]> git.ipfire.org Git - thirdparty/systemd.git/blob - src/resolve/resolvectl.c
projects / thirdparty / systemd.git / blob
? search:
summary | shortlog | log | commit | commitdiff | tree
blame | history | raw | HEAD
Merge pull request #9600 from keszybz/systemctl-mask-check
[thirdparty/systemd.git] / src / resolve / resolvectl.c
1 /* SPDX-License-Identifier: LGPL-2.1+ */
2
3 #include <getopt.h>
4 #include <net/if.h>
5
6 #include "sd-bus.h"
7 #include "sd-netlink.h"
8
9 #include "af-list.h"
10 #include "alloc-util.h"
11 #include "bus-common-errors.h"
12 #include "bus-error.h"
13 #include "bus-util.h"
14 #include "dns-domain.h"
15 #include "escape.h"
16 #include "gcrypt-util.h"
17 #include "in-addr-util.h"
18 #include "netlink-util.h"
19 #include "pager.h"
20 #include "parse-util.h"
21 #include "resolvconf-compat.h"
22 #include "resolvectl.h"
23 #include "resolved-def.h"
24 #include "resolved-dns-packet.h"
25 #include "string-table.h"
26 #include "strv.h"
27 #include "terminal-util.h"
28 #include "verbs.h"
29
30 static int arg_family = AF_UNSPEC;
31 static int arg_ifindex = 0;
32 static char *arg_ifname = NULL;
33 static uint16_t arg_type = 0;
34 static uint16_t arg_class = 0;
35 static bool arg_legend = true;
36 static uint64_t arg_flags = 0;
37 static bool arg_no_pager = false;
38 bool arg_ifindex_permissive = false; /* If true, don't generate an error if the specified interface index doesn't exist */
39 static const char *arg_service_family = NULL;
40
41 typedef enum RawType {
42 RAW_NONE,
43 RAW_PAYLOAD,
44 RAW_PACKET,
45 } RawType;
46 static RawType arg_raw = RAW_NONE;
47
48 ExecutionMode arg_mode = MODE_RESOLVE_HOST;
49
50 char **arg_set_dns = NULL;
51 char **arg_set_domain = NULL;
52 static const char *arg_set_llmnr = NULL;
53 static const char *arg_set_mdns = NULL;
54 static const char *arg_set_dns_over_tls = NULL;
55 static const char *arg_set_dnssec = NULL;
56 static char **arg_set_nta = NULL;
57
58 typedef enum StatusMode {
59 STATUS_ALL,
60 STATUS_DNS,
61 STATUS_DOMAIN,
62 STATUS_LLMNR,
63 STATUS_MDNS,
64 STATUS_PRIVATE,
65 STATUS_DNSSEC,
66 STATUS_NTA,
67 } StatusMode;
68
69 static int parse_ifindex_and_warn(const char *s) {
70 int ifi;
71
72 assert(s);
73
74 if (parse_ifindex(s, &ifi) < 0) {
75 ifi = if_nametoindex(s);
76 if (ifi <= 0)
77 return log_error_errno(errno, "Unknown interface '%s': %m", s);
78 }
79
80 return ifi;
81 }
82
83 int ifname_mangle(const char *s, bool allow_loopback) {
84 _cleanup_free_ char *iface = NULL;
85 const char *dot;
86 int r;
87
88 assert(s);
89
90 if (arg_ifname) {
91 assert(arg_ifindex >= 0);
92
93 if (!allow_loopback && arg_ifindex == LOOPBACK_IFINDEX) {
94 log_error("Interface can't be the loopback interface (lo). Sorry.");
95 return -EINVAL;
96 }
97
98 return 1;
99 }
100
101 dot = strchr(s, '.');
102 if (dot) {
103 iface = strndup(s, dot - s);
104 if (!iface)
105 return log_oom();
106
107 log_debug("Ignoring protocol specifier '%s'.", dot + 1);
108 } else {
109 iface = strdup(s);
110 if (!iface)
111 return log_oom();
112 }
113
114 if (parse_ifindex(iface, &r) < 0) {
115 r = if_nametoindex(iface);
116 if (r <= 0) {
117 if (errno == ENODEV && arg_ifindex_permissive) {
118 log_debug("Interface '%s' not found, but -f specified, ignoring.", iface);
119 return 0; /* done */
120 }
121
122 return log_error_errno(errno, "Unknown interface '%s': %m", iface);
123 }
124 }
125
126 if (!allow_loopback && r == LOOPBACK_IFINDEX) {
127 log_error("Interface can't be the loopback interface (lo). Sorry.");
128 return -EINVAL;
129 }
130
131 arg_ifindex = r;
132 arg_ifname = TAKE_PTR(iface);
133
134 return 1;
135 }
136
137 static void print_source(uint64_t flags, usec_t rtt) {
138 char rtt_str[FORMAT_TIMESTAMP_MAX];
139
140 if (!arg_legend)
141 return;
142
143 if (flags == 0)
144 return;
145
146 fputs("\n-- Information acquired via", stdout);
147
148 if (flags != 0)
149 printf(" protocol%s%s%s%s%s",
150 flags & SD_RESOLVED_DNS ? " DNS" :"",
151 flags & SD_RESOLVED_LLMNR_IPV4 ? " LLMNR/IPv4" : "",
152 flags & SD_RESOLVED_LLMNR_IPV6 ? " LLMNR/IPv6" : "",
153 flags & SD_RESOLVED_MDNS_IPV4 ? " mDNS/IPv4" : "",
154 flags & SD_RESOLVED_MDNS_IPV6 ? " mDNS/IPv6" : "");
155
156 assert_se(format_timespan(rtt_str, sizeof(rtt_str), rtt, 100));
157
158 printf(" in %s", rtt_str);
159
160 fputc('.', stdout);
161 fputc('\n', stdout);
162
163 printf("-- Data is authenticated: %s\n", yes_no(flags & SD_RESOLVED_AUTHENTICATED));
164 }
165
166 static int resolve_host(sd_bus *bus, const char *name) {
167 _cleanup_(sd_bus_message_unrefp) sd_bus_message *req = NULL, *reply = NULL;
168 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
169 const char *canonical = NULL;
170 unsigned c = 0;
171 uint64_t flags;
172 usec_t ts;
173 int r;
174
175 assert(name);
176
177 log_debug("Resolving %s (family %s, interface %s).", name, af_to_name(arg_family) ?: "*", isempty(arg_ifname) ? "*" : arg_ifname);
178
179 r = sd_bus_message_new_method_call(
180 bus,
181 &req,
182 "org.freedesktop.resolve1",
183 "/org/freedesktop/resolve1",
184 "org.freedesktop.resolve1.Manager",
185 "ResolveHostname");
186 if (r < 0)
187 return bus_log_create_error(r);
188
189 r = sd_bus_message_append(req, "isit", arg_ifindex, name, arg_family, arg_flags);
190 if (r < 0)
191 return bus_log_create_error(r);
192
193 ts = now(CLOCK_MONOTONIC);
194
195 r = sd_bus_call(bus, req, SD_RESOLVED_QUERY_TIMEOUT_USEC, &error, &reply);
196 if (r < 0)
197 return log_error_errno(r, "%s: resolve call failed: %s", name, bus_error_message(&error, r));
198
199 ts = now(CLOCK_MONOTONIC) - ts;
200
201 r = sd_bus_message_enter_container(reply, 'a', "(iiay)");
202 if (r < 0)
203 return bus_log_parse_error(r);
204
205 while ((r = sd_bus_message_enter_container(reply, 'r', "iiay")) > 0) {
206 _cleanup_free_ char *pretty = NULL;
207 char ifname[IF_NAMESIZE] = "";
208 int ifindex, family;
209 const void *a;
210 size_t sz;
211
212 assert_cc(sizeof(int) == sizeof(int32_t));
213
214 r = sd_bus_message_read(reply, "ii", &ifindex, &family);
215 if (r < 0)
216 return bus_log_parse_error(r);
217
218 r = sd_bus_message_read_array(reply, 'y', &a, &sz);
219 if (r < 0)
220 return bus_log_parse_error(r);
221
222 r = sd_bus_message_exit_container(reply);
223 if (r < 0)
224 return bus_log_parse_error(r);
225
226 if (!IN_SET(family, AF_INET, AF_INET6)) {
227 log_debug("%s: skipping entry with family %d (%s)", name, family, af_to_name(family) ?: "unknown");
228 continue;
229 }
230
231 if (sz != FAMILY_ADDRESS_SIZE(family)) {
232 log_error("%s: systemd-resolved returned address of invalid size %zu for family %s", name, sz, af_to_name(family) ?: "unknown");
233 return -EINVAL;
234 }
235
236 if (ifindex > 0 && !if_indextoname(ifindex, ifname))
237 log_warning_errno(errno, "Failed to resolve interface name for index %i: %m", ifindex);
238
239 r = in_addr_ifindex_to_string(family, a, ifindex, &pretty);
240 if (r < 0)
241 return log_error_errno(r, "Failed to print address for %s: %m", name);
242
243 printf("%*s%s %s%s%s\n",
244 (int) strlen(name), c == 0 ? name : "", c == 0 ? ":" : " ",
245 pretty,
246 isempty(ifname) ? "" : "%", ifname);
247
248 c++;
249 }
250 if (r < 0)
251 return bus_log_parse_error(r);
252
253 r = sd_bus_message_exit_container(reply);
254 if (r < 0)
255 return bus_log_parse_error(r);
256
257 r = sd_bus_message_read(reply, "st", &canonical, &flags);
258 if (r < 0)
259 return bus_log_parse_error(r);
260
261 if (!streq(name, canonical))
262 printf("%*s%s (%s)\n",
263 (int) strlen(name), c == 0 ? name : "", c == 0 ? ":" : " ",
264 canonical);
265
266 if (c == 0) {
267 log_error("%s: no addresses found", name);
268 return -ESRCH;
269 }
270
271 print_source(flags, ts);
272
273 return 0;
274 }
275
276 static int resolve_address(sd_bus *bus, int family, const union in_addr_union *address, int ifindex) {
277 _cleanup_(sd_bus_message_unrefp) sd_bus_message *req = NULL, *reply = NULL;
278 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
279 _cleanup_free_ char *pretty = NULL;
280 char ifname[IF_NAMESIZE] = "";
281 uint64_t flags;
282 unsigned c = 0;
283 usec_t ts;
284 int r;
285
286 assert(bus);
287 assert(IN_SET(family, AF_INET, AF_INET6));
288 assert(address);
289
290 if (ifindex <= 0)
291 ifindex = arg_ifindex;
292
293 r = in_addr_ifindex_to_string(family, address, ifindex, &pretty);
294 if (r < 0)
295 return log_oom();
296
297 if (ifindex > 0 && !if_indextoname(ifindex, ifname))
298 return log_error_errno(errno, "Failed to resolve interface name for index %i: %m", ifindex);
299
300 log_debug("Resolving %s%s%s.", pretty, isempty(ifname) ? "" : "%", ifname);
301
302 r = sd_bus_message_new_method_call(
303 bus,
304 &req,
305 "org.freedesktop.resolve1",
306 "/org/freedesktop/resolve1",
307 "org.freedesktop.resolve1.Manager",
308 "ResolveAddress");
309 if (r < 0)
310 return bus_log_create_error(r);
311
312 r = sd_bus_message_append(req, "ii", ifindex, family);
313 if (r < 0)
314 return bus_log_create_error(r);
315
316 r = sd_bus_message_append_array(req, 'y', address, FAMILY_ADDRESS_SIZE(family));
317 if (r < 0)
318 return bus_log_create_error(r);
319
320 r = sd_bus_message_append(req, "t", arg_flags);
321 if (r < 0)
322 return bus_log_create_error(r);
323
324 ts = now(CLOCK_MONOTONIC);
325
326 r = sd_bus_call(bus, req, SD_RESOLVED_QUERY_TIMEOUT_USEC, &error, &reply);
327 if (r < 0) {
328 log_error("%s: resolve call failed: %s", pretty, bus_error_message(&error, r));
329 return r;
330 }
331
332 ts = now(CLOCK_MONOTONIC) - ts;
333
334 r = sd_bus_message_enter_container(reply, 'a', "(is)");
335 if (r < 0)
336 return bus_log_create_error(r);
337
338 while ((r = sd_bus_message_enter_container(reply, 'r', "is")) > 0) {
339 const char *n;
340
341 assert_cc(sizeof(int) == sizeof(int32_t));
342
343 r = sd_bus_message_read(reply, "is", &ifindex, &n);
344 if (r < 0)
345 return r;
346
347 r = sd_bus_message_exit_container(reply);
348 if (r < 0)
349 return r;
350
351 ifname[0] = 0;
352 if (ifindex > 0 && !if_indextoname(ifindex, ifname))
353 log_warning_errno(errno, "Failed to resolve interface name for index %i: %m", ifindex);
354
355 printf("%*s%*s%*s%s %s\n",
356 (int) strlen(pretty), c == 0 ? pretty : "",
357 isempty(ifname) ? 0 : 1, c > 0 || isempty(ifname) ? "" : "%",
358 (int) strlen(ifname), c == 0 ? ifname : "",
359 c == 0 ? ":" : " ",
360 n);
361
362 c++;
363 }
364 if (r < 0)
365 return bus_log_parse_error(r);
366
367 r = sd_bus_message_exit_container(reply);
368 if (r < 0)
369 return bus_log_parse_error(r);
370
371 r = sd_bus_message_read(reply, "t", &flags);
372 if (r < 0)
373 return bus_log_parse_error(r);
374
375 if (c == 0) {
376 log_error("%s: no names found", pretty);
377 return -ESRCH;
378 }
379
380 print_source(flags, ts);
381
382 return 0;
383 }
384
385 static int output_rr_packet(const void *d, size_t l, int ifindex) {
