]> git.ipfire.org Git - thirdparty/systemd.git/blob - src/network/networkd-link.c
projects / thirdparty / systemd.git / blob
? search:
summary | shortlog | log | commit | commitdiff | tree
blame | history | raw | HEAD
Merge pull request #5842 from keszybz/meson-status-and-conditionals
[thirdparty/systemd.git] / src / network / networkd-link.c
1 /***
2 This file is part of systemd.
3
4 Copyright 2013 Tom Gundersen <teg@jklm.no>
5
6 systemd is free software; you can redistribute it and/or modify it
7 under the terms of the GNU Lesser General Public License as published by
8 the Free Software Foundation; either version 2.1 of the License, or
9 (at your option) any later version.
10
11 systemd is distributed in the hope that it will be useful, but
12 WITHOUT ANY WARRANTY; without even the implied warranty of
13 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
14 Lesser General Public License for more details.
15
16 You should have received a copy of the GNU Lesser General Public License
17 along with systemd; If not, see <http://www.gnu.org/licenses/>.
18 ***/
19
20 #include <netinet/ether.h>
21 #include <linux/if.h>
22 #include <unistd.h>
23
24 #include "alloc-util.h"
25 #include "bus-util.h"
26 #include "dhcp-lease-internal.h"
27 #include "fd-util.h"
28 #include "fileio.h"
29 #include "netlink-util.h"
30 #include "network-internal.h"
31 #include "networkd-ipv6-proxy-ndp.h"
32 #include "networkd-lldp-tx.h"
33 #include "networkd-manager.h"
34 #include "networkd-ndisc.h"
35 #include "set.h"
36 #include "socket-util.h"
37 #include "stdio-util.h"
38 #include "string-table.h"
39 #include "udev-util.h"
40 #include "util.h"
41 #include "virt.h"
42
43 static bool link_dhcp6_enabled(Link *link) {
44 assert(link);
45
46 if (!socket_ipv6_is_supported())
47 return false;
48
49 if (link->flags & IFF_LOOPBACK)
50 return false;
51
52 if (!link->network)
53 return false;
54
55 return link->network->dhcp & ADDRESS_FAMILY_IPV6;
56 }
57
58 static bool link_dhcp4_enabled(Link *link) {
59 assert(link);
60
61 if (link->flags & IFF_LOOPBACK)
62 return false;
63
64 if (!link->network)
65 return false;
66
67 return link->network->dhcp & ADDRESS_FAMILY_IPV4;
68 }
69
70 static bool link_dhcp4_server_enabled(Link *link) {
71 assert(link);
72
73 if (link->flags & IFF_LOOPBACK)
74 return false;
75
76 if (!link->network)
77 return false;
78
79 return link->network->dhcp_server;
80 }
81
82 static bool link_ipv4ll_enabled(Link *link) {
83 assert(link);
84
85 if (link->flags & IFF_LOOPBACK)
86 return false;
87
88 if (!link->network)
89 return false;
90
91 return link->network->link_local & ADDRESS_FAMILY_IPV4;
92 }
93
94 static bool link_ipv6ll_enabled(Link *link) {
95 assert(link);
96
97 if (!socket_ipv6_is_supported())
98 return false;
99
100 if (link->flags & IFF_LOOPBACK)
101 return false;
102
103 if (!link->network)
104 return false;
105
106 return link->network->link_local & ADDRESS_FAMILY_IPV6;
107 }
108
109 static bool link_ipv6_enabled(Link *link) {
110 assert(link);
111
112 if (!socket_ipv6_is_supported())
113 return false;
114
115 if (link->network->bridge)
116 return false;
117
118 /* DHCPv6 client will not be started if no IPv6 link-local address is configured. */
119 return link_ipv6ll_enabled(link) || network_has_static_ipv6_addresses(link->network);
120 }
121
122 static bool link_lldp_rx_enabled(Link *link) {
123 assert(link);
124
125 if (link->flags & IFF_LOOPBACK)
126 return false;
127
128 if (link->iftype != ARPHRD_ETHER)
129 return false;
130
131 if (!link->network)
132 return false;
133
134 if (link->network->bridge)
135 return false;
136
137 return link->network->lldp_mode != LLDP_MODE_NO;
138 }
139
140 static bool link_lldp_emit_enabled(Link *link) {
141 assert(link);
142
143 if (link->flags & IFF_LOOPBACK)
144 return false;
145
146 if (link->iftype != ARPHRD_ETHER)
147 return false;
148
149 if (!link->network)
150 return false;
151
152 return link->network->lldp_emit != LLDP_EMIT_NO;
153 }
154
155 static bool link_ipv4_forward_enabled(Link *link) {
156 assert(link);
157
158 if (link->flags & IFF_LOOPBACK)
159 return false;
160
161 if (!link->network)
162 return false;
163
164 if (link->network->ip_forward == _ADDRESS_FAMILY_BOOLEAN_INVALID)
165 return false;
166
167 return link->network->ip_forward & ADDRESS_FAMILY_IPV4;
168 }
169
170 static bool link_ipv6_forward_enabled(Link *link) {
171 assert(link);
172
173 if (!socket_ipv6_is_supported())
174 return false;
175
176 if (link->flags & IFF_LOOPBACK)
177 return false;
178
179 if (!link->network)
180 return false;
181
182 if (link->network->ip_forward == _ADDRESS_FAMILY_BOOLEAN_INVALID)
183 return false;
184
185 return link->network->ip_forward & ADDRESS_FAMILY_IPV6;
186 }
187
188 static bool link_proxy_arp_enabled(Link *link) {
189 assert(link);
190
191 if (link->flags & IFF_LOOPBACK)
192 return false;
193
194 if (!link->network)
195 return false;
196
197 if (link->network->proxy_arp < 0)
198 return false;
199
200 return true;
201 }
202
203 static bool link_ipv6_accept_ra_enabled(Link *link) {
204 assert(link);
205
206 if (!socket_ipv6_is_supported())
207 return false;
208
209 if (link->flags & IFF_LOOPBACK)
210 return false;
211
212 if (!link->network)
213 return false;
214
215 /* If unset use system default (enabled if local forwarding is disabled.
216 * disabled if local forwarding is enabled).
217 * If set, ignore or enforce RA independent of local forwarding state.
218 */
219 if (link->network->ipv6_accept_ra < 0)
220 /* default to accept RA if ip_forward is disabled and ignore RA if ip_forward is enabled */
221 return !link_ipv6_forward_enabled(link);
222 else if (link->network->ipv6_accept_ra > 0)
223 /* accept RA even if ip_forward is enabled */
224 return true;
225 else
226 /* ignore RA */
227 return false;
228 }
229
230 static IPv6PrivacyExtensions link_ipv6_privacy_extensions(Link *link) {
231 assert(link);
232
233 if (!socket_ipv6_is_supported())
234 return _IPV6_PRIVACY_EXTENSIONS_INVALID;
235
236 if (link->flags & IFF_LOOPBACK)
237 return _IPV6_PRIVACY_EXTENSIONS_INVALID;
238
239 if (!link->network)
240 return _IPV6_PRIVACY_EXTENSIONS_INVALID;
241
242 return link->network->ipv6_privacy_extensions;
243 }
244
245 static int link_enable_ipv6(Link *link) {
246 const char *p = NULL;
247 bool disabled;
248 int r;
249
250 if (link->flags & IFF_LOOPBACK)
251 return 0;
252
253 disabled = !link_ipv6_enabled(link);
254
255 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/disable_ipv6");
256
257 r = write_string_file(p, one_zero(disabled), WRITE_STRING_FILE_VERIFY_ON_FAILURE);
258 if (r < 0)
259 log_link_warning_errno(link, r, "Cannot %s IPv6 for interface %s: %m",
260 enable_disable(!disabled), link->ifname);
261 else
262 log_link_info(link, "IPv6 successfully %sd", enable_disable(!disabled));
263
264 return 0;
265 }
266
267 void link_update_operstate(Link *link) {
268 LinkOperationalState operstate;
269 assert(link);
270
271 if (link->kernel_operstate == IF_OPER_DORMANT)
272 operstate = LINK_OPERSTATE_DORMANT;
273 else if (link_has_carrier(link)) {
274 Address *address;
275 uint8_t scope = RT_SCOPE_NOWHERE;
276 Iterator i;
277
278 /* if we have carrier, check what addresses we have */
279 SET_FOREACH(address, link->addresses, i) {
280 if (!address_is_ready(address))
281 continue;
282
283 if (address->scope < scope)
284 scope = address->scope;
285 }
286
287 /* for operstate we also take foreign addresses into account */
288 SET_FOREACH(address, link->addresses_foreign, i) {
289 if (!address_is_ready(address))
290 continue;
291
292 if (address->scope < scope)
293 scope = address->scope;
294 }
295
296 if (scope < RT_SCOPE_SITE)
297 /* universally accessible addresses found */
298 operstate = LINK_OPERSTATE_ROUTABLE;
299 else if (scope < RT_SCOPE_HOST)
300 /* only link or site local addresses found */
301 operstate = LINK_OPERSTATE_DEGRADED;
302 else
303 /* no useful addresses found */
304 operstate = LINK_OPERSTATE_CARRIER;
305 } else if (link->flags & IFF_UP)
306 operstate = LINK_OPERSTATE_NO_CARRIER;
307 else
308 operstate = LINK_OPERSTATE_OFF;
309
310 if (link->operstate != operstate) {
311 link->operstate = operstate;
312 link_send_changed(link, "OperationalState", NULL);
313 link_dirty(link);
314 }
315 }
316
317 #define FLAG_STRING(string, flag, old, new) \
318 (((old ^ new) & flag) \
319 ? ((old & flag) ? (" -" string) : (" +" string)) \
320 : "")
321
322 static int link_update_flags(Link *link, sd_netlink_message *m) {
323 unsigned flags, unknown_flags_added, unknown_flags_removed, unknown_flags;
324 uint8_t operstate;
325 int r;
326
327 assert(link);
328
329 r = sd_rtnl_message_link_get_flags(m, &flags);
330 if (r < 0)
331 return log_link_warning_errno(link, r, "Could not get link flags: %m");
332
333 r = sd_netlink_message_read_u8(m, IFLA_OPERSTATE, &operstate);
334 if (r < 0)
335 /* if we got a message without operstate, take it to mean
336 the state was unchanged */
337 operstate = link->kernel_operstate;
338
339 if ((link->flags == flags) && (link->kernel_operstate == operstate))
340 return 0;
341
342 if (link->flags != flags) {
343 log_link_debug(link, "Flags change:%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s",
344 FLAG_STRING("LOOPBACK", IFF_LOOPBACK, link->flags, flags),
345 FLAG_STRING("MASTER", IFF_MASTER, link->flags, flags),
346 FLAG_STRING("SLAVE", IFF_SLAVE, link->flags, flags),
347 FLAG_STRING("UP", IFF_UP, link->flags, flags),
348 FLAG_STRING("DORMANT", IFF_DORMANT, link->flags, flags),
349 FLAG_STRING("LOWER_UP", IFF_LOWER_UP, link->flags, flags),
350 FLAG_STRING("RUNNING", IFF_RUNNING, link->flags, flags),
351 FLAG_STRING("MULTICAST", IFF_MULTICAST, link->flags, flags),
352 FLAG_STRING("BROADCAST", IFF_BROADCAST, link->flags, flags),
353 FLAG_STRING("POINTOPOINT", IFF_POINTOPOINT, link->flags, flags),
354 FLAG_STRING("PROMISC", IFF_PROMISC, link->flags, flags),
355 FLAG_STRING("ALLMULTI", IFF_ALLMULTI, link->flags, flags),
356 FLAG_STRING("PORTSEL", IFF_PORTSEL, link->flags, flags),
357 FLAG_STRING("AUTOMEDIA", IFF_AUTOMEDIA, link->flags, flags),
358 FLAG_STRING("DYNAMIC", IFF_DYNAMIC, link->flags, flags),
359 FLAG_STRING("NOARP", IFF_NOARP, link->flags, flags),
360 FLAG_STRING("NOTRAILERS", IFF_NOTRAILERS, link->flags, flags),
361 FLAG_STRING("DEBUG", IFF_DEBUG, link->flags, flags),
362 FLAG_STRING("ECHO", IFF_ECHO, link->flags, flags));
363
364 unknown_flags = ~(IFF_LOOPBACK | IFF_MASTER | IFF_SLAVE | IFF_UP |
365 IFF_DORMANT | IFF_LOWER_UP | IFF_RUNNING |
366 IFF_MULTICAST | IFF_BROADCAST | IFF_POINTOPOINT |
367 IFF_PROMISC | IFF_ALLMULTI | IFF_PORTSEL |
368 IFF_AUTOMEDIA | IFF_DYNAMIC | IFF_NOARP |
369 IFF_NOTRAILERS | IFF_DEBUG | IFF_ECHO);
370 unknown_flags_added = ((link->flags ^ flags) & flags & unknown_flags);
371 unknown_flags_removed = ((link->flags ^ flags) & link->flags & unknown_flags);
372
373 /* link flags are currently at most 18 bits, let's align to
374 * printing 20 */
375 if (unknown_flags_added)
376 log_link_debug(link,
377 "Unknown link flags gained: %#.5x (ignoring)",
378 unknown_flags_added);
379
380 if (unknown_flags_removed)
381 log_link_debug(link,
382 "Unknown link flags lost: %#.5x (ignoring)",
383 unknown_flags_removed);
384 }
385
386 link->flags = flags;
387 link->kernel_operstate = operstate;
388
389 link_update_operstate(link);
390
391 return 0;
392 }
393
394 static int link_new(Manager *manager, sd_netlink_message *message, Link **ret) {
395 _cleanup_link_unref_ Link *link = NULL;
396 uint16_t type;
397 const char *ifname, *kind = NULL;
398 int r, ifindex;
399 unsigned short iftype;
400
401 assert(manager);
402 assert(message);
403 assert(ret);
404
405 /* check for link kind */
406 r = sd_netlink_message_enter_container(message, IFLA_LINKINFO);
407 if (r == 0) {
408 (void)sd_netlink_message_read_string(message, IFLA_INFO_KIND, &kind);
409 r = sd_netlink_message_exit_container(message);
410 if (r < 0)
411 return r;
412 }
413
414 r = sd_netlink_message_get_type(message, &type);
415 if (r < 0)
416 return r;
417 else if (type != RTM_NEWLINK)
418 return -EINVAL;
419
420 r = sd_rtnl_message_link_get_ifindex(message, &ifindex);
421 if (r < 0)
