src/network/networkd-manager.c

   1 /* SPDX-License-Identifier: LGPL-2.1+ */
   2
   3 #include <sys/socket.h>
   4 #include <linux/if.h>
   5 #include <linux/fib_rules.h>
   6 #include <stdio_ext.h>
   7
   8 #include "sd-daemon.h"
   9 #include "sd-netlink.h"
  10
  11 #include "alloc-util.h"
  12 #include "bus-util.h"
  13 #include "conf-parser.h"
  14 #include "def.h"
  15 #include "dns-domain.h"
  16 #include "fd-util.h"
  17 #include "fileio.h"
  18 #include "libudev-private.h"
  19 #include "local-addresses.h"
  20 #include "netlink-util.h"
  21 #include "networkd-manager.h"
  22 #include "ordered-set.h"
  23 #include "path-util.h"
  24 #include "set.h"
  25 #include "virt.h"
  26
  27 /* use 8 MB for receive socket kernel queue. */
  28 #define RCVBUF_SIZE    (8*1024*1024)
  29
  30 const char* const network_dirs[] = {
  31         "/etc/systemd/network",
  32         "/run/systemd/network",
  33         "/usr/lib/systemd/network",
  34 #if HAVE_SPLIT_USR
  35         "/lib/systemd/network",
  36 #endif
  37         NULL};
  38
  39 static int setup_default_address_pool(Manager *m) {
  40         AddressPool *p;
  41         int r;
  42
  43         assert(m);
  44
  45         /* Add in the well-known private address ranges. */
  46
  47         r = address_pool_new_from_string(m, &p, AF_INET6, "fc00::", 7);
  48         if (r < 0)
  49                 return r;
  50
  51         r = address_pool_new_from_string(m, &p, AF_INET, "192.168.0.0", 16);
  52         if (r < 0)
  53                 return r;
  54
  55         r = address_pool_new_from_string(m, &p, AF_INET, "172.16.0.0", 12);
  56         if (r < 0)
  57                 return r;
  58
  59         r = address_pool_new_from_string(m, &p, AF_INET, "10.0.0.0", 8);
  60         if (r < 0)
  61                 return r;
  62
  63         return 0;
  64 }
  65
  66 static int manager_reset_all(Manager *m) {
  67         Link *link;
  68         Iterator i;
  69         int r;
  70
  71         assert(m);
  72
  73         HASHMAP_FOREACH(link, m->links, i) {
  74                 r = link_carrier_reset(link);
  75                 if (r < 0)
  76                         log_link_warning_errno(link, r, "Could not reset carrier: %m");
  77         }
  78
  79         return 0;
  80 }
  81
  82 static int match_prepare_for_sleep(sd_bus_message *message, void *userdata, sd_bus_error *ret_error) {
  83         Manager *m = userdata;
  84         int b, r;
  85
  86         assert(message);
  87         assert(m);
  88
  89         r = sd_bus_message_read(message, "b", &b);
  90         if (r < 0) {
  91                 log_debug_errno(r, "Failed to parse PrepareForSleep signal: %m");
  92                 return 0;
  93         }
  94
  95         if (b)
  96                 return 0;
  97
  98         log_debug("Coming back from suspend, resetting all connections...");
  99
 100         (void) manager_reset_all(m);
 101
 102         return 0;
 103 }
 104
 105 static int on_connected(sd_bus_message *message, void *userdata, sd_bus_error *ret_error) {
 106         Manager *m = userdata;
 107
 108         assert(message);
 109         assert(m);
 110
 111         /* Did we get a timezone or transient hostname from DHCP while D-Bus wasn't up yet? */
 112         if (m->dynamic_hostname)
 113                 (void) manager_set_hostname(m, m->dynamic_hostname);
 114         if (m->dynamic_timezone)
 115                 (void) manager_set_timezone(m, m->dynamic_timezone);
 116         if (m->links_requesting_uuid)
 117                 (void) manager_request_product_uuid(m, NULL);
 118
 119         return 0;
 120 }
 121
 122 int manager_connect_bus(Manager *m) {
 123         int r;
 124
 125         assert(m);
 126
 127         if (m->bus)
 128                 return 0;
 129
 130         r = bus_open_system_watch_bind_with_description(&m->bus, "bus-api-network");
 131         if (r < 0)
 132                 return log_error_errno(r, "Failed to connect to bus: %m");
 133
 134         r = sd_bus_add_object_vtable(m->bus, NULL, "/org/freedesktop/network1", "org.freedesktop.network1.Manager", manager_vtable, m);
 135         if (r < 0)
 136                 return log_error_errno(r, "Failed to add manager object vtable: %m");
 137
 138         r = sd_bus_add_fallback_vtable(m->bus, NULL, "/org/freedesktop/network1/link", "org.freedesktop.network1.Link", link_vtable, link_object_find, m);
 139         if (r < 0)
 140                return log_error_errno(r, "Failed to add link object vtable: %m");
 141
 142         r = sd_bus_add_node_enumerator(m->bus, NULL, "/org/freedesktop/network1/link", link_node_enumerator, m);
 143         if (r < 0)
 144                 return log_error_errno(r, "Failed to add link enumerator: %m");
 145
 146         r = sd_bus_add_fallback_vtable(m->bus, NULL, "/org/freedesktop/network1/network", "org.freedesktop.network1.Network", network_vtable, network_object_find, m);
 147         if (r < 0)
 148                return log_error_errno(r, "Failed to add network object vtable: %m");
 149
 150         r = sd_bus_add_node_enumerator(m->bus, NULL, "/org/freedesktop/network1/network", network_node_enumerator, m);
 151         if (r < 0)
 152                 return log_error_errno(r, "Failed to add network enumerator: %m");
 153
 154         r = bus_request_name_async_may_reload_dbus(m->bus, NULL, "org.freedesktop.network1", 0, NULL);
 155         if (r < 0)
 156                 return log_error_errno(r, "Failed to request name: %m");
 157
 158         r = sd_bus_attach_event(m->bus, m->event, 0);
 159         if (r < 0)
 160                 return log_error_errno(r, "Failed to attach bus to event loop: %m");
 161
 162         r = sd_bus_match_signal_async(
 163                         m->bus,
 164                         NULL,
 165                         "org.freedesktop.DBus.Local",
 166                         NULL,
 167                         "org.freedesktop.DBus.Local",
 168                         "Connected",
 169                         on_connected, NULL, m);
 170         if (r < 0)
 171                 return log_error_errno(r, "Failed to request match on Connected signal: %m");
 172
 173         r = sd_bus_match_signal_async(
 174                         m->bus,
 175                         NULL,
 176                         "org.freedesktop.login1",
 177                         "/org/freedesktop/login1",
 178                         "org.freedesktop.login1.Manager",
 179                         "PrepareForSleep",
 180                         match_prepare_for_sleep, NULL, m);
 181         if (r < 0)
 182                 log_warning_errno(r, "Failed to request match for PrepareForSleep, ignoring: %m");
 183
 184         return 0;
 185 }
 186
 187 static int manager_udev_process_link(Manager *m, sd_device *device) {
 188         const char *action;
 189         Link *link = NULL;
 190         int r, ifindex;
 191
 192         assert(m);
 193         assert(device);
 194
 195         r = sd_device_get_property_value(device, "ACTION", &action);
 196         if (r < 0 || !streq_ptr(action, "add"))
 197                 return 0;
 198
 199         r = sd_device_get_ifindex(device, &ifindex);
 200         if (r < 0 || ifindex <= 0) {
 201                 log_debug("Ignoring udev ADD event for device with invalid ifindex");
 202                 return 0;
 203         }
 204
 205         r = link_get(m, ifindex, &link);
 206         if (r == -ENODEV)
 207                 return 0;
 208         else if (r < 0)
 209                 return r;
 210
 211         r = link_initialized(link, device);
 212         if (r < 0)
 213                 return r;
 214
 215         return 0;
 216 }
 217
 218 static int manager_dispatch_link_udev(sd_event_source *source, int fd, uint32_t revents, void *userdata) {
 219         Manager *m = userdata;
 220         struct udev_monitor *monitor = m->udev_monitor;
 221         _cleanup_(sd_device_unrefp) sd_device *device = NULL;
 222         int r;
 223
 224         r = udev_monitor_receive_sd_device(monitor, &device);
 225         if (r < 0)
 226                 return r;
 227
 228         (void) manager_udev_process_link(m, device);
 229
 230         return 0;
 231 }
 232
 233 static int manager_connect_udev(Manager *m) {
 234         int r;
 235
 236         /* udev does not initialize devices inside containers,
 237          * so we rely on them being already initialized before
 238          * entering the container */
 239         if (detect_container() > 0)
 240                 return 0;
 241
 242         m->udev_monitor = udev_monitor_new_from_netlink(NULL, "udev");
 243         if (!m->udev_monitor)
 244                 return -ENOMEM;
 245
