]> git.ipfire.org Git - thirdparty/systemd.git/blob - src/resolve/resolvectl.c
projects / thirdparty / systemd.git / blob
? search:
summary | shortlog | log | commit | commitdiff | tree
blame | history | raw | HEAD
resolved: add missing error code check when initializing DNS-over-TLS
[thirdparty/systemd.git] / src / resolve / resolvectl.c
1 /* SPDX-License-Identifier: LGPL-2.1+ */
2
3 #include <getopt.h>
4 #include <locale.h>
5 #include <net/if.h>
6
7 #include "sd-bus.h"
8 #include "sd-netlink.h"
9
10 #include "af-list.h"
11 #include "alloc-util.h"
12 #include "bus-common-errors.h"
13 #include "bus-error.h"
14 #include "bus-util.h"
15 #include "dns-domain.h"
16 #include "escape.h"
17 #include "format-util.h"
18 #include "gcrypt-util.h"
19 #include "in-addr-util.h"
20 #include "main-func.h"
21 #include "missing_network.h"
22 #include "netlink-util.h"
23 #include "pager.h"
24 #include "parse-util.h"
25 #include "pretty-print.h"
26 #include "resolvconf-compat.h"
27 #include "resolvectl.h"
28 #include "resolved-def.h"
29 #include "resolved-dns-packet.h"
30 #include "string-table.h"
31 #include "strv.h"
32 #include "terminal-util.h"
33 #include "verbs.h"
34
35 static int arg_family = AF_UNSPEC;
36 static int arg_ifindex = 0;
37 static char *arg_ifname = NULL;
38 static uint16_t arg_type = 0;
39 static uint16_t arg_class = 0;
40 static bool arg_legend = true;
41 static uint64_t arg_flags = 0;
42 static PagerFlags arg_pager_flags = 0;
43 bool arg_ifindex_permissive = false; /* If true, don't generate an error if the specified interface index doesn't exist */
44 static const char *arg_service_family = NULL;
45
46 typedef enum RawType {
47 RAW_NONE,
48 RAW_PAYLOAD,
49 RAW_PACKET,
50 } RawType;
51 static RawType arg_raw = RAW_NONE;
52
53 ExecutionMode arg_mode = MODE_RESOLVE_HOST;
54
55 char **arg_set_dns = NULL;
56 char **arg_set_domain = NULL;
57 static const char *arg_set_llmnr = NULL;
58 static const char *arg_set_mdns = NULL;
59 static const char *arg_set_dns_over_tls = NULL;
60 static const char *arg_set_dnssec = NULL;
61 static char **arg_set_nta = NULL;
62
63 STATIC_DESTRUCTOR_REGISTER(arg_ifname, freep);
64 STATIC_DESTRUCTOR_REGISTER(arg_set_dns, strv_freep);
65 STATIC_DESTRUCTOR_REGISTER(arg_set_domain, strv_freep);
66 STATIC_DESTRUCTOR_REGISTER(arg_set_nta, strv_freep);
67
68 typedef enum StatusMode {
69 STATUS_ALL,
70 STATUS_DNS,
71 STATUS_DOMAIN,
72 STATUS_DEFAULT_ROUTE,
73 STATUS_LLMNR,
74 STATUS_MDNS,
75 STATUS_PRIVATE,
76 STATUS_DNSSEC,
77 STATUS_NTA,
78 } StatusMode;
79
80 int ifname_mangle(const char *s) {
81 _cleanup_free_ char *iface = NULL;
82 const char *dot;
83 int ifi, r;
84
85 assert(s);
86
87 dot = strchr(s, '.');
88 if (dot) {
89 log_debug("Ignoring protocol specifier '%s'.", dot + 1);
90 iface = strndup(s, dot - s);
91
92 } else
93 iface = strdup(s);
94 if (!iface)
95 return log_oom();
96
97 r = parse_ifindex_or_ifname(iface, &ifi);
98 if (r < 0) {
99 if (r == -ENODEV && arg_ifindex_permissive) {
100 log_debug("Interface '%s' not found, but -f specified, ignoring.", iface);
101 return 0; /* done */
102 }
103
104 return log_error_errno(r, "Unknown interface '%s': %m", iface);
105 }
106
107 if (arg_ifindex > 0 && arg_ifindex != ifi)
108 return log_error_errno(SYNTHETIC_ERRNO(EINVAL), "Specified multiple different interfaces. Refusing.");
109
110 arg_ifindex = ifi;
111 free_and_replace(arg_ifname, iface);
112
113 return 1;
114 }
115
116 static void print_source(uint64_t flags, usec_t rtt) {
117 char rtt_str[FORMAT_TIMESTAMP_MAX];
118
119 if (!arg_legend)
120 return;
121
122 if (flags == 0)
123 return;
124
125 printf("\n%s-- Information acquired via", ansi_grey());
126
127 if (flags != 0)
128 printf(" protocol%s%s%s%s%s",
129 flags & SD_RESOLVED_DNS ? " DNS" :"",
130 flags & SD_RESOLVED_LLMNR_IPV4 ? " LLMNR/IPv4" : "",
131 flags & SD_RESOLVED_LLMNR_IPV6 ? " LLMNR/IPv6" : "",
132 flags & SD_RESOLVED_MDNS_IPV4 ? " mDNS/IPv4" : "",
133 flags & SD_RESOLVED_MDNS_IPV6 ? " mDNS/IPv6" : "");
134
135 assert_se(format_timespan(rtt_str, sizeof(rtt_str), rtt, 100));
136
137 printf(" in %s.%s\n"
138 "%s-- Data is authenticated: %s%s\n",
139 rtt_str, ansi_normal(),
140 ansi_grey(), yes_no(flags & SD_RESOLVED_AUTHENTICATED), ansi_normal());
141 }
142
143 static void print_ifindex_comment(int printed_so_far, int ifindex) {
144 char ifname[IF_NAMESIZE + 1];
145
146 if (ifindex <= 0)
147 return;
148
149 if (!format_ifname(ifindex, ifname))
150 log_warning_errno(errno, "Failed to resolve interface name for index %i, ignoring: %m", ifindex);
151 else
152 printf("%*s%s-- link: %s%s",
153 60 > printed_so_far ? 60 - printed_so_far : 0, " ", /* Align comment to the 60th column */
154 ansi_grey(), ifname, ansi_normal());
155 }
156
157 static int resolve_host(sd_bus *bus, const char *name) {
158 _cleanup_(sd_bus_message_unrefp) sd_bus_message *req = NULL, *reply = NULL;
159 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
160 const char *canonical = NULL;
161 unsigned c = 0;
162 uint64_t flags;
163 usec_t ts;
164 int r;
165
166 assert(name);
167
168 log_debug("Resolving %s (family %s, interface %s).", name, af_to_name(arg_family) ?: "*", isempty(arg_ifname) ? "*" : arg_ifname);
169
170 r = sd_bus_message_new_method_call(
171 bus,
172 &req,
173 "org.freedesktop.resolve1",
174 "/org/freedesktop/resolve1",
175 "org.freedesktop.resolve1.Manager",
176 "ResolveHostname");
177 if (r < 0)
178 return bus_log_create_error(r);
179
180 r = sd_bus_message_append(req, "isit", arg_ifindex, name, arg_family, arg_flags);
181 if (r < 0)
182 return bus_log_create_error(r);
183
184 ts = now(CLOCK_MONOTONIC);
185
186 r = sd_bus_call(bus, req, SD_RESOLVED_QUERY_TIMEOUT_USEC, &error, &reply);
187 if (r < 0)
188 return log_error_errno(r, "%s: resolve call failed: %s", name, bus_error_message(&error, r));
189
190 ts = now(CLOCK_MONOTONIC) - ts;
191
192 r = sd_bus_message_enter_container(reply, 'a', "(iiay)");
193 if (r < 0)
194 return bus_log_parse_error(r);
195
196 while ((r = sd_bus_message_enter_container(reply, 'r', "iiay")) > 0) {
197 _cleanup_free_ char *pretty = NULL;
198 int ifindex, family, k;
199 const void *a;
200 size_t sz;
201
202 assert_cc(sizeof(int) == sizeof(int32_t));
203
204 r = sd_bus_message_read(reply, "ii", &ifindex, &family);
205 if (r < 0)
206 return bus_log_parse_error(r);
207
208 r = sd_bus_message_read_array(reply, 'y', &a, &sz);
209 if (r < 0)
210 return bus_log_parse_error(r);
211
212 r = sd_bus_message_exit_container(reply);
213 if (r < 0)
214 return bus_log_parse_error(r);
215
216 if (!IN_SET(family, AF_INET, AF_INET6)) {
217 log_debug("%s: skipping entry with family %d (%s)", name, family, af_to_name(family) ?: "unknown");
218 continue;
219 }
220
221 if (sz != FAMILY_ADDRESS_SIZE(family)) {
222 log_error("%s: systemd-resolved returned address of invalid size %zu for family %s", name, sz, af_to_name(family) ?: "unknown");
223 return -EINVAL;
224 }
225
226 r = in_addr_ifindex_to_string(family, a, ifindex, &pretty);
227 if (r < 0)
228 return log_error_errno(r, "Failed to print address for %s: %m", name);
229
230 k = printf("%*s%s %s%s%s",
231 (int) strlen(name), c == 0 ? name : "", c == 0 ? ":" : " ",
232 ansi_highlight(), pretty, ansi_normal());
233
234 print_ifindex_comment(k, ifindex);
235 fputc('\n', stdout);
236
237 c++;
238 }
239 if (r < 0)
240 return bus_log_parse_error(r);
241
242 r = sd_bus_message_exit_container(reply);
243 if (r < 0)
244 return bus_log_parse_error(r);
245
246 r = sd_bus_message_read(reply, "st", &canonical, &flags);
247 if (r < 0)
248 return bus_log_parse_error(r);
249
250 if (!streq(name, canonical))
251 printf("%*s%s (%s)\n",
252 (int) strlen(name), c == 0 ? name : "", c == 0 ? ":" : " ",
253 canonical);
254
255 if (c == 0) {
256 log_error("%s: no addresses found", name);
257 return -ESRCH;
258 }
259
260 print_source(flags, ts);
261
262 return 0;
263 }
264
265 static int resolve_address(sd_bus *bus, int family, const union in_addr_union *address, int ifindex) {
266 _cleanup_(sd_bus_message_unrefp) sd_bus_message *req = NULL, *reply = NULL;
267 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
268 _cleanup_free_ char *pretty = NULL;
269 uint64_t flags;
270 unsigned c = 0;
271 usec_t ts;
272 int r;
273
274 assert(bus);
275 assert(IN_SET(family, AF_INET, AF_INET6));
276 assert(address);
277
278 if (ifindex <= 0)
279 ifindex = arg_ifindex;
280
281 r = in_addr_ifindex_to_string(family, address, ifindex, &pretty);
282 if (r < 0)
283 return log_oom();
284
285 log_debug("Resolving %s.", pretty);
286
287 r = sd_bus_message_new_method_call(
288 bus,
289 &req,
290 "org.freedesktop.resolve1",
291 "/org/freedesktop/resolve1",
292 "org.freedesktop.resolve1.Manager",
293 "ResolveAddress");
294 if (r < 0)
295 return bus_log_create_error(r);
296
297 r = sd_bus_message_append(req, "ii", ifindex, family);
298 if (r < 0)
299 return bus_log_create_error(r);
300
301 r = sd_bus_message_append_array(req, 'y', address, FAMILY_ADDRESS_SIZE(family));
302 if (r < 0)
303 return bus_log_create_error(r);
304
305 r = sd_bus_message_append(req, "t", arg_flags);
306 if (r < 0)
307 return bus_log_create_error(r);
308
309 ts = now(CLOCK_MONOTONIC);
310
311 r = sd_bus_call(bus, req, SD_RESOLVED_QUERY_TIMEOUT_USEC, &error, &reply);
312 if (r < 0)
313 return log_error_errno(r, "%s: resolve call failed: %s", pretty, bus_error_message(&error, r));
314
315 ts = now(CLOCK_MONOTONIC) - ts;
316
317 r = sd_bus_message_enter_container(reply, 'a', "(is)");
318 if (r < 0)
319 return bus_log_create_error(r);
320
321 while ((r = sd_bus_message_enter_container(reply, 'r', "is")) > 0) {
322 const char *n;
323 int k;
324
325 assert_cc(sizeof(int) == sizeof(int32_t));
326
327 r = sd_bus_message_read(reply, "is", &ifindex, &n);
328 if (r < 0)
329 return r;
330
331 r = sd_bus_message_exit_container(reply);
332 if (r < 0)
333 return r;
334
335 k = printf("%*s%s %s%s%s",
336 (int) strlen(pretty), c == 0 ? pretty : "",
337 c == 0 ? ":" : " ",
338 ansi_highlight(), n, ansi_normal());
339
340 print_ifindex_comment(k, ifindex);
341 fputc('\n', stdout);
342
343 c++;
344 }
345 if (r < 0)
346 return bus_log_parse_error(r);
347
348 r = sd_bus_message_exit_container(reply);
349 if (r < 0)
350 return bus_log_parse_error(r);
351
352 r = sd_bus_message_read(reply, "t", &flags);
353 if (r < 0)
354 return bus_log_parse_error(r);
355
356 if (c == 0) {
357 log_error("%s: no names found", pretty);
358 return -ESRCH;
359 }
360
361 print_source(flags, ts);
362
363 return 0;
364 }
365
366 static int output_rr_packet(const void *d, size_t l, int ifindex) {
367 _cleanup_(dns_resource_record_unrefp) DnsResourceRecord *rr = NULL;
368 _cleanup_(dns_packet_unrefp) DnsPacket *p = NULL;
369 int r;
370
371 r = dns_packet_new(&p, DNS_PROTOCOL_DNS, 0, DNS_PACKET_SIZE_MAX);
372 if (r < 0)
373 return log_oom();
374
375 p->refuse_compression = true;
376
377 r = dns_packet_append_blob(p, d, l, NULL);
378 if (r < 0)
379 return log_oom();
380
381 r = dns_packet_read_rr(p, &rr, NULL, NULL);
