]> git.ipfire.org Git - thirdparty/systemd.git/blob - src/resolve/resolvectl.c
projects / thirdparty / systemd.git / blob
? search:
summary | shortlog | log | commit | commitdiff | tree
blame | history | raw | HEAD
Merge pull request #10860 from keszybz/more-cleanup-2
[thirdparty/systemd.git] / src / resolve / resolvectl.c
1 /* SPDX-License-Identifier: LGPL-2.1+ */
2
3 #include <getopt.h>
4 #include <net/if.h>
5
6 #include "sd-bus.h"
7 #include "sd-netlink.h"
8
9 #include "af-list.h"
10 #include "alloc-util.h"
11 #include "bus-common-errors.h"
12 #include "bus-error.h"
13 #include "bus-util.h"
14 #include "dns-domain.h"
15 #include "escape.h"
16 #include "gcrypt-util.h"
17 #include "in-addr-util.h"
18 #include "netlink-util.h"
19 #include "pager.h"
20 #include "parse-util.h"
21 #include "pretty-print.h"
22 #include "resolvconf-compat.h"
23 #include "resolvectl.h"
24 #include "resolved-def.h"
25 #include "resolved-dns-packet.h"
26 #include "string-table.h"
27 #include "strv.h"
28 #include "terminal-util.h"
29 #include "verbs.h"
30
31 static int arg_family = AF_UNSPEC;
32 static int arg_ifindex = 0;
33 static char *arg_ifname = NULL;
34 static uint16_t arg_type = 0;
35 static uint16_t arg_class = 0;
36 static bool arg_legend = true;
37 static uint64_t arg_flags = 0;
38 static PagerFlags arg_pager_flags = 0;
39 bool arg_ifindex_permissive = false; /* If true, don't generate an error if the specified interface index doesn't exist */
40 static const char *arg_service_family = NULL;
41
42 typedef enum RawType {
43 RAW_NONE,
44 RAW_PAYLOAD,
45 RAW_PACKET,
46 } RawType;
47 static RawType arg_raw = RAW_NONE;
48
49 ExecutionMode arg_mode = MODE_RESOLVE_HOST;
50
51 char **arg_set_dns = NULL;
52 char **arg_set_domain = NULL;
53 static const char *arg_set_llmnr = NULL;
54 static const char *arg_set_mdns = NULL;
55 static const char *arg_set_dns_over_tls = NULL;
56 static const char *arg_set_dnssec = NULL;
57 static char **arg_set_nta = NULL;
58
59 typedef enum StatusMode {
60 STATUS_ALL,
61 STATUS_DNS,
62 STATUS_DOMAIN,
63 STATUS_LLMNR,
64 STATUS_MDNS,
65 STATUS_PRIVATE,
66 STATUS_DNSSEC,
67 STATUS_NTA,
68 } StatusMode;
69
70 static int parse_ifindex_and_warn(const char *s) {
71 int ifi;
72
73 assert(s);
74
75 if (parse_ifindex(s, &ifi) < 0) {
76 ifi = if_nametoindex(s);
77 if (ifi <= 0)
78 return log_error_errno(errno, "Unknown interface '%s': %m", s);
79 }
80
81 return ifi;
82 }
83
84 int ifname_mangle(const char *s, bool allow_loopback) {
85 _cleanup_free_ char *iface = NULL;
86 const char *dot;
87 int r;
88
89 assert(s);
90
91 if (arg_ifname) {
92 assert(arg_ifindex >= 0);
93
94 if (!allow_loopback && arg_ifindex == LOOPBACK_IFINDEX) {
95 log_error("Interface can't be the loopback interface (lo). Sorry.");
96 return -EINVAL;
97 }
98
99 return 1;
100 }
101
102 dot = strchr(s, '.');
103 if (dot) {
104 iface = strndup(s, dot - s);
105 if (!iface)
106 return log_oom();
107
108 log_debug("Ignoring protocol specifier '%s'.", dot + 1);
109 } else {
110 iface = strdup(s);
111 if (!iface)
112 return log_oom();
113 }
114
115 if (parse_ifindex(iface, &r) < 0) {
116 r = if_nametoindex(iface);
117 if (r <= 0) {
118 if (errno == ENODEV && arg_ifindex_permissive) {
119 log_debug("Interface '%s' not found, but -f specified, ignoring.", iface);
120 return 0; /* done */
121 }
122
123 return log_error_errno(errno, "Unknown interface '%s': %m", iface);
124 }
125 }
126
127 if (!allow_loopback && r == LOOPBACK_IFINDEX) {
128 log_error("Interface can't be the loopback interface (lo). Sorry.");
129 return -EINVAL;
130 }
131
132 arg_ifindex = r;
133 arg_ifname = TAKE_PTR(iface);
134
135 return 1;
136 }
137
138 static void print_source(uint64_t flags, usec_t rtt) {
139 char rtt_str[FORMAT_TIMESTAMP_MAX];
140
141 if (!arg_legend)
142 return;
143
144 if (flags == 0)
145 return;
146
147 fputs("\n-- Information acquired via", stdout);
148
149 if (flags != 0)
150 printf(" protocol%s%s%s%s%s",
151 flags & SD_RESOLVED_DNS ? " DNS" :"",
152 flags & SD_RESOLVED_LLMNR_IPV4 ? " LLMNR/IPv4" : "",
153 flags & SD_RESOLVED_LLMNR_IPV6 ? " LLMNR/IPv6" : "",
154 flags & SD_RESOLVED_MDNS_IPV4 ? " mDNS/IPv4" : "",
155 flags & SD_RESOLVED_MDNS_IPV6 ? " mDNS/IPv6" : "");
156
157 assert_se(format_timespan(rtt_str, sizeof(rtt_str), rtt, 100));
158
159 printf(" in %s", rtt_str);
160
161 fputc('.', stdout);
162 fputc('\n', stdout);
163
164 printf("-- Data is authenticated: %s\n", yes_no(flags & SD_RESOLVED_AUTHENTICATED));
165 }
166
167 static int resolve_host(sd_bus *bus, const char *name) {
168 _cleanup_(sd_bus_message_unrefp) sd_bus_message *req = NULL, *reply = NULL;
169 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
170 const char *canonical = NULL;
171 unsigned c = 0;
172 uint64_t flags;
173 usec_t ts;
174 int r;
175
176 assert(name);
177
178 log_debug("Resolving %s (family %s, interface %s).", name, af_to_name(arg_family) ?: "*", isempty(arg_ifname) ? "*" : arg_ifname);
179
180 r = sd_bus_message_new_method_call(
181 bus,
182 &req,
183 "org.freedesktop.resolve1",
184 "/org/freedesktop/resolve1",
185 "org.freedesktop.resolve1.Manager",
186 "ResolveHostname");
187 if (r < 0)
188 return bus_log_create_error(r);
189
190 r = sd_bus_message_append(req, "isit", arg_ifindex, name, arg_family, arg_flags);
191 if (r < 0)
192 return bus_log_create_error(r);
193
194 ts = now(CLOCK_MONOTONIC);
195
196 r = sd_bus_call(bus, req, SD_RESOLVED_QUERY_TIMEOUT_USEC, &error, &reply);
197 if (r < 0)
198 return log_error_errno(r, "%s: resolve call failed: %s", name, bus_error_message(&error, r));
199
200 ts = now(CLOCK_MONOTONIC) - ts;
201
202 r = sd_bus_message_enter_container(reply, 'a', "(iiay)");
203 if (r < 0)
204 return bus_log_parse_error(r);
205
206 while ((r = sd_bus_message_enter_container(reply, 'r', "iiay")) > 0) {
207 _cleanup_free_ char *pretty = NULL;
208 char ifname[IF_NAMESIZE] = "";
209 int ifindex, family;
210 const void *a;
211 size_t sz;
212
213 assert_cc(sizeof(int) == sizeof(int32_t));
214
215 r = sd_bus_message_read(reply, "ii", &ifindex, &family);
216 if (r < 0)
217 return bus_log_parse_error(r);
218
219 r = sd_bus_message_read_array(reply, 'y', &a, &sz);
220 if (r < 0)
221 return bus_log_parse_error(r);
222
223 r = sd_bus_message_exit_container(reply);
224 if (r < 0)
225 return bus_log_parse_error(r);
226
227 if (!IN_SET(family, AF_INET, AF_INET6)) {
228 log_debug("%s: skipping entry with family %d (%s)", name, family, af_to_name(family) ?: "unknown");
229 continue;
230 }
231
232 if (sz != FAMILY_ADDRESS_SIZE(family)) {
233 log_error("%s: systemd-resolved returned address of invalid size %zu for family %s", name, sz, af_to_name(family) ?: "unknown");
234 return -EINVAL;
235 }
236
237 if (ifindex > 0 && !if_indextoname(ifindex, ifname))
238 log_warning_errno(errno, "Failed to resolve interface name for index %i: %m", ifindex);
239
240 r = in_addr_ifindex_to_string(family, a, ifindex, &pretty);
241 if (r < 0)
242 return log_error_errno(r, "Failed to print address for %s: %m", name);
243
244 printf("%*s%s %s%s%s\n",
245 (int) strlen(name), c == 0 ? name : "", c == 0 ? ":" : " ",
246 pretty,
247 isempty(ifname) ? "" : "%", ifname);
248
249 c++;
250 }
251 if (r < 0)
252 return bus_log_parse_error(r);
253
254 r = sd_bus_message_exit_container(reply);
255 if (r < 0)
256 return bus_log_parse_error(r);
257
258 r = sd_bus_message_read(reply, "st", &canonical, &flags);
259 if (r < 0)
260 return bus_log_parse_error(r);
261
262 if (!streq(name, canonical))
263 printf("%*s%s (%s)\n",
264 (int) strlen(name), c == 0 ? name : "", c == 0 ? ":" : " ",
265 canonical);
266
267 if (c == 0) {
268 log_error("%s: no addresses found", name);
269 return -ESRCH;
270 }
271
272 print_source(flags, ts);
273
274 return 0;
275 }
276
277 static int resolve_address(sd_bus *bus, int family, const union in_addr_union *address, int ifindex) {
278 _cleanup_(sd_bus_message_unrefp) sd_bus_message *req = NULL, *reply = NULL;
279 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
280 _cleanup_free_ char *pretty = NULL;
281 char ifname[IF_NAMESIZE] = "";
282 uint64_t flags;
283 unsigned c = 0;
284 usec_t ts;
285 int r;
286
287 assert(bus);
288 assert(IN_SET(family, AF_INET, AF_INET6));
289 assert(address);
290
291 if (ifindex <= 0)
292 ifindex = arg_ifindex;
293
294 r = in_addr_ifindex_to_string(family, address, ifindex, &pretty);
295 if (r < 0)
296 return log_oom();
297
298 if (ifindex > 0 && !if_indextoname(ifindex, ifname))
299 return log_error_errno(errno, "Failed to resolve interface name for index %i: %m", ifindex);
300
301 log_debug("Resolving %s%s%s.", pretty, isempty(ifname) ? "" : "%", ifname);
302
303 r = sd_bus_message_new_method_call(
304 bus,
305 &req,
306 "org.freedesktop.resolve1",
307 "/org/freedesktop/resolve1",
308 "org.freedesktop.resolve1.Manager",
309 "ResolveAddress");
310 if (r < 0)
311 return bus_log_create_error(r);
312
313 r = sd_bus_message_append(req, "ii", ifindex, family);
314 if (r < 0)
315 return bus_log_create_error(r);
316
317 r = sd_bus_message_append_array(req, 'y', address, FAMILY_ADDRESS_SIZE(family));
318 if (r < 0)
319 return bus_log_create_error(r);
320
321 r = sd_bus_message_append(req, "t", arg_flags);
322 if (r < 0)
323 return bus_log_create_error(r);
324
325 ts = now(CLOCK_MONOTONIC);
326
327 r = sd_bus_call(bus, req, SD_RESOLVED_QUERY_TIMEOUT_USEC, &error, &reply);
328 if (r < 0)
329 return log_error_errno(r, "%s: resolve call failed: %s", pretty, bus_error_message(&error, r));
330
331 ts = now(CLOCK_MONOTONIC) - ts;
332
333 r = sd_bus_message_enter_container(reply, 'a', "(is)");
334 if (r < 0)
335 return bus_log_create_error(r);
336
337 while ((r = sd_bus_message_enter_container(reply, 'r', "is")) > 0) {
338 const char *n;
339
340 assert_cc(sizeof(int) == sizeof(int32_t));
341
342 r = sd_bus_message_read(reply, "is", &ifindex, &n);
343 if (r < 0)
344 return r;
345
346 r = sd_bus_message_exit_container(reply);
347 if (r < 0)
348 return r;
349
350 ifname[0] = 0;
351 if (ifindex > 0 && !if_indextoname(ifindex, ifname))
352 log_warning_errno(errno, "Failed to resolve interface name for index %i: %m", ifindex);
353
354 printf("%*s%*s%*s%s %s\n",
355 (int) strlen(pretty), c == 0 ? pretty : "",
356 isempty(ifname) ? 0 : 1, c > 0 || isempty(ifname) ? "" : "%",
357 (int) strlen(ifname), c == 0 ? ifname : "",
358 c == 0 ? ":" : " ",
359 n);
360
361 c++;
362 }
363 if (r < 0)
364 return bus_log_parse_error(r);
365
366 r = sd_bus_message_exit_container(reply);
367 if (r < 0)
368 return bus_log_parse_error(r);
369
370 r = sd_bus_message_read(reply, "t", &flags);
371 if (r < 0)
372 return bus_log_parse_error(r);
373
374 if (c == 0) {
375 log_error("%s: no names found", pretty);
376 return -ESRCH;
377 }
378
379 print_source(flags, ts);
380
381 return 0;
382 }
383
384 static int output_rr_packet(const void *d, size_t l, int ifindex) {
