Compare commits
No commits in common. "f77d6ec9539fd87eb3ecad3a742ac684cc6dc5d2" and "0419dae71541643c407cb4146fe942ff5d91a526" have entirely different histories.
f77d6ec953
...
0419dae715
|
@ -54,19 +54,24 @@
|
||||||
(i.e. <constant>SD_LISTEN_FDS_START</constant>), the remaining
|
(i.e. <constant>SD_LISTEN_FDS_START</constant>), the remaining
|
||||||
descriptors follow at 4, 5, 6, …, if any.</para>
|
descriptors follow at 4, 5, 6, …, if any.</para>
|
||||||
|
|
||||||
<para>If a daemon receives more than one file descriptor, they will be passed in the same order as
|
<para>If a daemon receives more than one file descriptor, they
|
||||||
configured in the systemd socket unit file (see
|
will be passed in the same order as configured in the systemd
|
||||||
<citerefentry><refentrytitle>systemd.socket</refentrytitle><manvolnum>5</manvolnum></citerefentry> for
|
socket unit file (see
|
||||||
details) — if there's only one such file (see below). Nonetheless, it is recommended to verify the
|
<citerefentry><refentrytitle>systemd.socket</refentrytitle><manvolnum>5</manvolnum></citerefentry>
|
||||||
correct socket types before using them. To simplify this checking, the functions
|
for details). Nonetheless, it is recommended to verify the correct
|
||||||
|
socket types before using them. To simplify this checking, the
|
||||||
|
functions
|
||||||
<citerefentry><refentrytitle>sd_is_fifo</refentrytitle><manvolnum>3</manvolnum></citerefentry>,
|
<citerefentry><refentrytitle>sd_is_fifo</refentrytitle><manvolnum>3</manvolnum></citerefentry>,
|
||||||
<citerefentry><refentrytitle>sd_is_socket</refentrytitle><manvolnum>3</manvolnum></citerefentry>,
|
<citerefentry><refentrytitle>sd_is_socket</refentrytitle><manvolnum>3</manvolnum></citerefentry>,
|
||||||
<citerefentry><refentrytitle>sd_is_socket_inet</refentrytitle><manvolnum>3</manvolnum></citerefentry>,
|
<citerefentry><refentrytitle>sd_is_socket_inet</refentrytitle><manvolnum>3</manvolnum></citerefentry>,
|
||||||
<citerefentry><refentrytitle>sd_is_socket_unix</refentrytitle><manvolnum>3</manvolnum></citerefentry> are
|
<citerefentry><refentrytitle>sd_is_socket_unix</refentrytitle><manvolnum>3</manvolnum></citerefentry>
|
||||||
provided. In order to maximize flexibility, it is recommended to make these checks as loose as possible
|
are provided. In order to maximize flexibility, it is recommended
|
||||||
without allowing incorrect setups. i.e. often, the actual port number a socket is bound to matters little
|
to make these checks as loose as possible without allowing
|
||||||
for the service to work, hence it should not be verified. On the other hand, whether a socket is a
|
incorrect setups. i.e. often, the actual port number a socket is
|
||||||
datagram or stream socket matters a lot for the most common program logics and should be checked.</para>
|
bound to matters little for the service to work, hence it should
|
||||||
|
not be verified. On the other hand, whether a socket is a datagram
|
||||||
|
or stream socket matters a lot for the most common program logics
|
||||||
|
and should be checked.</para>
|
||||||
|
|
||||||
<para>This function call will set the FD_CLOEXEC flag for all
|
<para>This function call will set the FD_CLOEXEC flag for all
|
||||||
passed file descriptors to avoid further inheritance to children
|
passed file descriptors to avoid further inheritance to children
|
||||||
|
|
|
@ -1028,24 +1028,20 @@
|
||||||
|
|
||||||
<varlistentry>
|
<varlistentry>
|
||||||
<term><varname>FileDescriptorStoreMax=</varname></term>
|
<term><varname>FileDescriptorStoreMax=</varname></term>
|
||||||
<listitem><para>Configure how many file descriptors may be stored in the service manager for the
|
<listitem><para>Configure how many file descriptors may be stored in the service manager for the service using
|
||||||
service using
|
|
||||||
<citerefentry><refentrytitle>sd_pid_notify_with_fds</refentrytitle><manvolnum>3</manvolnum></citerefentry>'s
|
<citerefentry><refentrytitle>sd_pid_notify_with_fds</refentrytitle><manvolnum>3</manvolnum></citerefentry>'s
|
||||||
<literal>FDSTORE=1</literal> messages. This is useful for implementing services that can restart