382 if (r < 0)
383 return log_error_errno(r, "Failed to parse RR: %m");
384
385 if (arg_raw == RAW_PAYLOAD) {
386 void *data;
387 ssize_t k;
388
389 k = dns_resource_record_payload(rr, &data);
390 if (k < 0)
391 return log_error_errno(k, "Cannot dump RR: %m");
392 fwrite(data, 1, k, stdout);
393 } else {
394 const char *s;
395 int k;
396
397 s = dns_resource_record_to_string(rr);
398 if (!s)
399 return log_oom();
400
401 k = printf("%s", s);
402 print_ifindex_comment(k, ifindex);
403 fputc('\n', stdout);
404 }
405
406 return 0;
407 }
408
409 static int resolve_record(sd_bus *bus, const char *name, uint16_t class, uint16_t type, bool warn_missing) {
410 _cleanup_(sd_bus_message_unrefp) sd_bus_message *req = NULL, *reply = NULL;
411 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
412 unsigned n = 0;
413 uint64_t flags;
414 int r;
415 usec_t ts;
416 bool needs_authentication = false;
417
418 assert(name);
419
420 log_debug("Resolving %s %s %s (interface %s).", name, dns_class_to_string(class), dns_type_to_string(type), isempty(arg_ifname) ? "*" : arg_ifname);
421
422 r = sd_bus_message_new_method_call(
423 bus,
424 &req,
425 "org.freedesktop.resolve1",
426 "/org/freedesktop/resolve1",
427 "org.freedesktop.resolve1.Manager",
428 "ResolveRecord");
429 if (r < 0)
430 return bus_log_create_error(r);
431
432 r = sd_bus_message_append(req, "isqqt", arg_ifindex, name, class, type, arg_flags);
433 if (r < 0)
434 return bus_log_create_error(r);
435
436 ts = now(CLOCK_MONOTONIC);
437
438 r = sd_bus_call(bus, req, SD_RESOLVED_QUERY_TIMEOUT_USEC, &error, &reply);
439 if (r < 0) {
440 if (warn_missing || r != -ENXIO)
441 log_error("%s: resolve call failed: %s", name, bus_error_message(&error, r));
442 return r;
443 }
444
445 ts = now(CLOCK_MONOTONIC) - ts;
446
447 r = sd_bus_message_enter_container(reply, 'a', "(iqqay)");
448 if (r < 0)
449 return bus_log_parse_error(r);
450
451 while ((r = sd_bus_message_enter_container(reply, 'r', "iqqay")) > 0) {
452 uint16_t c, t;
453 int ifindex;
454 const void *d;
455 size_t l;
456
457 assert_cc(sizeof(int) == sizeof(int32_t));
458
459 r = sd_bus_message_read(reply, "iqq", &ifindex, &c, &t);
460 if (r < 0)
461 return bus_log_parse_error(r);
462
463 r = sd_bus_message_read_array(reply, 'y', &d, &l);
464 if (r < 0)
465 return bus_log_parse_error(r);
466
467 r = sd_bus_message_exit_container(reply);
468 if (r < 0)
469 return bus_log_parse_error(r);
470
471 if (arg_raw == RAW_PACKET) {
472 uint64_t u64 = htole64(l);
473
474 fwrite(&u64, sizeof(u64), 1, stdout);
475 fwrite(d, 1, l, stdout);
476 } else {
477 r = output_rr_packet(d, l, ifindex);
478 if (r < 0)
479 return r;
480 }
481
482 if (dns_type_needs_authentication(t))
483 needs_authentication = true;
484
485 n++;
486 }
487 if (r < 0)
488 return bus_log_parse_error(r);
489
490 r = sd_bus_message_exit_container(reply);
491 if (r < 0)
492 return bus_log_parse_error(r);
493
494 r = sd_bus_message_read(reply, "t", &flags);
495 if (r < 0)
496 return bus_log_parse_error(r);
497
498 if (n == 0) {
499 if (warn_missing)
500 log_error("%s: no records found", name);
501 return -ESRCH;
502 }
503
504 print_source(flags, ts);
505
506 if ((flags & SD_RESOLVED_AUTHENTICATED) == 0 && needs_authentication) {
507 fflush(stdout);
508
509 fprintf(stderr, "\n%s"
510 "WARNING: The resources shown contain cryptographic key data which could not be\n"
511 " authenticated. It is not suitable to authenticate any communication.\n"
512 " This is usually indication that DNSSEC authentication was not enabled\n"
513 " or is not available for the selected protocol or DNS servers.%s\n",
514 ansi_highlight_red(),
515 ansi_normal());
516 }
517
518 return 0;
519 }
520
521 static int resolve_rfc4501(sd_bus *bus, const char *name) {
522 uint16_t type = 0, class = 0;
523 const char *p, *q, *n;
524 int r;
525
526 assert(bus);
527 assert(name);
528 assert(startswith(name, "dns:"));
529
530 /* Parse RFC 4501 dns: URIs */
531
532 p = name + 4;
533
534 if (p[0] == '/') {
535 const char *e;
536
537 if (p[1] != '/')
538 goto invalid;
539
540 e = strchr(p + 2, '/');
541 if (!e)
542 goto invalid;
543
544 if (e != p + 2)
545 log_warning("DNS authority specification not supported; ignoring specified authority.");
546
547 p = e + 1;
548 }
549
550 q = strchr(p, '?');
551 if (q) {
552 n = strndupa(p, q - p);
553 q++;
554
555 for (;;) {
556 const char *f;
557
558 f = startswith_no_case(q, "class=");
559 if (f) {
560 _cleanup_free_ char *t = NULL;
561 const char *e;
562
563 if (class != 0)
564 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
565 "DNS class specified twice.");
566
567 e = strchrnul(f, ';');
568 t = strndup(f, e - f);
569 if (!t)
570 return log_oom();
571
572 r = dns_class_from_string(t);
573 if (r < 0)
574 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
575 "Unknown DNS class %s.", t);
576
577 class = r;
578
579 if (*e == ';') {
580 q = e + 1;
581 continue;
582 }
583
584 break;
585 }
586
587 f = startswith_no_case(q, "type=");
588 if (f) {
589 _cleanup_free_ char *t = NULL;
590 const char *e;
591
592 if (type != 0)
593 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
594 "DNS type specified twice.");
595
596 e = strchrnul(f, ';');
597 t = strndup(f, e - f);
598 if (!t)
599 return log_oom();
600
601 r = dns_type_from_string(t);
602 if (r < 0)
603 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
604 "Unknown DNS type %s.", t);
605
606 type = r;
607
608 if (*e == ';') {
609 q = e + 1;
610 continue;
611 }
612
613 break;
614 }
615
616 goto invalid;
617 }
618 } else
619 n = p;
620
621 if (class == 0)
622 class = arg_class ?: DNS_CLASS_IN;
623 if (type == 0)
624 type = arg_type ?: DNS_TYPE_A;
625
626 return resolve_record(bus, n, class, type, true);
627
628 invalid:
629 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
630 "Invalid DNS URI: %s", name);
631 }
632
633 static int verb_query(int argc, char **argv, void *userdata) {
634 sd_bus *bus = userdata;
635 char **p;
636 int q, r = 0;
637
638 if (arg_type != 0)
639 STRV_FOREACH(p, argv + 1) {
640 q = resolve_record(bus, *p, arg_class, arg_type, true);
641 if (q < 0)
642 r = q;
643 }
644
645 else
646 STRV_FOREACH(p, argv + 1) {
647 if (startswith(*p, "dns:"))
648 q = resolve_rfc4501(bus, *p);
649 else {
650 int family, ifindex;
651 union in_addr_union a;
652
653 q = in_addr_ifindex_from_string_auto(*p, &family, &a, &ifindex);
654 if (q >= 0)
655 q = resolve_address(bus, family, &a, ifindex);
656 else
657 q = resolve_host(bus, *p);
658 }
659 if (q < 0)
660 r = q;
661 }
662
663 return r;
664 }
665
666 static int resolve_service(sd_bus *bus, const char *name, const char *type, const char *domain) {
667 const char *canonical_name, *canonical_type, *canonical_domain;
668 _cleanup_(sd_bus_message_unrefp) sd_bus_message *req = NULL, *reply = NULL;
669 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
670 size_t indent, sz;
671 uint64_t flags;
672 const char *p;
673 unsigned c;
674 usec_t ts;
675 int r;
676
677 assert(bus);
678 assert(domain);
679
680 name = empty_to_null(name);
681 type = empty_to_null(type);
682
683 if (name)
684 log_debug("Resolving service \"%s\" of type %s in %s (family %s, interface %s).", name, type, domain, af_to_name(arg_family) ?: "*", isempty(arg_ifname) ? "*" : arg_ifname);
685 else if (type)
686 log_debug("Resolving service type %s of %s (family %s, interface %s).", type, domain, af_to_name(arg_family) ?: "*", isempty(arg_ifname) ? "*" : arg_ifname);
687 else
688 log_debug("Resolving service type %s (family %s, interface %s).", domain, af_to_name(arg_family) ?: "*", isempty(arg_ifname) ? "*" : arg_ifname);
689
690 r = sd_bus_message_new_method_call(
691 bus,
692 &req,
693 "org.freedesktop.resolve1",
694 "/org/freedesktop/resolve1",
695 "org.freedesktop.resolve1.Manager",
696 "ResolveService");
697 if (r < 0)
698 return bus_log_create_error(r);
699
700 r = sd_bus_message_append(req, "isssit", arg_ifindex, name, type, domain, arg_family, arg_flags);
701 if (r < 0)
702 return bus_log_create_error(r);
703
704 ts = now(CLOCK_MONOTONIC);
705
706 r = sd_bus_call(bus, req, SD_RESOLVED_QUERY_TIMEOUT_USEC, &error, &reply);
707 if (r < 0)
708 return log_error_errno(r, "Resolve call failed: %s", bus_error_message(&error, r));
709
710 ts = now(CLOCK_MONOTONIC) - ts;
711
712 r = sd_bus_message_enter_container(reply, 'a', "(qqqsa(iiay)s)");
713 if (r < 0)
714 return bus_log_parse_error(r);
715
716 indent =
717 (name ? strlen(name) + 1 : 0) +
718 (type ? strlen(type) + 1 : 0) +
719 strlen(domain) + 2;
720
721 c = 0;
722 while ((r = sd_bus_message_enter_container(reply, 'r', "qqqsa(iiay)s")) > 0) {
723 uint16_t priority, weight, port;
724 const char *hostname, *canonical;
725
726 r = sd_bus_message_read(reply, "qqqs", &priority, &weight, &port, &hostname);
727 if (r < 0)
728 return bus_log_parse_error(r);
729
730 if (name)
731 printf("%*s%s", (int) strlen(name), c == 0 ? name : "", c == 0 ? "/" : " ");
732 if (type)
733 printf("%*s%s", (int) strlen(type), c == 0 ? type : "", c == 0 ? "/" : " ");
734
735 printf("%*s%s %s:%u [priority=%u, weight=%u]\n",
736 (int) strlen(domain), c == 0 ? domain : "",
737 c == 0 ? ":" : " ",
738 hostname, port,
739 priority, weight);
740
741 r = sd_bus_message_enter_container(reply, 'a', "(iiay)");
742 if (r < 0)
743 return bus_log_parse_error(r);
744
745 while ((r = sd_bus_message_enter_container(reply, 'r', "iiay")) > 0) {
746 _cleanup_free_ char *pretty = NULL;
747 int ifindex, family, k;
748 const void *a;
749
750 assert_cc(sizeof(int) == sizeof(int32_t));
751
752 r = sd_bus_message_read(reply, "ii", &ifindex, &family);
753 if (r < 0)
754 return bus_log_parse_error(r);
755
756 r = sd_bus_message_read_array(reply, 'y', &a, &sz);
757 if (r < 0)
758 return bus_log_parse_error(r);
759
760 r = sd_bus_message_exit_container(reply);
761 if (r < 0)
762 return bus_log_parse_error(r);
763
764 if (!IN_SET(family, AF_INET, AF_INET6)) {
765 log_debug("%s: skipping entry with family %d (%s)", name, family, af_to_name(family) ?: "unknown");
766 continue;
767 }
768
769 if (sz != FAMILY_ADDRESS_SIZE(family)) {
770 log_error("%s: systemd-resolved returned address of invalid size %zu for family %s", name, sz, af_to_name(family) ?: "unknown");
771 return -EINVAL;
772 }
773
774 r = in_addr_ifindex_to_string(family, a, ifindex, &pretty);
775 if (r < 0)
776 return log_error_errno(r, "Failed to print address for %s: %m", name);
777
778 k = printf("%*s%s", (int) indent, "", pretty);
779 print_ifindex_comment(k, ifindex);
780 fputc('\n', stdout);
781 }
782 if (r < 0)
783 return bus_log_parse_error(r);
784
785 r = sd_bus_message_exit_container(reply);
786 if (r < 0)
787 return bus_log_parse_error(r);
788
789 r = sd_bus_message_read(reply, "s", &canonical);
790 if (r < 0)
791 return bus_log_parse_error(r);
792
793 if (!streq(hostname, canonical))
794 printf("%*s(%s)\n", (int) indent, "", canonical);
795
796 r = sd_bus_message_exit_container(reply);
797 if (r < 0)
798 return bus_log_parse_error(r);
799
800 c++;
