]> git.ipfire.org Git - thirdparty/systemd.git/blob - src/network/networkd-link.c
projects / thirdparty / systemd.git / blob
? search:
summary | shortlog | log | commit | commitdiff | tree
blame | history | raw | HEAD
Merge pull request #11428 from yuwata/network-issue-9130-v2
[thirdparty/systemd.git] / src / network / networkd-link.c
1 /* SPDX-License-Identifier: LGPL-2.1+ */
2
3 #include <netinet/ether.h>
4 #include <linux/if.h>
5 #include <linux/can/netlink.h>
6 #include <unistd.h>
7 #include <stdio_ext.h>
8
9 #include "alloc-util.h"
10 #include "bus-util.h"
11 #include "dhcp-identifier.h"
12 #include "dhcp-lease-internal.h"
13 #include "env-file.h"
14 #include "fd-util.h"
15 #include "fileio.h"
16 #include "missing_network.h"
17 #include "netlink-util.h"
18 #include "network-internal.h"
19 #include "networkd-ipv6-proxy-ndp.h"
20 #include "networkd-lldp-tx.h"
21 #include "networkd-manager.h"
22 #include "networkd-ndisc.h"
23 #include "networkd-neighbor.h"
24 #include "networkd-radv.h"
25 #include "networkd-routing-policy-rule.h"
26 #include "set.h"
27 #include "socket-util.h"
28 #include "stdio-util.h"
29 #include "string-table.h"
30 #include "strv.h"
31 #include "tmpfile-util.h"
32 #include "util.h"
33 #include "virt.h"
34
35 DUID* link_get_duid(Link *link) {
36 if (link->network->duid.type != _DUID_TYPE_INVALID)
37 return &link->network->duid;
38 else
39 return &link->manager->duid;
40 }
41
42 static bool link_dhcp6_enabled(Link *link) {
43 assert(link);
44
45 if (!socket_ipv6_is_supported())
46 return false;
47
48 if (link->flags & IFF_LOOPBACK)
49 return false;
50
51 if (!link->network)
52 return false;
53
54 return link->network->dhcp & ADDRESS_FAMILY_IPV6;
55 }
56
57 static bool link_dhcp4_enabled(Link *link) {
58 assert(link);
59
60 if (link->flags & IFF_LOOPBACK)
61 return false;
62
63 if (!link->network)
64 return false;
65
66 return link->network->dhcp & ADDRESS_FAMILY_IPV4;
67 }
68
69 static bool link_dhcp4_server_enabled(Link *link) {
70 assert(link);
71
72 if (link->flags & IFF_LOOPBACK)
73 return false;
74
75 if (!link->network)
76 return false;
77
78 return link->network->dhcp_server;
79 }
80
81 static bool link_ipv4ll_enabled(Link *link) {
82 assert(link);
83
84 if (link->flags & IFF_LOOPBACK)
85 return false;
86
87 if (!link->network)
88 return false;
89
90 if (streq_ptr(link->kind, "wireguard"))
91 return false;
92
93 return link->network->link_local & ADDRESS_FAMILY_IPV4;
94 }
95
96 static bool link_ipv6ll_enabled(Link *link) {
97 assert(link);
98
99 if (!socket_ipv6_is_supported())
100 return false;
101
102 if (link->flags & IFF_LOOPBACK)
103 return false;
104
105 if (!link->network)
106 return false;
107
108 if (streq_ptr(link->kind, "wireguard"))
109 return false;
110
111 return link->network->link_local & ADDRESS_FAMILY_IPV6;
112 }
113
114 static bool link_ipv6_enabled(Link *link) {
115 assert(link);
116
117 if (!socket_ipv6_is_supported())
118 return false;
119
120 if (link->network->bridge)
121 return false;
122
123 /* DHCPv6 client will not be started if no IPv6 link-local address is configured. */
124 return link_ipv6ll_enabled(link) || network_has_static_ipv6_addresses(link->network);
125 }
126
127 static bool link_radv_enabled(Link *link) {
128 assert(link);
129
130 if (!link_ipv6ll_enabled(link))
131 return false;
132
133 return link->network->router_prefix_delegation != RADV_PREFIX_DELEGATION_NONE;
134 }
135
136 static bool link_lldp_rx_enabled(Link *link) {
137 assert(link);
138
139 if (link->flags & IFF_LOOPBACK)
140 return false;
141
142 if (link->iftype != ARPHRD_ETHER)
143 return false;
144
145 if (!link->network)
146 return false;
147
148 /* LLDP should be handled on bridge slaves as those have a direct
149 * connection to their peers not on the bridge master. Linux doesn't
150 * even (by default) forward lldp packets to the bridge master.*/
151 if (streq_ptr("bridge", link->kind))
152 return false;
153
154 return link->network->lldp_mode != LLDP_MODE_NO;
155 }
156
157 static bool link_lldp_emit_enabled(Link *link) {
158 assert(link);
159
160 if (link->flags & IFF_LOOPBACK)
161 return false;
162
163 if (link->iftype != ARPHRD_ETHER)
164 return false;
165
166 if (!link->network)
167 return false;
168
169 return link->network->lldp_emit != LLDP_EMIT_NO;
170 }
171
172 static bool link_ipv4_forward_enabled(Link *link) {
173 assert(link);
174
175 if (link->flags & IFF_LOOPBACK)
176 return false;
177
178 if (!link->network)
179 return false;
180
181 if (link->network->ip_forward == _ADDRESS_FAMILY_BOOLEAN_INVALID)
182 return false;
183
184 return link->network->ip_forward & ADDRESS_FAMILY_IPV4;
185 }
186
187 static bool link_ipv6_forward_enabled(Link *link) {
188 assert(link);
189
190 if (!socket_ipv6_is_supported())
191 return false;
192
193 if (link->flags & IFF_LOOPBACK)
194 return false;
195
196 if (!link->network)
197 return false;
198
199 if (link->network->ip_forward == _ADDRESS_FAMILY_BOOLEAN_INVALID)
200 return false;
201
202 return link->network->ip_forward & ADDRESS_FAMILY_IPV6;
203 }
204
205 static bool link_proxy_arp_enabled(Link *link) {
206 assert(link);
207
208 if (link->flags & IFF_LOOPBACK)
209 return false;
210
211 if (!link->network)
212 return false;
213
214 if (link->network->proxy_arp < 0)
215 return false;
216
217 return true;
218 }
219
220 static bool link_ipv6_accept_ra_enabled(Link *link) {
221 assert(link);
222
223 if (!socket_ipv6_is_supported())
224 return false;
225
226 if (link->flags & IFF_LOOPBACK)
227 return false;
228
229 if (!link->network)
230 return false;
231
232 if (!link_ipv6ll_enabled(link))
233 return false;
234
235 /* If unset use system default (enabled if local forwarding is disabled.
236 * disabled if local forwarding is enabled).
237 * If set, ignore or enforce RA independent of local forwarding state.
238 */
239 if (link->network->ipv6_accept_ra < 0)
240 /* default to accept RA if ip_forward is disabled and ignore RA if ip_forward is enabled */
241 return !link_ipv6_forward_enabled(link);
242 else if (link->network->ipv6_accept_ra > 0)
243 /* accept RA even if ip_forward is enabled */
244 return true;
245 else
246 /* ignore RA */
247 return false;
248 }
249
250 static IPv6PrivacyExtensions link_ipv6_privacy_extensions(Link *link) {
251 assert(link);
252
253 if (!socket_ipv6_is_supported())
254 return _IPV6_PRIVACY_EXTENSIONS_INVALID;
255
256 if (link->flags & IFF_LOOPBACK)
257 return _IPV6_PRIVACY_EXTENSIONS_INVALID;
258
259 if (!link->network)
260 return _IPV6_PRIVACY_EXTENSIONS_INVALID;
261
262 return link->network->ipv6_privacy_extensions;
263 }
264
265 static int link_enable_ipv6(Link *link) {
266 const char *p = NULL;
267 bool disabled;
268 int r;
269
270 if (link->flags & IFF_LOOPBACK)
271 return 0;
272
273 disabled = !link_ipv6_enabled(link);
274
275 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/disable_ipv6");
276
277 r = write_string_file(p, one_zero(disabled), WRITE_STRING_FILE_VERIFY_ON_FAILURE | WRITE_STRING_FILE_DISABLE_BUFFER);
278 if (r < 0)
279 log_link_warning_errno(link, r, "Cannot %s IPv6 for interface %s: %m",
280 enable_disable(!disabled), link->ifname);
281 else
282 log_link_info(link, "IPv6 successfully %sd", enable_disable(!disabled));
283
284 return 0;
285 }
286
287 void link_update_operstate(Link *link) {
288 LinkOperationalState operstate;
289 assert(link);
290
291 if (link->kernel_operstate == IF_OPER_DORMANT)
292 operstate = LINK_OPERSTATE_DORMANT;
293 else if (link_has_carrier(link)) {
294 Address *address;
295 uint8_t scope = RT_SCOPE_NOWHERE;
296 Iterator i;
297
298 /* if we have carrier, check what addresses we have */
299 SET_FOREACH(address, link->addresses, i) {
300 if (!address_is_ready(address))
301 continue;
302
303 if (address->scope < scope)
304 scope = address->scope;
305 }
306
307 /* for operstate we also take foreign addresses into account */
308 SET_FOREACH(address, link->addresses_foreign, i) {
309 if (!address_is_ready(address))
310 continue;
311
312 if (address->scope < scope)
313 scope = address->scope;
314 }
315
316 if (scope < RT_SCOPE_SITE)
317 /* universally accessible addresses found */
318 operstate = LINK_OPERSTATE_ROUTABLE;
319 else if (scope < RT_SCOPE_HOST)
320 /* only link or site local addresses found */
321 operstate = LINK_OPERSTATE_DEGRADED;
322 else
323 /* no useful addresses found */
324 operstate = LINK_OPERSTATE_CARRIER;
325 } else if (link->flags & IFF_UP)
326 operstate = LINK_OPERSTATE_NO_CARRIER;
327 else
328 operstate = LINK_OPERSTATE_OFF;
329
330 if (link->operstate != operstate) {
331 link->operstate = operstate;
332 link_send_changed(link, "OperationalState", NULL);
333 link_dirty(link);
334 }
335 }
336
337 #define FLAG_STRING(string, flag, old, new) \
338 (((old ^ new) & flag) \
339 ? ((old & flag) ? (" -" string) : (" +" string)) \
340 : "")
341
342 static int link_update_flags(Link *link, sd_netlink_message *m) {
343 unsigned flags, unknown_flags_added, unknown_flags_removed, unknown_flags;
344 uint8_t operstate;
345 int r;
346
347 assert(link);
348
349 r = sd_rtnl_message_link_get_flags(m, &flags);
350 if (r < 0)
351 return log_link_warning_errno(link, r, "Could not get link flags: %m");
352
353 r = sd_netlink_message_read_u8(m, IFLA_OPERSTATE, &operstate);
354 if (r < 0)
355 /* if we got a message without operstate, take it to mean
356 the state was unchanged */
357 operstate = link->kernel_operstate;
358
359 if ((link->flags == flags) && (link->kernel_operstate == operstate))
360 return 0;
361
362 if (link->flags != flags) {
363 log_link_debug(link, "Flags change:%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s",
364 FLAG_STRING("LOOPBACK", IFF_LOOPBACK, link->flags, flags),
365 FLAG_STRING("MASTER", IFF_MASTER, link->flags, flags),
366 FLAG_STRING("SLAVE", IFF_SLAVE, link->flags, flags),
367 FLAG_STRING("UP", IFF_UP, link->flags, flags),
368 FLAG_STRING("DORMANT", IFF_DORMANT, link->flags, flags),
369 FLAG_STRING("LOWER_UP", IFF_LOWER_UP, link->flags, flags),
370 FLAG_STRING("RUNNING", IFF_RUNNING, link->flags, flags),
371 FLAG_STRING("MULTICAST", IFF_MULTICAST, link->flags, flags),
372 FLAG_STRING("BROADCAST", IFF_BROADCAST, link->flags, flags),
373 FLAG_STRING("POINTOPOINT", IFF_POINTOPOINT, link->flags, flags),
374 FLAG_STRING("PROMISC", IFF_PROMISC, link->flags, flags),
375 FLAG_STRING("ALLMULTI", IFF_ALLMULTI, link->flags, flags),
376 FLAG_STRING("PORTSEL", IFF_PORTSEL, link->flags, flags),
377 FLAG_STRING("AUTOMEDIA", IFF_AUTOMEDIA, link->flags, flags),
378 FLAG_STRING("DYNAMIC", IFF_DYNAMIC, link->flags, flags),
379 FLAG_STRING("NOARP", IFF_NOARP, link->flags, flags),
380 FLAG_STRING("NOTRAILERS", IFF_NOTRAILERS, link->flags, flags),
381 FLAG_STRING("DEBUG", IFF_DEBUG, link->flags, flags),
382 FLAG_STRING("ECHO", IFF_ECHO, link->flags, flags));
383
384 unknown_flags = ~(IFF_LOOPBACK | IFF_MASTER | IFF_SLAVE | IFF_UP |
385 IFF_DORMANT | IFF_LOWER_UP | IFF_RUNNING |
386 IFF_MULTICAST | IFF_BROADCAST | IFF_POINTOPOINT |
387 IFF_PROMISC | IFF_ALLMULTI | IFF_PORTSEL |
388 IFF_AUTOMEDIA | IFF_DYNAMIC | IFF_NOARP |
389 IFF_NOTRAILERS | IFF_DEBUG | IFF_ECHO);
390 unknown_flags_added = ((link->flags ^ flags) & flags & unknown_flags);
391 unknown_flags_removed = ((link->flags ^ flags) & link->flags & unknown_flags);
392
393 /* link flags are currently at most 18 bits, let's align to
394 * printing 20 */
395 if (unknown_flags_added)
396 log_link_debug(link,
397 "Unknown link flags gained: %#.5x (ignoring)",
398 unknown_flags_added);
399
400 if (unknown_flags_removed)
401 log_link_debug(link,
402 "Unknown link flags lost: %#.5x (ignoring)",
403 unknown_flags_removed);
404 }
405
406 link->flags = flags;
407 link->kernel_operstate = operstate;
408
409 link_update_operstate(link);
410
411 return 0;
412 }
413
414 DEFINE_TRIVIAL_CLEANUP_FUNC(Link*, link_unref);
415
416 static int link_new(Manager *manager, sd_netlink_message *message, Link **ret) {
417 _cleanup_(link_unrefp) Link *link = NULL;
418 uint16_t type;
419 const char *ifname, *kind = NULL;
420 int r, ifindex;
421 unsigned short iftype;
422
423 assert(manager);
424 assert(message);
425 assert(ret);
426
427 /* check for link kind */
428 r = sd_netlink_message_enter_container(message, IFLA_LINKINFO);
429 if (r == 0) {
430 (void) sd_netlink_message_read_string(message, IFLA_INFO_KIND, &kind);
431 r = sd_netlink_message_exit_container(message);
432 if (r < 0)
433 return r;
434 }
435
436 r = sd_netlink_message_get_type(message, &type);
437 if (r < 0)
438 return r;
439 else if (type != RTM_NEWLINK)
440 return -EINVAL;
441
442 r = sd_rtnl_message_link_get_ifindex(message, &ifindex);
443 if (r < 0)
444 return r;
445 else if (ifindex <= 0)
446 return -EINVAL;
447
448 r = sd_rtnl_message_link_get_type(message, &iftype);
449 if (r < 0)
450 return r;
451
452 r = sd_netlink_message_read_string(message, IFLA_IFNAME, &ifname);
453 if (r < 0)
454 return r;
455
456 link = new(Link, 1);
457 if (!link)
458 return -ENOMEM;
459
460 *link = (Link) {
461 .n_ref = 1,
462 .manager = manager,
463 .state = LINK_STATE_PENDING,
464 .rtnl_extended_attrs = true,
465 .ifindex = ifindex,
466 .iftype = iftype,
467 };
468
469 link->ifname = strdup(ifname);
470 if (!link->ifname)
471 return -ENOMEM;
472
473 if (kind) {
474 link->kind = strdup(kind);
475 if (!link->kind)
476 return -ENOMEM;
477 }
478
479 r = sd_netlink_message_read_u32(message, IFLA_MASTER, (uint32_t *)&link->master_ifindex);
480 if (r < 0)
481 log_link_debug_errno(link, r, "New device has no master, continuing without");
482
483 r = sd_netlink_message_read_ether_addr(message, IFLA_ADDRESS, &link->mac);
484 if (r < 0)
485 log_link_debug_errno(link, r, "MAC address not found for new device, continuing without");
486
487 if (asprintf(&link->state_file, "/run/systemd/netif/links/%d", link->ifindex) < 0)
488 return -ENOMEM;
489
