src/network/networkd-manager.c

   1 /* SPDX-License-Identifier: LGPL-2.1+ */
   2
   3 #include <netinet/in.h>
   4 #include <sys/socket.h>
   5 #include <unistd.h>
   6 #include <linux/if.h>
   7 #include <linux/fib_rules.h>
   8
   9 #include "sd-daemon.h"
  10 #include "sd-netlink.h"
  11
  12 #include "alloc-util.h"
  13 #include "bus-util.h"
  14 #include "conf-parser.h"
  15 #include "def.h"
  16 #include "device-private.h"
  17 #include "device-util.h"
  18 #include "dns-domain.h"
  19 #include "fd-util.h"
  20 #include "fileio.h"
  21 #include "local-addresses.h"
  22 #include "netlink-util.h"
  23 #include "network-internal.h"
  24 #include "networkd-link-bus.h"
  25 #include "networkd-manager.h"
  26 #include "networkd-speed-meter.h"
  27 #include "ordered-set.h"
  28 #include "path-util.h"
  29 #include "set.h"
  30 #include "strv.h"
  31 #include "sysctl-util.h"
  32 #include "tmpfile-util.h"
  33 #include "udev-util.h"
  34 #include "virt.h"
  35
  36 /* use 8 MB for receive socket kernel queue. */
  37 #define RCVBUF_SIZE    (8*1024*1024)
  38
  39 static int setup_default_address_pool(Manager *m) {
  40         AddressPool *p;
  41         int r;
  42
  43         assert(m);
  44
  45         /* Add in the well-known private address ranges. */
  46
  47         r = address_pool_new_from_string(m, &p, AF_INET6, "fd00::", 8);
  48         if (r < 0)
  49                 return r;
  50
  51         r = address_pool_new_from_string(m, &p, AF_INET, "10.0.0.0", 8);
  52         if (r < 0)
  53                 return r;
  54
  55         r = address_pool_new_from_string(m, &p, AF_INET, "172.16.0.0", 12);
  56         if (r < 0)
  57                 return r;
  58
  59         r = address_pool_new_from_string(m, &p, AF_INET, "192.168.0.0", 16);
  60         if (r < 0)
  61                 return r;
  62
  63         return 0;
  64 }
  65
  66 static int manager_reset_all(Manager *m) {
  67         Link *link;
  68         Iterator i;
  69         int r;
  70
  71         assert(m);
  72
  73         HASHMAP_FOREACH(link, m->links, i) {
  74                 r = link_carrier_reset(link);
  75                 if (r < 0)
  76                         log_link_warning_errno(link, r, "Could not reset carrier: %m");
  77         }
  78
  79         return 0;
  80 }
  81
  82 static int match_prepare_for_sleep(sd_bus_message *message, void *userdata, sd_bus_error *ret_error) {
  83         Manager *m = userdata;
  84         int b, r;
  85
  86         assert(message);
  87         assert(m);
  88
  89         r = sd_bus_message_read(message, "b", &b);
  90         if (r < 0) {
  91                 log_debug_errno(r, "Failed to parse PrepareForSleep signal: %m");
  92                 return 0;
  93         }
  94
  95         if (b)
  96                 return 0;
  97
  98         log_debug("Coming back from suspend, resetting all connections...");
  99
 100         (void) manager_reset_all(m);
 101
 102         return 0;
 103 }
 104
 105 static int on_connected(sd_bus_message *message, void *userdata, sd_bus_error *ret_error) {
 106         Manager *m = userdata;
 107
 108         assert(message);
 109         assert(m);
 110
 111         /* Did we get a timezone or transient hostname from DHCP while D-Bus wasn't up yet? */
 112         if (m->dynamic_hostname)
 113                 (void) manager_set_hostname(m, m->dynamic_hostname);
 114         if (m->dynamic_timezone)
 115                 (void) manager_set_timezone(m, m->dynamic_timezone);
 116         if (m->links_requesting_uuid)
 117                 (void) manager_request_product_uuid(m, NULL);
 118
 119         return 0;
 120 }
 121
 122 int manager_connect_bus(Manager *m) {
 123         int r;
 124
 125         assert(m);
 126
 127         if (m->bus)
 128                 return 0;
 129
 130         r = bus_open_system_watch_bind_with_description(&m->bus, "bus-api-network");
 131         if (r < 0)
 132                 return log_error_errno(r, "Failed to connect to bus: %m");
 133
 134         r = sd_bus_add_object_vtable(m->bus, NULL, "/org/freedesktop/network1", "org.freedesktop.network1.Manager", manager_vtable, m);
 135         if (r < 0)
 136                 return log_error_errno(r, "Failed to add manager object vtable: %m");
 137
 138         r = sd_bus_add_fallback_vtable(m->bus, NULL, "/org/freedesktop/network1/link", "org.freedesktop.network1.Link", link_vtable, link_object_find, m);
 139         if (r < 0)
 140                return log_error_errno(r, "Failed to add link object vtable: %m");
 141
 142         r = sd_bus_add_node_enumerator(m->bus, NULL, "/org/freedesktop/network1/link", link_node_enumerator, m);
 143         if (r < 0)
 144                 return log_error_errno(r, "Failed to add link enumerator: %m");
 145
 146         r = sd_bus_add_fallback_vtable(m->bus, NULL, "/org/freedesktop/network1/network", "org.freedesktop.network1.Network", network_vtable, network_object_find, m);
 147         if (r < 0)
 148                return log_error_errno(r, "Failed to add network object vtable: %m");
 149
 150         r = sd_bus_add_node_enumerator(m->bus, NULL, "/org/freedesktop/network1/network", network_node_enumerator, m);
 151         if (r < 0)
 152                 return log_error_errno(r, "Failed to add network enumerator: %m");
 153
 154         r = sd_bus_request_name_async(m->bus, NULL, "org.freedesktop.network1", 0, NULL, NULL);
 155         if (r < 0)
 156                 return log_error_errno(r, "Failed to request name: %m");
 157
 158         r = sd_bus_attach_event(m->bus, m->event, 0);
 159         if (r < 0)
 160                 return log_error_errno(r, "Failed to attach bus to event loop: %m");
 161
 162         r = sd_bus_match_signal_async(
 163                         m->bus,
 164                         NULL,
 165                         "org.freedesktop.DBus.Local",
 166                         NULL,
 167                         "org.freedesktop.DBus.Local",
 168                         "Connected",
 169                         on_connected, NULL, m);
 170         if (r < 0)
 171                 return log_error_errno(r, "Failed to request match on Connected signal: %m");
 172
 173         r = sd_bus_match_signal_async(
 174                         m->bus,
 175                         NULL,
 176                         "org.freedesktop.login1",
 177                         "/org/freedesktop/login1",
 178                         "org.freedesktop.login1.Manager",
 179                         "PrepareForSleep",
 180                         match_prepare_for_sleep, NULL, m);
 181         if (r < 0)
 182                 log_warning_errno(r, "Failed to request match for PrepareForSleep, ignoring: %m");
 183
 184         return 0;
 185 }
 186
 187 static int manager_udev_process_link(sd_device_monitor *monitor, sd_device *device, void *userdata) {
 188         Manager *m = userdata;
 189         DeviceAction action;
 190         Link *link = NULL;
 191         int r, ifindex;
 192
 193         assert(m);
 194         assert(device);
 195
 196         r = device_get_action(device, &action);
 197         if (r < 0) {
 198                 log_device_debug_errno(device, r, "Failed to get udev action, ignoring device: %m");
 199                 return 0;
 200         }
 201
 202         if (!IN_SET(action, DEVICE_ACTION_ADD, DEVICE_ACTION_CHANGE, DEVICE_ACTION_MOVE)) {
 203                 log_device_debug(device, "Ignoring udev %s event for device.", device_action_to_string(action));
 204                 return 0;
 205         }
 206
 207         r = sd_device_get_ifindex(device, &ifindex);
 208         if (r < 0) {
 209                 log_device_debug_errno(device, r, "Ignoring udev ADD event for device without ifindex or with invalid ifindex: %m");
 210                 return 0;
 211         }
 212
 213         r = device_is_renaming(device);
 214         if (r < 0) {
 215                 log_device_error_errno(device, r, "Failed to determine the device is renamed or not, ignoring '%s' uevent: %m",
 216                                        device_action_to_string(action));
 217                 return 0;
 218         }
 219         if (r > 0) {
 220                 log_device_debug(device, "Interface is under renaming, wait for the interface to be renamed: %m");
 221                 return 0;
 222         }
 223
 224         r = link_get(m, ifindex, &link);
 225         if (r < 0) {
 226                 if (r != -ENODEV)
 227                         log_debug_errno(r, "Failed to get link from ifindex %i, ignoring: %m", ifindex);
 228                 return 0;
 229         }
 230
 231         (void) link_initialized(link, device);
 232
 233         return 0;
 234 }
 235
 236 static int manager_connect_udev(Manager *m) {
 237         int r;
 238
 239         /* udev does not initialize devices inside containers,
 240          * so we rely on them being already initialized before
 241          * entering the container */
 242         if (detect_container() > 0)
 243                 return 0;
 244
 245         r = sd_device_monitor_new(&m->device_monitor);
 246         if (r < 0)
 247                 return log_error_errno(r, "Failed to initialize device monitor: %m");
 248
 249         r = sd_device_monitor_filter_add_match_subsystem_devtype(m->device_monitor, "net", NULL);
 250         if (r < 0)