801 }
802 if (r < 0)
803 return bus_log_parse_error(r);
804
805 r = sd_bus_message_exit_container(reply);
806 if (r < 0)
807 return bus_log_parse_error(r);
808
809 r = sd_bus_message_enter_container(reply, 'a', "ay");
810 if (r < 0)
811 return bus_log_parse_error(r);
812
813 while ((r = sd_bus_message_read_array(reply, 'y', (const void**) &p, &sz)) > 0) {
814 _cleanup_free_ char *escaped = NULL;
815
816 escaped = cescape_length(p, sz);
817 if (!escaped)
818 return log_oom();
819
820 printf("%*s%s\n", (int) indent, "", escaped);
821 }
822 if (r < 0)
823 return bus_log_parse_error(r);
824
825 r = sd_bus_message_exit_container(reply);
826 if (r < 0)
827 return bus_log_parse_error(r);
828
829 r = sd_bus_message_read(reply, "ssst", &canonical_name, &canonical_type, &canonical_domain, &flags);
830 if (r < 0)
831 return bus_log_parse_error(r);
832
833 canonical_name = empty_to_null(canonical_name);
834 canonical_type = empty_to_null(canonical_type);
835
836 if (!streq_ptr(name, canonical_name) ||
837 !streq_ptr(type, canonical_type) ||
838 !streq_ptr(domain, canonical_domain)) {
839
840 printf("%*s(", (int) indent, "");
841
842 if (canonical_name)
843 printf("%s/", canonical_name);
844 if (canonical_type)
845 printf("%s/", canonical_type);
846
847 printf("%s)\n", canonical_domain);
848 }
849
850 print_source(flags, ts);
851
852 return 0;
853 }
854
855 static int verb_service(int argc, char **argv, void *userdata) {
856 sd_bus *bus = userdata;
857
858 if (argc == 2)
859 return resolve_service(bus, NULL, NULL, argv[1]);
860 else if (argc == 3)
861 return resolve_service(bus, NULL, argv[1], argv[2]);
862 else
863 return resolve_service(bus, argv[1], argv[2], argv[3]);
864 }
865
866 static int resolve_openpgp(sd_bus *bus, const char *address) {
867 const char *domain, *full;
868 int r;
869 _cleanup_free_ char *hashed = NULL;
870
871 assert(bus);
872 assert(address);
873
874 domain = strrchr(address, '@');
875 if (!domain)
876 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
877 "Address does not contain '@': \"%s\"", address);
878 if (domain == address || domain[1] == '\0')
879 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
880 "Address starts or ends with '@': \"%s\"", address);
881 domain++;
882
883 r = string_hashsum_sha256(address, domain - 1 - address, &hashed);
884 if (r < 0)
885 return log_error_errno(r, "Hashing failed: %m");
886
887 strshorten(hashed, 56);
888
889 full = strjoina(hashed, "._openpgpkey.", domain);
890 log_debug("Looking up \"%s\".", full);
891
892 r = resolve_record(bus, full,
893 arg_class ?: DNS_CLASS_IN,
894 arg_type ?: DNS_TYPE_OPENPGPKEY, false);
895
896 if (IN_SET(r, -ENXIO, -ESRCH)) { /* NXDOMAIN or NODATA? */
897 hashed = mfree(hashed);
898 r = string_hashsum_sha224(address, domain - 1 - address, &hashed);
899 if (r < 0)
900 return log_error_errno(r, "Hashing failed: %m");
901
902 full = strjoina(hashed, "._openpgpkey.", domain);
903 log_debug("Looking up \"%s\".", full);
904
905 return resolve_record(bus, full,
906 arg_class ?: DNS_CLASS_IN,
907 arg_type ?: DNS_TYPE_OPENPGPKEY, true);
908 }
909
910 return r;
911 }
912
913 static int verb_openpgp(int argc, char **argv, void *userdata) {
914 sd_bus *bus = userdata;
915 char **p;
916 int q, r = 0;
917
918 STRV_FOREACH(p, argv + 1) {
919 q = resolve_openpgp(bus, *p);
920 if (q < 0)
921 r = q;
922 }
923
924 return r;
925 }
926
927 static int resolve_tlsa(sd_bus *bus, const char *family, const char *address) {
928 const char *port;
929 uint16_t port_num = 443;
930 _cleanup_free_ char *full = NULL;
931 int r;
932
933 assert(bus);
934 assert(address);
935
936 port = strrchr(address, ':');
937 if (port) {
938 r = parse_ip_port(port + 1, &port_num);
939 if (r < 0)
940 return log_error_errno(r, "Invalid port \"%s\".", port + 1);
941
942 address = strndupa(address, port - address);
943 }
944
945 r = asprintf(&full, "_%u._%s.%s",
946 port_num,
947 family,
948 address);
949 if (r < 0)
950 return log_oom();
951
952 log_debug("Looking up \"%s\".", full);
953
954 return resolve_record(bus, full,
955 arg_class ?: DNS_CLASS_IN,
956 arg_type ?: DNS_TYPE_TLSA, true);
957 }
958
959 static bool service_family_is_valid(const char *s) {
960 return STR_IN_SET(s, "tcp", "udp", "sctp");
961 }
962
963 static int verb_tlsa(int argc, char **argv, void *userdata) {
964 sd_bus *bus = userdata;
965 char **p, **args = argv + 1;
966 const char *family = "tcp";
967 int q, r = 0;
968
969 if (service_family_is_valid(argv[1])) {
970 family = argv[1];
971 args++;
972 }
973
974 STRV_FOREACH(p, args) {
975 q = resolve_tlsa(bus, family, *p);
976 if (q < 0)
977 r = q;
978 }
979
980 return r;
981 }
982
983 static int show_statistics(int argc, char **argv, void *userdata) {
984 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
985 _cleanup_(sd_bus_message_unrefp) sd_bus_message *reply = NULL;
986 sd_bus *bus = userdata;
987 uint64_t n_current_transactions, n_total_transactions,
988 cache_size, n_cache_hit, n_cache_miss,
989 n_dnssec_secure, n_dnssec_insecure, n_dnssec_bogus, n_dnssec_indeterminate;
990 int r, dnssec_supported;
991
992 assert(bus);
993
994 r = sd_bus_get_property_trivial(bus,
995 "org.freedesktop.resolve1",
996 "/org/freedesktop/resolve1",
997 "org.freedesktop.resolve1.Manager",
998 "DNSSECSupported",
999 &error,
1000 'b',
1001 &dnssec_supported);
1002 if (r < 0)
1003 return log_error_errno(r, "Failed to get DNSSEC supported state: %s", bus_error_message(&error, r));
1004
1005 printf("DNSSEC supported by current servers: %s%s%s\n\n",
1006 ansi_highlight(),
1007 yes_no(dnssec_supported),
1008 ansi_normal());
1009
1010 r = sd_bus_get_property(bus,
1011 "org.freedesktop.resolve1",
1012 "/org/freedesktop/resolve1",
1013 "org.freedesktop.resolve1.Manager",
1014 "TransactionStatistics",
1015 &error,
1016 &reply,
1017 "(tt)");
1018 if (r < 0)
1019 return log_error_errno(r, "Failed to get transaction statistics: %s", bus_error_message(&error, r));
1020
1021 r = sd_bus_message_read(reply, "(tt)",
1022 &n_current_transactions,
1023 &n_total_transactions);
1024 if (r < 0)
1025 return bus_log_parse_error(r);
1026
1027 printf("%sTransactions%s\n"
1028 "Current Transactions: %" PRIu64 "\n"
1029 " Total Transactions: %" PRIu64 "\n",
1030 ansi_highlight(),
1031 ansi_normal(),
1032 n_current_transactions,
1033 n_total_transactions);
1034
1035 reply = sd_bus_message_unref(reply);
1036
1037 r = sd_bus_get_property(bus,
1038 "org.freedesktop.resolve1",
1039 "/org/freedesktop/resolve1",
1040 "org.freedesktop.resolve1.Manager",
1041 "CacheStatistics",
1042 &error,
1043 &reply,
1044 "(ttt)");
1045 if (r < 0)
1046 return log_error_errno(r, "Failed to get cache statistics: %s", bus_error_message(&error, r));
1047
1048 r = sd_bus_message_read(reply, "(ttt)",
1049 &cache_size,
1050 &n_cache_hit,
1051 &n_cache_miss);
1052 if (r < 0)
1053 return bus_log_parse_error(r);
1054
1055 printf("\n%sCache%s\n"
1056 " Current Cache Size: %" PRIu64 "\n"
1057 " Cache Hits: %" PRIu64 "\n"
1058 " Cache Misses: %" PRIu64 "\n",
1059 ansi_highlight(),
1060 ansi_normal(),
1061 cache_size,
1062 n_cache_hit,
1063 n_cache_miss);
1064
1065 reply = sd_bus_message_unref(reply);
1066
1067 r = sd_bus_get_property(bus,
1068 "org.freedesktop.resolve1",
1069 "/org/freedesktop/resolve1",
1070 "org.freedesktop.resolve1.Manager",
1071 "DNSSECStatistics",
1072 &error,
1073 &reply,
1074 "(tttt)");
1075 if (r < 0)
1076 return log_error_errno(r, "Failed to get DNSSEC statistics: %s", bus_error_message(&error, r));
1077
1078 r = sd_bus_message_read(reply, "(tttt)",
1079 &n_dnssec_secure,
1080 &n_dnssec_insecure,
1081 &n_dnssec_bogus,
1082 &n_dnssec_indeterminate);
1083 if (r < 0)
1084 return bus_log_parse_error(r);
1085
1086 printf("\n%sDNSSEC Verdicts%s\n"
1087 " Secure: %" PRIu64 "\n"
1088 " Insecure: %" PRIu64 "\n"
1089 " Bogus: %" PRIu64 "\n"
1090 " Indeterminate: %" PRIu64 "\n",
1091 ansi_highlight(),
1092 ansi_normal(),
1093 n_dnssec_secure,
1094 n_dnssec_insecure,
1095 n_dnssec_bogus,
1096 n_dnssec_indeterminate);
1097
1098 return 0;
1099 }
1100
1101 static int reset_statistics(int argc, char **argv, void *userdata) {
1102 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1103 sd_bus *bus = userdata;
1104 int r;
1105
1106 r = sd_bus_call_method(bus,
1107 "org.freedesktop.resolve1",
1108 "/org/freedesktop/resolve1",
1109 "org.freedesktop.resolve1.Manager",
1110 "ResetStatistics",
1111 &error,
1112 NULL,
1113 NULL);
1114 if (r < 0)
1115 return log_error_errno(r, "Failed to reset statistics: %s", bus_error_message(&error, r));
1116
1117 return 0;
1118 }
1119
1120 static int flush_caches(int argc, char **argv, void *userdata) {
1121 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1122 sd_bus *bus = userdata;
1123 int r;
1124
1125 r = sd_bus_call_method(bus,
1126 "org.freedesktop.resolve1",
1127 "/org/freedesktop/resolve1",
1128 "org.freedesktop.resolve1.Manager",
1129 "FlushCaches",
1130 &error,
1131 NULL,
1132 NULL);
1133 if (r < 0)
1134 return log_error_errno(r, "Failed to flush caches: %s", bus_error_message(&error, r));
1135
1136 return 0;
1137 }
1138
1139 static int reset_server_features(int argc, char **argv, void *userdata) {
1140 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1141 sd_bus *bus = userdata;
1142 int r;
1143
1144 r = sd_bus_call_method(bus,
1145 "org.freedesktop.resolve1",
1146 "/org/freedesktop/resolve1",
1147 "org.freedesktop.resolve1.Manager",
1148 "ResetServerFeatures",
1149 &error,
1150 NULL,
1151 NULL);
1152 if (r < 0)
1153 return log_error_errno(r, "Failed to reset server features: %s", bus_error_message(&error, r));
1154
1155 return 0;
1156 }
1157
1158 static int read_dns_server_one(sd_bus_message *m, bool with_ifindex, char **ret) {
1159 _cleanup_free_ char *pretty = NULL;
1160 int ifindex, family, r;
1161 const void *a;
1162 size_t sz;
1163
1164 assert(m);
1165 assert(ret);
1166
1167 r = sd_bus_message_enter_container(m, 'r', with_ifindex ? "iiay" : "iay");
1168 if (r <= 0)
1169 return r;
1170
1171 if (with_ifindex) {
1172 r = sd_bus_message_read(m, "i", &ifindex);
1173 if (r < 0)
1174 return r;
1175 }
1176
1177 r = sd_bus_message_read(m, "i", &family);
1178 if (r < 0)
1179 return r;
1180
1181 r = sd_bus_message_read_array(m, 'y', &a, &sz);
1182 if (r < 0)
1183 return r;
1184
1185 r = sd_bus_message_exit_container(m);
1186 if (r < 0)
1187 return r;
1188
1189 if (with_ifindex && ifindex != 0) {
1190 /* only show the global ones here */
1191 *ret = NULL;
1192 return 1;
1193 }
1194
1195 if (!IN_SET(family, AF_INET, AF_INET6)) {
1196 log_debug("Unexpected family, ignoring: %i", family);
1197
1198 *ret = NULL;
1199 return 1;
1200 }
1201
1202 if (sz != FAMILY_ADDRESS_SIZE(family)) {
1203 log_debug("Address size mismatch, ignoring.");
1204
1205 *ret = NULL;
1206 return 1;
1207 }
1208
1209 r = in_addr_to_string(family, a, &pretty);
1210 if (r < 0)
1211 return r;
1212
1213 *ret = TAKE_PTR(pretty);
1214
1215 return 1;
1216 }
1217
1218 static int map_link_dns_servers(sd_bus *bus, const char *member, sd_bus_message *m, sd_bus_error *error, void *userdata) {
