src/network/networkd-manager.c

   1 /* SPDX-License-Identifier: LGPL-2.1+ */
   2
   3 #include <sys/socket.h>
   4 #include <linux/if.h>
   5 #include <linux/fib_rules.h>
   6 #include <unistd.h>
   7
   8 #include "sd-daemon.h"
   9 #include "sd-netlink.h"
  10
  11 #include "alloc-util.h"
  12 #include "bus-util.h"
  13 #include "conf-parser.h"
  14 #include "def.h"
  15 #include "device-private.h"
  16 #include "device-util.h"
  17 #include "dns-domain.h"
  18 #include "fd-util.h"
  19 #include "fileio.h"
  20 #include "local-addresses.h"
  21 #include "netlink-util.h"
  22 #include "network-internal.h"
  23 #include "networkd-manager.h"
  24 #include "ordered-set.h"
  25 #include "path-util.h"
  26 #include "set.h"
  27 #include "strv.h"
  28 #include "sysctl-util.h"
  29 #include "tmpfile-util.h"
  30 #include "udev-util.h"
  31 #include "virt.h"
  32
  33 /* use 8 MB for receive socket kernel queue. */
  34 #define RCVBUF_SIZE    (8*1024*1024)
  35
  36 static int setup_default_address_pool(Manager *m) {
  37         AddressPool *p;
  38         int r;
  39
  40         assert(m);
  41
  42         /* Add in the well-known private address ranges. */
  43
  44         r = address_pool_new_from_string(m, &p, AF_INET6, "fd00::", 8);
  45         if (r < 0)
  46                 return r;
  47
  48         r = address_pool_new_from_string(m, &p, AF_INET, "10.0.0.0", 8);
  49         if (r < 0)
  50                 return r;
  51
  52         r = address_pool_new_from_string(m, &p, AF_INET, "172.16.0.0", 12);
  53         if (r < 0)
  54                 return r;
  55
  56         r = address_pool_new_from_string(m, &p, AF_INET, "192.168.0.0", 16);
  57         if (r < 0)
  58                 return r;
  59
  60         return 0;
  61 }
  62
  63 static int manager_reset_all(Manager *m) {
  64         Link *link;
  65         Iterator i;
  66         int r;
  67
  68         assert(m);
  69
  70         HASHMAP_FOREACH(link, m->links, i) {
  71                 r = link_carrier_reset(link);
  72                 if (r < 0)
  73                         log_link_warning_errno(link, r, "Could not reset carrier: %m");
  74         }
  75
  76         return 0;
  77 }
  78
  79 static int match_prepare_for_sleep(sd_bus_message *message, void *userdata, sd_bus_error *ret_error) {
  80         Manager *m = userdata;
  81         int b, r;
  82
  83         assert(message);
  84         assert(m);
  85
  86         r = sd_bus_message_read(message, "b", &b);
  87         if (r < 0) {
  88                 log_debug_errno(r, "Failed to parse PrepareForSleep signal: %m");
  89                 return 0;
  90         }
  91
  92         if (b)
  93                 return 0;
  94
  95         log_debug("Coming back from suspend, resetting all connections...");
  96
  97         (void) manager_reset_all(m);
  98
  99         return 0;
 100 }
 101
 102 static int on_connected(sd_bus_message *message, void *userdata, sd_bus_error *ret_error) {
 103         Manager *m = userdata;
 104
 105         assert(message);
 106         assert(m);
 107
 108         /* Did we get a timezone or transient hostname from DHCP while D-Bus wasn't up yet? */
 109         if (m->dynamic_hostname)
 110                 (void) manager_set_hostname(m, m->dynamic_hostname);
 111         if (m->dynamic_timezone)
 112                 (void) manager_set_timezone(m, m->dynamic_timezone);
 113         if (m->links_requesting_uuid)
 114                 (void) manager_request_product_uuid(m, NULL);
 115
 116         return 0;
 117 }
 118
 119 int manager_connect_bus(Manager *m) {
 120         int r;
 121
 122         assert(m);
 123
 124         if (m->bus)
 125                 return 0;
 126
 127         r = bus_open_system_watch_bind_with_description(&m->bus, "bus-api-network");
 128         if (r < 0)
 129                 return log_error_errno(r, "Failed to connect to bus: %m");
 130
 131         r = sd_bus_add_object_vtable(m->bus, NULL, "/org/freedesktop/network1", "org.freedesktop.network1.Manager", manager_vtable, m);
 132         if (r < 0)
 133                 return log_error_errno(r, "Failed to add manager object vtable: %m");
 134
 135         r = sd_bus_add_fallback_vtable(m->bus, NULL, "/org/freedesktop/network1/link", "org.freedesktop.network1.Link", link_vtable, link_object_find, m);
 136         if (r < 0)
 137                return log_error_errno(r, "Failed to add link object vtable: %m");
 138
 139         r = sd_bus_add_node_enumerator(m->bus, NULL, "/org/freedesktop/network1/link", link_node_enumerator, m);
 140         if (r < 0)
 141                 return log_error_errno(r, "Failed to add link enumerator: %m");
 142
 143         r = sd_bus_add_fallback_vtable(m->bus, NULL, "/org/freedesktop/network1/network", "org.freedesktop.network1.Network", network_vtable, network_object_find, m);
 144         if (r < 0)
 145                return log_error_errno(r, "Failed to add network object vtable: %m");
 146
 147         r = sd_bus_add_node_enumerator(m->bus, NULL, "/org/freedesktop/network1/network", network_node_enumerator, m);
 148         if (r < 0)
 149                 return log_error_errno(r, "Failed to add network enumerator: %m");
 150
 151         r = sd_bus_request_name_async(m->bus, NULL, "org.freedesktop.network1", 0, NULL, NULL);
 152         if (r < 0)
 153                 return log_error_errno(r, "Failed to request name: %m");
 154
 155         r = sd_bus_attach_event(m->bus, m->event, 0);
 156         if (r < 0)
 157                 return log_error_errno(r, "Failed to attach bus to event loop: %m");
 158
 159         r = sd_bus_match_signal_async(
 160                         m->bus,
 161                         NULL,
 162                         "org.freedesktop.DBus.Local",
 163                         NULL,
 164                         "org.freedesktop.DBus.Local",
 165                         "Connected",
 166                         on_connected, NULL, m);
 167         if (r < 0)
 168                 return log_error_errno(r, "Failed to request match on Connected signal: %m");
 169
 170         r = sd_bus_match_signal_async(
 171                         m->bus,
 172                         NULL,
 173                         "org.freedesktop.login1",
 174                         "/org/freedesktop/login1",
 175                         "org.freedesktop.login1.Manager",
 176                         "PrepareForSleep",
 177                         match_prepare_for_sleep, NULL, m);
 178         if (r < 0)
 179                 log_warning_errno(r, "Failed to request match for PrepareForSleep, ignoring: %m");
 180
 181         return 0;
 182 }
 183
 184 static int manager_udev_process_link(sd_device_monitor *monitor, sd_device *device, void *userdata) {
 185         Manager *m = userdata;
 186         DeviceAction action;
 187         Link *link = NULL;
 188         int r, ifindex;
 189
 190         assert(m);
 191         assert(device);
 192
 193         r = device_get_action(device, &action);
 194         if (r < 0) {
 195                 log_device_debug_errno(device, r, "Failed to get udev action, ignoring device: %m");
 196                 return 0;
 197         }
 198
 199         if (!IN_SET(action, DEVICE_ACTION_ADD, DEVICE_ACTION_CHANGE, DEVICE_ACTION_MOVE)) {
 200                 log_device_debug(device, "Ignoring udev %s event for device.", device_action_to_string(action));
 201                 return 0;
 202         }
 203
 204         r = sd_device_get_ifindex(device, &ifindex);
 205         if (r < 0) {
 206                 log_device_debug_errno(device, r, "Ignoring udev ADD event for device without ifindex or with invalid ifindex: %m");
 207                 return 0;
 208         }
 209
 210         r = device_is_renaming(device);
 211         if (r < 0) {
 212                 log_device_error_errno(device, r, "Failed to determine the device is renamed or not, ignoring '%s' uevent: %m",
 213                                        device_action_to_string(action));
 214                 return 0;
 215         }
 216         if (r > 0) {
 217                 log_device_debug(device, "Interface is under renaming, wait for the interface to be renamed: %m");
 218                 return 0;
 219         }
 220
 221         r = link_get(m, ifindex, &link);
 222         if (r < 0) {
 223                 if (r != -ENODEV)
 224                         log_debug_errno(r, "Failed to get link from ifindex %i, ignoring: %m", ifindex);
 225                 return 0;
 226         }
 227
 228         (void) link_initialized(link, device);
 229
 230         return 0;
 231 }
 232
 233 static int manager_connect_udev(Manager *m) {
 234         int r;
 235
 236         /* udev does not initialize devices inside containers,
 237          * so we rely on them being already initialized before
 238          * entering the container */
 239         if (detect_container() > 0)
 240                 return 0;
 241
 242         r = sd_device_monitor_new(&m->device_monitor);
 243         if (r < 0)