 246         r = udev_monitor_filter_add_match_subsystem_devtype(m->udev_monitor, "net", NULL);
 247         if (r < 0)
 248                 return log_error_errno(r, "Could not add udev monitor filter: %m");
 249
 250         r = udev_monitor_enable_receiving(m->udev_monitor);
 251         if (r < 0) {
 252                 log_error("Could not enable udev monitor");
 253                 return r;
 254         }
 255
 256         r = sd_event_add_io(m->event,
 257                         &m->udev_event_source,
 258                         udev_monitor_get_fd(m->udev_monitor),
 259                         EPOLLIN, manager_dispatch_link_udev,
 260                         m);
 261         if (r < 0)
 262                 return r;
 263
 264         r = sd_event_source_set_description(m->udev_event_source, "networkd-udev");
 265         if (r < 0)
 266                 return r;
 267
 268         return 0;
 269 }
 270
 271 int manager_rtnl_process_route(sd_netlink *rtnl, sd_netlink_message *message, void *userdata) {
 272         Manager *m = userdata;
 273         Link *link = NULL;
 274         uint16_t type;
 275         uint32_t ifindex, priority = 0;
 276         unsigned char protocol, scope, tos, table, rt_type;
 277         int family;
 278         unsigned char dst_prefixlen, src_prefixlen;
 279         union in_addr_union dst = {}, gw = {}, src = {}, prefsrc = {};
 280         Route *route = NULL;
 281         int r;
 282
 283         assert(rtnl);
 284         assert(message);
 285         assert(m);
 286
 287         if (sd_netlink_message_is_error(message)) {
 288                 r = sd_netlink_message_get_errno(message);
 289                 if (r < 0)
 290                         log_warning_errno(r, "rtnl: failed to receive route, ignoring: %m");
 291
 292                 return 0;
 293         }
 294
 295         r = sd_netlink_message_get_type(message, &type);
 296         if (r < 0) {
 297                 log_warning_errno(r, "rtnl: could not get message type, ignoring: %m");
 298                 return 0;
 299         } else if (!IN_SET(type, RTM_NEWROUTE, RTM_DELROUTE)) {
 300                 log_warning("rtnl: received unexpected message type when processing route, ignoring");
 301                 return 0;
 302         }
 303
 304         r = sd_netlink_message_read_u32(message, RTA_OIF, &ifindex);
 305         if (r == -ENODATA) {
 306                 log_debug("rtnl: received route without ifindex, ignoring");
 307                 return 0;
 308         } else if (r < 0) {
 309                 log_warning_errno(r, "rtnl: could not get ifindex from route, ignoring: %m");
 310                 return 0;
 311         } else if (ifindex <= 0) {
 312                 log_warning("rtnl: received route message with invalid ifindex, ignoring: %d", ifindex);
 313                 return 0;
 314         } else {
 315                 r = link_get(m, ifindex, &link);
 316                 if (r < 0 || !link) {
 317                         /* when enumerating we might be out of sync, but we will
 318                          * get the route again, so just ignore it */
 319                         if (!m->enumerating)
 320                                 log_warning("rtnl: received route for nonexistent link (%d), ignoring", ifindex);
 321                         return 0;
 322                 }
 323         }
 324
 325         r = sd_rtnl_message_route_get_family(message, &family);
 326         if (r < 0 || !IN_SET(family, AF_INET, AF_INET6)) {
 327                 log_link_warning(link, "rtnl: received address with invalid family, ignoring");
 328                 return 0;
 329         }
 330
 331         r = sd_rtnl_message_route_get_protocol(message, &protocol);
 332         if (r < 0) {
 333                 log_warning_errno(r, "rtnl: could not get route protocol: %m");
 334                 return 0;
 335         }
 336
 337         switch (family) {
 338         case AF_INET:
 339                 r = sd_netlink_message_read_in_addr(message, RTA_DST, &dst.in);
 340                 if (r < 0 && r != -ENODATA) {
 341                         log_link_warning_errno(link, r, "rtnl: received route without valid destination, ignoring: %m");
 342                         return 0;
 343                 }
 344
 345                 r = sd_netlink_message_read_in_addr(message, RTA_GATEWAY, &gw.in);
 346                 if (r < 0 && r != -ENODATA) {
 347                         log_link_warning_errno(link, r, "rtnl: received route with invalid gateway, ignoring: %m");
 348                         return 0;
 349                 }
 350
 351                 r = sd_netlink_message_read_in_addr(message, RTA_SRC, &src.in);
 352                 if (r < 0 && r != -ENODATA) {
 353                         log_link_warning_errno(link, r, "rtnl: received route with invalid source, ignoring: %m");
 354                         return 0;
 355                 }
 356
 357                 r = sd_netlink_message_read_in_addr(message, RTA_PREFSRC, &prefsrc.in);
 358                 if (r < 0 && r != -ENODATA) {
 359                         log_link_warning_errno(link, r, "rtnl: received route with invalid preferred source, ignoring: %m");
 360                         return 0;
 361                 }
 362
 363                 break;
 364
 365         case AF_INET6:
 366                 r = sd_netlink_message_read_in6_addr(message, RTA_DST, &dst.in6);
 367                 if (r < 0 && r != -ENODATA) {
 368                         log_link_warning_errno(link, r, "rtnl: received route without valid destination, ignoring: %m");
 369                         return 0;
 370                 }
 371
 372                 r = sd_netlink_message_read_in6_addr(message, RTA_GATEWAY, &gw.in6);
 373                 if (r < 0 && r != -ENODATA) {
 374                         log_link_warning_errno(link, r, "rtnl: received route with invalid gateway, ignoring: %m");
 375                         return 0;
 376                 }
 377
 378                 r = sd_netlink_message_read_in6_addr(message, RTA_SRC, &src.in6);
 379                 if (r < 0 && r != -ENODATA) {
 380                         log_link_warning_errno(link, r, "rtnl: received route with invalid source, ignoring: %m");
 381                         return 0;
 382                 }
 383
 384                 r = sd_netlink_message_read_in6_addr(message, RTA_PREFSRC, &prefsrc.in6);
 385                 if (r < 0 && r != -ENODATA) {
 386                         log_link_warning_errno(link, r, "rtnl: received route with invalid preferred source, ignoring: %m");
 387                         return 0;
 388                 }
 389
 390                 break;
 391
 392         default:
 393                 assert_not_reached("Received unsupported address family");
 394                 return 0;
 395         }
 396
 397         r = sd_rtnl_message_route_get_dst_prefixlen(message, &dst_prefixlen);
 398         if (r < 0) {
 399                 log_link_warning_errno(link, r, "rtnl: received route with invalid destination prefixlen, ignoring: %m");
 400                 return 0;
 401         }
 402
 403         r = sd_rtnl_message_route_get_src_prefixlen(message, &src_prefixlen);
 404         if (r < 0) {
 405                 log_link_warning_errno(link, r, "rtnl: received route with invalid source prefixlen, ignoring: %m");
 406                 return 0;
 407         }
 408
 409         r = sd_rtnl_message_route_get_scope(message, &scope);
 410         if (r < 0) {
 411                 log_link_warning_errno(link, r, "rtnl: received route with invalid scope, ignoring: %m");
 412                 return 0;
 413         }
 414
 415         r = sd_rtnl_message_route_get_tos(message, &tos);
 416         if (r < 0) {
 417                 log_link_warning_errno(link, r, "rtnl: received route with invalid tos, ignoring: %m");
 418                 return 0;
 419         }
 420
 421         r = sd_rtnl_message_route_get_type(message, &rt_type);
 422         if (r < 0) {
 423                 log_link_warning_errno(link, r, "rtnl: received route with invalid type, ignoring: %m");
 424                 return 0;
 425         }
 426
 427         r = sd_rtnl_message_route_get_table(message, &table);
 428         if (r < 0) {
 429                 log_link_warning_errno(link, r, "rtnl: received route with invalid table, ignoring: %m");
 430                 return 0;
 431         }
 432
 433         r = sd_netlink_message_read_u32(message, RTA_PRIORITY, &priority);
 434         if (r < 0 && r != -ENODATA) {
 435                 log_link_warning_errno(link, r, "rtnl: received route with invalid priority, ignoring: %m");
 436                 return 0;
 437         }
 438