1219 char ***l = userdata;
1220 int r;
1221
1222 assert(bus);
1223 assert(member);
1224 assert(m);
1225 assert(l);
1226
1227 r = sd_bus_message_enter_container(m, 'a', "(iay)");
1228 if (r < 0)
1229 return r;
1230
1231 for (;;) {
1232 char *pretty = NULL;
1233
1234 r = read_dns_server_one(m, false, &pretty);
1235 if (r < 0)
1236 return r;
1237 if (r == 0)
1238 break;
1239
1240 if (isempty(pretty))
1241 continue;
1242
1243 r = strv_consume(l, pretty);
1244 if (r < 0)
1245 return r;
1246 }
1247
1248 r = sd_bus_message_exit_container(m);
1249 if (r < 0)
1250 return r;
1251
1252 return 0;
1253 }
1254
1255 static int map_link_current_dns_server(sd_bus *bus, const char *member, sd_bus_message *m, sd_bus_error *error, void *userdata) {
1256 assert(m);
1257 assert(userdata);
1258
1259 return read_dns_server_one(m, false, userdata);
1260 }
1261
1262 static int read_domain_one(sd_bus_message *m, bool with_ifindex, char **ret) {
1263 _cleanup_free_ char *str = NULL;
1264 int ifindex, route_only, r;
1265 const char *domain;
1266
1267 assert(m);
1268 assert(ret);
1269
1270 if (with_ifindex)
1271 r = sd_bus_message_read(m, "(isb)", &ifindex, &domain, &route_only);
1272 else
1273 r = sd_bus_message_read(m, "(sb)", &domain, &route_only);
1274 if (r <= 0)
1275 return r;
1276
1277 if (with_ifindex && ifindex != 0) {
1278 /* only show the global ones here */
1279 *ret = NULL;
1280 return 1;
1281 }
1282
1283 if (route_only)
1284 str = strappend("~", domain);
1285 else
1286 str = strdup(domain);
1287 if (!str)
1288 return -ENOMEM;
1289
1290 *ret = TAKE_PTR(str);
1291
1292 return 1;
1293 }
1294
1295 static int map_link_domains(sd_bus *bus, const char *member, sd_bus_message *m, sd_bus_error *error, void *userdata) {
1296 char ***l = userdata;
1297 int r;
1298
1299 assert(bus);
1300 assert(member);
1301 assert(m);
1302 assert(l);
1303
1304 r = sd_bus_message_enter_container(m, 'a', "(sb)");
1305 if (r < 0)
1306 return r;
1307
1308 for (;;) {
1309 char *pretty = NULL;
1310
1311 r = read_domain_one(m, false, &pretty);
1312 if (r < 0)
1313 return r;
1314 if (r == 0)
1315 break;
1316
1317 if (isempty(pretty))
1318 continue;
1319
1320 r = strv_consume(l, pretty);
1321 if (r < 0)
1322 return r;
1323 }
1324
1325 r = sd_bus_message_exit_container(m);
1326 if (r < 0)
1327 return r;
1328
1329 return 0;
1330 }
1331
1332 static int status_print_strv_ifindex(int ifindex, const char *ifname, char **p) {
1333 char **i;
1334
1335 printf("%sLink %i (%s)%s:",
1336 ansi_highlight(), ifindex, ifname, ansi_normal());
1337
1338 STRV_FOREACH(i, p)
1339 printf(" %s", *i);
1340
1341 printf("\n");
1342
1343 return 0;
1344 }
1345
1346 struct link_info {
1347 uint64_t scopes_mask;
1348 const char *llmnr;
1349 const char *mdns;
1350 const char *dns_over_tls;
1351 const char *dnssec;
1352 char *current_dns;
1353 char **dns;
1354 char **domains;
1355 char **ntas;
1356 bool dnssec_supported;
1357 bool default_route;
1358 };
1359
1360 static void link_info_clear(struct link_info *p) {
1361 free(p->current_dns);
1362 strv_free(p->dns);
1363 strv_free(p->domains);
1364 strv_free(p->ntas);
1365 }
1366
1367 static int status_ifindex(sd_bus *bus, int ifindex, const char *name, StatusMode mode, bool *empty_line) {
1368 static const struct bus_properties_map property_map[] = {
1369 { "ScopesMask", "t", NULL, offsetof(struct link_info, scopes_mask) },
1370 { "DNS", "a(iay)", map_link_dns_servers, offsetof(struct link_info, dns) },
1371 { "CurrentDNSServer", "(iay)", map_link_current_dns_server, offsetof(struct link_info, current_dns) },
1372 { "Domains", "a(sb)", map_link_domains, offsetof(struct link_info, domains) },
1373 { "DefaultRoute", "b", NULL, offsetof(struct link_info, default_route) },
1374 { "LLMNR", "s", NULL, offsetof(struct link_info, llmnr) },
1375 { "MulticastDNS", "s", NULL, offsetof(struct link_info, mdns) },
1376 { "DNSOverTLS", "s", NULL, offsetof(struct link_info, dns_over_tls) },
1377 { "DNSSEC", "s", NULL, offsetof(struct link_info, dnssec) },
1378 { "DNSSECNegativeTrustAnchors", "as", NULL, offsetof(struct link_info, ntas) },
1379 { "DNSSECSupported", "b", NULL, offsetof(struct link_info, dnssec_supported) },
1380 {}
1381 };
1382 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1383 _cleanup_(sd_bus_message_unrefp) sd_bus_message *m = NULL;
1384 _cleanup_(link_info_clear) struct link_info link_info = {};
1385 _cleanup_free_ char *ifi = NULL, *p = NULL;
1386 char ifname[IF_NAMESIZE + 1] = "";
1387 char **i;
1388 int r;
1389
1390 assert(bus);
1391 assert(ifindex > 0);
1392
1393 if (!name) {
1394 if (!format_ifname(ifindex, ifname))
1395 return log_error_errno(errno, "Failed to resolve interface name for %i: %m", ifindex);
1396
1397 name = ifname;
1398 }
1399
1400 if (asprintf(&ifi, "%i", ifindex) < 0)
1401 return log_oom();
1402
1403 r = sd_bus_path_encode("/org/freedesktop/resolve1/link", ifi, &p);
1404 if (r < 0)
1405 return log_oom();
1406
1407 r = bus_map_all_properties(bus,
1408 "org.freedesktop.resolve1",
1409 p,
1410 property_map,
1411 BUS_MAP_BOOLEAN_AS_BOOL,
1412 &error,
1413 &m,
1414 &link_info);
1415 if (r < 0)
1416 return log_error_errno(r, "Failed to get link data for %i: %s", ifindex, bus_error_message(&error, r));
1417
1418 (void) pager_open(arg_pager_flags);
1419
1420 if (mode == STATUS_DNS)
1421 return status_print_strv_ifindex(ifindex, name, link_info.dns);
1422
1423 if (mode == STATUS_DOMAIN)
1424 return status_print_strv_ifindex(ifindex, name, link_info.domains);
1425
1426 if (mode == STATUS_NTA)
1427 return status_print_strv_ifindex(ifindex, name, link_info.ntas);
1428
1429 if (mode == STATUS_DEFAULT_ROUTE) {
1430 printf("%sLink %i (%s)%s: %s\n",
1431 ansi_highlight(), ifindex, name, ansi_normal(),
1432 yes_no(link_info.default_route));
1433
1434 return 0;
1435 }
1436
1437 if (mode == STATUS_LLMNR) {
1438 printf("%sLink %i (%s)%s: %s\n",
1439 ansi_highlight(), ifindex, name, ansi_normal(),
1440 strna(link_info.llmnr));
1441
1442 return 0;
1443 }
1444
1445 if (mode == STATUS_MDNS) {
1446 printf("%sLink %i (%s)%s: %s\n",
1447 ansi_highlight(), ifindex, name, ansi_normal(),
1448 strna(link_info.mdns));
1449
1450 return 0;
1451 }
1452
1453 if (mode == STATUS_PRIVATE) {
1454 printf("%sLink %i (%s)%s: %s\n",
1455 ansi_highlight(), ifindex, name, ansi_normal(),
1456 strna(link_info.dns_over_tls));
1457
1458 return 0;
1459 }
1460
1461 if (mode == STATUS_DNSSEC) {
1462 printf("%sLink %i (%s)%s: %s\n",
1463 ansi_highlight(), ifindex, name, ansi_normal(),
1464 strna(link_info.dnssec));
1465
1466 return 0;
1467 }
1468
1469 if (empty_line && *empty_line)
1470 fputc('\n', stdout);
1471
1472 printf("%sLink %i (%s)%s\n",
1473 ansi_highlight(), ifindex, name, ansi_normal());
1474
1475 if (link_info.scopes_mask == 0)
1476 printf(" Current Scopes: none\n");
1477 else
1478 printf(" Current Scopes:%s%s%s%s%s\n",
1479 link_info.scopes_mask & SD_RESOLVED_DNS ? " DNS" : "",
1480 link_info.scopes_mask & SD_RESOLVED_LLMNR_IPV4 ? " LLMNR/IPv4" : "",
1481 link_info.scopes_mask & SD_RESOLVED_LLMNR_IPV6 ? " LLMNR/IPv6" : "",
1482 link_info.scopes_mask & SD_RESOLVED_MDNS_IPV4 ? " mDNS/IPv4" : "",
1483 link_info.scopes_mask & SD_RESOLVED_MDNS_IPV6 ? " mDNS/IPv6" : "");
1484
1485 printf("DefaultRoute setting: %s\n"
1486 " LLMNR setting: %s\n"
1487 "MulticastDNS setting: %s\n"
1488 " DNSOverTLS setting: %s\n"
1489 " DNSSEC setting: %s\n"
1490 " DNSSEC supported: %s\n",
1491 yes_no(link_info.default_route),
1492 strna(link_info.llmnr),
1493 strna(link_info.mdns),
1494 strna(link_info.dns_over_tls),
1495 strna(link_info.dnssec),
1496 yes_no(link_info.dnssec_supported));
1497
1498 if (link_info.current_dns)
1499 printf(" Current DNS Server: %s\n", link_info.current_dns);
1500
1501 STRV_FOREACH(i, link_info.dns) {
1502 printf(" %s %s\n",
1503 i == link_info.dns ? "DNS Servers:" : " ",
1504 *i);
1505 }
1506
1507 STRV_FOREACH(i, link_info.domains) {
1508 printf(" %s %s\n",
1509 i == link_info.domains ? "DNS Domain:" : " ",
1510 *i);
1511 }
1512
1513 STRV_FOREACH(i, link_info.ntas) {
1514 printf(" %s %s\n",
1515 i == link_info.ntas ? "DNSSEC NTA:" : " ",
1516 *i);
1517 }
1518
1519 if (empty_line)
1520 *empty_line = true;
1521
1522 return 0;
1523 }
1524
1525 static int map_global_dns_servers(sd_bus *bus, const char *member, sd_bus_message *m, sd_bus_error *error, void *userdata) {
1526 char ***l = userdata;
1527 int r;
1528
1529 assert(bus);
1530 assert(member);
1531 assert(m);
1532 assert(l);
1533
1534 r = sd_bus_message_enter_container(m, 'a', "(iiay)");
1535 if (r < 0)
1536 return r;
1537
1538 for (;;) {
1539 char *pretty = NULL;
1540
1541 r = read_dns_server_one(m, true, &pretty);
1542 if (r < 0)
1543 return r;
1544 if (r == 0)
1545 break;
1546
1547 if (isempty(pretty))
1548 continue;
1549
1550 r = strv_consume(l, pretty);
1551 if (r < 0)
1552 return r;
1553 }
1554
1555 r = sd_bus_message_exit_container(m);
1556 if (r < 0)
1557 return r;
1558
1559 return 0;
1560 }
1561
1562 static int map_global_current_dns_server(sd_bus *bus, const char *member, sd_bus_message *m, sd_bus_error *error, void *userdata) {
1563 assert(m);
1564 assert(userdata);
1565
1566 return read_dns_server_one(m, true, userdata);
1567 }
1568
1569 static int map_global_domains(sd_bus *bus, const char *member, sd_bus_message *m, sd_bus_error *error, void *userdata) {
1570 char ***l = userdata;
1571 int r;
1572
1573 assert(bus);
1574 assert(member);
1575 assert(m);
1576 assert(l);
1577
1578 r = sd_bus_message_enter_container(m, 'a', "(isb)");
1579 if (r < 0)
1580 return r;
1581
1582 for (;;) {
1583 char *pretty = NULL;
1584
1585 r = read_domain_one(m, true, &pretty);
1586 if (r < 0)
1587 return r;
1588 if (r == 0)
1589 break;
1590
1591 if (isempty(pretty))
1592 continue;
1593
1594 r = strv_consume(l, pretty);
1595 if (r < 0)
1596 return r;
1597 }
1598
1599 r = sd_bus_message_exit_container(m);
1600 if (r < 0)
1601 return r;
1602
1603 return 0;
1604 }
1605
1606 static int status_print_strv_global(char **p) {
1607 char **i;
1608
1609 printf("%sGlobal%s:", ansi_highlight(), ansi_normal());
1610
1611 STRV_FOREACH(i, p)
1612 printf(" %s", *i);
1613
1614 printf("\n");
1615
1616 return 0;
1617 }
1618
1619 struct global_info {
1620 char *current_dns;
1621 char **dns;
1622 char **fallback_dns;
1623 char **domains;
1624 char **ntas;
1625 const char *llmnr;
1626 const char *mdns;
1627 const char *dns_over_tls;
1628 const char *dnssec;
1629 bool dnssec_supported;
1630 };
1631
1632 static void global_info_clear(struct global_info *p) {
1633 free(p->current_dns);
1634 strv_free(p->dns);
1635 strv_free(p->fallback_dns);
1636 strv_free(p->domains);
1637 strv_free(p->ntas);
1638 }
1639
1640 static int status_global(sd_bus *bus, StatusMode mode, bool *empty_line) {
1641 static const struct bus_properties_map property_map[] = {
1642 { "DNS", "a(iiay)", map_global_dns_servers, offsetof(struct global_info, dns) },
1643 { "FallbackDNS", "a(iiay)", map_global_dns_servers, offsetof(struct global_info, fallback_dns) },