|
<literal>FDSTORE=1</literal> messages. This is useful for implementing services that can restart after an
|
||||||
after an explicit request or a crash without losing state. Any open sockets and other file
|
explicit request or a crash without losing state. Any open sockets and other file descriptors which should not
|
||||||
descriptors which should not be closed during the restart may be stored this way. Application state
|
be closed during the restart may be stored this way. Application state can either be serialized to a file in
|
||||||
can either be serialized to a file in <filename>/run</filename>, or better, stored in a
|
<filename>/run</filename>, or better, stored in a
|
||||||
<citerefentry><refentrytitle>memfd_create</refentrytitle><manvolnum>2</manvolnum></citerefentry>
|
<citerefentry><refentrytitle>memfd_create</refentrytitle><manvolnum>2</manvolnum></citerefentry> memory file
|
||||||
memory file descriptor. Defaults to 0, i.e. no file descriptors may be stored in the service
|
descriptor. Defaults to 0, i.e. no file descriptors may be stored in the service manager. All file descriptors
|
||||||
manager. All file descriptors passed to the service manager from a specific service are passed back
|
passed to the service manager from a specific service are passed back to the service's main process on the next
|
||||||
to the service's main process on the next service restart (see
|
service restart. Any file descriptors passed to the service manager are automatically closed when
|
||||||
<citerefentry><refentrytitle>sd_listen_fds</refentrytitle><manvolnum>3</manvolnum></citerefentry> for
|
<constant>POLLHUP</constant> or <constant>POLLERR</constant> is seen on them, or when the service is fully
|
||||||
details about the precise protocol used and the order in which the file descriptors are passed). Any
|
stopped and no job is queued or being executed for it. If this option is used, <varname>NotifyAccess=</varname>
|
||||||
file descriptors passed to the service manager are automatically closed when
|
(see above) should be set to open access to the notification socket provided by systemd. If
|
||||||
<constant>POLLHUP</constant> or <constant>POLLERR</constant> is seen on them, or when the service is
|
<varname>NotifyAccess=</varname> is not set, it will be implicitly set to
|
||||||
fully stopped and no job is queued or being executed for it. If this option is used,
|
|
||||||
<varname>NotifyAccess=</varname> (see above) should be set to open access to the notification socket
|
|
||||||
provided by systemd. If <varname>NotifyAccess=</varname> is not set, it will be implicitly set to
|
|
||||||
<option>main</option>.</para></listitem>
|
<option>main</option>.</para></listitem>
|
||||||
</varlistentry>
|
</varlistentry>
|
||||||
|
|
||||||
|
|
|
@ -81,14 +81,16 @@
|
||||||
services, as well as parallelized starting of services. See the
|
services, as well as parallelized starting of services. See the
|
||||||
blog stories linked at the end for an introduction.</para>
|
blog stories linked at the end for an introduction.</para>
|
||||||
|
|
||||||
<para>Note that the daemon software configured for socket activation with socket units needs to be able
|
<para>Note that the daemon software configured for socket
|
||||||
to accept sockets from systemd, either via systemd's native socket passing interface (see
|
activation with socket units needs to be able to accept sockets
|
||||||
<citerefentry><refentrytitle>sd_listen_fds</refentrytitle><manvolnum>3</manvolnum></citerefentry> for
|
from systemd, either via systemd's native socket passing interface
|
||||||
details about the precise protocol used and the order in which the file descriptors are passed) or via
|
(see
|
||||||
traditional <citerefentry
|
<citerefentry><refentrytitle>sd_listen_fds</refentrytitle><manvolnum>3</manvolnum></citerefentry>
|
||||||
project='freebsd'><refentrytitle>inetd</refentrytitle><manvolnum>8</manvolnum></citerefentry>-style
|
for details) or via the traditional
|
||||||
socket passing (i.e. sockets passed in via standard input and output, using
|
