/*-*- Mode: C; c-basic-offset: 8; indent-tabs-mode: nil -*-*/ /*** This file is part of systemd. Copyright 2013 Tom Gundersen systemd is free software; you can redistribute it and/or modify it under the terms of the GNU Lesser General Public License as published by the Free Software Foundation; either version 2.1 of the License, or (at your option) any later version. systemd is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public License for more details. You should have received a copy of the GNU Lesser General Public License along with systemd; If not, see . ***/ #include #include #include "conf-parser.h" #include "path-util.h" #include "networkd.h" #include "networkd-netdev.h" #include "networkd-link.h" #include "network-internal.h" #include "libudev-private.h" #include "udev-util.h" #include "rtnl-util.h" #include "mkdir.h" #include "virt.h" #include "sd-rtnl.h" #include "sd-daemon.h" /* use 8 MB for receive socket kernel queue. */ #define RCVBUF_SIZE (8*1024*1024) const char* const network_dirs[] = { "/etc/systemd/network", "/run/systemd/network", "/usr/lib/systemd/network", #ifdef HAVE_SPLIT_USR "/lib/systemd/network", #endif NULL}; static int setup_default_address_pool(Manager *m) { AddressPool *p; int r; assert(m); /* Add in the well-known private address ranges. */ r = address_pool_new_from_string(m, &p, AF_INET6, "fc00::", 7); if (r < 0) return r; r = address_pool_new_from_string(m, &p, AF_INET, "192.168.0.0", 16); if (r < 0) return r; r = address_pool_new_from_string(m, &p, AF_INET, "172.16.0.0", 12); if (r < 0) return r; r = address_pool_new_from_string(m, &p, AF_INET, "10.0.0.0", 8); if (r < 0) return r; return 0; } static int systemd_netlink_fd(void) { int n, fd, rtnl_fd = -EINVAL; n = sd_listen_fds(true); if (n <= 0) return -EINVAL; for (fd = SD_LISTEN_FDS_START; fd < SD_LISTEN_FDS_START + n; fd ++) { if (sd_is_socket(fd, AF_NETLINK, SOCK_RAW, -1) > 0) { if (rtnl_fd >= 0) return -EINVAL; rtnl_fd = fd; } } return rtnl_fd; } int manager_new(Manager **ret) { _cleanup_manager_free_ Manager *m = NULL; int r, fd; m = new0(Manager, 1); if (!m) return -ENOMEM; m->state_file = strdup("/run/systemd/netif/state"); if (!m->state_file) return -ENOMEM; r = sd_event_default(&m->event); if (r < 0) return r; sd_event_set_watchdog(m->event, true); sd_event_add_signal(m->event, NULL, SIGTERM, NULL, NULL); sd_event_add_signal(m->event, NULL, SIGINT, NULL, NULL); fd = systemd_netlink_fd(); if (fd < 0) r = sd_rtnl_open(&m->rtnl, 3, RTNLGRP_LINK, RTNLGRP_IPV4_IFADDR, RTNLGRP_IPV6_IFADDR); else r = sd_rtnl_new_from_netlink(&m->rtnl, fd); if (r < 0) return r; r = sd_rtnl_inc_rcvbuf(m->rtnl, RCVBUF_SIZE); if (r < 0) return r; r = sd_bus_default_system(&m->bus); if (r < 0 && r != -ENOENT) /* TODO: drop when we can rely on kdbus */ return r; /* udev does not initialize devices inside containers, * so we rely on them being already initialized before * entering the container */ if (detect_container(NULL) <= 0) { m->udev = udev_new(); if (!m->udev) return -ENOMEM; m->udev_monitor = udev_monitor_new_from_netlink(m->udev, "udev"); if (!m->udev_monitor) return -ENOMEM; } m->netdevs = hashmap_new(&string_hash_ops); if (!m->netdevs) return -ENOMEM; LIST_HEAD_INIT(m->networks); r = setup_default_address_pool(m); if (r < 0) return r; *ret = m; m = NULL; return 0; } void manager_free(Manager *m) { Network *network; NetDev *netdev; Link *link; AddressPool *pool; if (!m) return; free(m->state_file); udev_monitor_unref(m->udev_monitor); udev_unref(m->udev); sd_bus_unref(m->bus); sd_event_source_unref(m->udev_event_source); sd_event_unref(m->event); while ((link = hashmap_first(m->links))) link_unref(link); hashmap_free(m->links); while ((network = m->networks)) network_free(network); while ((netdev = hashmap_first(m->netdevs))) netdev_unref(netdev); hashmap_free(m->netdevs); while ((pool = m->address_pools)) address_pool_free(pool); sd_rtnl_unref(m->rtnl); free(m); } int manager_load_config(Manager *m) { int r; /* update timestamp */ paths_check_timestamp(network_dirs, &m->network_dirs_ts_usec, true); r = netdev_load(m); if (r < 0) return r; r = network_load(m); if (r < 0) return r; return 0; } bool manager_should_reload(Manager *m) { return paths_check_timestamp(network_dirs, &m->network_dirs_ts_usec, false); } static int manager_udev_process_link(Manager *m, struct udev_device *device) { Link *link = NULL; int r, ifindex; assert(m); assert(device); if (!streq_ptr(udev_device_get_action(device), "add")) return 0; ifindex = udev_device_get_ifindex(device); if (ifindex <= 0) { log_debug("ignoring udev ADD event for device with invalid ifindex"); return 0; } r = link_get(m, ifindex, &link); if (r == -ENODEV) return 0; else if (r < 0) return r; r = link_initialized(link, device); if (r < 0) return r; return 0; } static int manager_rtnl_process_link(sd_rtnl *rtnl, sd_rtnl_message *message, void *userdata) { Manager *m = userdata; Link *link = NULL; NetDev *netdev = NULL; uint16_t type; const char *name; int r, ifindex; assert(rtnl); assert(message); assert(m); if (sd_rtnl_message_is_error(message)) { r = sd_rtnl_message_get_errno(message); if (r < 0) log_warning_errno(r, "rtnl: could not receive link: %m"); return 0; } r = sd_rtnl_message_get_type(message, &type); if (r < 0) { log_warning_errno(r, "rtnl: could not get message type: %m"); return 0; } r = sd_rtnl_message_link_get_ifindex(message, &ifindex); if (r < 0) { log_warning_errno(r, "rtnl: could not get ifindex: %m"); return 0; } else if (ifindex <= 0) { log_warning("rtnl: received link message with invalid ifindex: %d", ifindex); return 0; } else link_get(m, ifindex, &link); r = sd_rtnl_message_read_string(message, IFLA_IFNAME, &name); if (r < 0) { log_warning_errno(r, "rtnl: received link message without ifname: %m"); return 0; } else netdev_get(m, name, &netdev); switch (type) { case RTM_NEWLINK: if (!link) { /* link is new, so add it */ r = link_add(m, message, &link); if (r < 0) { log_warning_errno(r, "could not add new link: %m"); return 0; } } if (netdev) { /* netdev exists, so make sure the ifindex matches */ r = netdev_set_ifindex(netdev, message); if (r < 0) { log_warning_errno(r, "could not set ifindex on netdev: %m"); return 0; } } r = link_update(link, message); if (r < 0) return 0; break; case RTM_DELLINK: link_drop(link); netdev_drop(netdev); break; default: assert_not_reached("Received invalid RTNL message type."); } return 1; } int manager_rtnl_enumerate_links(Manager *m) { _cleanup_rtnl_message_unref_ sd_rtnl_message *req = NULL, *reply = NULL; sd_rtnl_message *link; int r; assert(m); assert(m->rtnl); r = sd_rtnl_message_new_link(m->rtnl, &req, RTM_GETLINK, 0); if (r < 0) return r; r = sd_rtnl_message_request_dump(req, true); if (r < 0) return r; r = sd_rtnl_call(m->rtnl, req, 0, &reply); if (r < 0) return r; for (link = reply; link; link = sd_rtnl_message_next(link)) { int k; k = manager_rtnl_process_link(m->rtnl, link, m); if (k < 0) r = k; } return r; } int manager_rtnl_enumerate_addresses(Manager *m) { _cleanup_rtnl_message_unref_ sd_rtnl_message *req = NULL, *reply = NULL; sd_rtnl_message *addr; int r; assert(m); assert(m->rtnl); r = sd_rtnl_message_new_addr(m->rtnl, &req, RTM_GETADDR, 0, 0); if (r < 0) return r; r = sd_rtnl_message_request_dump(req, true); if (r < 0) return r; r = sd_rtnl_call(m->rtnl, req, 0, &reply); if (r < 0) return r; for (addr = reply; addr; addr = sd_rtnl_message_next(addr)) { int k; k = link_rtnl_process_address(m->rtnl, addr, m); if (k < 0) r = k; } return r; } static int manager_dispatch_link_udev(sd_event_source *source, int fd, uint32_t revents, void *userdata) { Manager *m = userdata; struct udev_monitor *monitor = m->udev_monitor; _cleanup_udev_device_unref_ struct udev_device *device = NULL; device = udev_monitor_receive_device(monitor); if (!device) return -ENOMEM; manager_udev_process_link(m, device); return 0; } int manager_udev_listen(Manager *m) { int r; if (detect_container(NULL) > 0) return 0; assert(m->udev_monitor); r = udev_monitor_filter_add_match_subsystem_devtype(m->udev_monitor, "net", NULL); if (r < 0) return log_error_errno(r, "Could not add udev monitor filter: %m"); r = udev_monitor_enable_receiving(m->udev_monitor); if (r < 0) { log_error("Could not enable udev monitor"); return r; } r = sd_event_add_io(m->event, &m->udev_event_source, udev_monitor_get_fd(m->udev_monitor), EPOLLIN, manager_dispatch_link_udev, m); if (r < 0) return r; r = sd_event_source_set_description(m->udev_event_source, "networkd-udev"); if (r < 0) return r; return 0; } int manager_rtnl_listen(Manager *m) { int r; assert(m); r = sd_rtnl_attach_event(m->rtnl, m->event, 0); if (r < 0) return r; r = sd_rtnl_add_match(m->rtnl, RTM_NEWLINK, &manager_rtnl_process_link, m); if (r < 0) return r; r = sd_rtnl_add_match(m->rtnl, RTM_DELLINK, &manager_rtnl_process_link, m); if (r < 0) return r; r = sd_rtnl_add_match(m->rtnl, RTM_NEWADDR, &link_rtnl_process_address, m); if (r < 0) return r; r = sd_rtnl_add_match(m->rtnl, RTM_DELADDR, &link_rtnl_process_address, m); if (r < 0) return r; return 0; } int manager_bus_listen(Manager *m) { int r; assert(m->event); if (!m->bus) /* TODO: drop when we can rely on kdbus */ return 0; r = sd_bus_attach_event(m->bus, m->event, 0); if (r < 0) return r; return 0; } static int set_put_in_addr(Set *s, const struct in_addr *address) { char *p; int r; assert(s); r = in_addr_to_string(AF_INET, (const union in_addr_union*) address, &p); if (r < 0) return r; r = set_consume(s, p); if (r == -EEXIST) return 0; return r; } static int set_put_in_addrv(Set *s, const struct in_addr *addresses, int n) { int r, i, c = 0; assert(s); assert(n <= 0 || addresses); for (i = 0; i < n; i++) { r = set_put_in_addr(s, addresses+i); if (r < 0) return r; c += r; } return c; } static void print_string_set(FILE *f, const char *field, Set *s) { bool space = false; Iterator i; char *p; if (set_isempty(s)) return; fputs(field, f); SET_FOREACH(p, s, i) { if (space) fputc(' ', f); fputs(p, f); space = true; } fputc('\n', f); } int manager_save(Manager *m) { _cleanup_set_free_free_ Set *dns = NULL, *ntp = NULL, *domains = NULL; Link *link; Iterator i; _cleanup_free_ char *temp_path = NULL; _cleanup_fclose_ FILE *f = NULL; LinkOperationalState operstate = LINK_OPERSTATE_OFF; const char *operstate_str; int r; assert(m); assert(m->state_file); /* We add all NTP and DNS server to a set, to filter out duplicates */ dns = set_new(&string_hash_ops); if (!dns) return -ENOMEM; ntp = set_new(&string_hash_ops); if (!ntp) return -ENOMEM; domains = set_new(&string_hash_ops); if (!domains) return -ENOMEM; HASHMAP_FOREACH(link, m->links, i) { if (link->flags & IFF_LOOPBACK) continue; if (link->operstate > operstate) operstate = link->operstate; if (!link->network) continue; /* First add the static configured entries */ r = set_put_strdupv(dns, link->network->dns); if (r < 0) return r; r = set_put_strdupv(ntp, link->network->ntp); if (r < 0) return r; r = set_put_strdupv(domains, link->network->domains); if (r < 0) return r; if (!link->dhcp_lease) continue; /* Secondly, add the entries acquired via DHCP */ if (link->network->dhcp_dns) { const struct in_addr *addresses; r = sd_dhcp_lease_get_dns(link->dhcp_lease, &addresses); if (r > 0) { r = set_put_in_addrv(dns, addresses, r); if (r < 0) return r; } else if (r < 0 && r != -ENOENT) return r; } if (link->network->dhcp_ntp) { const struct in_addr *addresses; r = sd_dhcp_lease_get_ntp(link->dhcp_lease, &addresses); if (r > 0) { r = set_put_in_addrv(ntp, addresses, r); if (r < 0) return r; } else if (r < 0 && r != -ENOENT) return r; } if (link->network->dhcp_domains) { const char *domainname; r = sd_dhcp_lease_get_domainname(link->dhcp_lease, &domainname); if (r >= 0) { r = set_put_strdup(domains, domainname); if (r < 0) return r; } else if (r != -ENOENT) return r; } } operstate_str = link_operstate_to_string(operstate); assert(operstate_str); r = fopen_temporary(m->state_file, &f, &temp_path); if (r < 0) return r; fchmod(fileno(f), 0644); fprintf(f, "# This is private data. Do not parse.\n" "OPER_STATE=%s\n", operstate_str); print_string_set(f, "DNS=", dns); print_string_set(f, "NTP=", ntp); print_string_set(f, "DOMAINS=", domains); r = fflush_and_check(f); if (r < 0) goto fail; if (rename(temp_path, m->state_file) < 0) { r = -errno; goto fail; } return 0; fail: log_error_errno(r, "Failed to save network state to %s: %m", m->state_file); unlink(m->state_file); unlink(temp_path); return r; } int manager_address_pool_acquire(Manager *m, int family, unsigned prefixlen, union in_addr_union *found) { AddressPool *p; int r; assert(m); assert(prefixlen > 0); assert(found); LIST_FOREACH(address_pools, p, m->address_pools) { if (p->family != family) continue; r = address_pool_acquire(p, prefixlen, found); if (r != 0) return r; } return 0; } const char *address_family_boolean_to_string(AddressFamilyBoolean b) { if (b == ADDRESS_FAMILY_YES || b == ADDRESS_FAMILY_NO) return yes_no(b == ADDRESS_FAMILY_YES); if (b == ADDRESS_FAMILY_IPV4) return "ipv4"; if (b == ADDRESS_FAMILY_IPV6) return "ipv6"; return NULL; } AddressFamilyBoolean address_family_boolean_from_string(const char *s) { int r; /* Make this a true superset of a boolean */ r = parse_boolean(s); if (r > 0) return ADDRESS_FAMILY_YES; if (r == 0) return ADDRESS_FAMILY_NO; if (streq(s, "ipv4")) return ADDRESS_FAMILY_IPV4; if (streq(s, "ipv6")) return ADDRESS_FAMILY_IPV6; return _ADDRESS_FAMILY_BOOLEAN_INVALID; } DEFINE_CONFIG_PARSE_ENUM(config_parse_address_family_boolean, address_family_boolean, AddressFamilyBoolean, "Failed to parse option");