490 if (asprintf(&link->lease_file, "/run/systemd/netif/leases/%d", link->ifindex) < 0)
491 return -ENOMEM;
492
493 if (asprintf(&link->lldp_file, "/run/systemd/netif/lldp/%d", link->ifindex) < 0)
494 return -ENOMEM;
495
496 r = hashmap_ensure_allocated(&manager->links, NULL);
497 if (r < 0)
498 return r;
499
500 r = hashmap_put(manager->links, INT_TO_PTR(link->ifindex), link);
501 if (r < 0)
502 return r;
503
504 r = link_update_flags(link, message);
505 if (r < 0)
506 return r;
507
508 *ret = TAKE_PTR(link);
509
510 return 0;
511 }
512
513 static void link_detach_from_manager(Link *link) {
514 if (!link || !link->manager)
515 return;
516
517 hashmap_remove(link->manager->links, INT_TO_PTR(link->ifindex));
518 set_remove(link->manager->links_requesting_uuid, link);
519 link_clean(link);
520 }
521
522 static Link *link_free(Link *link) {
523 Address *address;
524 Link *carrier;
525 Route *route;
526 Iterator i;
527
528 assert(link);
529
530 while ((route = set_first(link->routes)))
531 route_free(route);
532
533 while ((route = set_first(link->routes_foreign)))
534 route_free(route);
535
536 link->routes = set_free(link->routes);
537 link->routes_foreign = set_free(link->routes_foreign);
538
539 while ((address = set_first(link->addresses)))
540 address_free(address);
541
542 while ((address = set_first(link->addresses_foreign)))
543 address_free(address);
544
545 link->addresses = set_free(link->addresses);
546 link->addresses_foreign = set_free(link->addresses_foreign);
547
548 while ((address = link->pool_addresses)) {
549 LIST_REMOVE(addresses, link->pool_addresses, address);
550 address_free(address);
551 }
552
553 sd_dhcp_server_unref(link->dhcp_server);
554 sd_dhcp_client_unref(link->dhcp_client);
555 sd_dhcp_lease_unref(link->dhcp_lease);
556
557 link_lldp_emit_stop(link);
558
559 free(link->lease_file);
560
561 sd_lldp_unref(link->lldp);
562 free(link->lldp_file);
563
564 ndisc_flush(link);
565
566 sd_ipv4ll_unref(link->ipv4ll);
567 sd_dhcp6_client_unref(link->dhcp6_client);
568 sd_ndisc_unref(link->ndisc);
569 sd_radv_unref(link->radv);
570
571 link_detach_from_manager(link);
572
573 free(link->ifname);
574
575 free(link->kind);
576
577 (void) unlink(link->state_file);
578 free(link->state_file);
579
580 sd_device_unref(link->sd_device);
581
582 HASHMAP_FOREACH (carrier, link->bound_to_links, i)
583 hashmap_remove(link->bound_to_links, INT_TO_PTR(carrier->ifindex));
584 hashmap_free(link->bound_to_links);
585
586 HASHMAP_FOREACH (carrier, link->bound_by_links, i)
587 hashmap_remove(link->bound_by_links, INT_TO_PTR(carrier->ifindex));
588 hashmap_free(link->bound_by_links);
589
590 return mfree(link);
591 }
592
593 DEFINE_TRIVIAL_REF_UNREF_FUNC(Link, link, link_free);
594
595 int link_get(Manager *m, int ifindex, Link **ret) {
596 Link *link;
597
598 assert(m);
599 assert(ifindex);
600 assert(ret);
601
602 link = hashmap_get(m->links, INT_TO_PTR(ifindex));
603 if (!link)
604 return -ENODEV;
605
606 *ret = link;
607
608 return 0;
609 }
610
611 static void link_set_state(Link *link, LinkState state) {
612 assert(link);
613
614 if (link->state == state)
615 return;
616
617 link->state = state;
618
619 link_send_changed(link, "AdministrativeState", NULL);
620 }
621
622 static void link_enter_unmanaged(Link *link) {
623 assert(link);
624
625 log_link_debug(link, "Unmanaged");
626
627 link_set_state(link, LINK_STATE_UNMANAGED);
628
629 link_dirty(link);
630 }
631
632 static int link_stop_clients(Link *link) {
633 int r = 0, k;
634
635 assert(link);
636 assert(link->manager);
637 assert(link->manager->event);
638
639 if (link->dhcp_client) {
640 k = sd_dhcp_client_stop(link->dhcp_client);
641 if (k < 0)
642 r = log_link_warning_errno(link, k, "Could not stop DHCPv4 client: %m");
643 }
644
645 if (link->ipv4ll) {
646 k = sd_ipv4ll_stop(link->ipv4ll);
647 if (k < 0)
648 r = log_link_warning_errno(link, k, "Could not stop IPv4 link-local: %m");
649 }
650
651 if (link->dhcp6_client) {
652 k = sd_dhcp6_client_stop(link->dhcp6_client);
653 if (k < 0)
654 r = log_link_warning_errno(link, k, "Could not stop DHCPv6 client: %m");
655 }
656
657 if (link->ndisc) {
658 k = sd_ndisc_stop(link->ndisc);
659 if (k < 0)
660 r = log_link_warning_errno(link, k, "Could not stop IPv6 Router Discovery: %m");
661 }
662
663 if (link->radv) {
664 k = sd_radv_stop(link->radv);
665 if (k < 0)
666 r = log_link_warning_errno(link, k, "Could not stop IPv6 Router Advertisement: %m");
667 }
668
669 link_lldp_emit_stop(link);
670 return r;
671 }
672
673 void link_enter_failed(Link *link) {
674 assert(link);
675
676 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
677 return;
678
679 log_link_warning(link, "Failed");
680
681 link_set_state(link, LINK_STATE_FAILED);
682
683 link_stop_clients(link);
684
685 link_dirty(link);
686 }
687
688 static Address* link_find_dhcp_server_address(Link *link) {
689 Address *address;
690
691 assert(link);
692 assert(link->network);
693
694 /* The first statically configured address if there is any */
695 LIST_FOREACH(addresses, address, link->network->static_addresses) {
696
697 if (address->family != AF_INET)
698 continue;
699
700 if (in_addr_is_null(address->family, &address->in_addr))
701 continue;
702
703 return address;
704 }
705
706 /* If that didn't work, find a suitable address we got from the pool */
707 LIST_FOREACH(addresses, address, link->pool_addresses) {
708 if (address->family != AF_INET)
709 continue;
710
711 return address;
712 }
713
714 return NULL;
715 }
716
717 static void link_enter_configured(Link *link) {
718 assert(link);
719 assert(link->network);
720
721 if (link->state != LINK_STATE_CONFIGURING)
722 return;
723
724 log_link_info(link, "Configured");
725
726 link_set_state(link, LINK_STATE_CONFIGURED);
727
728 link_dirty(link);
729 }
730
731 void link_check_ready(Link *link) {
732 Address *a;
733 Iterator i;
734
735 assert(link);
736
737 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
738 return;
739
740 if (!link->network)
741 return;
742
743 if (!link->addresses_configured)
744 return;
745
746 if (!link->neighbors_configured)
747 return;
748
749 if (!link->static_routes_configured)
750 return;
751
752 if (!link->routing_policy_rules_configured)
753 return;
754
755 if (link_ipv4ll_enabled(link))
756 if (!link->ipv4ll_address ||
757 !link->ipv4ll_route)
758 return;
759
760 if (!link->network->bridge) {
761
762 if (link_ipv6ll_enabled(link))
763 if (in_addr_is_null(AF_INET6, (const union in_addr_union*) &link->ipv6ll_address) > 0)
764 return;
765
766 if ((link_dhcp4_enabled(link) && !link_dhcp6_enabled(link) &&
767 !link->dhcp4_configured) ||
768 (link_dhcp6_enabled(link) && !link_dhcp4_enabled(link) &&
769 !link->dhcp6_configured) ||
770 (link_dhcp4_enabled(link) && link_dhcp6_enabled(link) &&
771 !link->dhcp4_configured && !link->dhcp6_configured))
772 return;
773
774 if (link_ipv6_accept_ra_enabled(link) && !link->ndisc_configured)
775 return;
776 }
777
778 SET_FOREACH(a, link->addresses, i)
779 if (!address_is_ready(a))
780 return;
781
782 if (link->state != LINK_STATE_CONFIGURED)
783 link_enter_configured(link);
784
785 return;
786 }
787
788 static int link_request_set_routing_policy_rule(Link *link) {
789 RoutingPolicyRule *rule, *rrule = NULL;
790 int r;
791
792 assert(link);
793 assert(link->network);
794
795 link_set_state(link, LINK_STATE_CONFIGURING);
796 link->routing_policy_rules_configured = false;
797
798 LIST_FOREACH(rules, rule, link->network->rules) {
799 r = routing_policy_rule_get(link->manager, rule->family, &rule->from, rule->from_prefixlen, &rule->to,
800 rule->to_prefixlen, rule->tos, rule->fwmark, rule->table, rule->iif, rule->oif,
801 rule->protocol, &rule->sport, &rule->dport, &rrule);
802 if (r == 0) {
803 (void) routing_policy_rule_make_local(link->manager, rrule);
804 continue;
805 }
806
807 r = routing_policy_rule_configure(rule, link, NULL, false);
808 if (r < 0) {
809 log_link_warning_errno(link, r, "Could not set routing policy rules: %m");
810 link_enter_failed(link);
811 return r;
812 }
813
814 link->routing_policy_rule_messages++;
815 }
816
817 routing_policy_rule_purge(link->manager, link);
818 if (link->routing_policy_rule_messages == 0) {
819 link->routing_policy_rules_configured = true;
820 link_check_ready(link);
821 } else
822 log_link_debug(link, "Setting routing policy rules");
823
824 return 0;
825 }
826
827 static int route_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
828 int r;
829
830 assert(link);
831 assert(link->route_messages > 0);
832 assert(IN_SET(link->state, LINK_STATE_CONFIGURING,
833 LINK_STATE_FAILED, LINK_STATE_LINGER));
834
835 link->route_messages--;
836
837 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
838 return 1;
839
840 r = sd_netlink_message_get_errno(m);
841 if (r < 0 && r != -EEXIST)
842 log_link_warning_errno(link, r, "Could not set route: %m");
843
844 if (link->route_messages == 0) {
845 log_link_debug(link, "Routes set");
846 link->static_routes_configured = true;
847 link_check_ready(link);
848 }
849
850 return 1;
851 }
852
853 static int link_request_set_routes(Link *link) {
854 enum {
855 PHASE_NON_GATEWAY, /* First phase: Routes without a gateway */
856 PHASE_GATEWAY, /* Second phase: Routes with a gateway */
857 _PHASE_MAX
858 } phase;
859 Route *rt;
860 int r;
861
862 assert(link);
863 assert(link->network);
864 assert(link->addresses_configured);
865 assert(link->address_messages == 0);
866 assert(link->state != _LINK_STATE_INVALID);
867
868 link_set_state(link, LINK_STATE_CONFIGURING);
869 link->static_routes_configured = false;
870
871 r = link_request_set_routing_policy_rule(link);
872 if (r < 0)
873 return r;
874
875 /* First add the routes that enable us to talk to gateways, then add in the others that need a gateway. */
876 for (phase = 0; phase < _PHASE_MAX; phase++)
877 LIST_FOREACH(routes, rt, link->network->static_routes) {
878
879 if (in_addr_is_null(rt->family, &rt->gw) != (phase == PHASE_NON_GATEWAY))
880 continue;
881
882 r = route_configure(rt, link, route_handler);
883 if (r < 0) {
884 log_link_warning_errno(link, r, "Could not set routes: %m");
885 link_enter_failed(link);
886 return r;
887 }
888
889 link->route_messages++;
890 }
891
892 if (link->route_messages == 0) {
893 link->static_routes_configured = true;
894 link_check_ready(link);
895 } else
896 log_link_debug(link, "Setting routes");
897
898 return 0;
899 }
900
901 static int link_request_set_neighbors(Link *link) {
902 Neighbor *neighbor;
903 int r;
904
905 assert(link);
906 assert(link->network);
907 assert(link->state != _LINK_STATE_INVALID);
908
909 link_set_state(link, LINK_STATE_CONFIGURING);
910 link->neighbors_configured = false;
911
912 LIST_FOREACH(neighbors, neighbor, link->network->neighbors) {
913 r = neighbor_configure(neighbor, link, NULL);
914 if (r < 0) {
915 log_link_warning_errno(link, r, "Could not set neighbor: %m");
916 link_enter_failed(link);
917 return r;
918 }
919 }
920
921 if (link->neighbor_messages == 0) {
922 link->neighbors_configured = true;
923 link_check_ready(link);
924 } else
925 log_link_debug(link, "Setting neighbors");
926
927 return 0;
928 }
929
930 static int address_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
931 int r;
932
933 assert(rtnl);
934 assert(m);
935 assert(link);
936 assert(link->ifname);
937 assert(link->address_messages > 0);
938 assert(IN_SET(link->state, LINK_STATE_CONFIGURING,
939 LINK_STATE_FAILED, LINK_STATE_LINGER));
940
941 link->address_messages--;
942
943 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
944 return 1;
945
946 r = sd_netlink_message_get_errno(m);
947 if (r < 0 && r != -EEXIST)
948 log_link_warning_errno(link, r, "could not set address: %m");
949 else if (r >= 0)
950 manager_rtnl_process_address(rtnl, m, link->manager);
951
952 if (link->address_messages == 0) {
953 log_link_debug(link, "Addresses set");
954 link->addresses_configured = true;
955 link_request_set_routes(link);
956 }
957
958 return 1;
959 }
960
961 static int link_push_uplink_dns_to_dhcp_server(Link *link, sd_dhcp_server *s) {
962 _cleanup_free_ struct in_addr *addresses = NULL;
963 size_t n_addresses = 0, n_allocated = 0;
964 unsigned i;
965
966 log_debug("Copying DNS server information from %s", link->ifname);
967
968 if (!link->network)
969 return 0;
970
971 for (i = 0; i < link->network->n_dns; i++) {
972 struct in_addr ia;
973
974 /* Only look for IPv4 addresses */
975 if (link->network->dns[i].family != AF_INET)
976 continue;
977
978 ia = link->network->dns[i].address.in;
979
980 /* Never propagate obviously borked data */
981 if (in4_addr_is_null(&ia) || in4_addr_is_localhost(&ia))
982 continue;
983
984 if (!GREEDY_REALLOC(addresses, n_allocated, n_addresses + 1))
985 return log_oom();
986
987 addresses[n_addresses++] = ia;
988 }
989
990 if (link->network->dhcp_use_dns && link->dhcp_lease) {
991 const struct in_addr *da = NULL;
992 int n;
993
994 n = sd_dhcp_lease_get_dns(link->dhcp_lease, &da);
995 if (n > 0) {
996
997 if (!GREEDY_REALLOC(addresses, n_allocated, n_addresses + n))
998 return log_oom();
999
1000 memcpy(addresses + n_addresses, da, n * sizeof(struct in_addr));
1001 n_addresses += n;
1002 }
1003 }
1004
1005 if (n_addresses <= 0)
1006 return 0;
1007
1008 return sd_dhcp_server_set_dns(s, addresses, n_addresses);
1009 }
1010
1011 static int link_push_uplink_ntp_to_dhcp_server(Link *link, sd_dhcp_server *s) {
1012 _cleanup_free_ struct in_addr *addresses = NULL;
1013 size_t n_addresses = 0, n_allocated = 0;
1014 char **a;
1015
1016 if (!link->network)
1017 return 0;
1018
1019 log_debug("Copying NTP server information from %s", link->ifname);
1020
1021 STRV_FOREACH(a, link->network->ntp) {
1022 struct in_addr ia;
1023
1024 /* Only look for IPv4 addresses */
1025 if (inet_pton(AF_INET, *a, &ia) <= 0)
1026 continue;
1027
1028 /* Never propagate obviously borked data */