 244                 return log_error_errno(r, "Failed to initialize device monitor: %m");
 245
 246         r = sd_device_monitor_filter_add_match_subsystem_devtype(m->device_monitor, "net", NULL);
 247         if (r < 0)
 248                 return log_error_errno(r, "Could not add device monitor filter: %m");
 249
 250         r = sd_device_monitor_attach_event(m->device_monitor, m->event);
 251         if (r < 0)
 252                 return log_error_errno(r, "Failed to attach event to device monitor: %m");
 253
 254         r = sd_device_monitor_start(m->device_monitor, manager_udev_process_link, m);
 255         if (r < 0)
 256                 return log_error_errno(r, "Failed to start device monitor: %m");
 257
 258         return 0;
 259 }
 260
 261 int manager_rtnl_process_route(sd_netlink *rtnl, sd_netlink_message *message, void *userdata) {
 262         Manager *m = userdata;
 263         Link *link = NULL;
 264         uint16_t type;
 265         uint32_t ifindex, priority = 0;
 266         unsigned char protocol, scope, tos, table, rt_type;
 267         int family;
 268         unsigned char dst_prefixlen, src_prefixlen;
 269         union in_addr_union dst = {}, gw = {}, src = {}, prefsrc = {};
 270         Route *route = NULL;
 271         int r;
 272
 273         assert(rtnl);
 274         assert(message);
 275         assert(m);
 276
 277         if (sd_netlink_message_is_error(message)) {
 278                 r = sd_netlink_message_get_errno(message);
 279                 if (r < 0)
 280                         log_warning_errno(r, "rtnl: failed to receive route, ignoring: %m");
 281
 282                 return 0;
 283         }
 284
 285         r = sd_netlink_message_get_type(message, &type);
 286         if (r < 0) {
 287                 log_warning_errno(r, "rtnl: could not get message type, ignoring: %m");
 288                 return 0;
 289         } else if (!IN_SET(type, RTM_NEWROUTE, RTM_DELROUTE)) {
 290                 log_warning("rtnl: received unexpected message type when processing route, ignoring");
 291                 return 0;
 292         }
 293
 294         r = sd_netlink_message_read_u32(message, RTA_OIF, &ifindex);
 295         if (r == -ENODATA) {
 296                 log_debug("rtnl: received route without ifindex, ignoring");
 297                 return 0;
 298         } else if (r < 0) {
 299                 log_warning_errno(r, "rtnl: could not get ifindex from route, ignoring: %m");
 300                 return 0;
 301         } else if (ifindex <= 0) {
 302                 log_warning("rtnl: received route message with invalid ifindex, ignoring: %d", ifindex);
 303                 return 0;
 304         } else {
 305                 r = link_get(m, ifindex, &link);
 306                 if (r < 0 || !link) {
 307                         /* when enumerating we might be out of sync, but we will
 308                          * get the route again, so just ignore it */
 309                         if (!m->enumerating)
 310                                 log_warning("rtnl: received route for nonexistent link (%d), ignoring", ifindex);
 311                         return 0;
 312                 }
 313         }
 314
 315         r = sd_rtnl_message_route_get_family(message, &family);
 316         if (r < 0 || !IN_SET(family, AF_INET, AF_INET6)) {
 317                 log_link_warning(link, "rtnl: received address with invalid family, ignoring");
 318                 return 0;
 319         }
 320
 321         r = sd_rtnl_message_route_get_protocol(message, &protocol);
 322         if (r < 0) {
 323                 log_warning_errno(r, "rtnl: could not get route protocol: %m");
 324                 return 0;
 325         }
 326
 327         switch (family) {
 328         case AF_INET:
 329                 r = sd_netlink_message_read_in_addr(message, RTA_DST, &dst.in);
 330                 if (r < 0 && r != -ENODATA) {
 331                         log_link_warning_errno(link, r, "rtnl: received route without valid destination, ignoring: %m");
 332                         return 0;
 333                 }
 334
 335                 r = sd_netlink_message_read_in_addr(message, RTA_GATEWAY, &gw.in);
 336                 if (r < 0 && r != -ENODATA) {
 337                         log_link_warning_errno(link, r, "rtnl: received route with invalid gateway, ignoring: %m");
 338                         return 0;
 339                 }
 340
 341                 r = sd_netlink_message_read_in_addr(message, RTA_SRC, &src.in);
 342                 if (r < 0 && r != -ENODATA) {
 343                         log_link_warning_errno(link, r, "rtnl: received route with invalid source, ignoring: %m");
 344                         return 0;
 345                 }
 346
 347                 r = sd_netlink_message_read_in_addr(message, RTA_PREFSRC, &prefsrc.in);
 348                 if (r < 0 && r != -ENODATA) {
 349                         log_link_warning_errno(link, r, "rtnl: received route with invalid preferred source, ignoring: %m");
 350                         return 0;
 351                 }
 352
 353                 break;
 354
 355         case AF_INET6:
 356                 r = sd_netlink_message_read_in6_addr(message, RTA_DST, &dst.in6);
 357                 if (r < 0 && r != -ENODATA) {
 358                         log_link_warning_errno(link, r, "rtnl: received route without valid destination, ignoring: %m");
 359                         return 0;
 360                 }
 361
 362                 r = sd_netlink_message_read_in6_addr(message, RTA_GATEWAY, &gw.in6);
 363                 if (r < 0 && r != -ENODATA) {
 364                         log_link_warning_errno(link, r, "rtnl: received route with invalid gateway, ignoring: %m");
 365                         return 0;
 366                 }
 367
 368                 r = sd_netlink_message_read_in6_addr(message, RTA_SRC, &src.in6);
 369                 if (r < 0 && r != -ENODATA) {
 370                         log_link_warning_errno(link, r, "rtnl: received route with invalid source, ignoring: %m");
 371                         return 0;
 372                 }
 373
 374                 r = sd_netlink_message_read_in6_addr(message, RTA_PREFSRC, &prefsrc.in6);
 375                 if (r < 0 && r != -ENODATA) {
 376                         log_link_warning_errno(link, r, "rtnl: received route with invalid preferred source, ignoring: %m");
 377                         return 0;
 378                 }
 379
 380                 break;
 381
 382         default:
 383                 assert_not_reached("Received unsupported address family");
 384                 return 0;
 385         }
 386
 387         r = sd_rtnl_message_route_get_dst_prefixlen(message, &dst_prefixlen);
 388         if (r < 0) {
 389                 log_link_warning_errno(link, r, "rtnl: received route with invalid destination prefixlen, ignoring: %m");
 390                 return 0;
 391         }
 392
 393         r = sd_rtnl_message_route_get_src_prefixlen(message, &src_prefixlen);
 394         if (r < 0) {
 395                 log_link_warning_errno(link, r, "rtnl: received route with invalid source prefixlen, ignoring: %m");
 396                 return 0;
 397         }
 398
 399         r = sd_rtnl_message_route_get_scope(message, &scope);
 400         if (r < 0) {
 401                 log_link_warning_errno(link, r, "rtnl: received route with invalid scope, ignoring: %m");
 402                 return 0;
 403         }
 404
 405         r = sd_rtnl_message_route_get_tos(message, &tos);
 406         if (r < 0) {
 407                 log_link_warning_errno(link, r, "rtnl: received route with invalid tos, ignoring: %m");
 408                 return 0;
 409         }
 410
 411         r = sd_rtnl_message_route_get_type(message, &rt_type);
 412         if (r < 0) {
 413                 log_link_warning_errno(link, r, "rtnl: received route with invalid type, ignoring: %m");
 414                 return 0;
 415         }
 416
 417         r = sd_rtnl_message_route_get_table(message, &table);
 418         if (r < 0) {
 419                 log_link_warning_errno(link, r, "rtnl: received route with invalid table, ignoring: %m");
 420                 return 0;
 421         }
 422
 423         r = sd_netlink_message_read_u32(message, RTA_PRIORITY, &priority);
 424         if (r < 0 && r != -ENODATA) {
 425                 log_link_warning_errno(link, r, "rtnl: received route with invalid priority, ignoring: %m");
 426                 return 0;
 427         }
 428
 429         (void) route_get(link, family, &dst, dst_prefixlen, tos, priority, table, &route);
 430
 431         if (DEBUG_LOGGING) {
 432                 _cleanup_free_ char *buf_dst = NULL, *buf_dst_prefixlen = NULL,
 433                         *buf_src = NULL, *buf_gw = NULL, *buf_prefsrc = NULL;
 434
 435                 if (!in_addr_is_null(family, &dst)) {
 436                         (void) in_addr_to_string(family, &dst, &buf_dst);
 437                         (void) asprintf(&buf_dst_prefixlen, "/%u", dst_prefixlen);