385 _cleanup_(dns_resource_record_unrefp) DnsResourceRecord *rr = NULL;
386 _cleanup_(dns_packet_unrefp) DnsPacket *p = NULL;
387 int r;
388 char ifname[IF_NAMESIZE] = "";
389
390 r = dns_packet_new(&p, DNS_PROTOCOL_DNS, 0, DNS_PACKET_SIZE_MAX);
391 if (r < 0)
392 return log_oom();
393
394 p->refuse_compression = true;
395
396 r = dns_packet_append_blob(p, d, l, NULL);
397 if (r < 0)
398 return log_oom();
399
400 r = dns_packet_read_rr(p, &rr, NULL, NULL);
401 if (r < 0)
402 return log_error_errno(r, "Failed to parse RR: %m");
403
404 if (arg_raw == RAW_PAYLOAD) {
405 void *data;
406 ssize_t k;
407
408 k = dns_resource_record_payload(rr, &data);
409 if (k < 0)
410 return log_error_errno(k, "Cannot dump RR: %m");
411 fwrite(data, 1, k, stdout);
412 } else {
413 const char *s;
414
415 s = dns_resource_record_to_string(rr);
416 if (!s)
417 return log_oom();
418
419 if (ifindex > 0 && !if_indextoname(ifindex, ifname))
420 log_warning_errno(errno, "Failed to resolve interface name for index %i: %m", ifindex);
421
422 printf("%s%s%s\n", s, isempty(ifname) ? "" : " # interface ", ifname);
423 }
424
425 return 0;
426 }
427
428 static int resolve_record(sd_bus *bus, const char *name, uint16_t class, uint16_t type, bool warn_missing) {
429 _cleanup_(sd_bus_message_unrefp) sd_bus_message *req = NULL, *reply = NULL;
430 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
431 unsigned n = 0;
432 uint64_t flags;
433 int r;
434 usec_t ts;
435 bool needs_authentication = false;
436
437 assert(name);
438
439 log_debug("Resolving %s %s %s (interface %s).", name, dns_class_to_string(class), dns_type_to_string(type), isempty(arg_ifname) ? "*" : arg_ifname);
440
441 r = sd_bus_message_new_method_call(
442 bus,
443 &req,
444 "org.freedesktop.resolve1",
445 "/org/freedesktop/resolve1",
446 "org.freedesktop.resolve1.Manager",
447 "ResolveRecord");
448 if (r < 0)
449 return bus_log_create_error(r);
450
451 r = sd_bus_message_append(req, "isqqt", arg_ifindex, name, class, type, arg_flags);
452 if (r < 0)
453 return bus_log_create_error(r);
454
455 ts = now(CLOCK_MONOTONIC);
456
457 r = sd_bus_call(bus, req, SD_RESOLVED_QUERY_TIMEOUT_USEC, &error, &reply);
458 if (r < 0) {
459 if (warn_missing || r != -ENXIO)
460 log_error("%s: resolve call failed: %s", name, bus_error_message(&error, r));
461 return r;
462 }
463
464 ts = now(CLOCK_MONOTONIC) - ts;
465
466 r = sd_bus_message_enter_container(reply, 'a', "(iqqay)");
467 if (r < 0)
468 return bus_log_parse_error(r);
469
470 while ((r = sd_bus_message_enter_container(reply, 'r', "iqqay")) > 0) {
471 uint16_t c, t;
472 int ifindex;
473 const void *d;
474 size_t l;
475
476 assert_cc(sizeof(int) == sizeof(int32_t));
477
478 r = sd_bus_message_read(reply, "iqq", &ifindex, &c, &t);
479 if (r < 0)
480 return bus_log_parse_error(r);
481
482 r = sd_bus_message_read_array(reply, 'y', &d, &l);
483 if (r < 0)
484 return bus_log_parse_error(r);
485
486 r = sd_bus_message_exit_container(reply);
487 if (r < 0)
488 return bus_log_parse_error(r);
489
490 if (arg_raw == RAW_PACKET) {
491 uint64_t u64 = htole64(l);
492
493 fwrite(&u64, sizeof(u64), 1, stdout);
494 fwrite(d, 1, l, stdout);
495 } else {
496 r = output_rr_packet(d, l, ifindex);
497 if (r < 0)
498 return r;
499 }
500
501 if (dns_type_needs_authentication(t))
502 needs_authentication = true;
503
504 n++;
505 }
506 if (r < 0)
507 return bus_log_parse_error(r);
508
509 r = sd_bus_message_exit_container(reply);
510 if (r < 0)
511 return bus_log_parse_error(r);
512
513 r = sd_bus_message_read(reply, "t", &flags);
514 if (r < 0)
515 return bus_log_parse_error(r);
516
517 if (n == 0) {
518 if (warn_missing)
519 log_error("%s: no records found", name);
520 return -ESRCH;
521 }
522
523 print_source(flags, ts);
524
525 if ((flags & SD_RESOLVED_AUTHENTICATED) == 0 && needs_authentication) {
526 fflush(stdout);
527
528 fprintf(stderr, "\n%s"
529 "WARNING: The resources shown contain cryptographic key data which could not be\n"
530 " authenticated. It is not suitable to authenticate any communication.\n"
531 " This is usually indication that DNSSEC authentication was not enabled\n"
532 " or is not available for the selected protocol or DNS servers.%s\n",
533 ansi_highlight_red(),
534 ansi_normal());
535 }
536
537 return 0;
538 }
539
540 static int resolve_rfc4501(sd_bus *bus, const char *name) {
541 uint16_t type = 0, class = 0;
542 const char *p, *q, *n;
543 int r;
544
545 assert(bus);
546 assert(name);
547 assert(startswith(name, "dns:"));
548
549 /* Parse RFC 4501 dns: URIs */
550
551 p = name + 4;
552
553 if (p[0] == '/') {
554 const char *e;
555
556 if (p[1] != '/')
557 goto invalid;
558
559 e = strchr(p + 2, '/');
560 if (!e)
561 goto invalid;
562
563 if (e != p + 2)
564 log_warning("DNS authority specification not supported; ignoring specified authority.");
565
566 p = e + 1;
567 }
568
569 q = strchr(p, '?');
570 if (q) {
571 n = strndupa(p, q - p);
572 q++;
573
574 for (;;) {
575 const char *f;
576
577 f = startswith_no_case(q, "class=");
578 if (f) {
579 _cleanup_free_ char *t = NULL;
580 const char *e;
581
582 if (class != 0) {
583 log_error("DNS class specified twice.");
584 return -EINVAL;
585 }
586
587 e = strchrnul(f, ';');
588 t = strndup(f, e - f);
589 if (!t)
590 return log_oom();
591
592 r = dns_class_from_string(t);
593 if (r < 0) {
594 log_error("Unknown DNS class %s.", t);
595 return -EINVAL;
596 }
597
598 class = r;
599
600 if (*e == ';') {
601 q = e + 1;
602 continue;
603 }
604
605 break;
606 }
607
608 f = startswith_no_case(q, "type=");
609 if (f) {
610 _cleanup_free_ char *t = NULL;
611 const char *e;
612
613 if (type != 0) {
614 log_error("DNS type specified twice.");
615 return -EINVAL;
616 }
617
618 e = strchrnul(f, ';');
619 t = strndup(f, e - f);
620 if (!t)
621 return log_oom();
622
623 r = dns_type_from_string(t);
624 if (r < 0) {
625 log_error("Unknown DNS type %s.", t);
626 return -EINVAL;
627 }
628
629 type = r;
630
631 if (*e == ';') {
632 q = e + 1;
633 continue;
634 }
635
636 break;
637 }
638
639 goto invalid;
640 }
641 } else
642 n = p;
643
644 if (class == 0)
645 class = arg_class ?: DNS_CLASS_IN;
646 if (type == 0)
647 type = arg_type ?: DNS_TYPE_A;
648
649 return resolve_record(bus, n, class, type, true);
650
651 invalid:
652 log_error("Invalid DNS URI: %s", name);
653 return -EINVAL;
654 }
655
656 static int verb_query(int argc, char **argv, void *userdata) {
657 sd_bus *bus = userdata;
658 char **p;
659 int q, r = 0;
660
661 if (arg_type != 0)
662 STRV_FOREACH(p, argv + 1) {
663 q = resolve_record(bus, *p, arg_class, arg_type, true);
664 if (q < 0)
665 r = q;
666 }
667
668 else
669 STRV_FOREACH(p, argv + 1) {
670 if (startswith(*p, "dns:"))
671 q = resolve_rfc4501(bus, *p);
672 else {
673 int family, ifindex;
674 union in_addr_union a;
675
676 q = in_addr_ifindex_from_string_auto(*p, &family, &a, &ifindex);
677 if (q >= 0)
678 q = resolve_address(bus, family, &a, ifindex);
679 else
680 q = resolve_host(bus, *p);
681 }
682 if (q < 0)
683 r = q;
684 }
685
686 return r;
687 }
688
689 static int resolve_service(sd_bus *bus, const char *name, const char *type, const char *domain) {
690 const char *canonical_name, *canonical_type, *canonical_domain;
691 _cleanup_(sd_bus_message_unrefp) sd_bus_message *req = NULL, *reply = NULL;
692 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
693 size_t indent, sz;
694 uint64_t flags;
695 const char *p;
696 unsigned c;
697 usec_t ts;
698 int r;
699
700 assert(bus);
701 assert(domain);
702
703 name = empty_to_null(name);
704 type = empty_to_null(type);
705
706 if (name)
707 log_debug("Resolving service \"%s\" of type %s in %s (family %s, interface %s).", name, type, domain, af_to_name(arg_family) ?: "*", isempty(arg_ifname) ? "*" : arg_ifname);
708 else if (type)
709 log_debug("Resolving service type %s of %s (family %s, interface %s).", type, domain, af_to_name(arg_family) ?: "*", isempty(arg_ifname) ? "*" : arg_ifname);
710 else
711 log_debug("Resolving service type %s (family %s, interface %s).", domain, af_to_name(arg_family) ?: "*", isempty(arg_ifname) ? "*" : arg_ifname);
712
713 r = sd_bus_message_new_method_call(
714 bus,
715 &req,
716 "org.freedesktop.resolve1",
717 "/org/freedesktop/resolve1",
718 "org.freedesktop.resolve1.Manager",
719 "ResolveService");
720 if (r < 0)
721 return bus_log_create_error(r);
722
723 r = sd_bus_message_append(req, "isssit", arg_ifindex, name, type, domain, arg_family, arg_flags);
724 if (r < 0)
725 return bus_log_create_error(r);
726
727 ts = now(CLOCK_MONOTONIC);
728
729 r = sd_bus_call(bus, req, SD_RESOLVED_QUERY_TIMEOUT_USEC, &error, &reply);
730 if (r < 0)
731 return log_error_errno(r, "Resolve call failed: %s", bus_error_message(&error, r));
732
733 ts = now(CLOCK_MONOTONIC) - ts;
734
735 r = sd_bus_message_enter_container(reply, 'a', "(qqqsa(iiay)s)");
736 if (r < 0)
737 return bus_log_parse_error(r);
738
739 indent =
740 (name ? strlen(name) + 1 : 0) +
741 (type ? strlen(type) + 1 : 0) +
742 strlen(domain) + 2;
743
744 c = 0;
745 while ((r = sd_bus_message_enter_container(reply, 'r', "qqqsa(iiay)s")) > 0) {
746 uint16_t priority, weight, port;
747 const char *hostname, *canonical;
748
749 r = sd_bus_message_read(reply, "qqqs", &priority, &weight, &port, &hostname);
750 if (r < 0)
751 return bus_log_parse_error(r);
752
753 if (name)
754 printf("%*s%s", (int) strlen(name), c == 0 ? name : "", c == 0 ? "/" : " ");
755 if (type)
756 printf("%*s%s", (int) strlen(type), c == 0 ? type : "", c == 0 ? "/" : " ");
757
758 printf("%*s%s %s:%u [priority=%u, weight=%u]\n",
759 (int) strlen(domain), c == 0 ? domain : "",
760 c == 0 ? ":" : " ",
761 hostname, port,
762 priority, weight);
763
764 r = sd_bus_message_enter_container(reply, 'a', "(iiay)");
765 if (r < 0)
766 return bus_log_parse_error(r);
767
768 while ((r = sd_bus_message_enter_container(reply, 'r', "iiay")) > 0) {
769 _cleanup_free_ char *pretty = NULL;
770 char ifname[IF_NAMESIZE] = "";
771 int ifindex, family;
772 const void *a;
773
774 assert_cc(sizeof(int) == sizeof(int32_t));
775
776 r = sd_bus_message_read(reply, "ii", &ifindex, &family);
777 if (r < 0)
778 return bus_log_parse_error(r);
779
780 r = sd_bus_message_read_array(reply, 'y', &a, &sz);
781 if (r < 0)
782 return bus_log_parse_error(r);
783
784 r = sd_bus_message_exit_container(reply);
785 if (r < 0)
786 return bus_log_parse_error(r);
787
788 if (!IN_SET(family, AF_INET, AF_INET6)) {
789 log_debug("%s: skipping entry with family %d (%s)", name, family, af_to_name(family) ?: "unknown");
790 continue;
791 }
792
793 if (sz != FAMILY_ADDRESS_SIZE(family)) {
794 log_error("%s: systemd-resolved returned address of invalid size %zu for family %s", name, sz, af_to_name(family) ?: "unknown");
795 return -EINVAL;
796 }
797