 439         (void) route_get(link, family, &dst, dst_prefixlen, tos, priority, table, &route);
 440
 441         switch (type) {
 442         case RTM_NEWROUTE:
 443                 if (!route) {
 444                         /* A route appeared that we did not request */
 445                         r = route_add_foreign(link, family, &dst, dst_prefixlen, tos, priority, table, &route);
 446                         if (r < 0) {
 447                                 log_link_warning_errno(link, r, "Failed to add route, ignoring: %m");
 448                                 return 0;
 449                         }
 450                 }
 451
 452                 route_update(route, &src, src_prefixlen, &gw, &prefsrc, scope, protocol, rt_type);
 453
 454                 break;
 455
 456         case RTM_DELROUTE:
 457                 route_free(route);
 458                 break;
 459
 460         default:
 461                 assert_not_reached("Received invalid RTNL message type");
 462         }
 463
 464         return 1;
 465 }
 466
 467 int manager_rtnl_process_address(sd_netlink *rtnl, sd_netlink_message *message, void *userdata) {
 468         Manager *m = userdata;
 469         Link *link = NULL;
 470         uint16_t type;
 471         unsigned char flags;
 472         int family;
 473         unsigned char prefixlen;
 474         unsigned char scope;
 475         union in_addr_union in_addr;
 476         struct ifa_cacheinfo cinfo;
 477         Address *address = NULL;
 478         char buf[INET6_ADDRSTRLEN], valid_buf[FORMAT_TIMESPAN_MAX];
 479         const char *valid_str = NULL;
 480         int r, ifindex;
 481
 482         assert(rtnl);
 483         assert(message);
 484         assert(m);
 485
 486         if (sd_netlink_message_is_error(message)) {
 487                 r = sd_netlink_message_get_errno(message);
 488                 if (r < 0)
 489                         log_warning_errno(r, "rtnl: failed to receive address, ignoring: %m");
 490
 491                 return 0;
 492         }
 493
 494         r = sd_netlink_message_get_type(message, &type);
 495         if (r < 0) {
 496                 log_warning_errno(r, "rtnl: could not get message type, ignoring: %m");
 497                 return 0;
 498         } else if (!IN_SET(type, RTM_NEWADDR, RTM_DELADDR)) {
 499                 log_warning("rtnl: received unexpected message type when processing address, ignoring");
 500                 return 0;
 501         }
 502
 503         r = sd_rtnl_message_addr_get_ifindex(message, &ifindex);
 504         if (r < 0) {
 505                 log_warning_errno(r, "rtnl: could not get ifindex from address, ignoring: %m");
 506                 return 0;
 507         } else if (ifindex <= 0) {
 508                 log_warning("rtnl: received address message with invalid ifindex, ignoring: %d", ifindex);
 509                 return 0;
 510         } else {
 511                 r = link_get(m, ifindex, &link);
 512                 if (r < 0 || !link) {
 513                         /* when enumerating we might be out of sync, but we will
 514                          * get the address again, so just ignore it */
 515                         if (!m->enumerating)
 516                                 log_warning("rtnl: received address for nonexistent link (%d), ignoring", ifindex);
 517                         return 0;
 518                 }
 519         }
 520
 521         r = sd_rtnl_message_addr_get_family(message, &family);
 522         if (r < 0 || !IN_SET(family, AF_INET, AF_INET6)) {
 523                 log_link_warning(link, "rtnl: received address with invalid family, ignoring");
 524                 return 0;
 525         }
 526
 527         r = sd_rtnl_message_addr_get_prefixlen(message, &prefixlen);
 528         if (r < 0) {
 529                 log_link_warning_errno(link, r, "rtnl: received address with invalid prefixlen, ignoring: %m");
 530                 return 0;
 531         }
 532
 533         r = sd_rtnl_message_addr_get_scope(message, &scope);
 534         if (r < 0) {
 535                 log_link_warning_errno(link, r, "rtnl: received address with invalid scope, ignoring: %m");
 536                 return 0;
 537         }
 538
 539         r = sd_rtnl_message_addr_get_flags(message, &flags);
 540         if (r < 0) {
 541                 log_link_warning_errno(link, r, "rtnl: received address with invalid flags, ignoring: %m");
 542                 return 0;
 543         }
 544
 545         switch (family) {
 546         case AF_INET:
 547                 r = sd_netlink_message_read_in_addr(message, IFA_LOCAL, &in_addr.in);
 548                 if (r < 0) {
 549                         log_link_warning_errno(link, r, "rtnl: received address without valid address, ignoring: %m");
 550                         return 0;
 551                 }
 552
 553                 break;
 554
 555         case AF_INET6:
 556                 r = sd_netlink_message_read_in6_addr(message, IFA_ADDRESS, &in_addr.in6);
 557                 if (r < 0) {
 558                         log_link_warning_errno(link, r, "rtnl: received address without valid address, ignoring: %m");
 559                         return 0;
 560                 }
 561
 562                 break;
 563
 564         default:
 565                 assert_not_reached("Received unsupported address family");
 566         }
 567
 568         if (!inet_ntop(family, &in_addr, buf, INET6_ADDRSTRLEN)) {
 569                 log_link_warning(link, "Could not print address, ignoring");
 570                 return 0;
 571         }
 572
 573         r = sd_netlink_message_read_cache_info(message, IFA_CACHEINFO, &cinfo);
 574         if (r < 0 && r != -ENODATA) {
 575                 log_link_warning_errno(link, r, "rtnl: cannot get IFA_CACHEINFO attribute, ignoring: %m");
 576                 return 0;
 577         } else if (r >= 0) {
 578                 if (cinfo.ifa_valid != CACHE_INFO_INFINITY_LIFE_TIME)
 579                         valid_str = format_timespan(valid_buf, FORMAT_TIMESPAN_MAX,
 580                                                     cinfo.ifa_valid * USEC_PER_SEC,
 581                                                     USEC_PER_SEC);
 582         }
 583
 584         (void) address_get(link, family, &in_addr, prefixlen, &address);
 585
 586         switch (type) {
 587         case RTM_NEWADDR:
 588                 if (address)
 589                         log_link_debug(link, "Updating address: %s/%u (valid %s%s)", buf, prefixlen,
 590                                        valid_str ? "for " : "forever", strempty(valid_str));
 591                 else {
 592                         /* An address appeared that we did not request */
 593                         r = address_add_foreign(link, family, &in_addr, prefixlen, &address);
 594                         if (r < 0) {
 595                                 log_link_warning_errno(link, r, "Failed to add address %s/%u, ignoring: %m", buf, prefixlen);
 596                                 return 0;
 597                         } else
 598                                 log_link_debug(link, "Adding address: %s/%u (valid %s%s)", buf, prefixlen,
 599                                                valid_str ? "for " : "forever", strempty(valid_str));
 600                 }
 601
 602                 r = address_update(address, flags, scope, &cinfo);
 603                 if (r < 0) {
 604                         log_link_warning_errno(link, r, "Failed to update address %s/%u, ignoring: %m", buf, prefixlen);
 605                         return 0;
 606                 }
 607
 608                 break;
 609
 610         case RTM_DELADDR:
 611
 612                 if (address) {
 613                         log_link_debug(link, "Removing address: %s/%u (valid %s%s)", buf, prefixlen,
 614                                        valid_str ? "for " : "forever", strempty(valid_str));
 615                         (void) address_drop(address);
 616                 } else
 617                         log_link_warning(link, "Removing non-existent address: %s/%u (valid %s%s), ignoring", buf, prefixlen,
 618                                          valid_str ? "for " : "forever", strempty(valid_str));
 619
 620                 break;
 621         default:
 622                 assert_not_reached("Received invalid RTNL message type");
 623         }
 624
 625         return 1;
 626 }
 627
 628 static int manager_rtnl_process_link(sd_netlink *rtnl, sd_netlink_message *message, void *userdata) {
 629         Manager *m = userdata;
 630         Link *link = NULL;
 631         NetDev *netdev = NULL;
 632         uint16_t type;
 633         const char *name;
