]> git.ipfire.org Git - thirdparty/systemd.git/blob - src/network/networkd-link.c
Merge pull request #4686 from poettering/machine-id-app-specific
[thirdparty/systemd.git] / src / network / networkd-link.c
1 /***
2 This file is part of systemd.
3
4 Copyright 2013 Tom Gundersen <teg@jklm.no>
5
6 systemd is free software; you can redistribute it and/or modify it
7 under the terms of the GNU Lesser General Public License as published by
8 the Free Software Foundation; either version 2.1 of the License, or
9 (at your option) any later version.
10
11 systemd is distributed in the hope that it will be useful, but
12 WITHOUT ANY WARRANTY; without even the implied warranty of
13 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
14 Lesser General Public License for more details.
15
16 You should have received a copy of the GNU Lesser General Public License
17 along with systemd; If not, see <http://www.gnu.org/licenses/>.
18 ***/
19
20 #include <netinet/ether.h>
21 #include <linux/if.h>
22 #include <unistd.h>
23
24 #include "alloc-util.h"
25 #include "bus-util.h"
26 #include "dhcp-lease-internal.h"
27 #include "fd-util.h"
28 #include "fileio.h"
29 #include "netlink-util.h"
30 #include "network-internal.h"
31 #include "networkd-lldp-tx.h"
32 #include "networkd-manager.h"
33 #include "networkd-ndisc.h"
34 #include "set.h"
35 #include "socket-util.h"
36 #include "stdio-util.h"
37 #include "string-table.h"
38 #include "udev-util.h"
39 #include "util.h"
40 #include "virt.h"
41
42 static bool link_dhcp6_enabled(Link *link) {
43 assert(link);
44
45 if (!socket_ipv6_is_supported())
46 return false;
47
48 if (link->flags & IFF_LOOPBACK)
49 return false;
50
51 if (!link->network)
52 return false;
53
54 return link->network->dhcp & ADDRESS_FAMILY_IPV6;
55 }
56
57 static bool link_dhcp4_enabled(Link *link) {
58 assert(link);
59
60 if (link->flags & IFF_LOOPBACK)
61 return false;
62
63 if (!link->network)
64 return false;
65
66 return link->network->dhcp & ADDRESS_FAMILY_IPV4;
67 }
68
69 static bool link_dhcp4_server_enabled(Link *link) {
70 assert(link);
71
72 if (link->flags & IFF_LOOPBACK)
73 return false;
74
75 if (!link->network)
76 return false;
77
78 return link->network->dhcp_server;
79 }
80
81 static bool link_ipv4ll_enabled(Link *link) {
82 assert(link);
83
84 if (link->flags & IFF_LOOPBACK)
85 return false;
86
87 if (!link->network)
88 return false;
89
90 return link->network->link_local & ADDRESS_FAMILY_IPV4;
91 }
92
93 static bool link_ipv6ll_enabled(Link *link) {
94 assert(link);
95
96 if (!socket_ipv6_is_supported())
97 return false;
98
99 if (link->flags & IFF_LOOPBACK)
100 return false;
101
102 if (!link->network)
103 return false;
104
105 return link->network->link_local & ADDRESS_FAMILY_IPV6;
106 }
107
108 static bool link_ipv6_enabled(Link *link) {
109 assert(link);
110
111 if (!socket_ipv6_is_supported())
112 return false;
113
114 if (link->network->bridge)
115 return false;
116
117 /* DHCPv6 client will not be started if no IPv6 link-local address is configured. */
118 return link_ipv6ll_enabled(link) || network_has_static_ipv6_addresses(link->network);
119 }
120
121 static bool link_lldp_rx_enabled(Link *link) {
122 assert(link);
123
124 if (link->flags & IFF_LOOPBACK)
125 return false;
126
127 if (link->iftype != ARPHRD_ETHER)
128 return false;
129
130 if (!link->network)
131 return false;
132
133 if (link->network->bridge)
134 return false;
135
136 return link->network->lldp_mode != LLDP_MODE_NO;
137 }
138
139 static bool link_lldp_emit_enabled(Link *link) {
140 assert(link);
141
142 if (link->flags & IFF_LOOPBACK)
143 return false;
144
145 if (link->iftype != ARPHRD_ETHER)
146 return false;
147
148 if (!link->network)
149 return false;
150
151 return link->network->lldp_emit != LLDP_EMIT_NO;
152 }
153
154 static bool link_ipv4_forward_enabled(Link *link) {
155 assert(link);
156
157 if (link->flags & IFF_LOOPBACK)
158 return false;
159
160 if (!link->network)
161 return false;
162
163 if (link->network->ip_forward == _ADDRESS_FAMILY_BOOLEAN_INVALID)
164 return false;
165
166 return link->network->ip_forward & ADDRESS_FAMILY_IPV4;
167 }
168
169 static bool link_ipv6_forward_enabled(Link *link) {
170 assert(link);
171
172 if (!socket_ipv6_is_supported())
173 return false;
174
175 if (link->flags & IFF_LOOPBACK)
176 return false;
177
178 if (!link->network)
179 return false;
180
181 if (link->network->ip_forward == _ADDRESS_FAMILY_BOOLEAN_INVALID)
182 return false;
183
184 return link->network->ip_forward & ADDRESS_FAMILY_IPV6;
185 }
186
187 static bool link_proxy_arp_enabled(Link *link) {
188 assert(link);
189
190 if (link->flags & IFF_LOOPBACK)
191 return false;
192
193 if (!link->network)
194 return false;
195
196 if (link->network->proxy_arp < 0)
197 return false;
198
199 return true;
200 }
201
202 static bool link_ipv6_accept_ra_enabled(Link *link) {
203 assert(link);
204
205 if (!socket_ipv6_is_supported())
206 return false;
207
208 if (link->flags & IFF_LOOPBACK)
209 return false;
210
211 if (!link->network)
212 return false;
213
214 /* If unset use system default (enabled if local forwarding is disabled.
215 * disabled if local forwarding is enabled).
216 * If set, ignore or enforce RA independent of local forwarding state.
217 */
218 if (link->network->ipv6_accept_ra < 0)
219 /* default to accept RA if ip_forward is disabled and ignore RA if ip_forward is enabled */
220 return !link_ipv6_forward_enabled(link);
221 else if (link->network->ipv6_accept_ra > 0)
222 /* accept RA even if ip_forward is enabled */
223 return true;
224 else
225 /* ignore RA */
226 return false;
227 }
228
229 static IPv6PrivacyExtensions link_ipv6_privacy_extensions(Link *link) {
230 assert(link);
231
232 if (!socket_ipv6_is_supported())
233 return _IPV6_PRIVACY_EXTENSIONS_INVALID;
234
235 if (link->flags & IFF_LOOPBACK)
236 return _IPV6_PRIVACY_EXTENSIONS_INVALID;
237
238 if (!link->network)
239 return _IPV6_PRIVACY_EXTENSIONS_INVALID;
240
241 return link->network->ipv6_privacy_extensions;
242 }
243
244 static int link_enable_ipv6(Link *link) {
245 const char *p = NULL;
246 bool disabled;
247 int r;
248
249 if (link->flags & IFF_LOOPBACK)
250 return 0;
251
252 disabled = !link_ipv6_enabled(link);
253
254 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/disable_ipv6");
255
256 r = write_string_file(p, one_zero(disabled), WRITE_STRING_FILE_VERIFY_ON_FAILURE);
257 if (r < 0)
258 log_link_warning_errno(link, r, "Cannot %s IPv6 for interface %s: %m", disabled ? "disable" : "enable", link->ifname);
259 else
260 log_link_info(link, "IPv6 %sd for interface: %m", enable_disable(!disabled));
261
262 return 0;
263 }
264
265 void link_update_operstate(Link *link) {
266 LinkOperationalState operstate;
267 assert(link);
268
269 if (link->kernel_operstate == IF_OPER_DORMANT)
270 operstate = LINK_OPERSTATE_DORMANT;
271 else if (link_has_carrier(link)) {
272 Address *address;
273 uint8_t scope = RT_SCOPE_NOWHERE;
274 Iterator i;
275
276 /* if we have carrier, check what addresses we have */
277 SET_FOREACH(address, link->addresses, i) {
278 if (!address_is_ready(address))
279 continue;
280
281 if (address->scope < scope)
282 scope = address->scope;
283 }
284
285 /* for operstate we also take foreign addresses into account */
286 SET_FOREACH(address, link->addresses_foreign, i) {
287 if (!address_is_ready(address))
288 continue;
289
290 if (address->scope < scope)
291 scope = address->scope;
292 }
293
294 if (scope < RT_SCOPE_SITE)
295 /* universally accessible addresses found */
296 operstate = LINK_OPERSTATE_ROUTABLE;
297 else if (scope < RT_SCOPE_HOST)
298 /* only link or site local addresses found */
299 operstate = LINK_OPERSTATE_DEGRADED;
300 else
301 /* no useful addresses found */
302 operstate = LINK_OPERSTATE_CARRIER;
303 } else if (link->flags & IFF_UP)
304 operstate = LINK_OPERSTATE_NO_CARRIER;
305 else
306 operstate = LINK_OPERSTATE_OFF;
307
308 if (link->operstate != operstate) {
309 link->operstate = operstate;
310 link_send_changed(link, "OperationalState", NULL);
311 link_dirty(link);
312 }
313 }
314
315 #define FLAG_STRING(string, flag, old, new) \
316 (((old ^ new) & flag) \
317 ? ((old & flag) ? (" -" string) : (" +" string)) \
318 : "")
319
320 static int link_update_flags(Link *link, sd_netlink_message *m) {
321 unsigned flags, unknown_flags_added, unknown_flags_removed, unknown_flags;
322 uint8_t operstate;
323 int r;
324
325 assert(link);
326
327 r = sd_rtnl_message_link_get_flags(m, &flags);
328 if (r < 0)
329 return log_link_warning_errno(link, r, "Could not get link flags: %m");
330
331 r = sd_netlink_message_read_u8(m, IFLA_OPERSTATE, &operstate);
332 if (r < 0)
333 /* if we got a message without operstate, take it to mean
334 the state was unchanged */
335 operstate = link->kernel_operstate;
336
337 if ((link->flags == flags) && (link->kernel_operstate == operstate))
338 return 0;
339
340 if (link->flags != flags) {
341 log_link_debug(link, "Flags change:%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s",
342 FLAG_STRING("LOOPBACK", IFF_LOOPBACK, link->flags, flags),
343 FLAG_STRING("MASTER", IFF_MASTER, link->flags, flags),
344 FLAG_STRING("SLAVE", IFF_SLAVE, link->flags, flags),
345 FLAG_STRING("UP", IFF_UP, link->flags, flags),
346 FLAG_STRING("DORMANT", IFF_DORMANT, link->flags, flags),
347 FLAG_STRING("LOWER_UP", IFF_LOWER_UP, link->flags, flags),
348 FLAG_STRING("RUNNING", IFF_RUNNING, link->flags, flags),
349 FLAG_STRING("MULTICAST", IFF_MULTICAST, link->flags, flags),
350 FLAG_STRING("BROADCAST", IFF_BROADCAST, link->flags, flags),
351 FLAG_STRING("POINTOPOINT", IFF_POINTOPOINT, link->flags, flags),
352 FLAG_STRING("PROMISC", IFF_PROMISC, link->flags, flags),
353 FLAG_STRING("ALLMULTI", IFF_ALLMULTI, link->flags, flags),
354 FLAG_STRING("PORTSEL", IFF_PORTSEL, link->flags, flags),
355 FLAG_STRING("AUTOMEDIA", IFF_AUTOMEDIA, link->flags, flags),
356 FLAG_STRING("DYNAMIC", IFF_DYNAMIC, link->flags, flags),
357 FLAG_STRING("NOARP", IFF_NOARP, link->flags, flags),
358 FLAG_STRING("NOTRAILERS", IFF_NOTRAILERS, link->flags, flags),
359 FLAG_STRING("DEBUG", IFF_DEBUG, link->flags, flags),
360 FLAG_STRING("ECHO", IFF_ECHO, link->flags, flags));
361
362 unknown_flags = ~(IFF_LOOPBACK | IFF_MASTER | IFF_SLAVE | IFF_UP |
363 IFF_DORMANT | IFF_LOWER_UP | IFF_RUNNING |
364 IFF_MULTICAST | IFF_BROADCAST | IFF_POINTOPOINT |
365 IFF_PROMISC | IFF_ALLMULTI | IFF_PORTSEL |
366 IFF_AUTOMEDIA | IFF_DYNAMIC | IFF_NOARP |
367 IFF_NOTRAILERS | IFF_DEBUG | IFF_ECHO);
368 unknown_flags_added = ((link->flags ^ flags) & flags & unknown_flags);
369 unknown_flags_removed = ((link->flags ^ flags) & link->flags & unknown_flags);
370
371 /* link flags are currently at most 18 bits, let's align to
372 * printing 20 */
373 if (unknown_flags_added)
374 log_link_debug(link,
375 "Unknown link flags gained: %#.5x (ignoring)",
376 unknown_flags_added);
377
378 if (unknown_flags_removed)
379 log_link_debug(link,
380 "Unknown link flags lost: %#.5x (ignoring)",
381 unknown_flags_removed);
382 }
383
384 link->flags = flags;
385 link->kernel_operstate = operstate;
386
387 link_update_operstate(link);
388
389 return 0;
390 }
391
392 static int link_new(Manager *manager, sd_netlink_message *message, Link **ret) {
393 _cleanup_link_unref_ Link *link = NULL;
394 uint16_t type;
395 const char *ifname, *kind = NULL;
396 int r, ifindex;
397 unsigned short iftype;
398
399 assert(manager);
400 assert(message);
401 assert(ret);
402
403 /* check for link kind */
404 r = sd_netlink_message_enter_container(message, IFLA_LINKINFO);
405 if (r == 0) {
406 (void)sd_netlink_message_read_string(message, IFLA_INFO_KIND, &kind);
