]> git.ipfire.org Git - thirdparty/systemd.git/blob - src/network/networkd-link.c
network: drop unused variable
[thirdparty/systemd.git] / src / network / networkd-link.c
1 /* SPDX-License-Identifier: LGPL-2.1+ */
2
3 #include <netinet/in.h>
4 #include <linux/if.h>
5 #include <unistd.h>
6
7 #include "alloc-util.h"
8 #include "bus-util.h"
9 #include "dhcp-identifier.h"
10 #include "dhcp-lease-internal.h"
11 #include "env-file.h"
12 #include "fd-util.h"
13 #include "fileio.h"
14 #include "missing_network.h"
15 #include "netdev/bond.h"
16 #include "netdev/bridge.h"
17 #include "netdev/ipvlan.h"
18 #include "netdev/vrf.h"
19 #include "netlink-util.h"
20 #include "network-internal.h"
21 #include "networkd-can.h"
22 #include "networkd-ipv6-proxy-ndp.h"
23 #include "networkd-lldp-tx.h"
24 #include "networkd-manager.h"
25 #include "networkd-ndisc.h"
26 #include "networkd-neighbor.h"
27 #include "networkd-radv.h"
28 #include "networkd-routing-policy-rule.h"
29 #include "set.h"
30 #include "socket-util.h"
31 #include "stdio-util.h"
32 #include "string-table.h"
33 #include "strv.h"
34 #include "sysctl-util.h"
35 #include "tmpfile-util.h"
36 #include "udev-util.h"
37 #include "util.h"
38 #include "virt.h"
39
40 uint32_t link_get_vrf_table(Link *link) {
41 return link->network->vrf ? VRF(link->network->vrf)->table : RT_TABLE_MAIN;
42 }
43
44 uint32_t link_get_dhcp_route_table(Link *link) {
45 /* When the interface is part of an VRF use the VRFs routing table, unless
46 * another table is explicitly specified. */
47 if (link->network->dhcp_route_table_set)
48 return link->network->dhcp_route_table;
49 return link_get_vrf_table(link);
50 }
51
52 uint32_t link_get_ipv6_accept_ra_route_table(Link *link) {
53 if (link->network->ipv6_accept_ra_route_table_set)
54 return link->network->ipv6_accept_ra_route_table;
55 return link_get_vrf_table(link);
56 }
57
58 DUID* link_get_duid(Link *link) {
59 if (link->network->duid.type != _DUID_TYPE_INVALID)
60 return &link->network->duid;
61 else
62 return &link->manager->duid;
63 }
64
65 static bool link_dhcp6_enabled(Link *link) {
66 assert(link);
67
68 if (!socket_ipv6_is_supported())
69 return false;
70
71 if (link->flags & IFF_LOOPBACK)
72 return false;
73
74 if (!link->network)
75 return false;
76
77 if (link->network->bond)
78 return false;
79
80 if (STRPTR_IN_SET(link->kind, "can", "vcan"))
81 return false;
82
83 if (manager_sysctl_ipv6_enabled(link->manager) == 0)
84 return false;
85
86 return link->network->dhcp & ADDRESS_FAMILY_IPV6;
87 }
88
89 static bool link_dhcp4_enabled(Link *link) {
90 assert(link);
91
92 if (link->flags & IFF_LOOPBACK)
93 return false;
94
95 if (!link->network)
96 return false;
97
98 if (link->network->bond)
99 return false;
100
101 if (STRPTR_IN_SET(link->kind, "can", "vcan"))
102 return false;
103
104 return link->network->dhcp & ADDRESS_FAMILY_IPV4;
105 }
106
107 static bool link_dhcp4_server_enabled(Link *link) {
108 assert(link);
109
110 if (link->flags & IFF_LOOPBACK)
111 return false;
112
113 if (!link->network)
114 return false;
115
116 if (link->network->bond)
117 return false;
118
119 if (STRPTR_IN_SET(link->kind, "can", "vcan"))
120 return false;
121
122 return link->network->dhcp_server;
123 }
124
125 bool link_ipv4ll_enabled(Link *link) {
126 assert(link);
127
128 if (link->flags & IFF_LOOPBACK)
129 return false;
130
131 if (!link->network)
132 return false;
133
134 if (STRPTR_IN_SET(link->kind, "vrf", "wireguard", "ipip", "gre", "ip6gre", "ip6tnl", "sit", "vti", "vti6", "can", "vcan"))
135 return false;
136
137 /* L3 or L3S mode do not support ARP. */
138 if (IN_SET(link_get_ipvlan_mode(link), NETDEV_IPVLAN_MODE_L3, NETDEV_IPVLAN_MODE_L3S))
139 return false;
140
141 if (link->network->bond)
142 return false;
143
144 return link->network->link_local & ADDRESS_FAMILY_IPV4;
145 }
146
147 bool link_ipv4ll_fallback_enabled(Link *link) {
148 assert(link);
149
150 if (link->flags & IFF_LOOPBACK)
151 return false;
152
153 if (!link->network)
154 return false;
155
156 if (STRPTR_IN_SET(link->kind, "vrf", "wireguard", "ipip", "gre", "ip6gre", "ip6tnl", "sit", "vti", "vti6", "can", "vcan"))
157 return false;
158
159 /* L3 or L3S mode do not support ARP. */
160 if (IN_SET(link_get_ipvlan_mode(link), NETDEV_IPVLAN_MODE_L3, NETDEV_IPVLAN_MODE_L3S))
161 return false;
162
163 if (link->network->bond)
164 return false;
165
166 return link->network->link_local & ADDRESS_FAMILY_FALLBACK_IPV4;
167 }
168
169 static bool link_ipv6ll_enabled(Link *link) {
170 assert(link);
171
172 if (!socket_ipv6_is_supported())
173 return false;
174
175 if (link->flags & IFF_LOOPBACK)
176 return false;
177
178 if (!link->network)
179 return false;
180
181 if (STRPTR_IN_SET(link->kind, "vrf", "wireguard", "ipip", "gre", "sit", "vti", "can", "vcan"))
182 return false;
183
184 if (link->network->bond)
185 return false;
186
187 if (manager_sysctl_ipv6_enabled(link->manager) == 0)
188 return false;
189
190 return link->network->link_local & ADDRESS_FAMILY_IPV6;
191 }
192
193 static bool link_ipv6_enabled(Link *link) {
194 assert(link);
195
196 if (!socket_ipv6_is_supported())
197 return false;
198
199 if (link->network->bond)
200 return false;
201
202 if (manager_sysctl_ipv6_enabled(link->manager) == 0)
203 return false;
204
205 if (STRPTR_IN_SET(link->kind, "can", "vcan"))
206 return false;
207
208 /* DHCPv6 client will not be started if no IPv6 link-local address is configured. */
209 return link_ipv6ll_enabled(link) || network_has_static_ipv6_addresses(link->network);
210 }
211
212 static bool link_radv_enabled(Link *link) {
213 assert(link);
214
215 if (!link_ipv6ll_enabled(link))
216 return false;
217
218 return link->network->router_prefix_delegation != RADV_PREFIX_DELEGATION_NONE;
219 }
220
221 static bool link_ipv4_forward_enabled(Link *link) {
222 assert(link);
223
224 if (link->flags & IFF_LOOPBACK)
225 return false;
226
227 if (!link->network)
228 return false;
229
230 if (link->network->ip_forward == _ADDRESS_FAMILY_BOOLEAN_INVALID)
231 return false;
232
233 return link->network->ip_forward & ADDRESS_FAMILY_IPV4;
234 }
235
236 static bool link_ipv6_forward_enabled(Link *link) {
237 assert(link);
238
239 if (!socket_ipv6_is_supported())
240 return false;
241
242 if (link->flags & IFF_LOOPBACK)
243 return false;
244
245 if (!link->network)
246 return false;
247
248 if (link->network->ip_forward == _ADDRESS_FAMILY_BOOLEAN_INVALID)
249 return false;
250
251 if (manager_sysctl_ipv6_enabled(link->manager) == 0)
252 return false;
253
254 return link->network->ip_forward & ADDRESS_FAMILY_IPV6;
255 }
256
257 static bool link_proxy_arp_enabled(Link *link) {
258 assert(link);
259
260 if (link->flags & IFF_LOOPBACK)
261 return false;
262
263 if (!link->network)
264 return false;
265
266 if (link->network->proxy_arp < 0)
267 return false;
268
269 return true;
270 }
271
272 static bool link_ipv6_accept_ra_enabled(Link *link) {
273 assert(link);
274
275 if (!socket_ipv6_is_supported())
276 return false;
277
278 if (link->flags & IFF_LOOPBACK)
279 return false;
280
281 if (!link->network)
282 return false;
283
284 if (!link_ipv6ll_enabled(link))
285 return false;
286
287 /* If unset use system default (enabled if local forwarding is disabled.
288 * disabled if local forwarding is enabled).
289 * If set, ignore or enforce RA independent of local forwarding state.
290 */
291 if (link->network->ipv6_accept_ra < 0)
292 /* default to accept RA if ip_forward is disabled and ignore RA if ip_forward is enabled */
293 return !link_ipv6_forward_enabled(link);
294 else if (link->network->ipv6_accept_ra > 0)
295 /* accept RA even if ip_forward is enabled */
296 return true;
297 else
298 /* ignore RA */
299 return false;
300 }
301
302 static IPv6PrivacyExtensions link_ipv6_privacy_extensions(Link *link) {
303 assert(link);
304
305 if (!socket_ipv6_is_supported())
306 return _IPV6_PRIVACY_EXTENSIONS_INVALID;
307
308 if (link->flags & IFF_LOOPBACK)
309 return _IPV6_PRIVACY_EXTENSIONS_INVALID;
310
311 if (!link->network)
312 return _IPV6_PRIVACY_EXTENSIONS_INVALID;
313
314 return link->network->ipv6_privacy_extensions;
315 }
316
317 static int link_enable_ipv6(Link *link) {
318 bool disabled;
319 int r;
320
321 if (link->flags & IFF_LOOPBACK)
322 return 0;
323
324 disabled = !link_ipv6_enabled(link);
325
326 r = sysctl_write_ip_property_boolean(AF_INET6, link->ifname, "disable_ipv6", disabled);
327 if (r < 0)
328 log_link_warning_errno(link, r, "Cannot %s IPv6: %m", enable_disable(!disabled));
329 else
330 log_link_info(link, "IPv6 successfully %sd", enable_disable(!disabled));
331
332 return 0;
333 }
334
335 static bool link_is_enslaved(Link *link) {
336 if (link->flags & IFF_SLAVE)
337 /* Even if the link is not managed by networkd, honor IFF_SLAVE flag. */
338 return true;
339
340 if (!link->network)
341 return false;
342
343 if (link->master_ifindex > 0 && link->network->bridge)
344 return true;
345
346 /* TODO: add conditions for other netdevs. */
347
348 return false;
349 }
350
351 static void link_update_master_operstate(Link *link, NetDev *netdev) {
352 Link *master;
353
354 if (!netdev)
355 return;
356
357 if (link_get(link->manager, netdev->ifindex, &master) < 0)
358 return;
359
360 link_update_operstate(master, true);
361 }
362
363 void link_update_operstate(Link *link, bool also_update_master) {
364 LinkOperationalState operstate;
365 Iterator i;
366
367 assert(link);
368
369 if (link->kernel_operstate == IF_OPER_DORMANT)
370 operstate = LINK_OPERSTATE_DORMANT;
371 else if (link_has_carrier(link)) {
372 Address *address;
373 uint8_t scope = RT_SCOPE_NOWHERE;
374
375 /* if we have carrier, check what addresses we have */
376 SET_FOREACH(address, link->addresses, i) {
377 if (!address_is_ready(address))
378 continue;
379
380 if (address->scope < scope)
381 scope = address->scope;
382 }
383
384 /* for operstate we also take foreign addresses into account */
385 SET_FOREACH(address, link->addresses_foreign, i) {
386 if (!address_is_ready(address))
387 continue;
388
389 if (address->scope < scope)
390 scope = address->scope;
391 }
392
393 if (scope < RT_SCOPE_SITE)
394 /* universally accessible addresses found */
395 operstate = LINK_OPERSTATE_ROUTABLE;
396 else if (scope < RT_SCOPE_HOST)
397 /* only link or site local addresses found */
398 operstate = LINK_OPERSTATE_DEGRADED;
399 else
400 /* no useful addresses found */
401 operstate = LINK_OPERSTATE_CARRIER;
402 } else if (link->flags & IFF_UP)
403 operstate = LINK_OPERSTATE_NO_CARRIER;
404 else
405 operstate = LINK_OPERSTATE_OFF;
406
407 if (IN_SET(operstate, LINK_OPERSTATE_DEGRADED, LINK_OPERSTATE_CARRIER) &&
408 link_is_enslaved(link))
409 operstate = LINK_OPERSTATE_ENSLAVED;
410
411 if (operstate >= LINK_OPERSTATE_CARRIER) {
412 Link *slave;
413
414 SET_FOREACH(slave, link->slaves, i) {
415 link_update_operstate(slave, false);
416
417 if (slave->operstate < LINK_OPERSTATE_CARRIER)
418 operstate = LINK_OPERSTATE_DEGRADED_CARRIER;
419 }
420 }
421
422 if (link->operstate != operstate) {
423 link->operstate = operstate;
424 link_send_changed(link, "OperationalState", NULL);
425 link_dirty(link);
426 }
427
428 if (also_update_master && link->network) {
429 link_update_master_operstate(link, link->network->bond);
430 link_update_master_operstate(link, link->network->bridge);
431 }
432 }
433
434 #define FLAG_STRING(string, flag, old, new) \
435 (((old ^ new) & flag) \
436 ? ((old & flag) ? (" -" string) : (" +" string)) \
437 : "")
438
439 static int link_update_flags(Link *link, sd_netlink_message *m, bool force_update_operstate) {
440 unsigned flags, unknown_flags_added, unknown_flags_removed, unknown_flags;
441 uint8_t operstate;
442 int r;
443
444 assert(link);
445
446 r = sd_rtnl_message_link_get_flags(m, &flags);
447 if (r < 0)
448 return log_link_warning_errno(link, r, "Could not get link flags: %m");
449
450 r = sd_netlink_message_read_u8(m, IFLA_OPERSTATE, &operstate);
451 if (r < 0)
452 /* if we got a message without operstate, take it to mean
453 the state was unchanged */
454 operstate = link->kernel_operstate;
455
456 if (!force_update_operstate && (link->flags == flags) && (link->kernel_operstate == operstate))
457 return 0;
458
459 if (link->flags != flags) {
460 log_link_debug(link, "Flags change:%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s",
461 FLAG_STRING("LOOPBACK", IFF_LOOPBACK, link->flags, flags),
462 FLAG_STRING("MASTER", IFF_MASTER, link->flags, flags),
463 FLAG_STRING("SLAVE", IFF_SLAVE, link->flags, flags),
464 FLAG_STRING("UP", IFF_UP, link->flags, flags),
465 FLAG_STRING("DORMANT", IFF_DORMANT, link->flags, flags),
466 FLAG_STRING("LOWER_UP", IFF_LOWER_UP, link->flags, flags),
467 FLAG_STRING("RUNNING", IFF_RUNNING, link->flags, flags),
468 FLAG_STRING("MULTICAST", IFF_MULTICAST, link->flags, flags),
469 FLAG_STRING("BROADCAST", IFF_BROADCAST, link->flags, flags),
470 FLAG_STRING("POINTOPOINT", IFF_POINTOPOINT, link->flags, flags),
471 FLAG_STRING("PROMISC", IFF_PROMISC, link->flags, flags),
472 FLAG_STRING("ALLMULTI", IFF_ALLMULTI, link->flags, flags),
473 FLAG_STRING("PORTSEL", IFF_PORTSEL, link->flags, flags),
474 FLAG_STRING("AUTOMEDIA", IFF_AUTOMEDIA, link->flags, flags),
475 FLAG_STRING("DYNAMIC", IFF_DYNAMIC, link->flags, flags),
476 FLAG_STRING("NOARP", IFF_NOARP, link->flags, flags),
477 FLAG_STRING("NOTRAILERS", IFF_NOTRAILERS, link->flags, flags),
478 FLAG_STRING("DEBUG", IFF_DEBUG, link->flags, flags),
479 FLAG_STRING("ECHO", IFF_ECHO, link->flags, flags));
480
481 unknown_flags = ~(IFF_LOOPBACK | IFF_MASTER | IFF_SLAVE | IFF_UP |
482 IFF_DORMANT | IFF_LOWER_UP | IFF_RUNNING |
483 IFF_MULTICAST | IFF_BROADCAST | IFF_POINTOPOINT |
484 IFF_PROMISC | IFF_ALLMULTI | IFF_PORTSEL |
485 IFF_AUTOMEDIA | IFF_DYNAMIC | IFF_NOARP |
486 IFF_NOTRAILERS | IFF_DEBUG | IFF_ECHO);
487 unknown_flags_added = ((link->flags ^ flags) & flags & unknown_flags);
488 unknown_flags_removed = ((link->flags ^ flags) & link->flags & unknown_flags);
489
490 /* link flags are currently at most 18 bits, let's align to
491 * printing 20 */
492 if (unknown_flags_added)
493 log_link_debug(link,
494 "Unknown link flags gained: %#.5x (ignoring)",
495 unknown_flags_added);
496
497 if (unknown_flags_removed)
498 log_link_debug(link,
499 "Unknown link flags lost: %#.5x (ignoring)",
500 unknown_flags_removed);