798 if (ifindex > 0 && !if_indextoname(ifindex, ifname))
799 log_warning_errno(errno, "Failed to resolve interface name for index %i: %m", ifindex);
800
801 r = in_addr_to_string(family, a, &pretty);
802 if (r < 0)
803 return log_error_errno(r, "Failed to print address for %s: %m", name);
804
805 printf("%*s%s%s%s\n", (int) indent, "", pretty, isempty(ifname) ? "" : "%s", ifname);
806 }
807 if (r < 0)
808 return bus_log_parse_error(r);
809
810 r = sd_bus_message_exit_container(reply);
811 if (r < 0)
812 return bus_log_parse_error(r);
813
814 r = sd_bus_message_read(reply, "s", &canonical);
815 if (r < 0)
816 return bus_log_parse_error(r);
817
818 if (!streq(hostname, canonical))
819 printf("%*s(%s)\n", (int) indent, "", canonical);
820
821 r = sd_bus_message_exit_container(reply);
822 if (r < 0)
823 return bus_log_parse_error(r);
824
825 c++;
826 }
827 if (r < 0)
828 return bus_log_parse_error(r);
829
830 r = sd_bus_message_exit_container(reply);
831 if (r < 0)
832 return bus_log_parse_error(r);
833
834 r = sd_bus_message_enter_container(reply, 'a', "ay");
835 if (r < 0)
836 return bus_log_parse_error(r);
837
838 while ((r = sd_bus_message_read_array(reply, 'y', (const void**) &p, &sz)) > 0) {
839 _cleanup_free_ char *escaped = NULL;
840
841 escaped = cescape_length(p, sz);
842 if (!escaped)
843 return log_oom();
844
845 printf("%*s%s\n", (int) indent, "", escaped);
846 }
847 if (r < 0)
848 return bus_log_parse_error(r);
849
850 r = sd_bus_message_exit_container(reply);
851 if (r < 0)
852 return bus_log_parse_error(r);
853
854 r = sd_bus_message_read(reply, "ssst", &canonical_name, &canonical_type, &canonical_domain, &flags);
855 if (r < 0)
856 return bus_log_parse_error(r);
857
858 canonical_name = empty_to_null(canonical_name);
859 canonical_type = empty_to_null(canonical_type);
860
861 if (!streq_ptr(name, canonical_name) ||
862 !streq_ptr(type, canonical_type) ||
863 !streq_ptr(domain, canonical_domain)) {
864
865 printf("%*s(", (int) indent, "");
866
867 if (canonical_name)
868 printf("%s/", canonical_name);
869 if (canonical_type)
870 printf("%s/", canonical_type);
871
872 printf("%s)\n", canonical_domain);
873 }
874
875 print_source(flags, ts);
876
877 return 0;
878 }
879
880 static int verb_service(int argc, char **argv, void *userdata) {
881 sd_bus *bus = userdata;
882
883 if (argc == 2)
884 return resolve_service(bus, NULL, NULL, argv[1]);
885 else if (argc == 3)
886 return resolve_service(bus, NULL, argv[1], argv[2]);
887 else
888 return resolve_service(bus, argv[1], argv[2], argv[3]);
889 }
890
891 static int resolve_openpgp(sd_bus *bus, const char *address) {
892 const char *domain, *full;
893 int r;
894 _cleanup_free_ char *hashed = NULL;
895
896 assert(bus);
897 assert(address);
898
899 domain = strrchr(address, '@');
900 if (!domain) {
901 log_error("Address does not contain '@': \"%s\"", address);
902 return -EINVAL;
903 } else if (domain == address || domain[1] == '\0') {
904 log_error("Address starts or ends with '@': \"%s\"", address);
905 return -EINVAL;
906 }
907 domain++;
908
909 r = string_hashsum_sha256(address, domain - 1 - address, &hashed);
910 if (r < 0)
911 return log_error_errno(r, "Hashing failed: %m");
912
913 strshorten(hashed, 56);
914
915 full = strjoina(hashed, "._openpgpkey.", domain);
916 log_debug("Looking up \"%s\".", full);
917
918 r = resolve_record(bus, full,
919 arg_class ?: DNS_CLASS_IN,
920 arg_type ?: DNS_TYPE_OPENPGPKEY, false);
921
922 if (IN_SET(r, -ENXIO, -ESRCH)) { /* NXDOMAIN or NODATA? */
923 hashed = mfree(hashed);
924 r = string_hashsum_sha224(address, domain - 1 - address, &hashed);
925 if (r < 0)
926 return log_error_errno(r, "Hashing failed: %m");
927
928 full = strjoina(hashed, "._openpgpkey.", domain);
929 log_debug("Looking up \"%s\".", full);
930
931 return resolve_record(bus, full,
932 arg_class ?: DNS_CLASS_IN,
933 arg_type ?: DNS_TYPE_OPENPGPKEY, true);
934 }
935
936 return r;
937 }
938
939 static int verb_openpgp(int argc, char **argv, void *userdata) {
940 sd_bus *bus = userdata;
941 char **p;
942 int q, r = 0;
943
944 STRV_FOREACH(p, argv + 1) {
945 q = resolve_openpgp(bus, *p);
946 if (q < 0)
947 r = q;
948 }
949
950 return r;
951 }
952
953 static int resolve_tlsa(sd_bus *bus, const char *family, const char *address) {
954 const char *port;
955 uint16_t port_num = 443;
956 _cleanup_free_ char *full = NULL;
957 int r;
958
959 assert(bus);
960 assert(address);
961
962 port = strrchr(address, ':');
963 if (port) {
964 r = parse_ip_port(port + 1, &port_num);
965 if (r < 0)
966 return log_error_errno(r, "Invalid port \"%s\".", port + 1);
967
968 address = strndupa(address, port - address);
969 }
970
971 r = asprintf(&full, "_%u._%s.%s",
972 port_num,
973 family,
974 address);
975 if (r < 0)
976 return log_oom();
977
978 log_debug("Looking up \"%s\".", full);
979
980 return resolve_record(bus, full,
981 arg_class ?: DNS_CLASS_IN,
982 arg_type ?: DNS_TYPE_TLSA, true);
983 }
984
985 static bool service_family_is_valid(const char *s) {
986 return STR_IN_SET(s, "tcp", "udp", "sctp");
987 }
988
989 static int verb_tlsa(int argc, char **argv, void *userdata) {
990 sd_bus *bus = userdata;
991 char **p, **args = argv + 1;
992 const char *family = "tcp";
993 int q, r = 0;
994
995 if (service_family_is_valid(argv[1])) {
996 family = argv[1];
997 args++;
998 }
999
1000 STRV_FOREACH(p, args) {
1001 q = resolve_tlsa(bus, family, *p);
1002 if (q < 0)
1003 r = q;
1004 }
1005
1006 return r;
1007 }
1008
1009 static int show_statistics(int argc, char **argv, void *userdata) {
1010 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1011 _cleanup_(sd_bus_message_unrefp) sd_bus_message *reply = NULL;
1012 sd_bus *bus = userdata;
1013 uint64_t n_current_transactions, n_total_transactions,
1014 cache_size, n_cache_hit, n_cache_miss,
1015 n_dnssec_secure, n_dnssec_insecure, n_dnssec_bogus, n_dnssec_indeterminate;
1016 int r, dnssec_supported;
1017
1018 assert(bus);
1019
1020 r = sd_bus_get_property_trivial(bus,
1021 "org.freedesktop.resolve1",
1022 "/org/freedesktop/resolve1",
1023 "org.freedesktop.resolve1.Manager",
1024 "DNSSECSupported",
1025 &error,
1026 'b',
1027 &dnssec_supported);
1028 if (r < 0)
1029 return log_error_errno(r, "Failed to get DNSSEC supported state: %s", bus_error_message(&error, r));
1030
1031 printf("DNSSEC supported by current servers: %s%s%s\n\n",
1032 ansi_highlight(),
1033 yes_no(dnssec_supported),
1034 ansi_normal());
1035
1036 r = sd_bus_get_property(bus,
1037 "org.freedesktop.resolve1",
1038 "/org/freedesktop/resolve1",
1039 "org.freedesktop.resolve1.Manager",
1040 "TransactionStatistics",
1041 &error,
1042 &reply,
1043 "(tt)");
1044 if (r < 0)
1045 return log_error_errno(r, "Failed to get transaction statistics: %s", bus_error_message(&error, r));
1046
1047 r = sd_bus_message_read(reply, "(tt)",
1048 &n_current_transactions,
1049 &n_total_transactions);
1050 if (r < 0)
1051 return bus_log_parse_error(r);
1052
1053 printf("%sTransactions%s\n"
1054 "Current Transactions: %" PRIu64 "\n"
1055 " Total Transactions: %" PRIu64 "\n",
1056 ansi_highlight(),
1057 ansi_normal(),
1058 n_current_transactions,
1059 n_total_transactions);
1060
1061 reply = sd_bus_message_unref(reply);
1062
1063 r = sd_bus_get_property(bus,
1064 "org.freedesktop.resolve1",
1065 "/org/freedesktop/resolve1",
1066 "org.freedesktop.resolve1.Manager",
1067 "CacheStatistics",
1068 &error,
1069 &reply,
1070 "(ttt)");
1071 if (r < 0)
1072 return log_error_errno(r, "Failed to get cache statistics: %s", bus_error_message(&error, r));
1073
1074 r = sd_bus_message_read(reply, "(ttt)",
1075 &cache_size,
1076 &n_cache_hit,
1077 &n_cache_miss);
1078 if (r < 0)
1079 return bus_log_parse_error(r);
1080
1081 printf("\n%sCache%s\n"
1082 " Current Cache Size: %" PRIu64 "\n"
1083 " Cache Hits: %" PRIu64 "\n"
1084 " Cache Misses: %" PRIu64 "\n",
1085 ansi_highlight(),
1086 ansi_normal(),
1087 cache_size,
1088 n_cache_hit,
1089 n_cache_miss);
1090
1091 reply = sd_bus_message_unref(reply);
1092
1093 r = sd_bus_get_property(bus,
1094 "org.freedesktop.resolve1",
1095 "/org/freedesktop/resolve1",
1096 "org.freedesktop.resolve1.Manager",
1097 "DNSSECStatistics",
1098 &error,
1099 &reply,
1100 "(tttt)");
1101 if (r < 0)
1102 return log_error_errno(r, "Failed to get DNSSEC statistics: %s", bus_error_message(&error, r));
1103
1104 r = sd_bus_message_read(reply, "(tttt)",
1105 &n_dnssec_secure,
1106 &n_dnssec_insecure,
1107 &n_dnssec_bogus,
1108 &n_dnssec_indeterminate);
1109 if (r < 0)
1110 return bus_log_parse_error(r);
1111
1112 printf("\n%sDNSSEC Verdicts%s\n"
1113 " Secure: %" PRIu64 "\n"
1114 " Insecure: %" PRIu64 "\n"
1115 " Bogus: %" PRIu64 "\n"
1116 " Indeterminate: %" PRIu64 "\n",
1117 ansi_highlight(),
1118 ansi_normal(),
1119 n_dnssec_secure,
1120 n_dnssec_insecure,
1121 n_dnssec_bogus,
1122 n_dnssec_indeterminate);
1123
1124 return 0;
1125 }
1126
1127 static int reset_statistics(int argc, char **argv, void *userdata) {
1128 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1129 sd_bus *bus = userdata;
1130 int r;
1131
1132 r = sd_bus_call_method(bus,
1133 "org.freedesktop.resolve1",
1134 "/org/freedesktop/resolve1",
1135 "org.freedesktop.resolve1.Manager",
1136 "ResetStatistics",
1137 &error,
1138 NULL,
1139 NULL);
1140 if (r < 0)
1141 return log_error_errno(r, "Failed to reset statistics: %s", bus_error_message(&error, r));
1142
1143 return 0;
1144 }
1145
1146 static int flush_caches(int argc, char **argv, void *userdata) {
1147 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1148 sd_bus *bus = userdata;
1149 int r;
1150
1151 r = sd_bus_call_method(bus,
1152 "org.freedesktop.resolve1",
1153 "/org/freedesktop/resolve1",
1154 "org.freedesktop.resolve1.Manager",
1155 "FlushCaches",
1156 &error,
1157 NULL,
1158 NULL);
1159 if (r < 0)
1160 return log_error_errno(r, "Failed to flush caches: %s", bus_error_message(&error, r));
1161
1162 return 0;
1163 }
1164
1165 static int reset_server_features(int argc, char **argv, void *userdata) {
1166 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1167 sd_bus *bus = userdata;
1168 int r;
1169
1170 r = sd_bus_call_method(bus,
1171 "org.freedesktop.resolve1",
1172 "/org/freedesktop/resolve1",
1173 "org.freedesktop.resolve1.Manager",
1174 "ResetServerFeatures",
1175 &error,
1176 NULL,
1177 NULL);
1178 if (r < 0)
1179 return log_error_errno(r, "Failed to reset server features: %s", bus_error_message(&error, r));
1180
1181 return 0;
1182 }
1183
1184 static int read_dns_server_one(sd_bus_message *m, bool with_ifindex, char **ret) {
1185 _cleanup_free_ char *pretty = NULL;
1186 int ifindex, family, r;
1187 const void *a;
1188 size_t sz;
1189
1190 assert(m);
1191 assert(ret);
1192
1193 r = sd_bus_message_enter_container(m, 'r', with_ifindex ? "iiay" : "iay");
1194 if (r <= 0)
1195 return r;
1196
1197 if (with_ifindex) {
