]> git.ipfire.org Git - thirdparty/systemd.git/blob - src/resolve/resolvectl.c
projects / thirdparty / systemd.git / blob
? search:
summary | shortlog | log | commit | commitdiff | tree
blame | history | raw | HEAD
Merge pull request #11827 from keszybz/pkgconfig-variables
[thirdparty/systemd.git] / src / resolve / resolvectl.c
1 /* SPDX-License-Identifier: LGPL-2.1+ */
2
3 #include <getopt.h>
4 #include <net/if.h>
5
6 #include "sd-bus.h"
7 #include "sd-netlink.h"
8
9 #include "af-list.h"
10 #include "alloc-util.h"
11 #include "bus-common-errors.h"
12 #include "bus-error.h"
13 #include "bus-util.h"
14 #include "dns-domain.h"
15 #include "escape.h"
16 #include "gcrypt-util.h"
17 #include "in-addr-util.h"
18 #include "main-func.h"
19 #include "missing_network.h"
20 #include "netlink-util.h"
21 #include "pager.h"
22 #include "parse-util.h"
23 #include "pretty-print.h"
24 #include "resolvconf-compat.h"
25 #include "resolvectl.h"
26 #include "resolved-def.h"
27 #include "resolved-dns-packet.h"
28 #include "string-table.h"
29 #include "strv.h"
30 #include "terminal-util.h"
31 #include "verbs.h"
32
33 static int arg_family = AF_UNSPEC;
34 static int arg_ifindex = 0;
35 static char *arg_ifname = NULL;
36 static uint16_t arg_type = 0;
37 static uint16_t arg_class = 0;
38 static bool arg_legend = true;
39 static uint64_t arg_flags = 0;
40 static PagerFlags arg_pager_flags = 0;
41 bool arg_ifindex_permissive = false; /* If true, don't generate an error if the specified interface index doesn't exist */
42 static const char *arg_service_family = NULL;
43
44 typedef enum RawType {
45 RAW_NONE,
46 RAW_PAYLOAD,
47 RAW_PACKET,
48 } RawType;
49 static RawType arg_raw = RAW_NONE;
50
51 ExecutionMode arg_mode = MODE_RESOLVE_HOST;
52
53 char **arg_set_dns = NULL;
54 char **arg_set_domain = NULL;
55 static const char *arg_set_llmnr = NULL;
56 static const char *arg_set_mdns = NULL;
57 static const char *arg_set_dns_over_tls = NULL;
58 static const char *arg_set_dnssec = NULL;
59 static char **arg_set_nta = NULL;
60
61 STATIC_DESTRUCTOR_REGISTER(arg_ifname, freep);
62 STATIC_DESTRUCTOR_REGISTER(arg_set_dns, strv_freep);
63 STATIC_DESTRUCTOR_REGISTER(arg_set_domain, strv_freep);
64 STATIC_DESTRUCTOR_REGISTER(arg_set_nta, strv_freep);
65
66 typedef enum StatusMode {
67 STATUS_ALL,
68 STATUS_DNS,
69 STATUS_DOMAIN,
70 STATUS_DEFAULT_ROUTE,
71 STATUS_LLMNR,
72 STATUS_MDNS,
73 STATUS_PRIVATE,
74 STATUS_DNSSEC,
75 STATUS_NTA,
76 } StatusMode;
77
78 static int parse_ifindex_and_warn(const char *s) {
79 int ifi;
80
81 assert(s);
82
83 if (parse_ifindex(s, &ifi) < 0) {
84 ifi = if_nametoindex(s);
85 if (ifi <= 0)
86 return log_error_errno(errno, "Unknown interface '%s': %m", s);
87 }
88
89 return ifi;
90 }
91
92 int ifname_mangle(const char *s) {
93 _cleanup_free_ char *iface = NULL;
94 const char *dot;
95 int ifi;
96
97 assert(s);
98
99 dot = strchr(s, '.');
100 if (dot) {
101 log_debug("Ignoring protocol specifier '%s'.", dot + 1);
102 iface = strndup(s, dot - s);
103
104 } else
105 iface = strdup(s);
106 if (!iface)
107 return log_oom();
108
109 if (parse_ifindex(iface, &ifi) < 0) {
110 ifi = if_nametoindex(iface);
111 if (ifi <= 0) {
112 if (errno == ENODEV && arg_ifindex_permissive) {
113 log_debug("Interface '%s' not found, but -f specified, ignoring.", iface);
114 return 0; /* done */
115 }
116
117 return log_error_errno(errno, "Unknown interface '%s': %m", iface);
118 }
119 }
120
121 if (arg_ifindex > 0 && arg_ifindex != ifi) {
122 log_error("Specified multiple different interfaces. Refusing.");
123 return -EINVAL;
124 }
125
126 arg_ifindex = ifi;
127 free_and_replace(arg_ifname, iface);
128
129 return 1;
130 }
131
132 static void print_source(uint64_t flags, usec_t rtt) {
133 char rtt_str[FORMAT_TIMESTAMP_MAX];
134
135 if (!arg_legend)
136 return;
137
138 if (flags == 0)
139 return;
140
141 printf("\n%s-- Information acquired via", ansi_grey());
142
143 if (flags != 0)
144 printf(" protocol%s%s%s%s%s",
145 flags & SD_RESOLVED_DNS ? " DNS" :"",
146 flags & SD_RESOLVED_LLMNR_IPV4 ? " LLMNR/IPv4" : "",
147 flags & SD_RESOLVED_LLMNR_IPV6 ? " LLMNR/IPv6" : "",
148 flags & SD_RESOLVED_MDNS_IPV4 ? " mDNS/IPv4" : "",
149 flags & SD_RESOLVED_MDNS_IPV6 ? " mDNS/IPv6" : "");
150
151 assert_se(format_timespan(rtt_str, sizeof(rtt_str), rtt, 100));
152
153 printf(" in %s.%s\n"
154 "%s-- Data is authenticated: %s%s\n",
155 rtt_str, ansi_normal(),
156 ansi_grey(), yes_no(flags & SD_RESOLVED_AUTHENTICATED), ansi_normal());
157 }
158
159 static void print_ifindex_comment(int printed_so_far, int ifindex) {
160 char ifname[IF_NAMESIZE];
161
162 if (ifindex <= 0)
163 return;
164
165 if (!if_indextoname(ifindex, ifname))
166 log_warning_errno(errno, "Failed to resolve interface name for index %i, ignoring: %m", ifindex);
167 else
168 printf("%*s%s-- link: %s%s",
169 60 > printed_so_far ? 60 - printed_so_far : 0, " ", /* Align comment to the 60th column */
170 ansi_grey(), ifname, ansi_normal());
171 }
172
173 static int resolve_host(sd_bus *bus, const char *name) {
174 _cleanup_(sd_bus_message_unrefp) sd_bus_message *req = NULL, *reply = NULL;
175 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
176 const char *canonical = NULL;
177 unsigned c = 0;
178 uint64_t flags;
179 usec_t ts;
180 int r;
181
182 assert(name);
183
184 log_debug("Resolving %s (family %s, interface %s).", name, af_to_name(arg_family) ?: "*", isempty(arg_ifname) ? "*" : arg_ifname);
185
186 r = sd_bus_message_new_method_call(
187 bus,
188 &req,
189 "org.freedesktop.resolve1",
190 "/org/freedesktop/resolve1",
191 "org.freedesktop.resolve1.Manager",
192 "ResolveHostname");
193 if (r < 0)
194 return bus_log_create_error(r);
195
196 r = sd_bus_message_append(req, "isit", arg_ifindex, name, arg_family, arg_flags);
197 if (r < 0)
198 return bus_log_create_error(r);
199
200 ts = now(CLOCK_MONOTONIC);
201
202 r = sd_bus_call(bus, req, SD_RESOLVED_QUERY_TIMEOUT_USEC, &error, &reply);
203 if (r < 0)
204 return log_error_errno(r, "%s: resolve call failed: %s", name, bus_error_message(&error, r));
205
206 ts = now(CLOCK_MONOTONIC) - ts;
207
208 r = sd_bus_message_enter_container(reply, 'a', "(iiay)");
209 if (r < 0)
210 return bus_log_parse_error(r);
211
212 while ((r = sd_bus_message_enter_container(reply, 'r', "iiay")) > 0) {
213 _cleanup_free_ char *pretty = NULL;
214 int ifindex, family, k;
215 const void *a;
216 size_t sz;
217
218 assert_cc(sizeof(int) == sizeof(int32_t));
219
220 r = sd_bus_message_read(reply, "ii", &ifindex, &family);
221 if (r < 0)
222 return bus_log_parse_error(r);
223
224 r = sd_bus_message_read_array(reply, 'y', &a, &sz);
225 if (r < 0)
226 return bus_log_parse_error(r);
227
228 r = sd_bus_message_exit_container(reply);
229 if (r < 0)
230 return bus_log_parse_error(r);
231
232 if (!IN_SET(family, AF_INET, AF_INET6)) {
233 log_debug("%s: skipping entry with family %d (%s)", name, family, af_to_name(family) ?: "unknown");
234 continue;
235 }
236
237 if (sz != FAMILY_ADDRESS_SIZE(family)) {
238 log_error("%s: systemd-resolved returned address of invalid size %zu for family %s", name, sz, af_to_name(family) ?: "unknown");
239 return -EINVAL;
240 }
241
242 r = in_addr_ifindex_to_string(family, a, ifindex, &pretty);
243 if (r < 0)
244 return log_error_errno(r, "Failed to print address for %s: %m", name);
245
246 k = printf("%*s%s %s%s%s",
247 (int) strlen(name), c == 0 ? name : "", c == 0 ? ":" : " ",
248 ansi_highlight(), pretty, ansi_normal());
249
250 print_ifindex_comment(k, ifindex);
251 fputc('\n', stdout);
252
253 c++;
254 }
255 if (r < 0)
256 return bus_log_parse_error(r);
257
258 r = sd_bus_message_exit_container(reply);
259 if (r < 0)
260 return bus_log_parse_error(r);
261
262 r = sd_bus_message_read(reply, "st", &canonical, &flags);
263 if (r < 0)
264 return bus_log_parse_error(r);
265
266 if (!streq(name, canonical))
267 printf("%*s%s (%s)\n",
268 (int) strlen(name), c == 0 ? name : "", c == 0 ? ":" : " ",
269 canonical);
270
271 if (c == 0) {
272 log_error("%s: no addresses found", name);
273 return -ESRCH;
274 }
275
276 print_source(flags, ts);
277
278 return 0;
279 }
280
281 static int resolve_address(sd_bus *bus, int family, const union in_addr_union *address, int ifindex) {
282 _cleanup_(sd_bus_message_unrefp) sd_bus_message *req = NULL, *reply = NULL;
283 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
284 _cleanup_free_ char *pretty = NULL;
285 uint64_t flags;
286 unsigned c = 0;
287 usec_t ts;
288 int r;
289
290 assert(bus);
291 assert(IN_SET(family, AF_INET, AF_INET6));
292 assert(address);
293
294 if (ifindex <= 0)
295 ifindex = arg_ifindex;
296
297 r = in_addr_ifindex_to_string(family, address, ifindex, &pretty);
298 if (r < 0)
299 return log_oom();
300
301 log_debug("Resolving %s.", pretty);
302
303 r = sd_bus_message_new_method_call(
304 bus,
305 &req,
306 "org.freedesktop.resolve1",
307 "/org/freedesktop/resolve1",
308 "org.freedesktop.resolve1.Manager",
309 "ResolveAddress");
310 if (r < 0)
311 return bus_log_create_error(r);
312
313 r = sd_bus_message_append(req, "ii", ifindex, family);
314 if (r < 0)
315 return bus_log_create_error(r);
316
317 r = sd_bus_message_append_array(req, 'y', address, FAMILY_ADDRESS_SIZE(family));
318 if (r < 0)
319 return bus_log_create_error(r);
320
321 r = sd_bus_message_append(req, "t", arg_flags);
322 if (r < 0)
323 return bus_log_create_error(r);
324
325 ts = now(CLOCK_MONOTONIC);
326
327 r = sd_bus_call(bus, req, SD_RESOLVED_QUERY_TIMEOUT_USEC, &error, &reply);
328 if (r < 0)
329 return log_error_errno(r, "%s: resolve call failed: %s", pretty, bus_error_message(&error, r));
330
331 ts = now(CLOCK_MONOTONIC) - ts;
332
333 r = sd_bus_message_enter_container(reply, 'a', "(is)");
334 if (r < 0)
335 return bus_log_create_error(r);
336
337 while ((r = sd_bus_message_enter_container(reply, 'r', "is")) > 0) {
338 const char *n;
339 int k;
340
341 assert_cc(sizeof(int) == sizeof(int32_t));
342
343 r = sd_bus_message_read(reply, "is", &ifindex, &n);
344 if (r < 0)
345 return r;
346
347 r = sd_bus_message_exit_container(reply);
348 if (r < 0)
349 return r;
350
351 k = printf("%*s%s %s%s%s",
352 (int) strlen(pretty), c == 0 ? pretty : "",
353 c == 0 ? ":" : " ",
354 ansi_highlight(), n, ansi_normal());
355
356 print_ifindex_comment(k, ifindex);
357 fputc('\n', stdout);
358
359 c++;
360 }
361 if (r < 0)
362 return bus_log_parse_error(r);
363
364 r = sd_bus_message_exit_container(reply);
365 if (r < 0)
366 return bus_log_parse_error(r);
367
368 r = sd_bus_message_read(reply, "t", &flags);
369 if (r < 0)
370 return bus_log_parse_error(r);
371
372 if (c == 0) {
373 log_error("%s: no names found", pretty);
374 return -ESRCH;
375 }
376
377 print_source(flags, ts);
378
379 return 0;
380 }
381
382 static int output_rr_packet(const void *d, size_t l, int ifindex) {
383 _cleanup_(dns_resource_record_unrefp) DnsResourceRecord *rr = NULL;
384 _cleanup_(dns_packet_unrefp) DnsPacket *p = NULL;
385 int r;
386
387 r = dns_packet_new(&p, DNS_PROTOCOL_DNS, 0, DNS_PACKET_SIZE_MAX);
