libvirtd.c 49.8 KB
Newer Older
D
Daniel P. Berrange 已提交
1
/*
D
Daniel P. Berrange 已提交
2
 * libvirtd.c: daemon start of day, guest process & i/o management
D
Daniel P. Berrange 已提交
3
 *
4
 * Copyright (C) 2006-2015 Red Hat, Inc.
D
Daniel P. Berrange 已提交
5 6 7 8 9 10 11 12 13 14 15 16 17
 * Copyright (C) 2006 Daniel P. Berrange
 *
 * This library is free software; you can redistribute it and/or
 * modify it under the terms of the GNU Lesser General Public
 * License as published by the Free Software Foundation; either
 * version 2.1 of the License, or (at your option) any later version.
 *
 * This library is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * Lesser General Public License for more details.
 *
 * You should have received a copy of the GNU Lesser General Public
18
 * License along with this library.  If not, see
O
Osier Yang 已提交
19
 * <http://www.gnu.org/licenses/>.
D
Daniel P. Berrange 已提交
20 21 22 23
 *
 * Author: Daniel P. Berrange <berrange@redhat.com>
 */

24
#include <config.h>
25

D
Daniel P. Berrange 已提交
26 27
#include <unistd.h>
#include <fcntl.h>
28 29
#include <sys/wait.h>
#include <sys/stat.h>
D
Daniel P. Berrange 已提交
30
#include <getopt.h>
31
#include <stdlib.h>
32
#include <grp.h>
33

34
#include "libvirt_internal.h"
35
#include "virerror.h"
E
Eric Blake 已提交
36
#include "virfile.h"
37
#include "virlog.h"
38
#include "virpidfile.h"
39
#include "virprocess.h"
40

41 42
#define VIR_FROM_THIS VIR_FROM_QEMU

D
Daniel P. Berrange 已提交
43
#include "libvirtd.h"
44
#include "libvirtd-config.h"
45

46
#include "admin.h"
47
#include "viruuid.h"
48
#include "remote_driver.h"
49
#include "viralloc.h"
50
#include "virconf.h"
51
#include "virnetlink.h"
52
#include "virnetdaemon.h"
53
#include "remote.h"
54
#include "virhook.h"
55
#include "viraudit.h"
56
#include "virstring.h"
57 58
#include "locking/lock_manager.h"
#include "viraccessmanager.h"
59
#include "virutil.h"
60
#include "virgettext.h"
D
Daniel P. Berrange 已提交
61

62
#ifdef WITH_DRIVER_MODULES
63
# include "driver.h"
64
#else
65 66 67 68 69 70
# ifdef WITH_QEMU
#  include "qemu/qemu_driver.h"
# endif
# ifdef WITH_LXC
#  include "lxc/lxc_driver.h"
# endif
71 72 73
# ifdef WITH_XEN
#  include "xen/xen_driver.h"
# endif
J
Jim Fehlig 已提交
74 75 76
# ifdef WITH_LIBXL
#  include "libxl/libxl_driver.h"
# endif
77 78 79
# ifdef WITH_UML
#  include "uml/uml_driver.h"
# endif
80 81 82
# ifdef WITH_VBOX
#  include "vbox/vbox_driver.h"
# endif
R
Roman Bogorodskiy 已提交
83 84 85
# ifdef WITH_BHYVE
#  include "bhyve/bhyve_driver.h"
# endif
86 87 88
# ifdef WITH_NETWORK
#  include "network/bridge_driver.h"
# endif
89 90
# ifdef WITH_INTERFACE
#  include "interface/interface_driver.h"
91
# endif
92
# ifdef WITH_STORAGE
93 94 95 96 97 98 99 100
#  include "storage/storage_driver.h"
# endif
# ifdef WITH_NODE_DEVICES
#  include "node_device/node_device_driver.h"
# endif
# ifdef WITH_SECRETS
#  include "secret/secret_driver.h"
# endif
101 102 103
# ifdef WITH_NWFILTER
#  include "nwfilter/nwfilter_driver.h"
# endif
104
#endif
105 106 107
#ifdef WITH_VZ
# include "vz/vz_driver.h"
#endif
108

109 110
#include "configmake.h"

111 112
#include "virdbus.h"

113 114
VIR_LOG_INIT("daemon.libvirtd");

115
#if WITH_SASL
116
virNetSASLContextPtr saslCtxt = NULL;
117
#endif
118
virNetServerProgramPtr remoteProgram = NULL;
119
virNetServerProgramPtr adminProgram = NULL;
120
virNetServerProgramPtr qemuProgram = NULL;
121
virNetServerProgramPtr lxcProgram = NULL;
122

123 124
volatile bool driversInitialized = false;

125 126 127 128 129 130 131 132 133
enum {
    VIR_DAEMON_ERR_NONE = 0,
    VIR_DAEMON_ERR_PIDFILE,
    VIR_DAEMON_ERR_RUNDIR,
    VIR_DAEMON_ERR_INIT,
    VIR_DAEMON_ERR_SIGNAL,
    VIR_DAEMON_ERR_PRIVS,
    VIR_DAEMON_ERR_NETWORK,
    VIR_DAEMON_ERR_CONFIG,
134
    VIR_DAEMON_ERR_HOOKS,
135
    VIR_DAEMON_ERR_AUDIT,
136 137 138 139 140 141 142 143 144 145 146 147 148

    VIR_DAEMON_ERR_LAST
};

VIR_ENUM_DECL(virDaemonErr)
VIR_ENUM_IMPL(virDaemonErr, VIR_DAEMON_ERR_LAST,
              "Initialization successful",
              "Unable to obtain pidfile",
              "Unable to create rundir",
              "Unable to initialize libvirt",
              "Unable to setup signal handlers",
              "Unable to drop privileges",
              "Unable to initialize network sockets",
149
              "Unable to load configuration file",
150 151
              "Unable to look for hook scripts",
              "Unable to initialize audit system")
152

153
static int daemonForkIntoBackground(const char *argv0)
154
{
155 156 157 158
    int statuspipe[2];
    if (pipe(statuspipe) < 0)
        return -1;

159
    pid_t pid = fork();
D
Daniel P. Berrange 已提交
160 161 162
    switch (pid) {
    case 0:
        {
E
Eric Blake 已提交
163
            /* intermediate child */
D
Daniel P. Berrange 已提交
164 165
            int stdinfd = -1;
            int stdoutfd = -1;
166
            int nextpid;
D
Daniel P. Berrange 已提交
167

168
            VIR_FORCE_CLOSE(statuspipe[0]);
169

170
            if ((stdinfd = open("/dev/null", O_RDONLY)) <= STDERR_FILENO)
D
Daniel P. Berrange 已提交
171
                goto cleanup;
172
            if ((stdoutfd = open("/dev/null", O_WRONLY)) <= STDERR_FILENO)
D
Daniel P. Berrange 已提交
173 174 175 176 177 178 179
                goto cleanup;
            if (dup2(stdinfd, STDIN_FILENO) != STDIN_FILENO)
                goto cleanup;
            if (dup2(stdoutfd, STDOUT_FILENO) != STDOUT_FILENO)
                goto cleanup;
            if (dup2(stdoutfd, STDERR_FILENO) != STDERR_FILENO)
                goto cleanup;
180
            if (VIR_CLOSE(stdinfd) < 0)
D
Daniel P. Berrange 已提交
181
                goto cleanup;
182
            if (VIR_CLOSE(stdoutfd) < 0)
D
Daniel P. Berrange 已提交
183 184 185 186 187 188 189
                goto cleanup;

            if (setsid() < 0)
                goto cleanup;

            nextpid = fork();
            switch (nextpid) {
E
Eric Blake 已提交
190
            case 0: /* grandchild */
191
                return statuspipe[1];
E
Eric Blake 已提交
192 193 194 195
            case -1: /* error */
                goto cleanup;
            default: /* intermediate child succeeded */
                _exit(EXIT_SUCCESS);
D
Daniel P. Berrange 已提交
196 197 198
            }

        cleanup:
199 200
            VIR_FORCE_CLOSE(stdoutfd);
            VIR_FORCE_CLOSE(stdinfd);
E
Eric Blake 已提交
201 202
            VIR_FORCE_CLOSE(statuspipe[1]);
            _exit(EXIT_FAILURE);
D
Daniel P. Berrange 已提交
203 204 205

