src/network/networkd-manager.c

   1 /* SPDX-License-Identifier: LGPL-2.1+ */
   2
   3 #include <sys/socket.h>
   4 #include <linux/if.h>
   5 #include <linux/fib_rules.h>
   6 #include <stdio_ext.h>
   7
   8 #include "sd-daemon.h"
   9 #include "sd-netlink.h"
  10
  11 #include "alloc-util.h"
  12 #include "bus-util.h"
  13 #include "conf-parser.h"
  14 #include "def.h"
  15 #include "device-util.h"
  16 #include "dns-domain.h"
  17 #include "fd-util.h"
  18 #include "fileio.h"
  19 #include "local-addresses.h"
  20 #include "netlink-util.h"
  21 #include "network-internal.h"
  22 #include "networkd-manager.h"
  23 #include "ordered-set.h"
  24 #include "path-util.h"
  25 #include "set.h"
  26 #include "strv.h"
  27 #include "sysctl-util.h"
  28 #include "tmpfile-util.h"
  29 #include "virt.h"
  30
  31 /* use 8 MB for receive socket kernel queue. */
  32 #define RCVBUF_SIZE    (8*1024*1024)
  33
  34 static int setup_default_address_pool(Manager *m) {
  35         AddressPool *p;
  36         int r;
  37
  38         assert(m);
  39
  40         /* Add in the well-known private address ranges. */
  41
  42         r = address_pool_new_from_string(m, &p, AF_INET6, "fc00::", 7);
  43         if (r < 0)
  44                 return r;
  45
  46         r = address_pool_new_from_string(m, &p, AF_INET, "192.168.0.0", 16);
  47         if (r < 0)
  48                 return r;
  49
  50         r = address_pool_new_from_string(m, &p, AF_INET, "172.16.0.0", 12);
  51         if (r < 0)
  52                 return r;
  53
  54         r = address_pool_new_from_string(m, &p, AF_INET, "10.0.0.0", 8);
  55         if (r < 0)
  56                 return r;
  57
  58         return 0;
  59 }
  60
  61 static int manager_reset_all(Manager *m) {
  62         Link *link;
  63         Iterator i;
  64         int r;
  65
  66         assert(m);
  67
  68         HASHMAP_FOREACH(link, m->links, i) {
  69                 r = link_carrier_reset(link);
  70                 if (r < 0)
  71                         log_link_warning_errno(link, r, "Could not reset carrier: %m");
  72         }
  73
  74         return 0;
  75 }
  76
  77 static int match_prepare_for_sleep(sd_bus_message *message, void *userdata, sd_bus_error *ret_error) {
  78         Manager *m = userdata;
  79         int b, r;
  80
  81         assert(message);
  82         assert(m);
  83
  84         r = sd_bus_message_read(message, "b", &b);
  85         if (r < 0) {
  86                 log_debug_errno(r, "Failed to parse PrepareForSleep signal: %m");
  87                 return 0;
  88         }
  89
  90         if (b)
  91                 return 0;
  92
  93         log_debug("Coming back from suspend, resetting all connections...");
  94
  95         (void) manager_reset_all(m);
  96
  97         return 0;
  98 }
  99
 100 static int on_connected(sd_bus_message *message, void *userdata, sd_bus_error *ret_error) {
 101         Manager *m = userdata;
 102
 103         assert(message);
 104         assert(m);
 105
 106         /* Did we get a timezone or transient hostname from DHCP while D-Bus wasn't up yet? */
 107         if (m->dynamic_hostname)
 108                 (void) manager_set_hostname(m, m->dynamic_hostname);
 109         if (m->dynamic_timezone)
 110                 (void) manager_set_timezone(m, m->dynamic_timezone);
 111         if (m->links_requesting_uuid)
 112                 (void) manager_request_product_uuid(m, NULL);
 113
 114         return 0;
 115 }
 116
 117 int manager_connect_bus(Manager *m) {
 118         int r;
 119
 120         assert(m);
 121
 122         if (m->bus)
 123                 return 0;
 124
 125         r = bus_open_system_watch_bind_with_description(&m->bus, "bus-api-network");
 126         if (r < 0)
 127                 return log_error_errno(r, "Failed to connect to bus: %m");
 128
 129         r = sd_bus_add_object_vtable(m->bus, NULL, "/org/freedesktop/network1", "org.freedesktop.network1.Manager", manager_vtable, m);
 130         if (r < 0)
 131                 return log_error_errno(r, "Failed to add manager object vtable: %m");
 132
 133         r = sd_bus_add_fallback_vtable(m->bus, NULL, "/org/freedesktop/network1/link", "org.freedesktop.network1.Link", link_vtable, link_object_find, m);
 134         if (r < 0)
 135                return log_error_errno(r, "Failed to add link object vtable: %m");
 136
 137         r = sd_bus_add_node_enumerator(m->bus, NULL, "/org/freedesktop/network1/link", link_node_enumerator, m);
 138         if (r < 0)
 139                 return log_error_errno(r, "Failed to add link enumerator: %m");
 140
 141         r = sd_bus_add_fallback_vtable(m->bus, NULL, "/org/freedesktop/network1/network", "org.freedesktop.network1.Network", network_vtable, network_object_find, m);
 142         if (r < 0)
 143                return log_error_errno(r, "Failed to add network object vtable: %m");
 144
 145         r = sd_bus_add_node_enumerator(m->bus, NULL, "/org/freedesktop/network1/network", network_node_enumerator, m);
 146         if (r < 0)
 147                 return log_error_errno(r, "Failed to add network enumerator: %m");
 148
 149         r = sd_bus_request_name_async(m->bus, NULL, "org.freedesktop.network1", 0, NULL, NULL);
 150         if (r < 0)
 151                 return log_error_errno(r, "Failed to request name: %m");
 152
 153         r = sd_bus_attach_event(m->bus, m->event, 0);
 154         if (r < 0)
 155                 return log_error_errno(r, "Failed to attach bus to event loop: %m");
 156
 157         r = sd_bus_match_signal_async(
 158                         m->bus,
 159                         NULL,
 160                         "org.freedesktop.DBus.Local",
 161                         NULL,
 162                         "org.freedesktop.DBus.Local",
 163                         "Connected",
 164                         on_connected, NULL, m);
 165         if (r < 0)
 166                 return log_error_errno(r, "Failed to request match on Connected signal: %m");
 167
 168         r = sd_bus_match_signal_async(
 169                         m->bus,
 170                         NULL,
 171                         "org.freedesktop.login1",
 172                         "/org/freedesktop/login1",
 173                         "org.freedesktop.login1.Manager",
 174                         "PrepareForSleep",
 175                         match_prepare_for_sleep, NULL, m);
 176         if (r < 0)
 177                 log_warning_errno(r, "Failed to request match for PrepareForSleep, ignoring: %m");
 178
 179         return 0;
 180 }
 181
 182 static int manager_udev_process_link(sd_device_monitor *monitor, sd_device *device, void *userdata) {
 183         Manager *m = userdata;
 184         const char *action;
 185         Link *link = NULL;
 186         int r, ifindex;
 187
 188         assert(m);
 189         assert(device);
 190
 191         r = sd_device_get_property_value(device, "ACTION", &action);
 192         if (r < 0) {
 193                 log_device_debug_errno(device, r, "Failed to get 'ACTION' property, ignoring device: %m");
 194                 return 0;
 195         }
 196
 197         if (!STR_IN_SET(action, "add", "change")) {
 198                 log_device_debug(device, "Ignoring udev %s event for device.", action);
 199                 return 0;
 200         }
 201
 202         r = sd_device_get_ifindex(device, &ifindex);
 203         if (r < 0) {
 204                 log_device_debug_errno(device, r, "Ignoring udev ADD event for device without ifindex or with invalid ifindex: %m");
 205                 return 0;
 206         }
 207
 208         r = link_get(m, ifindex, &link);
 209         if (r < 0) {
 210                 if (r != -ENODEV)
 211                         log_debug_errno(r, "Failed to get link from ifindex %i, ignoring: %m", ifindex);
 212                 return 0;
 213         }
 214
 215         (void) link_initialized(link, device);
 216
 217         return 0;
 218 }
 219
 220 static int manager_connect_udev(Manager *m) {
 221         int r;
 222
 223         /* udev does not initialize devices inside containers,
 224          * so we rely on them being already initialized before
 225          * entering the container */
 226         if (detect_container() > 0)
 227                 return 0;
 228
 229         r = sd_device_monitor_new(&m->device_monitor);
 230         if (r < 0)
 231                 return log_error_errno(r, "Failed to initialize device monitor: %m");
 232
 233         r = sd_device_monitor_filter_add_match_subsystem_devtype(m->device_monitor, "net", NULL);
 234         if (r < 0)
 235                 return log_error_errno(r, "Could not add device monitor filter: %m");
 236
 237         r = sd_device_monitor_attach_event(m->device_monitor, m->event);
 238         if (r < 0)
 239                 return log_error_errno(r, "Failed to attach event to device monitor: %m");
 240
 241         r = sd_device_monitor_start(m->device_monitor, manager_udev_process_link, m);
