]> git.ipfire.org Git - thirdparty/systemd.git/blob - src/resolve/resolvectl.c
projects / thirdparty / systemd.git / blob
? search:
summary | shortlog | log | commit | commitdiff | tree
blame | history | raw | HEAD
Merge pull request #12431 from poettering/tmpfiles-chmod-chown-order
[thirdparty/systemd.git] / src / resolve / resolvectl.c
1 /* SPDX-License-Identifier: LGPL-2.1+ */
2
3 #include <getopt.h>
4 #include <locale.h>
5 #include <net/if.h>
6
7 #include "sd-bus.h"
8 #include "sd-netlink.h"
9
10 #include "af-list.h"
11 #include "alloc-util.h"
12 #include "bus-common-errors.h"
13 #include "bus-error.h"
14 #include "bus-util.h"
15 #include "dns-domain.h"
16 #include "escape.h"
17 #include "gcrypt-util.h"
18 #include "in-addr-util.h"
19 #include "main-func.h"
20 #include "missing_network.h"
21 #include "netlink-util.h"
22 #include "pager.h"
23 #include "parse-util.h"
24 #include "pretty-print.h"
25 #include "resolvconf-compat.h"
26 #include "resolvectl.h"
27 #include "resolved-def.h"
28 #include "resolved-dns-packet.h"
29 #include "string-table.h"
30 #include "strv.h"
31 #include "terminal-util.h"
32 #include "verbs.h"
33
34 static int arg_family = AF_UNSPEC;
35 static int arg_ifindex = 0;
36 static char *arg_ifname = NULL;
37 static uint16_t arg_type = 0;
38 static uint16_t arg_class = 0;
39 static bool arg_legend = true;
40 static uint64_t arg_flags = 0;
41 static PagerFlags arg_pager_flags = 0;
42 bool arg_ifindex_permissive = false; /* If true, don't generate an error if the specified interface index doesn't exist */
43 static const char *arg_service_family = NULL;
44
45 typedef enum RawType {
46 RAW_NONE,
47 RAW_PAYLOAD,
48 RAW_PACKET,
49 } RawType;
50 static RawType arg_raw = RAW_NONE;
51
52 ExecutionMode arg_mode = MODE_RESOLVE_HOST;
53
54 char **arg_set_dns = NULL;
55 char **arg_set_domain = NULL;
56 static const char *arg_set_llmnr = NULL;
57 static const char *arg_set_mdns = NULL;
58 static const char *arg_set_dns_over_tls = NULL;
59 static const char *arg_set_dnssec = NULL;
60 static char **arg_set_nta = NULL;
61
62 STATIC_DESTRUCTOR_REGISTER(arg_ifname, freep);
63 STATIC_DESTRUCTOR_REGISTER(arg_set_dns, strv_freep);
64 STATIC_DESTRUCTOR_REGISTER(arg_set_domain, strv_freep);
65 STATIC_DESTRUCTOR_REGISTER(arg_set_nta, strv_freep);
66
67 typedef enum StatusMode {
68 STATUS_ALL,
69 STATUS_DNS,
70 STATUS_DOMAIN,
71 STATUS_DEFAULT_ROUTE,
72 STATUS_LLMNR,
73 STATUS_MDNS,
74 STATUS_PRIVATE,
75 STATUS_DNSSEC,
76 STATUS_NTA,
77 } StatusMode;
78
79 static int parse_ifindex_and_warn(const char *s) {
80 int ifi;
81
82 assert(s);
83
84 if (parse_ifindex(s, &ifi) < 0) {
85 ifi = if_nametoindex(s);
86 if (ifi <= 0)
87 return log_error_errno(errno, "Unknown interface '%s': %m", s);
88 }
89
90 return ifi;
91 }
92
93 int ifname_mangle(const char *s) {
94 _cleanup_free_ char *iface = NULL;
95 const char *dot;
96 int ifi;
97
98 assert(s);
99
100 dot = strchr(s, '.');
101 if (dot) {
102 log_debug("Ignoring protocol specifier '%s'.", dot + 1);
103 iface = strndup(s, dot - s);
104
105 } else
106 iface = strdup(s);
107 if (!iface)
108 return log_oom();
109
110 if (parse_ifindex(iface, &ifi) < 0) {
111 ifi = if_nametoindex(iface);
112 if (ifi <= 0) {
113 if (errno == ENODEV && arg_ifindex_permissive) {
114 log_debug("Interface '%s' not found, but -f specified, ignoring.", iface);
115 return 0; /* done */
116 }
117
118 return log_error_errno(errno, "Unknown interface '%s': %m", iface);
119 }
120 }
121
122 if (arg_ifindex > 0 && arg_ifindex != ifi)
123 return log_error_errno(SYNTHETIC_ERRNO(EINVAL), "Specified multiple different interfaces. Refusing.");
124
125 arg_ifindex = ifi;
126 free_and_replace(arg_ifname, iface);
127
128 return 1;
129 }
130
131 static void print_source(uint64_t flags, usec_t rtt) {
132 char rtt_str[FORMAT_TIMESTAMP_MAX];
133
134 if (!arg_legend)
135 return;
136
137 if (flags == 0)
138 return;
139
140 printf("\n%s-- Information acquired via", ansi_grey());
141
142 if (flags != 0)
143 printf(" protocol%s%s%s%s%s",
144 flags & SD_RESOLVED_DNS ? " DNS" :"",
145 flags & SD_RESOLVED_LLMNR_IPV4 ? " LLMNR/IPv4" : "",
146 flags & SD_RESOLVED_LLMNR_IPV6 ? " LLMNR/IPv6" : "",
147 flags & SD_RESOLVED_MDNS_IPV4 ? " mDNS/IPv4" : "",
148 flags & SD_RESOLVED_MDNS_IPV6 ? " mDNS/IPv6" : "");
149
150 assert_se(format_timespan(rtt_str, sizeof(rtt_str), rtt, 100));
151
152 printf(" in %s.%s\n"
153 "%s-- Data is authenticated: %s%s\n",
154 rtt_str, ansi_normal(),
155 ansi_grey(), yes_no(flags & SD_RESOLVED_AUTHENTICATED), ansi_normal());
156 }
157
158 static void print_ifindex_comment(int printed_so_far, int ifindex) {
159 char ifname[IF_NAMESIZE];
160
161 if (ifindex <= 0)
162 return;
163
164 if (!if_indextoname(ifindex, ifname))
165 log_warning_errno(errno, "Failed to resolve interface name for index %i, ignoring: %m", ifindex);
166 else
167 printf("%*s%s-- link: %s%s",
168 60 > printed_so_far ? 60 - printed_so_far : 0, " ", /* Align comment to the 60th column */
169 ansi_grey(), ifname, ansi_normal());
170 }
171
172 static int resolve_host(sd_bus *bus, const char *name) {
173 _cleanup_(sd_bus_message_unrefp) sd_bus_message *req = NULL, *reply = NULL;
174 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
175 const char *canonical = NULL;
176 unsigned c = 0;
177 uint64_t flags;
178 usec_t ts;
179 int r;
180
181 assert(name);
182
183 log_debug("Resolving %s (family %s, interface %s).", name, af_to_name(arg_family) ?: "*", isempty(arg_ifname) ? "*" : arg_ifname);
184
185 r = sd_bus_message_new_method_call(
186 bus,
187 &req,
188 "org.freedesktop.resolve1",
189 "/org/freedesktop/resolve1",
190 "org.freedesktop.resolve1.Manager",
191 "ResolveHostname");
192 if (r < 0)
193 return bus_log_create_error(r);
194
195 r = sd_bus_message_append(req, "isit", arg_ifindex, name, arg_family, arg_flags);
196 if (r < 0)
197 return bus_log_create_error(r);
198
199 ts = now(CLOCK_MONOTONIC);
200
201 r = sd_bus_call(bus, req, SD_RESOLVED_QUERY_TIMEOUT_USEC, &error, &reply);
202 if (r < 0)
203 return log_error_errno(r, "%s: resolve call failed: %s", name, bus_error_message(&error, r));
204
205 ts = now(CLOCK_MONOTONIC) - ts;
206
207 r = sd_bus_message_enter_container(reply, 'a', "(iiay)");
208 if (r < 0)
209 return bus_log_parse_error(r);
210
211 while ((r = sd_bus_message_enter_container(reply, 'r', "iiay")) > 0) {
212 _cleanup_free_ char *pretty = NULL;
213 int ifindex, family, k;
214 const void *a;
215 size_t sz;
216
217 assert_cc(sizeof(int) == sizeof(int32_t));
218
219 r = sd_bus_message_read(reply, "ii", &ifindex, &family);
220 if (r < 0)
221 return bus_log_parse_error(r);
222
223 r = sd_bus_message_read_array(reply, 'y', &a, &sz);
224 if (r < 0)
225 return bus_log_parse_error(r);
226
227 r = sd_bus_message_exit_container(reply);
228 if (r < 0)
229 return bus_log_parse_error(r);
230
231 if (!IN_SET(family, AF_INET, AF_INET6)) {
232 log_debug("%s: skipping entry with family %d (%s)", name, family, af_to_name(family) ?: "unknown");
233 continue;
234 }
235
236 if (sz != FAMILY_ADDRESS_SIZE(family)) {
237 log_error("%s: systemd-resolved returned address of invalid size %zu for family %s", name, sz, af_to_name(family) ?: "unknown");
238 return -EINVAL;
239 }
240
241 r = in_addr_ifindex_to_string(family, a, ifindex, &pretty);
242 if (r < 0)
243 return log_error_errno(r, "Failed to print address for %s: %m", name);
244
245 k = printf("%*s%s %s%s%s",
246 (int) strlen(name), c == 0 ? name : "", c == 0 ? ":" : " ",
247 ansi_highlight(), pretty, ansi_normal());
248
249 print_ifindex_comment(k, ifindex);
250 fputc('\n', stdout);
251
252 c++;
253 }
254 if (r < 0)
255 return bus_log_parse_error(r);
256
257 r = sd_bus_message_exit_container(reply);
258 if (r < 0)
259 return bus_log_parse_error(r);
260
261 r = sd_bus_message_read(reply, "st", &canonical, &flags);
262 if (r < 0)
263 return bus_log_parse_error(r);
264
265 if (!streq(name, canonical))
266 printf("%*s%s (%s)\n",
267 (int) strlen(name), c == 0 ? name : "", c == 0 ? ":" : " ",
268 canonical);
269
270 if (c == 0) {
271 log_error("%s: no addresses found", name);
272 return -ESRCH;
273 }
274
275 print_source(flags, ts);
276
277 return 0;
278 }
279
280 static int resolve_address(sd_bus *bus, int family, const union in_addr_union *address, int ifindex) {
281 _cleanup_(sd_bus_message_unrefp) sd_bus_message *req = NULL, *reply = NULL;
282 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
283 _cleanup_free_ char *pretty = NULL;
284 uint64_t flags;
285 unsigned c = 0;
286 usec_t ts;
287 int r;
288
289 assert(bus);
290 assert(IN_SET(family, AF_INET, AF_INET6));
291 assert(address);
292
293 if (ifindex <= 0)
294 ifindex = arg_ifindex;
295
296 r = in_addr_ifindex_to_string(family, address, ifindex, &pretty);
297 if (r < 0)
298 return log_oom();
299
300 log_debug("Resolving %s.", pretty);
301
302 r = sd_bus_message_new_method_call(
303 bus,
304 &req,
305 "org.freedesktop.resolve1",
306 "/org/freedesktop/resolve1",
307 "org.freedesktop.resolve1.Manager",
308 "ResolveAddress");
309 if (r < 0)
310 return bus_log_create_error(r);
311
312 r = sd_bus_message_append(req, "ii", ifindex, family);
313 if (r < 0)
314 return bus_log_create_error(r);
315
316 r = sd_bus_message_append_array(req, 'y', address, FAMILY_ADDRESS_SIZE(family));
317 if (r < 0)
318 return bus_log_create_error(r);
319
320 r = sd_bus_message_append(req, "t", arg_flags);
321 if (r < 0)
322 return bus_log_create_error(r);
323
324 ts = now(CLOCK_MONOTONIC);
325
326 r = sd_bus_call(bus, req, SD_RESOLVED_QUERY_TIMEOUT_USEC, &error, &reply);
327 if (r < 0)
328 return log_error_errno(r, "%s: resolve call failed: %s", pretty, bus_error_message(&error, r));
329
330 ts = now(CLOCK_MONOTONIC) - ts;
331
332 r = sd_bus_message_enter_container(reply, 'a', "(is)");
333 if (r < 0)
334 return bus_log_create_error(r);
335
336 while ((r = sd_bus_message_enter_container(reply, 'r', "is")) > 0) {
337 const char *n;
338 int k;
339
340 assert_cc(sizeof(int) == sizeof(int32_t));
341
342 r = sd_bus_message_read(reply, "is", &ifindex, &n);
343 if (r < 0)
344 return r;
345
346 r = sd_bus_message_exit_container(reply);
347 if (r < 0)
348 return r;
349
350 k = printf("%*s%s %s%s%s",
351 (int) strlen(pretty), c == 0 ? pretty : "",
352 c == 0 ? ":" : " ",
353 ansi_highlight(), n, ansi_normal());
354
355 print_ifindex_comment(k, ifindex);
356 fputc('\n', stdout);
357
358 c++;
359 }
360 if (r < 0)
361 return bus_log_parse_error(r);
362
363 r = sd_bus_message_exit_container(reply);
364 if (r < 0)
365 return bus_log_parse_error(r);
366
367 r = sd_bus_message_read(reply, "t", &flags);
368 if (r < 0)
369 return bus_log_parse_error(r);
370
371 if (c == 0) {
372 log_error("%s: no names found", pretty);
373 return -ESRCH;
374 }
375
376 print_source(flags, ts);
377
378 return 0;
379 }
380
381 static int output_rr_packet(const void *d, size_t l, int ifindex) {
382 _cleanup_(dns_resource_record_unrefp) DnsResourceRecord *rr = NULL;
383 _cleanup_(dns_packet_unrefp) DnsPacket *p = NULL;
384 int r;
385
