libvirtd.c 48.8 KB
Newer Older
D
Daniel P. Berrange 已提交
1
/*
D
Daniel P. Berrange 已提交
2
 * libvirtd.c: daemon start of day, guest process & i/o management
D
Daniel P. Berrange 已提交
3
 *
4
 * Copyright (C) 2006-2015 Red Hat, Inc.
D
Daniel P. Berrange 已提交
5 6 7 8 9 10 11 12 13 14 15 16 17
 * Copyright (C) 2006 Daniel P. Berrange
 *
 * This library is free software; you can redistribute it and/or
 * modify it under the terms of the GNU Lesser General Public
 * License as published by the Free Software Foundation; either
 * version 2.1 of the License, or (at your option) any later version.
 *
 * This library is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * Lesser General Public License for more details.
 *
 * You should have received a copy of the GNU Lesser General Public
18
 * License along with this library.  If not, see
O
Osier Yang 已提交
19
 * <http://www.gnu.org/licenses/>.
D
Daniel P. Berrange 已提交
20 21 22 23
 *
 * Author: Daniel P. Berrange <berrange@redhat.com>
 */

24
#include <config.h>
25

D
Daniel P. Berrange 已提交
26 27
#include <unistd.h>
#include <fcntl.h>
28 29
#include <sys/wait.h>
#include <sys/stat.h>
D
Daniel P. Berrange 已提交
30
#include <getopt.h>
31
#include <stdlib.h>
32
#include <grp.h>
E
Eric Blake 已提交
33
#include <locale.h>
34

35
#include "libvirt_internal.h"
36
#include "virerror.h"
E
Eric Blake 已提交
37
#include "virfile.h"
38
#include "virlog.h"
39
#include "virpidfile.h"
40
#include "virprocess.h"
41

42 43
#define VIR_FROM_THIS VIR_FROM_QEMU

D
Daniel P. Berrange 已提交
44
#include "libvirtd.h"
45
#include "libvirtd-config.h"
46

47
#include "admin_server.h"
48
#include "viruuid.h"
49
#include "remote_driver.h"
50
#include "viralloc.h"
51
#include "virconf.h"
52
#include "virnetlink.h"
53
#include "virnetdaemon.h"
54
#include "remote.h"
55
#include "virhook.h"
56
#include "viraudit.h"
57
#include "virstring.h"
58 59
#include "locking/lock_manager.h"
#include "viraccessmanager.h"
60
#include "virutil.h"
D
Daniel P. Berrange 已提交
61

62
#ifdef WITH_DRIVER_MODULES
63
# include "driver.h"
64
#else
65 66 67 68 69 70
# ifdef WITH_QEMU
#  include "qemu/qemu_driver.h"
# endif
# ifdef WITH_LXC
#  include "lxc/lxc_driver.h"
# endif
71 72 73
# ifdef WITH_XEN
#  include "xen/xen_driver.h"
# endif
J
Jim Fehlig 已提交
74 75 76
# ifdef WITH_LIBXL
#  include "libxl/libxl_driver.h"
# endif
77 78 79
# ifdef WITH_UML
#  include "uml/uml_driver.h"
# endif
80 81 82
# ifdef WITH_VBOX
#  include "vbox/vbox_driver.h"
# endif
R
Roman Bogorodskiy 已提交
83 84 85
# ifdef WITH_BHYVE
#  include "bhyve/bhyve_driver.h"
# endif
86 87 88
# ifdef WITH_NETWORK
#  include "network/bridge_driver.h"
# endif
89 90
# ifdef WITH_INTERFACE
#  include "interface/interface_driver.h"
91
# endif
92
# ifdef WITH_STORAGE
93 94 95 96 97 98 99 100
#  include "storage/storage_driver.h"
# endif
# ifdef WITH_NODE_DEVICES
#  include "node_device/node_device_driver.h"
# endif
# ifdef WITH_SECRETS
#  include "secret/secret_driver.h"
# endif
101 102 103
# ifdef WITH_NWFILTER
#  include "nwfilter/nwfilter_driver.h"
# endif
104
#endif
105

106 107
#include "configmake.h"

108 109
#include "virdbus.h"

110 111
VIR_LOG_INIT("daemon.libvirtd");

112
#if WITH_SASL
113
virNetSASLContextPtr saslCtxt = NULL;
114
#endif
115
virNetServerProgramPtr remoteProgram = NULL;
116
virNetServerProgramPtr adminProgram = NULL;
117
virNetServerProgramPtr qemuProgram = NULL;
118
virNetServerProgramPtr lxcProgram = NULL;
119

120 121
volatile bool driversInitialized = false;

122 123 124 125 126 127 128 129 130
enum {
    VIR_DAEMON_ERR_NONE = 0,
    VIR_DAEMON_ERR_PIDFILE,
    VIR_DAEMON_ERR_RUNDIR,
    VIR_DAEMON_ERR_INIT,
    VIR_DAEMON_ERR_SIGNAL,
    VIR_DAEMON_ERR_PRIVS,
    VIR_DAEMON_ERR_NETWORK,
    VIR_DAEMON_ERR_CONFIG,
131
    VIR_DAEMON_ERR_HOOKS,
132
    VIR_DAEMON_ERR_AUDIT,
133 134 135 136 137 138 139 140 141 142 143 144 145

    VIR_DAEMON_ERR_LAST
};

VIR_ENUM_DECL(virDaemonErr)
VIR_ENUM_IMPL(virDaemonErr, VIR_DAEMON_ERR_LAST,
              "Initialization successful",
              "Unable to obtain pidfile",
              "Unable to create rundir",
              "Unable to initialize libvirt",
              "Unable to setup signal handlers",
              "Unable to drop privileges",
              "Unable to initialize network sockets",
146
              "Unable to load configuration file",
147 148
              "Unable to look for hook scripts",
              "Unable to initialize audit system")
149

150
static int daemonForkIntoBackground(const char *argv0)
151
{
152 153 154 155
    int statuspipe[2];
    if (pipe(statuspipe) < 0)
        return -1;

156
    pid_t pid = fork();
D
Daniel P. Berrange 已提交
157 158 159
    switch (pid) {
    case 0:
        {
E
Eric Blake 已提交
160
            /* intermediate child */
D
Daniel P. Berrange 已提交
161 162
            int stdinfd = -1;
            int stdoutfd = -1;
163
            int nextpid;
D
Daniel P. Berrange 已提交
164

165
            VIR_FORCE_CLOSE(statuspipe[0]);
166

167
            if ((stdinfd = open("/dev/null", O_RDONLY)) <= STDERR_FILENO)
D
Daniel P. Berrange 已提交
168
                goto cleanup;
169
            if ((stdoutfd = open("/dev/null", O_WRONLY)) <= STDERR_FILENO)
D
Daniel P. Berrange 已提交
170 171 172 173 174 175 176
                goto cleanup;
            if (dup2(stdinfd, STDIN_FILENO) != STDIN_FILENO)
                goto cleanup;
            if (dup2(stdoutfd, STDOUT_FILENO) != STDOUT_FILENO)
                goto cleanup;
            if (dup2(stdoutfd, STDERR_FILENO) != STDERR_FILENO)
                goto cleanup;
177
            if (VIR_CLOSE(stdinfd) < 0)
D
Daniel P. Berrange 已提交
178
                goto cleanup;
179
            if (VIR_CLOSE(stdoutfd) < 0)
D
Daniel P. Berrange 已提交
180 181 182 183 184 185 186
                goto cleanup;

            if (setsid() < 0)
                goto cleanup;

            nextpid = fork();
            switch (nextpid) {
E
Eric Blake 已提交
187
            case 0: /* grandchild */
188
                return statuspipe[1];
E
Eric Blake 已提交
189 190 191 192
            case -1: /* error */
                goto cleanup;
            default: /* intermediate child succeeded */
                _exit(EXIT_SUCCESS);
D
Daniel P. Berrange 已提交
193 194 195
            }

        cleanup:
196 197
            VIR_FORCE_CLOSE(stdoutfd);
            VIR_FORCE_CLOSE(stdinfd);
E
Eric Blake 已提交
198 199
            VIR_FORCE_CLOSE(statuspipe[1]);
            _exit(EXIT_FAILURE);
D
Daniel P. Berrange 已提交
200 201 202