386 _cleanup_(dns_resource_record_unrefp) DnsResourceRecord *rr = NULL;
387 _cleanup_(dns_packet_unrefp) DnsPacket *p = NULL;
388 int r;
389 char ifname[IF_NAMESIZE] = "";
390
391 r = dns_packet_new(&p, DNS_PROTOCOL_DNS, 0, DNS_PACKET_SIZE_MAX);
392 if (r < 0)
393 return log_oom();
394
395 p->refuse_compression = true;
396
397 r = dns_packet_append_blob(p, d, l, NULL);
398 if (r < 0)
399 return log_oom();
400
401 r = dns_packet_read_rr(p, &rr, NULL, NULL);
402 if (r < 0)
403 return log_error_errno(r, "Failed to parse RR: %m");
404
405 if (arg_raw == RAW_PAYLOAD) {
406 void *data;
407 ssize_t k;
408
409 k = dns_resource_record_payload(rr, &data);
410 if (k < 0)
411 return log_error_errno(k, "Cannot dump RR: %m");
412 fwrite(data, 1, k, stdout);
413 } else {
414 const char *s;
415
416 s = dns_resource_record_to_string(rr);
417 if (!s)
418 return log_oom();
419
420 if (ifindex > 0 && !if_indextoname(ifindex, ifname))
421 log_warning_errno(errno, "Failed to resolve interface name for index %i: %m", ifindex);
422
423 printf("%s%s%s\n", s, isempty(ifname) ? "" : " # interface ", ifname);
424 }
425
426 return 0;
427 }
428
429 static int resolve_record(sd_bus *bus, const char *name, uint16_t class, uint16_t type, bool warn_missing) {
430 _cleanup_(sd_bus_message_unrefp) sd_bus_message *req = NULL, *reply = NULL;
431 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
432 unsigned n = 0;
433 uint64_t flags;
434 int r;
435 usec_t ts;
436 bool needs_authentication = false;
437
438 assert(name);
439
440 log_debug("Resolving %s %s %s (interface %s).", name, dns_class_to_string(class), dns_type_to_string(type), isempty(arg_ifname) ? "*" : arg_ifname);
441
442 r = sd_bus_message_new_method_call(
443 bus,
444 &req,
445 "org.freedesktop.resolve1",
446 "/org/freedesktop/resolve1",
447 "org.freedesktop.resolve1.Manager",
448 "ResolveRecord");
449 if (r < 0)
450 return bus_log_create_error(r);
451
452 r = sd_bus_message_append(req, "isqqt", arg_ifindex, name, class, type, arg_flags);
453 if (r < 0)
454 return bus_log_create_error(r);
455
456 ts = now(CLOCK_MONOTONIC);
457
458 r = sd_bus_call(bus, req, SD_RESOLVED_QUERY_TIMEOUT_USEC, &error, &reply);
459 if (r < 0) {
460 if (warn_missing || r != -ENXIO)
461 log_error("%s: resolve call failed: %s", name, bus_error_message(&error, r));
462 return r;
463 }
464
465 ts = now(CLOCK_MONOTONIC) - ts;
466
467 r = sd_bus_message_enter_container(reply, 'a', "(iqqay)");
468 if (r < 0)
469 return bus_log_parse_error(r);
470
471 while ((r = sd_bus_message_enter_container(reply, 'r', "iqqay")) > 0) {
472 uint16_t c, t;
473 int ifindex;
474 const void *d;
475 size_t l;
476
477 assert_cc(sizeof(int) == sizeof(int32_t));
478
479 r = sd_bus_message_read(reply, "iqq", &ifindex, &c, &t);
480 if (r < 0)
481 return bus_log_parse_error(r);
482
483 r = sd_bus_message_read_array(reply, 'y', &d, &l);
484 if (r < 0)
485 return bus_log_parse_error(r);
486
487 r = sd_bus_message_exit_container(reply);
488 if (r < 0)
489 return bus_log_parse_error(r);
490
491 if (arg_raw == RAW_PACKET) {
492 uint64_t u64 = htole64(l);
493
494 fwrite(&u64, sizeof(u64), 1, stdout);
495 fwrite(d, 1, l, stdout);
496 } else {
497 r = output_rr_packet(d, l, ifindex);
498 if (r < 0)
499 return r;
500 }
501
502 if (dns_type_needs_authentication(t))
503 needs_authentication = true;
504
505 n++;
506 }
507 if (r < 0)
508 return bus_log_parse_error(r);
509
510 r = sd_bus_message_exit_container(reply);
511 if (r < 0)
512 return bus_log_parse_error(r);
513
514 r = sd_bus_message_read(reply, "t", &flags);
515 if (r < 0)
516 return bus_log_parse_error(r);
517
518 if (n == 0) {
519 if (warn_missing)
520 log_error("%s: no records found", name);
521 return -ESRCH;
522 }
523
524 print_source(flags, ts);
525
526 if ((flags & SD_RESOLVED_AUTHENTICATED) == 0 && needs_authentication) {
527 fflush(stdout);
528
529 fprintf(stderr, "\n%s"
530 "WARNING: The resources shown contain cryptographic key data which could not be\n"
531 " authenticated. It is not suitable to authenticate any communication.\n"
532 " This is usually indication that DNSSEC authentication was not enabled\n"
533 " or is not available for the selected protocol or DNS servers.%s\n",
534 ansi_highlight_red(),
535 ansi_normal());
536 }
537
538 return 0;
539 }
540
541 static int resolve_rfc4501(sd_bus *bus, const char *name) {
542 uint16_t type = 0, class = 0;
543 const char *p, *q, *n;
544 int r;
545
546 assert(bus);
547 assert(name);
548 assert(startswith(name, "dns:"));
549
550 /* Parse RFC 4501 dns: URIs */
551
552 p = name + 4;
553
554 if (p[0] == '/') {
555 const char *e;
556
557 if (p[1] != '/')
558 goto invalid;
559
560 e = strchr(p + 2, '/');
561 if (!e)
562 goto invalid;
563
564 if (e != p + 2)
565 log_warning("DNS authority specification not supported; ignoring specified authority.");
566
567 p = e + 1;
568 }
569
570 q = strchr(p, '?');
571 if (q) {
572 n = strndupa(p, q - p);
573 q++;
574
575 for (;;) {
576 const char *f;
577
578 f = startswith_no_case(q, "class=");
579 if (f) {
580 _cleanup_free_ char *t = NULL;
581 const char *e;
582
583 if (class != 0) {
584 log_error("DNS class specified twice.");
585 return -EINVAL;
586 }
587
588 e = strchrnul(f, ';');
589 t = strndup(f, e - f);
590 if (!t)
591 return log_oom();
592
593 r = dns_class_from_string(t);
594 if (r < 0) {
595 log_error("Unknown DNS class %s.", t);
596 return -EINVAL;
597 }
598
599 class = r;
600
601 if (*e == ';') {
602 q = e + 1;
603 continue;
604 }
605
606 break;
607 }
608
609 f = startswith_no_case(q, "type=");
610 if (f) {
611 _cleanup_free_ char *t = NULL;
612 const char *e;
613
614 if (type != 0) {
615 log_error("DNS type specified twice.");
616 return -EINVAL;
617 }
618
619 e = strchrnul(f, ';');
620 t = strndup(f, e - f);
621 if (!t)
622 return log_oom();
623
624 r = dns_type_from_string(t);
625 if (r < 0) {
626 log_error("Unknown DNS type %s.", t);
627 return -EINVAL;
628 }
629
630 type = r;
631
632 if (*e == ';') {
633 q = e + 1;
634 continue;
635 }
636
637 break;
638 }
639
640 goto invalid;
641 }
642 } else
643 n = p;
644
645 if (class == 0)
646 class = arg_class ?: DNS_CLASS_IN;
647 if (type == 0)
648 type = arg_type ?: DNS_TYPE_A;
649
650 return resolve_record(bus, n, class, type, true);
651
652 invalid:
653 log_error("Invalid DNS URI: %s", name);
654 return -EINVAL;
655 }
656
657 static int verb_query(int argc, char **argv, void *userdata) {
658 sd_bus *bus = userdata;
659 char **p;
660 int q, r = 0;
661
662 if (arg_type != 0)
663 STRV_FOREACH(p, argv + 1) {
664 q = resolve_record(bus, *p, arg_class, arg_type, true);
665 if (q < 0)
666 r = q;
667 }
668
669 else
670 STRV_FOREACH(p, argv + 1) {
671 if (startswith(*p, "dns:"))
672 q = resolve_rfc4501(bus, *p);
673 else {
674 int family, ifindex;
675 union in_addr_union a;
676
677 q = in_addr_ifindex_from_string_auto(*p, &family, &a, &ifindex);
678 if (q >= 0)
679 q = resolve_address(bus, family, &a, ifindex);
680 else
681 q = resolve_host(bus, *p);
682 }
683 if (q < 0)
684 r = q;
685 }
686
687 return r;
688 }
689
690 static int resolve_service(sd_bus *bus, const char *name, const char *type, const char *domain) {
691 const char *canonical_name, *canonical_type, *canonical_domain;
692 _cleanup_(sd_bus_message_unrefp) sd_bus_message *req = NULL, *reply = NULL;
693 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
694 size_t indent, sz;
695 uint64_t flags;
696 const char *p;
697 unsigned c;
698 usec_t ts;
699 int r;
700
701 assert(bus);
702 assert(domain);
703
704 name = empty_to_null(name);
705 type = empty_to_null(type);
706
707 if (name)
708 log_debug("Resolving service \"%s\" of type %s in %s (family %s, interface %s).", name, type, domain, af_to_name(arg_family) ?: "*", isempty(arg_ifname) ? "*" : arg_ifname);
709 else if (type)
710 log_debug("Resolving service type %s of %s (family %s, interface %s).", type, domain, af_to_name(arg_family) ?: "*", isempty(arg_ifname) ? "*" : arg_ifname);
711 else
712 log_debug("Resolving service type %s (family %s, interface %s).", domain, af_to_name(arg_family) ?: "*", isempty(arg_ifname) ? "*" : arg_ifname);
713
714 r = sd_bus_message_new_method_call(
715 bus,
716 &req,
717 "org.freedesktop.resolve1",
718 "/org/freedesktop/resolve1",
719 "org.freedesktop.resolve1.Manager",
720 "ResolveService");
721 if (r < 0)
722 return bus_log_create_error(r);
723
724 r = sd_bus_message_append(req, "isssit", arg_ifindex, name, type, domain, arg_family, arg_flags);
725 if (r < 0)
726 return bus_log_create_error(r);
727
728 ts = now(CLOCK_MONOTONIC);
729
730 r = sd_bus_call(bus, req, SD_RESOLVED_QUERY_TIMEOUT_USEC, &error, &reply);
731 if (r < 0)
732 return log_error_errno(r, "Resolve call failed: %s", bus_error_message(&error, r));
733
734 ts = now(CLOCK_MONOTONIC) - ts;
735
736 r = sd_bus_message_enter_container(reply, 'a', "(qqqsa(iiay)s)");
737 if (r < 0)
738 return bus_log_parse_error(r);
739
740 indent =
741 (name ? strlen(name) + 1 : 0) +
742 (type ? strlen(type) + 1 : 0) +
743 strlen(domain) + 2;
744
745 c = 0;
746 while ((r = sd_bus_message_enter_container(reply, 'r', "qqqsa(iiay)s")) > 0) {
747 uint16_t priority, weight, port;
748 const char *hostname, *canonical;
749
750 r = sd_bus_message_read(reply, "qqqs", &priority, &weight, &port, &hostname);
751 if (r < 0)
752 return bus_log_parse_error(r);
753
754 if (name)
755 printf("%*s%s", (int) strlen(name), c == 0 ? name : "", c == 0 ? "/" : " ");
756 if (type)
757 printf("%*s%s", (int) strlen(type), c == 0 ? type : "", c == 0 ? "/" : " ");
758
759 printf("%*s%s %s:%u [priority=%u, weight=%u]\n",
760 (int) strlen(domain), c == 0 ? domain : "",
761 c == 0 ? ":" : " ",
762 hostname, port,
763 priority, weight);
764
765 r = sd_bus_message_enter_container(reply, 'a', "(iiay)");
766 if (r < 0)
767 return bus_log_parse_error(r);
768
769 while ((r = sd_bus_message_enter_container(reply, 'r', "iiay")) > 0) {
770 _cleanup_free_ char *pretty = NULL;
771 char ifname[IF_NAMESIZE] = "";
772 int ifindex, family;
773 const void *a;
774
775 assert_cc(sizeof(int) == sizeof(int32_t));
776
777 r = sd_bus_message_read(reply, "ii", &ifindex, &family);
778 if (r < 0)
779 return bus_log_parse_error(r);
780
781 r = sd_bus_message_read_array(reply, 'y', &a, &sz);
782 if (r < 0)
783 return bus_log_parse_error(r);
784
785 r = sd_bus_message_exit_container(reply);
786 if (r < 0)
787 return bus_log_parse_error(r);
788
789 if (!IN_SET(family, AF_INET, AF_INET6)) {
790 log_debug("%s: skipping entry with family %d (%s)", name, family, af_to_name(family) ?: "unknown");
791 continue;
792 }
793
794 if (sz != FAMILY_ADDRESS_SIZE(family)) {
795 log_error("%s: systemd-resolved returned address of invalid size %zu for family %s", name, sz, af_to_name(family) ?: "unknown");
796 return -EINVAL;