407 r = sd_netlink_message_exit_container(message);
408 if (r < 0)
409 return r;
410 }
411
412 r = sd_netlink_message_get_type(message, &type);
413 if (r < 0)
414 return r;
415 else if (type != RTM_NEWLINK)
416 return -EINVAL;
417
418 r = sd_rtnl_message_link_get_ifindex(message, &ifindex);
419 if (r < 0)
420 return r;
421 else if (ifindex <= 0)
422 return -EINVAL;
423
424 r = sd_rtnl_message_link_get_type(message, &iftype);
425 if (r < 0)
426 return r;
427
428 r = sd_netlink_message_read_string(message, IFLA_IFNAME, &ifname);
429 if (r < 0)
430 return r;
431
432 link = new0(Link, 1);
433 if (!link)
434 return -ENOMEM;
435
436 link->n_ref = 1;
437 link->manager = manager;
438 link->state = LINK_STATE_PENDING;
439 link->rtnl_extended_attrs = true;
440 link->ifindex = ifindex;
441 link->iftype = iftype;
442 link->ifname = strdup(ifname);
443 if (!link->ifname)
444 return -ENOMEM;
445
446 if (kind) {
447 link->kind = strdup(kind);
448 if (!link->kind)
449 return -ENOMEM;
450 }
451
452 r = sd_netlink_message_read_ether_addr(message, IFLA_ADDRESS, &link->mac);
453 if (r < 0)
454 log_link_debug_errno(link, r, "MAC address not found for new device, continuing without");
455
456 if (asprintf(&link->state_file, "/run/systemd/netif/links/%d", link->ifindex) < 0)
457 return -ENOMEM;
458
459 if (asprintf(&link->lease_file, "/run/systemd/netif/leases/%d", link->ifindex) < 0)
460 return -ENOMEM;
461
462 if (asprintf(&link->lldp_file, "/run/systemd/netif/lldp/%d", link->ifindex) < 0)
463 return -ENOMEM;
464
465 r = hashmap_ensure_allocated(&manager->links, NULL);
466 if (r < 0)
467 return r;
468
469 r = hashmap_put(manager->links, INT_TO_PTR(link->ifindex), link);
470 if (r < 0)
471 return r;
472
473 r = link_update_flags(link, message);
474 if (r < 0)
475 return r;
476
477 *ret = link;
478 link = NULL;
479
480 return 0;
481 }
482
483 static void link_free(Link *link) {
484 Address *address;
485 Iterator i;
486 Link *carrier;
487
488 if (!link)
489 return;
490
491 while (!set_isempty(link->addresses))
492 address_free(set_first(link->addresses));
493
494 while (!set_isempty(link->addresses_foreign))
495 address_free(set_first(link->addresses_foreign));
496
497 link->addresses = set_free(link->addresses);
498
499 link->addresses_foreign = set_free(link->addresses_foreign);
500
501 while ((address = link->pool_addresses)) {
502 LIST_REMOVE(addresses, link->pool_addresses, address);
503 address_free(address);
504 }
505
506 sd_dhcp_server_unref(link->dhcp_server);
507 sd_dhcp_client_unref(link->dhcp_client);
508 sd_dhcp_lease_unref(link->dhcp_lease);
509
510 link_lldp_emit_stop(link);
511
512 free(link->lease_file);
513
514 sd_lldp_unref(link->lldp);
515 free(link->lldp_file);
516
517 ndisc_flush(link);
518
519 sd_ipv4ll_unref(link->ipv4ll);
520 sd_dhcp6_client_unref(link->dhcp6_client);
521 sd_ndisc_unref(link->ndisc);
522
523 if (link->manager)
524 hashmap_remove(link->manager->links, INT_TO_PTR(link->ifindex));
525
526 free(link->ifname);
527
528 free(link->kind);
529
530 (void)unlink(link->state_file);
531 free(link->state_file);
532
533 udev_device_unref(link->udev_device);
534
535 HASHMAP_FOREACH (carrier, link->bound_to_links, i)
536 hashmap_remove(link->bound_to_links, INT_TO_PTR(carrier->ifindex));
537 hashmap_free(link->bound_to_links);
538
539 HASHMAP_FOREACH (carrier, link->bound_by_links, i)
540 hashmap_remove(link->bound_by_links, INT_TO_PTR(carrier->ifindex));
541 hashmap_free(link->bound_by_links);
542
543 free(link);
544 }
545
546 Link *link_unref(Link *link) {
547 if (!link)
548 return NULL;
549
550 assert(link->n_ref > 0);
551
552 link->n_ref--;
553
554 if (link->n_ref > 0)
555 return NULL;
556
557 link_free(link);
558
559 return NULL;
560 }
561
562 Link *link_ref(Link *link) {
563 if (!link)
564 return NULL;
565
566 assert(link->n_ref > 0);
567
568 link->n_ref++;
569
570 return link;
571 }
572
573 int link_get(Manager *m, int ifindex, Link **ret) {
574 Link *link;
575
576 assert(m);
577 assert(ifindex);
578 assert(ret);
579
580 link = hashmap_get(m->links, INT_TO_PTR(ifindex));
581 if (!link)
582 return -ENODEV;
583
584 *ret = link;
585
586 return 0;
587 }
588
589 static void link_set_state(Link *link, LinkState state) {
590 assert(link);
591
592 if (link->state == state)
593 return;
594
595 link->state = state;
596
597 link_send_changed(link, "AdministrativeState", NULL);
598 }
599
600 static void link_enter_unmanaged(Link *link) {
601 assert(link);
602
603 log_link_debug(link, "Unmanaged");
604
605 link_set_state(link, LINK_STATE_UNMANAGED);
606
607 link_dirty(link);
608 }
609
610 static int link_stop_clients(Link *link) {
611 int r = 0, k;
612
613 assert(link);
614 assert(link->manager);
615 assert(link->manager->event);
616
617 if (link->dhcp_client) {
618 k = sd_dhcp_client_stop(link->dhcp_client);
619 if (k < 0)
620 r = log_link_warning_errno(link, k, "Could not stop DHCPv4 client: %m");
621 }
622
623 if (link->ipv4ll) {
624 k = sd_ipv4ll_stop(link->ipv4ll);
625 if (k < 0)
626 r = log_link_warning_errno(link, k, "Could not stop IPv4 link-local: %m");
627 }
628
629 if (link->dhcp6_client) {
630 k = sd_dhcp6_client_stop(link->dhcp6_client);
631 if (k < 0)
632 r = log_link_warning_errno(link, k, "Could not stop DHCPv6 client: %m");
633 }
634
635 if (link->ndisc) {
636 k = sd_ndisc_stop(link->ndisc);
637 if (k < 0)
638 r = log_link_warning_errno(link, k, "Could not stop IPv6 Router Discovery: %m");
639 }
640
641 link_lldp_emit_stop(link);
642 return r;
643 }
644
645 void link_enter_failed(Link *link) {
646 assert(link);
647
648 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
649 return;
650
651 log_link_warning(link, "Failed");
652
653 link_set_state(link, LINK_STATE_FAILED);
654
655 link_stop_clients(link);
656
657 link_dirty(link);
658 }
659
660 static Address* link_find_dhcp_server_address(Link *link) {
661 Address *address;
662
663 assert(link);
664 assert(link->network);
665
666 /* The first statically configured address if there is any */
667 LIST_FOREACH(addresses, address, link->network->static_addresses) {
668
669 if (address->family != AF_INET)
670 continue;
671
672 if (in_addr_is_null(address->family, &address->in_addr))
673 continue;
674
675 return address;
676 }
677
678 /* If that didn't work, find a suitable address we got from the pool */
679 LIST_FOREACH(addresses, address, link->pool_addresses) {
680 if (address->family != AF_INET)
681 continue;
682
683 return address;
684 }
685
686 return NULL;
687 }
688
689 static void link_enter_configured(Link *link) {
690 assert(link);
691 assert(link->network);
692
693 if (link->state != LINK_STATE_SETTING_ROUTES)
694 return;
695
696 log_link_info(link, "Configured");
697
698 link_set_state(link, LINK_STATE_CONFIGURED);
699
700 link_dirty(link);
701 }
702
703 void link_check_ready(Link *link) {
704 Address *a;
705 Iterator i;
706
707 assert(link);
708
709 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
710 return;
711
712 if (!link->network)
713 return;
714
715 if (!link->static_configured)
716 return;
717
718 if (link_ipv4ll_enabled(link))
719 if (!link->ipv4ll_address ||
720 !link->ipv4ll_route)
721 return;
722
723 if (link_ipv6ll_enabled(link))
724 if (in_addr_is_null(AF_INET6, (const union in_addr_union*) &link->ipv6ll_address) > 0)
725 return;
726
727 if ((link_dhcp4_enabled(link) && !link_dhcp6_enabled(link) &&
728 !link->dhcp4_configured) ||
729 (link_dhcp6_enabled(link) && !link_dhcp4_enabled(link) &&
730 !link->dhcp6_configured) ||
731 (link_dhcp4_enabled(link) && link_dhcp6_enabled(link) &&
732 !link->dhcp4_configured && !link->dhcp6_configured))
733 return;
734
735 if (link_ipv6_accept_ra_enabled(link) && !link->ndisc_configured)
736 return;
737
738 SET_FOREACH(a, link->addresses, i)
739 if (!address_is_ready(a))
740 return;
741
742 if (link->state != LINK_STATE_CONFIGURED)
743 link_enter_configured(link);
744
745 return;
746 }
747
748 static int route_handler(sd_netlink *rtnl, sd_netlink_message *m, void *userdata) {
749 _cleanup_link_unref_ Link *link = userdata;
750 int r;
751
752 assert(link->link_messages > 0);
753 assert(IN_SET(link->state, LINK_STATE_SETTING_ADDRESSES,
754 LINK_STATE_SETTING_ROUTES, LINK_STATE_FAILED,
755 LINK_STATE_LINGER));
756
757 link->link_messages--;
758
759 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
760 return 1;
761
762 r = sd_netlink_message_get_errno(m);
763 if (r < 0 && r != -EEXIST)
764 log_link_warning_errno(link, r, "Could not set route: %m");
765
766 if (link->link_messages == 0) {
767 log_link_debug(link, "Routes set");
768 link->static_configured = true;
769 link_check_ready(link);
770 }
771
772 return 1;
773 }
774
775 static int link_enter_set_routes(Link *link) {
776 Route *rt;
777 int r;
778
779 assert(link);
780 assert(link->network);
781 assert(link->state == LINK_STATE_SETTING_ADDRESSES);
782
783 link_set_state(link, LINK_STATE_SETTING_ROUTES);
784
785 LIST_FOREACH(routes, rt, link->network->static_routes) {
786 r = route_configure(rt, link, route_handler);
787 if (r < 0) {
788 log_link_warning_errno(link, r, "Could not set routes: %m");
789 link_enter_failed(link);
790 return r;
791 }
792
793 link->link_messages++;
794 }
795
796 if (link->link_messages == 0) {
797 link->static_configured = true;
798 link_check_ready(link);
799 } else
800 log_link_debug(link, "Setting routes");
801
802 return 0;
803 }
804
805 int link_route_remove_handler(sd_netlink *rtnl, sd_netlink_message *m, void *userdata) {
806 _cleanup_link_unref_ Link *link = userdata;
807 int r;
808
809 assert(m);
810 assert(link);
811 assert(link->ifname);
812
813 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
814 return 1;
815
816 r = sd_netlink_message_get_errno(m);
817 if (r < 0 && r != -ESRCH)
818 log_link_warning_errno(link, r, "Could not drop route: %m");
819
820 return 1;
821 }
822
823 static int address_handler(sd_netlink *rtnl, sd_netlink_message *m, void *userdata) {
824 _cleanup_link_unref_ Link *link = userdata;
825 int r;
826
827 assert(rtnl);
828 assert(m);
829 assert(link);
830 assert(link->ifname);
831 assert(link->link_messages > 0);
832 assert(IN_SET(link->state, LINK_STATE_SETTING_ADDRESSES,
833 LINK_STATE_FAILED, LINK_STATE_LINGER));
834
835 link->link_messages--;
836
837 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
838 return 1;
839
840 r = sd_netlink_message_get_errno(m);
841 if (r < 0 && r != -EEXIST)
842 log_link_warning_errno(link, r, "could not set address: %m");
843 else if (r >= 0)
844 manager_rtnl_process_address(rtnl, m, link->manager);
845
846 if (link->link_messages == 0) {
847 log_link_debug(link, "Addresses set");
848 link_enter_set_routes(link);
849 }
850
851 return 1;
852 }
853
854 static int link_push_uplink_dns_to_dhcp_server(Link *link, sd_dhcp_server *s) {
855 _cleanup_free_ struct in_addr *addresses = NULL;
856 size_t n_addresses = 0, n_allocated = 0;
857 unsigned i;
858
859 log_debug("Copying DNS server information from %s", link->ifname);
860
861 if (!link->network)
862 return 0;
863
864 for (i = 0; i < link->network->n_dns; i++) {
865 struct in_addr ia;
866
867 /* Only look for IPv4 addresses */
868 if (link->network->dns[i].family != AF_INET)
869 continue;
870
871 ia = link->network->dns[i].address.in;
872
873 /* Never propagate obviously borked data */
874 if (in4_addr_is_null(&ia) || in4_addr_is_localhost(&ia))
875 continue;
876
877 if (!GREEDY_REALLOC(addresses, n_allocated, n_addresses + 1))
878 return log_oom();
879
880 addresses[n_addresses++] = ia;
881 }
882
883 if (link->network->dhcp_use_dns && link->dhcp_lease) {
884 const struct in_addr *da = NULL;
885 int n;
886
887 n = sd_dhcp_lease_get_dns(link->dhcp_lease, &da);
