r < 0)
2482 return r;
2483 }
2484
2485 if (link_dhcp4_enabled(link)) {
2486 r = dhcp4_configure(link);
2487 if (r < 0)
2488 return r;
2489 }
2490
2491 if (link_dhcp4_server_enabled(link)) {
2492 r = sd_dhcp_server_new(&link->dhcp_server, link->ifindex);
2493 if (r < 0)
2494 return r;
2495
2496 r = sd_dhcp_server_attach_event(link->dhcp_server, NULL, 0);
2497 if (r < 0)
2498 return r;
2499 }
2500
2501 if (link_dhcp6_enabled(link) ||
2502 link_ipv6_accept_ra_enabled(link)) {
2503 r = dhcp6_configure(link);
2504 if (r < 0)
2505 return r;
2506 }
2507
2508 if (link_ipv6_accept_ra_enabled(link)) {
2509 r = ndisc_configure(link);
2510 if (r < 0)
2511 return r;
2512 }
2513
2514 if (link_lldp_rx_enabled(link)) {
2515 r = sd_lldp_new(&link->lldp);
2516 if (r < 0)
2517 return r;
2518
2519 r = sd_lldp_set_ifindex(link->lldp, link->ifindex);
2520 if (r < 0)
2521 return r;
2522
2523 r = sd_lldp_match_capabilities(link->lldp,
2524 link->network->lldp_mode == LLDP_MODE_ROUTERS_ONLY ?
2525 SD_LLDP_SYSTEM_CAPABILITIES_ALL_ROUTERS :
2526 SD_LLDP_SYSTEM_CAPABILITIES_ALL);
2527 if (r < 0)
2528 return r;
2529
2530 r = sd_lldp_set_filter_address(link->lldp, &link->mac);
2531 if (r < 0)
2532 return r;
2533
2534 r = sd_lldp_attach_event(link->lldp, NULL, 0);
2535 if (r < 0)
2536 return r;
2537
2538 r = sd_lldp_set_callback(link->lldp, lldp_handler, link);
2539 if (r < 0)
2540 return r;
2541
2542 r = link_update_lldp(link);
2543 if (r < 0)
2544 return r;
2545 }
2546
2547 if (link_has_carrier(link)) {
2548 r = link_acquire_conf(link);
2549 if (r < 0)
2550 return r;
2551 }
2552
2553 return link_enter_join_netdev(link);
2554 }
2555
2556 static int link_initialized_and_synced(sd_netlink *rtnl, sd_netlink_message *m,
2557 void *userdata) {
2558 _cleanup_link_unref_ Link *link = userdata;
2559 Network *network;
2560 int r;
2561
2562 assert(link);
2563 assert(link->ifname);
2564 assert(link->manager);
2565
2566 if (link->state != LINK_STATE_PENDING)
2567 return 1;
2568
2569 log_link_debug(link, "Link state is up-to-date");
2570
2571 r = link_new_bound_by_list(link);
2572 if (r < 0)
2573 return r;
2574
2575 r = link_handle_bound_by_list(link);
2576 if (r < 0)
2577 return r;
2578
2579 if (!link->network) {
2580 r = network_get(link->manager, link->udev_device, link->ifname,
2581 &link->mac, &network);
2582 if (r == -ENOENT) {
2583 link_enter_unmanaged(link);
2584 return 1;
2585 } else if (r == 0 && network->unmanaged) {
2586 link_enter_unmanaged(link);
2587 return 0;
2588 } else if (r < 0)
2589 return r;
2590
2591 if (link->flags & IFF_LOOPBACK) {
2592 if (network->link_local != ADDRESS_FAMILY_NO)
2593 log_link_debug(link, "Ignoring link-local autoconfiguration for loopback link");
2594
2595 if (network->dhcp != ADDRESS_FAMILY_NO)
2596 log_link_debug(link, "Ignoring DHCP clients for loopback link");
2597
2598 if (network->dhcp_server)
2599 log_link_debug(link, "Ignoring DHCP server for loopback link");
2600 }
2601
2602 r = network_apply(network, link);
2603 if (r < 0)
2604 return r;
2605 }
2606
2607 r = link_new_bound_to_list(link);
2608 if (r < 0)
2609 return r;
2610
2611 r = link_configure(link);
2612 if (r < 0)
2613 return r;
2614
2615 return 1;
2616 }
2617
2618 int link_initialized(Link *link, struct udev_device *device) {
2619 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
2620 int r;
2621
2622 assert(link);
2623 assert(link->manager);
2624 assert(link->manager->rtnl);
2625 assert(device);
2626