388 if (r < 0)
389 return log_oom();
390
391 p->refuse_compression = true;
392
393 r = dns_packet_append_blob(p, d, l, NULL);
394 if (r < 0)
395 return log_oom();
396
397 r = dns_packet_read_rr(p, &rr, NULL, NULL);
398 if (r < 0)
399 return log_error_errno(r, "Failed to parse RR: %m");
400
401 if (arg_raw == RAW_PAYLOAD) {
402 void *data;
403 ssize_t k;
404
405 k = dns_resource_record_payload(rr, &data);
406 if (k < 0)
407 return log_error_errno(k, "Cannot dump RR: %m");
408 fwrite(data, 1, k, stdout);
409 } else {
410 const char *s;
411 int k;
412
413 s = dns_resource_record_to_string(rr);
414 if (!s)
415 return log_oom();
416
417 k = printf("%s", s);
418 print_ifindex_comment(k, ifindex);
419 fputc('\n', stdout);
420 }
421
422 return 0;
423 }
424
425 static int resolve_record(sd_bus *bus, const char *name, uint16_t class, uint16_t type, bool warn_missing) {
426 _cleanup_(sd_bus_message_unrefp) sd_bus_message *req = NULL, *reply = NULL;
427 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
428 unsigned n = 0;
429 uint64_t flags;
430 int r;
431 usec_t ts;
432 bool needs_authentication = false;
433
434 assert(name);
435
436 log_debug("Resolving %s %s %s (interface %s).", name, dns_class_to_string(class), dns_type_to_string(type), isempty(arg_ifname) ? "*" : arg_ifname);
437
438 r = sd_bus_message_new_method_call(
439 bus,
440 &req,
441 "org.freedesktop.resolve1",
442 "/org/freedesktop/resolve1",
443 "org.freedesktop.resolve1.Manager",
444 "ResolveRecord");
445 if (r < 0)
446 return bus_log_create_error(r);
447
448 r = sd_bus_message_append(req, "isqqt", arg_ifindex, name, class, type, arg_flags);
449 if (r < 0)
450 return bus_log_create_error(r);
451
452 ts = now(CLOCK_MONOTONIC);
453
454 r = sd_bus_call(bus, req, SD_RESOLVED_QUERY_TIMEOUT_USEC, &error, &reply);
455 if (r < 0) {
456 if (warn_missing || r != -ENXIO)
457 log_error("%s: resolve call failed: %s", name, bus_error_message(&error, r));
458 return r;
459 }
460
461 ts = now(CLOCK_MONOTONIC) - ts;
462
463 r = sd_bus_message_enter_container(reply, 'a', "(iqqay)");
464 if (r < 0)
465 return bus_log_parse_error(r);
466
467 while ((r = sd_bus_message_enter_container(reply, 'r', "iqqay")) > 0) {
468 uint16_t c, t;
469 int ifindex;
470 const void *d;
471 size_t l;
472
473 assert_cc(sizeof(int) == sizeof(int32_t));
474
475 r = sd_bus_message_read(reply, "iqq", &ifindex, &c, &t);
476 if (r < 0)
477 return bus_log_parse_error(r);
478
479 r = sd_bus_message_read_array(reply, 'y', &d, &l);
480 if (r < 0)
481 return bus_log_parse_error(r);
482
483 r = sd_bus_message_exit_container(reply);
484 if (r < 0)
485 return bus_log_parse_error(r);
486
487 if (arg_raw == RAW_PACKET) {
488 uint64_t u64 = htole64(l);
489
490 fwrite(&u64, sizeof(u64), 1, stdout);
491 fwrite(d, 1, l, stdout);
492 } else {
493 r = output_rr_packet(d, l, ifindex);
494 if (r < 0)
495 return r;
496 }
497
498 if (dns_type_needs_authentication(t))
499 needs_authentication = true;
500
501 n++;
502 }
503 if (r < 0)
504 return bus_log_parse_error(r);
505
506 r = sd_bus_message_exit_container(reply);
507 if (r < 0)
508 return bus_log_parse_error(r);
509
510 r = sd_bus_message_read(reply, "t", &flags);
511 if (r < 0)
512 return bus_log_parse_error(r);
513
514 if (n == 0) {
515 if (warn_missing)
516 log_error("%s: no records found", name);
517 return -ESRCH;
518 }
519
520 print_source(flags, ts);
521
522 if ((flags & SD_RESOLVED_AUTHENTICATED) == 0 && needs_authentication) {
523 fflush(stdout);
524
525 fprintf(stderr, "\n%s"
526 "WARNING: The resources shown contain cryptographic key data which could not be\n"
527 " authenticated. It is not suitable to authenticate any communication.\n"
528 " This is usually indication that DNSSEC authentication was not enabled\n"
529 " or is not available for the selected protocol or DNS servers.%s\n",
530 ansi_highlight_red(),
531 ansi_normal());
532 }
533
534 return 0;
535 }
536
537 static int resolve_rfc4501(sd_bus *bus, const char *name) {
538 uint16_t type = 0, class = 0;
539 const char *p, *q, *n;
540 int r;
541
542 assert(bus);
543 assert(name);
544 assert(startswith(name, "dns:"));
545
546 /* Parse RFC 4501 dns: URIs */
547
548 p = name + 4;
549
550 if (p[0] == '/') {
551 const char *e;
552
553 if (p[1] != '/')
554 goto invalid;
555
556 e = strchr(p + 2, '/');
557 if (!e)
558 goto invalid;
559
560 if (e != p + 2)
561 log_warning("DNS authority specification not supported; ignoring specified authority.");
562
563 p = e + 1;
564 }
565
566 q = strchr(p, '?');
567 if (q) {
568 n = strndupa(p, q - p);
569 q++;
570
571 for (;;) {
572 const char *f;
573
574 f = startswith_no_case(q, "class=");
575 if (f) {
576 _cleanup_free_ char *t = NULL;
577 const char *e;
578
579 if (class != 0)
580 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
581 "DNS class specified twice.");
582
583 e = strchrnul(f, ';');
584 t = strndup(f, e - f);
585 if (!t)
586 return log_oom();
587
588 r = dns_class_from_string(t);
589 if (r < 0)
590 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
591 "Unknown DNS class %s.", t);
592
593 class = r;
594
595 if (*e == ';') {
596 q = e + 1;
597 continue;
598 }
599
600 break;
601 }
602
603 f = startswith_no_case(q, "type=");
604 if (f) {
605 _cleanup_free_ char *t = NULL;
606 const char *e;
607
608 if (type != 0)
609 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
610 "DNS type specified twice.");
611
612 e = strchrnul(f, ';');
613 t = strndup(f, e - f);
614 if (!t)
615 return log_oom();
616
617 r = dns_type_from_string(t);
618 if (r < 0)
619 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
620 "Unknown DNS type %s.", t);
621
622 type = r;
623
624 if (*e == ';') {
625 q = e + 1;
626 continue;
627 }
628
629 break;
630 }
631
632 goto invalid;
633 }
634 } else
635 n = p;
636
637 if (class == 0)
638 class = arg_class ?: DNS_CLASS_IN;
639 if (type == 0)
640 type = arg_type ?: DNS_TYPE_A;
641
642 return resolve_record(bus, n, class, type, true);
643
644 invalid:
645 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
646 "Invalid DNS URI: %s", name);
647 }
648
649 static int verb_query(int argc, char **argv, void *userdata) {
650 sd_bus *bus = userdata;
651 char **p;
652 int q, r = 0;
653
654 if (arg_type != 0)
655 STRV_FOREACH(p, argv + 1) {
656 q = resolve_record(bus, *p, arg_class, arg_type, true);
657 if (q < 0)
658 r = q;
659 }
660
661 else
662 STRV_FOREACH(p, argv + 1) {
663 if (startswith(*p, "dns:"))
664 q = resolve_rfc4501(bus, *p);
665 else {
666 int family, ifindex;
667 union in_addr_union a;
668
669 q = in_addr_ifindex_from_string_auto(*p, &family, &a, &ifindex);
670 if (q >= 0)
671 q = resolve_address(bus, family, &a, ifindex);
672 else
673 q = resolve_host(bus, *p);
674 }
675 if (q < 0)
676 r = q;
677 }
678
679 return r;
680 }
681
682 static int resolve_service(sd_bus *bus, const char *name, const char *type, const char *domain) {
683 const char *canonical_name, *canonical_type, *canonical_domain;
684 _cleanup_(sd_bus_message_unrefp) sd_bus_message *req = NULL, *reply = NULL;
685 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
686 size_t indent, sz;
687 uint64_t flags;
688 const char *p;
689 unsigned c;
690 usec_t ts;
691 int r;
692
693 assert(bus);
694 assert(domain);
695
696 name = empty_to_null(name);
697 type = empty_to_null(type);
698
699 if (name)
700 log_debug("Resolving service \"%s\" of type %s in %s (family %s, interface %s).", name, type, domain, af_to_name(arg_family) ?: "*", isempty(arg_ifname) ? "*" : arg_ifname);
701 else if (type)
702 log_debug("Resolving service type %s of %s (family %s, interface %s).", type, domain, af_to_name(arg_family) ?: "*", isempty(arg_ifname) ? "*" : arg_ifname);
703 else
704 log_debug("Resolving service type %s (family %s, interface %s).", domain, af_to_name(arg_family) ?: "*", isempty(arg_ifname) ? "*" : arg_ifname);
705
706 r = sd_bus_message_new_method_call(
707 bus,
708 &req,
709 "org.freedesktop.resolve1",
710 "/org/freedesktop/resolve1",
711 "org.freedesktop.resolve1.Manager",
712 "ResolveService");
713 if (r < 0)
714 return bus_log_create_error(r);
715
716 r = sd_bus_message_append(req, "isssit", arg_ifindex, name, type, domain, arg_family, arg_flags);
717 if (r < 0)
718 return bus_log_create_error(r);
719
720 ts = now(CLOCK_MONOTONIC);
721
722 r = sd_bus_call(bus, req, SD_RESOLVED_QUERY_TIMEOUT_USEC, &error, &reply);
723 if (r < 0)
724 return log_error_errno(r, "Resolve call failed: %s", bus_error_message(&error, r));
725
726 ts = now(CLOCK_MONOTONIC) - ts;
727
728 r = sd_bus_message_enter_container(reply, 'a', "(qqqsa(iiay)s)");
729 if (r < 0)
730 return bus_log_parse_error(r);
731
732 indent =
733 (name ? strlen(name) + 1 : 0) +
734 (type ? strlen(type) + 1 : 0) +
735 strlen(domain) + 2;
736
737 c = 0;
738 while ((r = sd_bus_message_enter_container(reply, 'r', "qqqsa(iiay)s")) > 0) {
739 uint16_t priority, weight, port;
740 const char *hostname, *canonical;
741
742 r = sd_bus_message_read(reply, "qqqs", &priority, &weight, &port, &hostname);
743 if (r < 0)
744 return bus_log_parse_error(r);
745
746 if (name)
747 printf("%*s%s", (int) strlen(name), c == 0 ? name : "", c == 0 ? "/" : " ");
748 if (type)
749 printf("%*s%s", (int) strlen(type), c == 0 ? type : "", c == 0 ? "/" : " ");
750
751 printf("%*s%s %s:%u [priority=%u, weight=%u]\n",
752 (int) strlen(domain), c == 0 ? domain : "",
753 c == 0 ? ":" : " ",
754 hostname, port,
755 priority, weight);
756
757 r = sd_bus_message_enter_container(reply, 'a', "(iiay)");
758 if (r < 0)
759 return bus_log_parse_error(r);
760
761 while ((r = sd_bus_message_enter_container(reply, 'r', "iiay")) > 0) {
762 _cleanup_free_ char *pretty = NULL;
763 int ifindex, family, k;
764 const void *a;
765
766 assert_cc(sizeof(int) == sizeof(int32_t));
767
768 r = sd_bus_message_read(reply, "ii", &ifindex, &family);
769 if (r < 0)
770 return bus_log_parse_error(r);
771
772 r = sd_bus_message_read_array(reply, 'y', &a, &sz);
773 if (r < 0)
774 return bus_log_parse_error(r);
775
776 r = sd_bus_message_exit_container(reply);
777 if (r < 0)
778 return bus_log_parse_error(r);
779
780 if (!IN_SET(family, AF_INET, AF_INET6)) {
781 log_debug("%s: skipping entry with family %d (%s)", name, family, af_to_name(family) ?: "unknown");
782 continue;
783 }
784
785 if (sz != FAMILY_ADDRESS_SIZE(family)) {
786 log_error("%s: systemd-resolved returned address of invalid size %zu for family %s", name, sz, af_to_name(family) ?: "unknown");
787 return -EINVAL;
788 }
789
790 r = in_addr_ifindex_to_string(family, a, ifindex, &pretty);
791 if (r < 0)
792 return log_error_errno(r, "Failed to print address for %s: %m", name);
793
794 k = printf("%*s%s", (int) indent, "", pretty);
795 print_ifindex_comment(k, ifindex);
796 fputc('\n', stdout);
797 }
798 if (r < 0)
799 return bus_log_parse_error(r);
800
801 r = sd_bus_message_exit_container(reply);
802 if (r < 0)
803 return bus_log_parse_error(r);
804
805 r = sd_bus_message_read(reply, "s", &canonical);
806 if (r < 0)
807 return bus_log_parse_error(r);
