src/network/networkd-manager.c

   1 /* SPDX-License-Identifier: LGPL-2.1+ */
   2
   3 #include <sys/socket.h>
   4 #include <linux/if.h>
   5 #include <linux/fib_rules.h>
   6 #include <stdio_ext.h>
   7 #include <unistd.h>
   8
   9 #include "sd-daemon.h"
  10 #include "sd-netlink.h"
  11
  12 #include "alloc-util.h"
  13 #include "bus-util.h"
  14 #include "conf-parser.h"
  15 #include "def.h"
  16 #include "device-private.h"
  17 #include "device-util.h"
  18 #include "dns-domain.h"
  19 #include "fd-util.h"
  20 #include "fileio.h"
  21 #include "local-addresses.h"
  22 #include "netlink-util.h"
  23 #include "network-internal.h"
  24 #include "networkd-manager.h"
  25 #include "ordered-set.h"
  26 #include "path-util.h"
  27 #include "set.h"
  28 #include "strv.h"
  29 #include "sysctl-util.h"
  30 #include "tmpfile-util.h"
  31 #include "udev-util.h"
  32 #include "virt.h"
  33
  34 /* use 8 MB for receive socket kernel queue. */
  35 #define RCVBUF_SIZE    (8*1024*1024)
  36
  37 static int setup_default_address_pool(Manager *m) {
  38         AddressPool *p;
  39         int r;
  40
  41         assert(m);
  42
  43         /* Add in the well-known private address ranges. */
  44
  45         r = address_pool_new_from_string(m, &p, AF_INET6, "fd00::", 8);
  46         if (r < 0)
  47                 return r;
  48
  49         r = address_pool_new_from_string(m, &p, AF_INET, "10.0.0.0", 8);
  50         if (r < 0)
  51                 return r;
  52
  53         r = address_pool_new_from_string(m, &p, AF_INET, "172.16.0.0", 12);
  54         if (r < 0)
  55                 return r;
  56
  57         r = address_pool_new_from_string(m, &p, AF_INET, "192.168.0.0", 16);
  58         if (r < 0)
  59                 return r;
  60
  61         return 0;
  62 }
  63
  64 static int manager_reset_all(Manager *m) {
  65         Link *link;
  66         Iterator i;
  67         int r;
  68
  69         assert(m);
  70
  71         HASHMAP_FOREACH(link, m->links, i) {
  72                 r = link_carrier_reset(link);
  73                 if (r < 0)
  74                         log_link_warning_errno(link, r, "Could not reset carrier: %m");
  75         }
  76
  77         return 0;
  78 }
  79
  80 static int match_prepare_for_sleep(sd_bus_message *message, void *userdata, sd_bus_error *ret_error) {
  81         Manager *m = userdata;
  82         int b, r;
  83
  84         assert(message);
  85         assert(m);
  86
  87         r = sd_bus_message_read(message, "b", &b);
  88         if (r < 0) {
  89                 log_debug_errno(r, "Failed to parse PrepareForSleep signal: %m");
  90                 return 0;
  91         }
  92
  93         if (b)
  94                 return 0;
  95
  96         log_debug("Coming back from suspend, resetting all connections...");
  97
  98         (void) manager_reset_all(m);
  99
 100         return 0;
 101 }
 102
 103 static int on_connected(sd_bus_message *message, void *userdata, sd_bus_error *ret_error) {
 104         Manager *m = userdata;
 105
 106         assert(message);
 107         assert(m);
 108
 109         /* Did we get a timezone or transient hostname from DHCP while D-Bus wasn't up yet? */
 110         if (m->dynamic_hostname)
 111                 (void) manager_set_hostname(m, m->dynamic_hostname);
 112         if (m->dynamic_timezone)
 113                 (void) manager_set_timezone(m, m->dynamic_timezone);
 114         if (m->links_requesting_uuid)
 115                 (void) manager_request_product_uuid(m, NULL);
 116
 117         return 0;
 118 }
 119
 120 int manager_connect_bus(Manager *m) {
 121         int r;
 122
 123         assert(m);
 124
 125         if (m->bus)
 126                 return 0;
 127
 128         r = bus_open_system_watch_bind_with_description(&m->bus, "bus-api-network");
 129         if (r < 0)
 130                 return log_error_errno(r, "Failed to connect to bus: %m");
 131
 132         r = sd_bus_add_object_vtable(m->bus, NULL, "/org/freedesktop/network1", "org.freedesktop.network1.Manager", manager_vtable, m);
 133         if (r < 0)
 134                 return log_error_errno(r, "Failed to add manager object vtable: %m");
 135
 136         r = sd_bus_add_fallback_vtable(m->bus, NULL, "/org/freedesktop/network1/link", "org.freedesktop.network1.Link", link_vtable, link_object_find, m);
 137         if (r < 0)
 138                return log_error_errno(r, "Failed to add link object vtable: %m");
 139
 140         r = sd_bus_add_node_enumerator(m->bus, NULL, "/org/freedesktop/network1/link", link_node_enumerator, m);
 141         if (r < 0)
 142                 return log_error_errno(r, "Failed to add link enumerator: %m");
 143
 144         r = sd_bus_add_fallback_vtable(m->bus, NULL, "/org/freedesktop/network1/network", "org.freedesktop.network1.Network", network_vtable, network_object_find, m);
 145         if (r < 0)
 146                return log_error_errno(r, "Failed to add network object vtable: %m");
 147
 148         r = sd_bus_add_node_enumerator(m->bus, NULL, "/org/freedesktop/network1/network", network_node_enumerator, m);
 149         if (r < 0)
 150                 return log_error_errno(r, "Failed to add network enumerator: %m");
 151
 152         r = sd_bus_request_name_async(m->bus, NULL, "org.freedesktop.network1", 0, NULL, NULL);
 153         if (r < 0)
 154                 return log_error_errno(r, "Failed to request name: %m");
 155
 156         r = sd_bus_attach_event(m->bus, m->event, 0);
 157         if (r < 0)
 158                 return log_error_errno(r, "Failed to attach bus to event loop: %m");
 159
 160         r = sd_bus_match_signal_async(
 161                         m->bus,
 162                         NULL,
 163                         "org.freedesktop.DBus.Local",
 164                         NULL,
 165                         "org.freedesktop.DBus.Local",
 166                         "Connected",
 167                         on_connected, NULL, m);
 168         if (r < 0)
 169                 return log_error_errno(r, "Failed to request match on Connected signal: %m");
 170
 171         r = sd_bus_match_signal_async(
 172                         m->bus,
 173                         NULL,
 174                         "org.freedesktop.login1",
 175                         "/org/freedesktop/login1",
 176                         "org.freedesktop.login1.Manager",
 177                         "PrepareForSleep",
 178                         match_prepare_for_sleep, NULL, m);
 179         if (r < 0)
 180                 log_warning_errno(r, "Failed to request match for PrepareForSleep, ignoring: %m");
 181
 182         return 0;
 183 }
 184
 185 static int manager_udev_process_link(sd_device_monitor *monitor, sd_device *device, void *userdata) {
 186         Manager *m = userdata;
 187         DeviceAction action;
 188         Link *link = NULL;
 189         int r, ifindex;
 190
 191         assert(m);
 192         assert(device);
 193
 194         r = device_get_action(device, &action);
 195         if (r < 0) {
 196                 log_device_debug_errno(device, r, "Failed to get udev action, ignoring device: %m");
 197                 return 0;
 198         }
 199
 200         if (!IN_SET(action, DEVICE_ACTION_ADD, DEVICE_ACTION_CHANGE, DEVICE_ACTION_MOVE)) {
 201                 log_device_debug(device, "Ignoring udev %s event for device.", device_action_to_string(action));
 202                 return 0;
 203         }
 204
 205         r = sd_device_get_ifindex(device, &ifindex);
 206         if (r < 0) {
 207                 log_device_debug_errno(device, r, "Ignoring udev ADD event for device without ifindex or with invalid ifindex: %m");
 208                 return 0;
 209         }
 210
 211         r = device_is_renaming(device);
 212         if (r < 0) {
 213                 log_device_error_errno(device, r, "Failed to determine the device is renamed or not, ignoring '%s' uevent: %m",
 214                                        device_action_to_string(action));
 215                 return 0;
 216         }
 217         if (r > 0) {
 218                 log_device_debug(device, "Interface is under renaming, wait for the interface to be renamed: %m");
 219                 return 0;
 220         }
 221
 222         r = link_get(m, ifindex, &link);
 223         if (r < 0) {
 224                 if (r != -ENODEV)
 225                         log_debug_errno(r, "Failed to get link from ifindex %i, ignoring: %m", ifindex);
 226                 return 0;
 227         }
 228
 229         (void) link_initialized(link, device);
 230
 231         return 0;
 232 }
 233
 234 static int manager_connect_udev(Manager *m) {
 235         int r;
 236
 237         /* udev does not initialize devices inside containers,
 238          * so we rely on them being already initialized before
 239          * entering the container */
 240         if (detect_container() > 0)
 241                 return 0;
 242
 243         r = sd_device_monitor_new(&m->device_monitor);
 244         if (r < 0)