<citerefentry project='freebsd'><refentrytitle>inetd</refentrytitle><manvolnum>8</manvolnum></citerefentry>-style
|
||||||
<varname>StandardInput=socket</varname> in the service file).</para>
|
socket passing (i.e. sockets passed in via standard input and
|
||||||
|
output, using <varname>StandardInput=socket</varname> in the
|
||||||
|
service file).</para>
|
||||||
|
|
||||||
<para>All network sockets allocated through <filename>.socket</filename> units are allocated in the host's network
|
<para>All network sockets allocated through <filename>.socket</filename> units are allocated in the host's network
|
||||||
namespace (see <citerefentry
|
namespace (see <citerefentry
|
||||||
|
|
|
@ -49,51 +49,16 @@ struct statx STATX_DEFINITION;
|
||||||
* defines an older definition */
|
* defines an older definition */
|
||||||
struct new_statx STATX_DEFINITION;
|
struct new_statx STATX_DEFINITION;
|
||||||
|
|
||||||
/* a528d35e8bfcc521d7cb70aaf03e1bd296c8493f (4.11) */
|
|
||||||
#ifndef AT_STATX_DONT_SYNC
|
|
||||||
#define AT_STATX_DONT_SYNC 0x4000
|
|
||||||
#endif
|
|
||||||
|
|
||||||
/* a528d35e8bfcc521d7cb70aaf03e1bd296c8493f (4.11) */
|
|
||||||
#ifndef STATX_TYPE
|
|
||||||
#define STATX_TYPE 0x00000001U
|
|
||||||
#endif
|
|
||||||
|
|
||||||
/* a528d35e8bfcc521d7cb70aaf03e1bd296c8493f (4.11) */
|
|
||||||
#ifndef STATX_MODE
|
|
||||||
#define STATX_MODE 0x00000002U
|
|
||||||
#endif
|
|
||||||
|
|
||||||
/* a528d35e8bfcc521d7cb70aaf03e1bd296c8493f (4.11) */
|
|
||||||
#ifndef STATX_UID
|
|
||||||
#define STATX_UID 0x00000008U
|
|
||||||
#endif
|
|
||||||
|
|
||||||
/* a528d35e8bfcc521d7cb70aaf03e1bd296c8493f (4.11) */
|
|
||||||
#ifndef STATX_ATIME
|
|
||||||
#define STATX_ATIME 0x00000020U
|
|
||||||
#endif
|
|
||||||
|
|
||||||
/* a528d35e8bfcc521d7cb70aaf03e1bd296c8493f (4.11) */
|
|
||||||
#ifndef STATX_MTIME
|
|
||||||
#define STATX_MTIME 0x00000040U
|
|
||||||
#endif
|
|
||||||
|
|
||||||
/* a528d35e8bfcc521d7cb70aaf03e1bd296c8493f (4.11) */
|
|
||||||
#ifndef STATX_CTIME
|
|
||||||
#define STATX_CTIME 0x00000080U
|
|
||||||
#endif
|
|
||||||
|
|
||||||
/* a528d35e8bfcc521d7cb70aaf03e1bd296c8493f (4.11) */
|
|
||||||
#ifndef STATX_INO
|
|
||||||
#define STATX_INO 0x00000100U
|
|
||||||
#endif
|
|
||||||
|
|
||||||
/* a528d35e8bfcc521d7cb70aaf03e1bd296c8493f (4.11) */
|
/* a528d35e8bfcc521d7cb70aaf03e1bd296c8493f (4.11) */
|
||||||
#ifndef STATX_BTIME
|
#ifndef STATX_BTIME
|
||||||
#define STATX_BTIME 0x00000800U
|
#define STATX_BTIME 0x00000800U
|
||||||
#endif
|
#endif
|
||||||
|
|
||||||
|
/* a528d35e8bfcc521d7cb70aaf03e1bd296c8493f (4.11) */
|
||||||
|
#ifndef AT_STATX_DONT_SYNC
|
||||||
|
#define AT_STATX_DONT_SYNC 0x4000
|
||||||
|
#endif
|
||||||
|
|
||||||
/* fa2fcf4f1df1559a0a4ee0f46915b496cc2ebf60 (5.8) */
|
/* fa2fcf4f1df1559a0a4ee0f46915b496cc2ebf60 (5.8) */
|
||||||
#ifndef STATX_MNT_ID
|
#ifndef STATX_MNT_ID
|
||||||
#define STATX_MNT_ID 0x00001000U
|
#define STATX_MNT_ID 0x00001000U
|
||||||
|
|
|
@ -244,28 +244,12 @@ struct timespec *timespec_store(struct timespec *ts, usec_t u) {
|
||||||
if (u == USEC_INFINITY ||
|
if (u == USEC_INFINITY ||
|
||||||
u / USEC_PER_SEC >= TIME_T_MAX) {
|
u / USEC_PER_SEC >= TIME_T_MAX) {
|
||||||
ts->tv_sec = (time_t) -1;
|
ts->tv_sec = (time_t) -1;
|
||||||
ts->tv_nsec = -1L;
|
ts->tv_nsec = (long) -1;
|
||||||
return ts;
|
return ts;
|
||||||
}
|
}
|
||||||
|
|
||||||
ts->tv_sec = (time_t) (u / USEC_PER_SEC);
|
ts->tv_sec = (time_t) (u / USEC_PER_SEC);
|
||||||
ts->tv_nsec = (long) ((u % USEC_PER_SEC) * NSEC_PER_USEC);
|
ts->tv_nsec = (long int) ((u % USEC_PER_SEC) * NSEC_PER_USEC);
|
||||||
|
|
||||||
return ts;
|
|
||||||
}
|
|
||||||
|
|
||||||
struct timespec *timespec_store_nsec(struct timespec *ts, nsec_t n) {
|
|
||||||
assert(ts);
|
|
||||||
|
|
||||||
if (n == NSEC_INFINITY ||
|
|
||||||
n / NSEC_PER_SEC >= TIME_T_MAX) {
|
|
||||||
ts->tv_sec = (time_t) -1;
|
|
||||||
ts->tv_nsec = -1L;
|
|
||||||
return ts;
|
|
||||||
}
|
|
||||||
|
|
||||||
ts->tv_sec = (time_t) (n / NSEC_PER_SEC);
|
|
||||||
ts->tv_nsec = (long) (n % NSEC_PER_SEC);
|
|
||||||
|
|
||||||
return ts;
|
return ts;
|
||||||
}
|
}
|
||||||
|
|
|