        }

E
Eric Blake 已提交
203 204
    case -1: /* error in parent */
        goto error;
D
Daniel P. Berrange 已提交
205 206 207

    default:
        {
E
Eric Blake 已提交
208
            /* parent */
209 210 211
            int ret;
            char status;

212
            VIR_FORCE_CLOSE(statuspipe[1]);
213 214

            /* We wait to make sure the first child forked successfully */
215
            if (virProcessWait(pid, NULL, false) < 0)
E
Eric Blake 已提交
216
                goto error;
217

E
Eric Blake 已提交
218 219 220
            /* If we get here, then the grandchild was spawned, so we
             * must exit.  Block until the second child initializes
             * successfully */
221 222 223 224 225
        again:
            ret = read(statuspipe[0], &status, 1);
            if (ret == -1 && errno == EINTR)
                goto again;

E
Eric Blake 已提交
226 227 228 229 230
            VIR_FORCE_CLOSE(statuspipe[0]);

            if (ret != 1) {
                char ebuf[1024];

231
                fprintf(stderr,
E
Eric Blake 已提交
232 233 234 235 236 237 238 239
                        _("%s: error: unable to determine if daemon is "
                          "running: %s\n"), argv0,
                        virStrerror(errno, ebuf, sizeof(ebuf)));
                exit(EXIT_FAILURE);
            } else if (status != 0) {
                fprintf(stderr,
                        _("%s: error: %s. Check /var/log/messages or run "
                          "without --daemon for more info.\n"), argv0,
240
                        virDaemonErrTypeToString(status));
E
Eric Blake 已提交
241
                exit(EXIT_FAILURE);
242
            }
E
Eric Blake 已提交
243
            _exit(EXIT_SUCCESS);
D
Daniel P. Berrange 已提交
244 245
        }
    }
E
Eric Blake 已提交
246

247
 error:
E
Eric Blake 已提交
248 249 250
    VIR_FORCE_CLOSE(statuspipe[0]);
    VIR_FORCE_CLOSE(statuspipe[1]);
    return -1;
D
Daniel P. Berrange 已提交
251 252
}

253

254 255 256 257
static int
daemonUnixSocketPaths(struct daemonConfig *config,
                      bool privileged,
                      char **sockfile,
258 259
                      char **rosockfile,
                      char **admsockfile)
J
John Levon 已提交
260
{
261 262
    if (config->unix_sock_dir) {
        if (virAsprintf(sockfile, "%s/libvirt-sock", config->unix_sock_dir) < 0)
263
            goto error;
264 265 266 267 268 269 270

        if (privileged) {
            if (virAsprintf(rosockfile, "%s/libvirt-sock-ro", config->unix_sock_dir) < 0)
                goto error;
            if (virAsprintf(admsockfile, "%s/libvirt-admin-sock", config->unix_sock_dir) < 0)
                goto error;
        }
D
Daniel P. Berrange 已提交
271
    } else {
272
        if (privileged) {
273
            if (VIR_STRDUP(*sockfile, LOCALSTATEDIR "/run/libvirt/libvirt-sock") < 0 ||
274 275
                VIR_STRDUP(*rosockfile, LOCALSTATEDIR "/run/libvirt/libvirt-sock-ro") < 0 ||
                VIR_STRDUP(*admsockfile, LOCALSTATEDIR "/run/libvirt/libvirt-admin-sock") < 0)
276
                goto error;
277
        } else {
278 279
            char *rundir = NULL;
            mode_t old_umask;
280

281
            if (!(rundir = virGetUserRuntimeDirectory()))
282
                goto error;
283

284 285 286 287 288 289 290
            old_umask = umask(077);
            if (virFileMakePath(rundir) < 0) {
                umask(old_umask);
                goto error;
            }
            umask(old_umask);

291 292
            if (virAsprintf(sockfile, "%s/libvirt-sock", rundir) < 0 ||
                virAsprintf(admsockfile, "%s/libvirt-admin-sock", rundir) < 0) {
293
                VIR_FREE(rundir);
294
                goto error;
295
            }
296

297
            VIR_FREE(rundir);
298 299 300
        }
    }
    return 0;
301

302
 error:
303
    return -1;
D
Daniel P. Berrange 已提交
304 305
}

306 307 308

static void daemonErrorHandler(void *opaque ATTRIBUTE_UNUSED,
                               virErrorPtr err ATTRIBUTE_UNUSED)
309 310 311 312 313
{
    /* Don't do anything, since logging infrastructure already
     * took care of reporting the error */
}

314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330
static int daemonErrorLogFilter(virErrorPtr err, int priority)
{
    /* These error codes don't really reflect real errors. They
     * are expected events that occur when an app tries to check
     * whether a particular guest already exists. This filters
     * them to a lower log level to prevent pollution of syslog
     */
    switch (err->code) {
    case VIR_ERR_NO_DOMAIN:
    case VIR_ERR_NO_NETWORK:
    case VIR_ERR_NO_STORAGE_POOL:
    case VIR_ERR_NO_STORAGE_VOL:
    case VIR_ERR_NO_NODE_DEVICE:
    case VIR_ERR_NO_INTERFACE:
    case VIR_ERR_NO_NWFILTER:
    case VIR_ERR_NO_SECRET:
    case VIR_ERR_NO_DOMAIN_SNAPSHOT:
331
    case VIR_ERR_OPERATION_INVALID:
332
    case VIR_ERR_NO_DOMAIN_METADATA:
333 334 335 336 337 338
        return VIR_LOG_DEBUG;
    }

    return priority;
}

339 340
static void daemonInitialize(void)
{
341 342
    /*
     * Note that the order is important: the first ones have a higher
343 344 345
     * priority when calling virStateInitialize. We must register the
     * network, storage and nodedev drivers before any stateful domain
     * driver, since their resources must be auto-started before any
346
     * domains can be auto-started.
347
     */
348 349 350
#ifdef WITH_DRIVER_MODULES
    /* We don't care if any of these fail, because the whole point
     * is to allow users to only install modules they want to use.
D
Dan Kenigsberg 已提交
351
     * If they try to open a connection for a module that
352 353
     * is not loaded they'll get a suitable error at that point
     */
354
# ifdef WITH_NETWORK
355
    virDriverLoadModule("network");
356
# endif
357 358 359
# ifdef WITH_INTERFACE
    virDriverLoadModule("interface");
# endif
360
# ifdef WITH_STORAGE
361
    virDriverLoadModule("storage");
362 363
# endif
# ifdef WITH_NODE_DEVICES
364
    virDriverLoadModule("nodedev");
365 366
# endif
# ifdef WITH_SECRETS
367
    virDriverLoadModule("secret");
368 369 370 371
# endif
# ifdef WITH_NWFILTER
    virDriverLoadModule("nwfilter");
# endif
372 373 374 375 376 377
# ifdef WITH_XEN
    virDriverLoadModule("xen");
# endif
# ifdef WITH_LIBXL
    virDriverLoadModule("libxl");
# endif
378
# ifdef WITH_QEMU
379
    virDriverLoadModule("qemu");
380 381
# endif
# ifdef WITH_LXC
382
    virDriverLoadModule("lxc");
383 384
# endif
# ifdef WITH_UML
385
    virDriverLoadModule("uml");
386
# endif
M
Michal Privoznik 已提交
387 388 389
# ifdef WITH_VBOX
    virDriverLoadModule("vbox");
# endif
R
Roman Bogorodskiy 已提交
390 391 392
# ifdef WITH_BHYVE
    virDriverLoadModule("bhyve");
# endif
393
#else
394
# ifdef WITH_NETWORK
395
    networkRegister();
396
# endif
397
# ifdef WITH_INTERFACE
398
    interfaceRegister();
399
# endif
400
# ifdef WITH_STORAGE
401
    storageRegister();
402
# endif
403
# ifdef WITH_NODE_DEVICES
404
    nodedevRegister();
405 406
# endif
# ifdef WITH_SECRETS
407
    secretRegister();
408
# endif
409 410 411
# ifdef WITH_NWFILTER
    nwfilterRegister();
# endif
412 413 414
# ifdef WITH_XEN
    xenRegister();
# endif
J
Jim Fehlig 已提交
415 416 417
# ifdef WITH_LIBXL
    libxlRegister();
# endif
418
# ifdef WITH_QEMU
419
    qemuRegister();
420 421
# endif
# ifdef WITH_LXC
422
    lxcRegister();
423 424
# endif
# ifdef WITH_UML
425
    umlRegister();
426
# endif
M
Michal Privoznik 已提交
427 428 429
# ifdef WITH_VBOX
    vboxRegister();
# endif
R
Roman Bogorodskiy 已提交
430 431 432
# ifdef WITH_BHYVE
    bhyveRegister();
# endif
433
#endif
434 435 436
}