386 r = dns_packet_new(&p, DNS_PROTOCOL_DNS, 0, DNS_PACKET_SIZE_MAX);
387 if (r < 0)
388 return log_oom();
389
390 p->refuse_compression = true;
391
392 r = dns_packet_append_blob(p, d, l, NULL);
393 if (r < 0)
394 return log_oom();
395
396 r = dns_packet_read_rr(p, &rr, NULL, NULL);
397 if (r < 0)
398 return log_error_errno(r, "Failed to parse RR: %m");
399
400 if (arg_raw == RAW_PAYLOAD) {
401 void *data;
402 ssize_t k;
403
404 k = dns_resource_record_payload(rr, &data);
405 if (k < 0)
406 return log_error_errno(k, "Cannot dump RR: %m");
407 fwrite(data, 1, k, stdout);
408 } else {
409 const char *s;
410 int k;
411
412 s = dns_resource_record_to_string(rr);
413 if (!s)
414 return log_oom();
415
416 k = printf("%s", s);
417 print_ifindex_comment(k, ifindex);
418 fputc('\n', stdout);
419 }
420
421 return 0;
422 }
423
424 static int resolve_record(sd_bus *bus, const char *name, uint16_t class, uint16_t type, bool warn_missing) {
425 _cleanup_(sd_bus_message_unrefp) sd_bus_message *req = NULL, *reply = NULL;
426 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
427 unsigned n = 0;
428 uint64_t flags;
429 int r;
430 usec_t ts;
431 bool needs_authentication = false;
432
433 assert(name);
434
435 log_debug("Resolving %s %s %s (interface %s).", name, dns_class_to_string(class), dns_type_to_string(type), isempty(arg_ifname) ? "*" : arg_ifname);
436
437 r = sd_bus_message_new_method_call(
438 bus,
439 &req,
440 "org.freedesktop.resolve1",
441 "/org/freedesktop/resolve1",
442 "org.freedesktop.resolve1.Manager",
443 "ResolveRecord");
444 if (r < 0)
445 return bus_log_create_error(r);
446
447 r = sd_bus_message_append(req, "isqqt", arg_ifindex, name, class, type, arg_flags);
448 if (r < 0)
449 return bus_log_create_error(r);
450
451 ts = now(CLOCK_MONOTONIC);
452
453 r = sd_bus_call(bus, req, SD_RESOLVED_QUERY_TIMEOUT_USEC, &error, &reply);
454 if (r < 0) {
455 if (warn_missing || r != -ENXIO)
456 log_error("%s: resolve call failed: %s", name, bus_error_message(&error, r));
457 return r;
458 }
459
460 ts = now(CLOCK_MONOTONIC) - ts;
461
462 r = sd_bus_message_enter_container(reply, 'a', "(iqqay)");
463 if (r < 0)
464 return bus_log_parse_error(r);
465
466 while ((r = sd_bus_message_enter_container(reply, 'r', "iqqay")) > 0) {
467 uint16_t c, t;
468 int ifindex;
469 const void *d;
470 size_t l;
471
472 assert_cc(sizeof(int) == sizeof(int32_t));
473
474 r = sd_bus_message_read(reply, "iqq", &ifindex, &c, &t);
475 if (r < 0)
476 return bus_log_parse_error(r);
477
478 r = sd_bus_message_read_array(reply, 'y', &d, &l);
479 if (r < 0)
480 return bus_log_parse_error(r);
481
482 r = sd_bus_message_exit_container(reply);
483 if (r < 0)
484 return bus_log_parse_error(r);
485
486 if (arg_raw == RAW_PACKET) {
487 uint64_t u64 = htole64(l);
488
489 fwrite(&u64, sizeof(u64), 1, stdout);
490 fwrite(d, 1, l, stdout);
491 } else {
492 r = output_rr_packet(d, l, ifindex);
493 if (r < 0)
494 return r;
495 }
496
497 if (dns_type_needs_authentication(t))
498 needs_authentication = true;
499
500 n++;
501 }
502 if (r < 0)
503 return bus_log_parse_error(r);
504
505 r = sd_bus_message_exit_container(reply);
506 if (r < 0)
507 return bus_log_parse_error(r);
508
509 r = sd_bus_message_read(reply, "t", &flags);
510 if (r < 0)
511 return bus_log_parse_error(r);
512
513 if (n == 0) {
514 if (warn_missing)
515 log_error("%s: no records found", name);
516 return -ESRCH;
517 }
518
519 print_source(flags, ts);
520
521 if ((flags & SD_RESOLVED_AUTHENTICATED) == 0 && needs_authentication) {
522 fflush(stdout);
523
524 fprintf(stderr, "\n%s"
525 "WARNING: The resources shown contain cryptographic key data which could not be\n"
526 " authenticated. It is not suitable to authenticate any communication.\n"
527 " This is usually indication that DNSSEC authentication was not enabled\n"
528 " or is not available for the selected protocol or DNS servers.%s\n",
529 ansi_highlight_red(),
530 ansi_normal());
531 }
532
533 return 0;
534 }
535
536 static int resolve_rfc4501(sd_bus *bus, const char *name) {
537 uint16_t type = 0, class = 0;
538 const char *p, *q, *n;
539 int r;
540
541 assert(bus);
542 assert(name);
543 assert(startswith(name, "dns:"));
544
545 /* Parse RFC 4501 dns: URIs */
546
547 p = name + 4;
548
549 if (p[0] == '/') {
550 const char *e;
551
552 if (p[1] != '/')
553 goto invalid;
554
555 e = strchr(p + 2, '/');
556 if (!e)
557 goto invalid;
558
559 if (e != p + 2)
560 log_warning("DNS authority specification not supported; ignoring specified authority.");
561
562 p = e + 1;
563 }
564
565 q = strchr(p, '?');
566 if (q) {
567 n = strndupa(p, q - p);
568 q++;
569
570 for (;;) {
571 const char *f;
572
573 f = startswith_no_case(q, "class=");
574 if (f) {
575 _cleanup_free_ char *t = NULL;
576 const char *e;
577
578 if (class != 0)
579 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
580 "DNS class specified twice.");
581
582 e = strchrnul(f, ';');
583 t = strndup(f, e - f);
584 if (!t)
585 return log_oom();
586
587 r = dns_class_from_string(t);
588 if (r < 0)
589 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
590 "Unknown DNS class %s.", t);
591
592 class = r;
593
594 if (*e == ';') {
595 q = e + 1;
596 continue;
597 }
598
599 break;
600 }
601
602 f = startswith_no_case(q, "type=");
603 if (f) {
604 _cleanup_free_ char *t = NULL;
605 const char *e;
606
607 if (type != 0)
608 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
609 "DNS type specified twice.");
610
611 e = strchrnul(f, ';');
612 t = strndup(f, e - f);
613 if (!t)
614 return log_oom();
615
616 r = dns_type_from_string(t);
617 if (r < 0)
618 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
619 "Unknown DNS type %s.", t);
620
621 type = r;
622
623 if (*e == ';') {
624 q = e + 1;
625 continue;
626 }
627
628 break;
629 }
630
631 goto invalid;
632 }
633 } else
634 n = p;
635
636 if (class == 0)
637 class = arg_class ?: DNS_CLASS_IN;
638 if (type == 0)
639 type = arg_type ?: DNS_TYPE_A;
640
641 return resolve_record(bus, n, class, type, true);
642
643 invalid:
644 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
645 "Invalid DNS URI: %s", name);
646 }
647
648 static int verb_query(int argc, char **argv, void *userdata) {
649 sd_bus *bus = userdata;
650 char **p;
651 int q, r = 0;
652
653 if (arg_type != 0)
654 STRV_FOREACH(p, argv + 1) {
655 q = resolve_record(bus, *p, arg_class, arg_type, true);
656 if (q < 0)
657 r = q;
658 }
659
660 else
661 STRV_FOREACH(p, argv + 1) {
662 if (startswith(*p, "dns:"))
663 q = resolve_rfc4501(bus, *p);
664 else {
665 int family, ifindex;
666 union in_addr_union a;
667
668 q = in_addr_ifindex_from_string_auto(*p, &family, &a, &ifindex);
669 if (q >= 0)
670 q = resolve_address(bus, family, &a, ifindex);
671 else
672 q = resolve_host(bus, *p);
673 }
674 if (q < 0)
675 r = q;
676 }
677
678 return r;
679 }
680
681 static int resolve_service(sd_bus *bus, const char *name, const char *type, const char *domain) {
682 const char *canonical_name, *canonical_type, *canonical_domain;
683 _cleanup_(sd_bus_message_unrefp) sd_bus_message *req = NULL, *reply = NULL;
684 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
685 size_t indent, sz;
686 uint64_t flags;
687 const char *p;
688 unsigned c;
689 usec_t ts;
690 int r;
691
692 assert(bus);
693 assert(domain);
694
695 name = empty_to_null(name);
696 type = empty_to_null(type);
697
698 if (name)
699 log_debug("Resolving service \"%s\" of type %s in %s (family %s, interface %s).", name, type, domain, af_to_name(arg_family) ?: "*", isempty(arg_ifname) ? "*" : arg_ifname);
700 else if (type)
701 log_debug("Resolving service type %s of %s (family %s, interface %s).", type, domain, af_to_name(arg_family) ?: "*", isempty(arg_ifname) ? "*" : arg_ifname);
702 else
703 log_debug("Resolving service type %s (family %s, interface %s).", domain, af_to_name(arg_family) ?: "*", isempty(arg_ifname) ? "*" : arg_ifname);
704
705 r = sd_bus_message_new_method_call(
706 bus,
707 &req,
708 "org.freedesktop.resolve1",
709 "/org/freedesktop/resolve1",
710 "org.freedesktop.resolve1.Manager",
711 "ResolveService");
712 if (r < 0)
713 return bus_log_create_error(r);
714
715 r = sd_bus_message_append(req, "isssit", arg_ifindex, name, type, domain, arg_family, arg_flags);
716 if (r < 0)
717 return bus_log_create_error(r);
718
719 ts = now(CLOCK_MONOTONIC);
720
721 r = sd_bus_call(bus, req, SD_RESOLVED_QUERY_TIMEOUT_USEC, &error, &reply);
722 if (r < 0)
723 return log_error_errno(r, "Resolve call failed: %s", bus_error_message(&error, r));
724
725 ts = now(CLOCK_MONOTONIC) - ts;
726
727 r = sd_bus_message_enter_container(reply, 'a', "(qqqsa(iiay)s)");
728 if (r < 0)
729 return bus_log_parse_error(r);
730
731 indent =
732 (name ? strlen(name) + 1 : 0) +
733 (type ? strlen(type) + 1 : 0) +
734 strlen(domain) + 2;
735
736 c = 0;
737 while ((r = sd_bus_message_enter_container(reply, 'r', "qqqsa(iiay)s")) > 0) {
738 uint16_t priority, weight, port;
739 const char *hostname, *canonical;
740
741 r = sd_bus_message_read(reply, "qqqs", &priority, &weight, &port, &hostname);
742 if (r < 0)
743 return bus_log_parse_error(r);
744
745 if (name)
746 printf("%*s%s", (int) strlen(name), c == 0 ? name : "", c == 0 ? "/" : " ");
747 if (type)
748 printf("%*s%s", (int) strlen(type), c == 0 ? type : "", c == 0 ? "/" : " ");
749
750 printf("%*s%s %s:%u [priority=%u, weight=%u]\n",
751 (int) strlen(domain), c == 0 ? domain : "",
752 c == 0 ? ":" : " ",
753 hostname, port,
754 priority, weight);
755
756 r = sd_bus_message_enter_container(reply, 'a', "(iiay)");
757 if (r < 0)
758 return bus_log_parse_error(r);
759
760 while ((r = sd_bus_message_enter_container(reply, 'r', "iiay")) > 0) {
761 _cleanup_free_ char *pretty = NULL;
762 int ifindex, family, k;
763 const void *a;
764
765 assert_cc(sizeof(int) == sizeof(int32_t));
766
767 r = sd_bus_message_read(reply, "ii", &ifindex, &family);
768 if (r < 0)
769 return bus_log_parse_error(r);
770
771 r = sd_bus_message_read_array(reply, 'y', &a, &sz);
772 if (r < 0)
773 return bus_log_parse_error(r);
774
775 r = sd_bus_message_exit_container(reply);
776 if (r < 0)
777 return bus_log_parse_error(r);
778
779 if (!IN_SET(family, AF_INET, AF_INET6)) {
780 log_debug("%s: skipping entry with family %d (%s)", name, family, af_to_name(family) ?: "unknown");
781 continue;
782 }
783
784 if (sz != FAMILY_ADDRESS_SIZE(family)) {
785 log_error("%s: systemd-resolved returned address of invalid size %zu for family %s", name, sz, af_to_name(family) ?: "unknown");
786 return -EINVAL;
787 }
788
789 r = in_addr_ifindex_to_string(family, a, ifindex, &pretty);
790 if (r < 0)
791 return log_error_errno(r, "Failed to print address for %s: %m", name);
792
793 k = printf("%*s%s", (int) indent, "", pretty);
794 print_ifindex_comment(k, ifindex);
795 fputc('\n', stdout);
796 }
797 if (r < 0)
798 return bus_log_parse_error(r);
799
800 r = sd_bus_message_exit_container(reply);
801 if (r < 0)
802 return bus_log_parse_error(r);
803
804 r = sd_bus_message_read(reply, "s", &canonical);
805 if (r < 0)