797 }
798
799 if (ifindex > 0 && !if_indextoname(ifindex, ifname))
800 log_warning_errno(errno, "Failed to resolve interface name for index %i: %m", ifindex);
801
802 r = in_addr_to_string(family, a, &pretty);
803 if (r < 0)
804 return log_error_errno(r, "Failed to print address for %s: %m", name);
805
806 printf("%*s%s%s%s\n", (int) indent, "", pretty, isempty(ifname) ? "" : "%s", ifname);
807 }
808 if (r < 0)
809 return bus_log_parse_error(r);
810
811 r = sd_bus_message_exit_container(reply);
812 if (r < 0)
813 return bus_log_parse_error(r);
814
815 r = sd_bus_message_read(reply, "s", &canonical);
816 if (r < 0)
817 return bus_log_parse_error(r);
818
819 if (!streq(hostname, canonical))
820 printf("%*s(%s)\n", (int) indent, "", canonical);
821
822 r = sd_bus_message_exit_container(reply);
823 if (r < 0)
824 return bus_log_parse_error(r);
825
826 c++;
827 }
828 if (r < 0)
829 return bus_log_parse_error(r);
830
831 r = sd_bus_message_exit_container(reply);
832 if (r < 0)
833 return bus_log_parse_error(r);
834
835 r = sd_bus_message_enter_container(reply, 'a', "ay");
836 if (r < 0)
837 return bus_log_parse_error(r);
838
839 while ((r = sd_bus_message_read_array(reply, 'y', (const void**) &p, &sz)) > 0) {
840 _cleanup_free_ char *escaped = NULL;
841
842 escaped = cescape_length(p, sz);
843 if (!escaped)
844 return log_oom();
845
846 printf("%*s%s\n", (int) indent, "", escaped);
847 }
848 if (r < 0)
849 return bus_log_parse_error(r);
850
851 r = sd_bus_message_exit_container(reply);
852 if (r < 0)
853 return bus_log_parse_error(r);
854
855 r = sd_bus_message_read(reply, "ssst", &canonical_name, &canonical_type, &canonical_domain, &flags);
856 if (r < 0)
857 return bus_log_parse_error(r);
858
859 canonical_name = empty_to_null(canonical_name);
860 canonical_type = empty_to_null(canonical_type);
861
862 if (!streq_ptr(name, canonical_name) ||
863 !streq_ptr(type, canonical_type) ||
864 !streq_ptr(domain, canonical_domain)) {
865
866 printf("%*s(", (int) indent, "");
867
868 if (canonical_name)
869 printf("%s/", canonical_name);
870 if (canonical_type)
871 printf("%s/", canonical_type);
872
873 printf("%s)\n", canonical_domain);
874 }
875
876 print_source(flags, ts);
877
878 return 0;
879 }
880
881 static int verb_service(int argc, char **argv, void *userdata) {
882 sd_bus *bus = userdata;
883
884 if (argc == 2)
885 return resolve_service(bus, NULL, NULL, argv[1]);
886 else if (argc == 3)
887 return resolve_service(bus, NULL, argv[1], argv[2]);
888 else
889 return resolve_service(bus, argv[1], argv[2], argv[3]);
890 }
891
892 static int resolve_openpgp(sd_bus *bus, const char *address) {
893 const char *domain, *full;
894 int r;
895 _cleanup_free_ char *hashed = NULL;
896
897 assert(bus);
898 assert(address);
899
900 domain = strrchr(address, '@');
901 if (!domain) {
902 log_error("Address does not contain '@': \"%s\"", address);
903 return -EINVAL;
904 } else if (domain == address || domain[1] == '\0') {
905 log_error("Address starts or ends with '@': \"%s\"", address);
906 return -EINVAL;
907 }
908 domain++;
909
910 r = string_hashsum_sha256(address, domain - 1 - address, &hashed);
911 if (r < 0)
912 return log_error_errno(r, "Hashing failed: %m");
913
914 strshorten(hashed, 56);
915
916 full = strjoina(hashed, "._openpgpkey.", domain);
917 log_debug("Looking up \"%s\".", full);
918
919 r = resolve_record(bus, full,
920 arg_class ?: DNS_CLASS_IN,
921 arg_type ?: DNS_TYPE_OPENPGPKEY, false);
922
923 if (IN_SET(r, -ENXIO, -ESRCH)) { /* NXDOMAIN or NODATA? */
924 hashed = NULL;
925 r = string_hashsum_sha224(address, domain - 1 - address, &hashed);
926 if (r < 0)
927 return log_error_errno(r, "Hashing failed: %m");
928
929 full = strjoina(hashed, "._openpgpkey.", domain);
930 log_debug("Looking up \"%s\".", full);
931
932 return resolve_record(bus, full,
933 arg_class ?: DNS_CLASS_IN,
934 arg_type ?: DNS_TYPE_OPENPGPKEY, true);
935 }
936
937 return r;
938 }
939
940 static int verb_openpgp(int argc, char **argv, void *userdata) {
941 sd_bus *bus = userdata;
942 char **p;
943 int q, r = 0;
944
945 STRV_FOREACH(p, argv + 1) {
946 q = resolve_openpgp(bus, *p);
947 if (q < 0)
948 r = q;
949 }
950
951 return r;
952 }
953
954 static int resolve_tlsa(sd_bus *bus, const char *family, const char *address) {
955 const char *port;
956 uint16_t port_num = 443;
957 _cleanup_free_ char *full = NULL;
958 int r;
959
960 assert(bus);
961 assert(address);
962
963 port = strrchr(address, ':');
964 if (port) {
965 r = parse_ip_port(port + 1, &port_num);
966 if (r < 0)
967 return log_error_errno(r, "Invalid port \"%s\".", port + 1);
968
969 address = strndupa(address, port - address);
970 }
971
972 r = asprintf(&full, "_%u._%s.%s",
973 port_num,
974 family,
975 address);
976 if (r < 0)
977 return log_oom();
978
979 log_debug("Looking up \"%s\".", full);
980
981 return resolve_record(bus, full,
982 arg_class ?: DNS_CLASS_IN,
983 arg_type ?: DNS_TYPE_TLSA, true);
984 }
985
986 static bool service_family_is_valid(const char *s) {
987 return STR_IN_SET(s, "tcp", "udp", "sctp");
988 }
989
990 static int verb_tlsa(int argc, char **argv, void *userdata) {
991 sd_bus *bus = userdata;
992 char **p, **args = argv + 1;
993 const char *family = "tcp";
994 int q, r = 0;
995
996 if (service_family_is_valid(argv[1])) {
997 family = argv[1];
998 args++;
999 }
1000
1001 STRV_FOREACH(p, args) {
1002 q = resolve_tlsa(bus, family, *p);
1003 if (q < 0)
1004 r = q;
1005 }
1006
1007 return r;
1008 }
1009
1010 static int show_statistics(int argc, char **argv, void *userdata) {
1011 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1012 _cleanup_(sd_bus_message_unrefp) sd_bus_message *reply = NULL;
1013 sd_bus *bus = userdata;
1014 uint64_t n_current_transactions, n_total_transactions,
1015 cache_size, n_cache_hit, n_cache_miss,
1016 n_dnssec_secure, n_dnssec_insecure, n_dnssec_bogus, n_dnssec_indeterminate;
1017 int r, dnssec_supported;
1018
1019 assert(bus);
1020
1021 r = sd_bus_get_property_trivial(bus,
1022 "org.freedesktop.resolve1",
1023 "/org/freedesktop/resolve1",
1024 "org.freedesktop.resolve1.Manager",
1025 "DNSSECSupported",
1026 &error,
1027 'b',
1028 &dnssec_supported);
1029 if (r < 0)
1030 return log_error_errno(r, "Failed to get DNSSEC supported state: %s", bus_error_message(&error, r));
1031
1032 printf("DNSSEC supported by current servers: %s%s%s\n\n",
1033 ansi_highlight(),
1034 yes_no(dnssec_supported),
1035 ansi_normal());
1036
1037 r = sd_bus_get_property(bus,
1038 "org.freedesktop.resolve1",
1039 "/org/freedesktop/resolve1",
1040 "org.freedesktop.resolve1.Manager",
1041 "TransactionStatistics",
1042 &error,
1043 &reply,
1044 "(tt)");
1045 if (r < 0)
1046 return log_error_errno(r, "Failed to get transaction statistics: %s", bus_error_message(&error, r));
1047
1048 r = sd_bus_message_read(reply, "(tt)",
1049 &n_current_transactions,
1050 &n_total_transactions);
1051 if (r < 0)
1052 return bus_log_parse_error(r);
1053
1054 printf("%sTransactions%s\n"
1055 "Current Transactions: %" PRIu64 "\n"
1056 " Total Transactions: %" PRIu64 "\n",
1057 ansi_highlight(),
1058 ansi_normal(),
1059 n_current_transactions,
1060 n_total_transactions);
1061
1062 reply = sd_bus_message_unref(reply);
1063
1064 r = sd_bus_get_property(bus,
1065 "org.freedesktop.resolve1",
1066 "/org/freedesktop/resolve1",
1067 "org.freedesktop.resolve1.Manager",
1068 "CacheStatistics",
1069 &error,
1070 &reply,
1071 "(ttt)");
1072 if (r < 0)
1073 return log_error_errno(r, "Failed to get cache statistics: %s", bus_error_message(&error, r));
1074
1075 r = sd_bus_message_read(reply, "(ttt)",
1076 &cache_size,
1077 &n_cache_hit,
1078 &n_cache_miss);
1079 if (r < 0)
1080 return bus_log_parse_error(r);
1081
1082 printf("\n%sCache%s\n"
1083 " Current Cache Size: %" PRIu64 "\n"
1084 " Cache Hits: %" PRIu64 "\n"
1085 " Cache Misses: %" PRIu64 "\n",
1086 ansi_highlight(),
1087 ansi_normal(),
1088 cache_size,
1089 n_cache_hit,
1090 n_cache_miss);
1091
1092 reply = sd_bus_message_unref(reply);
1093
1094 r = sd_bus_get_property(bus,
1095 "org.freedesktop.resolve1",
1096 "/org/freedesktop/resolve1",
1097 "org.freedesktop.resolve1.Manager",
1098 "DNSSECStatistics",
1099 &error,
1100 &reply,
1101 "(tttt)");
1102 if (r < 0)
1103 return log_error_errno(r, "Failed to get DNSSEC statistics: %s", bus_error_message(&error, r));
1104
1105 r = sd_bus_message_read(reply, "(tttt)",
1106 &n_dnssec_secure,
1107 &n_dnssec_insecure,
1108 &n_dnssec_bogus,
1109 &n_dnssec_indeterminate);
1110 if (r < 0)
1111 return bus_log_parse_error(r);
1112
1113 printf("\n%sDNSSEC Verdicts%s\n"
1114 " Secure: %" PRIu64 "\n"
1115 " Insecure: %" PRIu64 "\n"
1116 " Bogus: %" PRIu64 "\n"
1117 " Indeterminate: %" PRIu64 "\n",
1118 ansi_highlight(),
1119 ansi_normal(),
1120 n_dnssec_secure,
1121 n_dnssec_insecure,
1122 n_dnssec_bogus,
1123 n_dnssec_indeterminate);
1124
1125 return 0;
1126 }
1127
1128 static int reset_statistics(int argc, char **argv, void *userdata) {
1129 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1130 sd_bus *bus = userdata;
1131 int r;
1132
1133 r = sd_bus_call_method(bus,
1134 "org.freedesktop.resolve1",
1135 "/org/freedesktop/resolve1",
1136 "org.freedesktop.resolve1.Manager",
1137 "ResetStatistics",
1138 &error,
1139 NULL,
1140 NULL);
1141 if (r < 0)
1142 return log_error_errno(r, "Failed to reset statistics: %s", bus_error_message(&error, r));
1143
1144 return 0;
1145 }
1146
1147 static int flush_caches(int argc, char **argv, void *userdata) {
1148 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1149 sd_bus *bus = userdata;
1150 int r;
1151
1152 r = sd_bus_call_method(bus,
1153 "org.freedesktop.resolve1",
1154 "/org/freedesktop/resolve1",
1155 "org.freedesktop.resolve1.Manager",
1156 "FlushCaches",
1157 &error,
1158 NULL,
1159 NULL);
1160 if (r < 0)
1161 return log_error_errno(r, "Failed to flush caches: %s", bus_error_message(&error, r));
1162
1163 return 0;
1164 }
1165
1166 static int reset_server_features(int argc, char **argv, void *userdata) {
1167 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1168 sd_bus *bus = userdata;
1169 int r;
1170
1171 r = sd_bus_call_method(bus,
1172 "org.freedesktop.resolve1",
1173 "/org/freedesktop/resolve1",
1174 "org.freedesktop.resolve1.Manager",
1175 "ResetServerFeatures",
1176 &error,
1177 NULL,
1178 NULL);
1179 if (r < 0)
1180 return log_error_errno(r, "Failed to reset server features: %s", bus_error_message(&error, r));
1181
1182 return 0;
1183 }
1184
1185 static int read_dns_server_one(sd_bus_message *m, bool with_ifindex, char **ret) {
1186 _cleanup_free_ char *pretty = NULL;
1187 int ifindex, family, r;
1188 const void *a;
1189 size_t sz;
1190
1191 assert(m);
1192 assert(ret);
1193
1194 r = sd_bus_message_enter_container(m, 'r', with_ifindex ? "iiay" : "iay");