 438                 }
 439                 if (!in_addr_is_null(family, &src))
 440                         (void) in_addr_to_string(family, &src, &buf_src);
 441                 if (!in_addr_is_null(family, &gw))
 442                         (void) in_addr_to_string(family, &gw, &buf_gw);
 443                 if (!in_addr_is_null(family, &prefsrc))
 444                         (void) in_addr_to_string(family, &prefsrc, &buf_prefsrc);
 445
 446                 log_link_debug(link,
 447                                "%s route: dst: %s%s, src: %s, gw: %s, prefsrc: %s",
 448                                type == RTM_DELROUTE ? "Removing" : route ? "Updating" : "Adding",
 449                                strna(buf_dst), strempty(buf_dst_prefixlen),
 450                                strna(buf_src), strna(buf_gw), strna(buf_prefsrc));
 451         }
 452
 453         switch (type) {
 454         case RTM_NEWROUTE:
 455                 if (!route) {
 456                         /* A route appeared that we did not request */
 457                         r = route_add_foreign(link, family, &dst, dst_prefixlen, tos, priority, table, &route);
 458                         if (r < 0) {
 459                                 log_link_warning_errno(link, r, "Failed to add route, ignoring: %m");
 460                                 return 0;
 461                         }
 462                 }
 463
 464                 route_update(route, &src, src_prefixlen, &gw, &prefsrc, scope, protocol, rt_type);
 465
 466                 break;
 467
 468         case RTM_DELROUTE:
 469                 route_free(route);
 470                 break;
 471
 472         default:
 473                 assert_not_reached("Received invalid RTNL message type");
 474         }
 475
 476         return 1;
 477 }
 478
 479 int manager_rtnl_process_address(sd_netlink *rtnl, sd_netlink_message *message, void *userdata) {
 480         Manager *m = userdata;
 481         Link *link = NULL;
 482         uint16_t type;
 483         unsigned char flags;
 484         int family;
 485         unsigned char prefixlen;
 486         unsigned char scope;
 487         union in_addr_union in_addr;
 488         struct ifa_cacheinfo cinfo;
 489         Address *address = NULL;
 490         char buf[INET6_ADDRSTRLEN], valid_buf[FORMAT_TIMESPAN_MAX];
 491         const char *valid_str = NULL;
 492         int r, ifindex;
 493
 494         assert(rtnl);
 495         assert(message);
 496         assert(m);
 497
 498         if (sd_netlink_message_is_error(message)) {
 499                 r = sd_netlink_message_get_errno(message);
 500                 if (r < 0)
 501                         log_warning_errno(r, "rtnl: failed to receive address, ignoring: %m");
 502
 503                 return 0;
 504         }
 505
 506         r = sd_netlink_message_get_type(message, &type);
 507         if (r < 0) {
 508                 log_warning_errno(r, "rtnl: could not get message type, ignoring: %m");
 509                 return 0;
 510         } else if (!IN_SET(type, RTM_NEWADDR, RTM_DELADDR)) {
 511                 log_warning("rtnl: received unexpected message type when processing address, ignoring");
 512                 return 0;
 513         }
 514
 515         r = sd_rtnl_message_addr_get_ifindex(message, &ifindex);
 516         if (r < 0) {
 517                 log_warning_errno(r, "rtnl: could not get ifindex from address, ignoring: %m");
 518                 return 0;
 519         } else if (ifindex <= 0) {
 520                 log_warning("rtnl: received address message with invalid ifindex, ignoring: %d", ifindex);
 521                 return 0;
 522         } else {
 523                 r = link_get(m, ifindex, &link);
 524                 if (r < 0 || !link) {
 525                         /* when enumerating we might be out of sync, but we will
 526                          * get the address again, so just ignore it */
 527                         if (!m->enumerating)
 528                                 log_warning("rtnl: received address for nonexistent link (%d), ignoring", ifindex);
 529                         return 0;
 530                 }
 531         }
 532
 533         r = sd_rtnl_message_addr_get_family(message, &family);
 534         if (r < 0 || !IN_SET(family, AF_INET, AF_INET6)) {
 535                 log_link_warning(link, "rtnl: received address with invalid family, ignoring");
 536                 return 0;
 537         }
 538
 539         r = sd_rtnl_message_addr_get_prefixlen(message, &prefixlen);
 540         if (r < 0) {
 541                 log_link_warning_errno(link, r, "rtnl: received address with invalid prefixlen, ignoring: %m");
 542                 return 0;
 543         }
 544
 545         r = sd_rtnl_message_addr_get_scope(message, &scope);
 546         if (r < 0) {
 547                 log_link_warning_errno(link, r, "rtnl: received address with invalid scope, ignoring: %m");
 548                 return 0;
 549         }
 550
 551         r = sd_rtnl_message_addr_get_flags(message, &flags);
 552         if (r < 0) {
 553                 log_link_warning_errno(link, r, "rtnl: received address with invalid flags, ignoring: %m");
 554                 return 0;
 555         }
 556
 557         switch (family) {
 558         case AF_INET:
 559                 r = sd_netlink_message_read_in_addr(message, IFA_LOCAL, &in_addr.in);
 560                 if (r < 0) {
 561                         log_link_warning_errno(link, r, "rtnl: received address without valid address, ignoring: %m");
 562                         return 0;
 563                 }
 564
 565                 break;
 566
 567         case AF_INET6:
 568                 r = sd_netlink_message_read_in6_addr(message, IFA_ADDRESS, &in_addr.in6);
 569                 if (r < 0) {
 570                         log_link_warning_errno(link, r, "rtnl: received address without valid address, ignoring: %m");
 571                         return 0;
 572                 }
 573
 574                 break;
 575
 576         default:
 577                 assert_not_reached("Received unsupported address family");
 578         }
 579
 580         if (!inet_ntop(family, &in_addr, buf, INET6_ADDRSTRLEN)) {
 581                 log_link_warning(link, "Could not print address, ignoring");
 582                 return 0;
 583         }
 584
 585         r = sd_netlink_message_read_cache_info(message, IFA_CACHEINFO, &cinfo);
 586         if (r < 0 && r != -ENODATA) {
 587                 log_link_warning_errno(link, r, "rtnl: cannot get IFA_CACHEINFO attribute, ignoring: %m");
 588                 return 0;
 589         } else if (r >= 0) {
 590                 if (cinfo.ifa_valid != CACHE_INFO_INFINITY_LIFE_TIME)
 591                         valid_str = format_timespan(valid_buf, FORMAT_TIMESPAN_MAX,
 592                                                     cinfo.ifa_valid * USEC_PER_SEC,
 593                                                     USEC_PER_SEC);
 594         }
 595
 596         (void) address_get(link, family, &in_addr, prefixlen, &address);
 597
 598         switch (type) {
 599         case RTM_NEWADDR:
 600                 if (address)
 601                         log_link_debug(link, "Updating address: %s/%u (valid %s%s)", buf, prefixlen,
 602                                        valid_str ? "for " : "forever", strempty(valid_str));
 603                 else {
 604                         /* An address appeared that we did not request */
 605                         r = address_add_foreign(link, family, &in_addr, prefixlen, &address);
 606                         if (r < 0) {
 607                                 log_link_warning_errno(link, r, "Failed to add address %s/%u, ignoring: %m", buf, prefixlen);
 608                                 return 0;
 609                         } else
 610                                 log_link_debug(link, "Adding address: %s/%u (valid %s%s)", buf, prefixlen,
 611                                                valid_str ? "for " : "forever", strempty(valid_str));
 612                 }
 613
 614                 r = address_update(address, flags, scope, &cinfo);
 615                 if (r < 0) {
 616                         log_link_warning_errno(link, r, "Failed to update address %s/%u, ignoring: %m", buf, prefixlen);
 617                         return 0;
 618                 }
 619
 620                 break;
 621
 622         case RTM_DELADDR:
 623
 624                 if (address) {
 625                         log_link_debug(link, "Removing address: %s/%u (valid %s%s)", buf, prefixlen,
 626                                        valid_str ? "for " : "forever", strempty(valid_str));
 627                         (void) address_drop(address);
 628                 } else
 629                         log_link_warning(link, "Removing non-existent address: %s/%u (valid %s%s), ignoring", buf, prefixlen,
 630                                          valid_str ? "for " : "forever", strempty(valid_str));
 631