        }

E
Eric Blake 已提交
206 207
    case -1: /* error in parent */
        goto error;
D
Daniel P. Berrange 已提交
208 209 210

    default:
        {
E
Eric Blake 已提交
211
            /* parent */
212 213 214
            int ret;
            char status;

215
            VIR_FORCE_CLOSE(statuspipe[1]);
216 217

            /* We wait to make sure the first child forked successfully */
218
            if (virProcessWait(pid, NULL, false) < 0)
E
Eric Blake 已提交
219
                goto error;
220

E
Eric Blake 已提交
221 222 223
            /* If we get here, then the grandchild was spawned, so we
             * must exit.  Block until the second child initializes
             * successfully */
224 225 226 227 228
        again:
            ret = read(statuspipe[0], &status, 1);
            if (ret == -1 && errno == EINTR)
                goto again;

E
Eric Blake 已提交
229 230 231 232 233
            VIR_FORCE_CLOSE(statuspipe[0]);

            if (ret != 1) {
                char ebuf[1024];

234
                fprintf(stderr,
E
Eric Blake 已提交
235 236 237 238 239 240 241 242
                        _("%s: error: unable to determine if daemon is "
                          "running: %s\n"), argv0,
                        virStrerror(errno, ebuf, sizeof(ebuf)));
                exit(EXIT_FAILURE);
            } else if (status != 0) {
                fprintf(stderr,
                        _("%s: error: %s. Check /var/log/messages or run "
                          "without --daemon for more info.\n"), argv0,
243
                        virDaemonErrTypeToString(status));
E
Eric Blake 已提交
244
                exit(EXIT_FAILURE);
245
            }
E
Eric Blake 已提交
246
            _exit(EXIT_SUCCESS);
D
Daniel P. Berrange 已提交
247 248
        }
    }
E
Eric Blake 已提交
249

250
 error:
E
Eric Blake 已提交
251 252 253
    VIR_FORCE_CLOSE(statuspipe[0]);
    VIR_FORCE_CLOSE(statuspipe[1]);
    return -1;
D
Daniel P. Berrange 已提交
254 255
}

256

257 258 259 260
static int
daemonUnixSocketPaths(struct daemonConfig *config,
                      bool privileged,
                      char **sockfile,
261 262
                      char **rosockfile,
                      char **admsockfile)
J
John Levon 已提交
263
{
264 265
    if (config->unix_sock_dir) {
        if (virAsprintf(sockfile, "%s/libvirt-sock", config->unix_sock_dir) < 0)
266
            goto error;
267 268 269 270 271 272 273

        if (privileged) {
            if (virAsprintf(rosockfile, "%s/libvirt-sock-ro", config->unix_sock_dir) < 0)
                goto error;
            if (virAsprintf(admsockfile, "%s/libvirt-admin-sock", config->unix_sock_dir) < 0)
                goto error;
        }
D
Daniel P. Berrange 已提交
274
    } else {
275
        if (privileged) {
276
            if (VIR_STRDUP(*sockfile, LOCALSTATEDIR "/run/libvirt/libvirt-sock") < 0 ||
277 278
                VIR_STRDUP(*rosockfile, LOCALSTATEDIR "/run/libvirt/libvirt-sock-ro") < 0 ||
                VIR_STRDUP(*admsockfile, LOCALSTATEDIR "/run/libvirt/libvirt-admin-sock") < 0)
279
                goto error;
280
        } else {
281 282
            char *rundir = NULL;
            mode_t old_umask;
283

284
            if (!(rundir = virGetUserRuntimeDirectory()))
285
                goto error;
286

287 288 289 290 291 292 293
            old_umask = umask(077);
            if (virFileMakePath(rundir) < 0) {
                umask(old_umask);
                goto error;
            }
            umask(old_umask);

294 295
            if (virAsprintf(sockfile, "%s/libvirt-sock", rundir) < 0 ||
                virAsprintf(admsockfile, "%s/libvirt-admin-sock", rundir) < 0) {
296
                VIR_FREE(rundir);
297
                goto error;
298
            }
299

300
            VIR_FREE(rundir);
301 302 303
        }
    }
    return 0;
304

305
 error:
306
    return -1;
D
Daniel P. Berrange 已提交
307 308
}

309 310 311

static void daemonErrorHandler(void *opaque ATTRIBUTE_UNUSED,
                               virErrorPtr err ATTRIBUTE_UNUSED)
312 313 314 315 316
{
    /* Don't do anything, since logging infrastructure already
     * took care of reporting the error */
}

317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333
static int daemonErrorLogFilter(virErrorPtr err, int priority)
{
    /* These error codes don't really reflect real errors. They
     * are expected events that occur when an app tries to check
     * whether a particular guest already exists. This filters
     * them to a lower log level to prevent pollution of syslog
     */
    switch (err->code) {
    case VIR_ERR_NO_DOMAIN:
    case VIR_ERR_NO_NETWORK:
    case VIR_ERR_NO_STORAGE_POOL:
    case VIR_ERR_NO_STORAGE_VOL:
    case VIR_ERR_NO_NODE_DEVICE:
    case VIR_ERR_NO_INTERFACE:
    case VIR_ERR_NO_NWFILTER:
    case VIR_ERR_NO_SECRET:
    case VIR_ERR_NO_DOMAIN_SNAPSHOT:
334
    case VIR_ERR_OPERATION_INVALID:
335
    case VIR_ERR_NO_DOMAIN_METADATA:
336 337
    case VIR_ERR_NO_SERVER:
    case VIR_ERR_NO_CLIENT:
338 339 340 341 342 343
        return VIR_LOG_DEBUG;
    }

    return priority;
}

344 345
static void daemonInitialize(void)
{
346 347
    /*
     * Note that the order is important: the first ones have a higher
348 349 350
     * priority when calling virStateInitialize. We must register the
     * network, storage and nodedev drivers before any stateful domain
     * driver, since their resources must be auto-started before any
351
     * domains can be auto-started.
352
     */
353 354 355
#ifdef WITH_DRIVER_MODULES
    /* We don't care if any of these fail, because the whole point
     * is to allow users to only install modules they want to use.
D
Dan Kenigsberg 已提交
356
     * If they try to open a connection for a module that
357 358
     * is not loaded they'll get a suitable error at that point
     */
359
# ifdef WITH_NETWORK
360
    virDriverLoadModule("network");
361
# endif
362 363 364
# ifdef WITH_INTERFACE
    virDriverLoadModule("interface");
# endif
365
# ifdef WITH_STORAGE
366
    virDriverLoadModule("storage");
367 368
# endif
# ifdef WITH_NODE_DEVICES
369
    virDriverLoadModule("nodedev");
370 371
# endif
# ifdef WITH_SECRETS
372
    virDriverLoadModule("secret");
373 374 375 376
# endif
# ifdef WITH_NWFILTER
    virDriverLoadModule("nwfilter");
# endif
377 378 379 380 381 382
# ifdef WITH_XEN
    virDriverLoadModule("xen");
# endif
# ifdef WITH_LIBXL
    virDriverLoadModule("libxl");
# endif
383
# ifdef WITH_QEMU
384
    virDriverLoadModule("qemu");
385 386
# endif
# ifdef WITH_LXC
387
    virDriverLoadModule("lxc");
388 389
# endif
# ifdef WITH_UML
390
    virDriverLoadModule("uml");
391
# endif
M
Michal Privoznik 已提交
392 393 394
# ifdef WITH_VBOX
    virDriverLoadModule("vbox");
# endif
R
Roman Bogorodskiy 已提交
395 396 397
# ifdef WITH_BHYVE
    virDriverLoadModule("bhyve");
# endif
398 399 400
# ifdef WITH_VZ
    virDriverLoadModule("vz");
# endif
401
#else
402
# ifdef WITH_NETWORK
403
    networkRegister();
404
# endif
405
# ifdef WITH_INTERFACE
406
    interfaceRegister();
407
# endif
408
# ifdef WITH_STORAGE
409
    storageRegister();
410
# endif
411
# ifdef WITH_NODE_DEVICES
412
    nodedevRegister();
413 414
# endif
# ifdef WITH_SECRETS
415
    secretRegister();
416
# endif
417 418 419
# ifdef WITH_NWFILTER
    nwfilterRegister();
# endif
420 421 422
# ifdef WITH_XEN
    xenRegister();
# endif
J
Jim Fehlig 已提交
423 424 425
# ifdef WITH_LIBXL
    libxlRegister();
# endif
426
# ifdef WITH_QEMU
427
    qemuRegister();
428 429
# endif
# ifdef WITH_LXC
430
    lxcRegister();
431 432
# endif
# ifdef WITH_UML
433
    umlRegister();
434
# endif
M
Michal Privoznik 已提交
435 436 437
# ifdef WITH_VBOX
    vboxRegister();
# endif
R
Roman Bogorodskiy 已提交
438 439 440
# ifdef WITH_BHYVE
    bhyveRegister();
# endif
441 442 443
# ifdef WITH_VZ
    vzRegister();
# endif
444
#endif
445 446 447
}


