123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979 |
- #include <iostream>
- #include <fstream>
- #include <list>
- #include <cstring>
- #include <csignal>
- #include <cstddef>
- #include <cstdlib>
- #include <sys/types.h>
- #include <sys/stat.h>
- #include <sys/un.h>
- #include <sys/socket.h>
- #include <unistd.h>
- #include <fcntl.h>
- #include <pwd.h>
- #include <termios.h>
- #ifdef __linux__
- #include <sys/prctl.h>
- #include <sys/klog.h>
- #include <sys/reboot.h>
- #endif
- #if defined(__FreeBSD__) || defined(__DragonFly__)
- #include <sys/procctl.h>
- #endif
- #include <dasynq.h>
- #include "dinit.h"
- #include "service.h"
- #include "control.h"
- #include "dinit-log.h"
- #include "dinit-socket.h"
- #include "static-string.h"
- #include "dinit-utmp.h"
- #include "options-processing.h"
- #include "mconfig.h"
- /*
- * When running as the system init process, Dinit processes the following signals:
- *
- * SIGTERM - roll back services and then fork/exec /sbin/halt
- * SIGINT - roll back services and then fork/exec /sbin/reboot
- * SIGQUIT - exec() /sbin/shutdown without rolling back services
- *
- * It's an open question about whether Dinit should roll back services *before*
- * running halt/reboot, since those commands should prompt rollback of services
- * anyway. But it seems safe to do so, and it means the user can at least stop
- * services even if the halt/reboot commands are unavailable for some reason.
- */
- using namespace cts;
- using eventloop_t = dasynq::event_loop<dasynq::null_mutex>;
- eventloop_t event_loop(dasynq::delayed_init {});
- static void sigint_reboot_cb(eventloop_t &eloop) noexcept;
- static void sigquit_cb(eventloop_t &eloop) noexcept;
- static void sigterm_cb(eventloop_t &eloop) noexcept;
- static bool open_control_socket(bool report_ro_failure = true) noexcept;
- static void close_control_socket() noexcept;
- static void confirm_restart_boot() noexcept;
- static void flush_log() noexcept;
- static void control_socket_cb(eventloop_t *loop, int fd);
- // Variables
- static dirload_service_set *services;
- static bool am_system_mgr = false; // true if we are PID 1
- static bool am_system_init = false; // true if we are the system init process
- static bool did_log_boot = false;
- static bool control_socket_open = false;
- bool external_log_open = false;
- int active_control_conns = 0;
- // Control socket path. We maintain a string (control_socket_str) in case we need
- // to allocate storage, but control_socket_path is the authoritative value.
- static const char *control_socket_path = SYSCONTROLSOCKET;
- static std::string control_socket_str;
- static const char *env_file_path = "/etc/dinit/environment";
- static const char *log_path = "/dev/log";
- static bool log_is_syslog = true; // if false, log is a file
- // Set to true (when console_input_watcher is active) if console input becomes available
- static bool console_input_ready = false;
- namespace {
- // Event-loop handler for a signal, which just delegates to a function (pointer).
- class callback_signal_handler : public eventloop_t::signal_watcher_impl<callback_signal_handler>
- {
- using rearm = dasynq::rearm;
- public:
- typedef void (*cb_func_t)(eventloop_t &);
-
- private:
- cb_func_t cb_func;
-
- public:
- callback_signal_handler() : cb_func(nullptr) { }
- callback_signal_handler(cb_func_t pcb_func) : cb_func(pcb_func) { }
-
- void set_cb_func(cb_func_t cb_func)
- {
- this->cb_func = cb_func;
- }
-
- rearm received(eventloop_t &eloop, int signo, siginfo_p siginfo)
- {
- cb_func(eloop);
- return rearm::REARM;
- }
- };
- // Event-loop handler for when a connection is made to the control socket.
- class control_socket_watcher : public eventloop_t::fd_watcher_impl<control_socket_watcher>
- {
- using rearm = dasynq::rearm;
- public:
- rearm fd_event(eventloop_t &loop, int fd, int flags) noexcept
- {
- control_socket_cb(&loop, fd);
- return rearm::REARM;
- }
- };
- // Watch for console input and set a flag when it is available.