806 return bus_log_parse_error(r);
807
808 if (!streq(hostname, canonical))
809 printf("%*s(%s)\n", (int) indent, "", canonical);
810
811 r = sd_bus_message_exit_container(reply);
812 if (r < 0)
813 return bus_log_parse_error(r);
814
815 c++;
816 }
817 if (r < 0)
818 return bus_log_parse_error(r);
819
820 r = sd_bus_message_exit_container(reply);
821 if (r < 0)
822 return bus_log_parse_error(r);
823
824 r = sd_bus_message_enter_container(reply, 'a', "ay");
825 if (r < 0)
826 return bus_log_parse_error(r);
827
828 while ((r = sd_bus_message_read_array(reply, 'y', (const void**) &p, &sz)) > 0) {
829 _cleanup_free_ char *escaped = NULL;
830
831 escaped = cescape_length(p, sz);
832 if (!escaped)
833 return log_oom();
834
835 printf("%*s%s\n", (int) indent, "", escaped);
836 }
837 if (r < 0)
838 return bus_log_parse_error(r);
839
840 r = sd_bus_message_exit_container(reply);
841 if (r < 0)
842 return bus_log_parse_error(r);
843
844 r = sd_bus_message_read(reply, "ssst", &canonical_name, &canonical_type, &canonical_domain, &flags);
845 if (r < 0)
846 return bus_log_parse_error(r);
847
848 canonical_name = empty_to_null(canonical_name);
849 canonical_type = empty_to_null(canonical_type);
850
851 if (!streq_ptr(name, canonical_name) ||
852 !streq_ptr(type, canonical_type) ||
853 !streq_ptr(domain, canonical_domain)) {
854
855 printf("%*s(", (int) indent, "");
856
857 if (canonical_name)
858 printf("%s/", canonical_name);
859 if (canonical_type)
860 printf("%s/", canonical_type);
861
862 printf("%s)\n", canonical_domain);
863 }
864
865 print_source(flags, ts);
866
867 return 0;
868 }
869
870 static int verb_service(int argc, char **argv, void *userdata) {
871 sd_bus *bus = userdata;
872
873 if (argc == 2)
874 return resolve_service(bus, NULL, NULL, argv[1]);
875 else if (argc == 3)
876 return resolve_service(bus, NULL, argv[1], argv[2]);
877 else
878 return resolve_service(bus, argv[1], argv[2], argv[3]);
879 }
880
881 static int resolve_openpgp(sd_bus *bus, const char *address) {
882 const char *domain, *full;
883 int r;
884 _cleanup_free_ char *hashed = NULL;
885
886 assert(bus);
887 assert(address);
888
889 domain = strrchr(address, '@');
890 if (!domain)
891 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
892 "Address does not contain '@': \"%s\"", address);
893 if (domain == address || domain[1] == '\0')
894 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
895 "Address starts or ends with '@': \"%s\"", address);
896 domain++;
897
898 r = string_hashsum_sha256(address, domain - 1 - address, &hashed);
899 if (r < 0)
900 return log_error_errno(r, "Hashing failed: %m");
901
902 strshorten(hashed, 56);
903
904 full = strjoina(hashed, "._openpgpkey.", domain);
905 log_debug("Looking up \"%s\".", full);
906
907 r = resolve_record(bus, full,
908 arg_class ?: DNS_CLASS_IN,
909 arg_type ?: DNS_TYPE_OPENPGPKEY, false);
910
911 if (IN_SET(r, -ENXIO, -ESRCH)) { /* NXDOMAIN or NODATA? */
912 hashed = mfree(hashed);
913 r = string_hashsum_sha224(address, domain - 1 - address, &hashed);
914 if (r < 0)
915 return log_error_errno(r, "Hashing failed: %m");
916
917 full = strjoina(hashed, "._openpgpkey.", domain);
918 log_debug("Looking up \"%s\".", full);
919
920 return resolve_record(bus, full,
921 arg_class ?: DNS_CLASS_IN,
922 arg_type ?: DNS_TYPE_OPENPGPKEY, true);
923 }
924
925 return r;
926 }
927
928 static int verb_openpgp(int argc, char **argv, void *userdata) {
929 sd_bus *bus = userdata;
930 char **p;
931 int q, r = 0;
932
933 STRV_FOREACH(p, argv + 1) {
934 q = resolve_openpgp(bus, *p);
935 if (q < 0)
936 r = q;
937 }
938
939 return r;
940 }
941
942 static int resolve_tlsa(sd_bus *bus, const char *family, const char *address) {
943 const char *port;
944 uint16_t port_num = 443;
945 _cleanup_free_ char *full = NULL;
946 int r;
947
948 assert(bus);
949 assert(address);
950
951 port = strrchr(address, ':');
952 if (port) {
953 r = parse_ip_port(port + 1, &port_num);
954 if (r < 0)
955 return log_error_errno(r, "Invalid port \"%s\".", port + 1);
956
957 address = strndupa(address, port - address);
958 }
959
960 r = asprintf(&full, "_%u._%s.%s",
961 port_num,
962 family,
963 address);
964 if (r < 0)
965 return log_oom();
966
967 log_debug("Looking up \"%s\".", full);
968
969 return resolve_record(bus, full,
970 arg_class ?: DNS_CLASS_IN,
971 arg_type ?: DNS_TYPE_TLSA, true);
972 }
973
974 static bool service_family_is_valid(const char *s) {
975 return STR_IN_SET(s, "tcp", "udp", "sctp");
976 }
977
978 static int verb_tlsa(int argc, char **argv, void *userdata) {
979 sd_bus *bus = userdata;
980 char **p, **args = argv + 1;
981 const char *family = "tcp";
982 int q, r = 0;
983
984 if (service_family_is_valid(argv[1])) {
985 family = argv[1];
986 args++;
987 }
988
989 STRV_FOREACH(p, args) {
990 q = resolve_tlsa(bus, family, *p);
991 if (q < 0)
992 r = q;
993 }
994
995 return r;
996 }
997
998 static int show_statistics(int argc, char **argv, void *userdata) {
999 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1000 _cleanup_(sd_bus_message_unrefp) sd_bus_message *reply = NULL;
1001 sd_bus *bus = userdata;
1002 uint64_t n_current_transactions, n_total_transactions,
1003 cache_size, n_cache_hit, n_cache_miss,
1004 n_dnssec_secure, n_dnssec_insecure, n_dnssec_bogus, n_dnssec_indeterminate;
1005 int r, dnssec_supported;
1006
1007 assert(bus);
1008
1009 r = sd_bus_get_property_trivial(bus,
1010 "org.freedesktop.resolve1",
1011 "/org/freedesktop/resolve1",
1012 "org.freedesktop.resolve1.Manager",
1013 "DNSSECSupported",
1014 &error,
1015 'b',
1016 &dnssec_supported);
1017 if (r < 0)
1018 return log_error_errno(r, "Failed to get DNSSEC supported state: %s", bus_error_message(&error, r));
1019
1020 printf("DNSSEC supported by current servers: %s%s%s\n\n",
1021 ansi_highlight(),
1022 yes_no(dnssec_supported),
1023 ansi_normal());
1024
1025 r = sd_bus_get_property(bus,
1026 "org.freedesktop.resolve1",
1027 "/org/freedesktop/resolve1",
1028 "org.freedesktop.resolve1.Manager",
1029 "TransactionStatistics",
1030 &error,
1031 &reply,
1032 "(tt)");
1033 if (r < 0)
1034 return log_error_errno(r, "Failed to get transaction statistics: %s", bus_error_message(&error, r));
1035
1036 r = sd_bus_message_read(reply, "(tt)",
1037 &n_current_transactions,
1038 &n_total_transactions);
1039 if (r < 0)
1040 return bus_log_parse_error(r);
1041
1042 printf("%sTransactions%s\n"
1043 "Current Transactions: %" PRIu64 "\n"
1044 " Total Transactions: %" PRIu64 "\n",
1045 ansi_highlight(),
1046 ansi_normal(),
1047 n_current_transactions,
1048 n_total_transactions);
1049
1050 reply = sd_bus_message_unref(reply);
1051
1052 r = sd_bus_get_property(bus,
1053 "org.freedesktop.resolve1",
1054 "/org/freedesktop/resolve1",
1055 "org.freedesktop.resolve1.Manager",
1056 "CacheStatistics",
1057 &error,
1058 &reply,
1059 "(ttt)");
1060 if (r < 0)
1061 return log_error_errno(r, "Failed to get cache statistics: %s", bus_error_message(&error, r));
1062
1063 r = sd_bus_message_read(reply, "(ttt)",
1064 &cache_size,
1065 &n_cache_hit,
1066 &n_cache_miss);
1067 if (r < 0)
1068 return bus_log_parse_error(r);
1069
1070 printf("\n%sCache%s\n"
1071 " Current Cache Size: %" PRIu64 "\n"
1072 " Cache Hits: %" PRIu64 "\n"
1073 " Cache Misses: %" PRIu64 "\n",
1074 ansi_highlight(),
1075 ansi_normal(),
1076 cache_size,
1077 n_cache_hit,
1078 n_cache_miss);
1079
1080 reply = sd_bus_message_unref(reply);
1081
1082 r = sd_bus_get_property(bus,
1083 "org.freedesktop.resolve1",
1084 "/org/freedesktop/resolve1",
1085 "org.freedesktop.resolve1.Manager",
1086 "DNSSECStatistics",
1087 &error,
1088 &reply,
1089 "(tttt)");
1090 if (r < 0)
1091 return log_error_errno(r, "Failed to get DNSSEC statistics: %s", bus_error_message(&error, r));
1092
1093 r = sd_bus_message_read(reply, "(tttt)",
1094 &n_dnssec_secure,
1095 &n_dnssec_insecure,
1096 &n_dnssec_bogus,
1097 &n_dnssec_indeterminate);
1098 if (r < 0)
1099 return bus_log_parse_error(r);
1100
1101 printf("\n%sDNSSEC Verdicts%s\n"
1102 " Secure: %" PRIu64 "\n"
1103 " Insecure: %" PRIu64 "\n"
1104 " Bogus: %" PRIu64 "\n"
1105 " Indeterminate: %" PRIu64 "\n",
1106 ansi_highlight(),
1107 ansi_normal(),
1108 n_dnssec_secure,
1109 n_dnssec_insecure,
1110 n_dnssec_bogus,
1111 n_dnssec_indeterminate);
1112
1113 return 0;
1114 }
1115
1116 static int reset_statistics(int argc, char **argv, void *userdata) {
1117 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1118 sd_bus *bus = userdata;
1119 int r;
1120
1121 r = sd_bus_call_method(bus,
1122 "org.freedesktop.resolve1",
1123 "/org/freedesktop/resolve1",
1124 "org.freedesktop.resolve1.Manager",
1125 "ResetStatistics",
1126 &error,
1127 NULL,
1128 NULL);
1129 if (r < 0)
1130 return log_error_errno(r, "Failed to reset statistics: %s", bus_error_message(&error, r));
1131
1132 return 0;
1133 }
1134
1135 static int flush_caches(int argc, char **argv, void *userdata) {
1136 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1137 sd_bus *bus = userdata;
1138 int r;
1139
1140 r = sd_bus_call_method(bus,
1141 "org.freedesktop.resolve1",
1142 "/org/freedesktop/resolve1",
1143 "org.freedesktop.resolve1.Manager",
1144 "FlushCaches",
1145 &error,
1146 NULL,
1147 NULL);
1148 if (r < 0)
1149 return log_error_errno(r, "Failed to flush caches: %s", bus_error_message(&error, r));
1150
1151 return 0;
1152 }
1153
1154 static int reset_server_features(int argc, char **argv, void *userdata) {
1155 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1156 sd_bus *bus = userdata;
1157 int r;
1158
1159 r = sd_bus_call_method(bus,
1160 "org.freedesktop.resolve1",
1161 "/org/freedesktop/resolve1",
1162 "org.freedesktop.resolve1.Manager",
1163 "ResetServerFeatures",
1164 &error,
1165 NULL,
1166 NULL);
1167 if (r < 0)
1168 return log_error_errno(r, "Failed to reset server features: %s", bus_error_message(&error, r));
1169
1170 return 0;
1171 }
1172
1173 static int read_dns_server_one(sd_bus_message *m, bool with_ifindex, char **ret) {
1174 _cleanup_free_ char *pretty = NULL;
1175 int ifindex, family, r;
1176 const void *a;
1177 size_t sz;
1178
1179 assert(m);
1180 assert(ret);
1181
1182 r = sd_bus_message_enter_container(m, 'r', with_ifindex ? "iiay" : "iay");
1183 if (r <= 0)
1184 return r;
1185
1186 if (with_ifindex) {
1187 r = sd_bus_message_read(m, "i", &ifindex);
1188 if (r < 0)
1189 return r;
1190 }
1191
1192 r = sd_bus_message_read(m, "i", &family);
1193 if (r < 0)
1194 return r;
1195
1196 r = sd_bus_message_read_array(m, 'y', &a, &sz);
1197 if (r < 0)
1198 return r;
1199
1200 r = sd_bus_message_exit_container(m);
1201 if (r < 0)
1202 return r;
1203
1204 if (with_ifindex && ifindex != 0) {
1205 /* only show the global ones here */
1206 *ret = NULL;
1207 return 1;
1208 }
1209
1210 if (!IN_SET(family, AF_INET, AF_INET6)) {
1211 log_debug("Unexpected family, ignoring: %i", family);
1212
1213 *ret = NULL;
1214 return 1;
1215 }
1216
1217 if (sz != FAMILY_ADDRESS_SIZE(family)) {
1218 log_debug("Address size mismatch, ignoring.");
1219
1220 *ret = NULL;
1221 return 1;
1222 }
1223