1644 { "CurrentDNSServer", "(iiay)", map_global_current_dns_server, offsetof(struct global_info, current_dns) },
1645 { "Domains", "a(isb)", map_global_domains, offsetof(struct global_info, domains) },
1646 { "DNSSECNegativeTrustAnchors", "as", NULL, offsetof(struct global_info, ntas) },
1647 { "LLMNR", "s", NULL, offsetof(struct global_info, llmnr) },
1648 { "MulticastDNS", "s", NULL, offsetof(struct global_info, mdns) },
1649 { "DNSOverTLS", "s", NULL, offsetof(struct global_info, dns_over_tls) },
1650 { "DNSSEC", "s", NULL, offsetof(struct global_info, dnssec) },
1651 { "DNSSECSupported", "b", NULL, offsetof(struct global_info, dnssec_supported) },
1652 {}
1653 };
1654 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1655 _cleanup_(sd_bus_message_unrefp) sd_bus_message *m = NULL;
1656 _cleanup_(global_info_clear) struct global_info global_info = {};
1657 char **i;
1658 int r;
1659
1660 assert(bus);
1661 assert(empty_line);
1662
1663 r = bus_map_all_properties(bus,
1664 "org.freedesktop.resolve1",
1665 "/org/freedesktop/resolve1",
1666 property_map,
1667 BUS_MAP_BOOLEAN_AS_BOOL,
1668 &error,
1669 &m,
1670 &global_info);
1671 if (r < 0)
1672 return log_error_errno(r, "Failed to get global data: %s", bus_error_message(&error, r));
1673
1674 (void) pager_open(arg_pager_flags);
1675
1676 if (mode == STATUS_DNS)
1677 return status_print_strv_global(global_info.dns);
1678
1679 if (mode == STATUS_DOMAIN)
1680 return status_print_strv_global(global_info.domains);
1681
1682 if (mode == STATUS_NTA)
1683 return status_print_strv_global(global_info.ntas);
1684
1685 if (mode == STATUS_LLMNR) {
1686 printf("%sGlobal%s: %s\n", ansi_highlight(), ansi_normal(),
1687 strna(global_info.llmnr));
1688
1689 return 0;
1690 }
1691
1692 if (mode == STATUS_MDNS) {
1693 printf("%sGlobal%s: %s\n", ansi_highlight(), ansi_normal(),
1694 strna(global_info.mdns));
1695
1696 return 0;
1697 }
1698
1699 if (mode == STATUS_PRIVATE) {
1700 printf("%sGlobal%s: %s\n", ansi_highlight(), ansi_normal(),
1701 strna(global_info.dns_over_tls));
1702
1703 return 0;
1704 }
1705
1706 if (mode == STATUS_DNSSEC) {
1707 printf("%sGlobal%s: %s\n", ansi_highlight(), ansi_normal(),
1708 strna(global_info.dnssec));
1709
1710 return 0;
1711 }
1712
1713 printf("%sGlobal%s\n", ansi_highlight(), ansi_normal());
1714
1715 printf(" LLMNR setting: %s\n"
1716 "MulticastDNS setting: %s\n"
1717 " DNSOverTLS setting: %s\n"
1718 " DNSSEC setting: %s\n"
1719 " DNSSEC supported: %s\n",
1720 strna(global_info.llmnr),
1721 strna(global_info.mdns),
1722 strna(global_info.dns_over_tls),
1723 strna(global_info.dnssec),
1724 yes_no(global_info.dnssec_supported));
1725
1726 if (global_info.current_dns)
1727 printf(" Current DNS Server: %s\n", global_info.current_dns);
1728
1729 STRV_FOREACH(i, global_info.dns) {
1730 printf(" %s %s\n",
1731 i == global_info.dns ? "DNS Servers:" : " ",
1732 *i);
1733 }
1734
1735 STRV_FOREACH(i, global_info.fallback_dns) {
1736 printf("%s %s\n",
1737 i == global_info.fallback_dns ? "Fallback DNS Servers:" : " ",
1738 *i);
1739 }
1740
1741 STRV_FOREACH(i, global_info.domains) {
1742 printf(" %s %s\n",
1743 i == global_info.domains ? "DNS Domain:" : " ",
1744 *i);
1745 }
1746
1747 strv_sort(global_info.ntas);
1748 STRV_FOREACH(i, global_info.ntas) {
1749 printf(" %s %s\n",
1750 i == global_info.ntas ? "DNSSEC NTA:" : " ",
1751 *i);
1752 }
1753
1754 *empty_line = true;
1755
1756 return 0;
1757 }
1758
1759 static int status_all(sd_bus *bus, StatusMode mode) {
1760 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL, *reply = NULL;
1761 _cleanup_(sd_netlink_unrefp) sd_netlink *rtnl = NULL;
1762 sd_netlink_message *i;
1763 bool empty_line = false;
1764 int r;
1765
1766 assert(bus);
1767
1768 r = status_global(bus, mode, &empty_line);
1769 if (r < 0)
1770 return r;
1771
1772 r = sd_netlink_open(&rtnl);
1773 if (r < 0)
1774 return log_error_errno(r, "Failed to connect to netlink: %m");
1775
1776 r = sd_rtnl_message_new_link(rtnl, &req, RTM_GETLINK, 0);
1777 if (r < 0)
1778 return rtnl_log_create_error(r);
1779
1780 r = sd_netlink_message_request_dump(req, true);
1781 if (r < 0)
1782 return rtnl_log_create_error(r);
1783
1784 r = sd_netlink_call(rtnl, req, 0, &reply);
1785 if (r < 0)
1786 return log_error_errno(r, "Failed to enumerate links: %m");
1787
1788 r = 0;
1789 for (i = reply; i; i = sd_netlink_message_next(i)) {
1790 const char *name;
1791 int ifindex, q;
1792 uint16_t type;
1793
1794 q = sd_netlink_message_get_type(i, &type);
1795 if (q < 0)
1796 return rtnl_log_parse_error(q);
1797
1798 if (type != RTM_NEWLINK)
1799 continue;
1800
1801 q = sd_rtnl_message_link_get_ifindex(i, &ifindex);
1802 if (q < 0)
1803 return rtnl_log_parse_error(q);
1804
1805 if (ifindex == LOOPBACK_IFINDEX)
1806 continue;
1807
1808 q = sd_netlink_message_read_string(i, IFLA_IFNAME, &name);
1809 if (q < 0)
1810 return rtnl_log_parse_error(q);
1811
1812 q = status_ifindex(bus, ifindex, name, mode, &empty_line);
1813 if (q < 0 && r >= 0)
1814 r = q;
1815 }
1816
1817 return r;
1818 }
1819
1820 static int verb_status(int argc, char **argv, void *userdata) {
1821 sd_bus *bus = userdata;
1822 int q, r = 0;
1823
1824 if (argc > 1) {
1825 char **ifname;
1826 bool empty_line = false;
1827
1828 STRV_FOREACH(ifname, argv + 1) {
1829 int ifindex;
1830
1831 q = parse_ifindex_or_ifname(*ifname, &ifindex);
1832 if (q < 0) {
1833 log_error_errno(q, "Unknown interface '%s', ignoring: %m", *ifname);
1834 continue;
1835 }
1836
1837 q = status_ifindex(bus, ifindex, NULL, STATUS_ALL, &empty_line);
1838 if (q < 0)
1839 r = q;
1840 }
1841 } else
1842 r = status_all(bus, STATUS_ALL);
1843
1844 return r;
1845 }
1846
1847 static int log_interface_is_managed(int r, int ifindex) {
1848 char ifname[IF_NAMESIZE + 1];
1849
1850 return log_error_errno(r,
1851 "The specified interface %s is managed by systemd-networkd. Operation refused.\n"
1852 "Please configure DNS settings for systemd-networkd managed interfaces directly in their .network files.",
1853 strna(format_ifname(ifindex, ifname)));
1854 }
1855
1856 static int verb_dns(int argc, char **argv, void *userdata) {
1857 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1858 _cleanup_(sd_bus_message_unrefp) sd_bus_message *req = NULL;
1859 sd_bus *bus = userdata;
1860 char **p;
1861 int r;
1862
1863 assert(bus);
1864
1865 if (argc >= 2) {
1866 r = ifname_mangle(argv[1]);
1867 if (r < 0)
1868 return r;
1869 }
1870
1871 if (arg_ifindex <= 0)
1872 return status_all(bus, STATUS_DNS);
1873
1874 if (argc < 3)
1875 return status_ifindex(bus, arg_ifindex, NULL, STATUS_DNS, NULL);
1876
1877 r = sd_bus_message_new_method_call(
1878 bus,
1879 &req,
1880 "org.freedesktop.resolve1",
1881 "/org/freedesktop/resolve1",
1882 "org.freedesktop.resolve1.Manager",
1883 "SetLinkDNS");
1884 if (r < 0)
1885 return bus_log_create_error(r);
1886
1887 r = sd_bus_message_append(req, "i", arg_ifindex);
1888 if (r < 0)
1889 return bus_log_create_error(r);
1890
1891 r = sd_bus_message_open_container(req, 'a', "(iay)");
1892 if (r < 0)
1893 return bus_log_create_error(r);
1894
1895 /* If only argument is the empty string, then call SetLinkDNS() with an
1896 * empty list, which will clear the list of domains for an interface. */
1897 if (!strv_equal(argv + 2, STRV_MAKE(""))) {
1898 STRV_FOREACH(p, argv + 2) {
1899 struct in_addr_data data;
1900
1901 r = in_addr_from_string_auto(*p, &data.family, &data.address);
1902 if (r < 0)
1903 return log_error_errno(r, "Failed to parse DNS server address: %s", *p);
1904
1905 r = sd_bus_message_open_container(req, 'r', "iay");
1906 if (r < 0)
1907 return bus_log_create_error(r);
1908
1909 r = sd_bus_message_append(req, "i", data.family);
1910 if (r < 0)
1911 return bus_log_create_error(r);
1912
1913 r = sd_bus_message_append_array(req, 'y', &data.address, FAMILY_ADDRESS_SIZE(data.family));
1914 if (r < 0)
1915 return bus_log_create_error(r);
1916
1917 r = sd_bus_message_close_container(req);
1918 if (r < 0)
1919 return bus_log_create_error(r);
1920 }
1921 }
1922
1923 r = sd_bus_message_close_container(req);
1924 if (r < 0)
1925 return bus_log_create_error(r);
1926
1927 r = sd_bus_call(bus, req, 0, &error, NULL);
1928 if (r < 0) {
1929 if (sd_bus_error_has_name(&error, BUS_ERROR_LINK_BUSY))
1930 return log_interface_is_managed(r, arg_ifindex);
1931
1932 if (arg_ifindex_permissive &&
1933 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
1934 return 0;
1935
1936 return log_error_errno(r, "Failed to set DNS configuration: %s", bus_error_message(&error, r));
1937 }
1938
1939 return 0;
1940 }
1941
1942 static int verb_domain(int argc, char **argv, void *userdata) {
1943 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1944 _cleanup_(sd_bus_message_unrefp) sd_bus_message *req = NULL;
1945 sd_bus *bus = userdata;
1946 char **p;
1947 int r;
1948
1949 assert(bus);
1950
1951 if (argc >= 2) {
1952 r = ifname_mangle(argv[1]);
1953 if (r < 0)
1954 return r;
1955 }
1956
1957 if (arg_ifindex <= 0)
1958 return status_all(bus, STATUS_DOMAIN);
1959
1960 if (argc < 3)
1961 return status_ifindex(bus, arg_ifindex, NULL, STATUS_DOMAIN, NULL);
1962
1963 r = sd_bus_message_new_method_call(
1964 bus,
1965 &req,
1966 "org.freedesktop.resolve1",
1967 "/org/freedesktop/resolve1",
1968 "org.freedesktop.resolve1.Manager",
1969 "SetLinkDomains");
1970 if (r < 0)
1971 return bus_log_create_error(r);
1972
1973 r = sd_bus_message_append(req, "i", arg_ifindex);
1974 if (r < 0)
1975 return bus_log_create_error(r);
1976
1977 r = sd_bus_message_open_container(req, 'a', "(sb)");
1978 if (r < 0)
1979 return bus_log_create_error(r);
1980
1981 /* If only argument is the empty string, then call SetLinkDomains() with an
1982 * empty list, which will clear the list of domains for an interface. */
1983 if (!strv_equal(argv + 2, STRV_MAKE(""))) {
1984 STRV_FOREACH(p, argv + 2) {
1985 const char *n;
1986
1987 n = **p == '~' ? *p + 1 : *p;
1988
1989 r = dns_name_is_valid(n);
1990 if (r < 0)
1991 return log_error_errno(r, "Failed to validate specified domain %s: %m", n);
1992 if (r == 0) {
1993 log_error("Domain not valid: %s", n);
1994 return -EINVAL;
1995 }
1996
1997 r = sd_bus_message_append(req, "(sb)", n, **p == '~');
1998 if (r < 0)
1999 return bus_log_create_error(r);
2000 }
2001 }
2002
2003 r = sd_bus_message_close_container(req);
2004 if (r < 0)
2005 return bus_log_create_error(r);
2006
2007 r = sd_bus_call(bus, req, 0, &error, NULL);
2008 if (r < 0) {
2009 if (sd_bus_error_has_name(&error, BUS_ERROR_LINK_BUSY))
2010 return log_interface_is_managed(r, arg_ifindex);
2011
2012 if (arg_ifindex_permissive &&
2013 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
2014 return 0;
2015
2016 return log_error_errno(r, "Failed to set domain configuration: %s", bus_error_message(&error, r));
2017 }
2018
2019 return 0;
2020 }
2021
2022 static int verb_default_route(int argc, char **argv, void *userdata) {
2023 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2024 sd_bus *bus = userdata;