 634         int r, ifindex;
 635
 636         assert(rtnl);
 637         assert(message);
 638         assert(m);
 639
 640         if (sd_netlink_message_is_error(message)) {
 641                 r = sd_netlink_message_get_errno(message);
 642                 if (r < 0)
 643                         log_warning_errno(r, "rtnl: Could not receive link, ignoring: %m");
 644
 645                 return 0;
 646         }
 647
 648         r = sd_netlink_message_get_type(message, &type);
 649         if (r < 0) {
 650                 log_warning_errno(r, "rtnl: Could not get message type, ignoring: %m");
 651                 return 0;
 652         } else if (!IN_SET(type, RTM_NEWLINK, RTM_DELLINK)) {
 653                 log_warning("rtnl: Received unexpected message type when processing link, ignoring");
 654                 return 0;
 655         }
 656
 657         r = sd_rtnl_message_link_get_ifindex(message, &ifindex);
 658         if (r < 0) {
 659                 log_warning_errno(r, "rtnl: Could not get ifindex from link, ignoring: %m");
 660                 return 0;
 661         } else if (ifindex <= 0) {
 662                 log_warning("rtnl: received link message with invalid ifindex %d, ignoring", ifindex);
 663                 return 0;
 664         }
 665
 666         r = sd_netlink_message_read_string(message, IFLA_IFNAME, &name);
 667         if (r < 0) {
 668                 log_warning_errno(r, "rtnl: Received link message without ifname, ignoring: %m");
 669                 return 0;
 670         }
 671
 672         (void) link_get(m, ifindex, &link);
 673         (void) netdev_get(m, name, &netdev);
 674
 675         switch (type) {
 676         case RTM_NEWLINK:
 677                 if (!link) {
 678                         /* link is new, so add it */
 679                         r = link_add(m, message, &link);
 680                         if (r < 0) {
 681                                 log_warning_errno(r, "Could not add new link, ignoring: %m");
 682                                 return 0;
 683                         }
 684                 }
 685
 686                 if (netdev) {
 687                         /* netdev exists, so make sure the ifindex matches */
 688                         r = netdev_set_ifindex(netdev, message);
 689                         if (r < 0) {
 690                                 log_warning_errno(r, "Could not set ifindex on netdev, ignoring: %m");
 691                                 return 0;
 692                         }
 693                 }
 694
 695                 r = link_update(link, message);
 696                 if (r < 0) {
 697                         log_warning_errno(r, "Could not update link, ignoring: %m");
 698                         return 0;
 699                 }
 700
 701                 break;
 702
 703         case RTM_DELLINK:
 704                 link_drop(link);
 705                 netdev_drop(netdev);
 706
 707                 break;
 708
 709         default:
 710                 assert_not_reached("Received invalid RTNL message type.");
 711         }
 712
 713         return 1;
 714 }
 715
 716 int manager_rtnl_process_rule(sd_netlink *rtnl, sd_netlink_message *message, void *userdata) {
 717         uint8_t tos = 0, to_prefixlen = 0, from_prefixlen = 0;
 718         union in_addr_union to = {}, from = {};
 719         RoutingPolicyRule *rule = NULL;
 720         uint32_t fwmark = 0, table = 0;
 721         char *iif = NULL, *oif = NULL;
 722         Manager *m = userdata;
 723         uint16_t type;
 724         int family;
 725         int r;
 726
 727         assert(rtnl);
 728         assert(message);
 729         assert(m);
 730
 731         if (sd_netlink_message_is_error(message)) {
 732                 r = sd_netlink_message_get_errno(message);
 733                 if (r < 0)
 734                         log_warning_errno(r, "rtnl: failed to receive rule, ignoring: %m");
 735
 736                 return 0;
 737         }
 738
 739         r = sd_netlink_message_get_type(message, &type);
 740         if (r < 0) {
 741                 log_warning_errno(r, "rtnl: could not get message type, ignoring: %m");
 742                 return 0;
 743         } else if (!IN_SET(type, RTM_NEWRULE, RTM_DELRULE)) {
 744                 log_warning("rtnl: received unexpected message type '%u' when processing rule, ignoring", type);
 745                 return 0;
 746         }
 747
 748         r = sd_rtnl_message_get_family(message, &family);
 749         if (r < 0) {
 750                 log_warning_errno(r, "rtnl: could not get rule family, ignoring: %m");
 751                 return 0;
 752         } else if (!IN_SET(family, AF_INET, AF_INET6)) {
 753                 log_debug("rtnl: received address with invalid family %u, ignoring", family);
 754                 return 0;
 755         }
 756
 757         switch (family) {
 758         case AF_INET:
 759                 r = sd_netlink_message_read_in_addr(message, FRA_SRC, &from.in);
 760                 if (r < 0 && r != -ENODATA) {
 761                         log_warning_errno(r, "rtnl: could not get FRA_SRC attribute, ignoring: %m");
 762                         return 0;
 763                 } else if (r >= 0) {
 764                         r = sd_rtnl_message_routing_policy_rule_get_rtm_src_prefixlen(message, &from_prefixlen);
 765                         if (r < 0) {
 766                                 log_warning_errno(r, "rtnl: failed to retrieve rule from prefix length, ignoring: %m");
 767                                 return 0;
 768                         }
 769                 }
 770
 771                 r = sd_netlink_message_read_in_addr(message, FRA_DST, &to.in);
 772                 if (r < 0 && r != -ENODATA) {
 773                         log_warning_errno(r, "rtnl: could not get FRA_DST attribute, ignoring: %m");
 774                         return 0;
 775                 } else if (r >= 0) {
 776                         r = sd_rtnl_message_routing_policy_rule_get_rtm_dst_prefixlen(message, &to_prefixlen);
 777                         if (r < 0) {
 778                                 log_warning_errno(r, "rtnl: failed to retrieve rule to prefix length, ignoring: %m");
 779                                 return 0;
 780                         }
 781                 }
 782
 783                 break;
 784
 785         case AF_INET6:
 786                 r = sd_netlink_message_read_in6_addr(message, FRA_SRC, &from.in6);
 787                 if (r < 0 && r != -ENODATA) {
 788                         log_warning_errno(r, "rtnl: could not get FRA_SRC attribute, ignoring: %m");
 789                         return 0;
 790                 } else if (r >= 0) {
 791                         r = sd_rtnl_message_routing_policy_rule_get_rtm_src_prefixlen(message, &from_prefixlen);
 792                         if (r < 0) {
 793                                 log_warning_errno(r, "rtnl: failed to retrieve rule from prefix length, ignoring: %m");
 794                                 return 0;
 795                         }
 796                 }
 797
 798                 r = sd_netlink_message_read_in6_addr(message, FRA_DST, &to.in6);
 799                 if (r < 0 && r != -ENODATA) {
 800                         log_warning_errno(r, "rtnl: could not get FRA_DST attribute, ignoring: %m");
 801                         return 0;
 802                 } else if (r >= 0) {
 803                         r = sd_rtnl_message_routing_policy_rule_get_rtm_dst_prefixlen(message, &to_prefixlen);
 804                         if (r < 0) {
 805                                 log_warning_errno(r, "rtnl: failed to retrieve rule to prefix length, ignoring: %m");
 806                                 return 0;
 807                         }
 808                 }
 809
 810                 break;
 811
 812         default:
 813                 assert_not_reached("Received unsupported address family");
 814         }
 815
 816         if (from_prefixlen == 0 && to_prefixlen == 0)
 817                 return 0;
 818
 819         r = sd_netlink_message_read_u32(message, FRA_FWMARK, &fwmark);
 820         if (r < 0 && r != -ENODATA) {
 821                 log_warning_errno(r, "rtnl: could not get FRA_FWMARK attribute, ignoring: %m");
 822                 return 0;
 823         }
 824
 825         r = sd_netlink_message_read_u32(message, FRA_TABLE, &table);
 826         if (r < 0 && r != -ENODATA) {
 827                 log_warning_errno(r, "rtnl: could not get FRA_TABLE attribute, ignoring: %m");
 828                 return 0;
 829         }
 830
 831         r = sd_rtnl_message_routing_policy_rule_get_tos(message, &tos);
 832         if (r < 0 && r != -ENODATA) {