437 438
static int ATTRIBUTE_NONNULL(3)
daemonSetupNetworking(virNetServerPtr srv,
439
                      virNetServerPtr srvAdm,
440 441 442
                      struct daemonConfig *config,
                      const char *sock_path,
                      const char *sock_path_ro,
443
                      const char *sock_path_adm,
444 445
                      bool ipsock,
                      bool privileged)
446 447
{
    virNetServerServicePtr svc = NULL;
448
    virNetServerServicePtr svcAdm = NULL;
449 450
    virNetServerServicePtr svcRO = NULL;
    virNetServerServicePtr svcTCP = NULL;
451
#if WITH_GNUTLS
452
    virNetServerServicePtr svcTLS = NULL;
453
#endif
454 455 456
    gid_t unix_sock_gid = 0;
    int unix_sock_ro_mask = 0;
    int unix_sock_rw_mask = 0;
457
    int unix_sock_adm_mask = 0;
458

459 460 461
    unsigned int cur_fd = STDERR_FILENO + 1;
    unsigned int nfds = virGetListenFDs();

462 463 464 465
    if (config->unix_sock_group) {
        if (virGetGroupID(config->unix_sock_group, &unix_sock_gid) < 0)
            return -1;
    }
466

467
    if (nfds > (sock_path_ro ? 2 : 1)) {
468 469 470 471
        VIR_ERROR(_("Too many (%u) FDs passed from caller"), nfds);
        return -1;
    }

472 473 474 475
    if (virStrToLong_i(config->unix_sock_ro_perms, NULL, 8, &unix_sock_ro_mask) != 0) {
        VIR_ERROR(_("Failed to parse mode '%s'"), config->unix_sock_ro_perms);
        goto error;
    }
476

477 478 479 480 481
    if (virStrToLong_i(config->unix_sock_admin_perms, NULL, 8, &unix_sock_adm_mask) != 0) {
        VIR_ERROR(_("Failed to parse mode '%s'"), config->unix_sock_admin_perms);
        goto error;
    }

482 483 484 485
    if (virStrToLong_i(config->unix_sock_rw_perms, NULL, 8, &unix_sock_rw_mask) != 0) {
        VIR_ERROR(_("Failed to parse mode '%s'"), config->unix_sock_rw_perms);
        goto error;
    }
486

487 488 489 490
    if (!(svc = virNetServerServiceNewFDOrUNIX(sock_path,
                                               unix_sock_rw_mask,
                                               unix_sock_gid,
                                               config->auth_unix_rw,
491
#if WITH_GNUTLS
492
                                               NULL,
493
#endif
494 495 496 497
                                               false,
                                               config->max_queued_clients,
                                               config->max_client_requests,
                                               nfds, &cur_fd)))
498
        goto error;
499
    if (sock_path_ro) {
500 501 502 503
        if (!(svcRO = virNetServerServiceNewFDOrUNIX(sock_path_ro,
                                                     unix_sock_ro_mask,
                                                     unix_sock_gid,
                                                     config->auth_unix_ro,
504
#if WITH_GNUTLS
505
                                                     NULL,
506
#endif
507 508 509 510
                                                     true,
                                                     config->max_queued_clients,
                                                     config->max_client_requests,
                                                     nfds, &cur_fd)))
511 512
            goto error;
    }
513

514 515 516 517
    if (virNetServerAddService(srv, svc,
                               config->mdns_adv && !ipsock ?
                               "_libvirt._tcp" :
                               NULL) < 0)
518
        goto error;
519

520 521 522
    if (svcRO &&
        virNetServerAddService(srv, svcRO, NULL) < 0)
        goto error;
523

524 525 526 527 528 529 530 531 532 533 534 535 536 537
    if (sock_path_adm) {
        VIR_DEBUG("Registering unix socket %s", sock_path_adm);
        if (!(svcAdm = virNetServerServiceNewUNIX(sock_path_adm,
                                                  unix_sock_adm_mask,
                                                  unix_sock_gid,
                                                  REMOTE_AUTH_NONE,
#if WITH_GNUTLS
                                                  NULL,
#endif
                                                  true,
                                                  config->admin_max_queued_clients,
                                                  config->admin_max_client_requests)))
            goto error;

538 539 540
        if (virNetServerAddService(srvAdm, svcAdm, NULL) < 0)
            goto error;
    }
541

542
    if (ipsock) {
543
        if (config->listen_tcp) {
544 545
            VIR_DEBUG("Registering TCP socket %s:%s",
                      config->listen_addr, config->tcp_port);
546 547
            if (!(svcTCP = virNetServerServiceNewTCP(config->listen_addr,
                                                     config->tcp_port,
548
                                                     AF_UNSPEC,
549
                                                     config->auth_tcp,
550
#if WITH_GNUTLS
551 552
                                                     NULL,
#endif
553
                                                     false,
M
Michal Privoznik 已提交
554
                                                     config->max_queued_clients,
555
                                                     config->max_client_requests)))
556
                goto error;
557

558 559 560
            if (virNetServerAddService(srv, svcTCP,
                                       config->mdns_adv ? "_libvirt._tcp" : NULL) < 0)
                goto error;
561 562
        }

563
#if WITH_GNUTLS
564 565
        if (config->listen_tls) {
            virNetTLSContextPtr ctxt = NULL;
566

567 568 569 570 571 572 573 574
            if (config->ca_file ||
                config->cert_file ||
                config->key_file) {
                if (!(ctxt = virNetTLSContextNewServer(config->ca_file,
                                                       config->crl_file,
                                                       config->cert_file,
                                                       config->key_file,
                                                       (const char *const*)config->tls_allowed_dn_list,
575
                                                       config->tls_no_sanity_certificate ? false : true,
576 577 578 579 580 581
                                                       config->tls_no_verify_certificate ? false : true)))
                    goto error;
            } else {
                if (!(ctxt = virNetTLSContextNewServerPath(NULL,
                                                           !privileged,
                                                           (const char *const*)config->tls_allowed_dn_list,
582
                                                           config->tls_no_sanity_certificate ? false : true,
583 584
                                                           config->tls_no_verify_certificate ? false : true)))
                    goto error;
585 586
            }

587 588
            VIR_DEBUG("Registering TLS socket %s:%s",
                      config->listen_addr, config->tls_port);
589 590 591
            if (!(svcTLS =
                  virNetServerServiceNewTCP(config->listen_addr,
                                            config->tls_port,
592
                                            AF_UNSPEC,
593
                                            config->auth_tls,
594
                                            ctxt,
595
                                            false,
M
Michal Privoznik 已提交
596
                                            config->max_queued_clients,
597
                                            config->max_client_requests))) {
598
                virObjectUnref(ctxt);
599
                goto error;
600
            }
601 602 603 604
            if (virNetServerAddService(srv, svcTLS,
                                       config->mdns_adv &&
                                       !config->listen_tcp ? "_libvirt._tcp" : NULL) < 0)
                goto error;
605

606
            virObjectUnref(ctxt);
607
        }
608 609 610 611 612 613 614 615
#else
        (void)privileged;
        if (config->listen_tls) {
            virReportError(VIR_ERR_CONFIG_UNSUPPORTED, "%s",
                           _("This libvirtd build does not support TLS"));
            goto error;
        }
#endif
616 617
    }