888 if (n > 0) {
889
890 if (!GREEDY_REALLOC(addresses, n_allocated, n_addresses + n))
891 return log_oom();
892
893 memcpy(addresses + n_addresses, da, n * sizeof(struct in_addr));
894 n_addresses += n;
895 }
896 }
897
898 if (n_addresses <= 0)
899 return 0;
900
901 return sd_dhcp_server_set_dns(s, addresses, n_addresses);
902 }
903
904 static int link_push_uplink_ntp_to_dhcp_server(Link *link, sd_dhcp_server *s) {
905 _cleanup_free_ struct in_addr *addresses = NULL;
906 size_t n_addresses = 0, n_allocated = 0;
907 char **a;
908
909 if (!link->network)
910 return 0;
911
912 log_debug("Copying NTP server information from %s", link->ifname);
913
914 STRV_FOREACH(a, link->network->ntp) {
915 struct in_addr ia;
916
917 /* Only look for IPv4 addresses */
918 if (inet_pton(AF_INET, *a, &ia) <= 0)
919 continue;
920
921 /* Never propagate obviously borked data */
922 if (in4_addr_is_null(&ia) || in4_addr_is_localhost(&ia))
923 continue;
924
925 if (!GREEDY_REALLOC(addresses, n_allocated, n_addresses + 1))
926 return log_oom();
927
928 addresses[n_addresses++] = ia;
929 }
930
931 if (link->network->dhcp_use_ntp && link->dhcp_lease) {
932 const struct in_addr *da = NULL;
933 int n;
934
935 n = sd_dhcp_lease_get_ntp(link->dhcp_lease, &da);
936 if (n > 0) {
937
938 if (!GREEDY_REALLOC(addresses, n_allocated, n_addresses + n))
939 return log_oom();
940
941 memcpy(addresses + n_addresses, da, n * sizeof(struct in_addr));
942 n_addresses += n;
943 }
944 }
945
946 if (n_addresses <= 0)
947 return 0;
948
949 return sd_dhcp_server_set_ntp(s, addresses, n_addresses);
950 }
951
952 static int link_set_bridge_fdb(Link *link) {
953 FdbEntry *fdb_entry;
954 int r;
955
956 LIST_FOREACH(static_fdb_entries, fdb_entry, link->network->static_fdb_entries) {
957 r = fdb_entry_configure(link, fdb_entry);
958 if (r < 0)
959 return log_link_error_errno(link, r, "Failed to add MAC entry to static MAC table: %m");
960 }
961
962 return 0;
963 }
964
965 static int link_enter_set_addresses(Link *link) {
966 Address *ad;
967 int r;
968
969 assert(link);
970 assert(link->network);
971 assert(link->state != _LINK_STATE_INVALID);
972
973 r = link_set_bridge_fdb(link);
974 if (r < 0)
975 return r;
976
977 link_set_state(link, LINK_STATE_SETTING_ADDRESSES);
978
979 LIST_FOREACH(addresses, ad, link->network->static_addresses) {
980 r = address_configure(ad, link, address_handler, false);
981 if (r < 0) {
982 log_link_warning_errno(link, r, "Could not set addresses: %m");
983 link_enter_failed(link);
984 return r;
985 }
986
987 link->link_messages++;
988 }
989
990 /* now that we can figure out a default address for the dhcp server,
991 start it */
992 if (link_dhcp4_server_enabled(link)) {
993 Address *address;
994 Link *uplink = NULL;
995 bool acquired_uplink = false;
996
997 address = link_find_dhcp_server_address(link);
998 if (!address) {
999 log_link_warning(link, "Failed to find suitable address for DHCPv4 server instance.");
1000 link_enter_failed(link);
1001 return 0;
1002 }
1003
1004 /* use the server address' subnet as the pool */
1005 r = sd_dhcp_server_configure_pool(link->dhcp_server, &address->in_addr.in, address->prefixlen,
1006 link->network->dhcp_server_pool_offset, link->network->dhcp_server_pool_size);
1007 if (r < 0)
1008 return r;
1009
1010 /* TODO:
1011 r = sd_dhcp_server_set_router(link->dhcp_server,
1012 &main_address->in_addr.in);
1013 if (r < 0)
1014 return r;
1015 */
1016
1017 if (link->network->dhcp_server_max_lease_time_usec > 0) {
1018 r = sd_dhcp_server_set_max_lease_time(
1019 link->dhcp_server,
1020 DIV_ROUND_UP(link->network->dhcp_server_max_lease_time_usec, USEC_PER_SEC));
1021 if (r < 0)
1022 return r;
1023 }
1024
1025 if (link->network->dhcp_server_default_lease_time_usec > 0) {
1026 r = sd_dhcp_server_set_default_lease_time(
1027 link->dhcp_server,
1028 DIV_ROUND_UP(link->network->dhcp_server_default_lease_time_usec, USEC_PER_SEC));
1029 if (r < 0)
1030 return r;
1031 }
1032
1033 if (link->network->dhcp_server_emit_dns) {
1034
1035 if (link->network->n_dhcp_server_dns > 0)
1036 r = sd_dhcp_server_set_dns(link->dhcp_server, link->network->dhcp_server_dns, link->network->n_dhcp_server_dns);
1037 else {
1038 uplink = manager_find_uplink(link->manager, link);
1039 acquired_uplink = true;
1040
1041 if (!uplink) {
1042 log_link_debug(link, "Not emitting DNS server information on link, couldn't find suitable uplink.");
1043 r = 0;
1044 } else
1045 r = link_push_uplink_dns_to_dhcp_server(uplink, link->dhcp_server);
1046 }
1047 if (r < 0)
1048 log_link_warning_errno(link, r, "Failed to set DNS server for DHCP server, ignoring: %m");
1049 }
1050
1051
1052 if (link->network->dhcp_server_emit_ntp) {
1053
1054 if (link->network->n_dhcp_server_ntp > 0)
1055 r = sd_dhcp_server_set_ntp(link->dhcp_server, link->network->dhcp_server_ntp, link->network->n_dhcp_server_ntp);
1056 else {
1057 if (!acquired_uplink)
1058 uplink = manager_find_uplink(link->manager, link);
1059
1060 if (!uplink) {
1061 log_link_debug(link, "Not emitting NTP server information on link, couldn't find suitable uplink.");
1062 r = 0;
1063 } else
1064 r = link_push_uplink_ntp_to_dhcp_server(uplink, link->dhcp_server);
1065
1066 }
1067 if (r < 0)
1068 log_link_warning_errno(link, r, "Failed to set NTP server for DHCP server, ignoring: %m");
1069 }
1070
1071 r = sd_dhcp_server_set_emit_router(link->dhcp_server, link->network->dhcp_server_emit_router);
1072 if (r < 0) {
1073 log_link_warning_errno(link, r, "Failed to set router emission for DHCP server: %m");
1074 return r;
1075 }
1076
1077 if (link->network->dhcp_server_emit_timezone) {
1078 _cleanup_free_ char *buffer = NULL;
1079 const char *tz = NULL;
1080
1081 if (link->network->dhcp_server_timezone)
1082 tz = link->network->dhcp_server_timezone;
1083 else {
1084 r = get_timezone(&buffer);
1085 if (r < 0)
1086 log_warning_errno(r, "Failed to determine timezone: %m");
1087 else
1088 tz = buffer;
1089 }
1090
1091 if (tz) {
1092 r = sd_dhcp_server_set_timezone(link->dhcp_server, tz);
1093 if (r < 0)
1094 return r;
1095 }
1096 }
1097
1098 r = sd_dhcp_server_start(link->dhcp_server);
1099 if (r < 0) {
1100 log_link_warning_errno(link, r, "Could not start DHCPv4 server instance: %m");
1101
1102 link_enter_failed(link);
1103
1104 return 0;
1105 }
1106
1107 log_link_debug(link, "Offering DHCPv4 leases");
1108 }
1109
1110 if (link->link_messages == 0)
1111 link_enter_set_routes(link);
1112 else
1113 log_link_debug(link, "Setting addresses");
1114
1115 return 0;
1116 }
1117
1118 int link_address_remove_handler(sd_netlink *rtnl, sd_netlink_message *m, void *userdata) {
1119 _cleanup_link_unref_ Link *link = userdata;
1120 int r;
1121
1122 assert(m);
1123 assert(link);
1124 assert(link->ifname);
1125
1126 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1127 return 1;
1128
1129 r = sd_netlink_message_get_errno(m);
1130 if (r < 0 && r != -EADDRNOTAVAIL)
1131 log_link_warning_errno(link, r, "Could not drop address: %m");
1132
1133 return 1;
1134 }
1135
1136 static int link_set_bridge_vlan(Link *link) {
1137 int r = 0;
1138
1139 r = br_vlan_configure(link, link->network->pvid, link->network->br_vid_bitmap, link->network->br_untagged_bitmap);
1140 if (r < 0)
1141 log_link_error_errno(link, r, "Failed to assign VLANs to bridge port: %m");
1142
1143 return r;
1144 }
1145
1146 static int link_set_proxy_arp(Link *link) {
1147 const char *p = NULL;
1148 int r;
1149
1150 if (!link_proxy_arp_enabled(link))
1151 return 0;
1152
1153 p = strjoina("/proc/sys/net/ipv4/conf/", link->ifname, "/proxy_arp");
1154
1155 r = write_string_file(p, one_zero(link->network->proxy_arp), WRITE_STRING_FILE_VERIFY_ON_FAILURE);
1156 if (r < 0)
1157 log_link_warning_errno(link, r, "Cannot configure proxy ARP for interface: %m");
1158
1159 return 0;
1160 }
1161
1162 static int link_set_handler(sd_netlink *rtnl, sd_netlink_message *m, void *userdata) {
1163 _cleanup_link_unref_ Link *link = userdata;
1164 int r;
1165
1166 log_link_debug(link, "Set link");
1167
1168 r = sd_netlink_message_get_errno(m);
1169 if (r < 0 && r != -EEXIST) {
1170 log_link_error_errno(link, r, "Could not join netdev: %m");
1171 link_enter_failed(link);
1172 return 1;
1173 }
1174
1175 return 0;
1176 }
1177
1178 static int set_mtu_handler(sd_netlink *rtnl, sd_netlink_message *m, void *userdata) {
1179 _cleanup_link_unref_ Link *link = userdata;
1180 int r;
1181
1182 assert(m);
1183 assert(link);
1184 assert(link->ifname);
1185
1186 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1187 return 1;
1188
1189 r = sd_netlink_message_get_errno(m);
1190 if (r < 0)
1191 log_link_warning_errno(link, r, "Could not set MTU: %m");
1192
1193 return 1;
1194 }
1195
1196 int link_set_mtu(Link *link, uint32_t mtu) {
1197 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1198 int r;
1199
1200 assert(link);
1201 assert(link->manager);
1202 assert(link->manager->rtnl);
1203
1204 log_link_debug(link, "Setting MTU: %" PRIu32, mtu);
1205
1206 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1207 if (r < 0)
1208 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1209
1210 r = sd_netlink_message_append_u32(req, IFLA_MTU, mtu);
1211 if (r < 0)
1212 return log_link_error_errno(link, r, "Could not append MTU: %m");
1213
1214 r = sd_netlink_call_async(link->manager->rtnl, req, set_mtu_handler, link, 0, NULL);
1215 if (r < 0)
1216 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1217
1218 link_ref(link);
1219
1220 return 0;
1221 }
1222
1223 static int set_flags_handler(sd_netlink *rtnl, sd_netlink_message *m, void *userdata) {
1224 _cleanup_link_unref_ Link *link = userdata;
1225 int r;
1226
1227 assert(m);
1228 assert(link);
1229 assert(link->ifname);
1230
1231 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1232 return 1;
1233
1234 r = sd_netlink_message_get_errno(m);
1235 if (r < 0)
1236 log_link_warning_errno(link, r, "Could not set link flags: %m");
1237
1238 return 1;
1239 }
1240
1241 static int link_set_flags(Link *link) {
1242 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1243 unsigned ifi_change = 0;
1244 unsigned ifi_flags = 0;
1245 int r;
1246
1247 assert(link);
1248 assert(link->manager);
1249 assert(link->manager->rtnl);
1250
1251 if (link->flags & IFF_LOOPBACK)
1252 return 0;
1253
1254 if (!link->network)
1255 return 0;
1256
1257 if (link->network->arp < 0)
1258 return 0;
1259
1260 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1261 if (r < 0)
1262 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1263
1264 if (link->network->arp >= 0) {
1265 ifi_change |= IFF_NOARP;
1266 ifi_flags |= link->network->arp ? 0 : IFF_NOARP;
1267 }
1268
1269 r = sd_rtnl_message_link_set_flags(req, ifi_flags, ifi_change);
1270 if (r < 0)
1271 return log_link_error_errno(link, r, "Could not set link flags: %m");
1272
1273 r = sd_netlink_call_async(link->manager->rtnl, req, set_flags_handler, link, 0, NULL);
1274 if (r < 0)
1275 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1276
1277 link_ref(link);
1278
1279 return 0;
1280 }
1281
1282 static int link_set_bridge(Link *link) {
1283 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1284 int r;
1285
1286 assert(link);
1287 assert(link->network);
1288
1289 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1290 if (r < 0)
1291 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1292
1293 r = sd_rtnl_message_link_set_family(req, PF_BRIDGE);
1294 if (r < 0)
1295 return log_link_error_errno(link, r, "Could not set message family: %m");
1296
1297 r = sd_netlink_message_open_container(req, IFLA_PROTINFO);
1298 if (r < 0)
1299 return log_link_error_errno(link, r, "Could not append IFLA_PROTINFO attribute: %m");