808
809 if (!streq(hostname, canonical))
810 printf("%*s(%s)\n", (int) indent, "", canonical);
811
812 r = sd_bus_message_exit_container(reply);
813 if (r < 0)
814 return bus_log_parse_error(r);
815
816 c++;
817 }
818 if (r < 0)
819 return bus_log_parse_error(r);
820
821 r = sd_bus_message_exit_container(reply);
822 if (r < 0)
823 return bus_log_parse_error(r);
824
825 r = sd_bus_message_enter_container(reply, 'a', "ay");
826 if (r < 0)
827 return bus_log_parse_error(r);
828
829 while ((r = sd_bus_message_read_array(reply, 'y', (const void**) &p, &sz)) > 0) {
830 _cleanup_free_ char *escaped = NULL;
831
832 escaped = cescape_length(p, sz);
833 if (!escaped)
834 return log_oom();
835
836 printf("%*s%s\n", (int) indent, "", escaped);
837 }
838 if (r < 0)
839 return bus_log_parse_error(r);
840
841 r = sd_bus_message_exit_container(reply);
842 if (r < 0)
843 return bus_log_parse_error(r);
844
845 r = sd_bus_message_read(reply, "ssst", &canonical_name, &canonical_type, &canonical_domain, &flags);
846 if (r < 0)
847 return bus_log_parse_error(r);
848
849 canonical_name = empty_to_null(canonical_name);
850 canonical_type = empty_to_null(canonical_type);
851
852 if (!streq_ptr(name, canonical_name) ||
853 !streq_ptr(type, canonical_type) ||
854 !streq_ptr(domain, canonical_domain)) {
855
856 printf("%*s(", (int) indent, "");
857
858 if (canonical_name)
859 printf("%s/", canonical_name);
860 if (canonical_type)
861 printf("%s/", canonical_type);
862
863 printf("%s)\n", canonical_domain);
864 }
865
866 print_source(flags, ts);
867
868 return 0;
869 }
870
871 static int verb_service(int argc, char **argv, void *userdata) {
872 sd_bus *bus = userdata;
873
874 if (argc == 2)
875 return resolve_service(bus, NULL, NULL, argv[1]);
876 else if (argc == 3)
877 return resolve_service(bus, NULL, argv[1], argv[2]);
878 else
879 return resolve_service(bus, argv[1], argv[2], argv[3]);
880 }
881
882 static int resolve_openpgp(sd_bus *bus, const char *address) {
883 const char *domain, *full;
884 int r;
885 _cleanup_free_ char *hashed = NULL;
886
887 assert(bus);
888 assert(address);
889
890 domain = strrchr(address, '@');
891 if (!domain)
892 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
893 "Address does not contain '@': \"%s\"", address);
894 if (domain == address || domain[1] == '\0')
895 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
896 "Address starts or ends with '@': \"%s\"", address);
897 domain++;
898
899 r = string_hashsum_sha256(address, domain - 1 - address, &hashed);
900 if (r < 0)
901 return log_error_errno(r, "Hashing failed: %m");
902
903 strshorten(hashed, 56);
904
905 full = strjoina(hashed, "._openpgpkey.", domain);
906 log_debug("Looking up \"%s\".", full);
907
908 r = resolve_record(bus, full,
909 arg_class ?: DNS_CLASS_IN,
910 arg_type ?: DNS_TYPE_OPENPGPKEY, false);
911
912 if (IN_SET(r, -ENXIO, -ESRCH)) { /* NXDOMAIN or NODATA? */
913 hashed = mfree(hashed);
914 r = string_hashsum_sha224(address, domain - 1 - address, &hashed);
915 if (r < 0)
916 return log_error_errno(r, "Hashing failed: %m");
917
918 full = strjoina(hashed, "._openpgpkey.", domain);
919 log_debug("Looking up \"%s\".", full);
920
921 return resolve_record(bus, full,
922 arg_class ?: DNS_CLASS_IN,
923 arg_type ?: DNS_TYPE_OPENPGPKEY, true);
924 }
925
926 return r;
927 }
928
929 static int verb_openpgp(int argc, char **argv, void *userdata) {
930 sd_bus *bus = userdata;
931 char **p;
932 int q, r = 0;
933
934 STRV_FOREACH(p, argv + 1) {
935 q = resolve_openpgp(bus, *p);
936 if (q < 0)
937 r = q;
938 }
939
940 return r;
941 }
942
943 static int resolve_tlsa(sd_bus *bus, const char *family, const char *address) {
944 const char *port;
945 uint16_t port_num = 443;
946 _cleanup_free_ char *full = NULL;
947 int r;
948
949 assert(bus);
950 assert(address);
951
952 port = strrchr(address, ':');
953 if (port) {
954 r = parse_ip_port(port + 1, &port_num);
955 if (r < 0)
956 return log_error_errno(r, "Invalid port \"%s\".", port + 1);
957
958 address = strndupa(address, port - address);
959 }
960
961 r = asprintf(&full, "_%u._%s.%s",
962 port_num,
963 family,
964 address);
965 if (r < 0)
966 return log_oom();
967
968 log_debug("Looking up \"%s\".", full);
969
970 return resolve_record(bus, full,
971 arg_class ?: DNS_CLASS_IN,
972 arg_type ?: DNS_TYPE_TLSA, true);
973 }
974
975 static bool service_family_is_valid(const char *s) {
976 return STR_IN_SET(s, "tcp", "udp", "sctp");
977 }
978
979 static int verb_tlsa(int argc, char **argv, void *userdata) {
980 sd_bus *bus = userdata;
981 char **p, **args = argv + 1;
982 const char *family = "tcp";
983 int q, r = 0;
984
985 if (service_family_is_valid(argv[1])) {
986 family = argv[1];
987 args++;
988 }
989
990 STRV_FOREACH(p, args) {
991 q = resolve_tlsa(bus, family, *p);
992 if (q < 0)
993 r = q;
994 }
995
996 return r;
997 }
998
999 static int show_statistics(int argc, char **argv, void *userdata) {
1000 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1001 _cleanup_(sd_bus_message_unrefp) sd_bus_message *reply = NULL;
1002 sd_bus *bus = userdata;
1003 uint64_t n_current_transactions, n_total_transactions,
1004 cache_size, n_cache_hit, n_cache_miss,
1005 n_dnssec_secure, n_dnssec_insecure, n_dnssec_bogus, n_dnssec_indeterminate;
1006 int r, dnssec_supported;
1007
1008 assert(bus);
1009
1010 r = sd_bus_get_property_trivial(bus,
1011 "org.freedesktop.resolve1",
1012 "/org/freedesktop/resolve1",
1013 "org.freedesktop.resolve1.Manager",
1014 "DNSSECSupported",
1015 &error,
1016 'b',
1017 &dnssec_supported);
1018 if (r < 0)
1019 return log_error_errno(r, "Failed to get DNSSEC supported state: %s", bus_error_message(&error, r));
1020
1021 printf("DNSSEC supported by current servers: %s%s%s\n\n",
1022 ansi_highlight(),
1023 yes_no(dnssec_supported),
1024 ansi_normal());
1025
1026 r = sd_bus_get_property(bus,
1027 "org.freedesktop.resolve1",
1028 "/org/freedesktop/resolve1",
1029 "org.freedesktop.resolve1.Manager",
1030 "TransactionStatistics",
1031 &error,
1032 &reply,
1033 "(tt)");
1034 if (r < 0)
1035 return log_error_errno(r, "Failed to get transaction statistics: %s", bus_error_message(&error, r));
1036
1037 r = sd_bus_message_read(reply, "(tt)",
1038 &n_current_transactions,
1039 &n_total_transactions);
1040 if (r < 0)
1041 return bus_log_parse_error(r);
1042
1043 printf("%sTransactions%s\n"
1044 "Current Transactions: %" PRIu64 "\n"
1045 " Total Transactions: %" PRIu64 "\n",
1046 ansi_highlight(),
1047 ansi_normal(),
1048 n_current_transactions,
1049 n_total_transactions);
1050
1051 reply = sd_bus_message_unref(reply);
1052
1053 r = sd_bus_get_property(bus,
1054 "org.freedesktop.resolve1",
1055 "/org/freedesktop/resolve1",
1056 "org.freedesktop.resolve1.Manager",
1057 "CacheStatistics",
1058 &error,
1059 &reply,
1060 "(ttt)");
1061 if (r < 0)
1062 return log_error_errno(r, "Failed to get cache statistics: %s", bus_error_message(&error, r));
1063
1064 r = sd_bus_message_read(reply, "(ttt)",
1065 &cache_size,
1066 &n_cache_hit,
1067 &n_cache_miss);
1068 if (r < 0)
1069 return bus_log_parse_error(r);
1070
1071 printf("\n%sCache%s\n"
1072 " Current Cache Size: %" PRIu64 "\n"
1073 " Cache Hits: %" PRIu64 "\n"
1074 " Cache Misses: %" PRIu64 "\n",
1075 ansi_highlight(),
1076 ansi_normal(),
1077 cache_size,
1078 n_cache_hit,
1079 n_cache_miss);
1080
1081 reply = sd_bus_message_unref(reply);
1082
1083 r = sd_bus_get_property(bus,
1084 "org.freedesktop.resolve1",
1085 "/org/freedesktop/resolve1",
1086 "org.freedesktop.resolve1.Manager",
1087 "DNSSECStatistics",
1088 &error,
1089 &reply,
1090 "(tttt)");
1091 if (r < 0)
1092 return log_error_errno(r, "Failed to get DNSSEC statistics: %s", bus_error_message(&error, r));
1093
1094 r = sd_bus_message_read(reply, "(tttt)",
1095 &n_dnssec_secure,
1096 &n_dnssec_insecure,
1097 &n_dnssec_bogus,
1098 &n_dnssec_indeterminate);
1099 if (r < 0)
1100 return bus_log_parse_error(r);
1101
1102 printf("\n%sDNSSEC Verdicts%s\n"
1103 " Secure: %" PRIu64 "\n"
1104 " Insecure: %" PRIu64 "\n"
1105 " Bogus: %" PRIu64 "\n"
1106 " Indeterminate: %" PRIu64 "\n",
1107 ansi_highlight(),
1108 ansi_normal(),
1109 n_dnssec_secure,
1110 n_dnssec_insecure,
1111 n_dnssec_bogus,
1112 n_dnssec_indeterminate);
1113
1114 return 0;
1115 }
1116
1117 static int reset_statistics(int argc, char **argv, void *userdata) {
1118 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1119 sd_bus *bus = userdata;
1120 int r;
1121
1122 r = sd_bus_call_method(bus,
1123 "org.freedesktop.resolve1",
1124 "/org/freedesktop/resolve1",
1125 "org.freedesktop.resolve1.Manager",
1126 "ResetStatistics",
1127 &error,
1128 NULL,
1129 NULL);
1130 if (r < 0)
1131 return log_error_errno(r, "Failed to reset statistics: %s", bus_error_message(&error, r));
1132
1133 return 0;
1134 }
1135
1136 static int flush_caches(int argc, char **argv, void *userdata) {
1137 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1138 sd_bus *bus = userdata;
1139 int r;
1140
1141 r = sd_bus_call_method(bus,
1142 "org.freedesktop.resolve1",
1143 "/org/freedesktop/resolve1",
1144 "org.freedesktop.resolve1.Manager",
1145 "FlushCaches",
1146 &error,
1147 NULL,
1148 NULL);
1149 if (r < 0)
1150 return log_error_errno(r, "Failed to flush caches: %s", bus_error_message(&error, r));
1151
1152 return 0;
1153 }
1154
1155 static int reset_server_features(int argc, char **argv, void *userdata) {
1156 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1157 sd_bus *bus = userdata;
1158 int r;
1159
1160 r = sd_bus_call_method(bus,
1161 "org.freedesktop.resolve1",
1162 "/org/freedesktop/resolve1",
1163 "org.freedesktop.resolve1.Manager",
1164 "ResetServerFeatures",
1165 &error,
1166 NULL,
1167 NULL);
1168 if (r < 0)
1169 return log_error_errno(r, "Failed to reset server features: %s", bus_error_message(&error, r));
1170
1171 return 0;
1172 }
1173
1174 static int read_dns_server_one(sd_bus_message *m, bool with_ifindex, char **ret) {
1175 _cleanup_free_ char *pretty = NULL;
1176 int ifindex, family, r;
1177 const void *a;
1178 size_t sz;
1179
1180 assert(m);
1181 assert(ret);
1182
1183 r = sd_bus_message_enter_container(m, 'r', with_ifindex ? "iiay" : "iay");
1184 if (r <= 0)
1185 return r;
1186
1187 if (with_ifindex) {
1188 r = sd_bus_message_read(m, "i", &ifindex);
1189 if (r < 0)
1190 return r;
1191 }
1192
1193 r = sd_bus_message_read(m, "i", &family);
1194 if (r < 0)
1195 return r;
1196
1197 r = sd_bus_message_read_array(m, 'y', &a, &sz);
1198 if (r < 0)
1199 return r;
1200
1201 r = sd_bus_message_exit_container(m);
1202 if (r < 0)
1203 return r;
1204
1205 if (with_ifindex && ifindex != 0) {
1206 /* only show the global ones here */
1207 *ret = NULL;
1208 return 1;
1209 }
1210
1211 if (!IN_SET(family, AF_INET, AF_INET6)) {
1212 log_debug("Unexpected family, ignoring: %i", family);
1213
1214 *ret = NULL;
1215 return 1;
1216 }
1217
1218 if (sz != FAMILY_ADDRESS_SIZE(family)) {
1219 log_debug("Address size mismatch, ignoring.");
1220
1221 *ret = NULL;
1222 return 1;
1223 }
1224