618
#if WITH_SASL
619 620
    if (config->auth_unix_rw == REMOTE_AUTH_SASL ||
        config->auth_unix_ro == REMOTE_AUTH_SASL ||
621
# if WITH_GNUTLS
622 623 624
        config->auth_tls == REMOTE_AUTH_SASL ||
# endif
        config->auth_tcp == REMOTE_AUTH_SASL) {
625 626 627
        saslCtxt = virNetSASLContextNewServer(
            (const char *const*)config->sasl_allowed_username_list);
        if (!saslCtxt)
628
            goto error;
D
Daniel P. Berrange 已提交
629
    }
630
#endif
D
Daniel P. Berrange 已提交
631 632

    return 0;
633

634
 error:
635
#if WITH_GNUTLS
636
    virObjectUnref(svcTLS);
637
#endif
638 639 640
    virObjectUnref(svcTCP);
    virObjectUnref(svc);
    virObjectUnref(svcRO);
641
    virObjectUnref(svcAdm);
642
    return -1;
D
Daniel P. Berrange 已提交
643 644 645
}


646 647
/*
 * Set up the logging environment
648 649
 * By default if daemonized all errors go to the logfile libvirtd.log,
 * but if verbose or error debugging is asked for then also output
650
 * informational and debug messages. Default size if 64 kB.
651
 */
652
static int
653 654 655 656
daemonSetupLogging(struct daemonConfig *config,
                   bool privileged,
                   bool verbose,
                   bool godaemon)
657
{
658 659
    virLogReset();

660
    /*
661 662 663 664 665 666 667 668 669 670 671 672
     * Libvirtd's order of precedence is:
     * cmdline > environment > config
     *
     * In order to achieve this, we must process configuration in
     * different order for the log level versus the filters and
     * outputs. Because filters and outputs append, we have to look at
     * the environment first and then only check the config file if
     * there was no result from the environment. The default output is
     * then applied only if there was no setting from either of the
     * first two. Because we don't have a way to determine if the log
     * level has been set, we must process variables in the opposite
     * order, each one overriding the previous.
673
     */
674 675
    if (config->log_level != 0)
        virLogSetDefaultPriority(config->log_level);
676

677
    virLogSetFromEnv();
678

679 680 681 682 683
    if (virLogGetNbFilters() == 0)
        virLogParseFilters(config->log_filters);

    if (virLogGetNbOutputs() == 0)
        virLogParseOutputs(config->log_outputs);
684

685 686 687 688 689 690
    /*
     * Command line override for --verbose
     */
    if ((verbose) && (virLogGetDefaultPriority() > VIR_LOG_INFO))
        virLogSetDefaultPriority(VIR_LOG_INFO);

691
    /*
692 693 694 695
     * If no defined outputs, and either running
     * as daemon or not on a tty, then first try
     * to direct it to the systemd journal
     * (if it exists)....
696
     */
697 698
    if (virLogGetNbOutputs() == 0 &&
        (godaemon || !isatty(STDIN_FILENO))) {
699 700
        char *tmp;
        if (access("/run/systemd/journal/socket", W_OK) >= 0) {
701 702 703 704 705 706 707 708
            virLogPriority priority = virLogGetDefaultPriority();

            /* By default we don't want to log too much stuff into journald as
             * it may employ rate limiting and thus block libvirt execution. */
            if (priority == VIR_LOG_DEBUG)
                priority = VIR_LOG_INFO;

            if (virAsprintf(&tmp, "%d:journald", priority) < 0)
709
                goto error;
710 711 712 713 714 715 716
            virLogParseOutputs(tmp);
            VIR_FREE(tmp);
        }
    }

    /*
     * otherwise direct to libvirtd.log when running
717
     * as daemon. Otherwise the default output is stderr.
718
     */
719
    if (virLogGetNbOutputs() == 0) {
720
        char *tmp = NULL;
721

722
        if (godaemon) {
723
            if (privileged) {
724 725 726
                if (virAsprintf(&tmp, "%d:file:%s/log/libvirt/libvirtd.log",
                                virLogGetDefaultPriority(),
                                LOCALSTATEDIR) == -1)
727
                    goto error;
728
            } else {
729
                char *logdir = virGetUserCacheDirectory();
730 731 732 733 734 735 736 737
                mode_t old_umask;

                if (!logdir)
                    goto error;

                old_umask = umask(077);
                if (virFileMakePath(logdir) < 0) {
                    umask(old_umask);
738
                    goto error;
739 740
                }
                umask(old_umask);
741

742 743 744
                if (virAsprintf(&tmp, "%d:file:%s/libvirtd.log",
                                virLogGetDefaultPriority(), logdir) == -1) {
                    VIR_FREE(logdir);
745
                    goto error;
E
Eric Blake 已提交
746
                }
747
                VIR_FREE(logdir);
748
            }
749
        } else {
750
            if (virAsprintf(&tmp, "%d:stderr", virLogGetDefaultPriority()) < 0)
751
                goto error;
752
        }
753 754
        virLogParseOutputs(tmp);
        VIR_FREE(tmp);
755
    }
756

757 758
    return 0;

759
 error:
760 761 762
    return -1;
}

763

764 765 766 767 768
static int
daemonSetupAccessManager(struct daemonConfig *config)
{
    virAccessManagerPtr mgr;
    const char *none[] = { "none", NULL };
J
Ján Tomko 已提交
769
    const char **drv = (const char **)config->access_drivers;
770

J
Ján Tomko 已提交
771 772 773
    if (!drv ||
        !drv[0])
        drv = none;
774

J
Ján Tomko 已提交
775
    if (!(mgr = virAccessManagerNewStack(drv)))
776 777 778 779 780 781 782 783
        return -1;

    virAccessManagerSetDefault(mgr);
    virObjectUnref(mgr);
    return 0;
}


784 785
/* Display version information. */
static void
786
daemonVersion(const char *argv0)
787
{
788
    printf("%s (%s) %s\n", argv0, PACKAGE_NAME, PACKAGE_VERSION);
789 790
}

J
John Levon 已提交
791 792
#ifdef __sun
static int
793
daemonSetupPrivs(void)
J
John Levon 已提交
794
{
795
    chown("/var/run/libvirt", SYSTEM_UID, SYSTEM_UID);
J
John Levon 已提交
796

797 798
    if (__init_daemon_priv(PU_RESETGROUPS | PU_CLEARLIMITSET,
                           SYSTEM_UID, SYSTEM_UID, PRIV_XVM_CONTROL, NULL)) {
799
        VIR_ERROR(_("additional privileges are required"));
J
John Levon 已提交
800 801 802
        return -1;
    }

803 804
    if (priv_set(PRIV_OFF, PRIV_ALLSETS, PRIV_FILE_LINK_ANY, PRIV_PROC_INFO,
                 PRIV_PROC_SESSION, PRIV_PROC_EXEC, PRIV_PROC_FORK, NULL)) {
805
        VIR_ERROR(_("failed to set reduced privileges"));
J
John Levon 已提交
806 807 808 809 810 811
        return -1;
    }

    return 0;
}
#else
812
# define daemonSetupPrivs() 0
J
John Levon 已提交
813 814
#endif

815

816
static void daemonShutdownHandler(virNetDaemonPtr dmn,
817 818
                                  siginfo_t *sig ATTRIBUTE_UNUSED,
                                  void *opaque ATTRIBUTE_UNUSED)
819
{
820
    virNetDaemonQuit(dmn);
821
}
822

823
static void daemonReloadHandler(virNetDaemonPtr dmn ATTRIBUTE_UNUSED,
824 825 826
                                siginfo_t *sig ATTRIBUTE_UNUSED,
                                void *opaque ATTRIBUTE_UNUSED)
{
827 828 829 830 831
    if (!driversInitialized) {
        VIR_WARN("Drivers are not initialized, reload ignored");
        return;
    }

W
Wang Rui 已提交
832 833 834 835 836
    VIR_INFO("Reloading configuration on SIGHUP");
    virHookCall(VIR_HOOK_DRIVER_DAEMON, "-",
                VIR_HOOK_DAEMON_OP_RELOAD, SIGHUP, "SIGHUP", NULL, NULL);
    if (virStateReload() < 0)
        VIR_WARN("Error while reloading drivers");
837 838
}