1029 if (in4_addr_is_null(&ia) || in4_addr_is_localhost(&ia))
1030 continue;
1031
1032 if (!GREEDY_REALLOC(addresses, n_allocated, n_addresses + 1))
1033 return log_oom();
1034
1035 addresses[n_addresses++] = ia;
1036 }
1037
1038 if (link->network->dhcp_use_ntp && link->dhcp_lease) {
1039 const struct in_addr *da = NULL;
1040 int n;
1041
1042 n = sd_dhcp_lease_get_ntp(link->dhcp_lease, &da);
1043 if (n > 0) {
1044
1045 if (!GREEDY_REALLOC(addresses, n_allocated, n_addresses + n))
1046 return log_oom();
1047
1048 memcpy(addresses + n_addresses, da, n * sizeof(struct in_addr));
1049 n_addresses += n;
1050 }
1051 }
1052
1053 if (n_addresses <= 0)
1054 return 0;
1055
1056 return sd_dhcp_server_set_ntp(s, addresses, n_addresses);
1057 }
1058
1059 static int link_set_bridge_fdb(Link *link) {
1060 FdbEntry *fdb_entry;
1061 int r;
1062
1063 LIST_FOREACH(static_fdb_entries, fdb_entry, link->network->static_fdb_entries) {
1064 r = fdb_entry_configure(link, fdb_entry);
1065 if (r < 0)
1066 return log_link_error_errno(link, r, "Failed to add MAC entry to static MAC table: %m");
1067 }
1068
1069 return 0;
1070 }
1071
1072 static int link_request_set_addresses(Link *link) {
1073 AddressLabel *label;
1074 Address *ad;
1075 int r;
1076
1077 assert(link);
1078 assert(link->network);
1079 assert(link->state != _LINK_STATE_INVALID);
1080
1081 link_set_state(link, LINK_STATE_CONFIGURING);
1082
1083 /* Reset all *_configured flags we are configuring. */
1084 link->addresses_configured = false;
1085 link->neighbors_configured = false;
1086 link->static_routes_configured = false;
1087 link->routing_policy_rules_configured = false;
1088
1089 r = link_set_bridge_fdb(link);
1090 if (r < 0)
1091 return r;
1092
1093 r = link_request_set_neighbors(link);
1094 if (r < 0)
1095 return r;
1096
1097 LIST_FOREACH(addresses, ad, link->network->static_addresses) {
1098 r = address_configure(ad, link, address_handler, false);
1099 if (r < 0) {
1100 log_link_warning_errno(link, r, "Could not set addresses: %m");
1101 link_enter_failed(link);
1102 return r;
1103 }
1104
1105 link->address_messages++;
1106 }
1107
1108 LIST_FOREACH(labels, label, link->network->address_labels) {
1109 r = address_label_configure(label, link, NULL, false);
1110 if (r < 0) {
1111 log_link_warning_errno(link, r, "Could not set address label: %m");
1112 link_enter_failed(link);
1113 return r;
1114 }
1115
1116 link->address_label_messages++;
1117 }
1118
1119 /* now that we can figure out a default address for the dhcp server,
1120 start it */
1121 if (link_dhcp4_server_enabled(link) && (link->flags & IFF_UP)) {
1122 Address *address;
1123 Link *uplink = NULL;
1124 bool acquired_uplink = false;
1125
1126 address = link_find_dhcp_server_address(link);
1127 if (!address) {
1128 log_link_warning(link, "Failed to find suitable address for DHCPv4 server instance.");
1129 link_enter_failed(link);
1130 return 0;
1131 }
1132
1133 /* use the server address' subnet as the pool */
1134 r = sd_dhcp_server_configure_pool(link->dhcp_server, &address->in_addr.in, address->prefixlen,
1135 link->network->dhcp_server_pool_offset, link->network->dhcp_server_pool_size);
1136 if (r < 0)
1137 return r;
1138
1139 /* TODO:
1140 r = sd_dhcp_server_set_router(link->dhcp_server,
1141 &main_address->in_addr.in);
1142 if (r < 0)
1143 return r;
1144 */
1145
1146 if (link->network->dhcp_server_max_lease_time_usec > 0) {
1147 r = sd_dhcp_server_set_max_lease_time(
1148 link->dhcp_server,
1149 DIV_ROUND_UP(link->network->dhcp_server_max_lease_time_usec, USEC_PER_SEC));
1150 if (r < 0)
1151 return r;
1152 }
1153
1154 if (link->network->dhcp_server_default_lease_time_usec > 0) {
1155 r = sd_dhcp_server_set_default_lease_time(
1156 link->dhcp_server,
1157 DIV_ROUND_UP(link->network->dhcp_server_default_lease_time_usec, USEC_PER_SEC));
1158 if (r < 0)
1159 return r;
1160 }
1161
1162 if (link->network->dhcp_server_emit_dns) {
1163
1164 if (link->network->n_dhcp_server_dns > 0)
1165 r = sd_dhcp_server_set_dns(link->dhcp_server, link->network->dhcp_server_dns, link->network->n_dhcp_server_dns);
1166 else {
1167 uplink = manager_find_uplink(link->manager, link);
1168 acquired_uplink = true;
1169
1170 if (!uplink) {
1171 log_link_debug(link, "Not emitting DNS server information on link, couldn't find suitable uplink.");
1172 r = 0;
1173 } else
1174 r = link_push_uplink_dns_to_dhcp_server(uplink, link->dhcp_server);
1175 }
1176 if (r < 0)
1177 log_link_warning_errno(link, r, "Failed to set DNS server for DHCP server, ignoring: %m");
1178 }
1179
1180 if (link->network->dhcp_server_emit_ntp) {
1181
1182 if (link->network->n_dhcp_server_ntp > 0)
1183 r = sd_dhcp_server_set_ntp(link->dhcp_server, link->network->dhcp_server_ntp, link->network->n_dhcp_server_ntp);
1184 else {
1185 if (!acquired_uplink)
1186 uplink = manager_find_uplink(link->manager, link);
1187
1188 if (!uplink) {
1189 log_link_debug(link, "Not emitting NTP server information on link, couldn't find suitable uplink.");
1190 r = 0;
1191 } else
1192 r = link_push_uplink_ntp_to_dhcp_server(uplink, link->dhcp_server);
1193
1194 }
1195 if (r < 0)
1196 log_link_warning_errno(link, r, "Failed to set NTP server for DHCP server, ignoring: %m");
1197 }
1198
1199 r = sd_dhcp_server_set_emit_router(link->dhcp_server, link->network->dhcp_server_emit_router);
1200 if (r < 0)
1201 return log_link_warning_errno(link, r, "Failed to set router emission for DHCP server: %m");
1202
1203 if (link->network->dhcp_server_emit_timezone) {
1204 _cleanup_free_ char *buffer = NULL;
1205 const char *tz = NULL;
1206
1207 if (link->network->dhcp_server_timezone)
1208 tz = link->network->dhcp_server_timezone;
1209 else {
1210 r = get_timezone(&buffer);
1211 if (r < 0)
1212 log_warning_errno(r, "Failed to determine timezone: %m");
1213 else
1214 tz = buffer;
1215 }
1216
1217 if (tz) {
1218 r = sd_dhcp_server_set_timezone(link->dhcp_server, tz);
1219 if (r < 0)
1220 return r;
1221 }
1222 }
1223 if (!sd_dhcp_server_is_running(link->dhcp_server)) {
1224 r = sd_dhcp_server_start(link->dhcp_server);
1225 if (r < 0) {
1226 log_link_warning_errno(link, r, "Could not start DHCPv4 server instance: %m");
1227
1228 link_enter_failed(link);
1229
1230 return 0;
1231 }
1232 }
1233
1234 log_link_debug(link, "Offering DHCPv4 leases");
1235 }
1236
1237 if (link->address_messages == 0) {
1238 link->addresses_configured = true;
1239 link_request_set_routes(link);
1240 } else
1241 log_link_debug(link, "Setting addresses");
1242
1243 return 0;
1244 }
1245
1246 static int link_set_bridge_vlan(Link *link) {
1247 int r = 0;
1248
1249 r = br_vlan_configure(link, link->network->pvid, link->network->br_vid_bitmap, link->network->br_untagged_bitmap);
1250 if (r < 0)
1251 log_link_error_errno(link, r, "Failed to assign VLANs to bridge port: %m");
1252
1253 return r;
1254 }
1255
1256 static int link_set_proxy_arp(Link *link) {
1257 const char *p = NULL;
1258 int r;
1259
1260 if (!link_proxy_arp_enabled(link))
1261 return 0;
1262
1263 p = strjoina("/proc/sys/net/ipv4/conf/", link->ifname, "/proxy_arp");
1264
1265 r = write_string_file(p, one_zero(link->network->proxy_arp), WRITE_STRING_FILE_VERIFY_ON_FAILURE | WRITE_STRING_FILE_DISABLE_BUFFER);
1266 if (r < 0)
1267 log_link_warning_errno(link, r, "Cannot configure proxy ARP for interface: %m");
1268
1269 return 0;
1270 }
1271
1272 static int link_set_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
1273 int r;
1274
1275 assert(link);
1276
1277 log_link_debug(link, "Set link");
1278
1279 r = sd_netlink_message_get_errno(m);
1280 if (r < 0 && r != -EEXIST) {
1281 log_link_error_errno(link, r, "Could not join netdev: %m");
1282 link_enter_failed(link);
1283 }
1284
1285 return 1;
1286 }
1287
1288 static int link_configure_after_setting_mtu(Link *link);
1289
1290 static int set_mtu_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
1291 int r;
1292
1293 assert(m);
1294 assert(link);
1295 assert(link->ifname);
1296
1297 link->setting_mtu = false;
1298
1299 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1300 return 1;
1301
1302 r = sd_netlink_message_get_errno(m);
1303 if (r < 0) {
1304 log_link_warning_errno(link, r, "Could not set MTU: %m");
1305 return 1;
1306 }
1307
1308 log_link_debug(link, "Setting MTU done.");
1309
1310 if (link->state == LINK_STATE_PENDING)
1311 (void) link_configure_after_setting_mtu(link);
1312
1313 return 1;
1314 }
1315
1316 int link_set_mtu(Link *link, uint32_t mtu) {
1317 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1318 int r;
1319
1320 assert(link);
1321 assert(link->manager);
1322 assert(link->manager->rtnl);
1323
1324 if (link->mtu == mtu || link->setting_mtu)
1325 return 0;
1326
1327 log_link_debug(link, "Setting MTU: %" PRIu32, mtu);
1328
1329 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1330 if (r < 0)
1331 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1332
1333 /* If IPv6 not configured (no static IPv6 address and IPv6LL autoconfiguration is disabled)
1334 * for this interface, or if it is a bridge slave, then disable IPv6 else enable it. */
1335 (void) link_enable_ipv6(link);
1336
1337 /* IPv6 protocol requires a minimum MTU of IPV6_MTU_MIN(1280) bytes
1338 * on the interface. Bump up MTU bytes to IPV6_MTU_MIN. */
1339 if (link_ipv6_enabled(link) && mtu < IPV6_MIN_MTU) {
1340
1341 log_link_warning(link, "Bumping MTU to " STRINGIFY(IPV6_MIN_MTU) ", as "
1342 "IPv6 is requested and requires a minimum MTU of " STRINGIFY(IPV6_MIN_MTU) " bytes: %m");
1343
1344 mtu = IPV6_MIN_MTU;
1345 }
1346
1347 r = sd_netlink_message_append_u32(req, IFLA_MTU, mtu);
1348 if (r < 0)
1349 return log_link_error_errno(link, r, "Could not append MTU: %m");
1350
1351 r = netlink_call_async(link->manager->rtnl, NULL, req, set_mtu_handler,
1352 link_netlink_destroy_callback, link);
1353 if (r < 0)
1354 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1355
1356 link_ref(link);
1357 link->setting_mtu = true;
1358
1359 return 0;
1360 }
1361
1362 static int set_flags_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
1363 int r;
1364
1365 assert(m);
1366 assert(link);
1367 assert(link->ifname);
1368
1369 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1370 return 1;
1371
1372 r = sd_netlink_message_get_errno(m);
1373 if (r < 0)
1374 log_link_warning_errno(link, r, "Could not set link flags: %m");
1375
1376 return 1;
1377 }
1378
1379 static int link_set_flags(Link *link) {
1380 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1381 unsigned ifi_change = 0;
1382 unsigned ifi_flags = 0;
1383 int r;
1384
1385 assert(link);
1386 assert(link->manager);
1387 assert(link->manager->rtnl);
1388
1389 if (link->flags & IFF_LOOPBACK)
1390 return 0;
1391
1392 if (!link->network)
1393 return 0;
1394
1395 if (link->network->arp < 0 && link->network->multicast < 0 && link->network->allmulticast < 0)
1396 return 0;
1397
1398 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1399 if (r < 0)
1400 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1401
1402 if (link->network->arp >= 0) {
1403 ifi_change |= IFF_NOARP;
1404 SET_FLAG(ifi_flags, IFF_NOARP, link->network->arp == 0);
1405 }
1406
1407 if (link->network->multicast >= 0) {
1408 ifi_change |= IFF_MULTICAST;
1409 SET_FLAG(ifi_flags, IFF_MULTICAST, link->network->multicast);
1410 }
1411
1412 if (link->network->allmulticast >= 0) {
1413 ifi_change |= IFF_ALLMULTI;
1414 SET_FLAG(ifi_flags, IFF_ALLMULTI, link->network->allmulticast);
1415 }
1416
1417 r = sd_rtnl_message_link_set_flags(req, ifi_flags, ifi_change);
1418 if (r < 0)
1419 return log_link_error_errno(link, r, "Could not set link flags: %m");
1420
1421 r = netlink_call_async(link->manager->rtnl, NULL, req, set_flags_handler,
1422 link_netlink_destroy_callback, link);
1423 if (r < 0)
1424 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1425
1426 link_ref(link);
1427
1428 return 0;
1429 }
1430
1431 static int link_set_bridge(Link *link) {
1432 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1433 int r;
1434
1435 assert(link);
1436 assert(link->network);
1437
1438 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1439 if (r < 0)
1440 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1441
1442 r = sd_rtnl_message_link_set_family(req, PF_BRIDGE);
1443 if (r < 0)
1444 return log_link_error_errno(link, r, "Could not set message family: %m");
1445
1446 r = sd_netlink_message_open_container(req, IFLA_PROTINFO);
1447 if (r < 0)
1448 return log_link_error_errno(link, r, "Could not append IFLA_PROTINFO attribute: %m");
1449
1450 if (link->network->use_bpdu >= 0) {
1451 r = sd_netlink_message_append_u8(req, IFLA_BRPORT_GUARD, link->network->use_bpdu);
1452 if (r < 0)
1453 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_GUARD attribute: %m");
1454 }
1455
1456 if (link->network->hairpin >= 0) {
1457 r = sd_netlink_message_append_u8(req, IFLA_BRPORT_MODE, link->network->hairpin);
1458 if (r < 0)
1459 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_MODE attribute: %m");
1460 }
1461
1462 if (link->network->fast_leave >= 0) {
1463 r = sd_netlink_message_append_u8(req, IFLA_BRPORT_FAST_LEAVE, link->network->fast_leave);
1464 if (r < 0)
1465 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_FAST_LEAVE attribute: %m");
1466 }
1467
1468 if (link->network->allow_port_to_be_root >= 0) {
1469 r = sd_netlink_message_append_u8(req, IFLA_BRPORT_PROTECT, link->network->allow_port_to_be_root);
1470 if (r < 0)
1471 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_PROTECT attribute: %m");
1472
1473 }
1474
1475 if (link->network->unicast_flood >= 0) {
1476 r = sd_netlink_message_append_u8(req, IFLA_BRPORT_UNICAST_FLOOD, link->network->unicast_flood);
1477 if (r < 0)
1478 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_UNICAST_FLOOD attribute: %m");
1479 }
1480
1481 if (link->network->multicast_to_unicast >= 0) {