@ -112,7 +112,6 @@ usec_t triple_timestamp_by_clock(triple_timestamp *ts, clockid_t clock);
|
||||||
usec_t timespec_load(const struct timespec *ts) _pure_;
|
usec_t timespec_load(const struct timespec *ts) _pure_;
|
||||||
nsec_t timespec_load_nsec(const struct timespec *ts) _pure_;
|
nsec_t timespec_load_nsec(const struct timespec *ts) _pure_;
|
||||||
struct timespec *timespec_store(struct timespec *ts, usec_t u);
|
struct timespec *timespec_store(struct timespec *ts, usec_t u);
|
||||||
struct timespec *timespec_store_nsec(struct timespec *ts, nsec_t n);
|
|
||||||
|
|
||||||
usec_t timeval_load(const struct timeval *tv) _pure_;
|
usec_t timeval_load(const struct timeval *tv) _pure_;
|
||||||
struct timeval *timeval_store(struct timeval *tv, usec_t u);
|
struct timeval *timeval_store(struct timeval *tv, usec_t u);
|
||||||
|
|
|
@ -38,8 +38,6 @@
|
||||||
#include "log.h"
|
#include "log.h"
|
||||||
#include "macro.h"
|
#include "macro.h"
|
||||||
#include "main-func.h"
|
#include "main-func.h"
|
||||||
#include "missing_stat.h"
|
|
||||||
#include "missing_syscall.h"
|
|
||||||
#include "mkdir.h"
|
#include "mkdir.h"
|
||||||
#include "mount-util.h"
|
#include "mount-util.h"
|
||||||
#include "mountpoint-util.h"
|
#include "mountpoint-util.h"
|
||||||
|
@ -492,109 +490,29 @@ static DIR* opendir_nomod(const char *path) {
|
||||||
return xopendirat_nomod(AT_FDCWD, path);
|
return xopendirat_nomod(AT_FDCWD, path);
|
||||||
}
|
}
|
||||||
|
|
||||||
static inline nsec_t load_statx_timestamp_nsec(const struct statx_timestamp *ts) {
|
|
||||||
assert(ts);
|
|
||||||
|
|
||||||
if (ts->tv_sec < 0)
|
|
||||||
return NSEC_INFINITY;
|
|
||||||
|
|
||||||
if ((nsec_t) ts->tv_sec >= (UINT64_MAX - ts->tv_nsec) / NSEC_PER_SEC)
|
|
||||||
return NSEC_INFINITY;
|
|
||||||
|
|
||||||
return ts->tv_sec * NSEC_PER_SEC + ts->tv_nsec;
|
|
||||||
}
|
|
||||||
|
|
||||||
static int dir_cleanup(
|
static int dir_cleanup(
|
||||||
Item *i,
|
Item *i,
|
||||||
const char *p,
|
const char *p,
|
||||||
DIR *d,
|
DIR *d,
|
||||||
nsec_t self_atime_nsec,
|
const struct stat *ds,
|
||||||
nsec_t self_mtime_nsec,
|
usec_t cutoff,
|
||||||
nsec_t cutoff_nsec,
|
dev_t rootdev,
|
||||||
dev_t rootdev_major,
|
|
||||||
dev_t rootdev_minor,
|
|
||||||
bool mountpoint,
|
bool mountpoint,
|
||||||
int maxdepth,
|
int maxdepth,
|
||||||
bool keep_this_level) {
|
bool keep_this_level) {
|
||||||
|
|
||||||
static bool use_statx = true;
|
|
||||||
bool deleted = false;
|
|
||||||
struct dirent *dent;
|
struct dirent *dent;
|
||||||
|
bool deleted = false;
|
||||||
int r = 0;
|
int r = 0;
|
||||||
|
|
||||||
FOREACH_DIRENT_ALL(dent, d, break) {
|
FOREACH_DIRENT_ALL(dent, d, break) {
|
||||||
|
struct stat s;
|
||||||
|
usec_t age;
|
||||||
_cleanup_free_ char *sub_path = NULL;
|
_cleanup_free_ char *sub_path = NULL;
|
||||||
nsec_t atime_nsec, mtime_nsec, ctime_nsec, btime_nsec;
|
|
||||||
mode_t mode;
|
|
||||||
uid_t uid;
|
|
||||||
|
|
||||||
if (dot_or_dot_dot(dent->d_name))
|
if (dot_or_dot_dot(dent->d_name))
|
||||||
continue;
|
continue;
|
||||||
|
|
||||||
if (use_statx) {
|
|
||||||
/* If statx() is supported, use it. It's preferable over fstatat() since it tells us
|
|
||||||
* explicitly where we are looking at a mount point, for free as side
|
|
||||||
* information. Determing the same information without statx() is hard, see the
|
|
||||||
* complexity of path_is_mount_point(), and also much slower as it requires a numbre
|
|
||||||
* of syscalls instead of just one. Hence, when we have modern statx() we use it
|
|
||||||
* instead of fstat() and do proper mount point checks, while on older kernels's well
|
|
||||||
* do traditional st_dev based detection of mount points.
|
|
||||||
*
|
|
||||||
* Using statx() for detecting mount points also has the benfit that we handle weird
|
|
||||||
* file systems such as overlayfs better where each file is originating from a
|
|
||||||
* different st_dev. */
|
|
||||||
|
|
||||||
struct statx sx
|
|
||||||
#if HAS_FEATURE_MEMORY_SANITIZER
|
|
||||||
= {}
|
|
||||||
# warning "Explicitly initializing struct statx, to work around msan limitation. Please remove as soon as msan has been updated to not require this."