- class console_input_watcher : public eventloop_t::fd_watcher_impl<console_input_watcher>
- {
- using rearm = dasynq::rearm;
- public:
- rearm fd_event(eventloop_t &loop, int fd, int flags) noexcept
- {
- console_input_ready = true;
- return rearm::DISARM;
- }
- };
- // Simple timer used to limit the amount of time waiting for the log flush to complete (at shutdown)
- class log_flush_timer_t : public eventloop_t::timer_impl<log_flush_timer_t>
- {
- using rearm = dasynq::rearm;
- bool expired;
- public:
- rearm timer_expiry(eventloop_t &, int expiry_count)
- {
- expired = true;
- return rearm::DISARM;
- }
- bool has_expired()
- {
- return expired;
- }
- void reset()
- {
- expired = false;
- }
- };
- control_socket_watcher control_socket_io;
- console_input_watcher console_input_io;
- log_flush_timer_t log_flush_timer;
- // These need to be at namespace scope to prevent causing stack allocations when using them:
- constexpr auto shutdown_exec = literal(SBINDIR) + "/" + SHUTDOWN_PREFIX + "shutdown";
- constexpr auto error_exec_sd = literal("Error executing ") + shutdown_exec + ": ";
- }
- // Options handled in dinit_main
- struct options {
- const char * env_file = nullptr;
- bool control_socket_path_set = false;
- bool env_file_set = false;
- bool log_specified = false;
- bool process_sys_args = false;
- service_dir_opt service_dir_opts;
- // list of services to start
- std::list<const char *> services_to_start;
- };
- // Process a command line argument (and possibly its follow-up value)
- // Returns -1 for clean exit required, 0 for success, 1 for error exit required
- static int process_commandline_arg(char **argv, int argc, int &i, options &opts)
- {
- using std::cerr;
- using std::cout;
- using std::endl;
- using std::list;
- const char * &env_file = opts.env_file;
- bool &control_socket_path_set = opts.control_socket_path_set;
- bool &env_file_set = opts.env_file_set;
- bool &log_specified = opts.log_specified;
- service_dir_opt &service_dir_opts = opts.service_dir_opts;
- list<const char *> &services_to_start = opts.services_to_start;
- if (argv[i][0] == '-') {
- // An option...
- if (strcmp(argv[i], "--env-file") == 0 || strcmp(argv[i], "-e") == 0) {
- if (++i < argc) {
- env_file_set = true;
- env_file = argv[i];
- }
- else {
- cerr << "dinit: '--env-file' (-e) requires an argument" << endl;
- }
- }
- else if (strcmp(argv[i], "--services-dir") == 0 || strcmp(argv[i], "-d") == 0) {
- if (++i < argc) {
- service_dir_opts.set_specified_service_dir(argv[i]);
- }
- else {
- cerr << "dinit: '--services-dir' (-d) requires an argument" << endl;
- return 1;
- }
- }
- else if (strcmp(argv[i], "--system") == 0 || strcmp(argv[i], "-s") == 0) {
- am_system_init = true;
- }
- else if (strcmp(argv[i], "--system-mgr") == 0 || strcmp(argv[i], "-m") == 0) {
- am_system_mgr = true;
- opts.process_sys_args = false;
- }
- else if (strcmp(argv[i], "--user") == 0 || strcmp(argv[i], "-u") == 0) {
- am_system_init = false;
- }
- else if (strcmp(argv[i], "--container") == 0 || strcmp(argv[i], "-o") == 0) {
- am_system_mgr = false;
- opts.process_sys_args = false;
- }
- else if (strcmp(argv[i], "--socket-path") == 0 || strcmp(argv[i], "-p") == 0) {
- if (++i < argc) {
- control_socket_path = argv[i];
- control_socket_path_set = true;
- }
- else {
- cerr << "dinit: '--socket-path' (-p) requires an argument" << endl;
- return 1;
- }
- }
- else if (strcmp(argv[i], "--log-file") == 0 || strcmp(argv[i], "-l") == 0) {
- if (++i < argc) {
- log_path = argv[i];
- log_is_syslog = false;
- log_specified = true;
- }
- else {
- cerr << "dinit: '--log-file' (-l) requires an argument" << endl;
- return 1;
- }
- }
- else if (strcmp(argv[i], "--quiet") == 0 || strcmp(argv[i], "-q") == 0) {
- console_service_status = false;
- log_level[DLOG_CONS] = loglevel_t::ZERO;
- }
- else if (strcmp(argv[i], "--version") == 0) {
- cout << "Dinit version " << DINIT_VERSION << '.' << endl;
- return -1;
- }
- else if (strcmp(argv[i], "--help") == 0) {
- cout << "dinit: init/service manager daemon\n"
- " --help display (this) help\n"
- " --version display version\n"
- " --env-file <file>, -e <file>\n"
- " environment variable initialisation file\n"