422 return r;
423 else if (ifindex <= 0)
424 return -EINVAL;
425
426 r = sd_rtnl_message_link_get_type(message, &iftype);
427 if (r < 0)
428 return r;
429
430 r = sd_netlink_message_read_string(message, IFLA_IFNAME, &ifname);
431 if (r < 0)
432 return r;
433
434 link = new0(Link, 1);
435 if (!link)
436 return -ENOMEM;
437
438 link->n_ref = 1;
439 link->manager = manager;
440 link->state = LINK_STATE_PENDING;
441 link->rtnl_extended_attrs = true;
442 link->ifindex = ifindex;
443 link->iftype = iftype;
444 link->ifname = strdup(ifname);
445 if (!link->ifname)
446 return -ENOMEM;
447
448 if (kind) {
449 link->kind = strdup(kind);
450 if (!link->kind)
451 return -ENOMEM;
452 }
453
454 r = sd_netlink_message_read_ether_addr(message, IFLA_ADDRESS, &link->mac);
455 if (r < 0)
456 log_link_debug_errno(link, r, "MAC address not found for new device, continuing without");
457
458 if (asprintf(&link->state_file, "/run/systemd/netif/links/%d", link->ifindex) < 0)
459 return -ENOMEM;
460
461 if (asprintf(&link->lease_file, "/run/systemd/netif/leases/%d", link->ifindex) < 0)
462 return -ENOMEM;
463
464 if (asprintf(&link->lldp_file, "/run/systemd/netif/lldp/%d", link->ifindex) < 0)
465 return -ENOMEM;
466
467 r = hashmap_ensure_allocated(&manager->links, NULL);
468 if (r < 0)
469 return r;
470
471 r = hashmap_put(manager->links, INT_TO_PTR(link->ifindex), link);
472 if (r < 0)
473 return r;
474
475 r = link_update_flags(link, message);
476 if (r < 0)
477 return r;
478
479 *ret = link;
480 link = NULL;
481
482 return 0;
483 }
484
485 static void link_free(Link *link) {
486 Address *address;
487 Iterator i;
488 Link *carrier;
489
490 if (!link)
491 return;
492
493 while (!set_isempty(link->addresses))
494 address_free(set_first(link->addresses));
495
496 while (!set_isempty(link->addresses_foreign))
497 address_free(set_first(link->addresses_foreign));
498
499 link->addresses = set_free(link->addresses);
500
501 link->addresses_foreign = set_free(link->addresses_foreign);
502
503 while ((address = link->pool_addresses)) {
504 LIST_REMOVE(addresses, link->pool_addresses, address);
505 address_free(address);
506 }
507
508 sd_dhcp_server_unref(link->dhcp_server);
509 sd_dhcp_client_unref(link->dhcp_client);
510 sd_dhcp_lease_unref(link->dhcp_lease);
511
512 link_lldp_emit_stop(link);
513
514 free(link->lease_file);
515
516 sd_lldp_unref(link->lldp);
517 free(link->lldp_file);
518
519 ndisc_flush(link);
520
521 sd_ipv4ll_unref(link->ipv4ll);
522 sd_dhcp6_client_unref(link->dhcp6_client);
523 sd_ndisc_unref(link->ndisc);
524
525 if (link->manager)
526 hashmap_remove(link->manager->links, INT_TO_PTR(link->ifindex));
527
528 free(link->ifname);
529
530 free(link->kind);
531
532 (void)unlink(link->state_file);
533 free(link->state_file);
534
535 udev_device_unref(link->udev_device);
536
537 HASHMAP_FOREACH (carrier, link->bound_to_links, i)
538 hashmap_remove(link->bound_to_links, INT_TO_PTR(carrier->ifindex));
539 hashmap_free(link->bound_to_links);
540
541 HASHMAP_FOREACH (carrier, link->bound_by_links, i)
542 hashmap_remove(link->bound_by_links, INT_TO_PTR(carrier->ifindex));
543 hashmap_free(link->bound_by_links);
544
545 free(link);
546 }
547
548 Link *link_unref(Link *link) {
549 if (!link)
550 return NULL;
551
552 assert(link->n_ref > 0);
553
554 link->n_ref--;
555
556 if (link->n_ref > 0)
557 return NULL;
558
559 link_free(link);
560
561 return NULL;
562 }
563
564 Link *link_ref(Link *link) {
565 if (!link)
566 return NULL;
567
568 assert(link->n_ref > 0);
569
570 link->n_ref++;
571
572 return link;
573 }
574
575 int link_get(Manager *m, int ifindex, Link **ret) {
576 Link *link;
577
578 assert(m);
579 assert(ifindex);
580 assert(ret);
581
582 link = hashmap_get(m->links, INT_TO_PTR(ifindex));
583 if (!link)
584 return -ENODEV;
585
586 *ret = link;
587
588 return 0;
589 }
590
591 static void link_set_state(Link *link, LinkState state) {
592 assert(link);
593
594 if (link->state == state)
595 return;
596
597 link->state = state;
598
599 link_send_changed(link, "AdministrativeState", NULL);
600 }
601
602 static void link_enter_unmanaged(Link *link) {
603 assert(link);
604
605 log_link_debug(link, "Unmanaged");
606
607 link_set_state(link, LINK_STATE_UNMANAGED);
608
609 link_dirty(link);
610 }
611
612 static int link_stop_clients(Link *link) {
613 int r = 0, k;
614
615 assert(link);
616 assert(link->manager);
617 assert(link->manager->event);
618
619 if (link->dhcp_client) {
620 k = sd_dhcp_client_stop(link->dhcp_client);
621 if (k < 0)
622 r = log_link_warning_errno(link, k, "Could not stop DHCPv4 client: %m");
623 }
624
625 if (link->ipv4ll) {
626 k = sd_ipv4ll_stop(link->ipv4ll);
627 if (k < 0)
628 r = log_link_warning_errno(link, k, "Could not stop IPv4 link-local: %m");
629 }
630
631 if (link->dhcp6_client) {
632 k = sd_dhcp6_client_stop(link->dhcp6_client);
633 if (k < 0)
634 r = log_link_warning_errno(link, k, "Could not stop DHCPv6 client: %m");
635 }
636
637 if (link->ndisc) {
638 k = sd_ndisc_stop(link->ndisc);
639 if (k < 0)
640 r = log_link_warning_errno(link, k, "Could not stop IPv6 Router Discovery: %m");
641 }
642
643 link_lldp_emit_stop(link);
644 return r;
645 }
646
647 void link_enter_failed(Link *link) {
648 assert(link);
649
650 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
651 return;
652
653 log_link_warning(link, "Failed");
654
655 link_set_state(link, LINK_STATE_FAILED);
656
657 link_stop_clients(link);
658
659 link_dirty(link);
660 }
661
662 static Address* link_find_dhcp_server_address(Link *link) {
663 Address *address;
664
665 assert(link);
666 assert(link->network);
667
668 /* The first statically configured address if there is any */
669 LIST_FOREACH(addresses, address, link->network->static_addresses) {
670
671 if (address->family != AF_INET)
672 continue;
673
674 if (in_addr_is_null(address->family, &address->in_addr))
675 continue;
676
677 return address;
678 }
679
680 /* If that didn't work, find a suitable address we got from the pool */
681 LIST_FOREACH(addresses, address, link->pool_addresses) {
682 if (address->family != AF_INET)
683 continue;
684
685 return address;
686 }
687
688 return NULL;
689 }
690
691 static void link_enter_configured(Link *link) {
692 assert(link);
693 assert(link->network);
694
695 if (link->state != LINK_STATE_SETTING_ROUTES)
696 return;
697
698 log_link_info(link, "Configured");
699
700 link_set_state(link, LINK_STATE_CONFIGURED);
701
702 link_dirty(link);
703 }
704
705 void link_check_ready(Link *link) {
706 Address *a;
707 Iterator i;
708
709 assert(link);
710
711 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
712 return;
713
714 if (!link->network)
715 return;
716
717 if (!link->static_configured)
718 return;
719
720 if (link_ipv4ll_enabled(link))
721 if (!link->ipv4ll_address ||
722 !link->ipv4ll_route)
723 return;
724
725 if (link_ipv6ll_enabled(link))
726 if (in_addr_is_null(AF_INET6, (const union in_addr_union*) &link->ipv6ll_address) > 0)
727 return;
728
729 if ((link_dhcp4_enabled(link) && !link_dhcp6_enabled(link) &&
730 !link->dhcp4_configured) ||
731 (link_dhcp6_enabled(link) && !link_dhcp4_enabled(link) &&
732 !link->dhcp6_configured) ||
733 (link_dhcp4_enabled(link) && link_dhcp6_enabled(link) &&
734 !link->dhcp4_configured && !link->dhcp6_configured))
735 return;
736
737 if (link_ipv6_accept_ra_enabled(link) && !link->ndisc_configured)
738 return;
739
740 SET_FOREACH(a, link->addresses, i)
741 if (!address_is_ready(a))
742 return;
743
744 if (link->state != LINK_STATE_CONFIGURED)
745 link_enter_configured(link);
746
747 return;
748 }
749
750 static int route_handler(sd_netlink *rtnl, sd_netlink_message *m, void *userdata) {
751 _cleanup_link_unref_ Link *link = userdata;
752 int r;
753
754 assert(link->link_messages > 0);
755 assert(IN_SET(link->state, LINK_STATE_SETTING_ADDRESSES,
756 LINK_STATE_SETTING_ROUTES, LINK_STATE_FAILED,
757 LINK_STATE_LINGER));
758
759 link->link_messages--;
760
761 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
762 return 1;
763
764 r = sd_netlink_message_get_errno(m);
765 if (r < 0 && r != -EEXIST)
766 log_link_warning_errno(link, r, "Could not set route: %m");
767
768 if (link->link_messages == 0) {
769 log_link_debug(link, "Routes set");
770 link->static_configured = true;
771 link_check_ready(link);
772 }
773
774 return 1;
775 }
776
777 static int link_enter_set_routes(Link *link) {
778 Route *rt;
779 int r;
780
781 assert(link);
782 assert(link->network);
783 assert(link->state == LINK_STATE_SETTING_ADDRESSES);
784
785 link_set_state(link, LINK_STATE_SETTING_ROUTES);
786
787 LIST_FOREACH(routes, rt, link->network->static_routes) {
788 r = route_configure(rt, link, route_handler);
789 if (r < 0) {
790 log_link_warning_errno(link, r, "Could not set routes: %m");
791 link_enter_failed(link);
792 return r;
793 }
794
795 link->link_messages++;
796 }
797
798 if (link->link_messages == 0) {
799 link->static_configured = true;
800 link_check_ready(link);
801 } else
802 log_link_debug(link, "Setting routes");
803
804 return 0;
805 }
806
807 int link_route_remove_handler(sd_netlink *rtnl, sd_netlink_message *m, void *userdata) {
808 _cleanup_link_unref_ Link *link = userdata;
809 int r;
810
811 assert(m);
812 assert(link);
813 assert(link->ifname);
814
815 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
816 return 1;
817
818 r = sd_netlink_message_get_errno(m);
819 if (r < 0 && r != -ESRCH)
820 log_link_warning_errno(link, r, "Could not drop route: %m");
821
822 return 1;
823 }
824
825 static int address_handler(sd_netlink *rtnl, sd_netlink_message *m, void *userdata) {
826 _cleanup_link_unref_ Link *link = userdata;
827 int r;
828
829 assert(rtnl);
830 assert(m);
831 assert(link);
832 assert(link->ifname);
833 assert(link->link_messages > 0);
834 assert(IN_SET(link->state, LINK_STATE_SETTING_ADDRESSES,
835 LINK_STATE_FAILED, LINK_STATE_LINGER));
836
837 link->link_messages--;
838
839 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
840 return 1;
841
842 r = sd_netlink_message_get_errno(m);
843 if (r < 0 && r != -EEXIST)
844 log_link_warning_errno(link, r, "could not set address: %m");
845 else if (r >= 0)
846 manager_rtnl_process_address(rtnl, m, link->manager);
847
848 if (link->link_messages == 0) {
849 log_link_debug(link, "Addresses set");
850 link_enter_set_routes(link);
851 }
852
853 return 1;
854 }
855
856 static int address_label_handler(sd_netlink *rtnl, sd_netlink_message *m, void *userdata) {
857 _cleanup_link_unref_ Link *link = userdata;
858 int r;
859
860 assert(rtnl);
861 assert(m);
862 assert(link);
863 assert(link->ifname);
864 assert(link->link_messages > 0);
865
866 link->link_messages--;
867
868 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
869 return 1;
870
871 r = sd_netlink_message_get_errno(m);
872 if (r < 0 && r != -EEXIST)
873 log_link_warning_errno(link, r, "could not set address label: %m");
874 else if (r >= 0)
875 manager_rtnl_process_address(rtnl, m, link->manager);
876
877 if (link->link_messages == 0) {
878 log_link_debug(link, "Addresses label set");
879 link_enter_set_routes(link);
880 }
881
882 return 1;
883 }
884
885 static int link_push_uplink_dns_to_dhcp_server(Link *link, sd_dhcp_server *s) {
886 _cleanup_free_ struct in_addr *addresses = NULL;
887 size_t n_addresses = 0, n_allocated = 0;
888 unsigned i;
889
890 log_debug("Copying DNS server information from %s", link->ifname);
891
892 if (!link->network)
893 return 0;
894
895 for (i = 0; i < link->network->n_dns; i++) {
896 struct in_addr ia;
897
898 /* Only look for IPv4 addresses */
899 if (link->network->dns[i].family != AF_INET)
900 continue;
901
902 ia = link->network->dns[i].address.in;
903
904 /* Never propagate obviously borked data */
905 if (in4_addr_is_null(&ia) || in4_addr_is_localhost(&ia))
906 continue;
907
908 if (!GREEDY_REALLOC(addresses, n_allocated, n_addresses + 1))
909 return log_oom();
910
911 addresses[n_addresses++] = ia;
912 }
913
914 if (link->network->dhcp_use_dns && link->dhcp_lease) {
915 const struct in_addr *da = NULL;
916 int n;
917
918 n = sd_dhcp_lease_get_dns(link->dhcp_lease, &da);
919 if (n > 0) {
920