 251                 return log_error_errno(r, "Could not add device monitor filter: %m");
 252
 253         r = sd_device_monitor_attach_event(m->device_monitor, m->event);
 254         if (r < 0)
 255                 return log_error_errno(r, "Failed to attach event to device monitor: %m");
 256
 257         r = sd_device_monitor_start(m->device_monitor, manager_udev_process_link, m);
 258         if (r < 0)
 259                 return log_error_errno(r, "Failed to start device monitor: %m");
 260
 261         return 0;
 262 }
 263
 264 int manager_rtnl_process_route(sd_netlink *rtnl, sd_netlink_message *message, void *userdata) {
 265         Manager *m = userdata;
 266         Link *link = NULL;
 267         uint16_t type;
 268         uint32_t ifindex, priority = 0;
 269         unsigned char protocol, scope, tos, table, rt_type;
 270         int family;
 271         unsigned char dst_prefixlen, src_prefixlen;
 272         union in_addr_union dst = IN_ADDR_NULL, gw = IN_ADDR_NULL, src = IN_ADDR_NULL, prefsrc = IN_ADDR_NULL;
 273         Route *route = NULL;
 274         int r;
 275
 276         assert(rtnl);
 277         assert(message);
 278         assert(m);
 279
 280         if (sd_netlink_message_is_error(message)) {
 281                 r = sd_netlink_message_get_errno(message);
 282                 if (r < 0)
 283                         log_warning_errno(r, "rtnl: failed to receive route, ignoring: %m");
 284
 285                 return 0;
 286         }
 287
 288         r = sd_netlink_message_get_type(message, &type);
 289         if (r < 0) {
 290                 log_warning_errno(r, "rtnl: could not get message type, ignoring: %m");
 291                 return 0;
 292         } else if (!IN_SET(type, RTM_NEWROUTE, RTM_DELROUTE)) {
 293                 log_warning("rtnl: received unexpected message type when processing route, ignoring");
 294                 return 0;
 295         }
 296
 297         r = sd_netlink_message_read_u32(message, RTA_OIF, &ifindex);
 298         if (r == -ENODATA) {
 299                 log_debug("rtnl: received route without ifindex, ignoring");
 300                 return 0;
 301         } else if (r < 0) {
 302                 log_warning_errno(r, "rtnl: could not get ifindex from route, ignoring: %m");
 303                 return 0;
 304         } else if (ifindex <= 0) {
 305                 log_warning("rtnl: received route message with invalid ifindex, ignoring: %d", ifindex);
 306                 return 0;
 307         } else {
 308                 r = link_get(m, ifindex, &link);
 309                 if (r < 0 || !link) {
 310                         /* when enumerating we might be out of sync, but we will
 311                          * get the route again, so just ignore it */
 312                         if (!m->enumerating)
 313                                 log_warning("rtnl: received route for nonexistent link (%d), ignoring", ifindex);
 314                         return 0;
 315                 }
 316         }
 317
 318         r = sd_rtnl_message_route_get_family(message, &family);
 319         if (r < 0 || !IN_SET(family, AF_INET, AF_INET6)) {
 320                 log_link_warning(link, "rtnl: received address with invalid family, ignoring");
 321                 return 0;
 322         }
 323
 324         r = sd_rtnl_message_route_get_protocol(message, &protocol);
 325         if (r < 0) {
 326                 log_warning_errno(r, "rtnl: could not get route protocol: %m");
 327                 return 0;
 328         }
 329
 330         switch (family) {
 331         case AF_INET:
 332                 r = sd_netlink_message_read_in_addr(message, RTA_DST, &dst.in);
 333                 if (r < 0 && r != -ENODATA) {
 334                         log_link_warning_errno(link, r, "rtnl: received route without valid destination, ignoring: %m");
 335                         return 0;
 336                 }
 337
 338                 r = sd_netlink_message_read_in_addr(message, RTA_GATEWAY, &gw.in);
 339                 if (r < 0 && r != -ENODATA) {
 340                         log_link_warning_errno(link, r, "rtnl: received route with invalid gateway, ignoring: %m");
 341                         return 0;
 342                 }
 343
 344                 r = sd_netlink_message_read_in_addr(message, RTA_SRC, &src.in);
 345                 if (r < 0 && r != -ENODATA) {
 346                         log_link_warning_errno(link, r, "rtnl: received route with invalid source, ignoring: %m");
 347                         return 0;
 348                 }
 349
 350                 r = sd_netlink_message_read_in_addr(message, RTA_PREFSRC, &prefsrc.in);
 351                 if (r < 0 && r != -ENODATA) {
 352                         log_link_warning_errno(link, r, "rtnl: received route with invalid preferred source, ignoring: %m");
 353                         return 0;
 354                 }
 355
 356                 break;
 357
 358         case AF_INET6:
 359                 r = sd_netlink_message_read_in6_addr(message, RTA_DST, &dst.in6);
 360                 if (r < 0 && r != -ENODATA) {
 361                         log_link_warning_errno(link, r, "rtnl: received route without valid destination, ignoring: %m");
 362                         return 0;
 363                 }
 364
 365                 r = sd_netlink_message_read_in6_addr(message, RTA_GATEWAY, &gw.in6);
 366                 if (r < 0 && r != -ENODATA) {
 367                         log_link_warning_errno(link, r, "rtnl: received route with invalid gateway, ignoring: %m");
 368                         return 0;
 369                 }
 370
 371                 r = sd_netlink_message_read_in6_addr(message, RTA_SRC, &src.in6);
 372                 if (r < 0 && r != -ENODATA) {
 373                         log_link_warning_errno(link, r, "rtnl: received route with invalid source, ignoring: %m");
 374                         return 0;
 375                 }
 376
 377                 r = sd_netlink_message_read_in6_addr(message, RTA_PREFSRC, &prefsrc.in6);
 378                 if (r < 0 && r != -ENODATA) {
 379                         log_link_warning_errno(link, r, "rtnl: received route with invalid preferred source, ignoring: %m");
 380                         return 0;
 381                 }
 382
 383                 break;
 384
 385         default:
 386                 assert_not_reached("Received unsupported address family");
 387                 return 0;
 388         }
 389
 390         r = sd_rtnl_message_route_get_dst_prefixlen(message, &dst_prefixlen);
 391         if (r < 0) {
 392                 log_link_warning_errno(link, r, "rtnl: received route with invalid destination prefixlen, ignoring: %m");
 393                 return 0;
 394         }
 395
 396         r = sd_rtnl_message_route_get_src_prefixlen(message, &src_prefixlen);
 397         if (r < 0) {
 398                 log_link_warning_errno(link, r, "rtnl: received route with invalid source prefixlen, ignoring: %m");
 399                 return 0;
 400         }
 401
 402         r = sd_rtnl_message_route_get_scope(message, &scope);
 403         if (r < 0) {
 404                 log_link_warning_errno(link, r, "rtnl: received route with invalid scope, ignoring: %m");
 405                 return 0;
 406         }
 407
 408         r = sd_rtnl_message_route_get_tos(message, &tos);
 409         if (r < 0) {
 410                 log_link_warning_errno(link, r, "rtnl: received route with invalid tos, ignoring: %m");
 411                 return 0;
 412         }
 413
 414         r = sd_rtnl_message_route_get_type(message, &rt_type);
 415         if (r < 0) {
 416                 log_link_warning_errno(link, r, "rtnl: received route with invalid type, ignoring: %m");
 417                 return 0;
 418         }
 419
 420         r = sd_rtnl_message_route_get_table(message, &table);
 421         if (r < 0) {
 422                 log_link_warning_errno(link, r, "rtnl: received route with invalid table, ignoring: %m");
 423                 return 0;
 424         }
 425
 426         r = sd_netlink_message_read_u32(message, RTA_PRIORITY, &priority);
 427         if (r < 0 && r != -ENODATA) {
 428                 log_link_warning_errno(link, r, "rtnl: received route with invalid priority, ignoring: %m");
 429                 return 0;
 430         }
 431
 432         (void) route_get(link, family, &dst, dst_prefixlen, tos, priority, table, &route);
 433
 434         if (DEBUG_LOGGING) {
 435                 _cleanup_free_ char *buf_dst = NULL, *buf_dst_prefixlen = NULL,
 436                         *buf_src = NULL, *buf_gw = NULL, *buf_prefsrc = NULL;
 437
 438                 if (!in_addr_is_null(family, &dst)) {
 439                         (void) in_addr_to_string(family, &dst, &buf_dst);
 440                         (void) asprintf(&buf_dst_prefixlen, "/%u", dst_prefixlen);
 441                 }
 442                 if (!in_addr_is_null(family, &src))
 443                         (void) in_addr_to_string(family, &src, &buf_src);
 444                 if (!in_addr_is_null(family, &gw))
 445                         (void) in_addr_to_string(family, &gw, &buf_gw);
 446                 if (!in_addr_is_null(family, &prefsrc))
 447                         (void) in_addr_to_string(family, &prefsrc, &buf_prefsrc);
 448
 449                 log_link_debug(link,