1300
1301 r = sd_netlink_message_append_u8(req, IFLA_BRPORT_GUARD, !link->network->use_bpdu);
1302 if (r < 0)
1303 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_GUARD attribute: %m");
1304
1305 r = sd_netlink_message_append_u8(req, IFLA_BRPORT_MODE, link->network->hairpin);
1306 if (r < 0)
1307 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_MODE attribute: %m");
1308
1309 r = sd_netlink_message_append_u8(req, IFLA_BRPORT_FAST_LEAVE, link->network->fast_leave);
1310 if (r < 0)
1311 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_FAST_LEAVE attribute: %m");
1312
1313 r = sd_netlink_message_append_u8(req, IFLA_BRPORT_PROTECT, !link->network->allow_port_to_be_root);
1314 if (r < 0)
1315 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_PROTECT attribute: %m");
1316
1317 r = sd_netlink_message_append_u8(req, IFLA_BRPORT_UNICAST_FLOOD, link->network->unicast_flood);
1318 if (r < 0)
1319 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_UNICAST_FLOOD attribute: %m");
1320
1321 if (link->network->cost != 0) {
1322 r = sd_netlink_message_append_u32(req, IFLA_BRPORT_COST, link->network->cost);
1323 if (r < 0)
1324 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_COST attribute: %m");
1325 }
1326
1327 r = sd_netlink_message_close_container(req);
1328 if (r < 0)
1329 return log_link_error_errno(link, r, "Could not append IFLA_LINKINFO attribute: %m");
1330
1331 r = sd_netlink_call_async(link->manager->rtnl, req, link_set_handler, link, 0, NULL);
1332 if (r < 0)
1333 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1334
1335 link_ref(link);
1336
1337 return r;
1338 }
1339
1340 static int link_lldp_save(Link *link) {
1341 _cleanup_free_ char *temp_path = NULL;
1342 _cleanup_fclose_ FILE *f = NULL;
1343 sd_lldp_neighbor **l = NULL;
1344 int n = 0, r, i;
1345
1346 assert(link);
1347 assert(link->lldp_file);
1348
1349 if (!link->lldp) {
1350 (void) unlink(link->lldp_file);
1351 return 0;
1352 }
1353
1354 r = sd_lldp_get_neighbors(link->lldp, &l);
1355 if (r < 0)
1356 goto finish;
1357 if (r == 0) {
1358 (void) unlink(link->lldp_file);
1359 goto finish;
1360 }
1361
1362 n = r;
1363
1364 r = fopen_temporary(link->lldp_file, &f, &temp_path);
1365 if (r < 0)
1366 goto finish;
1367
1368 fchmod(fileno(f), 0644);
1369
1370 for (i = 0; i < n; i++) {
1371 const void *p;
1372 le64_t u;
1373 size_t sz;
1374
1375 r = sd_lldp_neighbor_get_raw(l[i], &p, &sz);
1376 if (r < 0)
1377 goto finish;
1378
1379 u = htole64(sz);
1380 (void) fwrite(&u, 1, sizeof(u), f);
1381 (void) fwrite(p, 1, sz, f);
1382 }
1383
1384 r = fflush_and_check(f);
1385 if (r < 0)
1386 goto finish;
1387
1388 if (rename(temp_path, link->lldp_file) < 0) {
1389 r = -errno;
1390 goto finish;
1391 }
1392
1393 finish:
1394 if (r < 0) {
1395 (void) unlink(link->lldp_file);
1396 if (temp_path)
1397 (void) unlink(temp_path);
1398
1399 log_link_error_errno(link, r, "Failed to save LLDP data to %s: %m", link->lldp_file);
1400 }
1401
1402 if (l) {
1403 for (i = 0; i < n; i++)
1404 sd_lldp_neighbor_unref(l[i]);
1405 free(l);
1406 }
1407
1408 return r;
1409 }
1410
1411 static void lldp_handler(sd_lldp *lldp, sd_lldp_event event, sd_lldp_neighbor *n, void *userdata) {
1412 Link *link = userdata;
1413 int r;
1414
1415 assert(link);
1416
1417 (void) link_lldp_save(link);
1418
1419 if (link_lldp_emit_enabled(link) && event == SD_LLDP_EVENT_ADDED) {
1420 /* If we received information about a new neighbor, restart the LLDP "fast" logic */
1421
1422 log_link_debug(link, "Received LLDP datagram from previously unknown neighbor, restarting 'fast' LLDP transmission.");
1423
1424 r = link_lldp_emit_start(link);
1425 if (r < 0)
1426 log_link_warning_errno(link, r, "Failed to restart LLDP transmission: %m");
1427 }
1428 }
1429
1430 static int link_acquire_ipv6_conf(Link *link) {
1431 int r;
1432
1433 assert(link);
1434
1435 if (link_dhcp6_enabled(link)) {
1436 assert(link->dhcp6_client);
1437 assert(in_addr_is_link_local(AF_INET6, (const union in_addr_union*)&link->ipv6ll_address) > 0);
1438
1439 /* start DHCPv6 client in stateless mode */
1440 r = dhcp6_request_address(link, true);
1441 if (r < 0 && r != -EBUSY)
1442 return log_link_warning_errno(link, r, "Could not acquire DHCPv6 lease: %m");
1443 else
1444 log_link_debug(link, "Acquiring DHCPv6 lease");
1445 }
1446
1447 if (link_ipv6_accept_ra_enabled(link)) {
1448 assert(link->ndisc);
1449
1450 log_link_debug(link, "Discovering IPv6 routers");
1451
1452 r = sd_ndisc_start(link->ndisc);
1453 if (r < 0 && r != -EBUSY)
1454 return log_link_warning_errno(link, r, "Could not start IPv6 Router Discovery: %m");
1455 }
1456
1457 return 0;
1458 }
1459
1460 static int link_acquire_ipv4_conf(Link *link) {
1461 int r;
1462
1463 assert(link);
1464 assert(link->network);
1465 assert(link->manager);
1466 assert(link->manager->event);
1467
1468 if (link_ipv4ll_enabled(link)) {
1469 assert(link->ipv4ll);
1470
1471 log_link_debug(link, "Acquiring IPv4 link-local address");
1472
1473 r = sd_ipv4ll_start(link->ipv4ll);
1474 if (r < 0)
1475 return log_link_warning_errno(link, r, "Could not acquire IPv4 link-local address: %m");
1476 }
1477
1478 if (link_dhcp4_enabled(link)) {
1479 assert(link->dhcp_client);
1480
1481 log_link_debug(link, "Acquiring DHCPv4 lease");
1482
1483 r = sd_dhcp_client_start(link->dhcp_client);
1484 if (r < 0)
1485 return log_link_warning_errno(link, r, "Could not acquire DHCPv4 lease: %m");
1486 }
1487
1488 return 0;
1489 }
1490
1491 static int link_acquire_conf(Link *link) {
1492 int r;
1493
1494 assert(link);
1495
1496 r = link_acquire_ipv4_conf(link);
1497 if (r < 0)
1498 return r;
1499
1500 if (in_addr_is_null(AF_INET6, (const union in_addr_union*) &link->ipv6ll_address) == 0) {
1501 r = link_acquire_ipv6_conf(link);
1502 if (r < 0)
1503 return r;
1504 }
1505
1506 if (link_lldp_emit_enabled(link)) {
1507 r = link_lldp_emit_start(link);
1508 if (r < 0)
1509 return log_link_warning_errno(link, r, "Failed to start LLDP transmission: %m");
1510 }
1511
1512 return 0;
1513 }
1514
1515 bool link_has_carrier(Link *link) {
1516 /* see Documentation/networking/operstates.txt in the kernel sources */
1517
1518 if (link->kernel_operstate == IF_OPER_UP)
1519 return true;
1520
1521 if (link->kernel_operstate == IF_OPER_UNKNOWN)
1522 /* operstate may not be implemented, so fall back to flags */
1523 if ((link->flags & IFF_LOWER_UP) && !(link->flags & IFF_DORMANT))
1524 return true;
1525
1526 return false;
1527 }
1528
1529 static int link_up_handler(sd_netlink *rtnl, sd_netlink_message *m, void *userdata) {
1530 _cleanup_link_unref_ Link *link = userdata;
1531 int r;
1532
1533 assert(link);
1534
1535 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1536 return 1;
1537
1538 r = sd_netlink_message_get_errno(m);
1539 if (r < 0)
1540 /* we warn but don't fail the link, as it may be
1541 brought up later */
1542 log_link_warning_errno(link, r, "Could not bring up interface: %m");
1543
1544 return 1;
1545 }
1546
1547 static int link_up(Link *link) {
1548 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1549 uint8_t ipv6ll_mode;
1550 int r;
1551
1552 assert(link);
1553 assert(link->network);
1554 assert(link->manager);
1555 assert(link->manager->rtnl);
1556
1557 log_link_debug(link, "Bringing link up");
1558
1559 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1560 if (r < 0)
1561 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1562
1563 /* set it free if not enslaved with networkd */
1564 if (!link->network->bridge && !link->network->bond && !link->network->vrf) {
1565 r = sd_netlink_message_append_u32(req, IFLA_MASTER, 0);
1566 if (r < 0)
1567 return log_link_error_errno(link, r, "Could not append IFLA_MASTER attribute: %m");
1568 }
1569
1570 r = sd_rtnl_message_link_set_flags(req, IFF_UP, IFF_UP);
1571 if (r < 0)
1572 return log_link_error_errno(link, r, "Could not set link flags: %m");
1573
1574 if (link->network->mac) {
1575 r = sd_netlink_message_append_ether_addr(req, IFLA_ADDRESS, link->network->mac);
1576 if (r < 0)
1577 return log_link_error_errno(link, r, "Could not set MAC address: %m");
1578 }
1579
1580 /* If IPv6 not configured (no static IPv6 address and IPv6LL autoconfiguration is disabled)
1581 for this interface, or if it is a bridge slave, then disable IPv6 else enable it. */
1582 (void) link_enable_ipv6(link);
1583
1584 if (link->network->mtu) {
1585 /* IPv6 protocol requires a minimum MTU of IPV6_MTU_MIN(1280) bytes
1586 on the interface. Bump up MTU bytes to IPV6_MTU_MIN. */
1587 if (link_ipv6_enabled(link) && link->network->mtu < IPV6_MIN_MTU) {
1588
1589 log_link_warning(link, "Bumping MTU to " STRINGIFY(IPV6_MIN_MTU) ", as "
1590 "IPv6 is requested and requires a minimum MTU of " STRINGIFY(IPV6_MIN_MTU) " bytes: %m");
1591
1592 link->network->mtu = IPV6_MIN_MTU;
1593 }
1594
1595 r = sd_netlink_message_append_u32(req, IFLA_MTU, link->network->mtu);
1596 if (r < 0)
1597 return log_link_error_errno(link, r, "Could not set MTU: %m");
1598 }
1599
1600 r = sd_netlink_message_open_container(req, IFLA_AF_SPEC);
1601 if (r < 0)
1602 return log_link_error_errno(link, r, "Could not open IFLA_AF_SPEC container: %m");
1603
1604 if (link_ipv6_enabled(link)) {
1605 /* if the kernel lacks ipv6 support setting IFF_UP fails if any ipv6 options are passed */
1606 r = sd_netlink_message_open_container(req, AF_INET6);
1607 if (r < 0)
1608 return log_link_error_errno(link, r, "Could not open AF_INET6 container: %m");
1609
1610 if (!link_ipv6ll_enabled(link))
1611 ipv6ll_mode = IN6_ADDR_GEN_MODE_NONE;
1612 else {
1613 const char *p = NULL;
1614 _cleanup_free_ char *stable_secret = NULL;
1615
1616 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/stable_secret");
1617 r = read_one_line_file(p, &stable_secret);
1618
1619 if (r < 0)
1620 ipv6ll_mode = IN6_ADDR_GEN_MODE_EUI64;
1621 else
1622 ipv6ll_mode = IN6_ADDR_GEN_MODE_STABLE_PRIVACY;
1623 }
1624 r = sd_netlink_message_append_u8(req, IFLA_INET6_ADDR_GEN_MODE, ipv6ll_mode);
1625 if (r < 0)
1626 return log_link_error_errno(link, r, "Could not append IFLA_INET6_ADDR_GEN_MODE: %m");
1627
1628 if (!in_addr_is_null(AF_INET6, &link->network->ipv6_token)) {
1629 r = sd_netlink_message_append_in6_addr(req, IFLA_INET6_TOKEN, &link->network->ipv6_token.in6);
1630 if (r < 0)
1631 return log_link_error_errno(link, r, "Could not append IFLA_INET6_TOKEN: %m");
1632 }
1633
1634 r = sd_netlink_message_close_container(req);
1635 if (r < 0)
1636 return log_link_error_errno(link, r, "Could not close AF_INET6 container: %m");
1637 }
1638
1639 r = sd_netlink_message_close_container(req);
1640 if (r < 0)
1641 return log_link_error_errno(link, r, "Could not close IFLA_AF_SPEC container: %m");
1642
1643 r = sd_netlink_call_async(link->manager->rtnl, req, link_up_handler, link, 0, NULL);
1644 if (r < 0)
1645 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1646
1647 link_ref(link);
1648
1649 return 0;
1650 }
1651
1652 static int link_down_handler(sd_netlink *rtnl, sd_netlink_message *m, void *userdata) {
1653 _cleanup_link_unref_ Link *link = userdata;
1654 int r;
1655
1656 assert(link);
1657
1658 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1659 return 1;
1660
1661 r = sd_netlink_message_get_errno(m);
1662 if (r < 0)
1663 log_link_warning_errno(link, r, "Could not bring down interface: %m");
1664
1665 return 1;
1666 }
1667
1668 static int link_down(Link *link) {
1669 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1670 int r;
1671
1672 assert(link);
1673 assert(link->manager);
1674 assert(link->manager->rtnl);
1675
1676 log_link_debug(link, "Bringing link down");
1677
1678 r = sd_rtnl_message_new_link(link->manager->rtnl, &req,