 833                 log_warning_errno(r, "rtnl: could not get ip rule TOS, ignoring: %m");
 834                 return 0;
 835         }
 836
 837         r = sd_netlink_message_read_string(message, FRA_IIFNAME, (const char **) &iif);
 838         if (r < 0 && r != -ENODATA) {
 839                 log_warning_errno(r, "rtnl: could not get FRA_IIFNAME attribute, ignoring: %m");
 840                 return 0;
 841         }
 842
 843         r = sd_netlink_message_read_string(message, FRA_OIFNAME, (const char **) &oif);
 844         if (r < 0 && r != -ENODATA) {
 845                 log_warning_errno(r, "rtnl: could not get FRA_OIFNAME attribute, ignoring: %m");
 846                 return 0;
 847         }
 848
 849         (void) routing_policy_rule_get(m, family, &from, from_prefixlen, &to, to_prefixlen, tos, fwmark, table, iif, oif, &rule);
 850
 851         switch (type) {
 852         case RTM_NEWRULE:
 853                 if (!rule) {
 854                         r = routing_policy_rule_add_foreign(m, family, &from, from_prefixlen, &to, to_prefixlen, tos, fwmark, table, iif, oif, &rule);
 855                         if (r < 0) {
 856                                 log_warning_errno(r, "Could not add rule, ignoring: %m");
 857                                 return 0;
 858                         }
 859                 }
 860                 break;
 861         case RTM_DELRULE:
 862                 routing_policy_rule_free(rule);
 863
 864                 break;
 865
 866         default:
 867                 assert_not_reached("Received invalid RTNL message type");
 868         }
 869
 870         return 1;
 871 }
 872
 873 static int systemd_netlink_fd(void) {
 874         int n, fd, rtnl_fd = -EINVAL;
 875
 876         n = sd_listen_fds(true);
 877         if (n <= 0)
 878                 return -EINVAL;
 879
 880         for (fd = SD_LISTEN_FDS_START; fd < SD_LISTEN_FDS_START + n; fd ++) {
 881                 if (sd_is_socket(fd, AF_NETLINK, SOCK_RAW, -1) > 0) {
 882                         if (rtnl_fd >= 0)
 883                                 return -EINVAL;
 884
 885                         rtnl_fd = fd;
 886                 }
 887         }
 888
 889         return rtnl_fd;
 890 }
 891
 892 static int manager_connect_genl(Manager *m) {
 893         int r;
 894
 895         assert(m);
 896
 897         r = sd_genl_socket_open(&m->genl);
 898         if (r < 0)
 899                 return r;
 900
 901         r = sd_netlink_inc_rcvbuf(m->genl, RCVBUF_SIZE);
 902         if (r < 0)
 903                 return r;
 904
 905         r = sd_netlink_attach_event(m->genl, m->event, 0);
 906         if (r < 0)
 907                 return r;
 908
 909         return 0;
 910 }
 911
 912 static int manager_connect_rtnl(Manager *m) {
 913         int fd, r;
 914
 915         assert(m);
 916
 917         fd = systemd_netlink_fd();
 918         if (fd < 0)
 919                 r = sd_netlink_open(&m->rtnl);
 920         else
 921                 r = sd_netlink_open_fd(&m->rtnl, fd);
 922         if (r < 0)
 923                 return r;
 924
 925         r = sd_netlink_inc_rcvbuf(m->rtnl, RCVBUF_SIZE);
 926         if (r < 0)
 927                 return r;
 928
 929         r = sd_netlink_attach_event(m->rtnl, m->event, 0);
 930         if (r < 0)
 931                 return r;
 932
 933         r = sd_netlink_add_match(m->rtnl, RTM_NEWLINK, &manager_rtnl_process_link, m);
 934         if (r < 0)
 935                 return r;
 936
 937         r = sd_netlink_add_match(m->rtnl, RTM_DELLINK, &manager_rtnl_process_link, m);
 938         if (r < 0)
 939                 return r;
 940
 941         r = sd_netlink_add_match(m->rtnl, RTM_NEWADDR, &manager_rtnl_process_address, m);
 942         if (r < 0)
 943                 return r;
 944
 945         r = sd_netlink_add_match(m->rtnl, RTM_DELADDR, &manager_rtnl_process_address, m);
 946         if (r < 0)
 947                 return r;
 948
 949         r = sd_netlink_add_match(m->rtnl, RTM_NEWROUTE, &manager_rtnl_process_route, m);
 950         if (r < 0)
 951                 return r;
 952
 953         r = sd_netlink_add_match(m->rtnl, RTM_DELROUTE, &manager_rtnl_process_route, m);
 954         if (r < 0)
 955                 return r;
 956
 957         r = sd_netlink_add_match(m->rtnl, RTM_NEWRULE, &manager_rtnl_process_rule, m);
 958         if (r < 0)
 959                 return r;
 960
 961         r = sd_netlink_add_match(m->rtnl, RTM_DELRULE, &manager_rtnl_process_rule, m);
 962         if (r < 0)
 963                 return r;
 964
 965         return 0;
 966 }
 967
 968 static int ordered_set_put_in_addr_data(OrderedSet *s, const struct in_addr_data *address) {
 969         char *p;
 970         int r;
 971
 972         assert(s);
 973         assert(address);
 974
 975         r = in_addr_to_string(address->family, &address->address, &p);
 976         if (r < 0)
 977                 return r;
 978
 979         r = ordered_set_consume(s, p);
 980         if (r == -EEXIST)
 981                 return 0;
 982
 983         return r;
 984 }
 985
 986 static int ordered_set_put_in_addr_datav(OrderedSet *s, const struct in_addr_data *addresses, unsigned n) {
 987         int r, c = 0;
 988         unsigned i;
 989
 990         assert(s);
 991         assert(addresses || n == 0);
 992
 993         for (i = 0; i < n; i++) {
 994                 r = ordered_set_put_in_addr_data(s, addresses+i);
 995                 if (r < 0)
 996                         return r;
 997
 998                 c += r;
 999         }
1000
1001         return c;
1002 }
1003
1004 static int ordered_set_put_in4_addr(OrderedSet *s, const struct in_addr *address) {
1005         char *p;
1006         int r;
1007
1008         assert(s);
1009         assert(address);
1010
1011         r = in_addr_to_string(AF_INET, (const union in_addr_union*) address, &p);
1012         if (r < 0)
1013                 return r;
1014
1015         r = ordered_set_consume(s, p);
1016         if (r == -EEXIST)
1017                 return 0;
1018
1019         return r;
1020 }
1021
1022 static int ordered_set_put_in4_addrv(OrderedSet *s, const struct in_addr *addresses, unsigned n) {
1023         int r, c = 0;
1024         unsigned i;
1025
1026         assert(s);
1027         assert(n == 0 || addresses);
1028
1029         for (i = 0; i < n; i++) {
1030                 r = ordered_set_put_in4_addr(s, addresses+i);
1031                 if (r < 0)
1032                         return r;
1033
1034                 c += r;
1035         }
1036
1037         return c;
1038 }
1039
1040 static void print_string_set(FILE *f, const char *field, OrderedSet *s) {
1041         bool space = false;
1042         Iterator i;
1043         char *p;
1044
1045         if (ordered_set_isempty(s))
1046                 return;
1047
1048         fputs(field, f);
1049
1050         ORDERED_SET_FOREACH(p, s, i)
1051                 fputs_with_space(f, p, NULL, &space);
1052
1053         fputc('\n', f);
1054 }
1055
1056 static int manager_save(Manager *m) {
1057         _cleanup_ordered_set_free_free_ OrderedSet *dns = NULL, *ntp = NULL, *search_domains = NULL, *route_domains = NULL;
1058         Link *link;
1059         Iterator i;
1060         _cleanup_free_ char *temp_path = NULL;
1061         _cleanup_fclose_ FILE *f = NULL;
1062         LinkOperationalState operstate = LINK_OPERSTATE_OFF;
1063         const char *operstate_str;
1064         int r;
1065
1066         assert(m);
1067         assert(m->state_file);
1068
1069         /* We add all NTP and DNS server to a set, to filter out duplicates */
1070         dns = ordered_set_new(&string_hash_ops);
1071         if (!dns)
1072                 return -ENOMEM;
1073
1074         ntp = ordered_set_new(&string_hash_ops);
1075         if (!ntp)
1076                 return -ENOMEM;
1077
1078         search_domains = ordered_set_new(&dns_name_hash_ops);
1079         if (!search_domains)
1080                 return -ENOMEM;
1081
1082         route_domains = ordered_set_new(&dns_name_hash_ops);
1083         if (!route_domains)
1084                 return -ENOMEM;
1085
1086         HASHMAP_FOREACH(link, m->links, i) {
1087                 if (link->flags & IFF_LOOPBACK)
1088                         continue;
1089
1090                 if (link->operstate > operstate)
1091                         operstate = link->operstate;
1092
1093                 if (!link->network)
1094                         continue;
1095
1096                 /* First add the static configured entries */
1097                 r = ordered_set_put_in_addr_datav(dns, link->network->dns, link->network->n_dns);
1098                 if (r < 0)
1099                         return r;