839
static int daemonSetupSignals(virNetDaemonPtr dmn)
840
{
841
    if (virNetDaemonAddSignalHandler(dmn, SIGINT, daemonShutdownHandler, NULL) < 0)
842
        return -1;
843
    if (virNetDaemonAddSignalHandler(dmn, SIGQUIT, daemonShutdownHandler, NULL) < 0)
844
        return -1;
845
    if (virNetDaemonAddSignalHandler(dmn, SIGTERM, daemonShutdownHandler, NULL) < 0)
846
        return -1;
847
    if (virNetDaemonAddSignalHandler(dmn, SIGHUP, daemonReloadHandler, NULL) < 0)
848
        return -1;
849 850
    return 0;
}
851

852 853 854

static void daemonInhibitCallback(bool inhibit, void *opaque)
{
855
    virNetDaemonPtr dmn = opaque;
856 857

    if (inhibit)
858
        virNetDaemonAddShutdownInhibition(dmn);
859
    else
860
        virNetDaemonRemoveShutdownInhibition(dmn);
861 862 863
}


864 865 866 867 868 869
#ifdef HAVE_DBUS
static DBusConnection *sessionBus;
static DBusConnection *systemBus;

static void daemonStopWorker(void *opaque)
{
870
    virNetDaemonPtr dmn = opaque;
871

872
    VIR_DEBUG("Begin stop dmn=%p", dmn);
873 874 875

    ignore_value(virStateStop());

876
    VIR_DEBUG("Completed stop dmn=%p", dmn);
877 878

    /* Exit libvirtd cleanly */
879
    virNetDaemonQuit(dmn);
880 881 882 883
}


/* We do this in a thread to not block the main loop */
884
static void daemonStop(virNetDaemonPtr dmn)
885 886
{
    virThread thr;
887 888 889
    virObjectRef(dmn);
    if (virThreadCreate(&thr, false, daemonStopWorker, dmn) < 0)
        virObjectUnref(dmn);
890 891 892 893 894 895 896 897
}


static DBusHandlerResult
handleSessionMessageFunc(DBusConnection *connection ATTRIBUTE_UNUSED,
                         DBusMessage *message,
                         void *opaque)
{
898
    virNetDaemonPtr dmn = opaque;
899

900
    VIR_DEBUG("dmn=%p", dmn);
901 902 903 904

    if (dbus_message_is_signal(message,
                               DBUS_INTERFACE_LOCAL,
                               "Disconnected"))
905
        daemonStop(dmn);
906 907 908 909 910 911 912 913 914 915

    return DBUS_HANDLER_RESULT_NOT_YET_HANDLED;
}


static DBusHandlerResult
handleSystemMessageFunc(DBusConnection *connection ATTRIBUTE_UNUSED,
                        DBusMessage *message,
                        void *opaque)
{
916
    virNetDaemonPtr dmn = opaque;
917

918
    VIR_DEBUG("dmn=%p", dmn);
919 920 921 922

    if (dbus_message_is_signal(message,
                               "org.freedesktop.login1.Manager",
                               "PrepareForShutdown"))
923
        daemonStop(dmn);
924 925 926 927 928 929

    return DBUS_HANDLER_RESULT_NOT_YET_HANDLED;
}
#endif


930 931
static void daemonRunStateInit(void *opaque)
{
932
    virNetDaemonPtr dmn = opaque;
933 934 935
    virIdentityPtr sysident = virIdentityGetSystem();

    virIdentitySetCurrent(sysident);
936

937 938
    /* Since driver initialization can take time inhibit daemon shutdown until
       we're done so clients get a chance to connect */
939
    daemonInhibitCallback(true, dmn);
940

941
    /* Start the stateful HV drivers
E
Eric Blake 已提交
942
     * This is deliberately done after telling the parent process
943 944
     * we're ready, since it can take a long time and this will
     * seriously delay OS bootup process */
945
    if (virStateInitialize(virNetDaemonIsPrivileged(dmn),
946
                           daemonInhibitCallback,
947
                           dmn) < 0) {
948
        VIR_ERROR(_("Driver state initialization failed"));
949 950
        /* Ensure the main event loop quits */
        kill(getpid(), SIGTERM);
951
        goto cleanup;
952 953
    }

954 955
    driversInitialized = true;

956 957
#ifdef HAVE_DBUS
    /* Tie the non-priviledged libvirtd to the session/shutdown lifecycle */
958
    if (!virNetDaemonIsPrivileged(dmn)) {
959 960 961 962

        sessionBus = virDBusGetSessionBus();
        if (sessionBus != NULL)
            dbus_connection_add_filter(sessionBus,
963
                                       handleSessionMessageFunc, dmn, NULL);
964 965 966 967

        systemBus = virDBusGetSystemBus();
        if (systemBus != NULL) {
            dbus_connection_add_filter(systemBus,
968
                                       handleSystemMessageFunc, dmn, NULL);
969 970 971 972 973 974
            dbus_bus_add_match(systemBus,
                               "type='signal',sender='org.freedesktop.login1', interface='org.freedesktop.login1.Manager'",
                               NULL);
        }
    }
#endif
975
    /* Only now accept clients from network */
976
    virNetDaemonUpdateServices(dmn, true);
977
 cleanup:
978 979
    daemonInhibitCallback(false, dmn);
    virObjectUnref(dmn);
980 981
    virObjectUnref(sysident);
    virIdentitySetCurrent(NULL);
982
}
983

984
static int daemonStateInit(virNetDaemonPtr dmn)
985 986
{
    virThread thr;
987 988 989
    virObjectRef(dmn);
    if (virThreadCreate(&thr, false, daemonRunStateInit, dmn) < 0) {
        virObjectUnref(dmn);
990 991
        return -1;
    }
992 993 994
    return 0;
}

995 996 997 998 999 1000 1001 1002 1003 1004 1005
static int migrateProfile(void)
{
    char *old_base = NULL;
    char *updated = NULL;
    char *home = NULL;
    char *xdg_dir = NULL;
    char *config_dir = NULL;
    const char *config_home;
    int ret = -1;
    mode_t old_umask;

1006 1007
    VIR_DEBUG("Checking if user profile needs migrating");

1008
    if (!(home = virGetUserDirectory()))
1009 1010
        goto cleanup;

1011
    if (virAsprintf(&old_base, "%s/.libvirt", home) < 0)
1012 1013 1014
        goto cleanup;

    /* if the new directory is there or the old one is not: do nothing */
1015
    if (!(config_dir = virGetUserConfigDirectory()))
1016 1017 1018
        goto cleanup;

    if (!virFileIsDir(old_base) || virFileExists(config_dir)) {
1019 1020 1021
        VIR_DEBUG("No old profile in '%s' / "
                  "new profile directory already present '%s'",
                  old_base, config_dir);
1022 1023 1024 1025 1026
        ret = 0;
        goto cleanup;
    }

    /* test if we already attempted to migrate first */
1027
    if (virAsprintf(&updated, "%s/DEPRECATED-DIRECTORY", old_base) < 0)
1028
        goto cleanup;
1029
    if (virFileExists(updated))
1030 1031
        goto cleanup;

1032
    config_home = virGetEnvBlockSUID("XDG_CONFIG_HOME");
1033
    if (config_home && config_home[0] != '\0') {
1034 1035
        if (VIR_STRDUP(xdg_dir, config_home) < 0)
            goto cleanup;
1036
    } else {
1037
        if (virAsprintf(&xdg_dir, "%s/.config", home) < 0)
1038 1039 1040 1041 1042 1043 1044 1045 1046 1047 1048 1049 1050 1051 1052 1053 1054
            goto cleanup;
    }

    old_umask = umask(077);
    if (virFileMakePath(xdg_dir) < 0) {
        umask(old_umask);
        goto cleanup;
    }
    umask(old_umask);

    if (rename(old_base, config_dir) < 0) {
        int fd = creat(updated, 0600);
        VIR_FORCE_CLOSE(fd);
        VIR_ERROR(_("Unable to migrate %s to %s"), old_base, config_dir);
        goto cleanup;
    }