1482 r = sd_netlink_message_append_u8(req, IFLA_BRPORT_MCAST_TO_UCAST, link->network->multicast_to_unicast);
1483 if (r < 0)
1484 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_MCAST_TO_UCAST attribute: %m");
1485 }
1486
1487 if (link->network->cost != 0) {
1488 r = sd_netlink_message_append_u32(req, IFLA_BRPORT_COST, link->network->cost);
1489 if (r < 0)
1490 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_COST attribute: %m");
1491 }
1492
1493 if (link->network->priority != LINK_BRIDGE_PORT_PRIORITY_INVALID) {
1494 r = sd_netlink_message_append_u16(req, IFLA_BRPORT_PRIORITY, link->network->priority);
1495 if (r < 0)
1496 return log_link_error_errno(link, r, "Could not append IFLA_BRPORT_PRIORITY attribute: %m");
1497 }
1498
1499 r = sd_netlink_message_close_container(req);
1500 if (r < 0)
1501 return log_link_error_errno(link, r, "Could not append IFLA_LINKINFO attribute: %m");
1502
1503 r = netlink_call_async(link->manager->rtnl, NULL, req, link_set_handler,
1504 link_netlink_destroy_callback, link);
1505 if (r < 0)
1506 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1507
1508 link_ref(link);
1509
1510 return r;
1511 }
1512
1513 static int link_bond_set(Link *link) {
1514 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1515 int r;
1516
1517 assert(link);
1518 assert(link->network);
1519
1520 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_NEWLINK, link->network->bond->ifindex);
1521 if (r < 0)
1522 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1523
1524 r = sd_netlink_message_set_flags(req, NLM_F_REQUEST | NLM_F_ACK);
1525 if (r < 0)
1526 return log_link_error_errno(link, r, "Could not set netlink flags: %m");
1527
1528 r = sd_netlink_message_open_container(req, IFLA_LINKINFO);
1529 if (r < 0)
1530 return log_link_error_errno(link, r, "Could not append IFLA_PROTINFO attribute: %m");
1531
1532 r = sd_netlink_message_open_container_union(req, IFLA_INFO_DATA, "bond");
1533 if (r < 0)
1534 return log_link_error_errno(link, r, "Could not append IFLA_INFO_DATA attribute: %m");
1535
1536 if (link->network->active_slave) {
1537 r = sd_netlink_message_append_u32(req, IFLA_BOND_ACTIVE_SLAVE, link->ifindex);
1538 if (r < 0)
1539 return log_link_error_errno(link, r, "Could not append IFLA_BOND_ACTIVE_SLAVE attribute: %m");
1540 }
1541
1542 if (link->network->primary_slave) {
1543 r = sd_netlink_message_append_u32(req, IFLA_BOND_PRIMARY, link->ifindex);
1544 if (r < 0)
1545 return log_link_error_errno(link, r, "Could not append IFLA_BOND_PRIMARY attribute: %m");
1546 }
1547
1548 r = sd_netlink_message_close_container(req);
1549 if (r < 0)
1550 return log_link_error_errno(link, r, "Could not append IFLA_LINKINFO attribute: %m");
1551
1552 r = sd_netlink_message_close_container(req);
1553 if (r < 0)
1554 return log_link_error_errno(link, r, "Could not append IFLA_INFO_DATA attribute: %m");
1555
1556 r = netlink_call_async(link->manager->rtnl, NULL, req, set_flags_handler,
1557 link_netlink_destroy_callback, link);
1558 if (r < 0)
1559 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1560
1561 link_ref(link);
1562
1563 return r;
1564 }
1565
1566 static int link_lldp_save(Link *link) {
1567 _cleanup_free_ char *temp_path = NULL;
1568 _cleanup_fclose_ FILE *f = NULL;
1569 sd_lldp_neighbor **l = NULL;
1570 int n = 0, r, i;
1571
1572 assert(link);
1573 assert(link->lldp_file);
1574
1575 if (!link->lldp) {
1576 (void) unlink(link->lldp_file);
1577 return 0;
1578 }
1579
1580 r = sd_lldp_get_neighbors(link->lldp, &l);
1581 if (r < 0)
1582 goto finish;
1583 if (r == 0) {
1584 (void) unlink(link->lldp_file);
1585 goto finish;
1586 }
1587
1588 n = r;
1589
1590 r = fopen_temporary(link->lldp_file, &f, &temp_path);
1591 if (r < 0)
1592 goto finish;
1593
1594 fchmod(fileno(f), 0644);
1595
1596 for (i = 0; i < n; i++) {
1597 const void *p;
1598 le64_t u;
1599 size_t sz;
1600
1601 r = sd_lldp_neighbor_get_raw(l[i], &p, &sz);
1602 if (r < 0)
1603 goto finish;
1604
1605 u = htole64(sz);
1606 (void) fwrite(&u, 1, sizeof(u), f);
1607 (void) fwrite(p, 1, sz, f);
1608 }
1609
1610 r = fflush_and_check(f);
1611 if (r < 0)
1612 goto finish;
1613
1614 if (rename(temp_path, link->lldp_file) < 0) {
1615 r = -errno;
1616 goto finish;
1617 }
1618
1619 finish:
1620 if (r < 0) {
1621 (void) unlink(link->lldp_file);
1622 if (temp_path)
1623 (void) unlink(temp_path);
1624
1625 log_link_error_errno(link, r, "Failed to save LLDP data to %s: %m", link->lldp_file);
1626 }
1627
1628 if (l) {
1629 for (i = 0; i < n; i++)
1630 sd_lldp_neighbor_unref(l[i]);
1631 free(l);
1632 }
1633
1634 return r;
1635 }
1636
1637 static void lldp_handler(sd_lldp *lldp, sd_lldp_event event, sd_lldp_neighbor *n, void *userdata) {
1638 Link *link = userdata;
1639 int r;
1640
1641 assert(link);
1642
1643 (void) link_lldp_save(link);
1644
1645 if (link_lldp_emit_enabled(link) && event == SD_LLDP_EVENT_ADDED) {
1646 /* If we received information about a new neighbor, restart the LLDP "fast" logic */
1647
1648 log_link_debug(link, "Received LLDP datagram from previously unknown neighbor, restarting 'fast' LLDP transmission.");
1649
1650 r = link_lldp_emit_start(link);
1651 if (r < 0)
1652 log_link_warning_errno(link, r, "Failed to restart LLDP transmission: %m");
1653 }
1654 }
1655
1656 static int link_acquire_ipv6_conf(Link *link) {
1657 int r;
1658
1659 assert(link);
1660
1661 if (link_ipv6_accept_ra_enabled(link)) {
1662 assert(link->ndisc);
1663
1664 log_link_debug(link, "Discovering IPv6 routers");
1665
1666 r = sd_ndisc_start(link->ndisc);
1667 if (r < 0 && r != -EBUSY)
1668 return log_link_warning_errno(link, r, "Could not start IPv6 Router Discovery: %m");
1669 }
1670
1671 if (link_radv_enabled(link)) {
1672 assert(link->radv);
1673 assert(in_addr_is_link_local(AF_INET6, (const union in_addr_union*)&link->ipv6ll_address) > 0);
1674
1675 log_link_debug(link, "Starting IPv6 Router Advertisements");
1676
1677 r = sd_radv_start(link->radv);
1678 if (r < 0 && r != -EBUSY)
1679 return log_link_warning_errno(link, r, "Could not start IPv6 Router Advertisement: %m");
1680 }
1681
1682 (void) dhcp6_request_prefix_delegation(link);
1683
1684 return 0;
1685 }
1686
1687 static int link_acquire_ipv4_conf(Link *link) {
1688 int r;
1689
1690 assert(link);
1691 assert(link->network);
1692 assert(link->manager);
1693 assert(link->manager->event);
1694
1695 if (link_ipv4ll_enabled(link)) {
1696 assert(link->ipv4ll);
1697
1698 log_link_debug(link, "Acquiring IPv4 link-local address");
1699
1700 r = sd_ipv4ll_start(link->ipv4ll);
1701 if (r < 0)
1702 return log_link_warning_errno(link, r, "Could not acquire IPv4 link-local address: %m");
1703 }
1704
1705 if (link_dhcp4_enabled(link)) {
1706 assert(link->dhcp_client);
1707
1708 log_link_debug(link, "Acquiring DHCPv4 lease");
1709
1710 r = sd_dhcp_client_start(link->dhcp_client);
1711 if (r < 0)
1712 return log_link_warning_errno(link, r, "Could not acquire DHCPv4 lease: %m");
1713 }
1714
1715 return 0;
1716 }
1717
1718 static int link_acquire_conf(Link *link) {
1719 int r;
1720
1721 assert(link);
1722
1723 r = link_acquire_ipv4_conf(link);
1724 if (r < 0)
1725 return r;
1726
1727 if (in_addr_is_null(AF_INET6, (const union in_addr_union*) &link->ipv6ll_address) == 0) {
1728 r = link_acquire_ipv6_conf(link);
1729 if (r < 0)
1730 return r;
1731 }
1732
1733 if (link_lldp_emit_enabled(link)) {
1734 r = link_lldp_emit_start(link);
1735 if (r < 0)
1736 return log_link_warning_errno(link, r, "Failed to start LLDP transmission: %m");
1737 }
1738
1739 return 0;
1740 }
1741
1742 bool link_has_carrier(Link *link) {
1743 /* see Documentation/networking/operstates.txt in the kernel sources */
1744
1745 if (link->kernel_operstate == IF_OPER_UP)
1746 return true;
1747
1748 if (link->kernel_operstate == IF_OPER_UNKNOWN)
1749 /* operstate may not be implemented, so fall back to flags */
1750 if ((link->flags & IFF_LOWER_UP) && !(link->flags & IFF_DORMANT))
1751 return true;
1752
1753 return false;
1754 }
1755
1756 static int link_up_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
1757 int r;
1758
1759 assert(link);
1760
1761 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1762 return 1;
1763
1764 r = sd_netlink_message_get_errno(m);
1765 if (r < 0)
1766 /* we warn but don't fail the link, as it may be brought up later */
1767 log_link_warning_errno(link, r, "Could not bring up interface: %m");
1768
1769 return 1;
1770 }
1771
1772 int link_up(Link *link) {
1773 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1774 uint8_t ipv6ll_mode;
1775 int r;
1776
1777 assert(link);
1778 assert(link->network);
1779 assert(link->manager);
1780 assert(link->manager->rtnl);
1781
1782 log_link_debug(link, "Bringing link up");
1783
1784 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1785 if (r < 0)
1786 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1787
1788 /* set it free if not enslaved with networkd */
1789 if (!link->network->bridge && !link->network->bond && !link->network->vrf) {
1790 r = sd_netlink_message_append_u32(req, IFLA_MASTER, 0);
1791 if (r < 0)
1792 return log_link_error_errno(link, r, "Could not append IFLA_MASTER attribute: %m");
1793 }
1794
1795 r = sd_rtnl_message_link_set_flags(req, IFF_UP, IFF_UP);
1796 if (r < 0)
1797 return log_link_error_errno(link, r, "Could not set link flags: %m");
1798
1799 if (link->network->mac) {
1800 r = sd_netlink_message_append_ether_addr(req, IFLA_ADDRESS, link->network->mac);
1801 if (r < 0)
1802 return log_link_error_errno(link, r, "Could not set MAC address: %m");
1803 }
1804
1805 r = sd_netlink_message_open_container(req, IFLA_AF_SPEC);
1806 if (r < 0)
1807 return log_link_error_errno(link, r, "Could not open IFLA_AF_SPEC container: %m");
1808
1809 if (link_ipv6_enabled(link)) {
1810 /* if the kernel lacks ipv6 support setting IFF_UP fails if any ipv6 options are passed */
1811 r = sd_netlink_message_open_container(req, AF_INET6);
1812 if (r < 0)
1813 return log_link_error_errno(link, r, "Could not open AF_INET6 container: %m");
1814
1815 if (!link_ipv6ll_enabled(link))
1816 ipv6ll_mode = IN6_ADDR_GEN_MODE_NONE;
1817 else {
1818 const char *p = NULL;
1819 _cleanup_free_ char *stable_secret = NULL;
1820
1821 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/stable_secret");
1822 r = read_one_line_file(p, &stable_secret);
1823
1824 if (r < 0)
1825 ipv6ll_mode = IN6_ADDR_GEN_MODE_EUI64;
1826 else
1827 ipv6ll_mode = IN6_ADDR_GEN_MODE_STABLE_PRIVACY;
1828 }
1829 r = sd_netlink_message_append_u8(req, IFLA_INET6_ADDR_GEN_MODE, ipv6ll_mode);
1830 if (r < 0)
1831 return log_link_error_errno(link, r, "Could not append IFLA_INET6_ADDR_GEN_MODE: %m");
1832
1833 if (!in_addr_is_null(AF_INET6, &link->network->ipv6_token)) {
1834 r = sd_netlink_message_append_in6_addr(req, IFLA_INET6_TOKEN, &link->network->ipv6_token.in6);
1835 if (r < 0)
1836 return log_link_error_errno(link, r, "Could not append IFLA_INET6_TOKEN: %m");
1837 }
1838
1839 r = sd_netlink_message_close_container(req);
1840 if (r < 0)
1841 return log_link_error_errno(link, r, "Could not close AF_INET6 container: %m");
1842 }
1843
1844 r = sd_netlink_message_close_container(req);
1845 if (r < 0)
1846 return log_link_error_errno(link, r, "Could not close IFLA_AF_SPEC container: %m");
1847
1848 r = netlink_call_async(link->manager->rtnl, NULL, req, link_up_handler,
1849 link_netlink_destroy_callback, link);
1850 if (r < 0)
1851 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1852
1853 link_ref(link);
1854
1855 return 0;
1856 }
1857
1858 static int link_up_can(Link *link) {
1859 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
1860 int r;
1861
1862 assert(link);
1863
1864 log_link_debug(link, "Bringing CAN link up");
1865
1866 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_SETLINK, link->ifindex);
1867 if (r < 0)
1868 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
1869
1870 r = sd_rtnl_message_link_set_flags(req, IFF_UP, IFF_UP);
1871 if (r < 0)
1872 return log_link_error_errno(link, r, "Could not set link flags: %m");
1873
1874 r = netlink_call_async(link->manager->rtnl, NULL, req, link_up_handler,
1875 link_netlink_destroy_callback, link);
1876 if (r < 0)
1877 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1878
1879 link_ref(link);
1880
1881 return 0;
1882 }
1883
1884 static int link_set_can(Link *link) {
1885 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *m = NULL;
1886 int r;
1887
1888 assert(link);
1889 assert(link->network);
1890 assert(link->manager);
1891 assert(link->manager->rtnl);
1892
1893 log_link_debug(link, "link_set_can");
1894
1895 r = sd_rtnl_message_new_link(link->manager->rtnl, &m, RTM_NEWLINK, link->ifindex);
1896 if (r < 0)
1897 return log_link_error_errno(link, r, "Failed to allocate netlink message: %m");
1898
1899 r = sd_netlink_message_set_flags(m, NLM_F_REQUEST | NLM_F_ACK);
1900 if (r < 0)
1901 return log_link_error_errno(link, r, "Could not set netlink flags: %m");
1902
1903 r = sd_netlink_message_open_container(m, IFLA_LINKINFO);
1904 if (r < 0)
1905 return log_link_error_errno(link, r, "Failed to open netlink container: %m");
1906
1907 r = sd_netlink_message_open_container_union(m, IFLA_INFO_DATA, link->kind);
1908 if (r < 0)
1909 return log_link_error_errno(link, r, "Could not append IFLA_INFO_DATA attribute: %m");
1910
1911 if (link->network->can_bitrate > 0 || link->network->can_sample_point > 0) {
1912 struct can_bittiming bt = {
1913 .bitrate = link->network->can_bitrate,
1914 .sample_point = link->network->can_sample_point,
1915 };
1916
1917 if (link->network->can_bitrate > UINT32_MAX) {
1918 log_link_error(link, "bitrate (%zu) too big.", link->network->can_bitrate);
1919 return -ERANGE;
1920 }
1921
1922 log_link_debug(link, "Setting bitrate = %d bit/s", bt.bitrate);
1923 if (link->network->can_sample_point > 0)
1924 log_link_debug(link, "Setting sample point = %d.%d%%", bt.sample_point / 10, bt.sample_point % 10);