1195 if (r <= 0)
1196 return r;
1197
1198 if (with_ifindex) {
1199 r = sd_bus_message_read(m, "i", &ifindex);
1200 if (r < 0)
1201 return r;
1202 }
1203
1204 r = sd_bus_message_read(m, "i", &family);
1205 if (r < 0)
1206 return r;
1207
1208 r = sd_bus_message_read_array(m, 'y', &a, &sz);
1209 if (r < 0)
1210 return r;
1211
1212 r = sd_bus_message_exit_container(m);
1213 if (r < 0)
1214 return r;
1215
1216 if (with_ifindex && ifindex != 0) {
1217 /* only show the global ones here */
1218 *ret = NULL;
1219 return 1;
1220 }
1221
1222 if (!IN_SET(family, AF_INET, AF_INET6)) {
1223 log_debug("Unexpected family, ignoring: %i", family);
1224
1225 *ret = NULL;
1226 return 1;
1227 }
1228
1229 if (sz != FAMILY_ADDRESS_SIZE(family)) {
1230 log_debug("Address size mismatch, ignoring.");
1231
1232 *ret = NULL;
1233 return 1;
1234 }
1235
1236 r = in_addr_to_string(family, a, &pretty);
1237 if (r < 0)
1238 return r;
1239
1240 *ret = TAKE_PTR(pretty);
1241
1242 return 1;
1243 }
1244
1245 static int map_link_dns_servers(sd_bus *bus, const char *member, sd_bus_message *m, sd_bus_error *error, void *userdata) {
1246 char ***l = userdata;
1247 int r;
1248
1249 assert(bus);
1250 assert(member);
1251 assert(m);
1252 assert(l);
1253
1254 r = sd_bus_message_enter_container(m, 'a', "(iay)");
1255 if (r < 0)
1256 return r;
1257
1258 for (;;) {
1259 char *pretty = NULL;
1260
1261 r = read_dns_server_one(m, false, &pretty);
1262 if (r < 0)
1263 return r;
1264 if (r == 0)
1265 break;
1266
1267 if (isempty(pretty))
1268 continue;
1269
1270 r = strv_consume(l, pretty);
1271 if (r < 0)
1272 return r;
1273 }
1274
1275 r = sd_bus_message_exit_container(m);
1276 if (r < 0)
1277 return r;
1278
1279 return 0;
1280 }
1281
1282 static int map_link_current_dns_server(sd_bus *bus, const char *member, sd_bus_message *m, sd_bus_error *error, void *userdata) {
1283 assert(m);
1284 assert(userdata);
1285
1286 return read_dns_server_one(m, false, userdata);
1287 }
1288
1289 static int read_domain_one(sd_bus_message *m, bool with_ifindex, char **ret) {
1290 _cleanup_free_ char *str = NULL;
1291 int ifindex, route_only, r;
1292 const char *domain;
1293
1294 assert(m);
1295 assert(ret);
1296
1297 if (with_ifindex)
1298 r = sd_bus_message_read(m, "(isb)", &ifindex, &domain, &route_only);
1299 else
1300 r = sd_bus_message_read(m, "(sb)", &domain, &route_only);
1301 if (r <= 0)
1302 return r;
1303
1304 if (with_ifindex && ifindex != 0) {
1305 /* only show the global ones here */
1306 *ret = NULL;
1307 return 1;
1308 }
1309
1310 if (route_only)
1311 str = strappend("~", domain);
1312 else
1313 str = strdup(domain);
1314 if (!str)
1315 return -ENOMEM;
1316
1317 *ret = TAKE_PTR(str);
1318
1319 return 1;
1320 }
1321
1322 static int map_link_domains(sd_bus *bus, const char *member, sd_bus_message *m, sd_bus_error *error, void *userdata) {
1323 char ***l = userdata;
1324 int r;
1325
1326 assert(bus);
1327 assert(member);
1328 assert(m);
1329 assert(l);
1330
1331 r = sd_bus_message_enter_container(m, 'a', "(sb)");
1332 if (r < 0)
1333 return r;
1334
1335 for (;;) {
1336 char *pretty = NULL;
1337
1338 r = read_domain_one(m, false, &pretty);
1339 if (r < 0)
1340 return r;
1341 if (r == 0)
1342 break;
1343
1344 if (isempty(pretty))
1345 continue;
1346
1347 r = strv_consume(l, pretty);
1348 if (r < 0)
1349 return r;
1350 }
1351
1352 r = sd_bus_message_exit_container(m);
1353 if (r < 0)
1354 return r;
1355
1356 return 0;
1357 }
1358
1359 static int status_print_strv_ifindex(int ifindex, const char *ifname, char **p) {
1360 char **i;
1361
1362 printf("%sLink %i (%s)%s:",
1363 ansi_highlight(), ifindex, ifname, ansi_normal());
1364
1365 STRV_FOREACH(i, p)
1366 printf(" %s", *i);
1367
1368 printf("\n");
1369
1370 return 0;
1371 }
1372
1373 static int status_ifindex(sd_bus *bus, int ifindex, const char *name, StatusMode mode, bool *empty_line) {
1374
1375 struct link_info {
1376 uint64_t scopes_mask;
1377 const char *llmnr;
1378 const char *mdns;
1379 const char *dns_over_tls;
1380 const char *dnssec;
1381 char *current_dns;
1382 char **dns;
1383 char **domains;
1384 char **ntas;
1385 bool dnssec_supported;
1386 } link_info = {};
1387
1388 static const struct bus_properties_map property_map[] = {
1389 { "ScopesMask", "t", NULL, offsetof(struct link_info, scopes_mask) },
1390 { "DNS", "a(iay)", map_link_dns_servers, offsetof(struct link_info, dns) },
1391 { "CurrentDNSServer", "(iay)", map_link_current_dns_server, offsetof(struct link_info, current_dns) },
1392 { "Domains", "a(sb)", map_link_domains, offsetof(struct link_info, domains) },
1393 { "LLMNR", "s", NULL, offsetof(struct link_info, llmnr) },
1394 { "MulticastDNS", "s", NULL, offsetof(struct link_info, mdns) },
1395 { "DNSOverTLS", "s", NULL, offsetof(struct link_info, dns_over_tls) },
1396 { "DNSSEC", "s", NULL, offsetof(struct link_info, dnssec) },
1397 { "DNSSECNegativeTrustAnchors", "as", NULL, offsetof(struct link_info, ntas) },
1398 { "DNSSECSupported", "b", NULL, offsetof(struct link_info, dnssec_supported) },
1399 {}
1400 };
1401
1402 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1403 _cleanup_(sd_bus_message_unrefp) sd_bus_message *m = NULL;
1404 _cleanup_free_ char *ifi = NULL, *p = NULL;
1405 char ifname[IF_NAMESIZE] = "";
1406 char **i;
1407 int r;
1408
1409 assert(bus);
1410 assert(ifindex > 0);
1411
1412 if (!name) {
1413 if (!if_indextoname(ifindex, ifname))
1414 return log_error_errno(errno, "Failed to resolve interface name for %i: %m", ifindex);
1415
1416 name = ifname;
1417 }
1418
1419 if (asprintf(&ifi, "%i", ifindex) < 0)
1420 return log_oom();
1421
1422 r = sd_bus_path_encode("/org/freedesktop/resolve1/link", ifi, &p);
1423 if (r < 0)
1424 return log_oom();
1425
1426 r = bus_map_all_properties(bus,
1427 "org.freedesktop.resolve1",
1428 p,
1429 property_map,
1430 BUS_MAP_BOOLEAN_AS_BOOL,
1431 &error,
1432 &m,
1433 &link_info);
1434 if (r < 0) {
1435 log_error_errno(r, "Failed to get link data for %i: %s", ifindex, bus_error_message(&error, r));
1436 goto finish;
1437 }
1438
1439 (void) pager_open(arg_no_pager, false);
1440
1441 if (mode == STATUS_DNS) {
1442 r = status_print_strv_ifindex(ifindex, name, link_info.dns);
1443 goto finish;
1444 }
1445
1446 if (mode == STATUS_DOMAIN) {
1447 r = status_print_strv_ifindex(ifindex, name, link_info.domains);
1448 goto finish;
1449 }
1450
1451 if (mode == STATUS_NTA) {
1452 r = status_print_strv_ifindex(ifindex, name, link_info.ntas);
1453 goto finish;
1454 }
1455
1456 if (mode == STATUS_LLMNR) {
1457 printf("%sLink %i (%s)%s: %s\n",
1458 ansi_highlight(), ifindex, name, ansi_normal(),
1459 strna(link_info.llmnr));
1460
1461 r = 0;
1462 goto finish;
1463 }
1464
1465 if (mode == STATUS_MDNS) {
1466 printf("%sLink %i (%s)%s: %s\n",
1467 ansi_highlight(), ifindex, name, ansi_normal(),
1468 strna(link_info.mdns));
1469
1470 r = 0;
1471 goto finish;
1472 }
1473
1474 if (mode == STATUS_PRIVATE) {
1475 printf("%sLink %i (%s)%s: %s\n",
1476 ansi_highlight(), ifindex, name, ansi_normal(),
1477 strna(link_info.dns_over_tls));
1478
1479 r = 0;
1480 goto finish;
1481 }
1482
1483 if (mode == STATUS_DNSSEC) {
1484 printf("%sLink %i (%s)%s: %s\n",
1485 ansi_highlight(), ifindex, name, ansi_normal(),
1486 strna(link_info.dnssec));
1487
1488 r = 0;
1489 goto finish;
1490 }
1491
1492 if (empty_line && *empty_line)
1493 fputc('\n', stdout);
1494
1495 printf("%sLink %i (%s)%s\n",
1496 ansi_highlight(), ifindex, name, ansi_normal());
1497
1498 if (link_info.scopes_mask == 0)
1499 printf(" Current Scopes: none\n");
1500 else
1501 printf(" Current Scopes:%s%s%s%s%s\n",
1502 link_info.scopes_mask & SD_RESOLVED_DNS ? " DNS" : "",
1503 link_info.scopes_mask & SD_RESOLVED_LLMNR_IPV4 ? " LLMNR/IPv4" : "",
1504 link_info.scopes_mask & SD_RESOLVED_LLMNR_IPV6 ? " LLMNR/IPv6" : "",
1505 link_info.scopes_mask & SD_RESOLVED_MDNS_IPV4 ? " mDNS/IPv4" : "",
1506 link_info.scopes_mask & SD_RESOLVED_MDNS_IPV6 ? " mDNS/IPv6" : "");
1507
1508 printf(" LLMNR setting: %s\n"
1509 "MulticastDNS setting: %s\n"
1510 " DNSOverTLS setting: %s\n"
1511 " DNSSEC setting: %s\n"
1512 " DNSSEC supported: %s\n",
1513 strna(link_info.llmnr),
1514 strna(link_info.mdns),
1515 strna(link_info.dns_over_tls),
1516 strna(link_info.dnssec),
1517 yes_no(link_info.dnssec_supported));
1518
1519 if (link_info.current_dns)
1520 printf(" Current DNS Server: %s\n", link_info.current_dns);
1521
1522 STRV_FOREACH(i, link_info.dns) {
1523 printf(" %s %s\n",
1524 i == link_info.dns ? "DNS Servers:" : " ",
1525 *i);
1526 }
1527
1528 STRV_FOREACH(i, link_info.domains) {
1529 printf(" %s %s\n",
1530 i == link_info.domains ? "DNS Domain:" : " ",
1531 *i);
1532 }
1533
1534 STRV_FOREACH(i, link_info.ntas) {
1535 printf(" %s %s\n",
1536 i == link_info.ntas ? "DNSSEC NTA:" : " ",
1537 *i);
1538 }
1539
1540 if (empty_line)
1541 *empty_line = true;
1542
1543 r = 0;
1544
1545 finish:
1546 free(link_info.current_dns);
1547 strv_free(link_info.dns);
1548 strv_free(link_info.domains);
1549 strv_free(link_info.ntas);
1550 return r;
1551 }
1552
1553 static int map_global_dns_servers(sd_bus *bus, const char *member, sd_bus_message *m, sd_bus_error *error, void *userdata) {
1554 char ***l = userdata;
1555 int r;
1556
1557 assert(bus);
1558 assert(member);
1559 assert(m);
1560 assert(l);
1561
1562 r = sd_bus_message_enter_container(m, 'a', "(iiay)");
1563 if (r < 0)
1564 return r;
1565
1566 for (;;) {
1567 char *pretty = NULL;
1568
1569 r = read_dns_server_one(m, true, &pretty);
1570 if (r < 0)
1571 return r;
1572 if (r == 0)
1573 break;
1574
1575 if (isempty(pretty))
1576 continue;
1577
1578 r = strv_consume(l, pretty);
1579 if (r < 0)
1580 return r;
1581 }
1582
1583 r = sd_bus_message_exit_container(m);
1584 if (r < 0)
1585 return r;
1586
1587 return 0;
1588 }
1589
1590 static int map_global_current_dns_server(sd_bus *bus, const char *member, sd_bus_message *m, sd_bus_error *error, void *userdata) {
1591 assert(m);
1592 assert(userdata);
1593
1594 return read_dns_server_one(m, true, userdata);
1595 }
1596
1597 static int map_global_domains(sd_bus *bus, const char *member, sd_bus_message *m, sd_bus_error *error, void *userdata) {
1598 char ***l = userdata;
1599 int r;
1600
1601 assert(bus);
1602 assert(member);
1603 assert(m);
1604 assert(l);
1605
1606 r = sd_bus_message_enter_container(m, 'a', "(isb)");
1607 if (r < 0)
1608 return r;
1609
1610 for (;;) {
1611 char *pretty = NULL;
1612
1613 r = read_domain_one(m, true, &pretty);
1614 if (r < 0)
1615 return r;
1616 if (r == 0)
1617 break;
1618
1619 if (isempty(pretty))
1620 continue;
1621
1622 r = strv_consume(l, pretty);
1623 if (r < 0)
1624 return r;
1625 }
1626
1627 r = sd_bus_message_exit_container(m);
1628 if (r < 0)
1629 return r;
1630
1631 return 0;
1632 }
1633
1634 static int status_print_strv_global(char **p) {