|
|
||||||
#endif
|
|
||||||
;
|
|
||||||
|
|
||||||
if (statx(dirfd(d), dent->d_name,
|
|
||||||
AT_SYMLINK_NOFOLLOW|AT_NO_AUTOMOUNT,
|
|
||||||
STATX_TYPE|STATX_MODE|STATX_UID|STATX_ATIME|STATX_MTIME|STATX_CTIME|STATX_BTIME,
|
|
||||||
&sx) < 0) {
|
|
||||||
|
|
||||||
if (errno == ENOENT)
|
|
||||||
continue;
|
|
||||||
if (ERRNO_IS_NOT_SUPPORTED(errno) || errno == EPERM)
|
|
||||||
use_statx = false; /* Not supported or blocked by seccomp or so */
|
|
||||||
else {
|
|
||||||
/* FUSE, NFS mounts, SELinux might return EACCES */
|
|
||||||
r = log_full_errno(errno == EACCES ? LOG_DEBUG : LOG_ERR, errno,
|
|
||||||
"statx(%s/%s) failed: %m", p, dent->d_name);
|
|
||||||
continue;
|
|
||||||
}
|
|
||||||
} else {
|
|
||||||
if (FLAGS_SET(sx.stx_attributes_mask, STATX_ATTR_MOUNT_ROOT)) {
|
|
||||||
/* Yay, we have the mount point API, use it */
|
|
||||||
if (FLAGS_SET(sx.stx_attributes, STATX_ATTR_MOUNT_ROOT)) {
|
|
||||||
log_debug("Ignoring \"%s/%s\": different mount points.", p, dent->d_name);
|
|
||||||
continue;
|
|
||||||
}
|
|
||||||
} else {
|
|
||||||
/* So we have statx() but the STATX_ATTR_MOUNT_ROOT flag is not
|
|
||||||
* supported, fall back to traditional stx_dev checking. */
|
|
||||||
if (sx.stx_dev_major != rootdev_major ||
|
|
||||||
sx.stx_dev_minor != rootdev_minor) {
|
|
||||||
log_debug("Ignoring \"%s/%s\": different filesystem.", p, dent->d_name);
|
|
||||||
continue;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
mode = sx.stx_mode;
|
|
||||||
uid = sx.stx_uid;
|
|
||||||
atime_nsec = FLAGS_SET(sx.stx_mask, STATX_ATIME) ? load_statx_timestamp_nsec(&sx.stx_atime) : 0;
|
|
||||||
mtime_nsec = FLAGS_SET(sx.stx_mask, STATX_MTIME) ? load_statx_timestamp_nsec(&sx.stx_mtime) : 0;
|
|
||||||
ctime_nsec = FLAGS_SET(sx.stx_mask, STATX_CTIME) ? load_statx_timestamp_nsec(&sx.stx_ctime) : 0;
|
|
||||||
btime_nsec = FLAGS_SET(sx.stx_mask, STATX_BTIME) ? load_statx_timestamp_nsec(&sx.stx_btime) : 0;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
if (!use_statx) {
|
|
||||||
struct stat s;
|
|
||||||
|
|
||||||
if (fstatat(dirfd(d), dent->d_name, &s, AT_SYMLINK_NOFOLLOW) < 0) {
|
if (fstatat(dirfd(d), dent->d_name, &s, AT_SYMLINK_NOFOLLOW) < 0) {
|
||||||
if (errno == ENOENT)
|
if (errno == ENOENT)
|
||||||
continue;
|
continue;
|
||||||
|
@ -606,23 +524,15 @@ static int dir_cleanup(
|
||||||
}
|
}
|
||||||
|
|
||||||
/* Stay on the same filesystem */
|
/* Stay on the same filesystem */
|
||||||
if (major(s.st_dev) != rootdev_major || minor(s.st_dev) != rootdev_minor) {
|
if (s.st_dev != rootdev) {
|
||||||
log_debug("Ignoring \"%s/%s\": different filesystem.", p, dent->d_name);
|
log_debug("Ignoring \"%s/%s\": different filesystem.", p, dent->d_name);
|
||||||
continue;
|
continue;
|
||||||
}
|
}
|
||||||
|
|
||||||
mode = s.st_mode;
|
|
||||||
uid = s.st_uid;
|
|
||||||
atime_nsec = timespec_load_nsec(&s.st_atim);
|
|
||||||
mtime_nsec = timespec_load_nsec(&s.st_mtim);
|
|
||||||
ctime_nsec = timespec_load_nsec(&s.st_ctim);
|
|
||||||
btime_nsec = 0;
|
|
||||||
}
|
|
||||||
|
|
||||||
/* Try to detect bind mounts of the same filesystem instance; they
|
/* Try to detect bind mounts of the same filesystem instance; they
|
||||||
* do not differ in device major/minors. This type of query is not
|
* do not differ in device major/minors. This type of query is not
|
||||||
* supported on all kernels or filesystem types though. */
|
* supported on all kernels or filesystem types though. */
|
||||||
if (S_ISDIR(mode)) {
|
if (S_ISDIR(s.st_mode)) {
|
||||||
int q;
|
int q;
|
||||||
|
|
||||||
q = fd_is_mount_point(dirfd(d), dent->d_name, 0);
|
q = fd_is_mount_point(dirfd(d), dent->d_name, 0);
|
||||||
|
@ -651,12 +561,12 @@ static int dir_cleanup(
|
||||||
continue;
|
continue;
|
||||||
}
|
}
|
||||||
|
|
||||||
if (S_ISDIR(mode)) {
|
if (S_ISDIR(s.st_mode)) {
|
||||||
_cleanup_closedir_ DIR *sub_dir = NULL;
|
_cleanup_closedir_ DIR *sub_dir = NULL;
|
||||||
|
|
||||||
if (mountpoint &&
|
if (mountpoint &&
|
||||||
streq(dent->d_name, "lost+found") &&
|
streq(dent->d_name, "lost+found") &&
|
||||||
uid == 0) {
|
s.st_uid == 0) {
|
||||||
log_debug("Ignoring directory \"%s\".", sub_path);
|
log_debug("Ignoring directory \"%s\".", sub_path);
|
||||||
continue;
|
continue;
|
||||||
}
|
}
|
||||||
|