 245                 return log_error_errno(r, "Failed to initialize device monitor: %m");
 246
 247         r = sd_device_monitor_filter_add_match_subsystem_devtype(m->device_monitor, "net", NULL);
 248         if (r < 0)
 249                 return log_error_errno(r, "Could not add device monitor filter: %m");
 250
 251         r = sd_device_monitor_attach_event(m->device_monitor, m->event);
 252         if (r < 0)
 253                 return log_error_errno(r, "Failed to attach event to device monitor: %m");
 254
 255         r = sd_device_monitor_start(m->device_monitor, manager_udev_process_link, m);
 256         if (r < 0)
 257                 return log_error_errno(r, "Failed to start device monitor: %m");
 258
 259         return 0;
 260 }
 261
 262 int manager_rtnl_process_route(sd_netlink *rtnl, sd_netlink_message *message, void *userdata) {
 263         Manager *m = userdata;
 264         Link *link = NULL;
 265         uint16_t type;
 266         uint32_t ifindex, priority = 0;
 267         unsigned char protocol, scope, tos, table, rt_type;
 268         int family;
 269         unsigned char dst_prefixlen, src_prefixlen;
 270         union in_addr_union dst = {}, gw = {}, src = {}, prefsrc = {};
 271         Route *route = NULL;
 272         int r;
 273
 274         assert(rtnl);
 275         assert(message);
 276         assert(m);
 277
 278         if (sd_netlink_message_is_error(message)) {
 279                 r = sd_netlink_message_get_errno(message);
 280                 if (r < 0)
 281                         log_warning_errno(r, "rtnl: failed to receive route, ignoring: %m");
 282
 283                 return 0;
 284         }
 285
 286         r = sd_netlink_message_get_type(message, &type);
 287         if (r < 0) {
 288                 log_warning_errno(r, "rtnl: could not get message type, ignoring: %m");
 289                 return 0;
 290         } else if (!IN_SET(type, RTM_NEWROUTE, RTM_DELROUTE)) {
 291                 log_warning("rtnl: received unexpected message type when processing route, ignoring");
 292                 return 0;
 293         }
 294
 295         r = sd_netlink_message_read_u32(message, RTA_OIF, &ifindex);
 296         if (r == -ENODATA) {
 297                 log_debug("rtnl: received route without ifindex, ignoring");
 298                 return 0;
 299         } else if (r < 0) {
 300                 log_warning_errno(r, "rtnl: could not get ifindex from route, ignoring: %m");
 301                 return 0;
 302         } else if (ifindex <= 0) {
 303                 log_warning("rtnl: received route message with invalid ifindex, ignoring: %d", ifindex);
 304                 return 0;
 305         } else {
 306                 r = link_get(m, ifindex, &link);
 307                 if (r < 0 || !link) {
 308                         /* when enumerating we might be out of sync, but we will
 309                          * get the route again, so just ignore it */
 310                         if (!m->enumerating)
 311                                 log_warning("rtnl: received route for nonexistent link (%d), ignoring", ifindex);
 312                         return 0;
 313                 }
 314         }
 315
 316         r = sd_rtnl_message_route_get_family(message, &family);
 317         if (r < 0 || !IN_SET(family, AF_INET, AF_INET6)) {
 318                 log_link_warning(link, "rtnl: received address with invalid family, ignoring");
 319                 return 0;
 320         }
 321
 322         r = sd_rtnl_message_route_get_protocol(message, &protocol);
 323         if (r < 0) {
 324                 log_warning_errno(r, "rtnl: could not get route protocol: %m");
 325                 return 0;
 326         }
 327
 328         switch (family) {
 329         case AF_INET:
 330                 r = sd_netlink_message_read_in_addr(message, RTA_DST, &dst.in);
 331                 if (r < 0 && r != -ENODATA) {
 332                         log_link_warning_errno(link, r, "rtnl: received route without valid destination, ignoring: %m");
 333                         return 0;
 334                 }
 335
 336                 r = sd_netlink_message_read_in_addr(message, RTA_GATEWAY, &gw.in);
 337                 if (r < 0 && r != -ENODATA) {
 338                         log_link_warning_errno(link, r, "rtnl: received route with invalid gateway, ignoring: %m");
 339                         return 0;
 340                 }
 341
 342                 r = sd_netlink_message_read_in_addr(message, RTA_SRC, &src.in);
 343                 if (r < 0 && r != -ENODATA) {
 344                         log_link_warning_errno(link, r, "rtnl: received route with invalid source, ignoring: %m");
 345                         return 0;
 346                 }
 347
 348                 r = sd_netlink_message_read_in_addr(message, RTA_PREFSRC, &prefsrc.in);
 349                 if (r < 0 && r != -ENODATA) {
 350                         log_link_warning_errno(link, r, "rtnl: received route with invalid preferred source, ignoring: %m");
 351                         return 0;
 352                 }
 353
 354                 break;
 355
 356         case AF_INET6:
 357                 r = sd_netlink_message_read_in6_addr(message, RTA_DST, &dst.in6);
 358                 if (r < 0 && r != -ENODATA) {
 359                         log_link_warning_errno(link, r, "rtnl: received route without valid destination, ignoring: %m");
 360                         return 0;
 361                 }
 362
 363                 r = sd_netlink_message_read_in6_addr(message, RTA_GATEWAY, &gw.in6);
 364                 if (r < 0 && r != -ENODATA) {
 365                         log_link_warning_errno(link, r, "rtnl: received route with invalid gateway, ignoring: %m");
 366                         return 0;
 367                 }
 368
 369                 r = sd_netlink_message_read_in6_addr(message, RTA_SRC, &src.in6);
 370                 if (r < 0 && r != -ENODATA) {
 371                         log_link_warning_errno(link, r, "rtnl: received route with invalid source, ignoring: %m");
 372                         return 0;
 373                 }
 374
 375                 r = sd_netlink_message_read_in6_addr(message, RTA_PREFSRC, &prefsrc.in6);
 376                 if (r < 0 && r != -ENODATA) {
 377                         log_link_warning_errno(link, r, "rtnl: received route with invalid preferred source, ignoring: %m");
 378                         return 0;
 379                 }
 380
 381                 break;
 382
 383         default:
 384                 assert_not_reached("Received unsupported address family");
 385                 return 0;
 386         }
 387
 388         r = sd_rtnl_message_route_get_dst_prefixlen(message, &dst_prefixlen);
 389         if (r < 0) {
 390                 log_link_warning_errno(link, r, "rtnl: received route with invalid destination prefixlen, ignoring: %m");
 391                 return 0;
 392         }
 393
 394         r = sd_rtnl_message_route_get_src_prefixlen(message, &src_prefixlen);
 395         if (r < 0) {
 396                 log_link_warning_errno(link, r, "rtnl: received route with invalid source prefixlen, ignoring: %m");
 397                 return 0;
 398         }
 399
 400         r = sd_rtnl_message_route_get_scope(message, &scope);
 401         if (r < 0) {
 402                 log_link_warning_errno(link, r, "rtnl: received route with invalid scope, ignoring: %m");
 403                 return 0;
 404         }
 405
 406         r = sd_rtnl_message_route_get_tos(message, &tos);
 407         if (r < 0) {
 408                 log_link_warning_errno(link, r, "rtnl: received route with invalid tos, ignoring: %m");
 409                 return 0;
 410         }
 411
 412         r = sd_rtnl_message_route_get_type(message, &rt_type);
 413         if (r < 0) {
 414                 log_link_warning_errno(link, r, "rtnl: received route with invalid type, ignoring: %m");
 415                 return 0;
 416         }
 417
 418         r = sd_rtnl_message_route_get_table(message, &table);
 419         if (r < 0) {
 420                 log_link_warning_errno(link, r, "rtnl: received route with invalid table, ignoring: %m");
 421                 return 0;
 422         }
 423
 424         r = sd_netlink_message_read_u32(message, RTA_PRIORITY, &priority);
 425         if (r < 0 && r != -ENODATA) {
 426                 log_link_warning_errno(link, r, "rtnl: received route with invalid priority, ignoring: %m");
 427                 return 0;
 428         }
 429
 430         (void) route_get(link, family, &dst, dst_prefixlen, tos, priority, table, &route);
 431
 432         if (DEBUG_LOGGING) {
 433                 _cleanup_free_ char *buf_dst = NULL, *buf_dst_prefixlen = NULL,
 434                         *buf_src = NULL, *buf_gw = NULL, *buf_prefsrc = NULL;
 435
 436                 if (!in_addr_is_null(family, &dst)) {
 437                         (void) in_addr_to_string(family, &dst, &buf_dst);
 438                         (void) asprintf(&buf_dst_prefixlen, "/%u", dst_prefixlen);