- " --services-dir <dir>, -d <dir>\n"
- " set base directory for service description\n"
- " files, can be specified multiple times\n"
- " --system, -s run as the system service manager\n"
- " --system-mgr, -m run as system manager (perform shutdown etc)\n"
- " --user, -u run as a user service manager\n"
- " --container, -o run in container mode (do not manage system)\n"
- " --socket-path <path>, -p <path>\n"
- " path to control socket\n"
- " --log-file <file>, -l <file> log to the specified file\n"
- " --quiet, -q disable output to standard output\n"
- " <service-name> [...] start service with name <service-name>\n";
- return -1;
- }
- else {
- // unrecognized
- if (!opts.process_sys_args) {
- cerr << "dinit: unrecognized option: " << argv[i] << endl;
- return 1;
- }
- }
- }
- else {
- #ifdef __linux__
- // If we are running as init (PID=1), the Linux kernel gives us all command line arguments it was
- // given but didn't recognize, and, uh, *some* that it did recognize, which means we can't assume
- // that anything is a service name (for example "nopti" seems to get passed through to init).
- // However, we can look for special names that we know aren't kernel parameters, such as "single".
- //
- // LILO puts "auto" on the command line for unattended boots, but we don't care about that and want
- // it filtered.
- //
- // We don't expect to see options beginning with '-' appear on the kernel command line either, so we
- // can interpret those as dinit arguments. In particular if we see -m or -o, we assume that every
- // name we see from then is a service name (i.e. process_sys_args is set false when we seem them,
- // see above).
- //
- // (Note, you can give "--" on the kernel command line to pass every option from that point to init
- // directly, but init doesn't see the "--" itself, which makes it less useful, since we still can't
- // tell whether a "name" was intended as a kernel parameter or init parameter).
- // So, long story short: if we think we're PID 1 and we haven't seen -m or -c options yet, only
- // recognise "single" as a service name and ignore everything else.
- if (!opts.process_sys_args || strcmp(argv[i], "single") == 0) {
- services_to_start.push_back(argv[i]);
- }
- #else
- services_to_start.push_back(argv[i]);
- #endif
- }
- return 0;
- }
- // Main entry point
- int dinit_main(int argc, char **argv)
- {
- using namespace std;
-
- am_system_mgr = (getpid() == 1);
- am_system_init = (getuid() == 0);
-
- struct options opts;
- // if we are PID 1 and user id 0, we are *most probably* the system init. (Or on linux at least, we
- // could instead be in a container; then we expect -o argument and unset this then).
- opts.process_sys_args = am_system_mgr && am_system_init;
- const char * &env_file = opts.env_file;
- bool &control_socket_path_set = opts.control_socket_path_set;
- bool &env_file_set = opts.env_file_set;
- bool &log_specified = opts.log_specified;
- service_dir_opt &service_dir_opts = opts.service_dir_opts;
- list<const char *> &services_to_start = opts.services_to_start;
- for (int i = 1; i < argc; i++) {
- int p = process_commandline_arg(argv, argc, i, opts);
- if (p == -1) {
- // clean exit
- return 0;
- }
- if (p == 1) {
- // error exit
- return 1;
- }
- }
- if (am_system_mgr) {
- // setup STDIN, STDOUT, STDERR so that we can use them
- int onefd = open("/dev/console", O_RDONLY, 0);
- if (onefd != -1) {
- dup2(onefd, 0);
- }
- int twofd = open("/dev/console", O_RDWR, 0);
- if (twofd != -1) {
- dup2(twofd, 1);
- dup2(twofd, 2);
- }
-
- if (onefd > 2) close(onefd);
- if (twofd > 2) close(twofd);
- if (! env_file_set) {
- env_file = env_file_path;
- }
- }
- /* Set up signal handlers etc */
- /* SIG_CHILD is ignored by default: good */
- sigset_t sigwait_set;
- sigemptyset(&sigwait_set);
- sigaddset(&sigwait_set, SIGCHLD);
- sigaddset(&sigwait_set, SIGINT);
- sigaddset(&sigwait_set, SIGTERM);
- if (am_system_mgr) sigaddset(&sigwait_set, SIGQUIT);
- sigprocmask(SIG_BLOCK, &sigwait_set, NULL);
- // Terminal access control signals - we ignore these so that dinit can't be
- // suspended if it writes to the terminal after some other process has claimed
- // ownership of it.