@ -679,11 +589,7 @@ static int dir_cleanup(
|
||||||
continue;
|
continue;
|
||||||
}
|
}
|
||||||
|
|
||||||
q = dir_cleanup(i,
|
q = dir_cleanup(i, sub_path, sub_dir, &s, cutoff, rootdev, false, maxdepth-1, false);
|
||||||
sub_path, sub_dir,
|
|
||||||
atime_nsec, mtime_nsec, cutoff_nsec,
|
|
||||||
rootdev_major, rootdev_minor,
|
|
||||||
false, maxdepth-1, false);
|
|
||||||
if (q < 0)
|
if (q < 0)
|
||||||
r = q;
|
r = q;
|
||||||
}
|
}
|
||||||
|
@ -699,28 +605,22 @@ static int dir_cleanup(
|
||||||
}
|
}
|
||||||
|
|
||||||
/* Ignore ctime, we change it when deleting */
|
/* Ignore ctime, we change it when deleting */
|
||||||
if (mtime_nsec != NSEC_INFINITY && mtime_nsec >= cutoff_nsec) {
|
age = timespec_load(&s.st_mtim);
|
||||||
|
if (age >= cutoff) {
|
||||||
char a[FORMAT_TIMESTAMP_MAX];
|
char a[FORMAT_TIMESTAMP_MAX];
|
||||||
/* Follows spelling in stat(1). */
|
/* Follows spelling in stat(1). */
|
||||||
log_debug("Directory \"%s\": modify time %s is too new.",
|
log_debug("Directory \"%s\": modify time %s is too new.",
|
||||||
sub_path,
|
sub_path,
|
||||||
format_timestamp_style(a, sizeof(a), mtime_nsec / NSEC_PER_USEC, TIMESTAMP_US));
|
format_timestamp_style(a, sizeof(a), age, TIMESTAMP_US));
|
||||||
continue;
|
continue;
|
||||||
}
|
}
|
||||||
|
|
||||||
if (atime_nsec != NSEC_INFINITY && atime_nsec >= cutoff_nsec) {
|
age = timespec_load(&s.st_atim);
|
||||||
|
if (age >= cutoff) {
|
||||||
char a[FORMAT_TIMESTAMP_MAX];
|
char a[FORMAT_TIMESTAMP_MAX];
|
||||||
log_debug("Directory \"%s\": access time %s is too new.",
|
log_debug("Directory \"%s\": access time %s is too new.",
|
||||||
sub_path,
|
sub_path,
|
||||||
format_timestamp_style(a, sizeof(a), atime_nsec / NSEC_PER_USEC, TIMESTAMP_US));
|
format_timestamp_style(a, sizeof(a), age, TIMESTAMP_US));
|
||||||
continue;
|
|
||||||
}
|
|
||||||
|
|
||||||
if (btime_nsec != NSEC_INFINITY && btime_nsec >= cutoff_nsec) {
|
|
||||||
char a[FORMAT_TIMESTAMP_MAX];
|
|
||||||
log_debug("Directory \"%s\": birth time %s is too new.",
|
|
||||||
sub_path,
|
|
||||||
format_timestamp_style(a, sizeof(a), btime_nsec / NSEC_PER_USEC, TIMESTAMP_US));
|
|
||||||
continue;
|
continue;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
@ -732,14 +632,14 @@ static int dir_cleanup(
|
||||||
} else {
|
} else {
|
||||||
/* Skip files for which the sticky bit is set. These are semantics we define, and are
|
/* Skip files for which the sticky bit is set. These are semantics we define, and are
|
||||||
* unknown elsewhere. See XDG_RUNTIME_DIR specification for details. */
|
* unknown elsewhere. See XDG_RUNTIME_DIR specification for details. */
|
||||||
if (mode & S_ISVTX) {
|
if (s.st_mode & S_ISVTX) {
|
||||||
log_debug("Skipping \"%s\": sticky bit set.", sub_path);
|
log_debug("Skipping \"%s\": sticky bit set.", sub_path);
|
||||||
continue;
|
continue;
|
||||||
}
|
}
|
||||||
|
|
||||||
if (mountpoint &&
|
if (mountpoint &&
|
||||||
S_ISREG(mode) &&
|
S_ISREG(s.st_mode) &&
|
||||||
uid == 0 &&
|
s.st_uid == 0 &&
|
||||||
STR_IN_SET(dent->d_name,
|
STR_IN_SET(dent->d_name,
|
||||||
".journal",
|
".journal",
|
||||||
"aquota.user",
|
"aquota.user",
|
||||||
|
@ -749,13 +649,13 @@ static int dir_cleanup(
|
||||||
}
|
}
|
||||||
|
|
||||||
/* Ignore sockets that are listed in /proc/net/unix */
|
/* Ignore sockets that are listed in /proc/net/unix */
|
||||||
if (S_ISSOCK(mode) && unix_socket_alive(sub_path)) {
|
if (S_ISSOCK(s.st_mode) && unix_socket_alive(sub_path)) {
|
||||||
log_debug("Skipping \"%s\": live socket.", sub_path);
|
log_debug("Skipping \"%s\": live socket.", sub_path);
|
||||||
continue;
|
continue;
|
||||||
}
|
}
|
||||||
|
|
||||||
/* Ignore device nodes */
|
/* Ignore device nodes */
|
||||||
if (S_ISCHR(mode) || S_ISBLK(mode)) {
|
if (S_ISCHR(s.st_mode) || S_ISBLK(s.st_mode)) {
|
||||||
log_debug("Skipping \"%s\": a device.", sub_path);
|
log_debug("Skipping \"%s\": a device.", sub_path);
|
||||||
continue;
|
continue;
|
||||||
}
|
}
|
||||||
|
@ -766,36 +666,31 @@ static int dir_cleanup(
|
||||||
continue;
|
continue;
|
||||||
}
|
}
|
||||||
|
|
||||||
if (mtime_nsec != NSEC_INFINITY && mtime_nsec >= cutoff_nsec) {
|
age = timespec_load(&s.st_mtim);
|
||||||
|
if (age >= cutoff) {
|
||||||
char a[FORMAT_TIMESTAMP_MAX];
|
char a[FORMAT_TIMESTAMP_MAX];