2627 if (link->state != LINK_STATE_PENDING)
2628 return 0;
2629
2630 if (link->udev_device)
2631 return 0;
2632
2633 log_link_debug(link, "udev initialized link");
2634
2635 link->udev_device = udev_device_ref(device);
2636
2637 /* udev has initialized the link, but we don't know if we have yet
2638 * processed the NEWLINK messages with the latest state. Do a GETLINK,
2639 * when it returns we know that the pending NEWLINKs have already been
2640 * processed and that we are up-to-date */
2641
2642 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_GETLINK,
2643 link->ifindex);
2644 if (r < 0)
2645 return r;
2646
2647 r = sd_netlink_call_async(link->manager->rtnl, req,
2648 link_initialized_and_synced, link, 0, NULL);
2649 if (r < 0)
2650 return r;
2651
2652 link_ref(link);
2653
2654 return 0;
2655 }
2656
2657 static int link_load(Link *link) {
2658 _cleanup_free_ char *network_file = NULL,
2659 *addresses = NULL,
2660 *routes = NULL,
2661 *dhcp4_address = NULL,
2662 *ipv4ll_address = NULL;
2663 union in_addr_union address;
2664 union in_addr_union route_dst;
2665 const char *p;
2666 int r;
2667
2668 assert(link);
2669
2670 r = parse_env_file(link->state_file, NEWLINE,
2671 "NETWORK_FILE", &network_file,
2672 "ADDRESSES", &addresses,
2673 "ROUTES", &routes,
2674 "DHCP4_ADDRESS", &dhcp4_address,
2675 "IPV4LL_ADDRESS", &ipv4ll_address,
2676 NULL);
2677 if (r < 0 && r != -ENOENT)
2678 return log_link_error_errno(link, r, "Failed to read %s: %m", link->state_file);
2679
2680 if (network_file) {
2681 Network *network;
2682 char *suffix;
2683
2684 /* drop suffix */
2685 suffix = strrchr(network_file, '.');
2686 if (!suffix) {
2687 log_link_debug(link, "Failed to get network name from %s", network_file);
2688 goto network_file_fail;
2689 }
2690 *suffix = '\0';
2691
2692 r = network_get_by_name(link->manager, basename(network_file), &network);
2693 if (r < 0) {
2694 log_link_debug_errno(link, r, "Failed to get network %s: %m", basename(network_file));
2695 goto network_file_fail;
2696 }
2697
2698 r = network_apply(network, link);
2699 if (r < 0)
2700 return log_link_error_errno(link, r, "Failed to apply network %s: %m", basename(network_file));
2701 }
2702
2703 network_file_fail:
2704
2705 if (addresses) {
2706 p = addresses;
2707
2708 for (;;) {
2709 _cleanup_free_ char *address_str = NULL;
2710 char *prefixlen_str;
2711 int family;
2712 unsigned char prefixlen;
2713
2714 r = extract_first_word(&p, &address_str, NULL, 0);
2715 if (r < 0) {
2716 log_link_debug_errno(link, r, "Failed to extract next address string: %m");
2717 continue;
2718 }
2719 if (r == 0)
2720 break;
2721
2722 prefixlen_str = strchr(address_str, '/');
2723 if (!prefixlen_str) {
2724 log_link_debug(link, "Failed to parse address and prefix length %s", address_str);
2725 continue;
2726 }
2727
2728 *prefixlen_str++ = '\0';
2729
2730 r = sscanf(prefixlen_str, "%hhu", &prefixlen);
2731 if (r != 1) {
2732 log_link_error(link, "Failed to parse prefixlen %s", prefixlen_str);
2733 continue;
2734 }
2735
2736 r = in_addr_from_string_auto(address_str, &family, &address);
2737 if (r < 0) {
2738 log_link_debug_errno(link, r, "Failed to parse address %s: %m", address_str);
2739 continue;
2740 }
2741
2742 r = address_add(link, family, &address, prefixlen, NULL);
2743 if (r < 0)
2744 return log_link_error_errno(link, r, "Failed to add address: %m");
2745 }
2746 }
2747
2748 if (routes) {
2749 p = routes;
2750
2751 for (;;) {