1198 r = sd_bus_message_read(m, "i", &ifindex);
1199 if (r < 0)
1200 return r;
1201 }
1202
1203 r = sd_bus_message_read(m, "i", &family);
1204 if (r < 0)
1205 return r;
1206
1207 r = sd_bus_message_read_array(m, 'y', &a, &sz);
1208 if (r < 0)
1209 return r;
1210
1211 r = sd_bus_message_exit_container(m);
1212 if (r < 0)
1213 return r;
1214
1215 if (with_ifindex && ifindex != 0) {
1216 /* only show the global ones here */
1217 *ret = NULL;
1218 return 1;
1219 }
1220
1221 if (!IN_SET(family, AF_INET, AF_INET6)) {
1222 log_debug("Unexpected family, ignoring: %i", family);
1223
1224 *ret = NULL;
1225 return 1;
1226 }
1227
1228 if (sz != FAMILY_ADDRESS_SIZE(family)) {
1229 log_debug("Address size mismatch, ignoring.");
1230
1231 *ret = NULL;
1232 return 1;
1233 }
1234
1235 r = in_addr_to_string(family, a, &pretty);
1236 if (r < 0)
1237 return r;
1238
1239 *ret = TAKE_PTR(pretty);
1240
1241 return 1;
1242 }
1243
1244 static int map_link_dns_servers(sd_bus *bus, const char *member, sd_bus_message *m, sd_bus_error *error, void *userdata) {
1245 char ***l = userdata;
1246 int r;
1247
1248 assert(bus);
1249 assert(member);
1250 assert(m);
1251 assert(l);
1252
1253 r = sd_bus_message_enter_container(m, 'a', "(iay)");
1254 if (r < 0)
1255 return r;
1256
1257 for (;;) {
1258 char *pretty = NULL;
1259
1260 r = read_dns_server_one(m, false, &pretty);
1261 if (r < 0)
1262 return r;
1263 if (r == 0)
1264 break;
1265
1266 if (isempty(pretty))
1267 continue;
1268
1269 r = strv_consume(l, pretty);
1270 if (r < 0)
1271 return r;
1272 }
1273
1274 r = sd_bus_message_exit_container(m);
1275 if (r < 0)
1276 return r;
1277
1278 return 0;
1279 }
1280
1281 static int map_link_current_dns_server(sd_bus *bus, const char *member, sd_bus_message *m, sd_bus_error *error, void *userdata) {
1282 assert(m);
1283 assert(userdata);
1284
1285 return read_dns_server_one(m, false, userdata);
1286 }
1287
1288 static int read_domain_one(sd_bus_message *m, bool with_ifindex, char **ret) {
1289 _cleanup_free_ char *str = NULL;
1290 int ifindex, route_only, r;
1291 const char *domain;
1292
1293 assert(m);
1294 assert(ret);
1295
1296 if (with_ifindex)
1297 r = sd_bus_message_read(m, "(isb)", &ifindex, &domain, &route_only);
1298 else
1299 r = sd_bus_message_read(m, "(sb)", &domain, &route_only);
1300 if (r <= 0)
1301 return r;
1302
1303 if (with_ifindex && ifindex != 0) {
1304 /* only show the global ones here */
1305 *ret = NULL;
1306 return 1;
1307 }
1308
1309 if (route_only)
1310 str = strappend("~", domain);
1311 else
1312 str = strdup(domain);
1313 if (!str)
1314 return -ENOMEM;
1315
1316 *ret = TAKE_PTR(str);
1317
1318 return 1;
1319 }
1320
1321 static int map_link_domains(sd_bus *bus, const char *member, sd_bus_message *m, sd_bus_error *error, void *userdata) {
1322 char ***l = userdata;
1323 int r;
1324
1325 assert(bus);
1326 assert(member);
1327 assert(m);
1328 assert(l);
1329
1330 r = sd_bus_message_enter_container(m, 'a', "(sb)");
1331 if (r < 0)
1332 return r;
1333
1334 for (;;) {
1335 char *pretty = NULL;
1336
1337 r = read_domain_one(m, false, &pretty);
1338 if (r < 0)
1339 return r;
1340 if (r == 0)
1341 break;
1342
1343 if (isempty(pretty))
1344 continue;
1345
1346 r = strv_consume(l, pretty);
1347 if (r < 0)
1348 return r;
1349 }
1350
1351 r = sd_bus_message_exit_container(m);
1352 if (r < 0)
1353 return r;
1354
1355 return 0;
1356 }
1357
1358 static int status_print_strv_ifindex(int ifindex, const char *ifname, char **p) {
1359 char **i;
1360
1361 printf("%sLink %i (%s)%s:",
1362 ansi_highlight(), ifindex, ifname, ansi_normal());
1363
1364 STRV_FOREACH(i, p)
1365 printf(" %s", *i);
1366
1367 printf("\n");
1368
1369 return 0;
1370 }
1371
1372 struct link_info {
1373 uint64_t scopes_mask;
1374 const char *llmnr;
1375 const char *mdns;
1376 const char *dns_over_tls;
1377 const char *dnssec;
1378 char *current_dns;
1379 char **dns;
1380 char **domains;
1381 char **ntas;
1382 bool dnssec_supported;
1383 };
1384
1385 static void link_info_clear(struct link_info *p) {
1386 free(p->current_dns);
1387 strv_free(p->dns);
1388 strv_free(p->domains);
1389 strv_free(p->ntas);
1390 }
1391
1392 static int status_ifindex(sd_bus *bus, int ifindex, const char *name, StatusMode mode, bool *empty_line) {
1393 static const struct bus_properties_map property_map[] = {
1394 { "ScopesMask", "t", NULL, offsetof(struct link_info, scopes_mask) },
1395 { "DNS", "a(iay)", map_link_dns_servers, offsetof(struct link_info, dns) },
1396 { "CurrentDNSServer", "(iay)", map_link_current_dns_server, offsetof(struct link_info, current_dns) },
1397 { "Domains", "a(sb)", map_link_domains, offsetof(struct link_info, domains) },
1398 { "LLMNR", "s", NULL, offsetof(struct link_info, llmnr) },
1399 { "MulticastDNS", "s", NULL, offsetof(struct link_info, mdns) },
1400 { "DNSOverTLS", "s", NULL, offsetof(struct link_info, dns_over_tls) },
1401 { "DNSSEC", "s", NULL, offsetof(struct link_info, dnssec) },
1402 { "DNSSECNegativeTrustAnchors", "as", NULL, offsetof(struct link_info, ntas) },
1403 { "DNSSECSupported", "b", NULL, offsetof(struct link_info, dnssec_supported) },
1404 {}
1405 };
1406 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1407 _cleanup_(sd_bus_message_unrefp) sd_bus_message *m = NULL;
1408 _cleanup_(link_info_clear) struct link_info link_info = {};
1409 _cleanup_free_ char *ifi = NULL, *p = NULL;
1410 char ifname[IF_NAMESIZE] = "";
1411 char **i;
1412 int r;
1413
1414 assert(bus);
1415 assert(ifindex > 0);
1416
1417 if (!name) {
1418 if (!if_indextoname(ifindex, ifname))
1419 return log_error_errno(errno, "Failed to resolve interface name for %i: %m", ifindex);
1420
1421 name = ifname;
1422 }
1423
1424 if (asprintf(&ifi, "%i", ifindex) < 0)
1425 return log_oom();
1426
1427 r = sd_bus_path_encode("/org/freedesktop/resolve1/link", ifi, &p);
1428 if (r < 0)
1429 return log_oom();
1430
1431 r = bus_map_all_properties(bus,
1432 "org.freedesktop.resolve1",
1433 p,
1434 property_map,
1435 BUS_MAP_BOOLEAN_AS_BOOL,
1436 &error,
1437 &m,
1438 &link_info);
1439 if (r < 0)
1440 return log_error_errno(r, "Failed to get link data for %i: %s", ifindex, bus_error_message(&error, r));
1441
1442 (void) pager_open(arg_pager_flags);
1443
1444 if (mode == STATUS_DNS)
1445 return status_print_strv_ifindex(ifindex, name, link_info.dns);
1446
1447 if (mode == STATUS_DOMAIN)
1448 return status_print_strv_ifindex(ifindex, name, link_info.domains);
1449
1450 if (mode == STATUS_NTA)
1451 return status_print_strv_ifindex(ifindex, name, link_info.ntas);
1452
1453 if (mode == STATUS_LLMNR) {
1454 printf("%sLink %i (%s)%s: %s\n",
1455 ansi_highlight(), ifindex, name, ansi_normal(),
1456 strna(link_info.llmnr));
1457
1458 return 0;
1459 }
1460
1461 if (mode == STATUS_MDNS) {
1462 printf("%sLink %i (%s)%s: %s\n",
1463 ansi_highlight(), ifindex, name, ansi_normal(),
1464 strna(link_info.mdns));
1465
1466 return 0;
1467 }
1468
1469 if (mode == STATUS_PRIVATE) {
1470 printf("%sLink %i (%s)%s: %s\n",
1471 ansi_highlight(), ifindex, name, ansi_normal(),
1472 strna(link_info.dns_over_tls));
1473
1474 return 0;
1475 }
1476
1477 if (mode == STATUS_DNSSEC) {
1478 printf("%sLink %i (%s)%s: %s\n",
1479 ansi_highlight(), ifindex, name, ansi_normal(),
1480 strna(link_info.dnssec));
1481
1482 return 0;
1483 }
1484
1485 if (empty_line && *empty_line)
1486 fputc('\n', stdout);
1487
1488 printf("%sLink %i (%s)%s\n",
1489 ansi_highlight(), ifindex, name, ansi_normal());
1490
1491 if (link_info.scopes_mask == 0)
1492 printf(" Current Scopes: none\n");
1493 else
1494 printf(" Current Scopes:%s%s%s%s%s\n",
1495 link_info.scopes_mask & SD_RESOLVED_DNS ? " DNS" : "",
1496 link_info.scopes_mask & SD_RESOLVED_LLMNR_IPV4 ? " LLMNR/IPv4" : "",
1497 link_info.scopes_mask & SD_RESOLVED_LLMNR_IPV6 ? " LLMNR/IPv6" : "",
1498 link_info.scopes_mask & SD_RESOLVED_MDNS_IPV4 ? " mDNS/IPv4" : "",
1499 link_info.scopes_mask & SD_RESOLVED_MDNS_IPV6 ? " mDNS/IPv6" : "");
1500
1501 printf(" LLMNR setting: %s\n"
1502 "MulticastDNS setting: %s\n"
1503 " DNSOverTLS setting: %s\n"
1504 " DNSSEC setting: %s\n"
1505 " DNSSEC supported: %s\n",
1506 strna(link_info.llmnr),
1507 strna(link_info.mdns),
1508 strna(link_info.dns_over_tls),
1509 strna(link_info.dnssec),
1510 yes_no(link_info.dnssec_supported));
1511
1512 if (link_info.current_dns)
1513 printf(" Current DNS Server: %s\n", link_info.current_dns);
1514
1515 STRV_FOREACH(i, link_info.dns) {
1516 printf(" %s %s\n",
1517 i == link_info.dns ? "DNS Servers:" : " ",
1518 *i);
1519 }
1520
1521 STRV_FOREACH(i, link_info.domains) {
1522 printf(" %s %s\n",
1523 i == link_info.domains ? "DNS Domain:" : " ",
1524 *i);
1525 }
1526
1527 STRV_FOREACH(i, link_info.ntas) {
1528 printf(" %s %s\n",
1529 i == link_info.ntas ? "DNSSEC NTA:" : " ",
1530 *i);
1531 }
1532
1533 if (empty_line)
1534 *empty_line = true;
1535
1536 return 0;
1537 }
1538
1539 static int map_global_dns_servers(sd_bus *bus, const char *member, sd_bus_message *m, sd_bus_error *error, void *userdata) {
1540 char ***l = userdata;
1541 int r;
1542
1543 assert(bus);
1544 assert(member);
1545 assert(m);
1546 assert(l);
1547
1548 r = sd_bus_message_enter_container(m, 'a', "(iiay)");
1549 if (r < 0)
1550 return r;
1551
1552 for (;;) {
1553 char *pretty = NULL;
1554
1555 r = read_dns_server_one(m, true, &pretty);
1556 if (r < 0)
1557 return r;
1558 if (r == 0)
1559 break;
1560
1561 if (isempty(pretty))
1562 continue;
1563
1564 r = strv_consume(l, pretty);
1565 if (r < 0)
1566 return r;
1567 }
1568
1569 r = sd_bus_message_exit_container(m);
1570 if (r < 0)
1571 return r;
1572
1573 return 0;
1574 }
1575
1576 static int map_global_current_dns_server(sd_bus *bus, const char *member, sd_bus_message *m, sd_bus_error *error, void *userdata) {
1577 assert(m);
1578 assert(userdata);
1579
1580 return read_dns_server_one(m, true, userdata);
1581 }
1582
1583 static int map_global_domains(sd_bus *bus, const char *member, sd_bus_message *m, sd_bus_error *error, void *userdata) {
1584 char ***l = userdata;
1585 int r;
1586
1587 assert(bus);
1588 assert(member);
1589 assert(m);
1590 assert(l);
1591
1592 r = sd_bus_message_enter_container(m, 'a', "(isb)");
1593 if (r < 0)
1594 return r;
1595
1596 for (;;) {
1597 char *pretty = NULL;
1598
1599 r = read_domain_one(m, true, &pretty);
1600 if (r < 0)
1601 return r;
1602 if (r == 0)
1603 break;
1604
1605 if (isempty(pretty))
1606 continue;
1607
1608 r = strv_consume(l, pretty);
1609 if (r < 0)
1610 return r;
1611 }
1612
1613 r = sd_bus_message_exit_container(m);
1614 if (r < 0)
1615 return r;
1616
1617 return 0;
1618 }
1619
1620 static int status_print_strv_global(char **p) {
1621 char **i;
1622
1623 printf("%sGlobal%s:", ansi_highlight(), ansi_normal());
1624
1625 STRV_FOREACH(i, p)
1626 printf(" %s", *i);
1627
1628 printf("\n");
1629
1630 return 0;
