2 This file is part of systemd.
4 Copyright 2015 Lennart Poettering
6 systemd is free software; you can redistribute it and/or modify it
7 under the terms of the GNU Lesser General Public License as published by
8 the Free Software Foundation; either version 2.1 of the License, or
9 (at your option) any later version.
11 systemd is distributed in the hope that it will be useful, but
12 WITHOUT ANY WARRANTY; without even the implied warranty of
13 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
14 Lesser General Public License for more details.
16 You should have received a copy of the GNU Lesser General Public License
17 along with systemd; If not, see <http://www.gnu.org/licenses/>.
22 #include "bus-error.h"
24 #include "nspawn-register.h"
25 #include "stat-util.h"
30 const char *machine_name
,
32 const char *directory
,
41 const char *service
) {
43 _cleanup_(sd_bus_error_free
) sd_bus_error error
= SD_BUS_ERROR_NULL
;
44 _cleanup_(sd_bus_flush_close_unrefp
) sd_bus
*bus
= NULL
;
47 r
= sd_bus_default_system(&bus
);
49 return log_error_errno(r
, "Failed to open system bus: %m");
52 r
= sd_bus_call_method(
54 "org.freedesktop.machine1",
55 "/org/freedesktop/machine1",
56 "org.freedesktop.machine1.Manager",
57 "RegisterMachineWithNetwork",
62 SD_BUS_MESSAGE_APPEND_ID128(uuid
),
67 local_ifindex
> 0 ? 1 : 0, local_ifindex
);
69 _cleanup_(sd_bus_message_unrefp
) sd_bus_message
*m
= NULL
;
73 r
= sd_bus_message_new_method_call(
76 "org.freedesktop.machine1",
77 "/org/freedesktop/machine1",
78 "org.freedesktop.machine1.Manager",
79 "CreateMachineWithNetwork");
81 return bus_log_create_error(r
);
83 r
= sd_bus_message_append(
87 SD_BUS_MESSAGE_APPEND_ID128(uuid
),
92 local_ifindex
> 0 ? 1 : 0, local_ifindex
);
94 return bus_log_create_error(r
);
96 r
= sd_bus_message_open_container(m
, 'a', "(sv)");
98 return bus_log_create_error(r
);
100 if (!isempty(slice
)) {
101 r
= sd_bus_message_append(m
, "(sv)", "Slice", "s", slice
);
103 return bus_log_create_error(r
);
106 r
= sd_bus_message_append(m
, "(sv)", "DevicePolicy", "s", "strict");
108 return bus_log_create_error(r
);
110 /* If you make changes here, also make sure to update
111 * systemd-nspawn@.service, to keep the device
112 * policies in sync regardless if we are run with or
113 * without the --keep-unit switch. */
114 r
= sd_bus_message_append(m
, "(sv)", "DeviceAllow", "a(ss)", 9,
115 /* Allow the container to
116 * access and create the API
117 * device nodes, so that
118 * PrivateDevices= in the
124 "/dev/random", "rwm",
125 "/dev/urandom", "rwm",
127 "/dev/net/tun", "rwm",
128 /* Allow the container
129 * access to ptys. However,
131 * container to ever create
132 * these device nodes. */
133 "/dev/pts/ptmx", "rw",
136 return bus_log_create_error(r
);
138 for (j
= 0; j
< n_mounts
; j
++) {
139 CustomMount
*cm
= mounts
+ j
;
141 if (cm
->type
!= CUSTOM_MOUNT_BIND
)
144 r
= is_device_node(cm
->source
);
146 return log_error_errno(r
, "Failed to stat %s: %m", cm
->source
);
149 r
= sd_bus_message_append(m
, "(sv)", "DeviceAllow", "a(ss)", 1,
150 cm
->source
, cm
->read_only
? "r" : "rw");
152 return log_error_errno(r
, "Failed to append message arguments: %m");
156 if (kill_signal
!= 0) {
157 r
= sd_bus_message_append(m
, "(sv)", "KillSignal", "i", kill_signal
);
159 return bus_log_create_error(r
);
161 r
= sd_bus_message_append(m
, "(sv)", "KillMode", "s", "mixed");
163 return bus_log_create_error(r
);
166 STRV_FOREACH(i
, properties
) {
167 r
= bus_append_unit_property_assignment(m
, *i
);
172 r
= sd_bus_message_close_container(m
);
174 return bus_log_create_error(r
);
176 r
= sd_bus_call(bus
, m
, 0, &error
, NULL
);
180 log_error("Failed to register machine: %s", bus_error_message(&error
, r
));
187 int terminate_machine(pid_t pid
) {
188 _cleanup_(sd_bus_error_free
) sd_bus_error error
= SD_BUS_ERROR_NULL
;
189 _cleanup_(sd_bus_message_unrefp
) sd_bus_message
*reply
= NULL
;
190 _cleanup_(sd_bus_flush_close_unrefp
) sd_bus
*bus
= NULL
;
194 r
= sd_bus_default_system(&bus
);
196 return log_error_errno(r
, "Failed to open system bus: %m");
198 r
= sd_bus_call_method(
200 "org.freedesktop.machine1",
201 "/org/freedesktop/machine1",
202 "org.freedesktop.machine1.Manager",
209 /* Note that the machine might already have been
210 * cleaned up automatically, hence don't consider it a
211 * failure if we cannot get the machine object. */
212 log_debug("Failed to get machine: %s", bus_error_message(&error
, r
));
216 r
= sd_bus_message_read(reply
, "o", &path
);
218 return bus_log_parse_error(r
);
220 r
= sd_bus_call_method(
222 "org.freedesktop.machine1",
224 "org.freedesktop.machine1.Machine",
230 log_debug("Failed to terminate machine: %s", bus_error_message(&error
, r
));