 439                 }
 440                 if (!in_addr_is_null(family, &src))
 441                         (void) in_addr_to_string(family, &src, &buf_src);
 442                 if (!in_addr_is_null(family, &gw))
 443                         (void) in_addr_to_string(family, &gw, &buf_gw);
 444                 if (!in_addr_is_null(family, &prefsrc))
 445                         (void) in_addr_to_string(family, &prefsrc, &buf_prefsrc);
 446
 447                 log_link_debug(link,
 448                                "%s route: dst: %s%s, src: %s, gw: %s, prefsrc: %s",
 449                                type == RTM_DELROUTE ? "Removing" : route ? "Updating" : "Adding",
 450                                strna(buf_dst), strempty(buf_dst_prefixlen),
 451                                strna(buf_src), strna(buf_gw), strna(buf_prefsrc));
 452         }
 453
 454         switch (type) {
 455         case RTM_NEWROUTE:
 456                 if (!route) {
 457                         /* A route appeared that we did not request */
 458                         r = route_add_foreign(link, family, &dst, dst_prefixlen, tos, priority, table, &route);
 459                         if (r < 0) {
 460                                 log_link_warning_errno(link, r, "Failed to add route, ignoring: %m");
 461                                 return 0;
 462                         }
 463                 }
 464
 465                 route_update(route, &src, src_prefixlen, &gw, &prefsrc, scope, protocol, rt_type);
 466
 467                 break;
 468
 469         case RTM_DELROUTE:
 470                 route_free(route);
 471                 break;
 472
 473         default:
 474                 assert_not_reached("Received invalid RTNL message type");
 475         }
 476
 477         return 1;
 478 }
 479
 480 int manager_rtnl_process_address(sd_netlink *rtnl, sd_netlink_message *message, void *userdata) {
 481         Manager *m = userdata;
 482         Link *link = NULL;
 483         uint16_t type;
 484         unsigned char flags;
 485         int family;
 486         unsigned char prefixlen;
 487         unsigned char scope;
 488         union in_addr_union in_addr;
 489         struct ifa_cacheinfo cinfo;
 490         Address *address = NULL;
 491         char buf[INET6_ADDRSTRLEN], valid_buf[FORMAT_TIMESPAN_MAX];
 492         const char *valid_str = NULL;
 493         int r, ifindex;
 494
 495         assert(rtnl);
 496         assert(message);
 497         assert(m);
 498
 499         if (sd_netlink_message_is_error(message)) {
 500                 r = sd_netlink_message_get_errno(message);
 501                 if (r < 0)
 502                         log_warning_errno(r, "rtnl: failed to receive address, ignoring: %m");
 503
 504                 return 0;
 505         }
 506
 507         r = sd_netlink_message_get_type(message, &type);
 508         if (r < 0) {
 509                 log_warning_errno(r, "rtnl: could not get message type, ignoring: %m");
 510                 return 0;
 511         } else if (!IN_SET(type, RTM_NEWADDR, RTM_DELADDR)) {
 512                 log_warning("rtnl: received unexpected message type when processing address, ignoring");
 513                 return 0;
 514         }
 515
 516         r = sd_rtnl_message_addr_get_ifindex(message, &ifindex);
 517         if (r < 0) {
 518                 log_warning_errno(r, "rtnl: could not get ifindex from address, ignoring: %m");
 519                 return 0;
 520         } else if (ifindex <= 0) {
 521                 log_warning("rtnl: received address message with invalid ifindex, ignoring: %d", ifindex);
 522                 return 0;
 523         } else {
 524                 r = link_get(m, ifindex, &link);
 525                 if (r < 0 || !link) {
 526                         /* when enumerating we might be out of sync, but we will
 527                          * get the address again, so just ignore it */
 528                         if (!m->enumerating)
 529                                 log_warning("rtnl: received address for nonexistent link (%d), ignoring", ifindex);
 530                         return 0;
 531                 }
 532         }
 533
 534         r = sd_rtnl_message_addr_get_family(message, &family);
 535         if (r < 0 || !IN_SET(family, AF_INET, AF_INET6)) {
 536                 log_link_warning(link, "rtnl: received address with invalid family, ignoring");
 537                 return 0;
 538         }
 539
 540         r = sd_rtnl_message_addr_get_prefixlen(message, &prefixlen);
 541         if (r < 0) {
 542                 log_link_warning_errno(link, r, "rtnl: received address with invalid prefixlen, ignoring: %m");
 543                 return 0;
 544         }
 545
 546         r = sd_rtnl_message_addr_get_scope(message, &scope);
 547         if (r < 0) {
 548                 log_link_warning_errno(link, r, "rtnl: received address with invalid scope, ignoring: %m");
 549                 return 0;
 550         }
 551
 552         r = sd_rtnl_message_addr_get_flags(message, &flags);
 553         if (r < 0) {
 554                 log_link_warning_errno(link, r, "rtnl: received address with invalid flags, ignoring: %m");
 555                 return 0;
 556         }
 557
 558         switch (family) {
 559         case AF_INET:
 560                 r = sd_netlink_message_read_in_addr(message, IFA_LOCAL, &in_addr.in);
 561                 if (r < 0) {
 562                         log_link_warning_errno(link, r, "rtnl: received address without valid address, ignoring: %m");
 563                         return 0;
 564                 }
 565
 566                 break;
 567
 568         case AF_INET6:
 569                 r = sd_netlink_message_read_in6_addr(message, IFA_ADDRESS, &in_addr.in6);
 570                 if (r < 0) {
 571                         log_link_warning_errno(link, r, "rtnl: received address without valid address, ignoring: %m");
 572                         return 0;
 573                 }
 574
 575                 break;
 576
 577         default:
 578                 assert_not_reached("Received unsupported address family");
 579         }
 580
 581         if (!inet_ntop(family, &in_addr, buf, INET6_ADDRSTRLEN)) {
 582                 log_link_warning(link, "Could not print address, ignoring");
 583                 return 0;
 584         }
 585
 586         r = sd_netlink_message_read_cache_info(message, IFA_CACHEINFO, &cinfo);
 587         if (r < 0 && r != -ENODATA) {
 588                 log_link_warning_errno(link, r, "rtnl: cannot get IFA_CACHEINFO attribute, ignoring: %m");
 589                 return 0;
 590         } else if (r >= 0) {
 591                 if (cinfo.ifa_valid != CACHE_INFO_INFINITY_LIFE_TIME)
 592                         valid_str = format_timespan(valid_buf, FORMAT_TIMESPAN_MAX,
 593                                                     cinfo.ifa_valid * USEC_PER_SEC,
 594                                                     USEC_PER_SEC);
 595         }
 596
 597         (void) address_get(link, family, &in_addr, prefixlen, &address);
 598
 599         switch (type) {
 600         case RTM_NEWADDR:
 601                 if (address)
 602                         log_link_debug(link, "Updating address: %s/%u (valid %s%s)", buf, prefixlen,
 603                                        valid_str ? "for " : "forever", strempty(valid_str));
 604                 else {
 605                         /* An address appeared that we did not request */
 606                         r = address_add_foreign(link, family, &in_addr, prefixlen, &address);
 607                         if (r < 0) {
 608                                 log_link_warning_errno(link, r, "Failed to add address %s/%u, ignoring: %m", buf, prefixlen);
 609                                 return 0;
 610                         } else
 611                                 log_link_debug(link, "Adding address: %s/%u (valid %s%s)", buf, prefixlen,
 612                                                valid_str ? "for " : "forever", strempty(valid_str));
 613                 }
 614
 615                 r = address_update(address, flags, scope, &cinfo);
 616                 if (r < 0) {
 617                         log_link_warning_errno(link, r, "Failed to update address %s/%u, ignoring: %m", buf, prefixlen);
 618                         return 0;
 619                 }
 620
 621                 break;
 622
 623         case RTM_DELADDR:
 624
 625                 if (address) {
 626                         log_link_debug(link, "Removing address: %s/%u (valid %s%s)", buf, prefixlen,
 627                                        valid_str ? "for " : "forever", strempty(valid_str));
 628                         (void) address_drop(address);
 629                 } else
 630                         log_link_warning(link, "Removing non-existent address: %s/%u (valid %s%s), ignoring", buf, prefixlen,
 631                                          valid_str ? "for " : "forever", strempty(valid_str));
 632