501 }
502
503 link->flags = flags;
504 link->kernel_operstate = operstate;
505
506 link_update_operstate(link, true);
507
508 return 0;
509 }
510
511 static int link_new(Manager *manager, sd_netlink_message *message, Link **ret) {
512 _cleanup_(link_unrefp) Link *link = NULL;
513 uint16_t type;
514 const char *ifname, *kind = NULL;
515 int r, ifindex;
516 unsigned short iftype;
517
518 assert(manager);
519 assert(message);
520 assert(ret);
521
522 /* check for link kind */
523 r = sd_netlink_message_enter_container(message, IFLA_LINKINFO);
524 if (r == 0) {
525 (void) sd_netlink_message_read_string(message, IFLA_INFO_KIND, &kind);
526 r = sd_netlink_message_exit_container(message);
527 if (r < 0)
528 return r;
529 }
530
531 r = sd_netlink_message_get_type(message, &type);
532 if (r < 0)
533 return r;
534 else if (type != RTM_NEWLINK)
535 return -EINVAL;
536
537 r = sd_rtnl_message_link_get_ifindex(message, &ifindex);
538 if (r < 0)
539 return r;
540 else if (ifindex <= 0)
541 return -EINVAL;
542
543 r = sd_rtnl_message_link_get_type(message, &iftype);
544 if (r < 0)
545 return r;
546
547 r = sd_netlink_message_read_string(message, IFLA_IFNAME, &ifname);
548 if (r < 0)
549 return r;
550
551 link = new(Link, 1);
552 if (!link)
553 return -ENOMEM;
554
555 *link = (Link) {
556 .n_ref = 1,
557 .manager = manager,
558 .state = LINK_STATE_PENDING,
559 .rtnl_extended_attrs = true,
560 .ifindex = ifindex,
561 .iftype = iftype,
562 };
563
564 link->ifname = strdup(ifname);
565 if (!link->ifname)
566 return -ENOMEM;
567
568 if (kind) {
569 link->kind = strdup(kind);
570 if (!link->kind)
571 return -ENOMEM;
572 }
573
574 r = sd_netlink_message_read_u32(message, IFLA_MASTER, (uint32_t *)&link->master_ifindex);
575 if (r < 0)
576 log_link_debug_errno(link, r, "New device has no master, continuing without");
577
578 r = sd_netlink_message_read_ether_addr(message, IFLA_ADDRESS, &link->mac);
579 if (r < 0)
580 log_link_debug_errno(link, r, "MAC address not found for new device, continuing without");
581
582 if (asprintf(&link->state_file, "/run/systemd/netif/links/%d", link->ifindex) < 0)
583 return -ENOMEM;
584
585 if (asprintf(&link->lease_file, "/run/systemd/netif/leases/%d", link->ifindex) < 0)
586 return -ENOMEM;
587
588 if (asprintf(&link->lldp_file, "/run/systemd/netif/lldp/%d", link->ifindex) < 0)
589 return -ENOMEM;
590
591 r = hashmap_ensure_allocated(&manager->links, NULL);
592 if (r < 0)
593 return r;
594
595 r = hashmap_put(manager->links, INT_TO_PTR(link->ifindex), link);
596 if (r < 0)
597 return r;
598
599 r = link_update_flags(link, message, false);
600 if (r < 0)
601 return r;
602
603 *ret = TAKE_PTR(link);
604
605 return 0;
606 }
607
608 static Link *link_free(Link *link) {
609 Address *address;
610
611 assert(link);
612
613 link->routes = set_free_with_destructor(link->routes, route_free);
614 link->routes_foreign = set_free_with_destructor(link->routes_foreign, route_free);
615
616 link->addresses = set_free_with_destructor(link->addresses, address_free);
617 link->addresses_foreign = set_free_with_destructor(link->addresses_foreign, address_free);
618
619 while ((address = link->pool_addresses)) {
620 LIST_REMOVE(addresses, link->pool_addresses, address);
621 address_free(address);
622 }
623
624 sd_dhcp_server_unref(link->dhcp_server);
625 sd_dhcp_client_unref(link->dhcp_client);
626 sd_dhcp_lease_unref(link->dhcp_lease);
627
628 link_lldp_emit_stop(link);
629
630 free(link->lease_file);
631
632 sd_lldp_unref(link->lldp);
633 free(link->lldp_file);
634
635 ndisc_flush(link);
636
637 sd_ipv4ll_unref(link->ipv4ll);
638 sd_dhcp6_client_unref(link->dhcp6_client);
639 sd_ndisc_unref(link->ndisc);
640 sd_radv_unref(link->radv);
641
642 free(link->ifname);
643 free(link->kind);
644
645 (void) unlink(link->state_file);
646 free(link->state_file);
647
648 sd_device_unref(link->sd_device);
649
650 hashmap_free(link->bound_to_links);
651 hashmap_free(link->bound_by_links);
652
653 set_free_with_destructor(link->slaves, link_unref);
654
655 network_unref(link->network);
656
657 return mfree(link);
658 }
659
660 DEFINE_TRIVIAL_REF_UNREF_FUNC(Link, link, link_free);
661
662 int link_get(Manager *m, int ifindex, Link **ret) {
663 Link *link;
664
665 assert(m);
666 assert(ifindex);
667 assert(ret);
668
669 link = hashmap_get(m->links, INT_TO_PTR(ifindex));
670 if (!link)
671 return -ENODEV;
672
673 *ret = link;
674
675 return 0;
676 }
677
678 void link_set_state(Link *link, LinkState state) {
679 assert(link);
680
681 if (link->state == state)
682 return;
683
684 log_link_debug(link, "State changed: %s -> %s",
685 link_state_to_string(link->state),
686 link_state_to_string(state));
687
688 link->state = state;
689
690 link_send_changed(link, "AdministrativeState", NULL);
691 }
692
693 static void link_enter_unmanaged(Link *link) {
694 assert(link);
695
696 link_set_state(link, LINK_STATE_UNMANAGED);
697
698 link_dirty(link);
699 }
700
701 int link_stop_clients(Link *link) {
702 int r = 0, k;
703
704 assert(link);
705 assert(link->manager);
706 assert(link->manager->event);
707
708 if (link->dhcp_client) {
709 k = sd_dhcp_client_stop(link->dhcp_client);
710 if (k < 0)
711 r = log_link_warning_errno(link, k, "Could not stop DHCPv4 client: %m");
712 }
713
714 if (link->ipv4ll) {
715 k = sd_ipv4ll_stop(link->ipv4ll);
716 if (k < 0)
717 r = log_link_warning_errno(link, k, "Could not stop IPv4 link-local: %m");
718 }
719
720 if (link->dhcp6_client) {
721 k = sd_dhcp6_client_stop(link->dhcp6_client);
722 if (k < 0)
723 r = log_link_warning_errno(link, k, "Could not stop DHCPv6 client: %m");
724 }
725
726 if (link->ndisc) {
727 k = sd_ndisc_stop(link->ndisc);
728 if (k < 0)
729 r = log_link_warning_errno(link, k, "Could not stop IPv6 Router Discovery: %m");
730 }
731
732 if (link->radv) {
733 k = sd_radv_stop(link->radv);
734 if (k < 0)
735 r = log_link_warning_errno(link, k, "Could not stop IPv6 Router Advertisement: %m");
736 }
737
738 link_lldp_emit_stop(link);
739 return r;
740 }
741
742 void link_enter_failed(Link *link) {
743 assert(link);
744
745 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
746 return;
747
748 log_link_warning(link, "Failed");
749
750 link_set_state(link, LINK_STATE_FAILED);
751
752 link_stop_clients(link);
753
754 link_dirty(link);
755 }
756
757 static Address* link_find_dhcp_server_address(Link *link) {
758 Address *address;
759
760 assert(link);
761 assert(link->network);
762
763 /* The first statically configured address if there is any */
764 LIST_FOREACH(addresses, address, link->network->static_addresses) {
765
766 if (address->family != AF_INET)
767 continue;
768
769 if (in_addr_is_null(address->family, &address->in_addr))
770 continue;
771
772 return address;
773 }
774
775 /* If that didn't work, find a suitable address we got from the pool */
776 LIST_FOREACH(addresses, address, link->pool_addresses) {
777 if (address->family != AF_INET)
778 continue;
779
780 return address;
781 }
782
783 return NULL;
784 }
785
786 static int link_join_netdevs_after_configured(Link *link) {
787 NetDev *netdev;
788 Iterator i;
789 int r;
790
791 HASHMAP_FOREACH(netdev, link->network->stacked_netdevs, i) {
792 if (netdev->ifindex > 0)
793 /* Assume already enslaved. */
794 continue;
795
796 if (netdev_get_create_type(netdev) != NETDEV_CREATE_AFTER_CONFIGURED)
797 continue;
798
799 log_struct(LOG_DEBUG,
800 LOG_LINK_INTERFACE(link),
801 LOG_NETDEV_INTERFACE(netdev),
802 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", netdev->ifname));
803
804 r = netdev_join(netdev, link, NULL);
805 if (r < 0)
806 return log_struct_errno(LOG_WARNING, r,
807 LOG_LINK_INTERFACE(link),
808 LOG_NETDEV_INTERFACE(netdev),
809 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", netdev->ifname));
810 }
811
812 return 0;
813 }
814
815 static void link_enter_configured(Link *link) {
816 assert(link);
817 assert(link->network);
818
819 if (link->state != LINK_STATE_CONFIGURING)
820 return;
821
822 log_link_info(link, "Configured");
823
824 link_set_state(link, LINK_STATE_CONFIGURED);
825
826 (void) link_join_netdevs_after_configured(link);
827
828 link_dirty(link);
829 }
830
831 static int link_request_set_routing_policy_rule(Link *link) {
832 RoutingPolicyRule *rule, *rrule = NULL;
833 int r;
834
835 assert(link);
836 assert(link->network);
837
838 link_set_state(link, LINK_STATE_CONFIGURING);
839 link->routing_policy_rules_configured = false;
840
841 LIST_FOREACH(rules, rule, link->network->rules) {
842 r = routing_policy_rule_get(link->manager, rule->family, &rule->from, rule->from_prefixlen, &rule->to,
843 rule->to_prefixlen, rule->tos, rule->fwmark, rule->table, rule->iif, rule->oif,
844 rule->protocol, &rule->sport, &rule->dport, &rrule);
845 if (r == 0) {
846 (void) routing_policy_rule_make_local(link->manager, rrule);
847 continue;
848 }
849
850 r = routing_policy_rule_configure(rule, link, NULL, false);
851 if (r < 0) {
852 log_link_warning_errno(link, r, "Could not set routing policy rules: %m");
853 link_enter_failed(link);
854 return r;
855 }
856
857 link->routing_policy_rule_messages++;
858 }
859
860 routing_policy_rule_purge(link->manager, link);
861 if (link->routing_policy_rule_messages == 0) {
862 link->routing_policy_rules_configured = true;
863 link_check_ready(link);
864 } else
865 log_link_debug(link, "Setting routing policy rules");
866
867 return 0;
868 }
869
870 static int route_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
871 int r;
872
873 assert(link);
874 assert(link->route_messages > 0);
875 assert(IN_SET(link->state, LINK_STATE_CONFIGURING,
876 LINK_STATE_FAILED, LINK_STATE_LINGER));
877
878 link->route_messages--;
879
880 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
881 return 1;
882
883 r = sd_netlink_message_get_errno(m);
884 if (r < 0 && r != -EEXIST)
885 log_link_warning_errno(link, r, "Could not set route: %m");
886
887 if (link->route_messages == 0) {
888 log_link_debug(link, "Routes set");
889 link->static_routes_configured = true;
890 link_check_ready(link);
891 }
892
893 return 1;
894 }
895
896 int link_request_set_routes(Link *link) {
897 enum {
898 PHASE_NON_GATEWAY, /* First phase: Routes without a gateway */
899 PHASE_GATEWAY, /* Second phase: Routes with a gateway */
900 _PHASE_MAX
901 } phase;
902 Route *rt;
903 int r;
904
905 assert(link);
906 assert(link->network);
907 assert(link->addresses_configured);
908 assert(link->address_messages == 0);
909 assert(link->state != _LINK_STATE_INVALID);
910
911 link_set_state(link, LINK_STATE_CONFIGURING);
912 link->static_routes_configured = false;
913
914 r = link_request_set_routing_policy_rule(link);
915 if (r < 0)
916 return r;
917
918 /* First add the routes that enable us to talk to gateways, then add in the others that need a gateway. */
919 for (phase = 0; phase < _PHASE_MAX; phase++)
920 LIST_FOREACH(routes, rt, link->network->static_routes) {
921
922 if (in_addr_is_null(rt->family, &rt->gw) != (phase == PHASE_NON_GATEWAY))
923 continue;
924
925 r = route_configure(rt, link, route_handler);
926 if (r < 0) {
927 log_link_warning_errno(link, r, "Could not set routes: %m");
928 link_enter_failed(link);
929 return r;
930 }
931
932 link->route_messages++;
933 }
934
935 if (link->route_messages == 0) {
936 link->static_routes_configured = true;
937 link_check_ready(link);
938 } else
939 log_link_debug(link, "Setting routes");
940
941 return 0;
942 }
943
944 void link_check_ready(Link *link) {
945 Address *a;
946 Iterator i;
947
948 assert(link);
949
950 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
951 return;
952
953 if (!link->network)
954 return;
955
956 if (!link->addresses_configured)
957 return;
958
959 if (!link->neighbors_configured)
960 return;
961
962 SET_FOREACH(a, link->addresses, i)
963 if (!address_is_ready(a))
964 return;
965
966 if (!link->addresses_ready) {
967 link->addresses_ready = true;
968 link_request_set_routes(link);
969 return;
970 }
971
972 if (!link->static_routes_configured)
973 return;
974
975 if (!link->routing_policy_rules_configured)
976 return;
977
978 if (link_ipv4ll_enabled(link) && !(link->ipv4ll_address && link->ipv4ll_route))
979 return;
980
981 if (link_ipv6ll_enabled(link) &&
982 in_addr_is_null(AF_INET6, (const union in_addr_union*) &link->ipv6ll_address))
983 return;
984
985 if ((link_dhcp4_enabled(link) || link_dhcp6_enabled(link)) &&
986 !(link->dhcp4_configured || link->dhcp6_configured) &&
987 !(link_ipv4ll_fallback_enabled(link) && link->ipv4ll_address && link->ipv4ll_route))
988 /* When DHCP is enabled, at least one protocol must provide an address, or
989 * an IPv4ll fallback address must be configured. */
990 return;
991
992 if (link_ipv6_accept_ra_enabled(link) && !link->ndisc_configured)
993 return;
994
995 if (link->state != LINK_STATE_CONFIGURED)
996 link_enter_configured(link);
997
998 return;
999 }
1000
1001 static int link_request_set_neighbors(Link *link) {
1002 Neighbor *neighbor;
1003 int r;
1004
1005 assert(link);
1006 assert(link->network);
1007 assert(link->state != _LINK_STATE_INVALID);
1008
1009 link_set_state(link, LINK_STATE_CONFIGURING);
1010 link->neighbors_configured = false;
1011
1012 LIST_FOREACH(neighbors, neighbor, link->network->neighbors) {
1013 r = neighbor_configure(neighbor, link, NULL);
1014 if (r < 0) {
1015 log_link_warning_errno(link, r, "Could not set neighbor: %m");
1016 link_enter_failed(link);
1017 return r;
1018 }
1019 }
1020
1021 if (link->neighbor_messages == 0) {
1022 link->neighbors_configured = true;
1023 link_check_ready(link);
1024 } else
1025 log_link_debug(link, "Setting neighbors");
1026
1027 return 0;
1028 }
1029
1030 static int address_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
1031 int r;
1032
1033 assert(rtnl);
1034 assert(m);
1035 assert(link);
1036 assert(link->ifname);
1037 assert(link->address_messages > 0);
1038 assert(IN_SET(link->state, LINK_STATE_CONFIGURING,
1039 LINK_STATE_FAILED, LINK_STATE_LINGER));
1040
1041 link->address_messages--;
1042
1043 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1044 return 1;
1045
1046 r = sd_netlink_message_get_errno(m);
1047 if (r < 0 && r != -EEXIST)
1048 log_link_warning_errno(link, r, "could not set address: %m");
1049 else if (r >= 0)
1050 manager_rtnl_process_address(rtnl, m, link->manager);
1051
1052 if (link->address_messages == 0) {