 242         if (r < 0)
 243                 return log_error_errno(r, "Failed to start device monitor: %m");
 244
 245         return 0;
 246 }
 247
 248 int manager_rtnl_process_route(sd_netlink *rtnl, sd_netlink_message *message, void *userdata) {
 249         Manager *m = userdata;
 250         Link *link = NULL;
 251         uint16_t type;
 252         uint32_t ifindex, priority = 0;
 253         unsigned char protocol, scope, tos, table, rt_type;
 254         int family;
 255         unsigned char dst_prefixlen, src_prefixlen;
 256         union in_addr_union dst = {}, gw = {}, src = {}, prefsrc = {};
 257         Route *route = NULL;
 258         int r;
 259
 260         assert(rtnl);
 261         assert(message);
 262         assert(m);
 263
 264         if (sd_netlink_message_is_error(message)) {
 265                 r = sd_netlink_message_get_errno(message);
 266                 if (r < 0)
 267                         log_warning_errno(r, "rtnl: failed to receive route, ignoring: %m");
 268
 269                 return 0;
 270         }
 271
 272         r = sd_netlink_message_get_type(message, &type);
 273         if (r < 0) {
 274                 log_warning_errno(r, "rtnl: could not get message type, ignoring: %m");
 275                 return 0;
 276         } else if (!IN_SET(type, RTM_NEWROUTE, RTM_DELROUTE)) {
 277                 log_warning("rtnl: received unexpected message type when processing route, ignoring");
 278                 return 0;
 279         }
 280
 281         r = sd_netlink_message_read_u32(message, RTA_OIF, &ifindex);
 282         if (r == -ENODATA) {
 283                 log_debug("rtnl: received route without ifindex, ignoring");
 284                 return 0;
 285         } else if (r < 0) {
 286                 log_warning_errno(r, "rtnl: could not get ifindex from route, ignoring: %m");
 287                 return 0;
 288         } else if (ifindex <= 0) {
 289                 log_warning("rtnl: received route message with invalid ifindex, ignoring: %d", ifindex);
 290                 return 0;
 291         } else {
 292                 r = link_get(m, ifindex, &link);
 293                 if (r < 0 || !link) {
 294                         /* when enumerating we might be out of sync, but we will
 295                          * get the route again, so just ignore it */
 296                         if (!m->enumerating)
 297                                 log_warning("rtnl: received route for nonexistent link (%d), ignoring", ifindex);
 298                         return 0;
 299                 }
 300         }
 301
 302         r = sd_rtnl_message_route_get_family(message, &family);
 303         if (r < 0 || !IN_SET(family, AF_INET, AF_INET6)) {
 304                 log_link_warning(link, "rtnl: received address with invalid family, ignoring");
 305                 return 0;
 306         }
 307
 308         r = sd_rtnl_message_route_get_protocol(message, &protocol);
 309         if (r < 0) {
 310                 log_warning_errno(r, "rtnl: could not get route protocol: %m");
 311                 return 0;
 312         }
 313
 314         switch (family) {
 315         case AF_INET:
 316                 r = sd_netlink_message_read_in_addr(message, RTA_DST, &dst.in);
 317                 if (r < 0 && r != -ENODATA) {
 318                         log_link_warning_errno(link, r, "rtnl: received route without valid destination, ignoring: %m");
 319                         return 0;
 320                 }
 321
 322                 r = sd_netlink_message_read_in_addr(message, RTA_GATEWAY, &gw.in);
 323                 if (r < 0 && r != -ENODATA) {
 324                         log_link_warning_errno(link, r, "rtnl: received route with invalid gateway, ignoring: %m");
 325                         return 0;
 326                 }
 327
 328                 r = sd_netlink_message_read_in_addr(message, RTA_SRC, &src.in);
 329                 if (r < 0 && r != -ENODATA) {
 330                         log_link_warning_errno(link, r, "rtnl: received route with invalid source, ignoring: %m");
 331                         return 0;
 332                 }
 333
 334                 r = sd_netlink_message_read_in_addr(message, RTA_PREFSRC, &prefsrc.in);
 335                 if (r < 0 && r != -ENODATA) {
 336                         log_link_warning_errno(link, r, "rtnl: received route with invalid preferred source, ignoring: %m");
 337                         return 0;
 338                 }
 339
 340                 break;
 341
 342         case AF_INET6:
 343                 r = sd_netlink_message_read_in6_addr(message, RTA_DST, &dst.in6);
 344                 if (r < 0 && r != -ENODATA) {
 345                         log_link_warning_errno(link, r, "rtnl: received route without valid destination, ignoring: %m");
 346                         return 0;
 347                 }
 348
 349                 r = sd_netlink_message_read_in6_addr(message, RTA_GATEWAY, &gw.in6);
 350                 if (r < 0 && r != -ENODATA) {
 351                         log_link_warning_errno(link, r, "rtnl: received route with invalid gateway, ignoring: %m");
 352                         return 0;
 353                 }
 354
 355                 r = sd_netlink_message_read_in6_addr(message, RTA_SRC, &src.in6);
 356                 if (r < 0 && r != -ENODATA) {
 357                         log_link_warning_errno(link, r, "rtnl: received route with invalid source, ignoring: %m");
 358                         return 0;
 359                 }
 360
 361                 r = sd_netlink_message_read_in6_addr(message, RTA_PREFSRC, &prefsrc.in6);
 362                 if (r < 0 && r != -ENODATA) {
 363                         log_link_warning_errno(link, r, "rtnl: received route with invalid preferred source, ignoring: %m");
 364                         return 0;
 365                 }
 366
 367                 break;
 368
 369         default:
 370                 assert_not_reached("Received unsupported address family");
 371                 return 0;
 372         }
 373
 374         r = sd_rtnl_message_route_get_dst_prefixlen(message, &dst_prefixlen);
 375         if (r < 0) {
 376                 log_link_warning_errno(link, r, "rtnl: received route with invalid destination prefixlen, ignoring: %m");
 377                 return 0;
 378         }
 379
 380         r = sd_rtnl_message_route_get_src_prefixlen(message, &src_prefixlen);
 381         if (r < 0) {
 382                 log_link_warning_errno(link, r, "rtnl: received route with invalid source prefixlen, ignoring: %m");
 383                 return 0;
 384         }
 385
 386         r = sd_rtnl_message_route_get_scope(message, &scope);
 387         if (r < 0) {
 388                 log_link_warning_errno(link, r, "rtnl: received route with invalid scope, ignoring: %m");
 389                 return 0;
 390         }
 391
 392         r = sd_rtnl_message_route_get_tos(message, &tos);
 393         if (r < 0) {
 394                 log_link_warning_errno(link, r, "rtnl: received route with invalid tos, ignoring: %m");
 395                 return 0;
 396         }
 397
 398         r = sd_rtnl_message_route_get_type(message, &rt_type);
 399         if (r < 0) {
 400                 log_link_warning_errno(link, r, "rtnl: received route with invalid type, ignoring: %m");
 401                 return 0;
 402         }
 403
 404         r = sd_rtnl_message_route_get_table(message, &table);
 405         if (r < 0) {
 406                 log_link_warning_errno(link, r, "rtnl: received route with invalid table, ignoring: %m");
 407                 return 0;
 408         }
 409
 410         r = sd_netlink_message_read_u32(message, RTA_PRIORITY, &priority);
 411         if (r < 0 && r != -ENODATA) {
 412                 log_link_warning_errno(link, r, "rtnl: received route with invalid priority, ignoring: %m");
 413                 return 0;
 414         }
 415
 416         (void) route_get(link, family, &dst, dst_prefixlen, tos, priority, table, &route);
 417
 418         if (DEBUG_LOGGING) {
 419                 _cleanup_free_ char *buf_dst = NULL, *buf_dst_prefixlen = NULL,
 420                         *buf_src = NULL, *buf_gw = NULL, *buf_prefsrc = NULL;
 421
 422                 if (!in_addr_is_null(family, &dst)) {
 423                         (void) in_addr_to_string(family, &dst, &buf_dst);
 424                         (void) asprintf(&buf_dst_prefixlen, "/%u", dst_prefixlen);
 425                 }
 426                 if (!in_addr_is_null(family, &src))
 427                         (void) in_addr_to_string(family, &src, &buf_src);
 428                 if (!in_addr_is_null(family, &gw))
 429                         (void) in_addr_to_string(family, &gw, &buf_gw);
 430                 if (!in_addr_is_null(family, &prefsrc))
 431                         (void) in_addr_to_string(family, &prefsrc, &buf_prefsrc);
 432
 433                 log_link_debug(link,