448 449
static int ATTRIBUTE_NONNULL(3)
daemonSetupNetworking(virNetServerPtr srv,
450
                      virNetServerPtr srvAdm,
451 452 453
                      struct daemonConfig *config,
                      const char *sock_path,
                      const char *sock_path_ro,
454
                      const char *sock_path_adm,
455 456
                      bool ipsock,
                      bool privileged)
457 458
{
    virNetServerServicePtr svc = NULL;
459
    virNetServerServicePtr svcAdm = NULL;
460 461
    virNetServerServicePtr svcRO = NULL;
    virNetServerServicePtr svcTCP = NULL;
462
#if WITH_GNUTLS
463
    virNetServerServicePtr svcTLS = NULL;
464
#endif
465 466 467
    gid_t unix_sock_gid = 0;
    int unix_sock_ro_mask = 0;
    int unix_sock_rw_mask = 0;
468
    int unix_sock_adm_mask = 0;
469
    int ret = -1;
470

471 472 473
    unsigned int cur_fd = STDERR_FILENO + 1;
    unsigned int nfds = virGetListenFDs();

474 475
    if (config->unix_sock_group) {
        if (virGetGroupID(config->unix_sock_group, &unix_sock_gid) < 0)
476
            return ret;
477
    }
478

479
    if (nfds > (sock_path_ro ? 2 : 1)) {
480
        VIR_ERROR(_("Too many (%u) FDs passed from caller"), nfds);
481
        return ret;
482 483
    }

484 485
    if (virStrToLong_i(config->unix_sock_ro_perms, NULL, 8, &unix_sock_ro_mask) != 0) {
        VIR_ERROR(_("Failed to parse mode '%s'"), config->unix_sock_ro_perms);
486
        goto cleanup;
487
    }
488

489 490
    if (virStrToLong_i(config->unix_sock_admin_perms, NULL, 8, &unix_sock_adm_mask) != 0) {
        VIR_ERROR(_("Failed to parse mode '%s'"), config->unix_sock_admin_perms);
491
        goto cleanup;
492 493
    }

494 495
    if (virStrToLong_i(config->unix_sock_rw_perms, NULL, 8, &unix_sock_rw_mask) != 0) {
        VIR_ERROR(_("Failed to parse mode '%s'"), config->unix_sock_rw_perms);
496
        goto cleanup;
497
    }
498

499 500 501 502
    if (!(svc = virNetServerServiceNewFDOrUNIX(sock_path,
                                               unix_sock_rw_mask,
                                               unix_sock_gid,
                                               config->auth_unix_rw,
503
#if WITH_GNUTLS
504
                                               NULL,
505
#endif
506 507 508 509
                                               false,
                                               config->max_queued_clients,
                                               config->max_client_requests,
                                               nfds, &cur_fd)))
510
        goto cleanup;
511
    if (sock_path_ro) {
512 513 514 515
        if (!(svcRO = virNetServerServiceNewFDOrUNIX(sock_path_ro,
                                                     unix_sock_ro_mask,
                                                     unix_sock_gid,
                                                     config->auth_unix_ro,
516
#if WITH_GNUTLS
517
                                                     NULL,
518
#endif
519 520 521 522
                                                     true,
                                                     config->max_queued_clients,
                                                     config->max_client_requests,
                                                     nfds, &cur_fd)))
523
            goto cleanup;
524
    }
525

526 527 528 529
    if (virNetServerAddService(srv, svc,
                               config->mdns_adv && !ipsock ?
                               "_libvirt._tcp" :
                               NULL) < 0)
530
        goto cleanup;
531

532 533
    if (svcRO &&
        virNetServerAddService(srv, svcRO, NULL) < 0)
534
        goto cleanup;
535

536 537
    /* Temporarily disabled */
    if (sock_path_adm && false) {
538 539 540 541 542 543 544 545
        VIR_DEBUG("Registering unix socket %s", sock_path_adm);
        if (!(svcAdm = virNetServerServiceNewUNIX(sock_path_adm,
                                                  unix_sock_adm_mask,
                                                  unix_sock_gid,
                                                  REMOTE_AUTH_NONE,
#if WITH_GNUTLS
                                                  NULL,
#endif
546
                                                  false,
547 548
                                                  config->admin_max_queued_clients,
                                                  config->admin_max_client_requests)))
549
            goto cleanup;
550

551
        if (virNetServerAddService(srvAdm, svcAdm, NULL) < 0)
552
            goto cleanup;
553
    }
554

555
    if (ipsock) {
556
        if (config->listen_tcp) {
557 558
            VIR_DEBUG("Registering TCP socket %s:%s",
                      config->listen_addr, config->tcp_port);
559 560
            if (!(svcTCP = virNetServerServiceNewTCP(config->listen_addr,
                                                     config->tcp_port,
561
                                                     AF_UNSPEC,
562
                                                     config->auth_tcp,
563
#if WITH_GNUTLS
564 565
                                                     NULL,
#endif
566
                                                     false,
M
Michal Privoznik 已提交
567
                                                     config->max_queued_clients,
568
                                                     config->max_client_requests)))
569
                goto cleanup;
570

571 572
            if (virNetServerAddService(srv, svcTCP,
                                       config->mdns_adv ? "_libvirt._tcp" : NULL) < 0)
573
                goto cleanup;
574 575
        }

576
#if WITH_GNUTLS
577 578
        if (config->listen_tls) {
            virNetTLSContextPtr ctxt = NULL;
579

580 581 582 583 584 585 586 587
            if (config->ca_file ||
                config->cert_file ||
                config->key_file) {
                if (!(ctxt = virNetTLSContextNewServer(config->ca_file,
                                                       config->crl_file,
                                                       config->cert_file,
                                                       config->key_file,
                                                       (const char *const*)config->tls_allowed_dn_list,
588
                                                       config->tls_no_sanity_certificate ? false : true,
589
                                                       config->tls_no_verify_certificate ? false : true)))
590
                    goto cleanup;
591 592 593 594
            } else {
                if (!(ctxt = virNetTLSContextNewServerPath(NULL,
                                                           !privileged,
                                                           (const char *const*)config->tls_allowed_dn_list,
595
                                                           config->tls_no_sanity_certificate ? false : true,
596
                                                           config->tls_no_verify_certificate ? false : true)))
597
                    goto cleanup;
598 599
            }

600 601
            VIR_DEBUG("Registering TLS socket %s:%s",
                      config->listen_addr, config->tls_port);
602 603 604
            if (!(svcTLS =
                  virNetServerServiceNewTCP(config->listen_addr,
                                            config->tls_port,
605
                                            AF_UNSPEC,
606
                                            config->auth_tls,
607
                                            ctxt,
608
                                            false,
M
Michal Privoznik 已提交
609
                                            config->max_queued_clients,
610
                                            config->max_client_requests))) {
611
                virObjectUnref(ctxt);
612
                goto cleanup;
613
            }
614 615 616
            if (virNetServerAddService(srv, svcTLS,
                                       config->mdns_adv &&
                                       !config->listen_tcp ? "_libvirt._tcp" : NULL) < 0)
617
                goto cleanup;
618

619
            virObjectUnref(ctxt);
620
        }
621 622 623 624 625
#else
        (void)privileged;
        if (config->listen_tls) {
            virReportError(VIR_ERR_CONFIG_UNSUPPORTED, "%s",
                           _("This libvirtd build does not support TLS"));
626
            goto cleanup;
627 628
        }
#endif
629 630
    }