1925 else
1926 log_link_debug(link, "Using default sample point");
1927
1928 r = sd_netlink_message_append_data(m, IFLA_CAN_BITTIMING, &bt, sizeof(bt));
1929 if (r < 0)
1930 return log_link_error_errno(link, r, "Could not append IFLA_CAN_BITTIMING attribute: %m");
1931 }
1932
1933 if (link->network->can_restart_us > 0) {
1934 char time_string[FORMAT_TIMESPAN_MAX];
1935 uint64_t restart_ms;
1936
1937 if (link->network->can_restart_us == USEC_INFINITY)
1938 restart_ms = 0;
1939 else
1940 restart_ms = DIV_ROUND_UP(link->network->can_restart_us, USEC_PER_MSEC);
1941
1942 format_timespan(time_string, FORMAT_TIMESPAN_MAX, restart_ms * 1000, MSEC_PER_SEC);
1943
1944 if (restart_ms > UINT32_MAX) {
1945 log_link_error(link, "restart timeout (%s) too big.", time_string);
1946 return -ERANGE;
1947 }
1948
1949 log_link_debug(link, "Setting restart = %s", time_string);
1950
1951 r = sd_netlink_message_append_u32(m, IFLA_CAN_RESTART_MS, restart_ms);
1952 if (r < 0)
1953 return log_link_error_errno(link, r, "Could not append IFLA_CAN_RESTART_MS attribute: %m");
1954 }
1955
1956 r = sd_netlink_message_close_container(m);
1957 if (r < 0)
1958 return log_link_error_errno(link, r, "Failed to close netlink container: %m");
1959
1960 r = sd_netlink_message_close_container(m);
1961 if (r < 0)
1962 return log_link_error_errno(link, r, "Failed to close netlink container: %m");
1963
1964 r = netlink_call_async(link->manager->rtnl, NULL, m, link_set_handler,
1965 link_netlink_destroy_callback, link);
1966 if (r < 0)
1967 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
1968
1969 link_ref(link);
1970
1971 if (!(link->flags & IFF_UP)) {
1972 r = link_up_can(link);
1973 if (r < 0) {
1974 link_enter_failed(link);
1975 return r;
1976 }
1977 }
1978
1979 log_link_debug(link, "link_set_can done");
1980
1981 return r;
1982 }
1983
1984 static int link_down_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
1985 int r;
1986
1987 assert(link);
1988
1989 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
1990 return 1;
1991
1992 r = sd_netlink_message_get_errno(m);
1993 if (r < 0)
1994 log_link_warning_errno(link, r, "Could not bring down interface: %m");
1995
1996 if (streq_ptr(link->kind, "can"))
1997 link_set_can(link);
1998
1999 return 1;
2000 }
2001
2002 int link_down(Link *link) {
2003 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
2004 int r;
2005
2006 assert(link);
2007 assert(link->manager);
2008 assert(link->manager->rtnl);
2009
2010 log_link_debug(link, "Bringing link down");
2011
2012 r = sd_rtnl_message_new_link(link->manager->rtnl, &req,
2013 RTM_SETLINK, link->ifindex);
2014 if (r < 0)
2015 return log_link_error_errno(link, r, "Could not allocate RTM_SETLINK message: %m");
2016
2017 r = sd_rtnl_message_link_set_flags(req, 0, IFF_UP);
2018 if (r < 0)
2019 return log_link_error_errno(link, r, "Could not set link flags: %m");
2020
2021 r = netlink_call_async(link->manager->rtnl, NULL, req, link_down_handler,
2022 link_netlink_destroy_callback, link);
2023 if (r < 0)
2024 return log_link_error_errno(link, r, "Could not send rtnetlink message: %m");
2025
2026 link_ref(link);
2027
2028 return 0;
2029 }
2030
2031 static int link_handle_bound_to_list(Link *link) {
2032 Link *l;
2033 Iterator i;
2034 int r;
2035 bool required_up = false;
2036 bool link_is_up = false;
2037
2038 assert(link);
2039
2040 if (hashmap_isempty(link->bound_to_links))
2041 return 0;
2042
2043 if (link->flags & IFF_UP)
2044 link_is_up = true;
2045
2046 HASHMAP_FOREACH (l, link->bound_to_links, i)
2047 if (link_has_carrier(l)) {
2048 required_up = true;
2049 break;
2050 }
2051
2052 if (!required_up && link_is_up) {
2053 r = link_down(link);
2054 if (r < 0)
2055 return r;
2056 } else if (required_up && !link_is_up) {
2057 r = link_up(link);
2058 if (r < 0)
2059 return r;
2060 }
2061
2062 return 0;
2063 }
2064
2065 static int link_handle_bound_by_list(Link *link) {
2066 Iterator i;
2067 Link *l;
2068 int r;
2069
2070 assert(link);
2071
2072 if (hashmap_isempty(link->bound_by_links))
2073 return 0;
2074
2075 HASHMAP_FOREACH (l, link->bound_by_links, i) {
2076 r = link_handle_bound_to_list(l);
2077 if (r < 0)
2078 return r;
2079 }
2080
2081 return 0;
2082 }
2083
2084 static int link_put_carrier(Link *link, Link *carrier, Hashmap **h) {
2085 int r;
2086
2087 assert(link);
2088 assert(carrier);
2089
2090 if (link == carrier)
2091 return 0;
2092
2093 if (hashmap_get(*h, INT_TO_PTR(carrier->ifindex)))
2094 return 0;
2095
2096 r = hashmap_ensure_allocated(h, NULL);
2097 if (r < 0)
2098 return r;
2099
2100 r = hashmap_put(*h, INT_TO_PTR(carrier->ifindex), carrier);
2101 if (r < 0)
2102 return r;
2103
2104 return 0;
2105 }
2106
2107 static int link_new_bound_by_list(Link *link) {
2108 Manager *m;
2109 Link *carrier;
2110 Iterator i;
2111 int r;
2112 bool list_updated = false;
2113
2114 assert(link);
2115 assert(link->manager);
2116
2117 m = link->manager;
2118
2119 HASHMAP_FOREACH(carrier, m->links, i) {
2120 if (!carrier->network)
2121 continue;
2122
2123 if (strv_isempty(carrier->network->bind_carrier))
2124 continue;
2125
2126 if (strv_fnmatch(carrier->network->bind_carrier, link->ifname, 0)) {
2127 r = link_put_carrier(link, carrier, &link->bound_by_links);
2128 if (r < 0)
2129 return r;
2130
2131 list_updated = true;
2132 }
2133 }
2134
2135 if (list_updated)
2136 link_dirty(link);
2137
2138 HASHMAP_FOREACH(carrier, link->bound_by_links, i) {
2139 r = link_put_carrier(carrier, link, &carrier->bound_to_links);
2140 if (r < 0)
2141 return r;
2142
2143 link_dirty(carrier);
2144 }
2145
2146 return 0;
2147 }
2148
2149 static int link_new_bound_to_list(Link *link) {
2150 Manager *m;
2151 Link *carrier;
2152 Iterator i;
2153 int r;
2154 bool list_updated = false;
2155
2156 assert(link);
2157 assert(link->manager);
2158
2159 if (!link->network)
2160 return 0;
2161
2162 if (strv_isempty(link->network->bind_carrier))
2163 return 0;
2164
2165 m = link->manager;
2166
2167 HASHMAP_FOREACH (carrier, m->links, i) {
2168 if (strv_fnmatch(link->network->bind_carrier, carrier->ifname, 0)) {
2169 r = link_put_carrier(link, carrier, &link->bound_to_links);
2170 if (r < 0)
2171 return r;
2172
2173 list_updated = true;
2174 }
2175 }
2176
2177 if (list_updated)
2178 link_dirty(link);
2179
2180 HASHMAP_FOREACH (carrier, link->bound_to_links, i) {
2181 r = link_put_carrier(carrier, link, &carrier->bound_by_links);
2182 if (r < 0)
2183 return r;
2184
2185 link_dirty(carrier);
2186 }
2187
2188 return 0;
2189 }
2190
2191 static int link_new_carrier_maps(Link *link) {
2192 int r;
2193
2194 r = link_new_bound_by_list(link);
2195 if (r < 0)
2196 return r;
2197
2198 r = link_handle_bound_by_list(link);
2199 if (r < 0)
2200 return r;
2201
2202 r = link_new_bound_to_list(link);
2203 if (r < 0)
2204 return r;
2205
2206 r = link_handle_bound_to_list(link);
2207 if (r < 0)
2208 return r;
2209
2210 return 0;
2211 }
2212
2213 static void link_free_bound_to_list(Link *link) {
2214 Link *bound_to;
2215 Iterator i;
2216
2217 HASHMAP_FOREACH (bound_to, link->bound_to_links, i) {
2218 hashmap_remove(link->bound_to_links, INT_TO_PTR(bound_to->ifindex));
2219
2220 if (hashmap_remove(bound_to->bound_by_links, INT_TO_PTR(link->ifindex)))
2221 link_dirty(bound_to);
2222 }
2223
2224 return;
2225 }
2226
2227 static void link_free_bound_by_list(Link *link) {
2228 Link *bound_by;
2229 Iterator i;
2230
2231 HASHMAP_FOREACH (bound_by, link->bound_by_links, i) {
2232 hashmap_remove(link->bound_by_links, INT_TO_PTR(bound_by->ifindex));
2233
2234 if (hashmap_remove(bound_by->bound_to_links, INT_TO_PTR(link->ifindex))) {
2235 link_dirty(bound_by);
2236 link_handle_bound_to_list(bound_by);
2237 }
2238 }
2239
2240 return;
2241 }
2242
2243 static void link_free_carrier_maps(Link *link) {
2244 bool list_updated = false;
2245
2246 assert(link);
2247
2248 if (!hashmap_isempty(link->bound_to_links)) {
2249 link_free_bound_to_list(link);
2250 list_updated = true;
2251 }
2252
2253 if (!hashmap_isempty(link->bound_by_links)) {
2254 link_free_bound_by_list(link);
2255 list_updated = true;
2256 }
2257
2258 if (list_updated)
2259 link_dirty(link);
2260
2261 return;
2262 }
2263
2264 void link_drop(Link *link) {
2265 if (!link || link->state == LINK_STATE_LINGER)
2266 return;
2267
2268 link_set_state(link, LINK_STATE_LINGER);
2269
2270 link_free_carrier_maps(link);
2271
2272 log_link_debug(link, "Link removed");
2273
2274 (void) unlink(link->state_file);
2275
2276 link_detach_from_manager(link);
2277
2278 link_unref(link);
2279
2280 return;
2281 }
2282
2283 static int link_joined(Link *link) {
2284 int r;
2285
2286 assert(link);
2287 assert(link->network);
2288
2289 if (!hashmap_isempty(link->bound_to_links)) {
2290 r = link_handle_bound_to_list(link);
2291 if (r < 0)
2292 return r;
2293 } else if (!(link->flags & IFF_UP)) {
2294 r = link_up(link);
2295 if (r < 0) {
2296 link_enter_failed(link);
2297 return r;
2298 }
2299 }
2300
2301 if (link->network->bridge) {
2302 r = link_set_bridge(link);
2303 if (r < 0)
2304 log_link_error_errno(link, r, "Could not set bridge message: %m");
2305 }
2306
2307 if (link->network->bond) {
2308 r = link_bond_set(link);
2309 if (r < 0)
2310 log_link_error_errno(link, r, "Could not set bond message: %m");
2311 }
2312
2313 if (link->network->use_br_vlan &&
2314 (link->network->bridge || streq_ptr("bridge", link->kind))) {
2315 r = link_set_bridge_vlan(link);
2316 if (r < 0)
2317 log_link_error_errno(link, r, "Could not set bridge vlan: %m");
2318 }
2319
2320 /* Skip setting up addresses until it gets carrier,
2321 or it would try to set addresses twice,
2322 which is bad for non-idempotent steps. */
2323 if (!link_has_carrier(link) && !link->network->configure_without_carrier)
2324 return 0;
2325
2326 return link_request_set_addresses(link);
2327 }
2328
2329 static int netdev_join_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
2330 int r;
2331
2332 assert(link);
2333 assert(link->network);
2334
2335 link->enslaving--;
2336
2337 if (IN_SET(link->state, LINK_STATE_FAILED, LINK_STATE_LINGER))
2338 return 1;
2339
2340 r = sd_netlink_message_get_errno(m);
2341 if (r < 0 && r != -EEXIST) {
2342 log_link_error_errno(link, r, "Could not join netdev: %m");
2343 link_enter_failed(link);
2344 return 1;
2345 } else
2346 log_link_debug(link, "Joined netdev");
2347
2348 if (link->enslaving <= 0)
2349 link_joined(link);
2350
2351 return 1;
2352 }
2353
2354 static int link_enter_join_netdev(Link *link) {
2355 NetDev *netdev;
2356 Iterator i;
2357 int r;
2358
2359 assert(link);
2360 assert(link->network);
2361 assert(link->state == LINK_STATE_PENDING);
2362
2363 link_set_state(link, LINK_STATE_CONFIGURING);
2364
2365 link_dirty(link);
2366
2367 if (!link->network->bridge &&
2368 !link->network->bond &&
2369 !link->network->vrf &&
2370 hashmap_isempty(link->network->stacked_netdevs))
2371 return link_joined(link);
2372
2373 if (link->network->bond) {
2374 if (link->network->bond->state == NETDEV_STATE_READY &&
2375 link->network->bond->ifindex == link->master_ifindex)
2376 return link_joined(link);
2377
2378 log_struct(LOG_DEBUG,
2379 LOG_LINK_INTERFACE(link),
2380 LOG_NETDEV_INTERFACE(link->network->bond),
2381 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", link->network->bond->ifname));
2382
2383 r = netdev_join(link->network->bond, link, netdev_join_handler);
2384 if (r < 0) {
2385 log_struct_errno(LOG_WARNING, r,
2386 LOG_LINK_INTERFACE(link),
2387 LOG_NETDEV_INTERFACE(link->network->bond),
2388 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", link->network->bond->ifname));
2389 link_enter_failed(link);
2390 return r;
2391 }
2392
2393 link->enslaving++;
2394 }
2395
2396 if (link->network->bridge) {
2397 log_struct(LOG_DEBUG,
2398 LOG_LINK_INTERFACE(link),
2399 LOG_NETDEV_INTERFACE(link->network->bridge),
2400 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", link->network->bridge->ifname));
2401
2402 r = netdev_join(link->network->bridge, link, netdev_join_handler);
2403 if (r < 0) {
2404 log_struct_errno(LOG_WARNING, r,
2405 LOG_LINK_INTERFACE(link),
2406 LOG_NETDEV_INTERFACE(link->network->bridge),
2407 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", link->network->bridge->ifname));
2408 link_enter_failed(link);
2409 return r;
2410 }
2411
2412 link->enslaving++;
2413 }
2414
2415 if (link->network->vrf) {
2416 log_struct(LOG_DEBUG,
2417 LOG_LINK_INTERFACE(link),
2418 LOG_NETDEV_INTERFACE(link->network->vrf),
2419 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", link->network->vrf->ifname));
2420
2421 r = netdev_join(link->network->vrf, link, netdev_join_handler);
2422 if (r < 0) {
2423 log_struct_errno(LOG_WARNING, r,
2424 LOG_LINK_INTERFACE(link),
2425 LOG_NETDEV_INTERFACE(link->network->vrf),
2426 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", link->network->vrf->ifname));
2427 link_enter_failed(link);
2428 return r;
2429 }
2430
2431 link->enslaving++;
2432 }
2433
2434 HASHMAP_FOREACH(netdev, link->network->stacked_netdevs, i) {
2435
2436 if (netdev->ifindex > 0) {
2437 link_joined(link);
2438 continue;
2439 }
2440
2441 log_struct(LOG_DEBUG,
2442 LOG_LINK_INTERFACE(link),
2443 LOG_NETDEV_INTERFACE(netdev),
2444 LOG_LINK_MESSAGE(link, "Enslaving by '%s'", netdev->ifname));
2445
2446 r = netdev_join(netdev, link, netdev_join_handler);
2447 if (r < 0) {
2448 log_struct_errno(LOG_WARNING, r,
2449 LOG_LINK_INTERFACE(link),
2450 LOG_NETDEV_INTERFACE(netdev),
2451 LOG_LINK_MESSAGE(link, "Could not join netdev '%s': %m", netdev->ifname));
2452 link_enter_failed(link);
2453 return r;
2454 }
2455
2456 link->enslaving++;
2457 }
2458
2459 return 0;
2460 }
2461
2462 static int link_set_ipv4_forward(Link *link) {
2463 int r;
2464
2465 if (!link_ipv4_forward_enabled(link))
2466 return 0;
2467
2468 /* We propagate the forwarding flag from one interface to the