921 if (!GREEDY_REALLOC(addresses, n_allocated, n_addresses + n))
922 return log_oom();
923
924 memcpy(addresses + n_addresses, da, n * sizeof(struct in_addr));
925 n_addresses += n;
926 }
927 }
928
929 if (n_addresses <= 0)
930 return 0;
931
932 return sd_dhcp_server_set_dns(s, addresses, n_addresses);
933 }
934
935 static int link_push_uplink_ntp_to_dhcp_server(Link *link, sd_dhcp_server *s) {
936 _cleanup_free_ struct in_addr *addresses = NULL;
937 size_t n_addresses = 0, n_allocated = 0;
938 char **a;
939
940 if (!link->network)
941 return 0;
942
943 log_debug("Copying NTP server information from %s", link->ifname);
944
945 STRV_FOREACH(a, link->network->ntp) {
946 struct in_addr ia;
947
948 /* Only look for IPv4 addresses */
949 if (inet_pton(AF_INET, *a, &ia) <= 0)
950 continue;
951
952 /* Never propagate obviously borked data */
953 if (in4_addr_is_null(&ia) || in4_addr_is_localhost(&ia))
954 continue;
955
956 if (!GREEDY_REALLOC(addresses, n_allocated, n_addresses + 1))
957 return log_oom();
958
959 addresses[n_addresses++] = ia;
960 }
961
962 if (link->network->dhcp_use_ntp && link->dhcp_lease) {
963 const struct in_addr *da = NULL;
964 int n;
965
966 n = sd_dhcp_lease_get_ntp(link->dhcp_lease, &da);
967 if (n > 0) {
968
969 if (!GREEDY_REALLOC(addresses, n_allocated, n_addresses + n))
970 return log_oom();
971
972 memcpy(addresses + n_addresses, da, n * sizeof(struct in_addr));
973 n_addresses += n;
974 }
975 }
976
977 if (n_addresses <= 0)
978 return 0;
979
980 return sd_dhcp_server_set_ntp(s, addresses, n_addresses);
981 }
982
983 static int link_set_bridge_fdb(Link *link) {
984 FdbEntry *fdb_entry;
985 int r;
986
987 LIST_FOREACH(static_fdb_entries, fdb_entry, link->network->static_fdb_entries) {
988 r = fdb_entry_configure(link, fdb_entry);
989 if (r < 0)
990 return log_link_error_errno(link, r, "Failed to add MAC entry to static MAC table: %m");
991 }
992
993 return 0;
994 }
995
996 static int link_enter_set_addresses(Link *link) {
997 AddressLabel *label;
998 Address *ad;
999 int r;
1000
1001 assert(link);
1002 assert(link->network);
1003 assert(link->state != _LINK_STATE_INVALID);
1004
1005 r = link_set_bridge_fdb(link);
1006 if (r < 0)
1007 return r;
1008
1009 link_set_state(link, LINK_STATE_SETTING_ADDRESSES);
1010
1011 LIST_FOREACH(addresses, ad, link->network->static_addresses) {
1012 r = address_configure(ad, link, address_handler, false);
1013 if (r < 0) {
1014 log_link_warning_errno(link, r, "Could not set addresses: %m");
1015 link_enter_failed(link);
1016 return r;
1017 }
1018
1019 link->link_messages++;
1020 }
1021
1022 LIST_FOREACH(labels, label, link->network->address_labels) {
1023 r = address_label_configure(label, link, address_label_handler, false);
1024 if (r < 0) {
1025 log_link_warning_errno(link, r, "Could not set address label: %m");
1026 link_enter_failed(link);
1027 return r;
1028 }
1029
1030 link->link_messages++;
1031 }
1032
1033 /* now that we can figure out a default address for the dhcp server,
1034 start it */
1035 if (link_dhcp4_server_enabled(link)) {
1036 Address *address;
1037 Link *uplink = NULL;
1038 bool acquired_uplink = false;
1039
1040 address = link_find_dhcp_server_address(link);
1041 if (!address) {
1042 log_link_warning(link, "Failed to find suitable address for DHCPv4 server instance.");
1043 link_enter_failed(link);
1044 return 0;
1045 }
1046
1047 /* use the server address' subnet as the pool */
1048 r = sd_dhcp_server_configure_pool(link->dhcp_server, &address->in_addr.in, address->prefixlen,
1049 link->network->dhcp_server_pool_offset, link->network->dhcp_server_pool_size);
1050 if (r < 0)
1051 return r;
1052
1053 /* TODO:
1054 r = sd_dhcp_server_set_router(link->dhcp_server,
1055 &main_address->in_addr.in);
1056 if (r < 0)
1057 return r;
1058 */
1059
1060 if (link->network->dhcp_server_max_lease_time_usec > 0) {
1061 r = sd_dhcp_server_set_max_lease_time(
1062 link->dhcp_server,
1063 DIV_ROUND_UP(link->network->dhcp_server_max_lease_time_usec, USEC_PER_SEC));
1064 if (r < 0)
1065 return r;
1066 }
1067
1068 if (link->network->dhcp_server_default_lease_time_usec > 0) {
1069 r = sd_dhcp_server_set_default_lease_time(
1070 link->dhcp_server,
1071 DIV_ROUND_UP(link->network->dhcp_server_default_lease_time_usec, USEC_PER_SEC));
1072 if (r < 0)
1073 return r;
1074 }
1075
1076 if (link->network->dhcp_server_emit_dns) {
1077
1078 if (link->network->n_dhcp_server_dns > 0)
1079 r = sd_dhcp_server_set_dns(link->dhcp_server, link->network->dhcp_server_dns, link->network->n_dhcp_server_dns);
1080 else {
1081 uplink = manager_find_uplink(link->manager, link);
1082 acquired_uplink = true;
1083
1084 if (!uplink) {
1085 log_link_debug(link, "Not emitting DNS server information on link, couldn't find suitable uplink.");
1086 r = 0;
1087 } else
1088 r = link_push_uplink_dns_to_dhcp_server(uplink, link->dhcp_server);
1089 }
1090 if (r < 0)
1091 log_link_warning_errno(link, r, "Failed to set DNS server for DHCP server, ignoring: %m");
1092 }
1093
1094
1095 if (link->network->dhcp_server_emit_ntp) {
1096
1097 if (link->network->n_dhcp_server_ntp > 0)
1098 r = sd_dhcp_server_set_ntp(link->dhcp_server, link->network->dhcp_server_ntp, link->network->n_dhcp_server_ntp);
1099 else {
1100 if (!acquired_uplink)
1101 uplink = manager_find_uplink(link->manager, link);
1102
1103 if (!uplink) {
1104 log_link_debug(link, "Not emitting NTP server information on link, couldn't find suitable uplink.");
1105 r = 0;
1106 } else
1107 r = link_push_uplink_ntp_to_dhcp_server(uplink, link->dhcp_server);
1108
1109 }
1110 if (r < 0)
1111 log_link_warning_errno(link, r, "Failed to set NTP server for DHCP server, ignoring: %m");
1112 }
1113
1114 r = sd_dhcp_server_set_emit_router(link->dhcp_server, link->network->dhcp_server_emit_router);
1115 if (r < 0) {
1116 log_link_warning_errno(link, r, "Failed to set router emission for DHCP server: %m");
1117 return r;
1118 }
1119
1120 if (link->network->dhcp_server_emit_timezone) {
1121 _cleanup_free_ char *buffer = NULL;
1122 const char *tz = NULL;
1123
1124 if (link->network->dhcp_server_timezone)
1125 tz = link->network->dhcp_server_timezone;
1126 else {
1127 r = get_timezone(&buffer);
1128 if (r < 0)
1129 log_warning_errno(r, "Failed to determine timezone: %m");
1130 else
1131 tz = buffer;
1132 }
1133
1134 if (tz) {
1135 r = sd_dhcp_server_set_timezone(link->dhcp_server, tz);
1136 if (r < 0)
1137 return r;
1138 }
1139 }
1140
1141 r = sd_dhcp_server_start(link->dhcp_server);
1142 if (r < 0) {
1143 log_link_warning_errno(link, r, "Could not start DHCPv4 server instance: %m");
1144
1145 link_enter_failed(link);
1146
1147 return 0;
1148 }
1149
1150 log_link_debug(link, "Offering DHCPv4 leases");
1151 }
1152
1153 if (link->link_messages == 0)
1154 link_enter_set_routes(link);
1155 else
1156 log_link_debug(link, "Setting addresses");
1157
1158 return 0;
1159 }
1160
1161 int link_address_remove_handler(sd_netlink *rtnl, sd_netlink_message *m, void *userdata) {
1162 _cleanup_link_unref_ Link *link = userdata;
1163 int r;
1164
1165 assert(m);
1166 assert(link);
1167 assert(link->ifname);
1168
1169 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1170 return 1;
1171
1172 r = sd_netlink_message_get_errno(m);
1173 if (r < 0 && r != -EADDRNOTAVAIL)
1174 log_link_warning_errno(link, r, "Could not drop address: %m");
1175
1176 return 1;
1177 }
1178
1179 static int link_set_bridge_vlan(Link *link) {
1180 int r = 0;
1181
1182 r = br_vlan_configure(link, link->network->pvid, link->network->br_vid_bitmap, link->network->br_untagged_bitmap);
1183 if (r < 0)
1184 log_link_error_errno(link, r, "Failed to assign VLANs to bridge port: %m");
1185
1186 return r;
1187 }
1188
1189 static int link_set_proxy_arp(Link *link) {
1190 const char *p = NULL;
1191 int r;
1192
1193 if (!link_proxy_arp_enabled(link))
1194 return 0;
1195
1196 p = strjoina("/proc/sys/net/ipv4/conf/", link->ifname, "/proxy_arp");
1197
1198 r = write_string_file(p, one_zero(link->network->proxy_arp), WRITE_STRING_FILE_VERIFY_ON_FAILURE);
1199 if (r < 0)
1200 log_link_warning_errno(link, r, "Cannot configure proxy ARP for interface: %m");
1201
1202 return 0;
1203 }
1204
1205 static int link_set_handler(sd_netlink *rtnl, sd_netlink_message *m, void *userdata) {
1206 _cleanup_link_unref_ Link *link = userdata;
1207 int r;
1208
1209 log_link_debug(link, "Set link");
1210
1211 r = sd_netlink_message_get_errno(m);
1212 if (r < 0 && r != -EEXIST) {
1213 log_link_error_errno(link, r, "Could not join netdev: %m");
1214 link_enter_failed(link);
1215 return 1;
1216 }
1217
1218 return 0;
1219 }
1220
1221 static int set_mtu_handler(sd_netlink *rtnl, sd_netlink_message *m, void *userdata) {
1222 _cleanup_link_unref_ Link *link = userdata;
1223 int r;
1224
1225 assert(m);
1226 assert(link);
1227 assert(link->ifname);
1228
1229 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1230 return 1;
1231
1232 r = sd_netlink_message_get_errno(m);
1233 if (r < 0)
1234 log_link_warning_errno(link, r, "Could not set MTU: %m");
1235
1236 return 1;
1237 }
1238
1239 int link_set_mtu(Link *link, uint32_t mtu) {
1240 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1241 int r;
1242
1243 assert(link);
1244 assert(link->manager);
1245 assert(link->manager->rtnl);
1246
1247 log_link_debug(link, "Setting MTU: %" PRIu32, mtu);
1248
1249 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1250 if (r < 0)
1251 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1252
1253 r = sd_netlink_message_append_u32(req, IFLA_MTU, mtu);
1254 if (r < 0)
1255 return log_link_error_errno(link, r, "Could not append MTU: %m");
1256
1257 r = sd_netlink_call_async(link->manager->rtnl, req, set_mtu_handler, link, 0, NULL);
1258 if (r < 0)
1259 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1260
1261 link_ref(link);
1262
1263 return 0;
1264 }
1265
1266 static int set_flags_handler(sd_netlink *rtnl, sd_netlink_message *m, void *userdata) {
1267 _cleanup_link_unref_ Link *link = userdata;
1268 int r;
1269
1270 assert(m);
1271 assert(link);
1272 assert(link->ifname);
1273
1274 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1275 return 1;
1276
1277 r = sd_netlink_message_get_errno(m);
1278 if (r < 0)
1279 log_link_warning_errno(link, r, "Could not set link flags: %m");
1280
1281 return 1;
1282 }
1283
1284 static int link_set_flags(Link *link) {
1285 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1286 unsigned ifi_change = 0;
1287 unsigned ifi_flags = 0;
1288 int r;
1289
1290 assert(link);
1291 assert(link->manager);
1292 assert(link->manager->rtnl);
1293
1294 if (link->flags & IFF_LOOPBACK)
1295 return 0;
1296
1297 if (!link->network)
1298 return 0;
1299
1300 if (link->network->arp < 0)
1301 return 0;
1302
1303 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1304 if (r < 0)
1305 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1306
1307 if (link->network->arp >= 0) {
1308 ifi_change |= IFF_NOARP;
1309 ifi_flags |= link->network->arp ? 0 : IFF_NOARP;
1310 }
1311
1312 r = sd_rtnl_message_link_set_flags(req, ifi_flags, ifi_change);
1313 if (r < 0)
1314 return log_link_error_errno(link, r, "Could not set link flags: %m");
1315
1316 r = sd_netlink_call_async(link->manager->rtnl, req, set_flags_handler, link, 0, NULL);
1317 if (r < 0)
1318 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1319
1320 link_ref(link);
1321
1322 return 0;
1323 }
1324
1325 static int link_set_bridge(Link *link) {
1326 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1327 int r;
1328
1329 assert(link);
1330 assert(link->network);
1331
1332 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1333 if (r < 0)
1334 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1335
1336 r = sd_rtnl_message_link_set_family(req, PF_BRIDGE);
1337 if (r < 0)
1338 return log_link_error_errno(link, r, "Could not set message family: %m");
1339
1340 r = sd_netlink_message_open_container(req, IFLA_PROTINFO);
1341 if (r < 0)
1342 return log_link_error_errno(link, r, "Could not append IFLA_PROTINFO attribute: %m");
1343
1344 r = sd_netlink_message_append_u8(req, IFLA_BRPORT_GUARD, !link->network->use_bpdu);
1345 if (r < 0)