1679 RTM_SETLINK, link->ifindex);
1680 if (r < 0)
1681 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1682
1683 r = sd_rtnl_message_link_set_flags(req, 0, IFF_UP);
1684 if (r < 0)
1685 return log_link_error_errno(link, r, "Could not set link flags: %m");
1686
1687 r = sd_netlink_call_async(link->manager->rtnl, req, link_down_handler, link, 0, NULL);
1688 if (r < 0)
1689 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1690
1691 link_ref(link);
1692
1693 return 0;
1694 }
1695
1696 static int link_up_can(Link *link) {
1697 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1698 int r;
1699
1700 assert(link);
1701
1702 log_link_debug(link, "Bringing CAN link up");
1703
1704 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1705 if (r < 0)
1706 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1707
1708 r = sd_rtnl_message_link_set_flags(req, IFF_UP, IFF_UP);
1709 if (r < 0)
1710 return log_link_error_errno(link, r, "Could not set link flags: %m");
1711
1712 r = sd_netlink_call_async(link->manager->rtnl, req, link_up_handler, link, 0, NULL);
1713 if (r < 0)
1714 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1715
1716 link_ref(link);
1717
1718 return 0;
1719 }
1720
1721 static int link_handle_bound_to_list(Link *link) {
1722 Link *l;
1723 Iterator i;
1724 int r;
1725 bool required_up = false;
1726 bool link_is_up = false;
1727
1728 assert(link);
1729
1730 if (hashmap_isempty(link->bound_to_links))
1731 return 0;
1732
1733 if (link->flags & IFF_UP)
1734 link_is_up = true;
1735
1736 HASHMAP_FOREACH (l, link->bound_to_links, i)
1737 if (link_has_carrier(l)) {
1738 required_up = true;
1739 break;
1740 }
1741
1742 if (!required_up && link_is_up) {
1743 r = link_down(link);
1744 if (r < 0)
1745 return r;
1746 } else if (required_up && !link_is_up) {
1747 r = link_up(link);
1748 if (r < 0)
1749 return r;
1750 }
1751
1752 return 0;
1753 }
1754
1755 static int link_handle_bound_by_list(Link *link) {
1756 Iterator i;
1757 Link *l;
1758 int r;
1759
1760 assert(link);
1761
1762 if (hashmap_isempty(link->bound_by_links))
1763 return 0;
1764
1765 HASHMAP_FOREACH (l, link->bound_by_links, i) {
1766 r = link_handle_bound_to_list(l);
1767 if (r < 0)
1768 return r;
1769 }
1770
1771 return 0;
1772 }
1773
1774 static int link_put_carrier(Link *link, Link *carrier, Hashmap **h) {
1775 int r;
1776
1777 assert(link);
1778 assert(carrier);
1779
1780 if (link == carrier)
1781 return 0;
1782
1783 if (hashmap_get(*h, INT_TO_PTR(carrier->ifindex)))
1784 return 0;
1785
1786 r = hashmap_ensure_allocated(h, NULL);
1787 if (r < 0)
1788 return r;
1789
1790 r = hashmap_put(*h, INT_TO_PTR(carrier->ifindex), carrier);
1791 if (r < 0)
1792 return r;
1793
1794 return 0;
1795 }
1796
1797 static int link_new_bound_by_list(Link *link) {
1798 Manager *m;
1799 Link *carrier;
1800 Iterator i;
1801 int r;
1802 bool list_updated = false;
1803
1804 assert(link);
1805 assert(link->manager);
1806
1807 m = link->manager;
1808
1809 HASHMAP_FOREACH(carrier, m->links, i) {
1810 if (!carrier->network)
1811 continue;
1812
1813 if (strv_isempty(carrier->network->bind_carrier))
1814 continue;
1815
1816 if (strv_fnmatch(carrier->network->bind_carrier, link->ifname, 0)) {
1817 r = link_put_carrier(link, carrier, &link->bound_by_links);
1818 if (r < 0)
1819 return r;
1820
1821 list_updated = true;
1822 }
1823 }
1824
1825 if (list_updated)
1826 link_dirty(link);
1827
1828 HASHMAP_FOREACH(carrier, link->bound_by_links, i) {
1829 r = link_put_carrier(carrier, link, &carrier->bound_to_links);
1830 if (r < 0)
1831 return r;
1832
1833 link_dirty(carrier);
1834 }
1835
1836 return 0;
1837 }
1838
1839 static int link_new_bound_to_list(Link *link) {
1840 Manager *m;
1841 Link *carrier;
1842 Iterator i;
1843 int r;
1844 bool list_updated = false;
1845
1846 assert(link);
1847 assert(link->manager);
1848
1849 if (!link->network)
1850 return 0;
1851
1852 if (strv_isempty(link->network->bind_carrier))
1853 return 0;
1854
1855 m = link->manager;
1856
1857 HASHMAP_FOREACH (carrier, m->links, i) {
1858 if (strv_fnmatch(link->network->bind_carrier, carrier->ifname, 0)) {
1859 r = link_put_carrier(link, carrier, &link->bound_to_links);
1860 if (r < 0)
1861 return r;
1862
1863 list_updated = true;
1864 }
1865 }
1866
1867 if (list_updated)
1868 link_dirty(link);
1869
1870 HASHMAP_FOREACH (carrier, link->bound_to_links, i) {
1871 r = link_put_carrier(carrier, link, &carrier->bound_by_links);
1872 if (r < 0)
1873 return r;
1874
1875 link_dirty(carrier);
1876 }
1877
1878 return 0;
1879 }
1880
1881 static int link_new_carrier_maps(Link *link) {
1882 int r;
1883
1884 r = link_new_bound_by_list(link);
1885 if (r < 0)
1886 return r;
1887
1888 r = link_handle_bound_by_list(link);
1889 if (r < 0)
1890 return r;
1891
1892 r = link_new_bound_to_list(link);
1893 if (r < 0)
1894 return r;
1895
1896 r = link_handle_bound_to_list(link);
1897 if (r < 0)
1898 return r;
1899
1900 return 0;
1901 }
1902
1903 static void link_free_bound_to_list(Link *link) {
1904 Link *bound_to;
1905 Iterator i;
1906
1907 HASHMAP_FOREACH (bound_to, link->bound_to_links, i) {
1908 hashmap_remove(link->bound_to_links, INT_TO_PTR(bound_to->ifindex));
1909
1910 if (hashmap_remove(bound_to->bound_by_links, INT_TO_PTR(link->ifindex)))
1911 link_dirty(bound_to);
1912 }
1913
1914 return;
1915 }
1916
1917 static void link_free_bound_by_list(Link *link) {
1918 Link *bound_by;
1919 Iterator i;
1920
1921 HASHMAP_FOREACH (bound_by, link->bound_by_links, i) {
1922 hashmap_remove(link->bound_by_links, INT_TO_PTR(bound_by->ifindex));
1923
1924 if (hashmap_remove(bound_by->bound_to_links, INT_TO_PTR(link->ifindex))) {
1925 link_dirty(bound_by);
1926 link_handle_bound_to_list(bound_by);
1927 }
1928 }
1929
1930 return;
1931 }
1932
1933 static void link_free_carrier_maps(Link *link) {
1934 bool list_updated = false;
1935
1936 assert(link);
1937
1938 if (!hashmap_isempty(link->bound_to_links)) {
1939 link_free_bound_to_list(link);
1940 list_updated = true;
1941 }
1942
1943 if (!hashmap_isempty(link->bound_by_links)) {
1944 link_free_bound_by_list(link);
1945 list_updated = true;
1946 }
1947
1948 if (list_updated)
1949 link_dirty(link);
1950
1951 return;
1952 }
1953
1954 void link_drop(Link *link) {
1955 if (!link || link->state == LINK_STATE_LINGER)
1956 return;
1957
1958 link_set_state(link, LINK_STATE_LINGER);
1959
1960 link_free_carrier_maps(link);
1961
1962 log_link_debug(link, "Link removed");
1963
1964 (void)unlink(link->state_file);
1965 link_unref(link);
1966
1967 return;
1968 }
1969
1970 static int link_joined(Link *link) {
1971 int r;
1972
1973 assert(link);
1974 assert(link->network);
1975
1976 if (!hashmap_isempty(link->bound_to_links)) {
1977 r = link_handle_bound_to_list(link);
1978 if (r < 0)
1979 return r;
1980 } else if (!(link->flags & IFF_UP)) {
1981 r = link_up(link);
1982 if (r < 0) {
1983 link_enter_failed(link);
1984 return r;
1985 }
1986 }
1987
1988 if (link->network->bridge) {
1989 r = link_set_bridge(link);
1990 if (r < 0)
1991 log_link_error_errno(link, r, "Could not set bridge message: %m");
1992 }
1993
1994 if (link->network->use_br_vlan &&
1995 (link->network->bridge || streq_ptr("bridge", link->kind))) {
1996 r = link_set_bridge_vlan(link);
1997 if (r < 0)
1998 log_link_error_errno(link, r, "Could not set bridge vlan: %m");
1999 }
2000
2001 return link_enter_set_addresses(link);
2002 }
2003
2004 static int netdev_join_handler(sd_netlink *rtnl, sd_netlink_message *m, void *userdata) {
2005 _cleanup_link_unref_ Link *link = userdata;
2006 int r;
2007
2008 assert(link);
2009 assert(link->network);
2010
2011 link->enslaving--;
2012
2013 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
2014 return 1;
2015
2016 r = sd_netlink_message_get_errno(m);
2017 if (r < 0 && r != -EEXIST) {
2018 log_link_error_errno(link, r, "Could not join netdev: %m");
2019 link_enter_failed(link);
2020 return 1;
2021 } else
2022 log_link_debug(link, "Joined netdev");
2023
2024 if (link->enslaving <= 0)
2025 link_joined(link);
2026
2027 return 1;
2028 }
2029
2030 static int link_enter_join_netdev(Link *link) {
2031 NetDev *netdev;
2032 Iterator i;
2033 int r;
2034
2035 assert(link);
2036 assert(link->network);
2037 assert(link->state == LINK_STATE_PENDING);
2038
2039 link_set_state(link, LINK_STATE_ENSLAVING);
2040
2041 link_dirty(link);
2042
2043 if (!link->network->bridge &&
2044 !link->network->bond &&
2045 !link->network->vrf &&
2046 hashmap_isempty(link->network->stacked_netdevs))
2047 return link_joined(link);
2048
2049 if (link->network->bond) {
2050 log_struct(LOG_DEBUG,
2051 LOG_LINK_INTERFACE(link),
2052 LOG_NETDEV_INTERFACE(link->network->bond),
2053 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", link->network->bond->ifname),
2054 NULL);
2055
2056 r = netdev_join(link->network->bond, link, netdev_join_handler);
2057 if (r < 0) {
2058 log_struct_errno(LOG_WARNING, r,
2059 LOG_LINK_INTERFACE(link),
2060 LOG_NETDEV_INTERFACE(link->network->bond),
2061 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", link->network->bond->ifname),
2062 NULL);
2063
2064 link_enter_failed(link);
2065 return r;
2066 }
2067
2068 link->enslaving++;
2069 }
2070
2071 if (link->network->bridge) {
2072 log_struct(LOG_DEBUG,
2073 LOG_LINK_INTERFACE(link),
2074 LOG_NETDEV_INTERFACE(link->network->bridge),
2075 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", link->network->bridge->ifname),
2076 NULL);
2077
2078 r = netdev_join(link->network->bridge, link, netdev_join_handler);
2079 if (r < 0) {
2080 log_struct_errno(LOG_WARNING, r,
2081 LOG_LINK_INTERFACE(link),
2082 LOG_NETDEV_INTERFACE(link->network->bridge),
2083 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", link->network->bridge->ifname),
2084 NULL),
2085 link_enter_failed(link);
2086 return r;
2087 }
2088
2089 link->enslaving++;
2090 }
2091
2092 if (link->network->vrf) {
2093 log_struct(LOG_DEBUG,
2094 LOG_LINK_INTERFACE(link),
2095 LOG_NETDEV_INTERFACE(link->network->vrf),
2096 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", link->network->vrf->ifname),
2097 NULL);
2098 r = netdev_join(link->network->vrf, link, netdev_join_handler);
2099 if (r < 0) {
2100 log_struct_errno(LOG_WARNING, r,
2101 LOG_LINK_INTERFACE(link),
2102 LOG_NETDEV_INTERFACE(link->network->vrf),
2103 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", link->network->vrf->ifname),
2104 NULL);
2105 link_enter_failed(link);
2106 return r;
2107 }
2108
2109 link->enslaving++;
2110 }
2111
2112 HASHMAP_FOREACH(netdev, link->network->stacked_netdevs, i) {
2113
2114 log_struct(LOG_DEBUG,
2115 LOG_LINK_INTERFACE(link),
2116 LOG_NETDEV_INTERFACE(netdev),
2117 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", netdev->ifname),
2118 NULL);
2119
2120 r = netdev_join(netdev, link, netdev_join_handler);
2121 if (r < 0) {
2122 log_struct_errno(LOG_WARNING, r,
2123 LOG_LINK_INTERFACE(link),
2124 LOG_NETDEV_INTERFACE(netdev),
2125 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", netdev->ifname),
2126 NULL);
2127 link_enter_failed(link);
2128 return r;
2129 }
2130
2131 link->enslaving++;
2132 }
2133
2134 return 0;
2135 }
2136
2137 static int link_set_ipv4_forward(Link *link) {
2138 int r;
2139
2140 if (!link_ipv4_forward_enabled(link))
2141 return 0;
2142
2143 /* We propagate the forwarding flag from one interface to the
2144 * global setting one way. This means: as long as at least one
2145 * interface was configured at any time that had IP forwarding
2146 * enabled the setting will stay on for good. We do this
2147 * primarily to keep IPv4 and IPv6 packet forwarding behaviour
2148 * somewhat in sync (see below). */
2149