631
#if WITH_SASL
632 633
    if (config->auth_unix_rw == REMOTE_AUTH_SASL ||
        config->auth_unix_ro == REMOTE_AUTH_SASL ||
634
# if WITH_GNUTLS
635 636 637
        config->auth_tls == REMOTE_AUTH_SASL ||
# endif
        config->auth_tcp == REMOTE_AUTH_SASL) {
638 639 640
        saslCtxt = virNetSASLContextNewServer(
            (const char *const*)config->sasl_allowed_username_list);
        if (!saslCtxt)
641
            goto cleanup;
D
Daniel P. Berrange 已提交
642
    }
643
#endif
D
Daniel P. Berrange 已提交
644

645
    ret = 0;
646

647
 cleanup:
648
#if WITH_GNUTLS
649
    virObjectUnref(svcTLS);
650
#endif
651 652
    virObjectUnref(svcTCP);
    virObjectUnref(svcRO);
653
    virObjectUnref(svcAdm);
654 655
    virObjectUnref(svc);
    return ret;
D
Daniel P. Berrange 已提交
656 657 658
}


659 660
/*
 * Set up the logging environment
661 662
 * By default if daemonized all errors go to the logfile libvirtd.log,
 * but if verbose or error debugging is asked for then also output
663
 * informational and debug messages. Default size if 64 kB.
664
 */
665
static int
666 667 668 669
daemonSetupLogging(struct daemonConfig *config,
                   bool privileged,
                   bool verbose,
                   bool godaemon)
670
{
671 672
    virLogReset();

673
    /*
674 675 676 677 678 679 680 681 682 683 684 685
     * Libvirtd's order of precedence is:
     * cmdline > environment > config
     *
     * In order to achieve this, we must process configuration in
     * different order for the log level versus the filters and
     * outputs. Because filters and outputs append, we have to look at
     * the environment first and then only check the config file if
     * there was no result from the environment. The default output is
     * then applied only if there was no setting from either of the
     * first two. Because we don't have a way to determine if the log
     * level has been set, we must process variables in the opposite
     * order, each one overriding the previous.
686
     */
687 688
    if (config->log_level != 0)
        virLogSetDefaultPriority(config->log_level);
689

690
    virLogSetFromEnv();
691

692 693 694 695 696
    if (virLogGetNbFilters() == 0)
        virLogParseFilters(config->log_filters);

    if (virLogGetNbOutputs() == 0)
        virLogParseOutputs(config->log_outputs);
697

698 699 700 701 702 703
    /*
     * Command line override for --verbose
     */
    if ((verbose) && (virLogGetDefaultPriority() > VIR_LOG_INFO))
        virLogSetDefaultPriority(VIR_LOG_INFO);

704
    /*
705 706 707 708
     * If no defined outputs, and either running
     * as daemon or not on a tty, then first try
     * to direct it to the systemd journal
     * (if it exists)....
709
     */
710 711
    if (virLogGetNbOutputs() == 0 &&
        (godaemon || !isatty(STDIN_FILENO))) {
712 713
        char *tmp;
        if (access("/run/systemd/journal/socket", W_OK) >= 0) {
714 715 716 717 718 719 720 721
            virLogPriority priority = virLogGetDefaultPriority();

            /* By default we don't want to log too much stuff into journald as
             * it may employ rate limiting and thus block libvirt execution. */
            if (priority == VIR_LOG_DEBUG)
                priority = VIR_LOG_INFO;

            if (virAsprintf(&tmp, "%d:journald", priority) < 0)
722
                goto error;
723 724 725 726 727 728 729
            virLogParseOutputs(tmp);
            VIR_FREE(tmp);
        }
    }

    /*
     * otherwise direct to libvirtd.log when running
730
     * as daemon. Otherwise the default output is stderr.
731
     */
732
    if (virLogGetNbOutputs() == 0) {
733
        char *tmp = NULL;
734

735
        if (godaemon) {
736
            if (privileged) {
737 738 739
                if (virAsprintf(&tmp, "%d:file:%s/log/libvirt/libvirtd.log",
                                virLogGetDefaultPriority(),
                                LOCALSTATEDIR) == -1)
740
                    goto error;
741
            } else {
742
                char *logdir = virGetUserCacheDirectory();
743 744 745 746 747 748 749 750
                mode_t old_umask;

                if (!logdir)
                    goto error;

                old_umask = umask(077);
                if (virFileMakePath(logdir) < 0) {
                    umask(old_umask);
751
                    goto error;
752 753
                }
                umask(old_umask);
754

755 756 757
                if (virAsprintf(&tmp, "%d:file:%s/libvirtd.log",
                                virLogGetDefaultPriority(), logdir) == -1) {
                    VIR_FREE(logdir);
758
                    goto error;
E
Eric Blake 已提交
759
                }
760
                VIR_FREE(logdir);
761
            }
762
        } else {
763
            if (virAsprintf(&tmp, "%d:stderr", virLogGetDefaultPriority()) < 0)
764
                goto error;
765
        }
766 767
        virLogParseOutputs(tmp);
        VIR_FREE(tmp);
768
    }
769

770 771
    return 0;

772
 error:
773 774 775
    return -1;
}

776

777 778 779 780 781
static int
daemonSetupAccessManager(struct daemonConfig *config)
{
    virAccessManagerPtr mgr;
    const char *none[] = { "none", NULL };
J
Ján Tomko 已提交
782
    const char **drv = (const char **)config->access_drivers;
783

J
Ján Tomko 已提交
784 785 786
    if (!drv ||
        !drv[0])
        drv = none;
787

J
Ján Tomko 已提交
788
    if (!(mgr = virAccessManagerNewStack(drv)))
789 790 791 792 793 794 795 796
        return -1;

    virAccessManagerSetDefault(mgr);
    virObjectUnref(mgr);
    return 0;
}


797 798
/* Display version information. */
static void
799
daemonVersion(const char *argv0)
800
{
801
    printf("%s (%s) %s\n", argv0, PACKAGE_NAME, PACKAGE_VERSION);
802 803
}

J
John Levon 已提交
804 805
#ifdef __sun
static int
806
daemonSetupPrivs(void)
J
John Levon 已提交
807
{
808
    chown("/var/run/libvirt", SYSTEM_UID, SYSTEM_UID);
J
John Levon 已提交
809

810 811
    if (__init_daemon_priv(PU_RESETGROUPS | PU_CLEARLIMITSET,
                           SYSTEM_UID, SYSTEM_UID, PRIV_XVM_CONTROL, NULL)) {
812
        VIR_ERROR(_("additional privileges are required"));
J
John Levon 已提交
813 814 815
        return -1;
    }

816 817
    if (priv_set(PRIV_OFF, PRIV_ALLSETS, PRIV_FILE_LINK_ANY, PRIV_PROC_INFO,
                 PRIV_PROC_SESSION, PRIV_PROC_EXEC, PRIV_PROC_FORK, NULL)) {
818
        VIR_ERROR(_("failed to set reduced privileges"));
J
John Levon 已提交
819 820 821 822 823 824
        return -1;
    }

    return 0;
}
#else
825
# define daemonSetupPrivs() 0
J
John Levon 已提交
826 827
#endif

828

829
static void daemonShutdownHandler(virNetDaemonPtr dmn,
830 831
                                  siginfo_t *sig ATTRIBUTE_UNUSED,
                                  void *opaque ATTRIBUTE_UNUSED)
832
{
833
    virNetDaemonQuit(dmn);
834
}
835

836
static void daemonReloadHandler(virNetDaemonPtr dmn ATTRIBUTE_UNUSED,
837 838 839
                                siginfo_t *sig ATTRIBUTE_UNUSED,
                                void *opaque ATTRIBUTE_UNUSED)
{
840 841 842 843 844
    if (!driversInitialized) {
        VIR_WARN("Drivers are not initialized, reload ignored");
        return;
    }

W
Wang Rui 已提交
845 846 847 848 849
    VIR_INFO("Reloading configuration on SIGHUP");
    virHookCall(VIR_HOOK_DRIVER_DAEMON, "-",
                VIR_HOOK_DAEMON_OP_RELOAD, SIGHUP, "SIGHUP", NULL, NULL);
    if (virStateReload() < 0)
        VIR_WARN("Error while reloading drivers");
850 851
}