1346 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_GUARD attribute: %m");
1347
1348 r = sd_netlink_message_append_u8(req, IFLA_BRPORT_MODE, link->network->hairpin);
1349 if (r < 0)
1350 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_MODE attribute: %m");
1351
1352 r = sd_netlink_message_append_u8(req, IFLA_BRPORT_FAST_LEAVE, link->network->fast_leave);
1353 if (r < 0)
1354 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_FAST_LEAVE attribute: %m");
1355
1356 r = sd_netlink_message_append_u8(req, IFLA_BRPORT_PROTECT, !link->network->allow_port_to_be_root);
1357 if (r < 0)
1358 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_PROTECT attribute: %m");
1359
1360 r = sd_netlink_message_append_u8(req, IFLA_BRPORT_UNICAST_FLOOD, link->network->unicast_flood);
1361 if (r < 0)
1362 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_UNICAST_FLOOD attribute: %m");
1363
1364 if (link->network->cost != 0) {
1365 r = sd_netlink_message_append_u32(req, IFLA_BRPORT_COST, link->network->cost);
1366 if (r < 0)
1367 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_COST attribute: %m");
1368 }
1369 if (link->network->priority != LINK_BRIDGE_PORT_PRIORITY_INVALID) {
1370 r = sd_netlink_message_append_u16(req, IFLA_BRPORT_PRIORITY, link->network->priority);
1371 if (r < 0)
1372 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_PRIORITY attribute: %m");
1373 }
1374
1375 r = sd_netlink_message_close_container(req);
1376 if (r < 0)
1377 return log_link_error_errno(link, r, "Could not append IFLA_LINKINFO attribute: %m");
1378
1379 r = sd_netlink_call_async(link->manager->rtnl, req, link_set_handler, link, 0, NULL);
1380 if (r < 0)
1381 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1382
1383 link_ref(link);
1384
1385 return r;
1386 }
1387
1388 static int link_bond_set(Link *link) {
1389 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1390 int r;
1391
1392 assert(link);
1393 assert(link->network);
1394
1395 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_NEWLINK, link->network->bond->ifindex);
1396 if (r < 0)
1397 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1398
1399 r = sd_netlink_message_set_flags(req, NLM_F_REQUEST | NLM_F_ACK);
1400 if (r < 0)
1401 return log_link_error_errno(link, r, "Could not set netlink flags: %m");
1402
1403 r = sd_netlink_message_open_container(req, IFLA_LINKINFO);
1404 if (r < 0)
1405 return log_link_error_errno(link, r, "Could not append IFLA_PROTINFO attribute: %m");
1406
1407 r = sd_netlink_message_open_container_union(req, IFLA_INFO_DATA, "bond");
1408 if (r < 0)
1409 return log_link_error_errno(link, r, "Could not append IFLA_INFO_DATA attribute: %m");
1410
1411 if (link->network->active_slave) {
1412 r = sd_netlink_message_append_u32(req, IFLA_BOND_ACTIVE_SLAVE, link->ifindex);
1413 if (r < 0)
1414 return log_link_error_errno(link, r, "Could not append IFLA_BOND_ACTIVE_SLAVE attribute: %m");
1415 }
1416
1417 if (link->network->primary_slave) {
1418 r = sd_netlink_message_append_u32(req, IFLA_BOND_PRIMARY, link->ifindex);
1419 if (r < 0)
1420 return log_link_error_errno(link, r, "Could not append IFLA_BOND_PRIMARY attribute: %m");
1421 }
1422
1423 r = sd_netlink_message_close_container(req);
1424 if (r < 0)
1425 return log_link_error_errno(link, r, "Could not append IFLA_LINKINFO attribute: %m");
1426
1427 r = sd_netlink_message_close_container(req);
1428 if (r < 0)
1429 return log_link_error_errno(link, r, "Could not append IFLA_INFO_DATA attribute: %m");
1430
1431 r = sd_netlink_call_async(link->manager->rtnl, req, set_flags_handler, link, 0, NULL);
1432 if (r < 0)
1433 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1434
1435 link_ref(link);
1436
1437 return r;
1438 }
1439
1440 static int link_lldp_save(Link *link) {
1441 _cleanup_free_ char *temp_path = NULL;
1442 _cleanup_fclose_ FILE *f = NULL;
1443 sd_lldp_neighbor **l = NULL;
1444 int n = 0, r, i;
1445
1446 assert(link);
1447 assert(link->lldp_file);
1448
1449 if (!link->lldp) {
1450 (void) unlink(link->lldp_file);
1451 return 0;
1452 }
1453
1454 r = sd_lldp_get_neighbors(link->lldp, &l);
1455 if (r < 0)
1456 goto finish;
1457 if (r == 0) {
1458 (void) unlink(link->lldp_file);
1459 goto finish;
1460 }
1461
1462 n = r;
1463
1464 r = fopen_temporary(link->lldp_file, &f, &temp_path);
1465 if (r < 0)
1466 goto finish;
1467
1468 fchmod(fileno(f), 0644);
1469
1470 for (i = 0; i < n; i++) {
1471 const void *p;
1472 le64_t u;
1473 size_t sz;
1474
1475 r = sd_lldp_neighbor_get_raw(l[i], &p, &sz);
1476 if (r < 0)
1477 goto finish;
1478
1479 u = htole64(sz);
1480 (void) fwrite(&u, 1, sizeof(u), f);
1481 (void) fwrite(p, 1, sz, f);
1482 }
1483
1484 r = fflush_and_check(f);
1485 if (r < 0)
1486 goto finish;
1487
1488 if (rename(temp_path, link->lldp_file) < 0) {
1489 r = -errno;
1490 goto finish;
1491 }
1492
1493 finish:
1494 if (r < 0) {
1495 (void) unlink(link->lldp_file);
1496 if (temp_path)
1497 (void) unlink(temp_path);
1498
1499 log_link_error_errno(link, r, "Failed to save LLDP data to %s: %m", link->lldp_file);
1500 }
1501
1502 if (l) {
1503 for (i = 0; i < n; i++)
1504 sd_lldp_neighbor_unref(l[i]);
1505 free(l);
1506 }
1507
1508 return r;
1509 }
1510
1511 static void lldp_handler(sd_lldp *lldp, sd_lldp_event event, sd_lldp_neighbor *n, void *userdata) {
1512 Link *link = userdata;
1513 int r;
1514
1515 assert(link);
1516
1517 (void) link_lldp_save(link);
1518
1519 if (link_lldp_emit_enabled(link) && event == SD_LLDP_EVENT_ADDED) {
1520 /* If we received information about a new neighbor, restart the LLDP "fast" logic */
1521
1522 log_link_debug(link, "Received LLDP datagram from previously unknown neighbor, restarting 'fast' LLDP transmission.");
1523
1524 r = link_lldp_emit_start(link);
1525 if (r < 0)
1526 log_link_warning_errno(link, r, "Failed to restart LLDP transmission: %m");
1527 }
1528 }
1529
1530 static int link_acquire_ipv6_conf(Link *link) {
1531 int r;
1532
1533 assert(link);
1534
1535 if (link_dhcp6_enabled(link)) {
1536 assert(link->dhcp6_client);
1537 assert(in_addr_is_link_local(AF_INET6, (const union in_addr_union*)&link->ipv6ll_address) > 0);
1538
1539 /* start DHCPv6 client in stateless mode */
1540 r = dhcp6_request_address(link, true);
1541 if (r < 0 && r != -EBUSY)
1542 return log_link_warning_errno(link, r, "Could not acquire DHCPv6 lease: %m");
1543 else
1544 log_link_debug(link, "Acquiring DHCPv6 lease");
1545 }
1546
1547 if (link_ipv6_accept_ra_enabled(link)) {
1548 assert(link->ndisc);
1549
1550 log_link_debug(link, "Discovering IPv6 routers");
1551
1552 r = sd_ndisc_start(link->ndisc);
1553 if (r < 0 && r != -EBUSY)
1554 return log_link_warning_errno(link, r, "Could not start IPv6 Router Discovery: %m");
1555 }
1556
1557 return 0;
1558 }
1559
1560 static int link_acquire_ipv4_conf(Link *link) {
1561 int r;
1562
1563 assert(link);
1564 assert(link->network);
1565 assert(link->manager);
1566 assert(link->manager->event);
1567
1568 if (link_ipv4ll_enabled(link)) {
1569 assert(link->ipv4ll);
1570
1571 log_link_debug(link, "Acquiring IPv4 link-local address");
1572
1573 r = sd_ipv4ll_start(link->ipv4ll);
1574 if (r < 0)
1575 return log_link_warning_errno(link, r, "Could not acquire IPv4 link-local address: %m");
1576 }
1577
1578 if (link_dhcp4_enabled(link)) {
1579 assert(link->dhcp_client);
1580
1581 log_link_debug(link, "Acquiring DHCPv4 lease");
1582
1583 r = sd_dhcp_client_start(link->dhcp_client);
1584 if (r < 0)
1585 return log_link_warning_errno(link, r, "Could not acquire DHCPv4 lease: %m");
1586 }
1587
1588 return 0;
1589 }
1590
1591 static int link_acquire_conf(Link *link) {
1592 int r;
1593
1594 assert(link);
1595
1596 r = link_acquire_ipv4_conf(link);
1597 if (r < 0)
1598 return r;
1599
1600 if (in_addr_is_null(AF_INET6, (const union in_addr_union*) &link->ipv6ll_address) == 0) {
1601 r = link_acquire_ipv6_conf(link);
1602 if (r < 0)
1603 return r;
1604 }
1605
1606 if (link_lldp_emit_enabled(link)) {
1607 r = link_lldp_emit_start(link);
1608 if (r < 0)
1609 return log_link_warning_errno(link, r, "Failed to start LLDP transmission: %m");
1610 }
1611
1612 return 0;
1613 }
1614
1615 bool link_has_carrier(Link *link) {
1616 /* see Documentation/networking/operstates.txt in the kernel sources */
1617
1618 if (link->kernel_operstate == IF_OPER_UP)
1619 return true;
1620
1621 if (link->kernel_operstate == IF_OPER_UNKNOWN)
1622 /* operstate may not be implemented, so fall back to flags */
1623 if ((link->flags & IFF_LOWER_UP) && !(link->flags & IFF_DORMANT))
1624 return true;
1625
1626 return false;
1627 }
1628
1629 static int link_up_handler(sd_netlink *rtnl, sd_netlink_message *m, void *userdata) {
1630 _cleanup_link_unref_ Link *link = userdata;
1631 int r;
1632
1633 assert(link);
1634
1635 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1636 return 1;
1637
1638 r = sd_netlink_message_get_errno(m);
1639 if (r < 0)
1640 /* we warn but don't fail the link, as it may be
1641 brought up later */
1642 log_link_warning_errno(link, r, "Could not bring up interface: %m");
1643
1644 return 1;
1645 }
1646
1647 int link_up(Link *link) {
1648 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1649 uint8_t ipv6ll_mode;
1650 int r;
1651
1652 assert(link);
1653 assert(link->network);
1654 assert(link->manager);
1655 assert(link->manager->rtnl);
1656
1657 log_link_debug(link, "Bringing link up");
1658
1659 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1660 if (r < 0)
1661 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1662
1663 /* set it free if not enslaved with networkd */
1664 if (!link->network->bridge && !link->network->bond && !link->network->vrf) {
1665 r = sd_netlink_message_append_u32(req, IFLA_MASTER, 0);
1666 if (r < 0)
1667 return log_link_error_errno(link, r, "Could not append IFLA_MASTER attribute: %m");
1668 }
1669
1670 r = sd_rtnl_message_link_set_flags(req, IFF_UP, IFF_UP);
1671 if (r < 0)
1672 return log_link_error_errno(link, r, "Could not set link flags: %m");
1673
1674 if (link->network->mac) {
1675 r = sd_netlink_message_append_ether_addr(req, IFLA_ADDRESS, link->network->mac);
1676 if (r < 0)
1677 return log_link_error_errno(link, r, "Could not set MAC address: %m");
1678 }
1679
1680 /* If IPv6 not configured (no static IPv6 address and IPv6LL autoconfiguration is disabled)
1681 for this interface, or if it is a bridge slave, then disable IPv6 else enable it. */
1682 (void) link_enable_ipv6(link);
1683
1684 if (link->network->mtu) {
1685 /* IPv6 protocol requires a minimum MTU of IPV6_MTU_MIN(1280) bytes
1686 on the interface. Bump up MTU bytes to IPV6_MTU_MIN. */
1687 if (link_ipv6_enabled(link) && link->network->mtu < IPV6_MIN_MTU) {
1688
1689 log_link_warning(link, "Bumping MTU to " STRINGIFY(IPV6_MIN_MTU) ", as "
1690 "IPv6 is requested and requires a minimum MTU of " STRINGIFY(IPV6_MIN_MTU) " bytes: %m");
1691
1692 link->network->mtu = IPV6_MIN_MTU;
1693 }
1694
1695 r = sd_netlink_message_append_u32(req, IFLA_MTU, link->network->mtu);
1696 if (r < 0)
1697 return log_link_error_errno(link, r, "Could not set MTU: %m");
1698 }
1699
1700 r = sd_netlink_message_open_container(req, IFLA_AF_SPEC);
1701 if (r < 0)
1702 return log_link_error_errno(link, r, "Could not open IFLA_AF_SPEC container: %m");
1703
1704 if (link_ipv6_enabled(link)) {
1705 /* if the kernel lacks ipv6 support setting IFF_UP fails if any ipv6 options are passed */
1706 r = sd_netlink_message_open_container(req, AF_INET6);
1707 if (r < 0)
1708 return log_link_error_errno(link, r, "Could not open AF_INET6 container: %m");
1709
1710 if (!link_ipv6ll_enabled(link))
1711 ipv6ll_mode = IN6_ADDR_GEN_MODE_NONE;
1712 else {
1713 const char *p = NULL;
1714 _cleanup_free_ char *stable_secret = NULL;
1715
1716 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/stable_secret");
1717 r = read_one_line_file(p, &stable_secret);
1718
1719 if (r < 0)
1720 ipv6ll_mode = IN6_ADDR_GEN_MODE_EUI64;
1721 else
1722 ipv6ll_mode = IN6_ADDR_GEN_MODE_STABLE_PRIVACY;
1723 }
1724 r = sd_netlink_message_append_u8(req, IFLA_INET6_ADDR_GEN_MODE, ipv6ll_mode);
1725 if (r < 0)
1726 return log_link_error_errno(link, r, "Could not append IFLA_INET6_ADDR_GEN_MODE: %m");