1100
1101                 r = ordered_set_put_strdupv(ntp, link->network->ntp);
1102                 if (r < 0)
1103                         return r;
1104
1105                 r = ordered_set_put_strdupv(search_domains, link->network->search_domains);
1106                 if (r < 0)
1107                         return r;
1108
1109                 r = ordered_set_put_strdupv(route_domains, link->network->route_domains);
1110                 if (r < 0)
1111                         return r;
1112
1113                 if (!link->dhcp_lease)
1114                         continue;
1115
1116                 /* Secondly, add the entries acquired via DHCP */
1117                 if (link->network->dhcp_use_dns) {
1118                         const struct in_addr *addresses;
1119
1120                         r = sd_dhcp_lease_get_dns(link->dhcp_lease, &addresses);
1121                         if (r > 0) {
1122                                 r = ordered_set_put_in4_addrv(dns, addresses, r);
1123                                 if (r < 0)
1124                                         return r;
1125                         } else if (r < 0 && r != -ENODATA)
1126                                 return r;
1127                 }
1128
1129                 if (link->network->dhcp_use_ntp) {
1130                         const struct in_addr *addresses;
1131
1132                         r = sd_dhcp_lease_get_ntp(link->dhcp_lease, &addresses);
1133                         if (r > 0) {
1134                                 r = ordered_set_put_in4_addrv(ntp, addresses, r);
1135                                 if (r < 0)
1136                                         return r;
1137                         } else if (r < 0 && r != -ENODATA)
1138                                 return r;
1139                 }
1140
1141                 if (link->network->dhcp_use_domains != DHCP_USE_DOMAINS_NO) {
1142                         const char *domainname;
1143                         char **domains = NULL;
1144
1145                         OrderedSet *target_domains = (link->network->dhcp_use_domains == DHCP_USE_DOMAINS_YES) ? search_domains : route_domains;
1146                         r = sd_dhcp_lease_get_domainname(link->dhcp_lease, &domainname);
1147                         if (r >= 0) {
1148                                 r = ordered_set_put_strdup(target_domains, domainname);
1149                                 if (r < 0)
1150                                         return r;
1151                         } else if (r != -ENODATA)
1152                                 return r;
1153
1154                         r = sd_dhcp_lease_get_search_domains(link->dhcp_lease, &domains);
1155                         if (r >= 0) {
1156                                 r = ordered_set_put_strdupv(target_domains, domains);
1157                                 if (r < 0)
1158                                         return r;
1159                         } else if (r != -ENODATA)
1160                                 return r;
1161                 }
1162         }
1163
1164         operstate_str = link_operstate_to_string(operstate);
1165         assert(operstate_str);
1166
1167         r = fopen_temporary(m->state_file, &f, &temp_path);
1168         if (r < 0)
1169                 return r;
1170
1171         (void) __fsetlocking(f, FSETLOCKING_BYCALLER);
1172         (void) fchmod(fileno(f), 0644);
1173
1174         fprintf(f,
1175                 "# This is private data. Do not parse.\n"
1176                 "OPER_STATE=%s\n", operstate_str);
1177
1178         print_string_set(f, "DNS=", dns);
1179         print_string_set(f, "NTP=", ntp);
1180         print_string_set(f, "DOMAINS=", search_domains);
1181         print_string_set(f, "ROUTE_DOMAINS=", route_domains);
1182
1183         r = routing_policy_serialize_rules(m->rules, f);
1184         if (r < 0)
1185                 goto fail;
1186
1187         r = fflush_and_check(f);
1188         if (r < 0)
1189                 goto fail;
1190
1191         if (rename(temp_path, m->state_file) < 0) {
1192                 r = -errno;
1193                 goto fail;
1194         }
1195
1196         if (m->operational_state != operstate) {
1197                 m->operational_state = operstate;
1198                 r = manager_send_changed(m, "OperationalState", NULL);
1199                 if (r < 0)
1200                         log_error_errno(r, "Could not emit changed OperationalState: %m");
1201         }
1202
1203         m->dirty = false;
1204
1205         return 0;
1206
1207 fail:
1208         (void) unlink(m->state_file);
1209         (void) unlink(temp_path);
1210
1211         return log_error_errno(r, "Failed to save network state to %s: %m", m->state_file);
1212 }
1213
1214 static int manager_dirty_handler(sd_event_source *s, void *userdata) {
1215         Manager *m = userdata;
1216         Link *link;
1217         Iterator i;
1218         int r;
1219
1220         assert(m);
1221
1222         if (m->dirty)
1223                 manager_save(m);
1224
1225         SET_FOREACH(link, m->dirty_links, i) {
1226                 r = link_save(link);
1227                 if (r >= 0)
1228                         link_clean(link);
1229         }
1230
1231         return 1;
1232 }
1233
1234 Link *manager_dhcp6_prefix_get(Manager *m, struct in6_addr *addr) {
1235         assert_return(m, NULL);
1236         assert_return(m->dhcp6_prefixes, NULL);
1237         assert_return(addr, NULL);
1238
1239         return hashmap_get(m->dhcp6_prefixes, addr);
1240 }
1241
1242 static int dhcp6_route_add_callback(sd_netlink *nl, sd_netlink_message *m,
1243                                   void *userdata) {
1244         Link *l = userdata;
1245         int r;
1246
1247         r = sd_netlink_message_get_errno(m);
1248         if (r < 0 && r != -EEXIST)
1249                 log_link_debug_errno(l, r, "Received error adding DHCPv6 Prefix Delegation route: %m");
1250
1251         l = link_unref(l);
1252
1253         return 0;
1254 }
1255
1256 int manager_dhcp6_prefix_add(Manager *m, struct in6_addr *addr, Link *link) {
1257         int r;
1258         Route *route;
1259         _cleanup_free_ char *buf = NULL;
1260
1261         assert_return(m, -EINVAL);
1262         assert_return(m->dhcp6_prefixes, -ENODATA);
1263         assert_return(addr, -EINVAL);
1264
1265         r = route_add(link, AF_INET6, (union in_addr_union *) addr, 64,
1266                       0, 0, 0, &route);
1267         if (r < 0)
1268                 return r;
1269
1270         r = route_configure(route, link, dhcp6_route_add_callback);
1271         if (r < 0)
1272                 return r;
1273
1274         (void) in_addr_to_string(AF_INET6, (union in_addr_union *) addr, &buf);
1275         log_link_debug(link, "Adding prefix route %s/64", strnull(buf));
1276
1277         link = link_ref(link);
1278
1279         return hashmap_put(m->dhcp6_prefixes, addr, link);
1280 }
1281
1282 static int dhcp6_route_remove_callback(sd_netlink *nl, sd_netlink_message *m,
1283                                        void *userdata) {
1284         Link *l = userdata;
1285         int r;
1286
1287         r = sd_netlink_message_get_errno(m);
1288         if (r < 0)
1289                 log_link_debug_errno(l, r, "Received error on DHCPv6 Prefix Delegation route removal: %m");
1290
1291         l = link_unref(l);
1292
1293         return 0;
1294 }
1295
1296 int manager_dhcp6_prefix_remove(Manager *m, struct in6_addr *addr) {
1297         Link *l;
1298         int r;
1299         Route *route;
1300         _cleanup_free_ char *buf = NULL;
1301
1302         assert_return(m, -EINVAL);
1303         assert_return(m->dhcp6_prefixes, -ENODATA);
1304         assert_return(addr, -EINVAL);
1305
1306         l = hashmap_remove(m->dhcp6_prefixes, addr);
1307         if (!l)
1308                 return -EINVAL;
1309
1310         (void) sd_radv_remove_prefix(l->radv, addr, 64);
1311         r = route_get(l, AF_INET6, (union in_addr_union *) addr, 64,
1312                       0, 0, 0, &route);
1313         if (r < 0)
1314                 return r;
1315
1316         r = route_remove(route, l, dhcp6_route_remove_callback);
1317         if (r < 0)
1318                 return r;
1319
1320         (void) in_addr_to_string(AF_INET6, (union in_addr_union *) addr, &buf);
1321         log_link_debug(l, "Removing prefix route %s/64", strnull(buf));
1322
1323         l = link_ref(l);
1324
1325         return 0;
1326 }
1327
1328 int manager_dhcp6_prefix_remove_all(Manager *m, Link *link) {
1329         Iterator i;
1330         Link *l;
1331         struct in6_addr *addr;
1332
1333         assert_return(m, -EINVAL);
1334         assert_return(link, -EINVAL);