2150 r = write_string_file("/proc/sys/net/ipv4/ip_forward", "1", WRITE_STRING_FILE_VERIFY_ON_FAILURE);
2151 if (r < 0)
2152 log_link_warning_errno(link, r, "Cannot turn on IPv4 packet forwarding, ignoring: %m");
2153
2154 return 0;
2155 }
2156
2157 static int link_set_ipv6_forward(Link *link) {
2158 int r;
2159
2160 if (!link_ipv6_forward_enabled(link))
2161 return 0;
2162
2163 /* On Linux, the IPv6 stack does not know a per-interface
2164 * packet forwarding setting: either packet forwarding is on
2165 * for all, or off for all. We hence don't bother with a
2166 * per-interface setting, but simply propagate the interface
2167 * flag, if it is set, to the global flag, one-way. Note that
2168 * while IPv4 would allow a per-interface flag, we expose the
2169 * same behaviour there and also propagate the setting from
2170 * one to all, to keep things simple (see above). */
2171
2172 r = write_string_file("/proc/sys/net/ipv6/conf/all/forwarding", "1", WRITE_STRING_FILE_VERIFY_ON_FAILURE);
2173 if (r < 0)
2174 log_link_warning_errno(link, r, "Cannot configure IPv6 packet forwarding, ignoring: %m");
2175
2176 return 0;
2177 }
2178
2179 static int link_set_ipv6_privacy_extensions(Link *link) {
2180 char buf[DECIMAL_STR_MAX(unsigned) + 1];
2181 IPv6PrivacyExtensions s;
2182 const char *p = NULL;
2183 int r;
2184
2185 s = link_ipv6_privacy_extensions(link);
2186 if (s < 0)
2187 return 0;
2188
2189 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/use_tempaddr");
2190 xsprintf(buf, "%u", (unsigned) link->network->ipv6_privacy_extensions);
2191
2192 r = write_string_file(p, buf, WRITE_STRING_FILE_VERIFY_ON_FAILURE);
2193 if (r < 0)
2194 log_link_warning_errno(link, r, "Cannot configure IPv6 privacy extension for interface: %m");
2195
2196 return 0;
2197 }
2198
2199 static int link_set_ipv6_accept_ra(Link *link) {
2200 const char *p = NULL;
2201 int r;
2202
2203 /* Make this a NOP if IPv6 is not available */
2204 if (!socket_ipv6_is_supported())
2205 return 0;
2206
2207 if (link->flags & IFF_LOOPBACK)
2208 return 0;
2209
2210 if (!link->network)
2211 return 0;
2212
2213 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/accept_ra");
2214
2215 /* We handle router advertisements ourselves, tell the kernel to GTFO */
2216 r = write_string_file(p, "0", WRITE_STRING_FILE_VERIFY_ON_FAILURE);
2217 if (r < 0)
2218 log_link_warning_errno(link, r, "Cannot disable kernel IPv6 accept_ra for interface: %m");
2219
2220 return 0;
2221 }
2222
2223 static int link_set_ipv6_dad_transmits(Link *link) {
2224 char buf[DECIMAL_STR_MAX(int) + 1];
2225 const char *p = NULL;
2226 int r;
2227
2228 /* Make this a NOP if IPv6 is not available */
2229 if (!socket_ipv6_is_supported())
2230 return 0;
2231
2232 if (link->flags & IFF_LOOPBACK)
2233 return 0;
2234
2235 if (!link->network)
2236 return 0;
2237
2238 if (link->network->ipv6_dad_transmits < 0)
2239 return 0;
2240
2241 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/dad_transmits");
2242 xsprintf(buf, "%i", link->network->ipv6_dad_transmits);
2243
2244 r = write_string_file(p, buf, WRITE_STRING_FILE_VERIFY_ON_FAILURE);
2245 if (r < 0)
2246 log_link_warning_errno(link, r, "Cannot set IPv6 dad transmits for interface: %m");
2247
2248 return 0;
2249 }
2250
2251 static int link_set_ipv6_hop_limit(Link *link) {
2252 char buf[DECIMAL_STR_MAX(int) + 1];
2253 const char *p = NULL;
2254 int r;
2255
2256 /* Make this a NOP if IPv6 is not available */
2257 if (!socket_ipv6_is_supported())
2258 return 0;
2259
2260 if (link->flags & IFF_LOOPBACK)
2261 return 0;
2262
2263 if (!link->network)
2264 return 0;
2265
2266 if (link->network->ipv6_hop_limit < 0)
2267 return 0;
2268
2269 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/hop_limit");
2270 xsprintf(buf, "%i", link->network->ipv6_hop_limit);
2271
2272 r = write_string_file(p, buf, WRITE_STRING_FILE_VERIFY_ON_FAILURE);
2273 if (r < 0)
2274 log_link_warning_errno(link, r, "Cannot set IPv6 hop limit for interface: %m");
2275
2276 return 0;
2277 }
2278
2279 static int link_drop_foreign_config(Link *link) {
2280 Address *address;
2281 Route *route;
2282 Iterator i;
2283 int r;
2284
2285 SET_FOREACH(address, link->addresses_foreign, i) {
2286 /* we consider IPv6LL addresses to be managed by the kernel */
2287 if (address->family == AF_INET6 && in_addr_is_link_local(AF_INET6, &address->in_addr) == 1)
2288 continue;
2289
2290 r = address_remove(address, link, link_address_remove_handler);
2291 if (r < 0)
2292 return r;
2293 }
2294
2295 SET_FOREACH(route, link->routes_foreign, i) {
2296 /* do not touch routes managed by the kernel */
2297 if (route->protocol == RTPROT_KERNEL)
2298 continue;
2299
2300 r = route_remove(route, link, link_route_remove_handler);
2301 if (r < 0)
2302 return r;
2303 }
2304
2305 return 0;
2306 }
2307
2308 static int link_drop_config(Link *link) {
2309 Address *address;
2310 Route *route;
2311 Iterator i;
2312 int r;
2313
2314 SET_FOREACH(address, link->addresses, i) {
2315 /* we consider IPv6LL addresses to be managed by the kernel */
2316 if (address->family == AF_INET6 && in_addr_is_link_local(AF_INET6, &address->in_addr) == 1)
2317 continue;
2318
2319 r = address_remove(address, link, link_address_remove_handler);
2320 if (r < 0)
2321 return r;
2322 }
2323
2324 SET_FOREACH(route, link->routes, i) {
2325 /* do not touch routes managed by the kernel */
2326 if (route->protocol == RTPROT_KERNEL)
2327 continue;
2328
2329 r = route_remove(route, link, link_route_remove_handler);
2330 if (r < 0)
2331 return r;
2332 }
2333
2334 ndisc_flush(link);
2335
2336 return 0;
2337 }
2338
2339 static int link_update_lldp(Link *link) {
2340 int r;
2341
2342 assert(link);
2343
2344 if (!link->lldp)
2345 return 0;
2346
2347 if (link->flags & IFF_UP) {
2348 r = sd_lldp_start(link->lldp);
2349 if (r > 0)
2350 log_link_debug(link, "Started LLDP.");
2351 } else {
2352 r = sd_lldp_stop(link->lldp);
2353 if (r > 0)
2354 log_link_debug(link, "Stopped LLDP.");
2355 }
2356
2357 return r;
2358 }
2359
2360 static int link_configure(Link *link) {
2361 int r;
2362
2363 assert(link);
2364 assert(link->network);
2365 assert(link->state == LINK_STATE_PENDING);
2366
2367 if (streq_ptr(link->kind, "vcan")) {
2368
2369 if (!(link->flags & IFF_UP)) {
2370 r = link_up_can(link);
2371 if (r < 0) {
2372 link_enter_failed(link);
2373 return r;
2374 }
2375 }
2376
2377 return 0;
2378 }
2379
2380 /* Drop foreign config, but ignore loopback or critical devices.
2381 * We do not want to remove loopback address or addresses used for root NFS. */
2382 if (!(link->flags & IFF_LOOPBACK) && !(link->network->dhcp_critical)) {
2383 r = link_drop_foreign_config(link);
2384 if (r < 0)
2385 return r;
2386 }
2387
2388 r = link_set_proxy_arp(link);
2389 if (r < 0)
2390 return r;
2391
2392 r = link_set_ipv4_forward(link);
2393 if (r < 0)
2394 return r;
2395
2396 r = link_set_ipv6_forward(link);
2397 if (r < 0)
2398 return r;
2399
2400 r = link_set_ipv6_privacy_extensions(link);
2401 if (r < 0)
2402 return r;
2403
2404 r = link_set_ipv6_accept_ra(link);
2405 if (r < 0)
2406 return r;
2407
2408 r = link_set_ipv6_dad_transmits(link);
2409 if (r < 0)
2410 return r;
2411
2412 r = link_set_ipv6_hop_limit(link);
2413 if (r < 0)
2414 return r;
2415
2416 r = link_set_flags(link);
2417 if (r < 0)
2418 return r;
2419
2420 if (link_ipv4ll_enabled(link)) {
2421 r = ipv4ll_configure(link);
2422 if (r < 0)
2423 return r;
2424 }
2425
2426 if (link_dhcp4_enabled(link)) {
2427 r = dhcp4_configure(link);
2428 if (r < 0)
2429 return r;
2430 }
2431
2432 if (link_dhcp4_server_enabled(link)) {
2433 r = sd_dhcp_server_new(&link->dhcp_server, link->ifindex);
2434 if (r < 0)
2435 return r;
2436
2437 r = sd_dhcp_server_attach_event(link->dhcp_server, NULL, 0);
2438 if (r < 0)
2439 return r;
2440 }
2441
2442 if (link_dhcp6_enabled(link) ||
2443 link_ipv6_accept_ra_enabled(link)) {
2444 r = dhcp6_configure(link);
2445 if (r < 0)
2446 return r;
2447 }
2448
2449 if (link_ipv6_accept_ra_enabled(link)) {
2450 r = ndisc_configure(link);
2451 if (r < 0)
2452 return r;
2453 }
2454
2455 if (link_lldp_rx_enabled(link)) {
2456 r = sd_lldp_new(&link->lldp);
2457 if (r < 0)
2458 return r;
2459
2460 r = sd_lldp_set_ifindex(link->lldp, link->ifindex);
2461 if (r < 0)
2462 return r;
2463
2464 r = sd_lldp_match_capabilities(link->lldp,
2465 link->network->lldp_mode == LLDP_MODE_ROUTERS_ONLY ?
2466 SD_LLDP_SYSTEM_CAPABILITIES_ALL_ROUTERS :
2467 SD_LLDP_SYSTEM_CAPABILITIES_ALL);
2468 if (r < 0)
2469 return r;
2470
2471 r = sd_lldp_set_filter_address(link->lldp, &link->mac);
2472 if (r < 0)
2473 return r;
2474
2475 r = sd_lldp_attach_event(link->lldp, NULL, 0);
2476 if (r < 0)
2477 return r;
2478
2479 r = sd_lldp_set_callback(link->lldp, lldp_handler, link);
2480 if (r < 0)
2481 return r;
2482
2483 r = link_update_lldp(link);
2484 if (r < 0)
2485 return r;
2486 }
2487
2488 if (link_has_carrier(link)) {
2489 r = link_acquire_conf(link);
2490 if (r < 0)
2491 return r;
2492 }
2493
2494 return link_enter_join_netdev(link);
2495 }
2496
2497 static int link_initialized_and_synced(sd_netlink *rtnl, sd_netlink_message *m,
2498 void *userdata) {
2499 _cleanup_link_unref_ Link *link = userdata;
2500 Network *network;
2501 int r;
2502
2503 assert(link);
2504 assert(link->ifname);
2505 assert(link->manager);
2506
2507 if (link->state != LINK_STATE_PENDING)
2508 return 1;
2509
2510 log_link_debug(link, "Link state is up-to-date");
2511
2512 r = link_new_bound_by_list(link);
2513 if (r < 0)
2514 return r;
2515
2516 r = link_handle_bound_by_list(link);
2517 if (r < 0)
2518 return r;
2519
2520 if (!link->network) {
2521 r = network_get(link->manager, link->udev_device, link->ifname,
2522 &link->mac, &network);
2523 if (r == -ENOENT) {
2524 link_enter_unmanaged(link);
2525 return 1;
2526 } else if (r == 0 && network->unmanaged) {
2527 link_enter_unmanaged(link);
2528 return 0;
2529 } else if (r < 0)
2530 return r;
2531
2532 if (link->flags & IFF_LOOPBACK) {
2533 if (network->link_local != ADDRESS_FAMILY_NO)
2534 log_link_debug(link, "Ignoring link-local autoconfiguration for loopback link");
2535
2536 if (network->dhcp != ADDRESS_FAMILY_NO)
2537 log_link_debug(link, "Ignoring DHCP clients for loopback link");
2538
2539 if (network->dhcp_server)
2540 log_link_debug(link, "Ignoring DHCP server for loopback link");
2541 }
2542
2543 r = network_apply(network, link);
2544 if (r < 0)
2545 return r;
2546 }
2547
2548 r = link_new_bound_to_list(link);
2549 if (r < 0)
2550 return r;
2551
2552 r = link_configure(link);
2553 if (r < 0)
2554 return r;
2555
2556 return 1;
2557 }
2558
2559 int link_initialized(Link *link, struct udev_device *device) {
2560 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
2561 int r;
2562
2563 assert(link);
2564 assert(link->manager);
2565 assert(link->manager->rtnl);
2566 assert(device);
2567
2568 if (link->state != LINK_STATE_PENDING)
2569 return 0;
2570
2571 if (link->udev_device)
2572 return 0;
2573
2574 log_link_debug(link, "udev initialized link");
2575
2576 link->udev_device = udev_device_ref(device);
2577
2578 /* udev has initialized the link, but we don't know if we have yet
2579 * processed the NEWLINK messages with the latest state. Do a GETLINK,
2580 * when it returns we know that the pending NEWLINKs have already been
2581 * processed and that we are up-to-date */
2582
2583 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_GETLINK,
2584 link->ifindex);
2585 if (r < 0)
2586 return r;
2587
2588 r = sd_netlink_call_async(link->manager->rtnl, req,
2589 link_initialized_and_synced, link, 0, NULL);
2590 if (r < 0)
2591 return r;
2592
2593 link_ref(link);
2594
2595 return 0;
2596 }
2597
2598 static int link_load(Link *link) {