1727
1728 if (!in_addr_is_null(AF_INET6, &link->network->ipv6_token)) {
1729 r = sd_netlink_message_append_in6_addr(req, IFLA_INET6_TOKEN, &link->network->ipv6_token.in6);
1730 if (r < 0)
1731 return log_link_error_errno(link, r, "Could not append IFLA_INET6_TOKEN: %m");
1732 }
1733
1734 r = sd_netlink_message_close_container(req);
1735 if (r < 0)
1736 return log_link_error_errno(link, r, "Could not close AF_INET6 container: %m");
1737 }
1738
1739 r = sd_netlink_message_close_container(req);
1740 if (r < 0)
1741 return log_link_error_errno(link, r, "Could not close IFLA_AF_SPEC container: %m");
1742
1743 r = sd_netlink_call_async(link->manager->rtnl, req, link_up_handler, link, 0, NULL);
1744 if (r < 0)
1745 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1746
1747 link_ref(link);
1748
1749 return 0;
1750 }
1751
1752 static int link_down_handler(sd_netlink *rtnl, sd_netlink_message *m, void *userdata) {
1753 _cleanup_link_unref_ Link *link = userdata;
1754 int r;
1755
1756 assert(link);
1757
1758 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1759 return 1;
1760
1761 r = sd_netlink_message_get_errno(m);
1762 if (r < 0)
1763 log_link_warning_errno(link, r, "Could not bring down interface: %m");
1764
1765 return 1;
1766 }
1767
1768 int link_down(Link *link) {
1769 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1770 int r;
1771
1772 assert(link);
1773 assert(link->manager);
1774 assert(link->manager->rtnl);
1775
1776 log_link_debug(link, "Bringing link down");
1777
1778 r = sd_rtnl_message_new_link(link->manager->rtnl, &req,
1779 RTM_SETLINK, link->ifindex);
1780 if (r < 0)
1781 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1782
1783 r = sd_rtnl_message_link_set_flags(req, 0, IFF_UP);
1784 if (r < 0)
1785 return log_link_error_errno(link, r, "Could not set link flags: %m");
1786
1787 r = sd_netlink_call_async(link->manager->rtnl, req, link_down_handler, link, 0, NULL);
1788 if (r < 0)
1789 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1790
1791 link_ref(link);
1792
1793 return 0;
1794 }
1795
1796 static int link_up_can(Link *link) {
1797 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1798 int r;
1799
1800 assert(link);
1801
1802 log_link_debug(link, "Bringing CAN link up");
1803
1804 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1805 if (r < 0)
1806 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1807
1808 r = sd_rtnl_message_link_set_flags(req, IFF_UP, IFF_UP);
1809 if (r < 0)
1810 return log_link_error_errno(link, r, "Could not set link flags: %m");
1811
1812 r = sd_netlink_call_async(link->manager->rtnl, req, link_up_handler, link, 0, NULL);
1813 if (r < 0)
1814 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1815
1816 link_ref(link);
1817
1818 return 0;
1819 }
1820
1821 static int link_handle_bound_to_list(Link *link) {
1822 Link *l;
1823 Iterator i;
1824 int r;
1825 bool required_up = false;
1826 bool link_is_up = false;
1827
1828 assert(link);
1829
1830 if (hashmap_isempty(link->bound_to_links))
1831 return 0;
1832
1833 if (link->flags & IFF_UP)
1834 link_is_up = true;
1835
1836 HASHMAP_FOREACH (l, link->bound_to_links, i)
1837 if (link_has_carrier(l)) {
1838 required_up = true;
1839 break;
1840 }
1841
1842 if (!required_up && link_is_up) {
1843 r = link_down(link);
1844 if (r < 0)
1845 return r;
1846 } else if (required_up && !link_is_up) {
1847 r = link_up(link);
1848 if (r < 0)
1849 return r;
1850 }
1851
1852 return 0;
1853 }
1854
1855 static int link_handle_bound_by_list(Link *link) {
1856 Iterator i;
1857 Link *l;
1858 int r;
1859
1860 assert(link);
1861
1862 if (hashmap_isempty(link->bound_by_links))
1863 return 0;
1864
1865 HASHMAP_FOREACH (l, link->bound_by_links, i) {
1866 r = link_handle_bound_to_list(l);
1867 if (r < 0)
1868 return r;
1869 }
1870
1871 return 0;
1872 }
1873
1874 static int link_put_carrier(Link *link, Link *carrier, Hashmap **h) {
1875 int r;
1876
1877 assert(link);
1878 assert(carrier);
1879
1880 if (link == carrier)
1881 return 0;
1882
1883 if (hashmap_get(*h, INT_TO_PTR(carrier->ifindex)))
1884 return 0;
1885
1886 r = hashmap_ensure_allocated(h, NULL);
1887 if (r < 0)
1888 return r;
1889
1890 r = hashmap_put(*h, INT_TO_PTR(carrier->ifindex), carrier);
1891 if (r < 0)
1892 return r;
1893
1894 return 0;
1895 }
1896
1897 static int link_new_bound_by_list(Link *link) {
1898 Manager *m;
1899 Link *carrier;
1900 Iterator i;
1901 int r;
1902 bool list_updated = false;
1903
1904 assert(link);
1905 assert(link->manager);
1906
1907 m = link->manager;
1908
1909 HASHMAP_FOREACH(carrier, m->links, i) {
1910 if (!carrier->network)
1911 continue;
1912
1913 if (strv_isempty(carrier->network->bind_carrier))
1914 continue;
1915
1916 if (strv_fnmatch(carrier->network->bind_carrier, link->ifname, 0)) {
1917 r = link_put_carrier(link, carrier, &link->bound_by_links);
1918 if (r < 0)
1919 return r;
1920
1921 list_updated = true;
1922 }
1923 }
1924
1925 if (list_updated)
1926 link_dirty(link);
1927
1928 HASHMAP_FOREACH(carrier, link->bound_by_links, i) {
1929 r = link_put_carrier(carrier, link, &carrier->bound_to_links);
1930 if (r < 0)
1931 return r;
1932
1933 link_dirty(carrier);
1934 }
1935
1936 return 0;
1937 }
1938
1939 static int link_new_bound_to_list(Link *link) {
1940 Manager *m;
1941 Link *carrier;
1942 Iterator i;
1943 int r;
1944 bool list_updated = false;
1945
1946 assert(link);
1947 assert(link->manager);
1948
1949 if (!link->network)
1950 return 0;
1951
1952 if (strv_isempty(link->network->bind_carrier))
1953 return 0;
1954
1955 m = link->manager;
1956
1957 HASHMAP_FOREACH (carrier, m->links, i) {
1958 if (strv_fnmatch(link->network->bind_carrier, carrier->ifname, 0)) {
1959 r = link_put_carrier(link, carrier, &link->bound_to_links);
1960 if (r < 0)
1961 return r;
1962
1963 list_updated = true;
1964 }
1965 }
1966
1967 if (list_updated)
1968 link_dirty(link);
1969
1970 HASHMAP_FOREACH (carrier, link->bound_to_links, i) {
1971 r = link_put_carrier(carrier, link, &carrier->bound_by_links);
1972 if (r < 0)
1973 return r;
1974
1975 link_dirty(carrier);
1976 }
1977
1978 return 0;
1979 }
1980
1981 static int link_new_carrier_maps(Link *link) {
1982 int r;
1983
1984 r = link_new_bound_by_list(link);
1985 if (r < 0)
1986 return r;
1987
1988 r = link_handle_bound_by_list(link);
1989 if (r < 0)
1990 return r;
1991
1992 r = link_new_bound_to_list(link);
1993 if (r < 0)
1994 return r;
1995
1996 r = link_handle_bound_to_list(link);
1997 if (r < 0)
1998 return r;
1999
2000 return 0;
2001 }
2002
2003 static void link_free_bound_to_list(Link *link) {
2004 Link *bound_to;
2005 Iterator i;
2006
2007 HASHMAP_FOREACH (bound_to, link->bound_to_links, i) {
2008 hashmap_remove(link->bound_to_links, INT_TO_PTR(bound_to->ifindex));
2009
2010 if (hashmap_remove(bound_to->bound_by_links, INT_TO_PTR(link->ifindex)))
2011 link_dirty(bound_to);
2012 }
2013
2014 return;
2015 }
2016
2017 static void link_free_bound_by_list(Link *link) {
2018 Link *bound_by;
2019 Iterator i;
2020
2021 HASHMAP_FOREACH (bound_by, link->bound_by_links, i) {
2022 hashmap_remove(link->bound_by_links, INT_TO_PTR(bound_by->ifindex));
2023
2024 if (hashmap_remove(bound_by->bound_to_links, INT_TO_PTR(link->ifindex))) {
2025 link_dirty(bound_by);
2026 link_handle_bound_to_list(bound_by);
2027 }
2028 }
2029
2030 return;
2031 }
2032
2033 static void link_free_carrier_maps(Link *link) {
2034 bool list_updated = false;
2035
2036 assert(link);
2037
2038 if (!hashmap_isempty(link->bound_to_links)) {
2039 link_free_bound_to_list(link);
2040 list_updated = true;
2041 }
2042
2043 if (!hashmap_isempty(link->bound_by_links)) {
2044 link_free_bound_by_list(link);
2045 list_updated = true;
2046 }
2047
2048 if (list_updated)
2049 link_dirty(link);
2050
2051 return;
2052 }
2053
2054 void link_drop(Link *link) {
2055 if (!link || link->state == LINK_STATE_LINGER)
2056 return;
2057
2058 link_set_state(link, LINK_STATE_LINGER);
2059
2060 link_free_carrier_maps(link);
2061
2062 log_link_debug(link, "Link removed");
2063
2064 (void)unlink(link->state_file);
2065 link_unref(link);
2066
2067 return;
2068 }
2069
2070 static int link_joined(Link *link) {
2071 int r;
2072
2073 assert(link);
2074 assert(link->network);
2075
2076 if (!hashmap_isempty(link->bound_to_links)) {
2077 r = link_handle_bound_to_list(link);
2078 if (r < 0)
2079 return r;
2080 } else if (!(link->flags & IFF_UP)) {
2081 r = link_up(link);
2082 if (r < 0) {
2083 link_enter_failed(link);
2084 return r;
2085 }
2086 }
2087
2088 if (link->network->bridge) {
2089 r = link_set_bridge(link);
2090 if (r < 0)
2091 log_link_error_errno(link, r, "Could not set bridge message: %m");
2092 }
2093
2094 if (link->network->bond) {
2095 r = link_bond_set(link);
2096 if (r < 0)
2097 log_link_error_errno(link, r, "Could not set bond message: %m");
2098 }
2099
2100 if (link->network->use_br_vlan &&
2101 (link->network->bridge || streq_ptr("bridge", link->kind))) {
2102 r = link_set_bridge_vlan(link);
2103 if (r < 0)
2104 log_link_error_errno(link, r, "Could not set bridge vlan: %m");
2105 }
2106
2107 return link_enter_set_addresses(link);
2108 }
2109
2110 static int netdev_join_handler(sd_netlink *rtnl, sd_netlink_message *m, void *userdata) {
2111 _cleanup_link_unref_ Link *link = userdata;
2112 int r;
2113
2114 assert(link);
2115 assert(link->network);
2116
2117 link->enslaving--;
2118
2119 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
2120 return 1;
2121
2122 r = sd_netlink_message_get_errno(m);
2123 if (r < 0 && r != -EEXIST) {
2124 log_link_error_errno(link, r, "Could not join netdev: %m");
2125 link_enter_failed(link);
2126 return 1;
2127 } else
2128 log_link_debug(link, "Joined netdev");
2129
2130 if (link->enslaving <= 0)
2131 link_joined(link);
2132
2133 return 1;
2134 }
2135
2136 static int link_enter_join_netdev(Link *link) {
2137 NetDev *netdev;
2138 Iterator i;
2139 int r;
2140
2141 assert(link);
2142 assert(link->network);
2143 assert(link->state == LINK_STATE_PENDING);
2144
2145 link_set_state(link, LINK_STATE_ENSLAVING);
2146
2147 link_dirty(link);
2148
2149 if (!link->network->bridge &&
2150 !link->network->bond &&
2151 !link->network->vrf &&
2152 hashmap_isempty(link->network->stacked_netdevs))
2153 return link_joined(link);
2154
2155 if (link->network->bond) {
2156 log_struct(LOG_DEBUG,
2157 LOG_LINK_INTERFACE(link),
2158 LOG_NETDEV_INTERFACE(link->network->bond),
2159 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", link->network->bond->ifname),
2160 NULL);
2161
2162 r = netdev_join(link->network->bond, link, netdev_join_handler);
2163 if (r < 0) {
2164 log_struct_errno(LOG_WARNING, r,
2165 LOG_LINK_INTERFACE(link),
2166 LOG_NETDEV_INTERFACE(link->network->bond),
2167 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", link->network->bond->ifname),
2168 NULL);
2169
2170 link_enter_failed(link);
2171 return r;
2172 }
2173
2174 link->enslaving++;
2175 }
2176
2177 if (link->network->bridge) {
2178 log_struct(LOG_DEBUG,
2179 LOG_LINK_INTERFACE(link),
2180 LOG_NETDEV_INTERFACE(link->network->bridge),
2181 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", link->network->bridge->ifname),
2182 NULL);
2183
2184 r = netdev_join(link->network->bridge, link, netdev_join_handler);
2185 if (r < 0) {
2186 log_struct_errno(LOG_WARNING, r,
2187 LOG_LINK_INTERFACE(link),
2188 LOG_NETDEV_INTERFACE(link->network->bridge),
2189 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", link->network->bridge->ifname),
2190 NULL),
2191 link_enter_failed(link);
2192 return r;
2193 }
2194
2195 link->enslaving++;
2196 }
2197
2198 if (link->network->vrf) {
2199 log_struct(LOG_DEBUG,
2200 LOG_LINK_INTERFACE(link),
2201 LOG_NETDEV_INTERFACE(link->network->vrf),
2202 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", link->network->vrf->ifname),
2203 NULL);
2204 r = netdev_join(link->network->vrf, link, netdev_join_handler);
2205 if (r < 0) {
2206 log_struct_errno(LOG_WARNING, r,
2207 LOG_LINK_INTERFACE(link),
2208 LOG_NETDEV_INTERFACE(link->network->vrf),
2209 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", link->network->vrf->ifname),
2210 NULL);