1635 char **i;
1636
1637 printf("%sGlobal%s:", ansi_highlight(), ansi_normal());
1638
1639 STRV_FOREACH(i, p)
1640 printf(" %s", *i);
1641
1642 printf("\n");
1643
1644 return 0;
1645 }
1646
1647 static int status_global(sd_bus *bus, StatusMode mode, bool *empty_line) {
1648
1649 struct global_info {
1650 char *current_dns;
1651 char **dns;
1652 char **fallback_dns;
1653 char **domains;
1654 char **ntas;
1655 const char *llmnr;
1656 const char *mdns;
1657 const char *dns_over_tls;
1658 const char *dnssec;
1659 bool dnssec_supported;
1660 } global_info = {};
1661
1662 static const struct bus_properties_map property_map[] = {
1663 { "DNS", "a(iiay)", map_global_dns_servers, offsetof(struct global_info, dns) },
1664 { "FallbackDNS", "a(iiay)", map_global_dns_servers, offsetof(struct global_info, fallback_dns) },
1665 { "CurrentDNSServer", "(iiay)", map_global_current_dns_server, offsetof(struct global_info, current_dns) },
1666 { "Domains", "a(isb)", map_global_domains, offsetof(struct global_info, domains) },
1667 { "DNSSECNegativeTrustAnchors", "as", NULL, offsetof(struct global_info, ntas) },
1668 { "LLMNR", "s", NULL, offsetof(struct global_info, llmnr) },
1669 { "MulticastDNS", "s", NULL, offsetof(struct global_info, mdns) },
1670 { "DNSOverTLS", "s", NULL, offsetof(struct global_info, dns_over_tls) },
1671 { "DNSSEC", "s", NULL, offsetof(struct global_info, dnssec) },
1672 { "DNSSECSupported", "b", NULL, offsetof(struct global_info, dnssec_supported) },
1673 {}
1674 };
1675
1676 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1677 _cleanup_(sd_bus_message_unrefp) sd_bus_message *m = NULL;
1678 char **i;
1679 int r;
1680
1681 assert(bus);
1682 assert(empty_line);
1683
1684 r = bus_map_all_properties(bus,
1685 "org.freedesktop.resolve1",
1686 "/org/freedesktop/resolve1",
1687 property_map,
1688 BUS_MAP_BOOLEAN_AS_BOOL,
1689 &error,
1690 &m,
1691 &global_info);
1692 if (r < 0) {
1693 log_error_errno(r, "Failed to get global data: %s", bus_error_message(&error, r));
1694 goto finish;
1695 }
1696
1697 (void) pager_open(arg_no_pager, false);
1698
1699 if (mode == STATUS_DNS) {
1700 r = status_print_strv_global(global_info.dns);
1701 goto finish;
1702 }
1703
1704 if (mode == STATUS_DOMAIN) {
1705 r = status_print_strv_global(global_info.domains);
1706 goto finish;
1707 }
1708
1709 if (mode == STATUS_NTA) {
1710 r = status_print_strv_global(global_info.ntas);
1711 goto finish;
1712 }
1713
1714 if (mode == STATUS_LLMNR) {
1715 printf("%sGlobal%s: %s\n", ansi_highlight(), ansi_normal(),
1716 strna(global_info.llmnr));
1717
1718 r = 0;
1719 goto finish;
1720 }
1721
1722 if (mode == STATUS_MDNS) {
1723 printf("%sGlobal%s: %s\n", ansi_highlight(), ansi_normal(),
1724 strna(global_info.mdns));
1725
1726 r = 0;
1727 goto finish;
1728 }
1729
1730 if (mode == STATUS_PRIVATE) {
1731 printf("%sGlobal%s: %s\n", ansi_highlight(), ansi_normal(),
1732 strna(global_info.dns_over_tls));
1733
1734 r = 0;
1735 goto finish;
1736 }
1737
1738 if (mode == STATUS_DNSSEC) {
1739 printf("%sGlobal%s: %s\n", ansi_highlight(), ansi_normal(),
1740 strna(global_info.dnssec));
1741
1742 r = 0;
1743 goto finish;
1744 }
1745
1746 printf("%sGlobal%s\n", ansi_highlight(), ansi_normal());
1747
1748 printf(" LLMNR setting: %s\n"
1749 "MulticastDNS setting: %s\n"
1750 " DNSOverTLS setting: %s\n"
1751 " DNSSEC setting: %s\n"
1752 " DNSSEC supported: %s\n",
1753 strna(global_info.llmnr),
1754 strna(global_info.mdns),
1755 strna(global_info.dns_over_tls),
1756 strna(global_info.dnssec),
1757 yes_no(global_info.dnssec_supported));
1758
1759 if (global_info.current_dns)
1760 printf(" Current DNS Server: %s\n", global_info.current_dns);
1761
1762 STRV_FOREACH(i, global_info.dns) {
1763 printf(" %s %s\n",
1764 i == global_info.dns ? "DNS Servers:" : " ",
1765 *i);
1766 }
1767
1768 STRV_FOREACH(i, global_info.fallback_dns) {
1769 printf("%s %s\n",
1770 i == global_info.fallback_dns ? "Fallback DNS Servers:" : " ",
1771 *i);
1772 }
1773
1774 STRV_FOREACH(i, global_info.domains) {
1775 printf(" %s %s\n",
1776 i == global_info.domains ? "DNS Domain:" : " ",
1777 *i);
1778 }
1779
1780 strv_sort(global_info.ntas);
1781 STRV_FOREACH(i, global_info.ntas) {
1782 printf(" %s %s\n",
1783 i == global_info.ntas ? "DNSSEC NTA:" : " ",
1784 *i);
1785 }
1786
1787 *empty_line = true;
1788
1789 r = 0;
1790
1791 finish:
1792 free(global_info.current_dns);
1793 strv_free(global_info.dns);
1794 strv_free(global_info.fallback_dns);
1795 strv_free(global_info.domains);
1796 strv_free(global_info.ntas);
1797
1798 return r;
1799 }
1800
1801 static int status_all(sd_bus *bus, StatusMode mode) {
1802 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL, *reply = NULL;
1803 _cleanup_(sd_netlink_unrefp) sd_netlink *rtnl = NULL;
1804 sd_netlink_message *i;
1805 bool empty_line = false;
1806 int r;
1807
1808 assert(bus);
1809
1810 r = status_global(bus, mode, &empty_line);
1811 if (r < 0)
1812 return r;
1813
1814 r = sd_netlink_open(&rtnl);
1815 if (r < 0)
1816 return log_error_errno(r, "Failed to connect to netlink: %m");
1817
1818 r = sd_rtnl_message_new_link(rtnl, &req, RTM_GETLINK, 0);
1819 if (r < 0)
1820 return rtnl_log_create_error(r);
1821
1822 r = sd_netlink_message_request_dump(req, true);
1823 if (r < 0)
1824 return rtnl_log_create_error(r);
1825
1826 r = sd_netlink_call(rtnl, req, 0, &reply);
1827 if (r < 0)
1828 return log_error_errno(r, "Failed to enumerate links: %m");
1829
1830 r = 0;
1831 for (i = reply; i; i = sd_netlink_message_next(i)) {
1832 const char *name;
1833 int ifindex, q;
1834 uint16_t type;
1835
1836 q = sd_netlink_message_get_type(i, &type);
1837 if (q < 0)
1838 return rtnl_log_parse_error(q);
1839
1840 if (type != RTM_NEWLINK)
1841 continue;
1842
1843 q = sd_rtnl_message_link_get_ifindex(i, &ifindex);
1844 if (q < 0)
1845 return rtnl_log_parse_error(q);
1846
1847 if (ifindex == LOOPBACK_IFINDEX)
1848 continue;
1849
1850 q = sd_netlink_message_read_string(i, IFLA_IFNAME, &name);
1851 if (q < 0)
1852 return rtnl_log_parse_error(q);
1853
1854 q = status_ifindex(bus, ifindex, name, mode, &empty_line);
1855 if (q < 0 && r >= 0)
1856 r = q;
1857 }
1858
1859 return r;
1860 }
1861
1862 static int verb_status(int argc, char **argv, void *userdata) {
1863 sd_bus *bus = userdata;
1864 int q, r = 0;
1865
1866 if (argc > 1) {
1867 char **ifname;
1868 bool empty_line = false;
1869
1870 STRV_FOREACH(ifname, argv + 1) {
1871 int ifindex;
1872
1873 ifindex = parse_ifindex_and_warn(*ifname);
1874 if (ifindex < 0)
1875 continue;
1876
1877 q = status_ifindex(bus, ifindex, NULL, STATUS_ALL, &empty_line);
1878 if (q < 0)
1879 r = q;
1880 }
1881 } else
1882 r = status_all(bus, STATUS_ALL);
1883
1884 return r;
1885 }
1886
1887 static int log_interface_is_managed(int r, int ifindex) {
1888 char ifname[IFNAMSIZ];
1889
1890 return log_error_errno(r,
1891 "The specified interface %s is managed by systemd-networkd. Operation refused.\n"
1892 "Please configure DNS settings for systemd-networkd managed interfaces directly in their .network files.",
1893 strna(if_indextoname(ifindex, ifname)));
1894 }
1895
1896 static int verb_dns(int argc, char **argv, void *userdata) {
1897 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1898 _cleanup_(sd_bus_message_unrefp) sd_bus_message *req = NULL;
1899 sd_bus *bus = userdata;
1900 char **p;
1901 int r;
1902
1903 assert(bus);
1904
1905 if (argc <= 1)
1906 return status_all(bus, STATUS_DNS);
1907
1908 r = ifname_mangle(argv[1], false);
1909 if (r < 0)
1910 return r;
1911
1912 if (argc == 2)
1913 return status_ifindex(bus, arg_ifindex, NULL, STATUS_DNS, NULL);
1914
1915 r = sd_bus_message_new_method_call(
1916 bus,
1917 &req,
1918 "org.freedesktop.resolve1",
1919 "/org/freedesktop/resolve1",
1920 "org.freedesktop.resolve1.Manager",
1921 "SetLinkDNS");
1922 if (r < 0)
1923 return bus_log_create_error(r);
1924
1925 r = sd_bus_message_append(req, "i", arg_ifindex);
1926 if (r < 0)
1927 return bus_log_create_error(r);
1928
1929 r = sd_bus_message_open_container(req, 'a', "(iay)");
1930 if (r < 0)
1931 return bus_log_create_error(r);
1932
1933 /* If only argument is the empty string, then call SetLinkDNS() with an
1934 * empty list, which will clear the list of domains for an interface. */
1935 if (!strv_equal(argv + 2, STRV_MAKE(""))) {
1936 STRV_FOREACH(p, argv + 2) {
1937 struct in_addr_data data;
1938
1939 r = in_addr_from_string_auto(*p, &data.family, &data.address);
1940 if (r < 0)
1941 return log_error_errno(r, "Failed to parse DNS server address: %s", *p);
1942
1943 r = sd_bus_message_open_container(req, 'r', "iay");
1944 if (r < 0)
1945 return bus_log_create_error(r);
1946
1947 r = sd_bus_message_append(req, "i", data.family);
1948 if (r < 0)
1949 return bus_log_create_error(r);
1950
1951 r = sd_bus_message_append_array(req, 'y', &data.address, FAMILY_ADDRESS_SIZE(data.family));
1952 if (r < 0)
1953 return bus_log_create_error(r);
1954
1955 r = sd_bus_message_close_container(req);
1956 if (r < 0)
1957 return bus_log_create_error(r);
1958 }
1959 }
1960
1961 r = sd_bus_message_close_container(req);
1962 if (r < 0)
1963 return bus_log_create_error(r);
1964
1965 r = sd_bus_call(bus, req, 0, &error, NULL);
1966 if (r < 0) {
1967 if (sd_bus_error_has_name(&error, BUS_ERROR_LINK_BUSY))
1968 return log_interface_is_managed(r, arg_ifindex);
1969
1970 if (arg_ifindex_permissive &&
1971 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
1972 return 0;
1973
1974 return log_error_errno(r, "Failed to set DNS configuration: %s", bus_error_message(&error, r));
1975 }
1976
1977 return 0;
1978 }
1979
1980 static int verb_domain(int argc, char **argv, void *userdata) {
1981 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1982 _cleanup_(sd_bus_message_unrefp) sd_bus_message *req = NULL;
1983 sd_bus *bus = userdata;
1984 char **p;
1985 int r;
1986
1987 assert(bus);
1988
1989 if (argc <= 1)
1990 return status_all(bus, STATUS_DOMAIN);
1991
1992 r = ifname_mangle(argv[1], false);
1993 if (r < 0)
1994 return r;
1995
1996 if (argc == 2)
1997 return status_ifindex(bus, arg_ifindex, NULL, STATUS_DOMAIN, NULL);
1998
1999 r = sd_bus_message_new_method_call(
2000 bus,
2001 &req,
2002 "org.freedesktop.resolve1",
2003 "/org/freedesktop/resolve1",
2004 "org.freedesktop.resolve1.Manager",
2005 "SetLinkDomains");
2006 if (r < 0)
2007 return bus_log_create_error(r);
2008
2009 r = sd_bus_message_append(req, "i", arg_ifindex);
2010 if (r < 0)
2011 return bus_log_create_error(r);
2012
2013 r = sd_bus_message_open_container(req, 'a', "(sb)");
2014 if (r < 0)
2015 return bus_log_create_error(r);
2016
2017 /* If only argument is the empty string, then call SetLinkDomains() with an
2018 * empty list, which will clear the list of domains for an interface. */