2599 _cleanup_free_ char *network_file = NULL,
2600 *addresses = NULL,
2601 *routes = NULL,
2602 *dhcp4_address = NULL,
2603 *ipv4ll_address = NULL;
2604 union in_addr_union address;
2605 union in_addr_union route_dst;
2606 const char *p;
2607 int r;
2608
2609 assert(link);
2610
2611 r = parse_env_file(link->state_file, NEWLINE,
2612 "NETWORK_FILE", &network_file,
2613 "ADDRESSES", &addresses,
2614 "ROUTES", &routes,
2615 "DHCP4_ADDRESS", &dhcp4_address,
2616 "IPV4LL_ADDRESS", &ipv4ll_address,
2617 NULL);
2618 if (r < 0 && r != -ENOENT)
2619 return log_link_error_errno(link, r, "Failed to read %s: %m", link->state_file);
2620
2621 if (network_file) {
2622 Network *network;
2623 char *suffix;
2624
2625 /* drop suffix */
2626 suffix = strrchr(network_file, '.');
2627 if (!suffix) {
2628 log_link_debug(link, "Failed to get network name from %s", network_file);
2629 goto network_file_fail;
2630 }
2631 *suffix = '\0';
2632
2633 r = network_get_by_name(link->manager, basename(network_file), &network);
2634 if (r < 0) {
2635 log_link_debug_errno(link, r, "Failed to get network %s: %m", basename(network_file));
2636 goto network_file_fail;
2637 }
2638
2639 r = network_apply(network, link);
2640 if (r < 0)
2641 return log_link_error_errno(link, r, "Failed to apply network %s: %m", basename(network_file));
2642 }
2643
2644 network_file_fail:
2645
2646 if (addresses) {
2647 p = addresses;
2648
2649 for (;;) {
2650 _cleanup_free_ char *address_str = NULL;
2651 char *prefixlen_str;
2652 int family;
2653 unsigned char prefixlen;
2654
2655 r = extract_first_word(&p, &address_str, NULL, 0);
2656 if (r < 0) {
2657 log_link_debug_errno(link, r, "Failed to extract next address string: %m");
2658 continue;
2659 }
2660 if (r == 0)
2661 break;
2662
2663 prefixlen_str = strchr(address_str, '/');
2664 if (!prefixlen_str) {
2665 log_link_debug(link, "Failed to parse address and prefix length %s", address_str);
2666 continue;
2667 }
2668
2669 *prefixlen_str++ = '\0';
2670
2671 r = sscanf(prefixlen_str, "%hhu", &prefixlen);
2672 if (r != 1) {
2673 log_link_error(link, "Failed to parse prefixlen %s", prefixlen_str);
2674 continue;
2675 }
2676
2677 r = in_addr_from_string_auto(address_str, &family, &address);
2678 if (r < 0) {
2679 log_link_debug_errno(link, r, "Failed to parse address %s: %m", address_str);
2680 continue;
2681 }
2682
2683 r = address_add(link, family, &address, prefixlen, NULL);
2684 if (r < 0)
2685 return log_link_error_errno(link, r, "Failed to add address: %m");
2686 }
2687 }
2688
2689 if (routes) {
2690 p = routes;
2691
2692 for (;;) {
2693 Route *route;
2694 _cleanup_free_ char *route_str = NULL;
2695 _cleanup_(sd_event_source_unrefp) sd_event_source *expire = NULL;
2696 usec_t lifetime;
2697 char *prefixlen_str;
2698 int family;
2699 unsigned char prefixlen, tos, table;
2700 uint32_t priority;
2701
2702 r = extract_first_word(&p, &route_str, NULL, 0);
2703 if (r < 0) {
2704 log_link_debug_errno(link, r, "Failed to extract next route string: %m");
2705 continue;
2706 }
2707 if (r == 0)
2708 break;
2709
2710 prefixlen_str = strchr(route_str, '/');
2711 if (!prefixlen_str) {
2712 log_link_debug(link, "Failed to parse route %s", route_str);
2713 continue;
2714 }
2715
2716 *prefixlen_str++ = '\0';
2717
2718 r = sscanf(prefixlen_str, "%hhu/%hhu/%"SCNu32"/%hhu/"USEC_FMT, &prefixlen, &tos, &priority, &table, &lifetime);
2719 if (r != 5) {
2720 log_link_debug(link,
2721 "Failed to parse destination prefix length, tos, priority, table or expiration %s",
2722 prefixlen_str);
2723 continue;
2724 }
2725
2726 r = in_addr_from_string_auto(route_str, &family, &route_dst);
2727 if (r < 0) {
2728 log_link_debug_errno(link, r, "Failed to parse route destination %s: %m", route_str);
2729 continue;
2730 }
2731
2732 r = route_add(link, family, &route_dst, prefixlen, tos, priority, table, &route);
2733 if (r < 0)
2734 return log_link_error_errno(link, r, "Failed to add route: %m");
2735
2736 if (lifetime != USEC_INFINITY) {
2737 r = sd_event_add_time(link->manager->event, &expire, clock_boottime_or_monotonic(), lifetime,
2738 0, route_expire_handler, route);
2739 if (r < 0)
2740 log_link_warning_errno(link, r, "Could not arm route expiration handler: %m");
2741 }
2742
2743 route->lifetime = lifetime;
2744 sd_event_source_unref(route->expire);
2745 route->expire = expire;
2746 expire = NULL;
2747 }
2748 }
2749
2750 if (dhcp4_address) {
2751 r = in_addr_from_string(AF_INET, dhcp4_address, &address);
2752 if (r < 0) {
2753 log_link_debug_errno(link, r, "Failed to parse DHCPv4 address %s: %m", dhcp4_address);
2754 goto dhcp4_address_fail;
2755 }
2756
2757 r = sd_dhcp_client_new(&link->dhcp_client);
2758 if (r < 0)
2759 return log_link_error_errno(link, r, "Failed to create DHCPv4 client: %m");
2760
2761 r = sd_dhcp_client_set_request_address(link->dhcp_client, &address.in);
2762 if (r < 0)
2763 return log_link_error_errno(link, r, "Failed to set initial DHCPv4 address %s: %m", dhcp4_address);
2764 }
2765
2766 dhcp4_address_fail:
2767
2768 if (ipv4ll_address) {
2769 r = in_addr_from_string(AF_INET, ipv4ll_address, &address);
2770 if (r < 0) {
2771 log_link_debug_errno(link, r, "Failed to parse IPv4LL address %s: %m", ipv4ll_address);
2772 goto ipv4ll_address_fail;
2773 }
2774
2775 r = sd_ipv4ll_new(&link->ipv4ll);
2776 if (r < 0)
2777 return log_link_error_errno(link, r, "Failed to create IPv4LL client: %m");
2778
2779 r = sd_ipv4ll_set_address(link->ipv4ll, &address.in);
2780 if (r < 0)
2781 return log_link_error_errno(link, r, "Failed to set initial IPv4LL address %s: %m", ipv4ll_address);
2782 }
2783
2784 ipv4ll_address_fail:
2785
2786 return 0;
2787 }
2788
2789 int link_add(Manager *m, sd_netlink_message *message, Link **ret) {
2790 Link *link;
2791 _cleanup_udev_device_unref_ struct udev_device *device = NULL;
2792 char ifindex_str[2 + DECIMAL_STR_MAX(int)];
2793 int r;
2794
2795 assert(m);
2796 assert(m->rtnl);
2797 assert(message);
2798 assert(ret);
2799
2800 r = link_new(m, message, ret);
2801 if (r < 0)
2802 return r;
2803
2804 link = *ret;
2805
2806 log_link_debug(link, "Link %d added", link->ifindex);
2807
2808 r = link_load(link);
2809 if (r < 0)
2810 return r;
2811
2812 if (detect_container() <= 0) {
2813 /* not in a container, udev will be around */
2814 sprintf(ifindex_str, "n%d", link->ifindex);
2815 device = udev_device_new_from_device_id(m->udev, ifindex_str);
2816 if (!device) {
2817 r = log_link_warning_errno(link, errno, "Could not find udev device: %m");
2818 goto failed;
2819 }
2820
2821 if (udev_device_get_is_initialized(device) <= 0) {
2822 /* not yet ready */
2823 log_link_debug(link, "link pending udev initialization...");
2824 return 0;
2825 }
2826
2827 r = link_initialized(link, device);
2828 if (r < 0)
2829 goto failed;
2830 } else {
2831 /* we are calling a callback directly, so must take a ref */
2832 link_ref(link);
2833
2834 r = link_initialized_and_synced(m->rtnl, NULL, link);
2835 if (r < 0)
2836 goto failed;
2837 }
2838
2839 return 0;
2840 failed:
2841 link_enter_failed(link);
2842 return r;
2843 }
2844
2845 int link_ipv6ll_gained(Link *link, const struct in6_addr *address) {
2846 int r;
2847
2848 assert(link);
2849
2850 log_link_info(link, "Gained IPv6LL");
2851
2852 link->ipv6ll_address = *address;
2853 link_check_ready(link);
2854
2855 if (!IN_SET(link->state, LINK_STATE_PENDING, LINK_STATE_UNMANAGED, LINK_STATE_FAILED)) {
2856 r = link_acquire_ipv6_conf(link);
2857 if (r < 0) {
2858 link_enter_failed(link);
2859 return r;
2860 }
2861 }
2862
2863 return 0;
2864 }
2865
2866 static int link_carrier_gained(Link *link) {
2867 int r;
2868
2869 assert(link);
2870
2871 if (!IN_SET(link->state, LINK_STATE_PENDING, LINK_STATE_UNMANAGED, LINK_STATE_FAILED)) {
2872 r = link_acquire_conf(link);
2873 if (r < 0) {
2874 link_enter_failed(link);
2875 return r;
2876 }
2877
2878 r = link_enter_set_addresses(link);
2879 if (r < 0)
2880 return r;
2881 }
2882
2883 r = link_handle_bound_by_list(link);
2884 if (r < 0)
2885 return r;
2886
2887 return 0;
2888 }
2889
2890 static int link_carrier_lost(Link *link) {
2891 int r;
2892
2893 assert(link);
2894
2895 r = link_stop_clients(link);
2896 if (r < 0) {
2897 link_enter_failed(link);
2898 return r;
2899 }
2900
2901 r = link_drop_config(link);
2902 if (r < 0)
2903 return r;
2904
2905 if (!IN_SET(link->state, LINK_STATE_UNMANAGED, LINK_STATE_PENDING)) {
2906 log_link_debug(link, "State is %s, dropping config", link_state_to_string(link->state));
2907 r = link_drop_foreign_config(link);
2908 if (r < 0)
2909 return r;
2910 }
2911
2912 r = link_handle_bound_by_list(link);
2913 if (r < 0)
2914 return r;
2915
2916 return 0;
2917 }
2918
2919 int link_carrier_reset(Link *link) {
2920 int r;
2921
2922 assert(link);
2923
2924 if (link_has_carrier(link)) {
2925 r = link_carrier_lost(link);
2926 if (r < 0)
2927 return r;
2928
2929 r = link_carrier_gained(link);
2930 if (r < 0)
2931 return r;
2932
2933 log_link_info(link, "Reset carrier");
2934 }
2935
2936 return 0;
2937 }
2938
2939 int link_update(Link *link, sd_netlink_message *m) {
2940 struct ether_addr mac;
2941 const char *ifname;
2942 uint32_t mtu;
2943 bool had_carrier, carrier_gained, carrier_lost;
2944 int r;
2945
2946 assert(link);
2947 assert(link->ifname);
2948 assert(m);
2949
2950 if (link->state == LINK_STATE_LINGER) {
2951 link_ref(link);
2952 log_link_info(link, "Link readded");
2953 link_set_state(link, LINK_STATE_ENSLAVING);
2954
2955 r = link_new_carrier_maps(link);
2956 if (r < 0)
2957 return r;
2958 }
2959
2960 r = sd_netlink_message_read_string(m, IFLA_IFNAME, &ifname);
2961 if (r >= 0 && !streq(ifname, link->ifname)) {
2962 log_link_info(link, "Renamed to %s", ifname);
2963
2964 link_free_carrier_maps(link);
2965
2966 r = free_and_strdup(&link->ifname, ifname);
2967 if (r < 0)
2968 return r;
2969
2970 r = link_new_carrier_maps(link);
2971 if (r < 0)
2972 return r;
2973 }
2974
2975 r = sd_netlink_message_read_u32(m, IFLA_MTU, &mtu);
2976 if (r >= 0 && mtu > 0) {
2977 link->mtu = mtu;
2978 if (!link->original_mtu) {
2979 link->original_mtu = mtu;
2980 log_link_debug(link, "Saved original MTU: %" PRIu32, link->original_mtu);
2981 }
2982
2983 if (link->dhcp_client) {
2984 r = sd_dhcp_client_set_mtu(link->dhcp_client,
2985 link->mtu);
2986 if (r < 0) {
2987 log_link_warning_errno(link, r, "Could not update MTU in DHCP client: %m");
2988 return r;
2989 }
2990 }
2991 }
2992
2993 /* The kernel may broadcast NEWLINK messages without the MAC address
2994 set, simply ignore them. */
2995 r = sd_netlink_message_read_ether_addr(m, IFLA_ADDRESS, &mac);
2996 if (r >= 0) {
2997 if (memcmp(link->mac.ether_addr_octet, mac.ether_addr_octet,
2998 ETH_ALEN)) {
2999
3000 memcpy(link->mac.ether_addr_octet, mac.ether_addr_octet,
3001 ETH_ALEN);
3002
3003 log_link_debug(link, "MAC address: "
3004 "%02hhx:%02hhx:%02hhx:%02hhx:%02hhx:%02hhx",
3005 mac.ether_addr_octet[0],
3006 mac.ether_addr_octet[1],
3007 mac.ether_addr_octet[2],
3008 mac.ether_addr_octet[3],
3009 mac.ether_addr_octet[4],
3010 mac.ether_addr_octet[5]);
3011
3012 if (link->ipv4ll) {
3013 r = sd_ipv4ll_set_mac(link->ipv4ll, &link->mac);
3014 if (r < 0)
3015 return log_link_warning_errno(link, r, "Could not update MAC address in IPv4LL client: %m");
3016 }
3017
3018 if (link->dhcp_client) {
3019 const DUID *duid = link_duid(link);
3020
3021 r = sd_dhcp_client_set_mac(link->dhcp_client,
3022 (const uint8_t *) &link->mac,
3023 sizeof (link->mac),
3024 ARPHRD_ETHER);
3025 if (r < 0)
3026 return log_link_warning_errno(link, r, "Could not update MAC address in DHCP client: %m");
3027
3028 r = sd_dhcp_client_set_iaid_duid(link->dhcp_client,
3029 link->network->iaid,