2752 Route *route;
2753 _cleanup_free_ char *route_str = NULL;
2754 _cleanup_(sd_event_source_unrefp) sd_event_source *expire = NULL;
2755 usec_t lifetime;
2756 char *prefixlen_str;
2757 int family;
2758 unsigned char prefixlen, tos, table;
2759 uint32_t priority;
2760
2761 r = extract_first_word(&p, &route_str, NULL, 0);
2762 if (r < 0) {
2763 log_link_debug_errno(link, r, "Failed to extract next route string: %m");
2764 continue;
2765 }
2766 if (r == 0)
2767 break;
2768
2769 prefixlen_str = strchr(route_str, '/');
2770 if (!prefixlen_str) {
2771 log_link_debug(link, "Failed to parse route %s", route_str);
2772 continue;
2773 }
2774
2775 *prefixlen_str++ = '\0';
2776
2777 r = sscanf(prefixlen_str, "%hhu/%hhu/%"SCNu32"/%hhu/"USEC_FMT, &prefixlen, &tos, &priority, &table, &lifetime);
2778 if (r != 5) {
2779 log_link_debug(link,
2780 "Failed to parse destination prefix length, tos, priority, table or expiration %s",
2781 prefixlen_str);
2782 continue;
2783 }
2784
2785 r = in_addr_from_string_auto(route_str, &family, &route_dst);
2786 if (r < 0) {
2787 log_link_debug_errno(link, r, "Failed to parse route destination %s: %m", route_str);
2788 continue;
2789 }
2790
2791 r = route_add(link, family, &route_dst, prefixlen, tos, priority, table, &route);
2792 if (r < 0)
2793 return log_link_error_errno(link, r, "Failed to add route: %m");
2794
2795 if (lifetime != USEC_INFINITY) {
2796 r = sd_event_add_time(link->manager->event, &expire, clock_boottime_or_monotonic(), lifetime,
2797 0, route_expire_handler, route);
2798 if (r < 0)
2799 log_link_warning_errno(link, r, "Could not arm route expiration handler: %m");
2800 }
2801
2802 route->lifetime = lifetime;
2803 sd_event_source_unref(route->expire);
2804 route->expire = expire;
2805 expire = NULL;
2806 }
2807 }
2808
2809 if (dhcp4_address) {
2810 r = in_addr_from_string(AF_INET, dhcp4_address, &address);
2811 if (r < 0) {
2812 log_link_debug_errno(link, r, "Failed to parse DHCPv4 address %s: %m", dhcp4_address);
2813 goto dhcp4_address_fail;
2814 }
2815
2816 r = sd_dhcp_client_new(&link->dhcp_client);
2817 if (r < 0)
2818 return log_link_error_errno(link, r, "Failed to create DHCPv4 client: %m");
2819
2820 r = sd_dhcp_client_set_request_address(link->dhcp_client, &address.in);
2821 if (r < 0)
2822 return log_link_error_errno(link, r, "Failed to set initial DHCPv4 address %s: %m", dhcp4_address);
2823 }
2824
2825 dhcp4_address_fail:
2826
2827 if (ipv4ll_address) {
2828 r = in_addr_from_string(AF_INET, ipv4ll_address, &address);
2829 if (r < 0) {
2830 log_link_debug_errno(link, r, "Failed to parse IPv4LL address %s: %m", ipv4ll_address);
2831 goto ipv4ll_address_fail;
2832 }
2833
2834 r = sd_ipv4ll_new(&link->ipv4ll);
2835 if (r < 0)
2836 return log_link_error_errno(link, r, "Failed to create IPv4LL client: %m");
2837
2838 r = sd_ipv4ll_set_address(link->ipv4ll, &address.in);
2839 if (r < 0)
2840 return log_link_error_errno(link, r, "Failed to set initial IPv4LL address %s: %m", ipv4ll_address);
2841 }
2842
2843 ipv4ll_address_fail:
2844
2845 return 0;
2846 }
2847
2848 int link_add(Manager *m, sd_netlink_message *message, Link **ret) {
2849 Link *link;
2850 _cleanup_udev_device_unref_ struct udev_device *device = NULL;
2851 char ifindex_str[2 + DECIMAL_STR_MAX(int)];
2852 int r;
2853
2854 assert(m);
2855 assert(m->rtnl);
2856 assert(message);
2857 assert(ret);
2858
2859 r = link_new(m, message, ret);
2860 if (r < 0)
2861 return r;
2862
2863 link = *ret;