1224 r = in_addr_to_string(family, a, &pretty);
1225 if (r < 0)
1226 return r;
1227
1228 *ret = TAKE_PTR(pretty);
1229
1230 return 1;
1231 }
1232
1233 static int map_link_dns_servers(sd_bus *bus, const char *member, sd_bus_message *m, sd_bus_error *error, void *userdata) {
1234 char ***l = userdata;
1235 int r;
1236
1237 assert(bus);
1238 assert(member);
1239 assert(m);
1240 assert(l);
1241
1242 r = sd_bus_message_enter_container(m, 'a', "(iay)");
1243 if (r < 0)
1244 return r;
1245
1246 for (;;) {
1247 char *pretty = NULL;
1248
1249 r = read_dns_server_one(m, false, &pretty);
1250 if (r < 0)
1251 return r;
1252 if (r == 0)
1253 break;
1254
1255 if (isempty(pretty))
1256 continue;
1257
1258 r = strv_consume(l, pretty);
1259 if (r < 0)
1260 return r;
1261 }
1262
1263 r = sd_bus_message_exit_container(m);
1264 if (r < 0)
1265 return r;
1266
1267 return 0;
1268 }
1269
1270 static int map_link_current_dns_server(sd_bus *bus, const char *member, sd_bus_message *m, sd_bus_error *error, void *userdata) {
1271 assert(m);
1272 assert(userdata);
1273
1274 return read_dns_server_one(m, false, userdata);
1275 }
1276
1277 static int read_domain_one(sd_bus_message *m, bool with_ifindex, char **ret) {
1278 _cleanup_free_ char *str = NULL;
1279 int ifindex, route_only, r;
1280 const char *domain;
1281
1282 assert(m);
1283 assert(ret);
1284
1285 if (with_ifindex)
1286 r = sd_bus_message_read(m, "(isb)", &ifindex, &domain, &route_only);
1287 else
1288 r = sd_bus_message_read(m, "(sb)", &domain, &route_only);
1289 if (r <= 0)
1290 return r;
1291
1292 if (with_ifindex && ifindex != 0) {
1293 /* only show the global ones here */
1294 *ret = NULL;
1295 return 1;
1296 }
1297
1298 if (route_only)
1299 str = strappend("~", domain);
1300 else
1301 str = strdup(domain);
1302 if (!str)
1303 return -ENOMEM;
1304
1305 *ret = TAKE_PTR(str);
1306
1307 return 1;
1308 }
1309
1310 static int map_link_domains(sd_bus *bus, const char *member, sd_bus_message *m, sd_bus_error *error, void *userdata) {
1311 char ***l = userdata;
1312 int r;
1313
1314 assert(bus);
1315 assert(member);
1316 assert(m);
1317 assert(l);
1318
1319 r = sd_bus_message_enter_container(m, 'a', "(sb)");
1320 if (r < 0)
1321 return r;
1322
1323 for (;;) {
1324 char *pretty = NULL;
1325
1326 r = read_domain_one(m, false, &pretty);
1327 if (r < 0)
1328 return r;
1329 if (r == 0)
1330 break;
1331
1332 if (isempty(pretty))
1333 continue;
1334
1335 r = strv_consume(l, pretty);
1336 if (r < 0)
1337 return r;
1338 }
1339
1340 r = sd_bus_message_exit_container(m);
1341 if (r < 0)
1342 return r;
1343
1344 return 0;
1345 }
1346
1347 static int status_print_strv_ifindex(int ifindex, const char *ifname, char **p) {
1348 char **i;
1349
1350 printf("%sLink %i (%s)%s:",
1351 ansi_highlight(), ifindex, ifname, ansi_normal());
1352
1353 STRV_FOREACH(i, p)
1354 printf(" %s", *i);
1355
1356 printf("\n");
1357
1358 return 0;
1359 }
1360
1361 struct link_info {
1362 uint64_t scopes_mask;
1363 const char *llmnr;
1364 const char *mdns;
1365 const char *dns_over_tls;
1366 const char *dnssec;
1367 char *current_dns;
1368 char **dns;
1369 char **domains;
1370 char **ntas;
1371 bool dnssec_supported;
1372 bool default_route;
1373 };
1374
1375 static void link_info_clear(struct link_info *p) {
1376 free(p->current_dns);
1377 strv_free(p->dns);
1378 strv_free(p->domains);
1379 strv_free(p->ntas);
1380 }
1381
1382 static int status_ifindex(sd_bus *bus, int ifindex, const char *name, StatusMode mode, bool *empty_line) {
1383 static const struct bus_properties_map property_map[] = {
1384 { "ScopesMask", "t", NULL, offsetof(struct link_info, scopes_mask) },
1385 { "DNS", "a(iay)", map_link_dns_servers, offsetof(struct link_info, dns) },
1386 { "CurrentDNSServer", "(iay)", map_link_current_dns_server, offsetof(struct link_info, current_dns) },
1387 { "Domains", "a(sb)", map_link_domains, offsetof(struct link_info, domains) },
1388 { "DefaultRoute", "b", NULL, offsetof(struct link_info, default_route) },
1389 { "LLMNR", "s", NULL, offsetof(struct link_info, llmnr) },
1390 { "MulticastDNS", "s", NULL, offsetof(struct link_info, mdns) },
1391 { "DNSOverTLS", "s", NULL, offsetof(struct link_info, dns_over_tls) },
1392 { "DNSSEC", "s", NULL, offsetof(struct link_info, dnssec) },
1393 { "DNSSECNegativeTrustAnchors", "as", NULL, offsetof(struct link_info, ntas) },
1394 { "DNSSECSupported", "b", NULL, offsetof(struct link_info, dnssec_supported) },
1395 {}
1396 };
1397 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1398 _cleanup_(sd_bus_message_unrefp) sd_bus_message *m = NULL;
1399 _cleanup_(link_info_clear) struct link_info link_info = {};
1400 _cleanup_free_ char *ifi = NULL, *p = NULL;
1401 char ifname[IF_NAMESIZE] = "";
1402 char **i;
1403 int r;
1404
1405 assert(bus);
1406 assert(ifindex > 0);
1407
1408 if (!name) {
1409 if (!if_indextoname(ifindex, ifname))
1410 return log_error_errno(errno, "Failed to resolve interface name for %i: %m", ifindex);
1411
1412 name = ifname;
1413 }
1414
1415 if (asprintf(&ifi, "%i", ifindex) < 0)
1416 return log_oom();
1417
1418 r = sd_bus_path_encode("/org/freedesktop/resolve1/link", ifi, &p);
1419 if (r < 0)
1420 return log_oom();
1421
1422 r = bus_map_all_properties(bus,
1423 "org.freedesktop.resolve1",
1424 p,
1425 property_map,
1426 BUS_MAP_BOOLEAN_AS_BOOL,
1427 &error,
1428 &m,
1429 &link_info);
1430 if (r < 0)
1431 return log_error_errno(r, "Failed to get link data for %i: %s", ifindex, bus_error_message(&error, r));
1432
1433 (void) pager_open(arg_pager_flags);
1434
1435 if (mode == STATUS_DNS)
1436 return status_print_strv_ifindex(ifindex, name, link_info.dns);
1437
1438 if (mode == STATUS_DOMAIN)
1439 return status_print_strv_ifindex(ifindex, name, link_info.domains);
1440
1441 if (mode == STATUS_NTA)
1442 return status_print_strv_ifindex(ifindex, name, link_info.ntas);
1443
1444 if (mode == STATUS_DEFAULT_ROUTE) {
1445 printf("%sLink %i (%s)%s: %s\n",
1446 ansi_highlight(), ifindex, name, ansi_normal(),
1447 yes_no(link_info.default_route));
1448
1449 return 0;
1450 }
1451
1452 if (mode == STATUS_LLMNR) {
1453 printf("%sLink %i (%s)%s: %s\n",
1454 ansi_highlight(), ifindex, name, ansi_normal(),
1455 strna(link_info.llmnr));
1456
1457 return 0;
1458 }
1459
1460 if (mode == STATUS_MDNS) {
1461 printf("%sLink %i (%s)%s: %s\n",
1462 ansi_highlight(), ifindex, name, ansi_normal(),
1463 strna(link_info.mdns));
1464
1465 return 0;
1466 }
1467
1468 if (mode == STATUS_PRIVATE) {
1469 printf("%sLink %i (%s)%s: %s\n",
1470 ansi_highlight(), ifindex, name, ansi_normal(),
1471 strna(link_info.dns_over_tls));
1472
1473 return 0;
1474 }
1475
1476 if (mode == STATUS_DNSSEC) {
1477 printf("%sLink %i (%s)%s: %s\n",
1478 ansi_highlight(), ifindex, name, ansi_normal(),
1479 strna(link_info.dnssec));
1480
1481 return 0;
1482 }
1483
1484 if (empty_line && *empty_line)
1485 fputc('\n', stdout);
1486
1487 printf("%sLink %i (%s)%s\n",
1488 ansi_highlight(), ifindex, name, ansi_normal());
1489
1490 if (link_info.scopes_mask == 0)
1491 printf(" Current Scopes: none\n");
1492 else
1493 printf(" Current Scopes:%s%s%s%s%s\n",
1494 link_info.scopes_mask & SD_RESOLVED_DNS ? " DNS" : "",
1495 link_info.scopes_mask & SD_RESOLVED_LLMNR_IPV4 ? " LLMNR/IPv4" : "",
1496 link_info.scopes_mask & SD_RESOLVED_LLMNR_IPV6 ? " LLMNR/IPv6" : "",
1497 link_info.scopes_mask & SD_RESOLVED_MDNS_IPV4 ? " mDNS/IPv4" : "",
1498 link_info.scopes_mask & SD_RESOLVED_MDNS_IPV6 ? " mDNS/IPv6" : "");
1499
1500 printf("DefaultRoute setting: %s\n"
1501 " LLMNR setting: %s\n"
1502 "MulticastDNS setting: %s\n"
1503 " DNSOverTLS setting: %s\n"
1504 " DNSSEC setting: %s\n"
1505 " DNSSEC supported: %s\n",
1506 yes_no(link_info.default_route),
1507 strna(link_info.llmnr),
1508 strna(link_info.mdns),
1509 strna(link_info.dns_over_tls),
1510 strna(link_info.dnssec),
1511 yes_no(link_info.dnssec_supported));
1512
1513 if (link_info.current_dns)
1514 printf(" Current DNS Server: %s\n", link_info.current_dns);
1515
1516 STRV_FOREACH(i, link_info.dns) {
1517 printf(" %s %s\n",
1518 i == link_info.dns ? "DNS Servers:" : " ",
1519 *i);
1520 }
1521
1522 STRV_FOREACH(i, link_info.domains) {
1523 printf(" %s %s\n",
1524 i == link_info.domains ? "DNS Domain:" : " ",
1525 *i);
1526 }
1527
1528 STRV_FOREACH(i, link_info.ntas) {
1529 printf(" %s %s\n",
1530 i == link_info.ntas ? "DNSSEC NTA:" : " ",
1531 *i);
1532 }
1533
1534 if (empty_line)
1535 *empty_line = true;
1536
1537 return 0;
1538 }
1539
1540 static int map_global_dns_servers(sd_bus *bus, const char *member, sd_bus_message *m, sd_bus_error *error, void *userdata) {
1541 char ***l = userdata;
1542 int r;
1543
1544 assert(bus);
1545 assert(member);
1546 assert(m);
1547 assert(l);
1548
1549 r = sd_bus_message_enter_container(m, 'a', "(iiay)");
1550 if (r < 0)
1551 return r;
1552
1553 for (;;) {
1554 char *pretty = NULL;
1555
1556 r = read_dns_server_one(m, true, &pretty);
1557 if (r < 0)
1558 return r;
1559 if (r == 0)
1560 break;
1561
1562 if (isempty(pretty))
1563 continue;
1564
1565 r = strv_consume(l, pretty);
1566 if (r < 0)
1567 return r;
1568 }
1569
1570 r = sd_bus_message_exit_container(m);
1571 if (r < 0)
1572 return r;
1573
1574 return 0;
1575 }
1576
1577 static int map_global_current_dns_server(sd_bus *bus, const char *member, sd_bus_message *m, sd_bus_error *error, void *userdata) {
1578 assert(m);
1579 assert(userdata);
1580
1581 return read_dns_server_one(m, true, userdata);
1582 }
1583
1584 static int map_global_domains(sd_bus *bus, const char *member, sd_bus_message *m, sd_bus_error *error, void *userdata) {
1585 char ***l = userdata;
1586 int r;
1587
1588 assert(bus);
1589 assert(member);
1590 assert(m);
1591 assert(l);
1592
1593 r = sd_bus_message_enter_container(m, 'a', "(isb)");
1594 if (r < 0)
1595 return r;
1596
1597 for (;;) {
1598 char *pretty = NULL;
1599
1600 r = read_domain_one(m, true, &pretty);
1601 if (r < 0)
1602 return r;
1603 if (r == 0)
1604 break;
1605
1606 if (isempty(pretty))
1607 continue;
1608
1609 r = strv_consume(l, pretty);
1610 if (r < 0)
1611 return r;
1612 }
1613
1614 r = sd_bus_message_exit_container(m);
1615 if (r < 0)
1616 return r;
1617
1618 return 0;
1619 }
1620
1621 static int status_print_strv_global(char **p) {
1622 char **i;
1623
1624 printf("%sGlobal%s:", ansi_highlight(), ansi_normal());
1625
1626 STRV_FOREACH(i, p)
1627 printf(" %s", *i);
1628
1629 printf("\n");
1630
1631 return 0;
1632 }
1633
1634 struct global_info {
1635 char *current_dns;
1636 char **dns;
1637 char **fallback_dns;
1638 char **domains;
1639 char **ntas;
1640 const char *llmnr;
1641 const char *mdns;
1642 const char *dns_over_tls;
1643 const char *dnssec;
1644 bool dnssec_supported;
1645 };
1646
1647 static void global_info_clear(struct global_info *p) {
1648 free(p->current_dns);
1649 strv_free(p->dns);
1650 strv_free(p->fallback_dns);
1651 strv_free(p->domains);
1652 strv_free(p->ntas);
1653 }
1654
1655 static int status_global(sd_bus *bus, StatusMode mode, bool *empty_line) {
1656 static const struct bus_properties_map property_map[] = {