2211 link_enter_failed(link);
2212 return r;
2213 }
2214
2215 link->enslaving++;
2216 }
2217
2218 HASHMAP_FOREACH(netdev, link->network->stacked_netdevs, i) {
2219
2220 log_struct(LOG_DEBUG,
2221 LOG_LINK_INTERFACE(link),
2222 LOG_NETDEV_INTERFACE(netdev),
2223 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", netdev->ifname),
2224 NULL);
2225
2226 r = netdev_join(netdev, link, netdev_join_handler);
2227 if (r < 0) {
2228 log_struct_errno(LOG_WARNING, r,
2229 LOG_LINK_INTERFACE(link),
2230 LOG_NETDEV_INTERFACE(netdev),
2231 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", netdev->ifname),
2232 NULL);
2233 link_enter_failed(link);
2234 return r;
2235 }
2236
2237 link->enslaving++;
2238 }
2239
2240 return 0;
2241 }
2242
2243 static int link_set_ipv4_forward(Link *link) {
2244 int r;
2245
2246 if (!link_ipv4_forward_enabled(link))
2247 return 0;
2248
2249 /* We propagate the forwarding flag from one interface to the
2250 * global setting one way. This means: as long as at least one
2251 * interface was configured at any time that had IP forwarding
2252 * enabled the setting will stay on for good. We do this
2253 * primarily to keep IPv4 and IPv6 packet forwarding behaviour
2254 * somewhat in sync (see below). */
2255
2256 r = write_string_file("/proc/sys/net/ipv4/ip_forward", "1", WRITE_STRING_FILE_VERIFY_ON_FAILURE);
2257 if (r < 0)
2258 log_link_warning_errno(link, r, "Cannot turn on IPv4 packet forwarding, ignoring: %m");
2259
2260 return 0;
2261 }
2262
2263 static int link_set_ipv6_forward(Link *link) {
2264 int r;
2265
2266 if (!link_ipv6_forward_enabled(link))
2267 return 0;
2268
2269 /* On Linux, the IPv6 stack does not know a per-interface
2270 * packet forwarding setting: either packet forwarding is on
2271 * for all, or off for all. We hence don't bother with a
2272 * per-interface setting, but simply propagate the interface
2273 * flag, if it is set, to the global flag, one-way. Note that
2274 * while IPv4 would allow a per-interface flag, we expose the
2275 * same behaviour there and also propagate the setting from
2276 * one to all, to keep things simple (see above). */
2277
2278 r = write_string_file("/proc/sys/net/ipv6/conf/all/forwarding", "1", WRITE_STRING_FILE_VERIFY_ON_FAILURE);
2279 if (r < 0)
2280 log_link_warning_errno(link, r, "Cannot configure IPv6 packet forwarding, ignoring: %m");
2281
2282 return 0;
2283 }
2284
2285 static int link_set_ipv6_privacy_extensions(Link *link) {
2286 char buf[DECIMAL_STR_MAX(unsigned) + 1];
2287 IPv6PrivacyExtensions s;
2288 const char *p = NULL;
2289 int r;
2290
2291 s = link_ipv6_privacy_extensions(link);
2292 if (s < 0)
2293 return 0;
2294
2295 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/use_tempaddr");
2296 xsprintf(buf, "%u", (unsigned) link->network->ipv6_privacy_extensions);
2297
2298 r = write_string_file(p, buf, WRITE_STRING_FILE_VERIFY_ON_FAILURE);
2299 if (r < 0)
2300 log_link_warning_errno(link, r, "Cannot configure IPv6 privacy extension for interface: %m");
2301
2302 return 0;
2303 }
2304
2305 static int link_set_ipv6_accept_ra(Link *link) {
2306 const char *p = NULL;
2307 int r;
2308
2309 /* Make this a NOP if IPv6 is not available */
2310 if (!socket_ipv6_is_supported())
2311 return 0;
2312
2313 if (link->flags & IFF_LOOPBACK)
2314 return 0;
2315
2316 if (!link->network)
2317 return 0;
2318
2319 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/accept_ra");
2320
2321 /* We handle router advertisements ourselves, tell the kernel to GTFO */
2322 r = write_string_file(p, "0", WRITE_STRING_FILE_VERIFY_ON_FAILURE);
2323 if (r < 0)
2324 log_link_warning_errno(link, r, "Cannot disable kernel IPv6 accept_ra for interface: %m");
2325
2326 return 0;
2327 }
2328
2329 static int link_set_ipv6_dad_transmits(Link *link) {
2330 char buf[DECIMAL_STR_MAX(int) + 1];
2331 const char *p = NULL;
2332 int r;
2333
2334 /* Make this a NOP if IPv6 is not available */
2335 if (!socket_ipv6_is_supported())
2336 return 0;
2337
2338 if (link->flags & IFF_LOOPBACK)
2339 return 0;
2340
2341 if (!link->network)
2342 return 0;
2343
2344 if (link->network->ipv6_dad_transmits < 0)
2345 return 0;
2346
2347 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/dad_transmits");
2348 xsprintf(buf, "%i", link->network->ipv6_dad_transmits);
2349
2350 r = write_string_file(p, buf, WRITE_STRING_FILE_VERIFY_ON_FAILURE);
2351 if (r < 0)
2352 log_link_warning_errno(link, r, "Cannot set IPv6 dad transmits for interface: %m");
2353
2354 return 0;
2355 }
2356
2357 static int link_set_ipv6_hop_limit(Link *link) {
2358 char buf[DECIMAL_STR_MAX(int) + 1];
2359 const char *p = NULL;
2360 int r;
2361
2362 /* Make this a NOP if IPv6 is not available */
2363 if (!socket_ipv6_is_supported())
2364 return 0;
2365
2366 if (link->flags & IFF_LOOPBACK)
2367 return 0;
2368
2369 if (!link->network)
2370 return 0;
2371
2372 if (link->network->ipv6_hop_limit < 0)
2373 return 0;
2374
2375 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/hop_limit");
2376 xsprintf(buf, "%i", link->network->ipv6_hop_limit);
2377
2378 r = write_string_file(p, buf, WRITE_STRING_FILE_VERIFY_ON_FAILURE);
2379 if (r < 0)
2380 log_link_warning_errno(link, r, "Cannot set IPv6 hop limit for interface: %m");
2381
2382 return 0;
2383 }
2384
2385 static int link_drop_foreign_config(Link *link) {
2386 Address *address;
2387 Route *route;
2388 Iterator i;
2389 int r;
2390
2391 SET_FOREACH(address, link->addresses_foreign, i) {
2392 /* we consider IPv6LL addresses to be managed by the kernel */
2393 if (address->family == AF_INET6 && in_addr_is_link_local(AF_INET6, &address->in_addr) == 1)
2394 continue;
2395
2396 r = address_remove(address, link, link_address_remove_handler);
2397 if (r < 0)
2398 return r;
2399 }
2400
2401 SET_FOREACH(route, link->routes_foreign, i) {
2402 /* do not touch routes managed by the kernel */
2403 if (route->protocol == RTPROT_KERNEL)
2404 continue;
2405
2406 r = route_remove(route, link, link_route_remove_handler);
2407 if (r < 0)
2408 return r;
2409 }
2410
2411 return 0;
2412 }
2413
2414 static int link_drop_config(Link *link) {
2415 Address *address;
2416 Route *route;
2417 Iterator i;
2418 int r;
2419
2420 SET_FOREACH(address, link->addresses, i) {
2421 /* we consider IPv6LL addresses to be managed by the kernel */
2422 if (address->family == AF_INET6 && in_addr_is_link_local(AF_INET6, &address->in_addr) == 1)
2423 continue;
2424
2425 r = address_remove(address, link, link_address_remove_handler);
2426 if (r < 0)
2427 return r;
2428 }
2429
2430 SET_FOREACH(route, link->routes, i) {
2431 /* do not touch routes managed by the kernel */
2432 if (route->protocol == RTPROT_KERNEL)
2433 continue;
2434
2435 r = route_remove(route, link, link_route_remove_handler);
2436 if (r < 0)
2437 return r;
2438 }
2439
2440 ndisc_flush(link);
2441
2442 return 0;
2443 }
2444
2445 static int link_update_lldp(Link *link) {
2446 int r;
2447
2448 assert(link);
2449
2450 if (!link->lldp)
2451 return 0;
2452
2453 if (link->flags & IFF_UP) {
2454 r = sd_lldp_start(link->lldp);
2455 if (r > 0)
2456 log_link_debug(link, "Started LLDP.");
2457 } else {
2458 r = sd_lldp_stop(link->lldp);
2459 if (r > 0)
2460 log_link_debug(link, "Stopped LLDP.");
2461 }
2462
2463 return r;
2464 }
2465
2466 static int link_configure(Link *link) {
2467 int r;
2468
2469 assert(link);
2470 assert(link->network);
2471 assert(link->state == LINK_STATE_PENDING);
2472
2473 if (streq_ptr(link->kind, "vcan")) {
2474
2475 if (!(link->flags & IFF_UP)) {
2476 r = link_up_can(link);
2477 if (r < 0) {
2478 link_enter_failed(link);
2479 return r;
2480 }
2481 }
2482
2483 return 0;
2484 }
2485
2486 /* Drop foreign config, but ignore loopback or critical devices.
2487 * We do not want to remove loopback address or addresses used for root NFS. */
2488 if (!(link->flags & IFF_LOOPBACK) && !(link->network->dhcp_critical)) {
2489 r = link_drop_foreign_config(link);
2490 if (r < 0)
2491 return r;
2492 }
2493
2494 r = link_set_proxy_arp(link);
2495 if (r < 0)
2496 return r;
2497
2498 r = ipv6_proxy_ndp_addresses_configure(link);
2499 if (r < 0)
2500 return r;
2501
2502 r = link_set_ipv4_forward(link);
2503 if (r < 0)
2504 return r;
2505
2506 r = link_set_ipv6_forward(link);
2507 if (r < 0)
2508 return r;
2509
2510 r = link_set_ipv6_privacy_extensions(link);
2511 if (r < 0)
2512 return r;
2513
2514 r = link_set_ipv6_accept_ra(link);
2515 if (r < 0)
2516 return r;
2517
2518 r = link_set_ipv6_dad_transmits(link);
2519 if (r < 0)
2520 return r;
2521
2522 r = link_set_ipv6_hop_limit(link);
2523 if (r < 0)
2524 return r;
2525
2526 r = link_set_flags(link);
2527 if (r < 0)
2528 return r;
2529
2530 if (link_ipv4ll_enabled(link)) {
2531 r = ipv4ll_configure(link);
2532 if (r < 0)
2533 return r;
2534 }
2535
2536 if (link_dhcp4_enabled(link)) {
2537 r = dhcp4_configure(link);
2538 if (r < 0)
2539 return r;
2540 }
2541
2542 if (link_dhcp4_server_enabled(link)) {
2543 r = sd_dhcp_server_new(&link->dhcp_server, link->ifindex);
2544 if (r < 0)
2545 return r;
2546
2547 r = sd_dhcp_server_attach_event(link->dhcp_server, NULL, 0);
2548 if (r < 0)
2549 return r;
2550 }
2551
2552 if (link_dhcp6_enabled(link) ||
2553 link_ipv6_accept_ra_enabled(link)) {
2554 r = dhcp6_configure(link);
2555 if (r < 0)
2556 return r;
2557 }
2558
2559 if (link_ipv6_accept_ra_enabled(link)) {
2560 r = ndisc_configure(link);
2561 if (r < 0)
2562 return r;
2563 }
2564
2565 if (link_lldp_rx_enabled(link)) {
2566 r = sd_lldp_new(&link->lldp);
2567 if (r < 0)
2568 return r;
2569
2570 r = sd_lldp_set_ifindex(link->lldp, link->ifindex);
2571 if (r < 0)
2572 return r;
2573
2574 r = sd_lldp_match_capabilities(link->lldp,
2575 link->network->lldp_mode == LLDP_MODE_ROUTERS_ONLY ?
2576 SD_LLDP_SYSTEM_CAPABILITIES_ALL_ROUTERS :
2577 SD_LLDP_SYSTEM_CAPABILITIES_ALL);
2578 if (r < 0)
2579 return r;
2580
2581 r = sd_lldp_set_filter_address(link->lldp, &link->mac);
2582 if (r < 0)
2583 return r;
2584
2585 r = sd_lldp_attach_event(link->lldp, NULL, 0);
2586 if (r < 0)
2587 return r;
2588
2589 r = sd_lldp_set_callback(link->lldp, lldp_handler, link);
2590 if (r < 0)
2591 return r;
2592
2593 r = link_update_lldp(link);
2594 if (r < 0)
2595 return r;
2596 }
2597
2598 if (link_has_carrier(link)) {
2599 r = link_acquire_conf(link);
2600 if (r < 0)
2601 return r;
2602 }
2603
2604 return link_enter_join_netdev(link);
2605 }
2606
2607 static int link_initialized_and_synced(sd_netlink *rtnl, sd_netlink_message *m,
2608 void *userdata) {
2609 _cleanup_link_unref_ Link *link = userdata;
2610 Network *network;
2611 int r;
2612
2613 assert(link);
2614 assert(link->ifname);
2615 assert(link->manager);
2616
2617 if (link->state != LINK_STATE_PENDING)
2618 return 1;
2619
2620 log_link_debug(link, "Link state is up-to-date");
2621
2622 r = link_new_bound_by_list(link);
2623 if (r < 0)
2624 return r;
2625
2626 r = link_handle_bound_by_list(link);
2627 if (r < 0)
2628 return r;
2629
2630 if (!link->network) {
2631 r = network_get(link->manager, link->udev_device, link->ifname,
2632 &link->mac, &network);
2633 if (r == -ENOENT) {
2634 link_enter_unmanaged(link);
2635 return 1;
2636 } else if (r == 0 && network->unmanaged) {
2637 link_enter_unmanaged(link);
2638 return 0;
2639 } else if (r < 0)
2640 return r;
2641
2642 if (link->flags & IFF_LOOPBACK) {
2643 if (network->link_local != ADDRESS_FAMILY_NO)
2644 log_link_debug(link, "Ignoring link-local autoconfiguration for loopback link");
2645
2646 if (network->dhcp != ADDRESS_FAMILY_NO)
2647 log_link_debug(link, "Ignoring DHCP clients for loopback link");
2648
2649 if (network->dhcp_server)
2650 log_link_debug(link, "Ignoring DHCP server for loopback link");
2651 }
2652
2653 r = network_apply(network, link);
2654 if (r < 0)
2655 return r;
2656 }
2657
2658 r = link_new_bound_to_list(link);
2659 if (r < 0)
2660 return r;
2661
2662 r = link_configure(link);
2663 if (r < 0)
2664 return r;
2665
2666 return 1;
2667 }
2668
2669 int link_initialized(Link *link, struct udev_device *device) {
2670 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
2671 int r;
2672
2673 assert(link);
2674 assert(link->manager);
2675 assert(link->manager->rtnl);