 434                                "%s route: dst: %s%s, src: %s, gw: %s, prefsrc: %s",
 435                                type == RTM_DELROUTE ? "Removing" : route ? "Updating" : "Adding",
 436                                strna(buf_dst), strempty(buf_dst_prefixlen),
 437                                strna(buf_src), strna(buf_gw), strna(buf_prefsrc));
 438         }
 439
 440         switch (type) {
 441         case RTM_NEWROUTE:
 442                 if (!route) {
 443                         /* A route appeared that we did not request */
 444                         r = route_add_foreign(link, family, &dst, dst_prefixlen, tos, priority, table, &route);
 445                         if (r < 0) {
 446                                 log_link_warning_errno(link, r, "Failed to add route, ignoring: %m");
 447                                 return 0;
 448                         }
 449                 }
 450
 451                 route_update(route, &src, src_prefixlen, &gw, &prefsrc, scope, protocol, rt_type);
 452
 453                 break;
 454
 455         case RTM_DELROUTE:
 456                 route_free(route);
 457                 break;
 458
 459         default:
 460                 assert_not_reached("Received invalid RTNL message type");
 461         }
 462
 463         return 1;
 464 }
 465
 466 int manager_rtnl_process_address(sd_netlink *rtnl, sd_netlink_message *message, void *userdata) {
 467         Manager *m = userdata;
 468         Link *link = NULL;
 469         uint16_t type;
 470         unsigned char flags;
 471         int family;
 472         unsigned char prefixlen;
 473         unsigned char scope;
 474         union in_addr_union in_addr;
 475         struct ifa_cacheinfo cinfo;
 476         Address *address = NULL;
 477         char buf[INET6_ADDRSTRLEN], valid_buf[FORMAT_TIMESPAN_MAX];
 478         const char *valid_str = NULL;
 479         int r, ifindex;
 480
 481         assert(rtnl);
 482         assert(message);
 483         assert(m);
 484
 485         if (sd_netlink_message_is_error(message)) {
 486                 r = sd_netlink_message_get_errno(message);
 487                 if (r < 0)
 488                         log_warning_errno(r, "rtnl: failed to receive address, ignoring: %m");
 489
 490                 return 0;
 491         }
 492
 493         r = sd_netlink_message_get_type(message, &type);
 494         if (r < 0) {
 495                 log_warning_errno(r, "rtnl: could not get message type, ignoring: %m");
 496                 return 0;
 497         } else if (!IN_SET(type, RTM_NEWADDR, RTM_DELADDR)) {
 498                 log_warning("rtnl: received unexpected message type when processing address, ignoring");
 499                 return 0;
 500         }
 501
 502         r = sd_rtnl_message_addr_get_ifindex(message, &ifindex);
 503         if (r < 0) {
 504                 log_warning_errno(r, "rtnl: could not get ifindex from address, ignoring: %m");
 505                 return 0;
 506         } else if (ifindex <= 0) {
 507                 log_warning("rtnl: received address message with invalid ifindex, ignoring: %d", ifindex);
 508                 return 0;
 509         } else {
 510                 r = link_get(m, ifindex, &link);
 511                 if (r < 0 || !link) {
 512                         /* when enumerating we might be out of sync, but we will
 513                          * get the address again, so just ignore it */
 514                         if (!m->enumerating)
 515                                 log_warning("rtnl: received address for nonexistent link (%d), ignoring", ifindex);
 516                         return 0;
 517                 }
 518         }
 519
 520         r = sd_rtnl_message_addr_get_family(message, &family);
 521         if (r < 0 || !IN_SET(family, AF_INET, AF_INET6)) {
 522                 log_link_warning(link, "rtnl: received address with invalid family, ignoring");
 523                 return 0;
 524         }
 525
 526         r = sd_rtnl_message_addr_get_prefixlen(message, &prefixlen);
 527         if (r < 0) {
 528                 log_link_warning_errno(link, r, "rtnl: received address with invalid prefixlen, ignoring: %m");
 529                 return 0;
 530         }
 531
 532         r = sd_rtnl_message_addr_get_scope(message, &scope);
 533         if (r < 0) {
 534                 log_link_warning_errno(link, r, "rtnl: received address with invalid scope, ignoring: %m");
 535                 return 0;
 536         }
 537
 538         r = sd_rtnl_message_addr_get_flags(message, &flags);
 539         if (r < 0) {
 540                 log_link_warning_errno(link, r, "rtnl: received address with invalid flags, ignoring: %m");
 541                 return 0;
 542         }
 543
 544         switch (family) {
 545         case AF_INET:
 546                 r = sd_netlink_message_read_in_addr(message, IFA_LOCAL, &in_addr.in);
 547                 if (r < 0) {
 548                         log_link_warning_errno(link, r, "rtnl: received address without valid address, ignoring: %m");
 549                         return 0;
 550                 }
 551
 552                 break;
 553
 554         case AF_INET6:
 555                 r = sd_netlink_message_read_in6_addr(message, IFA_ADDRESS, &in_addr.in6);
 556                 if (r < 0) {
 557                         log_link_warning_errno(link, r, "rtnl: received address without valid address, ignoring: %m");
 558                         return 0;
 559                 }
 560
 561                 break;
 562
 563         default:
 564                 assert_not_reached("Received unsupported address family");
 565         }
 566
 567         if (!inet_ntop(family, &in_addr, buf, INET6_ADDRSTRLEN)) {
 568                 log_link_warning(link, "Could not print address, ignoring");
 569                 return 0;
 570         }
 571
 572         r = sd_netlink_message_read_cache_info(message, IFA_CACHEINFO, &cinfo);
 573         if (r < 0 && r != -ENODATA) {
 574                 log_link_warning_errno(link, r, "rtnl: cannot get IFA_CACHEINFO attribute, ignoring: %m");
 575                 return 0;
 576         } else if (r >= 0) {
 577                 if (cinfo.ifa_valid != CACHE_INFO_INFINITY_LIFE_TIME)
 578                         valid_str = format_timespan(valid_buf, FORMAT_TIMESPAN_MAX,
 579                                                     cinfo.ifa_valid * USEC_PER_SEC,
 580                                                     USEC_PER_SEC);
 581         }
 582
 583         (void) address_get(link, family, &in_addr, prefixlen, &address);
 584
 585         switch (type) {
 586         case RTM_NEWADDR:
 587                 if (address)
 588                         log_link_debug(link, "Updating address: %s/%u (valid %s%s)", buf, prefixlen,
 589                                        valid_str ? "for " : "forever", strempty(valid_str));
 590                 else {
 591                         /* An address appeared that we did not request */
 592                         r = address_add_foreign(link, family, &in_addr, prefixlen, &address);
 593                         if (r < 0) {
 594                                 log_link_warning_errno(link, r, "Failed to add address %s/%u, ignoring: %m", buf, prefixlen);
 595                                 return 0;
 596                         } else
 597                                 log_link_debug(link, "Adding address: %s/%u (valid %s%s)", buf, prefixlen,
 598                                                valid_str ? "for " : "forever", strempty(valid_str));
 599                 }
 600
 601                 r = address_update(address, flags, scope, &cinfo);
 602                 if (r < 0) {
 603                         log_link_warning_errno(link, r, "Failed to update address %s/%u, ignoring: %m", buf, prefixlen);
 604                         return 0;
 605                 }
 606
 607                 break;
 608
 609         case RTM_DELADDR:
 610
 611                 if (address) {
 612                         log_link_debug(link, "Removing address: %s/%u (valid %s%s)", buf, prefixlen,
 613                                        valid_str ? "for " : "forever", strempty(valid_str));
 614                         (void) address_drop(address);
 615                 } else
 616                         log_link_warning(link, "Removing non-existent address: %s/%u (valid %s%s), ignoring", buf, prefixlen,
 617                                          valid_str ? "for " : "forever", strempty(valid_str));
 618
 619                 break;
 620         default:
 621                 assert_not_reached("Received invalid RTNL message type");
 622         }
 623
 624         return 1;
 625 }
 626
 627 static int manager_rtnl_process_link(sd_netlink *rtnl, sd_netlink_message *message, void *userdata) {
 628         Manager *m = userdata;
 629         Link *link = NULL;
 630         NetDev *netdev = NULL;
 631         uint16_t type;