1631 }
1632
1633 struct global_info {
1634 char *current_dns;
1635 char **dns;
1636 char **fallback_dns;
1637 char **domains;
1638 char **ntas;
1639 const char *llmnr;
1640 const char *mdns;
1641 const char *dns_over_tls;
1642 const char *dnssec;
1643 bool dnssec_supported;
1644 };
1645
1646 static void global_info_clear(struct global_info *p) {
1647 free(p->current_dns);
1648 strv_free(p->dns);
1649 strv_free(p->fallback_dns);
1650 strv_free(p->domains);
1651 strv_free(p->ntas);
1652 }
1653
1654 static int status_global(sd_bus *bus, StatusMode mode, bool *empty_line) {
1655 static const struct bus_properties_map property_map[] = {
1656 { "DNS", "a(iiay)", map_global_dns_servers, offsetof(struct global_info, dns) },
1657 { "FallbackDNS", "a(iiay)", map_global_dns_servers, offsetof(struct global_info, fallback_dns) },
1658 { "CurrentDNSServer", "(iiay)", map_global_current_dns_server, offsetof(struct global_info, current_dns) },
1659 { "Domains", "a(isb)", map_global_domains, offsetof(struct global_info, domains) },
1660 { "DNSSECNegativeTrustAnchors", "as", NULL, offsetof(struct global_info, ntas) },
1661 { "LLMNR", "s", NULL, offsetof(struct global_info, llmnr) },
1662 { "MulticastDNS", "s", NULL, offsetof(struct global_info, mdns) },
1663 { "DNSOverTLS", "s", NULL, offsetof(struct global_info, dns_over_tls) },
1664 { "DNSSEC", "s", NULL, offsetof(struct global_info, dnssec) },
1665 { "DNSSECSupported", "b", NULL, offsetof(struct global_info, dnssec_supported) },
1666 {}
1667 };
1668 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1669 _cleanup_(sd_bus_message_unrefp) sd_bus_message *m = NULL;
1670 _cleanup_(global_info_clear) struct global_info global_info = {};
1671 char **i;
1672 int r;
1673
1674 assert(bus);
1675 assert(empty_line);
1676
1677 r = bus_map_all_properties(bus,
1678 "org.freedesktop.resolve1",
1679 "/org/freedesktop/resolve1",
1680 property_map,
1681 BUS_MAP_BOOLEAN_AS_BOOL,
1682 &error,
1683 &m,
1684 &global_info);
1685 if (r < 0)
1686 return log_error_errno(r, "Failed to get global data: %s", bus_error_message(&error, r));
1687
1688 (void) pager_open(arg_pager_flags);
1689
1690 if (mode == STATUS_DNS)
1691 return status_print_strv_global(global_info.dns);
1692
1693 if (mode == STATUS_DOMAIN)
1694 return status_print_strv_global(global_info.domains);
1695
1696 if (mode == STATUS_NTA)
1697 return status_print_strv_global(global_info.ntas);
1698
1699 if (mode == STATUS_LLMNR) {
1700 printf("%sGlobal%s: %s\n", ansi_highlight(), ansi_normal(),
1701 strna(global_info.llmnr));
1702
1703 return 0;
1704 }
1705
1706 if (mode == STATUS_MDNS) {
1707 printf("%sGlobal%s: %s\n", ansi_highlight(), ansi_normal(),
1708 strna(global_info.mdns));
1709
1710 return 0;
1711 }
1712
1713 if (mode == STATUS_PRIVATE) {
1714 printf("%sGlobal%s: %s\n", ansi_highlight(), ansi_normal(),
1715 strna(global_info.dns_over_tls));
1716
1717 return 0;
1718 }
1719
1720 if (mode == STATUS_DNSSEC) {
1721 printf("%sGlobal%s: %s\n", ansi_highlight(), ansi_normal(),
1722 strna(global_info.dnssec));
1723
1724 return 0;
1725 }
1726
1727 printf("%sGlobal%s\n", ansi_highlight(), ansi_normal());
1728
1729 printf(" LLMNR setting: %s\n"
1730 "MulticastDNS setting: %s\n"
1731 " DNSOverTLS setting: %s\n"
1732 " DNSSEC setting: %s\n"
1733 " DNSSEC supported: %s\n",
1734 strna(global_info.llmnr),
1735 strna(global_info.mdns),
1736 strna(global_info.dns_over_tls),
1737 strna(global_info.dnssec),
1738 yes_no(global_info.dnssec_supported));
1739
1740 if (global_info.current_dns)
1741 printf(" Current DNS Server: %s\n", global_info.current_dns);
1742
1743 STRV_FOREACH(i, global_info.dns) {
1744 printf(" %s %s\n",
1745 i == global_info.dns ? "DNS Servers:" : " ",
1746 *i);
1747 }
1748
1749 STRV_FOREACH(i, global_info.fallback_dns) {
1750 printf("%s %s\n",
1751 i == global_info.fallback_dns ? "Fallback DNS Servers:" : " ",
1752 *i);
1753 }
1754
1755 STRV_FOREACH(i, global_info.domains) {
1756 printf(" %s %s\n",
1757 i == global_info.domains ? "DNS Domain:" : " ",
1758 *i);
1759 }
1760
1761 strv_sort(global_info.ntas);
1762 STRV_FOREACH(i, global_info.ntas) {
1763 printf(" %s %s\n",
1764 i == global_info.ntas ? "DNSSEC NTA:" : " ",
1765 *i);
1766 }
1767
1768 *empty_line = true;
1769
1770 return 0;
1771 }
1772
1773 static int status_all(sd_bus *bus, StatusMode mode) {
1774 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL, *reply = NULL;
1775 _cleanup_(sd_netlink_unrefp) sd_netlink *rtnl = NULL;
1776 sd_netlink_message *i;
1777 bool empty_line = false;
1778 int r;
1779
1780 assert(bus);
1781
1782 r = status_global(bus, mode, &empty_line);
1783 if (r < 0)
1784 return r;
1785
1786 r = sd_netlink_open(&rtnl);
1787 if (r < 0)
1788 return log_error_errno(r, "Failed to connect to netlink: %m");
1789
1790 r = sd_rtnl_message_new_link(rtnl, &req, RTM_GETLINK, 0);
1791 if (r < 0)
1792 return rtnl_log_create_error(r);
1793
1794 r = sd_netlink_message_request_dump(req, true);
1795 if (r < 0)
1796 return rtnl_log_create_error(r);
1797
1798 r = sd_netlink_call(rtnl, req, 0, &reply);
1799 if (r < 0)
1800 return log_error_errno(r, "Failed to enumerate links: %m");
1801
1802 r = 0;
1803 for (i = reply; i; i = sd_netlink_message_next(i)) {
1804 const char *name;
1805 int ifindex, q;
1806 uint16_t type;
1807
1808 q = sd_netlink_message_get_type(i, &type);
1809 if (q < 0)
1810 return rtnl_log_parse_error(q);
1811
1812 if (type != RTM_NEWLINK)
1813 continue;
1814
1815 q = sd_rtnl_message_link_get_ifindex(i, &ifindex);
1816 if (q < 0)
1817 return rtnl_log_parse_error(q);
1818
1819 if (ifindex == LOOPBACK_IFINDEX)
1820 continue;
1821
1822 q = sd_netlink_message_read_string(i, IFLA_IFNAME, &name);
1823 if (q < 0)
1824 return rtnl_log_parse_error(q);
1825
1826 q = status_ifindex(bus, ifindex, name, mode, &empty_line);
1827 if (q < 0 && r >= 0)
1828 r = q;
1829 }
1830
1831 return r;
1832 }
1833
1834 static int verb_status(int argc, char **argv, void *userdata) {
1835 sd_bus *bus = userdata;
1836 int q, r = 0;
1837
1838 if (argc > 1) {
1839 char **ifname;
1840 bool empty_line = false;
1841
1842 STRV_FOREACH(ifname, argv + 1) {
1843 int ifindex;
1844
1845 ifindex = parse_ifindex_and_warn(*ifname);
1846 if (ifindex < 0)
1847 continue;
1848
1849 q = status_ifindex(bus, ifindex, NULL, STATUS_ALL, &empty_line);
1850 if (q < 0)
1851 r = q;
1852 }
1853 } else
1854 r = status_all(bus, STATUS_ALL);
1855
1856 return r;
1857 }
1858
1859 static int log_interface_is_managed(int r, int ifindex) {
1860 char ifname[IFNAMSIZ];
1861
1862 return log_error_errno(r,
1863 "The specified interface %s is managed by systemd-networkd. Operation refused.\n"
1864 "Please configure DNS settings for systemd-networkd managed interfaces directly in their .network files.",
1865 strna(if_indextoname(ifindex, ifname)));
1866 }
1867
1868 static int verb_dns(int argc, char **argv, void *userdata) {
1869 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1870 _cleanup_(sd_bus_message_unrefp) sd_bus_message *req = NULL;
1871 sd_bus *bus = userdata;
1872 char **p;
1873 int r;
1874
1875 assert(bus);
1876
1877 if (argc <= 1)
1878 return status_all(bus, STATUS_DNS);
1879
1880 r = ifname_mangle(argv[1], false);
1881 if (r < 0)
1882 return r;
1883
1884 if (argc == 2)
1885 return status_ifindex(bus, arg_ifindex, NULL, STATUS_DNS, NULL);
1886
1887 r = sd_bus_message_new_method_call(
1888 bus,
1889 &req,
1890 "org.freedesktop.resolve1",
1891 "/org/freedesktop/resolve1",
1892 "org.freedesktop.resolve1.Manager",
1893 "SetLinkDNS");
1894 if (r < 0)
1895 return bus_log_create_error(r);
1896
1897 r = sd_bus_message_append(req, "i", arg_ifindex);
1898 if (r < 0)
1899 return bus_log_create_error(r);
1900
1901 r = sd_bus_message_open_container(req, 'a', "(iay)");
1902 if (r < 0)
1903 return bus_log_create_error(r);
1904
1905 /* If only argument is the empty string, then call SetLinkDNS() with an
1906 * empty list, which will clear the list of domains for an interface. */
1907 if (!strv_equal(argv + 2, STRV_MAKE(""))) {
1908 STRV_FOREACH(p, argv + 2) {
1909 struct in_addr_data data;
1910
1911 r = in_addr_from_string_auto(*p, &data.family, &data.address);
1912 if (r < 0)
1913 return log_error_errno(r, "Failed to parse DNS server address: %s", *p);
1914
1915 r = sd_bus_message_open_container(req, 'r', "iay");
1916 if (r < 0)
1917 return bus_log_create_error(r);
1918
1919 r = sd_bus_message_append(req, "i", data.family);
1920 if (r < 0)
1921 return bus_log_create_error(r);
1922
1923 r = sd_bus_message_append_array(req, 'y', &data.address, FAMILY_ADDRESS_SIZE(data.family));
1924 if (r < 0)
1925 return bus_log_create_error(r);
1926
1927 r = sd_bus_message_close_container(req);
1928 if (r < 0)
1929 return bus_log_create_error(r);
1930 }
1931 }
1932
1933 r = sd_bus_message_close_container(req);
1934 if (r < 0)
1935 return bus_log_create_error(r);
1936
1937 r = sd_bus_call(bus, req, 0, &error, NULL);
1938 if (r < 0) {
1939 if (sd_bus_error_has_name(&error, BUS_ERROR_LINK_BUSY))
1940 return log_interface_is_managed(r, arg_ifindex);
1941
1942 if (arg_ifindex_permissive &&
1943 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
1944 return 0;
1945
1946 return log_error_errno(r, "Failed to set DNS configuration: %s", bus_error_message(&error, r));
1947 }
1948
1949 return 0;
1950 }
1951
1952 static int verb_domain(int argc, char **argv, void *userdata) {
1953 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1954 _cleanup_(sd_bus_message_unrefp) sd_bus_message *req = NULL;
1955 sd_bus *bus = userdata;
1956 char **p;
1957 int r;
1958
1959 assert(bus);
1960
1961 if (argc <= 1)
1962 return status_all(bus, STATUS_DOMAIN);
1963
1964 r = ifname_mangle(argv[1], false);
1965 if (r < 0)
1966 return r;
1967
1968 if (argc == 2)
1969 return status_ifindex(bus, arg_ifindex, NULL, STATUS_DOMAIN, NULL);
1970
1971 r = sd_bus_message_new_method_call(
1972 bus,
1973 &req,
1974 "org.freedesktop.resolve1",
1975 "/org/freedesktop/resolve1",
1976 "org.freedesktop.resolve1.Manager",
1977 "SetLinkDomains");
1978 if (r < 0)
1979 return bus_log_create_error(r);
1980
1981 r = sd_bus_message_append(req, "i", arg_ifindex);
1982 if (r < 0)
1983 return bus_log_create_error(r);
1984
1985 r = sd_bus_message_open_container(req, 'a', "(sb)");
1986 if (r < 0)
1987 return bus_log_create_error(r);
1988
1989 /* If only argument is the empty string, then call SetLinkDomains() with an
1990 * empty list, which will clear the list of domains for an interface. */
1991 if (!strv_equal(argv + 2, STRV_MAKE(""))) {
1992 STRV_FOREACH(p, argv + 2) {
1993 const char *n;
1994
1995 n = **p == '~' ? *p + 1 : *p;
1996
1997 r = dns_name_is_valid(n);
1998 if (r < 0)
1999 return log_error_errno(r, "Failed to validate specified domain %s: %m", n);
2000 if (r == 0) {
2001 log_error("Domain not valid: %s", n);
2002 return -EINVAL;