1657 { "DNS", "a(iiay)", map_global_dns_servers, offsetof(struct global_info, dns) },
1658 { "FallbackDNS", "a(iiay)", map_global_dns_servers, offsetof(struct global_info, fallback_dns) },
1659 { "CurrentDNSServer", "(iiay)", map_global_current_dns_server, offsetof(struct global_info, current_dns) },
1660 { "Domains", "a(isb)", map_global_domains, offsetof(struct global_info, domains) },
1661 { "DNSSECNegativeTrustAnchors", "as", NULL, offsetof(struct global_info, ntas) },
1662 { "LLMNR", "s", NULL, offsetof(struct global_info, llmnr) },
1663 { "MulticastDNS", "s", NULL, offsetof(struct global_info, mdns) },
1664 { "DNSOverTLS", "s", NULL, offsetof(struct global_info, dns_over_tls) },
1665 { "DNSSEC", "s", NULL, offsetof(struct global_info, dnssec) },
1666 { "DNSSECSupported", "b", NULL, offsetof(struct global_info, dnssec_supported) },
1667 {}
1668 };
1669 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1670 _cleanup_(sd_bus_message_unrefp) sd_bus_message *m = NULL;
1671 _cleanup_(global_info_clear) struct global_info global_info = {};
1672 char **i;
1673 int r;
1674
1675 assert(bus);
1676 assert(empty_line);
1677
1678 r = bus_map_all_properties(bus,
1679 "org.freedesktop.resolve1",
1680 "/org/freedesktop/resolve1",
1681 property_map,
1682 BUS_MAP_BOOLEAN_AS_BOOL,
1683 &error,
1684 &m,
1685 &global_info);
1686 if (r < 0)
1687 return log_error_errno(r, "Failed to get global data: %s", bus_error_message(&error, r));
1688
1689 (void) pager_open(arg_pager_flags);
1690
1691 if (mode == STATUS_DNS)
1692 return status_print_strv_global(global_info.dns);
1693
1694 if (mode == STATUS_DOMAIN)
1695 return status_print_strv_global(global_info.domains);
1696
1697 if (mode == STATUS_NTA)
1698 return status_print_strv_global(global_info.ntas);
1699
1700 if (mode == STATUS_LLMNR) {
1701 printf("%sGlobal%s: %s\n", ansi_highlight(), ansi_normal(),
1702 strna(global_info.llmnr));
1703
1704 return 0;
1705 }
1706
1707 if (mode == STATUS_MDNS) {
1708 printf("%sGlobal%s: %s\n", ansi_highlight(), ansi_normal(),
1709 strna(global_info.mdns));
1710
1711 return 0;
1712 }
1713
1714 if (mode == STATUS_PRIVATE) {
1715 printf("%sGlobal%s: %s\n", ansi_highlight(), ansi_normal(),
1716 strna(global_info.dns_over_tls));
1717
1718 return 0;
1719 }
1720
1721 if (mode == STATUS_DNSSEC) {
1722 printf("%sGlobal%s: %s\n", ansi_highlight(), ansi_normal(),
1723 strna(global_info.dnssec));
1724
1725 return 0;
1726 }
1727
1728 printf("%sGlobal%s\n", ansi_highlight(), ansi_normal());
1729
1730 printf(" LLMNR setting: %s\n"
1731 "MulticastDNS setting: %s\n"
1732 " DNSOverTLS setting: %s\n"
1733 " DNSSEC setting: %s\n"
1734 " DNSSEC supported: %s\n",
1735 strna(global_info.llmnr),
1736 strna(global_info.mdns),
1737 strna(global_info.dns_over_tls),
1738 strna(global_info.dnssec),
1739 yes_no(global_info.dnssec_supported));
1740
1741 if (global_info.current_dns)
1742 printf(" Current DNS Server: %s\n", global_info.current_dns);
1743
1744 STRV_FOREACH(i, global_info.dns) {
1745 printf(" %s %s\n",
1746 i == global_info.dns ? "DNS Servers:" : " ",
1747 *i);
1748 }
1749
1750 STRV_FOREACH(i, global_info.fallback_dns) {
1751 printf("%s %s\n",
1752 i == global_info.fallback_dns ? "Fallback DNS Servers:" : " ",
1753 *i);
1754 }
1755
1756 STRV_FOREACH(i, global_info.domains) {
1757 printf(" %s %s\n",
1758 i == global_info.domains ? "DNS Domain:" : " ",
1759 *i);
1760 }
1761
1762 strv_sort(global_info.ntas);
1763 STRV_FOREACH(i, global_info.ntas) {
1764 printf(" %s %s\n",
1765 i == global_info.ntas ? "DNSSEC NTA:" : " ",
1766 *i);
1767 }
1768
1769 *empty_line = true;
1770
1771 return 0;
1772 }
1773
1774 static int status_all(sd_bus *bus, StatusMode mode) {
1775 _cleanup_(sd_netlink_message_unrefp) sd_netlink_message *req = NULL, *reply = NULL;
1776 _cleanup_(sd_netlink_unrefp) sd_netlink *rtnl = NULL;
1777 sd_netlink_message *i;
1778 bool empty_line = false;
1779 int r;
1780
1781 assert(bus);
1782
1783 r = status_global(bus, mode, &empty_line);
1784 if (r < 0)
1785 return r;
1786
1787 r = sd_netlink_open(&rtnl);
1788 if (r < 0)
1789 return log_error_errno(r, "Failed to connect to netlink: %m");
1790
1791 r = sd_rtnl_message_new_link(rtnl, &req, RTM_GETLINK, 0);
1792 if (r < 0)
1793 return rtnl_log_create_error(r);
1794
1795 r = sd_netlink_message_request_dump(req, true);
1796 if (r < 0)
1797 return rtnl_log_create_error(r);
1798
1799 r = sd_netlink_call(rtnl, req, 0, &reply);
1800 if (r < 0)
1801 return log_error_errno(r, "Failed to enumerate links: %m");
1802
1803 r = 0;
1804 for (i = reply; i; i = sd_netlink_message_next(i)) {
1805 const char *name;
1806 int ifindex, q;
1807 uint16_t type;
1808
1809 q = sd_netlink_message_get_type(i, &type);
1810 if (q < 0)
1811 return rtnl_log_parse_error(q);
1812
1813 if (type != RTM_NEWLINK)
1814 continue;
1815
1816 q = sd_rtnl_message_link_get_ifindex(i, &ifindex);
1817 if (q < 0)
1818 return rtnl_log_parse_error(q);
1819
1820 if (ifindex == LOOPBACK_IFINDEX)
1821 continue;
1822
1823 q = sd_netlink_message_read_string(i, IFLA_IFNAME, &name);
1824 if (q < 0)
1825 return rtnl_log_parse_error(q);
1826
1827 q = status_ifindex(bus, ifindex, name, mode, &empty_line);
1828 if (q < 0 && r >= 0)
1829 r = q;
1830 }
1831
1832 return r;
1833 }
1834
1835 static int verb_status(int argc, char **argv, void *userdata) {
1836 sd_bus *bus = userdata;
1837 int q, r = 0;
1838
1839 if (argc > 1) {
1840 char **ifname;
1841 bool empty_line = false;
1842
1843 STRV_FOREACH(ifname, argv + 1) {
1844 int ifindex;
1845
1846 ifindex = parse_ifindex_and_warn(*ifname);
1847 if (ifindex < 0)
1848 continue;
1849
1850 q = status_ifindex(bus, ifindex, NULL, STATUS_ALL, &empty_line);
1851 if (q < 0)
1852 r = q;
1853 }
1854 } else
1855 r = status_all(bus, STATUS_ALL);
1856
1857 return r;
1858 }
1859
1860 static int log_interface_is_managed(int r, int ifindex) {
1861 char ifname[IFNAMSIZ];
1862
1863 return log_error_errno(r,
1864 "The specified interface %s is managed by systemd-networkd. Operation refused.\n"
1865 "Please configure DNS settings for systemd-networkd managed interfaces directly in their .network files.",
1866 strna(if_indextoname(ifindex, ifname)));
1867 }
1868
1869 static int verb_dns(int argc, char **argv, void *userdata) {
1870 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1871 _cleanup_(sd_bus_message_unrefp) sd_bus_message *req = NULL;
1872 sd_bus *bus = userdata;
1873 char **p;
1874 int r;
1875
1876 assert(bus);
1877
1878 if (argc >= 2) {
1879 r = ifname_mangle(argv[1]);
1880 if (r < 0)
1881 return r;
1882 }
1883
1884 if (arg_ifindex <= 0)
1885 return status_all(bus, STATUS_DNS);
1886
1887 if (argc < 3)
1888 return status_ifindex(bus, arg_ifindex, NULL, STATUS_DNS, NULL);
1889
1890 r = sd_bus_message_new_method_call(
1891 bus,
1892 &req,
1893 "org.freedesktop.resolve1",
1894 "/org/freedesktop/resolve1",
1895 "org.freedesktop.resolve1.Manager",
1896 "SetLinkDNS");
1897 if (r < 0)
1898 return bus_log_create_error(r);
1899
1900 r = sd_bus_message_append(req, "i", arg_ifindex);
1901 if (r < 0)
1902 return bus_log_create_error(r);
1903
1904 r = sd_bus_message_open_container(req, 'a', "(iay)");
1905 if (r < 0)
1906 return bus_log_create_error(r);
1907
1908 /* If only argument is the empty string, then call SetLinkDNS() with an
1909 * empty list, which will clear the list of domains for an interface. */
1910 if (!strv_equal(argv + 2, STRV_MAKE(""))) {
1911 STRV_FOREACH(p, argv + 2) {
1912 struct in_addr_data data;
1913
1914 r = in_addr_from_string_auto(*p, &data.family, &data.address);
1915 if (r < 0)
1916 return log_error_errno(r, "Failed to parse DNS server address: %s", *p);
1917
1918 r = sd_bus_message_open_container(req, 'r', "iay");
1919 if (r < 0)
1920 return bus_log_create_error(r);
1921
1922 r = sd_bus_message_append(req, "i", data.family);
1923 if (r < 0)
1924 return bus_log_create_error(r);
1925
1926 r = sd_bus_message_append_array(req, 'y', &data.address, FAMILY_ADDRESS_SIZE(data.family));
1927 if (r < 0)
1928 return bus_log_create_error(r);
1929
1930 r = sd_bus_message_close_container(req);
1931 if (r < 0)
1932 return bus_log_create_error(r);
1933 }
1934 }
1935
1936 r = sd_bus_message_close_container(req);
1937 if (r < 0)
1938 return bus_log_create_error(r);
1939
1940 r = sd_bus_call(bus, req, 0, &error, NULL);
1941 if (r < 0) {
1942 if (sd_bus_error_has_name(&error, BUS_ERROR_LINK_BUSY))
1943 return log_interface_is_managed(r, arg_ifindex);
1944
1945 if (arg_ifindex_permissive &&
1946 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
1947 return 0;
1948
1949 return log_error_errno(r, "Failed to set DNS configuration: %s", bus_error_message(&error, r));
1950 }
1951
1952 return 0;
1953 }
1954
1955 static int verb_domain(int argc, char **argv, void *userdata) {
1956 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
1957 _cleanup_(sd_bus_message_unrefp) sd_bus_message *req = NULL;
1958 sd_bus *bus = userdata;
1959 char **p;
1960 int r;
1961
1962 assert(bus);
1963
1964 if (argc >= 2) {
1965 r = ifname_mangle(argv[1]);
1966 if (r < 0)
1967 return r;
1968 }
1969
1970 if (arg_ifindex <= 0)
1971 return status_all(bus, STATUS_DOMAIN);
1972
1973 if (argc < 3)
1974 return status_ifindex(bus, arg_ifindex, NULL, STATUS_DOMAIN, NULL);
1975
1976 r = sd_bus_message_new_method_call(
1977 bus,
1978 &req,
1979 "org.freedesktop.resolve1",
1980 "/org/freedesktop/resolve1",
1981 "org.freedesktop.resolve1.Manager",
1982 "SetLinkDomains");
1983 if (r < 0)
1984 return bus_log_create_error(r);
1985
1986 r = sd_bus_message_append(req, "i", arg_ifindex);
1987 if (r < 0)
1988 return bus_log_create_error(r);
1989
1990 r = sd_bus_message_open_container(req, 'a', "(sb)");
1991 if (r < 0)
1992 return bus_log_create_error(r);
1993
1994 /* If only argument is the empty string, then call SetLinkDomains() with an
1995 * empty list, which will clear the list of domains for an interface. */
1996 if (!strv_equal(argv + 2, STRV_MAKE(""))) {
1997 STRV_FOREACH(p, argv + 2) {
1998 const char *n;
1999
2000 n = **p == '~' ? *p + 1 : *p;
2001
2002 r = dns_name_is_valid(n);
2003 if (r < 0)
2004 return log_error_errno(r, "Failed to validate specified domain %s: %m", n);
2005 if (r == 0) {
2006 log_error("Domain not valid: %s", n);
2007 return -EINVAL;
2008 }
2009
2010 r = sd_bus_message_append(req, "(sb)", n, **p == '~');
2011 if (r < 0)
2012 return bus_log_create_error(r);
2013 }
2014 }
2015
2016 r = sd_bus_message_close_container(req);
2017 if (r < 0)
2018 return bus_log_create_error(r);
2019
2020 r = sd_bus_call(bus, req, 0, &error, NULL);
2021 if (r < 0) {
2022 if (sd_bus_error_has_name(&error, BUS_ERROR_LINK_BUSY))
2023 return log_interface_is_managed(r, arg_ifindex);
2024
2025 if (arg_ifindex_permissive &&
2026 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
2027 return 0;
2028
2029 return log_error_errno(r, "Failed to set domain configuration: %s", bus_error_message(&error, r));
2030 }
2031
2032 return 0;
2033 }
2034
2035 static int verb_default_route(int argc, char **argv, void *userdata) {