1225 r = in_addr_to_string(family, a, &pretty);
1226 if (r < 0)
1227 return r;
1228
1229 *ret = TAKE_PTR(pretty);
1230
1231 return 1;
1232 }
1233
1234 static int map_link_dns_servers(sd_bus *bus, const char *member, sd_bus_message *m, sd_bus_error *error, void *userdata) {
1235 char ***l = userdata;
1236 int r;
1237
1238 assert(bus);
1239 assert(member);
1240 assert(m);
1241 assert(l);
1242
1243 r = sd_bus_message_enter_container(m, 'a', "(iay)");
1244 if (r < 0)
1245 return r;
1246
1247 for (;;) {
1248 char *pretty = NULL;
1249
1250 r = read_dns_server_one(m, false, &pretty);
1251 if (r < 0)
1252 return r;
1253 if (r == 0)
1254 break;
1255
1256 if (isempty(pretty))
1257 continue;
1258
1259 r = strv_consume(l, pretty);
1260 if (r < 0)
1261 return r;
1262 }
1263
1264 r = sd_bus_message_exit_container(m);
1265 if (r < 0)
1266 return r;
1267
1268 return 0;
1269 }
1270
1271 static int map_link_current_dns_server(sd_bus *bus, const char *member, sd_bus_message *m, sd_bus_error *error, void *userdata) {
1272 assert(m);
1273 assert(userdata);
1274
1275 return read_dns_server_one(m, false, userdata);
1276 }
1277
1278 static int read_domain_one(sd_bus_message *m, bool with_ifindex, char **ret) {
1279 _cleanup_free_ char *str = NULL;
1280 int ifindex, route_only, r;
1281 const char *domain;
1282
1283 assert(m);
1284 assert(ret);
1285
1286 if (with_ifindex)
1287 r = sd_bus_message_read(m, "(isb)", &ifindex, &domain, &route_only);
1288 else
1289 r = sd_bus_message_read(m, "(sb)", &domain, &route_only);
1290 if (r <= 0)
1291 return r;
1292
1293 if (with_ifindex && ifindex != 0) {
1294 /* only show the global ones here */
1295 *ret = NULL;
1296 return 1;
1297 }
1298
1299 if (route_only)
1300 str = strappend("~", domain);
1301 else
1302 str = strdup(domain);
1303 if (!str)
1304 return -ENOMEM;
1305
1306 *ret = TAKE_PTR(str);
1307
1308 return 1;
1309 }
1310
1311 static int map_link_domains(sd_bus *bus, const char *member, sd_bus_message *m, sd_bus_error *error, void *userdata) {
1312 char ***l = userdata;
1313 int r;
1314
1315 assert(bus);
1316 assert(member);
1317 assert(m);
1318 assert(l);
1319
1320 r = sd_bus_message_enter_container(m, 'a', "(sb)");
1321 if (r < 0)
1322 return r;
1323
1324 for (;;) {
1325 char *pretty = NULL;
1326
1327 r = read_domain_one(m, false, &pretty);
1328 if (r < 0)
1329 return r;
1330 if (r == 0)
1331 break;
1332
1333 if (isempty(pretty))
1334 continue;
1335
1336 r = strv_consume(l, pretty);
1337 if (r < 0)
1338 return r;
1339 }
1340
1341 r = sd_bus_message_exit_container(m);
1342 if (r < 0)
1343 return r;
1344
1345 return 0;
1346 }
1347
1348 static int status_print_strv_ifindex(int ifindex, const char *ifname, char **p) {
1349 char **i;
1350
1351 printf("%sLink %i (%s)%s:",
1352 ansi_highlight(), ifindex, ifname, ansi_normal());
1353
1354 STRV_FOREACH(i, p)
1355 printf(" %s", *i);
1356
1357 printf("\n");
1358
1359 return 0;
1360 }
1361
1362 struct link_info {
1363 uint64_t scopes_mask;
1364 const char *llmnr;
1365 const char *mdns;
1366 const char *dns_over_tls;
1367 const char *dnssec;
1368 char *current_dns;
1369 char **dns;
1370 char **domains;
1371 char **ntas;
1372 bool dnssec_supported;
1373 bool default_route;
1374 };
1375
1376 static void link_info_clear(struct link_info *p) {
1377 free(p->current_dns);
1378 strv_free(p->dns);
1379 strv_free(p->domains);
1380 strv_free(p->ntas);
1381 }
1382
1383 static int status_ifindex(sd_bus *bus, int ifindex, const char *name, StatusMode mode, bool *empty_line) {
1384 static const struct bus_properties_map property_map[] = {
1385 { "ScopesMask", "t", NULL, offsetof(struct link_info, scopes_mask) },
1386 { "DNS", "a(iay)", map_link_dns_servers, offsetof(struct link_info, dns) },
1387 { "CurrentDNSServer", "(iay)", map_link_current_dns_server, offsetof(struct link_info, current_dns) },
1388 { "Domains", "a(sb)", map_link_domains, offsetof(struct link_info, domains) },
1389 { "DefaultRoute", "b", NULL, offsetof(struct link_info, default_route) },
1390 { "LLMNR", "s", NULL, offsetof(struct link_info, llmnr) },
1391 { "MulticastDNS", "s", NULL, offsetof(struct link_info, mdns) },
1392 { "DNSOverTLS", "s", NULL, offsetof(struct link_info, dns_over_tls) },
1393 { "DNSSEC", "s", NULL, offsetof(struct link_info, dnssec) },
1394 { "DNSSECNegativeTrustAnchors", "as", NULL, offsetof(struct link_info, ntas) },
1395 { "DNSSECSupported", "b", NULL, offsetof(struct link_info, dnssec_supported) },
1396 {}
1397 };
1398 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1399 _cleanup_(sd_bus_message_unrefp) sd_bus_message *m = NULL;
1400 _cleanup_(link_info_clear) struct link_info link_info = {};
1401 _cleanup_free_ char *ifi = NULL, *p = NULL;
1402 char ifname[IF_NAMESIZE] = "";
1403 char **i;
1404 int r;
1405
1406 assert(bus);
1407 assert(ifindex > 0);
1408
1409 if (!name) {
1410 if (!if_indextoname(ifindex, ifname))
1411 return log_error_errno(errno, "Failed to resolve interface name for %i: %m", ifindex);
1412
1413 name = ifname;
1414 }
1415
1416 if (asprintf(&ifi, "%i", ifindex) < 0)
1417 return log_oom();
1418
1419 r = sd_bus_path_encode("/org/freedesktop/resolve1/link", ifi, &p);
1420 if (r < 0)
1421 return log_oom();
1422
1423 r = bus_map_all_properties(bus,
1424 "org.freedesktop.resolve1",
1425 p,
1426 property_map,
1427 BUS_MAP_BOOLEAN_AS_BOOL,
1428 &error,
1429 &m,
1430 &link_info);
1431 if (r < 0)
1432 return log_error_errno(r, "Failed to get link data for %i: %s", ifindex, bus_error_message(&error, r));
1433
1434 (void) pager_open(arg_pager_flags);
1435
1436 if (mode == STATUS_DNS)
1437 return status_print_strv_ifindex(ifindex, name, link_info.dns);
1438
1439 if (mode == STATUS_DOMAIN)
1440 return status_print_strv_ifindex(ifindex, name, link_info.domains);
1441
1442 if (mode == STATUS_NTA)
1443 return status_print_strv_ifindex(ifindex, name, link_info.ntas);
1444
1445 if (mode == STATUS_DEFAULT_ROUTE) {
1446 printf("%sLink %i (%s)%s: %s\n",
1447 ansi_highlight(), ifindex, name, ansi_normal(),
1448 yes_no(link_info.default_route));
1449
1450 return 0;
1451 }
1452
1453 if (mode == STATUS_LLMNR) {
1454 printf("%sLink %i (%s)%s: %s\n",
1455 ansi_highlight(), ifindex, name, ansi_normal(),
1456 strna(link_info.llmnr));
1457
1458 return 0;
1459 }
1460
1461 if (mode == STATUS_MDNS) {
1462 printf("%sLink %i (%s)%s: %s\n",
1463 ansi_highlight(), ifindex, name, ansi_normal(),
1464 strna(link_info.mdns));
1465
1466 return 0;
1467 }
1468
1469 if (mode == STATUS_PRIVATE) {
1470 printf("%sLink %i (%s)%s: %s\n",
1471 ansi_highlight(), ifindex, name, ansi_normal(),
1472 strna(link_info.dns_over_tls));
1473
1474 return 0;
1475 }
1476
1477 if (mode == STATUS_DNSSEC) {
1478 printf("%sLink %i (%s)%s: %s\n",
1479 ansi_highlight(), ifindex, name, ansi_normal(),
1480 strna(link_info.dnssec));
1481
1482 return 0;
1483 }
1484
1485 if (empty_line && *empty_line)
1486 fputc('\n', stdout);
1487
1488 printf("%sLink %i (%s)%s\n",
1489 ansi_highlight(), ifindex, name, ansi_normal());
1490
1491 if (link_info.scopes_mask == 0)
1492 printf(" Current Scopes: none\n");
1493 else
1494 printf(" Current Scopes:%s%s%s%s%s\n",
1495 link_info.scopes_mask & SD_RESOLVED_DNS ? " DNS" : "",
1496 link_info.scopes_mask & SD_RESOLVED_LLMNR_IPV4 ? " LLMNR/IPv4" : "",
1497 link_info.scopes_mask & SD_RESOLVED_LLMNR_IPV6 ? " LLMNR/IPv6" : "",
1498 link_info.scopes_mask & SD_RESOLVED_MDNS_IPV4 ? " mDNS/IPv4" : "",
1499 link_info.scopes_mask & SD_RESOLVED_MDNS_IPV6 ? " mDNS/IPv6" : "");
1500
1501 printf("DefaultRoute setting: %s\n"
1502 " LLMNR setting: %s\n"
1503 "MulticastDNS setting: %s\n"
1504 " DNSOverTLS setting: %s\n"
1505 " DNSSEC setting: %s\n"
1506 " DNSSEC supported: %s\n",
1507 yes_no(link_info.default_route),
1508 strna(link_info.llmnr),
1509 strna(link_info.mdns),
1510 strna(link_info.dns_over_tls),
1511 strna(link_info.dnssec),
1512 yes_no(link_info.dnssec_supported));
1513
1514 if (link_info.current_dns)
1515 printf(" Current DNS Server: %s\n", link_info.current_dns);
1516
1517 STRV_FOREACH(i, link_info.dns) {
1518 printf(" %s %s\n",
1519 i == link_info.dns ? "DNS Servers:" : " ",
1520 *i);
1521 }
1522
1523 STRV_FOREACH(i, link_info.domains) {
1524 printf(" %s %s\n",
1525 i == link_info.domains ? "DNS Domain:" : " ",
1526 *i);
1527 }
1528
1529 STRV_FOREACH(i, link_info.ntas) {
1530 printf(" %s %s\n",
1531 i == link_info.ntas ? "DNSSEC NTA:" : " ",
1532 *i);
1533 }
1534
1535 if (empty_line)
1536 *empty_line = true;
1537
1538 return 0;
1539 }
1540
1541 static int map_global_dns_servers(sd_bus *bus, const char *member, sd_bus_message *m, sd_bus_error *error, void *userdata) {
1542 char ***l = userdata;
1543 int r;
1544
1545 assert(bus);
1546 assert(member);
1547 assert(m);
1548 assert(l);
1549
1550 r = sd_bus_message_enter_container(m, 'a', "(iiay)");
1551 if (r < 0)
1552 return r;
1553
1554 for (;;) {
1555 char *pretty = NULL;
1556
1557 r = read_dns_server_one(m, true, &pretty);
1558 if (r < 0)
1559 return r;
1560 if (r == 0)
1561 break;
1562
1563 if (isempty(pretty))
1564 continue;
1565
1566 r = strv_consume(l, pretty);
1567 if (r < 0)
1568 return r;
1569 }
1570
1571 r = sd_bus_message_exit_container(m);
1572 if (r < 0)
1573 return r;
1574
1575 return 0;
1576 }
1577
1578 static int map_global_current_dns_server(sd_bus *bus, const char *member, sd_bus_message *m, sd_bus_error *error, void *userdata) {
1579 assert(m);
1580 assert(userdata);
1581
1582 return read_dns_server_one(m, true, userdata);
1583 }
1584
1585 static int map_global_domains(sd_bus *bus, const char *member, sd_bus_message *m, sd_bus_error *error, void *userdata) {
1586 char ***l = userdata;
1587 int r;
1588
1589 assert(bus);
1590 assert(member);
1591 assert(m);
1592 assert(l);
1593
1594 r = sd_bus_message_enter_container(m, 'a', "(isb)");
1595 if (r < 0)
1596 return r;
1597
1598 for (;;) {
1599 char *pretty = NULL;
1600
1601 r = read_domain_one(m, true, &pretty);
1602 if (r < 0)
1603 return r;
1604 if (r == 0)
1605 break;
1606
1607 if (isempty(pretty))
1608 continue;
1609
1610 r = strv_consume(l, pretty);
1611 if (r < 0)
1612 return r;
1613 }
1614
1615 r = sd_bus_message_exit_container(m);
1616 if (r < 0)
1617 return r;
1618
1619 return 0;
1620 }
1621
1622 static int status_print_strv_global(char **p) {
1623 char **i;
1624
1625 printf("%sGlobal%s:", ansi_highlight(), ansi_normal());
1626
1627 STRV_FOREACH(i, p)
1628 printf(" %s", *i);
1629
1630 printf("\n");
1631
1632 return 0;
1633 }
1634
1635 struct global_info {
1636 char *current_dns;
1637 char **dns;
1638 char **fallback_dns;
1639 char **domains;
1640 char **ntas;
1641 const char *llmnr;
1642 const char *mdns;
1643 const char *dns_over_tls;
1644 const char *dnssec;
1645 bool dnssec_supported;
1646 };
1647
1648 static void global_info_clear(struct global_info *p) {
1649 free(p->current_dns);
1650 strv_free(p->dns);
1651 strv_free(p->fallback_dns);
1652 strv_free(p->domains);
1653 strv_free(p->ntas);
1654 }
1655
1656 static int status_global(sd_bus *bus, StatusMode mode, bool *empty_line) {
1657 static const struct bus_properties_map property_map[] = {