2025 int r, b;
2026
2027 assert(bus);
2028
2029 if (argc >= 2) {
2030 r = ifname_mangle(argv[1]);
2031 if (r < 0)
2032 return r;
2033 }
2034
2035 if (arg_ifindex <= 0)
2036 return status_all(bus, STATUS_DEFAULT_ROUTE);
2037
2038 if (argc < 3)
2039 return status_ifindex(bus, arg_ifindex, NULL, STATUS_DEFAULT_ROUTE, NULL);
2040
2041 b = parse_boolean(argv[2]);
2042 if (b < 0)
2043 return log_error_errno(b, "Failed to parse boolean argument: %s", argv[2]);
2044
2045 r = sd_bus_call_method(bus,
2046 "org.freedesktop.resolve1",
2047 "/org/freedesktop/resolve1",
2048 "org.freedesktop.resolve1.Manager",
2049 "SetLinkDefaultRoute",
2050 &error,
2051 NULL,
2052 "ib", arg_ifindex, b);
2053 if (r < 0) {
2054 if (sd_bus_error_has_name(&error, BUS_ERROR_LINK_BUSY))
2055 return log_interface_is_managed(r, arg_ifindex);
2056
2057 if (arg_ifindex_permissive &&
2058 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
2059 return 0;
2060
2061 return log_error_errno(r, "Failed to set default route configuration: %s", bus_error_message(&error, r));
2062 }
2063
2064 return 0;
2065 }
2066
2067 static int verb_llmnr(int argc, char **argv, void *userdata) {
2068 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2069 sd_bus *bus = userdata;
2070 int r;
2071
2072 assert(bus);
2073
2074 if (argc >= 2) {
2075 r = ifname_mangle(argv[1]);
2076 if (r < 0)
2077 return r;
2078 }
2079
2080 if (arg_ifindex <= 0)
2081 return status_all(bus, STATUS_LLMNR);
2082
2083 if (argc < 3)
2084 return status_ifindex(bus, arg_ifindex, NULL, STATUS_LLMNR, NULL);
2085
2086 r = sd_bus_call_method(bus,
2087 "org.freedesktop.resolve1",
2088 "/org/freedesktop/resolve1",
2089 "org.freedesktop.resolve1.Manager",
2090 "SetLinkLLMNR",
2091 &error,
2092 NULL,
2093 "is", arg_ifindex, argv[2]);
2094 if (r < 0) {
2095 if (sd_bus_error_has_name(&error, BUS_ERROR_LINK_BUSY))
2096 return log_interface_is_managed(r, arg_ifindex);
2097
2098 if (arg_ifindex_permissive &&
2099 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
2100 return 0;
2101
2102 return log_error_errno(r, "Failed to set LLMNR configuration: %s", bus_error_message(&error, r));
2103 }
2104
2105 return 0;
2106 }
2107
2108 static int verb_mdns(int argc, char **argv, void *userdata) {
2109 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2110 sd_bus *bus = userdata;
2111 int r;
2112
2113 assert(bus);
2114
2115 if (argc >= 2) {
2116 r = ifname_mangle(argv[1]);
2117 if (r < 0)
2118 return r;
2119 }
2120
2121 if (arg_ifindex <= 0)
2122 return status_all(bus, STATUS_MDNS);
2123
2124 if (argc < 3)
2125 return status_ifindex(bus, arg_ifindex, NULL, STATUS_MDNS, NULL);
2126
2127 r = sd_bus_call_method(bus,
2128 "org.freedesktop.resolve1",
2129 "/org/freedesktop/resolve1",
2130 "org.freedesktop.resolve1.Manager",
2131 "SetLinkMulticastDNS",
2132 &error,
2133 NULL,
2134 "is", arg_ifindex, argv[2]);
2135 if (r < 0) {
2136 if (sd_bus_error_has_name(&error, BUS_ERROR_LINK_BUSY))
2137 return log_interface_is_managed(r, arg_ifindex);
2138
2139 if (arg_ifindex_permissive &&
2140 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
2141 return 0;
2142
2143 return log_error_errno(r, "Failed to set MulticastDNS configuration: %s", bus_error_message(&error, r));
2144 }
2145
2146 return 0;
2147 }
2148
2149 static int verb_dns_over_tls(int argc, char **argv, void *userdata) {
2150 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2151 sd_bus *bus = userdata;
2152 int r;
2153
2154 assert(bus);
2155
2156 if (argc >= 2) {
2157 r = ifname_mangle(argv[1]);
2158 if (r < 0)
2159 return r;
2160 }
2161
2162 if (arg_ifindex <= 0)
2163 return status_all(bus, STATUS_PRIVATE);
2164
2165 if (argc < 3)
2166 return status_ifindex(bus, arg_ifindex, NULL, STATUS_PRIVATE, NULL);
2167
2168 r = sd_bus_call_method(bus,
2169 "org.freedesktop.resolve1",
2170 "/org/freedesktop/resolve1",
2171 "org.freedesktop.resolve1.Manager",
2172 "SetLinkDNSOverTLS",
2173 &error,
2174 NULL,
2175 "is", arg_ifindex, argv[2]);
2176 if (r < 0) {
2177 if (sd_bus_error_has_name(&error, BUS_ERROR_LINK_BUSY))
2178 return log_interface_is_managed(r, arg_ifindex);
2179
2180 if (arg_ifindex_permissive &&
2181 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
2182 return 0;
2183
2184 return log_error_errno(r, "Failed to set DNSOverTLS configuration: %s", bus_error_message(&error, r));
2185 }
2186
2187 return 0;
2188 }
2189
2190 static int verb_dnssec(int argc, char **argv, void *userdata) {
2191 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2192 sd_bus *bus = userdata;
2193 int r;
2194
2195 assert(bus);
2196
2197 if (argc >= 2) {
2198 r = ifname_mangle(argv[1]);
2199 if (r < 0)
2200 return r;
2201 }
2202
2203 if (arg_ifindex <= 0)
2204 return status_all(bus, STATUS_DNSSEC);
2205
2206 if (argc < 3)
2207 return status_ifindex(bus, arg_ifindex, NULL, STATUS_DNSSEC, NULL);
2208
2209 r = sd_bus_call_method(bus,
2210 "org.freedesktop.resolve1",
2211 "/org/freedesktop/resolve1",
2212 "org.freedesktop.resolve1.Manager",
2213 "SetLinkDNSSEC",
2214 &error,
2215 NULL,
2216 "is", arg_ifindex, argv[2]);
2217 if (r < 0) {
2218 if (sd_bus_error_has_name(&error, BUS_ERROR_LINK_BUSY))
2219 return log_interface_is_managed(r, arg_ifindex);
2220
2221 if (arg_ifindex_permissive &&
2222 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
2223 return 0;
2224
2225 return log_error_errno(r, "Failed to set DNSSEC configuration: %s", bus_error_message(&error, r));
2226 }
2227
2228 return 0;
2229 }
2230
2231 static int verb_nta(int argc, char **argv, void *userdata) {
2232 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2233 _cleanup_(sd_bus_message_unrefp) sd_bus_message *req = NULL;
2234 sd_bus *bus = userdata;
2235 char **p;
2236 int r;
2237 bool clear;
2238
2239 assert(bus);
2240
2241 if (argc >= 2) {
2242 r = ifname_mangle(argv[1]);
2243 if (r < 0)
2244 return r;
2245 }
2246
2247 if (arg_ifindex <= 0)
2248 return status_all(bus, STATUS_NTA);
2249
2250 if (argc < 3)
2251 return status_ifindex(bus, arg_ifindex, NULL, STATUS_NTA, NULL);
2252
2253 /* If only argument is the empty string, then call SetLinkDNSSECNegativeTrustAnchors()
2254 * with an empty list, which will clear the list of domains for an interface. */
2255 clear = strv_equal(argv + 2, STRV_MAKE(""));
2256
2257 if (!clear)
2258 STRV_FOREACH(p, argv + 2) {
2259 r = dns_name_is_valid(*p);
2260 if (r < 0)
2261 return log_error_errno(r, "Failed to validate specified domain %s: %m", *p);
2262 if (r == 0) {
2263 log_error("Domain not valid: %s", *p);
2264 return -EINVAL;
2265 }
2266 }
2267
2268 r = sd_bus_message_new_method_call(
2269 bus,
2270 &req,
2271 "org.freedesktop.resolve1",
2272 "/org/freedesktop/resolve1",
2273 "org.freedesktop.resolve1.Manager",
2274 "SetLinkDNSSECNegativeTrustAnchors");
2275 if (r < 0)
2276 return bus_log_create_error(r);
2277
2278 r = sd_bus_message_append(req, "i", arg_ifindex);
2279 if (r < 0)
2280 return bus_log_create_error(r);
2281
2282 r = sd_bus_message_append_strv(req, clear ? NULL : argv + 2);
2283 if (r < 0)
2284 return bus_log_create_error(r);
2285
2286 r = sd_bus_call(bus, req, 0, &error, NULL);
2287 if (r < 0) {
2288 if (sd_bus_error_has_name(&error, BUS_ERROR_LINK_BUSY))
2289 return log_interface_is_managed(r, arg_ifindex);
2290
2291 if (arg_ifindex_permissive &&
2292 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
2293 return 0;
2294
2295 return log_error_errno(r, "Failed to set DNSSEC NTA configuration: %s", bus_error_message(&error, r));
2296 }
2297
2298 return 0;
2299 }
2300
2301 static int verb_revert_link(int argc, char **argv, void *userdata) {
2302 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2303 sd_bus *bus = userdata;
2304 int r;
2305
2306 assert(bus);
2307
2308 if (argc >= 2) {
2309 r = ifname_mangle(argv[1]);
2310 if (r < 0)
2311 return r;
2312 }
2313
2314 if (arg_ifindex <= 0)
2315 return log_error_errno(SYNTHETIC_ERRNO(EINVAL), "Interface argument required.");
2316
2317 r = sd_bus_call_method(bus,
2318 "org.freedesktop.resolve1",
2319 "/org/freedesktop/resolve1",
2320 "org.freedesktop.resolve1.Manager",
2321 "RevertLink",
2322 &error,
2323 NULL,
2324 "i", arg_ifindex);
2325 if (r < 0) {
2326 if (arg_ifindex_permissive &&
2327 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
2328 return 0;
2329
2330 return log_error_errno(r, "Failed to revert interface configuration: %s", bus_error_message(&error, r));
2331 }
2332
2333 return 0;
2334 }
2335
2336 static void help_protocol_types(void) {
2337 if (arg_legend)
2338 puts("Known protocol types:");
2339 puts("dns\nllmnr\nllmnr-ipv4\nllmnr-ipv6\nmdns\nmdns-ipv4\nmdns-ipv6");
2340 }
2341
2342 static void help_dns_types(void) {
2343 if (arg_legend)
2344 puts("Known DNS RR types:");
2345
2346 DUMP_STRING_TABLE(dns_type, int, _DNS_TYPE_MAX);
2347 }
2348
2349 static void help_dns_classes(void) {
2350 if (arg_legend)
2351 puts("Known DNS RR classes:");
2352
2353 DUMP_STRING_TABLE(dns_class, int, _DNS_CLASS_MAX);
2354 }
2355
2356 static int compat_help(void) {
2357 _cleanup_free_ char *link = NULL;
2358 int r;
2359
2360 r = terminal_urlify_man("resolvectl", "1", &link);
2361 if (r < 0)
2362 return log_oom();
2363
2364 printf("%1$s [OPTIONS...] HOSTNAME|ADDRESS...\n"
2365 "%1$s [OPTIONS...] --service [[NAME] TYPE] DOMAIN\n"
2366 "%1$s [OPTIONS...] --openpgp EMAIL@DOMAIN...\n"
2367 "%1$s [OPTIONS...] --statistics\n"
2368 "%1$s [OPTIONS...] --reset-statistics\n"
2369 "\n"
2370 "Resolve domain names, IPv4 and IPv6 addresses, DNS records, and services.\n\n"
2371 " -h --help Show this help\n"
2372 " --version Show package version\n"
2373 " --no-pager Do not pipe output into a pager\n"
2374 " -4 Resolve IPv4 addresses\n"
2375 " -6 Resolve IPv6 addresses\n"
2376 " -i --interface=INTERFACE Look on interface\n"
2377 " -p --protocol=PROTO|help Look via protocol\n"
2378 " -t --type=TYPE|help Query RR with DNS type\n"
2379 " -c --class=CLASS|help Query RR with DNS class\n"
2380 " --service Resolve service (SRV)\n"
2381 " --service-address=BOOL Resolve address for services (default: yes)\n"
2382 " --service-txt=BOOL Resolve TXT records for services (default: yes)\n"
2383 " --openpgp Query OpenPGP public key\n"
2384 " --tlsa Query TLS public key\n"
2385 " --cname=BOOL Follow CNAME redirects (default: yes)\n"
2386 " --search=BOOL Use search domains for single-label names\n"
2387 " (default: yes)\n"
2388 " --raw[=payload|packet] Dump the answer as binary data\n"
2389 " --legend=BOOL Print headers and additional info (default: yes)\n"
2390 " --statistics Show resolver statistics\n"
2391 " --reset-statistics Reset resolver statistics\n"
2392 " --status Show link and server status\n"
2393 " --flush-caches Flush all local DNS caches\n"
2394 " --reset-server-features\n"
2395 " Forget learnt DNS server feature levels\n"
2396 " --set-dns=SERVER Set per-interface DNS server address\n"
2397 " --set-domain=DOMAIN Set per-interface search domain\n"
2398 " --set-llmnr=MODE Set per-interface LLMNR mode\n"