1055
    VIR_DEBUG("Profile migrated from %s to %s", old_base, config_dir);
1056 1057 1058 1059 1060 1061 1062 1063 1064 1065 1066 1067
    ret = 0;

 cleanup:
    VIR_FREE(home);
    VIR_FREE(old_base);
    VIR_FREE(xdg_dir);
    VIR_FREE(config_dir);
    VIR_FREE(updated);

    return ret;
}

1068 1069
/* Print command-line usage. */
static void
1070
daemonUsage(const char *argv0, bool privileged)
1071
{
1072 1073 1074 1075 1076 1077
    fprintf(stderr,
            _("\n"
              "Usage:\n"
              "  %s [options]\n"
              "\n"
              "Options:\n"
1078
              "  -h | --help            Display program help:\n"
1079 1080 1081 1082 1083
              "  -v | --verbose         Verbose messages.\n"
              "  -d | --daemon          Run as a daemon & write PID file.\n"
              "  -l | --listen          Listen for TCP/IP connections.\n"
              "  -t | --timeout <secs>  Exit after timeout period.\n"
              "  -f | --config <file>   Configuration file.\n"
1084
              "  -V | --version         Display version information.\n"
1085 1086 1087 1088
              "  -p | --pid-file <file> Change name of PID file.\n"
              "\n"
              "libvirt management daemon:\n"),
            argv0);
1089 1090 1091

    if (privileged) {
        fprintf(stderr,
1092 1093 1094 1095
                _("\n"
                  "  Default paths:\n"
                  "\n"
                  "    Configuration file (unless overridden by -f):\n"
1096
                  "      %s\n"
1097 1098
                  "\n"
                  "    Sockets:\n"
1099 1100
                  "      %s\n"
                  "      %s\n"
1101 1102
                  "\n"
                  "    TLS:\n"
1103 1104 1105
                  "      CA certificate:     %s\n"
                  "      Server certificate: %s\n"
                  "      Server private key: %s\n"
1106 1107 1108 1109
                  "\n"
                  "    PID file (unless overridden by -p):\n"
                  "      %s/run/libvirtd.pid\n"
                  "\n"),
1110 1111 1112
                LIBVIRTD_CONFIGURATION_FILE,
                LIBVIRTD_PRIV_UNIX_SOCKET,
                LIBVIRTD_PRIV_UNIX_SOCKET_RO,
1113 1114 1115
                LIBVIRT_CACERT,
                LIBVIRT_SERVERCERT,
                LIBVIRT_SERVERKEY,
1116 1117
                LOCALSTATEDIR);
    } else {
1118 1119 1120 1121 1122 1123 1124 1125 1126 1127 1128 1129 1130 1131 1132 1133 1134 1135
        fprintf(stderr, "%s",
                _("\n"
                  "  Default paths:\n"
                  "\n"
                  "    Configuration file (unless overridden by -f):\n"
                  "      $XDG_CONFIG_HOME/libvirt/libvirtd.conf\n"
                  "\n"
                  "    Sockets:\n"
                  "      $XDG_RUNTIME_DIR/libvirt/libvirt-sock\n"
                  "\n"
                  "    TLS:\n"
                  "      CA certificate:     $HOME/.pki/libvirt/cacert.pem\n"
                  "      Server certificate: $HOME/.pki/libvirt/servercert.pem\n"
                  "      Server private key: $HOME/.pki/libvirt/serverkey.pem\n"
                  "\n"
                  "    PID file:\n"
                  "      $XDG_RUNTIME_DIR/libvirt/libvirtd.pid\n"
                  "\n"));
1136
    }
1137 1138
}

D
Daniel P. Berrange 已提交
1139
int main(int argc, char **argv) {
1140
    virNetDaemonPtr dmn = NULL;
1141
    virNetServerPtr srv = NULL;
1142
    virNetServerPtr srvAdm = NULL;
1143
    char *remote_config_file = NULL;
1144
    int statuswrite = -1;
1145
    int ret = 1;
1146
    int pid_file_fd = -1;
1147 1148 1149
    char *pid_file = NULL;
    char *sock_file = NULL;
    char *sock_file_ro = NULL;
1150
    char *sock_file_adm = NULL;
1151 1152 1153 1154 1155 1156
    int timeout = -1;        /* -t: Shutdown timeout */
    int verbose = 0;
    int godaemon = 0;
    int ipsock = 0;
    struct daemonConfig *config;
    bool privileged = geteuid() == 0 ? true : false;
1157
    bool implicit_conf = false;
1158 1159
    char *run_dir = NULL;
    mode_t old_umask;
D
Daniel P. Berrange 已提交
1160 1161

    struct option opts[] = {
1162 1163 1164
        { "verbose", no_argument, &verbose, 'v'},
        { "daemon", no_argument, &godaemon, 'd'},
        { "listen", no_argument, &ipsock, 'l'},
1165
        { "config", required_argument, NULL, 'f'},
1166 1167
        { "timeout", required_argument, NULL, 't'},
        { "pid-file", required_argument, NULL, 'p'},
1168 1169
        { "version", no_argument, NULL, 'V' },
        { "help", no_argument, NULL, 'h' },
D
Daniel P. Berrange 已提交
1170 1171 1172
        {0, 0, 0, 0}
    };

1173 1174
    if (setlocale(LC_ALL, "") == NULL ||
        bindtextdomain(PACKAGE, LOCALEDIR) == NULL ||
E
Eric Blake 已提交
1175 1176
        textdomain(PACKAGE) == NULL ||
        virInitialize() < 0) {
1177
        fprintf(stderr, _("%s: initialization failed\n"), argv[0]);
E
Eric Blake 已提交
1178
        exit(EXIT_FAILURE);
1179
    }
D
Daniel P. Berrange 已提交
1180

1181 1182
    virUpdateSelfLastChanged(argv[0]);

1183 1184
    virFileActivateDirOverride(argv[0]);

D
Daniel P. Berrange 已提交
1185 1186 1187 1188 1189
    while (1) {
        int optidx = 0;
        int c;
        char *tmp;

1190
        c = getopt_long(argc, argv, "ldf:p:t:vVh", opts, &optidx);
D
Daniel P. Berrange 已提交
1191

1192
        if (c == -1)
D
Daniel P. Berrange 已提交
1193 1194 1195 1196 1197 1198 1199 1200 1201 1202 1203 1204
            break;

        switch (c) {
        case 0:
            /* Got one of the flags */
            break;
        case 'v':
            verbose = 1;
            break;
        case 'd':
            godaemon = 1;
            break;
1205 1206
        case 'l':
            ipsock = 1;
D
Daniel P. Berrange 已提交
1207 1208 1209
            break;

        case 't':
1210
            if (virStrToLong_i(optarg, &tmp, 10, &timeout) != 0
1211 1212
                || timeout <= 0
                /* Ensure that we can multiply by 1000 without overflowing.  */
1213 1214 1215 1216
                || timeout > INT_MAX / 1000) {
                VIR_ERROR(_("Invalid value for timeout"));
                exit(EXIT_FAILURE);
            }
D
Daniel P. Berrange 已提交
1217
            break;
1218 1219

        case 'p':
1220
            VIR_FREE(pid_file);
1221
            if (VIR_STRDUP_QUIET(pid_file, optarg) < 0) {
1222
                VIR_ERROR(_("Can't allocate memory"));
1223
                exit(EXIT_FAILURE);
1224
            }
1225 1226 1227
            break;

        case 'f':
1228
            VIR_FREE(remote_config_file);
1229
            if (VIR_STRDUP_QUIET(remote_config_file, optarg) < 0) {
1230
                VIR_ERROR(_("Can't allocate memory"));
1231
                exit(EXIT_FAILURE);
1232
            }
1233 1234
            break;

1235
        case 'V':
1236
            daemonVersion(argv[0]);
1237
            exit(EXIT_SUCCESS);
1238

1239
        case 'h':
1240
            daemonUsage(argv[0], privileged);
1241
            exit(EXIT_SUCCESS);
D
Daniel P. Berrange 已提交
1242