2003 }
2004
2005 r = sd_bus_message_append(req, "(sb)", n, **p == '~');
2006 if (r < 0)
2007 return bus_log_create_error(r);
2008 }
2009 }
2010
2011 r = sd_bus_message_close_container(req);
2012 if (r < 0)
2013 return bus_log_create_error(r);
2014
2015 r = sd_bus_call(bus, req, 0, &error, NULL);
2016 if (r < 0) {
2017 if (sd_bus_error_has_name(&error, BUS_ERROR_LINK_BUSY))
2018 return log_interface_is_managed(r, arg_ifindex);
2019
2020 if (arg_ifindex_permissive &&
2021 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
2022 return 0;
2023
2024 return log_error_errno(r, "Failed to set domain configuration: %s", bus_error_message(&error, r));
2025 }
2026
2027 return 0;
2028 }
2029
2030 static int verb_llmnr(int argc, char **argv, void *userdata) {
2031 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2032 sd_bus *bus = userdata;
2033 int r;
2034
2035 assert(bus);
2036
2037 if (argc <= 1)
2038 return status_all(bus, STATUS_LLMNR);
2039
2040 r = ifname_mangle(argv[1], false);
2041 if (r < 0)
2042 return r;
2043
2044 if (argc == 2)
2045 return status_ifindex(bus, arg_ifindex, NULL, STATUS_LLMNR, NULL);
2046
2047 r = sd_bus_call_method(bus,
2048 "org.freedesktop.resolve1",
2049 "/org/freedesktop/resolve1",
2050 "org.freedesktop.resolve1.Manager",
2051 "SetLinkLLMNR",
2052 &error,
2053 NULL,
2054 "is", arg_ifindex, argv[2]);
2055 if (r < 0) {
2056 if (sd_bus_error_has_name(&error, BUS_ERROR_LINK_BUSY))
2057 return log_interface_is_managed(r, arg_ifindex);
2058
2059 if (arg_ifindex_permissive &&
2060 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
2061 return 0;
2062
2063 return log_error_errno(r, "Failed to set LLMNR configuration: %s", bus_error_message(&error, r));
2064 }
2065
2066 return 0;
2067 }
2068
2069 static int verb_mdns(int argc, char **argv, void *userdata) {
2070 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2071 sd_bus *bus = userdata;
2072 int r;
2073
2074 assert(bus);
2075
2076 if (argc <= 1)
2077 return status_all(bus, STATUS_MDNS);
2078
2079 r = ifname_mangle(argv[1], false);
2080 if (r < 0)
2081 return r;
2082
2083 if (argc == 2)
2084 return status_ifindex(bus, arg_ifindex, NULL, STATUS_MDNS, NULL);
2085
2086 r = sd_bus_call_method(bus,
2087 "org.freedesktop.resolve1",
2088 "/org/freedesktop/resolve1",
2089 "org.freedesktop.resolve1.Manager",
2090 "SetLinkMulticastDNS",
2091 &error,
2092 NULL,
2093 "is", arg_ifindex, argv[2]);
2094 if (r < 0) {
2095 if (sd_bus_error_has_name(&error, BUS_ERROR_LINK_BUSY))
2096 return log_interface_is_managed(r, arg_ifindex);
2097
2098 if (arg_ifindex_permissive &&
2099 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
2100 return 0;
2101
2102 return log_error_errno(r, "Failed to set MulticastDNS configuration: %s", bus_error_message(&error, r));
2103 }
2104
2105 return 0;
2106 }
2107
2108 static int verb_dns_over_tls(int argc, char **argv, void *userdata) {
2109 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2110 sd_bus *bus = userdata;
2111 int r;
2112
2113 assert(bus);
2114
2115 if (argc <= 1)
2116 return status_all(bus, STATUS_PRIVATE);
2117
2118 r = ifname_mangle(argv[1], false);
2119 if (r < 0)
2120 return r;
2121
2122 if (argc == 2)
2123 return status_ifindex(bus, arg_ifindex, NULL, STATUS_PRIVATE, NULL);
2124
2125 r = sd_bus_call_method(bus,
2126 "org.freedesktop.resolve1",
2127 "/org/freedesktop/resolve1",
2128 "org.freedesktop.resolve1.Manager",
2129 "SetLinkDNSOverTLS",
2130 &error,
2131 NULL,
2132 "is", arg_ifindex, argv[2]);
2133 if (r < 0) {
2134 if (sd_bus_error_has_name(&error, BUS_ERROR_LINK_BUSY))
2135 return log_interface_is_managed(r, arg_ifindex);
2136
2137 if (arg_ifindex_permissive &&
2138 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
2139 return 0;
2140
2141 return log_error_errno(r, "Failed to set DNSOverTLS configuration: %s", bus_error_message(&error, r));
2142 }
2143
2144 return 0;
2145 }
2146
2147 static int verb_dnssec(int argc, char **argv, void *userdata) {
2148 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2149 sd_bus *bus = userdata;
2150 int r;
2151
2152 assert(bus);
2153
2154 if (argc <= 1)
2155 return status_all(bus, STATUS_DNSSEC);
2156
2157 r = ifname_mangle(argv[1], false);
2158 if (r < 0)
2159 return r;
2160
2161 if (argc == 2)
2162 return status_ifindex(bus, arg_ifindex, NULL, STATUS_DNSSEC, NULL);
2163
2164 r = sd_bus_call_method(bus,
2165 "org.freedesktop.resolve1",
2166 "/org/freedesktop/resolve1",
2167 "org.freedesktop.resolve1.Manager",
2168 "SetLinkDNSSEC",
2169 &error,
2170 NULL,
2171 "is", arg_ifindex, argv[2]);
2172 if (r < 0) {
2173 if (sd_bus_error_has_name(&error, BUS_ERROR_LINK_BUSY))
2174 return log_interface_is_managed(r, arg_ifindex);
2175
2176 if (arg_ifindex_permissive &&
2177 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
2178 return 0;
2179
2180 return log_error_errno(r, "Failed to set DNSSEC configuration: %s", bus_error_message(&error, r));
2181 }
2182
2183 return 0;
2184 }
2185
2186 static int verb_nta(int argc, char **argv, void *userdata) {
2187 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2188 _cleanup_(sd_bus_message_unrefp) sd_bus_message *req = NULL;
2189 sd_bus *bus = userdata;
2190 char **p;
2191 int r;
2192 bool clear;
2193
2194 assert(bus);
2195
2196 if (argc <= 1)
2197 return status_all(bus, STATUS_NTA);
2198
2199 r = ifname_mangle(argv[1], false);
2200 if (r < 0)
2201 return r;
2202
2203 if (argc == 2)
2204 return status_ifindex(bus, arg_ifindex, NULL, STATUS_NTA, NULL);
2205
2206 /* If only argument is the empty string, then call SetLinkDNSSECNegativeTrustAnchors()
2207 * with an empty list, which will clear the list of domains for an interface. */
2208 clear = strv_equal(argv + 2, STRV_MAKE(""));
2209
2210 if (!clear)
2211 STRV_FOREACH(p, argv + 2) {
2212 r = dns_name_is_valid(*p);
2213 if (r < 0)
2214 return log_error_errno(r, "Failed to validate specified domain %s: %m", *p);
2215 if (r == 0) {
2216 log_error("Domain not valid: %s", *p);
2217 return -EINVAL;
2218 }
2219 }
2220
2221 r = sd_bus_message_new_method_call(
2222 bus,
2223 &req,
2224 "org.freedesktop.resolve1",
2225 "/org/freedesktop/resolve1",
2226 "org.freedesktop.resolve1.Manager",
2227 "SetLinkDNSSECNegativeTrustAnchors");
2228 if (r < 0)
2229 return bus_log_create_error(r);
2230
2231 r = sd_bus_message_append(req, "i", arg_ifindex);
2232 if (r < 0)
2233 return bus_log_create_error(r);
2234
2235 r = sd_bus_message_append_strv(req, clear ? NULL : argv + 2);
2236 if (r < 0)
2237 return bus_log_create_error(r);
2238
2239 r = sd_bus_call(bus, req, 0, &error, NULL);
2240 if (r < 0) {
2241 if (sd_bus_error_has_name(&error, BUS_ERROR_LINK_BUSY))
2242 return log_interface_is_managed(r, arg_ifindex);
2243
2244 if (arg_ifindex_permissive &&
2245 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
2246 return 0;
2247
2248 return log_error_errno(r, "Failed to set DNSSEC NTA configuration: %s", bus_error_message(&error, r));
2249 }
2250
2251 return 0;
2252 }
2253
2254 static int verb_revert_link(int argc, char **argv, void *userdata) {
2255 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2256 sd_bus *bus = userdata;
2257 int r;
2258
2259 assert(bus);
2260
2261 r = ifname_mangle(argv[1], false);
2262 if (r < 0)
2263 return r;
2264
2265 r = sd_bus_call_method(bus,
2266 "org.freedesktop.resolve1",
2267 "/org/freedesktop/resolve1",
2268 "org.freedesktop.resolve1.Manager",
2269 "RevertLink",
2270 &error,
2271 NULL,
2272 "i", arg_ifindex);
2273 if (r < 0) {
2274 if (arg_ifindex_permissive &&
2275 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
2276 return 0;
2277
2278 return log_error_errno(r, "Failed to revert interface configuration: %s", bus_error_message(&error, r));
2279 }
2280
2281 return 0;
2282 }
2283
2284 static void help_protocol_types(void) {
2285 if (arg_legend)
2286 puts("Known protocol types:");
2287 puts("dns\nllmnr\nllmnr-ipv4\nllmnr-ipv6\nmdns\nmdns-ipv4\nmdns-ipv6");
2288 }
2289
2290 static void help_dns_types(void) {
2291 if (arg_legend)
2292 puts("Known DNS RR types:");
2293
2294 DUMP_STRING_TABLE(dns_type, int, _DNS_TYPE_MAX);
2295 }
2296
2297 static void help_dns_classes(void) {
2298 if (arg_legend)
2299 puts("Known DNS RR classes:");
2300
2301 DUMP_STRING_TABLE(dns_class, int, _DNS_CLASS_MAX);
2302 }
2303
2304 static int compat_help(void) {
2305 _cleanup_free_ char *link = NULL;
2306 int r;
2307
2308 r = terminal_urlify_man("resolvectl", "1", &link);
2309 if (r < 0)
2310 return log_oom();
2311
2312 printf("%1$s [OPTIONS...] HOSTNAME|ADDRESS...\n"
2313 "%1$s [OPTIONS...] --service [[NAME] TYPE] DOMAIN\n"
2314 "%1$s [OPTIONS...] --openpgp EMAIL@DOMAIN...\n"
2315 "%1$s [OPTIONS...] --statistics\n"
2316 "%1$s [OPTIONS...] --reset-statistics\n"
2317 "\n"
2318 "Resolve domain names, IPv4 and IPv6 addresses, DNS records, and services.\n\n"
2319 " -h --help Show this help\n"
2320 " --version Show package version\n"
2321 " --no-pager Do not pipe output into a pager\n"
2322 " -4 Resolve IPv4 addresses\n"
2323 " -6 Resolve IPv6 addresses\n"
2324 " -i --interface=INTERFACE Look on interface\n"
2325 " -p --protocol=PROTO|help Look via protocol\n"
2326 " -t --type=TYPE|help Query RR with DNS type\n"
2327 " -c --class=CLASS|help Query RR with DNS class\n"
2328 " --service Resolve service (SRV)\n"
2329 " --service-address=BOOL Resolve address for services (default: yes)\n"
2330 " --service-txt=BOOL Resolve TXT records for services (default: yes)\n"
2331 " --openpgp Query OpenPGP public key\n"
2332 " --tlsa Query TLS public key\n"
2333 " --cname=BOOL Follow CNAME redirects (default: yes)\n"
2334 " --search=BOOL Use search domains for single-label names\n"
2335 " (default: yes)\n"
2336 " --raw[=payload|packet] Dump the answer as binary data\n"
2337 " --legend=BOOL Print headers and additional info (default: yes)\n"
2338 " --statistics Show resolver statistics\n"
2339 " --reset-statistics Reset resolver statistics\n"
2340 " --status Show link and server status\n"
2341 " --flush-caches Flush all local DNS caches\n"
2342 " --reset-server-features\n"
2343 " Forget learnt DNS server feature levels\n"
2344 " --set-dns=SERVER Set per-interface DNS server address\n"
2345 " --set-domain=DOMAIN Set per-interface search domain\n"
2346 " --set-llmnr=MODE Set per-interface LLMNR mode\n"
2347 " --set-mdns=MODE Set per-interface MulticastDNS mode\n"
2348 " --set-dnsovertls=MODE Set per-interface DNS-over-TLS mode\n"
2349 " --set-dnssec=MODE Set per-interface DNSSEC mode\n"
2350 " --set-nta=DOMAIN Set per-interface DNSSEC NTA\n"
2351 " --revert Revert per-interface configuration\n"
2352 "\nSee the %2$s for details.\n"
2353 , program_invocation_short_name
2354 , link
2355 );
2356
2357 return 0;
2358 }
2359
2360 static int native_help(void) {
2361 _cleanup_free_ char *link = NULL;
2362 int r;
2363
2364 r = terminal_urlify_man("resolvectl", "1", &link);