1658 { "DNS", "a(iiay)", map_global_dns_servers, offsetof(struct global_info, dns) },
1659 { "FallbackDNS", "a(iiay)", map_global_dns_servers, offsetof(struct global_info, fallback_dns) },
1660 { "CurrentDNSServer", "(iiay)", map_global_current_dns_server, offsetof(struct global_info, current_dns) },
1661 { "Domains", "a(isb)", map_global_domains, offsetof(struct global_info, domains) },
1662 { "DNSSECNegativeTrustAnchors", "as", NULL, offsetof(struct global_info, ntas) },
1663 { "LLMNR", "s", NULL, offsetof(struct global_info, llmnr) },
1664 { "MulticastDNS", "s", NULL, offsetof(struct global_info, mdns) },
1665 { "DNSOverTLS", "s", NULL, offsetof(struct global_info, dns_over_tls) },
1666 { "DNSSEC", "s", NULL, offsetof(struct global_info, dnssec) },
1667 { "DNSSECSupported", "b", NULL, offsetof(struct global_info, dnssec_supported) },
1668 {}
1669 };
1670 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1671 _cleanup_(sd_bus_message_unrefp) sd_bus_message *m = NULL;
1672 _cleanup_(global_info_clear) struct global_info global_info = {};
1673 char **i;
1674 int r;
1675
1676 assert(bus);
1677 assert(empty_line);
1678
1679 r = bus_map_all_properties(bus,
1680 "org.freedesktop.resolve1",
1681 "/org/freedesktop/resolve1",
1682 property_map,
1683 BUS_MAP_BOOLEAN_AS_BOOL,
1684 &error,
1685 &m,
1686 &global_info);
1687 if (r < 0)
1688 return log_error_errno(r, "Failed to get global data: %s", bus_error_message(&error, r));
1689
1690 (void) pager_open(arg_pager_flags);
1691
1692 if (mode == STATUS_DNS)
1693 return status_print_strv_global(global_info.dns);
1694
1695 if (mode == STATUS_DOMAIN)
1696 return status_print_strv_global(global_info.domains);
1697
1698 if (mode == STATUS_NTA)
1699 return status_print_strv_global(global_info.ntas);
1700
1701 if (mode == STATUS_LLMNR) {
1702 printf("%sGlobal%s: %s\n", ansi_highlight(), ansi_normal(),
1703 strna(global_info.llmnr));
1704
1705 return 0;
1706 }
1707
1708 if (mode == STATUS_MDNS) {
1709 printf("%sGlobal%s: %s\n", ansi_highlight(), ansi_normal(),
1710 strna(global_info.mdns));
1711
1712 return 0;
1713 }
1714
1715 if (mode == STATUS_PRIVATE) {
1716 printf("%sGlobal%s: %s\n", ansi_highlight(), ansi_normal(),
1717 strna(global_info.dns_over_tls));
1718
1719 return 0;
1720 }
1721
1722 if (mode == STATUS_DNSSEC) {
1723 printf("%sGlobal%s: %s\n", ansi_highlight(), ansi_normal(),
1724 strna(global_info.dnssec));
1725
1726 return 0;
1727 }
1728
1729 printf("%sGlobal%s\n", ansi_highlight(), ansi_normal());
1730
1731 printf(" LLMNR setting: %s\n"
1732 "MulticastDNS setting: %s\n"
1733 " DNSOverTLS setting: %s\n"
1734 " DNSSEC setting: %s\n"
1735 " DNSSEC supported: %s\n",
1736 strna(global_info.llmnr),
1737 strna(global_info.mdns),
1738 strna(global_info.dns_over_tls),
1739 strna(global_info.dnssec),
1740 yes_no(global_info.dnssec_supported));
1741
1742 if (global_info.current_dns)
1743 printf(" Current DNS Server: %s\n", global_info.current_dns);
1744
1745 STRV_FOREACH(i, global_info.dns) {
1746 printf(" %s %s\n",
1747 i == global_info.dns ? "DNS Servers:" : " ",
1748 *i);
1749 }
1750
1751 STRV_FOREACH(i, global_info.fallback_dns) {
1752 printf("%s %s\n",
1753 i == global_info.fallback_dns ? "Fallback DNS Servers:" : " ",
1754 *i);
1755 }
1756
1757 STRV_FOREACH(i, global_info.domains) {
1758 printf(" %s %s\n",
1759 i == global_info.domains ? "DNS Domain:" : " ",
1760 *i);
1761 }
1762
1763 strv_sort(global_info.ntas);
1764 STRV_FOREACH(i, global_info.ntas) {
1765 printf(" %s %s\n",
1766 i == global_info.ntas ? "DNSSEC NTA:" : " ",
1767 *i);
1768 }
1769
1770 *empty_line = true;
1771
1772 return 0;
1773 }
1774
1775 static int status_all(sd_bus *bus, StatusMode mode) {
1776 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL, *reply = NULL;
1777 _cleanup_(sd_netlink_unrefp) sd_netlink *rtnl = NULL;
1778 sd_netlink_message *i;
1779 bool empty_line = false;
1780 int r;
1781
1782 assert(bus);
1783
1784 r = status_global(bus, mode, &empty_line);
1785 if (r < 0)
1786 return r;
1787
1788 r = sd_netlink_open(&rtnl);
1789 if (r < 0)
1790 return log_error_errno(r, "Failed to connect to netlink: %m");
1791
1792 r = sd_rtnl_message_new_link(rtnl, &req, RTM_GETLINK, 0);
1793 if (r < 0)
1794 return rtnl_log_create_error(r);
1795
1796 r = sd_netlink_message_request_dump(req, true);
1797 if (r < 0)
1798 return rtnl_log_create_error(r);
1799
1800 r = sd_netlink_call(rtnl, req, 0, &reply);
1801 if (r < 0)
1802 return log_error_errno(r, "Failed to enumerate links: %m");
1803
1804 r = 0;
1805 for (i = reply; i; i = sd_netlink_message_next(i)) {
1806 const char *name;
1807 int ifindex, q;
1808 uint16_t type;
1809
1810 q = sd_netlink_message_get_type(i, &type);
1811 if (q < 0)
1812 return rtnl_log_parse_error(q);
1813
1814 if (type != RTM_NEWLINK)
1815 continue;
1816
1817 q = sd_rtnl_message_link_get_ifindex(i, &ifindex);
1818 if (q < 0)
1819 return rtnl_log_parse_error(q);
1820
1821 if (ifindex == LOOPBACK_IFINDEX)
1822 continue;
1823
1824 q = sd_netlink_message_read_string(i, IFLA_IFNAME, &name);
1825 if (q < 0)
1826 return rtnl_log_parse_error(q);
1827
1828 q = status_ifindex(bus, ifindex, name, mode, &empty_line);
1829 if (q < 0 && r >= 0)
1830 r = q;
1831 }
1832
1833 return r;
1834 }
1835
1836 static int verb_status(int argc, char **argv, void *userdata) {
1837 sd_bus *bus = userdata;
1838 int q, r = 0;
1839
1840 if (argc > 1) {
1841 char **ifname;
1842 bool empty_line = false;
1843
1844 STRV_FOREACH(ifname, argv + 1) {
1845 int ifindex;
1846
1847 ifindex = parse_ifindex_and_warn(*ifname);
1848 if (ifindex < 0)
1849 continue;
1850
1851 q = status_ifindex(bus, ifindex, NULL, STATUS_ALL, &empty_line);
1852 if (q < 0)
1853 r = q;
1854 }
1855 } else
1856 r = status_all(bus, STATUS_ALL);
1857
1858 return r;
1859 }
1860
1861 static int log_interface_is_managed(int r, int ifindex) {
1862 char ifname[IFNAMSIZ];
1863
1864 return log_error_errno(r,
1865 "The specified interface %s is managed by systemd-networkd. Operation refused.\n"
1866 "Please configure DNS settings for systemd-networkd managed interfaces directly in their .network files.",
1867 strna(if_indextoname(ifindex, ifname)));
1868 }
1869
1870 static int verb_dns(int argc, char **argv, void *userdata) {
1871 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1872 _cleanup_(sd_bus_message_unrefp) sd_bus_message *req = NULL;
1873 sd_bus *bus = userdata;
1874 char **p;
1875 int r;
1876
1877 assert(bus);
1878
1879 if (argc >= 2) {
1880 r = ifname_mangle(argv[1]);
1881 if (r < 0)
1882 return r;
1883 }
1884
1885 if (arg_ifindex <= 0)
1886 return status_all(bus, STATUS_DNS);
1887
1888 if (argc < 3)
1889 return status_ifindex(bus, arg_ifindex, NULL, STATUS_DNS, NULL);
1890
1891 r = sd_bus_message_new_method_call(
1892 bus,
1893 &req,
1894 "org.freedesktop.resolve1",
1895 "/org/freedesktop/resolve1",
1896 "org.freedesktop.resolve1.Manager",
1897 "SetLinkDNS");
1898 if (r < 0)
1899 return bus_log_create_error(r);
1900
1901 r = sd_bus_message_append(req, "i", arg_ifindex);
1902 if (r < 0)
1903 return bus_log_create_error(r);
1904
1905 r = sd_bus_message_open_container(req, 'a', "(iay)");
1906 if (r < 0)
1907 return bus_log_create_error(r);
1908
1909 /* If only argument is the empty string, then call SetLinkDNS() with an
1910 * empty list, which will clear the list of domains for an interface. */
1911 if (!strv_equal(argv + 2, STRV_MAKE(""))) {
1912 STRV_FOREACH(p, argv + 2) {
1913 struct in_addr_data data;
1914
1915 r = in_addr_from_string_auto(*p, &data.family, &data.address);
1916 if (r < 0)
1917 return log_error_errno(r, "Failed to parse DNS server address: %s", *p);
1918
1919 r = sd_bus_message_open_container(req, 'r', "iay");
1920 if (r < 0)
1921 return bus_log_create_error(r);
1922
1923 r = sd_bus_message_append(req, "i", data.family);
1924 if (r < 0)
1925 return bus_log_create_error(r);
1926
1927 r = sd_bus_message_append_array(req, 'y', &data.address, FAMILY_ADDRESS_SIZE(data.family));
1928 if (r < 0)
1929 return bus_log_create_error(r);
1930
1931 r = sd_bus_message_close_container(req);
1932 if (r < 0)
1933 return bus_log_create_error(r);
1934 }
1935 }
1936
1937 r = sd_bus_message_close_container(req);
1938 if (r < 0)
1939 return bus_log_create_error(r);
1940
1941 r = sd_bus_call(bus, req, 0, &error, NULL);
1942 if (r < 0) {
1943 if (sd_bus_error_has_name(&error, BUS_ERROR_LINK_BUSY))
1944 return log_interface_is_managed(r, arg_ifindex);
1945
1946 if (arg_ifindex_permissive &&
1947 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
1948 return 0;
1949
1950 return log_error_errno(r, "Failed to set DNS configuration: %s", bus_error_message(&error, r));
1951 }
1952
1953 return 0;
1954 }
1955
1956 static int verb_domain(int argc, char **argv, void *userdata) {
1957 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1958 _cleanup_(sd_bus_message_unrefp) sd_bus_message *req = NULL;
1959 sd_bus *bus = userdata;
1960 char **p;
1961 int r;
1962
1963 assert(bus);
1964
1965 if (argc >= 2) {
1966 r = ifname_mangle(argv[1]);
1967 if (r < 0)
1968 return r;
1969 }
1970
1971 if (arg_ifindex <= 0)
1972 return status_all(bus, STATUS_DOMAIN);
1973
1974 if (argc < 3)
1975 return status_ifindex(bus, arg_ifindex, NULL, STATUS_DOMAIN, NULL);
1976
1977 r = sd_bus_message_new_method_call(
1978 bus,
1979 &req,
1980 "org.freedesktop.resolve1",
1981 "/org/freedesktop/resolve1",
1982 "org.freedesktop.resolve1.Manager",
1983 "SetLinkDomains");
1984 if (r < 0)
1985 return bus_log_create_error(r);
1986
1987 r = sd_bus_message_append(req, "i", arg_ifindex);
1988 if (r < 0)
1989 return bus_log_create_error(r);
1990
1991 r = sd_bus_message_open_container(req, 'a', "(sb)");
1992 if (r < 0)
1993 return bus_log_create_error(r);
1994
1995 /* If only argument is the empty string, then call SetLinkDomains() with an
1996 * empty list, which will clear the list of domains for an interface. */
1997 if (!strv_equal(argv + 2, STRV_MAKE(""))) {
1998 STRV_FOREACH(p, argv + 2) {
1999 const char *n;
2000
2001 n = **p == '~' ? *p + 1 : *p;
2002
2003 r = dns_name_is_valid(n);
2004 if (r < 0)
2005 return log_error_errno(r, "Failed to validate specified domain %s: %m", n);
2006 if (r == 0) {
2007 log_error("Domain not valid: %s", n);
2008 return -EINVAL;
2009 }
2010
2011 r = sd_bus_message_append(req, "(sb)", n, **p == '~');
2012 if (r < 0)
2013 return bus_log_create_error(r);
2014 }
2015 }
2016
2017 r = sd_bus_message_close_container(req);
2018 if (r < 0)
2019 return bus_log_create_error(r);
2020
2021 r = sd_bus_call(bus, req, 0, &error, NULL);
2022 if (r < 0) {
2023 if (sd_bus_error_has_name(&error, BUS_ERROR_LINK_BUSY))
2024 return log_interface_is_managed(r, arg_ifindex);
2025
2026 if (arg_ifindex_permissive &&
2027 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
2028 return 0;
2029
2030 return log_error_errno(r, "Failed to set domain configuration: %s", bus_error_message(&error, r));
2031 }
2032
2033 return 0;
2034 }
2035
2036 static int verb_default_route(int argc, char **argv, void *userdata) {