 632         const char *name;
 633         int r, ifindex;
 634
 635         assert(rtnl);
 636         assert(message);
 637         assert(m);
 638
 639         if (sd_netlink_message_is_error(message)) {
 640                 r = sd_netlink_message_get_errno(message);
 641                 if (r < 0)
 642                         log_warning_errno(r, "rtnl: Could not receive link, ignoring: %m");
 643
 644                 return 0;
 645         }
 646
 647         r = sd_netlink_message_get_type(message, &type);
 648         if (r < 0) {
 649                 log_warning_errno(r, "rtnl: Could not get message type, ignoring: %m");
 650                 return 0;
 651         } else if (!IN_SET(type, RTM_NEWLINK, RTM_DELLINK)) {
 652                 log_warning("rtnl: Received unexpected message type when processing link, ignoring");
 653                 return 0;
 654         }
 655
 656         r = sd_rtnl_message_link_get_ifindex(message, &ifindex);
 657         if (r < 0) {
 658                 log_warning_errno(r, "rtnl: Could not get ifindex from link, ignoring: %m");
 659                 return 0;
 660         } else if (ifindex <= 0) {
 661                 log_warning("rtnl: received link message with invalid ifindex %d, ignoring", ifindex);
 662                 return 0;
 663         }
 664
 665         r = sd_netlink_message_read_string(message, IFLA_IFNAME, &name);
 666         if (r < 0) {
 667                 log_warning_errno(r, "rtnl: Received link message without ifname, ignoring: %m");
 668                 return 0;
 669         }
 670
 671         (void) link_get(m, ifindex, &link);
 672         (void) netdev_get(m, name, &netdev);
 673
 674         switch (type) {
 675         case RTM_NEWLINK:
 676                 if (!link) {
 677                         /* link is new, so add it */
 678                         r = link_add(m, message, &link);
 679                         if (r < 0) {
 680                                 log_warning_errno(r, "Could not add new link, ignoring: %m");
 681                                 return 0;
 682                         }
 683                 }
 684
 685                 if (netdev) {
 686                         /* netdev exists, so make sure the ifindex matches */
 687                         r = netdev_set_ifindex(netdev, message);
 688                         if (r < 0) {
 689                                 log_warning_errno(r, "Could not set ifindex on netdev, ignoring: %m");
 690                                 return 0;
 691                         }
 692                 }
 693
 694                 r = link_update(link, message);
 695                 if (r < 0) {
 696                         log_warning_errno(r, "Could not update link, ignoring: %m");
 697                         return 0;
 698                 }
 699
 700                 break;
 701
 702         case RTM_DELLINK:
 703                 link_drop(link);
 704                 netdev_drop(netdev);
 705
 706                 break;
 707
 708         default:
 709                 assert_not_reached("Received invalid RTNL message type.");
 710         }
 711
 712         return 1;
 713 }
 714
 715 int manager_rtnl_process_rule(sd_netlink *rtnl, sd_netlink_message *message, void *userdata) {
 716         uint8_t tos = 0, to_prefixlen = 0, from_prefixlen = 0, protocol = 0;
 717         struct fib_rule_port_range sport = {}, dport = {};
 718         union in_addr_union to = {}, from = {};
 719         RoutingPolicyRule *rule = NULL;
 720         uint32_t fwmark = 0, table = 0;
 721         const char *iif = NULL, *oif = NULL;
 722         Manager *m = userdata;
 723         uint16_t type;
 724         int family;
 725         int r;
 726
 727         assert(rtnl);
 728         assert(message);
 729         assert(m);
 730
 731         if (sd_netlink_message_is_error(message)) {
 732                 r = sd_netlink_message_get_errno(message);
 733                 if (r < 0)
 734                         log_warning_errno(r, "rtnl: failed to receive rule, ignoring: %m");
 735
 736                 return 0;
 737         }
 738
 739         r = sd_netlink_message_get_type(message, &type);
 740         if (r < 0) {
 741                 log_warning_errno(r, "rtnl: could not get message type, ignoring: %m");
 742                 return 0;
 743         } else if (!IN_SET(type, RTM_NEWRULE, RTM_DELRULE)) {
 744                 log_warning("rtnl: received unexpected message type '%u' when processing rule, ignoring", type);
 745                 return 0;
 746         }
 747
 748         r = sd_rtnl_message_get_family(message, &family);
 749         if (r < 0) {
 750                 log_warning_errno(r, "rtnl: could not get rule family, ignoring: %m");
 751                 return 0;
 752         } else if (!IN_SET(family, AF_INET, AF_INET6)) {
 753                 log_debug("rtnl: received address with invalid family %u, ignoring", family);
 754                 return 0;
 755         }
 756
 757         switch (family) {
 758         case AF_INET:
 759                 r = sd_netlink_message_read_in_addr(message, FRA_SRC, &from.in);
 760                 if (r < 0 && r != -ENODATA) {
 761                         log_warning_errno(r, "rtnl: could not get FRA_SRC attribute, ignoring: %m");
 762                         return 0;
 763                 } else if (r >= 0) {
 764                         r = sd_rtnl_message_routing_policy_rule_get_rtm_src_prefixlen(message, &from_prefixlen);
 765                         if (r < 0) {
 766                                 log_warning_errno(r, "rtnl: failed to retrieve rule from prefix length, ignoring: %m");
 767                                 return 0;
 768                         }
 769                 }
 770
 771                 r = sd_netlink_message_read_in_addr(message, FRA_DST, &to.in);
 772                 if (r < 0 && r != -ENODATA) {
 773                         log_warning_errno(r, "rtnl: could not get FRA_DST attribute, ignoring: %m");
 774                         return 0;
 775                 } else if (r >= 0) {
 776                         r = sd_rtnl_message_routing_policy_rule_get_rtm_dst_prefixlen(message, &to_prefixlen);
 777                         if (r < 0) {
 778                                 log_warning_errno(r, "rtnl: failed to retrieve rule to prefix length, ignoring: %m");
 779                                 return 0;
 780                         }
 781                 }
 782
 783                 break;
 784
 785         case AF_INET6:
 786                 r = sd_netlink_message_read_in6_addr(message, FRA_SRC, &from.in6);
 787                 if (r < 0 && r != -ENODATA) {
 788                         log_warning_errno(r, "rtnl: could not get FRA_SRC attribute, ignoring: %m");
 789                         return 0;
 790                 } else if (r >= 0) {
 791                         r = sd_rtnl_message_routing_policy_rule_get_rtm_src_prefixlen(message, &from_prefixlen);
 792                         if (r < 0) {
 793                                 log_warning_errno(r, "rtnl: failed to retrieve rule from prefix length, ignoring: %m");
 794                                 return 0;
 795                         }
 796                 }
 797
 798                 r = sd_netlink_message_read_in6_addr(message, FRA_DST, &to.in6);
 799                 if (r < 0 && r != -ENODATA) {
 800                         log_warning_errno(r, "rtnl: could not get FRA_DST attribute, ignoring: %m");
 801                         return 0;
 802                 } else if (r >= 0) {
 803                         r = sd_rtnl_message_routing_policy_rule_get_rtm_dst_prefixlen(message, &to_prefixlen);
 804                         if (r < 0) {
 805                                 log_warning_errno(r, "rtnl: failed to retrieve rule to prefix length, ignoring: %m");
 806                                 return 0;
 807                         }
 808                 }
 809
 810                 break;
 811
 812         default:
 813                 assert_not_reached("Received unsupported address family");
 814         }
 815
 816         if (from_prefixlen == 0 && to_prefixlen == 0)
 817                 return 0;
 818
 819         r = sd_netlink_message_read_u32(message, FRA_FWMARK, &fwmark);
 820         if (r < 0 && r != -ENODATA) {
 821                 log_warning_errno(r, "rtnl: could not get FRA_FWMARK attribute, ignoring: %m");
 822                 return 0;
 823         }
 824
 825         r = sd_netlink_message_read_u32(message, FRA_TABLE, &table);
 826         if (r < 0 && r != -ENODATA) {
 827                 log_warning_errno(r, "rtnl: could not get FRA_TABLE attribute, ignoring: %m");
 828                 return 0;
 829         }
 830
 831         r = sd_rtnl_message_routing_policy_rule_get_tos(message, &tos);
 832         if (r < 0 && r != -ENODATA) {
 833                 log_warning_errno(r, "rtnl: could not get ip rule TOS, ignoring: %m");
 834                 return 0;