1335
1336         HASHMAP_FOREACH_KEY(l, addr, m->dhcp6_prefixes, i) {
1337                 if (l != link)
1338                         continue;
1339
1340                 (void) manager_dhcp6_prefix_remove(m, addr);
1341         }
1342
1343         return 0;
1344 }
1345
1346 static void dhcp6_prefixes_hash_func(const void *p, struct siphash *state) {
1347         const struct in6_addr *addr = p;
1348
1349         assert(p);
1350
1351         siphash24_compress(addr, sizeof(*addr), state);
1352 }
1353
1354 static int dhcp6_prefixes_compare_func(const void *_a, const void *_b) {
1355         const struct in6_addr *a = _a, *b = _b;
1356
1357         return memcmp(a, b, sizeof(*a));
1358 }
1359
1360 static const struct hash_ops dhcp6_prefixes_hash_ops = {
1361         .hash = dhcp6_prefixes_hash_func,
1362         .compare = dhcp6_prefixes_compare_func,
1363 };
1364
1365 int manager_new(Manager **ret) {
1366         _cleanup_(manager_freep) Manager *m = NULL;
1367         int r;
1368
1369         m = new0(Manager, 1);
1370         if (!m)
1371                 return -ENOMEM;
1372
1373         m->state_file = strdup("/run/systemd/netif/state");
1374         if (!m->state_file)
1375                 return -ENOMEM;
1376
1377         r = sd_event_default(&m->event);
1378         if (r < 0)
1379                 return r;
1380
1381         (void) sd_event_set_watchdog(m->event, true);
1382         (void) sd_event_add_signal(m->event, NULL, SIGTERM, NULL, NULL);
1383         (void) sd_event_add_signal(m->event, NULL, SIGINT, NULL, NULL);
1384
1385         r = sd_event_add_post(m->event, NULL, manager_dirty_handler, m);
1386         if (r < 0)
1387                 return r;
1388
1389         r = manager_connect_rtnl(m);
1390         if (r < 0)
1391                 return r;
1392
1393         r = manager_connect_genl(m);
1394         if (r < 0)
1395                 return r;
1396
1397         r = manager_connect_udev(m);
1398         if (r < 0)
1399                 return r;
1400
1401         m->netdevs = hashmap_new(&string_hash_ops);
1402         if (!m->netdevs)
1403                 return -ENOMEM;
1404
1405         LIST_HEAD_INIT(m->networks);
1406
1407         r = sd_resolve_default(&m->resolve);
1408         if (r < 0)
1409                 return r;
1410
1411         r = sd_resolve_attach_event(m->resolve, m->event, 0);
1412         if (r < 0)
1413                 return r;
1414
1415         r = setup_default_address_pool(m);
1416         if (r < 0)
1417                 return r;
1418
1419         m->dhcp6_prefixes = hashmap_new(&dhcp6_prefixes_hash_ops);
1420         if (!m->dhcp6_prefixes)
1421                 return -ENOMEM;
1422
1423         m->duid.type = DUID_TYPE_EN;
1424
1425         (void) routing_policy_load_rules(m->state_file, &m->rules_saved);
1426
1427         *ret = TAKE_PTR(m);
1428
1429         return 0;
1430 }
1431
1432 void manager_free(Manager *m) {
1433         Network *network;
1434         NetDev *netdev;
1435         Link *link;
1436         AddressPool *pool;
1437
1438         if (!m)
1439                 return;
1440
1441         free(m->state_file);
1442
1443         while ((network = m->networks))
1444                 network_free(network);
1445
1446         while ((link = hashmap_first(m->dhcp6_prefixes)))
1447                 manager_dhcp6_prefix_remove_all(m, link);
1448         hashmap_free(m->dhcp6_prefixes);
1449
1450         while ((link = hashmap_first(m->links))) {
1451                 if (link->dhcp6_client)
1452                         (void) dhcp6_lease_pd_prefix_lost(link->dhcp6_client,
1453                                                           link);
1454
1455                 hashmap_remove(m->links, INT_TO_PTR(link->ifindex));
1456
1457                 link_unref(link);
1458         }
1459         hashmap_free(m->links);
1460
1461         set_free(m->links_requesting_uuid);
1462         set_free(m->duids_requesting_uuid);
1463
1464         hashmap_free(m->networks_by_name);
1465
1466         while ((netdev = hashmap_first(m->netdevs)))
1467                 netdev_unref(netdev);
1468         hashmap_free(m->netdevs);
1469
1470         while ((pool = m->address_pools))
1471                 address_pool_free(pool);
1472
1473         set_free(m->rules);
1474         set_free(m->rules_foreign);
1475
1476         set_free_with_destructor(m->rules_saved, routing_policy_rule_free);
1477
1478         sd_netlink_unref(m->rtnl);
1479         sd_netlink_unref(m->genl);
1480         sd_event_unref(m->event);
1481
1482         sd_resolve_unref(m->resolve);
1483
1484         sd_event_source_unref(m->udev_event_source);
1485         udev_monitor_unref(m->udev_monitor);
1486
1487         sd_bus_unref(m->bus);
1488
1489         free(m->dynamic_timezone);
1490         free(m->dynamic_hostname);
1491
1492         free(m);
1493 }
1494
1495 int manager_start(Manager *m) {
1496         Link *link;
1497         Iterator i;
1498
1499         assert(m);
1500
1501         /* The dirty handler will deal with future serialization, but the first one
1502            must be done explicitly. */
1503
1504         manager_save(m);
1505
1506         HASHMAP_FOREACH(link, m->links, i)
1507                 link_save(link);
1508
1509         return 0;
1510 }
1511
1512 int manager_load_config(Manager *m) {
1513         int r;
1514
1515         /* update timestamp */
1516         paths_check_timestamp(network_dirs, &m->network_dirs_ts_usec, true);
1517
1518         r = netdev_load(m);
1519         if (r < 0)
1520                 return r;
1521
1522         r = network_load(m);
1523         if (r < 0)
1524                 return r;
1525
1526         return 0;
1527 }
1528
1529 bool manager_should_reload(Manager *m) {
1530         return paths_check_timestamp(network_dirs, &m->network_dirs_ts_usec, false);
1531 }
1532
1533 int manager_rtnl_enumerate_links(Manager *m) {
1534         _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL, *reply = NULL;
1535         sd_netlink_message *link;
1536         int r;
1537
1538         assert(m);
1539         assert(m->rtnl);
1540
1541         r = sd_rtnl_message_new_link(m->rtnl, &req, RTM_GETLINK, 0);
1542         if (r < 0)
1543                 return r;
1544
1545         r = sd_netlink_message_request_dump(req, true);
1546         if (r < 0)
1547                 return r;
1548
1549         r = sd_netlink_call(m->rtnl, req, 0, &reply);
1550         if (r < 0)
1551                 return r;
1552
1553         for (link = reply; link; link = sd_netlink_message_next(link)) {
1554                 int k;
1555
1556                 m->enumerating = true;
1557
1558                 k = manager_rtnl_process_link(m->rtnl, link, m);
1559                 if (k < 0)
1560                         r = k;
1561
1562                 m->enumerating = false;
1563         }
1564
1565         return r;
1566 }
1567
1568 int manager_rtnl_enumerate_addresses(Manager *m) {
1569         _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL, *reply = NULL;
1570         sd_netlink_message *addr;
1571         int r;
1572
1573         assert(m);
1574         assert(m->rtnl);
1575
1576         r = sd_rtnl_message_new_addr(m->rtnl, &req, RTM_GETADDR, 0, 0);
1577         if (r < 0)
1578                 return r;
1579
1580         r = sd_netlink_message_request_dump(req, true);
1581         if (r < 0)
1582                 return r;
1583
1584         r = sd_netlink_call(m->rtnl, req, 0, &reply);
1585         if (r < 0)
1586                 return r;
1587
1588         for (addr = reply; addr; addr = sd_netlink_message_next(addr)) {
1589                 int k;
1590
1591                 m->enumerating = true;
1592
1593                 k = manager_rtnl_process_address(m->rtnl, addr, m);
1594                 if (k < 0)
1595                         r = k;
1596
1597                 m->enumerating = false;
1598         }
1599
1600         return r;
1601 }
1602
1603 int manager_rtnl_enumerate_routes(Manager *m) {
1604         _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL, *reply = NULL;
1605         sd_netlink_message *route;
1606         int r;
1607
1608         assert(m);
1609         assert(m->rtnl);
1610
1611         r = sd_rtnl_message_new_route(m->rtnl, &req, RTM_GETROUTE, 0, 0);
1612         if (r < 0)
1613                 return r;
1614
1615         r = sd_netlink_message_request_dump(req, true);
1616         if (r < 0)
1617                 return r;
1618
1619         r = sd_netlink_call(m->rtnl, req, 0, &reply);
1620         if (r < 0)
1621                 return r;
1622
1623         for (route = reply; route; route = sd_netlink_message_next(route)) {
1624                 int k;
1625
1626                 m->enumerating = true;