 450                                "%s route: dst: %s%s, src: %s, gw: %s, prefsrc: %s",
 451                                type == RTM_DELROUTE ? "Removing" : route ? "Updating" : "Adding",
 452                                strna(buf_dst), strempty(buf_dst_prefixlen),
 453                                strna(buf_src), strna(buf_gw), strna(buf_prefsrc));
 454         }
 455
 456         switch (type) {
 457         case RTM_NEWROUTE:
 458                 if (!route) {
 459                         /* A route appeared that we did not request */
 460                         r = route_add_foreign(link, family, &dst, dst_prefixlen, tos, priority, table, &route);
 461                         if (r < 0) {
 462                                 log_link_warning_errno(link, r, "Failed to add route, ignoring: %m");
 463                                 return 0;
 464                         }
 465                 }
 466
 467                 route_update(route, &src, src_prefixlen, &gw, &prefsrc, scope, protocol, rt_type);
 468
 469                 break;
 470
 471         case RTM_DELROUTE:
 472                 route_free(route);
 473                 break;
 474
 475         default:
 476                 assert_not_reached("Received invalid RTNL message type");
 477         }
 478
 479         return 1;
 480 }
 481
 482 int manager_rtnl_process_address(sd_netlink *rtnl, sd_netlink_message *message, void *userdata) {
 483         _cleanup_free_ char *buf = NULL;
 484         Manager *m = userdata;
 485         Link *link = NULL;
 486         uint16_t type;
 487         unsigned char flags, prefixlen, scope;
 488         union in_addr_union in_addr = IN_ADDR_NULL;
 489         struct ifa_cacheinfo cinfo;
 490         Address *address = NULL;
 491         char valid_buf[FORMAT_TIMESPAN_MAX];
 492         const char *valid_str = NULL;
 493         int ifindex, family, r;
 494
 495         assert(rtnl);
 496         assert(message);
 497         assert(m);
 498
 499         if (sd_netlink_message_is_error(message)) {
 500                 r = sd_netlink_message_get_errno(message);
 501                 if (r < 0)
 502                         log_warning_errno(r, "rtnl: failed to receive address, ignoring: %m");
 503
 504                 return 0;
 505         }
 506
 507         r = sd_netlink_message_get_type(message, &type);
 508         if (r < 0) {
 509                 log_warning_errno(r, "rtnl: could not get message type, ignoring: %m");
 510                 return 0;
 511         } else if (!IN_SET(type, RTM_NEWADDR, RTM_DELADDR)) {
 512                 log_warning("rtnl: received unexpected message type when processing address, ignoring");
 513                 return 0;
 514         }
 515
 516         r = sd_rtnl_message_addr_get_ifindex(message, &ifindex);
 517         if (r < 0) {
 518                 log_warning_errno(r, "rtnl: could not get ifindex from address, ignoring: %m");
 519                 return 0;
 520         } else if (ifindex <= 0) {
 521                 log_warning("rtnl: received address message with invalid ifindex, ignoring: %d", ifindex);
 522                 return 0;
 523         } else {
 524                 r = link_get(m, ifindex, &link);
 525                 if (r < 0 || !link) {
 526                         /* when enumerating we might be out of sync, but we will
 527                          * get the address again, so just ignore it */
 528                         if (!m->enumerating)
 529                                 log_warning("rtnl: received address for nonexistent link (%d), ignoring", ifindex);
 530                         return 0;
 531                 }
 532         }
 533
 534         r = sd_rtnl_message_addr_get_family(message, &family);
 535         if (r < 0 || !IN_SET(family, AF_INET, AF_INET6)) {
 536                 log_link_warning(link, "rtnl: received address with invalid family, ignoring");
 537                 return 0;
 538         }
 539
 540         r = sd_rtnl_message_addr_get_prefixlen(message, &prefixlen);
 541         if (r < 0) {
 542                 log_link_warning_errno(link, r, "rtnl: received address with invalid prefixlen, ignoring: %m");
 543                 return 0;
 544         }
 545
 546         r = sd_rtnl_message_addr_get_scope(message, &scope);
 547         if (r < 0) {
 548                 log_link_warning_errno(link, r, "rtnl: received address with invalid scope, ignoring: %m");
 549                 return 0;
 550         }
 551
 552         r = sd_rtnl_message_addr_get_flags(message, &flags);
 553         if (r < 0) {
 554                 log_link_warning_errno(link, r, "rtnl: received address with invalid flags, ignoring: %m");
 555                 return 0;
 556         }
 557
 558         switch (family) {
 559         case AF_INET:
 560                 r = sd_netlink_message_read_in_addr(message, IFA_LOCAL, &in_addr.in);
 561                 if (r < 0) {
 562                         log_link_warning_errno(link, r, "rtnl: received address without valid address, ignoring: %m");
 563                         return 0;
 564                 }
 565
 566                 break;
 567
 568         case AF_INET6:
 569                 r = sd_netlink_message_read_in6_addr(message, IFA_ADDRESS, &in_addr.in6);
 570                 if (r < 0) {
 571                         log_link_warning_errno(link, r, "rtnl: received address without valid address, ignoring: %m");
 572                         return 0;
 573                 }
 574
 575                 break;
 576
 577         default:
 578                 assert_not_reached("Received unsupported address family");
 579         }
 580
 581         r = in_addr_to_string(family, &in_addr, &buf);
 582         if (r < 0) {
 583                 log_link_warning_errno(link, r, "Could not print address, ignoring: %m");
 584                 return 0;
 585         }
 586
 587         r = sd_netlink_message_read_cache_info(message, IFA_CACHEINFO, &cinfo);
 588         if (r < 0 && r != -ENODATA) {
 589                 log_link_warning_errno(link, r, "rtnl: cannot get IFA_CACHEINFO attribute, ignoring: %m");
 590                 return 0;
 591         } else if (r >= 0 && cinfo.ifa_valid != CACHE_INFO_INFINITY_LIFE_TIME)
 592                 valid_str = format_timespan(valid_buf, FORMAT_TIMESPAN_MAX,
 593                                             cinfo.ifa_valid * USEC_PER_SEC,
 594                                             USEC_PER_SEC);
 595
 596         (void) address_get(link, family, &in_addr, prefixlen, &address);
 597
 598         switch (type) {
 599         case RTM_NEWADDR:
 600                 if (address)
 601                         log_link_debug(link, "Updating address: %s/%u (valid %s%s)", buf, prefixlen,
 602                                        valid_str ? "for " : "forever", strempty(valid_str));
 603                 else {
 604                         /* An address appeared that we did not request */
 605                         r = address_add_foreign(link, family, &in_addr, prefixlen, &address);
 606                         if (r < 0) {
 607                                 log_link_warning_errno(link, r, "Failed to add address %s/%u, ignoring: %m", buf, prefixlen);
 608                                 return 0;
 609                         } else
 610                                 log_link_debug(link, "Adding address: %s/%u (valid %s%s)", buf, prefixlen,
 611                                                valid_str ? "for " : "forever", strempty(valid_str));
 612                 }
 613
 614                 r = address_update(address, flags, scope, &cinfo);
 615                 if (r < 0) {
 616                         log_link_warning_errno(link, r, "Failed to update address %s/%u, ignoring: %m", buf, prefixlen);
 617                         return 0;
 618                 }
 619
 620                 break;
 621
 622         case RTM_DELADDR:
 623
 624                 if (address) {
 625                         log_link_debug(link, "Removing address: %s/%u (valid %s%s)", buf, prefixlen,
 626                                        valid_str ? "for " : "forever", strempty(valid_str));
 627                         (void) address_drop(address);
 628                 } else
 629                         log_link_warning(link, "Removing non-existent address: %s/%u (valid %s%s), ignoring", buf, prefixlen,
 630                                          valid_str ? "for " : "forever", strempty(valid_str));
 631
 632                 break;
 633         default:
 634                 assert_not_reached("Received invalid RTNL message type");
 635         }
 636
 637         return 1;
 638 }
 639
 640 static int manager_rtnl_process_link(sd_netlink *rtnl, sd_netlink_message *message, void *userdata) {
 641         Manager *m = userdata;
 642         Link *link = NULL;
 643         NetDev *netdev = NULL;
 644         uint16_t type;
 645         const char *name;
 646         int r, ifindex;
 647
 648         assert(rtnl);
 649         assert(message);
 650         assert(m);
 651
 652         if (sd_netlink_message_is_error(message)) {
 653                 r = sd_netlink_message_get_errno(message);
 654                 if (r < 0)
 655                         log_warning_errno(r, "rtnl: Could not receive link, ignoring: %m");
 656
 657                 return 0;
 658         }