2864
2865 log_link_debug(link, "Link %d added", link->ifindex);
2866
2867 r = link_load(link);
2868 if (r < 0)
2869 return r;
2870
2871 if (detect_container() <= 0) {
2872 /* not in a container, udev will be around */
2873 sprintf(ifindex_str, "n%d", link->ifindex);
2874 device = udev_device_new_from_device_id(m->udev, ifindex_str);
2875 if (!device) {
2876 r = log_link_warning_errno(link, errno, "Could not find udev device: %m");
2877 goto failed;
2878 }
2879
2880 if (udev_device_get_is_initialized(device) <= 0) {
2881 /* not yet ready */
2882 log_link_debug(link, "link pending udev initialization...");
2883 return 0;
2884 }
2885
2886 r = link_initialized(link, device);
2887 if (r < 0)
2888 goto failed;
2889 } else {
2890 /* we are calling a callback directly, so must take a ref */
2891 link_ref(link);
2892
2893 r = link_initialized_and_synced(m->rtnl, NULL, link);
2894 if (r < 0)
2895 goto failed;
2896 }
2897
2898 return 0;
2899 failed:
2900 link_enter_failed(link);
2901 return r;
2902 }
2903
2904 int link_ipv6ll_gained(Link *link, const struct in6_addr *address) {
2905 int r;
2906
2907 assert(link);
2908
2909 log_link_info(link, "Gained IPv6LL");
2910
2911 link->ipv6ll_address = *address;
2912 link_check_ready(link);
2913
2914 if (!IN_SET(link->state, LINK_STATE_PENDING, LINK_STATE_UNMANAGED, LINK_STATE_FAILED)) {
2915 r = link_acquire_ipv6_conf(link);
2916 if (r < 0) {
2917 link_enter_failed(link);
2918 return r;
2919 }
2920 }
2921
2922 return 0;
2923 }
2924
2925 static int link_carrier_gained(Link *link) {
2926 int r;
2927
2928 assert(link);
2929
2930 if (!IN_SET(link->state, LINK_STATE_PENDING, LINK_STATE_UNMANAGED, LINK_STATE_FAILED)) {
2931 r = link_acquire_conf(link);
2932 if (r < 0) {
2933 link_enter_failed(link);
2934 return r;
2935 }
2936
2937 r = link_enter_set_addresses(link);
2938 if (r < 0)
2939 return r;
2940 }
2941
2942 r = link_handle_bound_by_list(link);
2943 if (r < 0)
2944 return r;
2945
2946 return 0;
2947 }
2948
2949 static int link_carrier_lost(Link *link) {
2950 int r;
2951
2952 assert(link);
2953
2954 r = link_stop_clients(link);
2955 if (r < 0) {
2956 link_enter_failed(link);
2957 return r;
2958 }
2959
2960 r = link_drop_config(link);
2961 if (r < 0)
2962 return r;
2963
2964 if (!IN_SET(link->state, LINK_STATE_UNMANAGED, LINK_STATE_PENDING)) {
2965 log_link_debug(link, "State is %s, dropping config", link_state_to_string(link->state));
2966 r = link_drop_foreign_config(link);
2967 if (r < 0)
2968 return r;
2969 }
2970
2971 r = link_handle_bound_by_list(link);
2972 if (r < 0)
2973 return r;
2974
2975 return 0;
2976 }
2977
2978 int link_carrier_reset(Link *link) {
2979 int r;
2980
2981 assert(link);
2982
2983 if (link_has_carrier(link)) {
2984 r = link_carrier_lost(link);
2985 if (r < 0)
2986 return r;
2987
2988 r = link_carrier_gained(link);
2989 if (r < 0)
2990 return r;
2991
2992 log_link_info(link, "Reset carrier");
2993 }
2994
2995 return 0;
2996 }
2997
2998 int link_update(Link *link, sd_netlink_message *m) {
2999 struct ether_addr mac;
3000 const char *ifname;
3001 uint32_t mtu;
3002 bool had_carrier, carrier_gained, carrier_lost;
3003 int r;
3004
3005 assert(link);
3006 assert(link->ifname);
3007 assert(m);
3008
3009 if (link->state == LINK_STATE_LINGER) {
3010 link_ref(link);
3011 log_link_info(link, "Link readded");
3012 link_set_state(link, LINK_STATE_ENSLAVING);
3013
3014 r = link_new_carrier_maps(link);
3015 if (r < 0)
3016 return r;