 632                 break;
 633         default:
 634                 assert_not_reached("Received invalid RTNL message type");
 635         }
 636
 637         return 1;
 638 }
 639
 640 static int manager_rtnl_process_link(sd_netlink *rtnl, sd_netlink_message *message, void *userdata) {
 641         Manager *m = userdata;
 642         Link *link = NULL;
 643         NetDev *netdev = NULL;
 644         uint16_t type;
 645         const char *name;
 646         int r, ifindex;
 647
 648         assert(rtnl);
 649         assert(message);
 650         assert(m);
 651
 652         if (sd_netlink_message_is_error(message)) {
 653                 r = sd_netlink_message_get_errno(message);
 654                 if (r < 0)
 655                         log_warning_errno(r, "rtnl: Could not receive link, ignoring: %m");
 656
 657                 return 0;
 658         }
 659
 660         r = sd_netlink_message_get_type(message, &type);
 661         if (r < 0) {
 662                 log_warning_errno(r, "rtnl: Could not get message type, ignoring: %m");
 663                 return 0;
 664         } else if (!IN_SET(type, RTM_NEWLINK, RTM_DELLINK)) {
 665                 log_warning("rtnl: Received unexpected message type when processing link, ignoring");
 666                 return 0;
 667         }
 668
 669         r = sd_rtnl_message_link_get_ifindex(message, &ifindex);
 670         if (r < 0) {
 671                 log_warning_errno(r, "rtnl: Could not get ifindex from link, ignoring: %m");
 672                 return 0;
 673         } else if (ifindex <= 0) {
 674                 log_warning("rtnl: received link message with invalid ifindex %d, ignoring", ifindex);
 675                 return 0;
 676         }
 677
 678         r = sd_netlink_message_read_string(message, IFLA_IFNAME, &name);
 679         if (r < 0) {
 680                 log_warning_errno(r, "rtnl: Received link message without ifname, ignoring: %m");
 681                 return 0;
 682         }
 683
 684         (void) link_get(m, ifindex, &link);
 685         (void) netdev_get(m, name, &netdev);
 686
 687         switch (type) {
 688         case RTM_NEWLINK:
 689                 if (!link) {
 690                         /* link is new, so add it */
 691                         r = link_add(m, message, &link);
 692                         if (r < 0) {
 693                                 log_warning_errno(r, "Could not add new link, ignoring: %m");
 694                                 return 0;
 695                         }
 696                 }
 697
 698                 if (netdev) {
 699                         /* netdev exists, so make sure the ifindex matches */
 700                         r = netdev_set_ifindex(netdev, message);
 701                         if (r < 0) {
 702                                 log_warning_errno(r, "Could not set ifindex on netdev, ignoring: %m");
 703                                 return 0;
 704                         }
 705                 }
 706
 707                 r = link_update(link, message);
 708                 if (r < 0) {
 709                         log_warning_errno(r, "Could not update link, ignoring: %m");
 710                         return 0;
 711                 }
 712
 713                 break;
 714
 715         case RTM_DELLINK:
 716                 link_drop(link);
 717                 netdev_drop(netdev);
 718
 719                 break;
 720
 721         default:
 722                 assert_not_reached("Received invalid RTNL message type.");
 723         }
 724
 725         return 1;
 726 }
 727
 728 int manager_rtnl_process_rule(sd_netlink *rtnl, sd_netlink_message *message, void *userdata) {
 729         uint8_t tos = 0, to_prefixlen = 0, from_prefixlen = 0, protocol = 0;
 730         struct fib_rule_port_range sport = {}, dport = {};
 731         union in_addr_union to = {}, from = {};
 732         RoutingPolicyRule *rule = NULL;
 733         uint32_t fwmark = 0, table = 0;
 734         const char *iif = NULL, *oif = NULL;
 735         Manager *m = userdata;
 736         uint16_t type;
 737         int family;
 738         int r;
 739
 740         assert(rtnl);
 741         assert(message);
 742         assert(m);
 743
 744         if (sd_netlink_message_is_error(message)) {
 745                 r = sd_netlink_message_get_errno(message);
 746                 if (r < 0)
 747                         log_warning_errno(r, "rtnl: failed to receive rule, ignoring: %m");
 748
 749                 return 0;
 750         }
 751
 752         r = sd_netlink_message_get_type(message, &type);
 753         if (r < 0) {
 754                 log_warning_errno(r, "rtnl: could not get message type, ignoring: %m");
 755                 return 0;
 756         } else if (!IN_SET(type, RTM_NEWRULE, RTM_DELRULE)) {
 757                 log_warning("rtnl: received unexpected message type '%u' when processing rule, ignoring", type);
 758                 return 0;
 759         }
 760
 761         r = sd_rtnl_message_get_family(message, &family);
 762         if (r < 0) {
 763                 log_warning_errno(r, "rtnl: could not get rule family, ignoring: %m");
 764                 return 0;
 765         } else if (!IN_SET(family, AF_INET, AF_INET6)) {
 766                 log_debug("rtnl: received address with invalid family %u, ignoring", family);
 767                 return 0;
 768         }
 769
 770         switch (family) {
 771         case AF_INET:
 772                 r = sd_netlink_message_read_in_addr(message, FRA_SRC, &from.in);
 773                 if (r < 0 && r != -ENODATA) {
 774                         log_warning_errno(r, "rtnl: could not get FRA_SRC attribute, ignoring: %m");
 775                         return 0;
 776                 } else if (r >= 0) {
 777                         r = sd_rtnl_message_routing_policy_rule_get_rtm_src_prefixlen(message, &from_prefixlen);
 778                         if (r < 0) {
 779                                 log_warning_errno(r, "rtnl: failed to retrieve rule from prefix length, ignoring: %m");
 780                                 return 0;
 781                         }
 782                 }
 783
 784                 r = sd_netlink_message_read_in_addr(message, FRA_DST, &to.in);
 785                 if (r < 0 && r != -ENODATA) {
 786                         log_warning_errno(r, "rtnl: could not get FRA_DST attribute, ignoring: %m");
 787                         return 0;
 788                 } else if (r >= 0) {
 789                         r = sd_rtnl_message_routing_policy_rule_get_rtm_dst_prefixlen(message, &to_prefixlen);
 790                         if (r < 0) {
 791                                 log_warning_errno(r, "rtnl: failed to retrieve rule to prefix length, ignoring: %m");
 792                                 return 0;
 793                         }
 794                 }
 795
 796                 break;
 797
 798         case AF_INET6:
 799                 r = sd_netlink_message_read_in6_addr(message, FRA_SRC, &from.in6);
 800                 if (r < 0 && r != -ENODATA) {
 801                         log_warning_errno(r, "rtnl: could not get FRA_SRC attribute, ignoring: %m");
 802                         return 0;
 803                 } else if (r >= 0) {
 804                         r = sd_rtnl_message_routing_policy_rule_get_rtm_src_prefixlen(message, &from_prefixlen);
 805                         if (r < 0) {
 806                                 log_warning_errno(r, "rtnl: failed to retrieve rule from prefix length, ignoring: %m");
 807                                 return 0;
 808                         }
 809                 }
 810
 811                 r = sd_netlink_message_read_in6_addr(message, FRA_DST, &to.in6);
 812                 if (r < 0 && r != -ENODATA) {
 813                         log_warning_errno(r, "rtnl: could not get FRA_DST attribute, ignoring: %m");
 814                         return 0;
 815                 } else if (r >= 0) {
 816                         r = sd_rtnl_message_routing_policy_rule_get_rtm_dst_prefixlen(message, &to_prefixlen);
 817                         if (r < 0) {
 818                                 log_warning_errno(r, "rtnl: failed to retrieve rule to prefix length, ignoring: %m");
 819                                 return 0;
 820                         }
 821                 }
 822
 823                 break;
 824
 825         default:
 826                 assert_not_reached("Received unsupported address family");
 827         }
 828
 829         if (from_prefixlen == 0 && to_prefixlen == 0)
 830                 return 0;
 831
 832         r = sd_netlink_message_read_u32(message, FRA_FWMARK, &fwmark);
 833         if (r < 0 && r != -ENODATA) {
 834                 log_warning_errno(r, "rtnl: could not get FRA_FWMARK attribute, ignoring: %m");
 835                 return 0;
 836         }
 837
 838         r = sd_netlink_message_read_u32(message, FRA_TABLE, &table);
 839         if (r < 0 && r != -ENODATA) {