- signal(SIGTSTP, SIG_IGN);
- signal(SIGTTIN, SIG_IGN);
- signal(SIGTTOU, SIG_IGN);
-
- signal(SIGPIPE, SIG_IGN);
-
- event_loop.init();
- if (!am_system_init && !control_socket_path_set) {
- const char * rundir = getenv("XDG_RUNTIME_DIR");
- const char * sockname = "dinitctl";
- if (rundir == nullptr) {
- rundir = service_dir_opt::get_user_home();
- sockname = ".dinitctl";
- }
- if (rundir != nullptr) {
- control_socket_str = rundir;
- control_socket_str.push_back('/');
- control_socket_str += sockname;
- control_socket_path = control_socket_str.c_str();
- }
- }
-
- if (services_to_start.empty()) {
- services_to_start.push_back("boot");
- }
- // Set up signal handlers
- callback_signal_handler sigterm_watcher {sigterm_cb};
- callback_signal_handler sigint_watcher;
- callback_signal_handler sigquit_watcher;
- if (am_system_mgr) {
- sigint_watcher.set_cb_func(sigint_reboot_cb);
- sigquit_watcher.set_cb_func(sigquit_cb);
- }
- else {
- sigint_watcher.set_cb_func(sigterm_cb);
- }
- sigint_watcher.add_watch(event_loop, SIGINT);
- sigterm_watcher.add_watch(event_loop, SIGTERM);
-
- if (am_system_mgr) {
- // PID 1: we may ask for console input; SIGQUIT exec's shutdown
- console_input_io.add_watch(event_loop, STDIN_FILENO, dasynq::IN_EVENTS, false);
- sigquit_watcher.add_watch(event_loop, SIGQUIT);
- // (If not PID 1, we instead just let SIGQUIT perform the default action.)
- }
- init_log(log_is_syslog);
- log_flush_timer.add_timer(event_loop, dasynq::clock_type::MONOTONIC);
- // Try to open control socket (may fail due to readonly filesystem, we ignore that if we are
- // system init)
- if (!open_control_socket(!am_system_init)) {
- flush_log();
- return EXIT_FAILURE;
- }
-
- #ifdef __linux__
- if (am_system_mgr) {
- // Disable non-critical kernel output to console
- klogctl(6 /* SYSLOG_ACTION_CONSOLE_OFF */, nullptr, 0);
- // Make ctrl+alt+del combination send SIGINT to PID 1 (this process)
- reboot(RB_DISABLE_CAD);
- }
- // Mark ourselves as a subreaper. This means that if a process we start double-forks, the
- // orphaned child will re-parent to us rather than to PID 1 (although that could be us too).
- prctl(PR_SET_CHILD_SUBREAPER, 1);
- #elif defined(__FreeBSD__) || defined(__DragonFly__)
- // Documentation (man page) for this kind-of sucks. PROC_REAP_ACQUIRE "acquires the reaper status for
- // the current process" but does that mean the first two arguments still need valid values to be
- // supplied? We'll play it safe and explicitly target our own process:
- procctl(P_PID, getpid(), PROC_REAP_ACQUIRE, NULL);
- #endif
-
- service_dir_opts.build_paths(am_system_init);
- // Start requested services
- services = new dirload_service_set(std::move(service_dir_opts.get_paths()));
- setup_log_console_handoff(services);
- if (am_system_init) {
- log(loglevel_t::NOTICE, false, "Starting system");
- }
-
- // Only try to set up the external log now if we aren't the system init. (If we are the
- // system init, wait until the log service starts).