3017 }
3018
3019 r = sd_netlink_message_read_string(m, IFLA_IFNAME, &ifname);
3020 if (r >= 0 && !streq(ifname, link->ifname)) {
3021 log_link_info(link, "Renamed to %s", ifname);
3022
3023 link_free_carrier_maps(link);
3024
3025 r = free_and_strdup(&link->ifname, ifname);
3026 if (r < 0)
3027 return r;
3028
3029 r = link_new_carrier_maps(link);
3030 if (r < 0)
3031 return r;
3032 }
3033
3034 r = sd_netlink_message_read_u32(m, IFLA_MTU, &mtu);
3035 if (r >= 0 && mtu > 0) {
3036 link->mtu = mtu;
3037 if (!link->original_mtu) {
3038 link->original_mtu = mtu;
3039 log_link_debug(link, "Saved original MTU: %" PRIu32, link->original_mtu);
3040 }
3041
3042 if (link->dhcp_client) {
3043 r = sd_dhcp_client_set_mtu(link->dhcp_client,
3044 link->mtu);
3045 if (r < 0) {
3046 log_link_warning_errno(link, r, "Could not update MTU in DHCP client: %m");
3047 return r;
3048 }
3049 }
3050 }
3051
3052 /* The kernel may broadcast NEWLINK messages without the MAC address
3053 set, simply ignore them. */
3054 r = sd_netlink_message_read_ether_addr(m, IFLA_ADDRESS, &mac);
3055 if (r >= 0) {
3056 if (memcmp(link->mac.ether_addr_octet, mac.ether_addr_octet,
3057 ETH_ALEN)) {
3058
3059 memcpy(link->mac.ether_addr_octet, mac.ether_addr_octet,
3060 ETH_ALEN);
3061
3062 log_link_debug(link, "MAC address: "
3063 "%02hhx:%02hhx:%02hhx:%02hhx:%02hhx:%02hhx",
3064 mac.ether_addr_octet[0],
3065 mac.ether_addr_octet[1],
3066 mac.ether_addr_octet[2],
3067 mac.ether_addr_octet[3],
3068 mac.ether_addr_octet[4],
3069 mac.ether_addr_octet[5]);
3070
3071 if (link->ipv4ll) {
3072 r = sd_ipv4ll_set_mac(link->ipv4ll, &link->mac);
3073 if (r < 0)
3074 return log_link_warning_errno(link, r, "Could not update MAC address in IPv4LL client: %m");
3075 }
3076
3077 if (link->dhcp_client) {
3078 const DUID *duid = link_duid(link);
3079
3080 r = sd_dhcp_client_set_mac(link->dhcp_client,
3081 (const uint8_t *) &link->mac,
3082 sizeof (link->mac),
3083 ARPHRD_ETHER);
3084 if (r < 0)
3085 return log_link_warning_errno(link, r, "Could not update MAC address in DHCP client: %m");
3086
3087 r = sd_dhcp_client_set_iaid_duid(link->dhcp_client,
3088 link->network->iaid,
3089 duid->type,
3090 duid->raw_data_len > 0 ? duid->raw_data : NULL,
3091 duid->raw_data_len);
3092 if (r < 0)
3093 return log_link_warning_errno(link, r, "Could not update DUID/IAID in DHCP client: %m");
3094 }
3095
3096 if (link->dhcp6_client) {
3097 const DUID* duid = link_duid(link);
3098
3099 r = sd_dhcp6_client_set_mac(link->dhcp6_client,
3100 (const uint8_t *) &link->mac,
3101 sizeof (link->mac),
3102 ARPHRD_ETHER);
3103 if (r < 0)
3104 return log_link_warning_errno(link, r, "Could not update MAC address in DHCPv6 client: %m");
3105
3106 r = sd_dhcp6_client_set_iaid(link->dhcp6_client,
3107 link->network->iaid);
3108 if (r < 0)
3109 return log_link_warning_errno(link, r, "Could not update DHCPv6 IAID: %m");
3110
3111 r = sd_dhcp6_client_set_duid(link->dhcp6_client,
3112 duid->type,
3113 duid->raw_data_len > 0 ? duid->raw_data : NULL,
3114 duid->raw_data_len);
3115 if (r < 0)
3116 return log_link_warning_errno(link, r, "Could not update DHCPv6 DUID: %m");
3117 }
3118 }
3119 }
3120
3121 had_carrier = link_has_carrier(link);
3122
3123 r = link_update_flags(link, m);
3124 if (r < 0)
3125 return r;
3126
3127 r = link_update_lldp(link);
3128 if (r < 0)
3129 return r;
3130
3131 carrier_gained = !had_carrier && link_has_carrier(link);
3132 carrier_lost = had_carrier && !link_has_carrier(link);