2365 if (r < 0)
2366 return log_oom();
2367
2368 printf("%1$s [OPTIONS...] {COMMAND} ...\n"
2369 "\n"
2370 "Send control commands to the network name resolution manager, or\n"
2371 "resolve domain names, IPv4 and IPv6 addresses, DNS records, and services.\n"
2372 "\n"
2373 " -h --help Show this help\n"
2374 " --version Show package version\n"
2375 " --no-pager Do not pipe output into a pager\n"
2376 " -4 Resolve IPv4 addresses\n"
2377 " -6 Resolve IPv6 addresses\n"
2378 " -i --interface=INTERFACE Look on interface\n"
2379 " -p --protocol=PROTO|help Look via protocol\n"
2380 " -t --type=TYPE|help Query RR with DNS type\n"
2381 " -c --class=CLASS|help Query RR with DNS class\n"
2382 " --service-address=BOOL Resolve address for services (default: yes)\n"
2383 " --service-txt=BOOL Resolve TXT records for services (default: yes)\n"
2384 " --cname=BOOL Follow CNAME redirects (default: yes)\n"
2385 " --search=BOOL Use search domains for single-label names\n"
2386 " (default: yes)\n"
2387 " --raw[=payload|packet] Dump the answer as binary data\n"
2388 " --legend=BOOL Print headers and additional info (default: yes)\n"
2389 "\n"
2390 "Commands:\n"
2391 " query HOSTNAME|ADDRESS... Resolve domain names, IPv4 and IPv6 addresses\n"
2392 " service [[NAME] TYPE] DOMAIN Resolve service (SRV)\n"
2393 " openpgp EMAIL@DOMAIN... Query OpenPGP public key\n"
2394 " tlsa DOMAIN[:PORT]... Query TLS public key\n"
2395 " status [LINK...] Show link and server status\n"
2396 " statistics Show resolver statistics\n"
2397 " reset-statistics Reset resolver statistics\n"
2398 " flush-caches Flush all local DNS caches\n"
2399 " reset-server-features Forget learnt DNS server feature levels\n"
2400 " dns [LINK [SERVER...]] Get/set per-interface DNS server address\n"
2401 " domain [LINK [DOMAIN...]] Get/set per-interface search domain\n"
2402 " llmnr [LINK [MODE]] Get/set per-interface LLMNR mode\n"
2403 " mdns [LINK [MODE]] Get/set per-interface MulticastDNS mode\n"
2404 " dnsovertls [LINK [MODE]] Get/set per-interface DNS-over-TLS mode\n"
2405 " dnssec [LINK [MODE]] Get/set per-interface DNSSEC mode\n"
2406 " nta [LINK [DOMAIN...]] Get/set per-interface DNSSEC NTA\n"
2407 " revert LINK Revert per-interface configuration\n"
2408 "\nSee the %2$s for details.\n"
2409 , program_invocation_short_name
2410 , link
2411 );
2412
2413 return 0;
2414 }
2415
2416 static int verb_help(int argc, char **argv, void *userdata) {
2417 return native_help();
2418 }
2419
2420 static int compat_parse_argv(int argc, char *argv[]) {
2421 enum {
2422 ARG_VERSION = 0x100,
2423 ARG_LEGEND,
2424 ARG_SERVICE,
2425 ARG_CNAME,
2426 ARG_SERVICE_ADDRESS,
2427 ARG_SERVICE_TXT,
2428 ARG_OPENPGP,
2429 ARG_TLSA,
2430 ARG_RAW,
2431 ARG_SEARCH,
2432 ARG_STATISTICS,
2433 ARG_RESET_STATISTICS,
2434 ARG_STATUS,
2435 ARG_FLUSH_CACHES,
2436 ARG_RESET_SERVER_FEATURES,
2437 ARG_NO_PAGER,
2438 ARG_SET_DNS,
2439 ARG_SET_DOMAIN,
2440 ARG_SET_LLMNR,
2441 ARG_SET_MDNS,
2442 ARG_SET_PRIVATE,
2443 ARG_SET_DNSSEC,
2444 ARG_SET_NTA,
2445 ARG_REVERT_LINK,
2446 };
2447
2448 static const struct option options[] = {
2449 { "help", no_argument, NULL, 'h' },
2450 { "version", no_argument, NULL, ARG_VERSION },
2451 { "type", required_argument, NULL, 't' },
2452 { "class", required_argument, NULL, 'c' },
2453 { "legend", required_argument, NULL, ARG_LEGEND },
2454 { "interface", required_argument, NULL, 'i' },
2455 { "protocol", required_argument, NULL, 'p' },
2456 { "cname", required_argument, NULL, ARG_CNAME },
2457 { "service", no_argument, NULL, ARG_SERVICE },
2458 { "service-address", required_argument, NULL, ARG_SERVICE_ADDRESS },
2459 { "service-txt", required_argument, NULL, ARG_SERVICE_TXT },
2460 { "openpgp", no_argument, NULL, ARG_OPENPGP },
2461 { "tlsa", optional_argument, NULL, ARG_TLSA },
2462 { "raw", optional_argument, NULL, ARG_RAW },
2463 { "search", required_argument, NULL, ARG_SEARCH },
2464 { "statistics", no_argument, NULL, ARG_STATISTICS, },
2465 { "reset-statistics", no_argument, NULL, ARG_RESET_STATISTICS },
2466 { "status", no_argument, NULL, ARG_STATUS },
2467 { "flush-caches", no_argument, NULL, ARG_FLUSH_CACHES },
2468 { "reset-server-features", no_argument, NULL, ARG_RESET_SERVER_FEATURES },
2469 { "no-pager", no_argument, NULL, ARG_NO_PAGER },
2470 { "set-dns", required_argument, NULL, ARG_SET_DNS },
2471 { "set-domain", required_argument, NULL, ARG_SET_DOMAIN },
2472 { "set-llmnr", required_argument, NULL, ARG_SET_LLMNR },
2473 { "set-mdns", required_argument, NULL, ARG_SET_MDNS },
2474 { "set-dnsovertls", required_argument, NULL, ARG_SET_PRIVATE },
2475 { "set-dnssec", required_argument, NULL, ARG_SET_DNSSEC },
2476 { "set-nta", required_argument, NULL, ARG_SET_NTA },
2477 { "revert", no_argument, NULL, ARG_REVERT_LINK },
2478 {}
2479 };
2480
2481 int c, r;
2482
2483 assert(argc >= 0);
2484 assert(argv);
2485
2486 while ((c = getopt_long(argc, argv, "h46i:t:c:p:", options, NULL)) >= 0)
2487 switch(c) {
2488
2489 case 'h':
2490 return compat_help();
2491
2492 case ARG_VERSION:
2493 return version();
2494
2495 case '4':
2496 arg_family = AF_INET;
2497 break;
2498
2499 case '6':
2500 arg_family = AF_INET6;
2501 break;
2502
2503 case 'i':
2504 arg_ifname = mfree(arg_ifname);
2505 r = ifname_mangle(optarg, true);
2506 if (r < 0)
2507 return r;
2508 break;
2509
2510 case 't':
2511 if (streq(optarg, "help")) {
2512 help_dns_types();
2513 return 0;
2514 }
2515
2516 r = dns_type_from_string(optarg);
2517 if (r < 0) {
2518 log_error("Failed to parse RR record type %s", optarg);
2519 return r;
2520 }
2521 arg_type = (uint16_t) r;
2522 assert((int) arg_type == r);
2523
2524 arg_mode = MODE_RESOLVE_RECORD;
2525 break;
2526
2527 case 'c':
2528 if (streq(optarg, "help")) {
2529 help_dns_classes();
2530 return 0;
2531 }
2532
2533 r = dns_class_from_string(optarg);
2534 if (r < 0) {
2535 log_error("Failed to parse RR record class %s", optarg);
2536 return r;
2537 }
2538 arg_class = (uint16_t) r;
2539 assert((int) arg_class == r);
2540
2541 break;
2542
2543 case ARG_LEGEND:
2544 r = parse_boolean(optarg);
2545 if (r < 0)
2546 return log_error_errno(r, "Failed to parse --legend= argument");
2547
2548 arg_legend = r;
2549 break;
2550
2551 case 'p':
2552 if (streq(optarg, "help")) {
2553 help_protocol_types();
2554 return 0;
2555 } else if (streq(optarg, "dns"))
2556 arg_flags |= SD_RESOLVED_DNS;
2557 else if (streq(optarg, "llmnr"))
2558 arg_flags |= SD_RESOLVED_LLMNR;
2559 else if (streq(optarg, "llmnr-ipv4"))
2560 arg_flags |= SD_RESOLVED_LLMNR_IPV4;
2561 else if (streq(optarg, "llmnr-ipv6"))
2562 arg_flags |= SD_RESOLVED_LLMNR_IPV6;
2563 else if (streq(optarg, "mdns"))
2564 arg_flags |= SD_RESOLVED_MDNS;
2565 else if (streq(optarg, "mdns-ipv4"))
2566 arg_flags |= SD_RESOLVED_MDNS_IPV4;
2567 else if (streq(optarg, "mdns-ipv6"))
2568 arg_flags |= SD_RESOLVED_MDNS_IPV6;
2569 else {
2570 log_error("Unknown protocol specifier: %s", optarg);
2571 return -EINVAL;
2572 }
2573
2574 break;
2575
2576 case ARG_SERVICE:
2577 arg_mode = MODE_RESOLVE_SERVICE;
2578 break;
2579
2580 case ARG_OPENPGP:
2581 arg_mode = MODE_RESOLVE_OPENPGP;
2582 break;
2583
2584 case ARG_TLSA:
2585 arg_mode = MODE_RESOLVE_TLSA;
2586 if (!optarg || service_family_is_valid(optarg))
2587 arg_service_family = optarg;
2588 else {
2589 log_error("Unknown service family \"%s\".", optarg);
2590 return -EINVAL;
2591 }
2592 break;
2593
2594 case ARG_RAW:
2595 if (on_tty()) {
2596 log_error("Refusing to write binary data to tty.");
2597 return -ENOTTY;
2598 }
2599
2600 if (optarg == NULL || streq(optarg, "payload"))
2601 arg_raw = RAW_PAYLOAD;
2602 else if (streq(optarg, "packet"))
2603 arg_raw = RAW_PACKET;
2604 else {
2605 log_error("Unknown --raw specifier \"%s\".", optarg);
2606 return -EINVAL;
2607 }
2608
2609 arg_legend = false;
2610 break;
2611
2612 case ARG_CNAME:
2613 r = parse_boolean(optarg);
2614 if (r < 0)
2615 return log_error_errno(r, "Failed to parse --cname= argument.");
2616 SET_FLAG(arg_flags, SD_RESOLVED_NO_CNAME, r == 0);
2617 break;
2618
2619 case ARG_SERVICE_ADDRESS:
2620 r = parse_boolean(optarg);
2621 if (r < 0)
2622 return log_error_errno(r, "Failed to parse --service-address= argument.");
2623 SET_FLAG(arg_flags, SD_RESOLVED_NO_ADDRESS, r == 0);
2624 break;
2625
2626 case ARG_SERVICE_TXT:
2627 r = parse_boolean(optarg);
2628 if (r < 0)
2629 return log_error_errno(r, "Failed to parse --service-txt= argument.");
2630 SET_FLAG(arg_flags, SD_RESOLVED_NO_TXT, r == 0);
2631 break;
2632
2633 case ARG_SEARCH:
2634 r = parse_boolean(optarg);
2635 if (r < 0)
2636 return log_error_errno(r, "Failed to parse --search argument.");
2637 SET_FLAG(arg_flags, SD_RESOLVED_NO_SEARCH, r == 0);
2638 break;
2639
2640 case ARG_STATISTICS:
2641 arg_mode = MODE_STATISTICS;
2642 break;
2643
2644 case ARG_RESET_STATISTICS:
2645 arg_mode = MODE_RESET_STATISTICS;
2646 break;
2647
2648 case ARG_FLUSH_CACHES:
2649 arg_mode = MODE_FLUSH_CACHES;
2650 break;
2651
2652 case ARG_RESET_SERVER_FEATURES:
2653 arg_mode = MODE_RESET_SERVER_FEATURES;
2654 break;
2655
2656 case ARG_STATUS:
2657 arg_mode = MODE_STATUS;
2658 break;
2659
2660 case ARG_NO_PAGER:
2661 arg_pager_flags |= PAGER_DISABLE;
2662 break;
2663
2664 case ARG_SET_DNS:
2665 r = strv_extend(&arg_set_dns, optarg);
2666 if (r < 0)
2667 return log_oom();
2668
2669 arg_mode = MODE_SET_LINK;
2670 break;
2671
2672 case ARG_SET_DOMAIN:
2673 r = strv_extend(&arg_set_domain, optarg);
2674 if (r < 0)
2675 return log_oom();
2676
2677 arg_mode = MODE_SET_LINK;
2678 break;
2679
2680 case ARG_SET_LLMNR:
2681 arg_set_llmnr = optarg;
2682 arg_mode = MODE_SET_LINK;
2683 break;
2684
2685 case ARG_SET_MDNS:
2686 arg_set_mdns = optarg;
2687 arg_mode = MODE_SET_LINK;
2688 break;
2689
2690 case ARG_SET_PRIVATE:
2691 arg_set_dns_over_tls = optarg;
2692 arg_mode = MODE_SET_LINK;
2693 break;
2694
2695 case ARG_SET_DNSSEC:
2696 arg_set_dnssec = optarg;
2697 arg_mode = MODE_SET_LINK;
2698 break;
2699
2700 case ARG_SET_NTA:
2701 r = strv_extend(&arg_set_nta, optarg);
2702 if (r < 0)
2703 return log_oom();
2704
2705 arg_mode = MODE_SET_LINK;
2706 break;
2707
2708 case ARG_REVERT_LINK:
2709 arg_mode = MODE_REVERT_LINK;
2710 break;
2711
2712 case '?':
2713 return -EINVAL;
2714
2715 default:
2716 assert_not_reached("Unhandled option");
2717 }
2718
2719 if (arg_type == 0 && arg_class != 0) {
2720 log_error("--class= may only be used in conjunction with --type=.");
2721 return -EINVAL;
2722 }
2723
2724 if (arg_type != 0 && arg_mode == MODE_RESOLVE_SERVICE) {
2725 log_error("--service and --type= may not be combined.");
2726 return -EINVAL;
2727 }
2728
2729 if (arg_type != 0 && arg_class == 0)
2730 arg_class = DNS_CLASS_IN;
2731
2732 if (arg_class != 0 && arg_type == 0)
2733 arg_type = DNS_TYPE_A;
2734
2735 if (IN_SET(arg_mode, MODE_SET_LINK, MODE_REVERT_LINK)) {