2037 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2038 sd_bus *bus = userdata;
2039 int r, b;
2040
2041 assert(bus);
2042
2043 if (argc >= 2) {
2044 r = ifname_mangle(argv[1]);
2045 if (r < 0)
2046 return r;
2047 }
2048
2049 if (arg_ifindex <= 0)
2050 return status_all(bus, STATUS_DEFAULT_ROUTE);
2051
2052 if (argc < 3)
2053 return status_ifindex(bus, arg_ifindex, NULL, STATUS_DEFAULT_ROUTE, NULL);
2054
2055 b = parse_boolean(argv[2]);
2056 if (b < 0)
2057 return log_error_errno(b, "Failed to parse boolean argument: %s", argv[2]);
2058
2059 r = sd_bus_call_method(bus,
2060 "org.freedesktop.resolve1",
2061 "/org/freedesktop/resolve1",
2062 "org.freedesktop.resolve1.Manager",
2063 "SetLinkDefaultRoute",
2064 &error,
2065 NULL,
2066 "ib", arg_ifindex, b);
2067 if (r < 0) {
2068 if (sd_bus_error_has_name(&error, BUS_ERROR_LINK_BUSY))
2069 return log_interface_is_managed(r, arg_ifindex);
2070
2071 if (arg_ifindex_permissive &&
2072 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
2073 return 0;
2074
2075 return log_error_errno(r, "Failed to set default route configuration: %s", bus_error_message(&error, r));
2076 }
2077
2078 return 0;
2079 }
2080
2081 static int verb_llmnr(int argc, char **argv, void *userdata) {
2082 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2083 sd_bus *bus = userdata;
2084 int r;
2085
2086 assert(bus);
2087
2088 if (argc >= 2) {
2089 r = ifname_mangle(argv[1]);
2090 if (r < 0)
2091 return r;
2092 }
2093
2094 if (arg_ifindex <= 0)
2095 return status_all(bus, STATUS_LLMNR);
2096
2097 if (argc < 3)
2098 return status_ifindex(bus, arg_ifindex, NULL, STATUS_LLMNR, NULL);
2099
2100 r = sd_bus_call_method(bus,
2101 "org.freedesktop.resolve1",
2102 "/org/freedesktop/resolve1",
2103 "org.freedesktop.resolve1.Manager",
2104 "SetLinkLLMNR",
2105 &error,
2106 NULL,
2107 "is", arg_ifindex, argv[2]);
2108 if (r < 0) {
2109 if (sd_bus_error_has_name(&error, BUS_ERROR_LINK_BUSY))
2110 return log_interface_is_managed(r, arg_ifindex);
2111
2112 if (arg_ifindex_permissive &&
2113 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
2114 return 0;
2115
2116 return log_error_errno(r, "Failed to set LLMNR configuration: %s", bus_error_message(&error, r));
2117 }
2118
2119 return 0;
2120 }
2121
2122 static int verb_mdns(int argc, char **argv, void *userdata) {
2123 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2124 sd_bus *bus = userdata;
2125 int r;
2126
2127 assert(bus);
2128
2129 if (argc >= 2) {
2130 r = ifname_mangle(argv[1]);
2131 if (r < 0)
2132 return r;
2133 }
2134
2135 if (arg_ifindex <= 0)
2136 return status_all(bus, STATUS_MDNS);
2137
2138 if (argc < 3)
2139 return status_ifindex(bus, arg_ifindex, NULL, STATUS_MDNS, NULL);
2140
2141 r = sd_bus_call_method(bus,
2142 "org.freedesktop.resolve1",
2143 "/org/freedesktop/resolve1",
2144 "org.freedesktop.resolve1.Manager",
2145 "SetLinkMulticastDNS",
2146 &error,
2147 NULL,
2148 "is", arg_ifindex, argv[2]);
2149 if (r < 0) {
2150 if (sd_bus_error_has_name(&error, BUS_ERROR_LINK_BUSY))
2151 return log_interface_is_managed(r, arg_ifindex);
2152
2153 if (arg_ifindex_permissive &&
2154 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
2155 return 0;
2156
2157 return log_error_errno(r, "Failed to set MulticastDNS configuration: %s", bus_error_message(&error, r));
2158 }
2159
2160 return 0;
2161 }
2162
2163 static int verb_dns_over_tls(int argc, char **argv, void *userdata) {
2164 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2165 sd_bus *bus = userdata;
2166 int r;
2167
2168 assert(bus);
2169
2170 if (argc >= 2) {
2171 r = ifname_mangle(argv[1]);
2172 if (r < 0)
2173 return r;
2174 }
2175
2176 if (arg_ifindex <= 0)
2177 return status_all(bus, STATUS_PRIVATE);
2178
2179 if (argc < 3)
2180 return status_ifindex(bus, arg_ifindex, NULL, STATUS_PRIVATE, NULL);
2181
2182 r = sd_bus_call_method(bus,
2183 "org.freedesktop.resolve1",
2184 "/org/freedesktop/resolve1",
2185 "org.freedesktop.resolve1.Manager",
2186 "SetLinkDNSOverTLS",
2187 &error,
2188 NULL,
2189 "is", arg_ifindex, argv[2]);
2190 if (r < 0) {
2191 if (sd_bus_error_has_name(&error, BUS_ERROR_LINK_BUSY))
2192 return log_interface_is_managed(r, arg_ifindex);
2193
2194 if (arg_ifindex_permissive &&
2195 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
2196 return 0;
2197
2198 return log_error_errno(r, "Failed to set DNSOverTLS configuration: %s", bus_error_message(&error, r));
2199 }
2200
2201 return 0;
2202 }
2203
2204 static int verb_dnssec(int argc, char **argv, void *userdata) {
2205 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2206 sd_bus *bus = userdata;
2207 int r;
2208
2209 assert(bus);
2210
2211 if (argc >= 2) {
2212 r = ifname_mangle(argv[1]);
2213 if (r < 0)
2214 return r;
2215 }
2216
2217 if (arg_ifindex <= 0)
2218 return status_all(bus, STATUS_DNSSEC);
2219
2220 if (argc < 3)
2221 return status_ifindex(bus, arg_ifindex, NULL, STATUS_DNSSEC, NULL);
2222
2223 r = sd_bus_call_method(bus,
2224 "org.freedesktop.resolve1",
2225 "/org/freedesktop/resolve1",
2226 "org.freedesktop.resolve1.Manager",
2227 "SetLinkDNSSEC",
2228 &error,
2229 NULL,
2230 "is", arg_ifindex, argv[2]);
2231 if (r < 0) {
2232 if (sd_bus_error_has_name(&error, BUS_ERROR_LINK_BUSY))
2233 return log_interface_is_managed(r, arg_ifindex);
2234
2235 if (arg_ifindex_permissive &&
2236 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
2237 return 0;
2238
2239 return log_error_errno(r, "Failed to set DNSSEC configuration: %s", bus_error_message(&error, r));
2240 }
2241
2242 return 0;
2243 }
2244
2245 static int verb_nta(int argc, char **argv, void *userdata) {
2246 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2247 _cleanup_(sd_bus_message_unrefp) sd_bus_message *req = NULL;
2248 sd_bus *bus = userdata;
2249 char **p;
2250 int r;
2251 bool clear;
2252
2253 assert(bus);
2254
2255 if (argc >= 2) {
2256 r = ifname_mangle(argv[1]);
2257 if (r < 0)
2258 return r;
2259 }
2260
2261 if (arg_ifindex <= 0)
2262 return status_all(bus, STATUS_NTA);
2263
2264 if (argc < 3)
2265 return status_ifindex(bus, arg_ifindex, NULL, STATUS_NTA, NULL);
2266
2267 /* If only argument is the empty string, then call SetLinkDNSSECNegativeTrustAnchors()
2268 * with an empty list, which will clear the list of domains for an interface. */
2269 clear = strv_equal(argv + 2, STRV_MAKE(""));
2270
2271 if (!clear)
2272 STRV_FOREACH(p, argv + 2) {
2273 r = dns_name_is_valid(*p);
2274 if (r < 0)
2275 return log_error_errno(r, "Failed to validate specified domain %s: %m", *p);
2276 if (r == 0) {
2277 log_error("Domain not valid: %s", *p);
2278 return -EINVAL;
2279 }
2280 }
2281
2282 r = sd_bus_message_new_method_call(
2283 bus,
2284 &req,
2285 "org.freedesktop.resolve1",
2286 "/org/freedesktop/resolve1",
2287 "org.freedesktop.resolve1.Manager",
2288 "SetLinkDNSSECNegativeTrustAnchors");
2289 if (r < 0)
2290 return bus_log_create_error(r);
2291
2292 r = sd_bus_message_append(req, "i", arg_ifindex);
2293 if (r < 0)
2294 return bus_log_create_error(r);
2295
2296 r = sd_bus_message_append_strv(req, clear ? NULL : argv + 2);
2297 if (r < 0)
2298 return bus_log_create_error(r);
2299
2300 r = sd_bus_call(bus, req, 0, &error, NULL);
2301 if (r < 0) {
2302 if (sd_bus_error_has_name(&error, BUS_ERROR_LINK_BUSY))
2303 return log_interface_is_managed(r, arg_ifindex);
2304
2305 if (arg_ifindex_permissive &&
2306 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
2307 return 0;
2308
2309 return log_error_errno(r, "Failed to set DNSSEC NTA configuration: %s", bus_error_message(&error, r));
2310 }
2311
2312 return 0;
2313 }
2314
2315 static int verb_revert_link(int argc, char **argv, void *userdata) {
2316 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2317 sd_bus *bus = userdata;
2318 int r;
2319
2320 assert(bus);
2321
2322 if (argc >= 2) {
2323 r = ifname_mangle(argv[1]);
2324 if (r < 0)
2325 return r;
2326 }
2327
2328 if (arg_ifindex <= 0)
2329 return log_error_errno(SYNTHETIC_ERRNO(EINVAL), "Interface argument required.");
2330
2331 r = sd_bus_call_method(bus,
2332 "org.freedesktop.resolve1",
2333 "/org/freedesktop/resolve1",
2334 "org.freedesktop.resolve1.Manager",
2335 "RevertLink",
2336 &error,
2337 NULL,
2338 "i", arg_ifindex);
2339 if (r < 0) {
2340 if (arg_ifindex_permissive &&
2341 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
2342 return 0;
2343
2344 return log_error_errno(r, "Failed to revert interface configuration: %s", bus_error_message(&error, r));
2345 }
2346
2347 return 0;
2348 }
2349
2350 static void help_protocol_types(void) {
2351 if (arg_legend)
2352 puts("Known protocol types:");
2353 puts("dns\nllmnr\nllmnr-ipv4\nllmnr-ipv6\nmdns\nmdns-ipv4\nmdns-ipv6");
2354 }
2355
2356 static void help_dns_types(void) {
2357 if (arg_legend)
2358 puts("Known DNS RR types:");
2359
2360 DUMP_STRING_TABLE(dns_type, int, _DNS_TYPE_MAX);
2361 }
2362
2363 static void help_dns_classes(void) {
2364 if (arg_legend)
2365 puts("Known DNS RR classes:");
2366
2367 DUMP_STRING_TABLE(dns_class, int, _DNS_CLASS_MAX);
2368 }
2369
2370 static int compat_help(void) {
2371 _cleanup_free_ char *link = NULL;
2372 int r;
2373
2374 r = terminal_urlify_man("resolvectl", "1", &link);
2375 if (r < 0)
2376 return log_oom();
2377
2378 printf("%1$s [OPTIONS...] HOSTNAME|ADDRESS...\n"
2379 "%1$s [OPTIONS...] --service [[NAME] TYPE] DOMAIN\n"
2380 "%1$s [OPTIONS...] --openpgp EMAIL@DOMAIN...\n"
2381 "%1$s [OPTIONS...] --statistics\n"
2382 "%1$s [OPTIONS...] --reset-statistics\n"
2383 "\n"
2384 "Resolve domain names, IPv4 and IPv6 addresses, DNS records, and services.\n\n"
2385 " -h --help Show this help\n"
2386 " --version Show package version\n"
2387 " --no-pager Do not pipe output into a pager\n"
2388 " -4 Resolve IPv4 addresses\n"
2389 " -6 Resolve IPv6 addresses\n"
2390 " -i --interface=INTERFACE Look on interface\n"
2391 " -p --protocol=PROTO|help Look via protocol\n"
2392 " -t --type=TYPE|help Query RR with DNS type\n"
2393 " -c --class=CLASS|help Query RR with DNS class\n"
2394 " --service Resolve service (SRV)\n"
2395 " --service-address=BOOL Resolve address for services (default: yes)\n"
2396 " --service-txt=BOOL Resolve TXT records for services (default: yes)\n"
2397 " --openpgp Query OpenPGP public key\n"
2398 " --tlsa Query TLS public key\n"
2399 " --cname=BOOL Follow CNAME redirects (default: yes)\n"
2400 " --search=BOOL Use search domains for single-label names\n"
2401 " (default: yes)\n"
2402 " --raw[=payload|packet] Dump the answer as binary data\n"
2403 " --legend=BOOL Print headers and additional info (default: yes)\n"
2404 " --statistics Show resolver statistics\n"
2405 " --reset-statistics Reset resolver statistics\n"
2406 " --status Show link and server status\n"
2407 " --flush-caches Flush all local DNS caches\n"
2408 " --reset-server-features\n"
2409 " Forget learnt DNS server feature levels\n"
2410 " --set-dns=SERVER Set per-interface DNS server address\n"
2411 " --set-domain=DOMAIN Set per-interface search domain\n"