3133
3134 if (carrier_gained) {
3135 log_link_info(link, "Gained carrier");
3136
3137 r = link_carrier_gained(link);
3138 if (r < 0)
3139 return r;
3140 } else if (carrier_lost) {
3141 log_link_info(link, "Lost carrier");
3142
3143 r = link_carrier_lost(link);
3144 if (r < 0)
3145 return r;
3146 }
3147
3148 return 0;
3149 }
3150
3151 static void print_link_hashmap(FILE *f, const char *prefix, Hashmap* h) {
3152 bool space = false;
3153 Iterator i;
3154 Link *link;
3155
3156 assert(f);
3157 assert(prefix);
3158
3159 if (hashmap_isempty(h))
3160 return;
3161
3162 fputs(prefix, f);
3163 HASHMAP_FOREACH(link, h, i) {
3164 if (space)
3165 fputc(' ', f);
3166
3167 fprintf(f, "%i", link->ifindex);
3168 space = true;
3169 }
3170
3171 fputc('\n', f);
3172 }
3173
3174 int link_save(Link *link) {
3175 _cleanup_free_ char *temp_path = NULL;
3176 _cleanup_fclose_ FILE *f = NULL;
3177 const char *admin_state, *oper_state;
3178 Address *a;
3179 Route *route;
3180 Iterator i;
3181 int r;
3182
3183 assert(link);
3184 assert(link->state_file);
3185 assert(link->lease_file);
3186 assert(link->manager);
3187
3188 if (link->state == LINK_STATE_LINGER) {
3189 unlink(link->state_file);
3190 return 0;
3191 }
3192
3193 link_lldp_save(link);
3194
3195 admin_state = link_state_to_string(link->state);
3196 assert(admin_state);
3197
3198 oper_state = link_operstate_to_string(link->operstate);
3199 assert(oper_state);
3200
3201 r = fopen_temporary(link->state_file, &f, &temp_path);
3202 if (r < 0)
3203 goto fail;
3204
3205 (void) fchmod(fileno(f), 0644);
3206
3207 fprintf(f,
3208 "# This is private data. Do not parse.\n"
3209 "ADMIN_STATE=%s\n"
3210 "OPER_STATE=%s\n",
3211 admin_state, oper_state);
3212
3213 if (link->network) {
3214 bool space;
3215 sd_dhcp6_lease *dhcp6_lease = NULL;
3216 const char *dhcp_domainname = NULL;
3217 char **dhcp6_domains = NULL;
3218 unsigned j;
3219
3220 if (link->dhcp6_client) {
3221 r = sd_dhcp6_client_get_lease(link->dhcp6_client, &dhcp6_lease);
3222 if (r < 0 && r != -ENOMSG)
3223 log_link_debug(link, "No DHCPv6 lease");
3224 }
3225
3226 fprintf(f, "NETWORK_FILE=%s\n", link->network->filename);
3227
3228 fputs("DNS=", f);
3229 space = false;
3230
3231 for (j = 0; j < link->network->n_dns; j++) {
3232 _cleanup_free_ char *b = NULL;
3233
3234 r = in_addr_to_string(link->network->dns[j].family,
3235 &link->network->dns[j].address, &b);
3236 if (r < 0) {
3237 log_debug_errno(r, "Failed to format address, ignoring: %m");
3238 continue;
3239 }
3240
3241 if (space)
3242 fputc(' ', f);
3243 fputs(b, f);
3244 space = true;
3245 }
3246
3247 if (link->network->dhcp_use_dns &&
3248 link->dhcp_lease) {
3249 const struct in_addr *addresses;
3250
3251 r = sd_dhcp_lease_get_dns(link->dhcp_lease, &addresses);
3252 if (r > 0) {
3253 if (space)
3254 fputc(' ', f);
3255 serialize_in_addrs(f, addresses, r);
3256 space = true;
3257 }
3258 }
3259
3260 if (link->network->dhcp_use_dns && dhcp6_lease) {
3261 struct in6_addr *in6_addrs;
3262
3263 r = sd_dhcp6_lease_get_dns(dhcp6_lease, &in6_addrs);
3264 if (r > 0) {
3265 if (space)
3266 fputc(' ', f);
3267 serialize_in6_addrs(f, in6_addrs, r);
3268 space = true;
3269 }
3270 }
3271
3272 /* Make sure to flush out old entries before we use the NDISC data */
3273 ndisc_vacuum(link);
3274
3275 if (link->network->dhcp_use_dns && link->ndisc_rdnss) {
3276 NDiscRDNSS *dd;
3277
3278 SET_FOREACH(dd, link->ndisc_rdnss, i) {