1053 log_link_debug(link, "Addresses set");
1054 link->addresses_configured = true;
1055 link_check_ready(link);
1056 }
1057
1058 return 1;
1059 }
1060
1061 static int link_push_uplink_dns_to_dhcp_server(Link *link, sd_dhcp_server *s) {
1062 _cleanup_free_ struct in_addr *addresses = NULL;
1063 size_t n_addresses = 0, n_allocated = 0;
1064 unsigned i;
1065
1066 log_debug("Copying DNS server information from %s", link->ifname);
1067
1068 if (!link->network)
1069 return 0;
1070
1071 for (i = 0; i < link->network->n_dns; i++) {
1072 struct in_addr ia;
1073
1074 /* Only look for IPv4 addresses */
1075 if (link->network->dns[i].family != AF_INET)
1076 continue;
1077
1078 ia = link->network->dns[i].address.in;
1079
1080 /* Never propagate obviously borked data */
1081 if (in4_addr_is_null(&ia) || in4_addr_is_localhost(&ia))
1082 continue;
1083
1084 if (!GREEDY_REALLOC(addresses, n_allocated, n_addresses + 1))
1085 return log_oom();
1086
1087 addresses[n_addresses++] = ia;
1088 }
1089
1090 if (link->network->dhcp_use_dns && link->dhcp_lease) {
1091 const struct in_addr *da = NULL;
1092 int j, n;
1093
1094 n = sd_dhcp_lease_get_dns(link->dhcp_lease, &da);
1095 if (n > 0) {
1096
1097 if (!GREEDY_REALLOC(addresses, n_allocated, n_addresses + n))
1098 return log_oom();
1099
1100 for (j = 0; j < n; j++)
1101 if (in4_addr_is_non_local(&da[j]))
1102 addresses[n_addresses++] = da[j];
1103 }
1104 }
1105
1106 if (n_addresses <= 0)
1107 return 0;
1108
1109 return sd_dhcp_server_set_dns(s, addresses, n_addresses);
1110 }
1111
1112 static int link_push_uplink_ntp_to_dhcp_server(Link *link, sd_dhcp_server *s) {
1113 _cleanup_free_ struct in_addr *addresses = NULL;
1114 size_t n_addresses = 0, n_allocated = 0;
1115 char **a;
1116
1117 if (!link->network)
1118 return 0;
1119
1120 log_debug("Copying NTP server information from %s", link->ifname);
1121
1122 STRV_FOREACH(a, link->network->ntp) {
1123 union in_addr_union ia;
1124
1125 /* Only look for IPv4 addresses */
1126 if (in_addr_from_string(AF_INET, *a, &ia) <= 0)
1127 continue;
1128
1129 /* Never propagate obviously borked data */
1130 if (in4_addr_is_null(&ia.in) || in4_addr_is_localhost(&ia.in))
1131 continue;
1132
1133 if (!GREEDY_REALLOC(addresses, n_allocated, n_addresses + 1))
1134 return log_oom();
1135
1136 addresses[n_addresses++] = ia.in;
1137 }
1138
1139 if (link->network->dhcp_use_ntp && link->dhcp_lease) {
1140 const struct in_addr *da = NULL;
1141 int j, n;
1142
1143 n = sd_dhcp_lease_get_ntp(link->dhcp_lease, &da);
1144 if (n > 0) {
1145
1146 if (!GREEDY_REALLOC(addresses, n_allocated, n_addresses + n))
1147 return log_oom();
1148
1149 for (j = 0; j < n; j++)
1150 if (in4_addr_is_non_local(&da[j]))
1151 addresses[n_addresses++] = da[j];
1152 }
1153 }
1154
1155 if (n_addresses <= 0)
1156 return 0;
1157
1158 return sd_dhcp_server_set_ntp(s, addresses, n_addresses);
1159 }
1160
1161 static int link_set_bridge_fdb(Link *link) {
1162 FdbEntry *fdb_entry;
1163 int r;
1164
1165 LIST_FOREACH(static_fdb_entries, fdb_entry, link->network->static_fdb_entries) {
1166 r = fdb_entry_configure(link, fdb_entry);
1167 if (r < 0)
1168 return log_link_error_errno(link, r, "Failed to add MAC entry to static MAC table: %m");
1169 }
1170
1171 return 0;
1172 }
1173
1174 static int link_request_set_addresses(Link *link) {
1175 AddressLabel *label;
1176 Address *ad;
1177 int r;
1178
1179 assert(link);
1180 assert(link->network);
1181 assert(link->state != _LINK_STATE_INVALID);
1182
1183 link_set_state(link, LINK_STATE_CONFIGURING);
1184
1185 /* Reset all *_configured flags we are configuring. */
1186 link->addresses_configured = false;
1187 link->addresses_ready = false;
1188 link->neighbors_configured = false;
1189 link->static_routes_configured = false;
1190 link->routing_policy_rules_configured = false;
1191
1192 r = link_set_bridge_fdb(link);
1193 if (r < 0)
1194 return r;
1195
1196 r = link_request_set_neighbors(link);
1197 if (r < 0)
1198 return r;
1199
1200 LIST_FOREACH(addresses, ad, link->network->static_addresses) {
1201 bool update;
1202
1203 update = address_get(link, ad->family, &ad->in_addr, ad->prefixlen, NULL) > 0;
1204
1205 r = address_configure(ad, link, address_handler, update);
1206 if (r < 0) {
1207 log_link_warning_errno(link, r, "Could not set addresses: %m");
1208 link_enter_failed(link);
1209 return r;
1210 }
1211
1212 link->address_messages++;
1213 }
1214
1215 LIST_FOREACH(labels, label, link->network->address_labels) {
1216 r = address_label_configure(label, link, NULL, false);
1217 if (r < 0) {
1218 log_link_warning_errno(link, r, "Could not set address label: %m");
1219 link_enter_failed(link);
1220 return r;
1221 }
1222
1223 link->address_label_messages++;
1224 }
1225
1226 /* now that we can figure out a default address for the dhcp server,
1227 start it */
1228 if (link_dhcp4_server_enabled(link) && (link->flags & IFF_UP)) {
1229 Address *address;
1230 Link *uplink = NULL;
1231 bool acquired_uplink = false;
1232
1233 address = link_find_dhcp_server_address(link);
1234 if (!address) {
1235 log_link_warning(link, "Failed to find suitable address for DHCPv4 server instance.");
1236 link_enter_failed(link);
1237 return 0;
1238 }
1239
1240 /* use the server address' subnet as the pool */
1241 r = sd_dhcp_server_configure_pool(link->dhcp_server, &address->in_addr.in, address->prefixlen,
1242 link->network->dhcp_server_pool_offset, link->network->dhcp_server_pool_size);
1243 if (r < 0)
1244 return r;
1245
1246 /* TODO:
1247 r = sd_dhcp_server_set_router(link->dhcp_server,
1248 &main_address->in_addr.in);
1249 if (r < 0)
1250 return r;
1251 */
1252
1253 if (link->network->dhcp_server_max_lease_time_usec > 0) {
1254 r = sd_dhcp_server_set_max_lease_time(
1255 link->dhcp_server,
1256 DIV_ROUND_UP(link->network->dhcp_server_max_lease_time_usec, USEC_PER_SEC));
1257 if (r < 0)
1258 return r;
1259 }
1260
1261 if (link->network->dhcp_server_default_lease_time_usec > 0) {
1262 r = sd_dhcp_server_set_default_lease_time(
1263 link->dhcp_server,
1264 DIV_ROUND_UP(link->network->dhcp_server_default_lease_time_usec, USEC_PER_SEC));
1265 if (r < 0)
1266 return r;
1267 }
1268
1269 if (link->network->dhcp_server_emit_dns) {
1270
1271 if (link->network->n_dhcp_server_dns > 0)
1272 r = sd_dhcp_server_set_dns(link->dhcp_server, link->network->dhcp_server_dns, link->network->n_dhcp_server_dns);
1273 else {
1274 uplink = manager_find_uplink(link->manager, link);
1275 acquired_uplink = true;
1276
1277 if (!uplink) {
1278 log_link_debug(link, "Not emitting DNS server information on link, couldn't find suitable uplink.");
1279 r = 0;
1280 } else
1281 r = link_push_uplink_dns_to_dhcp_server(uplink, link->dhcp_server);
1282 }
1283 if (r < 0)
1284 log_link_warning_errno(link, r, "Failed to set DNS server for DHCP server, ignoring: %m");
1285 }
1286
1287 if (link->network->dhcp_server_emit_ntp) {
1288
1289 if (link->network->n_dhcp_server_ntp > 0)
1290 r = sd_dhcp_server_set_ntp(link->dhcp_server, link->network->dhcp_server_ntp, link->network->n_dhcp_server_ntp);
1291 else {
1292 if (!acquired_uplink)
1293 uplink = manager_find_uplink(link->manager, link);
1294
1295 if (!uplink) {
1296 log_link_debug(link, "Not emitting NTP server information on link, couldn't find suitable uplink.");
1297 r = 0;
1298 } else
1299 r = link_push_uplink_ntp_to_dhcp_server(uplink, link->dhcp_server);
1300
1301 }
1302 if (r < 0)
1303 log_link_warning_errno(link, r, "Failed to set NTP server for DHCP server, ignoring: %m");
1304 }
1305
1306 r = sd_dhcp_server_set_emit_router(link->dhcp_server, link->network->dhcp_server_emit_router);
1307 if (r < 0)
1308 return log_link_warning_errno(link, r, "Failed to set router emission for DHCP server: %m");
1309
1310 if (link->network->dhcp_server_emit_timezone) {
1311 _cleanup_free_ char *buffer = NULL;
1312 const char *tz = NULL;
1313
1314 if (link->network->dhcp_server_timezone)
1315 tz = link->network->dhcp_server_timezone;
1316 else {
1317 r = get_timezone(&buffer);
1318 if (r < 0)
1319 log_warning_errno(r, "Failed to determine timezone: %m");
1320 else
1321 tz = buffer;
1322 }
1323
1324 if (tz) {
1325 r = sd_dhcp_server_set_timezone(link->dhcp_server, tz);
1326 if (r < 0)
1327 return r;
1328 }
1329 }
1330 if (!sd_dhcp_server_is_running(link->dhcp_server)) {
1331 r = sd_dhcp_server_start(link->dhcp_server);
1332 if (r < 0) {
1333 log_link_warning_errno(link, r, "Could not start DHCPv4 server instance: %m");
1334
1335 link_enter_failed(link);
1336
1337 return 0;
1338 }
1339 }
1340
1341 log_link_debug(link, "Offering DHCPv4 leases");
1342 }
1343
1344 if (link->address_messages == 0) {
1345 link->addresses_configured = true;
1346 link_check_ready(link);
1347 } else
1348 log_link_debug(link, "Setting addresses");
1349
1350 return 0;
1351 }
1352
1353 static int link_set_bridge_vlan(Link *link) {
1354 int r;
1355
1356 r = br_vlan_configure(link, link->network->pvid, link->network->br_vid_bitmap, link->network->br_untagged_bitmap);
1357 if (r < 0)
1358 log_link_error_errno(link, r, "Failed to assign VLANs to bridge port: %m");
1359
1360 return r;
1361 }
1362
1363 static int link_set_proxy_arp(Link *link) {
1364 int r;
1365
1366 if (!link_proxy_arp_enabled(link))
1367 return 0;
1368
1369 r = sysctl_write_ip_property_boolean(AF_INET, link->ifname, "proxy_arp", link->network->proxy_arp > 0);
1370 if (r < 0)
1371 log_link_warning_errno(link, r, "Cannot configure proxy ARP for interface: %m");
1372
1373 return 0;
1374 }
1375
1376 static int link_configure_after_setting_mtu(Link *link);
1377
1378 static int set_mtu_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
1379 int r;
1380
1381 assert(m);
1382 assert(link);
1383 assert(link->ifname);
1384
1385 link->setting_mtu = false;
1386
1387 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1388 return 1;
1389
1390 r = sd_netlink_message_get_errno(m);
1391 if (r < 0) {
1392 log_link_warning_errno(link, r, "Could not set MTU: %m");
1393 return 1;
1394 }
1395
1396 log_link_debug(link, "Setting MTU done.");
1397
1398 if (link->state == LINK_STATE_INITIALIZED)
1399 (void) link_configure_after_setting_mtu(link);
1400
1401 return 1;
1402 }
1403
1404 int link_set_mtu(Link *link, uint32_t mtu) {
1405 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1406 int r;
1407
1408 assert(link);
1409 assert(link->manager);
1410 assert(link->manager->rtnl);
1411
1412 if (mtu == 0 || link->setting_mtu)
1413 return 0;
1414
1415 if (link->mtu == mtu)
1416 return 0;
1417
1418 log_link_debug(link, "Setting MTU: %" PRIu32, mtu);
1419
1420 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1421 if (r < 0)
1422 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1423
1424 /* If IPv6 not configured (no static IPv6 address and IPv6LL autoconfiguration is disabled)
1425 * for this interface, then disable IPv6 else enable it. */
1426 (void) link_enable_ipv6(link);
1427
1428 /* IPv6 protocol requires a minimum MTU of IPV6_MTU_MIN(1280) bytes
1429 * on the interface. Bump up MTU bytes to IPV6_MTU_MIN. */
1430 if (link_ipv6_enabled(link) && mtu < IPV6_MIN_MTU) {
1431
1432 log_link_warning(link, "Bumping MTU to " STRINGIFY(IPV6_MIN_MTU) ", as "
1433 "IPv6 is requested and requires a minimum MTU of " STRINGIFY(IPV6_MIN_MTU) " bytes: %m");
1434
1435 mtu = IPV6_MIN_MTU;
1436 }
1437
1438 r = sd_netlink_message_append_u32(req, IFLA_MTU, mtu);
1439 if (r < 0)
1440 return log_link_error_errno(link, r, "Could not append MTU: %m");
1441
1442 r = netlink_call_async(link->manager->rtnl, NULL, req, set_mtu_handler,
1443 link_netlink_destroy_callback, link);
1444 if (r < 0)
1445 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1446
1447 link_ref(link);
1448 link->setting_mtu = true;
1449
1450 return 0;
1451 }
1452
1453 static bool link_reduces_vlan_mtu(Link *link) {
1454 /* See netif_reduces_vlan_mtu() in kernel. */
1455 return streq_ptr(link->kind, "macsec");
1456 }
1457
1458 static uint32_t link_get_requested_mtu_by_stacked_netdevs(Link *link) {
1459 uint32_t mtu = 0;
1460 NetDev *dev;
1461 Iterator i;
1462
1463 HASHMAP_FOREACH(dev, link->network->stacked_netdevs, i)
1464 if (dev->kind == NETDEV_KIND_VLAN && dev->mtu > 0)
1465 /* See vlan_dev_change_mtu() in kernel. */
1466 mtu = MAX(mtu, link_reduces_vlan_mtu(link) ? dev->mtu + 4 : dev->mtu);
1467
1468 else if (dev->kind == NETDEV_KIND_MACVLAN && dev->mtu > mtu)
1469 /* See macvlan_change_mtu() in kernel. */
1470 mtu = dev->mtu;
1471
1472 return mtu;
1473 }
1474
1475 static int link_configure_mtu(Link *link) {
1476 uint32_t mtu;
1477
1478 assert(link);
1479 assert(link->network);
1480
1481 if (link->network->mtu > 0)
1482 return link_set_mtu(link, link->network->mtu);
1483
1484 mtu = link_get_requested_mtu_by_stacked_netdevs(link);
1485 if (link->mtu >= mtu)
1486 return 0;
1487
1488 log_link_notice(link, "Bumping MTU bytes from %"PRIu32" to %"PRIu32" because of stacked device. "
1489 "If it is not desired, then please explicitly specify MTUBytes= setting.",
1490 link->mtu, mtu);
1491
1492 return link_set_mtu(link, mtu);
1493 }
1494
1495 static int set_flags_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
1496 int r;
1497
1498 assert(m);
1499 assert(link);
1500 assert(link->ifname);
1501
1502 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1503 return 1;
1504
1505 r = sd_netlink_message_get_errno(m);
1506 if (r < 0)
1507 log_link_warning_errno(link, r, "Could not set link flags: %m");
1508
1509 return 1;
1510 }
1511
1512 static int link_set_flags(Link *link) {
1513 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1514 unsigned ifi_change = 0;
1515 unsigned ifi_flags = 0;
1516 int r;
1517
1518 assert(link);
1519 assert(link->manager);
1520 assert(link->manager->rtnl);
1521
1522 if (link->flags & IFF_LOOPBACK)
1523 return 0;
1524
1525 if (!link->network)
1526 return 0;
1527
1528 if (link->network->arp < 0 && link->network->multicast < 0 && link->network->allmulticast < 0)
1529 return 0;
1530
1531 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1532 if (r < 0)
1533 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1534
1535 if (link->network->arp >= 0) {
1536 ifi_change |= IFF_NOARP;
1537 SET_FLAG(ifi_flags, IFF_NOARP, link->network->arp == 0);
1538 }
1539
1540 if (link->network->multicast >= 0) {
1541 ifi_change |= IFF_MULTICAST;