|
||||||
/* Follows spelling in stat(1). */
|
/* Follows spelling in stat(1). */
|
||||||
log_debug("File \"%s\": modify time %s is too new.",
|
log_debug("File \"%s\": modify time %s is too new.",
|
||||||
sub_path,
|
sub_path,
|
||||||
format_timestamp_style(a, sizeof(a), mtime_nsec / NSEC_PER_USEC, TIMESTAMP_US));
|
format_timestamp_style(a, sizeof(a), age, TIMESTAMP_US));
|
||||||
continue;
|
continue;
|
||||||
}
|
}
|
||||||
|
|
||||||
if (atime_nsec != NSEC_INFINITY && atime_nsec >= cutoff_nsec) {
|
age = timespec_load(&s.st_atim);
|
||||||
|
if (age >= cutoff) {
|
||||||
char a[FORMAT_TIMESTAMP_MAX];
|
char a[FORMAT_TIMESTAMP_MAX];
|
||||||
log_debug("File \"%s\": access time %s is too new.",
|
log_debug("File \"%s\": access time %s is too new.",
|
||||||
sub_path,
|
sub_path,
|
||||||
format_timestamp_style(a, sizeof(a), atime_nsec / NSEC_PER_USEC, TIMESTAMP_US));
|
format_timestamp_style(a, sizeof(a), age, TIMESTAMP_US));
|
||||||
continue;
|
continue;
|
||||||
}
|
}
|
||||||
|
|
||||||
if (ctime_nsec != NSEC_INFINITY && ctime_nsec >= cutoff_nsec) {
|
age = timespec_load(&s.st_ctim);
|
||||||
|
if (age >= cutoff) {
|
||||||
char a[FORMAT_TIMESTAMP_MAX];
|
char a[FORMAT_TIMESTAMP_MAX];
|
||||||
log_debug("File \"%s\": change time %s is too new.",
|
log_debug("File \"%s\": change time %s is too new.",
|
||||||
sub_path,
|
sub_path,
|
||||||
format_timestamp_style(a, sizeof(a), ctime_nsec / NSEC_PER_USEC, TIMESTAMP_US));
|
format_timestamp_style(a, sizeof(a), age, TIMESTAMP_US));
|
||||||
continue;
|
|
||||||
}
|
|
||||||
|
|
||||||
if (btime_nsec != NSEC_INFINITY && btime_nsec >= cutoff_nsec) {
|
|
||||||
char a[FORMAT_TIMESTAMP_MAX];
|
|
||||||
log_debug("File \"%s\": birth time %s is too new.",
|
|
||||||
sub_path,
|
|
||||||
format_timestamp_style(a, sizeof(a), btime_nsec / NSEC_PER_USEC, TIMESTAMP_US));
|
|
||||||
continue;
|
continue;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
@ -810,19 +705,21 @@ static int dir_cleanup(
|
||||||
|
|
||||||
finish:
|
finish:
|
||||||
if (deleted) {
|
if (deleted) {
|
||||||
char a[FORMAT_TIMESTAMP_MAX], m[FORMAT_TIMESTAMP_MAX];
|
char a[FORMAT_TIMESTAMP_MAX], b[FORMAT_TIMESTAMP_MAX];
|
||||||
struct timespec ts[2];
|
usec_t age1, age2;
|
||||||
|
|
||||||
|
age1 = timespec_load(&ds->st_atim);
|
||||||
|
age2 = timespec_load(&ds->st_mtim);
|
||||||
|
|
||||||
log_debug("Restoring access and modification time on \"%s\": %s, %s",
|
log_debug("Restoring access and modification time on \"%s\": %s, %s",
|
||||||
p,
|
p,
|
||||||
format_timestamp_style(a, sizeof(a), self_atime_nsec / NSEC_PER_USEC, TIMESTAMP_US),
|
format_timestamp_style(a, sizeof(a), age1, TIMESTAMP_US),
|
||||||
format_timestamp_style(m, sizeof(m), self_mtime_nsec / NSEC_PER_USEC, TIMESTAMP_US));
|
format_timestamp_style(b, sizeof(b), age2, TIMESTAMP_US));
|
||||||
|
|
||||||
timespec_store_nsec(ts + 0, self_atime_nsec);
|
|
||||||
timespec_store_nsec(ts + 1, self_mtime_nsec);
|
|
||||||
|
|
||||||
/* Restore original directory timestamps */
|
/* Restore original directory timestamps */
|
||||||
if (futimens(dirfd(d), ts) < 0)
|
if (futimens(dirfd(d), (struct timespec[]) {
|
||||||
|
ds->st_atim,
|
||||||
|
ds->st_mtim }) < 0)
|
||||||
log_warning_errno(errno, "Failed to revert timestamps of '%s', ignoring: %m", p);
|
log_warning_errno(errno, "Failed to revert timestamps of '%s', ignoring: %m", p);
|
||||||
}
|
}
|
||||||
|
|
||||||
|
@ -2289,20 +2186,11 @@ static int remove_item(Item *i) {
|
||||||
}
|
}
|
||||||
|
|
||||||
static int clean_item_instance(Item *i, const char* instance) {
|
static int clean_item_instance(Item *i, const char* instance) {
|
||||||
char timestamp[FORMAT_TIMESTAMP_MAX];
|
|
||||||
_cleanup_closedir_ DIR *d = NULL;
|
_cleanup_closedir_ DIR *d = NULL;
|
||||||
uint32_t dev_major, dev_minor;
|
struct stat s, ps;
|
||||||
nsec_t atime_nsec, mtime_nsec;
|
bool mountpoint;
|
||||||
int mountpoint = -1;
|
|
||||||
usec_t cutoff, n;
|
usec_t cutoff, n;
|
||||||
uint64_t ino;
|
char timestamp[FORMAT_TIMESTAMP_MAX];
|
||||||
|
|
||||||
struct statx sx
|
|
||||||
#if HAS_FEATURE_MEMORY_SANITIZER
|
|
||||||
= {}
|
|
||||||
# warning "Explicitly initializing struct statx, to work around msan limitation. Please remove as soon as msan has been updated to not require this."