 633                 break;
 634         default:
 635                 assert_not_reached("Received invalid RTNL message type");
 636         }
 637
 638         return 1;
 639 }
 640
 641 static int manager_rtnl_process_link(sd_netlink *rtnl, sd_netlink_message *message, void *userdata) {
 642         Manager *m = userdata;
 643         Link *link = NULL;
 644         NetDev *netdev = NULL;
 645         uint16_t type;
 646         const char *name;
 647         int r, ifindex;
 648
 649         assert(rtnl);
 650         assert(message);
 651         assert(m);
 652
 653         if (sd_netlink_message_is_error(message)) {
 654                 r = sd_netlink_message_get_errno(message);
 655                 if (r < 0)
 656                         log_warning_errno(r, "rtnl: Could not receive link, ignoring: %m");
 657
 658                 return 0;
 659         }
 660
 661         r = sd_netlink_message_get_type(message, &type);
 662         if (r < 0) {
 663                 log_warning_errno(r, "rtnl: Could not get message type, ignoring: %m");
 664                 return 0;
 665         } else if (!IN_SET(type, RTM_NEWLINK, RTM_DELLINK)) {
 666                 log_warning("rtnl: Received unexpected message type when processing link, ignoring");
 667                 return 0;
 668         }
 669
 670         r = sd_rtnl_message_link_get_ifindex(message, &ifindex);
 671         if (r < 0) {
 672                 log_warning_errno(r, "rtnl: Could not get ifindex from link, ignoring: %m");
 673                 return 0;
 674         } else if (ifindex <= 0) {
 675                 log_warning("rtnl: received link message with invalid ifindex %d, ignoring", ifindex);
 676                 return 0;
 677         }
 678
 679         r = sd_netlink_message_read_string(message, IFLA_IFNAME, &name);
 680         if (r < 0) {
 681                 log_warning_errno(r, "rtnl: Received link message without ifname, ignoring: %m");
 682                 return 0;
 683         }
 684
 685         (void) link_get(m, ifindex, &link);
 686         (void) netdev_get(m, name, &netdev);
 687
 688         switch (type) {
 689         case RTM_NEWLINK:
 690                 if (!link) {
 691                         /* link is new, so add it */
 692                         r = link_add(m, message, &link);
 693                         if (r < 0) {
 694                                 log_warning_errno(r, "Could not add new link, ignoring: %m");
 695                                 return 0;
 696                         }
 697                 }
 698
 699                 if (netdev) {
 700                         /* netdev exists, so make sure the ifindex matches */
 701                         r = netdev_set_ifindex(netdev, message);
 702                         if (r < 0) {
 703                                 log_warning_errno(r, "Could not set ifindex on netdev, ignoring: %m");
 704                                 return 0;
 705                         }
 706                 }
 707
 708                 r = link_update(link, message);
 709                 if (r < 0) {
 710                         log_warning_errno(r, "Could not update link, ignoring: %m");
 711                         return 0;
 712                 }
 713
 714                 break;
 715
 716         case RTM_DELLINK:
 717                 link_drop(link);
 718                 netdev_drop(netdev);
 719
 720                 break;
 721
 722         default:
 723                 assert_not_reached("Received invalid RTNL message type.");
 724         }
 725
 726         return 1;
 727 }
 728
 729 int manager_rtnl_process_rule(sd_netlink *rtnl, sd_netlink_message *message, void *userdata) {
 730         uint8_t tos = 0, to_prefixlen = 0, from_prefixlen = 0, protocol = 0;
 731         struct fib_rule_port_range sport = {}, dport = {};
 732         union in_addr_union to = {}, from = {};
 733         RoutingPolicyRule *rule = NULL;
 734         uint32_t fwmark = 0, table = 0;
 735         const char *iif = NULL, *oif = NULL;
 736         Manager *m = userdata;
 737         uint16_t type;
 738         int family;
 739         int r;
 740
 741         assert(rtnl);
 742         assert(message);
 743         assert(m);
 744
 745         if (sd_netlink_message_is_error(message)) {
 746                 r = sd_netlink_message_get_errno(message);
 747                 if (r < 0)
 748                         log_warning_errno(r, "rtnl: failed to receive rule, ignoring: %m");
 749
 750                 return 0;
 751         }
 752
 753         r = sd_netlink_message_get_type(message, &type);
 754         if (r < 0) {
 755                 log_warning_errno(r, "rtnl: could not get message type, ignoring: %m");
 756                 return 0;
 757         } else if (!IN_SET(type, RTM_NEWRULE, RTM_DELRULE)) {
 758                 log_warning("rtnl: received unexpected message type '%u' when processing rule, ignoring", type);
 759                 return 0;
 760         }
 761
 762         r = sd_rtnl_message_get_family(message, &family);
 763         if (r < 0) {
 764                 log_warning_errno(r, "rtnl: could not get rule family, ignoring: %m");
 765                 return 0;
 766         } else if (!IN_SET(family, AF_INET, AF_INET6)) {
 767                 log_debug("rtnl: received address with invalid family %u, ignoring", family);
 768                 return 0;
 769         }
 770
 771         switch (family) {
 772         case AF_INET:
 773                 r = sd_netlink_message_read_in_addr(message, FRA_SRC, &from.in);
 774                 if (r < 0 && r != -ENODATA) {
 775                         log_warning_errno(r, "rtnl: could not get FRA_SRC attribute, ignoring: %m");
 776                         return 0;
 777                 } else if (r >= 0) {
 778                         r = sd_rtnl_message_routing_policy_rule_get_rtm_src_prefixlen(message, &from_prefixlen);
 779                         if (r < 0) {
 780                                 log_warning_errno(r, "rtnl: failed to retrieve rule from prefix length, ignoring: %m");
 781                                 return 0;
 782                         }
 783                 }
 784
 785                 r = sd_netlink_message_read_in_addr(message, FRA_DST, &to.in);
 786                 if (r < 0 && r != -ENODATA) {
 787                         log_warning_errno(r, "rtnl: could not get FRA_DST attribute, ignoring: %m");
 788                         return 0;
 789                 } else if (r >= 0) {
 790                         r = sd_rtnl_message_routing_policy_rule_get_rtm_dst_prefixlen(message, &to_prefixlen);
 791                         if (r < 0) {
 792                                 log_warning_errno(r, "rtnl: failed to retrieve rule to prefix length, ignoring: %m");
 793                                 return 0;
 794                         }
 795                 }
 796
 797                 break;
 798
 799         case AF_INET6:
 800                 r = sd_netlink_message_read_in6_addr(message, FRA_SRC, &from.in6);
 801                 if (r < 0 && r != -ENODATA) {
 802                         log_warning_errno(r, "rtnl: could not get FRA_SRC attribute, ignoring: %m");
 803                         return 0;
 804                 } else if (r >= 0) {
 805                         r = sd_rtnl_message_routing_policy_rule_get_rtm_src_prefixlen(message, &from_prefixlen);
 806                         if (r < 0) {
 807                                 log_warning_errno(r, "rtnl: failed to retrieve rule from prefix length, ignoring: %m");
 808                                 return 0;
 809                         }
 810                 }
 811
 812                 r = sd_netlink_message_read_in6_addr(message, FRA_DST, &to.in6);
 813                 if (r < 0 && r != -ENODATA) {
 814                         log_warning_errno(r, "rtnl: could not get FRA_DST attribute, ignoring: %m");
 815                         return 0;
 816                 } else if (r >= 0) {
 817                         r = sd_rtnl_message_routing_policy_rule_get_rtm_dst_prefixlen(message, &to_prefixlen);
 818                         if (r < 0) {
 819                                 log_warning_errno(r, "rtnl: failed to retrieve rule to prefix length, ignoring: %m");
 820                                 return 0;
 821                         }
 822                 }
 823
 824                 break;
 825
 826         default:
 827                 assert_not_reached("Received unsupported address family");
 828         }
 829
 830         if (from_prefixlen == 0 && to_prefixlen == 0)
 831                 return 0;
 832
 833         r = sd_netlink_message_read_u32(message, FRA_FWMARK, &fwmark);
 834         if (r < 0 && r != -ENODATA) {
 835                 log_warning_errno(r, "rtnl: could not get FRA_FWMARK attribute, ignoring: %m");
 836                 return 0;
 837         }
 838
 839         r = sd_netlink_message_read_u32(message, FRA_TABLE, &table);
 840         if (r < 0 && r != -ENODATA) {
 841                 log_warning_errno(r, "rtnl: could not get FRA_TABLE attribute, ignoring: %m");