2019 if (!strv_equal(argv + 2, STRV_MAKE(""))) {
2020 STRV_FOREACH(p, argv + 2) {
2021 const char *n;
2022
2023 n = **p == '~' ? *p + 1 : *p;
2024
2025 r = dns_name_is_valid(n);
2026 if (r < 0)
2027 return log_error_errno(r, "Failed to validate specified domain %s: %m", n);
2028 if (r == 0) {
2029 log_error("Domain not valid: %s", n);
2030 return -EINVAL;
2031 }
2032
2033 r = sd_bus_message_append(req, "(sb)", n, **p == '~');
2034 if (r < 0)
2035 return bus_log_create_error(r);
2036 }
2037 }
2038
2039 r = sd_bus_message_close_container(req);
2040 if (r < 0)
2041 return bus_log_create_error(r);
2042
2043 r = sd_bus_call(bus, req, 0, &error, NULL);
2044 if (r < 0) {
2045 if (sd_bus_error_has_name(&error, BUS_ERROR_LINK_BUSY))
2046 return log_interface_is_managed(r, arg_ifindex);
2047
2048 if (arg_ifindex_permissive &&
2049 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
2050 return 0;
2051
2052 return log_error_errno(r, "Failed to set domain configuration: %s", bus_error_message(&error, r));
2053 }
2054
2055 return 0;
2056 }
2057
2058 static int verb_llmnr(int argc, char **argv, void *userdata) {
2059 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2060 sd_bus *bus = userdata;
2061 int r;
2062
2063 assert(bus);
2064
2065 if (argc <= 1)
2066 return status_all(bus, STATUS_LLMNR);
2067
2068 r = ifname_mangle(argv[1], false);
2069 if (r < 0)
2070 return r;
2071
2072 if (argc == 2)
2073 return status_ifindex(bus, arg_ifindex, NULL, STATUS_LLMNR, NULL);
2074
2075 r = sd_bus_call_method(bus,
2076 "org.freedesktop.resolve1",
2077 "/org/freedesktop/resolve1",
2078 "org.freedesktop.resolve1.Manager",
2079 "SetLinkLLMNR",
2080 &error,
2081 NULL,
2082 "is", arg_ifindex, argv[2]);
2083 if (r < 0) {
2084 if (sd_bus_error_has_name(&error, BUS_ERROR_LINK_BUSY))
2085 return log_interface_is_managed(r, arg_ifindex);
2086
2087 if (arg_ifindex_permissive &&
2088 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
2089 return 0;
2090
2091 return log_error_errno(r, "Failed to set LLMNR configuration: %s", bus_error_message(&error, r));
2092 }
2093
2094 return 0;
2095 }
2096
2097 static int verb_mdns(int argc, char **argv, void *userdata) {
2098 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2099 sd_bus *bus = userdata;
2100 int r;
2101
2102 assert(bus);
2103
2104 if (argc <= 1)
2105 return status_all(bus, STATUS_MDNS);
2106
2107 r = ifname_mangle(argv[1], false);
2108 if (r < 0)
2109 return r;
2110
2111 if (argc == 2)
2112 return status_ifindex(bus, arg_ifindex, NULL, STATUS_MDNS, NULL);
2113
2114 r = sd_bus_call_method(bus,
2115 "org.freedesktop.resolve1",
2116 "/org/freedesktop/resolve1",
2117 "org.freedesktop.resolve1.Manager",
2118 "SetLinkMulticastDNS",
2119 &error,
2120 NULL,
2121 "is", arg_ifindex, argv[2]);
2122 if (r < 0) {
2123 if (sd_bus_error_has_name(&error, BUS_ERROR_LINK_BUSY))
2124 return log_interface_is_managed(r, arg_ifindex);
2125
2126 if (arg_ifindex_permissive &&
2127 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
2128 return 0;
2129
2130 return log_error_errno(r, "Failed to set MulticastDNS configuration: %s", bus_error_message(&error, r));
2131 }
2132
2133 return 0;
2134 }
2135
2136 static int verb_dns_over_tls(int argc, char **argv, void *userdata) {
2137 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2138 sd_bus *bus = userdata;
2139 int r;
2140
2141 assert(bus);
2142
2143 if (argc <= 1)
2144 return status_all(bus, STATUS_PRIVATE);
2145
2146 r = ifname_mangle(argv[1], false);
2147 if (r < 0)
2148 return r;
2149
2150 if (argc == 2)
2151 return status_ifindex(bus, arg_ifindex, NULL, STATUS_PRIVATE, NULL);
2152
2153 r = sd_bus_call_method(bus,
2154 "org.freedesktop.resolve1",
2155 "/org/freedesktop/resolve1",
2156 "org.freedesktop.resolve1.Manager",
2157 "SetLinkDNSOverTLS",
2158 &error,
2159 NULL,
2160 "is", arg_ifindex, argv[2]);
2161 if (r < 0) {
2162 if (sd_bus_error_has_name(&error, BUS_ERROR_LINK_BUSY))
2163 return log_interface_is_managed(r, arg_ifindex);
2164
2165 if (arg_ifindex_permissive &&
2166 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
2167 return 0;
2168
2169 return log_error_errno(r, "Failed to set DNSOverTLS configuration: %s", bus_error_message(&error, r));
2170 }
2171
2172 return 0;
2173 }
2174
2175 static int verb_dnssec(int argc, char **argv, void *userdata) {
2176 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2177 sd_bus *bus = userdata;
2178 int r;
2179
2180 assert(bus);
2181
2182 if (argc <= 1)
2183 return status_all(bus, STATUS_DNSSEC);
2184
2185 r = ifname_mangle(argv[1], false);
2186 if (r < 0)
2187 return r;
2188
2189 if (argc == 2)
2190 return status_ifindex(bus, arg_ifindex, NULL, STATUS_DNSSEC, NULL);
2191
2192 r = sd_bus_call_method(bus,
2193 "org.freedesktop.resolve1",
2194 "/org/freedesktop/resolve1",
2195 "org.freedesktop.resolve1.Manager",
2196 "SetLinkDNSSEC",
2197 &error,
2198 NULL,
2199 "is", arg_ifindex, argv[2]);
2200 if (r < 0) {
2201 if (sd_bus_error_has_name(&error, BUS_ERROR_LINK_BUSY))
2202 return log_interface_is_managed(r, arg_ifindex);
2203
2204 if (arg_ifindex_permissive &&
2205 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
2206 return 0;
2207
2208 return log_error_errno(r, "Failed to set DNSSEC configuration: %s", bus_error_message(&error, r));
2209 }
2210
2211 return 0;
2212 }
2213
2214 static int verb_nta(int argc, char **argv, void *userdata) {
2215 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2216 _cleanup_(sd_bus_message_unrefp) sd_bus_message *req = NULL;
2217 sd_bus *bus = userdata;
2218 char **p;
2219 int r;
2220 bool clear;
2221
2222 assert(bus);
2223
2224 if (argc <= 1)
2225 return status_all(bus, STATUS_NTA);
2226
2227 r = ifname_mangle(argv[1], false);
2228 if (r < 0)
2229 return r;
2230
2231 if (argc == 2)
2232 return status_ifindex(bus, arg_ifindex, NULL, STATUS_NTA, NULL);
2233
2234 /* If only argument is the empty string, then call SetLinkDNSSECNegativeTrustAnchors()
2235 * with an empty list, which will clear the list of domains for an interface. */
2236 clear = strv_equal(argv + 2, STRV_MAKE(""));
2237
2238 if (!clear)
2239 STRV_FOREACH(p, argv + 2) {
2240 r = dns_name_is_valid(*p);
2241 if (r < 0)
2242 return log_error_errno(r, "Failed to validate specified domain %s: %m", *p);
2243 if (r == 0) {
2244 log_error("Domain not valid: %s", *p);
2245 return -EINVAL;
2246 }
2247 }
2248
2249 r = sd_bus_message_new_method_call(
2250 bus,
2251 &req,
2252 "org.freedesktop.resolve1",
2253 "/org/freedesktop/resolve1",
2254 "org.freedesktop.resolve1.Manager",
2255 "SetLinkDNSSECNegativeTrustAnchors");
2256 if (r < 0)
2257 return bus_log_create_error(r);
2258
2259 r = sd_bus_message_append(req, "i", arg_ifindex);
2260 if (r < 0)
2261 return bus_log_create_error(r);
2262
2263 r = sd_bus_message_append_strv(req, clear ? NULL : argv + 2);
2264 if (r < 0)
2265 return bus_log_create_error(r);
2266
2267 r = sd_bus_call(bus, req, 0, &error, NULL);
2268 if (r < 0) {
2269 if (sd_bus_error_has_name(&error, BUS_ERROR_LINK_BUSY))
2270 return log_interface_is_managed(r, arg_ifindex);
2271
2272 if (arg_ifindex_permissive &&
2273 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
2274 return 0;
2275
2276 return log_error_errno(r, "Failed to set DNSSEC NTA configuration: %s", bus_error_message(&error, r));
2277 }
2278
2279 return 0;
2280 }
2281
2282 static int verb_revert_link(int argc, char **argv, void *userdata) {
2283 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2284 sd_bus *bus = userdata;
2285 int r;
2286
2287 assert(bus);
2288
2289 r = ifname_mangle(argv[1], false);
2290 if (r < 0)
2291 return r;
2292
2293 r = sd_bus_call_method(bus,
2294 "org.freedesktop.resolve1",
2295 "/org/freedesktop/resolve1",
2296 "org.freedesktop.resolve1.Manager",
2297 "RevertLink",
2298 &error,
2299 NULL,
2300 "i", arg_ifindex);
2301 if (r < 0) {
2302 if (arg_ifindex_permissive &&
2303 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
2304 return 0;
2305
2306 return log_error_errno(r, "Failed to revert interface configuration: %s", bus_error_message(&error, r));
2307 }
2308
2309 return 0;
2310 }
2311
2312 static void help_protocol_types(void) {
2313 if (arg_legend)
2314 puts("Known protocol types:");
2315 puts("dns\nllmnr\nllmnr-ipv4\nllmnr-ipv6\nmdns\nmdns-ipv4\nmdns-ipv6");
2316 }
2317
2318 static void help_dns_types(void) {
2319 if (arg_legend)
2320 puts("Known DNS RR types:");
2321
2322 DUMP_STRING_TABLE(dns_type, int, _DNS_TYPE_MAX);
2323 }
2324
2325 static void help_dns_classes(void) {
2326 if (arg_legend)
2327 puts("Known DNS RR classes:");
2328
2329 DUMP_STRING_TABLE(dns_class, int, _DNS_CLASS_MAX);
2330 }
2331
2332 static void compat_help(void) {
2333 printf("%1$s [OPTIONS...] HOSTNAME|ADDRESS...\n"
2334 "%1$s [OPTIONS...] --service [[NAME] TYPE] DOMAIN\n"
2335 "%1$s [OPTIONS...] --openpgp EMAIL@DOMAIN...\n"
2336 "%1$s [OPTIONS...] --statistics\n"
2337 "%1$s [OPTIONS...] --reset-statistics\n"
2338 "\n"
2339 "Resolve domain names, IPv4 and IPv6 addresses, DNS records, and services.\n\n"
2340 " -h --help Show this help\n"
2341 " --version Show package version\n"
2342 " --no-pager Do not pipe output into a pager\n"
2343 " -4 Resolve IPv4 addresses\n"
2344 " -6 Resolve IPv6 addresses\n"
2345 " -i --interface=INTERFACE Look on interface\n"
2346 " -p --protocol=PROTO|help Look via protocol\n"
2347 " -t --type=TYPE|help Query RR with DNS type\n"
2348 " -c --class=CLASS|help Query RR with DNS class\n"
2349 " --service Resolve service (SRV)\n"
2350 " --service-address=BOOL Resolve address for services (default: yes)\n"
2351 " --service-txt=BOOL Resolve TXT records for services (default: yes)\n"
2352 " --openpgp Query OpenPGP public key\n"
2353 " --tlsa Query TLS public key\n"
2354 " --cname=BOOL Follow CNAME redirects (default: yes)\n"
2355 " --search=BOOL Use search domains for single-label names\n"
2356 " (default: yes)\n"
2357 " --raw[=payload|packet] Dump the answer as binary data\n"
2358 " --legend=BOOL Print headers and additional info (default: yes)\n"
2359 " --statistics Show resolver statistics\n"
2360 " --reset-statistics Reset resolver statistics\n"
2361 " --status Show link and server status\n"
2362 " --flush-caches Flush all local DNS caches\n"
2363 " --reset-server-features\n"
2364 " Forget learnt DNS server feature levels\n"
2365 " --set-dns=SERVER Set per-interface DNS server address\n"
2366 " --set-domain=DOMAIN Set per-interface search domain\n"
2367 " --set-llmnr=MODE Set per-interface LLMNR mode\n"
2368 " --set-mdns=MODE Set per-interface MulticastDNS mode\n"
2369 " --set-dnsovertls=MODE Set per-interface DNS-over-TLS mode\n"
2370 " --set-dnssec=MODE Set per-interface DNSSEC mode\n"
2371 " --set-nta=DOMAIN Set per-interface DNSSEC NTA\n"
2372 " --revert Revert per-interface configuration\n"
2373 , program_invocation_short_name);