 840                 log_warning_errno(r, "rtnl: could not get FRA_TABLE attribute, ignoring: %m");
 841                 return 0;
 842         }
 843
 844         r = sd_rtnl_message_routing_policy_rule_get_tos(message, &tos);
 845         if (r < 0 && r != -ENODATA) {
 846                 log_warning_errno(r, "rtnl: could not get ip rule TOS, ignoring: %m");
 847                 return 0;
 848         }
 849
 850         r = sd_netlink_message_read_string(message, FRA_IIFNAME, &iif);
 851         if (r < 0 && r != -ENODATA) {
 852                 log_warning_errno(r, "rtnl: could not get FRA_IIFNAME attribute, ignoring: %m");
 853                 return 0;
 854         }
 855
 856         r = sd_netlink_message_read_string(message, FRA_OIFNAME, &oif);
 857         if (r < 0 && r != -ENODATA) {
 858                 log_warning_errno(r, "rtnl: could not get FRA_OIFNAME attribute, ignoring: %m");
 859                 return 0;
 860         }
 861
 862         r = sd_netlink_message_read_u8(message, FRA_IP_PROTO, &protocol);
 863         if (r < 0 && r != -ENODATA) {
 864                 log_warning_errno(r, "rtnl: could not get FRA_IP_PROTO attribute, ignoring: %m");
 865                 return 0;
 866         }
 867
 868         r = sd_netlink_message_read(message, FRA_SPORT_RANGE, sizeof(sport), (void *) &sport);
 869         if (r < 0 && r != -ENODATA) {
 870                 log_warning_errno(r, "rtnl: could not get FRA_SPORT_RANGE attribute, ignoring: %m");
 871                 return 0;
 872         }
 873
 874         r = sd_netlink_message_read(message, FRA_DPORT_RANGE, sizeof(dport), (void *) &dport);
 875         if (r < 0 && r != -ENODATA) {
 876                 log_warning_errno(r, "rtnl: could not get FRA_DPORT_RANGE attribute, ignoring: %m");
 877                 return 0;
 878         }
 879
 880         (void) routing_policy_rule_get(m, family, &from, from_prefixlen, &to, to_prefixlen, tos, fwmark, table, iif, oif, protocol, &sport, &dport, &rule);
 881
 882         switch (type) {
 883         case RTM_NEWRULE:
 884                 if (!rule) {
 885                         r = routing_policy_rule_add_foreign(m, family, &from, from_prefixlen, &to, to_prefixlen, tos, fwmark, table, iif, oif, protocol, &sport, &dport, &rule);
 886                         if (r < 0) {
 887                                 log_warning_errno(r, "Could not add rule, ignoring: %m");
 888                                 return 0;
 889                         }
 890                 }
 891                 break;
 892         case RTM_DELRULE:
 893                 routing_policy_rule_free(rule);
 894
 895                 break;
 896
 897         default:
 898                 assert_not_reached("Received invalid RTNL message type");
 899         }
 900
 901         return 1;
 902 }
 903
 904 static int systemd_netlink_fd(void) {
 905         int n, fd, rtnl_fd = -EINVAL;
 906
 907         n = sd_listen_fds(true);
 908         if (n <= 0)
 909                 return -EINVAL;
 910
 911         for (fd = SD_LISTEN_FDS_START; fd < SD_LISTEN_FDS_START + n; fd ++) {
 912                 if (sd_is_socket(fd, AF_NETLINK, SOCK_RAW, -1) > 0) {
 913                         if (rtnl_fd >= 0)
 914                                 return -EINVAL;
 915
 916                         rtnl_fd = fd;
 917                 }
 918         }
 919
 920         return rtnl_fd;
 921 }
 922
 923 static int manager_connect_genl(Manager *m) {
 924         int r;
 925
 926         assert(m);
 927
 928         r = sd_genl_socket_open(&m->genl);
 929         if (r < 0)
 930                 return r;
 931
 932         r = sd_netlink_inc_rcvbuf(m->genl, RCVBUF_SIZE);
 933         if (r < 0)
 934                 return r;
 935
 936         r = sd_netlink_attach_event(m->genl, m->event, 0);
 937         if (r < 0)
 938                 return r;
 939
 940         return 0;
 941 }
 942
 943 static int manager_connect_rtnl(Manager *m) {
 944         int fd, r;
 945
 946         assert(m);
 947
 948         fd = systemd_netlink_fd();
 949         if (fd < 0)
 950                 r = sd_netlink_open(&m->rtnl);
 951         else
 952                 r = sd_netlink_open_fd(&m->rtnl, fd);
 953         if (r < 0)
 954                 return r;
 955
 956         r = sd_netlink_inc_rcvbuf(m->rtnl, RCVBUF_SIZE);
 957         if (r < 0)
 958                 return r;
 959
 960         r = sd_netlink_attach_event(m->rtnl, m->event, 0);
 961         if (r < 0)
 962                 return r;
 963
 964         r = sd_netlink_add_match(m->rtnl, NULL, RTM_NEWLINK, &manager_rtnl_process_link, NULL, m, "network-rtnl_process_link");
 965         if (r < 0)
 966                 return r;
 967
 968         r = sd_netlink_add_match(m->rtnl, NULL, RTM_DELLINK, &manager_rtnl_process_link, NULL, m, "network-rtnl_process_link");
 969         if (r < 0)
 970                 return r;
 971
 972         r = sd_netlink_add_match(m->rtnl, NULL, RTM_NEWADDR, &manager_rtnl_process_address, NULL, m, "network-rtnl_process_address");
 973         if (r < 0)
 974                 return r;
 975
 976         r = sd_netlink_add_match(m->rtnl, NULL, RTM_DELADDR, &manager_rtnl_process_address, NULL, m, "network-rtnl_process_address");
 977         if (r < 0)
 978                 return r;
 979
 980         r = sd_netlink_add_match(m->rtnl, NULL, RTM_NEWROUTE, &manager_rtnl_process_route, NULL, m, "network-rtnl_process_route");
 981         if (r < 0)
 982                 return r;
 983
 984         r = sd_netlink_add_match(m->rtnl, NULL, RTM_DELROUTE, &manager_rtnl_process_route, NULL, m, "network-rtnl_process_route");
 985         if (r < 0)
 986                 return r;
 987
 988         r = sd_netlink_add_match(m->rtnl, NULL, RTM_NEWRULE, &manager_rtnl_process_rule, NULL, m, "network-rtnl_process_rule");
 989         if (r < 0)
 990                 return r;
 991
 992         r = sd_netlink_add_match(m->rtnl, NULL, RTM_DELRULE, &manager_rtnl_process_rule, NULL, m, "network-rtnl_process_rule");
 993         if (r < 0)
 994                 return r;
 995
 996         return 0;
 997 }
 998
 999 static int ordered_set_put_in_addr_data(OrderedSet *s, const struct in_addr_data *address) {
1000         char *p;
1001         int r;
1002
1003         assert(s);
1004         assert(address);
1005
1006         r = in_addr_to_string(address->family, &address->address, &p);
1007         if (r < 0)
1008                 return r;
1009
1010         r = ordered_set_consume(s, p);
1011         if (r == -EEXIST)
1012                 return 0;
1013
1014         return r;
1015 }
1016
1017 static int ordered_set_put_in_addr_datav(OrderedSet *s, const struct in_addr_data *addresses, unsigned n) {
1018         int r, c = 0;
1019         unsigned i;
1020
1021         assert(s);
1022         assert(addresses || n == 0);
1023
1024         for (i = 0; i < n; i++) {
1025                 r = ordered_set_put_in_addr_data(s, addresses+i);
1026                 if (r < 0)
1027                         return r;
1028
1029                 c += r;
1030         }
1031
1032         return c;
1033 }
1034
1035 static int ordered_set_put_in4_addr(OrderedSet *s, const struct in_addr *address) {
1036         char *p;
1037         int r;
1038
1039         assert(s);
1040         assert(address);
1041
1042         r = in_addr_to_string(AF_INET, (const union in_addr_union*) address, &p);
1043         if (r < 0)
1044                 return r;
1045
1046         r = ordered_set_consume(s, p);
1047         if (r == -EEXIST)
1048                 return 0;
1049
1050         return r;
1051 }
1052
1053 static int ordered_set_put_in4_addrv(OrderedSet *s,
1054                                      const struct in_addr *addresses,
1055                                      size_t n,
1056                                      bool (*predicate)(const struct in_addr *addr)) {
1057         int r, c = 0;
1058         size_t i;
1059
1060         assert(s);
1061         assert(n == 0 || addresses);
1062
1063         for (i = 0; i < n; i++) {
1064                 if (predicate && !predicate(&addresses[i]))
1065                         continue;
1066                 r = ordered_set_put_in4_addr(s, addresses+i);
1067                 if (r < 0)
1068                         return r;
1069
1070                 c += r;
1071         }
1072
1073         return c;
1074 }
1075
1076 static int manager_save(Manager *m) {
1077         _cleanup_ordered_set_free_free_ OrderedSet *dns = NULL, *ntp = NULL, *search_domains = NULL, *route_domains = NULL;
1078         Link *link;
1079         Iterator i;
1080         _cleanup_free_ char *temp_path = NULL;
1081         _cleanup_fclose_ FILE *f = NULL;
1082         LinkOperationalState operstate = LINK_OPERSTATE_OFF;
1083         const char *operstate_str;
1084         int r;
1085
1086         assert(m);
1087         assert(m->state_file);
1088
1089         /* We add all NTP and DNS server to a set, to filter out duplicates */
1090         dns = ordered_set_new(&string_hash_ops);
1091         if (!dns)
1092                 return -ENOMEM;
1093