2399 " --set-mdns=MODE Set per-interface MulticastDNS mode\n"
2400 " --set-dnsovertls=MODE Set per-interface DNS-over-TLS mode\n"
2401 " --set-dnssec=MODE Set per-interface DNSSEC mode\n"
2402 " --set-nta=DOMAIN Set per-interface DNSSEC NTA\n"
2403 " --revert Revert per-interface configuration\n"
2404 "\nSee the %2$s for details.\n"
2405 , program_invocation_short_name
2406 , link
2407 );
2408
2409 return 0;
2410 }
2411
2412 static int native_help(void) {
2413 _cleanup_free_ char *link = NULL;
2414 int r;
2415
2416 r = terminal_urlify_man("resolvectl", "1", &link);
2417 if (r < 0)
2418 return log_oom();
2419
2420 printf("%1$s [OPTIONS...] {COMMAND} ...\n"
2421 "\n"
2422 "Send control commands to the network name resolution manager, or\n"
2423 "resolve domain names, IPv4 and IPv6 addresses, DNS records, and services.\n"
2424 "\n"
2425 " -h --help Show this help\n"
2426 " --version Show package version\n"
2427 " --no-pager Do not pipe output into a pager\n"
2428 " -4 Resolve IPv4 addresses\n"
2429 " -6 Resolve IPv6 addresses\n"
2430 " -i --interface=INTERFACE Look on interface\n"
2431 " -p --protocol=PROTO|help Look via protocol\n"
2432 " -t --type=TYPE|help Query RR with DNS type\n"
2433 " -c --class=CLASS|help Query RR with DNS class\n"
2434 " --service-address=BOOL Resolve address for services (default: yes)\n"
2435 " --service-txt=BOOL Resolve TXT records for services (default: yes)\n"
2436 " --cname=BOOL Follow CNAME redirects (default: yes)\n"
2437 " --search=BOOL Use search domains for single-label names\n"
2438 " (default: yes)\n"
2439 " --raw[=payload|packet] Dump the answer as binary data\n"
2440 " --legend=BOOL Print headers and additional info (default: yes)\n"
2441 "\n"
2442 "Commands:\n"
2443 " query HOSTNAME|ADDRESS... Resolve domain names, IPv4 and IPv6 addresses\n"
2444 " service [[NAME] TYPE] DOMAIN Resolve service (SRV)\n"
2445 " openpgp EMAIL@DOMAIN... Query OpenPGP public key\n"
2446 " tlsa DOMAIN[:PORT]... Query TLS public key\n"
2447 " status [LINK...] Show link and server status\n"
2448 " statistics Show resolver statistics\n"
2449 " reset-statistics Reset resolver statistics\n"
2450 " flush-caches Flush all local DNS caches\n"
2451 " reset-server-features Forget learnt DNS server feature levels\n"
2452 " dns [LINK [SERVER...]] Get/set per-interface DNS server address\n"
2453 " domain [LINK [DOMAIN...]] Get/set per-interface search domain\n"
2454 " default-route [LINK [BOOL]] Get/set per-interface default route flag\n"
2455 " llmnr [LINK [MODE]] Get/set per-interface LLMNR mode\n"
2456 " mdns [LINK [MODE]] Get/set per-interface MulticastDNS mode\n"
2457 " dnsovertls [LINK [MODE]] Get/set per-interface DNS-over-TLS mode\n"
2458 " dnssec [LINK [MODE]] Get/set per-interface DNSSEC mode\n"
2459 " nta [LINK [DOMAIN...]] Get/set per-interface DNSSEC NTA\n"
2460 " revert LINK Revert per-interface configuration\n"
2461 "\nSee the %2$s for details.\n"
2462 , program_invocation_short_name
2463 , link
2464 );
2465
2466 return 0;
2467 }
2468
2469 static int verb_help(int argc, char **argv, void *userdata) {
2470 return native_help();
2471 }
2472
2473 static int compat_parse_argv(int argc, char *argv[]) {
2474 enum {
2475 ARG_VERSION = 0x100,
2476 ARG_LEGEND,
2477 ARG_SERVICE,
2478 ARG_CNAME,
2479 ARG_SERVICE_ADDRESS,
2480 ARG_SERVICE_TXT,
2481 ARG_OPENPGP,
2482 ARG_TLSA,
2483 ARG_RAW,
2484 ARG_SEARCH,
2485 ARG_STATISTICS,
2486 ARG_RESET_STATISTICS,
2487 ARG_STATUS,
2488 ARG_FLUSH_CACHES,
2489 ARG_RESET_SERVER_FEATURES,
2490 ARG_NO_PAGER,
2491 ARG_SET_DNS,
2492 ARG_SET_DOMAIN,
2493 ARG_SET_LLMNR,
2494 ARG_SET_MDNS,
2495 ARG_SET_PRIVATE,
2496 ARG_SET_DNSSEC,
2497 ARG_SET_NTA,
2498 ARG_REVERT_LINK,
2499 };
2500
2501 static const struct option options[] = {
2502 { "help", no_argument, NULL, 'h' },
2503 { "version", no_argument, NULL, ARG_VERSION },
2504 { "type", required_argument, NULL, 't' },
2505 { "class", required_argument, NULL, 'c' },
2506 { "legend", required_argument, NULL, ARG_LEGEND },
2507 { "interface", required_argument, NULL, 'i' },
2508 { "protocol", required_argument, NULL, 'p' },
2509 { "cname", required_argument, NULL, ARG_CNAME },
2510 { "service", no_argument, NULL, ARG_SERVICE },
2511 { "service-address", required_argument, NULL, ARG_SERVICE_ADDRESS },
2512 { "service-txt", required_argument, NULL, ARG_SERVICE_TXT },
2513 { "openpgp", no_argument, NULL, ARG_OPENPGP },
2514 { "tlsa", optional_argument, NULL, ARG_TLSA },
2515 { "raw", optional_argument, NULL, ARG_RAW },
2516 { "search", required_argument, NULL, ARG_SEARCH },
2517 { "statistics", no_argument, NULL, ARG_STATISTICS, },
2518 { "reset-statistics", no_argument, NULL, ARG_RESET_STATISTICS },
2519 { "status", no_argument, NULL, ARG_STATUS },
2520 { "flush-caches", no_argument, NULL, ARG_FLUSH_CACHES },
2521 { "reset-server-features", no_argument, NULL, ARG_RESET_SERVER_FEATURES },
2522 { "no-pager", no_argument, NULL, ARG_NO_PAGER },
2523 { "set-dns", required_argument, NULL, ARG_SET_DNS },
2524 { "set-domain", required_argument, NULL, ARG_SET_DOMAIN },
2525 { "set-llmnr", required_argument, NULL, ARG_SET_LLMNR },
2526 { "set-mdns", required_argument, NULL, ARG_SET_MDNS },
2527 { "set-dnsovertls", required_argument, NULL, ARG_SET_PRIVATE },
2528 { "set-dnssec", required_argument, NULL, ARG_SET_DNSSEC },
2529 { "set-nta", required_argument, NULL, ARG_SET_NTA },
2530 { "revert", no_argument, NULL, ARG_REVERT_LINK },
2531 {}
2532 };
2533
2534 int c, r;
2535
2536 assert(argc >= 0);
2537 assert(argv);
2538
2539 while ((c = getopt_long(argc, argv, "h46i:t:c:p:", options, NULL)) >= 0)
2540 switch(c) {
2541
2542 case 'h':
2543 return compat_help();
2544
2545 case ARG_VERSION:
2546 return version();
2547
2548 case '4':
2549 arg_family = AF_INET;
2550 break;
2551
2552 case '6':
2553 arg_family = AF_INET6;
2554 break;
2555
2556 case 'i':
2557 r = ifname_mangle(optarg);
2558 if (r < 0)
2559 return r;
2560 break;
2561
2562 case 't':
2563 if (streq(optarg, "help")) {
2564 help_dns_types();
2565 return 0;
2566 }
2567
2568 r = dns_type_from_string(optarg);
2569 if (r < 0) {
2570 log_error("Failed to parse RR record type %s", optarg);
2571 return r;
2572 }
2573 arg_type = (uint16_t) r;
2574 assert((int) arg_type == r);
2575
2576 arg_mode = MODE_RESOLVE_RECORD;
2577 break;
2578
2579 case 'c':
2580 if (streq(optarg, "help")) {
2581 help_dns_classes();
2582 return 0;
2583 }
2584
2585 r = dns_class_from_string(optarg);
2586 if (r < 0) {
2587 log_error("Failed to parse RR record class %s", optarg);
2588 return r;
2589 }
2590 arg_class = (uint16_t) r;
2591 assert((int) arg_class == r);
2592
2593 break;
2594
2595 case ARG_LEGEND:
2596 r = parse_boolean(optarg);
2597 if (r < 0)
2598 return log_error_errno(r, "Failed to parse --legend= argument");
2599
2600 arg_legend = r;
2601 break;
2602
2603 case 'p':
2604 if (streq(optarg, "help")) {
2605 help_protocol_types();
2606 return 0;
2607 } else if (streq(optarg, "dns"))
2608 arg_flags |= SD_RESOLVED_DNS;
2609 else if (streq(optarg, "llmnr"))
2610 arg_flags |= SD_RESOLVED_LLMNR;
2611 else if (streq(optarg, "llmnr-ipv4"))
2612 arg_flags |= SD_RESOLVED_LLMNR_IPV4;
2613 else if (streq(optarg, "llmnr-ipv6"))
2614 arg_flags |= SD_RESOLVED_LLMNR_IPV6;
2615 else if (streq(optarg, "mdns"))
2616 arg_flags |= SD_RESOLVED_MDNS;
2617 else if (streq(optarg, "mdns-ipv4"))
2618 arg_flags |= SD_RESOLVED_MDNS_IPV4;
2619 else if (streq(optarg, "mdns-ipv6"))
2620 arg_flags |= SD_RESOLVED_MDNS_IPV6;
2621 else
2622 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
2623 "Unknown protocol specifier: %s", optarg);
2624
2625 break;
2626
2627 case ARG_SERVICE:
2628 arg_mode = MODE_RESOLVE_SERVICE;
2629 break;
2630
2631 case ARG_OPENPGP:
2632 arg_mode = MODE_RESOLVE_OPENPGP;
2633 break;
2634
2635 case ARG_TLSA:
2636 arg_mode = MODE_RESOLVE_TLSA;
2637 if (!optarg || service_family_is_valid(optarg))
2638 arg_service_family = optarg;
2639 else
2640 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
2641 "Unknown service family \"%s\".", optarg);
2642 break;
2643
2644 case ARG_RAW:
2645 if (on_tty())
2646 return log_error_errno(SYNTHETIC_ERRNO(ENOTTY),
2647 "Refusing to write binary data to tty.");
2648
2649 if (optarg == NULL || streq(optarg, "payload"))
2650 arg_raw = RAW_PAYLOAD;
2651 else if (streq(optarg, "packet"))
2652 arg_raw = RAW_PACKET;
2653 else
2654 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
2655 "Unknown --raw specifier \"%s\".",
2656 optarg);
2657
2658 arg_legend = false;
2659 break;
2660
2661 case ARG_CNAME:
2662 r = parse_boolean(optarg);
2663 if (r < 0)
2664 return log_error_errno(r, "Failed to parse --cname= argument.");
2665 SET_FLAG(arg_flags, SD_RESOLVED_NO_CNAME, r == 0);
2666 break;
2667
2668 case ARG_SERVICE_ADDRESS:
2669 r = parse_boolean(optarg);
2670 if (r < 0)
2671 return log_error_errno(r, "Failed to parse --service-address= argument.");
2672 SET_FLAG(arg_flags, SD_RESOLVED_NO_ADDRESS, r == 0);
2673 break;
2674
2675 case ARG_SERVICE_TXT:
2676 r = parse_boolean(optarg);
2677 if (r < 0)
2678 return log_error_errno(r, "Failed to parse --service-txt= argument.");
2679 SET_FLAG(arg_flags, SD_RESOLVED_NO_TXT, r == 0);
2680 break;
2681
2682 case ARG_SEARCH:
2683 r = parse_boolean(optarg);
2684 if (r < 0)
2685 return log_error_errno(r, "Failed to parse --search argument.");
2686 SET_FLAG(arg_flags, SD_RESOLVED_NO_SEARCH, r == 0);
2687 break;
2688
2689 case ARG_STATISTICS:
2690 arg_mode = MODE_STATISTICS;
2691 break;
2692
2693 case ARG_RESET_STATISTICS:
2694 arg_mode = MODE_RESET_STATISTICS;
2695 break;
2696
2697 case ARG_FLUSH_CACHES:
2698 arg_mode = MODE_FLUSH_CACHES;
2699 break;
2700
2701 case ARG_RESET_SERVER_FEATURES:
2702 arg_mode = MODE_RESET_SERVER_FEATURES;
2703 break;
2704
2705 case ARG_STATUS:
2706 arg_mode = MODE_STATUS;
2707 break;
2708
2709 case ARG_NO_PAGER:
2710 arg_pager_flags |= PAGER_DISABLE;
2711 break;
2712
2713 case ARG_SET_DNS:
2714 r = strv_extend(&arg_set_dns, optarg);
2715 if (r < 0)
2716 return log_oom();
2717
2718 arg_mode = MODE_SET_LINK;
2719 break;
2720
2721 case ARG_SET_DOMAIN:
2722 r = strv_extend(&arg_set_domain, optarg);
2723 if (r < 0)
2724 return log_oom();
2725
2726 arg_mode = MODE_SET_LINK;
2727 break;
2728
2729 case ARG_SET_LLMNR:
2730 arg_set_llmnr = optarg;
2731 arg_mode = MODE_SET_LINK;
2732 break;
2733
2734 case ARG_SET_MDNS:
2735 arg_set_mdns = optarg;
2736 arg_mode = MODE_SET_LINK;
2737 break;
2738
2739 case ARG_SET_PRIVATE:
2740 arg_set_dns_over_tls = optarg;
2741 arg_mode = MODE_SET_LINK;
2742 break;
2743
2744 case ARG_SET_DNSSEC:
2745 arg_set_dnssec = optarg;
2746 arg_mode = MODE_SET_LINK;
2747 break;
2748
2749 case ARG_SET_NTA:
2750 r = strv_extend(&arg_set_nta, optarg);
2751 if (r < 0)
2752 return log_oom();
2753
2754 arg_mode = MODE_SET_LINK;
2755 break;
2756
2757 case ARG_REVERT_LINK:
2758 arg_mode = MODE_REVERT_LINK;
2759 break;
2760
2761 case '?':
2762 return -EINVAL;
2763
2764 default:
2765 assert_not_reached("Unhandled option");
2766 }
2767
2768 if (arg_type == 0 && arg_class != 0)