2036 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2037 sd_bus *bus = userdata;
2038 int r, b;
2039
2040 assert(bus);
2041
2042 if (argc >= 2) {
2043 r = ifname_mangle(argv[1]);
2044 if (r < 0)
2045 return r;
2046 }
2047
2048 if (arg_ifindex <= 0)
2049 return status_all(bus, STATUS_DEFAULT_ROUTE);
2050
2051 if (argc < 3)
2052 return status_ifindex(bus, arg_ifindex, NULL, STATUS_DEFAULT_ROUTE, NULL);
2053
2054 b = parse_boolean(argv[2]);
2055 if (b < 0)
2056 return log_error_errno(b, "Failed to parse boolean argument: %s", argv[2]);
2057
2058 r = sd_bus_call_method(bus,
2059 "org.freedesktop.resolve1",
2060 "/org/freedesktop/resolve1",
2061 "org.freedesktop.resolve1.Manager",
2062 "SetLinkDefaultRoute",
2063 &error,
2064 NULL,
2065 "ib", arg_ifindex, b);
2066 if (r < 0) {
2067 if (sd_bus_error_has_name(&error, BUS_ERROR_LINK_BUSY))
2068 return log_interface_is_managed(r, arg_ifindex);
2069
2070 if (arg_ifindex_permissive &&
2071 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
2072 return 0;
2073
2074 return log_error_errno(r, "Failed to set default route configuration: %s", bus_error_message(&error, r));
2075 }
2076
2077 return 0;
2078 }
2079
2080 static int verb_llmnr(int argc, char **argv, void *userdata) {
2081 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2082 sd_bus *bus = userdata;
2083 int r;
2084
2085 assert(bus);
2086
2087 if (argc >= 2) {
2088 r = ifname_mangle(argv[1]);
2089 if (r < 0)
2090 return r;
2091 }
2092
2093 if (arg_ifindex <= 0)
2094 return status_all(bus, STATUS_LLMNR);
2095
2096 if (argc < 3)
2097 return status_ifindex(bus, arg_ifindex, NULL, STATUS_LLMNR, NULL);
2098
2099 r = sd_bus_call_method(bus,
2100 "org.freedesktop.resolve1",
2101 "/org/freedesktop/resolve1",
2102 "org.freedesktop.resolve1.Manager",
2103 "SetLinkLLMNR",
2104 &error,
2105 NULL,
2106 "is", arg_ifindex, argv[2]);
2107 if (r < 0) {
2108 if (sd_bus_error_has_name(&error, BUS_ERROR_LINK_BUSY))
2109 return log_interface_is_managed(r, arg_ifindex);
2110
2111 if (arg_ifindex_permissive &&
2112 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
2113 return 0;
2114
2115 return log_error_errno(r, "Failed to set LLMNR configuration: %s", bus_error_message(&error, r));
2116 }
2117
2118 return 0;
2119 }
2120
2121 static int verb_mdns(int argc, char **argv, void *userdata) {
2122 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2123 sd_bus *bus = userdata;
2124 int r;
2125
2126 assert(bus);
2127
2128 if (argc >= 2) {
2129 r = ifname_mangle(argv[1]);
2130 if (r < 0)
2131 return r;
2132 }
2133
2134 if (arg_ifindex <= 0)
2135 return status_all(bus, STATUS_MDNS);
2136
2137 if (argc < 3)
2138 return status_ifindex(bus, arg_ifindex, NULL, STATUS_MDNS, NULL);
2139
2140 r = sd_bus_call_method(bus,
2141 "org.freedesktop.resolve1",
2142 "/org/freedesktop/resolve1",
2143 "org.freedesktop.resolve1.Manager",
2144 "SetLinkMulticastDNS",
2145 &error,
2146 NULL,
2147 "is", arg_ifindex, argv[2]);
2148 if (r < 0) {
2149 if (sd_bus_error_has_name(&error, BUS_ERROR_LINK_BUSY))
2150 return log_interface_is_managed(r, arg_ifindex);
2151
2152 if (arg_ifindex_permissive &&
2153 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
2154 return 0;
2155
2156 return log_error_errno(r, "Failed to set MulticastDNS configuration: %s", bus_error_message(&error, r));
2157 }
2158
2159 return 0;
2160 }
2161
2162 static int verb_dns_over_tls(int argc, char **argv, void *userdata) {
2163 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2164 sd_bus *bus = userdata;
2165 int r;
2166
2167 assert(bus);
2168
2169 if (argc >= 2) {
2170 r = ifname_mangle(argv[1]);
2171 if (r < 0)
2172 return r;
2173 }
2174
2175 if (arg_ifindex <= 0)
2176 return status_all(bus, STATUS_PRIVATE);
2177
2178 if (argc < 3)
2179 return status_ifindex(bus, arg_ifindex, NULL, STATUS_PRIVATE, NULL);
2180
2181 r = sd_bus_call_method(bus,
2182 "org.freedesktop.resolve1",
2183 "/org/freedesktop/resolve1",
2184 "org.freedesktop.resolve1.Manager",
2185 "SetLinkDNSOverTLS",
2186 &error,
2187 NULL,
2188 "is", arg_ifindex, argv[2]);
2189 if (r < 0) {
2190 if (sd_bus_error_has_name(&error, BUS_ERROR_LINK_BUSY))
2191 return log_interface_is_managed(r, arg_ifindex);
2192
2193 if (arg_ifindex_permissive &&
2194 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
2195 return 0;
2196
2197 return log_error_errno(r, "Failed to set DNSOverTLS configuration: %s", bus_error_message(&error, r));
2198 }
2199
2200 return 0;
2201 }
2202
2203 static int verb_dnssec(int argc, char **argv, void *userdata) {
2204 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2205 sd_bus *bus = userdata;
2206 int r;
2207
2208 assert(bus);
2209
2210 if (argc >= 2) {
2211 r = ifname_mangle(argv[1]);
2212 if (r < 0)
2213 return r;
2214 }
2215
2216 if (arg_ifindex <= 0)
2217 return status_all(bus, STATUS_DNSSEC);
2218
2219 if (argc < 3)
2220 return status_ifindex(bus, arg_ifindex, NULL, STATUS_DNSSEC, NULL);
2221
2222 r = sd_bus_call_method(bus,
2223 "org.freedesktop.resolve1",
2224 "/org/freedesktop/resolve1",
2225 "org.freedesktop.resolve1.Manager",
2226 "SetLinkDNSSEC",
2227 &error,
2228 NULL,
2229 "is", arg_ifindex, argv[2]);
2230 if (r < 0) {
2231 if (sd_bus_error_has_name(&error, BUS_ERROR_LINK_BUSY))
2232 return log_interface_is_managed(r, arg_ifindex);
2233
2234 if (arg_ifindex_permissive &&
2235 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
2236 return 0;
2237
2238 return log_error_errno(r, "Failed to set DNSSEC configuration: %s", bus_error_message(&error, r));
2239 }
2240
2241 return 0;
2242 }
2243
2244 static int verb_nta(int argc, char **argv, void *userdata) {
2245 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2246 _cleanup_(sd_bus_message_unrefp) sd_bus_message *req = NULL;
2247 sd_bus *bus = userdata;
2248 char **p;
2249 int r;
2250 bool clear;
2251
2252 assert(bus);
2253
2254 if (argc >= 2) {
2255 r = ifname_mangle(argv[1]);
2256 if (r < 0)
2257 return r;
2258 }
2259
2260 if (arg_ifindex <= 0)
2261 return status_all(bus, STATUS_NTA);
2262
2263 if (argc < 3)
2264 return status_ifindex(bus, arg_ifindex, NULL, STATUS_NTA, NULL);
2265
2266 /* If only argument is the empty string, then call SetLinkDNSSECNegativeTrustAnchors()
2267 * with an empty list, which will clear the list of domains for an interface. */
2268 clear = strv_equal(argv + 2, STRV_MAKE(""));
2269
2270 if (!clear)
2271 STRV_FOREACH(p, argv + 2) {
2272 r = dns_name_is_valid(*p);
2273 if (r < 0)
2274 return log_error_errno(r, "Failed to validate specified domain %s: %m", *p);
2275 if (r == 0) {
2276 log_error("Domain not valid: %s", *p);
2277 return -EINVAL;
2278 }
2279 }
2280
2281 r = sd_bus_message_new_method_call(
2282 bus,
2283 &req,
2284 "org.freedesktop.resolve1",
2285 "/org/freedesktop/resolve1",
2286 "org.freedesktop.resolve1.Manager",
2287 "SetLinkDNSSECNegativeTrustAnchors");
2288 if (r < 0)
2289 return bus_log_create_error(r);
2290
2291 r = sd_bus_message_append(req, "i", arg_ifindex);
2292 if (r < 0)
2293 return bus_log_create_error(r);
2294
2295 r = sd_bus_message_append_strv(req, clear ? NULL : argv + 2);
2296 if (r < 0)
2297 return bus_log_create_error(r);
2298
2299 r = sd_bus_call(bus, req, 0, &error, NULL);
2300 if (r < 0) {
2301 if (sd_bus_error_has_name(&error, BUS_ERROR_LINK_BUSY))
2302 return log_interface_is_managed(r, arg_ifindex);
2303
2304 if (arg_ifindex_permissive &&
2305 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
2306 return 0;
2307
2308 return log_error_errno(r, "Failed to set DNSSEC NTA configuration: %s", bus_error_message(&error, r));
2309 }
2310
2311 return 0;
2312 }
2313
2314 static int verb_revert_link(int argc, char **argv, void *userdata) {
2315 _cleanup_(sd_bus_error_free) sd_bus_error error = SD_BUS_ERROR_NULL;
2316 sd_bus *bus = userdata;
2317 int r;
2318
2319 assert(bus);
2320
2321 if (argc >= 2) {
2322 r = ifname_mangle(argv[1]);
2323 if (r < 0)
2324 return r;
2325 }
2326
2327 if (arg_ifindex <= 0)
2328 return log_error_errno(SYNTHETIC_ERRNO(EINVAL), "Interface argument required.");
2329
2330 r = sd_bus_call_method(bus,
2331 "org.freedesktop.resolve1",
2332 "/org/freedesktop/resolve1",
2333 "org.freedesktop.resolve1.Manager",
2334 "RevertLink",
2335 &error,
2336 NULL,
2337 "i", arg_ifindex);
2338 if (r < 0) {
2339 if (arg_ifindex_permissive &&
2340 sd_bus_error_has_name(&error, BUS_ERROR_NO_SUCH_LINK))
2341 return 0;
2342
2343 return log_error_errno(r, "Failed to revert interface configuration: %s", bus_error_message(&error, r));
2344 }
2345
2346 return 0;
2347 }
2348
2349 static void help_protocol_types(void) {
2350 if (arg_legend)
2351 puts("Known protocol types:");
2352 puts("dns\nllmnr\nllmnr-ipv4\nllmnr-ipv6\nmdns\nmdns-ipv4\nmdns-ipv6");
2353 }
2354
2355 static void help_dns_types(void) {
2356 if (arg_legend)
2357 puts("Known DNS RR types:");
2358
2359 DUMP_STRING_TABLE(dns_type, int, _DNS_TYPE_MAX);
2360 }
2361
2362 static void help_dns_classes(void) {
2363 if (arg_legend)
2364 puts("Known DNS RR classes:");
2365
2366 DUMP_STRING_TABLE(dns_class, int, _DNS_CLASS_MAX);
2367 }
2368
2369 static int compat_help(void) {
2370 _cleanup_free_ char *link = NULL;
2371 int r;
2372
2373 r = terminal_urlify_man("resolvectl", "1", &link);
2374 if (r < 0)
2375 return log_oom();
2376
2377 printf("%1$s [OPTIONS...] HOSTNAME|ADDRESS...\n"
2378 "%1$s [OPTIONS...] --service [[NAME] TYPE] DOMAIN\n"
2379 "%1$s [OPTIONS...] --openpgp EMAIL@DOMAIN...\n"
2380 "%1$s [OPTIONS...] --statistics\n"
2381 "%1$s [OPTIONS...] --reset-statistics\n"
2382 "\n"
2383 "Resolve domain names, IPv4 and IPv6 addresses, DNS records, and services.\n\n"
2384 " -h --help Show this help\n"
2385 " --version Show package version\n"
2386 " --no-pager Do not pipe output into a pager\n"
2387 " -4 Resolve IPv4 addresses\n"
2388 " -6 Resolve IPv6 addresses\n"
2389 " -i --interface=INTERFACE Look on interface\n"
2390 " -p --protocol=PROTO|help Look via protocol\n"
2391 " -t --type=TYPE|help Query RR with DNS type\n"
2392 " -c --class=CLASS|help Query RR with DNS class\n"
2393 " --service Resolve service (SRV)\n"
2394 " --service-address=BOOL Resolve address for services (default: yes)\n"
2395 " --service-txt=BOOL Resolve TXT records for services (default: yes)\n"
2396 " --openpgp Query OpenPGP public key\n"
2397 " --tlsa Query TLS public key\n"
2398 " --cname=BOOL Follow CNAME redirects (default: yes)\n"
2399 " --search=BOOL Use search domains for single-label names\n"
2400 " (default: yes)\n"
2401 " --raw[=payload|packet] Dump the answer as binary data\n"
2402 " --legend=BOOL Print headers and additional info (default: yes)\n"
2403 " --statistics Show resolver statistics\n"
2404 " --reset-statistics Reset resolver statistics\n"
2405 " --status Show link and server status\n"
2406 " --flush-caches Flush all local DNS caches\n"
2407 " --reset-server-features\n"
2408 " Forget learnt DNS server feature levels\n"
2409 " --set-dns=SERVER Set per-interface DNS server address\n"
2410 " --set-domain=DOMAIN Set per-interface search domain\n"