 659
 660         r = sd_netlink_message_get_type(message, &type);
 661         if (r < 0) {
 662                 log_warning_errno(r, "rtnl: Could not get message type, ignoring: %m");
 663                 return 0;
 664         } else if (!IN_SET(type, RTM_NEWLINK, RTM_DELLINK)) {
 665                 log_warning("rtnl: Received unexpected message type when processing link, ignoring");
 666                 return 0;
 667         }
 668
 669         r = sd_rtnl_message_link_get_ifindex(message, &ifindex);
 670         if (r < 0) {
 671                 log_warning_errno(r, "rtnl: Could not get ifindex from link, ignoring: %m");
 672                 return 0;
 673         } else if (ifindex <= 0) {
 674                 log_warning("rtnl: received link message with invalid ifindex %d, ignoring", ifindex);
 675                 return 0;
 676         }
 677
 678         r = sd_netlink_message_read_string(message, IFLA_IFNAME, &name);
 679         if (r < 0) {
 680                 log_warning_errno(r, "rtnl: Received link message without ifname, ignoring: %m");
 681                 return 0;
 682         }
 683
 684         (void) link_get(m, ifindex, &link);
 685         (void) netdev_get(m, name, &netdev);
 686
 687         switch (type) {
 688         case RTM_NEWLINK:
 689                 if (!link) {
 690                         /* link is new, so add it */
 691                         r = link_add(m, message, &link);
 692                         if (r < 0) {
 693                                 log_warning_errno(r, "Could not add new link, ignoring: %m");
 694                                 return 0;
 695                         }
 696                 }
 697
 698                 if (netdev) {
 699                         /* netdev exists, so make sure the ifindex matches */
 700                         r = netdev_set_ifindex(netdev, message);
 701                         if (r < 0) {
 702                                 log_warning_errno(r, "Could not set ifindex on netdev, ignoring: %m");
 703                                 return 0;
 704                         }
 705                 }
 706
 707                 r = link_update(link, message);
 708                 if (r < 0) {
 709                         log_warning_errno(r, "Could not update link, ignoring: %m");
 710                         return 0;
 711                 }
 712
 713                 break;
 714
 715         case RTM_DELLINK:
 716                 link_drop(link);
 717                 netdev_drop(netdev);
 718
 719                 break;
 720
 721         default:
 722                 assert_not_reached("Received invalid RTNL message type.");
 723         }
 724
 725         return 1;
 726 }
 727
 728 int manager_rtnl_process_rule(sd_netlink *rtnl, sd_netlink_message *message, void *userdata) {
 729         _cleanup_(routing_policy_rule_freep) RoutingPolicyRule *tmp = NULL;
 730         RoutingPolicyRule *rule = NULL;
 731         const char *iif = NULL, *oif = NULL;
 732         Manager *m = userdata;
 733         unsigned flags;
 734         uint16_t type;
 735         int r;
 736
 737         assert(rtnl);
 738         assert(message);
 739         assert(m);
 740
 741         if (sd_netlink_message_is_error(message)) {
 742                 r = sd_netlink_message_get_errno(message);
 743                 if (r < 0)
 744                         log_warning_errno(r, "rtnl: failed to receive rule, ignoring: %m");
 745
 746                 return 0;
 747         }
 748
 749         r = sd_netlink_message_get_type(message, &type);
 750         if (r < 0) {
 751                 log_warning_errno(r, "rtnl: could not get message type, ignoring: %m");
 752                 return 0;
 753         } else if (!IN_SET(type, RTM_NEWRULE, RTM_DELRULE)) {
 754                 log_warning("rtnl: received unexpected message type '%u' when processing rule, ignoring", type);
 755                 return 0;
 756         }
 757
 758         r = routing_policy_rule_new(&tmp);
 759         if (r < 0) {
 760                 log_oom();
 761                 return 0;
 762         }
 763
 764         r = sd_rtnl_message_get_family(message, &tmp->family);
 765         if (r < 0) {
 766                 log_warning_errno(r, "rtnl: could not get rule family, ignoring: %m");
 767                 return 0;
 768         } else if (!IN_SET(tmp->family, AF_INET, AF_INET6)) {
 769                 log_debug("rtnl: received address with invalid family %u, ignoring", tmp->family);
 770                 return 0;
 771         }
 772
 773         switch (tmp->family) {
 774         case AF_INET:
 775                 r = sd_netlink_message_read_in_addr(message, FRA_SRC, &tmp->from.in);
 776                 if (r < 0 && r != -ENODATA) {
 777                         log_warning_errno(r, "rtnl: could not get FRA_SRC attribute, ignoring: %m");
 778                         return 0;
 779                 } else if (r >= 0) {
 780                         r = sd_rtnl_message_routing_policy_rule_get_rtm_src_prefixlen(message, &tmp->from_prefixlen);
 781                         if (r < 0) {
 782                                 log_warning_errno(r, "rtnl: failed to retrieve rule from prefix length, ignoring: %m");
 783                                 return 0;
 784                         }
 785                 }
 786
 787                 r = sd_netlink_message_read_in_addr(message, FRA_DST, &tmp->to.in);
 788                 if (r < 0 && r != -ENODATA) {
 789                         log_warning_errno(r, "rtnl: could not get FRA_DST attribute, ignoring: %m");
 790                         return 0;
 791                 } else if (r >= 0) {
 792                         r = sd_rtnl_message_routing_policy_rule_get_rtm_dst_prefixlen(message, &tmp->to_prefixlen);
 793                         if (r < 0) {
 794                                 log_warning_errno(r, "rtnl: failed to retrieve rule to prefix length, ignoring: %m");
 795                                 return 0;
 796                         }
 797                 }
 798
 799                 break;
 800
 801         case AF_INET6:
 802                 r = sd_netlink_message_read_in6_addr(message, FRA_SRC, &tmp->from.in6);
 803                 if (r < 0 && r != -ENODATA) {
 804                         log_warning_errno(r, "rtnl: could not get FRA_SRC attribute, ignoring: %m");
 805                         return 0;
 806                 } else if (r >= 0) {
 807                         r = sd_rtnl_message_routing_policy_rule_get_rtm_src_prefixlen(message, &tmp->from_prefixlen);
 808                         if (r < 0) {
 809                                 log_warning_errno(r, "rtnl: failed to retrieve rule from prefix length, ignoring: %m");
 810                                 return 0;
 811                         }
 812                 }
 813
 814                 r = sd_netlink_message_read_in6_addr(message, FRA_DST, &tmp->to.in6);
 815                 if (r < 0 && r != -ENODATA) {
 816                         log_warning_errno(r, "rtnl: could not get FRA_DST attribute, ignoring: %m");
 817                         return 0;
 818                 } else if (r >= 0) {
 819                         r = sd_rtnl_message_routing_policy_rule_get_rtm_dst_prefixlen(message, &tmp->to_prefixlen);
 820                         if (r < 0) {
 821                                 log_warning_errno(r, "rtnl: failed to retrieve rule to prefix length, ignoring: %m");
 822                                 return 0;
 823                         }
 824                 }
 825
 826                 break;
 827
 828         default:
 829                 assert_not_reached("Received unsupported address family");
 830         }
 831
 832         if (tmp->from_prefixlen == 0 && tmp->to_prefixlen == 0)
 833                 return 0;
 834
 835         r = sd_rtnl_message_routing_policy_rule_get_flags(message, &flags);
 836         if (r < 0) {
 837                 log_warning_errno(r, "rtnl: could not get flag, ignoring: %m");
 838                 return 0;
 839         }
 840         tmp->invert_rule = flags & FIB_RULE_INVERT;
 841
 842         r = sd_netlink_message_read_u32(message, FRA_FWMARK, &tmp->fwmark);
 843         if (r < 0 && r != -ENODATA) {
 844                 log_warning_errno(r, "rtnl: could not get FRA_FWMARK attribute, ignoring: %m");
 845                 return 0;
 846         }
 847
 848         r = sd_netlink_message_read_u32(message, FRA_FWMASK, &tmp->fwmask);
 849         if (r < 0 && r != -ENODATA) {
 850                 log_warning_errno(r, "rtnl: could not get FRA_FWMASK attribute, ignoring: %m");
 851                 return 0;
 852         }
 853
 854         r = sd_netlink_message_read_u32(message, FRA_PRIORITY, &tmp->priority);
 855         if (r < 0 && r != -ENODATA) {
 856                 log_warning_errno(r, "rtnl: could not get FRA_PRIORITY attribute, ignoring: %m");
 857                 return 0;
 858         }
 859
 860         r = sd_netlink_message_read_u32(message, FRA_TABLE, &tmp->table);
 861         if (r < 0 && r != -ENODATA) {
 862                 log_warning_errno(r, "rtnl: could not get FRA_TABLE attribute, ignoring: %m");
 863                 return 0;
 864         }
 865
 866         r = sd_rtnl_message_routing_policy_rule_get_tos(message, &tmp->tos);
 867         if (r < 0 && r != -ENODATA) {