2676 assert(device);
2677
2678 if (link->state != LINK_STATE_PENDING)
2679 return 0;
2680
2681 if (link->udev_device)
2682 return 0;
2683
2684 log_link_debug(link, "udev initialized link");
2685
2686 link->udev_device = udev_device_ref(device);
2687
2688 /* udev has initialized the link, but we don't know if we have yet
2689 * processed the NEWLINK messages with the latest state. Do a GETLINK,
2690 * when it returns we know that the pending NEWLINKs have already been
2691 * processed and that we are up-to-date */
2692
2693 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_GETLINK,
2694 link->ifindex);
2695 if (r < 0)
2696 return r;
2697
2698 r = sd_netlink_call_async(link->manager->rtnl, req,
2699 link_initialized_and_synced, link, 0, NULL);
2700 if (r < 0)
2701 return r;
2702
2703 link_ref(link);
2704
2705 return 0;
2706 }
2707
2708 static int link_load(Link *link) {
2709 _cleanup_free_ char *network_file = NULL,
2710 *addresses = NULL,
2711 *routes = NULL,
2712 *dhcp4_address = NULL,
2713 *ipv4ll_address = NULL;
2714 union in_addr_union address;
2715 union in_addr_union route_dst;
2716 const char *p;
2717 int r;
2718
2719 assert(link);
2720
2721 r = parse_env_file(link->state_file, NEWLINE,
2722 "NETWORK_FILE", &network_file,
2723 "ADDRESSES", &addresses,
2724 "ROUTES", &routes,
2725 "DHCP4_ADDRESS", &dhcp4_address,
2726 "IPV4LL_ADDRESS", &ipv4ll_address,
2727 NULL);
2728 if (r < 0 && r != -ENOENT)
2729 return log_link_error_errno(link, r, "Failed to read %s: %m", link->state_file);
2730
2731 if (network_file) {
2732 Network *network;
2733 char *suffix;
2734
2735 /* drop suffix */
2736 suffix = strrchr(network_file, '.');
2737 if (!suffix) {
2738 log_link_debug(link, "Failed to get network name from %s", network_file);
2739 goto network_file_fail;
2740 }
2741 *suffix = '\0';
2742
2743 r = network_get_by_name(link->manager, basename(network_file), &network);
2744 if (r < 0) {
2745 log_link_debug_errno(link, r, "Failed to get network %s: %m", basename(network_file));
2746 goto network_file_fail;
2747 }
2748
2749 r = network_apply(network, link);
2750 if (r < 0)
2751 return log_link_error_errno(link, r, "Failed to apply network %s: %m", basename(network_file));
2752 }
2753
2754 network_file_fail:
2755
2756 if (addresses) {
2757 p = addresses;
2758
2759 for (;;) {
2760 _cleanup_free_ char *address_str = NULL;
2761 char *prefixlen_str;
2762 int family;
2763 unsigned char prefixlen;
2764
2765 r = extract_first_word(&p, &address_str, NULL, 0);
2766 if (r < 0) {
2767 log_link_debug_errno(link, r, "Failed to extract next address string: %m");
2768 continue;
2769 }
2770 if (r == 0)
2771 break;
2772
2773 prefixlen_str = strchr(address_str, '/');
2774 if (!prefixlen_str) {
2775 log_link_debug(link, "Failed to parse address and prefix length %s", address_str);
2776 continue;
2777 }
2778
2779 *prefixlen_str++ = '\0';
2780
2781 r = sscanf(prefixlen_str, "%hhu", &prefixlen);
2782 if (r != 1) {
2783 log_link_error(link, "Failed to parse prefixlen %s", prefixlen_str);
2784 continue;
2785 }
2786
2787 r = in_addr_from_string_auto(address_str, &family, &address);
2788 if (r < 0) {
2789 log_link_debug_errno(link, r, "Failed to parse address %s: %m", address_str);
2790 continue;
2791 }
2792
2793 r = address_add(link, family, &address, prefixlen, NULL);
2794 if (r < 0)
2795 return log_link_error_errno(link, r, "Failed to add address: %m");
2796 }
2797 }
2798
2799 if (routes) {
2800 p = routes;
2801
2802 for (;;) {
2803 Route *route;
2804 _cleanup_free_ char *route_str = NULL;
2805 _cleanup_(sd_event_source_unrefp) sd_event_source *expire = NULL;
2806 usec_t lifetime;
2807 char *prefixlen_str;
2808 int family;
2809 unsigned char prefixlen, tos, table;
2810 uint32_t priority;
2811
2812 r = extract_first_word(&p, &route_str, NULL, 0);
2813 if (r < 0) {
2814 log_link_debug_errno(link, r, "Failed to extract next route string: %m");
2815 continue;
2816 }
2817 if (r == 0)
2818 break;
2819
2820 prefixlen_str = strchr(route_str, '/');
2821 if (!prefixlen_str) {
2822 log_link_debug(link, "Failed to parse route %s", route_str);
2823 continue;
2824 }
2825
2826 *prefixlen_str++ = '\0';
2827
2828 r = sscanf(prefixlen_str, "%hhu/%hhu/%"SCNu32"/%hhu/"USEC_FMT, &prefixlen, &tos, &priority, &table, &lifetime);
2829 if (r != 5) {
2830 log_link_debug(link,
2831 "Failed to parse destination prefix length, tos, priority, table or expiration %s",
2832 prefixlen_str);
2833 continue;
2834 }
2835
2836 r = in_addr_from_string_auto(route_str, &family, &route_dst);
2837 if (r < 0) {
2838 log_link_debug_errno(link, r, "Failed to parse route destination %s: %m", route_str);
2839 continue;
2840 }
2841
2842 r = route_add(link, family, &route_dst, prefixlen, tos, priority, table, &route);
2843 if (r < 0)
2844 return log_link_error_errno(link, r, "Failed to add route: %m");
2845
2846 if (lifetime != USEC_INFINITY) {
2847 r = sd_event_add_time(link->manager->event, &expire, clock_boottime_or_monotonic(), lifetime,
2848 0, route_expire_handler, route);
2849 if (r < 0)
2850 log_link_warning_errno(link, r, "Could not arm route expiration handler: %m");
2851 }
2852
2853 route->lifetime = lifetime;
2854 sd_event_source_unref(route->expire);
2855 route->expire = expire;
2856 expire = NULL;
2857 }
2858 }
2859
2860 if (dhcp4_address) {
2861 r = in_addr_from_string(AF_INET, dhcp4_address, &address);
2862 if (r < 0) {
2863 log_link_debug_errno(link, r, "Failed to parse DHCPv4 address %s: %m", dhcp4_address);
2864 goto dhcp4_address_fail;
2865 }
2866
2867 r = sd_dhcp_client_new(&link->dhcp_client);
2868 if (r < 0)
2869 return log_link_error_errno(link, r, "Failed to create DHCPv4 client: %m");
2870
2871 r = sd_dhcp_client_set_request_address(link->dhcp_client, &address.in);
2872 if (r < 0)
2873 return log_link_error_errno(link, r, "Failed to set initial DHCPv4 address %s: %m", dhcp4_address);
2874 }
2875
2876 dhcp4_address_fail:
2877
2878 if (ipv4ll_address) {
2879 r = in_addr_from_string(AF_INET, ipv4ll_address, &address);
2880 if (r < 0) {
2881 log_link_debug_errno(link, r, "Failed to parse IPv4LL address %s: %m", ipv4ll_address);
2882 goto ipv4ll_address_fail;
2883 }
2884
2885 r = sd_ipv4ll_new(&link->ipv4ll);
2886 if (r < 0)
2887 return log_link_error_errno(link, r, "Failed to create IPv4LL client: %m");
2888
2889 r = sd_ipv4ll_set_address(link->ipv4ll, &address.in);
2890 if (r < 0)
2891 return log_link_error_errno(link, r, "Failed to set initial IPv4LL address %s: %m", ipv4ll_address);
2892 }
2893
2894 ipv4ll_address_fail:
2895
2896 return 0;
2897 }
2898
2899 int link_add(Manager *m, sd_netlink_message *message, Link **ret) {
2900 Link *link;
2901 _cleanup_udev_device_unref_ struct udev_device *device = NULL;
2902 char ifindex_str[2 + DECIMAL_STR_MAX(int)];
2903 int r;
2904
2905 assert(m);
2906 assert(m->rtnl);
2907 assert(message);
2908 assert(ret);
2909
2910 r = link_new(m, message, ret);
2911 if (r < 0)
2912 return r;
2913
2914 link = *ret;
2915
2916 log_link_debug(link, "Link %d added", link->ifindex);
2917
2918 r = link_load(link);
2919 if (r < 0)
2920 return r;
2921
2922 if (detect_container() <= 0) {
2923 /* not in a container, udev will be around */
2924 sprintf(ifindex_str, "n%d", link->ifindex);
2925 device = udev_device_new_from_device_id(m->udev, ifindex_str);
2926 if (!device) {
2927 r = log_link_warning_errno(link, errno, "Could not find udev device: %m");
2928 goto failed;
2929 }
2930
2931 if (udev_device_get_is_initialized(device) <= 0) {
2932 /* not yet ready */
2933 log_link_debug(link, "link pending udev initialization...");
2934 return 0;
2935 }
2936
2937 r = link_initialized(link, device);
2938 if (r < 0)
2939 goto failed;
2940 } else {
2941 /* we are calling a callback directly, so must take a ref */
2942 link_ref(link);
2943
2944 r = link_initialized_and_synced(m->rtnl, NULL, link);
2945 if (r < 0)
2946 goto failed;
2947 }
2948
2949 return 0;
2950 failed:
2951 link_enter_failed(link);
2952 return r;
2953 }
2954
2955 int link_ipv6ll_gained(Link *link, const struct in6_addr *address) {
2956 int r;
2957
2958 assert(link);
2959
2960 log_link_info(link, "Gained IPv6LL");
2961
2962 link->ipv6ll_address = *address;
2963 link_check_ready(link);
2964
2965 if (!IN_SET(link->state, LINK_STATE_PENDING, LINK_STATE_UNMANAGED, LINK_STATE_FAILED)) {
2966 r = link_acquire_ipv6_conf(link);
2967 if (r < 0) {
2968 link_enter_failed(link);
2969 return r;
2970 }
2971 }
2972
2973 return 0;
2974 }
2975
2976 static int link_carrier_gained(Link *link) {
2977 int r;
2978
2979 assert(link);
2980
2981 if (!IN_SET(link->state, LINK_STATE_PENDING, LINK_STATE_UNMANAGED, LINK_STATE_FAILED)) {
2982 r = link_acquire_conf(link);
2983 if (r < 0) {
2984 link_enter_failed(link);
2985 return r;
2986 }
2987
2988 r = link_enter_set_addresses(link);
2989 if (r < 0)
2990 return r;
2991 }
2992
2993 r = link_handle_bound_by_list(link);
2994 if (r < 0)
2995 return r;
2996
2997 return 0;
2998 }
2999
3000 static int link_carrier_lost(Link *link) {
3001 int r;
3002
3003 assert(link);
3004
3005 r = link_stop_clients(link);
3006 if (r < 0) {
3007 link_enter_failed(link);
3008 return r;
3009 }
3010
3011 r = link_drop_config(link);
3012 if (r < 0)
3013 return r;
3014
3015 if (!IN_SET(link->state, LINK_STATE_UNMANAGED, LINK_STATE_PENDING)) {
3016 log_link_debug(link, "State is %s, dropping config", link_state_to_string(link->state));
3017 r = link_drop_foreign_config(link);
3018 if (r < 0)
3019 return r;
3020 }
3021
3022 r = link_handle_bound_by_list(link);
3023 if (r < 0)
3024 return r;
3025
3026 return 0;
3027 }
3028
3029 int link_carrier_reset(Link *link) {
3030 int r;
3031
3032 assert(link);
3033
3034 if (link_has_carrier(link)) {
3035 r = link_carrier_lost(link);
3036 if (r < 0)
3037 return r;
3038
3039 r = link_carrier_gained(link);
3040 if (r < 0)
3041 return r;
3042
3043 log_link_info(link, "Reset carrier");
3044 }
3045
3046 return 0;
3047 }
3048
3049 int link_update(Link *link, sd_netlink_message *m) {
3050 struct ether_addr mac;
3051 const char *ifname;
3052 uint32_t mtu;
3053 bool had_carrier, carrier_gained, carrier_lost;
3054 int r;
3055
3056 assert(link);
3057 assert(link->ifname);
3058 assert(m);
3059
3060 if (link->state == LINK_STATE_LINGER) {
3061 link_ref(link);
3062 log_link_info(link, "Link readded");
3063 link_set_state(link, LINK_STATE_ENSLAVING);
3064
3065 r = link_new_carrier_maps(link);
3066 if (r < 0)
3067 return r;
3068 }
3069
3070 r = sd_netlink_message_read_string(m, IFLA_IFNAME, &ifname);
3071 if (r >= 0 && !streq(ifname, link->ifname)) {
3072 log_link_info(link, "Renamed to %s", ifname);
3073
3074 link_free_carrier_maps(link);
3075
3076 r = free_and_strdup(&link->ifname, ifname);
3077 if (r < 0)
3078 return r;
3079
3080 r = link_new_carrier_maps(link);
3081 if (r < 0)
3082 return r;
3083 }
3084
3085 r = sd_netlink_message_read_u32(m, IFLA_MTU, &mtu);
3086 if (r >= 0 && mtu > 0) {
3087 link->mtu = mtu;
3088 if (!link->original_mtu) {
3089 link->original_mtu = mtu;
3090 log_link_debug(link, "Saved original MTU: %" PRIu32, link->original_mtu);
3091 }
3092
3093 if (link->dhcp_client) {
3094 r = sd_dhcp_client_set_mtu(link->dhcp_client,
3095 link->mtu);
3096 if (r < 0) {
3097 log_link_warning_errno(link, r, "Could not update MTU in DHCP client: %m");
3098 return r;
3099 }
3100 }
3101 }
3102
3103 /* The kernel may broadcast NEWLINK messages without the MAC address
3104 set, simply ignore them. */
3105 r = sd_netlink_message_read_ether_addr(m, IFLA_ADDRESS, &mac);
3106 if (r >= 0) {
3107 if (memcmp(link->mac.ether_addr_octet, mac.ether_addr_octet,
3108 ETH_ALEN)) {
3109
3110 memcpy(link->mac.ether_addr_octet, mac.ether_addr_octet,
3111 ETH_ALEN);
3112
3113 log_link_debug(link, "MAC address: "
3114 "%02hhx:%02hhx:%02hhx:%02hhx:%02hhx:%02hhx",
3115 mac.ether_addr_octet[0],
3116 mac.ether_addr_octet[1],
3117 mac.ether_addr_octet[2],
3118 mac.ether_addr_octet[3],
3119 mac.ether_addr_octet[4],
3120 mac.ether_addr_octet[5]);
3121
3122 if (link->ipv4ll) {
3123 r = sd_ipv4ll_set_mac(link->ipv4ll, &link->mac);
3124 if (r < 0)
3125 return log_link_warning_errno(link, r, "Could not update MAC address in IPv4LL client: %m");
3126 }