3030 duid->type,
3031 duid->raw_data_len > 0 ? duid->raw_data : NULL,
3032 duid->raw_data_len);
3033 if (r < 0)
3034 return log_link_warning_errno(link, r, "Could not update DUID/IAID in DHCP client: %m");
3035 }
3036
3037 if (link->dhcp6_client) {
3038 const DUID* duid = link_duid(link);
3039
3040 r = sd_dhcp6_client_set_mac(link->dhcp6_client,
3041 (const uint8_t *) &link->mac,
3042 sizeof (link->mac),
3043 ARPHRD_ETHER);
3044 if (r < 0)
3045 return log_link_warning_errno(link, r, "Could not update MAC address in DHCPv6 client: %m");
3046
3047 r = sd_dhcp6_client_set_iaid(link->dhcp6_client,
3048 link->network->iaid);
3049 if (r < 0)
3050 return log_link_warning_errno(link, r, "Could not update DHCPv6 IAID: %m");
3051
3052 r = sd_dhcp6_client_set_duid(link->dhcp6_client,
3053 duid->type,
3054 duid->raw_data_len > 0 ? duid->raw_data : NULL,
3055 duid->raw_data_len);
3056 if (r < 0)
3057 return log_link_warning_errno(link, r, "Could not update DHCPv6 DUID: %m");
3058 }
3059 }
3060 }
3061
3062 had_carrier = link_has_carrier(link);
3063
3064 r = link_update_flags(link, m);
3065 if (r < 0)
3066 return r;
3067
3068 r = link_update_lldp(link);
3069 if (r < 0)
3070 return r;
3071
3072 carrier_gained = !had_carrier && link_has_carrier(link);
3073 carrier_lost = had_carrier && !link_has_carrier(link);
3074
3075 if (carrier_gained) {
3076 log_link_info(link, "Gained carrier");
3077
3078 r = link_carrier_gained(link);
3079 if (r < 0)
3080 return r;
3081 } else if (carrier_lost) {
3082 log_link_info(link, "Lost carrier");
3083
3084 r = link_carrier_lost(link);
3085 if (r < 0)
3086 return r;
3087 }
3088
3089 return 0;
3090 }
3091
3092 static void print_link_hashmap(FILE *f, const char *prefix, Hashmap* h) {
3093 bool space = false;
3094 Iterator i;
3095 Link *link;
3096
3097 assert(f);
3098 assert(prefix);
3099
3100 if (hashmap_isempty(h))
3101 return;
3102
3103 fputs(prefix, f);
3104 HASHMAP_FOREACH(link, h, i) {
3105 if (space)
3106 fputc(' ', f);
3107
3108 fprintf(f, "%i", link->ifindex);
3109 space = true;
3110 }
3111
3112 fputc('\n', f);
3113 }
3114
3115 int link_save(Link *link) {
3116 _cleanup_free_ char *temp_path = NULL;
3117 _cleanup_fclose_ FILE *f = NULL;
3118 const char *admin_state, *oper_state;
3119 Address *a;
3120 Route *route;
3121 Iterator i;
3122 int r;
3123
3124 assert(link);
3125 assert(link->state_file);
3126 assert(link->lease_file);
3127 assert(link->manager);
3128
3129 if (link->state == LINK_STATE_LINGER) {
3130 unlink(link->state_file);
3131 return 0;
3132 }
3133
3134 link_lldp_save(link);
3135
3136 admin_state = link_state_to_string(link->state);
3137 assert(admin_state);
3138
3139 oper_state = link_operstate_to_string(link->operstate);
3140 assert(oper_state);
3141
3142 r = fopen_temporary(link->state_file, &f, &temp_path);
3143 if (r < 0)
3144 goto fail;
3145
3146 (void) fchmod(fileno(f), 0644);
3147
3148 fprintf(f,
3149 "# This is private data. Do not parse.\n"
3150 "ADMIN_STATE=%s\n"
3151 "OPER_STATE=%s\n",
3152 admin_state, oper_state);
3153
3154 if (link->network) {
3155 bool space;
3156 sd_dhcp6_lease *dhcp6_lease = NULL;
3157 const char *dhcp_domainname = NULL;
3158 char **dhcp6_domains = NULL;
3159 unsigned j;
3160
3161 if (link->dhcp6_client) {
3162 r = sd_dhcp6_client_get_lease(link->dhcp6_client, &dhcp6_lease);
3163 if (r < 0 && r != -ENOMSG)
3164 log_link_debug(link, "No DHCPv6 lease");
3165 }
3166
3167 fprintf(f, "NETWORK_FILE=%s\n", link->network->filename);
3168
3169 fputs("DNS=", f);
3170 space = false;
3171
3172 for (j = 0; j < link->network->n_dns; j++) {
3173 _cleanup_free_ char *b = NULL;
3174
3175 r = in_addr_to_string(link->network->dns[j].family,
3176 &link->network->dns[j].address, &b);
3177 if (r < 0) {
3178 log_debug_errno(r, "Failed to format address, ignoring: %m");
3179 continue;
3180 }
3181
3182 if (space)
3183 fputc(' ', f);
3184 fputs(b, f);
3185 space = true;
3186 }
3187
3188 if (link->network->dhcp_use_dns &&
3189 link->dhcp_lease) {
3190 const struct in_addr *addresses;
3191
3192 r = sd_dhcp_lease_get_dns(link->dhcp_lease, &addresses);
3193 if (r > 0) {
3194 if (space)
3195 fputc(' ', f);
3196 serialize_in_addrs(f, addresses, r);
3197 space = true;
3198 }
3199 }
3200
3201 if (link->network->dhcp_use_dns && dhcp6_lease) {
3202 struct in6_addr *in6_addrs;
3203
3204 r = sd_dhcp6_lease_get_dns(dhcp6_lease, &in6_addrs);
3205 if (r > 0) {
3206 if (space)
3207 fputc(' ', f);
3208 serialize_in6_addrs(f, in6_addrs, r);
3209 space = true;
3210 }
3211 }
3212
3213 /* Make sure to flush out old entries before we use the NDISC data */
3214 ndisc_vacuum(link);
3215
3216 if (link->network->dhcp_use_dns && link->ndisc_rdnss) {
3217 NDiscRDNSS *dd;
3218
3219 SET_FOREACH(dd, link->ndisc_rdnss, i) {
3220 if (space)
3221 fputc(' ', f);
3222
3223 serialize_in6_addrs(f, &dd->address, 1);
3224 space = true;
3225 }
3226 }
3227
3228 fputc('\n', f);
3229
3230 fputs("NTP=", f);
3231 space = false;
3232 fputstrv(f, link->network->ntp, NULL, &space);
3233
3234 if (link->network->dhcp_use_ntp &&
3235 link->dhcp_lease) {
3236 const struct in_addr *addresses;
3237
3238 r = sd_dhcp_lease_get_ntp(link->dhcp_lease, &addresses);
3239 if (r > 0) {
3240 if (space)
3241 fputc(' ', f);
3242 serialize_in_addrs(f, addresses, r);
3243 space = true;
3244 }
3245 }
3246
3247 if (link->network->dhcp_use_ntp && dhcp6_lease) {
3248 struct in6_addr *in6_addrs;
3249 char **hosts;
3250
3251 r = sd_dhcp6_lease_get_ntp_addrs(dhcp6_lease,
3252 &in6_addrs);
3253 if (r > 0) {
3254 if (space)
3255 fputc(' ', f);
3256 serialize_in6_addrs(f, in6_addrs, r);
3257 space = true;
3258 }
3259
3260 r = sd_dhcp6_lease_get_ntp_fqdn(dhcp6_lease, &hosts);
3261 if (r > 0)
3262 fputstrv(f, hosts, NULL, &space);
3263 }
3264
3265 fputc('\n', f);
3266
3267 if (link->network->dhcp_use_domains != DHCP_USE_DOMAINS_NO) {
3268 if (link->dhcp_lease)
3269 (void) sd_dhcp_lease_get_domainname(link->dhcp_lease, &dhcp_domainname);
3270 if (dhcp6_lease)
3271 (void) sd_dhcp6_lease_get_domains(dhcp6_lease, &dhcp6_domains);
3272 }
3273
3274 fputs("DOMAINS=", f);
3275 fputstrv(f, link->network->search_domains, NULL, &space);
3276
3277 if (link->network->dhcp_use_domains == DHCP_USE_DOMAINS_YES) {
3278 NDiscDNSSL *dd;
3279
3280 if (dhcp_domainname)
3281 fputs_with_space(f, dhcp_domainname, NULL, &space);
3282 if (dhcp6_domains)
3283 fputstrv(f, dhcp6_domains, NULL, &space);
3284
3285 SET_FOREACH(dd, link->ndisc_dnssl, i)
3286 fputs_with_space(f, NDISC_DNSSL_DOMAIN(dd), NULL, &space);
3287 }
3288
3289 fputc('\n', f);
3290
3291 fputs("ROUTE_DOMAINS=", f);
3292 fputstrv(f, link->network->route_domains, NULL, NULL);
3293
3294 if (link->network->dhcp_use_domains == DHCP_USE_DOMAINS_ROUTE) {
3295 NDiscDNSSL *dd;
3296
3297 if (dhcp_domainname)
3298 fputs_with_space(f, dhcp_domainname, NULL, &space);
3299 if (dhcp6_domains)
3300 fputstrv(f, dhcp6_domains, NULL, &space);
3301
3302 SET_FOREACH(dd, link->ndisc_dnssl, i)
3303 fputs_with_space(f, NDISC_DNSSL_DOMAIN(dd), NULL, &space);
3304 }
3305
3306 fputc('\n', f);
3307
3308 fprintf(f, "LLMNR=%s\n",
3309 resolve_support_to_string(link->network->llmnr));
3310 fprintf(f, "MDNS=%s\n",
3311 resolve_support_to_string(link->network->mdns));
3312
3313 if (link->network->dnssec_mode != _DNSSEC_MODE_INVALID)
3314 fprintf(f, "DNSSEC=%s\n",
3315 dnssec_mode_to_string(link->network->dnssec_mode));
3316
3317 if (!set_isempty(link->network->dnssec_negative_trust_anchors)) {
3318 const char *n;
3319
3320 fputs("DNSSEC_NTA=", f);
3321 space = false;
3322 SET_FOREACH(n, link->network->dnssec_negative_trust_anchors, i)
3323 fputs_with_space(f, n, NULL, &space);
3324 fputc('\n', f);
3325 }
3326
3327 fputs("ADDRESSES=", f);
3328 space = false;
3329 SET_FOREACH(a, link->addresses, i) {
3330 _cleanup_free_ char *address_str = NULL;
3331
3332 r = in_addr_to_string(a->family, &a->in_addr, &address_str);
3333 if (r < 0)
3334 goto fail;
3335
3336 fprintf(f, "%s%s/%u", space ? " " : "", address_str, a->prefixlen);
3337 space = true;
3338 }
3339 fputc('\n', f);
3340
3341 fputs("ROUTES=", f);
3342 space = false;
3343 SET_FOREACH(route, link->routes, i) {
3344 _cleanup_free_ char *route_str = NULL;
3345
3346 r = in_addr_to_string(route->family, &route->dst, &route_str);
3347 if (r < 0)
3348 goto fail;
3349
3350 fprintf(f, "%s%s/%hhu/%hhu/%"PRIu32"/%hhu/"USEC_FMT, space ? " " : "", route_str,
3351 route->dst_prefixlen, route->tos, route->priority, route->table, route->lifetime);
3352 space = true;
3353 }
3354
3355 fputc('\n', f);
3356 }
3357
3358 print_link_hashmap(f, "CARRIER_BOUND_TO=", link->bound_to_links);
3359 print_link_hashmap(f, "CARRIER_BOUND_BY=", link->bound_by_links);
3360
3361 if (link->dhcp_lease) {
3362 struct in_addr address;
3363 const char *tz = NULL;
3364
3365 assert(link->network);
3366
3367 r = sd_dhcp_lease_get_timezone(link->dhcp_lease, &tz);
3368 if (r >= 0)
3369 fprintf(f, "TIMEZONE=%s\n", tz);
3370
3371 r = sd_dhcp_lease_get_address(link->dhcp_lease, &address);
3372 if (r >= 0) {
3373 fputs("DHCP4_ADDRESS=", f);
3374 serialize_in_addrs(f, &address, 1);
3375 fputc('\n', f);
3376 }
3377
3378 r = dhcp_lease_save(link->dhcp_lease, link->lease_file);
3379 if (r < 0)
3380 goto fail;
3381
3382 fprintf(f,
3383 "DHCP_LEASE=%s\n",
3384 link->lease_file);
3385 } else
3386 unlink(link->lease_file);
3387
3388 if (link->ipv4ll) {
3389 struct in_addr address;
3390
3391 r = sd_ipv4ll_get_address(link->ipv4ll, &address);
3392 if (r >= 0) {
3393 fputs("IPV4LL_ADDRESS=", f);
3394 serialize_in_addrs(f, &address, 1);
3395 fputc('\n', f);
3396 }
3397 }
3398
3399 r = fflush_and_check(f);
3400 if (r < 0)
3401 goto fail;
3402
3403 if (rename(temp_path, link->state_file) < 0) {
3404 r = -errno;
3405 goto fail;
3406 }
3407
3408 return 0;
3409
3410 fail:
3411 (void) unlink(link->state_file);
3412 if (temp_path)
3413 (void) unlink(temp_path);
3414
3415 return log_link_error_errno(link, r, "Failed to save link data to %s: %m", link->state_file);
3416 }
3417
3418 /* The serialized state in /run is no longer up-to-date. */
3419 void link_dirty(Link *link) {
3420 int r;
3421
3422 assert(link);
3423
3424 /* mark manager dirty as link is dirty */
3425 manager_dirty(link->manager);
3426
3427 r = set_ensure_allocated(&link->manager->dirty_links, NULL);
3428 if (r < 0)
3429 /* allocation errors are ignored */
3430 return;
3431
3432 r = set_put(link->manager->dirty_links, link);
3433 if (r <= 0)
3434 /* don't take another ref if the link was already dirty */
3435 return;
3436
3437 link_ref(link);
3438 }
3439
3440 /* The serialized state in /run is up-to-date */
3441 void link_clean(Link *link) {
3442 assert(link);
3443 assert(link->manager);
3444
3445 set_remove(link->manager->dirty_links, link);
3446 link_unref(link);
3447 }
3448
3449 static const char* const link_state_table[_LINK_STATE_MAX] = {
3450 [LINK_STATE_PENDING] = "pending",
3451 [LINK_STATE_ENSLAVING] = "configuring",
3452 [LINK_STATE_SETTING_ADDRESSES] = "configuring",
3453 [LINK_STATE_SETTING_ROUTES] = "configuring",
3454 [LINK_STATE_CONFIGURED] = "configured",
3455 [LINK_STATE_UNMANAGED] = "unmanaged",
3456 [LINK_STATE_FAILED] = "failed",
3457 [LINK_STATE_LINGER] = "linger",
3458 };
3459
3460 DEFINE_STRING_TABLE_LOOKUP(link_state, LinkState);
3461
3462 static const char* const link_operstate_table[_LINK_OPERSTATE_MAX] = {
3463 [LINK_OPERSTATE_OFF] = "off",
3464 [LINK_OPERSTATE_NO_CARRIER] = "no-carrier",
3465 [LINK_OPERSTATE_DORMANT] = "dormant",
3466 [LINK_OPERSTATE_CARRIER] = "carrier",
3467 [LINK_OPERSTATE_DEGRADED] = "degraded",
3468 [LINK_OPERSTATE_ROUTABLE] = "routable",
3469 };
3470
3471 DEFINE_STRING_TABLE_LOOKUP(link_operstate, LinkOperationalState);