 835         }
 836
 837         r = sd_netlink_message_read_string(message, FRA_IIFNAME, &iif);
 838         if (r < 0 && r != -ENODATA) {
 839                 log_warning_errno(r, "rtnl: could not get FRA_IIFNAME attribute, ignoring: %m");
 840                 return 0;
 841         }
 842
 843         r = sd_netlink_message_read_string(message, FRA_OIFNAME, &oif);
 844         if (r < 0 && r != -ENODATA) {
 845                 log_warning_errno(r, "rtnl: could not get FRA_OIFNAME attribute, ignoring: %m");
 846                 return 0;
 847         }
 848
 849         r = sd_netlink_message_read_u8(message, FRA_IP_PROTO, &protocol);
 850         if (r < 0 && r != -ENODATA) {
 851                 log_warning_errno(r, "rtnl: could not get FRA_IP_PROTO attribute, ignoring: %m");
 852                 return 0;
 853         }
 854
 855         r = sd_netlink_message_read(message, FRA_SPORT_RANGE, sizeof(sport), (void *) &sport);
 856         if (r < 0 && r != -ENODATA) {
 857                 log_warning_errno(r, "rtnl: could not get FRA_SPORT_RANGE attribute, ignoring: %m");
 858                 return 0;
 859         }
 860
 861         r = sd_netlink_message_read(message, FRA_DPORT_RANGE, sizeof(dport), (void *) &dport);
 862         if (r < 0 && r != -ENODATA) {
 863                 log_warning_errno(r, "rtnl: could not get FRA_DPORT_RANGE attribute, ignoring: %m");
 864                 return 0;
 865         }
 866
 867         (void) routing_policy_rule_get(m, family, &from, from_prefixlen, &to, to_prefixlen, tos, fwmark, table, iif, oif, protocol, &sport, &dport, &rule);
 868
 869         switch (type) {
 870         case RTM_NEWRULE:
 871                 if (!rule) {
 872                         r = routing_policy_rule_add_foreign(m, family, &from, from_prefixlen, &to, to_prefixlen, tos, fwmark, table, iif, oif, protocol, &sport, &dport, &rule);
 873                         if (r < 0) {
 874                                 log_warning_errno(r, "Could not add rule, ignoring: %m");
 875                                 return 0;
 876                         }
 877                 }
 878                 break;
 879         case RTM_DELRULE:
 880                 routing_policy_rule_free(rule);
 881
 882                 break;
 883
 884         default:
 885                 assert_not_reached("Received invalid RTNL message type");
 886         }
 887
 888         return 1;
 889 }
 890
 891 static int systemd_netlink_fd(void) {
 892         int n, fd, rtnl_fd = -EINVAL;
 893
 894         n = sd_listen_fds(true);
 895         if (n <= 0)
 896                 return -EINVAL;
 897
 898         for (fd = SD_LISTEN_FDS_START; fd < SD_LISTEN_FDS_START + n; fd ++) {
 899                 if (sd_is_socket(fd, AF_NETLINK, SOCK_RAW, -1) > 0) {
 900                         if (rtnl_fd >= 0)
 901                                 return -EINVAL;
 902
 903                         rtnl_fd = fd;
 904                 }
 905         }
 906
 907         return rtnl_fd;
 908 }
 909
 910 static int manager_connect_genl(Manager *m) {
 911         int r;
 912
 913         assert(m);
 914
 915         r = sd_genl_socket_open(&m->genl);
 916         if (r < 0)
 917                 return r;
 918
 919         r = sd_netlink_inc_rcvbuf(m->genl, RCVBUF_SIZE);
 920         if (r < 0)
 921                 return r;
 922
 923         r = sd_netlink_attach_event(m->genl, m->event, 0);
 924         if (r < 0)
 925                 return r;
 926
 927         return 0;
 928 }
 929
 930 static int manager_connect_rtnl(Manager *m) {
 931         int fd, r;
 932
 933         assert(m);
 934
 935         fd = systemd_netlink_fd();
 936         if (fd < 0)
 937                 r = sd_netlink_open(&m->rtnl);
 938         else
 939                 r = sd_netlink_open_fd(&m->rtnl, fd);
 940         if (r < 0)
 941                 return r;
 942
 943         r = sd_netlink_inc_rcvbuf(m->rtnl, RCVBUF_SIZE);
 944         if (r < 0)
 945                 return r;
 946
 947         r = sd_netlink_attach_event(m->rtnl, m->event, 0);
 948         if (r < 0)
 949                 return r;
 950
 951         r = sd_netlink_add_match(m->rtnl, NULL, RTM_NEWLINK, &manager_rtnl_process_link, NULL, m, "network-rtnl_process_link");
 952         if (r < 0)
 953                 return r;
 954
 955         r = sd_netlink_add_match(m->rtnl, NULL, RTM_DELLINK, &manager_rtnl_process_link, NULL, m, "network-rtnl_process_link");
 956         if (r < 0)
 957                 return r;
 958
 959         r = sd_netlink_add_match(m->rtnl, NULL, RTM_NEWADDR, &manager_rtnl_process_address, NULL, m, "network-rtnl_process_address");
 960         if (r < 0)
 961                 return r;
 962
 963         r = sd_netlink_add_match(m->rtnl, NULL, RTM_DELADDR, &manager_rtnl_process_address, NULL, m, "network-rtnl_process_address");
 964         if (r < 0)
 965                 return r;
 966
 967         r = sd_netlink_add_match(m->rtnl, NULL, RTM_NEWROUTE, &manager_rtnl_process_route, NULL, m, "network-rtnl_process_route");
 968         if (r < 0)
 969                 return r;
 970
 971         r = sd_netlink_add_match(m->rtnl, NULL, RTM_DELROUTE, &manager_rtnl_process_route, NULL, m, "network-rtnl_process_route");
 972         if (r < 0)
 973                 return r;
 974
 975         r = sd_netlink_add_match(m->rtnl, NULL, RTM_NEWRULE, &manager_rtnl_process_rule, NULL, m, "network-rtnl_process_rule");
 976         if (r < 0)
 977                 return r;
 978
 979         r = sd_netlink_add_match(m->rtnl, NULL, RTM_DELRULE, &manager_rtnl_process_rule, NULL, m, "network-rtnl_process_rule");
 980         if (r < 0)
 981                 return r;
 982
 983         return 0;
 984 }
 985
 986 static int ordered_set_put_in_addr_data(OrderedSet *s, const struct in_addr_data *address) {
 987         char *p;
 988         int r;
 989
 990         assert(s);
 991         assert(address);
 992
 993         r = in_addr_to_string(address->family, &address->address, &p);
 994         if (r < 0)
 995                 return r;
 996
 997         r = ordered_set_consume(s, p);
 998         if (r == -EEXIST)
 999                 return 0;
1000
1001         return r;
1002 }
1003
1004 static int ordered_set_put_in_addr_datav(OrderedSet *s, const struct in_addr_data *addresses, unsigned n) {
1005         int r, c = 0;
1006         unsigned i;
1007
1008         assert(s);
1009         assert(addresses || n == 0);
1010
1011         for (i = 0; i < n; i++) {
1012                 r = ordered_set_put_in_addr_data(s, addresses+i);
1013                 if (r < 0)
1014                         return r;
1015
1016                 c += r;
1017         }
1018
1019         return c;
1020 }
1021
1022 static int ordered_set_put_in4_addr(OrderedSet *s, const struct in_addr *address) {
1023         char *p;
1024         int r;
1025
1026         assert(s);
1027         assert(address);
1028
1029         r = in_addr_to_string(AF_INET, (const union in_addr_union*) address, &p);
1030         if (r < 0)
1031                 return r;
1032
1033         r = ordered_set_consume(s, p);
1034         if (r == -EEXIST)
1035                 return 0;
1036
1037         return r;
1038 }
1039
1040 static int ordered_set_put_in4_addrv(OrderedSet *s,
1041                                      const struct in_addr *addresses,
1042                                      size_t n,
1043                                      bool (*predicate)(const struct in_addr *addr)) {
1044         int r, c = 0;
1045         size_t i;
1046
1047         assert(s);
1048         assert(n == 0 || addresses);
1049
1050         for (i = 0; i < n; i++) {
1051                 if (predicate && !predicate(&addresses[i]))
1052                         continue;
1053                 r = ordered_set_put_in4_addr(s, addresses+i);
1054                 if (r < 0)
1055                         return r;
1056
1057                 c += r;
1058         }
1059
1060         return c;
1061 }
1062
1063 static int manager_save(Manager *m) {
1064         _cleanup_ordered_set_free_free_ OrderedSet *dns = NULL, *ntp = NULL, *search_domains = NULL, *route_domains = NULL;
1065         Link *link;
1066         Iterator i;
1067         _cleanup_free_ char *temp_path = NULL;
1068         _cleanup_fclose_ FILE *f = NULL;
1069         LinkOperationalState operstate = LINK_OPERSTATE_OFF;
1070         const char *operstate_str;
1071         int r;
1072
1073         assert(m);
1074         assert(m->state_file);
1075
1076         /* We add all NTP and DNS server to a set, to filter out duplicates */
1077         dns = ordered_set_new(&string_hash_ops);
1078         if (!dns)
1079                 return -ENOMEM;
1080
1081         ntp = ordered_set_new(&string_hash_ops);
1082         if (!ntp)
1083                 return -ENOMEM;
1084
1085         search_domains = ordered_set_new(&dns_name_hash_ops);
1086         if (!search_domains)
1087                 return -ENOMEM;
1088
1089         route_domains = ordered_set_new(&dns_name_hash_ops);