2412 " --set-llmnr=MODE Set per-interface LLMNR mode\n"
2413 " --set-mdns=MODE Set per-interface MulticastDNS mode\n"
2414 " --set-dnsovertls=MODE Set per-interface DNS-over-TLS mode\n"
2415 " --set-dnssec=MODE Set per-interface DNSSEC mode\n"
2416 " --set-nta=DOMAIN Set per-interface DNSSEC NTA\n"
2417 " --revert Revert per-interface configuration\n"
2418 "\nSee the %2$s for details.\n"
2419 , program_invocation_short_name
2420 , link
2421 );
2422
2423 return 0;
2424 }
2425
2426 static int native_help(void) {
2427 _cleanup_free_ char *link = NULL;
2428 int r;
2429
2430 r = terminal_urlify_man("resolvectl", "1", &link);
2431 if (r < 0)
2432 return log_oom();
2433
2434 printf("%1$s [OPTIONS...] {COMMAND} ...\n"
2435 "\n"
2436 "Send control commands to the network name resolution manager, or\n"
2437 "resolve domain names, IPv4 and IPv6 addresses, DNS records, and services.\n"
2438 "\n"
2439 " -h --help Show this help\n"
2440 " --version Show package version\n"
2441 " --no-pager Do not pipe output into a pager\n"
2442 " -4 Resolve IPv4 addresses\n"
2443 " -6 Resolve IPv6 addresses\n"
2444 " -i --interface=INTERFACE Look on interface\n"
2445 " -p --protocol=PROTO|help Look via protocol\n"
2446 " -t --type=TYPE|help Query RR with DNS type\n"
2447 " -c --class=CLASS|help Query RR with DNS class\n"
2448 " --service-address=BOOL Resolve address for services (default: yes)\n"
2449 " --service-txt=BOOL Resolve TXT records for services (default: yes)\n"
2450 " --cname=BOOL Follow CNAME redirects (default: yes)\n"
2451 " --search=BOOL Use search domains for single-label names\n"
2452 " (default: yes)\n"
2453 " --raw[=payload|packet] Dump the answer as binary data\n"
2454 " --legend=BOOL Print headers and additional info (default: yes)\n"
2455 "\n"
2456 "Commands:\n"
2457 " query HOSTNAME|ADDRESS... Resolve domain names, IPv4 and IPv6 addresses\n"
2458 " service [[NAME] TYPE] DOMAIN Resolve service (SRV)\n"
2459 " openpgp EMAIL@DOMAIN... Query OpenPGP public key\n"
2460 " tlsa DOMAIN[:PORT]... Query TLS public key\n"
2461 " status [LINK...] Show link and server status\n"
2462 " statistics Show resolver statistics\n"
2463 " reset-statistics Reset resolver statistics\n"
2464 " flush-caches Flush all local DNS caches\n"
2465 " reset-server-features Forget learnt DNS server feature levels\n"
2466 " dns [LINK [SERVER...]] Get/set per-interface DNS server address\n"
2467 " domain [LINK [DOMAIN...]] Get/set per-interface search domain\n"
2468 " default-route [LINK [BOOL]] Get/set per-interface default route flag\n"
2469 " llmnr [LINK [MODE]] Get/set per-interface LLMNR mode\n"
2470 " mdns [LINK [MODE]] Get/set per-interface MulticastDNS mode\n"
2471 " dnsovertls [LINK [MODE]] Get/set per-interface DNS-over-TLS mode\n"
2472 " dnssec [LINK [MODE]] Get/set per-interface DNSSEC mode\n"
2473 " nta [LINK [DOMAIN...]] Get/set per-interface DNSSEC NTA\n"
2474 " revert LINK Revert per-interface configuration\n"
2475 "\nSee the %2$s for details.\n"
2476 , program_invocation_short_name
2477 , link
2478 );
2479
2480 return 0;
2481 }
2482
2483 static int verb_help(int argc, char **argv, void *userdata) {
2484 return native_help();
2485 }
2486
2487 static int compat_parse_argv(int argc, char *argv[]) {
2488 enum {
2489 ARG_VERSION = 0x100,
2490 ARG_LEGEND,
2491 ARG_SERVICE,
2492 ARG_CNAME,
2493 ARG_SERVICE_ADDRESS,
2494 ARG_SERVICE_TXT,
2495 ARG_OPENPGP,
2496 ARG_TLSA,
2497 ARG_RAW,
2498 ARG_SEARCH,
2499 ARG_STATISTICS,
2500 ARG_RESET_STATISTICS,
2501 ARG_STATUS,
2502 ARG_FLUSH_CACHES,
2503 ARG_RESET_SERVER_FEATURES,
2504 ARG_NO_PAGER,
2505 ARG_SET_DNS,
2506 ARG_SET_DOMAIN,
2507 ARG_SET_LLMNR,
2508 ARG_SET_MDNS,
2509 ARG_SET_PRIVATE,
2510 ARG_SET_DNSSEC,
2511 ARG_SET_NTA,
2512 ARG_REVERT_LINK,
2513 };
2514
2515 static const struct option options[] = {
2516 { "help", no_argument, NULL, 'h' },
2517 { "version", no_argument, NULL, ARG_VERSION },
2518 { "type", required_argument, NULL, 't' },
2519 { "class", required_argument, NULL, 'c' },
2520 { "legend", required_argument, NULL, ARG_LEGEND },
2521 { "interface", required_argument, NULL, 'i' },
2522 { "protocol", required_argument, NULL, 'p' },
2523 { "cname", required_argument, NULL, ARG_CNAME },
2524 { "service", no_argument, NULL, ARG_SERVICE },
2525 { "service-address", required_argument, NULL, ARG_SERVICE_ADDRESS },
2526 { "service-txt", required_argument, NULL, ARG_SERVICE_TXT },
2527 { "openpgp", no_argument, NULL, ARG_OPENPGP },
2528 { "tlsa", optional_argument, NULL, ARG_TLSA },
2529 { "raw", optional_argument, NULL, ARG_RAW },
2530 { "search", required_argument, NULL, ARG_SEARCH },
2531 { "statistics", no_argument, NULL, ARG_STATISTICS, },
2532 { "reset-statistics", no_argument, NULL, ARG_RESET_STATISTICS },
2533 { "status", no_argument, NULL, ARG_STATUS },
2534 { "flush-caches", no_argument, NULL, ARG_FLUSH_CACHES },
2535 { "reset-server-features", no_argument, NULL, ARG_RESET_SERVER_FEATURES },
2536 { "no-pager", no_argument, NULL, ARG_NO_PAGER },
2537 { "set-dns", required_argument, NULL, ARG_SET_DNS },
2538 { "set-domain", required_argument, NULL, ARG_SET_DOMAIN },
2539 { "set-llmnr", required_argument, NULL, ARG_SET_LLMNR },
2540 { "set-mdns", required_argument, NULL, ARG_SET_MDNS },
2541 { "set-dnsovertls", required_argument, NULL, ARG_SET_PRIVATE },
2542 { "set-dnssec", required_argument, NULL, ARG_SET_DNSSEC },
2543 { "set-nta", required_argument, NULL, ARG_SET_NTA },
2544 { "revert", no_argument, NULL, ARG_REVERT_LINK },
2545 {}
2546 };
2547
2548 int c, r;
2549
2550 assert(argc >= 0);
2551 assert(argv);
2552
2553 while ((c = getopt_long(argc, argv, "h46i:t:c:p:", options, NULL)) >= 0)
2554 switch(c) {
2555
2556 case 'h':
2557 return compat_help();
2558
2559 case ARG_VERSION:
2560 return version();
2561
2562 case '4':
2563 arg_family = AF_INET;
2564 break;
2565
2566 case '6':
2567 arg_family = AF_INET6;
2568 break;
2569
2570 case 'i':
2571 r = ifname_mangle(optarg);
2572 if (r < 0)
2573 return r;
2574 break;
2575
2576 case 't':
2577 if (streq(optarg, "help")) {
2578 help_dns_types();
2579 return 0;
2580 }
2581
2582 r = dns_type_from_string(optarg);
2583 if (r < 0) {
2584 log_error("Failed to parse RR record type %s", optarg);
2585 return r;
2586 }
2587 arg_type = (uint16_t) r;
2588 assert((int) arg_type == r);
2589
2590 arg_mode = MODE_RESOLVE_RECORD;
2591 break;
2592
2593 case 'c':
2594 if (streq(optarg, "help")) {
2595 help_dns_classes();
2596 return 0;
2597 }
2598
2599 r = dns_class_from_string(optarg);
2600 if (r < 0) {
2601 log_error("Failed to parse RR record class %s", optarg);
2602 return r;
2603 }
2604 arg_class = (uint16_t) r;
2605 assert((int) arg_class == r);
2606
2607 break;
2608
2609 case ARG_LEGEND:
2610 r = parse_boolean(optarg);
2611 if (r < 0)
2612 return log_error_errno(r, "Failed to parse --legend= argument");
2613
2614 arg_legend = r;
2615 break;
2616
2617 case 'p':
2618 if (streq(optarg, "help")) {
2619 help_protocol_types();
2620 return 0;
2621 } else if (streq(optarg, "dns"))
2622 arg_flags |= SD_RESOLVED_DNS;
2623 else if (streq(optarg, "llmnr"))
2624 arg_flags |= SD_RESOLVED_LLMNR;
2625 else if (streq(optarg, "llmnr-ipv4"))
2626 arg_flags |= SD_RESOLVED_LLMNR_IPV4;
2627 else if (streq(optarg, "llmnr-ipv6"))
2628 arg_flags |= SD_RESOLVED_LLMNR_IPV6;
2629 else if (streq(optarg, "mdns"))
2630 arg_flags |= SD_RESOLVED_MDNS;
2631 else if (streq(optarg, "mdns-ipv4"))
2632 arg_flags |= SD_RESOLVED_MDNS_IPV4;
2633 else if (streq(optarg, "mdns-ipv6"))
2634 arg_flags |= SD_RESOLVED_MDNS_IPV6;
2635 else
2636 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
2637 "Unknown protocol specifier: %s", optarg);
2638
2639 break;
2640
2641 case ARG_SERVICE:
2642 arg_mode = MODE_RESOLVE_SERVICE;
2643 break;
2644
2645 case ARG_OPENPGP:
2646 arg_mode = MODE_RESOLVE_OPENPGP;
2647 break;
2648
2649 case ARG_TLSA:
2650 arg_mode = MODE_RESOLVE_TLSA;
2651 if (!optarg || service_family_is_valid(optarg))
2652 arg_service_family = optarg;
2653 else
2654 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
2655 "Unknown service family \"%s\".", optarg);
2656 break;
2657
2658 case ARG_RAW:
2659 if (on_tty())
2660 return log_error_errno(SYNTHETIC_ERRNO(ENOTTY),
2661 "Refusing to write binary data to tty.");
2662
2663 if (optarg == NULL || streq(optarg, "payload"))
2664 arg_raw = RAW_PAYLOAD;
2665 else if (streq(optarg, "packet"))
2666 arg_raw = RAW_PACKET;
2667 else
2668 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
2669 "Unknown --raw specifier \"%s\".",
2670 optarg);
2671
2672 arg_legend = false;
2673 break;
2674
2675 case ARG_CNAME:
2676 r = parse_boolean(optarg);
2677 if (r < 0)
2678 return log_error_errno(r, "Failed to parse --cname= argument.");
2679 SET_FLAG(arg_flags, SD_RESOLVED_NO_CNAME, r == 0);
2680 break;
2681
2682 case ARG_SERVICE_ADDRESS:
2683 r = parse_boolean(optarg);
2684 if (r < 0)
2685 return log_error_errno(r, "Failed to parse --service-address= argument.");
2686 SET_FLAG(arg_flags, SD_RESOLVED_NO_ADDRESS, r == 0);
2687 break;
2688
2689 case ARG_SERVICE_TXT:
2690 r = parse_boolean(optarg);
2691 if (r < 0)
2692 return log_error_errno(r, "Failed to parse --service-txt= argument.");
2693 SET_FLAG(arg_flags, SD_RESOLVED_NO_TXT, r == 0);
2694 break;
2695
2696 case ARG_SEARCH:
2697 r = parse_boolean(optarg);
2698 if (r < 0)
2699 return log_error_errno(r, "Failed to parse --search argument.");
2700 SET_FLAG(arg_flags, SD_RESOLVED_NO_SEARCH, r == 0);
2701 break;
2702
2703 case ARG_STATISTICS:
2704 arg_mode = MODE_STATISTICS;
2705 break;
2706
2707 case ARG_RESET_STATISTICS:
2708 arg_mode = MODE_RESET_STATISTICS;
2709 break;
2710
2711 case ARG_FLUSH_CACHES:
2712 arg_mode = MODE_FLUSH_CACHES;
2713 break;
2714
2715 case ARG_RESET_SERVER_FEATURES:
2716 arg_mode = MODE_RESET_SERVER_FEATURES;
2717 break;
2718
2719 case ARG_STATUS:
2720 arg_mode = MODE_STATUS;
2721 break;
2722
2723 case ARG_NO_PAGER:
2724 arg_pager_flags |= PAGER_DISABLE;
2725 break;
2726
2727 case ARG_SET_DNS:
2728 r = strv_extend(&arg_set_dns, optarg);
2729 if (r < 0)
2730 return log_oom();
2731
2732 arg_mode = MODE_SET_LINK;
2733 break;
2734
2735 case ARG_SET_DOMAIN:
2736 r = strv_extend(&arg_set_domain, optarg);
2737 if (r < 0)
2738 return log_oom();
2739
2740 arg_mode = MODE_SET_LINK;
2741 break;
2742
2743 case ARG_SET_LLMNR:
2744 arg_set_llmnr = optarg;
2745 arg_mode = MODE_SET_LINK;
2746 break;
2747
2748 case ARG_SET_MDNS:
2749 arg_set_mdns = optarg;
2750 arg_mode = MODE_SET_LINK;
2751 break;
2752
2753 case ARG_SET_PRIVATE:
2754 arg_set_dns_over_tls = optarg;
2755 arg_mode = MODE_SET_LINK;
2756 break;
2757
2758 case ARG_SET_DNSSEC:
2759 arg_set_dnssec = optarg;
2760 arg_mode = MODE_SET_LINK;
2761 break;
2762
2763 case ARG_SET_NTA:
2764 r = strv_extend(&arg_set_nta, optarg);
2765 if (r < 0)
2766 return log_oom();
2767
2768 arg_mode = MODE_SET_LINK;
2769 break;
2770
2771 case ARG_REVERT_LINK:
2772 arg_mode = MODE_REVERT_LINK;
2773 break;
2774
2775 case '?':
2776 return -EINVAL;
2777
2778 default:
2779 assert_not_reached("Unhandled option");
2780 }
2781