 868                 log_warning_errno(r, "rtnl: could not get ip rule TOS, ignoring: %m");
 869                 return 0;
 870         }
 871
 872         r = sd_netlink_message_read_string(message, FRA_IIFNAME, &iif);
 873         if (r < 0 && r != -ENODATA) {
 874                 log_warning_errno(r, "rtnl: could not get FRA_IIFNAME attribute, ignoring: %m");
 875                 return 0;
 876         }
 877         r = free_and_strdup(&tmp->iif, iif);
 878         if (r < 0)
 879                 return log_oom();
 880
 881         r = sd_netlink_message_read_string(message, FRA_OIFNAME, &oif);
 882         if (r < 0 && r != -ENODATA) {
 883                 log_warning_errno(r, "rtnl: could not get FRA_OIFNAME attribute, ignoring: %m");
 884                 return 0;
 885         }
 886         r = free_and_strdup(&tmp->oif, oif);
 887         if (r < 0)
 888                 return log_oom();
 889
 890         r = sd_netlink_message_read_u8(message, FRA_IP_PROTO, &tmp->protocol);
 891         if (r < 0 && r != -ENODATA) {
 892                 log_warning_errno(r, "rtnl: could not get FRA_IP_PROTO attribute, ignoring: %m");
 893                 return 0;
 894         }
 895
 896         r = sd_netlink_message_read(message, FRA_SPORT_RANGE, sizeof(tmp->sport), &tmp->sport);
 897         if (r < 0 && r != -ENODATA) {
 898                 log_warning_errno(r, "rtnl: could not get FRA_SPORT_RANGE attribute, ignoring: %m");
 899                 return 0;
 900         }
 901
 902         r = sd_netlink_message_read(message, FRA_DPORT_RANGE, sizeof(tmp->dport), &tmp->dport);
 903         if (r < 0 && r != -ENODATA) {
 904                 log_warning_errno(r, "rtnl: could not get FRA_DPORT_RANGE attribute, ignoring: %m");
 905                 return 0;
 906         }
 907
 908         (void) routing_policy_rule_get(m, tmp, &rule);
 909
 910         switch (type) {
 911         case RTM_NEWRULE:
 912                 if (!rule) {
 913                         r = routing_policy_rule_add_foreign(m, tmp, &rule);
 914                         if (r < 0) {
 915                                 log_warning_errno(r, "Could not add rule, ignoring: %m");
 916                                 return 0;
 917                         }
 918                 }
 919                 break;
 920         case RTM_DELRULE:
 921                 routing_policy_rule_free(rule);
 922
 923                 break;
 924
 925         default:
 926                 assert_not_reached("Received invalid RTNL message type");
 927         }
 928
 929         return 1;
 930 }
 931
 932 static int systemd_netlink_fd(void) {
 933         int n, fd, rtnl_fd = -EINVAL;
 934
 935         n = sd_listen_fds(true);
 936         if (n <= 0)
 937                 return -EINVAL;
 938
 939         for (fd = SD_LISTEN_FDS_START; fd < SD_LISTEN_FDS_START + n; fd ++) {
 940                 if (sd_is_socket(fd, AF_NETLINK, SOCK_RAW, -1) > 0) {
 941                         if (rtnl_fd >= 0)
 942                                 return -EINVAL;
 943
 944                         rtnl_fd = fd;
 945                 }
 946         }
 947
 948         return rtnl_fd;
 949 }
 950
 951 static int manager_connect_genl(Manager *m) {
 952         int r;
 953
 954         assert(m);
 955
 956         r = sd_genl_socket_open(&m->genl);
 957         if (r < 0)
 958                 return r;
 959
 960         r = sd_netlink_inc_rcvbuf(m->genl, RCVBUF_SIZE);
 961         if (r < 0)
 962                 return r;
 963
 964         r = sd_netlink_attach_event(m->genl, m->event, 0);
 965         if (r < 0)
 966                 return r;
 967
 968         return 0;
 969 }
 970
 971 static int manager_connect_rtnl(Manager *m) {
 972         int fd, r;
 973
 974         assert(m);
 975
 976         fd = systemd_netlink_fd();
 977         if (fd < 0)
 978                 r = sd_netlink_open(&m->rtnl);
 979         else
 980                 r = sd_netlink_open_fd(&m->rtnl, fd);
 981         if (r < 0)
 982                 return r;
 983
 984         r = sd_netlink_inc_rcvbuf(m->rtnl, RCVBUF_SIZE);
 985         if (r < 0)
 986                 return r;
 987
 988         r = sd_netlink_attach_event(m->rtnl, m->event, 0);
 989         if (r < 0)
 990                 return r;
 991
 992         r = sd_netlink_add_match(m->rtnl, NULL, RTM_NEWLINK, &manager_rtnl_process_link, NULL, m, "network-rtnl_process_link");
 993         if (r < 0)
 994                 return r;
 995
 996         r = sd_netlink_add_match(m->rtnl, NULL, RTM_DELLINK, &manager_rtnl_process_link, NULL, m, "network-rtnl_process_link");
 997         if (r < 0)
 998                 return r;
 999
1000         r = sd_netlink_add_match(m->rtnl, NULL, RTM_NEWADDR, &manager_rtnl_process_address, NULL, m, "network-rtnl_process_address");
1001         if (r < 0)
1002                 return r;
1003
1004         r = sd_netlink_add_match(m->rtnl, NULL, RTM_DELADDR, &manager_rtnl_process_address, NULL, m, "network-rtnl_process_address");
1005         if (r < 0)
1006                 return r;
1007
1008         r = sd_netlink_add_match(m->rtnl, NULL, RTM_NEWROUTE, &manager_rtnl_process_route, NULL, m, "network-rtnl_process_route");
1009         if (r < 0)
1010                 return r;
1011
1012         r = sd_netlink_add_match(m->rtnl, NULL, RTM_DELROUTE, &manager_rtnl_process_route, NULL, m, "network-rtnl_process_route");
1013         if (r < 0)
1014                 return r;
1015
1016         r = sd_netlink_add_match(m->rtnl, NULL, RTM_NEWRULE, &manager_rtnl_process_rule, NULL, m, "network-rtnl_process_rule");
1017         if (r < 0)
1018                 return r;
1019
1020         r = sd_netlink_add_match(m->rtnl, NULL, RTM_DELRULE, &manager_rtnl_process_rule, NULL, m, "network-rtnl_process_rule");
1021         if (r < 0)
1022                 return r;
1023
1024         return 0;
1025 }
1026
1027 static int ordered_set_put_in_addr_data(OrderedSet *s, const struct in_addr_data *address) {
1028         char *p;
1029         int r;
1030
1031         assert(s);
1032         assert(address);
1033
1034         r = in_addr_to_string(address->family, &address->address, &p);
1035         if (r < 0)
1036                 return r;
1037
1038         r = ordered_set_consume(s, p);
1039         if (r == -EEXIST)
1040                 return 0;
1041
1042         return r;
1043 }
1044
1045 static int ordered_set_put_in_addr_datav(OrderedSet *s, const struct in_addr_data *addresses, unsigned n) {
1046         int r, c = 0;
1047         unsigned i;
1048
1049         assert(s);
1050         assert(addresses || n == 0);
1051
1052         for (i = 0; i < n; i++) {
1053                 r = ordered_set_put_in_addr_data(s, addresses+i);
1054                 if (r < 0)
1055                         return r;
1056
1057                 c += r;
1058         }
1059
1060         return c;
1061 }
1062
1063 static int ordered_set_put_in4_addr(OrderedSet *s, const struct in_addr *address) {
1064         char *p;
1065         int r;
1066
1067         assert(s);
1068         assert(address);
1069
1070         r = in_addr_to_string(AF_INET, (const union in_addr_union*) address, &p);
1071         if (r < 0)
1072                 return r;
1073
1074         r = ordered_set_consume(s, p);
1075         if (r == -EEXIST)
1076                 return 0;
1077
1078         return r;
1079 }
1080
1081 static int ordered_set_put_in4_addrv(OrderedSet *s,
1082                                      const struct in_addr *addresses,
1083                                      size_t n,
1084                                      bool (*predicate)(const struct in_addr *addr)) {
1085         int r, c = 0;
1086         size_t i;
1087
1088         assert(s);
1089         assert(n == 0 || addresses);
1090
1091         for (i = 0; i < n; i++) {
1092                 if (predicate && !predicate(&addresses[i]))
1093                         continue;
1094                 r = ordered_set_put_in4_addr(s, addresses+i);
1095                 if (r < 0)
1096                         return r;
1097
1098                 c += r;
1099         }
1100
1101         return c;
1102 }
1103
1104 static int manager_save(Manager *m) {
1105         _cleanup_ordered_set_free_free_ OrderedSet *dns = NULL, *ntp = NULL, *search_domains = NULL, *route_domains = NULL;
1106         Link *link;
1107         Iterator i;
1108         _cleanup_free_ char *temp_path = NULL;
1109         _cleanup_strv_free_ char **p = NULL;
1110         _cleanup_fclose_ FILE *f = NULL;
1111         LinkOperationalState operstate = LINK_OPERSTATE_OFF;
1112         LinkCarrierState carrier_state = LINK_CARRIER_STATE_OFF;
1113         LinkAddressState address_state = LINK_ADDRESS_STATE_OFF;
1114         const char *operstate_str, *carrier_state_str, *address_state_str;
1115         int r;
1116
1117         assert(m);
1118         assert(m->state_file);
1119
1120         /* We add all NTP and DNS server to a set, to filter out duplicates */
1121         dns = ordered_set_new(&string_hash_ops);
1122         if (!dns)
1123                 return -ENOMEM;
1124
1125         ntp = ordered_set_new(&string_hash_ops);
1126         if (!ntp)
1127                 return -ENOMEM;
1128
1129         search_domains = ordered_set_new(&dns_name_hash_ops);
1130         if (!search_domains)
1131                 return -ENOMEM;
1132
1133         route_domains = ordered_set_new(&dns_name_hash_ops);