2769 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
2770 "--class= may only be used in conjunction with --type=.");
2771
2772 if (arg_type != 0 && arg_mode == MODE_RESOLVE_SERVICE)
2773 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
2774 "--service and --type= may not be combined.");
2775
2776 if (arg_type != 0 && arg_class == 0)
2777 arg_class = DNS_CLASS_IN;
2778
2779 if (arg_class != 0 && arg_type == 0)
2780 arg_type = DNS_TYPE_A;
2781
2782 if (IN_SET(arg_mode, MODE_SET_LINK, MODE_REVERT_LINK)) {
2783
2784 if (arg_ifindex <= 0)
2785 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
2786 "--set-dns=, --set-domain=, --set-llmnr=, --set-mdns=, --set-dnsovertls=, --set-dnssec=, --set-nta= and --revert require --interface=.");
2787 }
2788
2789 return 1 /* work to do */;
2790 }
2791
2792 static int native_parse_argv(int argc, char *argv[]) {
2793 enum {
2794 ARG_VERSION = 0x100,
2795 ARG_LEGEND,
2796 ARG_CNAME,
2797 ARG_SERVICE_ADDRESS,
2798 ARG_SERVICE_TXT,
2799 ARG_RAW,
2800 ARG_SEARCH,
2801 ARG_NO_PAGER,
2802 };
2803
2804 static const struct option options[] = {
2805 { "help", no_argument, NULL, 'h' },
2806 { "version", no_argument, NULL, ARG_VERSION },
2807 { "type", required_argument, NULL, 't' },
2808 { "class", required_argument, NULL, 'c' },
2809 { "legend", required_argument, NULL, ARG_LEGEND },
2810 { "interface", required_argument, NULL, 'i' },
2811 { "protocol", required_argument, NULL, 'p' },
2812 { "cname", required_argument, NULL, ARG_CNAME },
2813 { "service-address", required_argument, NULL, ARG_SERVICE_ADDRESS },
2814 { "service-txt", required_argument, NULL, ARG_SERVICE_TXT },
2815 { "raw", optional_argument, NULL, ARG_RAW },
2816 { "search", required_argument, NULL, ARG_SEARCH },
2817 { "no-pager", no_argument, NULL, ARG_NO_PAGER },
2818 {}
2819 };
2820
2821 int c, r;
2822
2823 assert(argc >= 0);
2824 assert(argv);
2825
2826 while ((c = getopt_long(argc, argv, "h46i:t:c:p:", options, NULL)) >= 0)
2827 switch(c) {
2828
2829 case 'h':
2830 return native_help();
2831
2832 case ARG_VERSION:
2833 return version();
2834
2835 case '4':
2836 arg_family = AF_INET;
2837 break;
2838
2839 case '6':
2840 arg_family = AF_INET6;
2841 break;
2842
2843 case 'i':
2844 r = ifname_mangle(optarg);
2845 if (r < 0)
2846 return r;
2847 break;
2848
2849 case 't':
2850 if (streq(optarg, "help")) {
2851 help_dns_types();
2852 return 0;
2853 }
2854
2855 r = dns_type_from_string(optarg);
2856 if (r < 0) {
2857 log_error("Failed to parse RR record type %s", optarg);
2858 return r;
2859 }
2860 arg_type = (uint16_t) r;
2861 assert((int) arg_type == r);
2862
2863 break;
2864
2865 case 'c':
2866 if (streq(optarg, "help")) {
2867 help_dns_classes();
2868 return 0;
2869 }
2870
2871 r = dns_class_from_string(optarg);
2872 if (r < 0) {
2873 log_error("Failed to parse RR record class %s", optarg);
2874 return r;
2875 }
2876 arg_class = (uint16_t) r;
2877 assert((int) arg_class == r);
2878
2879 break;
2880
2881 case ARG_LEGEND:
2882 r = parse_boolean(optarg);
2883 if (r < 0)
2884 return log_error_errno(r, "Failed to parse --legend= argument");
2885
2886 arg_legend = r;
2887 break;
2888
2889 case 'p':
2890 if (streq(optarg, "help")) {
2891 help_protocol_types();
2892 return 0;
2893 } else if (streq(optarg, "dns"))
2894 arg_flags |= SD_RESOLVED_DNS;
2895 else if (streq(optarg, "llmnr"))
2896 arg_flags |= SD_RESOLVED_LLMNR;
2897 else if (streq(optarg, "llmnr-ipv4"))
2898 arg_flags |= SD_RESOLVED_LLMNR_IPV4;
2899 else if (streq(optarg, "llmnr-ipv6"))
2900 arg_flags |= SD_RESOLVED_LLMNR_IPV6;
2901 else if (streq(optarg, "mdns"))
2902 arg_flags |= SD_RESOLVED_MDNS;
2903 else if (streq(optarg, "mdns-ipv4"))
2904 arg_flags |= SD_RESOLVED_MDNS_IPV4;
2905 else if (streq(optarg, "mdns-ipv6"))
2906 arg_flags |= SD_RESOLVED_MDNS_IPV6;
2907 else
2908 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
2909 "Unknown protocol specifier: %s",
2910 optarg);
2911
2912 break;
2913
2914 case ARG_RAW:
2915 if (on_tty())
2916 return log_error_errno(SYNTHETIC_ERRNO(ENOTTY),
2917 "Refusing to write binary data to tty.");
2918
2919 if (optarg == NULL || streq(optarg, "payload"))
2920 arg_raw = RAW_PAYLOAD;
2921 else if (streq(optarg, "packet"))
2922 arg_raw = RAW_PACKET;
2923 else
2924 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
2925 "Unknown --raw specifier \"%s\".",
2926 optarg);
2927
2928 arg_legend = false;
2929 break;
2930
2931 case ARG_CNAME:
2932 r = parse_boolean(optarg);
2933 if (r < 0)
2934 return log_error_errno(r, "Failed to parse --cname= argument.");
2935 SET_FLAG(arg_flags, SD_RESOLVED_NO_CNAME, r == 0);
2936 break;
2937
2938 case ARG_SERVICE_ADDRESS:
2939 r = parse_boolean(optarg);
2940 if (r < 0)
2941 return log_error_errno(r, "Failed to parse --service-address= argument.");
2942 SET_FLAG(arg_flags, SD_RESOLVED_NO_ADDRESS, r == 0);
2943 break;
2944
2945 case ARG_SERVICE_TXT:
2946 r = parse_boolean(optarg);
2947 if (r < 0)
2948 return log_error_errno(r, "Failed to parse --service-txt= argument.");
2949 SET_FLAG(arg_flags, SD_RESOLVED_NO_TXT, r == 0);
2950 break;
2951
2952 case ARG_SEARCH:
2953 r = parse_boolean(optarg);
2954 if (r < 0)
2955 return log_error_errno(r, "Failed to parse --search argument.");
2956 SET_FLAG(arg_flags, SD_RESOLVED_NO_SEARCH, r == 0);
2957 break;
2958
2959 case ARG_NO_PAGER:
2960 arg_pager_flags |= PAGER_DISABLE;
2961 break;
2962
2963 case '?':
2964 return -EINVAL;
2965
2966 default:
2967 assert_not_reached("Unhandled option");
2968 }
2969
2970 if (arg_type == 0 && arg_class != 0)
2971 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
2972 "--class= may only be used in conjunction with --type=.");
2973
2974 if (arg_type != 0 && arg_class == 0)
2975 arg_class = DNS_CLASS_IN;
2976
2977 if (arg_class != 0 && arg_type == 0)
2978 arg_type = DNS_TYPE_A;
2979
2980 return 1 /* work to do */;
2981 }
2982
2983 static int native_main(int argc, char *argv[], sd_bus *bus) {
2984
2985 static const Verb verbs[] = {
2986 { "help", VERB_ANY, VERB_ANY, 0, verb_help },
2987 { "status", VERB_ANY, VERB_ANY, VERB_DEFAULT, verb_status },
2988 { "query", 2, VERB_ANY, 0, verb_query },
2989 { "service", 2, 4, 0, verb_service },
2990 { "openpgp", 2, VERB_ANY, 0, verb_openpgp },
2991 { "tlsa", 2, VERB_ANY, 0, verb_tlsa },
2992 { "statistics", VERB_ANY, 1, 0, show_statistics },
2993 { "reset-statistics", VERB_ANY, 1, 0, reset_statistics },
2994 { "flush-caches", VERB_ANY, 1, 0, flush_caches },
2995 { "reset-server-features", VERB_ANY, 1, 0, reset_server_features },
2996 { "dns", VERB_ANY, VERB_ANY, 0, verb_dns },
2997 { "domain", VERB_ANY, VERB_ANY, 0, verb_domain },
2998 { "default-route", VERB_ANY, 3, 0, verb_default_route },
2999 { "llmnr", VERB_ANY, 3, 0, verb_llmnr },
3000 { "mdns", VERB_ANY, 3, 0, verb_mdns },
3001 { "dnsovertls", VERB_ANY, 3, 0, verb_dns_over_tls },
3002 { "dnssec", VERB_ANY, 3, 0, verb_dnssec },
3003 { "nta", VERB_ANY, VERB_ANY, 0, verb_nta },
3004 { "revert", VERB_ANY, 2, 0, verb_revert_link },
3005 {}
3006 };
3007
3008 return dispatch_verb(argc, argv, verbs, bus);
3009 }
3010
3011 static int translate(const char *verb, const char *single_arg, size_t num_args, char **args, sd_bus *bus) {
3012 char **fake, **p;
3013 size_t num, i;
3014
3015 assert(verb);
3016 assert(num_args == 0 || args);
3017
3018 num = !!single_arg + num_args + 1;
3019
3020 p = fake = newa0(char *, num + 1);
3021 *p++ = (char *) verb;
3022 if (single_arg)
3023 *p++ = (char *) single_arg;
3024 for (i = 0; i < num_args; i++)
3025 *p++ = args[i];
3026
3027 optind = 0;
3028 return native_main((int) num, fake, bus);
3029 }
3030
3031 static int compat_main(int argc, char *argv[], sd_bus *bus) {
3032 int r = 0;
3033
3034 switch (arg_mode) {
3035 case MODE_RESOLVE_HOST:
3036 case MODE_RESOLVE_RECORD:
3037 return translate("query", NULL, argc - optind, argv + optind, bus);
3038
3039 case MODE_RESOLVE_SERVICE:
3040 return translate("service", NULL, argc - optind, argv + optind, bus);
3041
3042 case MODE_RESOLVE_OPENPGP:
3043 return translate("openpgp", NULL, argc - optind, argv + optind, bus);
3044
3045 case MODE_RESOLVE_TLSA:
3046 return translate("tlsa", arg_service_family, argc - optind, argv + optind, bus);
3047
3048 case MODE_STATISTICS:
3049 return translate("statistics", NULL, 0, NULL, bus);
3050
3051 case MODE_RESET_STATISTICS:
3052 return translate("reset-statistics", NULL, 0, NULL, bus);
3053
3054 case MODE_FLUSH_CACHES:
3055 return translate("flush-caches", NULL, 0, NULL, bus);
3056
3057 case MODE_RESET_SERVER_FEATURES:
3058 return translate("reset-server-features", NULL, 0, NULL, bus);
3059
3060 case MODE_STATUS:
3061 return translate("status", NULL, argc - optind, argv + optind, bus);
3062
3063 case MODE_SET_LINK:
3064 assert(arg_ifname);
3065
3066 if (arg_set_dns) {
3067 r = translate("dns", arg_ifname, strv_length(arg_set_dns), arg_set_dns, bus);
3068 if (r < 0)
3069 return r;
3070 }
3071
3072 if (arg_set_domain) {
3073 r = translate("domain", arg_ifname, strv_length(arg_set_domain), arg_set_domain, bus);
3074 if (r < 0)
3075 return r;
3076 }
3077
3078 if (arg_set_nta) {
3079 r = translate("nta", arg_ifname, strv_length(arg_set_nta), arg_set_nta, bus);
3080 if (r < 0)
3081 return r;
3082 }
3083
3084 if (arg_set_llmnr) {
3085 r = translate("llmnr", arg_ifname, 1, (char **) &arg_set_llmnr, bus);
3086 if (r < 0)
3087 return r;
3088 }
3089
3090 if (arg_set_mdns) {
3091 r = translate("mdns", arg_ifname, 1, (char **) &arg_set_mdns, bus);
3092 if (r < 0)
3093 return r;
3094 }
3095
3096 if (arg_set_dns_over_tls) {
3097 r = translate("dnsovertls", arg_ifname, 1, (char **) &arg_set_dns_over_tls, bus);
3098 if (r < 0)
3099 return r;
3100 }
3101
3102 if (arg_set_dnssec) {
3103 r = translate("dnssec", arg_ifname, 1, (char **) &arg_set_dnssec, bus);
3104 if (r < 0)
3105 return r;
3106 }
3107
3108 return r;
3109
3110 case MODE_REVERT_LINK:
3111 assert(arg_ifname);
3112
3113 return translate("revert", arg_ifname, 0, NULL, bus);
3114
3115 case _MODE_INVALID:
3116 assert_not_reached("invalid mode");
3117 }
3118
3119 return 0;
3120 }
3121
3122 static int run(int argc, char **argv) {
3123 _cleanup_(sd_bus_flush_close_unrefp) sd_bus *bus = NULL;
3124 int r;
3125
3126 setlocale(LC_ALL, "");
3127 log_show_color(true);
3128 log_parse_environment();
3129 log_open();
3130
3131 if (streq(program_invocation_short_name, "resolvconf"))
3132 r = resolvconf_parse_argv(argc, argv);
3133 else if (streq(program_invocation_short_name, "systemd-resolve"))
3134 r = compat_parse_argv(argc, argv);
3135 else
3136 r = native_parse_argv(argc, argv);
3137 if (r <= 0)
3138 return r;
3139
3140 r = sd_bus_open_system(&bus);
3141 if (r < 0)
3142 return log_error_errno(r, "sd_bus_open_system: %m");
3143
3144 if (STR_IN_SET(program_invocation_short_name, "systemd-resolve", "resolvconf"))
3145 return compat_main(argc, argv, bus);
3146
3147 return native_main(argc, argv, bus);
3148 }
3149
3150 DEFINE_MAIN_FUNCTION(run);
Unnamed repository; edit this file 'description' to name the repository.