1627
1628                 k = manager_rtnl_process_route(m->rtnl, route, m);
1629                 if (k < 0)
1630                         r = k;
1631
1632                 m->enumerating = false;
1633         }
1634
1635         return r;
1636 }
1637
1638 int manager_rtnl_enumerate_rules(Manager *m) {
1639         _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL, *reply = NULL;
1640         sd_netlink_message *rule;
1641         int r;
1642
1643         assert(m);
1644         assert(m->rtnl);
1645
1646         r = sd_rtnl_message_new_routing_policy_rule(m->rtnl, &req, RTM_GETRULE, 0);
1647         if (r < 0)
1648                 return r;
1649
1650         r = sd_netlink_message_request_dump(req, true);
1651         if (r < 0)
1652                 return r;
1653
1654         r = sd_netlink_call(m->rtnl, req, 0, &reply);
1655         if (r < 0) {
1656                 if (r == -EOPNOTSUPP) {
1657                         log_debug("FIB Rules are not supported by the kernel. Ignoring.");
1658                         return 0;
1659                 }
1660
1661                 return r;
1662         }
1663
1664         for (rule = reply; rule; rule = sd_netlink_message_next(rule)) {
1665                 int k;
1666
1667                 m->enumerating = true;
1668
1669                 k = manager_rtnl_process_rule(m->rtnl, rule, m);
1670                 if (k < 0)
1671                         r = k;
1672
1673                 m->enumerating = false;
1674         }
1675
1676         return r;
1677 }
1678
1679 int manager_address_pool_acquire(Manager *m, int family, unsigned prefixlen, union in_addr_union *found) {
1680         AddressPool *p;
1681         int r;
1682
1683         assert(m);
1684         assert(prefixlen > 0);
1685         assert(found);
1686
1687         LIST_FOREACH(address_pools, p, m->address_pools) {
1688                 if (p->family != family)
1689                         continue;
1690
1691                 r = address_pool_acquire(p, prefixlen, found);
1692                 if (r != 0)
1693                         return r;
1694         }
1695
1696         return 0;
1697 }
1698
1699 Link* manager_find_uplink(Manager *m, Link *exclude) {
1700         _cleanup_free_ struct local_address *gateways = NULL;
1701         int n, i;
1702
1703         assert(m);
1704
1705         /* Looks for a suitable "uplink", via black magic: an
1706          * interface that is up and where the default route with the
1707          * highest priority points to. */
1708
1709         n = local_gateways(m->rtnl, 0, AF_UNSPEC, &gateways);
1710         if (n < 0) {
1711                 log_warning_errno(n, "Failed to determine list of default gateways: %m");
1712                 return NULL;
1713         }
1714
1715         for (i = 0; i < n; i++) {
1716                 Link *link;
1717
1718                 link = hashmap_get(m->links, INT_TO_PTR(gateways[i].ifindex));
1719                 if (!link) {
1720                         log_debug("Weird, found a gateway for a link we don't know. Ignoring.");
1721                         continue;
1722                 }
1723
1724                 if (link == exclude)
1725                         continue;
1726
1727                 if (link->operstate < LINK_OPERSTATE_ROUTABLE)
1728                         continue;
1729
1730                 return link;
1731         }
1732
1733         return NULL;
1734 }
1735
1736 void manager_dirty(Manager *manager) {
1737         assert(manager);
1738
1739         /* the serialized state in /run is no longer up-to-date */
1740         manager->dirty = true;
1741 }
1742
1743 static int set_hostname_handler(sd_bus_message *m, void *userdata, sd_bus_error *ret_error) {
1744         Manager *manager = userdata;
1745         const sd_bus_error *e;
1746
1747         assert(m);
1748         assert(manager);
1749
1750         e = sd_bus_message_get_error(m);
1751         if (e)
1752                 log_warning_errno(sd_bus_error_get_errno(e), "Could not set hostname: %s", e->message);
1753
1754         return 1;
1755 }
1756
1757 int manager_set_hostname(Manager *m, const char *hostname) {
1758         int r;
1759
1760         log_debug("Setting transient hostname: '%s'", strna(hostname));
1761
1762         if (free_and_strdup(&m->dynamic_hostname, hostname) < 0)
1763                 return log_oom();
1764
1765         if (!m->bus || sd_bus_is_ready(m->bus) <= 0) {
1766                 log_debug("Not connected to system bus, setting hostname later.");
1767                 return 0;
1768         }
1769
1770         r = sd_bus_call_method_async(
1771                         m->bus,
1772                         NULL,
1773                         "org.freedesktop.hostname1",
1774                         "/org/freedesktop/hostname1",
1775                         "org.freedesktop.hostname1",
1776                         "SetHostname",
1777                         set_hostname_handler,
1778                         m,
1779                         "sb",
1780                         hostname,
1781                         false);
1782
1783         if (r < 0)
1784                 return log_error_errno(r, "Could not set transient hostname: %m");
1785
1786         return 0;
1787 }
1788
1789 static int set_timezone_handler(sd_bus_message *m, void *userdata, sd_bus_error *ret_error) {
1790         Manager *manager = userdata;
1791         const sd_bus_error *e;
1792
1793         assert(m);
1794         assert(manager);
1795
1796         e = sd_bus_message_get_error(m);
1797         if (e)
1798                 log_warning_errno(sd_bus_error_get_errno(e), "Could not set timezone: %s", e->message);
1799
1800         return 1;
1801 }
1802
1803 int manager_set_timezone(Manager *m, const char *tz) {
1804         int r;
1805
1806         assert(m);
1807         assert(tz);
1808
1809         log_debug("Setting system timezone: '%s'", tz);
1810         if (free_and_strdup(&m->dynamic_timezone, tz) < 0)
1811                 return log_oom();
1812
1813         if (!m->bus || sd_bus_is_ready(m->bus) <= 0) {
1814                 log_debug("Not connected to system bus, setting timezone later.");
1815                 return 0;
1816         }
1817
1818         r = sd_bus_call_method_async(
1819                         m->bus,
1820                         NULL,
1821                         "org.freedesktop.timedate1",
1822                         "/org/freedesktop/timedate1",
1823                         "org.freedesktop.timedate1",
1824                         "SetTimezone",
1825                         set_timezone_handler,
1826                         m,
1827                         "sb",
1828                         tz,
1829                         false);
1830         if (r < 0)
1831                 return log_error_errno(r, "Could not set timezone: %m");
1832
1833         return 0;
1834 }
1835
1836 int manager_request_product_uuid(Manager *m, Link *link) {
1837         int r;
1838
1839         assert(m);
1840
1841         if (m->has_product_uuid)
1842                 return 0;
1843
1844         log_debug("Requesting product UUID");
1845
1846         if (link) {
1847                 DUID *duid;
1848
1849                 assert_se(duid = link_get_duid(link));
1850
1851                 r = set_ensure_allocated(&m->links_requesting_uuid, NULL);
1852                 if (r < 0)
1853                         return log_oom();
1854
1855                 r = set_ensure_allocated(&m->duids_requesting_uuid, NULL);
1856                 if (r < 0)
1857                         return log_oom();
1858
1859                 r = set_put(m->links_requesting_uuid, link);
1860                 if (r < 0)
1861                         return log_oom();
1862
1863                 r = set_put(m->duids_requesting_uuid, duid);
1864                 if (r < 0)
1865                         return log_oom();
1866         }
1867
1868         if (!m->bus || sd_bus_is_ready(m->bus) <= 0) {
1869                 log_debug("Not connected to system bus, requesting product UUID later.");
1870                 return 0;
1871         }
1872
1873         r = sd_bus_call_method_async(
1874                         m->bus,
1875                         NULL,
1876                         "org.freedesktop.hostname1",
1877                         "/org/freedesktop/hostname1",
1878                         "org.freedesktop.hostname1",
1879                         "GetProductUUID",
1880                         get_product_uuid_handler,
1881                         m,
1882                         "b",
1883                         false);
1884         if (r < 0)
1885                 return log_warning_errno(r, "Failed to get product UUID: %m");
1886
1887         return 0;
1888 }