2469 * global setting one way. This means: as long as at least one
2470 * interface was configured at any time that had IP forwarding
2471 * enabled the setting will stay on for good. We do this
2472 * primarily to keep IPv4 and IPv6 packet forwarding behaviour
2473 * somewhat in sync (see below). */
2474
2475 r = write_string_file("/proc/sys/net/ipv4/ip_forward", "1", WRITE_STRING_FILE_VERIFY_ON_FAILURE | WRITE_STRING_FILE_DISABLE_BUFFER);
2476 if (r < 0)
2477 log_link_warning_errno(link, r, "Cannot turn on IPv4 packet forwarding, ignoring: %m");
2478
2479 return 0;
2480 }
2481
2482 static int link_set_ipv6_forward(Link *link) {
2483 int r;
2484
2485 if (!link_ipv6_forward_enabled(link))
2486 return 0;
2487
2488 /* On Linux, the IPv6 stack does not know a per-interface
2489 * packet forwarding setting: either packet forwarding is on
2490 * for all, or off for all. We hence don't bother with a
2491 * per-interface setting, but simply propagate the interface
2492 * flag, if it is set, to the global flag, one-way. Note that
2493 * while IPv4 would allow a per-interface flag, we expose the
2494 * same behaviour there and also propagate the setting from
2495 * one to all, to keep things simple (see above). */
2496
2497 r = write_string_file("/proc/sys/net/ipv6/conf/all/forwarding", "1", WRITE_STRING_FILE_VERIFY_ON_FAILURE | WRITE_STRING_FILE_DISABLE_BUFFER);
2498 if (r < 0)
2499 log_link_warning_errno(link, r, "Cannot configure IPv6 packet forwarding, ignoring: %m");
2500
2501 return 0;
2502 }
2503
2504 static int link_set_ipv6_privacy_extensions(Link *link) {
2505 char buf[DECIMAL_STR_MAX(unsigned) + 1];
2506 IPv6PrivacyExtensions s;
2507 const char *p = NULL;
2508 int r;
2509
2510 s = link_ipv6_privacy_extensions(link);
2511 if (s < 0)
2512 return 0;
2513
2514 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/use_tempaddr");
2515 xsprintf(buf, "%u", (unsigned) link->network->ipv6_privacy_extensions);
2516
2517 r = write_string_file(p, buf, WRITE_STRING_FILE_VERIFY_ON_FAILURE | WRITE_STRING_FILE_DISABLE_BUFFER);
2518 if (r < 0)
2519 log_link_warning_errno(link, r, "Cannot configure IPv6 privacy extension for interface: %m");
2520
2521 return 0;
2522 }
2523
2524 static int link_set_ipv6_accept_ra(Link *link) {
2525 const char *p = NULL;
2526 int r;
2527
2528 /* Make this a NOP if IPv6 is not available */
2529 if (!socket_ipv6_is_supported())
2530 return 0;
2531
2532 if (link->flags & IFF_LOOPBACK)
2533 return 0;
2534
2535 if (!link->network)
2536 return 0;
2537
2538 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/accept_ra");
2539
2540 /* We handle router advertisements ourselves, tell the kernel to GTFO */
2541 r = write_string_file(p, "0", WRITE_STRING_FILE_VERIFY_ON_FAILURE | WRITE_STRING_FILE_DISABLE_BUFFER);
2542 if (r < 0)
2543 log_link_warning_errno(link, r, "Cannot disable kernel IPv6 accept_ra for interface: %m");
2544
2545 return 0;
2546 }
2547
2548 static int link_set_ipv6_dad_transmits(Link *link) {
2549 char buf[DECIMAL_STR_MAX(int) + 1];
2550 const char *p = NULL;
2551 int r;
2552
2553 /* Make this a NOP if IPv6 is not available */
2554 if (!socket_ipv6_is_supported())
2555 return 0;
2556
2557 if (link->flags & IFF_LOOPBACK)
2558 return 0;
2559
2560 if (!link->network)
2561 return 0;
2562
2563 if (link->network->ipv6_dad_transmits < 0)
2564 return 0;
2565
2566 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/dad_transmits");
2567 xsprintf(buf, "%i", link->network->ipv6_dad_transmits);
2568
2569 r = write_string_file(p, buf, WRITE_STRING_FILE_VERIFY_ON_FAILURE | WRITE_STRING_FILE_DISABLE_BUFFER);
2570 if (r < 0)
2571 log_link_warning_errno(link, r, "Cannot set IPv6 dad transmits for interface: %m");
2572
2573 return 0;
2574 }
2575
2576 static int link_set_ipv6_hop_limit(Link *link) {
2577 char buf[DECIMAL_STR_MAX(int) + 1];
2578 const char *p = NULL;
2579 int r;
2580
2581 /* Make this a NOP if IPv6 is not available */
2582 if (!socket_ipv6_is_supported())
2583 return 0;
2584
2585 if (link->flags & IFF_LOOPBACK)
2586 return 0;
2587
2588 if (!link->network)
2589 return 0;
2590
2591 if (link->network->ipv6_hop_limit < 0)
2592 return 0;
2593
2594 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/hop_limit");
2595 xsprintf(buf, "%i", link->network->ipv6_hop_limit);
2596
2597 r = write_string_file(p, buf, WRITE_STRING_FILE_VERIFY_ON_FAILURE | WRITE_STRING_FILE_DISABLE_BUFFER);
2598 if (r < 0)
2599 log_link_warning_errno(link, r, "Cannot set IPv6 hop limit for interface: %m");
2600
2601 return 0;
2602 }
2603
2604 static int link_set_ipv6_mtu(Link *link) {
2605 char buf[DECIMAL_STR_MAX(unsigned) + 1];
2606 const char *p = NULL;
2607 int r;
2608
2609 /* Make this a NOP if IPv6 is not available */
2610 if (!socket_ipv6_is_supported())
2611 return 0;
2612
2613 if (link->flags & IFF_LOOPBACK)
2614 return 0;
2615
2616 if (link->network->ipv6_mtu == 0)
2617 return 0;
2618
2619 p = strjoina("/proc/sys/net/ipv6/conf/", link->ifname, "/mtu");
2620
2621 xsprintf(buf, "%" PRIu32, link->network->ipv6_mtu);
2622
2623 r = write_string_file(p, buf, WRITE_STRING_FILE_DISABLE_BUFFER);
2624 if (r < 0)
2625 log_link_warning_errno(link, r, "Cannot set IPv6 MTU for interface: %m");
2626
2627 return 0;
2628 }
2629
2630 static bool link_is_static_address_configured(Link *link, Address *address) {
2631 Address *net_address;
2632
2633 assert(link);
2634 assert(address);
2635
2636 if (!link->network)
2637 return false;
2638
2639 LIST_FOREACH(addresses, net_address, link->network->static_addresses)
2640 if (address_equal(net_address, address))
2641 return true;
2642
2643 return false;
2644 }
2645
2646 static bool link_is_static_route_configured(Link *link, Route *route) {
2647 Route *net_route;
2648
2649 assert(link);
2650 assert(route);
2651
2652 if (!link->network)
2653 return false;
2654
2655 LIST_FOREACH(routes, net_route, link->network->static_routes)
2656 if (route_equal(net_route, route))
2657 return true;
2658
2659 return false;
2660 }
2661
2662 static int link_drop_foreign_config(Link *link) {
2663 Address *address;
2664 Route *route;
2665 Iterator i;
2666 int r;
2667
2668 SET_FOREACH(address, link->addresses_foreign, i) {
2669 /* we consider IPv6LL addresses to be managed by the kernel */
2670 if (address->family == AF_INET6 && in_addr_is_link_local(AF_INET6, &address->in_addr) == 1)
2671 continue;
2672
2673 if (link_is_static_address_configured(link, address)) {
2674 r = address_add(link, address->family, &address->in_addr, address->prefixlen, NULL);
2675 if (r < 0)
2676 return log_link_error_errno(link, r, "Failed to add address: %m");
2677 } else {
2678 r = address_remove(address, link, NULL);
2679 if (r < 0)
2680 return r;
2681 }
2682 }
2683
2684 SET_FOREACH(route, link->routes_foreign, i) {
2685 /* do not touch routes managed by the kernel */
2686 if (route->protocol == RTPROT_KERNEL)
2687 continue;
2688
2689 if (link_is_static_route_configured(link, route)) {
2690 r = route_add(link, route->family, &route->dst, route->dst_prefixlen, route->tos, route->priority, route->table, NULL);
2691 if (r < 0)
2692 return r;
2693 } else {
2694 r = route_remove(route, link, NULL);
2695 if (r < 0)
2696 return r;
2697 }
2698 }
2699
2700 return 0;
2701 }
2702
2703 static int link_drop_config(Link *link) {
2704 Address *address, *pool_address;
2705 Route *route;
2706 Iterator i;
2707 int r;
2708
2709 SET_FOREACH(address, link->addresses, i) {
2710 /* we consider IPv6LL addresses to be managed by the kernel */
2711 if (address->family == AF_INET6 && in_addr_is_link_local(AF_INET6, &address->in_addr) == 1)
2712 continue;
2713
2714 r = address_remove(address, link, NULL);
2715 if (r < 0)
2716 return r;
2717
2718 /* If this address came from an address pool, clean up the pool */
2719 LIST_FOREACH(addresses, pool_address, link->pool_addresses) {
2720 if (address_equal(address, pool_address)) {
2721 LIST_REMOVE(addresses, link->pool_addresses, pool_address);
2722 address_free(pool_address);
2723 break;
2724 }
2725 }
2726 }
2727
2728 SET_FOREACH(route, link->routes, i) {
2729 /* do not touch routes managed by the kernel */
2730 if (route->protocol == RTPROT_KERNEL)
2731 continue;
2732
2733 r = route_remove(route, link, NULL);
2734 if (r < 0)
2735 return r;
2736 }
2737
2738 ndisc_flush(link);
2739
2740 return 0;
2741 }
2742
2743 static int link_update_lldp(Link *link) {
2744 int r;
2745
2746 assert(link);
2747
2748 if (!link->lldp)
2749 return 0;
2750
2751 if (link->flags & IFF_UP) {
2752 r = sd_lldp_start(link->lldp);
2753 if (r > 0)
2754 log_link_debug(link, "Started LLDP.");
2755 } else {
2756 r = sd_lldp_stop(link->lldp);
2757 if (r > 0)
2758 log_link_debug(link, "Stopped LLDP.");
2759 }
2760
2761 return r;
2762 }
2763
2764 static int link_configure_can(Link *link) {
2765 int r;
2766
2767 if (streq_ptr(link->kind, "can")) {
2768 /* The CAN interface must be down to configure bitrate, etc... */
2769 if ((link->flags & IFF_UP)) {
2770 r = link_down(link);
2771 if (r < 0) {
2772 link_enter_failed(link);
2773 return r;
2774 }
2775
2776 return 0;
2777 }
2778
2779 return link_set_can(link);
2780 }
2781
2782 if (!(link->flags & IFF_UP)) {
2783 r = link_up_can(link);
2784 if (r < 0) {
2785 link_enter_failed(link);
2786 return r;
2787 }
2788 }
2789
2790 return 0;
2791 }
2792
2793 static int link_configure(Link *link) {
2794 int r;
2795
2796 assert(link);
2797 assert(link->network);
2798 assert(link->state == LINK_STATE_PENDING);
2799
2800 if (STRPTR_IN_SET(link->kind, "can", "vcan"))
2801 return link_configure_can(link);
2802
2803 /* Drop foreign config, but ignore loopback or critical devices.
2804 * We do not want to remove loopback address or addresses used for root NFS. */
2805 if (!(link->flags & IFF_LOOPBACK) && !(link->network->dhcp_critical)) {
2806 r = link_drop_foreign_config(link);
2807 if (r < 0)
2808 return r;
2809 }
2810
2811 r = link_set_proxy_arp(link);
2812 if (r < 0)
2813 return r;
2814
2815 r = ipv6_proxy_ndp_addresses_configure(link);
2816 if (r < 0)
2817 return r;
2818
2819 r = link_set_ipv4_forward(link);
2820 if (r < 0)
2821 return r;
2822
2823 r = link_set_ipv6_forward(link);
2824 if (r < 0)
2825 return r;
2826
2827 r = link_set_ipv6_privacy_extensions(link);
2828 if (r < 0)
2829 return r;
2830
2831 r = link_set_ipv6_accept_ra(link);
2832 if (r < 0)
2833 return r;
2834
2835 r = link_set_ipv6_dad_transmits(link);
2836 if (r < 0)
2837 return r;
2838
2839 r = link_set_ipv6_hop_limit(link);
2840 if (r < 0)
2841 return r;
2842
2843 r = link_set_flags(link);
2844 if (r < 0)
2845 return r;
2846
2847 r = link_set_ipv6_mtu(link);
2848 if (r < 0)
2849 return r;
2850
2851 if (link_ipv4ll_enabled(link)) {
2852 r = ipv4ll_configure(link);
2853 if (r < 0)
2854 return r;
2855 }
2856
2857 if (link_dhcp4_enabled(link)) {
2858 r = dhcp4_set_promote_secondaries(link);
2859 if (r < 0)
2860 return r;
2861
2862 r = dhcp4_configure(link);
2863 if (r < 0)
2864 return r;
2865 }
2866
2867 if (link_dhcp4_server_enabled(link)) {
2868 r = sd_dhcp_server_new(&link->dhcp_server, link->ifindex);
2869 if (r < 0)
2870 return r;
2871
2872 r = sd_dhcp_server_attach_event(link->dhcp_server, NULL, 0);
2873 if (r < 0)
2874 return r;
2875 }
2876
2877 if (link_dhcp6_enabled(link) ||
2878 link_ipv6_accept_ra_enabled(link)) {
2879 r = dhcp6_configure(link);
2880 if (r < 0)
2881 return r;
2882 }
2883
2884 if (link_ipv6_accept_ra_enabled(link)) {
2885 r = ndisc_configure(link);
2886 if (r < 0)
2887 return r;
2888 }
2889
2890 if (link_radv_enabled(link)) {
2891 r = radv_configure(link);
2892 if (r < 0)
2893 return r;
2894 }
2895
2896 if (link_lldp_rx_enabled(link)) {
2897 r = sd_lldp_new(&link->lldp);
2898 if (r < 0)
2899 return r;
2900
2901 r = sd_lldp_set_ifindex(link->lldp, link->ifindex);
2902 if (r < 0)
2903 return r;
2904
2905 r = sd_lldp_match_capabilities(link->lldp,
2906 link->network->lldp_mode == LLDP_MODE_ROUTERS_ONLY ?
2907 SD_LLDP_SYSTEM_CAPABILITIES_ALL_ROUTERS :
2908 SD_LLDP_SYSTEM_CAPABILITIES_ALL);
2909 if (r < 0)
2910 return r;
2911
2912 r = sd_lldp_set_filter_address(link->lldp, &link->mac);
2913 if (r < 0)
2914 return r;
2915
2916 r = sd_lldp_attach_event(link->lldp, NULL, 0);
2917 if (r < 0)
2918 return r;
2919
2920 r = sd_lldp_set_callback(link->lldp, lldp_handler, link);
2921 if (r < 0)
2922 return r;
2923
2924 r = link_update_lldp(link);
2925 if (r < 0)
2926 return r;
2927 }
2928
2929 if (link->network->mtu > 0) {
2930 r = link_set_mtu(link, link->network->mtu);
2931 if (r < 0)
2932 return r;
2933 }
2934
2935 return link_configure_after_setting_mtu(link);
2936 }
2937
2938 static int link_configure_after_setting_mtu(Link *link) {
2939 int r;
2940
2941 assert(link);
2942 assert(link->network);
2943 assert(link->state == LINK_STATE_PENDING);
2944
2945 if (link->setting_mtu)
2946 return 0;
2947
2948 if (link_has_carrier(link) || link->network->configure_without_carrier) {
2949 r = link_acquire_conf(link);
2950 if (r < 0)
2951 return r;
2952 }
2953
2954 return link_enter_join_netdev(link);
2955 }
2956
2957 static int duid_set_uuid(DUID *duid, sd_id128_t uuid) {
2958 assert(duid);
2959
2960 if (duid->raw_data_len > 0)
2961 return 0;
2962
2963 if (duid->type != DUID_TYPE_UUID)
2964 return -EINVAL;
2965
2966 memcpy(&duid->raw_data, &uuid, sizeof(sd_id128_t));
2967 duid->raw_data_len = sizeof(sd_id128_t);
2968
2969 return 1;
2970 }
2971
2972 int get_product_uuid_handler(sd_bus_message *m, void *userdata, sd_bus_error *ret_error) {
2973 Manager *manager = userdata;
2974 const sd_bus_error *e;
2975 const void *a;
2976 size_t sz;
2977 DUID *duid;
2978 Link *link;
2979 int r;
2980
2981 assert(m);
2982 assert(manager);
2983
2984 e = sd_bus_message_get_error(m);
2985 if (e) {
2986 log_error_errno(sd_bus_error_get_errno(e),
2987 "Could not get product UUID. Falling back to use machine-app-specific ID as DUID-UUID: %s",
2988 e->message);
2989 goto configure;