1542 SET_FLAG(ifi_flags, IFF_MULTICAST, link->network->multicast);
1543 }
1544
1545 if (link->network->allmulticast >= 0) {
1546 ifi_change |= IFF_ALLMULTI;
1547 SET_FLAG(ifi_flags, IFF_ALLMULTI, link->network->allmulticast);
1548 }
1549
1550 r = sd_rtnl_message_link_set_flags(req, ifi_flags, ifi_change);
1551 if (r < 0)
1552 return log_link_error_errno(link, r, "Could not set link flags: %m");
1553
1554 r = netlink_call_async(link->manager->rtnl, NULL, req, set_flags_handler,
1555 link_netlink_destroy_callback, link);
1556 if (r < 0)
1557 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1558
1559 link_ref(link);
1560
1561 return 0;
1562 }
1563
1564 static int link_acquire_ipv6_conf(Link *link) {
1565 int r;
1566
1567 assert(link);
1568
1569 if (link_ipv6_accept_ra_enabled(link)) {
1570 assert(link->ndisc);
1571
1572 log_link_debug(link, "Discovering IPv6 routers");
1573
1574 r = sd_ndisc_start(link->ndisc);
1575 if (r < 0 && r != -EBUSY)
1576 return log_link_warning_errno(link, r, "Could not start IPv6 Router Discovery: %m");
1577 }
1578
1579 if (link_radv_enabled(link)) {
1580 assert(link->radv);
1581 assert(in_addr_is_link_local(AF_INET6, (const union in_addr_union*)&link->ipv6ll_address) > 0);
1582
1583 log_link_debug(link, "Starting IPv6 Router Advertisements");
1584
1585 r = sd_radv_start(link->radv);
1586 if (r < 0 && r != -EBUSY)
1587 return log_link_warning_errno(link, r, "Could not start IPv6 Router Advertisement: %m");
1588 }
1589
1590 (void) dhcp6_request_prefix_delegation(link);
1591
1592 return 0;
1593 }
1594
1595 static int link_acquire_ipv4_conf(Link *link) {
1596 int r;
1597
1598 assert(link);
1599 assert(link->manager);
1600 assert(link->manager->event);
1601
1602 if (link_ipv4ll_enabled(link)) {
1603 assert(link->ipv4ll);
1604
1605 log_link_debug(link, "Acquiring IPv4 link-local address");
1606
1607 r = sd_ipv4ll_start(link->ipv4ll);
1608 if (r < 0)
1609 return log_link_warning_errno(link, r, "Could not acquire IPv4 link-local address: %m");
1610 }
1611
1612 if (link_dhcp4_enabled(link)) {
1613 assert(link->dhcp_client);
1614
1615 log_link_debug(link, "Acquiring DHCPv4 lease");
1616
1617 r = sd_dhcp_client_start(link->dhcp_client);
1618 if (r < 0)
1619 return log_link_warning_errno(link, r, "Could not acquire DHCPv4 lease: %m");
1620 }
1621
1622 return 0;
1623 }
1624
1625 static int link_acquire_conf(Link *link) {
1626 int r;
1627
1628 assert(link);
1629
1630 r = link_acquire_ipv4_conf(link);
1631 if (r < 0)
1632 return r;
1633
1634 if (!in_addr_is_null(AF_INET6, (const union in_addr_union*) &link->ipv6ll_address)) {
1635 r = link_acquire_ipv6_conf(link);
1636 if (r < 0)
1637 return r;
1638 }
1639
1640 if (link_lldp_emit_enabled(link)) {
1641 r = link_lldp_emit_start(link);
1642 if (r < 0)
1643 return log_link_warning_errno(link, r, "Failed to start LLDP transmission: %m");
1644 }
1645
1646 return 0;
1647 }
1648
1649 bool link_has_carrier(Link *link) {
1650 /* see Documentation/networking/operstates.txt in the kernel sources */
1651
1652 if (link->kernel_operstate == IF_OPER_UP)
1653 return true;
1654
1655 if (link->kernel_operstate == IF_OPER_UNKNOWN)
1656 /* operstate may not be implemented, so fall back to flags */
1657 if (FLAGS_SET(link->flags, IFF_LOWER_UP | IFF_RUNNING) &&
1658 !FLAGS_SET(link->flags, IFF_DORMANT))
1659 return true;
1660
1661 return false;
1662 }
1663
1664 static int link_address_genmode_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
1665 int r;
1666
1667 assert(link);
1668
1669 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1670 return 1;
1671
1672 r = sd_netlink_message_get_errno(m);
1673 if (r < 0)
1674 log_link_warning_errno(link, r, "Could not set address genmode for interface: %m");
1675
1676 return 1;
1677 }
1678
1679 static int link_configure_addrgen_mode(Link *link) {
1680 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1681 uint8_t ipv6ll_mode;
1682 int r;
1683
1684 assert(link);
1685 assert(link->network);
1686 assert(link->manager);
1687 assert(link->manager->rtnl);
1688
1689 if (!socket_ipv6_is_supported())
1690 return 0;
1691
1692 log_link_debug(link, "Setting address genmode for link");
1693
1694 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1695 if (r < 0)
1696 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1697
1698 r = sd_netlink_message_open_container(req, IFLA_AF_SPEC);
1699 if (r < 0)
1700 return log_link_error_errno(link, r, "Could not open IFLA_AF_SPEC container: %m");
1701
1702 r = sd_netlink_message_open_container(req, AF_INET6);
1703 if (r < 0)
1704 return log_link_error_errno(link, r, "Could not open AF_INET6 container: %m");
1705
1706 if (!link_ipv6ll_enabled(link))
1707 ipv6ll_mode = IN6_ADDR_GEN_MODE_NONE;
1708 else if (sysctl_read_ip_property(AF_INET6, link->ifname, "stable_secret", NULL) < 0)
1709 /* The file may not exist. And event if it exists, when stable_secret is unset,
1710 * reading the file fails with EIO. */
1711 ipv6ll_mode = IN6_ADDR_GEN_MODE_EUI64;
1712 else
1713 ipv6ll_mode = IN6_ADDR_GEN_MODE_STABLE_PRIVACY;
1714
1715 r = sd_netlink_message_append_u8(req, IFLA_INET6_ADDR_GEN_MODE, ipv6ll_mode);
1716 if (r < 0)
1717 return log_link_error_errno(link, r, "Could not append IFLA_INET6_ADDR_GEN_MODE: %m");
1718
1719 r = sd_netlink_message_close_container(req);
1720 if (r < 0)
1721 return log_link_error_errno(link, r, "Could not close AF_INET6 container: %m");
1722
1723 r = sd_netlink_message_close_container(req);
1724 if (r < 0)
1725 return log_link_error_errno(link, r, "Could not close IFLA_AF_SPEC container: %m");
1726
1727 r = netlink_call_async(link->manager->rtnl, NULL, req, link_address_genmode_handler,
1728 link_netlink_destroy_callback, link);
1729 if (r < 0)
1730 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1731
1732 link_ref(link);
1733
1734 return 0;
1735 }
1736
1737 static int link_up_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
1738 int r;
1739
1740 assert(link);
1741
1742 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1743 return 1;
1744
1745 r = sd_netlink_message_get_errno(m);
1746 if (r < 0)
1747 /* we warn but don't fail the link, as it may be brought up later */
1748 log_link_warning_errno(link, r, "Could not bring up interface: %m");
1749
1750 return 1;
1751 }
1752
1753 static int link_up(Link *link) {
1754 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1755 int r;
1756
1757 assert(link);
1758 assert(link->network);
1759 assert(link->manager);
1760 assert(link->manager->rtnl);
1761
1762 log_link_debug(link, "Bringing link up");
1763
1764 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1765 if (r < 0)
1766 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1767
1768 /* set it free if not enslaved with networkd */
1769 if (!link->network->bridge && !link->network->bond && !link->network->vrf) {
1770 r = sd_netlink_message_append_u32(req, IFLA_MASTER, 0);
1771 if (r < 0)
1772 return log_link_error_errno(link, r, "Could not append IFLA_MASTER attribute: %m");
1773 }
1774
1775 r = sd_rtnl_message_link_set_flags(req, IFF_UP, IFF_UP);
1776 if (r < 0)
1777 return log_link_error_errno(link, r, "Could not set link flags: %m");
1778
1779 if (link->network->mac) {
1780 r = sd_netlink_message_append_ether_addr(req, IFLA_ADDRESS, link->network->mac);
1781 if (r < 0)
1782 return log_link_error_errno(link, r, "Could not set MAC address: %m");
1783 }
1784
1785 r = netlink_call_async(link->manager->rtnl, NULL, req, link_up_handler,
1786 link_netlink_destroy_callback, link);
1787 if (r < 0)
1788 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1789
1790 link_ref(link);
1791
1792 return 0;
1793 }
1794
1795 static int link_down_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
1796 int r;
1797
1798 assert(link);
1799
1800 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1801 return 1;
1802
1803 r = sd_netlink_message_get_errno(m);
1804 if (r < 0)
1805 log_link_warning_errno(link, r, "Could not bring down interface: %m");
1806
1807 return 1;
1808 }
1809
1810 int link_down(Link *link, link_netlink_message_handler_t callback) {
1811 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1812 int r;
1813
1814 assert(link);
1815 assert(link->manager);
1816 assert(link->manager->rtnl);
1817
1818 log_link_debug(link, "Bringing link down");
1819
1820 r = sd_rtnl_message_new_link(link->manager->rtnl, &req,
1821 RTM_SETLINK, link->ifindex);
1822 if (r < 0)
1823 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1824
1825 r = sd_rtnl_message_link_set_flags(req, 0, IFF_UP);
1826 if (r < 0)
1827 return log_link_error_errno(link, r, "Could not set link flags: %m");
1828
1829 r = netlink_call_async(link->manager->rtnl, NULL, req,
1830 callback ?: link_down_handler,
1831 link_netlink_destroy_callback, link);
1832 if (r < 0)
1833 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1834
1835 link_ref(link);
1836
1837 return 0;
1838 }
1839
1840 static int link_handle_bound_to_list(Link *link) {
1841 Link *l;
1842 Iterator i;
1843 int r;
1844 bool required_up = false;
1845 bool link_is_up = false;
1846
1847 assert(link);
1848
1849 if (hashmap_isempty(link->bound_to_links))
1850 return 0;
1851
1852 if (link->flags & IFF_UP)
1853 link_is_up = true;
1854
1855 HASHMAP_FOREACH (l, link->bound_to_links, i)
1856 if (link_has_carrier(l)) {
1857 required_up = true;
1858 break;
1859 }
1860
1861 if (!required_up && link_is_up) {
1862 r = link_down(link, NULL);
1863 if (r < 0)
1864 return r;
1865 } else if (required_up && !link_is_up) {
1866 r = link_up(link);
1867 if (r < 0)
1868 return r;
1869 }
1870
1871 return 0;
1872 }
1873
1874 static int link_handle_bound_by_list(Link *link) {
1875 Iterator i;
1876 Link *l;
1877 int r;
1878
1879 assert(link);
1880
1881 if (hashmap_isempty(link->bound_by_links))
1882 return 0;
1883
1884 HASHMAP_FOREACH (l, link->bound_by_links, i) {
1885 r = link_handle_bound_to_list(l);
1886 if (r < 0)
1887 return r;
1888 }
1889
1890 return 0;
1891 }
1892
1893 static int link_put_carrier(Link *link, Link *carrier, Hashmap **h) {
1894 int r;
1895
1896 assert(link);
1897 assert(carrier);
1898
1899 if (link == carrier)
1900 return 0;
1901
1902 if (hashmap_get(*h, INT_TO_PTR(carrier->ifindex)))
1903 return 0;
1904
1905 r = hashmap_ensure_allocated(h, NULL);
1906 if (r < 0)
1907 return r;
1908
1909 r = hashmap_put(*h, INT_TO_PTR(carrier->ifindex), carrier);
1910 if (r < 0)
1911 return r;
1912
1913 return 0;
1914 }
1915
1916 static int link_new_bound_by_list(Link *link) {
1917 Manager *m;
1918 Link *carrier;
1919 Iterator i;
1920 int r;
1921 bool list_updated = false;
1922
1923 assert(link);
1924 assert(link->manager);
1925
1926 m = link->manager;
1927
1928 HASHMAP_FOREACH(carrier, m->links, i) {
1929 if (!carrier->network)
1930 continue;
1931
1932 if (strv_isempty(carrier->network->bind_carrier))
1933 continue;
1934
1935 if (strv_fnmatch(carrier->network->bind_carrier, link->ifname, 0)) {
1936 r = link_put_carrier(link, carrier, &link->bound_by_links);
1937 if (r < 0)
1938 return r;
1939
1940 list_updated = true;
1941 }
1942 }
1943
1944 if (list_updated)
1945 link_dirty(link);
1946
1947 HASHMAP_FOREACH(carrier, link->bound_by_links, i) {
1948 r = link_put_carrier(carrier, link, &carrier->bound_to_links);
1949 if (r < 0)
1950 return r;
1951
1952 link_dirty(carrier);
1953 }
1954
1955 return 0;
1956 }
1957
1958 static int link_new_bound_to_list(Link *link) {
1959 Manager *m;
1960 Link *carrier;
1961 Iterator i;
1962 int r;
1963 bool list_updated = false;
1964
1965 assert(link);
1966 assert(link->manager);
1967
1968 if (!link->network)
1969 return 0;
1970
1971 if (strv_isempty(link->network->bind_carrier))
1972 return 0;
1973
1974 m = link->manager;
1975
1976 HASHMAP_FOREACH (carrier, m->links, i) {
1977 if (strv_fnmatch(link->network->bind_carrier, carrier->ifname, 0)) {
1978 r = link_put_carrier(link, carrier, &link->bound_to_links);
1979 if (r < 0)
1980 return r;
1981
1982 list_updated = true;
1983 }
1984 }
1985
1986 if (list_updated)
1987 link_dirty(link);
1988
1989 HASHMAP_FOREACH (carrier, link->bound_to_links, i) {
1990 r = link_put_carrier(carrier, link, &carrier->bound_by_links);
1991 if (r < 0)
1992 return r;
1993
1994 link_dirty(carrier);
1995 }
1996
1997 return 0;
1998 }
1999
2000 static int link_new_carrier_maps(Link *link) {
2001 int r;
2002
2003 r = link_new_bound_by_list(link);
2004 if (r < 0)
2005 return r;
2006
2007 r = link_handle_bound_by_list(link);
2008 if (r < 0)
2009 return r;
2010
2011 r = link_new_bound_to_list(link);
2012 if (r < 0)
2013 return r;
2014
2015 r = link_handle_bound_to_list(link);
2016 if (r < 0)
2017 return r;
2018
2019 return 0;
2020 }
2021
2022 static void link_free_bound_to_list(Link *link) {
2023 Link *bound_to;
2024 Iterator i;
2025
2026 HASHMAP_FOREACH (bound_to, link->bound_to_links, i) {
2027 hashmap_remove(link->bound_to_links, INT_TO_PTR(bound_to->ifindex));
2028
2029 if (hashmap_remove(bound_to->bound_by_links, INT_TO_PTR(link->ifindex)))
2030 link_dirty(bound_to);
2031 }
2032
2033 return;
2034 }
2035
2036 static void link_free_bound_by_list(Link *link) {
2037 Link *bound_by;
2038 Iterator i;
2039
2040 HASHMAP_FOREACH (bound_by, link->bound_by_links, i) {
2041 hashmap_remove(link->bound_by_links, INT_TO_PTR(bound_by->ifindex));
2042
2043 if (hashmap_remove(bound_by->bound_to_links, INT_TO_PTR(link->ifindex))) {
2044 link_dirty(bound_by);
2045 link_handle_bound_to_list(bound_by);
2046 }
2047 }
2048
2049 return;
2050 }
2051
2052 static void link_free_carrier_maps(Link *link) {
2053 bool list_updated = false;
2054
2055 assert(link);
2056
2057 if (!hashmap_isempty(link->bound_to_links)) {
2058 link_free_bound_to_list(link);
2059 list_updated = true;
2060 }
2061
2062 if (!hashmap_isempty(link->bound_by_links)) {
2063 link_free_bound_by_list(link);
2064 list_updated = true;
2065 }
2066
2067 if (list_updated)
2068 link_dirty(link);
2069
2070 return;
2071 }
2072
2073 static int link_append_to_master(Link *link, NetDev *netdev) {
2074 Link *master;
2075 int r;
2076
2077 assert(link);
2078 assert(netdev);
2079
2080 r = link_get(link->manager, netdev->ifindex, &master);
2081 if (r < 0)
2082 return r;
2083
2084 r = set_ensure_allocated(&master->slaves, NULL);
2085 if (r < 0)
2086 return r;
2087
2088 r = set_put(master->slaves, link);
2089 if (r < 0)
2090 return r;
2091
2092 link_ref(link);
2093 return 0;
2094 }
2095