3127
3128 if (link->dhcp_client) {
3129 const DUID *duid = link_duid(link);
3130
3131 r = sd_dhcp_client_set_mac(link->dhcp_client,
3132 (const uint8_t *) &link->mac,
3133 sizeof (link->mac),
3134 ARPHRD_ETHER);
3135 if (r < 0)
3136 return log_link_warning_errno(link, r, "Could not update MAC address in DHCP client: %m");
3137
3138 r = sd_dhcp_client_set_iaid_duid(link->dhcp_client,
3139 link->network->iaid,
3140 duid->type,
3141 duid->raw_data_len > 0 ? duid->raw_data : NULL,
3142 duid->raw_data_len);
3143 if (r < 0)
3144 return log_link_warning_errno(link, r, "Could not update DUID/IAID in DHCP client: %m");
3145 }
3146
3147 if (link->dhcp6_client) {
3148 const DUID* duid = link_duid(link);
3149
3150 r = sd_dhcp6_client_set_mac(link->dhcp6_client,
3151 (const uint8_t *) &link->mac,
3152 sizeof (link->mac),
3153 ARPHRD_ETHER);
3154 if (r < 0)
3155 return log_link_warning_errno(link, r, "Could not update MAC address in DHCPv6 client: %m");
3156
3157 r = sd_dhcp6_client_set_iaid(link->dhcp6_client,
3158 link->network->iaid);
3159 if (r < 0)
3160 return log_link_warning_errno(link, r, "Could not update DHCPv6 IAID: %m");
3161
3162 r = sd_dhcp6_client_set_duid(link->dhcp6_client,
3163 duid->type,
3164 duid->raw_data_len > 0 ? duid->raw_data : NULL,
3165 duid->raw_data_len);
3166 if (r < 0)
3167 return log_link_warning_errno(link, r, "Could not update DHCPv6 DUID: %m");
3168 }
3169 }
3170 }
3171
3172 had_carrier = link_has_carrier(link);
3173
3174 r = link_update_flags(link, m);
3175 if (r < 0)
3176 return r;
3177
3178 r = link_update_lldp(link);
3179 if (r < 0)
3180 return r;
3181
3182 carrier_gained = !had_carrier && link_has_carrier(link);
3183 carrier_lost = had_carrier && !link_has_carrier(link);
3184
3185 if (carrier_gained) {
3186 log_link_info(link, "Gained carrier");
3187
3188 r = link_carrier_gained(link);
3189 if (r < 0)
3190 return r;
3191 } else if (carrier_lost) {
3192 log_link_info(link, "Lost carrier");
3193
3194 r = link_carrier_lost(link);
3195 if (r < 0)
3196 return r;
3197 }
3198
3199 return 0;
3200 }
3201
3202 static void print_link_hashmap(FILE *f, const char *prefix, Hashmap* h) {
3203 bool space = false;
3204 Iterator i;
3205 Link *link;
3206
3207 assert(f);
3208 assert(prefix);
3209
3210 if (hashmap_isempty(h))
3211 return;
3212
3213 fputs(prefix, f);
3214 HASHMAP_FOREACH(link, h, i) {
3215 if (space)
3216 fputc(' ', f);
3217
3218 fprintf(f, "%i", link->ifindex);
3219 space = true;
3220 }
3221
3222 fputc('\n', f);
3223 }
3224
3225 int link_save(Link *link) {
3226 _cleanup_free_ char *temp_path = NULL;
3227 _cleanup_fclose_ FILE *f = NULL;
3228 const char *admin_state, *oper_state;
3229 Address *a;
3230 Route *route;
3231 Iterator i;
3232 int r;
3233
3234 assert(link);
3235 assert(link->state_file);
3236 assert(link->lease_file);
3237 assert(link->manager);
3238
3239 if (link->state == LINK_STATE_LINGER) {
3240 unlink(link->state_file);
3241 return 0;
3242 }
3243
3244 link_lldp_save(link);
3245
3246 admin_state = link_state_to_string(link->state);
3247 assert(admin_state);
3248
3249 oper_state = link_operstate_to_string(link->operstate);
3250 assert(oper_state);
3251
3252 r = fopen_temporary(link->state_file, &f, &temp_path);
3253 if (r < 0)
3254 goto fail;
3255
3256 (void) fchmod(fileno(f), 0644);
3257
3258 fprintf(f,
3259 "# This is private data. Do not parse.\n"
3260 "ADMIN_STATE=%s\n"
3261 "OPER_STATE=%s\n",
3262 admin_state, oper_state);
3263
3264 if (link->network) {
3265 bool space;
3266 sd_dhcp6_lease *dhcp6_lease = NULL;
3267 const char *dhcp_domainname = NULL;
3268 char **dhcp6_domains = NULL;
3269 unsigned j;
3270
3271 if (link->dhcp6_client) {
3272 r = sd_dhcp6_client_get_lease(link->dhcp6_client, &dhcp6_lease);
3273 if (r < 0 && r != -ENOMSG)
3274 log_link_debug(link, "No DHCPv6 lease");
3275 }
3276
3277 fprintf(f, "NETWORK_FILE=%s\n", link->network->filename);
3278
3279 fputs("DNS=", f);
3280 space = false;
3281
3282 for (j = 0; j < link->network->n_dns; j++) {
3283 _cleanup_free_ char *b = NULL;
3284
3285 r = in_addr_to_string(link->network->dns[j].family,
3286 &link->network->dns[j].address, &b);
3287 if (r < 0) {
3288 log_debug_errno(r, "Failed to format address, ignoring: %m");
3289 continue;
3290 }
3291
3292 if (space)
3293 fputc(' ', f);
3294 fputs(b, f);
3295 space = true;
3296 }
3297
3298 if (link->network->dhcp_use_dns &&
3299 link->dhcp_lease) {
3300 const struct in_addr *addresses;
3301
3302 r = sd_dhcp_lease_get_dns(link->dhcp_lease, &addresses);
3303 if (r > 0) {
3304 if (space)
3305 fputc(' ', f);
3306 serialize_in_addrs(f, addresses, r);
3307 space = true;
3308 }
3309 }
3310
3311 if (link->network->dhcp_use_dns && dhcp6_lease) {
3312 struct in6_addr *in6_addrs;
3313
3314 r = sd_dhcp6_lease_get_dns(dhcp6_lease, &in6_addrs);
3315 if (r > 0) {
3316 if (space)
3317 fputc(' ', f);
3318 serialize_in6_addrs(f, in6_addrs, r);
3319 space = true;
3320 }
3321 }
3322
3323 /* Make sure to flush out old entries before we use the NDISC data */
3324 ndisc_vacuum(link);
3325
3326 if (link->network->dhcp_use_dns && link->ndisc_rdnss) {
3327 NDiscRDNSS *dd;
3328
3329 SET_FOREACH(dd, link->ndisc_rdnss, i) {
3330 if (space)
3331 fputc(' ', f);
3332
3333 serialize_in6_addrs(f, &dd->address, 1);
3334 space = true;
3335 }
3336 }
3337
3338 fputc('\n', f);
3339
3340 fputs("NTP=", f);
3341 space = false;
3342 fputstrv(f, link->network->ntp, NULL, &space);
3343
3344 if (link->network->dhcp_use_ntp &&
3345 link->dhcp_lease) {
3346 const struct in_addr *addresses;
3347
3348 r = sd_dhcp_lease_get_ntp(link->dhcp_lease, &addresses);
3349 if (r > 0) {
3350 if (space)
3351 fputc(' ', f);
3352 serialize_in_addrs(f, addresses, r);
3353 space = true;
3354 }
3355 }
3356
3357 if (link->network->dhcp_use_ntp && dhcp6_lease) {
3358 struct in6_addr *in6_addrs;
3359 char **hosts;
3360
3361 r = sd_dhcp6_lease_get_ntp_addrs(dhcp6_lease,
3362 &in6_addrs);
3363 if (r > 0) {
3364 if (space)
3365 fputc(' ', f);
3366 serialize_in6_addrs(f, in6_addrs, r);
3367 space = true;
3368 }
3369
3370 r = sd_dhcp6_lease_get_ntp_fqdn(dhcp6_lease, &hosts);
3371 if (r > 0)
3372 fputstrv(f, hosts, NULL, &space);
3373 }
3374
3375 fputc('\n', f);
3376
3377 if (link->network->dhcp_use_domains != DHCP_USE_DOMAINS_NO) {
3378 if (link->dhcp_lease)
3379 (void) sd_dhcp_lease_get_domainname(link->dhcp_lease, &dhcp_domainname);
3380 if (dhcp6_lease)
3381 (void) sd_dhcp6_lease_get_domains(dhcp6_lease, &dhcp6_domains);
3382 }
3383
3384 fputs("DOMAINS=", f);
3385 fputstrv(f, link->network->search_domains, NULL, &space);
3386
3387 if (link->network->dhcp_use_domains == DHCP_USE_DOMAINS_YES) {
3388 NDiscDNSSL *dd;
3389
3390 if (dhcp_domainname)
3391 fputs_with_space(f, dhcp_domainname, NULL, &space);
3392 if (dhcp6_domains)
3393 fputstrv(f, dhcp6_domains, NULL, &space);
3394
3395 SET_FOREACH(dd, link->ndisc_dnssl, i)
3396 fputs_with_space(f, NDISC_DNSSL_DOMAIN(dd), NULL, &space);
3397 }
3398
3399 fputc('\n', f);
3400
3401 fputs("ROUTE_DOMAINS=", f);
3402 fputstrv(f, link->network->route_domains, NULL, NULL);
3403
3404 if (link->network->dhcp_use_domains == DHCP_USE_DOMAINS_ROUTE) {
3405 NDiscDNSSL *dd;
3406
3407 if (dhcp_domainname)
3408 fputs_with_space(f, dhcp_domainname, NULL, &space);
3409 if (dhcp6_domains)
3410 fputstrv(f, dhcp6_domains, NULL, &space);
3411
3412 SET_FOREACH(dd, link->ndisc_dnssl, i)
3413 fputs_with_space(f, NDISC_DNSSL_DOMAIN(dd), NULL, &space);
3414 }
3415
3416 fputc('\n', f);
3417
3418 fprintf(f, "LLMNR=%s\n",
3419 resolve_support_to_string(link->network->llmnr));
3420 fprintf(f, "MDNS=%s\n",
3421 resolve_support_to_string(link->network->mdns));
3422
3423 if (link->network->dnssec_mode != _DNSSEC_MODE_INVALID)
3424 fprintf(f, "DNSSEC=%s\n",
3425 dnssec_mode_to_string(link->network->dnssec_mode));
3426
3427 if (!set_isempty(link->network->dnssec_negative_trust_anchors)) {
3428 const char *n;
3429
3430 fputs("DNSSEC_NTA=", f);
3431 space = false;
3432 SET_FOREACH(n, link->network->dnssec_negative_trust_anchors, i)
3433 fputs_with_space(f, n, NULL, &space);
3434 fputc('\n', f);
3435 }
3436
3437 fputs("ADDRESSES=", f);
3438 space = false;
3439 SET_FOREACH(a, link->addresses, i) {
3440 _cleanup_free_ char *address_str = NULL;
3441
3442 r = in_addr_to_string(a->family, &a->in_addr, &address_str);
3443 if (r < 0)
3444 goto fail;
3445
3446 fprintf(f, "%s%s/%u", space ? " " : "", address_str, a->prefixlen);
3447 space = true;
3448 }
3449 fputc('\n', f);
3450
3451 fputs("ROUTES=", f);
3452 space = false;
3453 SET_FOREACH(route, link->routes, i) {
3454 _cleanup_free_ char *route_str = NULL;
3455
3456 r = in_addr_to_string(route->family, &route->dst, &route_str);
3457 if (r < 0)
3458 goto fail;
3459
3460 fprintf(f, "%s%s/%hhu/%hhu/%"PRIu32"/%hhu/"USEC_FMT, space ? " " : "", route_str,
3461 route->dst_prefixlen, route->tos, route->priority, route->table, route->lifetime);
3462 space = true;
3463 }
3464
3465 fputc('\n', f);
3466 }
3467
3468 print_link_hashmap(f, "CARRIER_BOUND_TO=", link->bound_to_links);
3469 print_link_hashmap(f, "CARRIER_BOUND_BY=", link->bound_by_links);
3470
3471 if (link->dhcp_lease) {
3472 struct in_addr address;
3473 const char *tz = NULL;
3474
3475 assert(link->network);
3476
3477 r = sd_dhcp_lease_get_timezone(link->dhcp_lease, &tz);
3478 if (r >= 0)
3479 fprintf(f, "TIMEZONE=%s\n", tz);
3480
3481 r = sd_dhcp_lease_get_address(link->dhcp_lease, &address);
3482 if (r >= 0) {
3483 fputs("DHCP4_ADDRESS=", f);
3484 serialize_in_addrs(f, &address, 1);
3485 fputc('\n', f);
3486 }
3487
3488 r = dhcp_lease_save(link->dhcp_lease, link->lease_file);
3489 if (r < 0)
3490 goto fail;
3491
3492 fprintf(f,
3493 "DHCP_LEASE=%s\n",
3494 link->lease_file);
3495 } else
3496 unlink(link->lease_file);
3497
3498 if (link->ipv4ll) {
3499 struct in_addr address;
3500
3501 r = sd_ipv4ll_get_address(link->ipv4ll, &address);
3502 if (r >= 0) {
3503 fputs("IPV4LL_ADDRESS=", f);
3504 serialize_in_addrs(f, &address, 1);
3505 fputc('\n', f);
3506 }
3507 }
3508
3509 r = fflush_and_check(f);
3510 if (r < 0)
3511 goto fail;
3512
3513 if (rename(temp_path, link->state_file) < 0) {
3514 r = -errno;
3515 goto fail;
3516 }
3517
3518 return 0;
3519
3520 fail:
3521 (void) unlink(link->state_file);
3522 if (temp_path)
3523 (void) unlink(temp_path);
3524
3525 return log_link_error_errno(link, r, "Failed to save link data to %s: %m", link->state_file);
3526 }
3527
3528 /* The serialized state in /run is no longer up-to-date. */
3529 void link_dirty(Link *link) {
3530 int r;
3531
3532 assert(link);
3533
3534 /* mark manager dirty as link is dirty */
3535 manager_dirty(link->manager);
3536
3537 r = set_ensure_allocated(&link->manager->dirty_links, NULL);
3538 if (r < 0)
3539 /* allocation errors are ignored */
3540 return;
3541
3542 r = set_put(link->manager->dirty_links, link);
3543 if (r <= 0)
3544 /* don't take another ref if the link was already dirty */
3545 return;
3546
3547 link_ref(link);
3548 }
3549
3550 /* The serialized state in /run is up-to-date */
3551 void link_clean(Link *link) {
3552 assert(link);
3553 assert(link->manager);
3554
3555 set_remove(link->manager->dirty_links, link);
3556 link_unref(link);
3557 }
3558
3559 static const char* const link_state_table[_LINK_STATE_MAX] = {
3560 [LINK_STATE_PENDING] = "pending",
3561 [LINK_STATE_ENSLAVING] = "configuring",
3562 [LINK_STATE_SETTING_ADDRESSES] = "configuring",
3563 [LINK_STATE_SETTING_ROUTES] = "configuring",
3564 [LINK_STATE_CONFIGURED] = "configured",
3565 [LINK_STATE_UNMANAGED] = "unmanaged",
3566 [LINK_STATE_FAILED] = "failed",
3567 [LINK_STATE_LINGER] = "linger",
3568 };
3569
3570 DEFINE_STRING_TABLE_LOOKUP(link_state, LinkState);
3571
3572 static const char* const link_operstate_table[_LINK_OPERSTATE_MAX] = {
3573 [LINK_OPERSTATE_OFF] = "off",
3574 [LINK_OPERSTATE_NO_CARRIER] = "no-carrier",
3575 [LINK_OPERSTATE_DORMANT] = "dormant",
3576 [LINK_OPERSTATE_CARRIER] = "carrier",
3577 [LINK_OPERSTATE_DEGRADED] = "degraded",
3578 [LINK_OPERSTATE_ROUTABLE] = "routable",
3579 };
3580
3581 DEFINE_STRING_TABLE_LOOKUP(link_operstate, LinkOperationalState);
Unnamed repository; edit this file 'description' to name the repository.