1134         if (!route_domains)
1135                 return -ENOMEM;
1136
1137         HASHMAP_FOREACH(link, m->links, i) {
1138                 if (link->flags & IFF_LOOPBACK)
1139                         continue;
1140
1141                 if (link->operstate > operstate)
1142                         operstate = link->operstate;
1143
1144                 if (link->carrier_state > carrier_state)
1145                         carrier_state = link->carrier_state;
1146
1147                 if (link->address_state > address_state)
1148                         address_state = link->address_state;
1149
1150                 if (!link->network)
1151                         continue;
1152
1153                 /* First add the static configured entries */
1154                 r = ordered_set_put_in_addr_datav(dns, link->network->dns, link->network->n_dns);
1155                 if (r < 0)
1156                         return r;
1157
1158                 r = ordered_set_put_strdupv(ntp, link->network->ntp);
1159                 if (r < 0)
1160                         return r;
1161
1162                 r = ordered_set_put_string_set(search_domains, link->network->search_domains);
1163                 if (r < 0)
1164                         return r;
1165
1166                 r = ordered_set_put_string_set(route_domains, link->network->route_domains);
1167                 if (r < 0)
1168                         return r;
1169
1170                 if (!link->dhcp_lease)
1171                         continue;
1172
1173                 /* Secondly, add the entries acquired via DHCP */
1174                 if (link->network->dhcp_use_dns) {
1175                         const struct in_addr *addresses;
1176
1177                         r = sd_dhcp_lease_get_dns(link->dhcp_lease, &addresses);
1178                         if (r > 0) {
1179                                 r = ordered_set_put_in4_addrv(dns, addresses, r, in4_addr_is_non_local);
1180                                 if (r < 0)
1181                                         return r;
1182                         } else if (r < 0 && r != -ENODATA)
1183                                 return r;
1184                 }
1185
1186                 if (link->network->dhcp_use_ntp) {
1187                         const struct in_addr *addresses;
1188
1189                         r = sd_dhcp_lease_get_ntp(link->dhcp_lease, &addresses);
1190                         if (r > 0) {
1191                                 r = ordered_set_put_in4_addrv(ntp, addresses, r, in4_addr_is_non_local);
1192                                 if (r < 0)
1193                                         return r;
1194                         } else if (r < 0 && r != -ENODATA)
1195                                 return r;
1196                 }
1197
1198                 if (link->network->dhcp_use_domains != DHCP_USE_DOMAINS_NO) {
1199                         const char *domainname;
1200                         char **domains = NULL;
1201
1202                         OrderedSet *target_domains = (link->network->dhcp_use_domains == DHCP_USE_DOMAINS_YES) ? search_domains : route_domains;
1203                         r = sd_dhcp_lease_get_domainname(link->dhcp_lease, &domainname);
1204                         if (r >= 0) {
1205                                 r = ordered_set_put_strdup(target_domains, domainname);
1206                                 if (r < 0)
1207                                         return r;
1208                         } else if (r != -ENODATA)
1209                                 return r;
1210
1211                         r = sd_dhcp_lease_get_search_domains(link->dhcp_lease, &domains);
1212                         if (r >= 0) {
1213                                 r = ordered_set_put_strdupv(target_domains, domains);
1214                                 if (r < 0)
1215                                         return r;
1216                         } else if (r != -ENODATA)
1217                                 return r;
1218                 }
1219         }
1220
1221         if (carrier_state >= LINK_CARRIER_STATE_ENSLAVED)
1222                 carrier_state = LINK_CARRIER_STATE_CARRIER;
1223
1224         operstate_str = link_operstate_to_string(operstate);
1225         assert(operstate_str);
1226
1227         carrier_state_str = link_carrier_state_to_string(carrier_state);
1228         assert(carrier_state_str);
1229
1230         address_state_str = link_address_state_to_string(address_state);
1231         assert(address_state_str);
1232
1233         r = fopen_temporary(m->state_file, &f, &temp_path);
1234         if (r < 0)
1235                 return r;
1236
1237         (void) fchmod(fileno(f), 0644);
1238
1239         fprintf(f,
1240                 "# This is private data. Do not parse.\n"
1241                 "OPER_STATE=%s\n"
1242                 "CARRIER_STATE=%s\n"
1243                 "ADDRESS_STATE=%s\n",
1244                 operstate_str, carrier_state_str, address_state_str);
1245
1246         ordered_set_print(f, "DNS=", dns);
1247         ordered_set_print(f, "NTP=", ntp);
1248         ordered_set_print(f, "DOMAINS=", search_domains);
1249         ordered_set_print(f, "ROUTE_DOMAINS=", route_domains);
1250
1251         r = routing_policy_serialize_rules(m->rules, f);
1252         if (r < 0)
1253                 goto fail;
1254
1255         r = fflush_and_check(f);
1256         if (r < 0)
1257                 goto fail;
1258
1259         if (rename(temp_path, m->state_file) < 0) {
1260                 r = -errno;
1261                 goto fail;
1262         }
1263
1264         if (m->operational_state != operstate) {
1265                 m->operational_state = operstate;
1266                 if (strv_extend(&p, "OperationalState") < 0)
1267                         log_oom();
1268         }
1269
1270         if (m->carrier_state != carrier_state) {
1271                 m->carrier_state = carrier_state;
1272                 if (strv_extend(&p, "CarrierState") < 0)
1273                         log_oom();
1274         }
1275
1276         if (m->address_state != address_state) {
1277                 m->address_state = address_state;
1278                 if (strv_extend(&p, "AddressState") < 0)
1279                         log_oom();
1280         }
1281
1282         if (p) {
1283                 r = manager_send_changed_strv(m, p);
1284                 if (r < 0)
1285                         log_error_errno(r, "Could not emit changed properties: %m");
1286         }
1287
1288         m->dirty = false;
1289
1290         return 0;
1291
1292 fail:
1293         (void) unlink(m->state_file);
1294         (void) unlink(temp_path);
1295
1296         return log_error_errno(r, "Failed to save network state to %s: %m", m->state_file);
1297 }
1298
1299 static int manager_dirty_handler(sd_event_source *s, void *userdata) {
1300         Manager *m = userdata;
1301         Link *link;
1302         Iterator i;
1303
1304         assert(m);
1305
1306         if (m->dirty)
1307                 manager_save(m);
1308
1309         SET_FOREACH(link, m->dirty_links, i)
1310                 if (link_save(link) >= 0)
1311                         link_clean(link);
1312
1313         return 1;
1314 }
1315
1316 Link *manager_dhcp6_prefix_get(Manager *m, struct in6_addr *addr) {
1317         assert_return(m, NULL);
1318         assert_return(addr, NULL);
1319
1320         return hashmap_get(m->dhcp6_prefixes, addr);
1321 }
1322
1323 static int dhcp6_route_add_handler(sd_netlink *nl, sd_netlink_message *m, Link *link) {
1324         int r;
1325
1326         assert(link);
1327
1328         r = sd_netlink_message_get_errno(m);
1329         if (r < 0 && r != -EEXIST)
1330                 log_link_debug_errno(link, r, "Received error adding DHCPv6 Prefix Delegation route: %m");
1331
1332         return 0;
1333 }
1334
1335 int manager_dhcp6_prefix_add(Manager *m, struct in6_addr *addr, Link *link) {
1336         _cleanup_free_ struct in6_addr *a = NULL;
1337         _cleanup_free_ char *buf = NULL;
1338         Link *assigned_link;
1339         Route *route;
1340         int r;
1341
1342         assert_return(m, -EINVAL);
1343         assert_return(addr, -EINVAL);
1344
1345         r = route_add(link, AF_INET6, (union in_addr_union *) addr, 64,
1346                       0, 0, 0, &route);
1347         if (r < 0)
1348                 return r;
1349
1350         r = route_configure(route, link, dhcp6_route_add_handler);
1351         if (r < 0)
1352                 return r;
1353
1354         (void) in_addr_to_string(AF_INET6, (union in_addr_union *) addr, &buf);
1355         log_link_debug(link, "Adding prefix route %s/64", strnull(buf));
1356
1357         assigned_link = hashmap_get(m->dhcp6_prefixes, addr);
1358         if (assigned_link) {
1359                 assert(assigned_link == link);
1360                 return 0;
1361         }
1362
1363         a = newdup(struct in6_addr, addr, 1);
1364         if (!a)
1365                 return -ENOMEM;
1366
1367         r = hashmap_ensure_allocated(&m->dhcp6_prefixes, &in6_addr_hash_ops);
1368         if (r < 0)
1369                 return r;
1370
1371         r = hashmap_put(m->dhcp6_prefixes, a, link);
1372         if (r < 0)
1373                 return r;
1374
1375         TAKE_PTR(a);
1376         link_ref(link);
1377         return 0;