1094         ntp = ordered_set_new(&string_hash_ops);
1095         if (!ntp)
1096                 return -ENOMEM;
1097
1098         search_domains = ordered_set_new(&dns_name_hash_ops);
1099         if (!search_domains)
1100                 return -ENOMEM;
1101
1102         route_domains = ordered_set_new(&dns_name_hash_ops);
1103         if (!route_domains)
1104                 return -ENOMEM;
1105
1106         HASHMAP_FOREACH(link, m->links, i) {
1107                 if (link->flags & IFF_LOOPBACK)
1108                         continue;
1109
1110                 if (link->operstate > operstate)
1111                         operstate = link->operstate;
1112
1113                 if (!link->network)
1114                         continue;
1115
1116                 /* First add the static configured entries */
1117                 r = ordered_set_put_in_addr_datav(dns, link->network->dns, link->network->n_dns);
1118                 if (r < 0)
1119                         return r;
1120
1121                 r = ordered_set_put_strdupv(ntp, link->network->ntp);
1122                 if (r < 0)
1123                         return r;
1124
1125                 r = ordered_set_put_string_set(search_domains, link->network->search_domains);
1126                 if (r < 0)
1127                         return r;
1128
1129                 r = ordered_set_put_string_set(route_domains, link->network->route_domains);
1130                 if (r < 0)
1131                         return r;
1132
1133                 if (!link->dhcp_lease)
1134                         continue;
1135
1136                 /* Secondly, add the entries acquired via DHCP */
1137                 if (link->network->dhcp_use_dns) {
1138                         const struct in_addr *addresses;
1139
1140                         r = sd_dhcp_lease_get_dns(link->dhcp_lease, &addresses);
1141                         if (r > 0) {
1142                                 r = ordered_set_put_in4_addrv(dns, addresses, r, in4_addr_is_non_local);
1143                                 if (r < 0)
1144                                         return r;
1145                         } else if (r < 0 && r != -ENODATA)
1146                                 return r;
1147                 }
1148
1149                 if (link->network->dhcp_use_ntp) {
1150                         const struct in_addr *addresses;
1151
1152                         r = sd_dhcp_lease_get_ntp(link->dhcp_lease, &addresses);
1153                         if (r > 0) {
1154                                 r = ordered_set_put_in4_addrv(ntp, addresses, r, in4_addr_is_non_local);
1155                                 if (r < 0)
1156                                         return r;
1157                         } else if (r < 0 && r != -ENODATA)
1158                                 return r;
1159                 }
1160
1161                 if (link->network->dhcp_use_domains != DHCP_USE_DOMAINS_NO) {
1162                         const char *domainname;
1163                         char **domains = NULL;
1164
1165                         OrderedSet *target_domains = (link->network->dhcp_use_domains == DHCP_USE_DOMAINS_YES) ? search_domains : route_domains;
1166                         r = sd_dhcp_lease_get_domainname(link->dhcp_lease, &domainname);
1167                         if (r >= 0) {
1168                                 r = ordered_set_put_strdup(target_domains, domainname);
1169                                 if (r < 0)
1170                                         return r;
1171                         } else if (r != -ENODATA)
1172                                 return r;
1173
1174                         r = sd_dhcp_lease_get_search_domains(link->dhcp_lease, &domains);
1175                         if (r >= 0) {
1176                                 r = ordered_set_put_strdupv(target_domains, domains);
1177                                 if (r < 0)
1178                                         return r;
1179                         } else if (r != -ENODATA)
1180                                 return r;
1181                 }
1182         }
1183
1184         operstate_str = link_operstate_to_string(operstate);
1185         assert(operstate_str);
1186
1187         r = fopen_temporary(m->state_file, &f, &temp_path);
1188         if (r < 0)
1189                 return r;
1190
1191         (void) fchmod(fileno(f), 0644);
1192
1193         fprintf(f,
1194                 "# This is private data. Do not parse.\n"
1195                 "OPER_STATE=%s\n", operstate_str);
1196
1197         ordered_set_print(f, "DNS=", dns);
1198         ordered_set_print(f, "NTP=", ntp);
1199         ordered_set_print(f, "DOMAINS=", search_domains);
1200         ordered_set_print(f, "ROUTE_DOMAINS=", route_domains);
1201
1202         r = routing_policy_serialize_rules(m->rules, f);
1203         if (r < 0)
1204                 goto fail;
1205
1206         r = fflush_and_check(f);
1207         if (r < 0)
1208                 goto fail;
1209
1210         if (rename(temp_path, m->state_file) < 0) {
1211                 r = -errno;
1212                 goto fail;
1213         }
1214
1215         if (m->operational_state != operstate) {
1216                 m->operational_state = operstate;
1217                 r = manager_send_changed(m, "OperationalState", NULL);
1218                 if (r < 0)
1219                         log_error_errno(r, "Could not emit changed OperationalState: %m");
1220         }
1221
1222         m->dirty = false;
1223
1224         return 0;
1225
1226 fail:
1227         (void) unlink(m->state_file);
1228         (void) unlink(temp_path);
1229
1230         return log_error_errno(r, "Failed to save network state to %s: %m", m->state_file);
1231 }
1232
1233 static int manager_dirty_handler(sd_event_source *s, void *userdata) {
1234         Manager *m = userdata;
1235         Link *link;
1236         Iterator i;
1237
1238         assert(m);
1239
1240         if (m->dirty)
1241                 manager_save(m);
1242
1243         SET_FOREACH(link, m->dirty_links, i)
1244                 if (link_save(link) >= 0)
1245                         link_clean(link);
1246
1247         return 1;
1248 }
1249
1250 Link *manager_dhcp6_prefix_get(Manager *m, struct in6_addr *addr) {
1251         assert_return(m, NULL);
1252         assert_return(addr, NULL);
1253
1254         return hashmap_get(m->dhcp6_prefixes, addr);
1255 }
1256
1257 static int dhcp6_route_add_handler(sd_netlink *nl, sd_netlink_message *m, Link *link) {
1258         int r;
1259
1260         assert(link);
1261
1262         r = sd_netlink_message_get_errno(m);
1263         if (r < 0 && r != -EEXIST)
1264                 log_link_debug_errno(link, r, "Received error adding DHCPv6 Prefix Delegation route: %m");
1265
1266         return 0;
1267 }
1268
1269 static void dhcp6_prefixes_hash_func(const struct in6_addr *addr, struct siphash *state) {
1270         assert(addr);
1271
1272         siphash24_compress(addr, sizeof(*addr), state);
1273 }
1274
1275 static int dhcp6_prefixes_compare_func(const struct in6_addr *a, const struct in6_addr *b) {
1276         return memcmp(a, b, sizeof(*a));
1277 }
1278
1279 DEFINE_PRIVATE_HASH_OPS(dhcp6_prefixes_hash_ops, struct in6_addr, dhcp6_prefixes_hash_func, dhcp6_prefixes_compare_func);
1280
1281 int manager_dhcp6_prefix_add(Manager *m, struct in6_addr *addr, Link *link) {
1282         _cleanup_free_ char *buf = NULL;
1283         Route *route;
1284         int r;
1285
1286         assert_return(m, -EINVAL);
1287         assert_return(addr, -EINVAL);
1288
1289         r = route_add(link, AF_INET6, (union in_addr_union *) addr, 64,
1290                       0, 0, 0, &route);
1291         if (r < 0)
1292                 return r;
1293
1294         r = route_configure(route, link, dhcp6_route_add_handler);
1295         if (r < 0)
1296                 return r;
1297
1298         (void) in_addr_to_string(AF_INET6, (union in_addr_union *) addr, &buf);
1299         log_link_debug(link, "Adding prefix route %s/64", strnull(buf));
1300
1301         r = hashmap_ensure_allocated(&m->dhcp6_prefixes, &dhcp6_prefixes_hash_ops);
1302         if (r < 0)
1303                 return r;
1304
1305         return hashmap_put(m->dhcp6_prefixes, addr, link);
1306 }
1307
1308 static int dhcp6_route_remove_handler(sd_netlink *nl, sd_netlink_message *m, Link *link) {
1309         int r;
1310
1311         assert(link);
1312
1313         r = sd_netlink_message_get_errno(m);
1314         if (r < 0)
1315                 log_link_debug_errno(link, r, "Received error on DHCPv6 Prefix Delegation route removal: %m");
1316
1317         return 1;
1318 }
1319
1320 static int manager_dhcp6_prefix_remove(Manager *m, struct in6_addr *addr) {
1321         _cleanup_free_ char *buf = NULL;
1322         Route *route;
1323         Link *l;
1324         int r;
1325
1326         assert_return(m, -EINVAL);
1327         assert_return(addr, -EINVAL);
1328
1329         l = hashmap_remove(m->dhcp6_prefixes, addr);
1330         if (!l)
1331                 return -EINVAL;
1332