2374 }
2375
2376 static void native_help(void) {
2377 printf("%1$s [OPTIONS...] {COMMAND} ...\n"
2378 "\n"
2379 "Send control commands to the network name resolution manager, or\n"
2380 "resolve domain names, IPv4 and IPv6 addresses, DNS records, and services.\n"
2381 "\n"
2382 " -h --help Show this help\n"
2383 " --version Show package version\n"
2384 " --no-pager Do not pipe output into a pager\n"
2385 " -4 Resolve IPv4 addresses\n"
2386 " -6 Resolve IPv6 addresses\n"
2387 " -i --interface=INTERFACE Look on interface\n"
2388 " -p --protocol=PROTO|help Look via protocol\n"
2389 " -t --type=TYPE|help Query RR with DNS type\n"
2390 " -c --class=CLASS|help Query RR with DNS class\n"
2391 " --service-address=BOOL Resolve address for services (default: yes)\n"
2392 " --service-txt=BOOL Resolve TXT records for services (default: yes)\n"
2393 " --cname=BOOL Follow CNAME redirects (default: yes)\n"
2394 " --search=BOOL Use search domains for single-label names\n"
2395 " (default: yes)\n"
2396 " --raw[=payload|packet] Dump the answer as binary data\n"
2397 " --legend=BOOL Print headers and additional info (default: yes)\n"
2398 "\n"
2399 "Commands:\n"
2400 " query HOSTNAME|ADDRESS... Resolve domain names, IPv4 and IPv6 addresses\n"
2401 " service [[NAME] TYPE] DOMAIN Resolve service (SRV)\n"
2402 " openpgp EMAIL@DOMAIN... Query OpenPGP public key\n"
2403 " tlsa DOMAIN[:PORT]... Query TLS public key\n"
2404 " status [LINK...] Show link and server status\n"
2405 " statistics Show resolver statistics\n"
2406 " reset-statistics Reset resolver statistics\n"
2407 " flush-caches Flush all local DNS caches\n"
2408 " reset-server-features Forget learnt DNS server feature levels\n"
2409 " dns [LINK [SERVER...]] Get/set per-interface DNS server address\n"
2410 " domain [LINK [DOMAIN...]] Get/set per-interface search domain\n"
2411 " llmnr [LINK [MODE]] Get/set per-interface LLMNR mode\n"
2412 " mdns [LINK [MODE]] Get/set per-interface MulticastDNS mode\n"
2413 " dnsovertls [LINK [MODE]] Get/set per-interface DNS-over-TLS mode\n"
2414 " dnssec [LINK [MODE]] Get/set per-interface DNSSEC mode\n"
2415 " nta [LINK [DOMAIN...]] Get/set per-interface DNSSEC NTA\n"
2416 " revert LINK Revert per-interface configuration\n"
2417 , program_invocation_short_name);
2418 }
2419
2420 static int verb_help(int argc, char **argv, void *userdata) {
2421 native_help();
2422 return 0;
2423 }
2424
2425 static int compat_parse_argv(int argc, char *argv[]) {
2426 enum {
2427 ARG_VERSION = 0x100,
2428 ARG_LEGEND,
2429 ARG_SERVICE,
2430 ARG_CNAME,
2431 ARG_SERVICE_ADDRESS,
2432 ARG_SERVICE_TXT,
2433 ARG_OPENPGP,
2434 ARG_TLSA,
2435 ARG_RAW,
2436 ARG_SEARCH,
2437 ARG_STATISTICS,
2438 ARG_RESET_STATISTICS,
2439 ARG_STATUS,
2440 ARG_FLUSH_CACHES,
2441 ARG_RESET_SERVER_FEATURES,
2442 ARG_NO_PAGER,
2443 ARG_SET_DNS,
2444 ARG_SET_DOMAIN,
2445 ARG_SET_LLMNR,
2446 ARG_SET_MDNS,
2447 ARG_SET_PRIVATE,
2448 ARG_SET_DNSSEC,
2449 ARG_SET_NTA,
2450 ARG_REVERT_LINK,
2451 };
2452
2453 static const struct option options[] = {
2454 { "help", no_argument, NULL, 'h' },
2455 { "version", no_argument, NULL, ARG_VERSION },
2456 { "type", required_argument, NULL, 't' },
2457 { "class", required_argument, NULL, 'c' },
2458 { "legend", required_argument, NULL, ARG_LEGEND },
2459 { "interface", required_argument, NULL, 'i' },
2460 { "protocol", required_argument, NULL, 'p' },
2461 { "cname", required_argument, NULL, ARG_CNAME },
2462 { "service", no_argument, NULL, ARG_SERVICE },
2463 { "service-address", required_argument, NULL, ARG_SERVICE_ADDRESS },
2464 { "service-txt", required_argument, NULL, ARG_SERVICE_TXT },
2465 { "openpgp", no_argument, NULL, ARG_OPENPGP },
2466 { "tlsa", optional_argument, NULL, ARG_TLSA },
2467 { "raw", optional_argument, NULL, ARG_RAW },
2468 { "search", required_argument, NULL, ARG_SEARCH },
2469 { "statistics", no_argument, NULL, ARG_STATISTICS, },
2470 { "reset-statistics", no_argument, NULL, ARG_RESET_STATISTICS },
2471 { "status", no_argument, NULL, ARG_STATUS },
2472 { "flush-caches", no_argument, NULL, ARG_FLUSH_CACHES },
2473 { "reset-server-features", no_argument, NULL, ARG_RESET_SERVER_FEATURES },
2474 { "no-pager", no_argument, NULL, ARG_NO_PAGER },
2475 { "set-dns", required_argument, NULL, ARG_SET_DNS },
2476 { "set-domain", required_argument, NULL, ARG_SET_DOMAIN },
2477 { "set-llmnr", required_argument, NULL, ARG_SET_LLMNR },
2478 { "set-mdns", required_argument, NULL, ARG_SET_MDNS },
2479 { "set-dnsovertls", required_argument, NULL, ARG_SET_PRIVATE },
2480 { "set-dnssec", required_argument, NULL, ARG_SET_DNSSEC },
2481 { "set-nta", required_argument, NULL, ARG_SET_NTA },
2482 { "revert", no_argument, NULL, ARG_REVERT_LINK },
2483 {}
2484 };
2485
2486 int c, r;
2487
2488 assert(argc >= 0);
2489 assert(argv);
2490
2491 while ((c = getopt_long(argc, argv, "h46i:t:c:p:", options, NULL)) >= 0)
2492 switch(c) {
2493
2494 case 'h':
2495 compat_help();
2496 return 0; /* done */;
2497
2498 case ARG_VERSION:
2499 return version();
2500
2501 case '4':
2502 arg_family = AF_INET;
2503 break;
2504
2505 case '6':
2506 arg_family = AF_INET6;
2507 break;
2508
2509 case 'i':
2510 arg_ifname = mfree(arg_ifname);
2511 r = ifname_mangle(optarg, true);
2512 if (r < 0)
2513 return r;
2514 break;
2515
2516 case 't':
2517 if (streq(optarg, "help")) {
2518 help_dns_types();
2519 return 0;
2520 }
2521
2522 r = dns_type_from_string(optarg);
2523 if (r < 0) {
2524 log_error("Failed to parse RR record type %s", optarg);
2525 return r;
2526 }
2527 arg_type = (uint16_t) r;
2528 assert((int) arg_type == r);
2529
2530 arg_mode = MODE_RESOLVE_RECORD;
2531 break;
2532
2533 case 'c':
2534 if (streq(optarg, "help")) {
2535 help_dns_classes();
2536 return 0;
2537 }
2538
2539 r = dns_class_from_string(optarg);
2540 if (r < 0) {
2541 log_error("Failed to parse RR record class %s", optarg);
2542 return r;
2543 }
2544 arg_class = (uint16_t) r;
2545 assert((int) arg_class == r);
2546
2547 break;
2548
2549 case ARG_LEGEND:
2550 r = parse_boolean(optarg);
2551 if (r < 0)
2552 return log_error_errno(r, "Failed to parse --legend= argument");
2553
2554 arg_legend = r;
2555 break;
2556
2557 case 'p':
2558 if (streq(optarg, "help")) {
2559 help_protocol_types();
2560 return 0;
2561 } else if (streq(optarg, "dns"))
2562 arg_flags |= SD_RESOLVED_DNS;
2563 else if (streq(optarg, "llmnr"))
2564 arg_flags |= SD_RESOLVED_LLMNR;
2565 else if (streq(optarg, "llmnr-ipv4"))
2566 arg_flags |= SD_RESOLVED_LLMNR_IPV4;
2567 else if (streq(optarg, "llmnr-ipv6"))
2568 arg_flags |= SD_RESOLVED_LLMNR_IPV6;
2569 else if (streq(optarg, "mdns"))
2570 arg_flags |= SD_RESOLVED_MDNS;
2571 else if (streq(optarg, "mdns-ipv4"))
2572 arg_flags |= SD_RESOLVED_MDNS_IPV4;
2573 else if (streq(optarg, "mdns-ipv6"))
2574 arg_flags |= SD_RESOLVED_MDNS_IPV6;
2575 else {
2576 log_error("Unknown protocol specifier: %s", optarg);
2577 return -EINVAL;
2578 }
2579
2580 break;
2581
2582 case ARG_SERVICE:
2583 arg_mode = MODE_RESOLVE_SERVICE;
2584 break;
2585
2586 case ARG_OPENPGP:
2587 arg_mode = MODE_RESOLVE_OPENPGP;
2588 break;
2589
2590 case ARG_TLSA:
2591 arg_mode = MODE_RESOLVE_TLSA;
2592 if (!optarg || service_family_is_valid(optarg))
2593 arg_service_family = optarg;
2594 else {
2595 log_error("Unknown service family \"%s\".", optarg);
2596 return -EINVAL;
2597 }
2598 break;
2599
2600 case ARG_RAW:
2601 if (on_tty()) {
2602 log_error("Refusing to write binary data to tty.");
2603 return -ENOTTY;
2604 }
2605
2606 if (optarg == NULL || streq(optarg, "payload"))
2607 arg_raw = RAW_PAYLOAD;
2608 else if (streq(optarg, "packet"))
2609 arg_raw = RAW_PACKET;
2610 else {
2611 log_error("Unknown --raw specifier \"%s\".", optarg);
2612 return -EINVAL;
2613 }
2614
2615 arg_legend = false;
2616 break;
2617
2618 case ARG_CNAME:
2619 r = parse_boolean(optarg);
2620 if (r < 0)
2621 return log_error_errno(r, "Failed to parse --cname= argument.");
2622 SET_FLAG(arg_flags, SD_RESOLVED_NO_CNAME, r == 0);
2623 break;
2624
2625 case ARG_SERVICE_ADDRESS:
2626 r = parse_boolean(optarg);
2627 if (r < 0)
2628 return log_error_errno(r, "Failed to parse --service-address= argument.");
2629 SET_FLAG(arg_flags, SD_RESOLVED_NO_ADDRESS, r == 0);
2630 break;
2631
2632 case ARG_SERVICE_TXT:
2633 r = parse_boolean(optarg);
2634 if (r < 0)
2635 return log_error_errno(r, "Failed to parse --service-txt= argument.");
2636 SET_FLAG(arg_flags, SD_RESOLVED_NO_TXT, r == 0);
2637 break;
2638
2639 case ARG_SEARCH:
2640 r = parse_boolean(optarg);
2641 if (r < 0)
2642 return log_error_errno(r, "Failed to parse --search argument.");
2643 SET_FLAG(arg_flags, SD_RESOLVED_NO_SEARCH, r == 0);
2644 break;
2645
2646 case ARG_STATISTICS:
2647 arg_mode = MODE_STATISTICS;
2648 break;
2649
2650 case ARG_RESET_STATISTICS:
2651 arg_mode = MODE_RESET_STATISTICS;
2652 break;
2653
2654 case ARG_FLUSH_CACHES:
2655 arg_mode = MODE_FLUSH_CACHES;
2656 break;
2657
2658 case ARG_RESET_SERVER_FEATURES:
2659 arg_mode = MODE_RESET_SERVER_FEATURES;
2660 break;
2661
2662 case ARG_STATUS:
2663 arg_mode = MODE_STATUS;
2664 break;
2665
2666 case ARG_NO_PAGER:
2667 arg_no_pager = true;
2668 break;
2669
2670 case ARG_SET_DNS:
2671 r = strv_extend(&arg_set_dns, optarg);
2672 if (r < 0)
2673 return log_oom();
2674
2675 arg_mode = MODE_SET_LINK;
2676 break;
2677
2678 case ARG_SET_DOMAIN:
2679 r = strv_extend(&arg_set_domain, optarg);
2680 if (r < 0)
2681 return log_oom();
2682
2683 arg_mode = MODE_SET_LINK;
2684 break;
2685
2686 case ARG_SET_LLMNR:
2687 arg_set_llmnr = optarg;
2688 arg_mode = MODE_SET_LINK;
2689 break;
2690
2691 case ARG_SET_MDNS:
2692 arg_set_mdns = optarg;
2693 arg_mode = MODE_SET_LINK;
2694 break;
2695
2696 case ARG_SET_PRIVATE:
2697 arg_set_dns_over_tls = optarg;
2698 arg_mode = MODE_SET_LINK;
2699 break;
2700
2701 case ARG_SET_DNSSEC:
2702 arg_set_dnssec = optarg;
2703 arg_mode = MODE_SET_LINK;
2704 break;
2705
2706 case ARG_SET_NTA:
2707 r = strv_extend(&arg_set_nta, optarg);
2708 if (r < 0)
2709 return log_oom();
2710
2711 arg_mode = MODE_SET_LINK;
2712 break;
2713
2714 case ARG_REVERT_LINK:
2715 arg_mode = MODE_REVERT_LINK;
2716 break;
2717
2718 case '?':
2719 return -EINVAL;
2720
2721 default:
2722 assert_not_reached("Unhandled option");
2723 }
2724
2725 if (arg_type == 0 && arg_class != 0) {
2726 log_error("--class= may only be used in conjunction with --type=.");
2727 return -EINVAL;
2728 }
2729
2730 if (arg_type != 0 && arg_mode == MODE_RESOLVE_SERVICE) {
2731 log_error("--service and --type= may not be combined.");
2732 return -EINVAL;
2733 }
2734
2735 if (arg_type != 0 && arg_class == 0)
2736 arg_class = DNS_CLASS_IN;
2737
2738 if (arg_class != 0 && arg_type == 0)
2739 arg_type = DNS_TYPE_A;
2740
2741 if (IN_SET(arg_mode, MODE_SET_LINK, MODE_REVERT_LINK)) {
2742