1090         if (!route_domains)
1091                 return -ENOMEM;
1092
1093         HASHMAP_FOREACH(link, m->links, i) {
1094                 if (link->flags & IFF_LOOPBACK)
1095                         continue;
1096
1097                 if (link->operstate > operstate)
1098                         operstate = link->operstate;
1099
1100                 if (!link->network)
1101                         continue;
1102
1103                 /* First add the static configured entries */
1104                 r = ordered_set_put_in_addr_datav(dns, link->network->dns, link->network->n_dns);
1105                 if (r < 0)
1106                         return r;
1107
1108                 r = ordered_set_put_strdupv(ntp, link->network->ntp);
1109                 if (r < 0)
1110                         return r;
1111
1112                 r = ordered_set_put_string_set(search_domains, link->network->search_domains);
1113                 if (r < 0)
1114                         return r;
1115
1116                 r = ordered_set_put_string_set(route_domains, link->network->route_domains);
1117                 if (r < 0)
1118                         return r;
1119
1120                 if (!link->dhcp_lease)
1121                         continue;
1122
1123                 /* Secondly, add the entries acquired via DHCP */
1124                 if (link->network->dhcp_use_dns) {
1125                         const struct in_addr *addresses;
1126
1127                         r = sd_dhcp_lease_get_dns(link->dhcp_lease, &addresses);
1128                         if (r > 0) {
1129                                 r = ordered_set_put_in4_addrv(dns, addresses, r, in4_addr_is_non_local);
1130                                 if (r < 0)
1131                                         return r;
1132                         } else if (r < 0 && r != -ENODATA)
1133                                 return r;
1134                 }
1135
1136                 if (link->network->dhcp_use_ntp) {
1137                         const struct in_addr *addresses;
1138
1139                         r = sd_dhcp_lease_get_ntp(link->dhcp_lease, &addresses);
1140                         if (r > 0) {
1141                                 r = ordered_set_put_in4_addrv(ntp, addresses, r, in4_addr_is_non_local);
1142                                 if (r < 0)
1143                                         return r;
1144                         } else if (r < 0 && r != -ENODATA)
1145                                 return r;
1146                 }
1147
1148                 if (link->network->dhcp_use_domains != DHCP_USE_DOMAINS_NO) {
1149                         const char *domainname;
1150                         char **domains = NULL;
1151
1152                         OrderedSet *target_domains = (link->network->dhcp_use_domains == DHCP_USE_DOMAINS_YES) ? search_domains : route_domains;
1153                         r = sd_dhcp_lease_get_domainname(link->dhcp_lease, &domainname);
1154                         if (r >= 0) {
1155                                 r = ordered_set_put_strdup(target_domains, domainname);
1156                                 if (r < 0)
1157                                         return r;
1158                         } else if (r != -ENODATA)
1159                                 return r;
1160
1161                         r = sd_dhcp_lease_get_search_domains(link->dhcp_lease, &domains);
1162                         if (r >= 0) {
1163                                 r = ordered_set_put_strdupv(target_domains, domains);
1164                                 if (r < 0)
1165                                         return r;
1166                         } else if (r != -ENODATA)
1167                                 return r;
1168                 }
1169         }
1170
1171         operstate_str = link_operstate_to_string(operstate);
1172         assert(operstate_str);
1173
1174         r = fopen_temporary(m->state_file, &f, &temp_path);
1175         if (r < 0)
1176                 return r;
1177
1178         (void) __fsetlocking(f, FSETLOCKING_BYCALLER);
1179         (void) fchmod(fileno(f), 0644);
1180
1181         fprintf(f,
1182                 "# This is private data. Do not parse.\n"
1183                 "OPER_STATE=%s\n", operstate_str);
1184
1185         ordered_set_print(f, "DNS=", dns);
1186         ordered_set_print(f, "NTP=", ntp);
1187         ordered_set_print(f, "DOMAINS=", search_domains);
1188         ordered_set_print(f, "ROUTE_DOMAINS=", route_domains);
1189
1190         r = routing_policy_serialize_rules(m->rules, f);
1191         if (r < 0)
1192                 goto fail;
1193
1194         r = fflush_and_check(f);
1195         if (r < 0)
1196                 goto fail;
1197
1198         if (rename(temp_path, m->state_file) < 0) {
1199                 r = -errno;
1200                 goto fail;
1201         }
1202
1203         if (m->operational_state != operstate) {
1204                 m->operational_state = operstate;
1205                 r = manager_send_changed(m, "OperationalState", NULL);
1206                 if (r < 0)
1207                         log_error_errno(r, "Could not emit changed OperationalState: %m");
1208         }
1209
1210         m->dirty = false;
1211
1212         return 0;
1213
1214 fail:
1215         (void) unlink(m->state_file);
1216         (void) unlink(temp_path);
1217
1218         return log_error_errno(r, "Failed to save network state to %s: %m", m->state_file);
1219 }
1220
1221 static int manager_dirty_handler(sd_event_source *s, void *userdata) {
1222         Manager *m = userdata;
1223         Link *link;
1224         Iterator i;
1225
1226         assert(m);
1227
1228         if (m->dirty)
1229                 manager_save(m);
1230
1231         SET_FOREACH(link, m->dirty_links, i)
1232                 if (link_save(link) >= 0)
1233                         link_clean(link);
1234
1235         return 1;
1236 }
1237
1238 Link *manager_dhcp6_prefix_get(Manager *m, struct in6_addr *addr) {
1239         assert_return(m, NULL);
1240         assert_return(addr, NULL);
1241
1242         return hashmap_get(m->dhcp6_prefixes, addr);
1243 }
1244
1245 static int dhcp6_route_add_handler(sd_netlink *nl, sd_netlink_message *m, Link *link) {
1246         int r;
1247
1248         assert(link);
1249
1250         r = sd_netlink_message_get_errno(m);
1251         if (r < 0 && r != -EEXIST)
1252                 log_link_debug_errno(link, r, "Received error adding DHCPv6 Prefix Delegation route: %m");
1253
1254         return 0;
1255 }
1256
1257 static void dhcp6_prefixes_hash_func(const struct in6_addr *addr, struct siphash *state) {
1258         assert(addr);
1259
1260         siphash24_compress(addr, sizeof(*addr), state);
1261 }
1262
1263 static int dhcp6_prefixes_compare_func(const struct in6_addr *a, const struct in6_addr *b) {
1264         return memcmp(a, b, sizeof(*a));
1265 }
1266
1267 DEFINE_PRIVATE_HASH_OPS(dhcp6_prefixes_hash_ops, struct in6_addr, dhcp6_prefixes_hash_func, dhcp6_prefixes_compare_func);
1268
1269 int manager_dhcp6_prefix_add(Manager *m, struct in6_addr *addr, Link *link) {
1270         _cleanup_free_ char *buf = NULL;
1271         Route *route;
1272         int r;
1273
1274         assert_return(m, -EINVAL);
1275         assert_return(addr, -EINVAL);
1276
1277         r = route_add(link, AF_INET6, (union in_addr_union *) addr, 64,
1278                       0, 0, 0, &route);
1279         if (r < 0)
1280                 return r;
1281
1282         r = route_configure(route, link, dhcp6_route_add_handler);
1283         if (r < 0)
1284                 return r;
1285
1286         (void) in_addr_to_string(AF_INET6, (union in_addr_union *) addr, &buf);
1287         log_link_debug(link, "Adding prefix route %s/64", strnull(buf));
1288
1289         r = hashmap_ensure_allocated(&m->dhcp6_prefixes, &dhcp6_prefixes_hash_ops);
1290         if (r < 0)
1291                 return r;
1292
1293         return hashmap_put(m->dhcp6_prefixes, addr, link);
1294 }
1295
1296 static int dhcp6_route_remove_handler(sd_netlink *nl, sd_netlink_message *m, Link *link) {
1297         int r;
1298
1299         assert(link);
1300
1301         r = sd_netlink_message_get_errno(m);
1302         if (r < 0)
1303                 log_link_debug_errno(link, r, "Received error on DHCPv6 Prefix Delegation route removal: %m");
1304
1305         return 1;
1306 }
1307
1308 static int manager_dhcp6_prefix_remove(Manager *m, struct in6_addr *addr) {
1309         _cleanup_free_ char *buf = NULL;
1310         Route *route;
1311         Link *l;
1312         int r;
1313
1314         assert_return(m, -EINVAL);
1315         assert_return(addr, -EINVAL);
1316
1317         l = hashmap_remove(m->dhcp6_prefixes, addr);
1318         if (!l)
1319                 return -EINVAL;
1320
1321         (void) sd_radv_remove_prefix(l->radv, addr, 64);
1322         r = route_get(l, AF_INET6, (union in_addr_union *) addr, 64,