2736
2737 if (arg_ifindex <= 0) {
2738 log_error("--set-dns=, --set-domain=, --set-llmnr=, --set-mdns=, --set-dnsovertls=, --set-dnssec=, --set-nta= and --revert require --interface=.");
2739 return -EINVAL;
2740 }
2741
2742 if (arg_ifindex == LOOPBACK_IFINDEX) {
2743 log_error("Interface can't be the loopback interface (lo). Sorry.");
2744 return -EINVAL;
2745 }
2746 }
2747
2748 return 1 /* work to do */;
2749 }
2750
2751 static int native_parse_argv(int argc, char *argv[]) {
2752 enum {
2753 ARG_VERSION = 0x100,
2754 ARG_LEGEND,
2755 ARG_CNAME,
2756 ARG_SERVICE_ADDRESS,
2757 ARG_SERVICE_TXT,
2758 ARG_RAW,
2759 ARG_SEARCH,
2760 ARG_NO_PAGER,
2761 };
2762
2763 static const struct option options[] = {
2764 { "help", no_argument, NULL, 'h' },
2765 { "version", no_argument, NULL, ARG_VERSION },
2766 { "type", required_argument, NULL, 't' },
2767 { "class", required_argument, NULL, 'c' },
2768 { "legend", required_argument, NULL, ARG_LEGEND },
2769 { "interface", required_argument, NULL, 'i' },
2770 { "protocol", required_argument, NULL, 'p' },
2771 { "cname", required_argument, NULL, ARG_CNAME },
2772 { "service-address", required_argument, NULL, ARG_SERVICE_ADDRESS },
2773 { "service-txt", required_argument, NULL, ARG_SERVICE_TXT },
2774 { "raw", optional_argument, NULL, ARG_RAW },
2775 { "search", required_argument, NULL, ARG_SEARCH },
2776 { "no-pager", no_argument, NULL, ARG_NO_PAGER },
2777 {}
2778 };
2779
2780 int c, r;
2781
2782 assert(argc >= 0);
2783 assert(argv);
2784
2785 while ((c = getopt_long(argc, argv, "h46i:t:c:p:", options, NULL)) >= 0)
2786 switch(c) {
2787
2788 case 'h':
2789 return native_help();
2790
2791 case ARG_VERSION:
2792 return version();
2793
2794 case '4':
2795 arg_family = AF_INET;
2796 break;
2797
2798 case '6':
2799 arg_family = AF_INET6;
2800 break;
2801
2802 case 'i':
2803 arg_ifname = mfree(arg_ifname);
2804 r = ifname_mangle(optarg, true);
2805 if (r < 0)
2806 return r;
2807 break;
2808
2809 case 't':
2810 if (streq(optarg, "help")) {
2811 help_dns_types();
2812 return 0;
2813 }
2814
2815 r = dns_type_from_string(optarg);
2816 if (r < 0) {
2817 log_error("Failed to parse RR record type %s", optarg);
2818 return r;
2819 }
2820 arg_type = (uint16_t) r;
2821 assert((int) arg_type == r);
2822
2823 break;
2824
2825 case 'c':
2826 if (streq(optarg, "help")) {
2827 help_dns_classes();
2828 return 0;
2829 }
2830
2831 r = dns_class_from_string(optarg);
2832 if (r < 0) {
2833 log_error("Failed to parse RR record class %s", optarg);
2834 return r;
2835 }
2836 arg_class = (uint16_t) r;
2837 assert((int) arg_class == r);
2838
2839 break;
2840
2841 case ARG_LEGEND:
2842 r = parse_boolean(optarg);
2843 if (r < 0)
2844 return log_error_errno(r, "Failed to parse --legend= argument");
2845
2846 arg_legend = r;
2847 break;
2848
2849 case 'p':
2850 if (streq(optarg, "help")) {
2851 help_protocol_types();
2852 return 0;
2853 } else if (streq(optarg, "dns"))
2854 arg_flags |= SD_RESOLVED_DNS;
2855 else if (streq(optarg, "llmnr"))
2856 arg_flags |= SD_RESOLVED_LLMNR;
2857 else if (streq(optarg, "llmnr-ipv4"))
2858 arg_flags |= SD_RESOLVED_LLMNR_IPV4;
2859 else if (streq(optarg, "llmnr-ipv6"))
2860 arg_flags |= SD_RESOLVED_LLMNR_IPV6;
2861 else if (streq(optarg, "mdns"))
2862 arg_flags |= SD_RESOLVED_MDNS;
2863 else if (streq(optarg, "mdns-ipv4"))
2864 arg_flags |= SD_RESOLVED_MDNS_IPV4;
2865 else if (streq(optarg, "mdns-ipv6"))
2866 arg_flags |= SD_RESOLVED_MDNS_IPV6;
2867 else {
2868 log_error("Unknown protocol specifier: %s", optarg);
2869 return -EINVAL;
2870 }
2871
2872 break;
2873
2874 case ARG_RAW:
2875 if (on_tty()) {
2876 log_error("Refusing to write binary data to tty.");
2877 return -ENOTTY;
2878 }
2879
2880 if (optarg == NULL || streq(optarg, "payload"))
2881 arg_raw = RAW_PAYLOAD;
2882 else if (streq(optarg, "packet"))
2883 arg_raw = RAW_PACKET;
2884 else {
2885 log_error("Unknown --raw specifier \"%s\".", optarg);
2886 return -EINVAL;
2887 }
2888
2889 arg_legend = false;
2890 break;
2891
2892 case ARG_CNAME:
2893 r = parse_boolean(optarg);
2894 if (r < 0)
2895 return log_error_errno(r, "Failed to parse --cname= argument.");
2896 SET_FLAG(arg_flags, SD_RESOLVED_NO_CNAME, r == 0);
2897 break;
2898
2899 case ARG_SERVICE_ADDRESS:
2900 r = parse_boolean(optarg);
2901 if (r < 0)
2902 return log_error_errno(r, "Failed to parse --service-address= argument.");
2903 SET_FLAG(arg_flags, SD_RESOLVED_NO_ADDRESS, r == 0);
2904 break;
2905
2906 case ARG_SERVICE_TXT:
2907 r = parse_boolean(optarg);
2908 if (r < 0)
2909 return log_error_errno(r, "Failed to parse --service-txt= argument.");
2910 SET_FLAG(arg_flags, SD_RESOLVED_NO_TXT, r == 0);
2911 break;
2912
2913 case ARG_SEARCH:
2914 r = parse_boolean(optarg);
2915 if (r < 0)
2916 return log_error_errno(r, "Failed to parse --search argument.");
2917 SET_FLAG(arg_flags, SD_RESOLVED_NO_SEARCH, r == 0);
2918 break;
2919
2920 case ARG_NO_PAGER:
2921 arg_pager_flags |= PAGER_DISABLE;
2922 break;
2923
2924 case '?':
2925 return -EINVAL;
2926
2927 default:
2928 assert_not_reached("Unhandled option");
2929 }
2930
2931 if (arg_type == 0 && arg_class != 0) {
2932 log_error("--class= may only be used in conjunction with --type=.");
2933 return -EINVAL;
2934 }
2935
2936 if (arg_type != 0 && arg_class == 0)
2937 arg_class = DNS_CLASS_IN;
2938
2939 if (arg_class != 0 && arg_type == 0)
2940 arg_type = DNS_TYPE_A;
2941
2942 return 1 /* work to do */;
2943 }
2944
2945 static int native_main(int argc, char *argv[], sd_bus *bus) {
2946
2947 static const Verb verbs[] = {
2948 { "help", VERB_ANY, VERB_ANY, 0, verb_help },
2949 { "status", VERB_ANY, VERB_ANY, VERB_DEFAULT, verb_status },
2950 { "query", 2, VERB_ANY, 0, verb_query },
2951 { "service", 2, 4, 0, verb_service },
2952 { "openpgp", 2, VERB_ANY, 0, verb_openpgp },
2953 { "tlsa", 2, VERB_ANY, 0, verb_tlsa },
2954 { "statistics", VERB_ANY, 1, 0, show_statistics },
2955 { "reset-statistics", VERB_ANY, 1, 0, reset_statistics },
2956 { "flush-caches", VERB_ANY, 1, 0, flush_caches },
2957 { "reset-server-features", VERB_ANY, 1, 0, reset_server_features },
2958 { "dns", VERB_ANY, VERB_ANY, 0, verb_dns },
2959 { "domain", VERB_ANY, VERB_ANY, 0, verb_domain },
2960 { "llmnr", VERB_ANY, 3, 0, verb_llmnr },
2961 { "mdns", VERB_ANY, 3, 0, verb_mdns },
2962 { "dnsovertls", VERB_ANY, 3, 0, verb_dns_over_tls },
2963 { "dnssec", VERB_ANY, 3, 0, verb_dnssec },
2964 { "nta", VERB_ANY, VERB_ANY, 0, verb_nta },
2965 { "revert", 2, 2, 0, verb_revert_link },
2966 {}
2967 };
2968
2969 return dispatch_verb(argc, argv, verbs, bus);
2970 }
2971
2972 static int translate(const char *verb, const char *single_arg, size_t num_args, char **args, sd_bus *bus) {
2973 char **fake, **p;
2974 size_t num, i;
2975
2976 assert(verb);
2977 assert(num_args == 0 || args);
2978
2979 num = !!single_arg + num_args + 1;
2980
2981 p = fake = newa0(char *, num + 1);
2982 *p++ = (char *) verb;
2983 if (single_arg)
2984 *p++ = (char *) single_arg;
2985 for (i = 0; i < num_args; i++)
2986 *p++ = args[i];
2987
2988 optind = 0;
2989 return native_main((int) num, fake, bus);
2990 }
2991
2992 static int compat_main(int argc, char *argv[], sd_bus *bus) {
2993 int r = 0;
2994
2995 switch (arg_mode) {
2996 case MODE_RESOLVE_HOST:
2997 case MODE_RESOLVE_RECORD:
2998 return translate("query", NULL, argc - optind, argv + optind, bus);
2999
3000 case MODE_RESOLVE_SERVICE:
3001 return translate("service", NULL, argc - optind, argv + optind, bus);
3002
3003 case MODE_RESOLVE_OPENPGP:
3004 return translate("openpgp", NULL, argc - optind, argv + optind, bus);
3005
3006 case MODE_RESOLVE_TLSA:
3007 return translate("tlsa", arg_service_family, argc - optind, argv + optind, bus);
3008
3009 case MODE_STATISTICS:
3010 return translate("statistics", NULL, 0, NULL, bus);
3011
3012 case MODE_RESET_STATISTICS:
3013 return translate("reset-statistics", NULL, 0, NULL, bus);
3014
3015 case MODE_FLUSH_CACHES:
3016 return translate("flush-caches", NULL, 0, NULL, bus);
3017
3018 case MODE_RESET_SERVER_FEATURES:
3019 return translate("reset-server-features", NULL, 0, NULL, bus);
3020
3021 case MODE_STATUS:
3022 return translate("status", NULL, argc - optind, argv + optind, bus);
3023
3024 case MODE_SET_LINK:
3025 assert(arg_ifname);
3026
3027 if (arg_set_dns) {
3028 r = translate("dns", arg_ifname, strv_length(arg_set_dns), arg_set_dns, bus);
3029 if (r < 0)
3030 return r;
3031 }
3032
3033 if (arg_set_domain) {
3034 r = translate("domain", arg_ifname, strv_length(arg_set_domain), arg_set_domain, bus);
3035 if (r < 0)
3036 return r;
3037 }
3038
3039 if (arg_set_nta) {
3040 r = translate("nta", arg_ifname, strv_length(arg_set_nta), arg_set_nta, bus);
3041 if (r < 0)
3042 return r;
3043 }
3044
3045 if (arg_set_llmnr) {
3046 r = translate("llmnr", arg_ifname, 1, (char **) &arg_set_llmnr, bus);
3047 if (r < 0)
3048 return r;
3049 }
3050
3051 if (arg_set_mdns) {
3052 r = translate("mdns", arg_ifname, 1, (char **) &arg_set_mdns, bus);
3053 if (r < 0)
3054 return r;
3055 }
3056
3057 if (arg_set_dns_over_tls) {
3058 r = translate("dnsovertls", arg_ifname, 1, (char **) &arg_set_dns_over_tls, bus);
3059 if (r < 0)
3060 return r;
3061 }
3062
3063 if (arg_set_dnssec) {
3064 r = translate("dnssec", arg_ifname, 1, (char **) &arg_set_dnssec, bus);
3065 if (r < 0)
3066 return r;
3067 }
3068
3069 return r;
3070
3071 case MODE_REVERT_LINK:
3072 assert(arg_ifname);
3073
3074 return translate("revert", arg_ifname, 0, NULL, bus);
3075
3076 case _MODE_INVALID:
3077 assert_not_reached("invalid mode");
3078 }
3079
3080 return 0;
3081 }
3082
3083 int main(int argc, char **argv) {
3084 sd_bus *bus = NULL;
3085 int r;
3086
3087 setlocale(LC_ALL, "");
3088 log_parse_environment();
3089 log_open();
3090
3091 if (streq(program_invocation_short_name, "resolvconf"))
3092 r = resolvconf_parse_argv(argc, argv);
3093 else if (streq(program_invocation_short_name, "systemd-resolve"))
3094 r = compat_parse_argv(argc, argv);
3095 else
3096 r = native_parse_argv(argc, argv);
3097 if (r <= 0)
3098 goto finish;
3099
3100 r = sd_bus_open_system(&bus);
3101 if (r < 0) {
3102 log_error_errno(r, "sd_bus_open_system: %m");
3103 goto finish;
3104 }
3105
3106 if (STR_IN_SET(program_invocation_short_name, "systemd-resolve", "resolvconf"))
3107 r = compat_main(argc, argv, bus);
3108 else
3109 r = native_main(argc, argv, bus);
3110
3111 finish:
3112 /* make sure we terminate the bus connection first, and then close the
3113 * pager, see issue #3543 for the details. */
3114 sd_bus_flush_close_unref(bus);
3115 pager_close();
3116
3117 free(arg_ifname);
3118 strv_free(arg_set_dns);
3119 strv_free(arg_set_domain);
3120 strv_free(arg_set_nta);
3121
3122 return r < 0 ? EXIT_FAILURE : EXIT_SUCCESS;
3123 }
Unnamed repository; edit this file 'description' to name the repository.