852
static int daemonSetupSignals(virNetDaemonPtr dmn)
853
{
854
    if (virNetDaemonAddSignalHandler(dmn, SIGINT, daemonShutdownHandler, NULL) < 0)
855
        return -1;
856
    if (virNetDaemonAddSignalHandler(dmn, SIGQUIT, daemonShutdownHandler, NULL) < 0)
857
        return -1;
858
    if (virNetDaemonAddSignalHandler(dmn, SIGTERM, daemonShutdownHandler, NULL) < 0)
859
        return -1;
860
    if (virNetDaemonAddSignalHandler(dmn, SIGHUP, daemonReloadHandler, NULL) < 0)
861
        return -1;
862 863
    return 0;
}
864

865 866 867

static void daemonInhibitCallback(bool inhibit, void *opaque)
{
868
    virNetDaemonPtr dmn = opaque;
869 870

    if (inhibit)
871
        virNetDaemonAddShutdownInhibition(dmn);
872
    else
873
        virNetDaemonRemoveShutdownInhibition(dmn);
874 875 876
}


877 878 879 880 881 882
#ifdef HAVE_DBUS
static DBusConnection *sessionBus;
static DBusConnection *systemBus;

static void daemonStopWorker(void *opaque)
{
883
    virNetDaemonPtr dmn = opaque;
884

885
    VIR_DEBUG("Begin stop dmn=%p", dmn);
886 887 888

    ignore_value(virStateStop());

889
    VIR_DEBUG("Completed stop dmn=%p", dmn);
890 891

    /* Exit libvirtd cleanly */
892
    virNetDaemonQuit(dmn);
893 894 895 896
}


/* We do this in a thread to not block the main loop */
897
static void daemonStop(virNetDaemonPtr dmn)
898 899
{
    virThread thr;
900 901 902
    virObjectRef(dmn);
    if (virThreadCreate(&thr, false, daemonStopWorker, dmn) < 0)
        virObjectUnref(dmn);
903 904 905 906 907 908 909 910
}


static DBusHandlerResult
handleSessionMessageFunc(DBusConnection *connection ATTRIBUTE_UNUSED,
                         DBusMessage *message,
                         void *opaque)
{
911
    virNetDaemonPtr dmn = opaque;
912

913
    VIR_DEBUG("dmn=%p", dmn);
914 915 916 917

    if (dbus_message_is_signal(message,
                               DBUS_INTERFACE_LOCAL,
                               "Disconnected"))
918
        daemonStop(dmn);
919 920 921 922 923 924 925 926 927 928

    return DBUS_HANDLER_RESULT_NOT_YET_HANDLED;
}


static DBusHandlerResult
handleSystemMessageFunc(DBusConnection *connection ATTRIBUTE_UNUSED,
                        DBusMessage *message,
                        void *opaque)
{
929
    virNetDaemonPtr dmn = opaque;
930

931
    VIR_DEBUG("dmn=%p", dmn);
932 933 934 935

    if (dbus_message_is_signal(message,
                               "org.freedesktop.login1.Manager",
                               "PrepareForShutdown"))
936
        daemonStop(dmn);
937 938 939 940 941 942

    return DBUS_HANDLER_RESULT_NOT_YET_HANDLED;
}
#endif


943 944
static void daemonRunStateInit(void *opaque)
{
945
    virNetDaemonPtr dmn = opaque;
946 947 948
    virIdentityPtr sysident = virIdentityGetSystem();

    virIdentitySetCurrent(sysident);
949

950 951
    /* Since driver initialization can take time inhibit daemon shutdown until
       we're done so clients get a chance to connect */
952
    daemonInhibitCallback(true, dmn);
953

954
    /* Start the stateful HV drivers
E
Eric Blake 已提交
955
     * This is deliberately done after telling the parent process
956 957
     * we're ready, since it can take a long time and this will
     * seriously delay OS bootup process */
958
    if (virStateInitialize(virNetDaemonIsPrivileged(dmn),
959
                           daemonInhibitCallback,
960
                           dmn) < 0) {
961
        VIR_ERROR(_("Driver state initialization failed"));
962 963
        /* Ensure the main event loop quits */
        kill(getpid(), SIGTERM);
964
        goto cleanup;
965 966
    }

967 968
    driversInitialized = true;

969
#ifdef HAVE_DBUS
970
    /* Tie the non-privileged libvirtd to the session/shutdown lifecycle */
971
    if (!virNetDaemonIsPrivileged(dmn)) {
972 973 974 975

        sessionBus = virDBusGetSessionBus();
        if (sessionBus != NULL)
            dbus_connection_add_filter(sessionBus,
976
                                       handleSessionMessageFunc, dmn, NULL);
977 978 979 980

        systemBus = virDBusGetSystemBus();
        if (systemBus != NULL) {
            dbus_connection_add_filter(systemBus,
981
                                       handleSystemMessageFunc, dmn, NULL);
982 983 984 985 986 987
            dbus_bus_add_match(systemBus,
                               "type='signal',sender='org.freedesktop.login1', interface='org.freedesktop.login1.Manager'",
                               NULL);
        }
    }
#endif
988
    /* Only now accept clients from network */
989
    virNetDaemonUpdateServices(dmn, true);
990
 cleanup:
991 992
    daemonInhibitCallback(false, dmn);
    virObjectUnref(dmn);
993 994
    virObjectUnref(sysident);
    virIdentitySetCurrent(NULL);
995
}
996

997
static int daemonStateInit(virNetDaemonPtr dmn)
998 999
{
    virThread thr;
1000 1001 1002
    virObjectRef(dmn);
    if (virThreadCreate(&thr, false, daemonRunStateInit, dmn) < 0) {
        virObjectUnref(dmn);
1003 1004
        return -1;
    }
1005 1006 1007
    return 0;
}

1008 1009 1010 1011 1012 1013 1014 1015 1016 1017 1018
static int migrateProfile(void)
{
    char *old_base = NULL;
    char *updated = NULL;
    char *home = NULL;
    char *xdg_dir = NULL;
    char *config_dir = NULL;
    const char *config_home;
    int ret = -1;
    mode_t old_umask;

1019 1020
    VIR_DEBUG("Checking if user profile needs migrating");

1021
    if (!(home = virGetUserDirectory()))
1022 1023
        goto cleanup;

1024
    if (virAsprintf(&old_base, "%s/.libvirt", home) < 0)
1025 1026 1027
        goto cleanup;

    /* if the new directory is there or the old one is not: do nothing */
1028
    if (!(config_dir = virGetUserConfigDirectory()))
1029 1030 1031
        goto cleanup;

    if (!virFileIsDir(old_base) || virFileExists(config_dir)) {
1032 1033 1034
        VIR_DEBUG("No old profile in '%s' / "
                  "new profile directory already present '%s'",
                  old_base, config_dir);
1035 1036 1037 1038 1039
        ret = 0;
        goto cleanup;
    }

    /* test if we already attempted to migrate first */
1040
    if (virAsprintf(&updated, "%s/DEPRECATED-DIRECTORY", old_base) < 0)
1041
        goto cleanup;
1042
    if (virFileExists(updated))
1043 1044
        goto cleanup;

1045
    config_home = virGetEnvBlockSUID("XDG_CONFIG_HOME");
1046
    if (config_home && config_home[0] != '\0') {
1047 1048
        if (VIR_STRDUP(xdg_dir, config_home) < 0)
            goto cleanup;
1049
    } else {
1050
        if (virAsprintf(&xdg_dir, "%s/.config", home) < 0)
1051 1052 1053 1054 1055 1056 1057 1058 1059 1060 1061 1062 1063 1064 1065 1066 1067
            goto cleanup;
    }

    old_umask = umask(077);
    if (virFileMakePath(xdg_dir) < 0) {
        umask(old_umask);
        goto cleanup;
    }
    umask(old_umask);

    if (rename(old_base, config_dir) < 0) {
        int fd = creat(updated, 0600);
        VIR_FORCE_CLOSE(fd);
        VIR_ERROR(_("Unable to migrate %s to %s"), old_base, config_dir);
        goto cleanup;
    }