1333         (void) sd_radv_remove_prefix(l->radv, addr, 64);
1334         r = route_get(l, AF_INET6, (union in_addr_union *) addr, 64,
1335                       0, 0, 0, &route);
1336         if (r < 0)
1337                 return r;
1338
1339         r = route_remove(route, l, dhcp6_route_remove_handler);
1340         if (r < 0)
1341                 return r;
1342
1343         (void) in_addr_to_string(AF_INET6, (union in_addr_union *) addr, &buf);
1344         log_link_debug(l, "Removing prefix route %s/64", strnull(buf));
1345
1346         return 0;
1347 }
1348
1349 int manager_dhcp6_prefix_remove_all(Manager *m, Link *link) {
1350         struct in6_addr *addr;
1351         Iterator i;
1352         Link *l;
1353
1354         assert_return(m, -EINVAL);
1355         assert_return(link, -EINVAL);
1356
1357         HASHMAP_FOREACH_KEY(l, addr, m->dhcp6_prefixes, i) {
1358                 if (l != link)
1359                         continue;
1360
1361                 (void) manager_dhcp6_prefix_remove(m, addr);
1362         }
1363
1364         return 0;
1365 }
1366
1367 int manager_new(Manager **ret) {
1368         _cleanup_(manager_freep) Manager *m = NULL;
1369         int r;
1370
1371         m = new0(Manager, 1);
1372         if (!m)
1373                 return -ENOMEM;
1374
1375         m->state_file = strdup("/run/systemd/netif/state");
1376         if (!m->state_file)
1377                 return -ENOMEM;
1378
1379         m->sysctl_ipv6_enabled = -1;
1380
1381         r = sd_event_default(&m->event);
1382         if (r < 0)
1383                 return r;
1384
1385         (void) sd_event_set_watchdog(m->event, true);
1386         (void) sd_event_add_signal(m->event, NULL, SIGTERM, NULL, NULL);
1387         (void) sd_event_add_signal(m->event, NULL, SIGINT, NULL, NULL);
1388
1389         r = sd_event_add_post(m->event, NULL, manager_dirty_handler, m);
1390         if (r < 0)
1391                 return r;
1392
1393         r = manager_connect_rtnl(m);
1394         if (r < 0)
1395                 return r;
1396
1397         r = manager_connect_genl(m);
1398         if (r < 0)
1399                 return r;
1400
1401         r = manager_connect_udev(m);
1402         if (r < 0)
1403                 return r;
1404
1405         LIST_HEAD_INIT(m->networks);
1406
1407         r = sd_resolve_default(&m->resolve);
1408         if (r < 0)
1409                 return r;
1410
1411         r = sd_resolve_attach_event(m->resolve, m->event, 0);
1412         if (r < 0)
1413                 return r;
1414
1415         r = setup_default_address_pool(m);
1416         if (r < 0)
1417                 return r;
1418
1419         m->duid.type = DUID_TYPE_EN;
1420
1421         (void) routing_policy_load_rules(m->state_file, &m->rules_saved);
1422
1423         *ret = TAKE_PTR(m);
1424
1425         return 0;
1426 }
1427
1428 void manager_free(Manager *m) {
1429         AddressPool *pool;
1430         Network *network;
1431         Link *link;
1432
1433         if (!m)
1434                 return;
1435
1436         free(m->state_file);
1437
1438         sd_netlink_unref(m->rtnl);
1439         sd_netlink_unref(m->genl);
1440         sd_resolve_unref(m->resolve);
1441
1442         while ((link = hashmap_first(m->dhcp6_prefixes)))
1443                 manager_dhcp6_prefix_remove_all(m, link);
1444         hashmap_free(m->dhcp6_prefixes);
1445
1446         while ((link = hashmap_steal_first(m->links))) {
1447                 if (link->dhcp6_client)
1448                         (void) dhcp6_lease_pd_prefix_lost(link->dhcp6_client, link);
1449                 link_unref(link);
1450         }
1451
1452         m->dirty_links = set_free_with_destructor(m->dirty_links, link_unref);
1453         m->links = hashmap_free(m->links);
1454         m->links_requesting_uuid = set_free(m->links_requesting_uuid);
1455         set_free(m->duids_requesting_uuid);
1456
1457         while ((network = m->networks))
1458                 network_free(network);
1459
1460         hashmap_free(m->networks_by_name);
1461
1462         m->netdevs = hashmap_free_with_destructor(m->netdevs, netdev_unref);
1463
1464         while ((pool = m->address_pools))
1465                 address_pool_free(pool);
1466
1467         /* routing_policy_rule_free() access m->rules and m->rules_foreign.
1468          * So, it is necessary to set NULL after the sets are freed. */
1469         m->rules = set_free_with_destructor(m->rules, routing_policy_rule_free);
1470         m->rules_foreign = set_free_with_destructor(m->rules_foreign, routing_policy_rule_free);
1471         set_free_with_destructor(m->rules_saved, routing_policy_rule_free);
1472
1473         sd_event_unref(m->event);
1474
1475         sd_device_monitor_unref(m->device_monitor);
1476
1477         sd_bus_flush_close_unref(m->bus);
1478
1479         free(m->dynamic_timezone);
1480         free(m->dynamic_hostname);
1481
1482         free(m);
1483 }
1484
1485 int manager_start(Manager *m) {
1486         Link *link;
1487         Iterator i;
1488
1489         assert(m);
1490
1491         /* The dirty handler will deal with future serialization, but the first one
1492            must be done explicitly. */
1493
1494         manager_save(m);
1495
1496         HASHMAP_FOREACH(link, m->links, i)
1497                 link_save(link);
1498
1499         return 0;
1500 }
1501
1502 int manager_load_config(Manager *m) {
1503         int r;
1504
1505         /* update timestamp */
1506         paths_check_timestamp(NETWORK_DIRS, &m->network_dirs_ts_usec, true);
1507
1508         r = netdev_load(m);
1509         if (r < 0)
1510                 return r;
1511
1512         r = network_load(m);
1513         if (r < 0)
1514                 return r;
1515
1516         return 0;
1517 }
1518
1519 bool manager_should_reload(Manager *m) {
1520         return paths_check_timestamp(NETWORK_DIRS, &m->network_dirs_ts_usec, false);
1521 }
1522
1523 int manager_rtnl_enumerate_links(Manager *m) {
1524         _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL, *reply = NULL;
1525         sd_netlink_message *link;
1526         int r;
1527
1528         assert(m);
1529         assert(m->rtnl);
1530
1531         r = sd_rtnl_message_new_link(m->rtnl, &req, RTM_GETLINK, 0);
1532         if (r < 0)
1533                 return r;
1534
1535         r = sd_netlink_message_request_dump(req, true);
1536         if (r < 0)
1537                 return r;
1538
1539         r = sd_netlink_call(m->rtnl, req, 0, &reply);
1540         if (r < 0)
1541                 return r;
1542
1543         for (link = reply; link; link = sd_netlink_message_next(link)) {
1544                 int k;
1545
1546                 m->enumerating = true;
1547
1548                 k = manager_rtnl_process_link(m->rtnl, link, m);
1549                 if (k < 0)
1550                         r = k;
1551
1552                 m->enumerating = false;
1553         }
1554
1555         return r;
1556 }
1557
1558 int manager_rtnl_enumerate_addresses(Manager *m) {
1559         _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL, *reply = NULL;
1560         sd_netlink_message *addr;
1561         int r;
1562
1563         assert(m);
1564         assert(m->rtnl);
1565
1566         r = sd_rtnl_message_new_addr(m->rtnl, &req, RTM_GETADDR, 0, 0);
1567         if (r < 0)
1568                 return r;
1569
1570         r = sd_netlink_message_request_dump(req, true);
1571         if (r < 0)
1572                 return r;
1573
1574         r = sd_netlink_call(m->rtnl, req, 0, &reply);
1575         if (r < 0)
1576                 return r;
1577
1578         for (addr = reply; addr; addr = sd_netlink_message_next(addr)) {
1579                 int k;
1580
1581                 m->enumerating = true;
1582
1583                 k = manager_rtnl_process_address(m->rtnl, addr, m);
1584                 if (k < 0)
1585                         r = k;
1586
1587                 m->enumerating = false;
1588         }
1589
1590         return r;
1591 }
1592
1593 int manager_rtnl_enumerate_routes(Manager *m) {
1594         _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL, *reply = NULL;
1595         sd_netlink_message *route;
1596         int r;
1597
1598         assert(m);
1599         assert(m->rtnl);
1600
1601         r = sd_rtnl_message_new_route(m->rtnl, &req, RTM_GETROUTE, 0, 0);
1602         if (r < 0)
1603                 return r;
1604
1605         r = sd_netlink_message_request_dump(req, true);
1606         if (r < 0)
1607                 return r;
1608
1609         r = sd_netlink_call(m->rtnl, req, 0, &reply);
1610         if (r < 0)
1611                 return r;
1612
1613         for (route = reply; route; route = sd_netlink_message_next(route)) {
1614                 int k;
1615
1616                 m->enumerating = true;
1617
1618                 k = manager_rtnl_process_route(m->rtnl, route, m);
1619                 if (k < 0)
1620                         r = k;
1621
1622                 m->enumerating = false;
1623         }
1624
1625         return r;
1626 }
1627