 842                 return 0;
 843         }
 844
 845         r = sd_rtnl_message_routing_policy_rule_get_tos(message, &tos);
 846         if (r < 0 && r != -ENODATA) {
 847                 log_warning_errno(r, "rtnl: could not get ip rule TOS, ignoring: %m");
 848                 return 0;
 849         }
 850
 851         r = sd_netlink_message_read_string(message, FRA_IIFNAME, &iif);
 852         if (r < 0 && r != -ENODATA) {
 853                 log_warning_errno(r, "rtnl: could not get FRA_IIFNAME attribute, ignoring: %m");
 854                 return 0;
 855         }
 856
 857         r = sd_netlink_message_read_string(message, FRA_OIFNAME, &oif);
 858         if (r < 0 && r != -ENODATA) {
 859                 log_warning_errno(r, "rtnl: could not get FRA_OIFNAME attribute, ignoring: %m");
 860                 return 0;
 861         }
 862
 863         r = sd_netlink_message_read_u8(message, FRA_IP_PROTO, &protocol);
 864         if (r < 0 && r != -ENODATA) {
 865                 log_warning_errno(r, "rtnl: could not get FRA_IP_PROTO attribute, ignoring: %m");
 866                 return 0;
 867         }
 868
 869         r = sd_netlink_message_read(message, FRA_SPORT_RANGE, sizeof(sport), (void *) &sport);
 870         if (r < 0 && r != -ENODATA) {
 871                 log_warning_errno(r, "rtnl: could not get FRA_SPORT_RANGE attribute, ignoring: %m");
 872                 return 0;
 873         }
 874
 875         r = sd_netlink_message_read(message, FRA_DPORT_RANGE, sizeof(dport), (void *) &dport);
 876         if (r < 0 && r != -ENODATA) {
 877                 log_warning_errno(r, "rtnl: could not get FRA_DPORT_RANGE attribute, ignoring: %m");
 878                 return 0;
 879         }
 880
 881         (void) routing_policy_rule_get(m, family, &from, from_prefixlen, &to, to_prefixlen, tos, fwmark, table, iif, oif, protocol, &sport, &dport, &rule);
 882
 883         switch (type) {
 884         case RTM_NEWRULE:
 885                 if (!rule) {
 886                         r = routing_policy_rule_add_foreign(m, family, &from, from_prefixlen, &to, to_prefixlen, tos, fwmark, table, iif, oif, protocol, &sport, &dport, &rule);
 887                         if (r < 0) {
 888                                 log_warning_errno(r, "Could not add rule, ignoring: %m");
 889                                 return 0;
 890                         }
 891                 }
 892                 break;
 893         case RTM_DELRULE:
 894                 routing_policy_rule_free(rule);
 895
 896                 break;
 897
 898         default:
 899                 assert_not_reached("Received invalid RTNL message type");
 900         }
 901
 902         return 1;
 903 }
 904
 905 static int systemd_netlink_fd(void) {
 906         int n, fd, rtnl_fd = -EINVAL;
 907
 908         n = sd_listen_fds(true);
 909         if (n <= 0)
 910                 return -EINVAL;
 911
 912         for (fd = SD_LISTEN_FDS_START; fd < SD_LISTEN_FDS_START + n; fd ++) {
 913                 if (sd_is_socket(fd, AF_NETLINK, SOCK_RAW, -1) > 0) {
 914                         if (rtnl_fd >= 0)
 915                                 return -EINVAL;
 916
 917                         rtnl_fd = fd;
 918                 }
 919         }
 920
 921         return rtnl_fd;
 922 }
 923
 924 static int manager_connect_genl(Manager *m) {
 925         int r;
 926
 927         assert(m);
 928
 929         r = sd_genl_socket_open(&m->genl);
 930         if (r < 0)
 931                 return r;
 932
 933         r = sd_netlink_inc_rcvbuf(m->genl, RCVBUF_SIZE);
 934         if (r < 0)
 935                 return r;
 936
 937         r = sd_netlink_attach_event(m->genl, m->event, 0);
 938         if (r < 0)
 939                 return r;
 940
 941         return 0;
 942 }
 943
 944 static int manager_connect_rtnl(Manager *m) {
 945         int fd, r;
 946
 947         assert(m);
 948
 949         fd = systemd_netlink_fd();
 950         if (fd < 0)
 951                 r = sd_netlink_open(&m->rtnl);
 952         else
 953                 r = sd_netlink_open_fd(&m->rtnl, fd);
 954         if (r < 0)
 955                 return r;
 956
 957         r = sd_netlink_inc_rcvbuf(m->rtnl, RCVBUF_SIZE);
 958         if (r < 0)
 959                 return r;
 960
 961         r = sd_netlink_attach_event(m->rtnl, m->event, 0);
 962         if (r < 0)
 963                 return r;
 964
 965         r = sd_netlink_add_match(m->rtnl, NULL, RTM_NEWLINK, &manager_rtnl_process_link, NULL, m, "network-rtnl_process_link");
 966         if (r < 0)
 967                 return r;
 968
 969         r = sd_netlink_add_match(m->rtnl, NULL, RTM_DELLINK, &manager_rtnl_process_link, NULL, m, "network-rtnl_process_link");
 970         if (r < 0)
 971                 return r;
 972
 973         r = sd_netlink_add_match(m->rtnl, NULL, RTM_NEWADDR, &manager_rtnl_process_address, NULL, m, "network-rtnl_process_address");
 974         if (r < 0)
 975                 return r;
 976
 977         r = sd_netlink_add_match(m->rtnl, NULL, RTM_DELADDR, &manager_rtnl_process_address, NULL, m, "network-rtnl_process_address");
 978         if (r < 0)
 979                 return r;
 980
 981         r = sd_netlink_add_match(m->rtnl, NULL, RTM_NEWROUTE, &manager_rtnl_process_route, NULL, m, "network-rtnl_process_route");
 982         if (r < 0)
 983                 return r;
 984
 985         r = sd_netlink_add_match(m->rtnl, NULL, RTM_DELROUTE, &manager_rtnl_process_route, NULL, m, "network-rtnl_process_route");
 986         if (r < 0)
 987                 return r;
 988
 989         r = sd_netlink_add_match(m->rtnl, NULL, RTM_NEWRULE, &manager_rtnl_process_rule, NULL, m, "network-rtnl_process_rule");
 990         if (r < 0)
 991                 return r;
 992
 993         r = sd_netlink_add_match(m->rtnl, NULL, RTM_DELRULE, &manager_rtnl_process_rule, NULL, m, "network-rtnl_process_rule");
 994         if (r < 0)
 995                 return r;
 996
 997         return 0;
 998 }
 999
1000 static int ordered_set_put_in_addr_data(OrderedSet *s, const struct in_addr_data *address) {
1001         char *p;
1002         int r;
1003
1004         assert(s);
1005         assert(address);
1006
1007         r = in_addr_to_string(address->family, &address->address, &p);
1008         if (r < 0)
1009                 return r;
1010
1011         r = ordered_set_consume(s, p);
1012         if (r == -EEXIST)
1013                 return 0;
1014
1015         return r;
1016 }
1017
1018 static int ordered_set_put_in_addr_datav(OrderedSet *s, const struct in_addr_data *addresses, unsigned n) {
1019         int r, c = 0;
1020         unsigned i;
1021
1022         assert(s);
1023         assert(addresses || n == 0);
1024
1025         for (i = 0; i < n; i++) {
1026                 r = ordered_set_put_in_addr_data(s, addresses+i);
1027                 if (r < 0)
1028                         return r;
1029
1030                 c += r;
1031         }
1032
1033         return c;
1034 }
1035
1036 static int ordered_set_put_in4_addr(OrderedSet *s, const struct in_addr *address) {
1037         char *p;
1038         int r;
1039
1040         assert(s);
1041         assert(address);
1042
1043         r = in_addr_to_string(AF_INET, (const union in_addr_union*) address, &p);
1044         if (r < 0)
1045                 return r;
1046
1047         r = ordered_set_consume(s, p);
1048         if (r == -EEXIST)
1049                 return 0;
1050
1051         return r;
1052 }
1053
1054 static int ordered_set_put_in4_addrv(OrderedSet *s,
1055                                      const struct in_addr *addresses,
1056                                      size_t n,
1057                                      bool (*predicate)(const struct in_addr *addr)) {
1058         int r, c = 0;
1059         size_t i;
1060
1061         assert(s);
1062         assert(n == 0 || addresses);
1063
1064         for (i = 0; i < n; i++) {
1065                 if (predicate && !predicate(&addresses[i]))
1066                         continue;
1067                 r = ordered_set_put_in4_addr(s, addresses+i);
1068                 if (r < 0)
1069                         return r;
1070
1071                 c += r;
1072         }
1073
1074         return c;
1075 }
1076
1077 static int manager_save(Manager *m) {
1078         _cleanup_ordered_set_free_free_ OrderedSet *dns = NULL, *ntp = NULL, *search_domains = NULL, *route_domains = NULL;
1079         Link *link;
1080         Iterator i;
1081         _cleanup_free_ char *temp_path = NULL;
1082         _cleanup_fclose_ FILE *f = NULL;
1083         LinkOperationalState operstate = LINK_OPERSTATE_OFF;
1084         const char *operstate_str;
1085         int r;
1086
1087         assert(m);
1088         assert(m->state_file);
1089
1090         /* We add all NTP and DNS server to a set, to filter out duplicates */
1091         dns = ordered_set_new(&string_hash_ops);
1092         if (!dns)
1093                 return -ENOMEM;
1094
1095         ntp = ordered_set_new(&string_hash_ops);