|
|
||||||
#endif
|
|
||||||
;
|
|
||||||
|
|
||||||
assert(i);
|
assert(i);
|
||||||
|
|
||||||
|
@ -2325,53 +2213,24 @@ static int clean_item_instance(Item *i, const char* instance) {
|
||||||
return log_error_errno(errno, "Failed to open directory %s: %m", instance);
|
return log_error_errno(errno, "Failed to open directory %s: %m", instance);
|
||||||
}
|
}
|
||||||
|
|
||||||
if (statx(dirfd(d), "", AT_EMPTY_PATH, STATX_MODE|STATX_INO|STATX_ATIME|STATX_MTIME, &sx) < 0) {
|
|
||||||
struct stat s;
|
|
||||||
|
|
||||||
if (!ERRNO_IS_NOT_SUPPORTED(errno) && !ERRNO_IS_PRIVILEGE(errno))
|
|
||||||
return log_error_errno(errno, "statx(%s) failed: %m", i->path);
|
|
||||||
|
|
||||||
if (fstat(dirfd(d), &s) < 0)
|
if (fstat(dirfd(d), &s) < 0)
|
||||||
return log_error_errno(errno, "stat(%s) failed: %m", i->path);
|
return log_error_errno(errno, "stat(%s) failed: %m", i->path);
|
||||||
|
|
||||||
dev_major = major(s.st_dev);
|
if (!S_ISDIR(s.st_mode))
|
||||||
dev_minor = minor(s.st_dev);
|
return log_error_errno(SYNTHETIC_ERRNO(ENOTDIR),
|
||||||
ino = s.st_ino;
|
"%s is not a directory.", i->path);
|
||||||
atime_nsec = timespec_load_nsec(&s.st_atim);
|
|
||||||
mtime_nsec = timespec_load_nsec(&s.st_mtim);
|
|
||||||
} else {
|
|
||||||
|
|
||||||
if (FLAGS_SET(sx.stx_attributes_mask, STATX_ATTR_MOUNT_ROOT))
|
|
||||||
mountpoint = FLAGS_SET(sx.stx_attributes, STATX_ATTR_MOUNT_ROOT);
|
|
||||||
|
|
||||||
dev_major = sx.stx_dev_major;
|
|
||||||
dev_minor = sx.stx_dev_minor;
|
|
||||||
ino = sx.stx_ino;
|
|
||||||
atime_nsec = load_statx_timestamp_nsec(&sx.stx_atime);
|
|
||||||
mtime_nsec = load_statx_timestamp_nsec(&sx.stx_mtime);
|
|
||||||
}
|
|
||||||
|
|
||||||
if (mountpoint < 0) {
|
|
||||||
struct stat ps;
|
|
||||||
|
|
||||||
if (fstatat(dirfd(d), "..", &ps, AT_SYMLINK_NOFOLLOW) != 0)
|
if (fstatat(dirfd(d), "..", &ps, AT_SYMLINK_NOFOLLOW) != 0)
|
||||||
return log_error_errno(errno, "stat(%s/..) failed: %m", i->path);
|
return log_error_errno(errno, "stat(%s/..) failed: %m", i->path);
|
||||||
|
|
||||||
mountpoint =
|
mountpoint = s.st_dev != ps.st_dev || s.st_ino == ps.st_ino;
|
||||||
dev_major != major(ps.st_dev) ||
|
|
||||||
dev_minor != minor(ps.st_dev) ||
|
|
||||||
ino != ps.st_ino;
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
log_debug("Cleanup threshold for %s \"%s\" is %s",
|
log_debug("Cleanup threshold for %s \"%s\" is %s",
|
||||||
mountpoint ? "mount point" : "directory",
|
mountpoint ? "mount point" : "directory",
|
||||||
instance,
|
instance,
|
||||||
format_timestamp_style(timestamp, sizeof(timestamp), cutoff, TIMESTAMP_US));
|
format_timestamp_style(timestamp, sizeof(timestamp), cutoff, TIMESTAMP_US));
|
||||||
|
|
||||||
return dir_cleanup(i, instance, d,
|
return dir_cleanup(i, instance, d, &s, cutoff, s.st_dev, mountpoint,
|
||||||
atime_nsec, mtime_nsec, cutoff * NSEC_PER_USEC,
|
|
||||||
dev_major, dev_minor, mountpoint,
|
|
||||||
MAX_DEPTH, i->keep_first_level);
|
MAX_DEPTH, i->keep_first_level);
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
Loading…
Reference in New Issue