1323                       0, 0, 0, &route);
1324         if (r < 0)
1325                 return r;
1326
1327         r = route_remove(route, l, dhcp6_route_remove_handler);
1328         if (r < 0)
1329                 return r;
1330
1331         (void) in_addr_to_string(AF_INET6, (union in_addr_union *) addr, &buf);
1332         log_link_debug(l, "Removing prefix route %s/64", strnull(buf));
1333
1334         return 0;
1335 }
1336
1337 int manager_dhcp6_prefix_remove_all(Manager *m, Link *link) {
1338         struct in6_addr *addr;
1339         Iterator i;
1340         Link *l;
1341
1342         assert_return(m, -EINVAL);
1343         assert_return(link, -EINVAL);
1344
1345         HASHMAP_FOREACH_KEY(l, addr, m->dhcp6_prefixes, i) {
1346                 if (l != link)
1347                         continue;
1348
1349                 (void) manager_dhcp6_prefix_remove(m, addr);
1350         }
1351
1352         return 0;
1353 }
1354
1355 int manager_new(Manager **ret) {
1356         _cleanup_(manager_freep) Manager *m = NULL;
1357         int r;
1358
1359         m = new0(Manager, 1);
1360         if (!m)
1361                 return -ENOMEM;
1362
1363         m->state_file = strdup("/run/systemd/netif/state");
1364         if (!m->state_file)
1365                 return -ENOMEM;
1366
1367         m->sysctl_ipv6_enabled = -1;
1368
1369         r = sd_event_default(&m->event);
1370         if (r < 0)
1371                 return r;
1372
1373         (void) sd_event_set_watchdog(m->event, true);
1374         (void) sd_event_add_signal(m->event, NULL, SIGTERM, NULL, NULL);
1375         (void) sd_event_add_signal(m->event, NULL, SIGINT, NULL, NULL);
1376
1377         r = sd_event_add_post(m->event, NULL, manager_dirty_handler, m);
1378         if (r < 0)
1379                 return r;
1380
1381         r = manager_connect_rtnl(m);
1382         if (r < 0)
1383                 return r;
1384
1385         r = manager_connect_genl(m);
1386         if (r < 0)
1387                 return r;
1388
1389         r = manager_connect_udev(m);
1390         if (r < 0)
1391                 return r;
1392
1393         LIST_HEAD_INIT(m->networks);
1394
1395         r = sd_resolve_default(&m->resolve);
1396         if (r < 0)
1397                 return r;
1398
1399         r = sd_resolve_attach_event(m->resolve, m->event, 0);
1400         if (r < 0)
1401                 return r;
1402
1403         r = setup_default_address_pool(m);
1404         if (r < 0)
1405                 return r;
1406
1407         m->duid.type = DUID_TYPE_EN;
1408
1409         (void) routing_policy_load_rules(m->state_file, &m->rules_saved);
1410
1411         *ret = TAKE_PTR(m);
1412
1413         return 0;
1414 }
1415
1416 void manager_free(Manager *m) {
1417         AddressPool *pool;
1418         Network *network;
1419         Link *link;
1420
1421         if (!m)
1422                 return;
1423
1424         free(m->state_file);
1425
1426         sd_netlink_unref(m->rtnl);
1427         sd_netlink_unref(m->genl);
1428         sd_resolve_unref(m->resolve);
1429
1430         while ((link = hashmap_first(m->dhcp6_prefixes)))
1431                 manager_dhcp6_prefix_remove_all(m, link);
1432         hashmap_free(m->dhcp6_prefixes);
1433
1434         while ((link = hashmap_steal_first(m->links))) {
1435                 if (link->dhcp6_client)
1436                         (void) dhcp6_lease_pd_prefix_lost(link->dhcp6_client, link);
1437                 link_unref(link);
1438         }
1439
1440         m->dirty_links = set_free_with_destructor(m->dirty_links, link_unref);
1441         m->links = hashmap_free(m->links);
1442         m->links_requesting_uuid = set_free(m->links_requesting_uuid);
1443         set_free(m->duids_requesting_uuid);
1444
1445         while ((network = m->networks))
1446                 network_free(network);
1447
1448         hashmap_free(m->networks_by_name);
1449
1450         m->netdevs = hashmap_free_with_destructor(m->netdevs, netdev_unref);
1451
1452         while ((pool = m->address_pools))
1453                 address_pool_free(pool);
1454
1455         /* routing_policy_rule_free() access m->rules and m->rules_foreign.
1456          * So, it is necessary to set NULL after the sets are freed. */
1457         m->rules = set_free_with_destructor(m->rules, routing_policy_rule_free);
1458         m->rules_foreign = set_free_with_destructor(m->rules_foreign, routing_policy_rule_free);
1459         set_free_with_destructor(m->rules_saved, routing_policy_rule_free);
1460
1461         sd_event_unref(m->event);
1462
1463         sd_device_monitor_unref(m->device_monitor);
1464
1465         sd_bus_flush_close_unref(m->bus);
1466
1467         free(m->dynamic_timezone);
1468         free(m->dynamic_hostname);
1469
1470         free(m);
1471 }
1472
1473 int manager_start(Manager *m) {
1474         Link *link;
1475         Iterator i;
1476
1477         assert(m);
1478
1479         /* The dirty handler will deal with future serialization, but the first one
1480            must be done explicitly. */
1481
1482         manager_save(m);
1483
1484         HASHMAP_FOREACH(link, m->links, i)
1485                 link_save(link);
1486
1487         return 0;
1488 }
1489
1490 int manager_load_config(Manager *m) {
1491         int r;
1492
1493         /* update timestamp */
1494         paths_check_timestamp(NETWORK_DIRS, &m->network_dirs_ts_usec, true);
1495
1496         r = netdev_load(m);
1497         if (r < 0)
1498                 return r;
1499
1500         r = network_load(m);
1501         if (r < 0)
1502                 return r;
1503
1504         return 0;
1505 }
1506
1507 bool manager_should_reload(Manager *m) {
1508         return paths_check_timestamp(NETWORK_DIRS, &m->network_dirs_ts_usec, false);
1509 }
1510
1511 int manager_rtnl_enumerate_links(Manager *m) {
1512         _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL, *reply = NULL;
1513         sd_netlink_message *link;
1514         int r;
1515
1516         assert(m);
1517         assert(m->rtnl);
1518
1519         r = sd_rtnl_message_new_link(m->rtnl, &req, RTM_GETLINK, 0);
1520         if (r < 0)
1521                 return r;
1522
1523         r = sd_netlink_message_request_dump(req, true);
1524         if (r < 0)
1525                 return r;
1526
1527         r = sd_netlink_call(m->rtnl, req, 0, &reply);
1528         if (r < 0)
1529                 return r;
1530
1531         for (link = reply; link; link = sd_netlink_message_next(link)) {
1532                 int k;
1533
1534                 m->enumerating = true;
1535
1536                 k = manager_rtnl_process_link(m->rtnl, link, m);
1537                 if (k < 0)
1538                         r = k;
1539
1540                 m->enumerating = false;
1541         }
1542
1543         return r;
1544 }
1545
1546 int manager_rtnl_enumerate_addresses(Manager *m) {
1547         _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL, *reply = NULL;
1548         sd_netlink_message *addr;
1549         int r;
1550
1551         assert(m);
1552         assert(m->rtnl);
1553
1554         r = sd_rtnl_message_new_addr(m->rtnl, &req, RTM_GETADDR, 0, 0);
1555         if (r < 0)
1556                 return r;
1557
1558         r = sd_netlink_message_request_dump(req, true);
1559         if (r < 0)
1560                 return r;
1561
1562         r = sd_netlink_call(m->rtnl, req, 0, &reply);
1563         if (r < 0)
1564                 return r;
1565
1566         for (addr = reply; addr; addr = sd_netlink_message_next(addr)) {
1567                 int k;
1568
1569                 m->enumerating = true;
1570
1571                 k = manager_rtnl_process_address(m->rtnl, addr, m);
1572                 if (k < 0)
1573                         r = k;
1574
1575                 m->enumerating = false;
1576         }
1577
1578         return r;
1579 }
1580
1581 int manager_rtnl_enumerate_routes(Manager *m) {
1582         _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL, *reply = NULL;
1583         sd_netlink_message *route;
1584         int r;
1585
1586         assert(m);
1587         assert(m->rtnl);
1588
1589         r = sd_rtnl_message_new_route(m->rtnl, &req, RTM_GETROUTE, 0, 0);
1590         if (r < 0)
1591                 return r;
1592
1593         r = sd_netlink_message_request_dump(req, true);
1594         if (r < 0)
1595                 return r;
1596
1597         r = sd_netlink_call(m->rtnl, req, 0, &reply);
1598         if (r < 0)
1599                 return r;
1600
1601         for (route = reply; route; route = sd_netlink_message_next(route)) {
1602                 int k;
1603
1604                 m->enumerating = true;
1605
1606                 k = manager_rtnl_process_route(m->rtnl, route, m);
1607                 if (k < 0)
1608                         r = k;
1609
1610                 m->enumerating = false;
1611         }
1612
1613         return r;
1614 }
1615
1616 int manager_rtnl_enumerate_rules(Manager *m) {