2411 " --set-llmnr=MODE Set per-interface LLMNR mode\n"
2412 " --set-mdns=MODE Set per-interface MulticastDNS mode\n"
2413 " --set-dnsovertls=MODE Set per-interface DNS-over-TLS mode\n"
2414 " --set-dnssec=MODE Set per-interface DNSSEC mode\n"
2415 " --set-nta=DOMAIN Set per-interface DNSSEC NTA\n"
2416 " --revert Revert per-interface configuration\n"
2417 "\nSee the %2$s for details.\n"
2418 , program_invocation_short_name
2419 , link
2420 );
2421
2422 return 0;
2423 }
2424
2425 static int native_help(void) {
2426 _cleanup_free_ char *link = NULL;
2427 int r;
2428
2429 r = terminal_urlify_man("resolvectl", "1", &link);
2430 if (r < 0)
2431 return log_oom();
2432
2433 printf("%1$s [OPTIONS...] {COMMAND} ...\n"
2434 "\n"
2435 "Send control commands to the network name resolution manager, or\n"
2436 "resolve domain names, IPv4 and IPv6 addresses, DNS records, and services.\n"
2437 "\n"
2438 " -h --help Show this help\n"
2439 " --version Show package version\n"
2440 " --no-pager Do not pipe output into a pager\n"
2441 " -4 Resolve IPv4 addresses\n"
2442 " -6 Resolve IPv6 addresses\n"
2443 " -i --interface=INTERFACE Look on interface\n"
2444 " -p --protocol=PROTO|help Look via protocol\n"
2445 " -t --type=TYPE|help Query RR with DNS type\n"
2446 " -c --class=CLASS|help Query RR with DNS class\n"
2447 " --service-address=BOOL Resolve address for services (default: yes)\n"
2448 " --service-txt=BOOL Resolve TXT records for services (default: yes)\n"
2449 " --cname=BOOL Follow CNAME redirects (default: yes)\n"
2450 " --search=BOOL Use search domains for single-label names\n"
2451 " (default: yes)\n"
2452 " --raw[=payload|packet] Dump the answer as binary data\n"
2453 " --legend=BOOL Print headers and additional info (default: yes)\n"
2454 "\n"
2455 "Commands:\n"
2456 " query HOSTNAME|ADDRESS... Resolve domain names, IPv4 and IPv6 addresses\n"
2457 " service [[NAME] TYPE] DOMAIN Resolve service (SRV)\n"
2458 " openpgp EMAIL@DOMAIN... Query OpenPGP public key\n"
2459 " tlsa DOMAIN[:PORT]... Query TLS public key\n"
2460 " status [LINK...] Show link and server status\n"
2461 " statistics Show resolver statistics\n"
2462 " reset-statistics Reset resolver statistics\n"
2463 " flush-caches Flush all local DNS caches\n"
2464 " reset-server-features Forget learnt DNS server feature levels\n"
2465 " dns [LINK [SERVER...]] Get/set per-interface DNS server address\n"
2466 " domain [LINK [DOMAIN...]] Get/set per-interface search domain\n"
2467 " default-route [LINK [BOOL]] Get/set per-interface default route flag\n"
2468 " llmnr [LINK [MODE]] Get/set per-interface LLMNR mode\n"
2469 " mdns [LINK [MODE]] Get/set per-interface MulticastDNS mode\n"
2470 " dnsovertls [LINK [MODE]] Get/set per-interface DNS-over-TLS mode\n"
2471 " dnssec [LINK [MODE]] Get/set per-interface DNSSEC mode\n"
2472 " nta [LINK [DOMAIN...]] Get/set per-interface DNSSEC NTA\n"
2473 " revert LINK Revert per-interface configuration\n"
2474 "\nSee the %2$s for details.\n"
2475 , program_invocation_short_name
2476 , link
2477 );
2478
2479 return 0;
2480 }
2481
2482 static int verb_help(int argc, char **argv, void *userdata) {
2483 return native_help();
2484 }
2485
2486 static int compat_parse_argv(int argc, char *argv[]) {
2487 enum {
2488 ARG_VERSION = 0x100,
2489 ARG_LEGEND,
2490 ARG_SERVICE,
2491 ARG_CNAME,
2492 ARG_SERVICE_ADDRESS,
2493 ARG_SERVICE_TXT,
2494 ARG_OPENPGP,
2495 ARG_TLSA,
2496 ARG_RAW,
2497 ARG_SEARCH,
2498 ARG_STATISTICS,
2499 ARG_RESET_STATISTICS,
2500 ARG_STATUS,
2501 ARG_FLUSH_CACHES,
2502 ARG_RESET_SERVER_FEATURES,
2503 ARG_NO_PAGER,
2504 ARG_SET_DNS,
2505 ARG_SET_DOMAIN,
2506 ARG_SET_LLMNR,
2507 ARG_SET_MDNS,
2508 ARG_SET_PRIVATE,
2509 ARG_SET_DNSSEC,
2510 ARG_SET_NTA,
2511 ARG_REVERT_LINK,
2512 };
2513
2514 static const struct option options[] = {
2515 { "help", no_argument, NULL, 'h' },
2516 { "version", no_argument, NULL, ARG_VERSION },
2517 { "type", required_argument, NULL, 't' },
2518 { "class", required_argument, NULL, 'c' },
2519 { "legend", required_argument, NULL, ARG_LEGEND },
2520 { "interface", required_argument, NULL, 'i' },
2521 { "protocol", required_argument, NULL, 'p' },
2522 { "cname", required_argument, NULL, ARG_CNAME },
2523 { "service", no_argument, NULL, ARG_SERVICE },
2524 { "service-address", required_argument, NULL, ARG_SERVICE_ADDRESS },
2525 { "service-txt", required_argument, NULL, ARG_SERVICE_TXT },
2526 { "openpgp", no_argument, NULL, ARG_OPENPGP },
2527 { "tlsa", optional_argument, NULL, ARG_TLSA },
2528 { "raw", optional_argument, NULL, ARG_RAW },
2529 { "search", required_argument, NULL, ARG_SEARCH },
2530 { "statistics", no_argument, NULL, ARG_STATISTICS, },
2531 { "reset-statistics", no_argument, NULL, ARG_RESET_STATISTICS },
2532 { "status", no_argument, NULL, ARG_STATUS },
2533 { "flush-caches", no_argument, NULL, ARG_FLUSH_CACHES },
2534 { "reset-server-features", no_argument, NULL, ARG_RESET_SERVER_FEATURES },
2535 { "no-pager", no_argument, NULL, ARG_NO_PAGER },
2536 { "set-dns", required_argument, NULL, ARG_SET_DNS },
2537 { "set-domain", required_argument, NULL, ARG_SET_DOMAIN },
2538 { "set-llmnr", required_argument, NULL, ARG_SET_LLMNR },
2539 { "set-mdns", required_argument, NULL, ARG_SET_MDNS },
2540 { "set-dnsovertls", required_argument, NULL, ARG_SET_PRIVATE },
2541 { "set-dnssec", required_argument, NULL, ARG_SET_DNSSEC },
2542 { "set-nta", required_argument, NULL, ARG_SET_NTA },
2543 { "revert", no_argument, NULL, ARG_REVERT_LINK },
2544 {}
2545 };
2546
2547 int c, r;
2548
2549 assert(argc >= 0);
2550 assert(argv);
2551
2552 while ((c = getopt_long(argc, argv, "h46i:t:c:p:", options, NULL)) >= 0)
2553 switch(c) {
2554
2555 case 'h':
2556 return compat_help();
2557
2558 case ARG_VERSION:
2559 return version();
2560
2561 case '4':
2562 arg_family = AF_INET;
2563 break;
2564
2565 case '6':
2566 arg_family = AF_INET6;
2567 break;
2568
2569 case 'i':
2570 r = ifname_mangle(optarg);
2571 if (r < 0)
2572 return r;
2573 break;
2574
2575 case 't':
2576 if (streq(optarg, "help")) {
2577 help_dns_types();
2578 return 0;
2579 }
2580
2581 r = dns_type_from_string(optarg);
2582 if (r < 0) {
2583 log_error("Failed to parse RR record type %s", optarg);
2584 return r;
2585 }
2586 arg_type = (uint16_t) r;
2587 assert((int) arg_type == r);
2588
2589 arg_mode = MODE_RESOLVE_RECORD;
2590 break;
2591
2592 case 'c':
2593 if (streq(optarg, "help")) {
2594 help_dns_classes();
2595 return 0;
2596 }
2597
2598 r = dns_class_from_string(optarg);
2599 if (r < 0) {
2600 log_error("Failed to parse RR record class %s", optarg);
2601 return r;
2602 }
2603 arg_class = (uint16_t) r;
2604 assert((int) arg_class == r);
2605
2606 break;
2607
2608 case ARG_LEGEND:
2609 r = parse_boolean(optarg);
2610 if (r < 0)
2611 return log_error_errno(r, "Failed to parse --legend= argument");
2612
2613 arg_legend = r;
2614 break;
2615
2616 case 'p':
2617 if (streq(optarg, "help")) {
2618 help_protocol_types();
2619 return 0;
2620 } else if (streq(optarg, "dns"))
2621 arg_flags |= SD_RESOLVED_DNS;
2622 else if (streq(optarg, "llmnr"))
2623 arg_flags |= SD_RESOLVED_LLMNR;
2624 else if (streq(optarg, "llmnr-ipv4"))
2625 arg_flags |= SD_RESOLVED_LLMNR_IPV4;
2626 else if (streq(optarg, "llmnr-ipv6"))
2627 arg_flags |= SD_RESOLVED_LLMNR_IPV6;
2628 else if (streq(optarg, "mdns"))
2629 arg_flags |= SD_RESOLVED_MDNS;
2630 else if (streq(optarg, "mdns-ipv4"))
2631 arg_flags |= SD_RESOLVED_MDNS_IPV4;
2632 else if (streq(optarg, "mdns-ipv6"))
2633 arg_flags |= SD_RESOLVED_MDNS_IPV6;
2634 else
2635 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
2636 "Unknown protocol specifier: %s", optarg);
2637
2638 break;
2639
2640 case ARG_SERVICE:
2641 arg_mode = MODE_RESOLVE_SERVICE;
2642 break;
2643
2644 case ARG_OPENPGP:
2645 arg_mode = MODE_RESOLVE_OPENPGP;
2646 break;
2647
2648 case ARG_TLSA:
2649 arg_mode = MODE_RESOLVE_TLSA;
2650 if (!optarg || service_family_is_valid(optarg))
2651 arg_service_family = optarg;
2652 else
2653 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
2654 "Unknown service family \"%s\".", optarg);
2655 break;
2656
2657 case ARG_RAW:
2658 if (on_tty())
2659 return log_error_errno(SYNTHETIC_ERRNO(ENOTTY),
2660 "Refusing to write binary data to tty.");
2661
2662 if (optarg == NULL || streq(optarg, "payload"))
2663 arg_raw = RAW_PAYLOAD;
2664 else if (streq(optarg, "packet"))
2665 arg_raw = RAW_PACKET;
2666 else
2667 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
2668 "Unknown --raw specifier \"%s\".",
2669 optarg);
2670
2671 arg_legend = false;
2672 break;
2673
2674 case ARG_CNAME:
2675 r = parse_boolean(optarg);
2676 if (r < 0)
2677 return log_error_errno(r, "Failed to parse --cname= argument.");
2678 SET_FLAG(arg_flags, SD_RESOLVED_NO_CNAME, r == 0);
2679 break;
2680
2681 case ARG_SERVICE_ADDRESS:
2682 r = parse_boolean(optarg);
2683 if (r < 0)
2684 return log_error_errno(r, "Failed to parse --service-address= argument.");
2685 SET_FLAG(arg_flags, SD_RESOLVED_NO_ADDRESS, r == 0);
2686 break;
2687
2688 case ARG_SERVICE_TXT:
2689 r = parse_boolean(optarg);
2690 if (r < 0)
2691 return log_error_errno(r, "Failed to parse --service-txt= argument.");
2692 SET_FLAG(arg_flags, SD_RESOLVED_NO_TXT, r == 0);
2693 break;
2694
2695 case ARG_SEARCH:
2696 r = parse_boolean(optarg);
2697 if (r < 0)
2698 return log_error_errno(r, "Failed to parse --search argument.");
2699 SET_FLAG(arg_flags, SD_RESOLVED_NO_SEARCH, r == 0);
2700 break;
2701
2702 case ARG_STATISTICS:
2703 arg_mode = MODE_STATISTICS;
2704 break;
2705
2706 case ARG_RESET_STATISTICS:
2707 arg_mode = MODE_RESET_STATISTICS;
2708 break;
2709
2710 case ARG_FLUSH_CACHES:
2711 arg_mode = MODE_FLUSH_CACHES;
2712 break;
2713
2714 case ARG_RESET_SERVER_FEATURES:
2715 arg_mode = MODE_RESET_SERVER_FEATURES;
2716 break;
2717
2718 case ARG_STATUS:
2719 arg_mode = MODE_STATUS;
2720 break;
2721
2722 case ARG_NO_PAGER:
2723 arg_pager_flags |= PAGER_DISABLE;
2724 break;
2725
2726 case ARG_SET_DNS:
2727 r = strv_extend(&arg_set_dns, optarg);
2728 if (r < 0)
2729 return log_oom();
2730
2731 arg_mode = MODE_SET_LINK;
2732 break;
2733
2734 case ARG_SET_DOMAIN:
2735 r = strv_extend(&arg_set_domain, optarg);
2736 if (r < 0)
2737 return log_oom();
2738
2739 arg_mode = MODE_SET_LINK;
2740 break;
2741
2742 case ARG_SET_LLMNR:
2743 arg_set_llmnr = optarg;
2744 arg_mode = MODE_SET_LINK;
2745 break;
2746
2747 case ARG_SET_MDNS:
2748 arg_set_mdns = optarg;
2749 arg_mode = MODE_SET_LINK;
2750 break;
2751
2752 case ARG_SET_PRIVATE:
2753 arg_set_dns_over_tls = optarg;
2754 arg_mode = MODE_SET_LINK;
2755 break;
2756
2757 case ARG_SET_DNSSEC:
2758 arg_set_dnssec = optarg;
2759 arg_mode = MODE_SET_LINK;
2760 break;
2761
2762 case ARG_SET_NTA:
2763 r = strv_extend(&arg_set_nta, optarg);
2764 if (r < 0)
2765 return log_oom();
2766
2767 arg_mode = MODE_SET_LINK;
2768 break;
2769
2770 case ARG_REVERT_LINK:
2771 arg_mode = MODE_REVERT_LINK;
2772 break;
2773
2774 case '?':
2775 return -EINVAL;
2776
2777 default:
2778 assert_not_reached("Unhandled option");
2779 }
2780