1243
        case '?':
D
Daniel P. Berrange 已提交
1244
        default:
1245
            daemonUsage(argv[0], privileged);
1246
            exit(EXIT_FAILURE);
D
Daniel P. Berrange 已提交
1247 1248 1249
        }
    }

1250 1251 1252 1253 1254 1255
    if (optind != argc) {
        fprintf(stderr, "%s: unexpected, non-option, command line arguments\n",
                argv[0]);
        exit(EXIT_FAILURE);
    }

1256 1257
    if (!(config = daemonConfigNew(privileged))) {
        VIR_ERROR(_("Can't create initial configuration"));
1258
        exit(EXIT_FAILURE);
1259
    }
1260 1261

    /* No explicit config, so try and find a default one */
1262 1263 1264
    if (remote_config_file == NULL) {
        implicit_conf = true;
        if (daemonConfigFilePath(privileged,
1265 1266
                                 &remote_config_file) < 0) {
            VIR_ERROR(_("Can't determine config path"));
1267
            exit(EXIT_FAILURE);
1268
        }
1269
    }
1270 1271 1272

    /* Read the config file if it exists*/
    if (remote_config_file &&
1273
        daemonConfigLoadFile(config, remote_config_file, implicit_conf) < 0) {
1274 1275 1276 1277 1278 1279
        virErrorPtr err = virGetLastError();
        if (err && err->message)
            VIR_ERROR(_("Can't load config file: %s: %s"),
                      err->message, remote_config_file);
        else
            VIR_ERROR(_("Can't load config file: %s"), remote_config_file);
1280
        exit(EXIT_FAILURE);
1281
    }
1282

1283
    if (!privileged &&
1284 1285
        migrateProfile() < 0) {
        VIR_ERROR(_("Exiting due to failure to migrate profile"));
1286
        exit(EXIT_FAILURE);
1287
    }
1288

1289 1290 1291 1292
    if (config->host_uuid &&
        virSetHostUUIDStr(config->host_uuid) < 0) {
        VIR_ERROR(_("invalid host UUID: %s"), config->host_uuid);
        exit(EXIT_FAILURE);
1293 1294
    }

1295 1296
    if (daemonSetupLogging(config, privileged, verbose, godaemon) < 0) {
        VIR_ERROR(_("Can't initialize logging"));
1297
        exit(EXIT_FAILURE);
1298
    }
1299

1300 1301 1302 1303 1304
    if (daemonSetupAccessManager(config) < 0) {
        VIR_ERROR(_("Can't initialize access manager"));
        exit(EXIT_FAILURE);
    }

1305
    if (!pid_file &&
1306 1307 1308 1309
        virPidFileConstructPath(privileged,
                                LOCALSTATEDIR,
                                "libvirtd",
                                &pid_file) < 0) {
1310
        VIR_ERROR(_("Can't determine pid file path."));
1311
        exit(EXIT_FAILURE);
1312
    }
1313
    VIR_DEBUG("Decided on pid file path '%s'", NULLSTR(pid_file));
1314 1315 1316 1317

    if (daemonUnixSocketPaths(config,
                              privileged,
                              &sock_file,
1318 1319
                              &sock_file_ro,
                              &sock_file_adm) < 0) {
1320
        VIR_ERROR(_("Can't determine socket paths"));
1321
        exit(EXIT_FAILURE);
1322
    }
1323 1324 1325 1326
    VIR_DEBUG("Decided on socket paths '%s', '%s' and '%s'",
              sock_file,
              NULLSTR(sock_file_ro),
              NULLSTR(sock_file_adm));
1327

1328
    if (godaemon) {
1329
        char ebuf[1024];
1330 1331 1332 1333

        if (chdir("/") < 0) {
            VIR_ERROR(_("cannot change to root directory: %s"),
                      virStrerror(errno, ebuf, sizeof(ebuf)));
1334
            goto cleanup;
1335 1336
        }

1337
        if ((statuswrite = daemonForkIntoBackground(argv[0])) < 0) {
1338
            VIR_ERROR(_("Failed to fork as daemon: %s"),
1339
                      virStrerror(errno, ebuf, sizeof(ebuf)));
1340
            goto cleanup;
1341 1342 1343
        }
    }

J
John Levon 已提交
1344
    /* Ensure the rundir exists (on tmpfs on some systems) */
1345
    if (privileged) {
1346 1347 1348 1349
        if (VIR_STRDUP_QUIET(run_dir, LOCALSTATEDIR "/run/libvirt") < 0) {
            VIR_ERROR(_("Can't allocate memory"));
            goto cleanup;
        }
1350
    } else {
1351
        run_dir = virGetUserRuntimeDirectory();
1352

1353
        if (!run_dir) {
1354 1355
            VIR_ERROR(_("Can't determine user directory"));
            goto cleanup;
J
John Levon 已提交
1356 1357
        }
    }
1358 1359 1360 1361
    if (privileged)
        old_umask = umask(022);
    else
        old_umask = umask(077);
1362
    VIR_DEBUG("Ensuring run dir '%s' exists", run_dir);
1363 1364 1365 1366 1367 1368 1369 1370
    if (virFileMakePath(run_dir) < 0) {
        char ebuf[1024];
        VIR_ERROR(_("unable to create rundir %s: %s"), run_dir,
                  virStrerror(errno, ebuf, sizeof(ebuf)));
        ret = VIR_DAEMON_ERR_RUNDIR;
        goto cleanup;
    }
    umask(old_umask);
J
John Levon 已提交
1371

1372
    /* Try to claim the pidfile, exiting if we can't */
1373
    if ((pid_file_fd = virPidFileAcquirePath(pid_file, false, getpid())) < 0) {
1374 1375 1376 1377
        ret = VIR_DAEMON_ERR_PIDFILE;
        goto cleanup;
    }

1378 1379 1380 1381 1382
    if (virNetlinkStartup() < 0) {
        ret = VIR_DAEMON_ERR_INIT;
        goto cleanup;
    }

1383 1384
    if (!(srv = virNetServerNew(config->min_workers,
                                config->max_workers,
1385
                                config->prio_workers,
1386
                                config->max_clients,
1387
                                config->max_anonymous_clients,
1388 1389 1390
                                config->keepalive_interval,
                                config->keepalive_count,
                                !!config->keepalive_required,
1391
                                config->mdns_adv ? config->mdns_name : NULL,
1392
                                remoteClientInitHook,
1393
                                NULL,
1394
                                remoteClientFreeFunc,
1395
                                NULL))) {
1396 1397 1398 1399
        ret = VIR_DAEMON_ERR_INIT;
        goto cleanup;
    }

1400 1401 1402 1403 1404 1405
    if (!(dmn = virNetDaemonNew()) ||
        virNetDaemonAddServer(dmn, srv) < 0) {
        ret = VIR_DAEMON_ERR_INIT;
        goto cleanup;
    }

1406 1407 1408
    /* Beyond this point, nothing should rely on using
     * getuid/geteuid() == 0, for privilege level checks.
     */
1409
    VIR_DEBUG("Dropping privileges (if required)");
1410
    if (daemonSetupPrivs() < 0) {
1411
        ret = VIR_DAEMON_ERR_PRIVS;
1412
        goto cleanup;
1413
    }
J
John Levon 已提交
1414

1415
    daemonInitialize();
1416

1417 1418 1419 1420 1421 1422 1423 1424 1425
    remoteProcs[REMOTE_PROC_AUTH_LIST].needAuth = false;
    remoteProcs[REMOTE_PROC_AUTH_SASL_INIT].needAuth = false;
    remoteProcs[REMOTE_PROC_AUTH_SASL_STEP].needAuth = false;
    remoteProcs[REMOTE_PROC_AUTH_SASL_START].needAuth = false;
    remoteProcs[REMOTE_PROC_AUTH_POLKIT].needAuth = false;
    if (!(remoteProgram = virNetServerProgramNew(REMOTE_PROGRAM,
                                                 REMOTE_PROTOCOL_VERSION,
                                                 remoteProcs,
                                                 remoteNProcs))) {
1426
        ret = VIR_DAEMON_ERR_INIT;
1427 1428 1429 1430 1431
        goto cleanup;
    }
    if (virNetServerAddProgram(srv, remoteProgram) < 0) {
        ret = VIR_DAEMON_ERR_INIT;
        goto cleanup;
1432
    }
1433