3279 if (space)
3280 fputc(' ', f);
3281
3282 serialize_in6_addrs(f, &dd->address, 1);
3283 space = true;
3284 }
3285 }
3286
3287 fputc('\n', f);
3288
3289 fputs("NTP=", f);
3290 space = false;
3291 fputstrv(f, link->network->ntp, NULL, &space);
3292
3293 if (link->network->dhcp_use_ntp &&
3294 link->dhcp_lease) {
3295 const struct in_addr *addresses;
3296
3297 r = sd_dhcp_lease_get_ntp(link->dhcp_lease, &addresses);
3298 if (r > 0) {
3299 if (space)
3300 fputc(' ', f);
3301 serialize_in_addrs(f, addresses, r);
3302 space = true;
3303 }
3304 }
3305
3306 if (link->network->dhcp_use_ntp && dhcp6_lease) {
3307 struct in6_addr *in6_addrs;
3308 char **hosts;
3309
3310 r = sd_dhcp6_lease_get_ntp_addrs(dhcp6_lease,
3311 &in6_addrs);
3312 if (r > 0) {
3313 if (space)
3314 fputc(' ', f);
3315 serialize_in6_addrs(f, in6_addrs, r);
3316 space = true;
3317 }
3318
3319 r = sd_dhcp6_lease_get_ntp_fqdn(dhcp6_lease, &hosts);
3320 if (r > 0)
3321 fputstrv(f, hosts, NULL, &space);
3322 }
3323
3324 fputc('\n', f);
3325
3326 if (link->network->dhcp_use_domains != DHCP_USE_DOMAINS_NO) {
3327 if (link->dhcp_lease)
3328 (void) sd_dhcp_lease_get_domainname(link->dhcp_lease, &dhcp_domainname);
3329 if (dhcp6_lease)
3330 (void) sd_dhcp6_lease_get_domains(dhcp6_lease, &dhcp6_domains);
3331 }
3332
3333 fputs("DOMAINS=", f);
3334 fputstrv(f, link->network->search_domains, NULL, &space);
3335
3336 if (link->network->dhcp_use_domains == DHCP_USE_DOMAINS_YES) {
3337 NDiscDNSSL *dd;
3338
3339 if (dhcp_domainname)
3340 fputs_with_space(f, dhcp_domainname, NULL, &space);
3341 if (dhcp6_domains)
3342 fputstrv(f, dhcp6_domains, NULL, &space);
3343
3344 SET_FOREACH(dd, link->ndisc_dnssl, i)
3345 fputs_with_space(f, NDISC_DNSSL_DOMAIN(dd), NULL, &space);
3346 }
3347
3348 fputc('\n', f);
3349
3350 fputs("ROUTE_DOMAINS=", f);
3351 fputstrv(f, link->network->route_domains, NULL, NULL);
3352
3353 if (link->network->dhcp_use_domains == DHCP_USE_DOMAINS_ROUTE) {
3354 NDiscDNSSL *dd;
3355
3356 if (dhcp_domainname)
3357 fputs_with_space(f, dhcp_domainname, NULL, &space);
3358 if (dhcp6_domains)
3359 fputstrv(f, dhcp6_domains, NULL, &space);
3360
3361 SET_FOREACH(dd, link->ndisc_dnssl, i)
3362 fputs_with_space(f, NDISC_DNSSL_DOMAIN(dd), NULL, &space);
3363 }
3364
3365 fputc('\n', f);
3366
3367 fprintf(f, "LLMNR=%s\n",
3368 resolve_support_to_string(link->network->llmnr));
3369 fprintf(f, "MDNS=%s\n",
3370 resolve_support_to_string(link->network->mdns));
3371
3372 if (link->network->dnssec_mode != _DNSSEC_MODE_INVALID)
3373 fprintf(f, "DNSSEC=%s\n",
3374 dnssec_mode_to_string(link->network->dnssec_mode));
3375
3376 if (!set_isempty(link->network->dnssec_negative_trust_anchors)) {
3377 const char *n;
3378
3379 fputs("DNSSEC_NTA=", f);
3380 space = false;
3381 SET_FOREACH(n, link->network->dnssec_negative_trust_anchors, i)
3382 fputs_with_space(f, n, NULL, &space);
3383 fputc('\n', f);
3384 }
3385
3386 fputs("ADDRESSES=", f);
3387 space = false;
3388 SET_FOREACH(a, link->addresses, i) {
3389 _cleanup_free_ char *address_str = NULL;
3390
3391 r = in_addr_to_string(a->family, &a->in_addr, &address_str);
3392 if (r < 0)
3393 goto fail;
3394
3395 fprintf(f, "%s%s/%u", space ? " " : "", address_str, a->prefixlen);
3396 space = true;
3397 }
3398 fputc('\n', f);
3399
3400 fputs("ROUTES=", f);
3401 space = false;
3402 SET_FOREACH(route, link->routes, i) {
3403 _cleanup_free_ char *route_str = NULL;
3404
3405 r = in_addr_to_string(route->family, &route->dst, &route_str);