2781 if (arg_type == 0 && arg_class != 0)
2782 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
2783 "--class= may only be used in conjunction with --type=.");
2784
2785 if (arg_type != 0 && arg_mode == MODE_RESOLVE_SERVICE)
2786 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
2787 "--service and --type= may not be combined.");
2788
2789 if (arg_type != 0 && arg_class == 0)
2790 arg_class = DNS_CLASS_IN;
2791
2792 if (arg_class != 0 && arg_type == 0)
2793 arg_type = DNS_TYPE_A;
2794
2795 if (IN_SET(arg_mode, MODE_SET_LINK, MODE_REVERT_LINK)) {
2796
2797 if (arg_ifindex <= 0)
2798 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
2799 "--set-dns=, --set-domain=, --set-llmnr=, --set-mdns=, --set-dnsovertls=, --set-dnssec=, --set-nta= and --revert require --interface=.");
2800 }
2801
2802 return 1 /* work to do */;
2803 }
2804
2805 static int native_parse_argv(int argc, char *argv[]) {
2806 enum {
2807 ARG_VERSION = 0x100,
2808 ARG_LEGEND,
2809 ARG_CNAME,
2810 ARG_SERVICE_ADDRESS,
2811 ARG_SERVICE_TXT,
2812 ARG_RAW,
2813 ARG_SEARCH,
2814 ARG_NO_PAGER,
2815 };
2816
2817 static const struct option options[] = {
2818 { "help", no_argument, NULL, 'h' },
2819 { "version", no_argument, NULL, ARG_VERSION },
2820 { "type", required_argument, NULL, 't' },
2821 { "class", required_argument, NULL, 'c' },
2822 { "legend", required_argument, NULL, ARG_LEGEND },
2823 { "interface", required_argument, NULL, 'i' },
2824 { "protocol", required_argument, NULL, 'p' },
2825 { "cname", required_argument, NULL, ARG_CNAME },
2826 { "service-address", required_argument, NULL, ARG_SERVICE_ADDRESS },
2827 { "service-txt", required_argument, NULL, ARG_SERVICE_TXT },
2828 { "raw", optional_argument, NULL, ARG_RAW },
2829 { "search", required_argument, NULL, ARG_SEARCH },
2830 { "no-pager", no_argument, NULL, ARG_NO_PAGER },
2831 {}
2832 };
2833
2834 int c, r;
2835
2836 assert(argc >= 0);
2837 assert(argv);
2838
2839 while ((c = getopt_long(argc, argv, "h46i:t:c:p:", options, NULL)) >= 0)
2840 switch(c) {
2841
2842 case 'h':
2843 return native_help();
2844
2845 case ARG_VERSION:
2846 return version();
2847
2848 case '4':
2849 arg_family = AF_INET;
2850 break;
2851
2852 case '6':
2853 arg_family = AF_INET6;
2854 break;
2855
2856 case 'i':
2857 r = ifname_mangle(optarg);
2858 if (r < 0)
2859 return r;
2860 break;
2861
2862 case 't':
2863 if (streq(optarg, "help")) {
2864 help_dns_types();
2865 return 0;
2866 }
2867
2868 r = dns_type_from_string(optarg);
2869 if (r < 0) {
2870 log_error("Failed to parse RR record type %s", optarg);
2871 return r;
2872 }
2873 arg_type = (uint16_t) r;
2874 assert((int) arg_type == r);
2875
2876 break;
2877
2878 case 'c':
2879 if (streq(optarg, "help")) {
2880 help_dns_classes();
2881 return 0;
2882 }
2883
2884 r = dns_class_from_string(optarg);
2885 if (r < 0) {
2886 log_error("Failed to parse RR record class %s", optarg);
2887 return r;
2888 }
2889 arg_class = (uint16_t) r;
2890 assert((int) arg_class == r);
2891
2892 break;
2893
2894 case ARG_LEGEND:
2895 r = parse_boolean(optarg);
2896 if (r < 0)
2897 return log_error_errno(r, "Failed to parse --legend= argument");
2898
2899 arg_legend = r;
2900 break;
2901
2902 case 'p':
2903 if (streq(optarg, "help")) {
2904 help_protocol_types();
2905 return 0;
2906 } else if (streq(optarg, "dns"))
2907 arg_flags |= SD_RESOLVED_DNS;
2908 else if (streq(optarg, "llmnr"))
2909 arg_flags |= SD_RESOLVED_LLMNR;
2910 else if (streq(optarg, "llmnr-ipv4"))
2911 arg_flags |= SD_RESOLVED_LLMNR_IPV4;
2912 else if (streq(optarg, "llmnr-ipv6"))
2913 arg_flags |= SD_RESOLVED_LLMNR_IPV6;
2914 else if (streq(optarg, "mdns"))
2915 arg_flags |= SD_RESOLVED_MDNS;
2916 else if (streq(optarg, "mdns-ipv4"))
2917 arg_flags |= SD_RESOLVED_MDNS_IPV4;
2918 else if (streq(optarg, "mdns-ipv6"))
2919 arg_flags |= SD_RESOLVED_MDNS_IPV6;
2920 else
2921 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
2922 "Unknown protocol specifier: %s",
2923 optarg);
2924
2925 break;
2926
2927 case ARG_RAW:
2928 if (on_tty())
2929 return log_error_errno(SYNTHETIC_ERRNO(ENOTTY),
2930 "Refusing to write binary data to tty.");
2931
2932 if (optarg == NULL || streq(optarg, "payload"))
2933 arg_raw = RAW_PAYLOAD;
2934 else if (streq(optarg, "packet"))
2935 arg_raw = RAW_PACKET;
2936 else
2937 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
2938 "Unknown --raw specifier \"%s\".",
2939 optarg);
2940
2941 arg_legend = false;
2942 break;
2943
2944 case ARG_CNAME:
2945 r = parse_boolean(optarg);
2946 if (r < 0)
2947 return log_error_errno(r, "Failed to parse --cname= argument.");
2948 SET_FLAG(arg_flags, SD_RESOLVED_NO_CNAME, r == 0);
2949 break;
2950
2951 case ARG_SERVICE_ADDRESS:
2952 r = parse_boolean(optarg);
2953 if (r < 0)
2954 return log_error_errno(r, "Failed to parse --service-address= argument.");
2955 SET_FLAG(arg_flags, SD_RESOLVED_NO_ADDRESS, r == 0);
2956 break;
2957
2958 case ARG_SERVICE_TXT:
2959 r = parse_boolean(optarg);
2960 if (r < 0)
2961 return log_error_errno(r, "Failed to parse --service-txt= argument.");
2962 SET_FLAG(arg_flags, SD_RESOLVED_NO_TXT, r == 0);
2963 break;
2964
2965 case ARG_SEARCH:
2966 r = parse_boolean(optarg);
2967 if (r < 0)
2968 return log_error_errno(r, "Failed to parse --search argument.");
2969 SET_FLAG(arg_flags, SD_RESOLVED_NO_SEARCH, r == 0);
2970 break;
2971
2972 case ARG_NO_PAGER:
2973 arg_pager_flags |= PAGER_DISABLE;
2974 break;
2975
2976 case '?':
2977 return -EINVAL;
2978
2979 default:
2980 assert_not_reached("Unhandled option");
2981 }
2982
2983 if (arg_type == 0 && arg_class != 0)
2984 return log_error_errno(SYNTHETIC_ERRNO(EINVAL),
2985 "--class= may only be used in conjunction with --type=.");
2986
2987 if (arg_type != 0 && arg_class == 0)
2988 arg_class = DNS_CLASS_IN;
2989
2990 if (arg_class != 0 && arg_type == 0)
2991 arg_type = DNS_TYPE_A;
2992
2993 return 1 /* work to do */;
2994 }
2995
2996 static int native_main(int argc, char *argv[], sd_bus *bus) {
2997
2998 static const Verb verbs[] = {
2999 { "help", VERB_ANY, VERB_ANY, 0, verb_help },
3000 { "status", VERB_ANY, VERB_ANY, VERB_DEFAULT, verb_status },
3001 { "query", 2, VERB_ANY, 0, verb_query },
3002 { "service", 2, 4, 0, verb_service },
3003 { "openpgp", 2, VERB_ANY, 0, verb_openpgp },
3004 { "tlsa", 2, VERB_ANY, 0, verb_tlsa },
3005 { "statistics", VERB_ANY, 1, 0, show_statistics },
3006 { "reset-statistics", VERB_ANY, 1, 0, reset_statistics },
3007 { "flush-caches", VERB_ANY, 1, 0, flush_caches },
3008 { "reset-server-features", VERB_ANY, 1, 0, reset_server_features },
3009 { "dns", VERB_ANY, VERB_ANY, 0, verb_dns },
3010 { "domain", VERB_ANY, VERB_ANY, 0, verb_domain },
3011 { "default-route", VERB_ANY, 3, 0, verb_default_route },
3012 { "llmnr", VERB_ANY, 3, 0, verb_llmnr },
3013 { "mdns", VERB_ANY, 3, 0, verb_mdns },
3014 { "dnsovertls", VERB_ANY, 3, 0, verb_dns_over_tls },
3015 { "dnssec", VERB_ANY, 3, 0, verb_dnssec },
3016 { "nta", VERB_ANY, VERB_ANY, 0, verb_nta },
3017 { "revert", VERB_ANY, 2, 0, verb_revert_link },
3018 {}
3019 };
3020
3021 return dispatch_verb(argc, argv, verbs, bus);
3022 }
3023
3024 static int translate(const char *verb, const char *single_arg, size_t num_args, char **args, sd_bus *bus) {
3025 char **fake, **p;
3026 size_t num, i;
3027
3028 assert(verb);
3029 assert(num_args == 0 || args);
3030
3031 num = !!single_arg + num_args + 1;
3032
3033 p = fake = newa0(char *, num + 1);
3034 *p++ = (char *) verb;
3035 if (single_arg)
3036 *p++ = (char *) single_arg;
3037 for (i = 0; i < num_args; i++)
3038 *p++ = args[i];
3039
3040 optind = 0;
3041 return native_main((int) num, fake, bus);
3042 }
3043
3044 static int compat_main(int argc, char *argv[], sd_bus *bus) {
3045 int r = 0;
3046
3047 switch (arg_mode) {
3048 case MODE_RESOLVE_HOST:
3049 case MODE_RESOLVE_RECORD:
3050 return translate("query", NULL, argc - optind, argv + optind, bus);
3051
3052 case MODE_RESOLVE_SERVICE:
3053 return translate("service", NULL, argc - optind, argv + optind, bus);
3054
3055 case MODE_RESOLVE_OPENPGP:
3056 return translate("openpgp", NULL, argc - optind, argv + optind, bus);
3057
3058 case MODE_RESOLVE_TLSA:
3059 return translate("tlsa", arg_service_family, argc - optind, argv + optind, bus);
3060
3061 case MODE_STATISTICS:
3062 return translate("statistics", NULL, 0, NULL, bus);
3063
3064 case MODE_RESET_STATISTICS:
3065 return translate("reset-statistics", NULL, 0, NULL, bus);
3066
3067 case MODE_FLUSH_CACHES:
3068 return translate("flush-caches", NULL, 0, NULL, bus);
3069
3070 case MODE_RESET_SERVER_FEATURES:
3071 return translate("reset-server-features", NULL, 0, NULL, bus);
3072
3073 case MODE_STATUS:
3074 return translate("status", NULL, argc - optind, argv + optind, bus);
3075
3076 case MODE_SET_LINK:
3077 assert(arg_ifname);
3078
3079 if (arg_set_dns) {
3080 r = translate("dns", arg_ifname, strv_length(arg_set_dns), arg_set_dns, bus);
3081 if (r < 0)
3082 return r;
3083 }
3084
3085 if (arg_set_domain) {
3086 r = translate("domain", arg_ifname, strv_length(arg_set_domain), arg_set_domain, bus);
3087 if (r < 0)
3088 return r;
3089 }
3090
3091 if (arg_set_nta) {
3092 r = translate("nta", arg_ifname, strv_length(arg_set_nta), arg_set_nta, bus);
3093 if (r < 0)
3094 return r;
3095 }
3096
3097 if (arg_set_llmnr) {
3098 r = translate("llmnr", arg_ifname, 1, (char **) &arg_set_llmnr, bus);
3099 if (r < 0)
3100 return r;
3101 }
3102
3103 if (arg_set_mdns) {
3104 r = translate("mdns", arg_ifname, 1, (char **) &arg_set_mdns, bus);
3105 if (r < 0)
3106 return r;
3107 }
3108
3109 if (arg_set_dns_over_tls) {
3110 r = translate("dnsovertls", arg_ifname, 1, (char **) &arg_set_dns_over_tls, bus);
3111 if (r < 0)
3112 return r;
3113 }
3114
3115 if (arg_set_dnssec) {
3116 r = translate("dnssec", arg_ifname, 1, (char **) &arg_set_dnssec, bus);
3117 if (r < 0)
3118 return r;
3119 }
3120
3121 return r;
3122
3123 case MODE_REVERT_LINK:
3124 assert(arg_ifname);
3125
3126 return translate("revert", arg_ifname, 0, NULL, bus);
3127
3128 case _MODE_INVALID:
3129 assert_not_reached("invalid mode");
3130 }
3131
3132 return 0;
3133 }
3134
3135 static int run(int argc, char **argv) {
3136 _cleanup_(sd_bus_flush_close_unrefp) sd_bus *bus = NULL;
3137 int r;
3138
3139 setlocale(LC_ALL, "");
3140 log_show_color(true);
3141 log_parse_environment();
3142 log_open();
3143
3144 if (streq(program_invocation_short_name, "resolvconf"))
3145 r = resolvconf_parse_argv(argc, argv);
3146 else if (streq(program_invocation_short_name, "systemd-resolve"))
3147 r = compat_parse_argv(argc, argv);
3148 else
3149 r = native_parse_argv(argc, argv);
3150 if (r <= 0)
3151 return r;
3152
3153 r = sd_bus_open_system(&bus);
3154 if (r < 0)
3155 return log_error_errno(r, "sd_bus_open_system: %m");
3156
3157 if (STR_IN_SET(program_invocation_short_name, "systemd-resolve", "resolvconf"))
3158 return compat_main(argc, argv, bus);
3159
3160 return native_main(argc, argv, bus);
3161 }
3162
3163 DEFINE_MAIN_FUNCTION(run);
Unnamed repository; edit this file 'description' to name the repository.