- if (!am_system_init && log_specified) setup_external_log();
- if (env_file != nullptr) {
- read_env_file(env_file);
- }
- for (auto svc : services_to_start) {
- try {
- services->start_service(svc);
- // Note in general if we fail to start a service we don't need any special error handling,
- // since we either leave other services running or, if it was the only service, then no
- // services will be running and we will process normally (reboot if system process,
- // exit if user process).
- }
- catch (service_not_found &snf) {
- log(loglevel_t::ERROR, snf.service_name, ": could not find service description.");
- }
- catch (service_load_exc &sle) {
- log(loglevel_t::ERROR, sle.service_name, ": ", sle.exc_description);
- }
- catch (std::bad_alloc &badalloce) {
- log(loglevel_t::ERROR, "Out of memory when trying to start service: ", svc, ".");
- break;
- }
- }
-
- run_event_loop:
-
- // Process events until all services have terminated.
- while (services->count_active_services() != 0) {
- event_loop.run();
- }
- shutdown_type_t shutdown_type = services->get_shutdown_type();
- if (shutdown_type == shutdown_type_t::REMAIN) {
- goto run_event_loop;
- }
-
- if (am_system_mgr) {
- log_msg_begin(loglevel_t::NOTICE, "No more active services.");
-
- if (shutdown_type == shutdown_type_t::REBOOT) {
- log_msg_end(" Will reboot.");
- }
- else if (shutdown_type == shutdown_type_t::HALT) {
- log_msg_end(" Will halt.");
- }
- else if (shutdown_type == shutdown_type_t::POWEROFF) {
- log_msg_end(" Will power down.");
- }
- }
- flush_log();
- close_control_socket();
-
- if (am_system_mgr) {
- if (shutdown_type == shutdown_type_t::NONE) {
- // Services all stopped but there was no shutdown issued. Inform user, wait for ack, and
- // re-start boot sequence.
- sync(); // Sync to minimise data loss if user elects to power off / hard reset
- confirm_restart_boot();
- if (services->count_active_services() != 0) {
- // Recovery service started
- goto run_event_loop;
- }
- shutdown_type = services->get_shutdown_type();
- if (shutdown_type == shutdown_type_t::NONE) {
- try {
- services->start_service("boot");
- goto run_event_loop; // yes, the "evil" goto
- }
- catch (...) {
- // Now what do we do? try to reboot, but wait for user ack to avoid boot loop.
- log(loglevel_t::ERROR, "Could not start 'boot' service. Will attempt reboot.");
- shutdown_type = shutdown_type_t::REBOOT;
- }
- }
- }
-
- const char * cmd_arg;
- if (shutdown_type == shutdown_type_t::HALT) {
- cmd_arg = "-h";
- }
- else if (shutdown_type == shutdown_type_t::REBOOT) {
- cmd_arg = "-r";
- }
- else {
- // power off.
- cmd_arg = "-p";
- }
-
- // Fork and execute dinit-reboot.
- execl(shutdown_exec.c_str(), shutdown_exec.c_str(), "--system", cmd_arg, nullptr);
- log(loglevel_t::ERROR, error_exec_sd, strerror(errno));
-
- // PID 1 must not actually exit, although we should never reach this point:
- while (true) {
- event_loop.run();
- }
- }
- else if (shutdown_type == shutdown_type_t::REBOOT) {
- // Non-system-process. If we got SIGINT, let's die due to it:
- sigset_t sigwait_set_int;
- sigemptyset(&sigwait_set_int);
- sigaddset(&sigwait_set_int, SIGINT);
- raise(SIGINT);
- sigprocmask(SIG_UNBLOCK, &sigwait_set_int, NULL);
- }
-
- return 0;
- }
- // Log a parse error when reading the environment file.
- static void log_bad_env(int linenum)
- {
- log(loglevel_t::ERROR, "Invalid environment variable setting in environment file (line ", linenum, ")");
- }
- // Read and set environment variables from a file. May throw std::bad_alloc, std::system_error.
- void read_env_file(const char *env_file_path)
- {
- // Note that we can't use the log in this function; it hasn't been initialised yet.