2743 if (arg_ifindex <= 0) {
2744 log_error("--set-dns=, --set-domain=, --set-llmnr=, --set-mdns=, --set-dnsovertls=, --set-dnssec=, --set-nta= and --revert require --interface=.");
2745 return -EINVAL;
2746 }
2747
2748 if (arg_ifindex == LOOPBACK_IFINDEX) {
2749 log_error("Interface can't be the loopback interface (lo). Sorry.");
2750 return -EINVAL;
2751 }
2752 }
2753
2754 return 1 /* work to do */;
2755 }
2756
2757 static int native_parse_argv(int argc, char *argv[]) {
2758 enum {
2759 ARG_VERSION = 0x100,
2760 ARG_LEGEND,
2761 ARG_CNAME,
2762 ARG_SERVICE_ADDRESS,
2763 ARG_SERVICE_TXT,
2764 ARG_RAW,
2765 ARG_SEARCH,
2766 ARG_NO_PAGER,
2767 };
2768
2769 static const struct option options[] = {
2770 { "help", no_argument, NULL, 'h' },
2771 { "version", no_argument, NULL, ARG_VERSION },
2772 { "type", required_argument, NULL, 't' },
2773 { "class", required_argument, NULL, 'c' },
2774 { "legend", required_argument, NULL, ARG_LEGEND },
2775 { "interface", required_argument, NULL, 'i' },
2776 { "protocol", required_argument, NULL, 'p' },
2777 { "cname", required_argument, NULL, ARG_CNAME },
2778 { "service-address", required_argument, NULL, ARG_SERVICE_ADDRESS },
2779 { "service-txt", required_argument, NULL, ARG_SERVICE_TXT },
2780 { "raw", optional_argument, NULL, ARG_RAW },
2781 { "search", required_argument, NULL, ARG_SEARCH },
2782 { "no-pager", no_argument, NULL, ARG_NO_PAGER },
2783 {}
2784 };
2785
2786 int c, r;
2787
2788 assert(argc >= 0);
2789 assert(argv);
2790
2791 while ((c = getopt_long(argc, argv, "h46i:t:c:p:", options, NULL)) >= 0)
2792 switch(c) {
2793
2794 case 'h':
2795 native_help();
2796 return 0; /* done */;
2797
2798 case ARG_VERSION:
2799 return version();
2800
2801 case '4':
2802 arg_family = AF_INET;
2803 break;
2804
2805 case '6':
2806 arg_family = AF_INET6;
2807 break;
2808
2809 case 'i':
2810 arg_ifname = mfree(arg_ifname);
2811 r = ifname_mangle(optarg, true);
2812 if (r < 0)
2813 return r;
2814 break;
2815
2816 case 't':
2817 if (streq(optarg, "help")) {
2818 help_dns_types();
2819 return 0;
2820 }
2821
2822 r = dns_type_from_string(optarg);
2823 if (r < 0) {
2824 log_error("Failed to parse RR record type %s", optarg);
2825 return r;
2826 }
2827 arg_type = (uint16_t) r;
2828 assert((int) arg_type == r);
2829
2830 break;
2831
2832 case 'c':
2833 if (streq(optarg, "help")) {
2834 help_dns_classes();
2835 return 0;
2836 }
2837
2838 r = dns_class_from_string(optarg);
2839 if (r < 0) {
2840 log_error("Failed to parse RR record class %s", optarg);
2841 return r;
2842 }
2843 arg_class = (uint16_t) r;
2844 assert((int) arg_class == r);
2845
2846 break;
2847
2848 case ARG_LEGEND:
2849 r = parse_boolean(optarg);
2850 if (r < 0)
2851 return log_error_errno(r, "Failed to parse --legend= argument");
2852
2853 arg_legend = r;
2854 break;
2855
2856 case 'p':
2857 if (streq(optarg, "help")) {
2858 help_protocol_types();
2859 return 0;
2860 } else if (streq(optarg, "dns"))
2861 arg_flags |= SD_RESOLVED_DNS;
2862 else if (streq(optarg, "llmnr"))
2863 arg_flags |= SD_RESOLVED_LLMNR;
2864 else if (streq(optarg, "llmnr-ipv4"))
2865 arg_flags |= SD_RESOLVED_LLMNR_IPV4;
2866 else if (streq(optarg, "llmnr-ipv6"))
2867 arg_flags |= SD_RESOLVED_LLMNR_IPV6;
2868 else if (streq(optarg, "mdns"))
2869 arg_flags |= SD_RESOLVED_MDNS;
2870 else if (streq(optarg, "mdns-ipv4"))
2871 arg_flags |= SD_RESOLVED_MDNS_IPV4;
2872 else if (streq(optarg, "mdns-ipv6"))
2873 arg_flags |= SD_RESOLVED_MDNS_IPV6;
2874 else {
2875 log_error("Unknown protocol specifier: %s", optarg);
2876 return -EINVAL;
2877 }
2878
2879 break;
2880
2881 case ARG_RAW:
2882 if (on_tty()) {
2883 log_error("Refusing to write binary data to tty.");
2884 return -ENOTTY;
2885 }
2886
2887 if (optarg == NULL || streq(optarg, "payload"))
2888 arg_raw = RAW_PAYLOAD;
2889 else if (streq(optarg, "packet"))
2890 arg_raw = RAW_PACKET;
2891 else {
2892 log_error("Unknown --raw specifier \"%s\".", optarg);
2893 return -EINVAL;
2894 }
2895
2896 arg_legend = false;
2897 break;
2898
2899 case ARG_CNAME:
2900 r = parse_boolean(optarg);
2901 if (r < 0)
2902 return log_error_errno(r, "Failed to parse --cname= argument.");
2903 SET_FLAG(arg_flags, SD_RESOLVED_NO_CNAME, r == 0);
2904 break;
2905
2906 case ARG_SERVICE_ADDRESS:
2907 r = parse_boolean(optarg);
2908 if (r < 0)
2909 return log_error_errno(r, "Failed to parse --service-address= argument.");
2910 SET_FLAG(arg_flags, SD_RESOLVED_NO_ADDRESS, r == 0);
2911 break;
2912
2913 case ARG_SERVICE_TXT:
2914 r = parse_boolean(optarg);
2915 if (r < 0)
2916 return log_error_errno(r, "Failed to parse --service-txt= argument.");
2917 SET_FLAG(arg_flags, SD_RESOLVED_NO_TXT, r == 0);
2918 break;
2919
2920 case ARG_SEARCH:
2921 r = parse_boolean(optarg);
2922 if (r < 0)
2923 return log_error_errno(r, "Failed to parse --search argument.");
2924 SET_FLAG(arg_flags, SD_RESOLVED_NO_SEARCH, r == 0);
2925 break;
2926
2927 case ARG_NO_PAGER:
2928 arg_no_pager = true;
2929 break;
2930
2931 case '?':
2932 return -EINVAL;
2933
2934 default:
2935 assert_not_reached("Unhandled option");
2936 }
2937
2938 if (arg_type == 0 && arg_class != 0) {
2939 log_error("--class= may only be used in conjunction with --type=.");
2940 return -EINVAL;
2941 }
2942
2943 if (arg_type != 0 && arg_class == 0)
2944 arg_class = DNS_CLASS_IN;
2945
2946 if (arg_class != 0 && arg_type == 0)
2947 arg_type = DNS_TYPE_A;
2948
2949 return 1 /* work to do */;
2950 }
2951
2952 static int native_main(int argc, char *argv[], sd_bus *bus) {
2953
2954 static const Verb verbs[] = {
2955 { "help", VERB_ANY, VERB_ANY, 0, verb_help },
2956 { "status", VERB_ANY, VERB_ANY, VERB_DEFAULT, verb_status },
2957 { "query", 2, VERB_ANY, 0, verb_query },
2958 { "service", 2, 4, 0, verb_service },
2959 { "openpgp", 2, VERB_ANY, 0, verb_openpgp },
2960 { "tlsa", 2, VERB_ANY, 0, verb_tlsa },
2961 { "statistics", VERB_ANY, 1, 0, show_statistics },
2962 { "reset-statistics", VERB_ANY, 1, 0, reset_statistics },
2963 { "flush-caches", VERB_ANY, 1, 0, flush_caches },
2964 { "reset-server-features", VERB_ANY, 1, 0, reset_server_features },
2965 { "dns", VERB_ANY, VERB_ANY, 0, verb_dns },
2966 { "domain", VERB_ANY, VERB_ANY, 0, verb_domain },
2967 { "llmnr", VERB_ANY, 3, 0, verb_llmnr },
2968 { "mdns", VERB_ANY, 3, 0, verb_mdns },
2969 { "dnsovertls", VERB_ANY, 3, 0, verb_dns_over_tls },
2970 { "dnssec", VERB_ANY, 3, 0, verb_dnssec },
2971 { "nta", VERB_ANY, VERB_ANY, 0, verb_nta },
2972 { "revert", 2, 2, 0, verb_revert_link },
2973 {}
2974 };
2975
2976 return dispatch_verb(argc, argv, verbs, bus);
2977 }
2978
2979 static int translate(const char *verb, const char *single_arg, size_t num_args, char **args, sd_bus *bus) {
2980 char **fake, **p;
2981 size_t num, i;
2982
2983 assert(verb);
2984 assert(num_args == 0 || args);
2985
2986 num = !!single_arg + num_args + 1;
2987
2988 p = fake = newa0(char *, num + 1);
2989 *p++ = (char *) verb;
2990 if (single_arg)
2991 *p++ = (char *) single_arg;
2992 for (i = 0; i < num_args; i++)
2993 *p++ = args[i];
2994
2995 optind = 0;
2996 return native_main((int) num, fake, bus);
2997 }
2998
2999 static int compat_main(int argc, char *argv[], sd_bus *bus) {
3000 int r = 0;
3001
3002 switch (arg_mode) {
3003 case MODE_RESOLVE_HOST:
3004 case MODE_RESOLVE_RECORD:
3005 return translate("query", NULL, argc - optind, argv + optind, bus);
3006
3007 case MODE_RESOLVE_SERVICE:
3008 return translate("service", NULL, argc - optind, argv + optind, bus);
3009
3010 case MODE_RESOLVE_OPENPGP:
3011 return translate("openpgp", NULL, argc - optind, argv + optind, bus);
3012
3013 case MODE_RESOLVE_TLSA:
3014 return translate("tlsa", arg_service_family, argc - optind, argv + optind, bus);
3015
3016 case MODE_STATISTICS:
3017 return translate("statistics", NULL, 0, NULL, bus);
3018
3019 case MODE_RESET_STATISTICS:
3020 return translate("reset-statistics", NULL, 0, NULL, bus);
3021
3022 case MODE_FLUSH_CACHES:
3023 return translate("flush-caches", NULL, 0, NULL, bus);
3024
3025 case MODE_RESET_SERVER_FEATURES:
3026 return translate("reset-server-features", NULL, 0, NULL, bus);
3027
3028 case MODE_STATUS:
3029 return translate("status", NULL, argc - optind, argv + optind, bus);
3030
3031 case MODE_SET_LINK:
3032 assert(arg_ifname);
3033
3034 if (arg_set_dns) {
3035 r = translate("dns", arg_ifname, strv_length(arg_set_dns), arg_set_dns, bus);
3036 if (r < 0)
3037 return r;
3038 }
3039
3040 if (arg_set_domain) {
3041 r = translate("domain", arg_ifname, strv_length(arg_set_domain), arg_set_domain, bus);
3042 if (r < 0)
3043 return r;
3044 }
3045
3046 if (arg_set_nta) {
3047 r = translate("nta", arg_ifname, strv_length(arg_set_nta), arg_set_nta, bus);
3048 if (r < 0)
3049 return r;
3050 }
3051
3052 if (arg_set_llmnr) {
3053 r = translate("llmnr", arg_ifname, 1, (char **) &arg_set_llmnr, bus);
3054 if (r < 0)
3055 return r;
3056 }
3057
3058 if (arg_set_mdns) {
3059 r = translate("mdns", arg_ifname, 1, (char **) &arg_set_mdns, bus);
3060 if (r < 0)
3061 return r;
3062 }
3063
3064 if (arg_set_dns_over_tls) {
3065 r = translate("dnsovertls", arg_ifname, 1, (char **) &arg_set_dns_over_tls, bus);
3066 if (r < 0)
3067 return r;
3068 }
3069
3070 if (arg_set_dnssec) {
3071 r = translate("dnssec", arg_ifname, 1, (char **) &arg_set_dnssec, bus);
3072 if (r < 0)
3073 return r;
3074 }
3075
3076 return r;
3077
3078 case MODE_REVERT_LINK:
3079 assert(arg_ifname);
3080
3081 return translate("revert", arg_ifname, 0, NULL, bus);
3082
3083 case _MODE_INVALID:
3084 assert_not_reached("invalid mode");
3085 }
3086
3087 return 0;
3088 }
3089
3090 int main(int argc, char **argv) {
3091 sd_bus *bus = NULL;
3092 int r;
3093
3094 setlocale(LC_ALL, "");
3095 log_parse_environment();
3096 log_open();
3097
3098 if (streq(program_invocation_short_name, "resolvconf"))
3099 r = resolvconf_parse_argv(argc, argv);
3100 else if (streq(program_invocation_short_name, "systemd-resolve"))
3101 r = compat_parse_argv(argc, argv);
3102 else
3103 r = native_parse_argv(argc, argv);
3104 if (r <= 0)
3105 goto finish;
3106
3107 r = sd_bus_open_system(&bus);
3108 if (r < 0) {
3109 log_error_errno(r, "sd_bus_open_system: %m");
3110 goto finish;
3111 }
3112
3113 if (STR_IN_SET(program_invocation_short_name, "systemd-resolve", "resolvconf"))
3114 r = compat_main(argc, argv, bus);
3115 else
3116 r = native_main(argc, argv, bus);
3117
3118 finish:
3119 /* make sure we terminate the bus connection first, and then close the
3120 * pager, see issue #3543 for the details. */
3121 sd_bus_flush_close_unref(bus);
3122 pager_close();
3123
3124 free(arg_ifname);
3125 strv_free(arg_set_dns);
3126 strv_free(arg_set_domain);
3127 strv_free(arg_set_nta);
3128
3129 return r < 0 ? EXIT_FAILURE : EXIT_SUCCESS;
3130 }
Unnamed repository; edit this file 'description' to name the repository.