1628 int manager_rtnl_enumerate_rules(Manager *m) {
1629         _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL, *reply = NULL;
1630         sd_netlink_message *rule;
1631         int r;
1632
1633         assert(m);
1634         assert(m->rtnl);
1635
1636         r = sd_rtnl_message_new_routing_policy_rule(m->rtnl, &req, RTM_GETRULE, 0);
1637         if (r < 0)
1638                 return r;
1639
1640         r = sd_netlink_message_request_dump(req, true);
1641         if (r < 0)
1642                 return r;
1643
1644         r = sd_netlink_call(m->rtnl, req, 0, &reply);
1645         if (r < 0) {
1646                 if (r == -EOPNOTSUPP) {
1647                         log_debug("FIB Rules are not supported by the kernel. Ignoring.");
1648                         return 0;
1649                 }
1650
1651                 return r;
1652         }
1653
1654         for (rule = reply; rule; rule = sd_netlink_message_next(rule)) {
1655                 int k;
1656
1657                 m->enumerating = true;
1658
1659                 k = manager_rtnl_process_rule(m->rtnl, rule, m);
1660                 if (k < 0)
1661                         r = k;
1662
1663                 m->enumerating = false;
1664         }
1665
1666         return r;
1667 }
1668
1669 int manager_address_pool_acquire(Manager *m, int family, unsigned prefixlen, union in_addr_union *found) {
1670         AddressPool *p;
1671         int r;
1672
1673         assert(m);
1674         assert(prefixlen > 0);
1675         assert(found);
1676
1677         LIST_FOREACH(address_pools, p, m->address_pools) {
1678                 if (p->family != family)
1679                         continue;
1680
1681                 r = address_pool_acquire(p, prefixlen, found);
1682                 if (r != 0)
1683                         return r;
1684         }
1685
1686         return 0;
1687 }
1688
1689 Link* manager_find_uplink(Manager *m, Link *exclude) {
1690         _cleanup_free_ struct local_address *gateways = NULL;
1691         int n, i;
1692
1693         assert(m);
1694
1695         /* Looks for a suitable "uplink", via black magic: an
1696          * interface that is up and where the default route with the
1697          * highest priority points to. */
1698
1699         n = local_gateways(m->rtnl, 0, AF_UNSPEC, &gateways);
1700         if (n < 0) {
1701                 log_warning_errno(n, "Failed to determine list of default gateways: %m");
1702                 return NULL;
1703         }
1704
1705         for (i = 0; i < n; i++) {
1706                 Link *link;
1707
1708                 link = hashmap_get(m->links, INT_TO_PTR(gateways[i].ifindex));
1709                 if (!link) {
1710                         log_debug("Weird, found a gateway for a link we don't know. Ignoring.");
1711                         continue;
1712                 }
1713
1714                 if (link == exclude)
1715                         continue;
1716
1717                 if (link->operstate < LINK_OPERSTATE_ROUTABLE)
1718                         continue;
1719
1720                 return link;
1721         }
1722
1723         return NULL;
1724 }
1725
1726 void manager_dirty(Manager *manager) {
1727         assert(manager);
1728
1729         /* the serialized state in /run is no longer up-to-date */
1730         manager->dirty = true;
1731 }
1732
1733 static int set_hostname_handler(sd_bus_message *m, void *userdata, sd_bus_error *ret_error) {
1734         Manager *manager = userdata;
1735         const sd_bus_error *e;
1736
1737         assert(m);
1738         assert(manager);
1739
1740         e = sd_bus_message_get_error(m);
1741         if (e)
1742                 log_warning_errno(sd_bus_error_get_errno(e), "Could not set hostname: %s", e->message);
1743
1744         return 1;
1745 }
1746
1747 int manager_set_hostname(Manager *m, const char *hostname) {
1748         int r;
1749
1750         log_debug("Setting transient hostname: '%s'", strna(hostname));
1751
1752         if (free_and_strdup(&m->dynamic_hostname, hostname) < 0)
1753                 return log_oom();
1754
1755         if (!m->bus || sd_bus_is_ready(m->bus) <= 0) {
1756                 log_debug("Not connected to system bus, setting hostname later.");
1757                 return 0;
1758         }
1759
1760         r = sd_bus_call_method_async(
1761                         m->bus,
1762                         NULL,
1763                         "org.freedesktop.hostname1",
1764                         "/org/freedesktop/hostname1",
1765                         "org.freedesktop.hostname1",
1766                         "SetHostname",
1767                         set_hostname_handler,
1768                         m,
1769                         "sb",
1770                         hostname,
1771                         false);
1772
1773         if (r < 0)
1774                 return log_error_errno(r, "Could not set transient hostname: %m");
1775
1776         return 0;
1777 }
1778
1779 static int set_timezone_handler(sd_bus_message *m, void *userdata, sd_bus_error *ret_error) {
1780         Manager *manager = userdata;
1781         const sd_bus_error *e;
1782
1783         assert(m);
1784         assert(manager);
1785
1786         e = sd_bus_message_get_error(m);
1787         if (e)
1788                 log_warning_errno(sd_bus_error_get_errno(e), "Could not set timezone: %s", e->message);
1789
1790         return 1;
1791 }
1792
1793 int manager_set_timezone(Manager *m, const char *tz) {
1794         int r;
1795
1796         assert(m);
1797         assert(tz);
1798
1799         log_debug("Setting system timezone: '%s'", tz);
1800         if (free_and_strdup(&m->dynamic_timezone, tz) < 0)
1801                 return log_oom();
1802
1803         if (!m->bus || sd_bus_is_ready(m->bus) <= 0) {
1804                 log_debug("Not connected to system bus, setting timezone later.");
1805                 return 0;
1806         }
1807
1808         r = sd_bus_call_method_async(
1809                         m->bus,
1810                         NULL,
1811                         "org.freedesktop.timedate1",
1812                         "/org/freedesktop/timedate1",
1813                         "org.freedesktop.timedate1",
1814                         "SetTimezone",
1815                         set_timezone_handler,
1816                         m,
1817                         "sb",
1818                         tz,
1819                         false);
1820         if (r < 0)
1821                 return log_error_errno(r, "Could not set timezone: %m");
1822
1823         return 0;
1824 }
1825
1826 int manager_request_product_uuid(Manager *m, Link *link) {
1827         int r;
1828
1829         assert(m);
1830
1831         if (m->has_product_uuid)
1832                 return 0;
1833
1834         log_debug("Requesting product UUID");
1835
1836         if (link) {
1837                 DUID *duid;
1838
1839                 assert_se(duid = link_get_duid(link));
1840
1841                 r = set_ensure_allocated(&m->links_requesting_uuid, NULL);
1842                 if (r < 0)
1843                         return log_oom();
1844
1845                 r = set_ensure_allocated(&m->duids_requesting_uuid, NULL);
1846                 if (r < 0)
1847                         return log_oom();
1848
1849                 r = set_put(m->links_requesting_uuid, link);
1850                 if (r < 0)
1851                         return log_oom();
1852
1853                 r = set_put(m->duids_requesting_uuid, duid);
1854                 if (r < 0)
1855                         return log_oom();
1856         }
1857
1858         if (!m->bus || sd_bus_is_ready(m->bus) <= 0) {
1859                 log_debug("Not connected to system bus, requesting product UUID later.");
1860                 return 0;
1861         }
1862
1863         r = sd_bus_call_method_async(
1864                         m->bus,
1865                         NULL,
1866                         "org.freedesktop.hostname1",
1867                         "/org/freedesktop/hostname1",
1868                         "org.freedesktop.hostname1",
1869                         "GetProductUUID",
1870                         get_product_uuid_handler,
1871                         m,
1872                         "b",
1873                         false);
1874         if (r < 0)
1875                 return log_warning_errno(r, "Failed to get product UUID: %m");
1876
1877         return 0;
1878 }
1879
1880 int manager_sysctl_ipv6_enabled(Manager *manager) {
1881         _cleanup_free_ char *value = NULL;
1882         int r;
1883
1884         if (manager->sysctl_ipv6_enabled >= 0)
1885                 return manager->sysctl_ipv6_enabled;
1886
1887         r = sysctl_read_ip_property(AF_INET6, "all", "disable_ipv6", &value);
1888         if (r < 0)
1889                 return log_warning_errno(r, "Failed to read net.ipv6.conf.all.disable_ipv6 sysctl property: %m");
1890
1891         manager->sysctl_ipv6_enabled = value[0] == '0';
1892         return manager->sysctl_ipv6_enabled;
1893 }