- std::ifstream env_file(env_file_path);
- if (! env_file) return;
- env_file.exceptions(std::ios::badbit);
- auto &clocale = std::locale::classic();
- std::string line;
- int linenum = 0;
- while (std::getline(env_file, line)) {
- linenum++;
- auto lpos = line.begin();
- auto lend = line.end();
- while (lpos != lend && std::isspace(*lpos, clocale)) {
- ++lpos;
- }
- if (lpos != lend) {
- if (*lpos != '#') {
- if (*lpos == '=') {
- log_bad_env(linenum);
- continue;
- }
- auto name_begin = lpos++;
- // skip until '=' or whitespace:
- while (lpos != lend && *lpos != '=' && ! std::isspace(*lpos, clocale)) ++lpos;
- auto name_end = lpos;
- // skip whitespace:
- while (lpos != lend && std::isspace(*lpos, clocale)) ++lpos;
- if (lpos == lend) {
- log_bad_env(linenum);
- continue;
- }
- ++lpos;
- auto val_begin = lpos;
- while (lpos != lend && *lpos != '\n') ++lpos;
- auto val_end = lpos;
- std::string name = line.substr(name_begin - line.begin(), name_end - name_begin);
- std::string value = line.substr(val_begin - line.begin(), val_end - val_begin);
- if (setenv(name.c_str(), value.c_str(), true) == -1) {
- throw std::system_error(errno, std::system_category());
- }
- }
- }
- }
- }
- // Get user confirmation before proceeding with restarting boot sequence.
- // Returns after confirmation, possibly with shutdown type altered.
- static void confirm_restart_boot() noexcept
- {
- // Bypass log; we want to make certain the message is seen:
- std::cout << "All services have stopped with no shutdown issued; boot failure?\n";
- // Drain input, set non-canonical input mode (receive characters as they are typed)
- struct termios term_attr;
- if (tcgetattr(STDIN_FILENO, &term_attr) != 0) {
- // Not a terminal?
- std::cout << "Halting." << std::endl;
- services->stop_all_services(shutdown_type_t::HALT);
- return;
- }
- term_attr.c_lflag &= ~ICANON;
- tcsetattr(STDIN_FILENO, TCSAFLUSH, &term_attr);
- // Set non-blocking mode
- int origFlags = fcntl(STDIN_FILENO, F_GETFL);
- fcntl(STDIN_FILENO, F_SETFL, origFlags | O_NONBLOCK);
- do_prompt:
- std::cout << "Choose: (r)eboot, r(e)covery, re(s)tart boot sequence, (p)ower off? " << std::flush;
- console_input_io.set_enabled(event_loop, true);
- do {
- event_loop.run();
- } while (! console_input_ready && services->get_shutdown_type() == shutdown_type_t::NONE);
- console_input_io.set_enabled(event_loop, false);
- // We either have input, or shutdown type has been set, or both.
- if (console_input_ready) {
- console_input_ready = false;
- char buf[1];
- int r = read(STDIN_FILENO, buf, 1); // read a single character, to make sure we wait for input
- if (r == 1) {
- std::cout << "\n"; // force new line after input
- if (buf[0] == 'r' || buf[0] == 'R') {
- services->stop_all_services(shutdown_type_t::REBOOT);
- }
- else if (buf[0] == 'e' || buf[0] == 'E') {
- try {
- services->start_service("recovery");
- }
- catch (...) {
- std::cout << "Unable to start recovery service.\n";
- goto do_prompt;
- }
- }
- else if (buf[0] == 's' || buf[0] == 'S') {
- // nothing - leave no shutdown type
- }
- else if (buf[0] == 'p' || buf[0] == 'P') {
- services->stop_all_services(shutdown_type_t::POWEROFF);
- }
- else {
- goto do_prompt;
- }
- }
- tcflush(STDIN_FILENO, TCIFLUSH); // discard the rest of input
- }
- term_attr.c_lflag |= ICANON;
- tcsetattr(STDIN_FILENO, TCSANOW, &term_attr);
- fcntl(STDIN_FILENO, F_SETFL, origFlags);
- }
- // Callback for control socket
- static void control_socket_cb(eventloop_t *loop, int sockfd)
- {
- // Considered keeping a limit the number of active connections, however, there doesn't
- // seem much to be gained from that. Only root can create connections and not being
- // able to establish a control connection is as much a denial-of-service as is not being
- // able to start a service due to lack of fd's.