1378 }
1379
1380 static int dhcp6_route_remove_handler(sd_netlink *nl, sd_netlink_message *m, Link *link) {
1381         int r;
1382
1383         assert(link);
1384
1385         r = sd_netlink_message_get_errno(m);
1386         if (r < 0)
1387                 log_link_debug_errno(link, r, "Received error on DHCPv6 Prefix Delegation route removal: %m");
1388
1389         return 1;
1390 }
1391
1392 static int manager_dhcp6_prefix_remove(Manager *m, struct in6_addr *addr) {
1393         _cleanup_free_ struct in6_addr *a = NULL;
1394         _cleanup_(link_unrefp) Link *l = NULL;
1395         _cleanup_free_ char *buf = NULL;
1396         Route *route;
1397         int r;
1398
1399         assert_return(m, -EINVAL);
1400         assert_return(addr, -EINVAL);
1401
1402         l = hashmap_remove2(m->dhcp6_prefixes, addr, (void **) &a);
1403         if (!l)
1404                 return -EINVAL;
1405
1406         (void) sd_radv_remove_prefix(l->radv, addr, 64);
1407         r = route_get(l, AF_INET6, (union in_addr_union *) addr, 64, 0, 0, 0, &route);
1408         if (r < 0)
1409                 return r;
1410
1411         r = route_remove(route, l, dhcp6_route_remove_handler);
1412         if (r < 0)
1413                 return r;
1414
1415         (void) in_addr_to_string(AF_INET6, (union in_addr_union *) addr, &buf);
1416         log_link_debug(l, "Removing prefix route %s/64", strnull(buf));
1417
1418         return 0;
1419 }
1420
1421 int manager_dhcp6_prefix_remove_all(Manager *m, Link *link) {
1422         struct in6_addr *addr;
1423         Iterator i;
1424         Link *l;
1425
1426         assert_return(m, -EINVAL);
1427         assert_return(link, -EINVAL);
1428
1429         HASHMAP_FOREACH_KEY(l, addr, m->dhcp6_prefixes, i)
1430                 if (l == link)
1431                         (void) manager_dhcp6_prefix_remove(m, addr);
1432
1433         return 0;
1434 }
1435
1436 int manager_new(Manager **ret) {
1437         _cleanup_(manager_freep) Manager *m = NULL;
1438         int r;
1439
1440         m = new(Manager, 1);
1441         if (!m)
1442                 return -ENOMEM;
1443
1444         *m = (Manager) {
1445                 .speed_meter_interval_usec = SPEED_METER_DEFAULT_TIME_INTERVAL,
1446         };
1447
1448         m->state_file = strdup("/run/systemd/netif/state");
1449         if (!m->state_file)
1450                 return -ENOMEM;
1451
1452         r = sd_event_default(&m->event);
1453         if (r < 0)
1454                 return r;
1455
1456         (void) sd_event_set_watchdog(m->event, true);
1457         (void) sd_event_add_signal(m->event, NULL, SIGTERM, NULL, NULL);
1458         (void) sd_event_add_signal(m->event, NULL, SIGINT, NULL, NULL);
1459
1460         r = sd_event_add_post(m->event, NULL, manager_dirty_handler, m);
1461         if (r < 0)
1462                 return r;
1463
1464         r = manager_connect_rtnl(m);
1465         if (r < 0)
1466                 return r;
1467
1468         r = manager_connect_genl(m);
1469         if (r < 0)
1470                 return r;
1471
1472         r = manager_connect_udev(m);
1473         if (r < 0)
1474                 return r;
1475
1476         r = sd_resolve_default(&m->resolve);
1477         if (r < 0)
1478                 return r;
1479
1480         r = sd_resolve_attach_event(m->resolve, m->event, 0);
1481         if (r < 0)
1482                 return r;
1483
1484         r = setup_default_address_pool(m);
1485         if (r < 0)
1486                 return r;
1487
1488         m->duid.type = DUID_TYPE_EN;
1489
1490         (void) routing_policy_load_rules(m->state_file, &m->rules_saved);
1491
1492         *ret = TAKE_PTR(m);
1493
1494         return 0;
1495 }
1496
1497 void manager_free(Manager *m) {
1498         struct in6_addr *a;
1499         AddressPool *pool;
1500         Link *link;
1501
1502         if (!m)
1503                 return;
1504
1505         free(m->state_file);
1506
1507         while ((a = hashmap_first_key(m->dhcp6_prefixes)))
1508                 (void) manager_dhcp6_prefix_remove(m, a);
1509         hashmap_free(m->dhcp6_prefixes);
1510
1511         while ((link = hashmap_steal_first(m->links))) {
1512                 if (link->dhcp6_client)
1513                         (void) dhcp6_lease_pd_prefix_lost(link->dhcp6_client, link);
1514
1515                 (void) link_stop_clients(link, true);
1516
1517                 link_unref(link);
1518         }
1519
1520         m->dirty_links = set_free_with_destructor(m->dirty_links, link_unref);
1521         m->links_requesting_uuid = set_free_with_destructor(m->links_requesting_uuid, link_unref);
1522         m->links = hashmap_free_with_destructor(m->links, link_unref);
1523
1524         m->duids_requesting_uuid = set_free(m->duids_requesting_uuid);
1525         m->networks = ordered_hashmap_free_with_destructor(m->networks, network_unref);
1526
1527         m->netdevs = hashmap_free_with_destructor(m->netdevs, netdev_unref);
1528
1529         while ((pool = m->address_pools))
1530                 address_pool_free(pool);
1531
1532         /* routing_policy_rule_free() access m->rules and m->rules_foreign.
1533          * So, it is necessary to set NULL after the sets are freed. */
1534         m->rules = set_free_with_destructor(m->rules, routing_policy_rule_free);
1535         m->rules_foreign = set_free_with_destructor(m->rules_foreign, routing_policy_rule_free);
1536         set_free_with_destructor(m->rules_saved, routing_policy_rule_free);
1537
1538         sd_netlink_unref(m->rtnl);
1539         sd_netlink_unref(m->genl);
1540         sd_resolve_unref(m->resolve);
1541
1542         sd_event_source_unref(m->speed_meter_event_source);
1543         sd_event_unref(m->event);
1544
1545         sd_device_monitor_unref(m->device_monitor);
1546
1547         sd_bus_flush_close_unref(m->bus);
1548
1549         free(m->dynamic_timezone);
1550         free(m->dynamic_hostname);
1551
1552         free(m);
1553 }
1554
1555 int manager_start(Manager *m) {
1556         Link *link;
1557         Iterator i;
1558         int r;
1559
1560         assert(m);
1561
1562         r = manager_start_speed_meter(m);
1563         if (r < 0)
1564                 return log_error_errno(r, "Failed to initialize speed meter: %m");
1565
1566         /* The dirty handler will deal with future serialization, but the first one
1567            must be done explicitly. */
1568
1569         manager_save(m);
1570
1571         HASHMAP_FOREACH(link, m->links, i)
1572                 link_save(link);
1573
1574         return 0;
1575 }
1576
1577 int manager_load_config(Manager *m) {
1578         int r;
1579
1580         /* update timestamp */
1581         paths_check_timestamp(NETWORK_DIRS, &m->network_dirs_ts_usec, true);
1582
1583         r = netdev_load(m);
1584         if (r < 0)
1585                 return r;
1586
1587         r = network_load(m);
1588         if (r < 0)
1589                 return r;
1590
1591         return 0;
1592 }
1593
1594 bool manager_should_reload(Manager *m) {
1595         return paths_check_timestamp(NETWORK_DIRS, &m->network_dirs_ts_usec, false);
1596 }
1597
1598 int manager_rtnl_enumerate_links(Manager *m) {
1599         _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL, *reply = NULL;
1600         sd_netlink_message *link;
1601         int r;
1602
1603         assert(m);
1604         assert(m->rtnl);
1605
1606         r = sd_rtnl_message_new_link(m->rtnl, &req, RTM_GETLINK, 0);
1607         if (r < 0)
1608                 return r;
1609
1610         r = sd_netlink_message_request_dump(req, true);
1611         if (r < 0)
1612                 return r;
1613
1614         r = sd_netlink_call(m->rtnl, req, 0, &reply);
1615         if (r < 0)
1616                 return r;
1617
1618         for (link = reply; link; link = sd_netlink_message_next(link)) {
1619                 int k;
1620
1621                 m->enumerating = true;
1622
1623                 k = manager_rtnl_process_link(m->rtnl, link, m);
1624                 if (k < 0)
1625                         r = k;
1626
1627                 m->enumerating = false;
1628         }
1629
1630         return r;
1631 }
1632
1633 int manager_rtnl_enumerate_addresses(Manager *m) {
1634         _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL, *reply = NULL;
1635         sd_netlink_message *addr;
1636         int r;
1637
1638         assert(m);
1639         assert(m->rtnl);
1640
1641         r = sd_rtnl_message_new_addr(m->rtnl, &req, RTM_GETADDR, 0, 0);
1642         if (r < 0)
1643                 return r;
1644
1645         r = sd_netlink_message_request_dump(req, true);
1646         if (r < 0)
1647                 return r;
1648
1649         r = sd_netlink_call(m->rtnl, req, 0, &reply);
1650         if (r < 0)
1651                 return r;
1652
1653         for (addr = reply; addr; addr = sd_netlink_message_next(addr)) {
1654                 int k;
1655
1656                 m->enumerating = true;
1657
1658                 k = manager_rtnl_process_address(m->rtnl, addr, m);
1659                 if (k < 0)
1660                         r = k;
1661
1662                 m->enumerating = false;
1663         }
1664
1665         return r;
1666 }
1667
1668 int manager_rtnl_enumerate_routes(Manager *m) {
1669         _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL, *reply = NULL;