3406 if (r < 0)
3407 goto fail;
3408
3409 fprintf(f, "%s%s/%hhu/%hhu/%"PRIu32"/%hhu/"USEC_FMT, space ? " " : "", route_str,
3410 route->dst_prefixlen, route->tos, route->priority, route->table, route->lifetime);
3411 space = true;
3412 }
3413
3414 fputc('\n', f);
3415 }
3416
3417 print_link_hashmap(f, "CARRIER_BOUND_TO=", link->bound_to_links);
3418 print_link_hashmap(f, "CARRIER_BOUND_BY=", link->bound_by_links);
3419
3420 if (link->dhcp_lease) {
3421 struct in_addr address;
3422 const char *tz = NULL;
3423
3424 assert(link->network);
3425
3426 r = sd_dhcp_lease_get_timezone(link->dhcp_lease, &tz);
3427 if (r >= 0)
3428 fprintf(f, "TIMEZONE=%s\n", tz);
3429
3430 r = sd_dhcp_lease_get_address(link->dhcp_lease, &address);
3431 if (r >= 0) {
3432 fputs("DHCP4_ADDRESS=", f);
3433 serialize_in_addrs(f, &address, 1);
3434 fputc('\n', f);
3435 }
3436
3437 r = dhcp_lease_save(link->dhcp_lease, link->lease_file);
3438 if (r < 0)
3439 goto fail;
3440
3441 fprintf(f,
3442 "DHCP_LEASE=%s\n",
3443 link->lease_file);
3444 } else
3445 unlink(link->lease_file);
3446
3447 if (link->ipv4ll) {
3448 struct in_addr address;
3449
3450 r = sd_ipv4ll_get_address(link->ipv4ll, &address);
3451 if (r >= 0) {
3452 fputs("IPV4LL_ADDRESS=", f);
3453 serialize_in_addrs(f, &address, 1);
3454 fputc('\n', f);
3455 }
3456 }
3457
3458 r = fflush_and_check(f);
3459 if (r < 0)
3460 goto fail;
3461
3462 if (rename(temp_path, link->state_file) < 0) {
3463 r = -errno;
3464 goto fail;
3465 }
3466
3467 return 0;
3468
3469 fail:
3470 (void) unlink(link->state_file);
3471 if (temp_path)
3472 (void) unlink(temp_path);
3473
3474 return log_link_error_errno(link, r, "Failed to save link data to %s: %m", link->state_file);
3475 }
3476
3477 /* The serialized state in /run is no longer up-to-date. */
3478 void link_dirty(Link *link) {
3479 int r;
3480
3481 assert(link);
3482
3483 /* mark manager dirty as link is dirty */
3484 manager_dirty(link->manager);
3485
3486 r = set_ensure_allocated(&link->manager->dirty_links, NULL);
3487 if (r < 0)
3488 /* allocation errors are ignored */
3489 return;
3490
3491 r = set_put(link->manager->dirty_links, link);
3492 if (r <= 0)
3493 /* don't take another ref if the link was already dirty */
3494 return;
3495
3496 link_ref(link);
3497 }
3498
3499 /* The serialized state in /run is up-to-date */
3500 void link_clean(Link *link) {
3501 assert(link);
3502 assert(link->manager);
3503
3504 set_remove(link->manager->dirty_links, link);
3505 link_unref(link);
3506 }
3507
3508 static const char* const link_state_table[_LINK_STATE_MAX] = {
3509 [LINK_STATE_PENDING] = "pending",
3510 [LINK_STATE_ENSLAVING] = "configuring",
3511 [LINK_STATE_SETTING_ADDRESSES] = "configuring",
3512 [LINK_STATE_SETTING_ROUTES] = "configuring",
3513 [LINK_STATE_CONFIGURED] = "configured",
3514 [LINK_STATE_UNMANAGED] = "unmanaged",
3515 [LINK_STATE_FAILED] = "failed",
3516 [LINK_STATE_LINGER] = "linger",
3517 };
3518
3519 DEFINE_STRING_TABLE_LOOKUP(link_state, LinkState);
3520
3521 static const char* const link_operstate_table[_LINK_OPERSTATE_MAX] = {
3522 [LINK_OPERSTATE_OFF] = "off",
3523 [LINK_OPERSTATE_NO_CARRIER] = "no-carrier",
3524 [LINK_OPERSTATE_DORMANT] = "dormant",
3525 [LINK_OPERSTATE_CARRIER] = "carrier",
3526 [LINK_OPERSTATE_DEGRADED] = "degraded",
3527 [LINK_OPERSTATE_ROUTABLE] = "routable",
3528 };
3529
3530 DEFINE_STRING_TABLE_LOOKUP(link_operstate, LinkOperationalState);