2096 static void link_drop_from_master(Link *link, NetDev *netdev) {
2097 Link *master;
2098
2099 assert(link);
2100
2101 if (!link->manager || !netdev)
2102 return;
2103
2104 if (link_get(link->manager, netdev->ifindex, &master) < 0)
2105 return;
2106
2107 link_unref(set_remove(master->slaves, link));
2108 }
2109
2110 static void link_detach_from_manager(Link *link) {
2111 if (!link || !link->manager)
2112 return;
2113
2114 link_unref(set_remove(link->manager->links_requesting_uuid, link));
2115 link_clean(link);
2116
2117 /* The following must be called at last. */
2118 assert_se(hashmap_remove(link->manager->links, INT_TO_PTR(link->ifindex)) == link);
2119 link_unref(link);
2120 }
2121
2122 void link_drop(Link *link) {
2123 if (!link || link->state == LINK_STATE_LINGER)
2124 return;
2125
2126 link_set_state(link, LINK_STATE_LINGER);
2127
2128 link_free_carrier_maps(link);
2129
2130 if (link->network) {
2131 link_drop_from_master(link, link->network->bridge);
2132 link_drop_from_master(link, link->network->bond);
2133 }
2134
2135 log_link_debug(link, "Link removed");
2136
2137 (void) unlink(link->state_file);
2138 link_detach_from_manager(link);
2139 }
2140
2141 static int link_joined(Link *link) {
2142 int r;
2143
2144 assert(link);
2145 assert(link->network);
2146
2147 if (!hashmap_isempty(link->bound_to_links)) {
2148 r = link_handle_bound_to_list(link);
2149 if (r < 0)
2150 return r;
2151 } else if (!(link->flags & IFF_UP)) {
2152 r = link_up(link);
2153 if (r < 0) {
2154 link_enter_failed(link);
2155 return r;
2156 }
2157 }
2158
2159 if (link->network->bridge) {
2160 r = link_set_bridge(link);
2161 if (r < 0)
2162 log_link_error_errno(link, r, "Could not set bridge message: %m");
2163
2164 r = link_append_to_master(link, link->network->bridge);
2165 if (r < 0)
2166 log_link_error_errno(link, r, "Failed to add to bridge master's slave list: %m");
2167 }
2168
2169 if (link->network->bond) {
2170 r = link_set_bond(link);
2171 if (r < 0)
2172 log_link_error_errno(link, r, "Could not set bond message: %m");
2173
2174 r = link_append_to_master(link, link->network->bond);
2175 if (r < 0)
2176 log_link_error_errno(link, r, "Failed to add to bond master's slave list: %m");
2177 }
2178
2179 if (link->network->use_br_vlan &&
2180 (link->network->bridge || streq_ptr("bridge", link->kind))) {
2181 r = link_set_bridge_vlan(link);
2182 if (r < 0)
2183 log_link_error_errno(link, r, "Could not set bridge vlan: %m");
2184 }
2185
2186 /* Skip setting up addresses until it gets carrier,
2187 or it would try to set addresses twice,
2188 which is bad for non-idempotent steps. */
2189 if (!link_has_carrier(link) && !link->network->configure_without_carrier)
2190 return 0;
2191
2192 return link_request_set_addresses(link);
2193 }
2194
2195 static int netdev_join_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
2196 int r;
2197
2198 assert(link);
2199 assert(link->network);
2200 assert(link->enslaving > 0);
2201
2202 link->enslaving--;
2203
2204 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
2205 return 1;
2206
2207 r = sd_netlink_message_get_errno(m);
2208 if (r < 0 && r != -EEXIST) {
2209 log_link_error_errno(link, r, "Could not join netdev: %m");
2210 link_enter_failed(link);
2211 return 1;
2212 } else
2213 log_link_debug(link, "Joined netdev");
2214
2215 if (link->enslaving == 0) {
2216 link_joined(link);
2217 }
2218
2219 return 1;
2220 }
2221
2222 static int link_enter_join_netdev(Link *link) {
2223 NetDev *netdev;
2224 Iterator i;
2225 int r;
2226
2227 assert(link);
2228 assert(link->network);
2229 assert(link->state == LINK_STATE_INITIALIZED);
2230
2231 link_set_state(link, LINK_STATE_CONFIGURING);
2232
2233 link_dirty(link);
2234 link->enslaving = 0;
2235
2236 if (link->network->bond) {
2237 if (link->network->bond->state == NETDEV_STATE_READY &&
2238 link->network->bond->ifindex == link->master_ifindex)
2239 return link_joined(link);
2240
2241 log_struct(LOG_DEBUG,
2242 LOG_LINK_INTERFACE(link),
2243 LOG_NETDEV_INTERFACE(link->network->bond),
2244 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", link->network->bond->ifname));
2245
2246 link->enslaving++;
2247
2248 r = netdev_join(link->network->bond, link, netdev_join_handler);
2249 if (r < 0) {
2250 log_struct_errno(LOG_WARNING, r,
2251 LOG_LINK_INTERFACE(link),
2252 LOG_NETDEV_INTERFACE(link->network->bond),
2253 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", link->network->bond->ifname));
2254 link_enter_failed(link);
2255 return r;
2256 }
2257 }
2258
2259 if (link->network->bridge) {
2260 log_struct(LOG_DEBUG,
2261 LOG_LINK_INTERFACE(link),
2262 LOG_NETDEV_INTERFACE(link->network->bridge),
2263 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", link->network->bridge->ifname));
2264
2265 link->enslaving++;
2266
2267 r = netdev_join(link->network->bridge, link, netdev_join_handler);
2268 if (r < 0) {
2269 log_struct_errno(LOG_WARNING, r,
2270 LOG_LINK_INTERFACE(link),
2271 LOG_NETDEV_INTERFACE(link->network->bridge),
2272 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", link->network->bridge->ifname));
2273 link_enter_failed(link);
2274 return r;
2275 }
2276 }
2277
2278 if (link->network->vrf) {
2279 log_struct(LOG_DEBUG,
2280 LOG_LINK_INTERFACE(link),
2281 LOG_NETDEV_INTERFACE(link->network->vrf),
2282 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", link->network->vrf->ifname));
2283
2284 link->enslaving++;
2285
2286 r = netdev_join(link->network->vrf, link, netdev_join_handler);
2287 if (r < 0) {
2288 log_struct_errno(LOG_WARNING, r,
2289 LOG_LINK_INTERFACE(link),
2290 LOG_NETDEV_INTERFACE(link->network->vrf),
2291 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", link->network->vrf->ifname));
2292 link_enter_failed(link);
2293 return r;
2294 }
2295 }
2296
2297 HASHMAP_FOREACH(netdev, link->network->stacked_netdevs, i) {
2298
2299 if (netdev->ifindex > 0)
2300 /* Assume already enslaved. */
2301 continue;
2302
2303 if (netdev_get_create_type(netdev) != NETDEV_CREATE_STACKED)
2304 continue;
2305
2306 log_struct(LOG_DEBUG,
2307 LOG_LINK_INTERFACE(link),
2308 LOG_NETDEV_INTERFACE(netdev),
2309 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", netdev->ifname));
2310
2311 link->enslaving++;
2312
2313 r = netdev_join(netdev, link, netdev_join_handler);
2314 if (r < 0) {
2315 log_struct_errno(LOG_WARNING, r,
2316 LOG_LINK_INTERFACE(link),
2317 LOG_NETDEV_INTERFACE(netdev),
2318 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", netdev->ifname));
2319 link_enter_failed(link);
2320 return r;
2321 }
2322 }
2323
2324 if (link->enslaving == 0)
2325 return link_joined(link);
2326
2327 return 0;
2328 }
2329
2330 static int link_set_ipv4_forward(Link *link) {
2331 int r;
2332
2333 if (!link_ipv4_forward_enabled(link))
2334 return 0;
2335
2336 /* We propagate the forwarding flag from one interface to the
2337 * global setting one way. This means: as long as at least one
2338 * interface was configured at any time that had IP forwarding
2339 * enabled the setting will stay on for good. We do this
2340 * primarily to keep IPv4 and IPv6 packet forwarding behaviour
2341 * somewhat in sync (see below). */
2342
2343 r = sysctl_write_ip_property(AF_INET, NULL, "ip_forward", "1");
2344 if (r < 0)
2345 log_link_warning_errno(link, r, "Cannot turn on IPv4 packet forwarding, ignoring: %m");
2346
2347 return 0;
2348 }
2349
2350 static int link_set_ipv6_forward(Link *link) {
2351 int r;
2352
2353 if (!link_ipv6_forward_enabled(link))
2354 return 0;
2355
2356 /* On Linux, the IPv6 stack does not know a per-interface
2357 * packet forwarding setting: either packet forwarding is on
2358 * for all, or off for all. We hence don't bother with a
2359 * per-interface setting, but simply propagate the interface
2360 * flag, if it is set, to the global flag, one-way. Note that
2361 * while IPv4 would allow a per-interface flag, we expose the
2362 * same behaviour there and also propagate the setting from
2363 * one to all, to keep things simple (see above). */
2364
2365 r = sysctl_write_ip_property(AF_INET6, "all", "forwarding", "1");
2366 if (r < 0)
2367 log_link_warning_errno(link, r, "Cannot configure IPv6 packet forwarding, ignoring: %m");
2368
2369 return 0;
2370 }
2371
2372 static int link_set_ipv6_privacy_extensions(Link *link) {
2373 IPv6PrivacyExtensions s;
2374 int r;
2375
2376 s = link_ipv6_privacy_extensions(link);
2377 if (s < 0)
2378 return 0;
2379
2380 r = sysctl_write_ip_property_int(AF_INET6, link->ifname, "use_tempaddr", (int) link->network->ipv6_privacy_extensions);
2381 if (r < 0)
2382 log_link_warning_errno(link, r, "Cannot configure IPv6 privacy extension for interface: %m");
2383
2384 return 0;
2385 }
2386
2387 static int link_set_ipv6_accept_ra(Link *link) {
2388 int r;
2389
2390 /* Make this a NOP if IPv6 is not available */
2391 if (!socket_ipv6_is_supported())
2392 return 0;
2393
2394 if (link->flags & IFF_LOOPBACK)
2395 return 0;
2396
2397 if (!link->network)
2398 return 0;
2399
2400 r = sysctl_write_ip_property(AF_INET6, link->ifname, "accept_ra", "0");
2401 if (r < 0)
2402 log_link_warning_errno(link, r, "Cannot disable kernel IPv6 accept_ra for interface: %m");
2403
2404 return 0;
2405 }
2406
2407 static int link_set_ipv6_dad_transmits(Link *link) {
2408 int r;
2409
2410 /* Make this a NOP if IPv6 is not available */
2411 if (!socket_ipv6_is_supported())
2412 return 0;
2413
2414 if (link->flags & IFF_LOOPBACK)
2415 return 0;
2416
2417 if (!link->network)
2418 return 0;
2419
2420 if (link->network->ipv6_dad_transmits < 0)
2421 return 0;
2422
2423 r = sysctl_write_ip_property_int(AF_INET6, link->ifname, "dad_transmits", link->network->ipv6_dad_transmits);
2424 if (r < 0)
2425 log_link_warning_errno(link, r, "Cannot set IPv6 dad transmits for interface: %m");
2426
2427 return 0;
2428 }
2429
2430 static int link_set_ipv6_hop_limit(Link *link) {
2431 int r;
2432
2433 /* Make this a NOP if IPv6 is not available */
2434 if (!socket_ipv6_is_supported())
2435 return 0;
2436
2437 if (link->flags & IFF_LOOPBACK)
2438 return 0;
2439
2440 if (!link->network)
2441 return 0;
2442
2443 if (link->network->ipv6_hop_limit < 0)
2444 return 0;
2445
2446 r = sysctl_write_ip_property_int(AF_INET6, link->ifname, "hop_limit", link->network->ipv6_hop_limit);
2447 if (r < 0)
2448 log_link_warning_errno(link, r, "Cannot set IPv6 hop limit for interface: %m");
2449
2450 return 0;
2451 }
2452
2453 static int link_set_ipv6_mtu(Link *link) {
2454 int r;
2455
2456 /* Make this a NOP if IPv6 is not available */
2457 if (!socket_ipv6_is_supported())
2458 return 0;
2459
2460 if (link->flags & IFF_LOOPBACK)
2461 return 0;
2462
2463 if (link->network->ipv6_mtu == 0)
2464 return 0;
2465
2466 r = sysctl_write_ip_property_uint32(AF_INET6, link->ifname, "mtu", link->network->ipv6_mtu);
2467 if (r < 0)
2468 log_link_warning_errno(link, r, "Cannot set IPv6 MTU for interface: %m");
2469
2470 return 0;
2471 }
2472
2473 static bool link_is_static_address_configured(Link *link, Address *address) {
2474 Address *net_address;
2475
2476 assert(link);
2477 assert(address);
2478
2479 if (!link->network)
2480 return false;
2481
2482 LIST_FOREACH(addresses, net_address, link->network->static_addresses)
2483 if (address_equal(net_address, address))
2484 return true;
2485
2486 return false;
2487 }
2488
2489 static bool link_is_static_route_configured(Link *link, Route *route) {
2490 Route *net_route;
2491
2492 assert(link);
2493 assert(route);
2494
2495 if (!link->network)
2496 return false;
2497
2498 LIST_FOREACH(routes, net_route, link->network->static_routes)
2499 if (route_equal(net_route, route))
2500 return true;
2501
2502 return false;
2503 }
2504
2505 static int link_drop_foreign_config(Link *link) {
2506 Address *address;
2507 Route *route;
2508 Iterator i;
2509 int r;
2510
2511 SET_FOREACH(address, link->addresses_foreign, i) {
2512 /* we consider IPv6LL addresses to be managed by the kernel */
2513 if (address->family == AF_INET6 && in_addr_is_link_local(AF_INET6, &address->in_addr) == 1)
2514 continue;
2515
2516 if (link_is_static_address_configured(link, address)) {
2517 r = address_add(link, address->family, &address->in_addr, address->prefixlen, NULL);
2518 if (r < 0)
2519 return log_link_error_errno(link, r, "Failed to add address: %m");
2520 } else {
2521 r = address_remove(address, link, NULL);
2522 if (r < 0)
2523 return r;
2524 }
2525 }
2526
2527 SET_FOREACH(route, link->routes_foreign, i) {
2528 /* do not touch routes managed by the kernel */
2529 if (route->protocol == RTPROT_KERNEL)
2530 continue;
2531
2532 if (link_is_static_route_configured(link, route)) {
2533 r = route_add(link, route->family, &route->dst, route->dst_prefixlen, route->tos, route->priority, route->table, NULL);
2534 if (r < 0)
2535 return r;
2536 } else {
2537 r = route_remove(route, link, NULL);
2538 if (r < 0)
2539 return r;
2540 }
2541 }
2542
2543 return 0;
2544 }
2545
2546 static int link_drop_config(Link *link) {
2547 Address *address, *pool_address;
2548 Route *route;
2549 Iterator i;
2550 int r;
2551
2552 SET_FOREACH(address, link->addresses, i) {
2553 /* we consider IPv6LL addresses to be managed by the kernel */
2554 if (address->family == AF_INET6 && in_addr_is_link_local(AF_INET6, &address->in_addr) == 1)
2555 continue;
2556
2557 r = address_remove(address, link, NULL);
2558 if (r < 0)
2559 return r;
2560
2561 /* If this address came from an address pool, clean up the pool */
2562 LIST_FOREACH(addresses, pool_address, link->pool_addresses) {
2563 if (address_equal(address, pool_address)) {
2564 LIST_REMOVE(addresses, link->pool_addresses, pool_address);
2565 address_free(pool_address);
2566 break;
2567 }
2568 }
2569 }
2570
2571 SET_FOREACH(route, link->routes, i) {
2572 /* do not touch routes managed by the kernel */
2573 if (route->protocol == RTPROT_KERNEL)
2574 continue;
2575
2576 r = route_remove(route, link, NULL);
2577 if (r < 0)
2578 return r;
2579 }
2580
2581 ndisc_flush(link);
2582
2583 return 0;
2584 }
2585
2586 static int link_configure(Link *link) {
2587 int r;
2588
2589 assert(link);
2590 assert(link->network);
2591 assert(link->state == LINK_STATE_INITIALIZED);
2592
2593 if (STRPTR_IN_SET(link->kind, "can", "vcan"))
2594 return link_configure_can(link);
2595
2596 /* Drop foreign config, but ignore loopback or critical devices.