1617         _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL, *reply = NULL;
1618         sd_netlink_message *rule;
1619         int r;
1620
1621         assert(m);
1622         assert(m->rtnl);
1623
1624         r = sd_rtnl_message_new_routing_policy_rule(m->rtnl, &req, RTM_GETRULE, 0);
1625         if (r < 0)
1626                 return r;
1627
1628         r = sd_netlink_message_request_dump(req, true);
1629         if (r < 0)
1630                 return r;
1631
1632         r = sd_netlink_call(m->rtnl, req, 0, &reply);
1633         if (r < 0) {
1634                 if (r == -EOPNOTSUPP) {
1635                         log_debug("FIB Rules are not supported by the kernel. Ignoring.");
1636                         return 0;
1637                 }
1638
1639                 return r;
1640         }
1641
1642         for (rule = reply; rule; rule = sd_netlink_message_next(rule)) {
1643                 int k;
1644
1645                 m->enumerating = true;
1646
1647                 k = manager_rtnl_process_rule(m->rtnl, rule, m);
1648                 if (k < 0)
1649                         r = k;
1650
1651                 m->enumerating = false;
1652         }
1653
1654         return r;
1655 }
1656
1657 int manager_address_pool_acquire(Manager *m, int family, unsigned prefixlen, union in_addr_union *found) {
1658         AddressPool *p;
1659         int r;
1660
1661         assert(m);
1662         assert(prefixlen > 0);
1663         assert(found);
1664
1665         LIST_FOREACH(address_pools, p, m->address_pools) {
1666                 if (p->family != family)
1667                         continue;
1668
1669                 r = address_pool_acquire(p, prefixlen, found);
1670                 if (r != 0)
1671                         return r;
1672         }
1673
1674         return 0;
1675 }
1676
1677 Link* manager_find_uplink(Manager *m, Link *exclude) {
1678         _cleanup_free_ struct local_address *gateways = NULL;
1679         int n, i;
1680
1681         assert(m);
1682
1683         /* Looks for a suitable "uplink", via black magic: an
1684          * interface that is up and where the default route with the
1685          * highest priority points to. */
1686
1687         n = local_gateways(m->rtnl, 0, AF_UNSPEC, &gateways);
1688         if (n < 0) {
1689                 log_warning_errno(n, "Failed to determine list of default gateways: %m");
1690                 return NULL;
1691         }
1692
1693         for (i = 0; i < n; i++) {
1694                 Link *link;
1695
1696                 link = hashmap_get(m->links, INT_TO_PTR(gateways[i].ifindex));
1697                 if (!link) {
1698                         log_debug("Weird, found a gateway for a link we don't know. Ignoring.");
1699                         continue;
1700                 }
1701
1702                 if (link == exclude)
1703                         continue;
1704
1705                 if (link->operstate < LINK_OPERSTATE_ROUTABLE)
1706                         continue;
1707
1708                 return link;
1709         }
1710
1711         return NULL;
1712 }
1713
1714 void manager_dirty(Manager *manager) {
1715         assert(manager);
1716
1717         /* the serialized state in /run is no longer up-to-date */
1718         manager->dirty = true;
1719 }
1720
1721 static int set_hostname_handler(sd_bus_message *m, void *userdata, sd_bus_error *ret_error) {
1722         Manager *manager = userdata;
1723         const sd_bus_error *e;
1724
1725         assert(m);
1726         assert(manager);
1727
1728         e = sd_bus_message_get_error(m);
1729         if (e)
1730                 log_warning_errno(sd_bus_error_get_errno(e), "Could not set hostname: %s", e->message);
1731
1732         return 1;
1733 }
1734
1735 int manager_set_hostname(Manager *m, const char *hostname) {
1736         int r;
1737
1738         log_debug("Setting transient hostname: '%s'", strna(hostname));
1739
1740         if (free_and_strdup(&m->dynamic_hostname, hostname) < 0)
1741                 return log_oom();
1742
1743         if (!m->bus || sd_bus_is_ready(m->bus) <= 0) {
1744                 log_debug("Not connected to system bus, setting hostname later.");
1745                 return 0;
1746         }
1747
1748         r = sd_bus_call_method_async(
1749                         m->bus,
1750                         NULL,
1751                         "org.freedesktop.hostname1",
1752                         "/org/freedesktop/hostname1",
1753                         "org.freedesktop.hostname1",
1754                         "SetHostname",
1755                         set_hostname_handler,
1756                         m,
1757                         "sb",
1758                         hostname,
1759                         false);
1760
1761         if (r < 0)
1762                 return log_error_errno(r, "Could not set transient hostname: %m");
1763
1764         return 0;
1765 }
1766
1767 static int set_timezone_handler(sd_bus_message *m, void *userdata, sd_bus_error *ret_error) {
1768         Manager *manager = userdata;
1769         const sd_bus_error *e;
1770
1771         assert(m);
1772         assert(manager);
1773
1774         e = sd_bus_message_get_error(m);
1775         if (e)
1776                 log_warning_errno(sd_bus_error_get_errno(e), "Could not set timezone: %s", e->message);
1777
1778         return 1;
1779 }
1780
1781 int manager_set_timezone(Manager *m, const char *tz) {
1782         int r;
1783
1784         assert(m);
1785         assert(tz);
1786
1787         log_debug("Setting system timezone: '%s'", tz);
1788         if (free_and_strdup(&m->dynamic_timezone, tz) < 0)
1789                 return log_oom();
1790
1791         if (!m->bus || sd_bus_is_ready(m->bus) <= 0) {
1792                 log_debug("Not connected to system bus, setting timezone later.");
1793                 return 0;
1794         }
1795
1796         r = sd_bus_call_method_async(
1797                         m->bus,
1798                         NULL,
1799                         "org.freedesktop.timedate1",
1800                         "/org/freedesktop/timedate1",
1801                         "org.freedesktop.timedate1",
1802                         "SetTimezone",
1803                         set_timezone_handler,
1804                         m,
1805                         "sb",
1806                         tz,
1807                         false);
1808         if (r < 0)
1809                 return log_error_errno(r, "Could not set timezone: %m");
1810
1811         return 0;
1812 }
1813
1814 int manager_request_product_uuid(Manager *m, Link *link) {
1815         int r;
1816
1817         assert(m);
1818
1819         if (m->has_product_uuid)
1820                 return 0;
1821
1822         log_debug("Requesting product UUID");
1823
1824         if (link) {
1825                 DUID *duid;
1826
1827                 assert_se(duid = link_get_duid(link));
1828
1829                 r = set_ensure_allocated(&m->links_requesting_uuid, NULL);
1830                 if (r < 0)
1831                         return log_oom();
1832
1833                 r = set_ensure_allocated(&m->duids_requesting_uuid, NULL);
1834                 if (r < 0)
1835                         return log_oom();
1836
1837                 r = set_put(m->links_requesting_uuid, link);
1838                 if (r < 0)
1839                         return log_oom();
1840
1841                 r = set_put(m->duids_requesting_uuid, duid);
1842                 if (r < 0)
1843                         return log_oom();
1844         }
1845
1846         if (!m->bus || sd_bus_is_ready(m->bus) <= 0) {
1847                 log_debug("Not connected to system bus, requesting product UUID later.");
1848                 return 0;
1849         }
1850
1851         r = sd_bus_call_method_async(
1852                         m->bus,
1853                         NULL,
1854                         "org.freedesktop.hostname1",
1855                         "/org/freedesktop/hostname1",
1856                         "org.freedesktop.hostname1",
1857                         "GetProductUUID",
1858                         get_product_uuid_handler,
1859                         m,
1860                         "b",
1861                         false);
1862         if (r < 0)
1863                 return log_warning_errno(r, "Failed to get product UUID: %m");
1864
1865         return 0;
1866 }
1867
1868 int manager_sysctl_ipv6_enabled(Manager *manager) {
1869         _cleanup_free_ char *value = NULL;
1870         int r;
1871
1872         if (manager->sysctl_ipv6_enabled >= 0)
1873                 return manager->sysctl_ipv6_enabled;
1874
1875         r = sysctl_read_ip_property(AF_INET6, "all", "disable_ipv6", &value);
1876         if (r < 0)
1877                 return log_warning_errno(r, "Failed to read net.ipv6.conf.all.disable_ipv6 sysctl property: %m");
1878
1879         manager->sysctl_ipv6_enabled = value[0] == '0';
1880         return manager->sysctl_ipv6_enabled;
1881 }