1670         sd_netlink_message *route;
1671         int r;
1672
1673         assert(m);
1674         assert(m->rtnl);
1675
1676         r = sd_rtnl_message_new_route(m->rtnl, &req, RTM_GETROUTE, 0, 0);
1677         if (r < 0)
1678                 return r;
1679
1680         r = sd_netlink_message_request_dump(req, true);
1681         if (r < 0)
1682                 return r;
1683
1684         r = sd_netlink_call(m->rtnl, req, 0, &reply);
1685         if (r < 0)
1686                 return r;
1687
1688         for (route = reply; route; route = sd_netlink_message_next(route)) {
1689                 int k;
1690
1691                 m->enumerating = true;
1692
1693                 k = manager_rtnl_process_route(m->rtnl, route, m);
1694                 if (k < 0)
1695                         r = k;
1696
1697                 m->enumerating = false;
1698         }
1699
1700         return r;
1701 }
1702
1703 int manager_rtnl_enumerate_rules(Manager *m) {
1704         _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL, *reply = NULL;
1705         sd_netlink_message *rule;
1706         int r;
1707
1708         assert(m);
1709         assert(m->rtnl);
1710
1711         r = sd_rtnl_message_new_routing_policy_rule(m->rtnl, &req, RTM_GETRULE, 0);
1712         if (r < 0)
1713                 return r;
1714
1715         r = sd_netlink_message_request_dump(req, true);
1716         if (r < 0)
1717                 return r;
1718
1719         r = sd_netlink_call(m->rtnl, req, 0, &reply);
1720         if (r < 0) {
1721                 if (r == -EOPNOTSUPP) {
1722                         log_debug("FIB Rules are not supported by the kernel. Ignoring.");
1723                         return 0;
1724                 }
1725
1726                 return r;
1727         }
1728
1729         for (rule = reply; rule; rule = sd_netlink_message_next(rule)) {
1730                 int k;
1731
1732                 m->enumerating = true;
1733
1734                 k = manager_rtnl_process_rule(m->rtnl, rule, m);
1735                 if (k < 0)
1736                         r = k;
1737
1738                 m->enumerating = false;
1739         }
1740
1741         return r;
1742 }
1743
1744 int manager_address_pool_acquire(Manager *m, int family, unsigned prefixlen, union in_addr_union *found) {
1745         AddressPool *p;
1746         int r;
1747
1748         assert(m);
1749         assert(prefixlen > 0);
1750         assert(found);
1751
1752         LIST_FOREACH(address_pools, p, m->address_pools) {
1753                 if (p->family != family)
1754                         continue;
1755
1756                 r = address_pool_acquire(p, prefixlen, found);
1757                 if (r != 0)
1758                         return r;
1759         }
1760
1761         return 0;
1762 }
1763
1764 Link* manager_find_uplink(Manager *m, Link *exclude) {
1765         _cleanup_free_ struct local_address *gateways = NULL;
1766         int n, i;
1767
1768         assert(m);
1769
1770         /* Looks for a suitable "uplink", via black magic: an
1771          * interface that is up and where the default route with the
1772          * highest priority points to. */
1773
1774         n = local_gateways(m->rtnl, 0, AF_UNSPEC, &gateways);
1775         if (n < 0) {
1776                 log_warning_errno(n, "Failed to determine list of default gateways: %m");
1777                 return NULL;
1778         }
1779
1780         for (i = 0; i < n; i++) {
1781                 Link *link;
1782
1783                 link = hashmap_get(m->links, INT_TO_PTR(gateways[i].ifindex));
1784                 if (!link) {
1785                         log_debug("Weird, found a gateway for a link we don't know. Ignoring.");
1786                         continue;
1787                 }
1788
1789                 if (link == exclude)
1790                         continue;
1791
1792                 if (link->operstate < LINK_OPERSTATE_ROUTABLE)
1793                         continue;
1794
1795                 return link;
1796         }
1797
1798         return NULL;
1799 }
1800
1801 void manager_dirty(Manager *manager) {
1802         assert(manager);
1803
1804         /* the serialized state in /run is no longer up-to-date */
1805         manager->dirty = true;
1806 }
1807
1808 static int set_hostname_handler(sd_bus_message *m, void *userdata, sd_bus_error *ret_error) {
1809         Manager *manager = userdata;
1810         const sd_bus_error *e;
1811
1812         assert(m);
1813         assert(manager);
1814
1815         e = sd_bus_message_get_error(m);
1816         if (e)
1817                 log_warning_errno(sd_bus_error_get_errno(e), "Could not set hostname: %s", e->message);
1818
1819         return 1;
1820 }
1821
1822 int manager_set_hostname(Manager *m, const char *hostname) {
1823         int r;
1824
1825         log_debug("Setting transient hostname: '%s'", strna(hostname));
1826
1827         if (free_and_strdup(&m->dynamic_hostname, hostname) < 0)
1828                 return log_oom();
1829
1830         if (!m->bus || sd_bus_is_ready(m->bus) <= 0) {
1831                 log_debug("Not connected to system bus, setting hostname later.");
1832                 return 0;
1833         }
1834
1835         r = sd_bus_call_method_async(
1836                         m->bus,
1837                         NULL,
1838                         "org.freedesktop.hostname1",
1839                         "/org/freedesktop/hostname1",
1840                         "org.freedesktop.hostname1",
1841                         "SetHostname",
1842                         set_hostname_handler,
1843                         m,
1844                         "sb",
1845                         hostname,
1846                         false);
1847
1848         if (r < 0)
1849                 return log_error_errno(r, "Could not set transient hostname: %m");
1850
1851         return 0;
1852 }
1853
1854 static int set_timezone_handler(sd_bus_message *m, void *userdata, sd_bus_error *ret_error) {
1855         Manager *manager = userdata;
1856         const sd_bus_error *e;
1857
1858         assert(m);
1859         assert(manager);
1860
1861         e = sd_bus_message_get_error(m);
1862         if (e)
1863                 log_warning_errno(sd_bus_error_get_errno(e), "Could not set timezone: %s", e->message);
1864
1865         return 1;
1866 }
1867
1868 int manager_set_timezone(Manager *m, const char *tz) {
1869         int r;
1870
1871         assert(m);
1872         assert(tz);
1873
1874         log_debug("Setting system timezone: '%s'", tz);
1875         if (free_and_strdup(&m->dynamic_timezone, tz) < 0)
1876                 return log_oom();
1877
1878         if (!m->bus || sd_bus_is_ready(m->bus) <= 0) {
1879                 log_debug("Not connected to system bus, setting timezone later.");
1880                 return 0;
1881         }
1882
1883         r = sd_bus_call_method_async(
1884                         m->bus,
1885                         NULL,
1886                         "org.freedesktop.timedate1",
1887                         "/org/freedesktop/timedate1",
1888                         "org.freedesktop.timedate1",
1889                         "SetTimezone",
1890                         set_timezone_handler,
1891                         m,
1892                         "sb",
1893                         tz,
1894                         false);
1895         if (r < 0)
1896                 return log_error_errno(r, "Could not set timezone: %m");
1897
1898         return 0;
1899 }
1900
1901 int manager_request_product_uuid(Manager *m, Link *link) {
1902         int r;
1903
1904         assert(m);
1905
1906         if (m->has_product_uuid)
1907                 return 0;
1908
1909         log_debug("Requesting product UUID");
1910
1911         if (link) {
1912                 DUID *duid;
1913
1914                 assert_se(duid = link_get_duid(link));
1915
1916                 r = set_ensure_allocated(&m->links_requesting_uuid, NULL);
1917                 if (r < 0)
1918                         return log_oom();
1919
1920                 r = set_ensure_allocated(&m->duids_requesting_uuid, NULL);
1921                 if (r < 0)
1922                         return log_oom();
1923
1924                 r = set_put(m->links_requesting_uuid, link);
1925                 if (r < 0)
1926                         return log_oom();
1927
1928                 r = set_put(m->duids_requesting_uuid, duid);
1929                 if (r < 0)
1930                         return log_oom();
1931         }
1932
1933         if (!m->bus || sd_bus_is_ready(m->bus) <= 0) {
1934                 log_debug("Not connected to system bus, requesting product UUID later.");
1935                 return 0;
1936         }
1937
1938         r = sd_bus_call_method_async(
1939                         m->bus,
1940                         NULL,
1941                         "org.freedesktop.hostname1",
1942                         "/org/freedesktop/hostname1",
1943                         "org.freedesktop.hostname1",
1944                         "GetProductUUID",
1945                         get_product_uuid_handler,
1946                         m,
1947                         "b",
1948                         false);
1949         if (r < 0)
1950                 return log_warning_errno(r, "Failed to get product UUID: %m");
1951
1952         return 0;
1953 }