2597 * We do not want to remove loopback address or addresses used for root NFS. */
2598 if (!(link->flags & IFF_LOOPBACK) && !(link->network->dhcp_critical)) {
2599 r = link_drop_foreign_config(link);
2600 if (r < 0)
2601 return r;
2602 }
2603
2604 r = link_set_proxy_arp(link);
2605 if (r < 0)
2606 return r;
2607
2608 r = ipv6_proxy_ndp_addresses_configure(link);
2609 if (r < 0)
2610 return r;
2611
2612 r = link_set_ipv4_forward(link);
2613 if (r < 0)
2614 return r;
2615
2616 r = link_set_ipv6_forward(link);
2617 if (r < 0)
2618 return r;
2619
2620 r = link_set_ipv6_privacy_extensions(link);
2621 if (r < 0)
2622 return r;
2623
2624 r = link_set_ipv6_accept_ra(link);
2625 if (r < 0)
2626 return r;
2627
2628 r = link_set_ipv6_dad_transmits(link);
2629 if (r < 0)
2630 return r;
2631
2632 r = link_set_ipv6_hop_limit(link);
2633 if (r < 0)
2634 return r;
2635
2636 r = link_set_flags(link);
2637 if (r < 0)
2638 return r;
2639
2640 r = link_set_ipv6_mtu(link);
2641 if (r < 0)
2642 return r;
2643
2644 if (link_ipv4ll_enabled(link) || link_ipv4ll_fallback_enabled(link)) {
2645 r = ipv4ll_configure(link);
2646 if (r < 0)
2647 return r;
2648 }
2649
2650 if (link_dhcp4_enabled(link)) {
2651 r = dhcp4_set_promote_secondaries(link);
2652 if (r < 0)
2653 return r;
2654
2655 r = dhcp4_configure(link);
2656 if (r < 0)
2657 return r;
2658 }
2659
2660 if (link_dhcp4_server_enabled(link)) {
2661 r = sd_dhcp_server_new(&link->dhcp_server, link->ifindex);
2662 if (r < 0)
2663 return r;
2664
2665 r = sd_dhcp_server_attach_event(link->dhcp_server, NULL, 0);
2666 if (r < 0)
2667 return r;
2668 }
2669
2670 if (link_dhcp6_enabled(link) ||
2671 link_ipv6_accept_ra_enabled(link)) {
2672 r = dhcp6_configure(link);
2673 if (r < 0)
2674 return r;
2675 }
2676
2677 if (link_ipv6_accept_ra_enabled(link)) {
2678 r = ndisc_configure(link);
2679 if (r < 0)
2680 return r;
2681 }
2682
2683 if (link_radv_enabled(link)) {
2684 r = radv_configure(link);
2685 if (r < 0)
2686 return r;
2687 }
2688
2689 if (link_lldp_rx_enabled(link)) {
2690 r = link_lldp_rx_configure(link);
2691 if (r < 0)
2692 return r;
2693 }
2694
2695 r = link_configure_mtu(link);
2696 if (r < 0)
2697 return r;
2698
2699 r = link_configure_addrgen_mode(link);
2700 if (r < 0)
2701 return r;
2702
2703 return link_configure_after_setting_mtu(link);
2704 }
2705
2706 static int link_configure_after_setting_mtu(Link *link) {
2707 int r;
2708
2709 assert(link);
2710 assert(link->network);
2711 assert(link->state == LINK_STATE_INITIALIZED);
2712
2713 if (link->setting_mtu)
2714 return 0;
2715
2716 if (link_has_carrier(link) || link->network->configure_without_carrier) {
2717 r = link_acquire_conf(link);
2718 if (r < 0)
2719 return r;
2720 }
2721
2722 return link_enter_join_netdev(link);
2723 }
2724
2725 static int duid_set_uuid(DUID *duid, sd_id128_t uuid) {
2726 assert(duid);
2727
2728 if (duid->raw_data_len > 0)
2729 return 0;
2730
2731 if (duid->type != DUID_TYPE_UUID)
2732 return -EINVAL;
2733
2734 memcpy(&duid->raw_data, &uuid, sizeof(sd_id128_t));
2735 duid->raw_data_len = sizeof(sd_id128_t);
2736
2737 return 1;
2738 }
2739
2740 int get_product_uuid_handler(sd_bus_message *m, void *userdata, sd_bus_error *ret_error) {
2741 Manager *manager = userdata;
2742 const sd_bus_error *e;
2743 const void *a;
2744 size_t sz;
2745 DUID *duid;
2746 Link *link;
2747 int r;
2748
2749 assert(m);
2750 assert(manager);
2751
2752 e = sd_bus_message_get_error(m);
2753 if (e) {
2754 log_error_errno(sd_bus_error_get_errno(e),
2755 "Could not get product UUID. Falling back to use machine-app-specific ID as DUID-UUID: %s",
2756 e->message);
2757 goto configure;
2758 }
2759
2760 r = sd_bus_message_read_array(m, 'y', &a, &sz);
2761 if (r < 0)
2762 goto configure;
2763
2764 if (sz != sizeof(sd_id128_t)) {
2765 log_error("Invalid product UUID. Falling back to use machine-app-specific ID as DUID-UUID.");
2766 goto configure;
2767 }
2768
2769 memcpy(&manager->product_uuid, a, sz);
2770 while ((duid = set_steal_first(manager->duids_requesting_uuid)))
2771 (void) duid_set_uuid(duid, manager->product_uuid);
2772
2773 manager->duids_requesting_uuid = set_free(manager->duids_requesting_uuid);
2774
2775 configure:
2776 while ((link = set_steal_first(manager->links_requesting_uuid))) {
2777 r = link_configure(link);
2778 if (r < 0)
2779 log_link_error_errno(link, r, "Failed to configure link: %m");
2780 }
2781
2782 manager->links_requesting_uuid = set_free(manager->links_requesting_uuid);
2783
2784 /* To avoid calling GetProductUUID() bus method so frequently, set the flag below
2785 * even if the method fails. */
2786 manager->has_product_uuid = true;
2787
2788 return 1;
2789 }
2790
2791 static bool link_requires_uuid(Link *link) {
2792 const DUID *duid;
2793
2794 assert(link);
2795 assert(link->manager);
2796 assert(link->network);
2797
2798 duid = link_get_duid(link);
2799 if (duid->type != DUID_TYPE_UUID || duid->raw_data_len != 0)
2800 return false;
2801
2802 if (link_dhcp4_enabled(link) && IN_SET(link->network->dhcp_client_identifier, DHCP_CLIENT_ID_DUID, DHCP_CLIENT_ID_DUID_ONLY))
2803 return true;
2804
2805 if (link_dhcp6_enabled(link) || link_ipv6_accept_ra_enabled(link))
2806 return true;
2807
2808 return false;
2809 }
2810
2811 static int link_configure_duid(Link *link) {
2812 Manager *m;
2813 DUID *duid;
2814 int r;
2815
2816 assert(link);
2817 assert(link->manager);
2818 assert(link->network);
2819
2820 m = link->manager;
2821 duid = link_get_duid(link);
2822
2823 if (!link_requires_uuid(link))
2824 return 1;
2825
2826 if (m->has_product_uuid) {
2827 (void) duid_set_uuid(duid, m->product_uuid);
2828 return 1;
2829 }
2830
2831 if (!m->links_requesting_uuid) {
2832 r = manager_request_product_uuid(m, link);
2833 if (r < 0) {
2834 if (r == -ENOMEM)
2835 return r;
2836
2837 log_link_warning_errno(link, r,
2838 "Failed to get product UUID. Falling back to use machine-app-specific ID as DUID-UUID: %m");
2839 return 1;
2840 }
2841 } else {
2842 r = set_put(m->links_requesting_uuid, link);
2843 if (r < 0)
2844 return log_oom();
2845
2846 r = set_put(m->duids_requesting_uuid, duid);
2847 if (r < 0)
2848 return log_oom();
2849 }
2850
2851 return 0;
2852 }
2853
2854 static int link_initialized_and_synced(Link *link) {
2855 Network *network;
2856 int r;
2857
2858 assert(link);
2859 assert(link->ifname);
2860 assert(link->manager);
2861
2862 /* We may get called either from the asynchronous netlink callback,
2863 * or directly for link_add() if running in a container. See link_add(). */
2864 if (!IN_SET(link->state, LINK_STATE_PENDING, LINK_STATE_INITIALIZED))
2865 return 0;
2866
2867 log_link_debug(link, "Link state is up-to-date");
2868 link_set_state(link, LINK_STATE_INITIALIZED);
2869
2870 r = link_new_bound_by_list(link);
2871 if (r < 0)
2872 return r;
2873
2874 r = link_handle_bound_by_list(link);
2875 if (r < 0)
2876 return r;
2877
2878 if (!link->network) {
2879 r = network_get(link->manager, link->sd_device, link->ifname,
2880 &link->mac, &network);
2881 if (r == -ENOENT) {
2882 link_enter_unmanaged(link);
2883 return 0;
2884 } else if (r == 0 && network->unmanaged) {
2885 link_enter_unmanaged(link);
2886 return 0;
2887 } else if (r < 0)
2888 return r;
2889
2890 if (link->flags & IFF_LOOPBACK) {
2891 if (network->link_local != ADDRESS_FAMILY_NO)
2892 log_link_debug(link, "Ignoring link-local autoconfiguration for loopback link");
2893
2894 if (network->dhcp != ADDRESS_FAMILY_NO)
2895 log_link_debug(link, "Ignoring DHCP clients for loopback link");
2896
2897 if (network->dhcp_server)
2898 log_link_debug(link, "Ignoring DHCP server for loopback link");
2899 }
2900
2901 r = network_apply(network, link);
2902 if (r < 0)
2903 return r;
2904 }
2905
2906 r = link_new_bound_to_list(link);
2907 if (r < 0)
2908 return r;
2909
2910 /* link_configure_duid() returns 0 if it requests product UUID. In that case,
2911 * link_configure() is called later asynchronously. */
2912 r = link_configure_duid(link);
2913 if (r <= 0)
2914 return r;
2915
2916 r = link_configure(link);
2917 if (r < 0)
2918 return r;
2919
2920 return 0;
2921 }
2922
2923 static int link_initialized_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
2924 (void) link_initialized_and_synced(link);
2925 return 1;
2926 }
2927
2928 int link_initialized(Link *link, sd_device *device) {
2929 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
2930 int r;
2931
2932 assert(link);
2933 assert(link->manager);
2934 assert(link->manager->rtnl);
2935 assert(device);
2936
2937 if (link->state != LINK_STATE_PENDING)
2938 return 0;
2939
2940 if (link->sd_device)
2941 return 0;
2942
2943 log_link_debug(link, "udev initialized link");
2944 link_set_state(link, LINK_STATE_INITIALIZED);
2945
2946 link->sd_device = sd_device_ref(device);
2947
2948 /* udev has initialized the link, but we don't know if we have yet
2949 * processed the NEWLINK messages with the latest state. Do a GETLINK,
2950 * when it returns we know that the pending NEWLINKs have already been
2951 * processed and that we are up-to-date */
2952
2953 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_GETLINK,
2954 link->ifindex);
2955 if (r < 0)
2956 return r;
2957
2958 r = netlink_call_async(link->manager->rtnl, NULL, req, link_initialized_handler,
2959 link_netlink_destroy_callback, link);
2960 if (r < 0)
2961 return r;
2962
2963 link_ref(link);
2964
2965 return 0;
2966 }
2967
2968 static int link_load(Link *link) {
2969 _cleanup_free_ char *network_file = NULL,
2970 *addresses = NULL,
2971 *routes = NULL,
2972 *dhcp4_address = NULL,
2973 *ipv4ll_address = NULL;
2974 union in_addr_union address;
2975 union in_addr_union route_dst;
2976 const char *p;
2977 int r;
2978
2979 assert(link);
2980
2981 r = parse_env_file(NULL, link->state_file,
2982 "NETWORK_FILE", &network_file,
2983 "ADDRESSES", &addresses,
2984 "ROUTES", &routes,
2985 "DHCP4_ADDRESS", &dhcp4_address,
2986 "IPV4LL_ADDRESS", &ipv4ll_address);
2987 if (r < 0 && r != -ENOENT)
2988 return log_link_error_errno(link, r, "Failed to read %s: %m", link->state_file);
2989
2990 if (network_file) {
2991 Network *network;
2992 char *suffix;
2993
2994 /* drop suffix */
2995 suffix = strrchr(network_file, '.');
2996 if (!suffix) {
2997 log_link_debug(link, "Failed to get network name from %s", network_file);
2998 goto network_file_fail;
2999 }
3000 *suffix = '\0';
3001
3002 r = network_get_by_name(link->manager, basename(network_file), &network);
3003 if (r < 0) {
3004 log_link_debug_errno(link, r, "Failed to get network %s: %m", basename(network_file));
3005 goto network_file_fail;
3006 }
3007
3008 r = network_apply(network, link);
3009 if (r < 0)
3010 return log_link_error_errno(link, r, "Failed to apply network %s: %m", basename(network_file));
3011 }
3012
3013 network_file_fail:
3014
3015 if (addresses) {
3016 p = addresses;
3017
3018 for (;;) {
3019 _cleanup_free_ char *address_str = NULL;
3020 char *prefixlen_str;
3021 int family;
3022 unsigned char prefixlen;
3023
3024 r = extract_first_word(&p, &address_str, NULL, 0);
3025 if (r < 0) {
3026 log_link_debug_errno(link, r, "Failed to extract next address string: %m");
3027 continue;
3028 }
3029 if (r == 0)
3030 break;
3031
3032 prefixlen_str = strchr(address_str, '/');
3033 if (!prefixlen_str) {
3034 log_link_debug(link, "Failed to parse address and prefix length %s", address_str);
3035 continue;
3036 }
3037
3038 *prefixlen_str++ = '\0';
3039
3040 r = sscanf(prefixlen_str, "%hhu", &prefixlen);
3041 if (r != 1) {
3042 log_link_error(link, "Failed to parse prefixlen %s", prefixlen_str);