1096         if (!ntp)
1097                 return -ENOMEM;
1098
1099         search_domains = ordered_set_new(&dns_name_hash_ops);
1100         if (!search_domains)
1101                 return -ENOMEM;
1102
1103         route_domains = ordered_set_new(&dns_name_hash_ops);
1104         if (!route_domains)
1105                 return -ENOMEM;
1106
1107         HASHMAP_FOREACH(link, m->links, i) {
1108                 if (link->flags & IFF_LOOPBACK)
1109                         continue;
1110
1111                 if (link->operstate > operstate)
1112                         operstate = link->operstate;
1113
1114                 if (!link->network)
1115                         continue;
1116
1117                 /* First add the static configured entries */
1118                 r = ordered_set_put_in_addr_datav(dns, link->network->dns, link->network->n_dns);
1119                 if (r < 0)
1120                         return r;
1121
1122                 r = ordered_set_put_strdupv(ntp, link->network->ntp);
1123                 if (r < 0)
1124                         return r;
1125
1126                 r = ordered_set_put_string_set(search_domains, link->network->search_domains);
1127                 if (r < 0)
1128                         return r;
1129
1130                 r = ordered_set_put_string_set(route_domains, link->network->route_domains);
1131                 if (r < 0)
1132                         return r;
1133
1134                 if (!link->dhcp_lease)
1135                         continue;
1136
1137                 /* Secondly, add the entries acquired via DHCP */
1138                 if (link->network->dhcp_use_dns) {
1139                         const struct in_addr *addresses;
1140
1141                         r = sd_dhcp_lease_get_dns(link->dhcp_lease, &addresses);
1142                         if (r > 0) {
1143                                 r = ordered_set_put_in4_addrv(dns, addresses, r, in4_addr_is_non_local);
1144                                 if (r < 0)
1145                                         return r;
1146                         } else if (r < 0 && r != -ENODATA)
1147                                 return r;
1148                 }
1149
1150                 if (link->network->dhcp_use_ntp) {
1151                         const struct in_addr *addresses;
1152
1153                         r = sd_dhcp_lease_get_ntp(link->dhcp_lease, &addresses);
1154                         if (r > 0) {
1155                                 r = ordered_set_put_in4_addrv(ntp, addresses, r, in4_addr_is_non_local);
1156                                 if (r < 0)
1157                                         return r;
1158                         } else if (r < 0 && r != -ENODATA)
1159                                 return r;
1160                 }
1161
1162                 if (link->network->dhcp_use_domains != DHCP_USE_DOMAINS_NO) {
1163                         const char *domainname;
1164                         char **domains = NULL;
1165
1166                         OrderedSet *target_domains = (link->network->dhcp_use_domains == DHCP_USE_DOMAINS_YES) ? search_domains : route_domains;
1167                         r = sd_dhcp_lease_get_domainname(link->dhcp_lease, &domainname);
1168                         if (r >= 0) {
1169                                 r = ordered_set_put_strdup(target_domains, domainname);
1170                                 if (r < 0)
1171                                         return r;
1172                         } else if (r != -ENODATA)
1173                                 return r;
1174
1175                         r = sd_dhcp_lease_get_search_domains(link->dhcp_lease, &domains);
1176                         if (r >= 0) {
1177                                 r = ordered_set_put_strdupv(target_domains, domains);
1178                                 if (r < 0)
1179                                         return r;
1180                         } else if (r != -ENODATA)
1181                                 return r;
1182                 }
1183         }
1184
1185         operstate_str = link_operstate_to_string(operstate);
1186         assert(operstate_str);
1187
1188         r = fopen_temporary(m->state_file, &f, &temp_path);
1189         if (r < 0)
1190                 return r;
1191
1192         (void) __fsetlocking(f, FSETLOCKING_BYCALLER);
1193         (void) fchmod(fileno(f), 0644);
1194
1195         fprintf(f,
1196                 "# This is private data. Do not parse.\n"
1197                 "OPER_STATE=%s\n", operstate_str);
1198
1199         ordered_set_print(f, "DNS=", dns);
1200         ordered_set_print(f, "NTP=", ntp);
1201         ordered_set_print(f, "DOMAINS=", search_domains);
1202         ordered_set_print(f, "ROUTE_DOMAINS=", route_domains);
1203
1204         r = routing_policy_serialize_rules(m->rules, f);
1205         if (r < 0)
1206                 goto fail;
1207
1208         r = fflush_and_check(f);
1209         if (r < 0)
1210                 goto fail;
1211
1212         if (rename(temp_path, m->state_file) < 0) {
1213                 r = -errno;
1214                 goto fail;
1215         }
1216
1217         if (m->operational_state != operstate) {
1218                 m->operational_state = operstate;
1219                 r = manager_send_changed(m, "OperationalState", NULL);
1220                 if (r < 0)
1221                         log_error_errno(r, "Could not emit changed OperationalState: %m");
1222         }
1223
1224         m->dirty = false;
1225
1226         return 0;
1227
1228 fail:
1229         (void) unlink(m->state_file);
1230         (void) unlink(temp_path);
1231
1232         return log_error_errno(r, "Failed to save network state to %s: %m", m->state_file);
1233 }
1234
1235 static int manager_dirty_handler(sd_event_source *s, void *userdata) {
1236         Manager *m = userdata;
1237         Link *link;
1238         Iterator i;
1239
1240         assert(m);
1241
1242         if (m->dirty)
1243                 manager_save(m);
1244
1245         SET_FOREACH(link, m->dirty_links, i)
1246                 if (link_save(link) >= 0)
1247                         link_clean(link);
1248
1249         return 1;
1250 }
1251
1252 Link *manager_dhcp6_prefix_get(Manager *m, struct in6_addr *addr) {
1253         assert_return(m, NULL);
1254         assert_return(addr, NULL);
1255
1256         return hashmap_get(m->dhcp6_prefixes, addr);
1257 }
1258
1259 static int dhcp6_route_add_handler(sd_netlink *nl, sd_netlink_message *m, Link *link) {
1260         int r;
1261
1262         assert(link);
1263
1264         r = sd_netlink_message_get_errno(m);
1265         if (r < 0 && r != -EEXIST)
1266                 log_link_debug_errno(link, r, "Received error adding DHCPv6 Prefix Delegation route: %m");
1267
1268         return 0;
1269 }
1270
1271 static void dhcp6_prefixes_hash_func(const struct in6_addr *addr, struct siphash *state) {
1272         assert(addr);
1273
1274         siphash24_compress(addr, sizeof(*addr), state);
1275 }
1276
1277 static int dhcp6_prefixes_compare_func(const struct in6_addr *a, const struct in6_addr *b) {
1278         return memcmp(a, b, sizeof(*a));
1279 }
1280
1281 DEFINE_PRIVATE_HASH_OPS(dhcp6_prefixes_hash_ops, struct in6_addr, dhcp6_prefixes_hash_func, dhcp6_prefixes_compare_func);
1282
1283 int manager_dhcp6_prefix_add(Manager *m, struct in6_addr *addr, Link *link) {
1284         _cleanup_free_ char *buf = NULL;
1285         Route *route;
1286         int r;
1287
1288         assert_return(m, -EINVAL);
1289         assert_return(addr, -EINVAL);
1290
1291         r = route_add(link, AF_INET6, (union in_addr_union *) addr, 64,
1292                       0, 0, 0, &route);
1293         if (r < 0)
1294                 return r;
1295
1296         r = route_configure(route, link, dhcp6_route_add_handler);
1297         if (r < 0)
1298                 return r;
1299
1300         (void) in_addr_to_string(AF_INET6, (union in_addr_union *) addr, &buf);
1301         log_link_debug(link, "Adding prefix route %s/64", strnull(buf));
1302
1303         r = hashmap_ensure_allocated(&m->dhcp6_prefixes, &dhcp6_prefixes_hash_ops);
1304         if (r < 0)
1305                 return r;
1306
1307         return hashmap_put(m->dhcp6_prefixes, addr, link);
1308 }
1309
1310 static int dhcp6_route_remove_handler(sd_netlink *nl, sd_netlink_message *m, Link *link) {
1311         int r;
1312
1313         assert(link);
1314
1315         r = sd_netlink_message_get_errno(m);
1316         if (r < 0)
1317                 log_link_debug_errno(link, r, "Received error on DHCPv6 Prefix Delegation route removal: %m");
1318
1319         return 1;
1320 }
1321
1322 static int manager_dhcp6_prefix_remove(Manager *m, struct in6_addr *addr) {
1323         _cleanup_free_ char *buf = NULL;
1324         Route *route;
1325         Link *l;
1326         int r;
1327
1328         assert_return(m, -EINVAL);
1329         assert_return(addr, -EINVAL);
1330
1331         l = hashmap_remove(m->dhcp6_prefixes, addr);
1332         if (!l)
1333                 return -EINVAL;