1434 1435 1436 1437 1438 1439 1440 1441 1442 1443 1444 1445
    if (!(lxcProgram = virNetServerProgramNew(LXC_PROGRAM,
                                              LXC_PROTOCOL_VERSION,
                                              lxcProcs,
                                              lxcNProcs))) {
        ret = VIR_DAEMON_ERR_INIT;
        goto cleanup;
    }
    if (virNetServerAddProgram(srv, lxcProgram) < 0) {
        ret = VIR_DAEMON_ERR_INIT;
        goto cleanup;
    }

1446 1447 1448 1449 1450 1451 1452 1453 1454 1455
    if (!(qemuProgram = virNetServerProgramNew(QEMU_PROGRAM,
                                               QEMU_PROTOCOL_VERSION,
                                               qemuProcs,
                                               qemuNProcs))) {
        ret = VIR_DAEMON_ERR_INIT;
        goto cleanup;
    }
    if (virNetServerAddProgram(srv, qemuProgram) < 0) {
        ret = VIR_DAEMON_ERR_INIT;
        goto cleanup;
1456
    }
1457

1458 1459 1460 1461 1462 1463 1464 1465 1466 1467 1468 1469 1470 1471 1472 1473 1474 1475 1476 1477 1478 1479 1480 1481 1482 1483 1484 1485 1486 1487 1488 1489 1490 1491
    if (!(srvAdm = virNetServerNew(config->admin_min_workers,
                                   config->admin_max_workers,
                                   0,
                                   config->admin_max_clients,
                                   0,
                                   config->admin_keepalive_interval,
                                   config->admin_keepalive_count,
                                   !!config->admin_keepalive_required,
                                   NULL,
                                   remoteAdmClientInitHook,
                                   NULL,
                                   remoteAdmClientFreeFunc,
                                   dmn))) {
        ret = VIR_DAEMON_ERR_INIT;
        goto cleanup;
    }

    if (virNetDaemonAddServer(dmn, srvAdm) < 0) {
        ret = VIR_DAEMON_ERR_INIT;
        goto cleanup;
    }

    if (!(adminProgram = virNetServerProgramNew(ADMIN_PROGRAM,
                                                ADMIN_PROTOCOL_VERSION,
                                                adminProcs,
                                                adminNProcs))) {
        ret = VIR_DAEMON_ERR_INIT;
        goto cleanup;
    }
    if (virNetServerAddProgram(srvAdm, adminProgram) < 0) {
        ret = VIR_DAEMON_ERR_INIT;
        goto cleanup;
    }

1492 1493
    if (timeout != -1) {
        VIR_DEBUG("Registering shutdown timeout %d", timeout);
1494
        virNetDaemonAutoShutdown(dmn, timeout);
1495
    }
1496

1497
    if ((daemonSetupSignals(dmn)) < 0) {
1498 1499
        ret = VIR_DAEMON_ERR_SIGNAL;
        goto cleanup;
1500
    }
D
Daniel P. Berrange 已提交
1501

1502
    if (config->audit_level) {
1503
        VIR_DEBUG("Attempting to configure auditing subsystem");
1504
        if (virAuditOpen() < 0) {
1505
            if (config->audit_level > 1) {
1506
                ret = VIR_DAEMON_ERR_AUDIT;
1507
                goto cleanup;
1508
            }
1509
            VIR_DEBUG("Proceeding without auditing");
1510 1511
        }
    }
E
Eric Blake 已提交
1512
    virAuditLog(config->audit_logging > 0);
1513

1514
    /* setup the hooks if any */
1515
    if (virHookInitialize() < 0) {
1516
        ret = VIR_DAEMON_ERR_HOOKS;
1517
        goto cleanup;
1518 1519
    }

1520
    /* Disable error func, now logging is setup */
1521
    virSetErrorFunc(NULL, daemonErrorHandler);
1522
    virSetErrorLogPriorityFunc(daemonErrorLogFilter);
1523

1524 1525 1526 1527 1528 1529
    /*
     * Call the daemon startup hook
     * TODO: should we abort the daemon startup if the script returned
     *       an error ?
     */
    virHookCall(VIR_HOOK_DRIVER_DAEMON, "-", VIR_HOOK_DAEMON_OP_START,
1530
                0, "start", NULL, NULL);
1531

1532 1533 1534 1535 1536
    if (daemonSetupNetworking(srv, srvAdm,
                              config,
                              sock_file,
                              sock_file_ro,
                              sock_file_adm,
1537
                              ipsock, privileged) < 0) {
1538
        ret = VIR_DAEMON_ERR_NETWORK;
1539
        goto cleanup;
1540 1541
    }

1542 1543 1544 1545 1546 1547 1548 1549 1550
    /* Tell parent of daemon that basic initialization is complete
     * In particular we're ready to accept net connections & have
     * written the pidfile
     */
    if (statuswrite != -1) {
        char status = 0;
        while (write(statuswrite, &status, 1) == -1 &&
               errno == EINTR)
            ;
1551
        VIR_FORCE_CLOSE(statuswrite);
1552 1553
    }

1554
    /* Initialize drivers & then start accepting new clients from network */
1555
    if (daemonStateInit(dmn) < 0) {
1556 1557
        ret = VIR_DAEMON_ERR_INIT;
        goto cleanup;
1558
    }
D
Daniel P. Berrange 已提交
1559

1560
#if defined(__linux__) && defined(NETLINK_ROUTE)
1561 1562
    /* Register the netlink event service for NETLINK_ROUTE */
    if (virNetlinkEventServiceStart(NETLINK_ROUTE, 0) < 0) {
1563 1564 1565
        ret = VIR_DAEMON_ERR_NETWORK;
        goto cleanup;
    }
1566
#endif
1567

1568
#if defined(__linux__) && defined(NETLINK_KOBJECT_UEVENT)
T
Tang Chen 已提交
1569 1570 1571 1572 1573
    /* Register the netlink event service for NETLINK_KOBJECT_UEVENT */
    if (virNetlinkEventServiceStart(NETLINK_KOBJECT_UEVENT, 1) < 0) {
        ret = VIR_DAEMON_ERR_NETWORK;
        goto cleanup;
    }
1574
#endif
T
Tang Chen 已提交
1575

1576
    /* Run event loop. */
1577
    virNetDaemonRun(dmn);
1578

1579 1580
    ret = 0;

1581
    virHookCall(VIR_HOOK_DRIVER_DAEMON, "-", VIR_HOOK_DAEMON_OP_SHUTDOWN,
1582
                0, "shutdown", NULL, NULL);
1583

1584
 cleanup:
1585
    virNetlinkEventServiceStopAll();
1586
    virObjectUnref(remoteProgram);
1587
    virObjectUnref(lxcProgram);
1588
    virObjectUnref(qemuProgram);
1589
    virObjectUnref(adminProgram);
1590 1591
    virNetDaemonClose(dmn);
    virObjectUnref(dmn);
1592
    virObjectUnref(srv);
1593
    virObjectUnref(srvAdm);
1594
    virNetlinkShutdown();
1595 1596 1597 1598 1599 1600 1601 1602
    if (statuswrite != -1) {
        if (ret != 0) {
            /* Tell parent of daemon what failed */
            char status = ret;
            while (write(statuswrite, &status, 1) == -1 &&
                   errno == EINTR)
                ;
        }
1603
        VIR_FORCE_CLOSE(statuswrite);
1604
    }
1605 1606
    if (pid_file_fd != -1)
        virPidFileReleasePath(pid_file, pid_file_fd);
1607 1608 1609

    VIR_FREE(sock_file);
    VIR_FREE(sock_file_ro);
1610
    VIR_FREE(sock_file_adm);
1611 1612
    VIR_FREE(pid_file);
    VIR_FREE(remote_config_file);
1613 1614
    VIR_FREE(run_dir);

1615 1616
    daemonConfigFree(config);

1617 1618
    if (driversInitialized) {
        driversInitialized = false;
1619
        virStateCleanup();
1620
    }
1621

1622
    return ret;
D
Daniel P. Berrange 已提交
1623
}