2990 }
2991
2992 r = sd_bus_message_read_array(m, 'y', &a, &sz);
2993 if (r < 0)
2994 goto configure;
2995
2996 if (sz != sizeof(sd_id128_t)) {
2997 log_error("Invalid product UUID. Falling back to use machine-app-specific ID as DUID-UUID.");
2998 goto configure;
2999 }
3000
3001 memcpy(&manager->product_uuid, a, sz);
3002 while ((duid = set_steal_first(manager->duids_requesting_uuid)))
3003 (void) duid_set_uuid(duid, manager->product_uuid);
3004
3005 manager->duids_requesting_uuid = set_free(manager->duids_requesting_uuid);
3006
3007 configure:
3008 while ((link = set_steal_first(manager->links_requesting_uuid))) {
3009 r = link_configure(link);
3010 if (r < 0)
3011 log_link_error_errno(link, r, "Failed to configure link: %m");
3012 }
3013
3014 manager->links_requesting_uuid = set_free(manager->links_requesting_uuid);
3015
3016 /* To avoid calling GetProductUUID() bus method so frequently, set the flag below
3017 * even if the method fails. */
3018 manager->has_product_uuid = true;
3019
3020 return 1;
3021 }
3022
3023 static bool link_requires_uuid(Link *link) {
3024 const DUID *duid;
3025
3026 assert(link);
3027 assert(link->manager);
3028 assert(link->network);
3029
3030 duid = link_get_duid(link);
3031 if (duid->type != DUID_TYPE_UUID || duid->raw_data_len != 0)
3032 return false;
3033
3034 if (link_dhcp4_enabled(link) && IN_SET(link->network->dhcp_client_identifier, DHCP_CLIENT_ID_DUID, DHCP_CLIENT_ID_DUID_ONLY))
3035 return true;
3036
3037 if (link_dhcp6_enabled(link) || link_ipv6_accept_ra_enabled(link))
3038 return true;
3039
3040 return false;
3041 }
3042
3043 static int link_configure_duid(Link *link) {
3044 Manager *m;
3045 DUID *duid;
3046 int r;
3047
3048 assert(link);
3049 assert(link->manager);
3050 assert(link->network);
3051
3052 m = link->manager;
3053 duid = link_get_duid(link);
3054
3055 if (!link_requires_uuid(link))
3056 return 1;
3057
3058 if (m->has_product_uuid) {
3059 (void) duid_set_uuid(duid, m->product_uuid);
3060 return 1;
3061 }
3062
3063 if (!m->links_requesting_uuid) {
3064 r = manager_request_product_uuid(m, link);
3065 if (r < 0) {
3066 if (r == -ENOMEM)
3067 return r;
3068
3069 log_link_warning_errno(link, r,
3070 "Failed to get product UUID. Falling back to use machine-app-specific ID as DUID-UUID: %m");
3071 return 1;
3072 }
3073 } else {
3074 r = set_put(m->links_requesting_uuid, link);
3075 if (r < 0)
3076 return log_oom();
3077
3078 r = set_put(m->duids_requesting_uuid, duid);
3079 if (r < 0)
3080 return log_oom();
3081 }
3082
3083 return 0;
3084 }
3085
3086 static int link_initialized_and_synced(Link *link) {
3087 Network *network;
3088 int r;
3089
3090 assert(link);
3091 assert(link->ifname);
3092 assert(link->manager);
3093
3094 if (link->state != LINK_STATE_PENDING)
3095 return 1;
3096
3097 log_link_debug(link, "Link state is up-to-date");
3098
3099 r = link_new_bound_by_list(link);
3100 if (r < 0)
3101 return r;
3102
3103 r = link_handle_bound_by_list(link);
3104 if (r < 0)
3105 return r;
3106
3107 if (!link->network) {
3108 r = network_get(link->manager, link->sd_device, link->ifname,
3109 &link->mac, &network);
3110 if (r == -ENOENT) {
3111 link_enter_unmanaged(link);
3112 return 1;
3113 } else if (r == 0 && network->unmanaged) {
3114 link_enter_unmanaged(link);
3115 return 0;
3116 } else if (r < 0)
3117 return r;
3118
3119 if (link->flags & IFF_LOOPBACK) {
3120 if (network->link_local != ADDRESS_FAMILY_NO)
3121 log_link_debug(link, "Ignoring link-local autoconfiguration for loopback link");
3122
3123 if (network->dhcp != ADDRESS_FAMILY_NO)
3124 log_link_debug(link, "Ignoring DHCP clients for loopback link");
3125
3126 if (network->dhcp_server)
3127 log_link_debug(link, "Ignoring DHCP server for loopback link");
3128 }
3129
3130 r = network_apply(network, link);
3131 if (r < 0)
3132 return r;
3133 }
3134
3135 r = link_new_bound_to_list(link);
3136 if (r < 0)
3137 return r;
3138
3139 /* link_configure_duid() returns 0 if it requests product UUID. In that case,
3140 * link_configure() is called later asynchronously. */
3141 r = link_configure_duid(link);
3142 if (r <= 0)
3143 return r;
3144
3145 r = link_configure(link);
3146 if (r < 0)
3147 return r;
3148
3149 return 1;
3150 }
3151
3152 static int link_initialized_handler(sd_netlink *rtnl, sd_netlink_message *m, Link *link) {
3153 (void) link_initialized_and_synced(link);
3154 return 1;
3155 }
3156
3157 int link_initialized(Link *link, sd_device *device) {
3158 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL;
3159 int r;
3160
3161 assert(link);
3162 assert(link->manager);
3163 assert(link->manager->rtnl);
3164 assert(device);
3165
3166 if (link->state != LINK_STATE_PENDING)
3167 return 0;
3168
3169 if (link->sd_device)
3170 return 0;
3171
3172 log_link_debug(link, "udev initialized link");
3173
3174 link->sd_device = sd_device_ref(device);
3175
3176 /* udev has initialized the link, but we don't know if we have yet
3177 * processed the NEWLINK messages with the latest state. Do a GETLINK,
3178 * when it returns we know that the pending NEWLINKs have already been
3179 * processed and that we are up-to-date */
3180
3181 r = sd_rtnl_message_new_link(link->manager->rtnl, &req, RTM_GETLINK,
3182 link->ifindex);
3183 if (r < 0)
3184 return r;
3185
3186 r = netlink_call_async(link->manager->rtnl, NULL, req, link_initialized_handler,
3187 link_netlink_destroy_callback, link);
3188 if (r < 0)
3189 return r;
3190
3191 link_ref(link);
3192
3193 return 0;
3194 }
3195
3196 static int link_load(Link *link) {
3197 _cleanup_free_ char *network_file = NULL,
3198 *addresses = NULL,
3199 *routes = NULL,
3200 *dhcp4_address = NULL,
3201 *ipv4ll_address = NULL;
3202 union in_addr_union address;
3203 union in_addr_union route_dst;
3204 const char *p;
3205 int r;
3206
3207 assert(link);
3208
3209 r = parse_env_file(NULL, link->state_file,
3210 "NETWORK_FILE", &network_file,
3211 "ADDRESSES", &addresses,
3212 "ROUTES", &routes,
3213 "DHCP4_ADDRESS", &dhcp4_address,
3214 "IPV4LL_ADDRESS", &ipv4ll_address);
3215 if (r < 0 && r != -ENOENT)
3216 return log_link_error_errno(link, r, "Failed to read %s: %m", link->state_file);
3217
3218 if (network_file) {
3219 Network *network;
3220 char *suffix;
3221
3222 /* drop suffix */
3223 suffix = strrchr(network_file, '.');
3224 if (!suffix) {
3225 log_link_debug(link, "Failed to get network name from %s", network_file);
3226 goto network_file_fail;
3227 }
3228 *suffix = '\0';
3229
3230 r = network_get_by_name(link->manager, basename(network_file), &network);
3231 if (r < 0) {
3232 log_link_debug_errno(link, r, "Failed to get network %s: %m", basename(network_file));
3233 goto network_file_fail;
3234 }
3235
3236 r = network_apply(network, link);
3237 if (r < 0)
3238 return log_link_error_errno(link, r, "Failed to apply network %s: %m", basename(network_file));
3239 }
3240
3241 network_file_fail:
3242
3243 if (addresses) {
3244 p = addresses;
3245
3246 for (;;) {
3247 _cleanup_free_ char *address_str = NULL;
3248 char *prefixlen_str;
3249 int family;
3250 unsigned char prefixlen;
3251
3252 r = extract_first_word(&p, &address_str, NULL, 0);
3253 if (r < 0) {
3254 log_link_debug_errno(link, r, "Failed to extract next address string: %m");
3255 continue;
3256 }
3257 if (r == 0)
3258 break;
3259
3260 prefixlen_str = strchr(address_str, '/');
3261 if (!prefixlen_str) {
3262 log_link_debug(link, "Failed to parse address and prefix length %s", address_str);
3263 continue;
3264 }
3265
3266 *prefixlen_str++ = '\0';
3267
3268 r = sscanf(prefixlen_str, "%hhu", &prefixlen);
3269 if (r != 1) {
3270 log_link_error(link, "Failed to parse prefixlen %s", prefixlen_str);
3271 continue;
3272 }
3273
3274 r = in_addr_from_string_auto(address_str, &family, &address);
3275 if (r < 0) {
3276 log_link_debug_errno(link, r, "Failed to parse address %s: %m", address_str);
3277 continue;
3278 }
3279
3280 r = address_add(link, family, &address, prefixlen, NULL);
3281 if (r < 0)
3282 return log_link_error_errno(link, r, "Failed to add address: %m");
3283 }
3284 }
3285
3286 if (routes) {
3287 p = routes;
3288
3289 for (;;) {
3290 Route *route;
3291 _cleanup_free_ char *route_str = NULL;
3292 _cleanup_(sd_event_source_unrefp) sd_event_source *expire = NULL;
3293 usec_t lifetime;
3294 char *prefixlen_str;
3295 int family;
3296 unsigned char prefixlen, tos, table;
3297 uint32_t priority;
3298
3299 r = extract_first_word(&p, &route_str, NULL, 0);
3300 if (r < 0) {
3301 log_link_debug_errno(link, r, "Failed to extract next route string: %m");
3302 continue;
3303 }
3304 if (r == 0)
3305 break;
3306
3307 prefixlen_str = strchr(route_str, '/');
3308 if (!prefixlen_str) {
3309 log_link_debug(link, "Failed to parse route %s", route_str);
3310 continue;
3311 }
3312
3313 *prefixlen_str++ = '\0';
3314
3315 r = sscanf(prefixlen_str, "%hhu/%hhu/%"SCNu32"/%hhu/"USEC_FMT, &prefixlen, &tos, &priority, &table, &lifetime);
3316 if (r != 5) {
3317 log_link_debug(link,
3318 "Failed to parse destination prefix length, tos, priority, table or expiration %s",
3319 prefixlen_str);
3320 continue;
3321 }
3322
3323 r = in_addr_from_string_auto(route_str, &family, &route_dst);
3324 if (r < 0) {
3325 log_link_debug_errno(link, r, "Failed to parse route destination %s: %m", route_str);
3326 continue;
3327 }
3328
3329 r = route_add(link, family, &route_dst, prefixlen, tos, priority, table, &route);
3330 if (r < 0)
3331 return log_link_error_errno(link, r, "Failed to add route: %m");
3332
3333 if (lifetime != USEC_INFINITY && !kernel_route_expiration_supported()) {
3334 r = sd_event_add_time(link->manager->event, &expire, clock_boottime_or_monotonic(), lifetime,
3335 0, route_expire_handler, route);
3336 if (r < 0)
3337 log_link_warning_errno(link, r, "Could not arm route expiration handler: %m");
3338 }
3339
3340 route->lifetime = lifetime;
3341 sd_event_source_unref(route->expire);
3342 route->expire = TAKE_PTR(expire);
3343 }
3344 }
3345
3346 if (dhcp4_address) {
3347 r = in_addr_from_string(AF_INET, dhcp4_address, &address);
3348 if (r < 0) {
3349 log_link_debug_errno(link, r, "Failed to parse DHCPv4 address %s: %m", dhcp4_address);
3350 goto dhcp4_address_fail;
3351 }
3352
3353 r = sd_dhcp_client_new(&link->dhcp_client, link->network ? link->network->dhcp_anonymize : 0);
3354 if (r < 0)
3355 return log_link_error_errno(link, r, "Failed to create DHCPv4 client: %m");
3356
3357 r = sd_dhcp_client_set_request_address(link->dhcp_client, &address.in);
3358 if (r < 0)
3359 return log_link_error_errno(link, r, "Failed to set initial DHCPv4 address %s: %m", dhcp4_address);
3360 }
3361
3362 dhcp4_address_fail:
3363
3364 if (ipv4ll_address) {
3365 r = in_addr_from_string(AF_INET, ipv4ll_address, &address);
3366 if (r < 0) {
3367 log_link_debug_errno(link, r, "Failed to parse IPv4LL address %s: %m", ipv4ll_address);
3368 goto ipv4ll_address_fail;
3369 }
3370
3371 r = sd_ipv4ll_new(&link->ipv4ll);
3372 if (r < 0)
3373 return log_link_error_errno(link, r, "Failed to create IPv4LL client: %m");
3374
3375 r = sd_ipv4ll_set_address(link->ipv4ll, &address.in);
3376 if (r < 0)
3377 return log_link_error_errno(link, r, "Failed to set initial IPv4LL address %s: %m", ipv4ll_address);
3378 }
3379
3380 ipv4ll_address_fail:
3381
3382 return 0;
3383 }
3384
3385 int link_add(Manager *m, sd_netlink_message *message, Link **ret) {
3386 _cleanup_(sd_device_unrefp) sd_device *device = NULL;
3387 char ifindex_str[2 + DECIMAL_STR_MAX(int)];
3388 Link *link;
3389 int r;
3390
3391 assert(m);
3392 assert(m->rtnl);
3393 assert(message);
3394 assert(ret);
3395
3396 r = link_new(m, message, ret);
3397 if (r < 0)
3398 return r;
3399
3400 link = *ret;
3401
3402 log_link_debug(link, "Link %d added", link->ifindex);
3403
3404 r = link_load(link);
3405 if (r < 0)
3406 return r;
3407
3408 if (detect_container() <= 0) {
3409 /* not in a container, udev will be around */
3410 sprintf(ifindex_str, "n%d", link->ifindex);
3411 r = sd_device_new_from_device_id(&device, ifindex_str);
3412 if (r < 0) {
3413 log_link_warning_errno(link, r, "Could not find device: %m");
3414 goto failed;
3415 }
3416
3417 r = sd_device_get_is_initialized(device);
3418 if (r < 0) {
3419 log_link_warning_errno(link, r, "Could not determine whether the device is initialized or not: %m");
3420 goto failed;
3421 }
3422 if (r == 0) {
3423 /* not yet ready */
3424 log_link_debug(link, "link pending udev initialization...");
3425 return 0;
3426 }
3427
3428 r = link_initialized(link, device);
3429 if (r < 0)
3430 goto failed;
3431 } else {
3432 r = link_initialized_and_synced(link);
3433 if (r < 0)
3434 goto failed;
3435 }
3436
3437 return 0;
3438 failed:
3439 link_enter_failed(link);
3440 return r;
3441 }
3442
3443 int link_ipv6ll_gained(Link *link, const struct in6_addr *address) {
3444 int r;
3445
3446 assert(link);
3447
3448 log_link_info(link, "Gained IPv6LL");
3449
3450 link->ipv6ll_address = *address;
3451 link_check_ready(link);
3452
3453 if (!IN_SET(link->state, LINK_STATE_PENDING, LINK_STATE_UNMANAGED, LINK_STATE_FAILED)) {
3454 r = link_acquire_ipv6_conf(link);
3455 if (r < 0) {
3456 link_enter_failed(link);
3457 return r;
3458 }
3459 }
3460
3461 return 0;
3462 }
3463
3464 static int link_carrier_gained(Link *link) {
3465 int r;
3466
3467 assert(link);
3468
3469 if (!IN_SET(link->state, LINK_STATE_PENDING, LINK_STATE_UNMANAGED, LINK_STATE_FAILED)) {
3470 r = link_acquire_conf(link);
3471 if (r < 0) {
3472 link_enter_failed(link);
3473 return r;
3474 }
3475
3476 r = link_request_set_addresses(link);
3477 if (r < 0)
3478 return r;
3479 }
3480
3481 r = link_handle_bound_by_list(link);
3482 if (r < 0)
3483 return r;
3484
3485 return 0;
3486 }
3487
3488 static int link_carrier_lost(Link *link) {
3489 int r;
3490
3491 assert(link);
3492
3493 /* Some devices reset itself while setting the MTU. This causes the DHCP client fall into a loop.