3043 continue;
3044 }
3045
3046 r = in_addr_from_string_auto(address_str, &family, &address);
3047 if (r < 0) {
3048 log_link_debug_errno(link, r, "Failed to parse address %s: %m", address_str);
3049 continue;
3050 }
3051
3052 r = address_add(link, family, &address, prefixlen, NULL);
3053 if (r < 0)
3054 return log_link_error_errno(link, r, "Failed to add address: %m");
3055 }
3056 }
3057
3058 if (routes) {
3059 p = routes;
3060
3061 for (;;) {
3062 Route *route;
3063 _cleanup_free_ char *route_str = NULL;
3064 _cleanup_(sd_event_source_unrefp) sd_event_source *expire = NULL;
3065 usec_t lifetime;
3066 char *prefixlen_str;
3067 int family;
3068 unsigned char prefixlen, tos, table;
3069 uint32_t priority;
3070
3071 r = extract_first_word(&p, &route_str, NULL, 0);
3072 if (r < 0) {
3073 log_link_debug_errno(link, r, "Failed to extract next route string: %m");
3074 continue;
3075 }
3076 if (r == 0)
3077 break;
3078
3079 prefixlen_str = strchr(route_str, '/');
3080 if (!prefixlen_str) {
3081 log_link_debug(link, "Failed to parse route %s", route_str);
3082 continue;
3083 }
3084
3085 *prefixlen_str++ = '\0';
3086
3087 r = sscanf(prefixlen_str, "%hhu/%hhu/%"SCNu32"/%hhu/"USEC_FMT, &prefixlen, &tos, &priority, &table, &lifetime);
3088 if (r != 5) {
3089 log_link_debug(link,
3090 "Failed to parse destination prefix length, tos, priority, table or expiration %s",
3091 prefixlen_str);
3092 continue;
3093 }
3094
3095 r = in_addr_from_string_auto(route_str, &family, &route_dst);
3096 if (r < 0) {
3097 log_link_debug_errno(link, r, "Failed to parse route destination %s: %m", route_str);
3098 continue;
3099 }
3100
3101 r = route_add(link, family, &route_dst, prefixlen, tos, priority, table, &route);
3102 if (r < 0)
3103 return log_link_error_errno(link, r, "Failed to add route: %m");
3104
3105 if (lifetime != USEC_INFINITY && !kernel_route_expiration_supported()) {
3106 r = sd_event_add_time(link->manager->event, &expire, clock_boottime_or_monotonic(), lifetime,
3107 0, route_expire_handler, route);
3108 if (r < 0)
3109 log_link_warning_errno(link, r, "Could not arm route expiration handler: %m");
3110 }
3111
3112 route->lifetime = lifetime;
3113 sd_event_source_unref(route->expire);
3114 route->expire = TAKE_PTR(expire);
3115 }
3116 }
3117
3118 if (dhcp4_address) {
3119 r = in_addr_from_string(AF_INET, dhcp4_address, &address);
3120 if (r < 0) {
3121 log_link_debug_errno(link, r, "Failed to parse DHCPv4 address %s: %m", dhcp4_address);
3122 goto dhcp4_address_fail;
3123 }
3124
3125 r = sd_dhcp_client_new(&link->dhcp_client, link->network ? link->network->dhcp_anonymize : 0);
3126 if (r < 0)
3127 return log_link_error_errno(link, r, "Failed to create DHCPv4 client: %m");
3128
3129 r = sd_dhcp_client_set_request_address(link->dhcp_client, &address.in);
3130 if (r < 0)
3131 return log_link_error_errno(link, r, "Failed to set initial DHCPv4 address %s: %m", dhcp4_address);
3132 }
3133
3134 dhcp4_address_fail:
3135
3136 if (ipv4ll_address) {
3137 r = in_addr_from_string(AF_INET, ipv4ll_address, &address);
3138 if (r < 0) {
3139 log_link_debug_errno(link, r, "Failed to parse IPv4LL address %s: %m", ipv4ll_address);
3140 goto ipv4ll_address_fail;
3141 }
3142
3143 r = sd_ipv4ll_new(&link->ipv4ll);
3144 if (r < 0)
3145 return log_link_error_errno(link, r, "Failed to create IPv4LL client: %m");
3146
3147 r = sd_ipv4ll_set_address(link->ipv4ll, &address.in);
3148 if (r < 0)
3149 return log_link_error_errno(link, r, "Failed to set initial IPv4LL address %s: %m", ipv4ll_address);
3150 }
3151
3152 ipv4ll_address_fail:
3153
3154 return 0;
3155 }
3156
3157 int link_add(Manager *m, sd_netlink_message *message, Link **ret) {
3158 _cleanup_(sd_device_unrefp) sd_device *device = NULL;
3159 char ifindex_str[2 + DECIMAL_STR_MAX(int)];
3160 Link *link;
3161 int r;
3162
3163 assert(m);
3164 assert(m->rtnl);
3165 assert(message);
3166 assert(ret);
3167
3168 r = link_new(m, message, ret);
3169 if (r < 0)
3170 return r;
3171
3172 link = *ret;
3173
3174 log_link_debug(link, "Link %d added", link->ifindex);
3175
3176 r = link_load(link);
3177 if (r < 0)
3178 return r;
3179
3180 if (detect_container() <= 0) {
3181 /* not in a container, udev will be around */
3182 sprintf(ifindex_str, "n%d", link->ifindex);
3183 r = sd_device_new_from_device_id(&device, ifindex_str);
3184 if (r < 0) {
3185 log_link_warning_errno(link, r, "Could not find device: %m");
3186 goto failed;
3187 }
3188
3189 r = sd_device_get_is_initialized(device);
3190 if (r < 0) {
3191 log_link_warning_errno(link, r, "Could not determine whether the device is initialized or not: %m");
3192 goto failed;
3193 }
3194 if (r == 0) {
3195 /* not yet ready */
3196 log_link_debug(link, "link pending udev initialization...");
3197 return 0;
3198 }
3199
3200 r = device_is_renaming(device);
3201 if (r < 0) {
3202 log_link_warning_errno(link, r, "Failed to determine the device is renamed or not: %m");
3203 goto failed;
3204 }
3205 if (r > 0) {
3206 log_link_debug(link, "Interface is under renaming, pending initialization.");
3207 return 0;
3208 }
3209
3210 r = link_initialized(link, device);
3211 if (r < 0)
3212 goto failed;
3213 } else {
3214 r = link_initialized_and_synced(link);
3215 if (r < 0)
3216 goto failed;
3217 }
3218
3219 return 0;
3220 failed:
3221 link_enter_failed(link);
3222 return r;
3223 }
3224
3225 int link_ipv6ll_gained(Link *link, const struct in6_addr *address) {
3226 int r;
3227
3228 assert(link);
3229
3230 log_link_info(link, "Gained IPv6LL");
3231
3232 link->ipv6ll_address = *address;
3233 link_check_ready(link);
3234
3235 if (IN_SET(link->state, LINK_STATE_CONFIGURING, LINK_STATE_CONFIGURED)) {
3236 r = link_acquire_ipv6_conf(link);
3237 if (r < 0) {
3238 link_enter_failed(link);
3239 return r;
3240 }
3241 }
3242
3243 return 0;
3244 }
3245
3246 static int link_carrier_gained(Link *link) {
3247 int r;
3248
3249 assert(link);
3250
3251 if (IN_SET(link->state, LINK_STATE_CONFIGURING, LINK_STATE_CONFIGURED)) {
3252 r = link_acquire_conf(link);
3253 if (r < 0) {
3254 link_enter_failed(link);
3255 return r;
3256 }
3257
3258 r = link_request_set_addresses(link);
3259 if (r < 0)
3260 return r;
3261 }
3262
3263 r = link_handle_bound_by_list(link);
3264 if (r < 0)
3265 return r;
3266
3267 return 0;
3268 }
3269
3270 static int link_carrier_lost(Link *link) {
3271 int r;
3272
3273 assert(link);
3274
3275 if (link->network && link->network->ignore_carrier_loss)
3276 return 0;
3277
3278 /* Some devices reset itself while setting the MTU. This causes the DHCP client fall into a loop.
3279 * setting_mtu keep track whether the device got reset because of setting MTU and does not drop the
3280 * configuration and stop the clients as well. */
3281 if (link->setting_mtu)
3282 return 0;
3283
3284 r = link_stop_clients(link);
3285 if (r < 0) {
3286 link_enter_failed(link);
3287 return r;
3288 }
3289
3290 if (link_dhcp4_server_enabled(link))
3291 (void) sd_dhcp_server_stop(link->dhcp_server);
3292
3293 r = link_drop_config(link);
3294 if (r < 0)
3295 return r;
3296
3297 if (!IN_SET(link->state, LINK_STATE_UNMANAGED, LINK_STATE_PENDING)) {
3298 log_link_debug(link, "State is %s, dropping config", link_state_to_string(link->state));
3299 r = link_drop_foreign_config(link);
3300 if (r < 0)
3301 return r;
3302 }
3303
3304 r = link_handle_bound_by_list(link);
3305 if (r < 0)
3306 return r;
3307
3308 return 0;
3309 }
3310
3311 int link_carrier_reset(Link *link) {
3312 int r;
3313
3314 assert(link);
3315
3316 if (link_has_carrier(link)) {
3317 r = link_carrier_lost(link);
3318 if (r < 0)
3319 return r;
3320
3321 r = link_carrier_gained(link);
3322 if (r < 0)
3323 return r;
3324
3325 log_link_info(link, "Reset carrier");
3326 }
3327
3328 return 0;
3329 }
3330
3331 int link_update(Link *link, sd_netlink_message *m) {
3332 struct ether_addr mac;
3333 const char *ifname;
3334 uint32_t mtu;
3335 bool had_carrier, carrier_gained, carrier_lost;
3336 int old_master, r;
3337
3338 assert(link);
3339 assert(link->ifname);
3340 assert(m);
3341
3342 if (link->state == LINK_STATE_LINGER) {
3343 log_link_info(link, "Link re-added");
3344 link_set_state(link, LINK_STATE_CONFIGURING);
3345
3346 r = link_new_carrier_maps(link);
3347 if (r < 0)
3348 return r;
3349 }
3350
3351 r = sd_netlink_message_read_string(m, IFLA_IFNAME, &ifname);
3352 if (r >= 0 && !streq(ifname, link->ifname)) {
3353 Manager *manager = link->manager;
3354
3355 log_link_info(link, "Interface name change detected, %s has been renamed to %s.", link->ifname, ifname);
3356
3357 link_drop(link);
3358 r = link_add(manager, m, &link);
3359 if (r < 0)
3360 return r;
3361 }
3362
3363 r = sd_netlink_message_read_u32(m, IFLA_MTU, &mtu);
3364 if (r >= 0 && mtu > 0) {
3365 link->mtu = mtu;
3366 if (link->original_mtu == 0) {
3367 link->original_mtu = mtu;
3368 log_link_debug(link, "Saved original MTU: %" PRIu32, link->original_mtu);
3369 }
3370
3371 if (link->dhcp_client) {
3372 r = sd_dhcp_client_set_mtu(link->dhcp_client,
3373 link->mtu);
3374 if (r < 0)
3375 return log_link_warning_errno(link, r, "Could not update MTU in DHCP client: %m");
3376 }
3377
3378 if (link->radv) {
3379 r = sd_radv_set_mtu(link->radv, link->mtu);
3380 if (r < 0)
3381 return log_link_warning_errno(link, r, "Could not set MTU for Router Advertisement: %m");
3382 }
3383 }
3384
3385 /* The kernel may broadcast NEWLINK messages without the MAC address
3386 set, simply ignore them. */
3387 r = sd_netlink_message_read_ether_addr(m, IFLA_ADDRESS, &mac);
3388 if (r >= 0) {
3389 if (memcmp(link->mac.ether_addr_octet, mac.ether_addr_octet,
3390 ETH_ALEN)) {
3391
3392 memcpy(link->mac.ether_addr_octet, mac.ether_addr_octet,
3393 ETH_ALEN);
3394
3395 log_link_debug(link, "MAC address: "
3396 "%02hhx:%02hhx:%02hhx:%02hhx:%02hhx:%02hhx",
3397 mac.ether_addr_octet[0],
3398 mac.ether_addr_octet[1],
3399 mac.ether_addr_octet[2],
3400 mac.ether_addr_octet[3],
3401 mac.ether_addr_octet[4],
3402 mac.ether_addr_octet[5]);
3403
3404 if (link->ipv4ll) {
3405 r = sd_ipv4ll_set_mac(link->ipv4ll, &link->mac);
3406 if (r < 0)
3407 return log_link_warning_errno(link, r, "Could not update MAC address in IPv4LL client: %m");
3408 }
3409
3410 if (link->dhcp_client) {
3411 r = sd_dhcp_client_set_mac(link->dhcp_client,
3412 (const uint8_t *) &link->mac,
3413 sizeof (link->mac),
3414 ARPHRD_ETHER);
3415 if (r < 0)
3416 return log_link_warning_errno(link, r, "Could not update MAC address in DHCP client: %m");
3417
3418 r = dhcp4_set_client_identifier(link);
3419 if (r < 0)
3420 return r;
3421 }
3422
3423 if (link->dhcp6_client) {
3424 const DUID* duid = link_get_duid(link);
3425
3426 r = sd_dhcp6_client_set_mac(link->dhcp6_client,
3427 (const uint8_t *) &link->mac,
3428 sizeof (link->mac),
3429 ARPHRD_ETHER);
3430 if (r < 0)
3431 return log_link_warning_errno(link, r, "Could not update MAC address in DHCPv6 client: %m");
3432
3433 if (link->network->iaid_set) {
3434 r = sd_dhcp6_client_set_iaid(link->dhcp6_client,
3435 link->network->iaid);
3436 if (r < 0)
3437 return log_link_warning_errno(link, r, "Could not update DHCPv6 IAID: %m");
3438 }
3439
3440 r = sd_dhcp6_client_set_duid(link->dhcp6_client,
3441 duid->type,
3442 duid->raw_data_len > 0 ? duid->raw_data : NULL,
3443 duid->raw_data_len);
3444 if (r < 0)
3445 return log_link_warning_errno(link, r, "Could not update DHCPv6 DUID: %m");
3446 }
3447
3448 if (link->radv) {
3449 r = sd_radv_set_mac(link->radv, &link->mac);
3450 if (r < 0)
3451 return log_link_warning_errno(link, r, "Could not update MAC for Router Advertisement: %m");