1068
    VIR_DEBUG("Profile migrated from %s to %s", old_base, config_dir);
1069 1070 1071 1072 1073 1074 1075 1076 1077 1078 1079 1080
    ret = 0;

 cleanup:
    VIR_FREE(home);
    VIR_FREE(old_base);
    VIR_FREE(xdg_dir);
    VIR_FREE(config_dir);
    VIR_FREE(updated);

    return ret;
}

1081 1082 1083 1084 1085 1086 1087 1088 1089 1090 1091 1092 1093 1094 1095 1096 1097 1098 1099 1100 1101 1102 1103 1104 1105 1106 1107 1108 1109 1110 1111 1112 1113
static int
daemonSetupHostUUID(const struct daemonConfig *config)
{
    static const char *machine_id = "/etc/machine-id";
    char buf[VIR_UUID_STRING_BUFLEN];
    const char *uuid;

    if (config->host_uuid) {
        uuid = config->host_uuid;
    } else if (!config->host_uuid_source ||
               STREQ(config->host_uuid_source, "smbios")) {
        /* smbios UUID is fetched on demand in virGetHostUUID */
        return 0;
    } else if (STREQ(config->host_uuid_source, "machine-id")) {
        if (virFileReadBufQuiet(machine_id, buf, sizeof(buf)) < 0) {
            VIR_ERROR(_("Can't read %s"), machine_id);
            return -1;
        }

        uuid = buf;
    } else {
        VIR_ERROR(_("invalid UUID source: %s"), config->host_uuid_source);
        return -1;
    }

    if (virSetHostUUIDStr(uuid)) {
        VIR_ERROR(_("invalid host UUID: %s"), uuid);
        return -1;
    }

    return 0;
}

1114 1115
/* Print command-line usage. */
static void
1116
daemonUsage(const char *argv0, bool privileged)
1117
{
1118 1119 1120 1121 1122 1123
    fprintf(stderr,
            _("\n"
              "Usage:\n"
              "  %s [options]\n"
              "\n"
              "Options:\n"
1124
              "  -h | --help            Display program help:\n"
1125 1126 1127 1128 1129
              "  -v | --verbose         Verbose messages.\n"
              "  -d | --daemon          Run as a daemon & write PID file.\n"
              "  -l | --listen          Listen for TCP/IP connections.\n"
              "  -t | --timeout <secs>  Exit after timeout period.\n"
              "  -f | --config <file>   Configuration file.\n"
1130
              "  -V | --version         Display version information.\n"
1131 1132 1133 1134
              "  -p | --pid-file <file> Change name of PID file.\n"
              "\n"
              "libvirt management daemon:\n"),
            argv0);
1135 1136 1137

    if (privileged) {
        fprintf(stderr,
1138 1139 1140 1141
                _("\n"
                  "  Default paths:\n"
                  "\n"
                  "    Configuration file (unless overridden by -f):\n"
1142
                  "      %s\n"
1143 1144
                  "\n"
                  "    Sockets:\n"
1145 1146
                  "      %s\n"
                  "      %s\n"
1147 1148
                  "\n"
                  "    TLS:\n"
1149 1150 1151
                  "      CA certificate:     %s\n"
                  "      Server certificate: %s\n"
                  "      Server private key: %s\n"
1152 1153 1154 1155
                  "\n"
                  "    PID file (unless overridden by -p):\n"
                  "      %s/run/libvirtd.pid\n"
                  "\n"),
1156 1157 1158
                LIBVIRTD_CONFIGURATION_FILE,
                LIBVIRTD_PRIV_UNIX_SOCKET,
                LIBVIRTD_PRIV_UNIX_SOCKET_RO,
1159 1160 1161
                LIBVIRT_CACERT,
                LIBVIRT_SERVERCERT,
                LIBVIRT_SERVERKEY,
1162 1163
                LOCALSTATEDIR);
    } else {
1164 1165 1166 1167 1168 1169 1170 1171 1172 1173 1174 1175 1176 1177 1178 1179 1180 1181
        fprintf(stderr, "%s",
                _("\n"
                  "  Default paths:\n"
                  "\n"
                  "    Configuration file (unless overridden by -f):\n"
                  "      $XDG_CONFIG_HOME/libvirt/libvirtd.conf\n"
                  "\n"
                  "    Sockets:\n"
                  "      $XDG_RUNTIME_DIR/libvirt/libvirt-sock\n"
                  "\n"
                  "    TLS:\n"
                  "      CA certificate:     $HOME/.pki/libvirt/cacert.pem\n"
                  "      Server certificate: $HOME/.pki/libvirt/servercert.pem\n"
                  "      Server private key: $HOME/.pki/libvirt/serverkey.pem\n"
                  "\n"
                  "    PID file:\n"
                  "      $XDG_RUNTIME_DIR/libvirt/libvirtd.pid\n"
                  "\n"));
1182
    }
1183 1184
}

D
Daniel P. Berrange 已提交
1185
int main(int argc, char **argv) {
1186
    virNetDaemonPtr dmn = NULL;
1187
    virNetServerPtr srv = NULL;
1188
    virNetServerPtr srvAdm = NULL;
1189
    char *remote_config_file = NULL;
1190
    int statuswrite = -1;
1191
    int ret = 1;
1192
    int pid_file_fd = -1;
1193 1194 1195
    char *pid_file = NULL;
    char *sock_file = NULL;
    char *sock_file_ro = NULL;
1196
    char *sock_file_adm = NULL;
1197 1198 1199 1200 1201 1202
    int timeout = -1;        /* -t: Shutdown timeout */
    int verbose = 0;
    int godaemon = 0;
    int ipsock = 0;
    struct daemonConfig *config;
    bool privileged = geteuid() == 0 ? true : false;
1203
    bool implicit_conf = false;
1204 1205
    char *run_dir = NULL;
    mode_t old_umask;
D
Daniel P. Berrange 已提交
1206 1207

    struct option opts[] = {
1208 1209 1210
        { "verbose", no_argument, &verbose, 'v'},
        { "daemon", no_argument, &godaemon, 'd'},
        { "listen", no_argument, &ipsock, 'l'},
1211
        { "config", required_argument, NULL, 'f'},
1212 1213
        { "timeout", required_argument, NULL, 't'},
        { "pid-file", required_argument, NULL, 'p'},
1214 1215
        { "version", no_argument, NULL, 'V' },
        { "help", no_argument, NULL, 'h' },
D
Daniel P. Berrange 已提交
1216 1217 1218
        {0, 0, 0, 0}
    };

1219
    if (virGettextInitialize() < 0 ||
E
Eric Blake 已提交
1220
        virInitialize() < 0) {
1221
        fprintf(stderr, _("%s: initialization failed\n"), argv[0]);
E
Eric Blake 已提交
1222
        exit(EXIT_FAILURE);
1223
    }
D
Daniel P. Berrange 已提交
1224

1225 1226
    virUpdateSelfLastChanged(argv[0]);

1227 1228
    virFileActivateDirOverride(argv[0]);

D
Daniel P. Berrange 已提交
1229 1230 1231 1232 1233
    while (1) {
        int optidx = 0;
        int c;
        char *tmp;

1234
        c = getopt_long(argc, argv, "ldf:p:t:vVh", opts, &optidx);
D
Daniel P. Berrange 已提交
1235

1236
        if (c == -1)
D
Daniel P. Berrange 已提交
1237 1238 1239 1240 1241 1242 1243 1244 1245 1246 1247 1248
            break;

        switch (c) {
        case 0:
            /* Got one of the flags */
            break;
        case 'v':
            verbose = 1;
            break;
        case 'd':
            godaemon = 1;
            break;
1249 1250
        case 'l':
            ipsock = 1;
D
Daniel P. Berrange 已提交
1251 1252 1253
            break;

        case 't':
1254
            if (virStrToLong_i(optarg, &tmp, 10, &timeout) != 0
1255 1256
                || timeout <= 0
                /* Ensure that we can multiply by 1000 without overflowing.  */
1257 1258 1259 1260
                || timeout > INT_MAX / 1000) {
                VIR_ERROR(_("Invalid value for timeout"));
                exit(EXIT_FAILURE);
            }
D
Daniel P. Berrange 已提交
1261
            break;
1262 1263

        case 'p':
1264
            VIR_FREE(pid_file);
1265
            if (VIR_STRDUP_QUIET(pid_file, optarg) < 0) {
1266
                VIR_ERROR(_("Can't allocate memory"));
1267
                exit(EXIT_FAILURE);
1268
            }
1269 1270 1271
            break;

        case 'f':
1272
            VIR_FREE(remote_config_file);
1273
            if (VIR_STRDUP_QUIET(remote_config_file, optarg) < 0) {
1274
                VIR_ERROR(_("Can't allocate memory"));
1275
                exit(EXIT_FAILURE);
1276
            }
1277 1278
            break;