1334
1335         (void) sd_radv_remove_prefix(l->radv, addr, 64);
1336         r = route_get(l, AF_INET6, (union in_addr_union *) addr, 64,
1337                       0, 0, 0, &route);
1338         if (r < 0)
1339                 return r;
1340
1341         r = route_remove(route, l, dhcp6_route_remove_handler);
1342         if (r < 0)
1343                 return r;
1344
1345         (void) in_addr_to_string(AF_INET6, (union in_addr_union *) addr, &buf);
1346         log_link_debug(l, "Removing prefix route %s/64", strnull(buf));
1347
1348         return 0;
1349 }
1350
1351 int manager_dhcp6_prefix_remove_all(Manager *m, Link *link) {
1352         struct in6_addr *addr;
1353         Iterator i;
1354         Link *l;
1355
1356         assert_return(m, -EINVAL);
1357         assert_return(link, -EINVAL);
1358
1359         HASHMAP_FOREACH_KEY(l, addr, m->dhcp6_prefixes, i) {
1360                 if (l != link)
1361                         continue;
1362
1363                 (void) manager_dhcp6_prefix_remove(m, addr);
1364         }
1365
1366         return 0;
1367 }
1368
1369 int manager_new(Manager **ret) {
1370         _cleanup_(manager_freep) Manager *m = NULL;
1371         int r;
1372
1373         m = new0(Manager, 1);
1374         if (!m)
1375                 return -ENOMEM;
1376
1377         m->state_file = strdup("/run/systemd/netif/state");
1378         if (!m->state_file)
1379                 return -ENOMEM;
1380
1381         m->sysctl_ipv6_enabled = -1;
1382
1383         r = sd_event_default(&m->event);
1384         if (r < 0)
1385                 return r;
1386
1387         (void) sd_event_set_watchdog(m->event, true);
1388         (void) sd_event_add_signal(m->event, NULL, SIGTERM, NULL, NULL);
1389         (void) sd_event_add_signal(m->event, NULL, SIGINT, NULL, NULL);
1390
1391         r = sd_event_add_post(m->event, NULL, manager_dirty_handler, m);
1392         if (r < 0)
1393                 return r;
1394
1395         r = manager_connect_rtnl(m);
1396         if (r < 0)
1397                 return r;
1398
1399         r = manager_connect_genl(m);
1400         if (r < 0)
1401                 return r;
1402
1403         r = manager_connect_udev(m);
1404         if (r < 0)
1405                 return r;
1406
1407         LIST_HEAD_INIT(m->networks);
1408
1409         r = sd_resolve_default(&m->resolve);
1410         if (r < 0)
1411                 return r;
1412
1413         r = sd_resolve_attach_event(m->resolve, m->event, 0);
1414         if (r < 0)
1415                 return r;
1416
1417         r = setup_default_address_pool(m);
1418         if (r < 0)
1419                 return r;
1420
1421         m->duid.type = DUID_TYPE_EN;
1422
1423         (void) routing_policy_load_rules(m->state_file, &m->rules_saved);
1424
1425         *ret = TAKE_PTR(m);
1426
1427         return 0;
1428 }
1429
1430 void manager_free(Manager *m) {
1431         AddressPool *pool;
1432         Network *network;
1433         Link *link;
1434
1435         if (!m)
1436                 return;
1437
1438         free(m->state_file);
1439
1440         sd_netlink_unref(m->rtnl);
1441         sd_netlink_unref(m->genl);
1442         sd_resolve_unref(m->resolve);
1443
1444         while ((link = hashmap_first(m->dhcp6_prefixes)))
1445                 manager_dhcp6_prefix_remove_all(m, link);
1446         hashmap_free(m->dhcp6_prefixes);
1447
1448         while ((link = hashmap_steal_first(m->links))) {
1449                 if (link->dhcp6_client)
1450                         (void) dhcp6_lease_pd_prefix_lost(link->dhcp6_client, link);
1451                 link_unref(link);
1452         }
1453
1454         m->dirty_links = set_free_with_destructor(m->dirty_links, link_unref);
1455         m->links = hashmap_free(m->links);
1456         m->links_requesting_uuid = set_free(m->links_requesting_uuid);
1457         set_free(m->duids_requesting_uuid);
1458
1459         while ((network = m->networks))
1460                 network_free(network);
1461
1462         hashmap_free(m->networks_by_name);
1463
1464         m->netdevs = hashmap_free_with_destructor(m->netdevs, netdev_unref);
1465
1466         while ((pool = m->address_pools))
1467                 address_pool_free(pool);
1468
1469         /* routing_policy_rule_free() access m->rules and m->rules_foreign.
1470          * So, it is necessary to set NULL after the sets are freed. */
1471         m->rules = set_free_with_destructor(m->rules, routing_policy_rule_free);
1472         m->rules_foreign = set_free_with_destructor(m->rules_foreign, routing_policy_rule_free);
1473         set_free_with_destructor(m->rules_saved, routing_policy_rule_free);
1474
1475         sd_event_unref(m->event);
1476
1477         sd_device_monitor_unref(m->device_monitor);
1478
1479         sd_bus_flush_close_unref(m->bus);
1480
1481         free(m->dynamic_timezone);
1482         free(m->dynamic_hostname);
1483
1484         free(m);
1485 }
1486
1487 int manager_start(Manager *m) {
1488         Link *link;
1489         Iterator i;
1490
1491         assert(m);
1492
1493         /* The dirty handler will deal with future serialization, but the first one
1494            must be done explicitly. */
1495
1496         manager_save(m);
1497
1498         HASHMAP_FOREACH(link, m->links, i)
1499                 link_save(link);
1500
1501         return 0;
1502 }
1503
1504 int manager_load_config(Manager *m) {
1505         int r;
1506
1507         /* update timestamp */
1508         paths_check_timestamp(NETWORK_DIRS, &m->network_dirs_ts_usec, true);
1509
1510         r = netdev_load(m);
1511         if (r < 0)
1512                 return r;
1513
1514         r = network_load(m);
1515         if (r < 0)
1516                 return r;
1517
1518         return 0;
1519 }
1520
1521 bool manager_should_reload(Manager *m) {
1522         return paths_check_timestamp(NETWORK_DIRS, &m->network_dirs_ts_usec, false);
1523 }
1524
1525 int manager_rtnl_enumerate_links(Manager *m) {
1526         _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL, *reply = NULL;
1527         sd_netlink_message *link;
1528         int r;
1529
1530         assert(m);
1531         assert(m->rtnl);
1532
1533         r = sd_rtnl_message_new_link(m->rtnl, &req, RTM_GETLINK, 0);
1534         if (r < 0)
1535                 return r;
1536
1537         r = sd_netlink_message_request_dump(req, true);
1538         if (r < 0)
1539                 return r;
1540
1541         r = sd_netlink_call(m->rtnl, req, 0, &reply);
1542         if (r < 0)
1543                 return r;
1544
1545         for (link = reply; link; link = sd_netlink_message_next(link)) {
1546                 int k;
1547
1548                 m->enumerating = true;
1549
1550                 k = manager_rtnl_process_link(m->rtnl, link, m);
1551                 if (k < 0)
1552                         r = k;
1553
1554                 m->enumerating = false;
1555         }
1556
1557         return r;
1558 }
1559
1560 int manager_rtnl_enumerate_addresses(Manager *m) {
1561         _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL, *reply = NULL;
1562         sd_netlink_message *addr;
1563         int r;
1564
1565         assert(m);
1566         assert(m->rtnl);
1567
1568         r = sd_rtnl_message_new_addr(m->rtnl, &req, RTM_GETADDR, 0, 0);
1569         if (r < 0)
1570                 return r;
1571
1572         r = sd_netlink_message_request_dump(req, true);
1573         if (r < 0)
1574                 return r;
1575
1576         r = sd_netlink_call(m->rtnl, req, 0, &reply);
1577         if (r < 0)
1578                 return r;
1579
1580         for (addr = reply; addr; addr = sd_netlink_message_next(addr)) {
1581                 int k;
1582
1583                 m->enumerating = true;
1584
1585                 k = manager_rtnl_process_address(m->rtnl, addr, m);
1586                 if (k < 0)
1587                         r = k;
1588
1589                 m->enumerating = false;
1590         }
1591
1592         return r;
1593 }
1594
1595 int manager_rtnl_enumerate_routes(Manager *m) {
1596         _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL, *reply = NULL;
1597         sd_netlink_message *route;
1598         int r;
1599
1600         assert(m);
1601         assert(m->rtnl);
1602
1603         r = sd_rtnl_message_new_route(m->rtnl, &req, RTM_GETROUTE, 0, 0);
1604         if (r < 0)
1605                 return r;
1606
1607         r = sd_netlink_message_request_dump(req, true);
1608         if (r < 0)
1609                 return r;
1610
1611         r = sd_netlink_call(m->rtnl, req, 0, &reply);
1612         if (r < 0)
1613                 return r;
1614
1615         for (route = reply; route; route = sd_netlink_message_next(route)) {
1616                 int k;
1617
1618                 m->enumerating = true;
1619
1620                 k = manager_rtnl_process_route(m->rtnl, route, m);
1621                 if (k < 0)
1622                         r = k;
1623
1624                 m->enumerating = false;
1625         }
1626
1627         return r;
1628 }
1629