- // Accept a connection
- int newfd = dinit_accept4(sockfd, nullptr, nullptr, SOCK_NONBLOCK | SOCK_CLOEXEC);
- if (newfd != -1) {
- try {
- new control_conn_t(*loop, services, newfd); // will delete itself when it's finished
- }
- catch (std::exception &exc) {
- log(loglevel_t::ERROR, "Error accepting control connection: ", exc.what());
- close(newfd);
- }
- }
- }
- // Callback when the root filesystem is read/write:
- void rootfs_is_rw() noexcept
- {
- open_control_socket(true);
- if (! did_log_boot) {
- did_log_boot = log_boot();
- }
- }
- // Open/create the control socket, normally /dev/dinitctl, used to allow client programs to connect
- // and issue service orders and shutdown commands etc. This can safely be called multiple times;
- // once the socket has been successfully opened, further calls will check the socket file is still
- // present and re-create it if not.
- static bool open_control_socket(bool report_ro_failure) noexcept
- {
- if (control_socket_open) {
- struct stat stat_buf;
- if (stat(control_socket_path, &stat_buf) != 0 && errno == ENOENT) {
- // Looks like our control socket has disappeared from the filesystem. Close our control
- // socket and re-create it:
- control_socket_io.deregister(event_loop);
- close(control_socket_io.get_watched_fd());
- control_socket_open = false; // now re-open below
- }
- }
- if (! control_socket_open) {
- const char * saddrname = control_socket_path;
- size_t saddrname_len = strlen(saddrname);
- uint sockaddr_size = offsetof(struct sockaddr_un, sun_path) + saddrname_len + 1;
-
- struct sockaddr_un * name = static_cast<sockaddr_un *>(malloc(sockaddr_size));
- if (name == nullptr) {
- log(loglevel_t::ERROR, "Opening control socket: out of memory");
- return false;
- }
- name->sun_family = AF_UNIX;
- memcpy(name->sun_path, saddrname, saddrname_len + 1);
- int sockfd = dinit_socket(AF_UNIX, SOCK_STREAM, 0, SOCK_NONBLOCK | SOCK_CLOEXEC);
- if (sockfd == -1) {
- log(loglevel_t::ERROR, "Error creating control socket: ", strerror(errno));
- free(name);
- return false;
- }
- // Check if there is already an active control socket (from another instance).
- // Unfortunately, there's no way to check atomically if a socket file is stale. Still, we
- // will try to check, since the consequences of running a system dinit instance twice are
- // potentially severe.
- int connr = connect(sockfd, (struct sockaddr *) name, sockaddr_size);
- if (connr != -1 || errno == EAGAIN) {
- log(loglevel_t::ERROR, "Control socket is already active"
- " (another instance already running?)");
- close(connr);
- close(sockfd);
- free(name);
- return false;
- }
- // Unlink any stale control socket file.
- //
- // In the worst case, this potentially removes a socket which was not active at the time
- // we checked (just above) but has since become active; there's just no good API to avoid
- // this (we'd have to use a file lock, on yet another file). Since that's unlikely to
- // occur in practice, and because a stale socket will prevent communication with dinit (or
- // prevent it starting), then we'll take the chance on unlinking here.