1279
        case 'V':
1280
            daemonVersion(argv[0]);
1281
            exit(EXIT_SUCCESS);
1282

1283
        case 'h':
1284
            daemonUsage(argv[0], privileged);
1285
            exit(EXIT_SUCCESS);
D
Daniel P. Berrange 已提交
1286

1287
        case '?':
D
Daniel P. Berrange 已提交
1288
        default:
1289
            daemonUsage(argv[0], privileged);
1290
            exit(EXIT_FAILURE);
D
Daniel P. Berrange 已提交
1291 1292 1293
        }
    }

1294 1295 1296 1297 1298 1299
    if (optind != argc) {
        fprintf(stderr, "%s: unexpected, non-option, command line arguments\n",
                argv[0]);
        exit(EXIT_FAILURE);
    }

1300 1301
    if (!(config = daemonConfigNew(privileged))) {
        VIR_ERROR(_("Can't create initial configuration"));
1302
        exit(EXIT_FAILURE);
1303
    }
1304 1305

    /* No explicit config, so try and find a default one */
1306 1307 1308
    if (remote_config_file == NULL) {
        implicit_conf = true;
        if (daemonConfigFilePath(privileged,
1309 1310
                                 &remote_config_file) < 0) {
            VIR_ERROR(_("Can't determine config path"));
1311
            exit(EXIT_FAILURE);
1312
        }
1313
    }
1314 1315 1316

    /* Read the config file if it exists*/
    if (remote_config_file &&
1317
        daemonConfigLoadFile(config, remote_config_file, implicit_conf) < 0) {
1318 1319 1320 1321 1322 1323
        virErrorPtr err = virGetLastError();
        if (err && err->message)
            VIR_ERROR(_("Can't load config file: %s: %s"),
                      err->message, remote_config_file);
        else
            VIR_ERROR(_("Can't load config file: %s"), remote_config_file);
1324
        exit(EXIT_FAILURE);
1325
    }
1326

1327
    if (!privileged &&
1328 1329
        migrateProfile() < 0) {
        VIR_ERROR(_("Exiting due to failure to migrate profile"));
1330
        exit(EXIT_FAILURE);
1331
    }
1332

1333 1334
    if (daemonSetupHostUUID(config) < 0) {
        VIR_ERROR(_("Can't setup host uuid"));
1335
        exit(EXIT_FAILURE);
1336 1337
    }

1338 1339
    if (daemonSetupLogging(config, privileged, verbose, godaemon) < 0) {
        VIR_ERROR(_("Can't initialize logging"));
1340
        exit(EXIT_FAILURE);
1341
    }
1342

1343 1344 1345 1346 1347
    if (daemonSetupAccessManager(config) < 0) {
        VIR_ERROR(_("Can't initialize access manager"));
        exit(EXIT_FAILURE);
    }

1348
    if (!pid_file &&
1349 1350 1351 1352
        virPidFileConstructPath(privileged,
                                LOCALSTATEDIR,
                                "libvirtd",
                                &pid_file) < 0) {
1353
        VIR_ERROR(_("Can't determine pid file path."));
1354
        exit(EXIT_FAILURE);
1355
    }
1356
    VIR_DEBUG("Decided on pid file path '%s'", NULLSTR(pid_file));
1357 1358 1359 1360

    if (daemonUnixSocketPaths(config,
                              privileged,
                              &sock_file,
1361 1362
                              &sock_file_ro,
                              &sock_file_adm) < 0) {
1363
        VIR_ERROR(_("Can't determine socket paths"));
1364
        exit(EXIT_FAILURE);
1365
    }
1366 1367 1368 1369
    VIR_DEBUG("Decided on socket paths '%s', '%s' and '%s'",
              sock_file,
              NULLSTR(sock_file_ro),
              NULLSTR(sock_file_adm));
1370

1371
    if (godaemon) {
1372
        char ebuf[1024];
1373 1374 1375 1376

        if (chdir("/") < 0) {
            VIR_ERROR(_("cannot change to root directory: %s"),
                      virStrerror(errno, ebuf, sizeof(ebuf)));
1377
            goto cleanup;
1378 1379
        }

1380
        if ((statuswrite = daemonForkIntoBackground(argv[0])) < 0) {
1381
            VIR_ERROR(_("Failed to fork as daemon: %s"),
1382
                      virStrerror(errno, ebuf, sizeof(ebuf)));
1383
            goto cleanup;
1384 1385 1386
        }
    }

J
John Levon 已提交
1387
    /* Ensure the rundir exists (on tmpfs on some systems) */
1388
    if (privileged) {
1389 1390 1391 1392
        if (VIR_STRDUP_QUIET(run_dir, LOCALSTATEDIR "/run/libvirt") < 0) {
            VIR_ERROR(_("Can't allocate memory"));
            goto cleanup;
        }
1393
    } else {
1394
        run_dir = virGetUserRuntimeDirectory();
1395

1396
        if (!run_dir) {
1397 1398
            VIR_ERROR(_("Can't determine user directory"));
            goto cleanup;
J
John Levon 已提交
1399 1400
        }
    }
1401 1402 1403 1404
    if (privileged)
        old_umask = umask(022);
    else
        old_umask = umask(077);
1405
    VIR_DEBUG("Ensuring run dir '%s' exists", run_dir);
1406 1407 1408 1409 1410 1411 1412 1413
    if (virFileMakePath(run_dir) < 0) {
        char ebuf[1024];
        VIR_ERROR(_("unable to create rundir %s: %s"), run_dir,
                  virStrerror(errno, ebuf, sizeof(ebuf)));
        ret = VIR_DAEMON_ERR_RUNDIR;
        goto cleanup;
    }
    umask(old_umask);
J
John Levon 已提交
1414

1415
    /* Try to claim the pidfile, exiting if we can't */
1416
    if ((pid_file_fd = virPidFileAcquirePath(pid_file, false, getpid())) < 0) {
1417 1418 1419 1420
        ret = VIR_DAEMON_ERR_PIDFILE;
        goto cleanup;
    }

1421 1422 1423 1424 1425
    if (virNetlinkStartup() < 0) {
        ret = VIR_DAEMON_ERR_INIT;
        goto cleanup;
    }

1426
    if (!(srv = virNetServerNew("libvirtd", 1,
1427
                                config->min_workers,
1428
                                config->max_workers,
1429
                                config->prio_workers,
1430
                                config->max_clients,
1431
                                config->max_anonymous_clients,
1432 1433
                                config->keepalive_interval,
                                config->keepalive_count,
1434
                                config->mdns_adv ? config->mdns_name : NULL,
1435
                                remoteClientInitHook,
1436
                                NULL,
1437
                                remoteClientFreeFunc,
1438
                                NULL))) {
1439 1440 1441 1442
        ret = VIR_DAEMON_ERR_INIT;
        goto cleanup;
    }

1443
    if (!(dmn = virNetDaemonNew()) ||
1444
        virNetDaemonAddServer(dmn, srv) < 0) {
1445 1446 1447 1448
        ret = VIR_DAEMON_ERR_INIT;
        goto cleanup;
    }

1449 1450 1451
    /* Beyond this point, nothing should rely on using
     * getuid/geteuid() == 0, for privilege level checks.
     */
1452
    VIR_DEBUG("Dropping privileges (if required)");
1453
    if (daemonSetupPrivs() < 0) {
1454
        ret = VIR_DAEMON_ERR_PRIVS;
1455
        goto cleanup;
1456
    }
J
John Levon 已提交
1457

1458
    daemonInitialize();
1459

1460 1461 1462 1463 1464 1465 1466 1467 1468
    remoteProcs[REMOTE_PROC_AUTH_LIST].needAuth = false;
    remoteProcs[REMOTE_PROC_AUTH_SASL_INIT].needAuth = false;
    remoteProcs[REMOTE_PROC_AUTH_SASL_STEP].needAuth = false;
    remoteProcs[REMOTE_PROC_AUTH_SASL_START].needAuth = false;
    remoteProcs[REMOTE_PROC_AUTH_POLKIT].needAuth = false;
    if (!(remoteProgram = virNetServerProgramNew(REMOTE_PROGRAM,
                                                 REMOTE_PROTOCOL_VERSION,
                                                 remoteProcs,
                                                 remoteNProcs))) {
1469
        ret = VIR_DAEMON_ERR_INIT;
1470 1471 1472 1473 1474
        goto cleanup;
    }
    if (virNetServerAddProgram(srv, remoteProgram) < 0) {
        ret = VIR_DAEMON_ERR_INIT;
        goto cleanup;
1475
    }
1476