1630 int manager_rtnl_enumerate_rules(Manager *m) {
1631         _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL, *reply = NULL;
1632         sd_netlink_message *rule;
1633         int r;
1634
1635         assert(m);
1636         assert(m->rtnl);
1637
1638         r = sd_rtnl_message_new_routing_policy_rule(m->rtnl, &req, RTM_GETRULE, 0);
1639         if (r < 0)
1640                 return r;
1641
1642         r = sd_netlink_message_request_dump(req, true);
1643         if (r < 0)
1644                 return r;
1645
1646         r = sd_netlink_call(m->rtnl, req, 0, &reply);
1647         if (r < 0) {
1648                 if (r == -EOPNOTSUPP) {
1649                         log_debug("FIB Rules are not supported by the kernel. Ignoring.");
1650                         return 0;
1651                 }
1652
1653                 return r;
1654         }
1655
1656         for (rule = reply; rule; rule = sd_netlink_message_next(rule)) {
1657                 int k;
1658
1659                 m->enumerating = true;
1660
1661                 k = manager_rtnl_process_rule(m->rtnl, rule, m);
1662                 if (k < 0)
1663                         r = k;
1664
1665                 m->enumerating = false;
1666         }
1667
1668         return r;
1669 }
1670
1671 int manager_address_pool_acquire(Manager *m, int family, unsigned prefixlen, union in_addr_union *found) {
1672         AddressPool *p;
1673         int r;
1674
1675         assert(m);
1676         assert(prefixlen > 0);
1677         assert(found);
1678
1679         LIST_FOREACH(address_pools, p, m->address_pools) {
1680                 if (p->family != family)
1681                         continue;
1682
1683                 r = address_pool_acquire(p, prefixlen, found);
1684                 if (r != 0)
1685                         return r;
1686         }
1687
1688         return 0;
1689 }
1690
1691 Link* manager_find_uplink(Manager *m, Link *exclude) {
1692         _cleanup_free_ struct local_address *gateways = NULL;
1693         int n, i;
1694
1695         assert(m);
1696
1697         /* Looks for a suitable "uplink", via black magic: an
1698          * interface that is up and where the default route with the
1699          * highest priority points to. */
1700
1701         n = local_gateways(m->rtnl, 0, AF_UNSPEC, &gateways);
1702         if (n < 0) {
1703                 log_warning_errno(n, "Failed to determine list of default gateways: %m");
1704                 return NULL;
1705         }
1706
1707         for (i = 0; i < n; i++) {
1708                 Link *link;
1709
1710                 link = hashmap_get(m->links, INT_TO_PTR(gateways[i].ifindex));
1711                 if (!link) {
1712                         log_debug("Weird, found a gateway for a link we don't know. Ignoring.");
1713                         continue;
1714                 }
1715
1716                 if (link == exclude)
1717                         continue;
1718
1719                 if (link->operstate < LINK_OPERSTATE_ROUTABLE)
1720                         continue;
1721
1722                 return link;
1723         }
1724
1725         return NULL;
1726 }
1727
1728 void manager_dirty(Manager *manager) {
1729         assert(manager);
1730
1731         /* the serialized state in /run is no longer up-to-date */
1732         manager->dirty = true;
1733 }
1734
1735 static int set_hostname_handler(sd_bus_message *m, void *userdata, sd_bus_error *ret_error) {
1736         Manager *manager = userdata;
1737         const sd_bus_error *e;
1738
1739         assert(m);
1740         assert(manager);
1741
1742         e = sd_bus_message_get_error(m);
1743         if (e)
1744                 log_warning_errno(sd_bus_error_get_errno(e), "Could not set hostname: %s", e->message);
1745
1746         return 1;
1747 }
1748
1749 int manager_set_hostname(Manager *m, const char *hostname) {
1750         int r;
1751
1752         log_debug("Setting transient hostname: '%s'", strna(hostname));
1753
1754         if (free_and_strdup(&m->dynamic_hostname, hostname) < 0)
1755                 return log_oom();
1756
1757         if (!m->bus || sd_bus_is_ready(m->bus) <= 0) {
1758                 log_debug("Not connected to system bus, setting hostname later.");
1759                 return 0;
1760         }
1761
1762         r = sd_bus_call_method_async(
1763                         m->bus,
1764                         NULL,
1765                         "org.freedesktop.hostname1",
1766                         "/org/freedesktop/hostname1",
1767                         "org.freedesktop.hostname1",
1768                         "SetHostname",
1769                         set_hostname_handler,
1770                         m,
1771                         "sb",
1772                         hostname,
1773                         false);
1774
1775         if (r < 0)
1776                 return log_error_errno(r, "Could not set transient hostname: %m");
1777
1778         return 0;
1779 }
1780
1781 static int set_timezone_handler(sd_bus_message *m, void *userdata, sd_bus_error *ret_error) {
1782         Manager *manager = userdata;
1783         const sd_bus_error *e;
1784
1785         assert(m);
1786         assert(manager);
1787
1788         e = sd_bus_message_get_error(m);
1789         if (e)
1790                 log_warning_errno(sd_bus_error_get_errno(e), "Could not set timezone: %s", e->message);
1791
1792         return 1;
1793 }
1794
1795 int manager_set_timezone(Manager *m, const char *tz) {
1796         int r;
1797
1798         assert(m);
1799         assert(tz);
1800
1801         log_debug("Setting system timezone: '%s'", tz);
1802         if (free_and_strdup(&m->dynamic_timezone, tz) < 0)
1803                 return log_oom();
1804
1805         if (!m->bus || sd_bus_is_ready(m->bus) <= 0) {
1806                 log_debug("Not connected to system bus, setting timezone later.");
1807                 return 0;
1808         }
1809
1810         r = sd_bus_call_method_async(
1811                         m->bus,
1812                         NULL,
1813                         "org.freedesktop.timedate1",
1814                         "/org/freedesktop/timedate1",
1815                         "org.freedesktop.timedate1",
1816                         "SetTimezone",
1817                         set_timezone_handler,
1818                         m,
1819                         "sb",
1820                         tz,
1821                         false);
1822         if (r < 0)
1823                 return log_error_errno(r, "Could not set timezone: %m");
1824
1825         return 0;
1826 }
1827
1828 int manager_request_product_uuid(Manager *m, Link *link) {
1829         int r;
1830
1831         assert(m);
1832
1833         if (m->has_product_uuid)
1834                 return 0;
1835
1836         log_debug("Requesting product UUID");
1837
1838         if (link) {
1839                 DUID *duid;
1840
1841                 assert_se(duid = link_get_duid(link));
1842
1843                 r = set_ensure_allocated(&m->links_requesting_uuid, NULL);
1844                 if (r < 0)
1845                         return log_oom();
1846
1847                 r = set_ensure_allocated(&m->duids_requesting_uuid, NULL);
1848                 if (r < 0)
1849                         return log_oom();
1850
1851                 r = set_put(m->links_requesting_uuid, link);
1852                 if (r < 0)
1853                         return log_oom();
1854
1855                 r = set_put(m->duids_requesting_uuid, duid);
1856                 if (r < 0)
1857                         return log_oom();
1858         }
1859
1860         if (!m->bus || sd_bus_is_ready(m->bus) <= 0) {
1861                 log_debug("Not connected to system bus, requesting product UUID later.");
1862                 return 0;
1863         }
1864
1865         r = sd_bus_call_method_async(
1866                         m->bus,
1867                         NULL,
1868                         "org.freedesktop.hostname1",
1869                         "/org/freedesktop/hostname1",
1870                         "org.freedesktop.hostname1",
1871                         "GetProductUUID",
1872                         get_product_uuid_handler,
1873                         m,
1874                         "b",
1875                         false);
1876         if (r < 0)
1877                 return log_warning_errno(r, "Failed to get product UUID: %m");
1878
1879         return 0;
1880 }
1881
1882 int manager_sysctl_ipv6_enabled(Manager *manager) {
1883         _cleanup_free_ char *value = NULL;
1884         int r;
1885
1886         if (manager->sysctl_ipv6_enabled >= 0)
1887                 return manager->sysctl_ipv6_enabled;
1888
1889         r = sysctl_read_ip_property(AF_INET6, "all", "disable_ipv6", &value);
1890         if (r < 0)
1891                 return log_warning_errno(r, "Failed to read net.ipv6.conf.all.disable_ipv6 sysctl property: %m");
1892
1893         manager->sysctl_ipv6_enabled = value[0] == '0';
1894         return manager->sysctl_ipv6_enabled;
1895 }