2782 if (arg_type == 0 && arg_class != 0)
2783 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
2784 "--class= may only be used in conjunction with --type=.");
2785
2786 if (arg_type != 0 && arg_mode == MODE_RESOLVE_SERVICE)
2787 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
2788 "--service and --type= may not be combined.");
2789
2790 if (arg_type != 0 && arg_class == 0)
2791 arg_class = DNS_CLASS_IN;
2792
2793 if (arg_class != 0 && arg_type == 0)
2794 arg_type = DNS_TYPE_A;
2795
2796 if (IN_SET(arg_mode, MODE_SET_LINK, MODE_REVERT_LINK)) {
2797
2798 if (arg_ifindex <= 0)
2799 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
2800 "--set-dns=, --set-domain=, --set-llmnr=, --set-mdns=, --set-dnsovertls=, --set-dnssec=, --set-nta= and --revert require --interface=.");
2801 }
2802
2803 return 1 /* work to do */;
2804 }
2805
2806 static int native_parse_argv(int argc, char *argv[]) {
2807 enum {
2808 ARG_VERSION = 0x100,
2809 ARG_LEGEND,
2810 ARG_CNAME,
2811 ARG_SERVICE_ADDRESS,
2812 ARG_SERVICE_TXT,
2813 ARG_RAW,
2814 ARG_SEARCH,
2815 ARG_NO_PAGER,
2816 };
2817
2818 static const struct option options[] = {
2819 { "help", no_argument, NULL, 'h' },
2820 { "version", no_argument, NULL, ARG_VERSION },
2821 { "type", required_argument, NULL, 't' },
2822 { "class", required_argument, NULL, 'c' },
2823 { "legend", required_argument, NULL, ARG_LEGEND },
2824 { "interface", required_argument, NULL, 'i' },
2825 { "protocol", required_argument, NULL, 'p' },
2826 { "cname", required_argument, NULL, ARG_CNAME },
2827 { "service-address", required_argument, NULL, ARG_SERVICE_ADDRESS },
2828 { "service-txt", required_argument, NULL, ARG_SERVICE_TXT },
2829 { "raw", optional_argument, NULL, ARG_RAW },
2830 { "search", required_argument, NULL, ARG_SEARCH },
2831 { "no-pager", no_argument, NULL, ARG_NO_PAGER },
2832 {}
2833 };
2834
2835 int c, r;
2836
2837 assert(argc >= 0);
2838 assert(argv);
2839
2840 while ((c = getopt_long(argc, argv, "h46i:t:c:p:", options, NULL)) >= 0)
2841 switch(c) {
2842
2843 case 'h':
2844 return native_help();
2845
2846 case ARG_VERSION:
2847 return version();
2848
2849 case '4':
2850 arg_family = AF_INET;
2851 break;
2852
2853 case '6':
2854 arg_family = AF_INET6;
2855 break;
2856
2857 case 'i':
2858 r = ifname_mangle(optarg);
2859 if (r < 0)
2860 return r;
2861 break;
2862
2863 case 't':
2864 if (streq(optarg, "help")) {
2865 help_dns_types();
2866 return 0;
2867 }
2868
2869 r = dns_type_from_string(optarg);
2870 if (r < 0) {
2871 log_error("Failed to parse RR record type %s", optarg);
2872 return r;
2873 }
2874 arg_type = (uint16_t) r;
2875 assert((int) arg_type == r);
2876
2877 break;
2878
2879 case 'c':
2880 if (streq(optarg, "help")) {
2881 help_dns_classes();
2882 return 0;
2883 }
2884
2885 r = dns_class_from_string(optarg);
2886 if (r < 0) {
2887 log_error("Failed to parse RR record class %s", optarg);
2888 return r;
2889 }
2890 arg_class = (uint16_t) r;
2891 assert((int) arg_class == r);
2892
2893 break;
2894
2895 case ARG_LEGEND:
2896 r = parse_boolean(optarg);
2897 if (r < 0)
2898 return log_error_errno(r, "Failed to parse --legend= argument");
2899
2900 arg_legend = r;
2901 break;
2902
2903 case 'p':
2904 if (streq(optarg, "help")) {
2905 help_protocol_types();
2906 return 0;
2907 } else if (streq(optarg, "dns"))
2908 arg_flags |= SD_RESOLVED_DNS;
2909 else if (streq(optarg, "llmnr"))
2910 arg_flags |= SD_RESOLVED_LLMNR;
2911 else if (streq(optarg, "llmnr-ipv4"))
2912 arg_flags |= SD_RESOLVED_LLMNR_IPV4;
2913 else if (streq(optarg, "llmnr-ipv6"))
2914 arg_flags |= SD_RESOLVED_LLMNR_IPV6;
2915 else if (streq(optarg, "mdns"))
2916 arg_flags |= SD_RESOLVED_MDNS;
2917 else if (streq(optarg, "mdns-ipv4"))
2918 arg_flags |= SD_RESOLVED_MDNS_IPV4;
2919 else if (streq(optarg, "mdns-ipv6"))
2920 arg_flags |= SD_RESOLVED_MDNS_IPV6;
2921 else
2922 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
2923 "Unknown protocol specifier: %s",
2924 optarg);
2925
2926 break;
2927
2928 case ARG_RAW:
2929 if (on_tty())
2930 return log_error_errno(SYNTHETIC_ERRNO(ENOTTY),
2931 "Refusing to write binary data to tty.");
2932
2933 if (optarg == NULL || streq(optarg, "payload"))
2934 arg_raw = RAW_PAYLOAD;
2935 else if (streq(optarg, "packet"))
2936 arg_raw = RAW_PACKET;
2937 else
2938 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
2939 "Unknown --raw specifier \"%s\".",
2940 optarg);
2941
2942 arg_legend = false;
2943 break;
2944
2945 case ARG_CNAME:
2946 r = parse_boolean(optarg);
2947 if (r < 0)
2948 return log_error_errno(r, "Failed to parse --cname= argument.");
2949 SET_FLAG(arg_flags, SD_RESOLVED_NO_CNAME, r == 0);
2950 break;
2951
2952 case ARG_SERVICE_ADDRESS:
2953 r = parse_boolean(optarg);
2954 if (r < 0)
2955 return log_error_errno(r, "Failed to parse --service-address= argument.");
2956 SET_FLAG(arg_flags, SD_RESOLVED_NO_ADDRESS, r == 0);
2957 break;
2958
2959 case ARG_SERVICE_TXT:
2960 r = parse_boolean(optarg);
2961 if (r < 0)
2962 return log_error_errno(r, "Failed to parse --service-txt= argument.");
2963 SET_FLAG(arg_flags, SD_RESOLVED_NO_TXT, r == 0);
2964 break;
2965
2966 case ARG_SEARCH:
2967 r = parse_boolean(optarg);
2968 if (r < 0)
2969 return log_error_errno(r, "Failed to parse --search argument.");
2970 SET_FLAG(arg_flags, SD_RESOLVED_NO_SEARCH, r == 0);
2971 break;
2972
2973 case ARG_NO_PAGER:
2974 arg_pager_flags |= PAGER_DISABLE;
2975 break;
2976
2977 case '?':
2978 return -EINVAL;
2979
2980 default:
2981 assert_not_reached("Unhandled option");
2982 }
2983
2984 if (arg_type == 0 && arg_class != 0)
2985 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
2986 "--class= may only be used in conjunction with --type=.");
2987
2988 if (arg_type != 0 && arg_class == 0)
2989 arg_class = DNS_CLASS_IN;
2990
2991 if (arg_class != 0 && arg_type == 0)
2992 arg_type = DNS_TYPE_A;
2993
2994 return 1 /* work to do */;
2995 }
2996
2997 static int native_main(int argc, char *argv[], sd_bus *bus) {
2998
2999 static const Verb verbs[] = {
3000 { "help", VERB_ANY, VERB_ANY, 0, verb_help },
3001 { "status", VERB_ANY, VERB_ANY, VERB_DEFAULT, verb_status },
3002 { "query", 2, VERB_ANY, 0, verb_query },
3003 { "service", 2, 4, 0, verb_service },
3004 { "openpgp", 2, VERB_ANY, 0, verb_openpgp },
3005 { "tlsa", 2, VERB_ANY, 0, verb_tlsa },
3006 { "statistics", VERB_ANY, 1, 0, show_statistics },
3007 { "reset-statistics", VERB_ANY, 1, 0, reset_statistics },
3008 { "flush-caches", VERB_ANY, 1, 0, flush_caches },
3009 { "reset-server-features", VERB_ANY, 1, 0, reset_server_features },
3010 { "dns", VERB_ANY, VERB_ANY, 0, verb_dns },
3011 { "domain", VERB_ANY, VERB_ANY, 0, verb_domain },
3012 { "default-route", VERB_ANY, 3, 0, verb_default_route },
3013 { "llmnr", VERB_ANY, 3, 0, verb_llmnr },
3014 { "mdns", VERB_ANY, 3, 0, verb_mdns },
3015 { "dnsovertls", VERB_ANY, 3, 0, verb_dns_over_tls },
3016 { "dnssec", VERB_ANY, 3, 0, verb_dnssec },
3017 { "nta", VERB_ANY, VERB_ANY, 0, verb_nta },
3018 { "revert", VERB_ANY, 2, 0, verb_revert_link },
3019 {}
3020 };
3021
3022 return dispatch_verb(argc, argv, verbs, bus);
3023 }
3024
3025 static int translate(const char *verb, const char *single_arg, size_t num_args, char **args, sd_bus *bus) {
3026 char **fake, **p;
3027 size_t num, i;
3028
3029 assert(verb);
3030 assert(num_args == 0 || args);
3031
3032 num = !!single_arg + num_args + 1;
3033
3034 p = fake = newa0(char *, num + 1);
3035 *p++ = (char *) verb;
3036 if (single_arg)
3037 *p++ = (char *) single_arg;
3038 for (i = 0; i < num_args; i++)
3039 *p++ = args[i];
3040
3041 optind = 0;
3042 return native_main((int) num, fake, bus);
3043 }
3044
3045 static int compat_main(int argc, char *argv[], sd_bus *bus) {
3046 int r = 0;
3047
3048 switch (arg_mode) {
3049 case MODE_RESOLVE_HOST:
3050 case MODE_RESOLVE_RECORD:
3051 return translate("query", NULL, argc - optind, argv + optind, bus);
3052
3053 case MODE_RESOLVE_SERVICE:
3054 return translate("service", NULL, argc - optind, argv + optind, bus);
3055
3056 case MODE_RESOLVE_OPENPGP:
3057 return translate("openpgp", NULL, argc - optind, argv + optind, bus);
3058
3059 case MODE_RESOLVE_TLSA:
3060 return translate("tlsa", arg_service_family, argc - optind, argv + optind, bus);
3061
3062 case MODE_STATISTICS:
3063 return translate("statistics", NULL, 0, NULL, bus);
3064
3065 case MODE_RESET_STATISTICS:
3066 return translate("reset-statistics", NULL, 0, NULL, bus);
3067
3068 case MODE_FLUSH_CACHES:
3069 return translate("flush-caches", NULL, 0, NULL, bus);
3070
3071 case MODE_RESET_SERVER_FEATURES:
3072 return translate("reset-server-features", NULL, 0, NULL, bus);
3073
3074 case MODE_STATUS:
3075 return translate("status", NULL, argc - optind, argv + optind, bus);
3076
3077 case MODE_SET_LINK:
3078 assert(arg_ifname);
3079
3080 if (arg_set_dns) {
3081 r = translate("dns", arg_ifname, strv_length(arg_set_dns), arg_set_dns, bus);
3082 if (r < 0)
3083 return r;
3084 }
3085
3086 if (arg_set_domain) {
3087 r = translate("domain", arg_ifname, strv_length(arg_set_domain), arg_set_domain, bus);
3088 if (r < 0)
3089 return r;
3090 }
3091
3092 if (arg_set_nta) {
3093 r = translate("nta", arg_ifname, strv_length(arg_set_nta), arg_set_nta, bus);
3094 if (r < 0)
3095 return r;
3096 }
3097
3098 if (arg_set_llmnr) {
3099 r = translate("llmnr", arg_ifname, 1, (char **) &arg_set_llmnr, bus);
3100 if (r < 0)
3101 return r;
3102 }
3103
3104 if (arg_set_mdns) {
3105 r = translate("mdns", arg_ifname, 1, (char **) &arg_set_mdns, bus);
3106 if (r < 0)
3107 return r;
3108 }
3109
3110 if (arg_set_dns_over_tls) {
3111 r = translate("dnsovertls", arg_ifname, 1, (char **) &arg_set_dns_over_tls, bus);
3112 if (r < 0)
3113 return r;
3114 }
3115
3116 if (arg_set_dnssec) {
3117 r = translate("dnssec", arg_ifname, 1, (char **) &arg_set_dnssec, bus);
3118 if (r < 0)
3119 return r;
3120 }
3121
3122 return r;
3123
3124 case MODE_REVERT_LINK:
3125 assert(arg_ifname);
3126
3127 return translate("revert", arg_ifname, 0, NULL, bus);
3128
3129 case _MODE_INVALID:
3130 assert_not_reached("invalid mode");
3131 }
3132
3133 return 0;
3134 }
3135
3136 static int run(int argc, char **argv) {
3137 _cleanup_(sd_bus_flush_close_unrefp) sd_bus *bus = NULL;
3138 int r;
3139
3140 setlocale(LC_ALL, "");
3141 log_parse_environment();
3142 log_open();
3143
3144 if (streq(program_invocation_short_name, "resolvconf"))
3145 r = resolvconf_parse_argv(argc, argv);
3146 else if (streq(program_invocation_short_name, "systemd-resolve"))
3147 r = compat_parse_argv(argc, argv);
3148 else
3149 r = native_parse_argv(argc, argv);
3150 if (r <= 0)
3151 return r;
3152
3153 r = sd_bus_open_system(&bus);
3154 if (r < 0)
3155 return log_error_errno(r, "sd_bus_open_system: %m");
3156
3157 if (STR_IN_SET(program_invocation_short_name, "systemd-resolve", "resolvconf"))
3158 return compat_main(argc, argv, bus);
3159
3160 return native_main(argc, argv, bus);
3161 }
3162
3163 DEFINE_MAIN_FUNCTION(run);
Unnamed repository; edit this file 'description' to name the repository.