1477 1478 1479 1480 1481 1482 1483 1484 1485 1486 1487 1488
    if (!(lxcProgram = virNetServerProgramNew(LXC_PROGRAM,
                                              LXC_PROTOCOL_VERSION,
                                              lxcProcs,
                                              lxcNProcs))) {
        ret = VIR_DAEMON_ERR_INIT;
        goto cleanup;
    }
    if (virNetServerAddProgram(srv, lxcProgram) < 0) {
        ret = VIR_DAEMON_ERR_INIT;
        goto cleanup;
    }

1489 1490 1491 1492 1493 1494 1495 1496 1497 1498
    if (!(qemuProgram = virNetServerProgramNew(QEMU_PROGRAM,
                                               QEMU_PROTOCOL_VERSION,
                                               qemuProcs,
                                               qemuNProcs))) {
        ret = VIR_DAEMON_ERR_INIT;
        goto cleanup;
    }
    if (virNetServerAddProgram(srv, qemuProgram) < 0) {
        ret = VIR_DAEMON_ERR_INIT;
        goto cleanup;
1499
    }
1500

1501
    if (!(srvAdm = virNetServerNew("admin", 1,
1502
                                   config->admin_min_workers,
1503 1504 1505 1506 1507 1508 1509 1510 1511 1512 1513 1514 1515 1516 1517
                                   config->admin_max_workers,
                                   0,
                                   config->admin_max_clients,
                                   0,
                                   config->admin_keepalive_interval,
                                   config->admin_keepalive_count,
                                   NULL,
                                   remoteAdmClientInitHook,
                                   NULL,
                                   remoteAdmClientFreeFunc,
                                   dmn))) {
        ret = VIR_DAEMON_ERR_INIT;
        goto cleanup;
    }

1518
    if (virNetDaemonAddServer(dmn, srvAdm) < 0) {
1519 1520 1521 1522 1523 1524 1525 1526 1527 1528 1529 1530 1531 1532 1533 1534
        ret = VIR_DAEMON_ERR_INIT;
        goto cleanup;
    }

    if (!(adminProgram = virNetServerProgramNew(ADMIN_PROGRAM,
                                                ADMIN_PROTOCOL_VERSION,
                                                adminProcs,
                                                adminNProcs))) {
        ret = VIR_DAEMON_ERR_INIT;
        goto cleanup;
    }
    if (virNetServerAddProgram(srvAdm, adminProgram) < 0) {
        ret = VIR_DAEMON_ERR_INIT;
        goto cleanup;
    }

1535 1536
    if (timeout != -1) {
        VIR_DEBUG("Registering shutdown timeout %d", timeout);
1537
        virNetDaemonAutoShutdown(dmn, timeout);
1538
    }
1539

1540
    if ((daemonSetupSignals(dmn)) < 0) {
1541 1542
        ret = VIR_DAEMON_ERR_SIGNAL;
        goto cleanup;
1543
    }
D
Daniel P. Berrange 已提交
1544

1545
    if (config->audit_level) {
1546
        VIR_DEBUG("Attempting to configure auditing subsystem");
1547
        if (virAuditOpen() < 0) {
1548
            if (config->audit_level > 1) {
1549
                ret = VIR_DAEMON_ERR_AUDIT;
1550
                goto cleanup;
1551
            }
1552
            VIR_DEBUG("Proceeding without auditing");
1553 1554
        }
    }
E
Eric Blake 已提交
1555
    virAuditLog(config->audit_logging > 0);
1556

1557
    /* setup the hooks if any */
1558
    if (virHookInitialize() < 0) {
1559
        ret = VIR_DAEMON_ERR_HOOKS;
1560
        goto cleanup;
1561 1562
    }

1563
    /* Disable error func, now logging is setup */
1564
    virSetErrorFunc(NULL, daemonErrorHandler);
1565
    virSetErrorLogPriorityFunc(daemonErrorLogFilter);
1566

1567 1568 1569 1570 1571 1572
    /*
     * Call the daemon startup hook
     * TODO: should we abort the daemon startup if the script returned
     *       an error ?
     */
    virHookCall(VIR_HOOK_DRIVER_DAEMON, "-", VIR_HOOK_DAEMON_OP_START,
1573
                0, "start", NULL, NULL);
1574

1575 1576 1577 1578 1579
    if (daemonSetupNetworking(srv, srvAdm,
                              config,
                              sock_file,
                              sock_file_ro,
                              sock_file_adm,
1580
                              ipsock, privileged) < 0) {
1581
        ret = VIR_DAEMON_ERR_NETWORK;
1582
        goto cleanup;
1583 1584
    }

1585 1586 1587 1588 1589 1590 1591 1592 1593
    /* Tell parent of daemon that basic initialization is complete
     * In particular we're ready to accept net connections & have
     * written the pidfile
     */
    if (statuswrite != -1) {
        char status = 0;
        while (write(statuswrite, &status, 1) == -1 &&
               errno == EINTR)
            ;
1594
        VIR_FORCE_CLOSE(statuswrite);
1595 1596
    }

1597
    /* Initialize drivers & then start accepting new clients from network */
1598
    if (daemonStateInit(dmn) < 0) {
1599 1600
        ret = VIR_DAEMON_ERR_INIT;
        goto cleanup;
1601
    }
D
Daniel P. Berrange 已提交
1602

1603
#if defined(__linux__) && defined(NETLINK_ROUTE)
1604 1605
    /* Register the netlink event service for NETLINK_ROUTE */
    if (virNetlinkEventServiceStart(NETLINK_ROUTE, 0) < 0) {
1606 1607 1608
        ret = VIR_DAEMON_ERR_NETWORK;
        goto cleanup;
    }
1609
#endif
1610

1611
#if defined(__linux__) && defined(NETLINK_KOBJECT_UEVENT)
T
Tang Chen 已提交
1612 1613 1614 1615 1616
    /* Register the netlink event service for NETLINK_KOBJECT_UEVENT */
    if (virNetlinkEventServiceStart(NETLINK_KOBJECT_UEVENT, 1) < 0) {
        ret = VIR_DAEMON_ERR_NETWORK;
        goto cleanup;
    }
1617
#endif
T
Tang Chen 已提交
1618

1619
    /* Run event loop. */
1620
    virNetDaemonRun(dmn);
1621

1622 1623
    ret = 0;

1624
    virHookCall(VIR_HOOK_DRIVER_DAEMON, "-", VIR_HOOK_DAEMON_OP_SHUTDOWN,
1625
                0, "shutdown", NULL, NULL);
1626

1627
 cleanup:
1628
    virNetlinkEventServiceStopAll();
1629
    virObjectUnref(remoteProgram);
1630
    virObjectUnref(lxcProgram);
1631
    virObjectUnref(qemuProgram);
1632
    virObjectUnref(adminProgram);
1633 1634
    virNetDaemonClose(dmn);
    virObjectUnref(dmn);
1635
    virObjectUnref(srv);
1636
    virObjectUnref(srvAdm);
1637
    virNetlinkShutdown();
1638 1639 1640 1641 1642 1643 1644 1645
    if (statuswrite != -1) {
        if (ret != 0) {
            /* Tell parent of daemon what failed */
            char status = ret;
            while (write(statuswrite, &status, 1) == -1 &&
                   errno == EINTR)
                ;
        }
1646
        VIR_FORCE_CLOSE(statuswrite);
1647
    }
1648 1649
    if (pid_file_fd != -1)
        virPidFileReleasePath(pid_file, pid_file_fd);
1650 1651 1652

    VIR_FREE(sock_file);
    VIR_FREE(sock_file_ro);
1653
    VIR_FREE(sock_file_adm);
1654 1655
    VIR_FREE(pid_file);
    VIR_FREE(remote_config_file);
1656 1657
    VIR_FREE(run_dir);

1658 1659
    daemonConfigFree(config);

1660 1661
    if (driversInitialized) {
        driversInitialized = false;
1662
        virStateCleanup();
1663
    }
1664

1665
    return ret;
D
Daniel P. Berrange 已提交
1666
}