- unlink(saddrname);
- if (bind(sockfd, (struct sockaddr *) name, sockaddr_size) == -1) {
- if (errno != EROFS || report_ro_failure) {
- log(loglevel_t::ERROR, "Error binding control socket: ", strerror(errno));
- }
- close(sockfd);
- free(name);
- return (errno != EROFS || report_ro_failure);
- }
-
- free(name);
- // No connections can be made until we listen, so it is fine to change the permissions now
- // (and anyway there is no way to atomically create the socket and set permissions):
- if (chmod(saddrname, S_IRUSR | S_IWUSR) == -1) {
- log(loglevel_t::ERROR, "Error setting control socket permissions: ", strerror(errno));
- close(sockfd);
- return false;
- }
- if (listen(sockfd, 10) == -1) {
- log(loglevel_t::ERROR, "Error listening on control socket: ", strerror(errno));
- close(sockfd);
- return false;
- }
- try {
- control_socket_io.add_watch(event_loop, sockfd, dasynq::IN_EVENTS);
- control_socket_open = true;
- }
- catch (std::exception &e)
- {
- log(loglevel_t::ERROR, "Could not setup I/O on control socket: ", e.what());
- close(sockfd);
- }
- }
- return control_socket_open;
- }
- static void close_control_socket() noexcept
- {
- if (control_socket_open) {
- int fd = control_socket_io.get_watched_fd();
- control_socket_io.deregister(event_loop);
- close(fd);
-
- // Unlink the socket:
- unlink(control_socket_path);
- control_socket_open = false;
- }
- }
- void setup_external_log() noexcept
- {
- if (! external_log_open) {
- if (log_is_syslog) {
- const char * saddrname = log_path;
- size_t saddrname_len = strlen(saddrname);
- uint sockaddr_size = offsetof(struct sockaddr_un, sun_path) + saddrname_len + 1;
- struct sockaddr_un * name = static_cast<sockaddr_un *>(malloc(sockaddr_size));
- if (name == nullptr) {
- log(loglevel_t::ERROR, "Connecting to log socket: out of memory");
- return;
- }
- name->sun_family = AF_UNIX;
- memcpy(name->sun_path, saddrname, saddrname_len + 1);
- int sockfd = dinit_socket(AF_UNIX, SOCK_DGRAM, 0, SOCK_NONBLOCK | SOCK_CLOEXEC);
- if (sockfd == -1) {
- log(loglevel_t::ERROR, "Error creating log socket: ", strerror(errno));
- free(name);
- return;
- }
- if (connect(sockfd, (struct sockaddr *) name, sockaddr_size) == 0 || errno == EINPROGRESS) {
- // For EINPROGRESS, connection is still being established; however, we can select on
- // the file descriptor so we will be notified when it's ready. In other words we can
- // basically use it anyway.
- try {
- setup_main_log(sockfd);
- external_log_open = true;
- }
- catch (std::exception &e) {
- log(loglevel_t::ERROR, "Setting up log failed: ", e.what());
- close(sockfd);
- }
- }
- else {
- // Note if connect fails, we haven't warned at all, because the syslog server might not
- // have started yet.
- close(sockfd);
- }
- free(name);
- }
- else {
- // log to file:
- int log_fd = open(log_path, O_WRONLY | O_CREAT | O_APPEND | O_NONBLOCK | O_CLOEXEC, 0644);
- if (log_fd >= 0) {
- try {
- setup_main_log(log_fd);
- external_log_open = true;
- }
- catch (std::exception &e) {
- log(loglevel_t::ERROR, "Setting up log failed: ", e.what());
- close(log_fd);
- }
- }
- else {
- // log failure to log? It makes more sense than first appears, because we also log
- // to console:
- log(loglevel_t::ERROR, "Setting up log failed: ", strerror(errno));
- }
- }
- }
- }
- static void flush_log() noexcept
- {
- log_flush_timer.reset();
- log_flush_timer.arm_timer_rel(event_loop, timespec{5,0}); // 5 seconds
- while (!is_log_flushed() && !log_flush_timer.has_expired()) {
- event_loop.run();
- }
- }
- /* handle SIGINT signal (generated by Linux kernel when ctrl+alt+del pressed) */
- static void sigint_reboot_cb(eventloop_t &eloop) noexcept
- {
- services->stop_all_services(shutdown_type_t::REBOOT);
- }
- /* handle SIGQUIT (if we are system init) */
- static void sigquit_cb(eventloop_t &eloop) noexcept
- {
- // This performs an immediate shutdown, without service rollback.
- close_control_socket();
- execl(shutdown_exec.c_str(), shutdown_exec.c_str(), "--system", (char *) 0);
- log(loglevel_t::ERROR, error_exec_sd, strerror(errno));
- sync(); // since a hard poweroff might be required at this point...
- }
- /* handle SIGTERM/SIGQUIT(non-system-daemon) - stop all services and shut down */
- static void sigterm_cb(eventloop_t &eloop) noexcept
- {
- services->stop_all_services();
- }
|