3494 * setting_mtu keep track whether the device got reset because of setting MTU and does not drop the
3495 * configuration and stop the clients as well. */
3496 if (link->setting_mtu)
3497 return 0;
3498
3499 r = link_stop_clients(link);
3500 if (r < 0) {
3501 link_enter_failed(link);
3502 return r;
3503 }
3504
3505 if (link_dhcp4_server_enabled(link))
3506 (void) sd_dhcp_server_stop(link->dhcp_server);
3507
3508 r = link_drop_config(link);
3509 if (r < 0)
3510 return r;
3511
3512 if (!IN_SET(link->state, LINK_STATE_UNMANAGED, LINK_STATE_PENDING)) {
3513 log_link_debug(link, "State is %s, dropping config", link_state_to_string(link->state));
3514 r = link_drop_foreign_config(link);
3515 if (r < 0)
3516 return r;
3517 }
3518
3519 r = link_handle_bound_by_list(link);
3520 if (r < 0)
3521 return r;
3522
3523 return 0;
3524 }
3525
3526 int link_carrier_reset(Link *link) {
3527 int r;
3528
3529 assert(link);
3530
3531 if (link_has_carrier(link)) {
3532 r = link_carrier_lost(link);
3533 if (r < 0)
3534 return r;
3535
3536 r = link_carrier_gained(link);
3537 if (r < 0)
3538 return r;
3539
3540 log_link_info(link, "Reset carrier");
3541 }
3542
3543 return 0;
3544 }
3545
3546 int link_update(Link *link, sd_netlink_message *m) {
3547 struct ether_addr mac;
3548 const char *ifname;
3549 uint32_t mtu;
3550 bool had_carrier, carrier_gained, carrier_lost;
3551 int r;
3552
3553 assert(link);
3554 assert(link->ifname);
3555 assert(m);
3556
3557 if (link->state == LINK_STATE_LINGER) {
3558 log_link_info(link, "Link readded");
3559 link_set_state(link, LINK_STATE_CONFIGURING);
3560
3561 r = link_new_carrier_maps(link);
3562 if (r < 0)
3563 return r;
3564 }
3565
3566 r = sd_netlink_message_read_string(m, IFLA_IFNAME, &ifname);
3567 if (r >= 0 && !streq(ifname, link->ifname)) {
3568 log_link_info(link, "Interface name change detected, %s has been renamed to %s.", link->ifname, ifname);
3569
3570 if (link->state == LINK_STATE_PENDING) {
3571 r = free_and_strdup(&link->ifname, ifname);
3572 if (r < 0)
3573 return r;
3574 } else {
3575 Manager *manager = link->manager;
3576
3577 link_drop(link);
3578 r = link_add(manager, m, &link);
3579 if (r < 0)
3580 return r;
3581 }
3582 }
3583
3584 r = sd_netlink_message_read_u32(m, IFLA_MTU, &mtu);
3585 if (r >= 0 && mtu > 0) {
3586 link->mtu = mtu;
3587 if (link->original_mtu == 0) {
3588 link->original_mtu = mtu;
3589 log_link_debug(link, "Saved original MTU: %" PRIu32, link->original_mtu);
3590 }
3591
3592 if (link->dhcp_client) {
3593 r = sd_dhcp_client_set_mtu(link->dhcp_client,
3594 link->mtu);
3595 if (r < 0)
3596 return log_link_warning_errno(link, r, "Could not update MTU in DHCP client: %m");
3597 }
3598
3599 if (link->radv) {
3600 r = sd_radv_set_mtu(link->radv, link->mtu);
3601 if (r < 0)
3602 return log_link_warning_errno(link, r, "Could not set MTU for Router Advertisement: %m");
3603 }
3604 }
3605
3606 /* The kernel may broadcast NEWLINK messages without the MAC address
3607 set, simply ignore them. */
3608 r = sd_netlink_message_read_ether_addr(m, IFLA_ADDRESS, &mac);
3609 if (r >= 0) {
3610 if (memcmp(link->mac.ether_addr_octet, mac.ether_addr_octet,
3611 ETH_ALEN)) {
3612
3613 memcpy(link->mac.ether_addr_octet, mac.ether_addr_octet,
3614 ETH_ALEN);
3615
3616 log_link_debug(link, "MAC address: "
3617 "%02hhx:%02hhx:%02hhx:%02hhx:%02hhx:%02hhx",
3618 mac.ether_addr_octet[0],
3619 mac.ether_addr_octet[1],
3620 mac.ether_addr_octet[2],
3621 mac.ether_addr_octet[3],
3622 mac.ether_addr_octet[4],
3623 mac.ether_addr_octet[5]);
3624
3625 if (link->ipv4ll) {
3626 r = sd_ipv4ll_set_mac(link->ipv4ll, &link->mac);
3627 if (r < 0)
3628 return log_link_warning_errno(link, r, "Could not update MAC address in IPv4LL client: %m");
3629 }
3630
3631 if (link->dhcp_client) {
3632 r = sd_dhcp_client_set_mac(link->dhcp_client,
3633 (const uint8_t *) &link->mac,
3634 sizeof (link->mac),
3635 ARPHRD_ETHER);
3636 if (r < 0)
3637 return log_link_warning_errno(link, r, "Could not update MAC address in DHCP client: %m");
3638
3639 r = dhcp4_set_client_identifier(link);
3640 if (r < 0)
3641 return r;
3642 }
3643
3644 if (link->dhcp6_client) {
3645 const DUID* duid = link_get_duid(link);
3646
3647 r = sd_dhcp6_client_set_mac(link->dhcp6_client,
3648 (const uint8_t *) &link->mac,
3649 sizeof (link->mac),
3650 ARPHRD_ETHER);
3651 if (r < 0)
3652 return log_link_warning_errno(link, r, "Could not update MAC address in DHCPv6 client: %m");
3653
3654 if (link->network->iaid_set) {
3655 r = sd_dhcp6_client_set_iaid(link->dhcp6_client,
3656 link->network->iaid);
3657 if (r < 0)
3658 return log_link_warning_errno(link, r, "Could not update DHCPv6 IAID: %m");
3659 }
3660
3661 r = sd_dhcp6_client_set_duid(link->dhcp6_client,
3662 duid->type,
3663 duid->raw_data_len > 0 ? duid->raw_data : NULL,
3664 duid->raw_data_len);
3665 if (r < 0)
3666 return log_link_warning_errno(link, r, "Could not update DHCPv6 DUID: %m");
3667 }
3668
3669 if (link->radv) {
3670 r = sd_radv_set_mac(link->radv, &link->mac);
3671 if (r < 0)
3672 return log_link_warning_errno(link, r, "Could not update MAC for Router Advertisement: %m");
3673 }
3674
3675 if (link->ndisc) {
3676 r = sd_ndisc_set_mac(link->ndisc, &link->mac);
3677 if (r < 0)
3678 return log_link_warning_errno(link, r, "Could not update MAC for ndisc: %m");
3679 }
3680 }
3681 }
3682
3683 had_carrier = link_has_carrier(link);
3684
3685 r = link_update_flags(link, m);
3686 if (r < 0)
3687 return r;
3688
3689 r = link_update_lldp(link);
3690 if (r < 0)
3691 return r;
3692
3693 carrier_gained = !had_carrier && link_has_carrier(link);
3694 carrier_lost = had_carrier && !link_has_carrier(link);
3695
3696 if (carrier_gained) {
3697 log_link_info(link, "Gained carrier");
3698
3699 r = link_carrier_gained(link);
3700 if (r < 0)
3701 return r;
3702 } else if (carrier_lost) {
3703 log_link_info(link, "Lost carrier");
3704
3705 r = link_carrier_lost(link);
3706 if (r < 0)
3707 return r;
3708 }
3709
3710 return 0;
3711 }
3712
3713 static void print_link_hashmap(FILE *f, const char *prefix, Hashmap* h) {
3714 bool space = false;
3715 Iterator i;
3716 Link *link;
3717
3718 assert(f);
3719 assert(prefix);
3720
3721 if (hashmap_isempty(h))
3722 return;
3723
3724 fputs(prefix, f);
3725 HASHMAP_FOREACH(link, h, i) {
3726 if (space)
3727 fputc(' ', f);
3728
3729 fprintf(f, "%i", link->ifindex);
3730 space = true;
3731 }
3732
3733 fputc('\n', f);
3734 }
3735
3736 int link_save(Link *link) {
3737 _cleanup_free_ char *temp_path = NULL;
3738 _cleanup_fclose_ FILE *f = NULL;
3739 const char *admin_state, *oper_state;
3740 Address *a;
3741 Route *route;
3742 Iterator i;
3743 int r;
3744
3745 assert(link);
3746 assert(link->state_file);
3747 assert(link->lease_file);
3748 assert(link->manager);
3749
3750 if (link->state == LINK_STATE_LINGER) {
3751 unlink(link->state_file);
3752 return 0;
3753 }
3754
3755 link_lldp_save(link);
3756
3757 admin_state = link_state_to_string(link->state);
3758 assert(admin_state);
3759
3760 oper_state = link_operstate_to_string(link->operstate);
3761 assert(oper_state);
3762
3763 r = fopen_temporary(link->state_file, &f, &temp_path);
3764 if (r < 0)
3765 goto fail;
3766
3767 (void) __fsetlocking(f, FSETLOCKING_BYCALLER);
3768 (void) fchmod(fileno(f), 0644);
3769
3770 fprintf(f,
3771 "# This is private data. Do not parse.\n"
3772 "ADMIN_STATE=%s\n"
3773 "OPER_STATE=%s\n",
3774 admin_state, oper_state);
3775
3776 if (link->network) {
3777 bool space;
3778 sd_dhcp6_lease *dhcp6_lease = NULL;
3779 const char *dhcp_domainname = NULL;
3780 char **dhcp6_domains = NULL;
3781 char **dhcp_domains = NULL;
3782 unsigned j;
3783
3784 fprintf(f, "REQUIRED_FOR_ONLINE=%s\n",
3785 yes_no(link->network->required_for_online));
3786
3787 if (link->dhcp6_client) {
3788 r = sd_dhcp6_client_get_lease(link->dhcp6_client, &dhcp6_lease);
3789 if (r < 0 && r != -ENOMSG)
3790 log_link_debug(link, "No DHCPv6 lease");
3791 }
3792
3793 fprintf(f, "NETWORK_FILE=%s\n", link->network->filename);
3794
3795 fputs("DNS=", f);
3796 space = false;
3797
3798 for (j = 0; j < link->network->n_dns; j++) {
3799 _cleanup_free_ char *b = NULL;
3800
3801 r = in_addr_to_string(link->network->dns[j].family,
3802 &link->network->dns[j].address, &b);
3803 if (r < 0) {
3804 log_debug_errno(r, "Failed to format address, ignoring: %m");
3805 continue;
3806 }
3807
3808 if (space)
3809 fputc(' ', f);
3810 fputs(b, f);
3811 space = true;
3812 }
3813
3814 if (link->network->dhcp_use_dns &&
3815 link->dhcp_lease) {
3816 const struct in_addr *addresses;
3817
3818 r = sd_dhcp_lease_get_dns(link->dhcp_lease, &addresses);
3819 if (r > 0) {
3820 if (space)
3821 fputc(' ', f);
3822 serialize_in_addrs(f, addresses, r);
3823 space = true;
3824 }
3825 }
3826
3827 if (link->network->dhcp_use_dns && dhcp6_lease) {
3828 struct in6_addr *in6_addrs;
3829
3830 r = sd_dhcp6_lease_get_dns(dhcp6_lease, &in6_addrs);
3831 if (r > 0) {
3832 if (space)
3833 fputc(' ', f);
3834 serialize_in6_addrs(f, in6_addrs, r);
3835 space = true;
3836 }
3837 }
3838
3839 /* Make sure to flush out old entries before we use the NDISC data */
3840 ndisc_vacuum(link);
3841
3842 if (link->network->ipv6_accept_ra_use_dns && link->ndisc_rdnss) {
3843 NDiscRDNSS *dd;
3844
3845 SET_FOREACH(dd, link->ndisc_rdnss, i) {
3846 if (space)
3847 fputc(' ', f);
3848
3849 serialize_in6_addrs(f, &dd->address, 1);
3850 space = true;
3851 }
3852 }
3853
3854 fputc('\n', f);
3855
3856 fputs("NTP=", f);
3857 space = false;
3858 fputstrv(f, link->network->ntp, NULL, &space);
3859
3860 if (link->network->dhcp_use_ntp &&
3861 link->dhcp_lease) {
3862 const struct in_addr *addresses;
3863
3864 r = sd_dhcp_lease_get_ntp(link->dhcp_lease, &addresses);
3865 if (r > 0) {
3866 if (space)
3867 fputc(' ', f);
3868 serialize_in_addrs(f, addresses, r);
3869 space = true;
3870 }
3871 }
3872
3873 if (link->network->dhcp_use_ntp && dhcp6_lease) {
3874 struct in6_addr *in6_addrs;
3875 char **hosts;
3876
3877 r = sd_dhcp6_lease_get_ntp_addrs(dhcp6_lease,
3878 &in6_addrs);
3879 if (r > 0) {
3880 if (space)
3881 fputc(' ', f);
3882 serialize_in6_addrs(f, in6_addrs, r);
3883 space = true;
3884 }
3885
3886 r = sd_dhcp6_lease_get_ntp_fqdn(dhcp6_lease, &hosts);
3887 if (r > 0)
3888 fputstrv(f, hosts, NULL, &space);
3889 }
3890
3891 fputc('\n', f);
3892
3893 if (link->network->dhcp_use_domains != DHCP_USE_DOMAINS_NO) {
3894 if (link->dhcp_lease) {
3895 (void) sd_dhcp_lease_get_domainname(link->dhcp_lease, &dhcp_domainname);
3896 (void) sd_dhcp_lease_get_search_domains(link->dhcp_lease, &dhcp_domains);
3897 }
3898 if (dhcp6_lease)
3899 (void) sd_dhcp6_lease_get_domains(dhcp6_lease, &dhcp6_domains);
3900 }
3901
3902 fputs("DOMAINS=", f);
3903 space = false;
3904 fputstrv(f, link->network->search_domains, NULL, &space);
3905
3906 if (link->network->dhcp_use_domains == DHCP_USE_DOMAINS_YES) {
3907 NDiscDNSSL *dd;
3908
3909 if (dhcp_domainname)
3910 fputs_with_space(f, dhcp_domainname, NULL, &space);
3911 if (dhcp_domains)
3912 fputstrv(f, dhcp_domains, NULL, &space);
3913 if (dhcp6_domains)
3914 fputstrv(f, dhcp6_domains, NULL, &space);
3915
3916 SET_FOREACH(dd, link->ndisc_dnssl, i)
3917 fputs_with_space(f, NDISC_DNSSL_DOMAIN(dd), NULL, &space);
3918 }
3919
3920 fputc('\n', f);
3921
3922 fputs("ROUTE_DOMAINS=", f);
3923 space = false;
3924 fputstrv(f, link->network->route_domains, NULL, &space);
3925
3926 if (link->network->dhcp_use_domains == DHCP_USE_DOMAINS_ROUTE) {
3927 NDiscDNSSL *dd;
3928
3929 if (dhcp_domainname)
3930 fputs_with_space(f, dhcp_domainname, NULL, &space);
3931 if (dhcp_domains)
3932 fputstrv(f, dhcp_domains, NULL, &space);
3933 if (dhcp6_domains)
3934 fputstrv(f, dhcp6_domains, NULL, &space);
3935
3936 SET_FOREACH(dd, link->ndisc_dnssl, i)
3937 fputs_with_space(f, NDISC_DNSSL_DOMAIN(dd), NULL, &space);
3938 }
3939
3940 fputc('\n', f);
3941
3942 fprintf(f, "LLMNR=%s\n",
3943 resolve_support_to_string(link->network->llmnr));
3944 fprintf(f, "MDNS=%s\n",
3945 resolve_support_to_string(link->network->mdns));
3946 if (link->network->dns_default_route >= 0)
3947 fprintf(f, "DNS_DEFAULT_ROUTE=%s\n", yes_no(link->network->dns_default_route));
3948
3949 if (link->network->dns_over_tls_mode != _DNS_OVER_TLS_MODE_INVALID)
3950 fprintf(f, "DNS_OVER_TLS=%s\n",
3951 dns_over_tls_mode_to_string(link->network->dns_over_tls_mode));
3952
3953 if (link->network->dnssec_mode != _DNSSEC_MODE_INVALID)
3954 fprintf(f, "DNSSEC=%s\n",
3955 dnssec_mode_to_string(link->network->dnssec_mode));
3956
3957 if (!set_isempty(link->network->dnssec_negative_trust_anchors)) {
3958 const char *n;
3959
3960 fputs("DNSSEC_NTA=", f);
3961 space = false;
3962 SET_FOREACH(n, link->network->dnssec_negative_trust_anchors, i)
3963 fputs_with_space(f, n, NULL, &space);
3964 fputc('\n', f);
3965 }
3966
3967 fputs("ADDRESSES=", f);
3968 space = false;
3969 SET_FOREACH(a, link->addresses, i) {
3970 _cleanup_free_ char *address_str = NULL;
3971
3972 r = in_addr_to_string(a->family, &a->in_addr, &address_str);
3973 if (r < 0)
3974 goto fail;
3975
3976 fprintf(f, "%s%s/%u", space ? " " : "", address_str, a->prefixlen);
3977 space = true;
3978 }
3979 fputc('\n', f);
3980
3981 fputs("ROUTES=", f);
3982 space = false;
3983 SET_FOREACH(route, link->routes, i) {
3984 _cleanup_free_ char *route_str = NULL;
3985
3986 r = in_addr_to_string(route->family, &route->dst, &route_str);
3987 if (r < 0)
3988 goto fail;
3989
3990 fprintf(f, "%s%s/%hhu/%hhu/%"PRIu32"/%"PRIu32"/"USEC_FMT,
3991 space ? " " : "", route_str,
3992 route->dst_prefixlen, route->tos, route->priority, route->table, route->lifetime);
3993 space = true;
3994 }
3995
3996 fputc('\n', f);
3997 }
3998
3999 print_link_hashmap(f, "CARRIER_BOUND_TO=", link->bound_to_links);
4000 print_link_hashmap(f, "CARRIER_BOUND_BY=", link->bound_by_links);
4001
4002 if (link->dhcp_lease) {
4003 struct in_addr address;
4004 const char *tz = NULL;
4005
4006 assert(link->network);
4007
4008 r = sd_dhcp_lease_get_timezone(link->dhcp_lease, &tz);
4009 if (r >= 0)
4010 fprintf(f, "TIMEZONE=%s\n", tz);
4011
4012 r = sd_dhcp_lease_get_address(link->dhcp_lease, &address);
4013 if (r >= 0) {
4014 fputs("DHCP4_ADDRESS=", f);
4015 serialize_in_addrs(f, &address, 1);
4016 fputc('\n', f);
4017 }
4018
4019 r = dhcp_lease_save(link->dhcp_lease, link->lease_file);
4020 if (r < 0)
4021 goto fail;
4022
4023 fprintf(f,
4024 "DHCP_LEASE=%s\n",
4025 link->lease_file);
4026 } else
4027 unlink(link->lease_file);
4028
4029 if (link->ipv4ll) {
4030 struct in_addr address;
4031
4032 r = sd_ipv4ll_get_address(link->ipv4ll, &address);
4033 if (r >= 0) {
4034 fputs("IPV4LL_ADDRESS=", f);
4035 serialize_in_addrs(f, &address, 1);
4036 fputc('\n', f);
4037 }
4038 }
4039
4040 r = fflush_and_check(f);
4041 if (r < 0)
4042 goto fail;
4043
4044 if (rename(temp_path, link->state_file) < 0) {
4045 r = -errno;
4046 goto fail;
4047 }
4048
4049 return 0;
4050
4051 fail:
4052 (void) unlink(link->state_file);
4053 if (temp_path)
4054 (void) unlink(temp_path);
4055
4056 return log_link_error_errno(link, r, "Failed to save link data to %s: %m", link->state_file);
4057 }
4058
4059 /* The serialized state in /run is no longer up-to-date. */
4060 void link_dirty(Link *link) {
4061 int r;
4062
4063 assert(link);
4064
4065 /* mark manager dirty as link is dirty */
4066 manager_dirty(link->manager);
4067
4068 r = set_ensure_allocated(&link->manager->dirty_links, NULL);
4069 if (r < 0)
4070 /* allocation errors are ignored */
4071 return;
4072
4073 r = set_put(link->manager->dirty_links, link);
4074 if (r <= 0)
4075 /* don't take another ref if the link was already dirty */
4076 return;
4077
4078 link_ref(link);
4079 }
4080
4081 /* The serialized state in /run is up-to-date */
4082 void link_clean(Link *link) {
4083 assert(link);
4084 assert(link->manager);
4085
4086 link_unref(set_remove(link->manager->dirty_links, link));
4087 }
4088
4089 static const char* const link_state_table[_LINK_STATE_MAX] = {
4090 [LINK_STATE_PENDING] = "pending",
4091 [LINK_STATE_CONFIGURING] = "configuring",
4092 [LINK_STATE_CONFIGURED] = "configured",
4093 [LINK_STATE_UNMANAGED] = "unmanaged",
4094 [LINK_STATE_FAILED] = "failed",
4095 [LINK_STATE_LINGER] = "linger",
4096 };
4097
4098 DEFINE_STRING_TABLE_LOOKUP(link_state, LinkState);
4099
4100 static const char* const link_operstate_table[_LINK_OPERSTATE_MAX] = {
4101 [LINK_OPERSTATE_OFF] = "off",
4102 [LINK_OPERSTATE_NO_CARRIER] = "no-carrier",
4103 [LINK_OPERSTATE_DORMANT] = "dormant",
4104 [LINK_OPERSTATE_CARRIER] = "carrier",
4105 [LINK_OPERSTATE_DEGRADED] = "degraded",
4106 [LINK_OPERSTATE_ROUTABLE] = "routable",
4107 };
4108
4109 DEFINE_STRING_TABLE_LOOKUP(link_operstate, LinkOperationalState);
Unnamed repository; edit this file 'description' to name the repository.