3452 }
3453
3454 if (link->ndisc) {
3455 r = sd_ndisc_set_mac(link->ndisc, &link->mac);
3456 if (r < 0)
3457 return log_link_warning_errno(link, r, "Could not update MAC for ndisc: %m");
3458 }
3459 }
3460 }
3461
3462 old_master = link->master_ifindex;
3463 (void) sd_netlink_message_read_u32(m, IFLA_MASTER, (uint32_t *) &link->master_ifindex);
3464
3465 had_carrier = link_has_carrier(link);
3466
3467 r = link_update_flags(link, m, old_master != link->master_ifindex);
3468 if (r < 0)
3469 return r;
3470
3471 r = link_update_lldp(link);
3472 if (r < 0)
3473 return r;
3474
3475 carrier_gained = !had_carrier && link_has_carrier(link);
3476 carrier_lost = had_carrier && !link_has_carrier(link);
3477
3478 if (carrier_gained) {
3479 log_link_info(link, "Gained carrier");
3480
3481 r = link_carrier_gained(link);
3482 if (r < 0)
3483 return r;
3484 } else if (carrier_lost) {
3485 log_link_info(link, "Lost carrier");
3486
3487 r = link_carrier_lost(link);
3488 if (r < 0)
3489 return r;
3490 }
3491
3492 return 0;
3493 }
3494
3495 static void print_link_hashmap(FILE *f, const char *prefix, Hashmap* h) {
3496 bool space = false;
3497 Iterator i;
3498 Link *link;
3499
3500 assert(f);
3501 assert(prefix);
3502
3503 if (hashmap_isempty(h))
3504 return;
3505
3506 fputs(prefix, f);
3507 HASHMAP_FOREACH(link, h, i) {
3508 if (space)
3509 fputc(' ', f);
3510
3511 fprintf(f, "%i", link->ifindex);
3512 space = true;
3513 }
3514
3515 fputc('\n', f);
3516 }
3517
3518 int link_save(Link *link) {
3519 _cleanup_free_ char *temp_path = NULL;
3520 _cleanup_fclose_ FILE *f = NULL;
3521 const char *admin_state, *oper_state;
3522 Address *a;
3523 Route *route;
3524 Iterator i;
3525 int r;
3526
3527 assert(link);
3528 assert(link->state_file);
3529 assert(link->lease_file);
3530 assert(link->manager);
3531
3532 if (link->state == LINK_STATE_LINGER) {
3533 (void) unlink(link->state_file);
3534 return 0;
3535 }
3536
3537 link_lldp_save(link);
3538
3539 admin_state = link_state_to_string(link->state);
3540 assert(admin_state);
3541
3542 oper_state = link_operstate_to_string(link->operstate);
3543 assert(oper_state);
3544
3545 r = fopen_temporary(link->state_file, &f, &temp_path);
3546 if (r < 0)
3547 goto fail;
3548
3549 (void) fchmod(fileno(f), 0644);
3550
3551 fprintf(f,
3552 "# This is private data. Do not parse.\n"
3553 "ADMIN_STATE=%s\n"
3554 "OPER_STATE=%s\n",
3555 admin_state, oper_state);
3556
3557 if (link->network) {
3558 char **dhcp6_domains = NULL, **dhcp_domains = NULL;
3559 const char *dhcp_domainname = NULL, *p;
3560 sd_dhcp6_lease *dhcp6_lease = NULL;
3561 unsigned j;
3562 bool space;
3563
3564 fprintf(f, "REQUIRED_FOR_ONLINE=%s\n",
3565 yes_no(link->network->required_for_online));
3566
3567 fprintf(f, "REQUIRED_OPER_STATE_FOR_ONLINE=%s\n",
3568 strempty(link_operstate_to_string(link->network->required_operstate_for_online)));
3569
3570 if (link->dhcp6_client) {
3571 r = sd_dhcp6_client_get_lease(link->dhcp6_client, &dhcp6_lease);
3572 if (r < 0 && r != -ENOMSG)
3573 log_link_debug(link, "No DHCPv6 lease");
3574 }
3575
3576 fprintf(f, "NETWORK_FILE=%s\n", link->network->filename);
3577
3578 fputs("DNS=", f);
3579 space = false;
3580
3581 for (j = 0; j < link->network->n_dns; j++) {
3582 _cleanup_free_ char *b = NULL;
3583
3584 r = in_addr_to_string(link->network->dns[j].family,
3585 &link->network->dns[j].address, &b);
3586 if (r < 0) {
3587 log_debug_errno(r, "Failed to format address, ignoring: %m");
3588 continue;
3589 }
3590
3591 if (space)
3592 fputc(' ', f);
3593 fputs(b, f);
3594 space = true;
3595 }
3596
3597 if (link->network->dhcp_use_dns &&
3598 link->dhcp_lease) {
3599 const struct in_addr *addresses;
3600
3601 r = sd_dhcp_lease_get_dns(link->dhcp_lease, &addresses);
3602 if (r > 0)
3603 if (serialize_in_addrs(f, addresses, r, space, in4_addr_is_non_local) > 0)
3604 space = true;
3605 }
3606
3607 if (link->network->dhcp_use_dns && dhcp6_lease) {
3608 struct in6_addr *in6_addrs;
3609
3610 r = sd_dhcp6_lease_get_dns(dhcp6_lease, &in6_addrs);
3611 if (r > 0) {
3612 if (space)
3613 fputc(' ', f);
3614 serialize_in6_addrs(f, in6_addrs, r);
3615 space = true;
3616 }
3617 }
3618
3619 /* Make sure to flush out old entries before we use the NDISC data */
3620 ndisc_vacuum(link);
3621
3622 if (link->network->ipv6_accept_ra_use_dns && link->ndisc_rdnss) {
3623 NDiscRDNSS *dd;
3624
3625 SET_FOREACH(dd, link->ndisc_rdnss, i) {
3626 if (space)
3627 fputc(' ', f);
3628
3629 serialize_in6_addrs(f, &dd->address, 1);
3630 space = true;
3631 }
3632 }
3633
3634 fputc('\n', f);
3635
3636 fputs("NTP=", f);
3637 space = false;
3638 fputstrv(f, link->network->ntp, NULL, &space);
3639
3640 if (link->network->dhcp_use_ntp &&
3641 link->dhcp_lease) {
3642 const struct in_addr *addresses;
3643
3644 r = sd_dhcp_lease_get_ntp(link->dhcp_lease, &addresses);
3645 if (r > 0)
3646 if (serialize_in_addrs(f, addresses, r, space, in4_addr_is_non_local) > 0)
3647 space = true;
3648 }
3649
3650 if (link->network->dhcp_use_ntp && dhcp6_lease) {
3651 struct in6_addr *in6_addrs;
3652 char **hosts;
3653
3654 r = sd_dhcp6_lease_get_ntp_addrs(dhcp6_lease,
3655 &in6_addrs);
3656 if (r > 0) {
3657 if (space)
3658 fputc(' ', f);
3659 serialize_in6_addrs(f, in6_addrs, r);
3660 space = true;
3661 }
3662
3663 r = sd_dhcp6_lease_get_ntp_fqdn(dhcp6_lease, &hosts);
3664 if (r > 0)
3665 fputstrv(f, hosts, NULL, &space);
3666 }
3667
3668 fputc('\n', f);
3669
3670 if (link->network->dhcp_use_domains != DHCP_USE_DOMAINS_NO) {
3671 if (link->dhcp_lease) {
3672 (void) sd_dhcp_lease_get_domainname(link->dhcp_lease, &dhcp_domainname);
3673 (void) sd_dhcp_lease_get_search_domains(link->dhcp_lease, &dhcp_domains);
3674 }
3675 if (dhcp6_lease)
3676 (void) sd_dhcp6_lease_get_domains(dhcp6_lease, &dhcp6_domains);
3677 }
3678
3679 fputs("DOMAINS=", f);
3680 space = false;
3681 ORDERED_SET_FOREACH(p, link->network->search_domains, i)
3682 fputs_with_space(f, p, NULL, &space);
3683
3684 if (link->network->dhcp_use_domains == DHCP_USE_DOMAINS_YES) {
3685 NDiscDNSSL *dd;
3686
3687 if (dhcp_domainname)
3688 fputs_with_space(f, dhcp_domainname, NULL, &space);
3689 if (dhcp_domains)
3690 fputstrv(f, dhcp_domains, NULL, &space);
3691 if (dhcp6_domains)
3692 fputstrv(f, dhcp6_domains, NULL, &space);
3693
3694 SET_FOREACH(dd, link->ndisc_dnssl, i)
3695 fputs_with_space(f, NDISC_DNSSL_DOMAIN(dd), NULL, &space);
3696 }
3697
3698 fputc('\n', f);
3699
3700 fputs("ROUTE_DOMAINS=", f);
3701 space = false;
3702 ORDERED_SET_FOREACH(p, link->network->route_domains, i)
3703 fputs_with_space(f, p, NULL, &space);
3704
3705 if (link->network->dhcp_use_domains == DHCP_USE_DOMAINS_ROUTE) {
3706 NDiscDNSSL *dd;
3707
3708 if (dhcp_domainname)
3709 fputs_with_space(f, dhcp_domainname, NULL, &space);
3710 if (dhcp_domains)
3711 fputstrv(f, dhcp_domains, NULL, &space);
3712 if (dhcp6_domains)
3713 fputstrv(f, dhcp6_domains, NULL, &space);
3714
3715 SET_FOREACH(dd, link->ndisc_dnssl, i)
3716 fputs_with_space(f, NDISC_DNSSL_DOMAIN(dd), NULL, &space);
3717 }
3718
3719 fputc('\n', f);
3720
3721 fprintf(f, "LLMNR=%s\n",
3722 resolve_support_to_string(link->network->llmnr));
3723 fprintf(f, "MDNS=%s\n",
3724 resolve_support_to_string(link->network->mdns));
3725 if (link->network->dns_default_route >= 0)
3726 fprintf(f, "DNS_DEFAULT_ROUTE=%s\n", yes_no(link->network->dns_default_route));
3727
3728 if (link->network->dns_over_tls_mode != _DNS_OVER_TLS_MODE_INVALID)
3729 fprintf(f, "DNS_OVER_TLS=%s\n",
3730 dns_over_tls_mode_to_string(link->network->dns_over_tls_mode));
3731
3732 if (link->network->dnssec_mode != _DNSSEC_MODE_INVALID)
3733 fprintf(f, "DNSSEC=%s\n",
3734 dnssec_mode_to_string(link->network->dnssec_mode));
3735
3736 if (!set_isempty(link->network->dnssec_negative_trust_anchors)) {
3737 const char *n;
3738
3739 fputs("DNSSEC_NTA=", f);
3740 space = false;
3741 SET_FOREACH(n, link->network->dnssec_negative_trust_anchors, i)
3742 fputs_with_space(f, n, NULL, &space);
3743 fputc('\n', f);
3744 }
3745
3746 fputs("ADDRESSES=", f);
3747 space = false;
3748 SET_FOREACH(a, link->addresses, i) {
3749 _cleanup_free_ char *address_str = NULL;
3750
3751 r = in_addr_to_string(a->family, &a->in_addr, &address_str);
3752 if (r < 0)
3753 goto fail;
3754
3755 fprintf(f, "%s%s/%u", space ? " " : "", address_str, a->prefixlen);
3756 space = true;
3757 }
3758 fputc('\n', f);
3759
3760 fputs("ROUTES=", f);
3761 space = false;
3762 SET_FOREACH(route, link->routes, i) {
3763 _cleanup_free_ char *route_str = NULL;
3764
3765 r = in_addr_to_string(route->family, &route->dst, &route_str);
3766 if (r < 0)
3767 goto fail;
3768
3769 fprintf(f, "%s%s/%hhu/%hhu/%"PRIu32"/%"PRIu32"/"USEC_FMT,
3770 space ? " " : "", route_str,
3771 route->dst_prefixlen, route->tos, route->priority, route->table, route->lifetime);
3772 space = true;
3773 }
3774
3775 fputc('\n', f);
3776 }
3777
3778 print_link_hashmap(f, "CARRIER_BOUND_TO=", link->bound_to_links);
3779 print_link_hashmap(f, "CARRIER_BOUND_BY=", link->bound_by_links);
3780
3781 if (link->dhcp_lease) {
3782 struct in_addr address;
3783 const char *tz = NULL;
3784
3785 assert(link->network);
3786
3787 r = sd_dhcp_lease_get_timezone(link->dhcp_lease, &tz);
3788 if (r >= 0)
3789 fprintf(f, "TIMEZONE=%s\n", tz);
3790
3791 r = sd_dhcp_lease_get_address(link->dhcp_lease, &address);
3792 if (r >= 0) {
3793 fputs("DHCP4_ADDRESS=", f);
3794 serialize_in_addrs(f, &address, 1, false, NULL);
3795 fputc('\n', f);
3796 }
3797
3798 r = dhcp_lease_save(link->dhcp_lease, link->lease_file);
3799 if (r < 0)
3800 goto fail;
3801
3802 fprintf(f,
3803 "DHCP_LEASE=%s\n",
3804 link->lease_file);
3805 } else
3806 (void) unlink(link->lease_file);
3807
3808 if (link->ipv4ll) {
3809 struct in_addr address;
3810
3811 r = sd_ipv4ll_get_address(link->ipv4ll, &address);
3812 if (r >= 0) {
3813 fputs("IPV4LL_ADDRESS=", f);
3814 serialize_in_addrs(f, &address, 1, false, NULL);
3815 fputc('\n', f);
3816 }
3817 }
3818
3819 r = fflush_and_check(f);
3820 if (r < 0)
3821 goto fail;
3822
3823 if (rename(temp_path, link->state_file) < 0) {
3824 r = -errno;
3825 goto fail;
3826 }
3827
3828 return 0;
3829
3830 fail:
3831 (void) unlink(link->state_file);
3832 if (temp_path)
3833 (void) unlink(temp_path);
3834
3835 return log_link_error_errno(link, r, "Failed to save link data to %s: %m", link->state_file);
3836 }
3837
3838 /* The serialized state in /run is no longer up-to-date. */
3839 void link_dirty(Link *link) {
3840 int r;
3841
3842 assert(link);
3843
3844 /* mark manager dirty as link is dirty */
3845 manager_dirty(link->manager);
3846
3847 r = set_ensure_allocated(&link->manager->dirty_links, NULL);
3848 if (r < 0)
3849 /* allocation errors are ignored */
3850 return;
3851
3852 r = set_put(link->manager->dirty_links, link);
3853 if (r <= 0)
3854 /* don't take another ref if the link was already dirty */
3855 return;
3856
3857 link_ref(link);
3858 }
3859
3860 /* The serialized state in /run is up-to-date */
3861 void link_clean(Link *link) {
3862 assert(link);
3863 assert(link->manager);
3864
3865 link_unref(set_remove(link->manager->dirty_links, link));
3866 }
3867
3868 static const char* const link_state_table[_LINK_STATE_MAX] = {
3869 [LINK_STATE_PENDING] = "pending",
3870 [LINK_STATE_INITIALIZED] = "initialized",
3871 [LINK_STATE_CONFIGURING] = "configuring",
3872 [LINK_STATE_CONFIGURED] = "configured",
3873 [LINK_STATE_UNMANAGED] = "unmanaged",
3874 [LINK_STATE_FAILED] = "failed",
3875 [LINK_STATE_LINGER] = "linger",
3876 };
3877
3878 DEFINE_STRING_TABLE_LOOKUP(link_state, LinkState);